@ai-matrx/vault 0.1.35 → 0.1.37

package/dist/index.js

@@ -58,7 +58,7 @@ import {
 } from "./chunk-B5TOAIY6.js";
 
 // src/VaultApp.tsx
-import { useCallback as useCallback4, useEffect as useEffect21, useMemo as useMemo6, useRef as useRef17, useState as useState39, useSyncExternalStore as useSyncExternalStore5 } from "react";
+import { useCallback as useCallback4, useEffect as useEffect22, useMemo as useMemo6, useRef as useRef18, useState as useState40, useSyncExternalStore as useSyncExternalStore5 } from "react";
 import { DropdownMenu as DropdownMenu5, DropdownMenuContent as DropdownMenuContent5, DropdownMenuItem as DropdownMenuItem5, DropdownMenuTrigger as DropdownMenuTrigger5, LookScope } from "@ai-matrx/design-system";
 import { Button as Button33, SearchField as SearchField4, Select as Select12 } from "@ai-matrx/design-system/controls";
 import { confirm as confirm14 } from "@ai-matrx/kit/confirm-opener";
@@ -881,11 +881,11 @@ function whenInDay(iso, now = /* @__PURE__ */ new Date()) {
   if (dayKey(d) === dayKey(now)) return formatRelativeTime(iso, { now: now.getTime() });
   return d.toLocaleTimeString(void 0, { hour: "numeric", minute: "2-digit" });
 }
-function collapseRuns(rows, keyOf) {
+function collapseRuns(rows, keyOf2) {
   const out = [];
   const at = /* @__PURE__ */ new Map();
   for (const row of rows) {
-    const k = keyOf(row);
+    const k = keyOf2(row);
     const seen = at.get(k);
     if (seen) seen.times += 1;
     else {
@@ -1293,14 +1293,12 @@ function CodeButton({ live, digits, size = "md", label }) {
       disabled: !live.code,
       onClick: () => live.code && void copy(live.code),
       "aria-label": live.code ? `Copy ${label} code` : `Getting ${label} code`,
+      ...live.code ? { tooltip: "Copy code" } : {},
       variant: "quiet",
       layout: "row",
-      title: "Copy code",
-      end: /* @__PURE__ */ jsxs5("span", { className: cn5("inline-flex shrink-0 items-center", size === "lg" ? "gap-4" : "gap-3"), children: [
-        /* @__PURE__ */ jsx6("span", { className: cn5("whitespace-nowrap font-mono font-medium tabular-nums tracking-[0.08em]", size === "lg" ? "text-2xl" : "text-[1.0625rem]", live.code ? "text-foreground" : "text-disabled-foreground"), children: shown }),
-        copied ? /* @__PURE__ */ jsx6("span", { className: "inline-flex size-6 items-center justify-center text-success", role: "status", "aria-label": "Copied", children: /* @__PURE__ */ jsx6(CheckGlyph, { className: "size-4" }) }) : /* @__PURE__ */ jsx6(CountdownRing, { remaining: live.remaining, period: live.period, loading: !live.code })
-      ] }),
-      className: "max-w-full shrink-0"
+      fit: true,
+      title: /* @__PURE__ */ jsx6("span", { className: cn5("whitespace-nowrap font-mono font-medium tabular-nums tracking-[0.08em]", size === "lg" ? "text-2xl" : "text-[1.0625rem]", live.code ? "text-foreground" : "text-disabled-foreground"), children: shown }),
+      end: copied ? /* @__PURE__ */ jsx6("span", { className: "inline-flex size-6 items-center justify-center text-success", role: "status", "aria-label": "Copied", children: /* @__PURE__ */ jsx6(CheckGlyph, { className: "size-4" }) }) : /* @__PURE__ */ jsx6(CountdownRing, { remaining: live.remaining, period: live.period, loading: !live.code })
     }
   );
 }
@@ -1410,6 +1408,14 @@ function canDecodeQrLocally() {
 function hasCamera() {
   return typeof navigator !== "undefined" && typeof navigator.mediaDevices?.getUserMedia === "function";
 }
+async function hasCameraDevice() {
+  if (!hasCamera() || typeof navigator.mediaDevices?.enumerateDevices !== "function") return false;
+  try {
+    return (await navigator.mediaDevices.enumerateDevices()).some((d) => d.kind === "videoinput");
+  } catch {
+    return false;
+  }
+}
 async function decodeQr(source) {
   return decodeQrFromElement(source);
 }
@@ -1441,17 +1447,15 @@ function useCanScan() {
   }, []);
   return ok;
 }
-function QrScanPanel({ open, onResult, onClose }) {
+function QrScanInline({ onResult, onClose }) {
   const video = useRef6(null);
   const [error, setError] = useState8(null);
   const done = useRef6(onResult);
   done.current = onResult;
   useEffect8(() => {
-    if (!open) return;
     let stream = null;
     let live = true;
     let timer2 = null;
-    setError(null);
     const stop = () => {
       if (timer2) clearTimeout(timer2);
       stream?.getTracks().forEach((t) => t.stop());
@@ -1494,13 +1498,26 @@ function QrScanPanel({ open, onResult, onClose }) {
       live = false;
       stop();
     };
-  }, [open]);
-  return /* @__PURE__ */ jsxs6(Panel, { title: "Scan QR code", open, onClose, size: "sm", footer: /* @__PURE__ */ jsx7(Button5, { variant: "quiet", onClick: onClose, children: "Cancel" }), children: [
-    /* @__PURE__ */ jsxs6("div", { className: "relative mx-auto aspect-square w-full max-w-sm overflow-hidden rounded-xl bg-muted", children: [
+  }, []);
+  if (error) {
+    return /* @__PURE__ */ jsxs6("p", { className: "flex items-center gap-2 px-1 pt-1 text-xs text-muted-foreground", role: "status", "data-camera-note": "", children: [
+      /* @__PURE__ */ jsx7(CameraGlyph, { className: "size-3.5 shrink-0", "aria-hidden": true }),
+      /* @__PURE__ */ jsxs6("span", { className: "min-w-0 flex-1 truncate", children: [
+        error,
+        " Paste the setup key or choose a QR image."
+      ] }),
+      /* @__PURE__ */ jsx7(Button5, { variant: "quiet", onClick: onClose, children: "Dismiss" })
+    ] });
+  }
+  return /* @__PURE__ */ jsxs6("div", { className: "flex flex-col items-center gap-1.5 pt-2", role: "region", "aria-label": "Scan QR code", "data-camera-preview": "", children: [
+    /* @__PURE__ */ jsxs6("div", { className: "relative aspect-square w-full max-w-56 overflow-hidden rounded-xl bg-muted", children: [
       /* @__PURE__ */ jsx7("video", { ref: video, className: "size-full object-cover", playsInline: true, muted: true, "aria-label": "Camera" }),
-      error ? /* @__PURE__ */ jsx7("div", { className: "absolute inset-0 flex items-center justify-center p-6 text-center text-sm text-destructive", children: error }) : /* @__PURE__ */ jsx7("div", { className: "pointer-events-none absolute inset-[18%] rounded-lg border-2 border-primary", "aria-hidden": true })
+      /* @__PURE__ */ jsx7("div", { className: "pointer-events-none absolute inset-[18%] rounded-lg border-2 border-primary", "aria-hidden": true })
     ] }),
-    /* @__PURE__ */ jsx7("p", { className: "text-center text-xs text-muted-foreground", children: "Point at the site's QR code" })
+    /* @__PURE__ */ jsxs6("div", { className: "flex items-center gap-2", children: [
+      /* @__PURE__ */ jsx7("span", { className: "text-xs text-muted-foreground", children: "Point at the site's QR code" }),
+      /* @__PURE__ */ jsx7(Button5, { variant: "quiet", onClick: onClose, children: "Stop camera" })
+    ] })
   ] });
 }
 function OtpSetupRow({ value, onChange, label = "Authenticator", placeholder = "Paste setup key or otpauth link", disabled = false, autoFocus = false, onImage, onRecognized, status, autoStartCamera = false }) {
@@ -1510,8 +1527,15 @@ function OtpSetupRow({ value, onChange, label = "Authenticator", placeholder = "
   const autoStarted = useRef6(false);
   useEffect8(() => {
     if (!autoStartCamera || !canScan || disabled || autoStarted.current || value) return;
-    autoStarted.current = true;
-    setScanning(true);
+    let live = true;
+    void hasCameraDevice().then((has) => {
+      if (!live || !has || autoStarted.current) return;
+      autoStarted.current = true;
+      setScanning(true);
+    });
+    return () => {
+      live = false;
+    };
   }, [autoStartCamera, canScan, disabled, value]);
   const [reading, setReading] = useState8(false);
   const [imageError, setImageError] = useState8(null);
@@ -1613,10 +1637,9 @@ function OtpSetupRow({ value, onChange, label = "Authenticator", placeholder = "
             ]
           }
         ),
-        canScan ? /* @__PURE__ */ jsx7(
-          QrScanPanel,
+        canScan && scanning ? /* @__PURE__ */ jsx7(
+          QrScanInline,
           {
-            open: scanning,
             onClose: () => setScanning(false),
             onResult: (text) => {
               setScanning(false);
@@ -2102,7 +2125,7 @@ function OtpListRow({ port, item, family, entry, onOpen, onOpenInNewTab, onRenam
   const canManage = item.capabilities.canManage || item.capabilities.canEdit;
   if (a.removed) return null;
   const sub = a.error ?? [entry?.account, loginSiteOf(item) || entry?.issuer].filter((v, i, all) => Boolean(v) && all.indexOf(v) === i).join(" \xB7 ");
-  return /* @__PURE__ */ jsxs9("div", { className: "grid min-h-14 grid-cols-[2rem_minmax(0,1fr)_auto_auto] items-center gap-x-3 rounded-lg px-2 py-1.5 transition-colors hover:bg-accent/50", children: [
+  return /* @__PURE__ */ jsxs9("div", { className: "grid min-h-14 grid-cols-[2rem_minmax(0,1fr)_auto_auto] items-center gap-x-1 rounded-lg px-2 py-1.5 transition-colors hover:bg-accent/50", children: [
     /* @__PURE__ */ jsx10(
       Button8,
       {
@@ -2123,6 +2146,7 @@ function OtpListRow({ port, item, family, entry, onOpen, onOpenInNewTab, onRenam
         onClick: onOpen,
         title: /* @__PURE__ */ jsx10("span", { className: a.enabled ? "text-foreground" : "text-muted-foreground", children: item.name }),
         line: sub ? /* @__PURE__ */ jsx10("span", { className: a.error ? "text-destructive" : "text-muted-foreground", title: sub, children: sub }) : void 0,
+        oneLine: true,
         className: "min-w-0"
       }
     ),
@@ -2729,12 +2753,56 @@ function createVaultKnobs(client, address) {
 }
 var REVEAL_SECONDS_KNOB = "desktop.vault.reveal_hide_seconds";
 var BACKUP_PASSPHRASE_MIN_KNOB = "desktop.vault.backup_passphrase_min_length";
+var ORGANIZATION_SEARCH_AT_KNOB = "vault.organization_search_at";
+var ORGANIZATION_SEARCH_AT_UNREAD = 8;
 function positiveKnob(resolved, key) {
   const v = resolved[key];
   const n = typeof v === "string" && v.trim() !== "" ? Number(v) : v;
   return typeof n === "number" && Number.isFinite(n) && n > 0 ? Math.floor(n) : null;
 }
 
