@ai-matrx/vault 0.1.15 → 0.1.17

package/dist/index.cjs

@@ -152,24 +152,28 @@ __export(src_exports, {
   guardPort: () => guardPort,
   inferFromUrl: () => inferFromUrl,
   isHiddenItem: () => isHiddenItem,
+  itemIdAt: () => itemIdAt,
   locationFromParams: () => locationFromParams,
   locationToParams: () => locationToParams,
   loginSiteOf: () => loginSiteOf,
   matchesQuery: () => matchesQuery,
   needsRecentSignIn: () => needsRecentSignIn,
   parseDefinitions: () => parseDefinitions,
+  providerOf: () => providerOf,
   siteDomainOf: () => siteDomainOf,
   sortItems: () => sortItems,
   useConfirmed: () => useConfirmed,
+  vaultInventoryScope: () => vaultInventoryScope,
+  vaultItemFacts: () => vaultItemFacts,
   wasCancelled: () => wasCancelled
 });
 module.exports = __toCommonJS(src_exports);
 
 // src/VaultApp.tsx
-var import_react41 = require("react");
-var import_design_system25 = require("@ai-matrx/design-system");
-var import_controls34 = require("@ai-matrx/design-system/controls");
-var import_confirm_opener13 = require("@ai-matrx/kit/confirm-opener");
+var import_react42 = require("react");
+var import_design_system26 = require("@ai-matrx/design-system");
+var import_controls35 = require("@ai-matrx/design-system/controls");
+var import_confirm_opener14 = require("@ai-matrx/kit/confirm-opener");
 
 // src/notice.tsx
 var import_react = require("react");
@@ -703,12 +707,12 @@ var ROW_GRID = {
   roomy: "grid-cols-[9rem_minmax(0,1fr)_auto] gap-x-3 px-4",
   viewport: "grid-cols-[5.75rem_minmax(0,1fr)_auto] gap-x-2 px-3 sm:grid-cols-[9rem_minmax(0,1fr)_auto] sm:gap-x-3 sm:px-4"
 };
-function VaultRow({ label, hint, children, actions, top = false, className }) {
+function VaultRow({ label, hint: hint2, children, actions, top = false, className }) {
   const room = (0, import_react4.useContext)(Room);
   return /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: (0, import_design_system4.cn)("grid min-h-11 py-1", ROW_GRID[room ?? "viewport"], top ? "items-start" : "items-center", className), children: [
     /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: (0, import_design_system4.cn)("flex min-w-0 flex-col text-xs leading-tight text-muted-foreground", top && "pt-2.5"), children: [
       /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: room === "roomy" ? "truncate" : room === "compact" ? "line-clamp-2 break-words" : "line-clamp-2 break-words sm:truncate", children: label }),
-      hint ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "line-clamp-2 break-words text-xs text-disabled-foreground", children: hint }) : null
+      hint2 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "line-clamp-2 break-words text-xs text-disabled-foreground", children: hint2 }) : null
     ] }),
     /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("div", { className: (0, import_design_system4.cn)("min-w-0 text-sm", top && "py-1.5"), children }),
     /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("div", { className: (0, import_design_system4.cn)("flex items-center gap-0.5", top && "pt-1"), children: actions })
@@ -818,14 +822,14 @@ function TurnOnButton({ label, onTurnOn }) {
     }
   );
 }
-function PlainRow({ label, value, hint, openUrl, extra, multiline = false }) {
+function PlainRow({ label, value, hint: hint2, openUrl, extra, multiline = false }) {
   const copyValue2 = useCopy();
   const isUrl = /^https?:\/\//i.test(value);
   return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
     VaultRow,
     {
       label,
-      hint,
+      hint: hint2,
       top: multiline,
       actions: /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(import_jsx_runtime5.Fragment, { children: [
         extra,
@@ -855,13 +859,13 @@ function PlainRow({ label, value, hint, openUrl, extra, multiline = false }) {
 function AddRow({ label, onAdd, children = "Add" }) {
   return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(VaultRow, { label, children: onAdd ? /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("button", { type: "button", className: "text-sm text-muted-foreground hover:text-primary", onClick: onAdd, children }) : /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("span", { className: "text-disabled-foreground", children: "\u2014" }) });
 }
-function EditRow({ label, hint, value, onChange, placeholder, secret = false, multiline = false, onRemove, removeLabel, actions, autoFocus, onBlur, inputMode }) {
+function EditRow({ label, hint: hint2, value, onChange, placeholder, secret = false, multiline = false, onRemove, removeLabel, actions, autoFocus, onBlur, inputMode }) {
   const [shown, setShown] = (0, import_react5.useState)(false);
   return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
     VaultRow,
     {
       label,
-      hint,
+      hint: hint2,
       top: multiline,
       actions: /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(import_jsx_runtime5.Fragment, { children: [
         secret && value ? /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_controls2.Button, { variant: "quiet", icon: shown ? /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(EyeOffGlyph, {}) : /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(EyeGlyph, {}), "aria-label": shown ? "Hide" : "Show", onClick: () => setShown((s) => !s) }) : null,
@@ -872,7 +876,7 @@ function EditRow({ label, hint, value, onChange, placeholder, secret = false, mu
     }
   );
 }
-function CustomEditRow({ label, value, onLabel, onValue, secret, onRemove }) {
+function CustomEditRow({ label, value, onLabel, onValue, secret, onRemove, extra, onPasteValue }) {
   const [shown, setShown] = (0, import_react5.useState)(false);
   return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
     VaultRow,
@@ -880,9 +884,25 @@ function CustomEditRow({ label, value, onLabel, onValue, secret, onRemove }) {
       label: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_controls2.Field, { className: "w-full", value: label, onChange: (e) => onLabel(e.target.value), placeholder: "Name", "aria-label": "Field name" }),
       actions: /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(import_jsx_runtime5.Fragment, { children: [
         secret && value ? /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_controls2.Button, { variant: "quiet", icon: shown ? /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(EyeOffGlyph, {}) : /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(EyeGlyph, {}), "aria-label": shown ? "Hide" : "Show", onClick: () => setShown((x) => !x) }) : null,
+        extra,
         /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_controls2.Button, { variant: "quiet", removes: true, icon: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(XGlyph, {}), "aria-label": "Remove field", onClick: onRemove })
       ] }),
-      children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_controls2.Field, { className: "w-full", value, onChange: (e) => onValue(e.target.value), type: secret && !shown ? "password" : "text", placeholder: secret ? "Secret value" : "Value", autoComplete: "off", spellCheck: false, "aria-label": "Field value" })
+      children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+        import_controls2.Field,
+        {
+          className: "w-full",
+          value,
+          onChange: (e) => onValue(e.target.value),
+          onPaste: onPasteValue ? (e) => {
+            if (onPasteValue(e.clipboardData.getData("text"))) e.preventDefault();
+          } : void 0,
+          type: secret && !shown ? "password" : "text",
+          placeholder: secret ? "Secret value" : "Value",
+          autoComplete: "off",
+          spellCheck: false,
+          "aria-label": label ? `${label} value` : "Field value"
+        }
+      )
     }
   );
 }
@@ -896,7 +916,7 @@ var import_format = require("@ai-matrx/kit/format");
 
 // src/model.ts
 var DEFAULT_LOCATION = { vault: "all", view: "all", q: "", sort: "name", itemId: null, mode: "view", kind: null, url: "", panel: null };
-var SORTS = ["name", "website", "updated", "created"];
+var SORTS = ["name", "name-desc", "website", "updated", "created", "viewed"];
 function locationFromParams(params, itemId = params.get("item")) {
   const sort = params.get("sort");
   const mode = params.get("mode");
@@ -966,10 +986,15 @@ function siteDomainOf(host) {
   const keep = TWO_PART_SUFFIX.has(sld) && tld.length <= 3 ? 3 : 2;
   return labels.slice(-keep).join(".");
 }
-function sortItems(items, sort) {
+function sortItems(items, sort, recents) {
   const out = [...items];
-  const byName = (a, b) => a.name.localeCompare(b.name, void 0, { sensitivity: "base" });
+  const byName = (a, b) => a.name.localeCompare(b.name, void 0, { sensitivity: "base", numeric: true });
   if (sort === "name") return out.sort(byName);
+  if (sort === "name-desc") return out.sort((a, b) => byName(b, a));
+  if (sort === "viewed") {
+    const at = new Map((recents ?? []).map((id, i) => [id, i]));
+    return out.sort((a, b) => (at.get(a.id) ?? Infinity) - (at.get(b.id) ?? Infinity) || byName(a, b));
+  }
   if (sort === "website")
     return out.sort((a, b) => {
       const x = loginSiteOf(a), y = loginSiteOf(b);
@@ -2205,7 +2230,7 @@ function TotpEditRow({ value, onChange, hasExisting, item, port, onEnrolled, onR
         setStatus(null);
         onChange(v);
       },
-      placeholder: hasExisting ? "Paste a new key to replace" : "Setup key or otpauth link",
+      placeholder: hasExisting ? "Paste a new key to replace" : "Paste setup key or otpauth link",
       status,
       ...uploadImage ? { onImage: (f) => void uploadImage(f) } : {},
       ...onRecognized ? { onRecognized } : {}
@@ -2661,6 +2686,18 @@ function withoutCode(codes, index) {
   const left = codes.filter((_, i) => i !== index);
   return left.length ? left.join("\n") : null;
 }
+function parseEnvAssignment(text) {
+  const m = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/s.exec(text.trim());
+  if (!m || /\n/.test(m[2] ?? "")) return null;
+  let value = (m[2] ?? "").trim();
+  const q = value[0];
+  if ((q === '"' || q === "'") && value.length >= 2 && value.endsWith(q)) value = value.slice(1, -1);
+  return value ? { key: m[1] ?? "", value } : null;
+}
+function labelFromEnvKey(key) {
+  const words = key.toLowerCase().split(/[_\s]+/).filter(Boolean).join(" ");
+  return words ? words.charAt(0).toUpperCase() + words.slice(1) : key;
+}
 
 // src/fields/SettingsPanels.tsx
 var import_jsx_runtime14 = require("react/jsx-runtime");
@@ -3055,11 +3092,11 @@ function PasswordGenerator({ limits: source, onUse, useLabel = "Use" }) {
     /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(import_controls11.Button, { variant: "primary", disabled: !candidate, onClick: use, children: useLabel })
   ] });
 }
-function OptionLine({ label, hint, children }) {
+function OptionLine({ label, hint: hint2, children }) {
   return /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { className: "flex min-h-9 items-center justify-between gap-3", children: [
     /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { className: "flex min-w-0 flex-col", children: [
       /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("span", { className: "truncate text-sm text-foreground", children: label }),
-      hint ? /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: hint }) : null
+      hint2 ? /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: hint2 }) : null
     ] }),
     /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("div", { className: "flex shrink-0 items-center", children })
   ] });
@@ -4782,17 +4819,18 @@ function Notices({ draft }) {
 }
 
 // src/ItemList.tsx
-var import_react28 = require("react");
-var import_design_system18 = require("@ai-matrx/design-system");
+var import_react29 = require("react");
 var import_design_system19 = require("@ai-matrx/design-system");
-var import_controls22 = require("@ai-matrx/design-system/controls");
+var import_design_system20 = require("@ai-matrx/design-system");
+var import_controls23 = require("@ai-matrx/design-system/controls");
+var import_icons12 = require("@ai-matrx/design-system/icons");
 
 // src/ItemPane.tsx
-var import_react27 = require("react");
-var import_design_system16 = require("@ai-matrx/design-system");
+var import_react28 = require("react");
 var import_design_system17 = require("@ai-matrx/design-system");
-var import_controls21 = require("@ai-matrx/design-system/controls");
-var import_confirm_opener9 = require("@ai-matrx/kit/confirm-opener");
+var import_design_system18 = require("@ai-matrx/design-system");
+var import_controls22 = require("@ai-matrx/design-system/controls");
+var import_confirm_opener10 = require("@ai-matrx/kit/confirm-opener");
 
 // src/activity/FilesSection.tsx
 var import_format7 = require("@ai-matrx/kit/format");
@@ -4813,12 +4851,13 @@ var PROTECTION = [
 function FilesSection({ item, port, editing, onChanged }) {
   const confirmed = useConfirmed();
   const canEdit = editing && item.capabilities.canEdit;
+  const canAdd = item.capabilities.canEdit;
   const [busy, setBusy] = (0, import_react21.useState)(null);
   const [error, setError] = (0, import_react21.useState)(null);
   const [pending, setPending] = (0, import_react21.useState)(null);
   const [dragging, setDragging] = (0, import_react21.useState)(false);
   const picker = (0, import_react21.useRef)(null);
-  if (!canEdit && item.attachments.length === 0) return null;
+  if (!canAdd && item.attachments.length === 0) return null;
   async function run(key, work, fallback) {
     setBusy(key);
     setError(null);
@@ -4840,7 +4879,7 @@ function FilesSection({ item, port, editing, onChanged }) {
     setPending(file);
   }
   function drop(e) {
-    if (!canEdit) return;
+    if (!canAdd) return;
     e.preventDefault();
     setDragging(false);
     choose(e.dataTransfer.files[0]);
@@ -4853,22 +4892,23 @@ function FilesSection({ item, port, editing, onChanged }) {
     "div",
     {
       className: (0, import_design_system13.cn)("rounded-xl", dragging && "outline outline-2 outline-primary"),
-      onDragOver: canEdit ? (e) => {
+      onDragOver: canAdd ? (e) => {
         e.preventDefault();
         setDragging(true);
       } : void 0,
-      onDragLeave: canEdit ? () => setDragging(false) : void 0,
-      onDrop: canEdit ? drop : void 0,
+      onDragLeave: canAdd ? () => setDragging(false) : void 0,
+      onDrop: canAdd ? drop : void 0,
       children: /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(
         VaultSection,
         {
-          title: "Files",
-          actions: canEdit ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_controls16.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(PlusGlyph, {}), disabled: busy !== null, onClick: () => picker.current?.click(), children: "Add file" }) : void 0,
+          title: editing || item.attachments.length > 0 || pending ? "Files" : void 0,
+          actions: canAdd && (editing || item.attachments.length > 0) ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_controls16.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(PlusGlyph, {}), disabled: busy !== null, onClick: () => picker.current?.click(), children: "Add file" }) : void 0,
           children: [
-            canEdit ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("input", { ref: picker, type: "file", hidden: true, onChange: (e) => {
+            canAdd ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("input", { ref: picker, type: "file", hidden: true, "aria-label": "Choose a file", onChange: (e) => {
               choose(e.target.files?.[0]);
               e.target.value = "";
             } }) : null,
+            !editing && canAdd && item.attachments.length === 0 && !pending ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(AddRow, { label: "Files", onAdd: () => picker.current?.click(), children: "Add file" }) : null,
             item.attachments.map(
               (a) => canEdit ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(EditableFile, { port, item, file: a, busy, run, onDownload: () => void download(a), onTooBig: () => setError(TOO_BIG) }, a.id) : /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
                 VaultRow,
@@ -4881,7 +4921,7 @@ function FilesSection({ item, port, editing, onChanged }) {
                 a.id
               )
             ),
-            canEdit && pending ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(NewFile, { file: pending, busy: busy === "add", onCancel: () => setPending(null), onAdd: async (details) => {
+            canAdd && pending ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(NewFile, { file: pending, busy: busy === "add", onCancel: () => setPending(null), onAdd: async (details) => {
               if (await run("add", () => port.activity.addFile(item, pending, details), "The file could not be added.")) setPending(null);
             } }) : null,
             canEdit && item.attachments.length === 0 && !pending ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("div", { className: "px-4 py-3 text-sm text-muted-foreground", children: "Drop a file here or choose Add file" }) : null,
@@ -5002,6 +5042,57 @@ function confirmSeal(label) {
     variant: "destructive"
   });
 }
+function DraftFilesSection({ files, onFiles }) {
+  const [pending, setPending] = (0, import_react21.useState)(null);
+  const [error, setError] = (0, import_react21.useState)(null);
+  const [dragging, setDragging] = (0, import_react21.useState)(false);
+  const picker = (0, import_react21.useRef)(null);
+  const choose = (file) => {
+    if (!file) return;
+    if (fileTooBig(file.size)) return setError(TOO_BIG);
+    setError(null);
+    setPending(file);
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
+    "div",
+    {
+      className: (0, import_design_system13.cn)("rounded-xl", dragging && "outline outline-2 outline-primary"),
+      onDragOver: (e) => {
+        e.preventDefault();
+        setDragging(true);
+      },
+      onDragLeave: () => setDragging(false),
+      onDrop: (e) => {
+        e.preventDefault();
+        setDragging(false);
+        choose(e.dataTransfer.files[0]);
+      },
+      children: /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(VaultSection, { title: files.length > 0 || pending ? "Files" : void 0, actions: files.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_controls16.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(PlusGlyph, {}), onClick: () => picker.current?.click(), children: "Add file" }) : void 0, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("input", { ref: picker, type: "file", hidden: true, "aria-label": "Choose a file", onChange: (e) => {
+          choose(e.target.files?.[0]);
+          e.target.value = "";
+        } }),
+        files.map((f, i) => /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(VaultRow, { label: f.label, hint: f.description ?? void 0, actions: /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_controls16.Button, { variant: "quiet", removes: true, icon: /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(XGlyph, {}), "aria-label": `Remove ${f.label}`, onClick: () => onFiles(files.filter((_, j) => j !== i)) }), children: /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("span", { className: "flex min-w-0 items-center gap-2", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { className: "truncate", children: f.file.name }),
+          /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { className: "shrink-0 text-xs text-muted-foreground", children: (0, import_format7.formatFileSize)(f.file.size) })
+        ] }) }, `${f.file.name}-${i}`)),
+        pending ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
+          NewFile,
+          {
+            file: pending,
+            busy: false,
+            onCancel: () => setPending(null),
+            onAdd: async (d) => {
+              onFiles([...files, { file: pending, ...d }]);
+              setPending(null);
+            }
+          }
+        ) : files.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(AddRow, { label: "Files", onAdd: () => picker.current?.click(), children: "Add file" }) : null,
+        error ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("p", { role: "alert", className: "px-4 py-2 text-sm text-destructive", children: error }) : null
+      ] })
+    }
+  );
+}
 
 // src/fields/RecoveryCodesRow.tsx
 var import_react22 = require("react");
@@ -5109,6 +5200,134 @@ function RecoveryCodesRow({ item, field, port, onChanged }) {
   );
 }
 
+// src/fields/DraftRows.tsx
+var import_react23 = require("react");
+var import_controls18 = require("@ai-matrx/design-system/controls");
+var import_design_system14 = require("@ai-matrx/design-system");
+var import_confirm_opener7 = require("@ai-matrx/kit/confirm-opener");
+var import_jsx_runtime22 = require("react/jsx-runtime");
+var HANDLINGS = ["visible", "revealable", "sealed"];
+var hint = (text, tone = "muted") => /* @__PURE__ */ (0, import_jsx_runtime22.jsx)("span", { className: tone === "destructive" ? "text-destructive" : void 0, title: text, children: text });
+var hasSecretSettings = (s) => Boolean(s.envKey?.trim() || s.injectIntoSandbox || s.handling && s.handling !== "revealable");
+function SecretBuilderRow({ field, onChange, onRemove }) {
+  const [open, setOpen] = (0, import_react23.useState)(hasSecretSettings(field));
+  const env = field.envKey ?? "";
+  const envProblem = envKeyProblem(env);
+  const envOk = env.trim() !== "" && !envProblem;
+  const handling = field.handling ?? "revealable";
+  const name = field.label.trim() || "Secret";
+  const chooseHandling = async (next) => {
+    if (next === handling) return;
+    if (next === "sealed") {
+      const ok = await (0, import_confirm_opener7.confirm)({
+        title: `Seal ${name} permanently?`,
+        description: "Once saved, no person can see or copy it again; only automation can use it.",
+        confirmLabel: "Seal",
+        variant: "destructive"
+      });
+      if (!ok) return;
+    }
+    onChange({ handling: next });
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime22.jsxs)(import_jsx_runtime22.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(
+      CustomEditRow,
+      {
+        label: field.label,
+        value: field.value,
+        secret: true,
+        onLabel: (v) => onChange({ label: v }),
+        onValue: (v) => onChange({ value: v }),
+        onRemove,
+        onPasteValue: (text) => {
+          const a = parseEnvAssignment(text);
+          if (!a) return false;
+          onChange({ envKey: a.key, value: a.value, ...field.label.trim() ? {} : { label: labelFromEnvKey(a.key) } });
+          setOpen(true);
+          return true;
+        },
+        extra: /* @__PURE__ */ (0, import_jsx_runtime22.jsxs)(import_jsx_runtime22.Fragment, { children: [
+          handling !== "sealed" ? /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(GenerateButton, { onUse: (v) => onChange({ value: v }) }) : null,
+          /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_controls18.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(SlidersGlyph, {}), "aria-label": `${name} settings`, pressed: open, onClick: () => setOpen((o) => !o) })
+        ] })
+      }
+    ),
+    open ? /* @__PURE__ */ (0, import_jsx_runtime22.jsxs)(import_jsx_runtime22.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(VaultRow, { label: "Env key", hint: envProblem ? hint(envProblem, "destructive") : hint("The name sandboxes and workflows use"), children: /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(
+        import_controls18.Field,
+        {
+          className: "w-full font-mono",
+          "aria-label": `${name} env key`,
+          "aria-invalid": Boolean(envProblem),
+          placeholder: "e.g. GITHUB_TOKEN",
+          autoComplete: "off",
+          spellCheck: false,
+          value: env,
+          onChange: (e) => onChange({ envKey: e.target.value, ...e.target.value.trim() ? {} : { injectIntoSandbox: false } })
+        }
+      ) }),
+      /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(VaultRow, { label: "Who can see it", hint: hint(HANDLING_WORDS[handling].hint), children: /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(
+        import_controls18.SegmentedControl,
+        {
+          "aria-label": `Who can see ${name}`,
+          value: handling,
+          onValueChange: (v) => void chooseHandling(v),
+          data: HANDLINGS.map((h) => ({ value: h, label: HANDLING_WORDS[h].label, title: HANDLING_WORDS[h].hint }))
+        }
+      ) }),
+      /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(VaultRow, { label: "Use in sandbox", hint: envOk ? hint("Sandboxes get it as an env variable") : hint("Needs an env key"), children: /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_controls18.Switch, { "aria-label": `Use ${name} in sandbox`, checked: envOk && field.injectIntoSandbox === true, disabled: !envOk, onCheckedChange: (v) => onChange({ injectIntoSandbox: v }) }) })
+    ] }) : null
+  ] });
+}
+function withMfaMethod(custom, v) {
+  const rest = custom.filter((c) => c.key !== MFA_METHOD_KEY);
+  return v === "sms" || v === "push_or_other" ? [...rest, { key: MFA_METHOD_KEY, label: "Two-factor method", value: v }] : rest;
+}
+function DraftTwoFactorRow({ custom, onCustom }) {
+  const value = custom.find((c) => c.key === MFA_METHOD_KEY)?.value || "none";
+  return /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(VaultRow, { label: "Two-factor", children: /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(
+    import_controls18.Select,
+    {
+      value: value === "sms" || value === "push_or_other" ? value : "none",
+      "aria-label": "Two-factor method",
+      options: MFA_OPTIONS.map((o) => ({ value: o.value, label: o.label })),
+      onValueChange: (v) => onCustom(withMfaMethod(custom, v))
+    }
+  ) });
+}
+var defaultBrowserSettings = (hasWebsite) => ({ uriMatchMode: "host", browserFillEnabled: hasWebsite });
+function DraftBrowserRows({ value, hasWebsite, onChange }) {
+  return /* @__PURE__ */ (0, import_jsx_runtime22.jsxs)(import_jsx_runtime22.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(VaultRow, { label: "Website matching", hint: hint(MATCH_WORDS[value.uriMatchMode].hint), children: /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(
+      import_controls18.Select,
+      {
+        "aria-label": "Website matching",
+        value: value.uriMatchMode,
+        options: MATCH_MODES.map((m) => ({ value: m, label: MATCH_WORDS[m].label })),
+        onValueChange: (m) => onChange({ ...value, uriMatchMode: m })
+      }
+    ) }),
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(VaultRow, { label: "Fill in browser", hint: hint(hasWebsite ? value.browserFillEnabled ? "Offered on matching pages" : "Never filled automatically" : "Add a website first"), children: /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_controls18.Switch, { "aria-label": "Fill in browser", checked: hasWebsite && value.browserFillEnabled, disabled: !hasWebsite, onCheckedChange: (v) => onChange({ ...value, browserFillEnabled: v }) }) })
+  ] });
+}
+function AssignResult({ sent, onAnother, onDone }) {
+  return /* @__PURE__ */ (0, import_jsx_runtime22.jsxs)("div", { className: "mx-auto flex w-full max-w-3xl flex-col gap-5 px-3 py-4 sm:px-6 sm:py-6", role: "status", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsxs)(VaultSection, { title: /* @__PURE__ */ (0, import_jsx_runtime22.jsxs)("span", { className: "flex items-center gap-1.5", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(CheckGlyph, { className: "size-4 text-success" }),
+      "Sent to ",
+      sent.recipientEmail
+    ] }), children: [
+      /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(VaultRow, { label: "Name", children: /* @__PURE__ */ (0, import_jsx_runtime22.jsx)("span", { className: "block truncate", children: sent.name }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(VaultRow, { label: "Item ID", children: /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_design_system14.RecordId, { value: sent.id, label: "Item" }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(VaultRow, { label: "Password", children: /* @__PURE__ */ (0, import_jsx_runtime22.jsx)("span", { className: "block truncate text-muted-foreground", children: sent.generated ? "Generated privately, never shown to you" : "Theirs now; you keep no access" }) })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsxs)("div", { className: "flex justify-end gap-2", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_controls18.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(PlusGlyph, {}), onClick: onAnother, children: "Create another" }),
+      /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_controls18.Button, { variant: "primary", onClick: onDone, children: "Done" })
+    ] })
+  ] });
+}
+
 // src/ItemPane.tsx
 var import_icons11 = require("@ai-matrx/design-system/icons");
 var import_drafts = require("@ai-matrx/kit/drafts");
@@ -5235,15 +5454,15 @@ function targetLabel(t) {
 }
 
 // src/extension/UseOnSiteButton.tsx
-var import_react23 = require("react");
-var import_controls18 = require("@ai-matrx/design-system/controls");
-var import_jsx_runtime22 = require("react/jsx-runtime");
+var import_react24 = require("react");
+var import_controls19 = require("@ai-matrx/design-system/controls");
+var import_jsx_runtime23 = require("react/jsx-runtime");
 function canUseOnSite(item, pageUrl) {
   return item.capabilities.canEdit && isFillablePage(pageUrl) && !coversPage(item.loginUrls, item.uriMatchMode, pageUrl);
 }
 function UseOnSiteButton({ port, item, pageUrl, onChanged }) {
   const notify = useNotify();
-  const [busy, setBusy] = (0, import_react23.useState)(false);
+  const [busy, setBusy] = (0, import_react24.useState)(false);
   if (!canUseOnSite(item, pageUrl)) return null;
   const site = pageSite(pageUrl);
   const run = async () => {
@@ -5258,14 +5477,14 @@ function UseOnSiteButton({ port, item, pageUrl, onChanged }) {
       setBusy(false);
     }
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_controls18.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(PlusGlyph, {}), disabled: busy, onClick: () => void run(), title: `Fill this login on ${site}`, children: "Use here" });
+  return /* @__PURE__ */ (0, import_jsx_runtime23.jsx)(import_controls19.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime23.jsx)(PlusGlyph, {}), disabled: busy, onClick: () => void run(), title: `Fill this login on ${site}`, children: "Use here" });
 }
 
 // src/sharing/SharePanel.tsx
-var import_react26 = require("react");
-var import_confirm_opener8 = require("@ai-matrx/kit/confirm-opener");
-var import_controls20 = require("@ai-matrx/design-system/controls");
-var import_design_system15 = require("@ai-matrx/design-system");
+var import_react27 = require("react");
+var import_confirm_opener9 = require("@ai-matrx/kit/confirm-opener");
+var import_controls21 = require("@ai-matrx/design-system/controls");
+var import_design_system16 = require("@ai-matrx/design-system");
 var import_icons10 = require("@ai-matrx/design-system/icons");
 
 // src/sharing/logic.ts
@@ -5320,18 +5539,18 @@ function shareSummary(grants) {
 var MEMBER_CHOICE_DEFAULT = "default";
 
 // src/sharing/parts.tsx
-var import_react24 = require("react");
-var import_design_system14 = require("@ai-matrx/design-system");
-var import_jsx_runtime23 = require("react/jsx-runtime");
+var import_react25 = require("react");
+var import_design_system15 = require("@ai-matrx/design-system");
+var import_jsx_runtime24 = require("react/jsx-runtime");
 var message = (e, fallback) => {
   const m = e instanceof Error && e.message ? e.message : fallback;
   return copyRefusal(m) ?? m;
 };
 function useConfirmedChange() {
   const confirmed = useConfirmed();
-  const [busy, setBusy] = (0, import_react24.useState)(null);
-  const [error, setError] = (0, import_react24.useState)(null);
-  const [notice, setNotice] = (0, import_react24.useState)(null);
+  const [busy, setBusy] = (0, import_react25.useState)(null);
+  const [error, setError] = (0, import_react25.useState)(null);
+  const [notice, setNotice] = (0, import_react25.useState)(null);
   async function run(key, fn, done) {
     setBusy(key);
     setError(null);
@@ -5350,33 +5569,33 @@ function useConfirmedChange() {
   return { busy, error, notice, run, setNotice };
 }
 function AccessLine({ glyph: G, who, meta, children }) {
-  return /* @__PURE__ */ (0, import_jsx_runtime23.jsxs)("div", { className: "flex min-h-11 items-center gap-2 px-3 sm:px-4", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime23.jsx)(G, { className: "size-4 shrink-0 text-muted-foreground" }),
-    /* @__PURE__ */ (0, import_jsx_runtime23.jsxs)("div", { className: "flex min-w-0 flex-1 items-baseline gap-2", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime23.jsx)("span", { className: "truncate text-sm text-foreground", children: who }),
-      meta ? /* @__PURE__ */ (0, import_jsx_runtime23.jsx)("span", { className: "shrink-0 text-xs text-muted-foreground", children: meta }) : null
+  return /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("div", { className: "flex min-h-11 items-center gap-2 px-3 sm:px-4", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(G, { className: "size-4 shrink-0 text-muted-foreground" }),
+    /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("div", { className: "flex min-w-0 flex-1 items-baseline gap-2", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("span", { className: "truncate text-sm text-foreground", children: who }),
+      meta ? /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("span", { className: "shrink-0 text-xs text-muted-foreground", children: meta }) : null
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime23.jsx)("div", { className: "flex shrink-0 items-center gap-0.5", children })
+    /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("div", { className: "flex shrink-0 items-center gap-0.5", children })
   ] });
 }
 function StatusLine({ error, notice }) {
   if (!error && !notice) return null;
-  return /* @__PURE__ */ (0, import_jsx_runtime23.jsx)("p", { className: (0, import_design_system14.cn)("min-w-0 flex-1 line-clamp-2 text-sm", error ? "text-destructive" : "text-success"), title: error ?? notice ?? void 0, children: error ?? notice });
+  return /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("p", { className: (0, import_design_system15.cn)("min-w-0 flex-1 line-clamp-2 text-sm", error ? "text-destructive" : "text-success"), title: error ?? notice ?? void 0, children: error ?? notice });
 }
 
