feat: home screen widgets for iOS and Android

[neooriginal]

Overview

Home screen widgets for iOS and Android, plus a Snippets shortcut in the Hosts header.

• Added: Quick Connect, Server Status and Snippets widgets (WidgetKit + Android AppWidgets)
• Added: Settings → Widgets display/privacy controls
• Updated: Hosts header — Snippets shortcut; sort and filter moved beside the search field

Changes Made

Widgets never talk to the server. The app publishes a JSON snapshot into shared storage (App Group UserDefaults on iOS, SharedPreferences on Android) and the widget renders only that — no credentials leave the app, and a corrupt payload falls back to the signed-out card.

Widget	Shows	Tap
Quick Connect	Hosts, status, load	Opens a terminal session
Server Status	CPU / memory per host	Opens a terminal session
Snippets	Your saved snippets	Runs it on a host you pick

A snippet has no host of its own, so a tap opens Termix and asks where to run it, then executes it through the existing /snippets/execute endpoint. The last target is remembered and offered first, so the common case is two taps — which doubles as the confirmation a home-screen tap otherwise lacks. Only the snippet id travels in the deep link.

• app/widgets/ — payload contract, snapshot builder, publisher, preferences, deep links, run sheet
• modules/termix-widgets/ — native bridge, WidgetKit extension sources, Android providers and layouts
• plugins/withTermixWidgets.js — creates the iOS extension target on prebuild (Android needs no plugin; the library manifest merges the receivers)
• scripts/verify-widget-contract.cjs — fails when the TypeScript, Swift and Kotlin decoders drift apart

Signing out clears the snapshot, so host names can't linger on the home screen.

Checklist

• Code follows project style guidelines
• Supports mobile and desktop UI/app (if applicable)
• Verified on a device build

Notes

iOS build requirements: the App Group group.<bundleId>.widgets must be enabled on both com.karmaa.termix and com.karmaa.termix.widgets, and the extension needs its own provisioning profile (run one interactive eas build first). The extension targets iOS 16 while the app stays at 15.1, because it uses WidgetKit layout APIs introduced there.

Verified: prebuild on both platforms, generated Xcode target structure, podspec, autolinking, decoder contract agreement, snapshot builder behaviour, deep-link parsing. Not verified: Swift/Kotlin compilation — needs a device build.

Pre-existing on main (not from this branch): format:check, tsc --noEmit and verify:android-network-security already fail.

🤖 AI assisted code using Claude Code

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.