+// src/organizations.ts
+import { shortUuid } from "@ai-matrx/design-system/record-id-format";
+function orderOrganizations(orgs, items, recentItemIds) {
+  const counts = /* @__PURE__ */ new Map();
+  for (const i of items) if (i.owner.organizationId) counts.set(i.owner.organizationId, (counts.get(i.owner.organizationId) ?? 0) + 1);
+  const byId = new Map(items.map((i) => [i.id, i]));
+  const recent = /* @__PURE__ */ new Map();
+  for (const id of recentItemIds ?? []) {
+    const org = byId.get(id)?.owner.organizationId;
+    if (org && !recent.has(org)) recent.set(org, recent.size);
+  }
+  const group = (o) => recent.has(o.id) ? 0 : (counts.get(o.id) ?? 0) > 0 ? 1 : 2;
+  return [...orgs].sort((a, b) => group(a) - group(b) || (recent.get(a.id) ?? 0) - (recent.get(b.id) ?? 0) || a.name.localeCompare(b.name, void 0, { sensitivity: "base" }) || a.id.localeCompare(b.id));
+}
+function organizationHints(orgs) {
+  const seen = /* @__PURE__ */ new Map();
+  for (const o of orgs) seen.set(o.name.trim().toLowerCase(), (seen.get(o.name.trim().toLowerCase()) ?? 0) + 1);
+  return new Map(orgs.filter((o) => (seen.get(o.name.trim().toLowerCase()) ?? 0) > 1).map((o) => [o.id, shortUuid(o.id)]));
+}
+
+// src/shown-until-move.ts
+import { useEffect as useEffect11, useRef as useRef9, useState as useState14 } from "react";
+var keyOf = (loc) => `${String(loc.vault)}|${loc.view}|${loc.itemId ?? ""}|${loc.mode}|${loc.panel ?? ""}|${loc.kind ?? ""}`;
+function useShownUntilMove(loc) {
+  const [shown, setShown] = useState14(null);
+  const home = useRef9(null);
+  const key = keyOf(loc);
+  useEffect11(() => {
+    if (!shown) {
+      home.current = null;
+      return;
+    }
+    if (home.current?.id !== shown.id) home.current = { id: shown.id, key: null };
+    if (home.current.key === null) {
+      if (loc.itemId === shown.id && loc.mode === "view") home.current.key = key;
+      return;
+    }
+    if (key !== home.current.key) setShown(null);
+  }, [shown, key, loc.itemId, loc.mode]);
+  return [shown, setShown];
+}
+
 // src/lock.ts
 import { useSyncExternalStore as useSyncExternalStore2 } from "react";
 var LOCKED_MESSAGE = "The vault is locked. Unlock it first.";
@@ -2776,7 +2844,7 @@ function useLocked(lock) {
 
 // src/io/BackupPanel.tsx
 import { formatFileSize } from "@ai-matrx/kit/format";
-import { useEffect as useEffect11, useRef as useRef9, useState as useState15 } from "react";
+import { useEffect as useEffect12, useRef as useRef10, useState as useState16 } from "react";
 import { Button as Button12, Field as Field5, SegmentedControl as SegmentedControl3, Switch as Switch3 } from "@ai-matrx/design-system/controls";
 import { downloadFile } from "@ai-matrx/kit/download";
 import { confirm as confirm4 } from "@ai-matrx/kit/confirm-opener";
@@ -2869,7 +2937,7 @@ function startNewRestoreRun(preview) {
 }
 
 // src/io/lines.tsx
-import { useState as useState14 } from "react";
+import { useState as useState15 } from "react";
 import { Checkbox } from "@ai-matrx/design-system";
 import { Badge as Badge4, Button as Button11, DisclosureHeader as DisclosureHeader2 } from "@ai-matrx/design-system/controls";
 import { Fragment as Fragment8, jsx as jsx13, jsxs as jsxs12 } from "react/jsx-runtime";
@@ -2882,7 +2950,7 @@ function PickLine({ checked, onChange, disabled = false, title, detail, badge, t
   ] });
 }
 function Windowed({ items, size = 150, render }) {
-  const [all, setAll] = useState14(false);
+  const [all, setAll] = useState15(false);
   const shown = all ? items : items.slice(0, size);
   return /* @__PURE__ */ jsxs12(Fragment8, { children: [
     shown.map(render),
@@ -2893,7 +2961,7 @@ function Windowed({ items, size = 150, render }) {
   ] });
 }
 function More({ title = "More", children }) {
-  const [open, setOpen] = useState14(false);
+  const [open, setOpen] = useState15(false);
   return /* @__PURE__ */ jsxs12("div", { className: "flex flex-col gap-2", children: [
     /* @__PURE__ */ jsx13(DisclosureHeader2, { open, title, onClick: () => setOpen((o) => !o) }),
     open ? children : null
@@ -2933,21 +3001,21 @@ function Omissions({ omissions, accepted, onAccepted, verb }) {
 function BackupPanel({ port, host, items, onClose, onChanged }) {
   const minLength = passphraseMinimum(host.backupPassphraseMinLength);
   const confirmed = useConfirmed();
-  const fileInput = useRef9(null);
-  const abort = useRef9(null);
-  const [mode, setMode] = useState15("backup");
-  const [busy, setBusy] = useState15(false);
-  const [error, setError] = useState15(null);
-  const [passphrase, setPassphrase] = useState15("");
-  const [repeat, setRepeat] = useState15("");
-  const [accepted, setAccepted] = useState15(false);
-  const [selected, setSelected] = useState15(/* @__PURE__ */ new Set());
-  const [backup, setBackup] = useState15(null);
-  const [file, setFile] = useState15(null);
-  const [restorePreview, setRestorePreview] = useState15(null);
-  const [runId, setRunId] = useState15(null);
-  const [result, setResult] = useState15(null);
-  useEffect11(() => () => abort.current?.abort(), []);
+  const fileInput = useRef10(null);
+  const abort = useRef10(null);
+  const [mode, setMode] = useState16("backup");
+  const [busy, setBusy] = useState16(false);
+  const [error, setError] = useState16(null);
+  const [passphrase, setPassphrase] = useState16("");
+  const [repeat, setRepeat] = useState16("");
+  const [accepted, setAccepted] = useState16(false);
+  const [selected, setSelected] = useState16(/* @__PURE__ */ new Set());
+  const [backup, setBackup] = useState16(null);
+  const [file, setFile] = useState16(null);
+  const [restorePreview, setRestorePreview] = useState16(null);
+  const [runId, setRunId] = useState16(null);
+  const [result, setResult] = useState16(null);
+  useEffect12(() => () => abort.current?.abort(), []);
   const switchMode = (next) => {
     abort.current?.abort();
     setMode(next);
@@ -3084,7 +3152,7 @@ function BackupPanel({ port, host, items, onClose, onChanged }) {
         /* @__PURE__ */ jsx14(Summary, { value: backup }),
         /* @__PURE__ */ jsx14(Omissions, { omissions: backup.omissions, accepted, onAccepted: setAccepted, verb: "Back up" }),
         /* @__PURE__ */ jsxs13(VaultSection, { children: [
-          /* @__PURE__ */ jsx14(VaultRow, { label: "Passphrase", hint: minLength ? `At least ${minLength} characters. Not saved.` : "Not saved. It can't be recovered.", children: /* @__PURE__ */ jsx14(Field5, { type: "password", value: passphrase, autoComplete: "new-password", "aria-label": "Backup passphrase", "aria-invalid": short || void 0, onChange: (e) => setPassphrase(e.target.value) }) }),
+          /* @__PURE__ */ jsx14(VaultRow, { label: "Passphrase", hint: minLength ? `At least ${minLength} characters. Not saved. It can't be recovered.` : "Not saved. It can't be recovered.", children: /* @__PURE__ */ jsx14(Field5, { type: "password", value: passphrase, autoComplete: "new-password", "aria-label": "Backup passphrase", "aria-invalid": short || void 0, onChange: (e) => setPassphrase(e.target.value) }) }),
           short ? /* @__PURE__ */ jsxs13("p", { role: "alert", className: "px-1 text-xs text-destructive", "data-passphrase-too-short": "", children: [
             "Use at least ",
             minLength,
@@ -3132,7 +3200,7 @@ function tooShort(passphrase, minLength) {
 }
 
 // src/io/ExportPanel.tsx
-import { useMemo, useState as useState16 } from "react";
+import { useMemo, useState as useState17 } from "react";
 import { Button as Button13, Select as Select5 } from "@ai-matrx/design-system/controls";
 import { downloadFile as downloadFile2 } from "@ai-matrx/kit/download";
 import { confirm as confirm5 } from "@ai-matrx/kit/confirm-opener";
@@ -3157,11 +3225,11 @@ function omissionText2(omissions) {
 function ExportPanel({ port, items, onClose }) {
   const confirmed = useConfirmed();
   const logins = useMemo(() => items.filter((i) => i.definitionKey === WEBSITE_LOGIN), [items]);
-  const [profile, setProfile] = useState16("matrx_login_csv_v1");
-  const [selected, setSelected] = useState16(/* @__PURE__ */ new Set());
-  const [preview, setPreview] = useState16(null);
-  const [busy, setBusy] = useState16(false);
-  const [error, setError] = useState16(null);
+  const [profile, setProfile] = useState17("matrx_login_csv_v1");
+  const [selected, setSelected] = useState17(/* @__PURE__ */ new Set());
+  const [preview, setPreview] = useState17(null);
+  const [busy, setBusy] = useState17(false);
+  const [error, setError] = useState17(null);
   const format = FORMATS.find((f) => f.value === profile);
   const reasons = new Map(preview?.items.map((p) => [p.item_id, p]) ?? []);
   const eligible = preview?.items.filter((p) => p.eligible).length ?? 0;
@@ -3286,7 +3354,7 @@ function ExportPanel({ port, items, onClose }) {
 }
 
 // src/io/ImportPanel.tsx
-import { useEffect as useEffect12, useMemo as useMemo2, useRef as useRef10, useState as useState17 } from "react";
+import { useEffect as useEffect13, useMemo as useMemo2, useRef as useRef11, useState as useState18 } from "react";
 import { Button as Button14, Select as Select6, Switch as Switch4, Textarea as Textarea2 } from "@ai-matrx/design-system/controls";
 