 // src/sharing/MovePanel.tsx
-var import_react25 = require("react");
-var import_confirm_opener7 = require("@ai-matrx/kit/confirm-opener");
-var import_controls19 = require("@ai-matrx/design-system/controls");
-var import_jsx_runtime24 = require("react/jsx-runtime");
+var import_react26 = require("react");
+var import_confirm_opener8 = require("@ai-matrx/kit/confirm-opener");
+var import_controls20 = require("@ai-matrx/design-system/controls");
+var import_jsx_runtime25 = require("react/jsx-runtime");
 var NONE = "__none__";
 function MovePanel({ item, port, organizations, onClose, onChanged }) {
   const { busy, error, notice, run, setNotice } = useConfirmedChange();
   const moves = moveDestinations(item, organizations);
   const copies = copyDestinations(organizations, item);
-  const [moveTo, setMoveTo] = (0, import_react25.useState)("");
-  const [copyTo, setCopyTo] = (0, import_react25.useState)("");
-  const [email, setEmail] = (0, import_react25.useState)("");
+  const [moveTo, setMoveTo] = (0, import_react26.useState)("");
+  const [copyTo, setCopyTo] = (0, import_react26.useState)("");
+  const [email, setEmail] = (0, import_react26.useState)("");
   const passkey = isPasskey(item);
   const canMove = item.capabilities.canManage && !passkey && moves.length > 0;
   const canGive = item.capabilities.canManage && item.owner.kind === "me" && !passkey;
@@ -5386,7 +5605,7 @@ function MovePanel({ item, port, organizations, onClose, onChanged }) {
   const move = async () => {
     if (!moveChoice) return;
     const to = destinationOf(moveChoice.value);
-    const ok = await (0, import_confirm_opener7.confirm)({
+    const ok = await (0, import_confirm_opener8.confirm)({
       title: `Move to ${moveChoice.label}?`,
       description: `"${item.name}" stays the same item, so everything using it keeps working. ${itemMoveConsequence(item, to)}.`,
       confirmLabel: "Move"
@@ -5401,7 +5620,7 @@ function MovePanel({ item, port, organizations, onClose, onChanged }) {
   const give = async () => {
     const to = email.trim();
     if (!isEmail(to)) return;
-    const ok = await (0, import_confirm_opener7.confirm)({ title: "Give ownership away?", description: giveDescription(item, to), confirmLabel: "Give ownership", variant: "destructive" });
+    const ok = await (0, import_confirm_opener8.confirm)({ title: "Give ownership away?", description: giveDescription(item, to), confirmLabel: "Give ownership", variant: "destructive" });
     if (!ok) return;
     const out = await run("give", () => port.sharing.giveOwnership(item, to));
     if (!out) return;
@@ -5414,25 +5633,25 @@ function MovePanel({ item, port, organizations, onClose, onChanged }) {
     if (made) onChanged();
   };
   const nothing = !canMove && !canGive && !canCopy;
-  return /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
     Panel,
     {
       title: "Move or copy",
       size: "md",
       onClose,
-      footer: /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(PanelFooter, { status: error || notice ? /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(StatusLine, { error, notice }) : null, children: /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(import_controls19.Button, { variant: "primary", onClick: onClose, children: "Done" }) }),
-      children: nothing ? /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(Empty, { children: passkey ? "A passkey stays where it was created." : "Only the owner can move or give this item." }) }) : /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)(VaultSection, { children: [
-        canMove && moves.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(
+      footer: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(PanelFooter, { status: error || notice ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(StatusLine, { error, notice }) : null, children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Button, { variant: "primary", onClick: onClose, children: "Done" }) }),
+      children: nothing ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(Empty, { children: passkey ? "A passkey stays where it was created." : "Only the owner can move or give this item." }) }) : /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)(VaultSection, { children: [
+        canMove && moves.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
           VaultRow,
           {
             label: "Move to",
             hint: moveChoice ? itemMoveConsequence(item, destinationOf(moveChoice.value)) : void 0,
-            actions: /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(import_controls19.Button, { variant: "outline", disabled: busy !== null || !moveChoice, onClick: () => void move(), children: "Move" }),
-            children: /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(import_controls19.Select, { className: "w-full", "aria-label": "Move to", value: moveTo || NONE, onValueChange: (v) => setMoveTo(v === NONE ? "" : v), options: [{ value: NONE, label: "Choose where" }, ...moves] })
+            actions: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Button, { variant: "outline", disabled: busy !== null || !moveChoice, onClick: () => void move(), children: "Move" }),
+            children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Select, { className: "w-full", "aria-label": "Move to", value: moveTo || NONE, onValueChange: (v) => setMoveTo(v === NONE ? "" : v), options: [{ value: NONE, label: "Choose where" }, ...moves] })
           }
         ) : null,
-        canGive ? /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(VaultRow, { label: "Give to", hint: "You lose all access; your shares end", actions: /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(import_controls19.Button, { variant: "danger", disabled: busy !== null || !isEmail(email), onClick: () => void give(), children: "Give" }), children: /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(
-          import_controls19.Field,
+        canGive ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(VaultRow, { label: "Give to", hint: "You lose all access; your shares end", actions: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Button, { variant: "danger", disabled: busy !== null || !isEmail(email), onClick: () => void give(), children: "Give" }), children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
+          import_controls20.Field,
           {
             className: "w-full",
             type: "email",
@@ -5445,20 +5664,20 @@ function MovePanel({ item, port, organizations, onClose, onChanged }) {
             onChange: (e) => setEmail(e.target.value)
           }
         ) }) : null,
-        canCopy && copies.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(VaultRow, { label: "Copy to", hint: "A separate item; edits no longer sync", actions: /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(import_controls19.Button, { variant: "outline", disabled: busy !== null || !copyChoice, onClick: () => void copy(), children: "Copy" }), children: /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(import_controls19.Select, { className: "w-full", "aria-label": "Copy to", value: copyTo || NONE, onValueChange: (v) => setCopyTo(v === NONE ? "" : v), options: [{ value: NONE, label: "Choose where" }, ...copies] }) }) : null
+        canCopy && copies.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(VaultRow, { label: "Copy to", hint: "A separate item; edits no longer sync", actions: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Button, { variant: "outline", disabled: busy !== null || !copyChoice, onClick: () => void copy(), children: "Copy" }), children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Select, { className: "w-full", "aria-label": "Copy to", value: copyTo || NONE, onValueChange: (v) => setCopyTo(v === NONE ? "" : v), options: [{ value: NONE, label: "Choose where" }, ...copies] }) }) : null
       ] })
     }
   );
 }
 
 // src/sharing/SharePanel.tsx
-var import_jsx_runtime25 = require("react/jsx-runtime");
+var import_jsx_runtime26 = require("react/jsx-runtime");
 function useGrants(port, item) {
-  const [grants, setGrants] = (0, import_react26.useState)(null);
-  const [loadError, setLoadError] = (0, import_react26.useState)(null);
-  const [nonce, setNonce] = (0, import_react26.useState)(0);
+  const [grants, setGrants] = (0, import_react27.useState)(null);
+  const [loadError, setLoadError] = (0, import_react27.useState)(null);
+  const [nonce, setNonce] = (0, import_react27.useState)(0);
   const allowed = item.capabilities.canManage;
-  (0, import_react26.useEffect)(() => {
+  (0, import_react27.useEffect)(() => {
     if (!allowed) return;
     let live = true;
     setLoadError(null);
@@ -5475,9 +5694,9 @@ function useGrants(port, item) {
 function SharePanel({ item, port, organizations, onClose, onChanged }) {
   const { grants, setGrants, loadError, reload } = useGrants(port, item);
   const { busy, error, notice, run } = useConfirmedChange();
-  const [email, setEmail] = (0, import_react26.useState)("");
-  const [level, setLevel] = (0, import_react26.useState)("use");
-  const [more, setMore] = (0, import_react26.useState)(false);
+  const [email, setEmail] = (0, import_react27.useState)("");
+  const [level, setLevel] = (0, import_react27.useState)("use");
+  const [more, setMore] = (0, import_react27.useState)(false);
   const isOrg = item.owner.kind === "organization" && item.owner.organizationId !== null;
   const orgName = item.owner.label;
   const people = (grants ?? []).filter((g) => g.kind === "person");
@@ -5496,7 +5715,7 @@ function SharePanel({ item, port, organizations, onClose, onChanged }) {
     if (updated) setGrants((all) => (all ?? []).map((x) => x.id === g.id ? { ...updated, label: updated.label || g.label } : x));
   };
   const revoke = async (g) => {
-    const ok = await (0, import_confirm_opener8.confirm)({
+    const ok = await (0, import_confirm_opener9.confirm)({
       title: g.kind === "organization" ? `Remove from ${g.label}?` : "Remove access?",
       description: g.kind === "organization" ? `${g.label} members can no longer use "${item.name}". It stays in your vault.` : `${g.label} can no longer use "${item.name}". This takes effect at once.`,
       confirmLabel: "Remove",
@@ -5512,7 +5731,7 @@ function SharePanel({ item, port, organizations, onClose, onChanged }) {
   const setMode = async (mode) => {
     if (mode === (item.accessMode === "restricted" ? "restricted" : "all_members")) return;
     if (mode === "all_members" && people.length > 0) {
-      const ok = await (0, import_confirm_opener8.confirm)({
+      const ok = await (0, import_confirm_opener9.confirm)({
         title: "Open to every member?",
         description: `Every member of ${orgName} gets it at their own vault access. The ${people.length === 1 ? "person" : `${people.length} people`} listed here lose their own access.`,
         confirmLabel: "Open to members",
@@ -5527,20 +5746,20 @@ function SharePanel({ item, port, organizations, onClose, onChanged }) {
     }
   };
   if (!item.capabilities.canManage) {
-    return /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(Panel, { title: "Share", size: "md", onClose, footer: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Button, { variant: "primary", onClick: onClose, children: "Done" }), children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(Empty, { children: "Only the owner can change who has access." }) }) });
+    return /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(Panel, { title: "Share", size: "md", onClose, footer: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "primary", onClick: onClose, children: "Done" }), children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(Empty, { children: "Only the owner can change who has access." }) }) });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(
     Panel,
     {
       title: "Share",
       size: "md",
       onClose,
-      footer: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(PanelFooter, { status: error || notice ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(StatusLine, { error, notice }) : null, children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Button, { variant: "primary", onClick: onClose, children: "Done" }) }),
+      footer: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(PanelFooter, { status: error || notice ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(StatusLine, { error, notice }) : null, children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "primary", onClick: onClose, children: "Done" }) }),
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)(VaultSection, { title: "Who has access", children: [
-          isOrg ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(AccessLine, { glyph: BuildingGlyph, who: `${orgName} admins`, children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("span", { className: "px-2 text-sm text-muted-foreground", children: "Full access" }) }) : /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(AccessLine, { glyph: PersonGlyph, who: "You", meta: "Owner", children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("span", { className: "px-2 text-sm text-muted-foreground", children: "Full access" }) }),
-          isOrg ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(AccessLine, { glyph: import_icons10.UsersIcon, who: `${orgName} members`, children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
-            import_controls20.Select,
+        /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(VaultSection, { title: "Who has access", children: [
+          isOrg ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(AccessLine, { glyph: BuildingGlyph, who: `${orgName} admins`, children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "px-2 text-sm text-muted-foreground", children: "Full access" }) }) : /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(AccessLine, { glyph: PersonGlyph, who: "You", meta: "Owner", children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "px-2 text-sm text-muted-foreground", children: "Full access" }) }),
+          isOrg ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(AccessLine, { glyph: import_icons10.UsersIcon, who: `${orgName} members`, children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
+            import_controls21.Select,
             {
               variant: "inline",
               align: "end",
@@ -5554,14 +5773,14 @@ function SharePanel({ item, port, organizations, onClose, onChanged }) {
               ]
             }
           ) }) : null,
-          loadError ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(AccessLine, { glyph: XGlyph, who: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("span", { className: "text-destructive", children: loadError }), children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Button, { variant: "quiet", onClick: reload, children: "Retry" }) }) : grants === null ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.RegionSkeleton, { shape: "rows", count: 2, "aria-label": "Loading who has access", className: "px-3 sm:px-4" }) : grants.map((g) => /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)(AccessLine, { glyph: g.kind === "organization" ? BuildingGlyph : PersonGlyph, who: g.label, ...g.kind === "organization" ? { meta: "Organization vault" } : {}, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Select, { variant: "inline", align: "end", "aria-label": `What ${g.label} can do`, disabled: busy !== null, value: g.level, onValueChange: (v) => void change(g, v), options: LEVEL_OPTIONS }),
-            /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Button, { variant: "quiet", removes: true, icon: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(XGlyph, {}), "aria-label": `Remove ${g.label}`, disabled: busy !== null, onClick: () => void revoke(g) })
+          loadError ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(AccessLine, { glyph: XGlyph, who: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "text-destructive", children: loadError }), children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "quiet", onClick: reload, children: "Retry" }) }) : grants === null ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.RegionSkeleton, { shape: "rows", count: 2, "aria-label": "Loading who has access", className: "px-3 sm:px-4" }) : grants.map((g) => /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(AccessLine, { glyph: g.kind === "organization" ? BuildingGlyph : PersonGlyph, who: g.label, ...g.kind === "organization" ? { meta: "Organization vault" } : {}, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Select, { variant: "inline", align: "end", "aria-label": `What ${g.label} can do`, disabled: busy !== null, value: g.level, onValueChange: (v) => void change(g, v), options: LEVEL_OPTIONS }),
+            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "quiet", removes: true, icon: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(XGlyph, {}), "aria-label": `Remove ${g.label}`, disabled: busy !== null, onClick: () => void revoke(g) })
           ] }, g.id)),
-          /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("div", { className: "flex min-h-11 items-center gap-2 px-3 sm:px-4", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(PersonGlyph, { className: "size-4 shrink-0 text-muted-foreground" }),
-            /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
-              import_controls20.Field,
+          /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("div", { className: "flex min-h-11 items-center gap-2 px-3 sm:px-4", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(PersonGlyph, { className: "size-4 shrink-0 text-muted-foreground" }),
+            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
+              import_controls21.Field,
               {
                 className: "min-w-0 flex-1",
                 type: "email",
@@ -5581,13 +5800,13 @@ function SharePanel({ item, port, organizations, onClose, onChanged }) {
                 }
               }
             ),
-            /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Select, { variant: "inline", align: "end", "aria-label": "What they can do", value: level, onValueChange: setLevel, options: LEVEL_OPTIONS }),
-            /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Button, { variant: "primary", disabled: busy !== null || !isEmail(email), onClick: () => void add(), children: "Share" })
+            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Select, { variant: "inline", align: "end", "aria-label": "What they can do", value: level, onValueChange: setLevel, options: LEVEL_OPTIONS }),
+            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "primary", disabled: busy !== null || !isEmail(email), onClick: () => void add(), children: "Share" })
           ] })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("div", { className: "flex flex-col gap-3", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.DisclosureHeader, { open: more, title: "More options", onClick: () => setMore((o) => !o) }),
-          more ? isOrg && item.owner.organizationId ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(MemberAccess, { port, organizationId: item.owner.organizationId, organizationName: orgName }) : /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(IntoOrganization, { item, port, organizations, grants: grants ?? [], onShared: (g) => setGrants((all) => [...(all ?? []).filter((x) => x.id !== g.id), g]) }) : null
+        /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("div", { className: "flex flex-col gap-3", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.DisclosureHeader, { open: more, title: "More options", onClick: () => setMore((o) => !o) }),
+          more ? isOrg && item.owner.organizationId ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(MemberAccess, { port, organizationId: item.owner.organizationId, organizationName: orgName }) : /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(IntoOrganization, { item, port, organizations, grants: grants ?? [], onShared: (g) => setGrants((all) => [...(all ?? []).filter((x) => x.id !== g.id), g]) }) : null
         ] })
       ]
     }
@@ -5596,17 +5815,17 @@ function SharePanel({ item, port, organizations, onClose, onChanged }) {
 function IntoOrganization({ item, port, organizations, grants, onShared }) {
   const { busy, error, notice, run } = useConfirmedChange();
   const open = organizations.filter((o) => !grants.some((g) => g.organizationId === o.id));
-  const [target, setTarget] = (0, import_react26.useState)("");
-  const [level, setLevel] = (0, import_react26.useState)("use");
+  const [target, setTarget] = (0, import_react27.useState)("");
+  const [level, setLevel] = (0, import_react27.useState)("use");
   const chosen = open.find((o) => o.id === target);
   if (item.owner.kind !== "me") return null;
-  return /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(VaultSection, { title: "Share into organization", children: open.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)(import_jsx_runtime25.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("div", { className: "flex min-h-11 items-center gap-2 px-3 sm:px-4", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(BuildingGlyph, { className: "size-4 shrink-0 text-muted-foreground" }),
-      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Select, { className: "min-w-0 flex-1", "aria-label": "Organization", value: target || "__none__", onValueChange: (v) => setTarget(v === "__none__" ? "" : v), options: [{ value: "__none__", label: "Choose an organization" }, ...open.map((o) => ({ value: o.id, label: o.name }))] }),
-      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.Select, { variant: "inline", align: "end", "aria-label": "What its members can do", value: level, onValueChange: setLevel, options: LEVEL_OPTIONS }),
-      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
-        import_controls20.Button,
+  return /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(VaultSection, { title: "Share into organization", children: open.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_jsx_runtime26.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("div", { className: "flex min-h-11 items-center gap-2 px-3 sm:px-4", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(BuildingGlyph, { className: "size-4 shrink-0 text-muted-foreground" }),
+      /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Select, { className: "min-w-0 flex-1", "aria-label": "Organization", value: target || "__none__", onValueChange: (v) => setTarget(v === "__none__" ? "" : v), options: [{ value: "__none__", label: "Choose an organization" }, ...open.map((o) => ({ value: o.id, label: o.name }))] }),
+      /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Select, { variant: "inline", align: "end", "aria-label": "What its members can do", value: level, onValueChange: setLevel, options: LEVEL_OPTIONS }),
+      /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
+        import_controls21.Button,
         {
           variant: "outline",
           disabled: busy !== null || !chosen,
@@ -5622,8 +5841,8 @@ function IntoOrganization({ item, port, organizations, grants, onShared }) {
         }
       )
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("p", { className: "truncate px-3 pb-1 text-xs text-muted-foreground sm:px-4", children: error ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("span", { className: "text-destructive", children: error }) : notice ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("span", { className: "text-success", children: notice }) : "It stays yours; its members can use it too" })
-  ] }) : /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(Empty, { children: organizations.length ? "Already in every organization you belong to." : "You are not in any organization." }) });
+    /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("p", { className: "truncate px-3 pb-1 text-xs text-muted-foreground sm:px-4", children: error ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "text-destructive", children: error }) : notice ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "text-success", children: notice }) : "It stays yours; its members can use it too" })
+  ] }) : /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(Empty, { children: organizations.length ? "Already in every organization you belong to." : "You are not in any organization." }) });
 }
 var CHOICES = [
   { value: MEMBER_CHOICE_DEFAULT, label: "Default" },
@@ -5632,10 +5851,10 @@ var CHOICES = [
   { value: "editor", label: "Can edit", meta: "See and change" }
 ];
 function MemberAccess({ port, organizationId, organizationName }) {
-  const [list, setList] = (0, import_react26.useState)(null);
-  const [loadError, setLoadError] = (0, import_react26.useState)(null);
+  const [list, setList] = (0, import_react27.useState)(null);
+  const [loadError, setLoadError] = (0, import_react27.useState)(null);
   const { busy, error, run } = useConfirmedChange();
-  (0, import_react26.useEffect)(() => {
+  (0, import_react27.useEffect)(() => {
     let live = true;
     port.sharing.memberAccess(organizationId).then(
       (l) => live && setList(l),
@@ -5650,9 +5869,9 @@ function MemberAccess({ port, organizationId, organizationName }) {
     const effective = await run(userId, () => port.sharing.setMemberAccess(organizationId, userId, access));
     if (effective) setList((l) => l ? { ...l, members: l.members.map((m) => m.userId === userId ? { ...m, access, effective } : m) } : l);
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)(VaultSection, { title: `${organizationName} vault access`, children: [
-    loadError ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(Empty, { children: loadError }) : list === null ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(import_controls20.RegionSkeleton, { shape: "rows", count: 3, "aria-label": "Loading member access", className: "px-3 sm:px-4" }) : list.members.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(Empty, { children: "No members yet." }) : list.members.map((m) => /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(AccessLine, { glyph: PersonGlyph, who: m.email || m.userId, meta: m.role, children: m.effective === "admin" ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("span", { className: "px-2 text-sm text-muted-foreground", children: MEMBER_ACCESS_LABEL.admin }) : /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
-      import_controls20.Select,
+  return /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(VaultSection, { title: `${organizationName} vault access`, children: [
+    loadError ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(Empty, { children: loadError }) : list === null ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.RegionSkeleton, { shape: "rows", count: 3, "aria-label": "Loading member access", className: "px-3 sm:px-4" }) : list.members.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(Empty, { children: "No members yet." }) : list.members.map((m) => /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(AccessLine, { glyph: PersonGlyph, who: m.email || m.userId, meta: m.role, children: m.effective === "admin" ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "px-2 text-sm text-muted-foreground", children: MEMBER_ACCESS_LABEL.admin }) : /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
+      import_controls21.Select,
       {
         variant: "inline",
         align: "end",
@@ -5663,13 +5882,13 @@ function MemberAccess({ port, organizationId, organizationName }) {
         options: CHOICES.map((c) => c.value === MEMBER_CHOICE_DEFAULT ? { value: c.value, label: `Default (${MEMBER_ACCESS_LABEL[list.defaultAccess]})` } : c.meta ? { value: c.value, label: c.label, meta: c.meta } : { value: c.value, label: c.label })
       }
     ) }, m.userId)),
-    /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("p", { className: "truncate px-3 pb-1 text-xs text-muted-foreground sm:px-4", children: error ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("span", { className: "text-destructive", children: error }) : "Applies to every item in this organization" })
+    /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("p", { className: "truncate px-3 pb-1 text-xs text-muted-foreground sm:px-4", children: error ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "text-destructive", children: error }) : "Applies to every item in this organization" })
   ] });
 }
 function SharingSummary({ item, port, className }) {
-  const [text, setText] = (0, import_react26.useState)("");
+  const [text, setText] = (0, import_react27.useState)("");
   const allowed = item.capabilities.canManage;
-  (0, import_react26.useEffect)(() => {
+  (0, import_react27.useEffect)(() => {
     if (!allowed) return;
     let live = true;
     port.sharing.grants(item).then(
@@ -5681,12 +5900,12 @@ function SharingSummary({ item, port, className }) {
     };
   }, [port, item, allowed]);
   if (!allowed || !text) return null;
-  return /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("span", { className: (0, import_design_system15.cn)("truncate text-xs text-muted-foreground", className), children: text });
+  return /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: (0, import_design_system16.cn)("truncate text-xs text-muted-foreground", className), children: text });
 }
 
 // src/ItemPane.tsx
 var import_format8 = require("@ai-matrx/kit/format");
-var import_jsx_runtime26 = require("react/jsx-runtime");
+var import_jsx_runtime27 = require("react/jsx-runtime");
 var USERNAME_KEYS = /^(username|user_name|email|login|username_or_email|account_email)$/;
 function ItemPane(props) {
   const { port, item, definition, mode, host, organizations, defaultOwner, seed, onBack, onMode, onSaved, onDeleted, onDirty, onCancelNew, onPanel, onChanged, favorite, notice, refreshKey } = props;
@@ -5695,8 +5914,8 @@ function ItemPane(props) {
   const editing = mode !== "view";
   const seedName = seed?.name ?? "";
   const seedUrl = seed?.url ?? "";
-  const [loaded, setLoaded] = (0, import_react27.useState)({});
-  const base = (0, import_react27.useMemo)(() => {
+  const [loaded, setLoaded] = (0, import_react28.useState)({});
+  const base = (0, import_react28.useMemo)(() => {
     const b = draftOf(item);
     if (!item) {
       b.name = seedName;
@@ -5705,24 +5924,27 @@ function ItemPane(props) {
     b.values = { ...loaded };
     return b;
   }, [item, seedName, seedUrl, loaded]);
-  const [draft, setDraft] = (0, import_react27.useState)(base);
-  const [tagsText, setTagsText] = (0, import_react27.useState)(base.tags.join(", "));
-  const [showTags, setShowTags] = (0, import_react27.useState)(false);
-  const [showDescription, setShowDescription] = (0, import_react27.useState)(false);
-  const [showRecovery, setShowRecovery] = (0, import_react27.useState)(false);
-  const [settingUpOtp, setSettingUpOtp] = (0, import_react27.useState)(false);
-  const [owner, setOwner] = (0, import_react27.useState)(defaultOwner ?? "me");
-  const [recipient, setRecipient] = (0, import_react27.useState)("");
-  const [generatePrivately, setGeneratePrivately] = (0, import_react27.useState)(false);
-  const [busy, setBusy] = (0, import_react27.useState)(false);
-  const [error, setError] = (0, import_react27.useState)(null);
-  const [destinations, setDestinations] = (0, import_react27.useState)({});
+  const [draft, setDraft] = (0, import_react28.useState)(base);
+  const [tagsText, setTagsText] = (0, import_react28.useState)(base.tags.join(", "));
+  const [showTags, setShowTags] = (0, import_react28.useState)(false);
+  const [showDescription, setShowDescription] = (0, import_react28.useState)(false);
+  const [showRecovery, setShowRecovery] = (0, import_react28.useState)(false);
+  const [settingUpOtp, setSettingUpOtp] = (0, import_react28.useState)(false);
+  const [owner, setOwner] = (0, import_react28.useState)(defaultOwner ?? "me");
+  const [recipient, setRecipient] = (0, import_react28.useState)("");
+  const [generatePrivately, setGeneratePrivately] = (0, import_react28.useState)(false);
+  const [busy, setBusy] = (0, import_react28.useState)(false);
+  const [sent, setSent] = (0, import_react28.useState)(null);
+  const [queuedFiles, setQueuedFiles] = (0, import_react28.useState)([]);
+  const [showBrowser, setShowBrowser] = (0, import_react28.useState)(false);
+  const [error, setError] = (0, import_react28.useState)(null);
+  const [destinations, setDestinations] = (0, import_react28.useState)({});
   const dirty = editing && isDirty(base, draft);
   const declared = definition?.fields ?? [];
-  const prev = (0, import_react27.useRef)(null);
-  const paneRef = (0, import_react27.useRef)(null);
+  const prev = (0, import_react28.useRef)(null);
+  const paneRef = (0, import_react28.useRef)(null);
   const room = useRoomOf(paneRef);
-  (0, import_react27.useEffect)(() => {
+  (0, import_react28.useEffect)(() => {
     const was = prev.current;
     const id = item?.id ?? null;
     if (was && was.id === id && was.mode === mode && editing) {
@@ -5735,19 +5957,19 @@ function ItemPane(props) {
     }
     prev.current = { base, id, mode };
   }, [base, mode, item?.id, editing]);
-  (0, import_react27.useEffect)(() => {
+  (0, import_react28.useEffect)(() => {
     setLoaded({});
     setShowTags(false);
     setShowDescription(false);
     setShowRecovery(false);
   }, [item?.id, mode]);
-  (0, import_react27.useEffect)(() => onDirty(dirty), [dirty, onDirty]);
+  (0, import_react28.useEffect)(() => onDirty(dirty), [dirty, onDirty]);
   const keepKey = draftKey(item?.id ?? null, definition?.key ?? item?.definitionKey ?? null);
-  (0, import_react27.useEffect)(() => {
+  (0, import_react28.useEffect)(() => {
     if (editing && dirty) (0, import_drafts.keepDraft)(keepKey, keptFieldsOf(draft), { basedOn: item?.updatedAt ?? "new" });
     else if (!editing) (0, import_drafts.dropKeptDraft)(keepKey);
   }, [editing, dirty, draft, keepKey, item?.updatedAt]);
-  (0, import_react27.useEffect)(() => {
+  (0, import_react28.useEffect)(() => {
     if (!editing || !item) return;
     let live = true;
     for (const f of item.fields) {
@@ -5789,10 +6011,13 @@ function ItemPane(props) {
         const secretKey = declared.find((f) => f.storage === "encrypted" && f.kind === "secret")?.key ?? null;
         const r = await port.sharing.assign({ recipientEmail: recipient.trim(), definition, draft: out, generateFieldKey: generatePrivately ? secretKey : null });
         notify(`Sent to ${r.recipientEmail}`);
-        onCancelNew();
+        (0, import_drafts.dropKeptDraft)(keepKey);
+        onDirty(false);
+        setSent(r);
       } else if (definition) {
         const r = await port.create(definition, owner === "me" ? null : owner, out);
-        const [next, n, enrolled] = await withOtp(r.item, r.notice);
+        const [withCode, n0, enrolled] = await withOtp(r.item, r.notice);
+        const [next, n] = await storeQueuedFiles(withCode, n0);
         (0, import_drafts.dropKeptDraft)(keepKey);
         onSaved(next, true, n, enrolled);
       }
@@ -5802,9 +6027,32 @@ function ItemPane(props) {
       setBusy(false);
     }
   }
+  async function storeQueuedFiles(saved, notice2) {
+    let next = saved;
+    const failed = [];
+    for (const q of queuedFiles) {
+      try {
+        next = await confirmed(() => port.activity.addFile(next, q.file, { label: q.label, description: q.description, handling: q.handling }));
+      } catch {
+        failed.push(q.label);
+      }
+    }
+    setQueuedFiles([]);
+    if (failed.length === 0) return [next, notice2];
+    const said = `Saved, but ${failed.length === 1 ? `the file ${failed[0]} was` : `${failed.length} files were`} not stored. Add ${failed.length === 1 ? "it" : "them"} with Add file.`;
+    return [next, notice2 ? `${notice2} ${said}` : said];
+  }
+  function createAnother() {
+    setSent(null);
+    setDraft(base);
+    setTagsText(base.tags.join(", "));
+    setQueuedFiles([]);
+    setShowBrowser(false);
+    setError(null);
+  }
   async function remove() {
     if (!item) return;
-    const ok = await (0, import_confirm_opener9.confirm)({ title: `Delete \u201C${item.name}\u201D?`, description: "It moves to Trash. You can restore it from there.", confirmLabel: "Delete", variant: "destructive" });
+    const ok = await (0, import_confirm_opener10.confirm)({ title: `Delete \u201C${item.name}\u201D?`, description: "It moves to Trash. You can restore it from there.", confirmLabel: "Delete", variant: "destructive" });
     if (!ok) return;
     setBusy(true);
     try {
@@ -5845,6 +6093,7 @@ function ItemPane(props) {
       onChanged();
     }
   }
+  const fieldSettings = (f) => canEdit ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(SlidersGlyph, {}), "aria-label": `${f.label} settings`, title: `${f.label} settings`, onClick: () => onPanel(`field:${f.id}`) }) : null;
   const turnOnOne = canTurnOn ? (f) => () => turnOn([f]) : () => void 0;
   const declaredKeys = new Set(declared.map((f) => f.key));
   const extraFields = (item?.fields ?? []).filter((f) => !declaredKeys.has(f.key) && !draft.removed.includes(f.id) && !isAuthenticatorStorage(f.key));
@@ -5857,35 +6106,35 @@ function ItemPane(props) {
   const recoveryExtra = extraFields.some(isRecoveryCodesField);
   const offerRecovery = isLogin || Boolean(item?.authenticator) || draft.authenticator.trim() !== "";
   const recoveryEditing = !recoveryDeclared && !recoveryExtra && (showRecovery || (draft.values[RECOVERY_CODES_KEY] ?? "") !== "");
-  const shownOwner = mode === "new" ? owner === "me" ? { label: "Personal", glyph: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(PersonGlyph, {}) } : owner === "person" ? { label: "Someone else", glyph: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(SendGlyph, {}) } : { label: organizations.find((o) => o.id === owner)?.name ?? "Organization", glyph: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(BuildingGlyph, {}) } : item ? { label: item.owner.label, glyph: item.owner.kind === "me" ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(PersonGlyph, {}) : item.owner.kind === "organization" ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(BuildingGlyph, {}) : /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_icons11.UsersIcon, {}) } : null;
+  const shownOwner = mode === "new" ? owner === "me" ? { label: "Personal", glyph: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(PersonGlyph, {}) } : owner === "person" ? { label: "Someone else", glyph: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(SendGlyph, {}) } : { label: organizations.find((o) => o.id === owner)?.name ?? "Organization", glyph: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(BuildingGlyph, {}) } : item ? { label: item.owner.label, glyph: item.owner.kind === "me" ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(PersonGlyph, {}) : item.owner.kind === "organization" ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(BuildingGlyph, {}) : /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_icons11.UsersIcon, {}) } : null;
   const sameNamed = (id) => {
     const name = organizations.find((o) => o.id === id)?.name.trim().toLowerCase();
     return Boolean(name) && organizations.filter((o) => o.name.trim().toLowerCase() === name).length > 1;
   };
   const tagsVisible = showTags || draft.tags.length > 0 || tagsText !== "";
   const descriptionVisible = showDescription || draft.description !== "";
-  const header = /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("header", { className: "flex min-h-14 items-center gap-2 border-b border-border px-3 py-2 sm:gap-3 sm:px-5", children: [
-    onBack ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(ChevronLeftGlyph, {}), "aria-label": "Back", onClick: mode === "new" ? onCancelNew : onBack }) : null,
-    /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(ItemIcon, { definitionKey: definition?.key ?? item?.definitionKey ?? "custom", family: definition?.family ?? "generic", site: item ? loginSiteOf(item) : loginSiteOf({ loginUrls: draft.loginUrls }), size: "lg" }),
-    /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("div", { className: "flex min-w-0 flex-1 flex-col", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("h2", { className: "truncate text-base font-semibold leading-tight", children: editing ? draft.name || (mode === "new" ? `New ${typeLabel.toLowerCase()}` : item?.name) : item?.name }),
-      /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("span", { className: "flex min-w-0 items-center gap-1 text-xs text-muted-foreground", children: [
-        typeLabel ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "truncate", children: typeLabel }) : null,
-        shownOwner ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Badge, { className: "shrink-0", icon: shownOwner.glyph, "aria-label": `Saved in ${shownOwner.label}`, children: shownOwner.label }) : null,
-        item && !editing ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(SharingSummary, { item, port, className: "hidden truncate before:mr-1 before:content-['\xB7'] sm:inline" }, `${item.updatedAt}-${refreshKey ?? ""}`) : null
+  const header = /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("header", { className: "flex min-h-14 items-center gap-2 border-b border-border px-3 py-2 sm:gap-3 sm:px-5", children: [
+    onBack ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(ChevronLeftGlyph, {}), "aria-label": "Back", onClick: mode === "new" ? onCancelNew : onBack }) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(ItemIcon, { definitionKey: definition?.key ?? item?.definitionKey ?? "custom", family: definition?.family ?? "generic", site: item ? loginSiteOf(item) : loginSiteOf({ loginUrls: draft.loginUrls }), size: "lg" }),
+    /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("div", { className: "flex min-w-0 flex-1 flex-col", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("h2", { className: "truncate text-base font-semibold leading-tight", children: editing ? draft.name || (mode === "new" ? `New ${typeLabel.toLowerCase()}` : item?.name) : item?.name }),
+      /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("span", { className: "flex min-w-0 items-center gap-1 text-xs text-muted-foreground", children: [
+        typeLabel ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("span", { className: "truncate", children: typeLabel }) : null,
+        shownOwner ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Badge, { className: "shrink-0", icon: shownOwner.glyph, "aria-label": `Saved in ${shownOwner.label}`, children: shownOwner.label }) : null,
+        item && !editing ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(SharingSummary, { item, port, className: "hidden truncate before:mr-1 before:content-['\xB7'] sm:inline" }, `${item.updatedAt}-${refreshKey ?? ""}`) : null
       ] })
     ] }),
-    editing ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("div", { className: "flex shrink-0 items-center gap-2", children: [
-      dirty ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("span", { className: "hidden items-center gap-1.5 text-xs text-muted-foreground sm:flex", role: "status", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "size-1.5 rounded-full bg-warning", "aria-hidden": true }),
+    editing ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("div", { className: "flex shrink-0 items-center gap-2", children: [
+      dirty ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("span", { className: "hidden items-center gap-1.5 text-xs text-muted-foreground sm:flex", role: "status", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("span", { className: "size-1.5 rounded-full bg-warning", "aria-hidden": true }),
         "Unsaved"
       ] }) : null,
-      /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "quiet", disabled: busy, onClick: () => mode === "new" ? onCancelNew() : onMode("view"), children: dirty ? "Discard" : "Cancel" }),
-      /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "primary", disabled: busy || draft.name.trim() === "" || mode === "edit" && !dirty || mode === "new" && owner === "person" && !/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(recipient.trim()), onClick: () => void save(), children: mode === "new" && owner === "person" ? "Send" : "Save" })
-    ] }) : item ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("div", { className: "flex shrink-0 items-center gap-1", children: [
-      host.page && canUseOnSite(item, host.page.url) ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(UseOnSiteButton, { port, item, pageUrl: host.page.url, onChanged: (next) => onChanged(next) }) : null,
-      host.fill && item.capabilities.canUse ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
-        import_controls21.Button,
+      /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", disabled: busy, onClick: () => mode === "new" ? onCancelNew() : onMode("view"), children: dirty ? "Discard" : "Cancel" }),
+      /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "primary", disabled: busy || sent !== null || draft.name.trim() === "" || mode === "edit" && !dirty || mode === "new" && owner === "person" && !/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(recipient.trim()), onClick: () => void save(), children: mode === "new" && owner === "person" ? "Send" : "Save" })
+    ] }) : item ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("div", { className: "flex shrink-0 items-center gap-1", children: [
+      host.page && canUseOnSite(item, host.page.url) ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(UseOnSiteButton, { port, item, pageUrl: host.page.url, onChanged: (next) => onChanged(next) }) : null,
+      host.fill && item.capabilities.canUse ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(
+        import_controls22.Button,
         {
           variant: "primary",
           onClick: () => void host.fill?.(item.id).then((outcome) => {
@@ -5895,44 +6144,44 @@ function ItemPane(props) {
           children: "Fill"
         }
       ) : null,
-      favorite ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "hidden sm:contents", children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(StarGlyph, { className: favorite.on ? "fill-current text-warning" : "size-4" }), "aria-label": favorite.on ? "Remove from favorites" : "Add to favorites", pressed: favorite.on, onClick: favorite.toggle }) }) : null,
-      canManage ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "hidden sm:contents", children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(ShareGlyph, {}), "aria-label": "Share", onClick: () => onPanel("share") }) }) : null,
-      canEdit ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(PencilGlyph, {}), collapse: "container", "aria-label": "Edit", onClick: () => onMode("edit"), children: "Edit" }) : null,
-      /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_design_system16.DropdownMenu, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_design_system16.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(MoreGlyph, {}), "aria-label": "More actions" }) }),
-        /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_design_system16.DropdownMenuContent, { align: "end", children: [
-          favorite ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_design_system16.DropdownMenuItem, { onSelect: favorite.toggle, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(StarGlyph, { className: "size-4" }),
+      favorite ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("span", { className: "hidden sm:contents", children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(StarGlyph, { className: favorite.on ? "fill-current text-warning" : "size-4" }), "aria-label": favorite.on ? "Remove from favorites" : "Add to favorites", pressed: favorite.on, onClick: favorite.toggle }) }) : null,
+      canManage ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("span", { className: "hidden sm:contents", children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(ShareGlyph, {}), "aria-label": "Share", onClick: () => onPanel("share") }) }) : null,
+      canEdit ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(PencilGlyph, {}), collapse: "container", "aria-label": "Edit", onClick: () => onMode("edit"), children: "Edit" }) : null,
+      /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_design_system17.DropdownMenu, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_design_system17.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(MoreGlyph, {}), "aria-label": "More actions" }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_design_system17.DropdownMenuContent, { align: "end", children: [
+          favorite ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_design_system17.DropdownMenuItem, { onSelect: favorite.toggle, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(StarGlyph, { className: "size-4" }),
             favorite.on ? "Remove from favorites" : "Add to favorites"
           ] }) : null,
-          canManage ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_design_system16.DropdownMenuItem, { onSelect: () => onPanel("share"), children: [
-            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(ShareGlyph, { className: "size-4" }),
+          canManage ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_design_system17.DropdownMenuItem, { onSelect: () => onPanel("share"), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(ShareGlyph, { className: "size-4" }),
             "Share"
           ] }) : null,
-          canManage ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_design_system16.DropdownMenuItem, { onSelect: () => onPanel("move"), children: [
-            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(MoveGlyph, { className: "size-4" }),
+          canManage ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_design_system17.DropdownMenuItem, { onSelect: () => onPanel("move"), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(MoveGlyph, { className: "size-4" }),
             "Move or copy"
           ] }) : null,
-          item.capabilities.canReveal ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_design_system16.DropdownMenuItem, { onSelect: () => onPanel("send"), children: [
-            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(SendGlyph, { className: "size-4" }),
+          item.capabilities.canReveal ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_design_system17.DropdownMenuItem, { onSelect: () => onPanel("send"), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(SendGlyph, { className: "size-4" }),
             "Send securely"
           ] }) : null,
-          /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_design_system16.DropdownMenuItem, { onSelect: () => onPanel("history"), children: [
-            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_icons11.HistoryIcon, { className: "size-4" }),
+          /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_design_system17.DropdownMenuItem, { onSelect: () => onPanel("history"), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_icons11.HistoryIcon, { className: "size-4" }),
             "Password history"
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_design_system16.DropdownMenuItem, { onSelect: () => onPanel("activity"), children: [
-            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(ListGlyph, { className: "size-4" }),
+          /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_design_system17.DropdownMenuItem, { onSelect: () => onPanel("activity"), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(ListGlyph, { className: "size-4" }),
             "Activity"
           ] }),
-          canEdit ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_design_system16.DropdownMenuItem, { onSelect: () => onPanel("settings"), children: [
-            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_icons11.SettingsIcon, { className: "size-4" }),
+          canEdit ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_design_system17.DropdownMenuItem, { onSelect: () => onPanel("settings"), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_icons11.SettingsIcon, { className: "size-4" }),
             "Settings"
           ] }) : null,
-          canManage ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_jsx_runtime26.Fragment, { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_design_system16.DropdownMenuSeparator, {}),
-            /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_design_system16.DropdownMenuItem, { className: "text-destructive", disabled: busy, onSelect: () => void remove(), children: [
-              /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(TrashGlyph, { className: "size-4" }),
+          canManage ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_jsx_runtime27.Fragment, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_design_system17.DropdownMenuSeparator, {}),
+            /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_design_system17.DropdownMenuItem, { className: "text-destructive", disabled: busy, onSelect: () => void remove(), children: [
+              /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(TrashGlyph, { className: "size-4" }),
               "Delete"
             ] })
           ] }) : null
@@ -5941,18 +6190,18 @@ function ItemPane(props) {
     ] }) : null
   ] });
   const filesProps = item ? { item, port, host, definition, organizations, arg: null, onClose: () => void 0, onChanged, onPanel } : null;
-  return /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(RoomProvider, { value: room, children: /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("article", { ref: paneRef, "aria-label": item?.name ?? "New item", className: (0, import_design_system17.cn)(import_controls21.CONTROLS_CONTAINER_CLASS, "flex h-full min-h-0 flex-col bg-background"), children: [
+  return /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(RoomProvider, { value: room, children: /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("article", { ref: paneRef, "aria-label": item?.name ?? "New item", className: (0, import_design_system18.cn)(import_controls22.CONTROLS_CONTAINER_CLASS, "flex h-full min-h-0 flex-col bg-background"), children: [
     header,
-    error ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { role: "alert", className: "border-b border-border bg-muted px-5 py-2 text-sm text-destructive", children: error }) : null,
-    notice && !editing ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { role: "status", className: "border-b border-border bg-muted px-5 py-2 text-sm text-warning", children: notice }) : null,
-    item && !editing && (itemOff || offFields.length > 0) ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("div", { role: "status", className: "flex items-center gap-3 border-b border-border bg-muted px-5 py-2 text-sm", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "min-w-0 flex-1 truncate text-warning", children: offFields.length === 0 ? "This item is turned off" : offFields.length === 1 ? "1 field is turned off" : `${offFields.length} fields are turned off` }),
-      canTurnOn ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(TurnOnButton, { label: "all fields", onTurnOn: () => turnOn(offFields) }) : null
+    error ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("div", { role: "alert", className: "border-b border-border bg-muted px-5 py-2 text-sm text-destructive", children: error }) : null,
+    notice && !editing ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("div", { role: "status", className: "border-b border-border bg-muted px-5 py-2 text-sm text-warning", children: notice }) : null,
+    item && !editing && (itemOff || offFields.length > 0) ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("div", { role: "status", className: "flex items-center gap-3 border-b border-border bg-muted px-5 py-2 text-sm", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("span", { className: "min-w-0 flex-1 truncate text-warning", children: offFields.length === 0 ? "This item is turned off" : offFields.length === 1 ? "1 field is turned off" : `${offFields.length} fields are turned off` }),
+      canTurnOn ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(TurnOnButton, { label: "all fields", onTurnOn: () => turnOn(offFields) }) : null
     ] }) : null,
-    /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { className: "min-h-0 flex-1 overflow-y-auto", children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { className: "mx-auto flex w-full max-w-3xl flex-col gap-5 px-3 py-4 sm:px-6 sm:py-6", children: editing ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_jsx_runtime26.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(VaultSection, { children: [
-        mode === "new" ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(VaultRow, { label: "Save to", children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
-          import_controls21.OptionCombobox,
+    /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("div", { className: "min-h-0 flex-1 overflow-y-auto", children: sent ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(AssignResult, { sent, onAnother: createAnother, onDone: onCancelNew }) : /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("div", { className: "mx-auto flex w-full max-w-3xl flex-col gap-5 px-3 py-4 sm:px-6 sm:py-6", children: editing ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_jsx_runtime27.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(VaultSection, { children: [
+        mode === "new" ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(VaultRow, { label: "Save to", children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(
+          import_controls22.OptionCombobox,
           {
             value: owner,
             onChange: setOwner,
@@ -5966,39 +6215,39 @@ function ItemPane(props) {
             ],
             getLabel: (v) => v === "me" ? "Personal" : v === "person" ? "Someone else" : organizations.find((o) => o.id === v)?.name ?? v,
             getHint: (v) => v === "me" ? "Only you" : v === "person" ? "Sent by email" : sameNamed(v) ? `ID ${v.slice(0, 8)}` : null,
-            renderIcon: (v) => v === "me" ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(PersonGlyph, { className: "size-4" }) : v === "person" ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(SendGlyph, { className: "size-4" }) : /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(BuildingGlyph, { className: "size-4" })
+            renderIcon: (v) => v === "me" ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(PersonGlyph, { className: "size-4" }) : v === "person" ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(SendGlyph, { className: "size-4" }) : /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(BuildingGlyph, { className: "size-4" })
           }
         ) }) : null,
-        /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(EditRow, { label: "Name", value: draft.name, onChange: (v) => patch({ name: v }), placeholder: "Name", autoFocus: mode === "new" }),
-        mode === "new" && owner === "person" ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_jsx_runtime26.Fragment, { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(EditRow, { label: "Their email", value: recipient, placeholder: "name@company.com", inputMode: "email", onChange: setRecipient }),
-          declared.some((f) => f.storage === "encrypted" && f.kind === "secret") ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(VaultRow, { label: "Password", hint: "You never see it", children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Switch, { checked: generatePrivately, onCheckedChange: setGeneratePrivately, "aria-label": "Generate the password privately" }) }) : null
+        /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(EditRow, { label: "Name", value: draft.name, onChange: (v) => patch({ name: v }), placeholder: "Name", autoFocus: mode === "new" }),
+        mode === "new" && owner === "person" ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_jsx_runtime27.Fragment, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(EditRow, { label: "Their email", value: recipient, placeholder: "name@company.com", inputMode: "email", onChange: setRecipient }),
+          declared.some((f) => f.storage === "encrypted" && f.kind === "secret") ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(VaultRow, { label: "Password", hint: "You never see it", children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Switch, { checked: generatePrivately, onCheckedChange: setGeneratePrivately, "aria-label": "Generate the password privately" }) }) : null
         ] }) : null,
         declared.map((f) => {
           const existing = item?.fields.find((x) => x.key === f.key);
           const secretKind = f.storage === "encrypted" && f.kind === "secret";
           const value = f.storage === "metadata" ? metaValue(f.key) : draft.values[f.key] ?? "";
           const hidden = existing && existing.handling !== "visible" && !(f.key in loaded);
-          return /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
+          return /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(
             EditRow,
             {
               label: f.label,
               value,
-              placeholder: hidden ? "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" : f.required ? "Required" : "",
+              placeholder: hidden ? "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" : f.required ? "Required" : isRecoveryCodesField(f) ? "Backup codes, one per line" : "",
               secret: secretKind,
               multiline: f.kind === "multiline",
               inputMode: f.kind === "url" ? "url" : USERNAME_KEYS.test(f.key) ? "email" : "text",
               onChange: (v) => setValue(f.key, v),
-              actions: /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_jsx_runtime26.Fragment, { children: [
-                hidden && existing?.handling === "revealable" && item?.capabilities.canReveal ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(EyeGlyph, {}), "aria-label": `Show current ${f.label}`, onClick: () => void loadForEdit(f.key) }) : null,
-                secretKind ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(GenerateButton, { onUse: (v) => setValue(f.key, v) }) : null,
-                existing ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_icons11.SettingsIcon, {}), "aria-label": `${f.label} settings`, onClick: () => onPanel(`field:${existing.id}`) }) : null
+              actions: /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_jsx_runtime27.Fragment, { children: [
+                hidden && existing?.handling === "revealable" && item?.capabilities.canReveal ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(EyeGlyph, {}), "aria-label": `Show current ${f.label}`, onClick: () => void loadForEdit(f.key) }) : null,
+                secretKind ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(GenerateButton, { onUse: (v) => setValue(f.key, v) }) : null,
+                existing ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_icons11.SettingsIcon, {}), "aria-label": `${f.label} settings`, onClick: () => onPanel(`field:${existing.id}`) }) : null
               ] })
             },
             f.key
           );
         }),
-        extraFields.map((f) => /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
+        extraFields.map((f) => /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(
           EditRow,
           {
             label: f.label,
@@ -6009,18 +6258,18 @@ function ItemPane(props) {
             onChange: (v) => setValue(f.key, v),
             onRemove: () => patch({ removed: [...draft.removed, f.id] }),
             removeLabel: `Delete ${f.label}`,
-            actions: /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_jsx_runtime26.Fragment, { children: [
-              f.handling === "revealable" && !(f.key in loaded) && item?.capabilities.canReveal ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(EyeGlyph, {}), "aria-label": `Show current ${f.label}`, onClick: () => void loadForEdit(f.key) }) : null,
-              /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_icons11.SettingsIcon, {}), "aria-label": `${f.label} settings`, onClick: () => onPanel(`field:${f.id}`) })
+            actions: /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_jsx_runtime27.Fragment, { children: [
+              f.handling === "revealable" && !(f.key in loaded) && item?.capabilities.canReveal ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(EyeGlyph, {}), "aria-label": `Show current ${f.label}`, onClick: () => void loadForEdit(f.key) }) : null,
+              /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_icons11.SettingsIcon, {}), "aria-label": `${f.label} settings`, onClick: () => onPanel(`field:${f.id}`) })
             ] })
           },
           f.id
         )),
-        draft.loginUrls.map((u, i) => /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
+        draft.loginUrls.map((u, i) => /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(
           EditRow,
           {
             label: i === 0 ? "Website" : `Website ${i + 1}`,
-            hint: destinations[i] && destinations[i].tone !== "success" ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: destinations[i].tone === "destructive" ? "text-destructive" : "text-warning", children: destinations[i].message }) : void 0,
+            hint: destinations[i] && destinations[i].tone !== "success" ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("span", { className: destinations[i].tone === "destructive" ? "text-destructive" : "text-warning", children: destinations[i].message }) : void 0,
             value: u,
             autoFocus: i > 0 && u === "" && i === draft.loginUrls.length - 1,
             placeholder: "https://",
@@ -6040,10 +6289,11 @@ function ItemPane(props) {
           },
           i
         )),
-        /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(AddRow, { label: draft.loginUrls.length === 0 ? "Website" : "", onAdd: () => patch({ loginUrls: [...draft.loginUrls, ""] }), children: draft.loginUrls.length === 0 ? "Add website" : "Add another website" }),
-        /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(TotpEditRow, { value: draft.authenticator, onChange: (v) => patch({ authenticator: v }), hasExisting: Boolean(item?.authenticator || seedField), item, port, onEnrolled: onChanged }),
-        item && isLogin && !item.authenticator ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(TwoFactorMethodRow, { port, item, onChanged }) : null,
-        recoveryEditing ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(AddRow, { label: draft.loginUrls.length === 0 ? "Website" : "", onAdd: () => patch({ loginUrls: [...draft.loginUrls, ""] }), children: draft.loginUrls.length === 0 ? "Add website" : "Add another website" }),
+        /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(TotpEditRow, { value: draft.authenticator, onChange: (v) => patch({ authenticator: v }), hasExisting: Boolean(item?.authenticator || seedField), item, port, onEnrolled: onChanged }),
+        item && isLogin && !item.authenticator ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(TwoFactorMethodRow, { port, item, onChanged }) : null,
+        !item && isLogin && draft.authenticator.trim() === "" ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(DraftTwoFactorRow, { custom: draft.custom, onCustom: (custom) => patch({ custom }) }) : null,
+        recoveryEditing ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(
           EditRow,
           {
             label: "Recovery codes",
@@ -6062,26 +6312,30 @@ function ItemPane(props) {
             },
             removeLabel: "Remove recovery codes"
           }
-        ) : !recoveryDeclared && !recoveryExtra && offerRecovery ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(AddRow, { label: "Recovery codes", onAdd: () => setShowRecovery(true), children: "Add backup codes" }) : null
+        ) : !recoveryDeclared && !recoveryExtra && offerRecovery ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(AddRow, { label: "Recovery codes", onAdd: () => setShowRecovery(true), children: "Add backup codes" }) : null
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(EditRow, { label: "Notes", value: draft.notes, multiline: true, placeholder: "Anything worth remembering", onChange: (v) => patch({ notes: v }) }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(
+      /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(EditRow, { label: "Notes", value: draft.notes, multiline: true, placeholder: "Anything worth remembering", onChange: (v) => patch({ notes: v }) }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(
         VaultSection,
         {
           title: "More",
-          actions: /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_design_system16.DropdownMenu, { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_design_system16.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_controls21.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(PlusGlyph, {}), children: "Add" }) }),
-            /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_design_system16.DropdownMenuContent, { align: "end", children: [
-              /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_design_system16.DropdownMenuItem, { onSelect: () => patch({ secrets: [...draft.secrets, { key: "", label: "", value: "" }] }), children: "Secret field" }),
-              /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_design_system16.DropdownMenuItem, { onSelect: () => patch({ custom: [...draft.custom, { key: `custom_${draft.custom.length + 1}_${Date.now() % 1e5}`, label: "", value: "" }] }), children: "Text field" }),
-              !tagsVisible ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_design_system16.DropdownMenuItem, { onSelect: () => setShowTags(true), children: "Tags" }) : null,
-              !descriptionVisible ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_design_system16.DropdownMenuItem, { onSelect: () => setShowDescription(true), children: "Description" }) : null,
-              !recoveryDeclared && !recoveryExtra && !recoveryEditing ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(import_design_system16.DropdownMenuItem, { onSelect: () => setShowRecovery(true), children: "Recovery codes" }) : null
+          actions: /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_design_system17.DropdownMenu, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_design_system17.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(PlusGlyph, {}), children: "Add" }) }),
+            /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_design_system17.DropdownMenuContent, { align: "end", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_design_system17.DropdownMenuItem, { onSelect: () => patch({ secrets: [...draft.secrets, { key: "", label: "", value: "" }] }), children: "Secret field" }),
+              /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_design_system17.DropdownMenuItem, { onSelect: () => patch({ custom: [...draft.custom, { key: `custom_${draft.custom.length + 1}_${Date.now() % 1e5}`, label: "", value: "" }] }), children: "Text field" }),
+              !tagsVisible ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_design_system17.DropdownMenuItem, { onSelect: () => setShowTags(true), children: "Tags" }) : null,
+              !descriptionVisible ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_design_system17.DropdownMenuItem, { onSelect: () => setShowDescription(true), children: "Description" }) : null,
+              mode === "new" && !showBrowser ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_design_system17.DropdownMenuItem, { onSelect: () => {
+                setShowBrowser(true);
+                if (!draft.browser) patch({ browser: defaultBrowserSettings(draft.loginUrls.some((u) => u.trim() !== "")) });
+              }, children: "Browser settings" }) : null,
+              !recoveryDeclared && !recoveryExtra && !recoveryEditing ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_design_system17.DropdownMenuItem, { onSelect: () => setShowRecovery(true), children: "Recovery codes" }) : null
             ] })
           ] }),
           children: [
-            descriptionVisible ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(EditRow, { label: "Description", value: draft.description, placeholder: "What this is for", onChange: (v) => patch({ description: v }) }) : null,
-            tagsVisible ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
+            descriptionVisible ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(EditRow, { label: "Description", value: draft.description, placeholder: "What this is for", onChange: (v) => patch({ description: v }) }) : null,
+            tagsVisible ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(
               EditRow,
               {
                 label: "Tags",
@@ -6093,49 +6347,50 @@ function ItemPane(props) {
                 }
               }
             ) : null,
-            draft.secrets.map((s, i) => /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(CustomEditRow, { label: s.label, value: s.value, secret: true, onLabel: (v) => patch({ secrets: draft.secrets.map((x, j) => j === i ? { ...x, label: v } : x) }), onValue: (v) => patch({ secrets: draft.secrets.map((x, j) => j === i ? { ...x, value: v } : x) }), onRemove: () => patch({ secrets: draft.secrets.filter((_, j) => j !== i) }) }, `s${i}`)),
-            extraCustom.map((c) => /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(CustomEditRow, { label: c.label, value: c.value, secret: false, onLabel: (v) => patch({ custom: draft.custom.map((x) => x.key === c.key ? { ...x, label: v } : x) }), onValue: (v) => patch({ custom: draft.custom.map((x) => x.key === c.key ? { ...x, value: v } : x) }), onRemove: () => patch({ custom: draft.custom.filter((x) => x.key !== c.key) }) }, c.key)),
-            !descriptionVisible && !tagsVisible && draft.secrets.length === 0 && extraCustom.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(AddRow, { label: "Tags", onAdd: () => setShowTags(true), children: "Add tags" }) : null
+            mode === "new" && showBrowser && draft.browser ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(DraftBrowserRows, { value: draft.browser, hasWebsite: draft.loginUrls.some((u) => u.trim() !== ""), onChange: (browser) => patch({ browser }) }) : null,
+            draft.secrets.map((s, i) => /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(SecretBuilderRow, { field: s, onChange: (p) => setDraft((d) => ({ ...d, secrets: d.secrets.map((x, j) => j === i ? { ...x, ...p } : x) })), onRemove: () => patch({ secrets: draft.secrets.filter((_, j) => j !== i) }) }, `s${i}`)),
+            extraCustom.map((c) => /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(CustomEditRow, { label: c.label, value: c.value, secret: false, onLabel: (v) => patch({ custom: draft.custom.map((x) => x.key === c.key ? { ...x, label: v } : x) }), onValue: (v) => patch({ custom: draft.custom.map((x) => x.key === c.key ? { ...x, value: v } : x) }), onRemove: () => patch({ custom: draft.custom.filter((x) => x.key !== c.key) }) }, c.key)),
+            !descriptionVisible && !tagsVisible && draft.secrets.length === 0 && extraCustom.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(AddRow, { label: "Tags", onAdd: () => setShowTags(true), children: "Add tags" }) : null
           ]
         }
       ),
-      filesProps ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(FilesSection, { ...filesProps, editing: true }) : null
-    ] }) : item ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_jsx_runtime26.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(VaultSection, { children: [
+      filesProps ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(FilesSection, { ...filesProps, editing: true }) : mode === "new" && owner !== "person" ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(DraftFilesSection, { files: queuedFiles, onFiles: setQueuedFiles }) : null
+    ] }) : item ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_jsx_runtime27.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(VaultSection, { children: [
         declared.map((f) => {
           if (f.storage === "metadata") {
             const v = metaValue(f.key);
-            return v ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(PlainRow, { label: f.label, value: v, openUrl: host.openUrl }, f.key) : null;
+            return v ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(PlainRow, { label: f.label, value: v, openUrl: host.openUrl }, f.key) : null;
           }
           const field = item.fields.find((x) => x.key === f.key);
-          if (isRecoveryCodesField(f)) return /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(RecoveryCodesRow, { item, field, port, onChanged }, f.key);
-          return field ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(SecretRow, { port, item, field, onTurnOn: turnOnOne(field) }, field.id) : null;
+          if (isRecoveryCodesField(f)) return /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(RecoveryCodesRow, { item, field, port, onChanged }, f.key);
+          return field ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(SecretRow, { port, item, field, onTurnOn: turnOnOne(field), extra: fieldSettings(field) }, field.id) : null;
         }),
-        extraFields.map((f) => isRecoveryCodesField(f) ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(RecoveryCodesRow, { item, field: f, port, onChanged }, f.id) : /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(SecretRow, { port, item, field: f, onTurnOn: turnOnOne(f) }, f.id)),
-        item.loginUrls.length > 0 ? item.loginUrls.map((u, i) => /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(PlainRow, { label: i === 0 ? "Website" : `Website ${i + 1}`, value: u, openUrl: host.openUrl }, `${u}-${i}`)) : /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(AddRow, { label: "Website", onAdd: canEdit ? () => onMode("edit") : null, children: "Add website" }),
-        item.authenticator ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(TotpRow, { port, item, onChanged }) : seedField && !seedField.active ? (
+        extraFields.map((f) => isRecoveryCodesField(f) ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(RecoveryCodesRow, { item, field: f, port, onChanged }, f.id) : /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(SecretRow, { port, item, field: f, onTurnOn: turnOnOne(f), extra: fieldSettings(f) }, f.id)),
+        item.loginUrls.length > 0 ? item.loginUrls.map((u, i) => /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(PlainRow, { label: i === 0 ? "Website" : `Website ${i + 1}`, value: u, openUrl: host.openUrl }, `${u}-${i}`)) : /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(AddRow, { label: "Website", onAdd: canEdit ? () => onMode("edit") : null, children: "Add website" }),
+        item.authenticator ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(TotpRow, { port, item, onChanged }) : seedField && !seedField.active ? (
           // The secret is still there, only off: turning it on brings the codes back. Never "Set up",
           // which would invite replacing a working two-factor secret.
-          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(VaultRow, { label: "Authenticator", actions: canTurnOn ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(TurnOnButton, { label: "Authenticator", onTurnOn: () => turnOn([seedField]) }) : null, children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "text-muted-foreground", children: "Turned off" }) })
-        ) : /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(AddRow, { label: "Authenticator", onAdd: canEdit ? () => setSettingUpOtp(true) : null, children: "Set up" }),
-        !recoveryDeclared && !recoveryExtra && offerRecovery ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(RecoveryCodesRow, { item, field: null, port, onChanged }) : null,
-        !item.authenticator && item.custom.some((c) => c.key === MFA_METHOD_KEY && c.value) ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(TwoFactorMethodRow, { port, item, onChanged }) : null
+          /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(VaultRow, { label: "Authenticator", actions: canTurnOn ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(TurnOnButton, { label: "Authenticator", onTurnOn: () => turnOn([seedField]) }) : null, children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("span", { className: "text-muted-foreground", children: "Turned off" }) })
+        ) : /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(AddRow, { label: "Authenticator", onAdd: canEdit ? () => setSettingUpOtp(true) : null, children: "Set up" }),
+        !recoveryDeclared && !recoveryExtra && offerRecovery ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(RecoveryCodesRow, { item, field: null, port, onChanged }) : null,
+        !item.authenticator && item.custom.some((c) => c.key === MFA_METHOD_KEY && c.value) ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(TwoFactorMethodRow, { port, item, onChanged }) : null
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(VaultSection, { children: item.notes ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(PlainRow, { label: "Notes", value: item.notes, multiline: true }) : /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(AddRow, { label: "Notes", onAdd: canEdit ? () => onMode("edit") : null, children: "Add notes" }) }),
-      item.description || item.tags.length > 0 || viewCustom.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(VaultSection, { title: "More", children: [
-        item.description ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(PlainRow, { label: "Description", value: item.description }) : null,
-        item.tags.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(VaultRow, { label: "Tags", children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { className: "flex flex-wrap gap-1", children: item.tags.map((t) => /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "rounded-md bg-muted px-1.5 py-0.5 text-xs", children: t }, t)) }) }) : null,
-        viewCustom.map((c) => /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(PlainRow, { label: c.label, value: c.value, openUrl: host.openUrl }, c.key))
+      /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(VaultSection, { children: item.notes ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(PlainRow, { label: "Notes", value: item.notes, multiline: true }) : /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(AddRow, { label: "Notes", onAdd: canEdit ? () => onMode("edit") : null, children: "Add notes" }) }),
+      item.description || item.tags.length > 0 || viewCustom.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(VaultSection, { title: "More", children: [
+        item.description ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(PlainRow, { label: "Description", value: item.description }) : null,
+        item.tags.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(VaultRow, { label: "Tags", children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("div", { className: "flex flex-wrap gap-1", children: item.tags.map((t) => /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("span", { className: "rounded-md bg-muted px-1.5 py-0.5 text-xs", children: t }, t)) }) }) : null,
+        viewCustom.map((c) => /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(PlainRow, { label: c.label, value: c.value, openUrl: host.openUrl }, c.key))
       ] }) : null,
-      filesProps ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(FilesSection, { ...filesProps, editing: false }) : null,
-      /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("p", { className: (0, import_design_system17.cn)("px-1 text-xs text-muted-foreground"), children: [
+      filesProps ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(FilesSection, { ...filesProps, editing: false }) : null,
+      /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("p", { className: (0, import_design_system18.cn)("px-1 text-xs text-muted-foreground"), children: [
         "Modified ",
         (0, import_format8.formatAbsoluteDate)(item.updatedAt, DAY_FORMAT, ""),
         " \xB7 Created ",
         (0, import_format8.formatAbsoluteDate)(item.createdAt, DAY_FORMAT, "")
       ] })
     ] }) : null }) }),
-    settingUpOtp && item ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
+    settingUpOtp && item ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(
       AddOtpPanel,
       {
         port,
@@ -6154,23 +6409,26 @@ function ItemPane(props) {
 }
 