 // src/io/csv-import.ts
@@ -4148,25 +4216,25 @@ var STATE_BADGE = {
 var ME = "me";
 function ImportPanel({ port, host, items, definitions, organizations, onClose, onChanged, limits }) {
   const confirmed = useConfirmed();
-  const [otpFor, setOtpFor] = useState17(null);
-  const fileInput = useRef10(null);
-  const abort = useRef10(null);
-  const stop = useRef10(false);
-  const keys = useRef10(/* @__PURE__ */ new Map());
-  const [source, setSource] = useState17("auto");
-  const [envText, setEnvText] = useState17("");
-  const [injectSandbox, setInjectSandbox] = useState17(false);
-  const [fileName, setFileName] = useState17(null);
-  const [reading, setReading] = useState17(false);
-  const [draft, setDraft] = useState17(null);
-  const [destination, setDestination] = useState17(ME);
-  const [browserFill, setBrowserFill] = useState17(false);
-  const [approvedVisible, setApprovedVisible] = useState17(false);
-  const [selected, setSelected] = useState17(/* @__PURE__ */ new Set());
-  const [running, setRunning] = useState17(null);
-  const [done, setDone] = useState17(null);
-  const [error, setError] = useState17(null);
-  useEffect12(
+  const [otpFor, setOtpFor] = useState18(null);
+  const fileInput = useRef11(null);
+  const abort = useRef11(null);
+  const stop = useRef11(false);
+  const keys = useRef11(/* @__PURE__ */ new Map());
+  const [source, setSource] = useState18("auto");
+  const [envText, setEnvText] = useState18("");
+  const [injectSandbox, setInjectSandbox] = useState18(false);
+  const [fileName, setFileName] = useState18(null);
+  const [reading, setReading] = useState18(false);
+  const [draft, setDraft] = useState18(null);
+  const [destination, setDestination] = useState18(ME);
+  const [browserFill, setBrowserFill] = useState18(false);
+  const [approvedVisible, setApprovedVisible] = useState18(false);
+  const [selected, setSelected] = useState18(/* @__PURE__ */ new Set());
+  const [running, setRunning] = useState18(null);
+  const [done, setDone] = useState18(null);
+  const [error, setError] = useState18(null);
+  useEffect13(
     () => () => {
       abort.current?.abort();
       stop.current = true;
@@ -4453,14 +4521,14 @@ function Notices({ draft }) {
 }
 
 // src/ItemList.tsx
-import { useEffect as useEffect15, useRef as useRef13, useState as useState26 } from "react";
+import { useEffect as useEffect16, useRef as useRef14, useState as useState27 } from "react";
 import { DropdownMenu as DropdownMenu4, DropdownMenuContent as DropdownMenuContent4, DropdownMenuItem as DropdownMenuItem4, DropdownMenuRadioGroup, DropdownMenuRadioItem, DropdownMenuSeparator as DropdownMenuSeparator4, DropdownMenuTrigger as DropdownMenuTrigger4 } from "@ai-matrx/design-system";
 import { cn as cn11 } from "@ai-matrx/design-system";
 import { Button as Button22, SearchField, Tile as Tile3 } from "@ai-matrx/design-system/controls";
 import { CopyIcon as CopyIcon7 } from "@ai-matrx/design-system/icons";
 
 // src/ItemPane.tsx
-import { Fragment as Fragment16, useEffect as useEffect14, useMemo as useMemo3, useRef as useRef12, useState as useState25 } from "react";
+import { Fragment as Fragment16, useEffect as useEffect15, useMemo as useMemo3, useRef as useRef13, useState as useState26 } from "react";
 import { DropdownMenu as DropdownMenu3, DropdownMenuContent as DropdownMenuContent3, DropdownMenuItem as DropdownMenuItem3, DropdownMenuSeparator as DropdownMenuSeparator3, DropdownMenuTrigger as DropdownMenuTrigger3 } from "@ai-matrx/design-system";
 import { cn as cn10 } from "@ai-matrx/design-system";
 import { Badge as Badge7, Button as Button21, CONTROLS_CONTAINER_CLASS, OptionCombobox, Switch as Switch6 } from "@ai-matrx/design-system/controls";
@@ -4468,7 +4536,7 @@ import { confirm as confirm10 } from "@ai-matrx/kit/confirm-opener";
 
 // src/activity/FilesSection.tsx
 import { formatFileSize as formatFileSize2 } from "@ai-matrx/kit/format";
-import { useRef as useRef11, useState as useState18 } from "react";
+import { useRef as useRef12, useState as useState19 } from "react";
 import { Badge as Badge5, Button as Button15, Field as Field6, SegmentedControl as SegmentedControl4 } from "@ai-matrx/design-system/controls";
 import { cn as cn7 } from "@ai-matrx/design-system";
 import { confirm as confirm6 } from "@ai-matrx/kit/confirm-opener";
@@ -4486,11 +4554,11 @@ function FilesSection({ item, port, editing, onChanged }) {
   const confirmed = useConfirmed();
   const canEdit = editing && item.capabilities.canEdit;
   const canAdd = item.capabilities.canEdit;
-  const [busy, setBusy] = useState18(null);
-  const [error, setError] = useState18(null);
-  const [pending, setPending] = useState18(null);
-  const [dragging, setDragging] = useState18(false);
-  const picker = useRef11(null);
+  const [busy, setBusy] = useState19(null);
+  const [error, setError] = useState19(null);
+  const [pending, setPending] = useState19(null);
+  const [dragging, setDragging] = useState19(false);
+  const picker = useRef12(null);
   if (!canAdd && item.attachments.length === 0) return null;
   async function run(key, work, fallback) {
     setBusy(key);
@@ -4567,8 +4635,8 @@ function FilesSection({ item, port, editing, onChanged }) {
   );
 }
 function EditableFile({ port, item: it, file: a, busy: b, run: go, onDownload, onTooBig }) {
-  const [open, setOpen] = useState18(false);
-  const replacer = useRef11(null);
+  const [open, setOpen] = useState19(false);
+  const replacer = useRef12(null);
   async function remove() {
     const yes = await confirm6({ title: `Delete ${a.label}?`, description: "The encrypted file is removed from this item.", confirmLabel: "Delete", variant: "destructive" });
     if (yes) await go(`delete:${a.id}`, () => port.activity.deleteFile(it, a.id), "The file could not be deleted.");
@@ -4626,9 +4694,9 @@ function Protection({ value, locked, onChange }) {
   );
 }
 function NewFile({ file, busy, onAdd, onCancel }) {
-  const [label, setLabel] = useState18(file.name);
-  const [description, setDescription] = useState18("");
-  const [handling, setHandling] = useState18("revealable");
+  const [label, setLabel] = useState19(file.name);
+  const [description, setDescription] = useState19("");
+  const [handling, setHandling] = useState19("revealable");
   async function add() {
     if (handling === "sealed" && !await confirmSeal(label)) return;
     await onAdd({ label: label.trim(), description: description.trim() || null, handling });
@@ -4648,10 +4716,10 @@ function NewFile({ file, busy, onAdd, onCancel }) {
   ] });
 }
 function FileDetailsRows({ file, busy, onSave, onCancel }) {
-  const [label, setLabel] = useState18(file.label);
-  const [description, setDescription] = useState18(file.description);
-  const [fileName, setFileName] = useState18(file.fileName);
-  const [handling, setHandling] = useState18(file.handling);
+  const [label, setLabel] = useState19(file.label);
+  const [description, setDescription] = useState19(file.description);
+  const [fileName, setFileName] = useState19(file.fileName);
+  const [handling, setHandling] = useState19(file.handling);
   const changed = label !== file.label || description !== file.description || fileName !== file.fileName || handling !== file.handling;
   async function save() {
     if (handling === "sealed" && file.handling !== "sealed" && !await confirmSeal(label)) return;
@@ -4677,10 +4745,10 @@ function confirmSeal(label) {
   });
 }
 function DraftFilesSection({ files, onFiles }) {
-  const [pending, setPending] = useState18(null);
-  const [error, setError] = useState18(null);
-  const [dragging, setDragging] = useState18(false);
-  const picker = useRef11(null);
+  const [pending, setPending] = useState19(null);
+  const [error, setError] = useState19(null);
+  const [dragging, setDragging] = useState19(false);
+  const picker = useRef12(null);
   const choose = (file) => {
     if (!file) return;
     if (fileTooBig(file.size)) return setError(TOO_BIG);
@@ -4729,7 +4797,7 @@ function DraftFilesSection({ files, onFiles }) {
 }
 
 // src/fields/RecoveryCodesRow.tsx
-import { useState as useState19 } from "react";
+import { useState as useState20 } from "react";
 import { Badge as Badge6, Button as Button16, Textarea as Textarea3 } from "@ai-matrx/design-system/controls";
 import { CopyIcon as CopyIcon6 } from "@ai-matrx/design-system/icons";
 import { Fragment as Fragment13, jsx as jsx18, jsxs as jsxs17 } from "react/jsx-runtime";
@@ -4739,9 +4807,9 @@ function RecoveryCodesRow({ item, field, port, onChanged }) {
   const confirmed = useConfirmed();
   const copyValue2 = useCopy();
   const secret = useTransientSecret();
-  const [busy, setBusy] = useState19(false);
-  const [error, setError] = useState19(null);
-  const [draft, setDraft] = useState19(null);
+  const [busy, setBusy] = useState20(false);
+  const [error, setError] = useState20(null);
+  const [draft, setDraft] = useState20(null);
   const canEdit = item.capabilities.canEdit;
   const run = async (step) => {
     setBusy(true);
@@ -4836,7 +4904,7 @@ function RecoveryCodesRow({ item, field, port, onChanged }) {
 }
 
 // src/fields/DraftRows.tsx
-import { useState as useState20 } from "react";
+import { useState as useState21 } from "react";
 import { Button as Button17, Field as Field7, SegmentedControl as SegmentedControl5, Select as Select7, Switch as Switch5 } from "@ai-matrx/design-system/controls";
 import { RecordId } from "@ai-matrx/design-system";
 import { confirm as confirm7 } from "@ai-matrx/kit/confirm-opener";
@@ -4891,7 +4959,7 @@ function FieldSettingsRows({ name, value, defaultHandling = "revealable", onChan
 var hasSecretSettings = (s) => saysMore(s, "revealable");
 var hasDeclaredSettings = (s, defaultHandling) => Boolean(s && saysMore(s, defaultHandling));
 function SecretBuilderRow({ field, onChange, onRemove }) {
-  const [open, setOpen] = useState20(hasSecretSettings(field));
+  const [open, setOpen] = useState21(hasSecretSettings(field));
   const handling = field.handling ?? "revealable";
   const name = field.label.trim() || "Secret";
   return /* @__PURE__ */ jsxs18(Fragment14, { children: [
@@ -5132,7 +5200,7 @@ function targetLabel(t) {
 }
 
 // src/extension/UseOnSiteButton.tsx
-import { useState as useState21 } from "react";
+import { useState as useState22 } from "react";
 import { Button as Button18 } from "@ai-matrx/design-system/controls";
 import { jsx as jsx20 } from "react/jsx-runtime";
 function canUseOnSite(item, pageUrl) {
@@ -5140,7 +5208,7 @@ function canUseOnSite(item, pageUrl) {
 }
 function UseOnSiteButton({ port, item, pageUrl, onChanged }) {
   const notify = useNotify();
-  const [busy, setBusy] = useState21(false);
+  const [busy, setBusy] = useState22(false);
   if (!canUseOnSite(item, pageUrl)) return null;
   const site = pageSite(pageUrl);
   const run = async () => {
@@ -5159,7 +5227,7 @@ function UseOnSiteButton({ port, item, pageUrl, onChanged }) {
 }
 