 // src/ItemList.tsx
-var import_jsx_runtime27 = require("react/jsx-runtime");
+var import_jsx_runtime28 = require("react/jsx-runtime");
 var SORTS2 = [
-  { value: "name", label: "Name" },
+  { value: "name", label: "Name A\u2013Z" },
+  { value: "name-desc", label: "Name Z\u2013A" },
   { value: "website", label: "Website" },
   { value: "updated", label: "Recently changed" },
-  { value: "created", label: "Recently added" }
+  { value: "created", label: "Recently added" },
+  { value: "viewed", label: "Recently viewed" }
 ];
 function subtitleOf(item, withOwner) {
   const what = loginSiteOf(item) || item.definitionLabel;
   return withOwner ? `${what} \xB7 ${item.owner.label}` : what;
 }
-function ItemList({ title, items, definitions, port, selectedId, onSelect, query, onQuery, sort, onSort, onNew, matchingIds, header, showOwner }) {
+function ItemList({ title, items, definitions, port, selectedId, onSelect, query, onQuery, sort, onSort, onNew, matchingIds, header, showOwner, canSortViewed = false }) {
+  const sorts = SORTS2.filter((s) => canSortViewed || s.value !== "viewed");
   const pinned = matchingIds ? items.filter((i) => matchingIds.has(i.id)) : [];
   const rest = matchingIds ? items.filter((i) => !matchingIds.has(i.id)) : items;
   const ordered = [...pinned, ...rest];
-  const listRef = (0, import_react28.useRef)(null);
-  (0, import_react28.useEffect)(() => {
+  const listRef = (0, import_react29.useRef)(null);
+  (0, import_react29.useEffect)(() => {
     if (selectedId) listRef.current?.querySelector(`[data-item="${selectedId}"]`)?.scrollIntoView({ block: "nearest" });
   }, [selectedId, items.length]);
   const familyOf2 = (key) => definitions.find((d) => d.key === key)?.family ?? "generic";
@@ -6185,34 +6443,34 @@ function ItemList({ title, items, definitions, port, selectedId, onSelect, query
     }
   };
   const mixedOwners = showOwner ?? new Set(items.map((i) => i.owner.organizationId ?? i.owner.kind)).size > 1;
-  const row = (i) => /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(ListRow, { item: i, family: familyOf2(i.definitionKey), port, on: i.id === selectedId, onSelect, withOwner: mixedOwners }, i.id);
-  const sortLabel = SORTS2.find((s) => s.value === sort)?.label ?? "Name";
-  return /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("section", { "aria-label": title, className: "flex h-full min-h-0 flex-col border-r border-border bg-background", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("div", { className: "flex flex-col gap-2 px-3 pb-2 pt-3", children: [
+  const row = (i) => /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(ListRow, { item: i, family: familyOf2(i.definitionKey), port, on: i.id === selectedId, onSelect, withOwner: mixedOwners }, i.id);
+  const sortLabel = sorts.find((s) => s.value === sort)?.label ?? "Name A\u2013Z";
+  return /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("section", { "aria-label": title, className: "flex h-full min-h-0 flex-col border-r border-border bg-background", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: "flex flex-col gap-2 px-3 pb-2 pt-3", children: [
       header,
-      /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("div", { className: "flex items-center gap-2", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.SearchField, { value: query, onChange: (e) => onQuery(e.target.value), onKeyDown, placeholder: `Search ${title}`, className: "min-w-0 flex-1", "aria-label": "Search the vault" }),
-        /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "primary", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(PlusGlyph, {}), "aria-label": "New item", onClick: onNew })
+      /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: "flex items-center gap-2", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.SearchField, { value: query, onChange: (e) => onQuery(e.target.value), onKeyDown, placeholder: `Search ${title}`, className: "min-w-0 flex-1", "aria-label": "Search the vault" }),
+        /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "primary", icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(PlusGlyph, {}), "aria-label": "New item", onClick: onNew })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("div", { className: "flex items-center justify-between gap-2 px-1", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("span", { className: "truncate text-xs text-muted-foreground", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: "flex items-center justify-between gap-2 px-1", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("span", { className: "truncate text-xs text-muted-foreground", children: [
           items.length,
           " ",
           items.length === 1 ? "item" : "items"
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(import_design_system18.DropdownMenu, { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_design_system18.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(SortGlyph, {}), "aria-label": `Sort: ${sortLabel}`, children: sortLabel }) }),
-          /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_design_system18.DropdownMenuContent, { align: "end", children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_design_system18.DropdownMenuRadioGroup, { value: sort, onValueChange: (v) => onSort(SORTS2.find((s) => s.value === v)?.value ?? "name"), children: SORTS2.map((s) => /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_design_system18.DropdownMenuRadioItem, { value: s.value, children: s.label }, s.value)) }) })
+        /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenu, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(SortGlyph, {}), "aria-label": `Sort: ${sortLabel}`, children: sortLabel }) }),
+          /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuContent, { align: "end", children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuRadioGroup, { value: sort, onValueChange: (v) => onSort(sorts.find((s) => s.value === v)?.value ?? "name"), children: sorts.map((s) => /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuRadioItem, { value: s.value, children: s.label }, s.value)) }) })
         ] })
       ] })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("div", { className: "min-h-0 flex-1 overflow-y-auto px-2 pb-3", onKeyDown, children: items.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("div", { className: "flex flex-col items-center gap-3 px-4 py-12 text-center", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("span", { className: "text-sm text-muted-foreground", children: query ? `Nothing matches \u201C${query}\u201D.` : "Nothing here yet." }),
-      query ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "outline", onClick: () => onQuery(""), children: "Clear search" }) : /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(PlusGlyph, {}), onClick: onNew, children: "New item" })
-    ] }) : /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("ul", { ref: listRef, className: "flex flex-col gap-px", children: [
-      pinned.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("li", { className: "px-2 pb-1 pt-1 text-xs font-medium text-muted-foreground", children: "This page" }) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("div", { className: "min-h-0 flex-1 overflow-y-auto px-2 pb-3", onKeyDown, children: items.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: "flex flex-col items-center gap-3 px-4 py-12 text-center", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("span", { className: "text-sm text-muted-foreground", children: query ? `Nothing matches \u201C${query}\u201D.` : "Nothing here yet." }),
+      query ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "outline", onClick: () => onQuery(""), children: "Clear search" }) : /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(PlusGlyph, {}), onClick: onNew, children: "New item" })
+    ] }) : /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("ul", { ref: listRef, className: "flex flex-col gap-px", children: [
+      pinned.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("li", { className: "px-2 pb-1 pt-1 text-xs font-medium text-muted-foreground", children: "This page" }) : null,
       pinned.map(row),
-      pinned.length > 0 && rest.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("li", { className: "px-2 pb-1 pt-3 text-xs font-medium text-muted-foreground", children: "Everything else" }) : null,
+      pinned.length > 0 && rest.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("li", { className: "px-2 pb-1 pt-3 text-xs font-medium text-muted-foreground", children: "Everything else" }) : null,
       rest.map(row)
     ] }) })
   ] });
@@ -6221,48 +6479,93 @@ function ListRow({ item, family, port, on, onSelect, withOwner }) {
   const confirmed = useConfirmed();
   const copy = useCopy();
   const notify = useNotify();
-  const [busy, setBusy] = (0, import_react28.useState)(false);
-  const user = item.fields.find((f) => USERNAME_KEYS.test(f.key) && f.handling !== "sealed");
-  const secret = item.fields.find((f) => f.key === "password" && f.handling === "revealable");
-  const quick = async (key, label) => {
+  const [busy, setBusy] = (0, import_react29.useState)(false);
+  const [menuOpen, setMenuOpen] = (0, import_react29.useState)(false);
+  const canUse = item.capabilities.canUse;
+  const user = canUse ? item.fields.find((f) => USERNAME_KEYS.test(f.key) && f.handling !== "sealed" && f.active !== false) : void 0;
+  const secret = canUse && item.capabilities.canReveal ? item.fields.find((f) => f.key === "password" && f.handling === "revealable" && f.active !== false) : void 0;
+  const code = canUse && item.authenticator?.enabled ? item.authenticator : null;
+  const run = async (label, read, isSecret) => {
     setBusy(true);
     try {
-      const v = await confirmed(() => port.reveal(item, key));
-      await copy(v, label, { secret: key !== user?.key || user.handling !== "visible" });
+      const v = await confirmed(read);
+      await copy(v, label, { secret: isSecret });
     } catch (e) {
       if (!wasCancelled(e)) notify(e instanceof Error ? e.message : `${label} could not be read`, "error");
     } finally {
       setBusy(false);
     }
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("li", { className: "group relative", "data-item": item.id, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(
+  const copyUser = () => user && void run(user.label, () => port.reveal(item, user.key), user.handling !== "visible");
+  const copyPassword = () => secret && void run("Password", () => port.reveal(item, secret.key), true);
+  const copyCode = () => code && void run("One-time code", async () => (await port.authenticator.code(item)).code, true);
+  const copyName = () => void copy(item.name, "Name", { secret: false });
+  return /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("li", { className: "group relative", "data-item": item.id, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(
       "button",
       {
         type: "button",
         "aria-current": on ? "true" : void 0,
         "data-surface": on ? "primary" : void 0,
         onClick: () => onSelect(item.id),
-        className: (0, import_design_system19.cn)("flex h-12 w-full items-center gap-3 rounded-lg px-2 text-left", on ? "bg-primary text-primary-foreground" : "hover:bg-accent"),
+        className: (0, import_design_system20.cn)("flex h-12 w-full items-center gap-3 rounded-lg px-2 pr-10 text-left", on ? "bg-primary text-primary-foreground" : "hover:bg-accent"),
         children: [
-          /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(ItemIcon, { definitionKey: item.definitionKey, family, site: loginSiteOf(item), inverted: on }),
-          /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("span", { className: "flex min-w-0 flex-1 flex-col leading-tight", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("span", { className: "truncate text-sm font-medium", children: item.name }),
-            /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: subtitleOf(item, withOwner) })
+          /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(ItemIcon, { definitionKey: item.definitionKey, family, site: loginSiteOf(item), inverted: on }),
+          /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("span", { className: "flex min-w-0 flex-1 flex-col leading-tight", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("span", { className: "truncate text-sm font-medium", children: item.name }),
+            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: subtitleOf(item, withOwner) })
           ] })
         ]
       }
     ),
-    item.capabilities.canUse && (user || secret && item.capabilities.canReveal) ? /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("div", { className: (0, import_design_system19.cn)("absolute right-1.5 top-1/2 hidden -translate-y-1/2 items-center gap-0.5 rounded-md pl-2 group-hover:flex", on ? "bg-primary" : "bg-accent"), "data-surface": on ? "primary" : void 0, children: [
-      user ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(UserGlyph, {}), "aria-label": `Copy ${user.label}`, disabled: busy, onClick: () => void quick(user.key, user.label) }) : null,
-      secret && item.capabilities.canReveal ? /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(import_controls22.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(KeyGlyph, {}), "aria-label": "Copy password", disabled: busy, onClick: () => void quick(secret.key, "Password") }) : null
-    ] }) : null
+    /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: "absolute right-1.5 top-1/2 flex -translate-y-1/2 items-center gap-0.5", "data-surface": on ? "primary" : void 0, children: [
+      user || secret ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: (0, import_design_system20.cn)("hidden items-center gap-0.5 rounded-md pl-2 [@media(hover:hover)]:group-hover:flex [@media(hover:hover)]:group-focus-within:flex", on ? "bg-primary" : "bg-accent"), "data-row-quick": "", children: [
+        user ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(UserGlyph, {}), "aria-label": `Copy ${user.label}`, disabled: busy, onClick: copyUser }) : null,
+        secret ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(KeyGlyph, {}), "aria-label": "Copy password", disabled: busy, onClick: copyPassword }) : null
+      ] }) : null,
+      /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenu, { open: menuOpen, onOpenChange: setMenuOpen, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(
+          import_controls23.Button,
+          {
+            variant: "quiet",
+            icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(MoreGlyph, {}),
+            "aria-label": `Actions for ${item.name}`,
+            disabled: busy,
+            className: (0, import_design_system20.cn)("[@media(hover:hover)]:invisible [@media(hover:hover)]:group-hover:visible [@media(hover:hover)]:group-focus-within:visible", menuOpen && "[@media(hover:hover)]:visible")
+          }
+        ) }),
+        /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuContent, { align: "end", children: [
+          user ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: copyUser, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(UserGlyph, { className: "size-4" }),
+            "Copy ",
+            user.label.toLowerCase()
+          ] }) : null,
+          secret ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: copyPassword, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(KeyGlyph, { className: "size-4" }),
+            "Copy password"
+          ] }) : null,
+          code ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: copyCode, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(ClockGlyph, { className: "size-4" }),
+            "Copy one-time code"
+          ] }) : null,
+          user || secret || code ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuSeparator, {}) : null,
+          /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: () => onSelect(item.id), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(ChevronRightGlyph, { className: "size-4" }),
+            "Open"
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: copyName, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_icons12.CopyIcon, { className: "size-4" }),
+            "Copy name"
+          ] })
+        ] })
+      ] })
+    ] })
   ] });
 }
 
 // src/lists/TrashView.tsx
-var import_react30 = require("react");
-var import_controls24 = require("@ai-matrx/design-system/controls");
+var import_react31 = require("react");
+var import_controls25 = require("@ai-matrx/design-system/controls");
 var import_format9 = require("@ai-matrx/kit/format");
 
 // src/lists/logic.ts
@@ -6335,16 +6638,16 @@ function refusalText(reason) {
 }
 
 // src/lists/RestorePanel.tsx
-var import_react29 = require("react");
-var import_controls23 = require("@ai-matrx/design-system/controls");
-var import_jsx_runtime28 = require("react/jsx-runtime");
+var import_react30 = require("react");
+var import_controls24 = require("@ai-matrx/design-system/controls");
+var import_jsx_runtime29 = require("react/jsx-runtime");
 var count = (n, one) => `${n} ${one}${n === 1 ? "" : "s"}`;
 function RestorePanel({ lists, item, restore, onClose }) {
-  const [preview, setPreview] = (0, import_react29.useState)(null);
-  const [error, setError] = (0, import_react29.useState)(null);
-  const [busy, setBusy] = (0, import_react29.useState)(false);
-  const [loading, setLoading] = (0, import_react29.useState)(Boolean(lists.preview));
-  (0, import_react29.useEffect)(() => {
+  const [preview, setPreview] = (0, import_react30.useState)(null);
+  const [error, setError] = (0, import_react30.useState)(null);
+  const [busy, setBusy] = (0, import_react30.useState)(false);
+  const [loading, setLoading] = (0, import_react30.useState)(Boolean(lists.preview));
+  (0, import_react30.useEffect)(() => {
     if (!lists.preview) return;
     let live = true;
     lists.preview(item).then(
@@ -6376,41 +6679,41 @@ function RestorePanel({ lists, item, restore, onClose }) {
       setBusy(false);
     }
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)(
     Panel,
     {
       title: `Restore "${item.name}"`,
       size: "md",
       onClose,
-      footer: /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_jsx_runtime28.Fragment, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "quiet", onClick: onClose, children: refused ? "Close" : "Cancel" }),
-        refused ? null : /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "primary", icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(RestoreGlyph, {}), disabled: busy || loading || lists.preview !== void 0 && preview === null, onClick: () => void run(), children: busy ? "Restoring\u2026" : "Restore" })
+      footer: /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)(import_jsx_runtime29.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(import_controls24.Button, { variant: "quiet", onClick: onClose, children: refused ? "Close" : "Cancel" }),
+        refused ? null : /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(import_controls24.Button, { variant: "primary", icon: /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(RestoreGlyph, {}), disabled: busy || loading || lists.preview !== void 0 && preview === null, onClick: () => void run(), children: busy ? "Restoring\u2026" : "Restore" })
       ] }),
       children: [
-        loading ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Empty, { children: "Checking what comes back\u2026" }) }) : preview?.supported ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(VaultSection, { title: "Comes back", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(VaultRow, { label: "Fields", children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("span", { className: "text-foreground", children: count(preview.fields, "field") }) }),
-          /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(VaultRow, { label: "Files", children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("span", { className: "text-foreground", children: count(preview.attachments, "file") }) }),
-          preview.passkeys === 1 ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(VaultRow, { label: "Passkey", hint: "Not turned on; the site may not accept it", children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("span", { className: "text-foreground", children: "1 passkey" }) }) : null,
-          /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(VaultRow, { label: "Stays off", hint: "Turn each back on yourself", children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("span", { className: "text-muted-foreground", children: "Sharing, browser fill, codes, sandboxes, agents" }) }),
-          preview.priorWasDisabled ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(VaultRow, { label: "Before", children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("span", { className: "text-muted-foreground", children: "It was already off before it was deleted." }) }) : null
-        ] }) : preview ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Empty, { children: refusalText(preview.reason) }) }) : /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Empty, { children: "It comes back turned off: sharing, browser fill, codes and sandbox use stay off." }) }),
-        error ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("p", { role: "alert", className: "px-1 text-sm text-destructive", children: error }) : null
+        loading ? /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(Empty, { children: "Checking what comes back\u2026" }) }) : preview?.supported ? /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)(VaultSection, { title: "Comes back", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(VaultRow, { label: "Fields", children: /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("span", { className: "text-foreground", children: count(preview.fields, "field") }) }),
+          /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(VaultRow, { label: "Files", children: /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("span", { className: "text-foreground", children: count(preview.attachments, "file") }) }),
+          preview.passkeys === 1 ? /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(VaultRow, { label: "Passkey", hint: "Not turned on; the site may not accept it", children: /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("span", { className: "text-foreground", children: "1 passkey" }) }) : null,
+          /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(VaultRow, { label: "Stays off", hint: "Turn each back on yourself", children: /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("span", { className: "text-muted-foreground", children: "Sharing, browser fill, codes, sandboxes, agents" }) }),
+          preview.priorWasDisabled ? /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(VaultRow, { label: "Before", children: /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("span", { className: "text-muted-foreground", children: "It was already off before it was deleted." }) }) : null
+        ] }) : preview ? /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(Empty, { children: refusalText(preview.reason) }) }) : /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(Empty, { children: "It comes back turned off: sharing, browser fill, codes and sandbox use stay off." }) }),
+        error ? /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("p", { role: "alert", className: "px-1 text-sm text-destructive", children: error }) : null
       ]
     }
   );
 }
 
 // src/lists/TrashView.tsx
-var import_jsx_runtime29 = require("react/jsx-runtime");
+var import_jsx_runtime30 = require("react/jsx-runtime");
 function trashLineOf(item) {
   return [item.definitionLabel || null, item.owner.label, item.deletion?.deletedAt ? `Deleted ${(0, import_format9.formatAbsoluteDate)(item.deletion.deletedAt, DAY_FORMAT, "")}` : null].filter(Boolean).join(" \xB7 ");
 }
 function TrashView({ port, deleted, query, header, onChanged }) {
   const confirmed = useConfirmed();
-  const [busyId, setBusyId] = (0, import_react30.useState)(null);
-  const [message2, setMessage] = (0, import_react30.useState)(null);
+  const [busyId, setBusyId] = (0, import_react31.useState)(null);
+  const [message2, setMessage] = (0, import_react31.useState)(null);
   const shown = deleted.filter((i) => trashItemMatchesQuery(i, query));
-  const [restoring, setRestoring] = (0, import_react30.useState)(null);
+  const [restoring, setRestoring] = (0, import_react31.useState)(null);
   const restore = async (item, deletionId) => {
     setBusyId(item.id);
     setMessage(null);
@@ -6426,35 +6729,35 @@ function TrashView({ port, deleted, query, header, onChanged }) {
       setBusyId(null);
     }
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("div", { className: "flex min-h-0 flex-1 flex-col gap-3 overflow-y-auto p-3", children: [
+  return /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "flex min-h-0 flex-1 flex-col gap-3 overflow-y-auto p-3", children: [
     header,
-    /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(VaultSection, { title: "Trash", children: shown.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(Empty, { children: deleted.length === 0 ? "The trash is empty." : "Nothing matches." }) : shown.map((item) => (
+    /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(VaultSection, { title: "Trash", children: shown.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(Empty, { children: deleted.length === 0 ? "The trash is empty." : "Nothing matches." }) : shown.map((item) => (
       // A list row, not a field row: the name gets the whole width (on a phone a label column
       // left "Vau…" for every row), the deletion date sits under it.
-      /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("div", { className: "flex min-h-12 items-center gap-3 px-3 py-1.5 sm:px-4", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("span", { className: "flex min-w-0 flex-1 flex-col leading-tight", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("span", { className: "truncate text-sm text-foreground", children: item.name }),
-          /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: trashLineOf(item) })
+      /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "flex min-h-12 items-center gap-3 px-3 py-1.5 sm:px-4", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("span", { className: "flex min-w-0 flex-1 flex-col leading-tight", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("span", { className: "truncate text-sm text-foreground", children: item.name }),
+          /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: trashLineOf(item) })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(import_controls24.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(RestoreGlyph, {}), disabled: busyId !== null || !item.deletion, onClick: () => setRestoring(item), children: "Restore" })
+        /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(import_controls25.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(RestoreGlyph, {}), disabled: busyId !== null || !item.deletion, onClick: () => setRestoring(item), children: "Restore" })
       ] }, item.id)
     )) }),
-    restoring ? /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(RestorePanel, { lists: port.lists, item: restoring, restore: (deletionId) => restore(restoring, deletionId), onClose: () => setRestoring(null) }) : null,
-    message2 ? /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("p", { role: "status", className: message2.tone === "error" ? "px-1 text-sm text-destructive" : "px-1 text-sm text-muted-foreground", children: message2.text }) : null
+    restoring ? /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(RestorePanel, { lists: port.lists, item: restoring, restore: (deletionId) => restore(restoring, deletionId), onClose: () => setRestoring(null) }) : null,
+    message2 ? /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("p", { role: "status", className: message2.tone === "error" ? "px-1 text-sm text-destructive" : "px-1 text-sm text-muted-foreground", children: message2.text }) : null
   ] });
 }
 