 // src/sharing/SharePanel.tsx
-import { useEffect as useEffect13, useState as useState24 } from "react";
+import { useEffect as useEffect14, useState as useState25 } from "react";
 import { confirm as confirm9 } from "@ai-matrx/kit/confirm-opener";
 import { Button as Button20, DisclosureHeader as DisclosureHeader3, Field as Field9, RegionSkeleton, Select as Select9 } from "@ai-matrx/design-system/controls";
 import { cn as cn9 } from "@ai-matrx/design-system";
@@ -5182,14 +5250,17 @@ function isEmail(value) {
 }
 var PERSONAL = "personal";
 var destinationOf = (key) => key === PERSONAL ? null : key;
+var orgChoice = (o, hints) => ({ value: o.id, label: o.name, ...hints.has(o.id) ? { hint: hints.get(o.id) } : {} });
 function moveDestinations(item, orgs) {
   if (item.owner.kind === "shared") return [];
   const here = item.owner.organizationId;
-  return [...here ? [{ value: PERSONAL, label: "Personal" }] : [], ...orgs.filter((o) => o.id !== here).map((o) => ({ value: o.id, label: o.name }))];
+  const hints = organizationHints(orgs);
+  return [...here ? [{ value: PERSONAL, label: "Personal" }] : [], ...orgs.filter((o) => o.id !== here).map((o) => orgChoice(o, hints))];
 }
 function copyDestinations(orgs, item) {
   const here = item ? item.owner.kind === "me" ? PERSONAL : item.owner.organizationId : void 0;
-  return [{ value: PERSONAL, label: "Personal" }, ...orgs.map((o) => ({ value: o.id, label: o.name }))].filter((d) => d.value !== here);
+  const hints = organizationHints(orgs);
+  return [{ value: PERSONAL, label: "Personal" }, ...orgs.map((o) => orgChoice(o, hints))].filter((d) => d.value !== here);
 }
 function copyRefusal(message2) {
   return /duplicate/i.test(message2) ? "There is already a copy of this item there." : null;
@@ -5217,7 +5288,7 @@ function shareSummary(grants) {
 var MEMBER_CHOICE_DEFAULT = "default";
 
 // src/sharing/parts.tsx
-import { useState as useState22 } from "react";
+import { useState as useState23 } from "react";
 import { cn as cn8 } from "@ai-matrx/design-system";
 import { jsx as jsx21, jsxs as jsxs19 } from "react/jsx-runtime";
 var message = (e, fallback) => {
@@ -5226,9 +5297,9 @@ var message = (e, fallback) => {
 };
 function useConfirmedChange() {
   const confirmed = useConfirmed();
-  const [busy, setBusy] = useState22(null);
-  const [error, setError] = useState22(null);
-  const [notice, setNotice] = useState22(null);
+  const [busy, setBusy] = useState23(null);
+  const [error, setError] = useState23(null);
+  const [notice, setNotice] = useState23(null);
   async function run(key, fn, done) {
     setBusy(key);
     setError(null);
@@ -5262,18 +5333,20 @@ function StatusLine({ error, notice }) {
 }
 