 // src/NewItemFlow.tsx
-var import_react31 = require("react");
-var import_design_system20 = require("@ai-matrx/design-system");
-var import_controls25 = require("@ai-matrx/design-system/controls");
-var import_icons12 = require("@ai-matrx/design-system/icons");
-var import_jsx_runtime30 = require("react/jsx-runtime");
+var import_react32 = require("react");
+var import_design_system21 = require("@ai-matrx/design-system");
+var import_controls26 = require("@ai-matrx/design-system/controls");
+var import_icons13 = require("@ai-matrx/design-system/icons");
+var import_jsx_runtime31 = require("react/jsx-runtime");
 function NewItemFlow({ definitions, url, onUrl, onChoose, onCancel }) {
-  const [search, setSearch] = (0, import_react31.useState)("");
-  const guess = (0, import_react31.useMemo)(() => inferFromUrl(url, definitions), [url, definitions]);
+  const [search, setSearch] = (0, import_react32.useState)("");
+  const guess = (0, import_react32.useMemo)(() => inferFromUrl(url, definitions), [url, definitions]);
   const common = COMMON_DEFINITION_KEYS.map((k) => definitions.find((d) => d.key === k)).filter((d) => d !== void 0);
-  const matches = (0, import_react31.useMemo)(() => {
+  const matches = (0, import_react32.useMemo)(() => {
     const q = search.trim().toLowerCase();
     if (!q) return [];
     return definitions.filter((d) => `${d.label} ${d.key} ${d.providerKey ?? ""} ${FAMILY_LABELS[d.family] ?? ""}`.toLowerCase().includes(q)).slice(0, 60);
@@ -6463,15 +6766,15 @@ function NewItemFlow({ definitions, url, onUrl, onChoose, onCancel }) {
   const alternatives = (guess?.alternatives ?? []).map((k) => definitions.find((d) => d.key === k)).filter((d) => d !== void 0).slice(0, 4);
   const use = (d) => onChoose(d.key, guess?.name ?? "", guess?.url ?? url.trim());
   const shown = search.trim() ? matches : common;
-  return /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "flex h-full min-h-0 flex-col bg-background", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("header", { className: "flex min-h-14 items-center gap-2 border-b border-border px-3 sm:px-5", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(import_controls25.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(ChevronLeftGlyph, {}), "aria-label": "Cancel", onClick: onCancel }),
-      /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("h2", { className: "text-base font-semibold", children: "New item" })
+  return /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("div", { className: "flex h-full min-h-0 flex-col bg-background", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("header", { className: "flex min-h-14 items-center gap-2 border-b border-border px-3 sm:px-5", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(ChevronLeftGlyph, {}), "aria-label": "Cancel", onClick: onCancel }),
+      /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("h2", { className: "text-base font-semibold", children: "New item" })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("div", { className: "min-h-0 flex-1 overflow-y-auto", children: /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "mx-auto flex w-full max-w-2xl flex-col gap-8 px-4 py-8 sm:px-6 sm:py-12", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "flex flex-col gap-3", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(
-          import_controls25.Field,
+    /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("div", { className: "min-h-0 flex-1 overflow-y-auto", children: /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("div", { className: "mx-auto flex w-full max-w-2xl flex-col gap-8 px-4 py-8 sm:px-6 sm:py-12", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("div", { className: "flex flex-col gap-3", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(
+          import_controls26.Field,
           {
             hero: true,
             value: url,
@@ -6483,45 +6786,45 @@ function NewItemFlow({ definitions, url, onUrl, onChoose, onCancel }) {
             "aria-label": "Website address",
             inputMode: "url",
             autoFocus: true,
-            icon: /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(import_icons12.GlobeIcon, {})
+            icon: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_icons13.GlobeIcon, {})
           }
         ),
-        guess && login ? /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "flex flex-col gap-2 rounded-xl border border-border bg-card p-3", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "flex items-center gap-3", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("span", { "aria-hidden": true, className: "flex size-9 shrink-0 items-center justify-center rounded-lg bg-muted text-sm font-semibold", children: guess.name.charAt(0).toUpperCase() }),
-            /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "flex min-w-0 flex-1 flex-col", children: [
-              /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("span", { className: "truncate text-sm font-medium", children: guess.name }),
-              /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: guess.url.replace(/^https?:\/\//, "") })
+        guess && login ? /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("div", { className: "flex flex-col gap-2 rounded-xl border border-border bg-card p-3", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("div", { className: "flex items-center gap-3", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("span", { "aria-hidden": true, className: "flex size-9 shrink-0 items-center justify-center rounded-lg bg-muted text-sm font-semibold", children: guess.name.charAt(0).toUpperCase() }),
+            /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("div", { className: "flex min-w-0 flex-1 flex-col", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("span", { className: "truncate text-sm font-medium", children: guess.name }),
+              /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: guess.url.replace(/^https?:\/\//, "") })
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(import_controls25.Button, { variant: "primary", onClick: () => use(login), children: "Save login" })
+            /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.Button, { variant: "primary", onClick: () => use(login), children: "Save login" })
           ] }),
-          alternatives.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "flex flex-wrap items-center gap-1.5 pl-12", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("span", { className: "text-xs text-muted-foreground", children: "Or" }),
-            alternatives.map((d) => /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(import_controls25.Button, { variant: "outline", onClick: () => use(d), children: d.label }, d.key))
+          alternatives.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("div", { className: "flex flex-wrap items-center gap-1.5 pl-12", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("span", { className: "text-xs text-muted-foreground", children: "Or" }),
+            alternatives.map((d) => /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.Button, { variant: "outline", onClick: () => use(d), children: d.label }, d.key))
           ] }) : null
-        ] }) : url.trim() ? /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("p", { className: "px-1 text-sm text-muted-foreground", children: "Not a website address. Pick a type below; it is kept." }) : null
+        ] }) : url.trim() ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("p", { className: "px-1 text-sm text-muted-foreground", children: "Not a website address. Pick a type below; it is kept." }) : null
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "flex flex-col gap-3", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("div", { className: "flex items-center justify-between gap-3", children: /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("h3", { className: "text-xs font-medium text-muted-foreground", children: search.trim() ? "Matching types" : "Or choose a type" }) }),
-        /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("ul", { className: "grid grid-cols-1 gap-2 sm:grid-cols-2", children: shown.map((d) => {
+      /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("div", { className: "flex flex-col gap-3", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("div", { className: "flex items-center justify-between gap-3", children: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("h3", { className: "text-xs font-medium text-muted-foreground", children: search.trim() ? "Matching types" : "Or choose a type" }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("ul", { className: "grid grid-cols-1 gap-2 sm:grid-cols-2", children: shown.map((d) => {
           const Icon = definitionGlyph(d.key, d.family);
-          return /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("li", { children: /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("button", { type: "button", onClick: () => use(d), className: (0, import_design_system20.cn)("flex h-12 w-full items-center gap-3 rounded-xl border border-border bg-card px-3 text-left hover:bg-accent"), children: [
-            /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("span", { className: "flex size-8 shrink-0 items-center justify-center rounded-lg bg-muted", children: /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(Icon, { className: "size-4" }) }),
-            /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("span", { className: "min-w-0 flex-1 truncate text-sm font-medium", children: d.label })
+          return /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("li", { children: /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("button", { type: "button", onClick: () => use(d), className: (0, import_design_system21.cn)("flex h-12 w-full items-center gap-3 rounded-xl border border-border bg-card px-3 text-left hover:bg-accent"), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("span", { className: "flex size-8 shrink-0 items-center justify-center rounded-lg bg-muted", children: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(Icon, { className: "size-4" }) }),
+            /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("span", { className: "min-w-0 flex-1 truncate text-sm font-medium", children: d.label })
           ] }) }, d.key);
         }) }),
-        search.trim() && matches.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("p", { className: "px-1 text-sm text-muted-foreground", children: "No type matches." }) : null,
-        /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(import_controls25.SearchField, { value: search, onChange: (e) => setSearch(e.target.value), placeholder: `Search all ${definitions.length} types`, "aria-label": "Search types" })
+        search.trim() && matches.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("p", { className: "px-1 text-sm text-muted-foreground", children: "No type matches." }) : null,
+        /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.SearchField, { value: search, onChange: (e) => setSearch(e.target.value), placeholder: `Search all ${definitions.length} types`, "aria-label": "Search types" })
       ] })
     ] }) })
   ] });
 }
 
 // src/sharing/SecureLinkPanel.tsx
-var import_react32 = require("react");
-var import_confirm_opener10 = require("@ai-matrx/kit/confirm-opener");
-var import_design_system21 = require("@ai-matrx/design-system");
-var import_controls26 = require("@ai-matrx/design-system/controls");
+var import_react33 = require("react");
+var import_confirm_opener11 = require("@ai-matrx/kit/confirm-opener");
+var import_design_system22 = require("@ai-matrx/design-system");
+var import_controls27 = require("@ai-matrx/design-system/controls");
 var import_format11 = require("@ai-matrx/kit/format");
 
 // src/sharing/secure-link-logic.ts
@@ -6597,24 +6900,24 @@ function sortSent(rows) {
 }
 
 // src/sharing/SecureLinkPanel.tsx
-var import_jsx_runtime31 = require("react/jsx-runtime");
+var import_jsx_runtime32 = require("react/jsx-runtime");
 function SecureLinkPanel({ item, port, onClose }) {
   const sharing = port.sharing;
   const { busy, error, notice, run, setNotice } = useConfirmedChange();
-  const [remedy, setRemedy] = (0, import_react32.useState)(null);
-  const [options, setOptions] = (0, import_react32.useState)(null);
-  const [optionsError, setOptionsError] = (0, import_react32.useState)(null);
-  const [sent, setSent] = (0, import_react32.useState)(null);
-  const [sentError, setSentError] = (0, import_react32.useState)(null);
-  const [nonce, setNonce] = (0, import_react32.useState)(0);
-  const [email, setEmail] = (0, import_react32.useState)("");
-  const [phone, setPhone] = (0, import_react32.useState)("");
-  const [name, setName] = (0, import_react32.useState)("");
-  const [linkBy, setLinkBy] = (0, import_react32.useState)("email");
-  const [fields, setFields] = (0, import_react32.useState)([]);
-  const [note, setNote] = (0, import_react32.useState)("");
-  const [sameChannelSent, setSameChannelSent] = (0, import_react32.useState)(false);
-  (0, import_react32.useEffect)(() => {
+  const [remedy, setRemedy] = (0, import_react33.useState)(null);
+  const [options, setOptions] = (0, import_react33.useState)(null);
+  const [optionsError, setOptionsError] = (0, import_react33.useState)(null);
+  const [sent, setSent] = (0, import_react33.useState)(null);
+  const [sentError, setSentError] = (0, import_react33.useState)(null);
+  const [nonce, setNonce] = (0, import_react33.useState)(0);
+  const [email, setEmail] = (0, import_react33.useState)("");
+  const [phone, setPhone] = (0, import_react33.useState)("");
+  const [name, setName] = (0, import_react33.useState)("");
+  const [linkBy, setLinkBy] = (0, import_react33.useState)("email");
+  const [fields, setFields] = (0, import_react33.useState)([]);
+  const [note, setNote] = (0, import_react33.useState)("");
+  const [sameChannelSent, setSameChannelSent] = (0, import_react33.useState)(false);
+  (0, import_react33.useEffect)(() => {
     let live = true;
     setOptionsError(null);
     sharing.secureLinkOptions(item).then(
@@ -6629,7 +6932,7 @@ function SecureLinkPanel({ item, port, onClose }) {
       live = false;
     };
   }, [sharing, item]);
-  (0, import_react32.useEffect)(() => {
+  (0, import_react33.useEffect)(() => {
     const list = sharing.sentSecureLinks;
     if (!list) return;
     let live = true;
@@ -6642,9 +6945,9 @@ function SecureLinkPanel({ item, port, onClose }) {
       live = false;
     };
   }, [sharing, item, nonce]);
-  const [phoneTyped, setPhoneTyped] = (0, import_react32.useState)(false);
-  const prefilled = (0, import_react32.useRef)(false);
-  (0, import_react32.useEffect)(() => {
+  const [phoneTyped, setPhoneTyped] = (0, import_react33.useState)(false);
+  const prefilled = (0, import_react33.useRef)(false);
+  (0, import_react33.useEffect)(() => {
     const lookup = sharing.phoneOnFile;
     if (!lookup || phoneTyped) return;
     const clear = () => {
@@ -6706,7 +7009,7 @@ function SecureLinkPanel({ item, port, onClose }) {
     setNonce((n) => n + 1);
   };
   const turnOff = async (row) => {
-    const ok = await (0, import_confirm_opener10.confirm)({
+    const ok = await (0, import_confirm_opener11.confirm)({
       title: "Turn off this link?",
       description: `The link to ${recipientOf(row)} stops working at once and what it carries is deleted. They will need a new one.`,
       confirmLabel: "Turn off",
@@ -6719,23 +7022,23 @@ function SecureLinkPanel({ item, port, onClose }) {
     setNonce((n) => n + 1);
   };
   const toggle2 = (key, on) => setFields((cur) => on ? [...cur.filter((k) => k !== key), key] : cur.filter((k) => k !== key));
-  return /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)(
     Panel,
     {
       title: "Send securely",
       size: "md",
       onClose,
-      footer: /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)(PanelFooter, { status: error || notice ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(StatusLine, { error, notice }) : null, children: [
-        sameChannelSent && !error ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.Badge, { tone: "warning", children: "Both by email" }) : null,
-        /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.Button, { variant: "quiet", onClick: onClose, children: "Close" }),
-        /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.Button, { variant: "primary", disabled: !canSend, onClick: () => void send(), children: busy === "send" ? "Sending\u2026" : "Send link" })
+      footer: /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)(PanelFooter, { status: error || notice ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(StatusLine, { error, notice }) : null, children: [
+        sameChannelSent && !error ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Badge, { tone: "warning", children: "Both by email" }) : null,
+        /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Button, { variant: "quiet", onClick: onClose, children: "Close" }),
+        /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Button, { variant: "primary", disabled: !canSend, onClick: () => void send(), children: busy === "send" ? "Sending\u2026" : "Send link" })
       ] }),
       children: [
-        remedy ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("p", { className: "px-1 text-xs text-muted-foreground", children: remedy }) : null,
-        /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)(VaultSection, { title: "Recipient", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(VaultRow, { label: "Email", children: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.Field, { type: "email", autoComplete: "off", placeholder: "name@example.com", "aria-label": "Their email", value: email, onChange: (e) => setEmail(e.target.value), className: "w-full" }) }),
-          /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(VaultRow, { label: "Mobile", hint: "For the code", children: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(
-            import_controls26.Field,
+        remedy ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("p", { className: "px-1 text-xs text-muted-foreground", children: remedy }) : null,
+        /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)(VaultSection, { title: "Recipient", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultRow, { label: "Email", children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Field, { type: "email", autoComplete: "off", placeholder: "name@example.com", "aria-label": "Their email", value: email, onChange: (e) => setEmail(e.target.value), className: "w-full" }) }),
+          /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultRow, { label: "Mobile", hint: "For the code", children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(
+            import_controls27.Field,
             {
               type: "tel",
               autoComplete: "off",
@@ -6750,9 +7053,9 @@ function SecureLinkPanel({ item, port, onClose }) {
               className: "w-full"
             }
           ) }),
-          /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(VaultRow, { label: "Name", hint: "Optional", children: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.Field, { autoComplete: "off", placeholder: "Their name", "aria-label": "Their name", value: name, onChange: (e) => setName(e.target.value), className: "w-full" }) }),
-          plan && !plan.same ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(VaultRow, { label: "Link by", children: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(
-            import_controls26.SegmentedControl,
+          /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultRow, { label: "Name", hint: "Optional", children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Field, { autoComplete: "off", placeholder: "Their name", "aria-label": "Their name", value: name, onChange: (e) => setName(e.target.value), className: "w-full" }) }),
+          plan && !plan.same ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultRow, { label: "Link by", children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(
+            import_controls27.SegmentedControl,
             {
               "aria-label": "Send the link by",
               value: linkBy,
@@ -6763,28 +7066,28 @@ function SecureLinkPanel({ item, port, onClose }) {
               ]
             }
           ) }) : null,
-          email.trim() ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(VaultRow, { label: "Delivery", children: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("span", { className: plan?.same ? "text-warning" : "text-foreground", children: planWords(plan) }) }) : null
+          email.trim() ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultRow, { label: "Delivery", children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("span", { className: plan?.same ? "text-warning" : "text-foreground", children: planWords(plan) }) }) : null
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(VaultSection, { title: "Include", children: optionsError ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(Empty, { children: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("span", { className: "text-destructive", children: optionsError }) }) : !options ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.RegionSkeleton, { shape: "rows", count: 2, "aria-label": "Loading what can be sent", className: "px-3 sm:px-4" }) : options.fields.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(Empty, { children: "Name and details only" }) : options.fields.map((f) => /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("label", { className: "flex min-h-11 items-center gap-3 px-3 py-1 sm:px-4", "data-clickable": f.available ? "" : void 0, children: [
-          /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_design_system21.Checkbox, { checked: fields.includes(f.key), disabled: !f.available, onCheckedChange: (v) => toggle2(f.key, v === true), "aria-label": f.label }),
-          /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("span", { className: "min-w-0 flex-1 truncate text-sm text-foreground", children: f.label }),
-          !f.available && f.reason ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("span", { className: "min-w-0 max-w-[55%] truncate text-xs text-muted-foreground", title: f.reason, children: f.reason }) : null
+        /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultSection, { title: "Include", children: optionsError ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(Empty, { children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("span", { className: "text-destructive", children: optionsError }) }) : !options ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.RegionSkeleton, { shape: "rows", count: 2, "aria-label": "Loading what can be sent", className: "px-3 sm:px-4" }) : options.fields.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(Empty, { children: "Name and details only" }) : options.fields.map((f) => /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)("label", { className: "flex min-h-11 items-center gap-3 px-3 py-1 sm:px-4", "data-clickable": f.available ? "" : void 0, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_design_system22.Checkbox, { checked: fields.includes(f.key), disabled: !f.available, onCheckedChange: (v) => toggle2(f.key, v === true), "aria-label": f.label }),
+          /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("span", { className: "min-w-0 flex-1 truncate text-sm text-foreground", children: f.label }),
+          !f.available && f.reason ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("span", { className: "min-w-0 max-w-[55%] truncate text-xs text-muted-foreground", title: f.reason, children: f.reason }) : null
         ] }, f.key)) }),
-        /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(VaultSection, { title: "Message", children: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("div", { className: "px-3 py-1 sm:px-4", children: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.Textarea, { className: "w-full", rows: 2, maxLength: NOTE_MAX, placeholder: "Shown once, with it", "aria-label": "Message", value: note, onChange: (e) => setNote(e.target.value) }) }) }),
-        options ? /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)(VaultSection, { title: "Link", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(VaultRow, { label: "Opens", children: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("span", { className: "text-foreground", children: "Once" }) }),
-          /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(VaultRow, { label: "Link expires", children: /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("span", { className: "text-foreground", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultSection, { title: "Message", children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("div", { className: "px-3 py-1 sm:px-4", children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Textarea, { className: "w-full", rows: 2, maxLength: NOTE_MAX, placeholder: "Shown once, with it", "aria-label": "Message", value: note, onChange: (e) => setNote(e.target.value) }) }) }),
+        options ? /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)(VaultSection, { title: "Link", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultRow, { label: "Opens", children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("span", { className: "text-foreground", children: "Once" }) }),
+          /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultRow, { label: "Link expires", children: /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)("span", { className: "text-foreground", children: [
             "After ",
             lifetimeWords(options.linkMinutes)
           ] }) }),
-          /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(VaultRow, { label: "Code expires", children: /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("span", { className: "text-foreground", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultRow, { label: "Code expires", children: /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)("span", { className: "text-foreground", children: [
             "After ",
             lifetimeWords(options.codeMinutes)
           ] }) })
         ] }) : null,
-        sharing.sentSecureLinks ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(VaultSection, { title: "Sent links", children: sentError ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(Empty, { children: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("span", { className: "text-destructive", children: sentError }) }) : !sent ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.RegionSkeleton, { shape: "rows", count: 2, "aria-label": "Loading sent links", className: "px-3 sm:px-4" }) : sent.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(Empty, { children: "None yet" }) : sent.map((row) => /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)(AccessLine, { glyph: row.status === "pending" ? ClockGlyph : row.fieldKeys.length ? LockGlyph : ShareGlyph, who: recipientOf(row), meta: sentMeta(row, options), children: [
-          /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.Badge, { tone: STATUS_TONE[row.status] ?? "neutral", children: statusWord(row.status) }),
-          row.status === "pending" ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_controls26.Button, { variant: "quiet", disabled: busy !== null, onClick: () => void turnOff(row), children: "Turn off" }) : null
+        sharing.sentSecureLinks ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultSection, { title: "Sent links", children: sentError ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(Empty, { children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("span", { className: "text-destructive", children: sentError }) }) : !sent ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.RegionSkeleton, { shape: "rows", count: 2, "aria-label": "Loading sent links", className: "px-3 sm:px-4" }) : sent.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(Empty, { children: "None yet" }) : sent.map((row) => /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)(AccessLine, { glyph: row.status === "pending" ? ClockGlyph : row.fieldKeys.length ? LockGlyph : ShareGlyph, who: recipientOf(row), meta: sentMeta(row, options), children: [
+          /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Badge, { tone: STATUS_TONE[row.status] ?? "neutral", children: statusWord(row.status) }),
+          row.status === "pending" ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Button, { variant: "quiet", disabled: busy !== null, onClick: () => void turnOff(row), children: "Turn off" }) : null
         ] }, row.id)) }) : null
       ]
     }
@@ -6797,9 +7100,9 @@ function sentMeta(row, options) {
 }
 
 // src/devices/DevicesPanel.tsx
-var import_react33 = require("react");
-var import_confirm_opener11 = require("@ai-matrx/kit/confirm-opener");
-var import_controls27 = require("@ai-matrx/design-system/controls");
+var import_react34 = require("react");
+var import_confirm_opener12 = require("@ai-matrx/kit/confirm-opener");
+var import_controls28 = require("@ai-matrx/design-system/controls");
 var import_format12 = require("@ai-matrx/kit/format");
 
 // src/devices/logic.ts
@@ -6880,18 +7183,18 @@ function addPasskeyFailure(message2) {
 var isRevoked = (d) => d.revokedAt !== null;
 
 // src/devices/DevicesPanel.tsx
-var import_jsx_runtime32 = require("react/jsx-runtime");
+var import_jsx_runtime33 = require("react/jsx-runtime");
 var messageOf3 = (e, fallback) => e instanceof Error && e.message ? e.message : fallback;
 function ErrorLine2({ text }) {
-  return text ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("p", { role: "alert", className: "px-1 text-sm text-destructive", children: text }) : null;
+  return text ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("p", { role: "alert", className: "px-1 text-sm text-destructive", children: text }) : null;
 }
 function DevicesPanel({ port, onClose }) {
   const confirmed = useConfirmed();
   const notify = useNotify();
-  const [devices, setDevices] = (0, import_react33.useState)(null);
-  const [error, setError] = (0, import_react33.useState)(null);
-  const [busyId, setBusyId] = (0, import_react33.useState)(null);
-  const load = (0, import_react33.useCallback)(async () => {
+  const [devices, setDevices] = (0, import_react34.useState)(null);
+  const [error, setError] = (0, import_react34.useState)(null);
+  const [busyId, setBusyId] = (0, import_react34.useState)(null);
+  const load = (0, import_react34.useCallback)(async () => {
     setError(null);
     try {
       setDevices(await port.devices.list());
@@ -6899,11 +7202,11 @@ function DevicesPanel({ port, onClose }) {
       setError(messageOf3(e, "Your browsers could not be read."));
     }
   }, [port]);
-  (0, import_react33.useEffect)(() => {
+  (0, import_react34.useEffect)(() => {
     void load();
   }, [load]);
   const revoke = async (device) => {
-    const yes = await (0, import_confirm_opener11.confirm)({
+    const yes = await (0, import_confirm_opener12.confirm)({
       title: `Revoke ${device.label}?`,
       description: "It stops filling now and the extension there signs out. It fills again only after you sign in there and confirm.",
       confirmLabel: "Revoke",
@@ -6922,19 +7225,19 @@ function DevicesPanel({ port, onClose }) {
       setBusyId(null);
     }
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)(Panel, { title: "Browsers that can fill", onClose, size: "md", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(ErrorLine2, { text: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultSection, { children: devices === null ? error ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(Empty, { children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Button, { variant: "outline", onClick: () => void load(), children: "Try again" }) }) : /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.RegionSkeleton, { shape: "rows", count: 2, "aria-label": "Loading your browsers", className: "px-3 sm:px-4" }) : devices.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(Empty, { children: "No browser can fill yet. Turn it on in the extension." }) : devices.map((device) => {
+  return /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(Panel, { title: "Browsers that can fill", onClose, size: "md", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(ErrorLine2, { text: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultSection, { children: devices === null ? error ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(Empty, { children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "outline", onClick: () => void load(), children: "Try again" }) }) : /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.RegionSkeleton, { shape: "rows", count: 2, "aria-label": "Loading your browsers", className: "px-3 sm:px-4" }) : devices.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(Empty, { children: "No browser can fill yet. Turn it on in the extension." }) : devices.map((device) => {
       const off = isRevoked(device);
-      return /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(
+      return /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(
         VaultRow,
         {
           label: off ? "Turned off" : "Can fill",
           hint: off ? (0, import_format12.formatAbsoluteDate)(device.revokedAt, DAY_FORMAT, "") : void 0,
-          actions: off ? null : /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(PowerGlyph, {}), disabled: busyId !== null, onClick: () => void revoke(device), children: "Revoke" }),
-          children: /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)("span", { className: "flex min-w-0 flex-col", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("span", { className: off ? "truncate text-muted-foreground" : "truncate text-foreground", children: device.label }),
-            /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)("span", { className: "truncate text-xs text-muted-foreground", children: [
+          actions: off ? null : /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(PowerGlyph, {}), disabled: busyId !== null, onClick: () => void revoke(device), children: "Revoke" }),
+          children: /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)("span", { className: "flex min-w-0 flex-col", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("span", { className: off ? "truncate text-muted-foreground" : "truncate text-foreground", children: device.label }),
+            /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)("span", { className: "truncate text-xs text-muted-foreground", children: [
               device.lastUsedAt ? `Last used ${(0, import_format12.formatAbsoluteDate)(device.lastUsedAt, void 0, "")}` : "Never used",
               device.addedAt ? ` \xB7 added ${(0, import_format12.formatAbsoluteDate)(device.addedAt, DAY_FORMAT, "")}` : ""
             ] })
@@ -6957,11 +7260,11 @@ function ApprovePanel({ port, host, onClose, approvalKey, label, kind = "browser
   const where = isMac ? "the Mac app" : "the extension";
   const passkeys = port.devices.passkeys;
   const here = passkeys?.available() ?? false;
-  const [methods, setMethods] = (0, import_react33.useState)(null);
-  const [busy, setBusy] = (0, import_react33.useState)(null);
-  const [error, setError] = (0, import_react33.useState)(null);
-  const [approvedUntil, setApprovedUntil] = (0, import_react33.useState)(null);
-  const load = (0, import_react33.useCallback)(async () => {
+  const [methods, setMethods] = (0, import_react34.useState)(null);
+  const [busy, setBusy] = (0, import_react34.useState)(null);
+  const [error, setError] = (0, import_react34.useState)(null);
+  const [approvedUntil, setApprovedUntil] = (0, import_react34.useState)(null);
+  const load = (0, import_react34.useCallback)(async () => {
     setError(null);
     try {
       setMethods(await port.devices.stepUpMethods());
@@ -6969,7 +7272,7 @@ function ApprovePanel({ port, host, onClose, approvalKey, label, kind = "browser
       setError(messageOf3(e, "Your account could not be checked."));
     }
   }, [port]);
-  (0, import_react33.useEffect)(() => {
+  (0, import_react34.useEffect)(() => {
     if (key && here) void load();
   }, [key, here, load]);
   const approve = async () => {
@@ -7011,55 +7314,55 @@ function ApprovePanel({ port, host, onClose, approvalKey, label, kind = "browser
   };
   const canApprove = Boolean(key && passkeys && here && methods?.passkey && !approvedUntil);
   const title = isMac ? "Approve this Mac" : name ? `Approve ${name}` : "Approve this browser";
-  const footer = approvedUntil ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Button, { variant: "primary", onClick: onClose, children: "Done" }) : /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)(import_jsx_runtime32.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Button, { variant: "quiet", disabled: busy !== null, onClick: refuse, children: key ? "Refuse" : "Close" }),
-    canApprove ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Button, { variant: "primary", icon: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(FingerprintGlyph, {}), disabled: busy !== null, onClick: () => void approve(), children: busy === "approve" ? "Approving\u2026" : "Approve with passkey" }) : null
+  const footer = approvedUntil ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "primary", onClick: onClose, children: "Done" }) : /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(import_jsx_runtime33.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "quiet", disabled: busy !== null, onClick: refuse, children: key ? "Refuse" : "Close" }),
+    canApprove ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "primary", icon: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(FingerprintGlyph, {}), disabled: busy !== null, onClick: () => void approve(), children: busy === "approve" ? "Approving\u2026" : "Approve with passkey" }) : null
   ] });
-  return /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(Panel, { title, onClose: refuse, size: "sm", footer, children: !key ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)(Empty, { children: [
+  return /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(Panel, { title, onClose: refuse, size: "sm", footer, children: !key ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(Empty, { children: [
     "This link names no key. Start again from ",
     where,
     "."
-  ] }) }) : /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)(import_jsx_runtime32.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)(VaultSection, { title: "What is asking", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultRow, { label: "Asking", hint: "Approve only if you just asked", children: asker }),
-      name ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultRow, { label: "Name", children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("span", { className: "block truncate", children: name }) }) : null,
-      /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultRow, { label: "Code", hint: `Must match ${where}`, children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("span", { className: "font-mono tracking-wider text-foreground", children: shortFingerprint(key) }) })
+  ] }) }) : /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(import_jsx_runtime33.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(VaultSection, { title: "What is asking", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "Asking", hint: "Approve only if you just asked", children: asker }),
+      name ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "Name", children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("span", { className: "block truncate", children: name }) }) : null,
+      /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "Code", hint: `Must match ${where}`, children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("span", { className: "font-mono tracking-wider text-foreground", children: shortFingerprint(key) }) })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(ErrorLine2, { text: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultSection, { title: "Confirm it\u2019s you", children: approvedUntil ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultRow, { label: "Approved", actions: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(CheckGlyph, { className: "size-4 text-primary" }), children: /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)("span", { className: "text-foreground", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(ErrorLine2, { text: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultSection, { title: "Confirm it\u2019s you", children: approvedUntil ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "Approved", actions: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(CheckGlyph, { className: "size-4 text-primary" }), children: /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)("span", { className: "text-foreground", children: [
       "Return to ",
       where,
       " by ",
       (0, import_format12.formatAbsoluteDate)(approvedUntil, void 0, ""),
       "."
-    ] }) }) : !passkeys ? /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)(Empty, { children: [
+    ] }) }) : !passkeys ? /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(Empty, { children: [
       "Approve with your password in ",
       where,
       "."
-    ] }) : !here ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(
+    ] }) : !here ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(
       VaultRow,
       {
         label: "Passkey",
         hint: `Passkeys work only on ${passkeys.rpId}`,
-        actions: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(ExternalGlyph, {}), onClick: openOnDomain, children: "Open there" }),
-        children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("span", { className: "text-muted-foreground", children: "Not on this page" })
+        actions: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(ExternalGlyph, {}), onClick: openOnDomain, children: "Open there" }),
+        children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("span", { className: "text-muted-foreground", children: "Not on this page" })
       }
-    ) : methods === null ? error ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(Empty, { children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Button, { variant: "outline", onClick: () => void load(), children: "Try again" }) }) : /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.RegionSkeleton, { shape: "rows", count: 1, "aria-label": "Checking your account", className: "px-3 sm:px-4" }) : !methods.passkey ? /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(
+    ) : methods === null ? error ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(Empty, { children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "outline", onClick: () => void load(), children: "Try again" }) }) : /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.RegionSkeleton, { shape: "rows", count: 1, "aria-label": "Checking your account", className: "px-3 sm:px-4" }) : !methods.passkey ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(
       VaultRow,
       {
         label: "Passkey",
         hint: methods.password ? `Or type your password in ${where}` : "Add one to approve",
-        actions: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_controls27.Button, { variant: "primary", icon: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(FingerprintGlyph, {}), disabled: busy !== null, onClick: () => void addPasskey(), children: busy === "add" ? "Adding\u2026" : "Add passkey" }),
-        children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("span", { className: "text-muted-foreground", children: methods.password ? "None yet" : "No password or passkey" })
+        actions: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "primary", icon: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(FingerprintGlyph, {}), disabled: busy !== null, onClick: () => void addPasskey(), children: busy === "add" ? "Adding\u2026" : "Add passkey" }),
+        children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("span", { className: "text-muted-foreground", children: methods.password ? "None yet" : "No password or passkey" })
       }
-    ) : /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(VaultRow, { label: "Passkey", hint: "Your device asks for it next", children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("span", { className: "text-foreground", children: "Ready" }) }) })
+    ) : /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "Passkey", hint: "Your device asks for it next", children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("span", { className: "text-foreground", children: "Ready" }) }) })
   ] }) });
 }
 