 // src/sharing/MovePanel.tsx
-import { useState as useState23 } from "react";
+import { useState as useState24 } from "react";
 import { confirm as confirm8 } from "@ai-matrx/kit/confirm-opener";
 import { Button as Button19, Field as Field8, Select as Select8 } from "@ai-matrx/design-system/controls";
 import { jsx as jsx22, jsxs as jsxs20 } from "react/jsx-runtime";
 var NONE = "__none__";
-function MovePanel({ item, port, organizations, onClose, onChanged }) {
+function MovePanel({ item, port, host, organizations, onClose, onChanged, onOpenItem }) {
   const { busy, error, notice, run, setNotice } = useConfirmedChange();
   const moves = moveDestinations(item, organizations);
   const copies = copyDestinations(organizations, item);
-  const [moveTo, setMoveTo] = useState23("");
-  const [copyTo, setCopyTo] = useState23("");
-  const [email, setEmail] = useState23("");
+  const [moveTo, setMoveTo] = useState24("");
+  const [copyTo, setCopyTo] = useState24("");
+  const [email, setEmail] = useState24("");
+  const [made, setMade] = useState24(null);
+  const searchAt = host.organizationSearchAt ?? ORGANIZATION_SEARCH_AT_UNREAD;
   const passkey = isPasskey(item);
   const canMove = item.capabilities.canManage && !passkey && moves.length > 0;
   const canGive = item.capabilities.canManage && item.owner.kind === "me" && !passkey;
@@ -5307,8 +5380,10 @@ function MovePanel({ item, port, organizations, onClose, onChanged }) {
   };
   const copy = async () => {
     if (!copyChoice) return;
-    const made = await run("copy", () => port.sharing.copy(item, destinationOf(copyChoice.value)), `Copy made in ${copyChoice.label}`);
-    if (made) onChanged();
+    const copied = await run("copy", () => port.sharing.copy(item, destinationOf(copyChoice.value)), `Copy made in ${copyChoice.label}`);
+    if (!copied) return;
+    setMade(copied);
+    onChanged();
   };
   const nothing = !canMove && !canGive && !canCopy;
   return /* @__PURE__ */ jsx22(
@@ -5317,7 +5392,10 @@ function MovePanel({ item, port, organizations, onClose, onChanged }) {
       title: "Move or copy",
       size: "md",
       onClose,
-      footer: /* @__PURE__ */ jsx22(PanelFooter, { status: error || notice ? /* @__PURE__ */ jsx22(StatusLine, { error, notice }) : null, children: /* @__PURE__ */ jsx22(Button19, { variant: "primary", onClick: onClose, children: "Done" }) }),
+      footer: /* @__PURE__ */ jsxs20(PanelFooter, { status: error || notice ? /* @__PURE__ */ jsx22(StatusLine, { error, notice }) : null, children: [
+        made && onOpenItem ? /* @__PURE__ */ jsx22(Button19, { variant: "outline", onClick: () => onOpenItem(made), children: "Open copy" }) : null,
+        /* @__PURE__ */ jsx22(Button19, { variant: "primary", onClick: onClose, children: "Done" })
+      ] }),
       children: nothing ? /* @__PURE__ */ jsx22(VaultSection, { children: /* @__PURE__ */ jsx22(Empty, { children: passkey ? "A passkey stays where it was created." : "Only the owner can move or give this item." }) }) : /* @__PURE__ */ jsxs20(VaultSection, { children: [
         canMove && moves.length > 0 ? /* @__PURE__ */ jsx22(
           VaultRow,
@@ -5325,7 +5403,7 @@ function MovePanel({ item, port, organizations, onClose, onChanged }) {
             label: "Move to",
             hint: moveChoice ? itemMoveConsequence(item, destinationOf(moveChoice.value)) : void 0,
             actions: /* @__PURE__ */ jsx22(Button19, { variant: "outline", disabled: busy !== null || !moveChoice, onClick: () => void move(), children: "Move" }),
-            children: /* @__PURE__ */ jsx22(Select8, { className: "w-full", "aria-label": "Move to", value: moveTo || NONE, onValueChange: (v) => setMoveTo(v === NONE ? "" : v), options: [{ value: NONE, label: "Choose where" }, ...moves] })
+            children: /* @__PURE__ */ jsx22(Select8, { className: "w-full", "aria-label": "Move to", searchAt, value: moveTo || NONE, onValueChange: (v) => setMoveTo(v === NONE ? "" : v), options: [{ value: NONE, label: "Choose where" }, ...moves] })
           }
         ) : null,
         canGive ? /* @__PURE__ */ jsx22(VaultRow, { label: "Give to", hint: "You lose all access; your shares end", actions: /* @__PURE__ */ jsx22(Button19, { variant: "danger", disabled: busy !== null || !isEmail(email), onClick: () => void give(), children: "Give" }), children: /* @__PURE__ */ jsx22(
@@ -5342,7 +5420,7 @@ function MovePanel({ item, port, organizations, onClose, onChanged }) {
             onChange: (e) => setEmail(e.target.value)
           }
         ) }) : null,
-        canCopy && copies.length > 0 ? /* @__PURE__ */ jsx22(VaultRow, { label: "Copy to", hint: "A separate item; edits no longer sync", actions: /* @__PURE__ */ jsx22(Button19, { variant: "outline", disabled: busy !== null || !copyChoice, onClick: () => void copy(), children: "Copy" }), children: /* @__PURE__ */ jsx22(Select8, { className: "w-full", "aria-label": "Copy to", value: copyTo || NONE, onValueChange: (v) => setCopyTo(v === NONE ? "" : v), options: [{ value: NONE, label: "Choose where" }, ...copies] }) }) : null
+        canCopy && copies.length > 0 ? /* @__PURE__ */ jsx22(VaultRow, { label: "Copy to", hint: "A separate item; edits no longer sync", actions: /* @__PURE__ */ jsx22(Button19, { variant: "outline", disabled: busy !== null || !copyChoice, onClick: () => void copy(), children: "Copy" }), children: /* @__PURE__ */ jsx22(Select8, { className: "w-full", "aria-label": "Copy to", searchAt, value: copyTo || NONE, onValueChange: (v) => setCopyTo(v === NONE ? "" : v), options: [{ value: NONE, label: "Choose where" }, ...copies] }) }) : null
       ] })
     }
   );
@@ -5351,11 +5429,11 @@ function MovePanel({ item, port, organizations, onClose, onChanged }) {
 // src/sharing/SharePanel.tsx
 import { Fragment as Fragment15, jsx as jsx23, jsxs as jsxs21 } from "react/jsx-runtime";
 function useGrants(port, item) {
-  const [grants, setGrants] = useState24(null);
-  const [loadError, setLoadError] = useState24(null);
-  const [nonce, setNonce] = useState24(0);
+  const [grants, setGrants] = useState25(null);
+  const [loadError, setLoadError] = useState25(null);
+  const [nonce, setNonce] = useState25(0);
   const allowed = item.capabilities.canManage;
-  useEffect13(() => {
+  useEffect14(() => {
     if (!allowed) return;
     let live = true;
     setLoadError(null);
@@ -5372,9 +5450,9 @@ function useGrants(port, item) {
 function SharePanel({ item, port, organizations, onClose, onChanged }) {
   const { grants, setGrants, loadError, reload } = useGrants(port, item);
   const { busy, error, notice, run } = useConfirmedChange();
-  const [email, setEmail] = useState24("");
-  const [level, setLevel] = useState24("use");
-  const [more, setMore] = useState24(false);
+  const [email, setEmail] = useState25("");
+  const [level, setLevel] = useState25("use");
+  const [more, setMore] = useState25(false);
   const isOrg = item.owner.kind === "organization" && item.owner.organizationId !== null;
   const orgName = item.owner.label;
   const people = (grants ?? []).filter((g) => g.kind === "person");
@@ -5493,8 +5571,8 @@ function SharePanel({ item, port, organizations, onClose, onChanged }) {
 function IntoOrganization({ item, port, organizations, grants, onShared }) {
   const { busy, error, notice, run } = useConfirmedChange();
   const open = organizations.filter((o) => !grants.some((g) => g.organizationId === o.id));
-  const [target, setTarget] = useState24("");
-  const [level, setLevel] = useState24("use");
+  const [target, setTarget] = useState25("");
+  const [level, setLevel] = useState25("use");
   const chosen = open.find((o) => o.id === target);
   if (item.owner.kind !== "me") return null;
   return /* @__PURE__ */ jsx23(VaultSection, { title: "Share into organization", children: open.length > 0 ? /* @__PURE__ */ jsxs21(Fragment15, { children: [
@@ -5529,10 +5607,10 @@ var CHOICES = [
   { value: "editor", label: "Can edit", meta: "See and change" }
 ];
 function MemberAccess({ port, organizationId, organizationName }) {
-  const [list, setList] = useState24(null);
-  const [loadError, setLoadError] = useState24(null);
+  const [list, setList] = useState25(null);
+  const [loadError, setLoadError] = useState25(null);
   const { busy, error, run } = useConfirmedChange();
-  useEffect13(() => {
+  useEffect14(() => {
     let live = true;
     port.sharing.memberAccess(organizationId).then(
       (l) => live && setList(l),
@@ -5564,9 +5642,9 @@ function MemberAccess({ port, organizationId, organizationName }) {
   ] });
 }
 function SharingSummary({ item, port, className }) {
-  const [text, setText] = useState24("");
+  const [text, setText] = useState25("");
   const allowed = item.capabilities.canManage;
-  useEffect13(() => {
+  useEffect14(() => {
     if (!allowed) return;
     let live = true;
     port.sharing.grants(item).then(
@@ -5597,7 +5675,7 @@ function ItemPane(props) {
   const editing = mode !== "view";
   const seedName = seed?.name ?? "";
   const seedUrl = seed?.url ?? "";
-  const [loaded, setLoaded] = useState25({});
+  const [loaded, setLoaded] = useState26({});
   const base = useMemo3(() => {
     const b = draftOf(item);
     if (!item) {
@@ -5607,28 +5685,28 @@ function ItemPane(props) {
     b.values = { ...loaded };
     return b;
   }, [item, seedName, seedUrl, loaded]);
-  const [draft, setDraft] = useState25(base);
-  const [tagsText, setTagsText] = useState25(base.tags.join(", "));
-  const [showTags, setShowTags] = useState25(false);
-  const [showDescription, setShowDescription] = useState25(false);
-  const [showRecovery, setShowRecovery] = useState25(false);
-  const [settingUpOtp, setSettingUpOtp] = useState25(false);
-  const [owner, setOwner] = useState25(defaultOwner ?? "me");
-  const [recipient, setRecipient] = useState25("");
-  const [generatePrivately, setGeneratePrivately] = useState25(false);
-  const [busy, setBusy] = useState25(false);
-  const [sent, setSent] = useState25(null);
-  const [queuedFiles, setQueuedFiles] = useState25([]);
-  const [showBrowser, setShowBrowser] = useState25(false);
-  const [error, setError] = useState25(null);
-  const [destinations, setDestinations] = useState25({});
-  const [savedNew, setSavedNew] = useState25(false);
+  const [draft, setDraft] = useState26(base);
+  const [tagsText, setTagsText] = useState26(base.tags.join(", "));
+  const [showTags, setShowTags] = useState26(false);
+  const [showDescription, setShowDescription] = useState26(false);
+  const [showRecovery, setShowRecovery] = useState26(false);
+  const [settingUpOtp, setSettingUpOtp] = useState26(false);
+  const [owner, setOwner] = useState26(defaultOwner ?? "me");
+  const [recipient, setRecipient] = useState26("");
+  const [generatePrivately, setGeneratePrivately] = useState26(false);
+  const [busy, setBusy] = useState26(false);
+  const [sent, setSent] = useState26(null);
+  const [queuedFiles, setQueuedFiles] = useState26([]);
+  const [showBrowser, setShowBrowser] = useState26(false);
+  const [error, setError] = useState26(null);
+  const [destinations, setDestinations] = useState26({});
+  const [savedNew, setSavedNew] = useState26(false);
   const dirty = editing && !savedNew && isDirty(base, draft);
   const declared = definition?.fields ?? [];
-  const prev = useRef12(null);
-  const paneRef = useRef12(null);
+  const prev = useRef13(null);
+  const paneRef = useRef13(null);
   const room = useRoomOf(paneRef);
-  useEffect14(() => {
+  useEffect15(() => {
     const was = prev.current;
     const id = item?.id ?? null;
     if (was && was.id === id && was.mode === mode && editing) {
@@ -5641,22 +5719,22 @@ function ItemPane(props) {
     }
     prev.current = { base, id, mode };
   }, [base, mode, item?.id, editing]);
-  useEffect14(() => {
+  useEffect15(() => {
     setLoaded({});
     setShowTags(false);
     setShowDescription(false);
     setShowRecovery(false);
     setSavedNew(false);
   }, [item?.id, mode]);
-  const onDirtyRef = useRef12(onDirty);
+  const onDirtyRef = useRef13(onDirty);
   onDirtyRef.current = onDirty;
-  useEffect14(() => onDirtyRef.current(dirty), [dirty]);
+  useEffect15(() => onDirtyRef.current(dirty), [dirty]);
   const keepKey = draftKey(item?.id ?? null, definition?.key ?? item?.definitionKey ?? null);
-  useEffect14(() => {
+  useEffect15(() => {
     if (editing && dirty) keepDraft(keepKey, keptFieldsOf(draft), { basedOn: item?.updatedAt ?? "new" });
     else if (!editing) dropKeptDraft(keepKey);
   }, [editing, dirty, draft, keepKey, item?.updatedAt]);
-  useEffect14(() => {
+  useEffect15(() => {
     if (!editing || !item) return;
     let live = true;
     for (const f of item.fields) {
@@ -5781,7 +5859,7 @@ function ItemPane(props) {
   const turnOnOne = canTurnOn ? (f) => () => turnOn([f]) : () => void 0;
   const declaredKeys = new Set(declared.map((f) => f.key));
   const hasSecureNote = declaredKeys.has(SECURE_NOTE_KEY) || Boolean(item?.fields.some((f) => f.key === SECURE_NOTE_KEY)) || draft.secrets.some((x) => x.key === SECURE_NOTE_KEY);
-  const [settingsToggled, setSettingsToggled] = useState25(/* @__PURE__ */ new Set());
+  const [settingsToggled, setSettingsToggled] = useState26(/* @__PURE__ */ new Set());
   const settingsOpen = (f) => settingsToggled.has(f.key) !== (definition?.key === ENV_VALUE_KEY || hasDeclaredSettings(draft.fieldSettings?.[f.key], f.handling));
   const toggleSettings = (key) => setSettingsToggled((cur) => {
     const next = new Set(cur);
@@ -6158,8 +6236,8 @@ function ItemList({ title, items, definitions, port, selectedId, onSelect, query
   const pinned = matchingIds ? items.filter((i) => matchingIds.has(i.id)) : [];
   const rest = matchingIds ? items.filter((i) => !matchingIds.has(i.id)) : items;
   const ordered = [...pinned, ...rest];
-  const listRef = useRef13(null);
-  useEffect15(() => {
+  const listRef = useRef14(null);
+  useEffect16(() => {
     if (selectedId) listRef.current?.querySelector(`[data-item="${selectedId}"]`)?.scrollIntoView({ block: "nearest" });
   }, [selectedId, items.length]);
   const familyOf2 = (key) => definitions.find((d) => d.key === key)?.family ?? "generic";
@@ -6222,8 +6300,8 @@ function ListRow({ item, family, port, on, onSelect, withOwner, ownContextMenu,
   const confirmed = useConfirmed();
   const copy = useCopy();
   const notify = useNotify();
-  const [busy, setBusy] = useState26(false);
-  const [menuOpen, setMenuOpen] = useState26(false);
+  const [busy, setBusy] = useState27(false);
+  const [menuOpen, setMenuOpen] = useState27(false);
   const canUse = item.capabilities.canUse;
   const user = canUse ? item.fields.find((f) => USERNAME_KEYS.test(f.key) && f.handling !== "sealed" && f.active !== false) : void 0;
   const secret = canUse && item.capabilities.canReveal ? item.fields.find((f) => f.key === "password" && f.handling === "revealable" && f.active !== false) : void 0;
@@ -6262,7 +6340,7 @@ function ListRow({ item, family, port, on, onSelect, withOwner, ownContextMenu,
     ...manageEntries(item, onAction),
     ...hostEntries.map((h) => ({ ...h, kind: h.kind ?? "host" }))
   ];
-  const entriesRef = useRef13(entries);
+  const entriesRef = useRef14(entries);
   entriesRef.current = entries;
   const glyphOf = (e) => e.id === "copy:username" ? /* @__PURE__ */ jsx25(UserGlyph, { className: "size-4" }) : e.id === "copy:password" ? /* @__PURE__ */ jsx25(KeyGlyph, { className: "size-4" }) : e.id === "copy:code" ? /* @__PURE__ */ jsx25(ClockGlyph, { className: "size-4" }) : e.kind === "favorite" ? /* @__PURE__ */ jsx25(StarGlyph, { className: cn11("size-4", favorite?.on && "fill-current text-warning") }) : e.kind === "open" ? /* @__PURE__ */ jsx25(ChevronRightGlyph, { className: "size-4" }) : e.kind === "host" || e.kind === "manage" ? null : /* @__PURE__ */ jsx25(CopyIcon7, { className: "size-4" });
   const menuItem = (e) => /* @__PURE__ */ jsxs23(DropdownMenuItem4, { disabled: e.disabled ?? false, onSelect: e.onSelect, children: [
@@ -6285,21 +6363,25 @@ function ListRow({ item, family, port, on, onSelect, withOwner, ownContextMenu,
           {
             type: "button",
             "aria-current": on ? "true" : void 0,
-            "data-surface": on ? "primary" : void 0,
+            selected: on,
+            selectedStyle: "primary",
             onClick: () => onSelect(item.id),
             layout: "row",
             variant: "quiet",
+            endInset: "control",
+            oneLine: true,
             icon: /* @__PURE__ */ jsx25(ItemIcon, { definitionKey: item.definitionKey, family, site: loginSiteOf(item), inverted: on }),
             title: item.name,
             line: subtitleOf(item, withOwner),
-            className: "w-full pr-10"
+            className: "w-full"
           }
         ),
         /* @__PURE__ */ jsxs23("div", { className: "absolute right-1.5 top-1/2 flex -translate-y-1/2 items-center gap-0.5", "data-surface": on ? "primary" : void 0, children: [
-          user || secret || favorite ? /* @__PURE__ */ jsxs23("div", { className: cn11("hidden items-center gap-0.5 rounded-md pl-2 [@media(hover:hover)]:group-hover:flex [@media(hover:hover)]:group-focus-within:flex", on ? "bg-primary" : "bg-accent"), "data-row-quick": "", children: [
+          user || secret || code || favorite ? /* @__PURE__ */ jsxs23("div", { className: cn11("hidden items-center gap-0.5 rounded-md pl-2 [@media(hover:hover)]:group-hover:flex [@media(hover:hover)]:group-focus-within:flex", on ? "bg-primary" : "bg-accent"), "data-row-quick": "", children: [
             favorite ? /* @__PURE__ */ jsx25(Button22, { variant: "quiet", icon: /* @__PURE__ */ jsx25(StarGlyph, { className: favorite.on ? "fill-current text-warning" : "" }), "aria-label": favorite.on ? "Remove from favorites" : "Add to favorites", "aria-pressed": favorite.on, onClick: favorite.toggle }) : null,
             user ? /* @__PURE__ */ jsx25(Button22, { variant: "quiet", icon: /* @__PURE__ */ jsx25(UserGlyph, {}), "aria-label": `Copy ${user.label}`, disabled: busy, onClick: copyUser }) : null,
-            secret ? /* @__PURE__ */ jsx25(Button22, { variant: "quiet", icon: /* @__PURE__ */ jsx25(KeyGlyph, {}), "aria-label": "Copy password", disabled: busy, onClick: copyPassword }) : null
+            secret ? /* @__PURE__ */ jsx25(Button22, { variant: "quiet", icon: /* @__PURE__ */ jsx25(KeyGlyph, {}), "aria-label": "Copy password", disabled: busy, onClick: copyPassword }) : null,
+            code ? /* @__PURE__ */ jsx25(Button22, { variant: "quiet", icon: /* @__PURE__ */ jsx25(ClockGlyph, {}), "aria-label": "Copy one-time code", disabled: busy, onClick: copyCode }) : null
           ] }) : null,
           /* @__PURE__ */ jsxs23(DropdownMenu4, { open: menuOpen, onOpenChange: setMenuOpen, children: [
             /* @__PURE__ */ jsx25(DropdownMenuTrigger4, { asChild: true, children: /* @__PURE__ */ jsx25(
@@ -6340,7 +6422,7 @@ function manageEntries(item, onAction) {
 }
 
 // src/lists/TrashView.tsx
-import { useState as useState28 } from "react";
+import { useState as useState29 } from "react";
 import { Button as Button24 } from "@ai-matrx/design-system/controls";
 import { formatAbsoluteDate as formatAbsoluteDate4 } from "@ai-matrx/kit/format";
 
@@ -6414,7 +6496,7 @@ function refusalText(reason) {
 }
 
 // src/lists/RestorePanel.tsx
-import { useEffect as useEffect16, useState as useState27 } from "react";
+import { useEffect as useEffect17, useState as useState28 } from "react";
 import { Button as Button23 } from "@ai-matrx/design-system/controls";
 import { Fragment as Fragment18, jsx as jsx26, jsxs as jsxs24 } from "react/jsx-runtime";
 var count = (n, one) => `${n} ${one}${n === 1 ? "" : "s"}`;
@@ -6425,13 +6507,13 @@ function RestorePanel({
   turnOn,
   onClose
 }) {
-  const [preview, setPreview] = useState27(null);
-  const [restored, setRestored] = useState27(null);
-  const [turnedOn, setTurnedOn] = useState27(null);
-  const [error, setError] = useState27(null);
-  const [busy, setBusy] = useState27(false);
-  const [loading, setLoading] = useState27(Boolean(lists.preview));
-  useEffect16(() => {
+  const [preview, setPreview] = useState28(null);
+  const [restored, setRestored] = useState28(null);
+  const [turnedOn, setTurnedOn] = useState28(null);
+  const [error, setError] = useState28(null);
+  const [busy, setBusy] = useState28(false);
+  const [loading, setLoading] = useState28(Boolean(lists.preview));
+  useEffect17(() => {
     if (!lists.preview) return;
     let live = true;
     lists.preview(item).then(
@@ -6535,10 +6617,10 @@ function trashLineOf(item) {
 }
 function TrashView({ port, deleted, query, header, onChanged }) {
   const confirmed = useConfirmed();
-  const [busyId, setBusyId] = useState28(null);
-  const [message2, setMessage] = useState28(null);
+  const [busyId, setBusyId] = useState29(null);
+  const [message2, setMessage] = useState29(null);
   const shown = deleted.filter((i) => trashItemMatchesQuery(i, query));
-  const [restoring, setRestoring] = useState28(null);
+  const [restoring, setRestoring] = useState29(null);
   const restore = async (item, deletionId) => {
     setBusyId(item.id);
     setMessage(null);
@@ -6586,12 +6668,12 @@ function TrashView({ port, deleted, query, header, onChanged }) {
 }
 
 // src/NewItemFlow.tsx
-import { useMemo as useMemo4, useState as useState29 } from "react";
+import { useMemo as useMemo4, useState as useState30 } from "react";
 import { Button as Button25, Field as Field10, SearchField as SearchField2, Tile as Tile4 } from "@ai-matrx/design-system/controls";
 import { GlobeIcon as GlobeIcon2 } from "@ai-matrx/design-system/icons";
 import { jsx as jsx28, jsxs as jsxs26 } from "react/jsx-runtime";
 function NewItemFlow({ definitions, url, onUrl, onChoose, onCancel }) {
-  const [search, setSearch] = useState29("");
+  const [search, setSearch] = useState30("");
   const guess = useMemo4(() => inferFromUrl(url, definitions), [url, definitions]);
   const common = COMMON_DEFINITION_KEYS.map((k) => definitions.find((d) => d.key === k)).filter((d) => d !== void 0);
   const matches = useMemo4(() => {
@@ -6665,7 +6747,7 @@ function NewItemFlow({ definitions, url, onUrl, onChoose, onCancel }) {
 }
 
 // src/sharing/SecureLinkPanel.tsx
-import { useEffect as useEffect17, useRef as useRef14, useState as useState30 } from "react";
+import { useEffect as useEffect18, useRef as useRef15, useState as useState31 } from "react";
 import { confirm as confirm11 } from "@ai-matrx/kit/confirm-opener";
 import { Checkbox as Checkbox2 } from "@ai-matrx/design-system";
 import { Badge as Badge8, Button as Button26, Field as Field11, RegionSkeleton as RegionSkeleton2, SegmentedControl as SegmentedControl6, Textarea as Textarea4 } from "@ai-matrx/design-system/controls";
@@ -6748,20 +6830,20 @@ import { jsx as jsx29, jsxs as jsxs27 } from "react/jsx-runtime";
 function SecureLinkPanel({ item, port, onClose }) {
   const sharing = port.sharing;
   const { busy, error, notice, run, setNotice } = useConfirmedChange();
-  const [remedy, setRemedy] = useState30(null);
-  const [options, setOptions] = useState30(null);
-  const [optionsError, setOptionsError] = useState30(null);
-  const [sent, setSent] = useState30(null);
-  const [sentError, setSentError] = useState30(null);
-  const [nonce, setNonce] = useState30(0);
-  const [email, setEmail] = useState30("");
-  const [phone, setPhone] = useState30("");
-  const [name, setName] = useState30("");
-  const [linkBy, setLinkBy] = useState30("email");
-  const [fields, setFields] = useState30([]);
-  const [note, setNote] = useState30("");
-  const [sameChannelSent, setSameChannelSent] = useState30(false);
-  useEffect17(() => {
+  const [remedy, setRemedy] = useState31(null);
+  const [options, setOptions] = useState31(null);
+  const [optionsError, setOptionsError] = useState31(null);
+  const [sent, setSent] = useState31(null);
+  const [sentError, setSentError] = useState31(null);
+  const [nonce, setNonce] = useState31(0);
+  const [email, setEmail] = useState31("");
+  const [phone, setPhone] = useState31("");
+  const [name, setName] = useState31("");
+  const [linkBy, setLinkBy] = useState31("email");
+  const [fields, setFields] = useState31([]);
+  const [note, setNote] = useState31("");
+  const [sameChannelSent, setSameChannelSent] = useState31(false);
+  useEffect18(() => {
     let live = true;
     setOptionsError(null);
     sharing.secureLinkOptions(item).then(
@@ -6776,7 +6858,7 @@ function SecureLinkPanel({ item, port, onClose }) {
       live = false;
     };
   }, [sharing, item]);
-  useEffect17(() => {
+  useEffect18(() => {
     const list = sharing.sentSecureLinks;
     if (!list) return;
     let live = true;
@@ -6789,9 +6871,9 @@ function SecureLinkPanel({ item, port, onClose }) {
       live = false;
     };
   }, [sharing, item, nonce]);
-  const [phoneTyped, setPhoneTyped] = useState30(false);
-  const prefilled = useRef14(false);
-  useEffect17(() => {
+  const [phoneTyped, setPhoneTyped] = useState31(false);
+  const prefilled = useRef15(false);
+  useEffect18(() => {
     const lookup = sharing.phoneOnFile;
     if (!lookup || phoneTyped) return;
     const clear = () => {
@@ -6944,7 +7026,7 @@ function sentMeta(row, options) {
 }
 
 // src/devices/DevicesPanel.tsx
-import { useCallback as useCallback3, useEffect as useEffect18, useState as useState31 } from "react";
+import { useCallback as useCallback3, useEffect as useEffect19, useState as useState32 } from "react";
 import { confirm as confirm12 } from "@ai-matrx/kit/confirm-opener";
 import { Button as Button27, RegionSkeleton as RegionSkeleton3 } from "@ai-matrx/design-system/controls";
 import { formatAbsoluteDate as formatAbsoluteDate6 } from "@ai-matrx/kit/format";
@@ -7035,9 +7117,9 @@ function ErrorLine2({ text }) {
 function DevicesPanel({ port, onClose }) {
   const confirmed = useConfirmed();
   const notify = useNotify();
-  const [devices, setDevices] = useState31(null);
-  const [error, setError] = useState31(null);
-  const [busyId, setBusyId] = useState31(null);
+  const [devices, setDevices] = useState32(null);
+  const [error, setError] = useState32(null);
+  const [busyId, setBusyId] = useState32(null);
   const load = useCallback3(async () => {
     setError(null);
     try {
@@ -7046,7 +7128,7 @@ function DevicesPanel({ port, onClose }) {
       setError(messageOf3(e, "Your browsers could not be read."));
     }
   }, [port]);
-  useEffect18(() => {
+  useEffect19(() => {
     void load();
   }, [load]);
   const revoke = async (device) => {
@@ -7104,10 +7186,10 @@ function ApprovePanel({ port, host, onClose, approvalKey, label, kind = "browser
   const where = isMac ? "the Mac app" : "the extension";
   const passkeys = port.devices.passkeys;
   const here = passkeys?.available() ?? false;
-  const [methods, setMethods] = useState31(null);
-  const [busy, setBusy] = useState31(null);
-  const [error, setError] = useState31(null);
-  const [approvedUntil, setApprovedUntil] = useState31(null);
+  const [methods, setMethods] = useState32(null);
+  const [busy, setBusy] = useState32(null);
+  const [error, setError] = useState32(null);
+  const [approvedUntil, setApprovedUntil] = useState32(null);
   const load = useCallback3(async () => {
     setError(null);
     try {
@@ -7116,7 +7198,7 @@ function ApprovePanel({ port, host, onClose, approvalKey, label, kind = "browser
       setError(messageOf3(e, "Your account could not be checked."));
     }
   }, [port]);
-  useEffect18(() => {
+  useEffect19(() => {
     if (key && here) void load();
   }, [key, here, load]);
   const approve = async () => {
@@ -7204,7 +7286,7 @@ function ApprovePanel({ port, host, onClose, approvalKey, label, kind = "browser
 }
 
 // src/native/NativeImportPanel.tsx
-import { useEffect as useEffect20, useMemo as useMemo5, useState as useState33 } from "react";
+import { useEffect as useEffect21, useMemo as useMemo5, useState as useState34 } from "react";
 import { confirm as confirm13 } from "@ai-matrx/kit/confirm-opener";
 import { Badge as Badge9, Button as Button28, Select as Select10 } from "@ai-matrx/design-system/controls";
 
@@ -7267,19 +7349,19 @@ async function loadFullPreview(bridge, operationId, current) {
 }
 