 // src/native/NativeImportPanel.tsx
-var import_react35 = require("react");
-var import_confirm_opener12 = require("@ai-matrx/kit/confirm-opener");
-var import_controls28 = require("@ai-matrx/design-system/controls");
+var import_react36 = require("react");
+var import_confirm_opener13 = require("@ai-matrx/kit/confirm-opener");
+var import_controls29 = require("@ai-matrx/design-system/controls");
 
 // src/native/logic.ts
 var ACTIVE_PHASES = /* @__PURE__ */ new Set(["authorizing", "importing"]);
@@ -7120,19 +7423,19 @@ async function loadFullPreview(bridge, operationId, current) {
 }
 
 // src/native/use-native-import.ts
-var import_react34 = require("react");
+var import_react35 = require("react");
 var fail = (e, fallback) => e instanceof Error && e.message ? e.message : fallback;
 var RESTART = "Your account changed. The import was stopped; start it again.";
 function useNativeImport(bridge, stillAllowed, onImported) {
-  const [screen, setScreen] = (0, import_react34.useState)({ kind: "idle", message: null });
-  const [busy, setBusy] = (0, import_react34.useState)(false);
-  const generation = (0, import_react34.useRef)(0);
-  const mounted = (0, import_react34.useRef)(false);
-  const op = (0, import_react34.useRef)(null);
-  const last = (0, import_react34.useRef)(null);
-  const timer2 = (0, import_react34.useRef)(null);
-  const polls = (0, import_react34.useRef)(0);
-  const refreshRef = (0, import_react34.useRef)(async () => void 0);
+  const [screen, setScreen] = (0, import_react35.useState)({ kind: "idle", message: null });
+  const [busy, setBusy] = (0, import_react35.useState)(false);
+  const generation = (0, import_react35.useRef)(0);
+  const mounted = (0, import_react35.useRef)(false);
+  const op = (0, import_react35.useRef)(null);
+  const last = (0, import_react35.useRef)(null);
+  const timer2 = (0, import_react35.useRef)(null);
+  const polls = (0, import_react35.useRef)(0);
+  const refreshRef = (0, import_react35.useRef)(async () => void 0);
   const current = (g) => mounted.current && g === generation.current;
   const stopPolling = () => {
     if (timer2.current !== null) clearTimeout(timer2.current);
@@ -7233,7 +7536,7 @@ function useNativeImport(bridge, stillAllowed, onImported) {
     }
   };
   refreshRef.current = refresh;
-  const confirm14 = async () => {
+  const confirm15 = async () => {
     if (screen.kind !== "preview") return;
     const active = op.current;
     if (!active?.organizationId || active.id !== screen.preview.operation_id) return;
@@ -7301,9 +7604,9 @@ function useNativeImport(bridge, stillAllowed, onImported) {
     setBusy(false);
     setScreen({ kind: "idle", message: null });
   };
-  const invalidateRef = (0, import_react34.useRef)(invalidate);
+  const invalidateRef = (0, import_react35.useRef)(invalidate);
   invalidateRef.current = invalidate;
-  (0, import_react34.useEffect)(() => {
+  (0, import_react35.useEffect)(() => {
     mounted.current = true;
     const off = bridge.subscribe?.(() => {
       if (op.current) invalidateRef.current(RESTART);
@@ -7315,11 +7618,11 @@ function useNativeImport(bridge, stillAllowed, onImported) {
       off?.();
     };
   }, [bridge]);
-  return { screen, busy, begin, refresh: () => refresh(false), confirm: confirm14, cancel, recover, reset };
+  return { screen, busy, begin, refresh: () => refresh(false), confirm: confirm15, cancel, recover, reset };
 }
 
 // src/native/NativeImportPanel.tsx
-var import_jsx_runtime33 = require("react/jsx-runtime");
+var import_jsx_runtime34 = require("react/jsx-runtime");
 var TONE = {
   eligible: "success",
   committed: "success",
@@ -7330,19 +7633,19 @@ var TONE = {
 };
 function NativeImportPanel({ bridge, readLimits, activeOrganizationId, organizations, onClose, onChanged }) {
   if (!bridge) {
-    return /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(Panel, { title: "Import passkeys", size: "md", onClose, footer: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "primary", onClick: onClose, children: "Close" }), children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(Empty, { children: "Passkey import needs the desktop app." }) }) });
+    return /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(Panel, { title: "Import passkeys", size: "md", onClose, footer: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Button, { variant: "primary", onClick: onClose, children: "Close" }), children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(Empty, { children: "Passkey import needs the desktop app." }) }) });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(Importer, { bridge, readLimits, activeOrganizationId, organizations, onClose, onChanged });
+  return /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(Importer, { bridge, readLimits, activeOrganizationId, organizations, onClose, onChanged });
 }
 function Importer({ bridge, readLimits, activeOrganizationId, organizations, onClose, onChanged }) {
-  const options = (0, import_react35.useMemo)(() => organizations.map((o) => ({ value: o.id, label: o.name })), [organizations]);
-  const [organizationId, setOrganizationId] = (0, import_react35.useState)(() => organizations.some((o) => o.id === activeOrganizationId) ? activeOrganizationId : organizations[0]?.id ?? "");
-  const [limits, setLimits] = (0, import_react35.useState)(null);
-  const [limitError, setLimitError] = (0, import_react35.useState)(null);
+  const options = (0, import_react36.useMemo)(() => organizations.map((o) => ({ value: o.id, label: o.name })), [organizations]);
+  const [organizationId, setOrganizationId] = (0, import_react36.useState)(() => organizations.some((o) => o.id === activeOrganizationId) ? activeOrganizationId : organizations[0]?.id ?? "");
+  const [limits, setLimits] = (0, import_react36.useState)(null);
+  const [limitError, setLimitError] = (0, import_react36.useState)(null);
   const flow = useNativeImport(bridge, (id) => organizations.some((o) => o.id === id), onChanged);
   const { screen, busy } = flow;
   const orgName = organizations.find((o) => o.id === organizationId)?.name ?? "this organization";
-  (0, import_react35.useEffect)(() => {
+  (0, import_react36.useEffect)(() => {
     if (!readLimits || !organizationId) return;
     let live = true;
     setLimits(null);
@@ -7360,64 +7663,64 @@ function Importer({ bridge, readLimits, activeOrganizationId, organizations, onC
   const active = status !== null && !TERMINAL_PHASES.has(status.phase);
   const ready = preview?.slots.filter((s) => s.disposition === "eligible").length ?? 0;
   const importNow = async () => {
-    const yes = await (0, import_confirm_opener12.confirm)({ title: `Add ${plural2(ready, "passkey")} to ${orgName}?`, description: "Passkeys already there are skipped.", confirmLabel: "Import" });
+    const yes = await (0, import_confirm_opener13.confirm)({ title: `Add ${plural2(ready, "passkey")} to ${orgName}?`, description: "Passkeys already there are skipped.", confirmLabel: "Import" });
     if (yes) await flow.confirm();
   };
-  const footer = preview ? /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(import_jsx_runtime33.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "quiet", disabled: busy, onClick: () => void flow.cancel(), children: "Cancel" }),
-    /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(import_controls28.Button, { variant: "primary", icon: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(ImportGlyph, { className: "size-4" }), disabled: busy || ready === 0, onClick: () => void importNow(), children: [
+  const footer = preview ? /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)(import_jsx_runtime34.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Button, { variant: "quiet", disabled: busy, onClick: () => void flow.cancel(), children: "Cancel" }),
+    /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)(import_controls29.Button, { variant: "primary", icon: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(ImportGlyph, { className: "size-4" }), disabled: busy || ready === 0, onClick: () => void importNow(), children: [
       "Import ",
       ready
     ] })
-  ] }) : status ? active ? /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(import_jsx_runtime33.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "outline", disabled: busy, onClick: () => void flow.refresh(), children: "Refresh" }),
-    /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "outline", disabled: busy, onClick: () => void flow.cancel(), children: "Cancel import" })
-  ] }) : /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(import_jsx_runtime33.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "quiet", onClick: flow.reset, children: "New file" }),
-    /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "primary", onClick: onClose, children: "Done" })
-  ] }) : /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "quiet", onClick: onClose, children: "Close" });
-  return /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(Panel, { title: "Import passkeys", size: "lg", onClose, footer, children: [
-    screen.kind === "idle" ? /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(VaultSection, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "Save to", children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Select, { value: organizationId, options, "aria-label": "Save to", disabled: busy, onValueChange: setOrganizationId }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "File", hint: limits ? `Up to ${plural2(limits.maxItems, "passkey")}` : "A passkey exchange file", children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(ImportGlyph, { className: "size-4" }), disabled: busy || !organizationId || limitError !== null, onClick: () => void flow.begin(organizationId), children: busy ? "Opening\u2026" : "Choose file" }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "Interrupted", hint: "Finish or clear an earlier import", children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Button, { variant: "quiet", disabled: busy, onClick: () => void flow.recover(), children: "Recover" }) })
+  ] }) : status ? active ? /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)(import_jsx_runtime34.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Button, { variant: "outline", disabled: busy, onClick: () => void flow.refresh(), children: "Refresh" }),
+    /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Button, { variant: "outline", disabled: busy, onClick: () => void flow.cancel(), children: "Cancel import" })
+  ] }) : /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)(import_jsx_runtime34.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Button, { variant: "quiet", onClick: flow.reset, children: "New file" }),
+    /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Button, { variant: "primary", onClick: onClose, children: "Done" })
+  ] }) : /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Button, { variant: "quiet", onClick: onClose, children: "Close" });
+  return /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)(Panel, { title: "Import passkeys", size: "lg", onClose, footer, children: [
+    screen.kind === "idle" ? /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)(VaultSection, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(VaultRow, { label: "Save to", children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Select, { value: organizationId, options, "aria-label": "Save to", disabled: busy, onValueChange: setOrganizationId }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(VaultRow, { label: "File", hint: limits ? `Up to ${plural2(limits.maxItems, "passkey")}` : "A passkey exchange file", children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(ImportGlyph, { className: "size-4" }), disabled: busy || !organizationId || limitError !== null, onClick: () => void flow.begin(organizationId), children: busy ? "Opening\u2026" : "Choose file" }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(VaultRow, { label: "Interrupted", hint: "Finish or clear an earlier import", children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Button, { variant: "quiet", disabled: busy, onClick: () => void flow.recover(), children: "Recover" }) })
     ] }) : null,
-    preview ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultSection, { title: `${ready} of ${preview.total} ready`, children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(
+    preview ? /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(VaultSection, { title: `${ready} of ${preview.total} ready`, children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(
       Windowed,
       {
         items: preview.slots,
-        render: (slot) => /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(import_controls28.Badge, { tone: TONE[slot.disposition], children: dispositionLabel(slot.disposition) }), hint: void 0, children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("span", { className: "block truncate text-foreground", title: slot.reason ?? void 0, children: slot.title ?? "Unnamed passkey" }) }, slot.slot_id)
+        render: (slot) => /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(VaultRow, { label: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Badge, { tone: TONE[slot.disposition], children: dispositionLabel(slot.disposition) }), hint: void 0, children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("span", { className: "block truncate text-foreground", title: slot.reason ?? void 0, children: slot.title ?? "Unnamed passkey" }) }, slot.slot_id)
       }
     ) }) : null,
-    status && !preview ? /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(VaultSection, { title: `${accounted(status)} of ${status.total} done`, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "Imported", children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("span", { className: "text-foreground", children: status.committed }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "Already there", children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("span", { className: "text-foreground", children: status.already_present }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "Can't import", children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("span", { className: "text-foreground", children: status.unsupported }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "Failed", children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("span", { className: status.failed > 0 ? "text-destructive" : "text-foreground", children: status.failed }) }),
-      status.uncertain > 0 ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "Needs recovery", children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("span", { className: "text-foreground", children: status.uncertain }) }) : null,
-      status.not_attempted > 0 ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(VaultRow, { label: "Not tried", children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("span", { className: "text-foreground", children: status.not_attempted }) }) : null
+    status && !preview ? /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)(VaultSection, { title: `${accounted(status)} of ${status.total} done`, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(VaultRow, { label: "Imported", children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("span", { className: "text-foreground", children: status.committed }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(VaultRow, { label: "Already there", children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("span", { className: "text-foreground", children: status.already_present }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(VaultRow, { label: "Can't import", children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("span", { className: "text-foreground", children: status.unsupported }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(VaultRow, { label: "Failed", children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("span", { className: status.failed > 0 ? "text-destructive" : "text-foreground", children: status.failed }) }),
+      status.uncertain > 0 ? /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(VaultRow, { label: "Needs recovery", children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("span", { className: "text-foreground", children: status.uncertain }) }) : null,
+      status.not_attempted > 0 ? /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(VaultRow, { label: "Not tried", children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("span", { className: "text-foreground", children: status.not_attempted }) }) : null
     ] }) : null,
-    screen.message ? /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("p", { role: "status", className: "px-1 text-sm text-muted-foreground", children: screen.message }) : null,
-    /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(ErrorLine, { message: limitError })
+    screen.message ? /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("p", { role: "status", className: "px-1 text-sm text-muted-foreground", children: screen.message }) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(ErrorLine, { message: limitError })
   ] });
 }
 
 // src/extension/PageView.tsx
-var import_react39 = require("react");
-var import_design_system23 = require("@ai-matrx/design-system");
-var import_controls32 = require("@ai-matrx/design-system/controls");
-var import_icons14 = require("@ai-matrx/design-system/icons");
+var import_react40 = require("react");
+var import_design_system24 = require("@ai-matrx/design-system");
+var import_controls33 = require("@ai-matrx/design-system/controls");
+var import_icons15 = require("@ai-matrx/design-system/icons");
 
 // src/extension/CaptureCard.tsx
-var import_react36 = require("react");
-var import_controls29 = require("@ai-matrx/design-system/controls");
-var import_jsx_runtime34 = require("react/jsx-runtime");
+var import_react37 = require("react");
+var import_controls30 = require("@ai-matrx/design-system/controls");
+var import_jsx_runtime35 = require("react/jsx-runtime");
 var SEARCH_FROM = 4;
 function CaptureCard({ capture, onChanged }) {
-  const prompt = (0, import_react36.useSyncExternalStore)(capture.subscribe, capture.get, capture.get);
+  const prompt = (0, import_react37.useSyncExternalStore)(capture.subscribe, capture.get, capture.get);
   const notify = useNotify();
-  const [busy, setBusy] = (0, import_react36.useState)(false);
-  const [q, setQ] = (0, import_react36.useState)("");
+  const [busy, setBusy] = (0, import_react37.useState)(false);
+  const [q, setQ] = (0, import_react37.useState)("");
   if (!prompt) return null;
   const decide = async (d) => {
     setBusy(true);
@@ -7435,53 +7738,53 @@ function CaptureCard({ capture, onChanged }) {
   const existing = prompt.existing;
   const needle = q.trim().toLocaleLowerCase();
   const shown = needle ? existing.filter((x) => x.name.toLocaleLowerCase().includes(needle)) : existing;
-  return /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("section", { "aria-label": "Save this login", className: "flex flex-col gap-2 rounded-xl border border-border bg-card px-3 py-2.5", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("div", { className: "flex items-center gap-2.5", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(ShieldGlyph, { className: "size-5 shrink-0 text-primary" }),
-      /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("div", { className: "flex min-w-0 flex-1 flex-col leading-tight", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("span", { className: "truncate text-sm font-medium", children: prompt.unavailable ? "Couldn\u2019t hold this login" : "Save this login?" }),
-        /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: prompt.username ? `${prompt.host} \xB7 ${prompt.username}` : prompt.host })
+  return /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("section", { "aria-label": "Save this login", className: "flex flex-col gap-2 rounded-xl border border-border bg-card px-3 py-2.5", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("div", { className: "flex items-center gap-2.5", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(ShieldGlyph, { className: "size-5 shrink-0 text-primary" }),
+      /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("div", { className: "flex min-w-0 flex-1 flex-col leading-tight", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime35.jsx)("span", { className: "truncate text-sm font-medium", children: prompt.unavailable ? "Couldn\u2019t hold this login" : "Save this login?" }),
+        /* @__PURE__ */ (0, import_jsx_runtime35.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: prompt.username ? `${prompt.host} \xB7 ${prompt.username}` : prompt.host })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(XGlyph, {}), "aria-label": "Not now", disabled: busy, onClick: () => void decide({ action: "dismiss" }) })
+      /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(import_controls30.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(XGlyph, {}), "aria-label": "Not now", disabled: busy, onClick: () => void decide({ action: "dismiss" }) })
     ] }),
-    prompt.unavailable ? /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("p", { className: "text-xs text-muted-foreground", children: "Save it by hand with Save a login." }) : /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)(import_jsx_runtime34.Fragment, { children: [
-      existing.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("div", { className: "flex flex-col gap-1", children: [
-        existing.length >= SEARCH_FROM ? /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.SearchField, { value: q, onChange: (e) => setQ(e.target.value), placeholder: "Search logins", "aria-label": "Search logins to update" }) : null,
-        /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("ul", { className: "flex max-h-36 flex-col gap-px overflow-y-auto", children: [
+    prompt.unavailable ? /* @__PURE__ */ (0, import_jsx_runtime35.jsx)("p", { className: "text-xs text-muted-foreground", children: "Save it by hand with Save a login." }) : /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)(import_jsx_runtime35.Fragment, { children: [
+      existing.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("div", { className: "flex flex-col gap-1", children: [
+        existing.length >= SEARCH_FROM ? /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(import_controls30.SearchField, { value: q, onChange: (e) => setQ(e.target.value), placeholder: "Search logins", "aria-label": "Search logins to update" }) : null,
+        /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("ul", { className: "flex max-h-36 flex-col gap-px overflow-y-auto", children: [
           shown.map((x) => {
             const tag = distinguish(x, existing);
-            return /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("li", { className: "flex h-9 items-center gap-2 px-1", children: [
-              /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("span", { className: "min-w-0 flex-1 truncate text-sm", children: [
+            return /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("li", { className: "flex h-9 items-center gap-2 px-1", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("span", { className: "min-w-0 flex-1 truncate text-sm", children: [
                 x.name,
-                tag ? /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("span", { className: "text-muted-foreground", children: [
+                tag ? /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("span", { className: "text-muted-foreground", children: [
                   " \xB7 ",
                   tag
                 ] }) : null
               ] }),
-              /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Button, { variant: "primary", disabled: busy, onClick: () => void decide({ action: "update", itemId: x.itemId }), "aria-label": `Update ${x.name}`, children: "Update" })
+              /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(import_controls30.Button, { variant: "primary", disabled: busy, onClick: () => void decide({ action: "update", itemId: x.itemId }), "aria-label": `Update ${x.name}`, children: "Update" })
             ] }, x.itemId);
           }),
-          shown.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("li", { className: "px-1 py-2 text-xs text-muted-foreground", children: "No saved login matches." }) : null
+          shown.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime35.jsx)("li", { className: "px-1 py-2 text-xs text-muted-foreground", children: "No saved login matches." }) : null
         ] })
       ] }) : null,
-      /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("div", { className: "flex flex-wrap items-center gap-2", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Button, { variant: existing.length > 0 ? "outline" : "primary", disabled: busy, onClick: () => void decide({ action: "save" }), children: existing.length > 0 ? "Save as new" : "Save" }),
-        /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_controls29.Button, { variant: "quiet", disabled: busy, onClick: () => void decide({ action: "never" }), children: "Never here" })
+      /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("div", { className: "flex flex-wrap items-center gap-2", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(import_controls30.Button, { variant: existing.length > 0 ? "outline" : "primary", disabled: busy, onClick: () => void decide({ action: "save" }), children: existing.length > 0 ? "Save as new" : "Save" }),
+        /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(import_controls30.Button, { variant: "quiet", disabled: busy, onClick: () => void decide({ action: "never" }), children: "Never here" })
       ] })
     ] })
   ] });
 }
 
 // src/extension/FillSetupCard.tsx
-var import_react37 = require("react");
-var import_controls30 = require("@ai-matrx/design-system/controls");
-var import_jsx_runtime35 = require("react/jsx-runtime");
+var import_react38 = require("react");
+var import_controls31 = require("@ai-matrx/design-system/controls");
+var import_jsx_runtime36 = require("react/jsx-runtime");
 function FillSetupCard({ fillSetup }) {
   const notify = useNotify();
-  const state = (0, import_react37.useSyncExternalStore)(fillSetup.subscribe, fillSetup.get, fillSetup.get);
-  const box = (0, import_react37.useRef)(null);
-  const [busy, setBusy] = (0, import_react37.useState)(false);
-  const [error, setError] = (0, import_react37.useState)(null);
+  const state = (0, import_react38.useSyncExternalStore)(fillSetup.subscribe, fillSetup.get, fillSetup.get);
+  const box = (0, import_react38.useRef)(null);
+  const [busy, setBusy] = (0, import_react38.useState)(false);
+  const [error, setError] = (0, import_react38.useState)(null);
   if (state.status !== "off") return null;
   const finish = async (run) => {
     setBusy(true);
@@ -7507,15 +7810,15 @@ function FillSetupCard({ fillSetup }) {
   const neither = m !== null && !m.password && !m.passkey;
   const showPassword = !neither && (m === null || m.password);
   const showPasskey = state.passkey !== null && (neither || m === null || m.passkey);
-  return /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("section", { "aria-label": "Turn on filling", "data-testid": "fill-setup", className: "flex flex-col gap-2 rounded-xl border border-border bg-card px-3 py-2.5", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("div", { className: "flex items-center gap-2.5", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(KeyGlyph, { className: "size-5 shrink-0 text-primary" }),
-      /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("div", { className: "flex min-w-0 flex-1 flex-col leading-tight", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime35.jsx)("span", { className: "truncate text-sm font-medium", children: "Turn on filling" }),
-        /* @__PURE__ */ (0, import_jsx_runtime35.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: neither ? "Add a passkey on the web first." : "Confirm it\u2019s you once in this browser." })
+  return /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)("section", { "aria-label": "Turn on filling", "data-testid": "fill-setup", className: "flex flex-col gap-2 rounded-xl border border-border bg-card px-3 py-2.5", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)("div", { className: "flex items-center gap-2.5", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(KeyGlyph, { className: "size-5 shrink-0 text-primary" }),
+      /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)("div", { className: "flex min-w-0 flex-1 flex-col leading-tight", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("span", { className: "truncate text-sm font-medium", children: "Turn on filling" }),
+        /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: neither ? "Add a passkey on the web first." : "Confirm it\u2019s you once in this browser." })
       ] })
     ] }),
-    showPassword ? /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)(
+    showPassword ? /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)(
       "form",
       {
         className: "flex items-center gap-2",
@@ -7524,42 +7827,42 @@ function FillSetupCard({ fillSetup }) {
           withPassword();
         },
         children: [
-          /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(import_controls30.Field, { ref: box, className: "min-w-0 flex-1", type: "password", autoComplete: "current-password", placeholder: "AI Matrx password", "aria-label": "Your AI Matrx password", disabled: busy }),
-          /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(import_controls30.Button, { variant: "primary", type: "submit", disabled: busy, children: "Turn on" })
+          /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(import_controls31.Field, { ref: box, className: "min-w-0 flex-1", type: "password", autoComplete: "current-password", placeholder: "AI Matrx password", "aria-label": "Your AI Matrx password", disabled: busy }),
+          /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(import_controls31.Button, { variant: "primary", type: "submit", disabled: busy, children: "Turn on" })
         ]
       }
     ) : null,
-    showPasskey ? /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(import_controls30.Button, { variant: "outline", iconEnd: /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(ExternalGlyph, {}), disabled: busy, onClick: () => {
+    showPasskey ? /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(import_controls31.Button, { variant: "outline", iconEnd: /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(ExternalGlyph, {}), disabled: busy, onClick: () => {
       setError(null);
       fillSetup.openPasskey();
     }, children: neither ? "Add a passkey" : "Use a passkey" }) : null,
-    showPasskey && state.awaitingPasskey && state.passkey ? /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("div", { className: "flex items-center gap-2", "data-testid": "fill-setup-waiting", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("span", { className: "min-w-0 flex-1 text-xs text-muted-foreground", children: [
+    showPasskey && state.awaitingPasskey && state.passkey ? /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)("div", { className: "flex items-center gap-2", "data-testid": "fill-setup-waiting", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)("span", { className: "min-w-0 flex-1 text-xs text-muted-foreground", children: [
         "Approve code ",
-        /* @__PURE__ */ (0, import_jsx_runtime35.jsx)("span", { className: "font-mono text-foreground", children: state.passkey.code }),
+        /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("span", { className: "font-mono text-foreground", children: state.passkey.code }),
         " on that page."
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(import_controls30.Button, { variant: "primary", disabled: busy, onClick: () => void finish(() => fillSetup.finishPasskey()), children: "I approved" })
+      /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(import_controls31.Button, { variant: "primary", disabled: busy, onClick: () => void finish(() => fillSetup.finishPasskey()), children: "I approved" })
     ] }) : null,
-    error ? /* @__PURE__ */ (0, import_jsx_runtime35.jsx)("p", { role: "alert", className: "text-xs text-destructive", children: error }) : null
+    error ? /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("p", { role: "alert", className: "text-xs text-destructive", children: error }) : null
   ] });
 }
 
 // src/extension/PageGenerator.tsx
-var import_react38 = require("react");
-var import_design_system22 = require("@ai-matrx/design-system");
-var import_controls31 = require("@ai-matrx/design-system/controls");
-var import_icons13 = require("@ai-matrx/design-system/icons");
-var import_jsx_runtime36 = require("react/jsx-runtime");
+var import_react39 = require("react");
+var import_design_system23 = require("@ai-matrx/design-system");
+var import_controls32 = require("@ai-matrx/design-system/controls");
+var import_icons14 = require("@ai-matrx/design-system/icons");
+var import_jsx_runtime37 = require("react/jsx-runtime");
 var HOLD_MS = 6e4;
 function PageGenerator({ fields }) {
   const limits = useGeneratorLimitsSource();
   const copy = useCopy();
   const held = useTransientSecret(HOLD_MS);
-  const [open, setOpen] = (0, import_react38.useState)(false);
-  const [busy, setBusy] = (0, import_react38.useState)(false);
-  const [targets, setTargets] = (0, import_react38.useState)([]);
-  const [said, setSaid] = (0, import_react38.useState)(null);
+  const [open, setOpen] = (0, import_react39.useState)(false);
+  const [busy, setBusy] = (0, import_react39.useState)(false);
+  const [targets, setTargets] = (0, import_react39.useState)([]);
+  const [said, setSaid] = (0, import_react39.useState)(null);
   if (!limits) return null;
   const say3 = setSaid;
   const put = async (targetId, value2) => {
@@ -7601,30 +7904,30 @@ function PageGenerator({ fields }) {
     }
   };
   const value = held.value;
-  return /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)(import_jsx_runtime36.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)(import_jsx_runtime37.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(
       VaultRow,
       {
         label: "New password",
-        actions: /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)(import_jsx_runtime36.Fragment, { children: [
-          value ? /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(import_controls31.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(import_icons13.CopyIcon, {}), "aria-label": "Copy password", onClick: () => void copy(value, "Password") }) : null,
-          /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)(import_design_system22.Popover, { open, onOpenChange: setOpen, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(import_design_system22.PopoverTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(import_controls31.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(KeyGlyph, {}), disabled: busy, children: "Generate" }) }),
-            /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(import_design_system22.PopoverContent, { sizing: "content", align: "end", children: open ? /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(PasswordGenerator, { limits, useLabel: "Fill page", onUse: (v) => void onUse(v) }) : null })
+        actions: /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)(import_jsx_runtime37.Fragment, { children: [
+          value ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_controls32.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_icons14.CopyIcon, {}), "aria-label": "Copy password", onClick: () => void copy(value, "Password") }) : null,
+          /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)(import_design_system23.Popover, { open, onOpenChange: setOpen, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_design_system23.PopoverTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_controls32.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(KeyGlyph, {}), disabled: busy, children: "Generate" }) }),
+            /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_design_system23.PopoverContent, { sizing: "content", align: "end", children: open ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(PasswordGenerator, { limits, useLabel: "Fill page", onUse: (v) => void onUse(v) }) : null })
           ] })
         ] }),
-        children: said ? /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("span", { role: "status", className: said.tone === "success" ? "line-clamp-2 text-xs text-foreground" : "line-clamp-2 text-xs text-muted-foreground", children: said.text }) : targets.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("span", { className: "text-xs text-muted-foreground", children: "Choose the boxes to fill." }) : /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("span", { className: "text-xs text-disabled-foreground", children: "Fills the page\u2019s new-password box" })
+        children: said ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("span", { role: "status", className: said.tone === "success" ? "line-clamp-2 text-xs text-foreground" : "line-clamp-2 text-xs text-muted-foreground", children: said.text }) : targets.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("span", { className: "text-xs text-muted-foreground", children: "Choose the boxes to fill." }) : /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("span", { className: "text-xs text-disabled-foreground", children: "Fills the page\u2019s new-password box" })
       }
     ),
-    value && targets.length > 0 ? targets.map((t) => /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(VaultRow, { label: t.topFrame ? "This page" : "In a frame", actions: /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(import_controls31.Button, { variant: "primary", icon: /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(CheckGlyph, {}), disabled: busy, onClick: () => void put(t.id, value), children: "Fill" }), children: /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("span", { className: "block truncate text-sm", children: targetLabel(t) }) }, t.id)) : null
+    value && targets.length > 0 ? targets.map((t) => /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(VaultRow, { label: t.topFrame ? "This page" : "In a frame", actions: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_controls32.Button, { variant: "primary", icon: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(CheckGlyph, {}), disabled: busy, onClick: () => void put(t.id, value), children: "Fill" }), children: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("span", { className: "block truncate text-sm", children: targetLabel(t) }) }, t.id)) : null
   ] });
 }
 
 // src/extension/PageView.tsx
-var import_jsx_runtime37 = require("react/jsx-runtime");
+var import_jsx_runtime38 = require("react/jsx-runtime");
 function PageView({ port, page, fill, capture, fillSetup, newPasswordFields, items, definitions, onOpen, onNewForPage, onBrowse, onChanged, header }) {
-  const [running, setRunning] = (0, import_react39.useState)(null);
-  const [said, setSaid] = (0, import_react39.useState)(null);
+  const [running, setRunning] = (0, import_react40.useState)(null);
+  const [said, setSaid] = (0, import_react40.useState)(null);
   const site = pageSite(page.url);
   const state = page.matchState ?? { status: "ready" };
   const fillable = new Set(page.fillableItemIds ?? page.matchingItemIds);
@@ -7645,20 +7948,20 @@ function PageView({ port, page, fill, capture, fillSetup, newPasswordFields, ite
     }
   };
   let body;
-  if (!page.url) body = /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(Empty, { children: "No page is open in this tab." });
+  if (!page.url) body = /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Empty, { children: "No page is open in this tab." });
   else if (state.status === "error") {
-    body = /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("div", { className: "flex items-center gap-2 px-3 py-2 sm:px-4", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("span", { role: "alert", className: "min-w-0 flex-1 text-sm text-muted-foreground", children: MATCH_ERROR_WORDS[state.reason] }),
-      /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_controls32.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(RefreshGlyph, {}), onClick: state.retry, children: "Retry" })
+    body = /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { className: "flex items-center gap-2 px-3 py-2 sm:px-4", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("span", { role: "alert", className: "min-w-0 flex-1 text-sm text-muted-foreground", children: MATCH_ERROR_WORDS[state.reason] }),
+      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_controls33.Button, { variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(RefreshGlyph, {}), onClick: state.retry, children: "Retry" })
     ] });
   } else if (state.status === "loading") {
-    body = /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("div", { "aria-busy": "true", "aria-label": "Checking saved logins", className: "flex flex-col", children: [0, 1].map((n) => /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("div", { className: "flex h-12 items-center gap-3 px-3", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("div", { className: "size-8 animate-pulse rounded-lg bg-muted" }),
-      /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("div", { className: "h-3 w-1/2 animate-pulse rounded bg-muted" })
+    body = /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("div", { "aria-busy": "true", "aria-label": "Checking saved logins", className: "flex flex-col", children: [0, 1].map((n) => /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { className: "flex h-12 items-center gap-3 px-3", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("div", { className: "size-8 animate-pulse rounded-lg bg-muted" }),
+      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("div", { className: "h-3 w-1/2 animate-pulse rounded bg-muted" })
     ] }, n)) });
-  } else if (matches.length === 0) body = /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(Empty, { children: "No saved login for this site." });
+  } else if (matches.length === 0) body = /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Empty, { children: "No saved login for this site." });
   else {
-    body = /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("ul", { className: "flex flex-col", children: matches.map(({ itemId, item }) => /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(
+    body = /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("ul", { className: "flex flex-col", children: matches.map(({ itemId, item }) => /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(
       MatchRow,
       {
         itemId,
@@ -7675,40 +7978,40 @@ function PageView({ port, page, fill, capture, fillSetup, newPasswordFields, ite
       itemId
     )) });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("div", { className: "flex h-full min-h-0 flex-col overflow-y-auto bg-background text-foreground", children: /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("div", { className: "flex flex-col gap-3 px-3 pb-4 pt-3", children: [
+  return /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("div", { className: "flex h-full min-h-0 flex-col overflow-y-auto bg-background text-foreground", children: /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { className: "flex flex-col gap-3 px-3 pb-4 pt-3", children: [
     header,
-    /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("div", { className: "flex min-h-7 items-center gap-2 px-1", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_design_system23.SiteIcon, { site: page.url, fallback: import_icons14.GlobeIcon, className: "size-4" }),
-      /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("span", { className: "min-w-0 flex-1 truncate text-sm font-medium", title: page.url, children: site || "No page open" }),
-      page.refresh ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_controls32.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(RefreshGlyph, {}), "aria-label": "Check again", onClick: page.refresh }) : null,
-      onBrowse ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_controls32.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(ListGlyph, {}), onClick: onBrowse, children: "All items" }) : null
+    /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { className: "flex min-h-7 items-center gap-2 px-1", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_design_system24.SiteIcon, { site: page.url, fallback: import_icons15.GlobeIcon, className: "size-4" }),
+      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("span", { className: "min-w-0 flex-1 truncate text-sm font-medium", title: page.url, children: site || "No page open" }),
+      page.refresh ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_controls33.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(RefreshGlyph, {}), "aria-label": "Check again", onClick: page.refresh }) : null,
+      onBrowse ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_controls33.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(ListGlyph, {}), onClick: onBrowse, children: "All items" }) : null
     ] }),
-    fillSetup ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(FillSetupCard, { fillSetup }) : null,
-    capture ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(CaptureCard, { capture, onChanged }) : null,
-    /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(
+    fillSetup ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(FillSetupCard, { fillSetup }) : null,
+    capture ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(CaptureCard, { capture, onChanged }) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(
       VaultSection,
       {
         title: "This site",
-        actions: canSave ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_controls32.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(PlusGlyph, {}), onClick: () => onNewForPage(normalizeLoginUrl2(page.url) ?? page.url), children: "Save a login" }) : null,
+        actions: canSave ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_controls33.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(PlusGlyph, {}), onClick: () => onNewForPage(normalizeLoginUrl2(page.url) ?? page.url), children: "Save a login" }) : null,
         children: body
       }
     ),
-    said ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(Outcome, { said, onDismiss: () => setSaid(null) }) : page.blocked && page.url && state.status === "ready" ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("p", { className: "px-1 text-xs text-muted-foreground", children: BLOCK_WORDS[page.blocked] }) : null,
-    newPasswordFields && canSave ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(PageGenerator, { fields: newPasswordFields }) }) : null
+    said ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Outcome, { said, onDismiss: () => setSaid(null) }) : page.blocked && page.url && state.status === "ready" ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("p", { className: "px-1 text-xs text-muted-foreground", children: BLOCK_WORDS[page.blocked] }) : null,
+    newPasswordFields && canSave ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(VaultSection, { children: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(PageGenerator, { fields: newPasswordFields }) }) : null
   ] }) });
 }
 function Outcome({ said, onDismiss }) {
-  return /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("div", { role: "status", className: "flex items-center gap-2 px-1", children: [
-    said.tone === "success" ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(CheckGlyph, { className: "size-4 shrink-0 text-primary" }) : /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(ShieldGlyph, { className: "size-4 shrink-0 text-destructive" }),
-    /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("span", { className: "min-w-0 flex-1 text-xs text-foreground", children: said.text }),
-    /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_controls32.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(XGlyph, {}), "aria-label": "Dismiss", onClick: onDismiss })
+  return /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { role: "status", className: "flex items-center gap-2 px-1", children: [
+    said.tone === "success" ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(CheckGlyph, { className: "size-4 shrink-0 text-primary" }) : /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(ShieldGlyph, { className: "size-4 shrink-0 text-destructive" }),
+    /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("span", { className: "min-w-0 flex-1 text-xs text-foreground", children: said.text }),
+    /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_controls33.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(XGlyph, {}), "aria-label": "Dismiss", onClick: onDismiss })
   ] });
 }
 function MatchRow({ itemId, item, tag, family, port, busy, running, onOpen, onFill, onSignIn }) {
   const confirmed = useConfirmed();
   const copy = useCopy();
   const notify = useNotify();
-  const [reading, setReading] = (0, import_react39.useState)(false);
+  const [reading, setReading] = (0, import_react40.useState)(false);
   const usable = item?.capabilities.canUse ?? false;
   const user = usable ? item?.fields.find((f) => USERNAME_KEYS.test(f.key) && f.handling !== "sealed" && f.active) : void 0;
   const secret = usable && item?.capabilities.canReveal ? item?.fields.find((f) => f.key === "password" && f.handling === "revealable" && f.active) : void 0;
@@ -7724,27 +8027,27 @@ function MatchRow({ itemId, item, tag, family, port, busy, running, onOpen, onFi
     }
   };
   const subtitle = [item ? loginSiteOf(item) || item.definitionLabel : "", tag].filter(Boolean).join(" \xB7 ");
-  return /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("li", { className: "flex h-12 items-center gap-1 pl-1 pr-2", "data-item": itemId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("button", { type: "button", onClick: () => onOpen(itemId), className: "flex h-11 min-w-0 flex-1 items-center gap-3 rounded-lg px-2 text-left hover:bg-accent", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(ItemIcon, { definitionKey: item?.definitionKey ?? "website_login", family, site: item ? loginSiteOf(item) : "" }),
-      /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("span", { className: "flex min-w-0 flex-1 flex-col leading-tight", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("span", { className: "truncate text-sm font-medium", children: item?.name ?? "Saved login" }),
-        subtitle ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: subtitle }) : null
+  return /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("li", { className: "flex h-12 items-center gap-1 pl-1 pr-2", "data-item": itemId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("button", { type: "button", onClick: () => onOpen(itemId), className: "flex h-11 min-w-0 flex-1 items-center gap-3 rounded-lg px-2 text-left hover:bg-accent", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(ItemIcon, { definitionKey: item?.definitionKey ?? "website_login", family, site: item ? loginSiteOf(item) : "" }),
+      /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("span", { className: "flex min-w-0 flex-1 flex-col leading-tight", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("span", { className: "truncate text-sm font-medium", children: item?.name ?? "Saved login" }),
+        subtitle ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: subtitle }) : null
       ] })
     ] }),
-    onFill ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_controls32.Button, { variant: "primary", disabled: busy, "aria-busy": running || void 0, onClick: onFill, "aria-label": `Fill ${item?.name ?? "this login"}`, children: running ? "Filling\u2026" : "Fill" }) : null,
-    user && item ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_controls32.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(UserGlyph, {}), "aria-label": `Copy ${user.label}`, title: `Copy ${user.label}`, disabled: reading, onClick: () => void read(user.label, () => port.reveal(item, user.key)) }) : null,
-    secret && item ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_controls32.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(KeyGlyph, {}), "aria-label": "Copy password", title: "Copy password", disabled: reading, onClick: () => void read("Password", () => port.reveal(item, secret.key)) }) : null,
-    otp ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_controls32.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(ClockGlyph, {}), "aria-label": "Copy one-time code", title: "Copy one-time code", disabled: reading, onClick: () => void read("One-time code", async () => (await port.authenticator.code(otp)).code) }) : null,
-    onSignIn ? /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)(import_design_system23.DropdownMenu, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_design_system23.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(import_controls32.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(MoreGlyph, {}), "aria-label": "More", disabled: busy }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)(import_design_system23.DropdownMenuContent, { align: "end", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)(import_design_system23.DropdownMenuItem, { onSelect: onSignIn, children: [
-          /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(ShieldGlyph, { className: "size-4" }),
+    onFill ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_controls33.Button, { variant: "primary", disabled: busy, "aria-busy": running || void 0, onClick: onFill, "aria-label": `Fill ${item?.name ?? "this login"}`, children: running ? "Filling\u2026" : "Fill" }) : null,
+    user && item ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_controls33.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(UserGlyph, {}), "aria-label": `Copy ${user.label}`, title: `Copy ${user.label}`, disabled: reading, onClick: () => void read(user.label, () => port.reveal(item, user.key)) }) : null,
+    secret && item ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_controls33.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(KeyGlyph, {}), "aria-label": "Copy password", title: "Copy password", disabled: reading, onClick: () => void read("Password", () => port.reveal(item, secret.key)) }) : null,
+    otp ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_controls33.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(ClockGlyph, {}), "aria-label": "Copy one-time code", title: "Copy one-time code", disabled: reading, onClick: () => void read("One-time code", async () => (await port.authenticator.code(otp)).code) }) : null,
+    onSignIn ? /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)(import_design_system24.DropdownMenu, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_design_system24.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_controls33.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(MoreGlyph, {}), "aria-label": "More", disabled: busy }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)(import_design_system24.DropdownMenuContent, { align: "end", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)(import_design_system24.DropdownMenuItem, { onSelect: onSignIn, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(ShieldGlyph, { className: "size-4" }),
           "Sign me in"
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)(import_design_system23.DropdownMenuItem, { onSelect: () => onOpen(itemId), children: [
-          /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(ListGlyph, { className: "size-4" }),
+        /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)(import_design_system24.DropdownMenuItem, { onSelect: () => onOpen(itemId), children: [
+          /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(ListGlyph, { className: "size-4" }),
           "Open item"
         ] })
       ] })
@@ -7753,11 +8056,11 @@ function MatchRow({ itemId, item, tag, family, port, busy, running, onOpen, onFi
 }
 
 // src/Sidebar.tsx
-var import_react40 = require("react");
-var import_design_system24 = require("@ai-matrx/design-system");
-var import_controls33 = require("@ai-matrx/design-system/controls");
-var import_icons15 = require("@ai-matrx/design-system/icons");
-var import_jsx_runtime38 = require("react/jsx-runtime");
+var import_react41 = require("react");
+var import_design_system25 = require("@ai-matrx/design-system");
+var import_controls34 = require("@ai-matrx/design-system/controls");
+var import_icons16 = require("@ai-matrx/design-system/icons");
+var import_jsx_runtime39 = require("react/jsx-runtime");
 var AUTHENTICATOR_LABEL = "Authenticator";
 function vaultChoices(items, organizations, current) {
   const n = (f) => items.filter(f).length;
@@ -7771,9 +8074,9 @@ function vaultChoices(items, organizations, current) {
   ];
 }
 function VaultSelect({ value, choices, onChange }) {
-  return /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_controls33.Select, { value, onValueChange: onChange, "aria-label": "Vault", options: choices.map((c) => ({ value: c.value, label: c.label, meta: String(c.count) })) });
+  return /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_controls34.Select, { value, onValueChange: onChange, "aria-label": "Vault", options: choices.map((c) => ({ value: c.value, label: c.label, meta: String(c.count) })) });
 }
-var CATEGORY_GLYPHS = { logins: import_icons15.GlobeIcon, passkeys: ShieldGlyph, api: KeyGlyph, oauth: PlugGlyph, infra: DatabaseGlyph, env: TerminalGlyph, files: FileGlyph, other: NoteGlyph };
+var CATEGORY_GLYPHS = { logins: import_icons16.GlobeIcon, passkeys: ShieldGlyph, api: KeyGlyph, oauth: PlugGlyph, infra: DatabaseGlyph, env: TerminalGlyph, files: FileGlyph, other: NoteGlyph };
 var familyOf = (key, definitions) => definitions.find((d) => d.key === key)?.family ?? "generic";
 function itemCategory(item, definitions) {
   return categoryOf(item.definitionKey, familyOf(item.definitionKey, definitions));
@@ -7816,71 +8119,71 @@ function viewOptions(views, allCount, deletedCount, hasFavorites, hasRecents, ha
   ];
 }
 function Entry({ on, glyph: Icon, label, count: count2, onClick }) {
-  const desktop = (0, import_design_system24.useLook)() === "desktop";
-  return /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)(
+  const desktop = (0, import_design_system25.useLook)() === "desktop";
+  return /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)(
     "button",
     {
       type: "button",
       "aria-current": on ? "page" : void 0,
       onClick,
-      className: (0, import_design_system24.cn)("flex h-8 w-full items-center gap-2.5 rounded-lg px-2.5 text-left text-sm", on ? desktop ? "bg-sidebar-accent text-primary" : "bg-sidebar-accent font-medium text-sidebar-accent-foreground" : "text-sidebar-foreground hover:bg-sidebar-accent"),
+      className: (0, import_design_system25.cn)("flex h-8 w-full items-center gap-2.5 rounded-lg px-2.5 text-left text-sm", on ? desktop ? "bg-sidebar-accent text-primary" : "bg-sidebar-accent font-medium text-sidebar-accent-foreground" : "text-sidebar-foreground hover:bg-sidebar-accent"),
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Icon, { className: "size-4 shrink-0" }),
-        /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("span", { className: "min-w-0 flex-1 truncate", children: label }),
-        count2 !== void 0 ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("span", { className: "text-xs tabular-nums text-muted-foreground", children: count2 }) : null
+        /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Icon, { className: "size-4 shrink-0" }),
+        /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("span", { className: "min-w-0 flex-1 truncate", children: label }),
+        count2 !== void 0 ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("span", { className: "text-xs tabular-nums text-muted-foreground", children: count2 }) : null
       ]
     }
   );
 }
 function Group({ title, children }) {
-  return /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { className: "flex flex-col gap-0.5", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("div", { className: "px-2.5 pb-1 text-xs font-medium text-muted-foreground", children: title }),
+  return /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: "flex flex-col gap-0.5", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("div", { className: "px-2.5 pb-1 text-xs font-medium text-muted-foreground", children: title }),
     children
   ] });
 }
 function VaultSidebar({ vault, choices, onVault, view, allCount, deletedCount, views, hasFavorites, hasRecents, onView, onPanel, nativeProvider, hasNativeImport = false, hasPage = false }) {
-  const [tagsOpen, setTagsOpen] = (0, import_react40.useState)(view.startsWith("tag:"));
-  return /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("nav", { "aria-label": "Vault", className: "flex h-full min-h-0 flex-col border-r border-sidebar-border bg-sidebar-background text-sidebar-foreground", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { className: "flex items-center gap-2 px-3 pb-2 pt-3", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(SafeGlyph, { className: "size-5 shrink-0 text-primary" }),
-      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("div", { className: "min-w-0 flex-1", children: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(VaultSelect, { value: vault, choices, onChange: onVault }) })
+  const [tagsOpen, setTagsOpen] = (0, import_react41.useState)(view.startsWith("tag:"));
+  return /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("nav", { "aria-label": "Vault", className: "flex h-full min-h-0 flex-col border-r border-sidebar-border bg-sidebar-background text-sidebar-foreground", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: "flex items-center gap-2 px-3 pb-2 pt-3", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(SafeGlyph, { className: "size-5 shrink-0 text-primary" }),
+      /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("div", { className: "min-w-0 flex-1", children: /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(VaultSelect, { value: vault, choices, onChange: onVault }) })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { className: "flex min-h-0 flex-1 flex-col gap-5 overflow-y-auto px-2 pb-3 pt-1", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { className: "flex flex-col gap-0.5", children: [
-        hasPage ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Entry, { on: view === "page", glyph: import_icons15.GlobeIcon, label: "This page", onClick: () => onView("page") }) : null,
-        /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Entry, { on: view === "all", glyph: GridGlyph, label: "All items", count: allCount, onClick: () => onView("all") }),
-        hasFavorites ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Entry, { on: view === "favorites", glyph: StarGlyph, label: "Favorites", count: views.favorites, onClick: () => onView("favorites") }) : null,
-        hasRecents ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Entry, { on: view === "recent", glyph: ClockGlyph, label: "Recently opened", count: views.recent, onClick: () => onView("recent") }) : null,
-        /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Entry, { on: view === "authenticator", glyph: LockGlyph, label: AUTHENTICATOR_LABEL, count: views.authenticator, onClick: () => onView("authenticator") })
+    /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: "flex min-h-0 flex-1 flex-col gap-5 overflow-y-auto px-2 pb-3 pt-1", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: "flex flex-col gap-0.5", children: [
+        hasPage ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Entry, { on: view === "page", glyph: import_icons16.GlobeIcon, label: "This page", onClick: () => onView("page") }) : null,
+        /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Entry, { on: view === "all", glyph: GridGlyph, label: "All items", count: allCount, onClick: () => onView("all") }),
+        hasFavorites ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Entry, { on: view === "favorites", glyph: StarGlyph, label: "Favorites", count: views.favorites, onClick: () => onView("favorites") }) : null,
+        hasRecents ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Entry, { on: view === "recent", glyph: ClockGlyph, label: "Recently opened", count: views.recent, onClick: () => onView("recent") }) : null,
+        /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Entry, { on: view === "authenticator", glyph: LockGlyph, label: AUTHENTICATOR_LABEL, count: views.authenticator, onClick: () => onView("authenticator") })
       ] }),
-      views.categories.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Group, { title: "Categories", children: views.categories.map((e) => /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Entry, { on: view === e.view, glyph: e.glyph, label: e.label, count: e.count, onClick: () => onView(e.view) }, e.view)) }) : null,
-      views.tags.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { className: "flex flex-col gap-0.5", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("button", { type: "button", "aria-expanded": tagsOpen, onClick: () => setTagsOpen((o) => !o), className: "flex h-7 items-center gap-1 rounded-md px-2.5 text-left text-xs font-medium text-muted-foreground hover:text-foreground", children: [
-          tagsOpen ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(ChevronDownGlyph, { className: "size-3.5" }) : /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(ChevronRightGlyph, { className: "size-3.5" }),
+      views.categories.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Group, { title: "Categories", children: views.categories.map((e) => /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Entry, { on: view === e.view, glyph: e.glyph, label: e.label, count: e.count, onClick: () => onView(e.view) }, e.view)) }) : null,
+      views.tags.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: "flex flex-col gap-0.5", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("button", { type: "button", "aria-expanded": tagsOpen, onClick: () => setTagsOpen((o) => !o), className: "flex h-7 items-center gap-1 rounded-md px-2.5 text-left text-xs font-medium text-muted-foreground hover:text-foreground", children: [
+          tagsOpen ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(ChevronDownGlyph, { className: "size-3.5" }) : /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(ChevronRightGlyph, { className: "size-3.5" }),
           "Tags",
-          /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("span", { className: "ml-auto tabular-nums", children: views.tags.length })
+          /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("span", { className: "ml-auto tabular-nums", children: views.tags.length })
         ] }),
-        tagsOpen ? views.tags.map((e) => /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Entry, { on: view === e.view, glyph: e.glyph, label: e.label, count: e.count, onClick: () => onView(e.view) }, e.view)) : null
+        tagsOpen ? views.tags.map((e) => /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Entry, { on: view === e.view, glyph: e.glyph, label: e.label, count: e.count, onClick: () => onView(e.view) }, e.view)) : null
       ] }) : null
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { className: "flex flex-col gap-0.5 border-t border-sidebar-border p-2", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Entry, { on: view === "trash", glyph: TrashGlyph, label: "Trash", count: deletedCount, onClick: () => onView("trash") }),
-      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Entry, { on: false, glyph: ImportGlyph, label: "Import", onClick: () => onPanel("import") }),
-      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Entry, { on: false, glyph: ExportGlyph, label: "Export", onClick: () => onPanel("export") }),
-      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Entry, { on: false, glyph: SafeGlyph, label: "Backup", onClick: () => onPanel("backup") }),
-      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Entry, { on: false, glyph: ShieldGlyph, label: "Browsers that fill", onClick: () => onPanel("devices") }),
-      hasNativeImport ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Entry, { on: false, glyph: ImportGlyph, label: "Import passkeys", onClick: () => onPanel("import-passkeys") }) : null,
-      nativeProvider && nativeProvider.status !== "unavailable" ? /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("button", { type: "button", onClick: nativeProvider.openSetup, className: "flex h-8 w-full items-center gap-2.5 rounded-lg px-2.5 text-left text-sm hover:bg-sidebar-accent", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(ShieldGlyph, { className: "size-4 shrink-0" }),
-        /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("span", { className: "min-w-0 flex-1 truncate", children: "System AutoFill" }),
-        /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("span", { className: (0, import_design_system24.cn)("text-xs", nativeProvider.status === "ready" ? "text-success" : "text-warning"), children: nativeProvider.status === "ready" ? "On" : "Set up" })
+    /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: "flex flex-col gap-0.5 border-t border-sidebar-border p-2", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Entry, { on: view === "trash", glyph: TrashGlyph, label: "Trash", count: deletedCount, onClick: () => onView("trash") }),
+      /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Entry, { on: false, glyph: ImportGlyph, label: "Import", onClick: () => onPanel("import") }),
+      /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Entry, { on: false, glyph: ExportGlyph, label: "Export", onClick: () => onPanel("export") }),
+      /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Entry, { on: false, glyph: SafeGlyph, label: "Backup", onClick: () => onPanel("backup") }),
+      /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Entry, { on: false, glyph: ShieldGlyph, label: "Browsers that fill", onClick: () => onPanel("devices") }),
+      hasNativeImport ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Entry, { on: false, glyph: ImportGlyph, label: "Import passkeys", onClick: () => onPanel("import-passkeys") }) : null,
+      nativeProvider && nativeProvider.status !== "unavailable" ? /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("button", { type: "button", onClick: nativeProvider.openSetup, className: "flex h-8 w-full items-center gap-2.5 rounded-lg px-2.5 text-left text-sm hover:bg-sidebar-accent", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(ShieldGlyph, { className: "size-4 shrink-0" }),
+        /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("span", { className: "min-w-0 flex-1 truncate", children: "System AutoFill" }),
+        /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("span", { className: (0, import_design_system25.cn)("text-xs", nativeProvider.status === "ready" ? "text-success" : "text-warning"), children: nativeProvider.status === "ready" ? "On" : "Set up" })
       ] }) : null
     ] })
   ] });
 }
 