 // src/native/use-native-import.ts
-import { useEffect as useEffect19, useRef as useRef15, useState as useState32 } from "react";
+import { useEffect as useEffect20, useRef as useRef16, useState as useState33 } from "react";
 var fail = (e, fallback) => e instanceof Error && e.message ? e.message : fallback;
 var RESTART = "Your account changed. The import was stopped; start it again.";
 function useNativeImport(bridge, stillAllowed, onImported) {
-  const [screen, setScreen] = useState32({ kind: "idle", message: null });
-  const [busy, setBusy] = useState32(false);
-  const generation = useRef15(0);
-  const mounted = useRef15(false);
-  const op = useRef15(null);
-  const last = useRef15(null);
-  const timer2 = useRef15(null);
-  const polls = useRef15(0);
-  const refreshRef = useRef15(async () => void 0);
+  const [screen, setScreen] = useState33({ kind: "idle", message: null });
+  const [busy, setBusy] = useState33(false);
+  const generation = useRef16(0);
+  const mounted = useRef16(false);
+  const op = useRef16(null);
+  const last = useRef16(null);
+  const timer2 = useRef16(null);
+  const polls = useRef16(0);
+  const refreshRef = useRef16(async () => void 0);
   const current = (g) => mounted.current && g === generation.current;
   const stopPolling = () => {
     if (timer2.current !== null) clearTimeout(timer2.current);
@@ -7448,9 +7530,9 @@ function useNativeImport(bridge, stillAllowed, onImported) {
     setBusy(false);
     setScreen({ kind: "idle", message: null });
   };
-  const invalidateRef = useRef15(invalidate);
+  const invalidateRef = useRef16(invalidate);
   invalidateRef.current = invalidate;
-  useEffect19(() => {
+  useEffect20(() => {
     mounted.current = true;
     const off = bridge.subscribe?.(() => {
       if (op.current) invalidateRef.current(RESTART);
@@ -7483,13 +7565,13 @@ function NativeImportPanel({ bridge, readLimits, activeOrganizationId, organizat
 }
 function Importer({ bridge, readLimits, activeOrganizationId, organizations, onClose, onChanged }) {
   const options = useMemo5(() => organizations.map((o) => ({ value: o.id, label: o.name })), [organizations]);
-  const [organizationId, setOrganizationId] = useState33(() => organizations.some((o) => o.id === activeOrganizationId) ? activeOrganizationId : organizations[0]?.id ?? "");
-  const [limits, setLimits] = useState33(null);
-  const [limitError, setLimitError] = useState33(null);
+  const [organizationId, setOrganizationId] = useState34(() => organizations.some((o) => o.id === activeOrganizationId) ? activeOrganizationId : organizations[0]?.id ?? "");
+  const [limits, setLimits] = useState34(null);
+  const [limitError, setLimitError] = useState34(null);
   const flow = useNativeImport(bridge, (id) => organizations.some((o) => o.id === id), onChanged);
   const { screen, busy } = flow;
   const orgName = organizations.find((o) => o.id === organizationId)?.name ?? "this organization";
-  useEffect20(() => {
+  useEffect21(() => {
     if (!readLimits || !organizationId) return;
     let live = true;
     setLimits(null);
@@ -7550,21 +7632,21 @@ function Importer({ bridge, readLimits, activeOrganizationId, organizations, onC
 }
 
 // src/extension/PageView.tsx
-import { useState as useState37 } from "react";
+import { useState as useState38 } from "react";
 import { SiteIcon } from "@ai-matrx/design-system";
 import { Button as Button32, Tile as Tile5 } from "@ai-matrx/design-system/controls";
 import { GlobeIcon as GlobeIcon3 } from "@ai-matrx/design-system/icons";
 
 // src/extension/CaptureCard.tsx
-import { useState as useState34, useSyncExternalStore as useSyncExternalStore3 } from "react";
+import { useState as useState35, useSyncExternalStore as useSyncExternalStore3 } from "react";
 import { Button as Button29, SearchField as SearchField3 } from "@ai-matrx/design-system/controls";
 import { Fragment as Fragment21, jsx as jsx32, jsxs as jsxs30 } from "react/jsx-runtime";
 var SEARCH_FROM = 4;
 function CaptureCard({ capture, onChanged }) {
   const prompt = useSyncExternalStore3(capture.subscribe, capture.get, capture.get);
   const notify = useNotify();
-  const [busy, setBusy] = useState34(false);
-  const [q, setQ] = useState34("");
+  const [busy, setBusy] = useState35(false);
+  const [q, setQ] = useState35("");
   if (!prompt) return null;
   const decide = async (d) => {
     setBusy(true);
@@ -7620,15 +7702,15 @@ function CaptureCard({ capture, onChanged }) {
 }
 
 // src/extension/FillSetupCard.tsx
-import { useRef as useRef16, useState as useState35, useSyncExternalStore as useSyncExternalStore4 } from "react";
+import { useRef as useRef17, useState as useState36, useSyncExternalStore as useSyncExternalStore4 } from "react";
 import { Button as Button30, Field as Field12 } from "@ai-matrx/design-system/controls";
 import { jsx as jsx33, jsxs as jsxs31 } from "react/jsx-runtime";
 function FillSetupCard({ fillSetup }) {
   const notify = useNotify();
   const state = useSyncExternalStore4(fillSetup.subscribe, fillSetup.get, fillSetup.get);
-  const box = useRef16(null);
-  const [busy, setBusy] = useState35(false);
-  const [error, setError] = useState35(null);
+  const box = useRef17(null);
+  const [busy, setBusy] = useState36(false);
+  const [error, setError] = useState36(null);
   if (state.status !== "off") return null;
   const finish = async (run) => {
     setBusy(true);
@@ -7693,7 +7775,7 @@ function FillSetupCard({ fillSetup }) {
 }
 
 // src/extension/PageGenerator.tsx
-import { useState as useState36 } from "react";
+import { useState as useState37 } from "react";
 import { Popover as Popover2, PopoverContent as PopoverContent2, PopoverTrigger as PopoverTrigger2 } from "@ai-matrx/design-system";
 import { Button as Button31 } from "@ai-matrx/design-system/controls";
 import { CopyIcon as CopyIcon8 } from "@ai-matrx/design-system/icons";
@@ -7703,10 +7785,10 @@ function PageGenerator({ fields }) {
   const limits = useGeneratorLimitsSource();
   const copy = useCopy();
   const held = useTransientSecret(HOLD_MS);
-  const [open, setOpen] = useState36(false);
-  const [busy, setBusy] = useState36(false);
-  const [targets, setTargets] = useState36([]);
-  const [said, setSaid] = useState36(null);
+  const [open, setOpen] = useState37(false);
+  const [busy, setBusy] = useState37(false);
+  const [targets, setTargets] = useState37([]);
+  const [said, setSaid] = useState37(null);
   if (!limits) return null;
   const say3 = setSaid;
   const put = async (targetId, value2) => {
@@ -7770,8 +7852,8 @@ function PageGenerator({ fields }) {
 // src/extension/PageView.tsx
 import { jsx as jsx35, jsxs as jsxs33 } from "react/jsx-runtime";
 function PageView({ port, page, fill, capture, fillSetup, newPasswordFields, items, definitions, onOpen, onNewForPage, onBrowse, onChanged, header }) {
-  const [running, setRunning] = useState37(null);
-  const [said, setSaid] = useState37(null);
+  const [running, setRunning] = useState38(null);
+  const [said, setSaid] = useState38(null);
   const site = pageSite(page.url);
   const state = page.matchState ?? { status: "ready" };
   const fillable = new Set(page.fillableItemIds ?? page.matchingItemIds);
@@ -7780,8 +7862,8 @@ function PageView({ port, page, fill, capture, fillSetup, newPasswordFields, ite
   const familyOf2 = (key) => definitions.find((d) => d.key === key)?.family ?? "generic";
   const canSave = isFillablePage(page.url);
   const signIn = page.signIn;
-  const act = async (itemId, run, failed) => {
-    setRunning(itemId);
+  const act = async (itemId, action, run, failed) => {
+    setRunning({ itemId, action });
     setSaid(null);
     try {
       setSaid(await run());
@@ -7814,10 +7896,10 @@ function PageView({ port, page, fill, capture, fillSetup, newPasswordFields, ite
         family: item ? familyOf2(item.definitionKey) : "generic",
         port,
         busy: running !== null,
-        running: running === itemId,
+        running: running?.itemId === itemId ? running.action : null,
         onOpen,
-        onFill: fill && !page.blocked && fillable.has(itemId) && item?.capabilities.canUse !== false ? () => void act(itemId, async () => FILL_WORDS[await fill(itemId)], FILL_WORDS.unavailable) : null,
-        onSignIn: signIn ? () => void act(itemId, async () => SIGN_IN_WORDS[await signIn(itemId)], SIGN_IN_WORDS.unknown) : null
+        onFill: fill && !page.blocked && fillable.has(itemId) && item?.capabilities.canUse !== false ? () => void act(itemId, "fill", async () => FILL_WORDS[await fill(itemId)], FILL_WORDS.unavailable) : null,
+        onSignIn: signIn ? () => void act(itemId, "signIn", async () => SIGN_IN_WORDS[await signIn(itemId)], SIGN_IN_WORDS.unknown) : null
       },
       itemId
     )) });
@@ -7855,7 +7937,7 @@ function MatchRow({ itemId, item, tag, family, port, busy, running, onOpen, onFi
   const confirmed = useConfirmed();
   const copy = useCopy();
   const notify = useNotify();
-  const [reading, setReading] = useState37(false);
+  const [reading, setReading] = useState38(false);
   const usable = item?.capabilities.canUse ?? false;
   const user = usable ? item?.fields.find((f) => USERNAME_KEYS.test(f.key) && f.handling !== "sealed" && f.active) : void 0;
   const secret = usable && item?.capabilities.canReveal ? item?.fields.find((f) => f.key === "password" && f.handling === "revealable" && f.active) : void 0;
@@ -7884,8 +7966,8 @@ function MatchRow({ itemId, item, tag, family, port, busy, running, onOpen, onFi
         className: "min-w-0 flex-1"
       }
     ),
-    onFill ? /* @__PURE__ */ jsx35(Button32, { variant: "primary", disabled: busy, "aria-busy": running || void 0, onClick: onFill, "aria-label": `Fill ${item?.name ?? "this login"}`, children: running ? "Filling\u2026" : "Fill" }) : null,
-    onSignIn ? /* @__PURE__ */ jsx35(Button32, { variant: onFill ? "outline" : "primary", icon: /* @__PURE__ */ jsx35(ShieldGlyph, {}), disabled: busy, onClick: onSignIn, "aria-label": `Sign me in with ${item?.name ?? "this login"}`, title: "Sign me in", children: "Sign me in" }) : null,
+    onFill ? /* @__PURE__ */ jsx35(Button32, { variant: "primary", disabled: busy, "aria-busy": running === "fill" || void 0, onClick: onFill, "aria-label": `Fill ${item?.name ?? "this login"}`, children: running === "fill" ? "Filling\u2026" : "Fill" }) : null,
+    onSignIn ? /* @__PURE__ */ jsx35(Button32, { variant: onFill ? "outline" : "primary", icon: /* @__PURE__ */ jsx35(ShieldGlyph, {}), disabled: busy, "aria-busy": running === "signIn" || void 0, onClick: onSignIn, "aria-label": `Sign me in with ${item?.name ?? "this login"}`, title: "Sign me in", children: running === "signIn" ? "Signing in\u2026" : "Sign me in" }) : null,
     user && item ? /* @__PURE__ */ jsx35(Button32, { variant: "quiet", icon: /* @__PURE__ */ jsx35(UserGlyph, {}), "aria-label": `Copy ${user.label}`, title: `Copy ${user.label}`, disabled: reading, onClick: () => void read(user.label, () => port.reveal(item, user.key)) }) : null,
     secret && item ? /* @__PURE__ */ jsx35(Button32, { variant: "quiet", icon: /* @__PURE__ */ jsx35(KeyGlyph, {}), "aria-label": "Copy password", title: "Copy password", disabled: reading, onClick: () => void read("Password", () => port.reveal(item, secret.key)) }) : null,
     otp ? /* @__PURE__ */ jsx35(Button32, { variant: "quiet", icon: /* @__PURE__ */ jsx35(ClockGlyph, {}), "aria-label": "Copy one-time code", title: "Copy one-time code", disabled: reading, onClick: () => void read("One-time code", async () => (await port.authenticator.code(otp)).code) }) : null
@@ -7893,8 +7975,8 @@ function MatchRow({ itemId, item, tag, family, port, busy, running, onOpen, onFi
 }
 