 // src/VaultApp.tsx
-var import_jsx_runtime39 = require("react/jsx-runtime");
+var import_jsx_runtime40 = require("react/jsx-runtime");
 var FULL_AT = 1120;
 var SPLIT_AT = 640;
 var NO_HOST = {};
@@ -7899,8 +8202,8 @@ var generatorLimitsFrom = (knobs) => knobs ? async () => {
 } : void 0;
 function ImportWithLimits(props) {
   const { knobs, ...rest } = props;
-  const [state, setState] = (0, import_react41.useState)(null);
-  (0, import_react41.useEffect)(() => {
+  const [state, setState] = (0, import_react42.useState)(null);
+  (0, import_react42.useEffect)(() => {
     if (!knobs) return setState({ error: "Import is not set up for this organization yet." });
     knobs().then(
       (r) => {
@@ -7913,18 +8216,18 @@ function ImportWithLimits(props) {
       (e) => setState({ error: e instanceof Error ? e.message : "The import settings could not be read." })
     );
   }, [knobs]);
-  if (state && "limits" in state) return /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(ImportPanel, { ...rest, limits: state.limits });
-  return /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Panel, { title: "Import", onClose: rest.onClose, children: /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Empty, { children: state ? state.error : "Reading this organization\u2019s import settings\u2026" }) });
+  if (state && "limits" in state) return /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ImportPanel, { ...rest, limits: state.limits });
+  return /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Panel, { title: "Import", onClose: rest.onClose, children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Empty, { children: state ? state.error : "Reading this organization\u2019s import settings\u2026" }) });
 }
 function VaultApp(props) {
   const lock = props.host?.lock;
   const locked = useLocked(lock);
-  const port = (0, import_react41.useMemo)(() => lock ? guardPort(props.port, () => lock.locked()) : props.port, [props.port, lock]);
-  return /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_design_system25.LookScope, { look: props.look ?? "web", className: "h-full min-h-0 w-full", children: /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("div", { className: "relative h-full min-h-0 w-full", children: /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(NoticeProvider, { notify: props.notify, children: lock && locked ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(LockedScreen, { lock }) : /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(ClipboardProvider, { clipboard: props.host?.clipboard, children: /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(RevealSecondsProvider, { seconds: props.host?.revealSeconds, children: /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(IdentityGate, { identity: props.host?.identity, children: /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(GeneratorLimitsProvider, { resolve: generatorLimitsFrom(props.host?.knobs), children: /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Workspace, { ...props, port }) }) }) }) }) }) }) });
+  const port = (0, import_react42.useMemo)(() => lock ? guardPort(props.port, () => lock.locked()) : props.port, [props.port, lock]);
+  return /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_design_system26.LookScope, { look: props.look ?? "web", className: "h-full min-h-0 w-full", children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("div", { className: "relative h-full min-h-0 w-full", children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(NoticeProvider, { notify: props.notify, children: lock && locked ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(LockedScreen, { lock }) : /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ClipboardProvider, { clipboard: props.host?.clipboard, children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(RevealSecondsProvider, { seconds: props.host?.revealSeconds, children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(IdentityGate, { identity: props.host?.identity, children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(GeneratorLimitsProvider, { resolve: generatorLimitsFrom(props.host?.knobs), children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Workspace, { ...props, port }) }) }) }) }) }) }) });
 }
 function LockedScreen({ lock }) {
-  const [busy, setBusy] = (0, import_react41.useState)(false);
-  const [error, setError] = (0, import_react41.useState)(null);
+  const [busy, setBusy] = (0, import_react42.useState)(false);
+  const [error, setError] = (0, import_react42.useState)(null);
   const unlock = async () => {
     setBusy(true);
     setError(null);
@@ -7936,37 +8239,37 @@ function LockedScreen({ lock }) {
       setBusy(false);
     }
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { role: "region", "aria-label": "Vault locked", className: "flex h-full min-h-0 flex-col items-center justify-center gap-3 p-6 text-center", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(LockGlyph, { className: "size-8 text-muted-foreground" }),
-    /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("div", { className: "text-base font-medium text-foreground", children: "Vault locked" }),
-    /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_controls34.Button, { variant: "primary", disabled: busy, onClick: () => void unlock(), children: lock.unlockLabel ?? "Unlock" }),
-    error ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("div", { role: "alert", className: "max-w-sm text-sm text-destructive", children: error }) : null
+  return /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { role: "region", "aria-label": "Vault locked", className: "flex h-full min-h-0 flex-col items-center justify-center gap-3 p-6 text-center", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(LockGlyph, { className: "size-8 text-muted-foreground" }),
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("div", { className: "text-base font-medium text-foreground", children: "Vault locked" }),
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_controls35.Button, { variant: "primary", disabled: busy, onClick: () => void unlock(), children: lock.unlockLabel ?? "Unlock" }),
+    error ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("div", { role: "alert", className: "max-w-sm text-sm text-destructive", children: error }) : null
   ] });
 }
-function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocationChange }) {
-  const rootRef = (0, import_react41.useRef)(null);
+function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocationChange, onInventory }) {
+  const rootRef = (0, import_react42.useRef)(null);
   const width = useElementWidth(rootRef);
   const mode = layout !== "auto" ? layout : width >= FULL_AT ? "full" : width >= SPLIT_AT ? "split" : "stack";
   const notify = useNotify();
-  const [snap, setSnap] = (0, import_react41.useState)(null);
-  const [items, setItems] = (0, import_react41.useState)([]);
-  const [deleted, setDeleted] = (0, import_react41.useState)([]);
-  const [favorites, setFavorites] = (0, import_react41.useState)(null);
-  const [recents, setRecents] = (0, import_react41.useState)(null);
-  const [error, setError] = (0, import_react41.useState)(null);
-  const [inner, setInner] = (0, import_react41.useState)(DEFAULT_LOCATION);
+  const [snap, setSnap] = (0, import_react42.useState)(null);
+  const [items, setItems] = (0, import_react42.useState)([]);
+  const [deleted, setDeleted] = (0, import_react42.useState)([]);
+  const [favorites, setFavorites] = (0, import_react42.useState)(null);
+  const [recents, setRecents] = (0, import_react42.useState)(null);
+  const [error, setError] = (0, import_react42.useState)(null);
+  const [inner, setInner] = (0, import_react42.useState)(DEFAULT_LOCATION);
   const loc = location ?? inner;
-  const dirty = (0, import_react41.useRef)(false);
-  const [notice, setNotice] = (0, import_react41.useState)(null);
-  const [firstCode, setFirstCode] = (0, import_react41.useState)(null);
-  const move = (0, import_react41.useCallback)(
+  const dirty = (0, import_react42.useRef)(false);
+  const [notice, setNotice] = (0, import_react42.useState)(null);
+  const [firstCode, setFirstCode] = (0, import_react42.useState)(null);
+  const move = (0, import_react42.useCallback)(
     (next, how) => {
       if (!location) setInner(next);
       onLocationChange?.(next, how);
     },
     [location, onLocationChange]
   );
-  const go = (0, import_react41.useCallback)(
+  const go = (0, import_react42.useCallback)(
     (patch, how = "push") => {
       const leaving = patch.itemId !== void 0 || patch.mode !== void 0 || patch.vault !== void 0 || patch.view !== void 0;
       const next = { ...loc, ...patch };
@@ -7978,16 +8281,16 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
         move(next, how);
       };
       if (leaving && dirty.current) {
-        void (0, import_confirm_opener13.confirm)({ title: "Discard your changes?", description: "What you changed in this item is not saved.", confirmLabel: "Discard", cancelLabel: "Keep editing", variant: "destructive" }).then((ok) => ok && proceed());
+        void (0, import_confirm_opener14.confirm)({ title: "Discard your changes?", description: "What you changed in this item is not saved.", confirmLabel: "Discard", cancelLabel: "Keep editing", variant: "destructive" }).then((ok) => ok && proceed());
         return;
       }
       proceed();
     },
     [loc, move]
   );
-  const keyState = (0, import_react41.useRef)({ loc, go });
+  const keyState = (0, import_react42.useRef)({ loc, go });
   keyState.current = { loc, go };
-  (0, import_react41.useEffect)(() => {
+  (0, import_react42.useEffect)(() => {
     const onKey = (e) => {
       if (e.defaultPrevented || e.metaKey || e.ctrlKey || e.altKey) return;
       const root = rootRef.current;
@@ -8009,10 +8312,10 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
     document.addEventListener("keydown", onKey);
     return () => document.removeEventListener("keydown", onKey);
   }, []);
-  const knobsRef = (0, import_react41.useRef)(host.knobs);
+  const knobsRef = (0, import_react42.useRef)(host.knobs);
   knobsRef.current = host.knobs;
-  const [signedOut, setSignedOut] = (0, import_react41.useState)(false);
-  const load = (0, import_react41.useCallback)(() => {
+  const [signedOut, setSignedOut] = (0, import_react42.useState)(false);
+  const load = (0, import_react42.useCallback)(() => {
     setError(null);
     port.load().then((s) => {
       setSnap(s);
@@ -8030,18 +8333,23 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
     knobsRef.current?.().catch(() => void 0);
     port.lists.recents?.list().then(setRecents, () => void 0);
   }, [port]);
-  (0, import_react41.useEffect)(load, [load]);
-  (0, import_react41.useEffect)(() => {
+  (0, import_react42.useEffect)(load, [load]);
+  const inventoryRef = (0, import_react42.useRef)(onInventory);
+  inventoryRef.current = onInventory;
+  (0, import_react42.useEffect)(() => {
+    if (snap) inventoryRef.current?.({ items, definitions: snap.definitions });
+  }, [snap, items]);
+  (0, import_react42.useEffect)(() => {
     if (!loc.itemId || !port.lists.recents) return;
     const id = loc.itemId;
     port.lists.recents.record(id).then(() => setRecents((r) => [id, ...(r ?? []).filter((x) => x !== id)]), () => void 0);
   }, [loc.itemId, port]);
   const orgs = snap?.organizations ?? [];
   const definitions = snap?.definitions ?? [];
-  const inThisVault = (0, import_react41.useMemo)(() => items.filter((i) => inVault(i, loc.vault)), [items, loc.vault]);
+  const inThisVault = (0, import_react42.useMemo)(() => items.filter((i) => inVault(i, loc.vault)), [items, loc.vault]);
   const vaultMixesOwners = new Set(inThisVault.map((i) => i.owner.organizationId ?? i.owner.kind)).size > 1;
-  const views = (0, import_react41.useMemo)(() => buildViews(inThisVault, definitions, favorites, recents), [inThisVault, definitions, favorites, recents]);
-  const visible = (0, import_react41.useMemo)(() => {
+  const views = (0, import_react42.useMemo)(() => buildViews(inThisVault, definitions, favorites, recents), [inThisVault, definitions, favorites, recents]);
+  const visible = (0, import_react42.useMemo)(() => {
     const filtered = inThisVault.filter((i) => {
       if (!matchesQuery(i, loc.q)) return false;
       if (loc.view === "favorites") return favorites?.has(i.id) ?? false;
@@ -8050,10 +8358,10 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
       return inView(i, loc.view);
     });
     if (loc.view === "recent" && recents) return [...filtered].sort((a, b) => recents.indexOf(a.id) - recents.indexOf(b.id));
-    return sortItems(filtered, loc.sort);
+    return sortItems(filtered, loc.sort, recents);
   }, [inThisVault, loc.view, loc.q, loc.sort, favorites, recents, definitions]);
-  const choices = (0, import_react41.useMemo)(() => vaultChoices(items, orgs, loc.vault), [items, orgs, loc.vault]);
-  const matchingIds = (0, import_react41.useMemo)(() => host.page ? new Set(host.page.matchingItemIds) : void 0, [host.page]);
+  const choices = (0, import_react42.useMemo)(() => vaultChoices(items, orgs, loc.vault), [items, orgs, loc.vault]);
+  const matchingIds = (0, import_react42.useMemo)(() => host.page ? new Set(host.page.matchingItemIds) : void 0, [host.page]);
   const selected = loc.itemId ? items.find((i) => i.id === loc.itemId) ?? null : null;
   const replaceItem = (next) => setItems((cur) => cur.some((i) => i.id === next.id) ? cur.map((i) => i.id === next.id ? next : i) : [...cur, next]);
   const toggleFavorite = (id) => {
@@ -8077,35 +8385,35 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
     });
   };
   if (error) {
-    return /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { ref: rootRef, role: "alert", className: "flex h-full flex-col items-center justify-center gap-3 bg-background p-6 text-center text-sm", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(SafeGlyph, { className: "size-8 text-muted-foreground" }),
-      /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("div", { className: "font-medium", children: "The vault couldn\u2019t open" }),
-      /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("div", { className: "max-w-xs text-muted-foreground", children: signedOut ? "You\u2019ve been signed out." : plainLoadError(error) }),
-      /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: "flex gap-2", children: [
-        signedOut && host.signIn ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_controls34.Button, { variant: "primary", onClick: host.signIn, children: "Sign in" }) : null,
-        /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_controls34.Button, { variant: signedOut && host.signIn ? "outline" : "primary", onClick: load, children: "Try again" })
+    return /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { ref: rootRef, role: "alert", className: "flex h-full flex-col items-center justify-center gap-3 bg-background p-6 text-center text-sm", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(SafeGlyph, { className: "size-8 text-muted-foreground" }),
+      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("div", { className: "font-medium", children: "The vault couldn\u2019t open" }),
+      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("div", { className: "max-w-xs text-muted-foreground", children: signedOut ? "You\u2019ve been signed out." : plainLoadError(error) }),
+      /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { className: "flex gap-2", children: [
+        signedOut && host.signIn ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_controls35.Button, { variant: "primary", onClick: host.signIn, children: "Sign in" }) : null,
+        /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_controls35.Button, { variant: signedOut && host.signIn ? "outline" : "primary", onClick: load, children: "Try again" })
       ] })
     ] });
   }
   if (!snap) {
-    return /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("div", { ref: rootRef, className: "flex h-full bg-background", "aria-busy": "true", "aria-label": "Opening the vault", children: /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("div", { className: "flex w-full max-w-sm flex-col gap-1 p-3", children: [0, 1, 2, 3, 4, 5, 6].map((n) => /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: "flex h-12 items-center gap-3 px-2", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("div", { className: "size-8 animate-pulse rounded-lg bg-muted" }),
-      /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: "flex flex-1 flex-col gap-1.5", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("div", { className: "h-3 w-2/3 animate-pulse rounded bg-muted" }),
-        /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("div", { className: "h-2.5 w-1/3 animate-pulse rounded bg-muted" })
+    return /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("div", { ref: rootRef, className: "flex h-full bg-background", "aria-busy": "true", "aria-label": "Opening the vault", children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("div", { className: "flex w-full max-w-sm flex-col gap-1 p-3", children: [0, 1, 2, 3, 4, 5, 6].map((n) => /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { className: "flex h-12 items-center gap-3 px-2", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("div", { className: "size-8 animate-pulse rounded-lg bg-muted" }),
+      /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { className: "flex flex-1 flex-col gap-1.5", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("div", { className: "h-3 w-2/3 animate-pulse rounded bg-muted" }),
+        /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("div", { className: "h-2.5 w-1/3 animate-pulse rounded bg-muted" })
       ] })
     ] }, n)) }) });
   }
   const hasFavorites = port.lists.favorites !== void 0;
   const title = loc.vault === "all" && loc.view === "all" ? "All items" : viewLabel(loc.view, views);
-  const compactHeader = mode === "full" ? void 0 : /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: "grid grid-cols-[minmax(0,1fr)_minmax(0,1fr)_auto_auto] gap-2", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(VaultSelect, { value: loc.vault, choices, onChange: (vault) => go({ vault, itemId: null, panel: null }) }),
-    /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_controls34.Select, { value: loc.view, onValueChange: (view) => go({ view, itemId: null, panel: null }), options: viewOptions(views, inThisVault.length, deleted.length, hasFavorites, port.lists.recents !== void 0, host.page !== void 0), "aria-label": "Show" }),
-    /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(
-      import_controls34.Button,
+  const compactHeader = mode === "full" ? void 0 : /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { className: "grid grid-cols-[minmax(0,1fr)_minmax(0,1fr)_auto_auto] gap-2", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(VaultSelect, { value: loc.vault, choices, onChange: (vault) => go({ vault, itemId: null, panel: null }) }),
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_controls35.Select, { value: loc.view, onValueChange: (view) => go({ view, itemId: null, panel: null }), options: viewOptions(views, inThisVault.length, deleted.length, hasFavorites, port.lists.recents !== void 0, host.page !== void 0), "aria-label": "Show" }),
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(
+      import_controls35.Button,
       {
         variant: loc.view === "authenticator" ? "outline" : "quiet",
-        icon: /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(LockGlyph, {}),
+        icon: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(LockGlyph, {}),
         "aria-label": AUTHENTICATOR_LABEL,
         "aria-pressed": loc.view === "authenticator",
         title: AUTHENTICATOR_LABEL,
@@ -8113,46 +8421,50 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
         children: mode === "split" ? AUTHENTICATOR_LABEL : null
       }
     ),
-    /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)(import_design_system25.DropdownMenu, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_design_system25.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_controls34.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(MoreGlyph, {}), "aria-label": "Vault actions" }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)(import_design_system25.DropdownMenuContent, { align: "end", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)(import_design_system25.DropdownMenuItem, { onSelect: () => go({ panel: "import" }), children: [
-          /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(ImportGlyph, { className: "size-4" }),
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(import_design_system26.DropdownMenu, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_design_system26.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_controls35.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(MoreGlyph, {}), "aria-label": "Vault actions" }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(import_design_system26.DropdownMenuContent, { align: "end", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(import_design_system26.DropdownMenuItem, { onSelect: () => go({ panel: "import" }), children: [
+          /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ImportGlyph, { className: "size-4" }),
           "Import"
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)(import_design_system25.DropdownMenuItem, { onSelect: () => go({ panel: "export" }), children: [
-          /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(ExportGlyph, { className: "size-4" }),
+        /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(import_design_system26.DropdownMenuItem, { onSelect: () => go({ panel: "export" }), children: [
+          /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ExportGlyph, { className: "size-4" }),
           "Export"
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)(import_design_system25.DropdownMenuItem, { onSelect: () => go({ panel: "backup" }), children: [
-          /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(SafeGlyph, { className: "size-4" }),
+        /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(import_design_system26.DropdownMenuItem, { onSelect: () => go({ panel: "backup" }), children: [
+          /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(SafeGlyph, { className: "size-4" }),
           "Backup"
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)(import_design_system25.DropdownMenuItem, { onSelect: () => go({ panel: "devices" }), children: [
-          /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(ShieldGlyph, { className: "size-4" }),
+        /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(import_design_system26.DropdownMenuItem, { onSelect: () => go({ panel: "devices" }), children: [
+          /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ShieldGlyph, { className: "size-4" }),
           "Browsers that fill"
         ] }),
-        host.nativeImport ? /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)(import_design_system25.DropdownMenuItem, { onSelect: () => go({ panel: "import-passkeys" }), children: [
-          /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(ImportGlyph, { className: "size-4" }),
+        host.nativeImport ? /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(import_design_system26.DropdownMenuItem, { onSelect: () => go({ panel: "import-passkeys" }), children: [
+          /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ImportGlyph, { className: "size-4" }),
           "Import passkeys"
         ] }) : null,
-        host.nativeProvider && host.nativeProvider.status !== "unavailable" ? /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)(import_design_system25.DropdownMenuItem, { onSelect: host.nativeProvider.openSetup, children: [
-          /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(ShieldGlyph, { className: "size-4" }),
+        host.nativeProvider && host.nativeProvider.status !== "unavailable" ? /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(import_design_system26.DropdownMenuItem, { onSelect: host.nativeProvider.openSetup, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ShieldGlyph, { className: "size-4" }),
           "System AutoFill"
         ] }) : null,
-        host.lock?.lock ? /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)(import_design_system25.DropdownMenuItem, { onSelect: () => void host.lock?.lock?.(), children: [
-          /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(LockGlyph, { className: "size-4" }),
+        host.lock?.lock ? /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(import_design_system26.DropdownMenuItem, { onSelect: () => void host.lock?.lock?.(), children: [
+          /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(LockGlyph, { className: "size-4" }),
           "Lock"
+        ] }) : null,
+        host.openWebVault ? /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(import_design_system26.DropdownMenuItem, { onSelect: host.openWebVault, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ExternalGlyph, { className: "size-4" }),
+          "Open on the web"
         ] }) : null
       ] })
     ] })
   ] });
-  const viewHeader = /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: "flex flex-col gap-2", children: [
+  const viewHeader = /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { className: "flex flex-col gap-2", children: [
     compactHeader,
-    /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_controls34.SearchField, { value: loc.q, onChange: (e) => go({ q: e.target.value }, "replace"), placeholder: `Search ${viewLabel(loc.view, views)}`, "aria-label": `Search ${viewLabel(loc.view, views)}` })
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_controls35.SearchField, { value: loc.q, onChange: (e) => go({ q: e.target.value }, "replace"), placeholder: `Search ${viewLabel(loc.view, views)}`, "aria-label": `Search ${viewLabel(loc.view, views)}` })
   ] });
   const viewProps = { port, host, items: inThisVault, deleted, definitions, query: loc.q, onOpen: (id) => go({ view: "all", itemId: id, mode: "view", panel: null }), onChanged: load, header: viewHeader };
-  const pageView = loc.view === "page" && host.page && !loc.q ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(
+  const pageView = loc.view === "page" && host.page && !loc.q ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(
     PageView,
     {
       port,
@@ -8170,8 +8482,8 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
       ...compactHeader ? { header: compactHeader } : {}
     }
   ) : null;
-  const specialView = pageView ?? (loc.view === "authenticator" ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(AuthenticatorView, { ...viewProps }) : loc.view === "trash" ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(TrashView, { ...viewProps }) : null);
-  const list = specialView ?? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(
+  const specialView = pageView ?? (loc.view === "authenticator" ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(AuthenticatorView, { ...viewProps }) : loc.view === "trash" ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(TrashView, { ...viewProps }) : null);
+  const list = specialView ?? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(
     ItemList,
     {
       title,
@@ -8185,6 +8497,7 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
       onQuery: (q) => go({ q }, "replace"),
       sort: loc.sort,
       onSort: (sort) => go({ sort }, "replace"),
+      canSortViewed: port.lists.recents !== void 0,
       onNew: () => go({ itemId: null, mode: "new", kind: null, panel: null }),
       ...matchingIds ? { matchingIds } : {},
       ...compactHeader ? { header: compactHeader } : {}
@@ -8198,9 +8511,9 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
   const onPanel = (panel2) => go({ panel: panel2 }, "push");
   let detail;
   if (loc.mode === "new" && !kindDefinition) {
-    detail = /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(NewItemFlow, { definitions, url: loc.url, onUrl: (url) => go({ url }, "replace"), onChoose: (kind, _name, url) => go({ kind, url }, "push"), onCancel: () => go({ mode: "view", kind: null, url: "", itemId: null }) });
+    detail = /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(NewItemFlow, { definitions, url: loc.url, onUrl: (url) => go({ url }, "replace"), onChoose: (kind, _name, url) => go({ kind, url }, "push"), onCancel: () => go({ mode: "view", kind: null, url: "", itemId: null }) });
   } else if (loc.mode === "new" && kindDefinition) {
-    detail = /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(
+    detail = /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(
       ItemPane,
       {
         port,
@@ -8232,7 +8545,7 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
       `new-${kindDefinition.key}`
     );
   } else if (selected) {
-    detail = /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(
+    detail = /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(
       ItemPane,
       {
         port,
@@ -8276,23 +8589,23 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
       selected.id
     );
   } else if (loc.itemId) {
-    detail = /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Blank, { children: "This item is not in your vault, or you cannot see it." });
+    detail = /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Blank, { children: "This item is not in your vault, or you cannot see it." });
   } else {
-    detail = /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Blank, { children: visible.length === 0 ? "" : "Select an item" });
+    detail = /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Blank, { children: visible.length === 0 ? "" : "Select an item" });
   }
   const [panelName, panelArg] = (loc.panel ?? "").split(/:(.*)/s);
   const closePanel = () => go({ panel: null }, "push");
   const vaultPanelProps = { port, host, items, definitions, organizations: orgs, onClose: closePanel, onChanged: load };
   let panel = null;
-  if (panelName === "import") panel = /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(ImportWithLimits, { ...vaultPanelProps, knobs: host.knobs });
-  else if (panelName === "devices") panel = /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(DevicesPanel, { ...vaultPanelProps });
-  else if (panelName === "approve" && panelArg) panel = /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(ApprovePanel, { ...vaultPanelProps, ...approvalFromParams(panelArg, new URLSearchParams(globalThis.location?.search ?? "")) });
-  else if (panelName === "import-passkeys" && host.nativeImport) panel = /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(NativeImportPanel, { ...vaultPanelProps, bridge: host.nativeImport, readLimits: port.native.limits, activeOrganizationId: orgs[0]?.id ?? null });
-  else if (panelName === "export") panel = /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(ExportPanel, { ...vaultPanelProps });
-  else if (panelName === "backup") panel = /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(BackupPanel, { ...vaultPanelProps });
+  if (panelName === "import") panel = /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ImportWithLimits, { ...vaultPanelProps, knobs: host.knobs });
+  else if (panelName === "devices") panel = /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(DevicesPanel, { ...vaultPanelProps });
+  else if (panelName === "approve" && panelArg) panel = /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ApprovePanel, { ...vaultPanelProps, ...approvalFromParams(panelArg, new URLSearchParams(globalThis.location?.search ?? "")) });
+  else if (panelName === "import-passkeys" && host.nativeImport) panel = /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(NativeImportPanel, { ...vaultPanelProps, bridge: host.nativeImport, readLimits: port.native.limits, activeOrganizationId: orgs[0]?.id ?? null });
+  else if (panelName === "export") panel = /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ExportPanel, { ...vaultPanelProps });
+  else if (panelName === "backup") panel = /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(BackupPanel, { ...vaultPanelProps });
   else if (panelName && selected && ITEM_PANELS[panelName]) {
     const P = ITEM_PANELS[panelName];
-    panel = /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(
+    panel = /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(
       P,
       {
         item: selected,
@@ -8315,17 +8628,17 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
   }
   const grid = mode === "full" ? "grid-cols-[15rem_21rem_minmax(0,1fr)]" : mode === "split" ? "grid-cols-[19rem_minmax(0,1fr)]" : "grid-cols-1";
   const shown = panesShown(mode, specialView !== null, showingDetail);
-  return /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { ref: rootRef, className: "flex h-full min-h-0 w-full flex-col bg-background text-foreground", children: [
-    snap.unavailable.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { role: "status", className: "flex items-center gap-3 border-b border-border bg-muted px-4 py-2 text-sm", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("span", { className: "min-w-0 flex-1 truncate text-warning", children: [
+  return /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { ref: rootRef, className: "flex h-full min-h-0 w-full flex-col bg-background text-foreground", children: [
+    snap.unavailable.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { role: "status", className: "flex items-center gap-3 border-b border-border bg-muted px-4 py-2 text-sm", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("span", { className: "min-w-0 flex-1 truncate text-warning", children: [
         "Couldn\u2019t load ",
         snap.unavailable.join(", "),
         ". Showing the rest."
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("button", { type: "button", className: "shrink-0 text-primary hover:underline", onClick: load, children: "Try again" })
+      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("button", { type: "button", className: "shrink-0 text-primary hover:underline", onClick: load, children: "Try again" })
     ] }) : null,
-    /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: `grid min-h-0 w-full flex-1 ${grid} overflow-hidden`, children: [
-      mode === "full" ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { className: `grid min-h-0 w-full flex-1 ${grid} overflow-hidden`, children: [
+      mode === "full" ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(
         VaultSidebar,
         {
           vault: loc.vault,
@@ -8344,10 +8657,10 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
           hasPage: host.page !== void 0
         }
       ) : null,
-      shown.list ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("div", { className: specialView && mode !== "stack" ? "col-span-2 min-h-0" : "min-h-0", children: list }) : null,
+      shown.list ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("div", { className: specialView && mode !== "stack" ? "col-span-2 min-h-0" : "min-h-0", children: list }) : null,
       shown.detail ? detail : null,
       panel,
-      firstCode ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(FirstCodePanel, { port, item: firstCode, onClose: () => setFirstCode(null), onDone: () => setFirstCode(null) }) : null
+      firstCode ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(FirstCodePanel, { port, item: firstCode, onClose: () => setFirstCode(null), onDone: () => setFirstCode(null) }) : null
     ] })
   ] });
 }
@@ -8355,8 +8668,8 @@ function plainLoadError(message2) {
   return /load failed|failed to fetch|network|timed? ?out/i.test(message2) ? "The connection dropped. Check you\u2019re online, then try again." : message2;
 }
 function Blank({ children }) {
-  return /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: "flex h-full flex-col items-center justify-center gap-3 bg-background text-sm text-muted-foreground", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(SafeGlyph, { className: "size-10 text-disabled-foreground" }),
+  return /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { className: "flex h-full flex-col items-center justify-center gap-3 bg-background text-sm text-muted-foreground", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(SafeGlyph, { className: "size-10 text-disabled-foreground" }),
     children
   ] });
 }
@@ -8726,6 +9039,20 @@ function createListsPort(ctx, door) {
 
 // src/sharing/api.ts
 var account6 = __toESM(require("@ai-matrx/api/account"), 1);
+
+// src/secret-field-in.ts
+function secretFieldIn(s) {
+  const envKey = s.envKey?.trim() || null;
+  return {
+    field_key: fieldKeyOf(s.label),
+    value: s.value,
+    handling: s.handling ?? "revealable",
+    ...envKey ? { env_key: envKey } : {},
+    ...envKey && s.injectIntoSandbox ? { inject_into_sandbox: true } : {}
+  };
+}
+
+// src/sharing/api.ts
 function grantOf(w) {
   const org = Boolean(w.organization_id);
   return {
@@ -8825,7 +9152,7 @@ function createSharingPort(ctx, options = {}) {
           non_secret_fields: [...meta.map((f) => ({ key: f.key, label: f.label, value: draft.values[f.key] ?? "" })), ...draft.custom.filter((c) => c.label.trim() !== "").map((c) => ({ key: c.key || fieldKeyOf(c.label), label: c.label, value: c.value }))],
           fields: [
             ...encrypted.map((f) => ({ field_key: f.key, value: draft.values[f.key] ?? "", handling: f.handling })),
-            ...draft.secrets.filter((s) => s.label.trim() !== "" && s.value !== "").map((s) => ({ field_key: fieldKeyOf(s.label), value: s.value, handling: "revealable" }))
+            ...draft.secrets.filter((s) => s.label.trim() !== "" && s.value !== "").map(secretFieldIn)
           ]
         }
       });
@@ -9111,14 +9438,14 @@ function createApiVaultPort(api, options = {}) {
           login_urls: draft.loginUrls,
           // A login a person saves with its website is offered on that website (the server's own
           // default is off, which made "Save a login" on a page answer "No saved login" there).
-          ...draft.loginUrls.length > 0 ? { browser_fill_enabled: true } : {},
+          ...draft.browser ? { uri_match_mode: draft.browser.uriMatchMode, browser_fill_enabled: draft.browser.browserFillEnabled } : draft.loginUrls.length > 0 ? { browser_fill_enabled: true } : {},
           notes: draft.notes || null,
           principal: organizationId ? { type: "organization", organization_id: organizationId } : { type: "user" },
           initiation: "user",
           non_secret_fields: [...meta.map((f) => ({ key: f.key, label: f.label, value: draft.values[f.key] ?? "" })), ...draft.custom.filter((c) => c.label.trim() !== "").map((c) => ({ key: c.key || fieldKeyOf(c.label), label: c.label, value: c.value }))],
           fields: [
             ...encrypted.map((f) => ({ field_key: f.key, value: draft.values[f.key] ?? "", handling: f.handling })),
-            ...draft.secrets.filter((s) => s.label.trim() !== "" && s.value !== "").map((s) => ({ field_key: fieldKeyOf(s.label), value: s.value, handling: "revealable" })),
+            ...draft.secrets.filter((s) => s.label.trim() !== "" && s.value !== "").map(secretFieldIn),
             // Backup codes on a type that does not declare them (a website login): their own encrypted field.
             ...!declared.some((f) => f.key === RECOVERY_CODES_KEY) && (draft.values[RECOVERY_CODES_KEY] ?? "").trim() !== "" ? [{ field_key: RECOVERY_CODES_KEY, value: parseRecoveryCodes(draft.values[RECOVERY_CODES_KEY] ?? "").join("\n"), handling: "revealable", description: "One-time account recovery codes" }] : []
           ]
@@ -9158,7 +9485,7 @@ function createApiVaultPort(api, options = {}) {
       }
       for (const s of draft.secrets) {
         if (s.label.trim() === "" || s.value === "") continue;
-        await account9.addField(api, { path: { item_id: item.id }, body: { field_key: fieldKeyOf(s.label), value: s.value, handling: "revealable" } }, opts);
+        await account9.addField(api, { path: { item_id: item.id }, body: secretFieldIn(s) }, opts);
       }
       for (const id of draft.removed) await account9.deleteField(api, { path: { item_id: item.id, field_id: id } }, opts);
       return { item: await refetch(item.id, item.owner), notice: null };
@@ -9183,4 +9510,42 @@ function createVaultKnobs(client, address) {
     return snap.resolved;
   };
 }
+
+// src/agent-context.ts
+var hostOf = (url) => {
+  try {
+    return new URL(/^[a-z][a-z0-9+.-]*:\/\//i.test(url) ? url : `https://${url}`).host || null;
+  } catch {
+    return null;
+  }
+};
+function providerOf(item, definitions) {
+  return definitions.find((d) => d.key === item.definitionKey)?.providerKey ?? null;
+}
+function vaultItemFacts(item, definitions) {
+  const provider = providerOf(item, definitions);
+  const hosts = item.loginUrls.map(hostOf).filter((h) => Boolean(h));
+  const keys = item.fields.map((f) => f.key).filter((k) => !isAuthenticatorStorage(k));
+  return [
+    `Name: ${item.name}`,
+    ...item.definitionLabel ? [`Type: ${item.definitionLabel}`] : [],
+    ...provider ? [`Provider: ${provider}`] : [],
+    ...hosts.length ? [`Sites: ${hosts.join(", ")}`] : [],
+    `Owner: ${item.owner.label}`,
+    `Status: ${item.turnedOff ? "turned off" : "active"}`,
+    ...item.accessMode ? [`Access: ${item.accessMode}`] : [],
+    ...item.tags.length ? [`Tags: ${item.tags.join(", ")}`] : [],
+    ...keys.length ? [`Fields: ${keys.join(", ")}`] : [],
+    ...item.authenticator ? ["Has a one-time password"] : []
+  ];
+}
+function vaultInventoryScope(inventory, clicked = null) {
+  const { items, definitions } = inventory;
+  const providers = [...new Set(items.map((i) => providerOf(i, definitions)).filter((p) => Boolean(p)))];
+  const content = clicked ? vaultItemFacts(clicked, definitions) : [`Vault \u2014 ${items.length} ${items.length === 1 ? "item" : "items"}`, ...items.map((i) => `\u2022 ${i.name}${i.definitionLabel ? ` \u2014 ${i.definitionLabel}` : ""}`)];
+  return { content: content.join("\n"), credential_count: items.length, credential_labels: items.map((i) => i.name), credential_providers: providers };
+}
+function itemIdAt(target) {
+  return target?.closest("[data-item]")?.getAttribute("data-item") ?? null;
+}
 //# sourceMappingURL=index.cjs.map