 // src/Sidebar.tsx
-import { useState as useState38 } from "react";
-import { cn as cn12 } from "@ai-matrx/design-system";
+import { useState as useState39 } from "react";
+import { cn as cn12, useLook as useLook2 } from "@ai-matrx/design-system";
 import { DisclosureHeader as DisclosureHeader4, Select as Select11, Tile as Tile6 } from "@ai-matrx/design-system/controls";
 import { GlobeIcon as GlobeIcon4 } from "@ai-matrx/design-system/icons";
 import { jsx as jsx36, jsxs as jsxs34 } from "react/jsx-runtime";
@@ -7902,6 +7984,7 @@ var AUTHENTICATOR_LABEL = "Authenticator";
 function vaultChoices(items, organizations, _current) {
   const n = (f) => items.filter(f).length;
   const shared = n((i) => i.owner.kind === "shared");
+  const hints = organizationHints(organizations);
   return [
     { value: "all", label: "All items", count: items.length },
     { value: "mine", label: "Personal", count: n((i) => i.owner.kind === "me") },
@@ -7909,11 +7992,11 @@ function vaultChoices(items, organizations, _current) {
     // Every organization the person belongs to, empty ones too: an empty vault opens on its own
     // "Nothing here yet" with New item, so the first credential can go there. (The organization
     // list carries no role, so who may add is the server's answer to the save, said in place.)
-    ...organizations.map((o) => ({ value: o.id, label: o.name, count: n((i) => i.owner.organizationId === o.id) }))
+    ...organizations.map((o) => ({ value: o.id, label: o.name, count: n((i) => i.owner.organizationId === o.id), ...hints.has(o.id) ? { hint: hints.get(o.id) } : {} }))
   ];
 }
-function VaultSelect({ value, choices, onChange }) {
-  return /* @__PURE__ */ jsx36(Select11, { value, onValueChange: onChange, "aria-label": "Vault", options: choices.map((c) => ({ value: c.value, label: c.label, meta: String(c.count) })) });
+function VaultSelect({ value, choices, onChange, searchAt = ORGANIZATION_SEARCH_AT_UNREAD }) {
+  return /* @__PURE__ */ jsx36(Select11, { value, onValueChange: onChange, "aria-label": "Vault", searchAt, options: choices.map((c) => ({ value: c.value, label: c.label, meta: String(c.count), ...c.hint ? { hint: c.hint } : {} })) });
 }
 var CATEGORY_GLYPHS = { logins: GlobeIcon4, passkeys: ShieldGlyph, api: KeyGlyph, oauth: PlugGlyph, infra: DatabaseGlyph, env: TerminalGlyph, files: FileGlyph, other: NoteGlyph };
 var familyOf = (key, definitions) => definitions.find((d) => d.key === key)?.family ?? "generic";
@@ -7977,12 +8060,14 @@ function viewOptions(views, allCount, deletedCount, hasFavorites, hasRecents, ha
   ];
 }
 function Entry({ on, glyph: Icon, label, count: count2, onClick, nested = false }) {
+  const desktop = useLook2() === "desktop";
   return /* @__PURE__ */ jsx36(
     Tile6,
     {
       type: "button",
       "aria-current": on ? "page" : void 0,
       selected: on,
+      ...desktop ? { selectedStyle: "fill" } : {},
       onClick,
       layout: "row",
       variant: "quiet",
@@ -7990,8 +8075,9 @@ function Entry({ on, glyph: Icon, label, count: count2, onClick, nested = false
       icon: nested ? void 0 : /* @__PURE__ */ jsx36(Icon, { className: "size-4 shrink-0" }),
       title: label,
       ...count2 !== void 0 ? { end: /* @__PURE__ */ jsx36("span", { className: "text-xs tabular-nums text-muted-foreground", children: count2 }) } : {},
+      ...nested ? { level: 1 } : {},
       "data-nested": nested ? "" : void 0,
-      className: cn12("w-full", nested && "pl-9")
+      className: "w-full"
     }
   );
 }
@@ -8001,12 +8087,12 @@ function Group({ title, children }) {
     children
   ] });
 }
-function VaultSidebar({ vault, choices, onVault, view, allCount, deletedCount, views, hasFavorites, hasRecents, onView, onPanel, nativeProvider, hasNativeImport = false, hasPage = false, onLock, onOpenWeb }) {
-  const [tagsOpen, setTagsOpen] = useState38(view.startsWith("tag:"));
+function VaultSidebar({ vault, choices, onVault, organizationSearchAt, view, allCount, deletedCount, views, hasFavorites, hasRecents, onView, onPanel, nativeProvider, hasNativeImport = false, hasPage = false, onLock, onOpenWeb }) {
+  const [tagsOpen, setTagsOpen] = useState39(view.startsWith("tag:"));
   return /* @__PURE__ */ jsxs34("nav", { "aria-label": "Vault", className: "flex h-full min-h-0 flex-col border-r border-sidebar-border bg-sidebar-background text-sidebar-foreground", children: [
     /* @__PURE__ */ jsxs34("div", { className: "flex items-center gap-2 px-3 pb-2 pt-3", children: [
       /* @__PURE__ */ jsx36(SafeGlyph, { className: "size-5 shrink-0 text-primary" }),
-      /* @__PURE__ */ jsx36("div", { className: "min-w-0 flex-1", children: /* @__PURE__ */ jsx36(VaultSelect, { value: vault, choices, onChange: onVault }) })
+      /* @__PURE__ */ jsx36("div", { className: "min-w-0 flex-1", children: /* @__PURE__ */ jsx36(VaultSelect, { value: vault, choices, onChange: onVault, searchAt: organizationSearchAt }) })
     ] }),
     /* @__PURE__ */ jsxs34("div", { className: "flex min-h-0 flex-1 flex-col gap-5 overflow-y-auto px-2 pb-3 pt-1", children: [
       /* @__PURE__ */ jsxs34("div", { className: "flex flex-col gap-0.5", children: [
@@ -8083,8 +8169,8 @@ var generatorLimitsFrom = (knobs) => knobs ? async () => {
 } : void 0;
 function ImportWithLimits(props) {
   const { knobs, ...rest } = props;
-  const [state, setState] = useState39(null);
-  useEffect21(() => {
+  const [state, setState] = useState40(null);
+  useEffect22(() => {
     if (!knobs) return setState({ error: "Import is not set up for this organization yet." });
     knobs().then(
       (r) => {
@@ -8109,13 +8195,13 @@ function VaultApp(given) {
 }
 function useOrganizationSettings(host) {
   const knobs = host.knobs;
-  const needs = knobs !== void 0 && (host.revealSeconds === void 0 || host.backupPassphraseMinLength === void 0);
-  const [read, setRead] = useState39(null);
-  useEffect21(() => {
+  const needs = knobs !== void 0 && (host.revealSeconds === void 0 || host.backupPassphraseMinLength === void 0 || host.organizationSearchAt === void 0);
+  const [read, setRead] = useState40(null);
+  useEffect22(() => {
     if (!needs || !knobs) return;
     let live = true;
     knobs().then(
-      (r) => live && setRead({ reveal: positiveKnob(r, REVEAL_SECONDS_KNOB), backupMin: positiveKnob(r, BACKUP_PASSPHRASE_MIN_KNOB) }),
+      (r) => live && setRead({ reveal: positiveKnob(r, REVEAL_SECONDS_KNOB), backupMin: positiveKnob(r, BACKUP_PASSPHRASE_MIN_KNOB), searchAt: positiveKnob(r, ORGANIZATION_SEARCH_AT_KNOB) }),
       () => void 0
     );
     return () => {
@@ -8126,7 +8212,8 @@ function useOrganizationSettings(host) {
   return {
     ...host,
     ...host.revealSeconds === void 0 && read.reveal !== null ? { revealSeconds: read.reveal } : {},
-    ...host.backupPassphraseMinLength === void 0 && read.backupMin !== null ? { backupPassphraseMinLength: read.backupMin } : {}
+    ...host.backupPassphraseMinLength === void 0 && read.backupMin !== null ? { backupPassphraseMinLength: read.backupMin } : {},
+    ...host.organizationSearchAt === void 0 && read.searchAt !== null ? { organizationSearchAt: read.searchAt } : {}
   };
 }
 var NO_STORE = () => () => void 0;
@@ -8137,8 +8224,8 @@ function useHostPrompts(capture, fillSetup) {
   return prompt !== null || setup?.status === "off";
 }
 function LockedScreen({ lock }) {
-  const [busy, setBusy] = useState39(false);
-  const [error, setError] = useState39(null);
+  const [busy, setBusy] = useState40(false);
+  const [error, setError] = useState40(null);
   const unlock = async () => {
     setBusy(true);
     setError(null);
@@ -8158,21 +8245,21 @@ function LockedScreen({ lock }) {
   ] });
 }
 function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocationChange, onInventory }) {
-  const rootRef = useRef17(null);
+  const rootRef = useRef18(null);
   const width = useElementWidth(rootRef);
   const mode = layout !== "auto" ? layout : width >= FULL_AT ? "full" : width >= SPLIT_AT ? "split" : "stack";
   const notify = useNotify();
-  const [snap, setSnap] = useState39(null);
-  const [items, setItems] = useState39([]);
-  const [deleted, setDeleted] = useState39([]);
-  const [favorites, setFavorites] = useState39(null);
-  const [recents, setRecents] = useState39(null);
-  const [error, setError] = useState39(null);
-  const [inner, setInner] = useState39(DEFAULT_LOCATION);
+  const [snap, setSnap] = useState40(null);
+  const [items, setItems] = useState40([]);
+  const [deleted, setDeleted] = useState40([]);
+  const [favorites, setFavorites] = useState40(null);
+  const [recents, setRecents] = useState40(null);
+  const [error, setError] = useState40(null);
+  const [inner, setInner] = useState40(DEFAULT_LOCATION);
   const loc = location ?? inner;
-  const dirty = useRef17(false);
-  const [notice, setNotice] = useState39(null);
-  const [firstCode, setFirstCode] = useState39(null);
+  const dirty = useRef18(false);
+  const [notice, setNotice] = useState40(null);
+  const [firstCode, setFirstCode] = useShownUntilMove(loc);
   const move = useCallback4(
     (next, how) => {
       if (!location) setInner(next);
@@ -8199,9 +8286,9 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
     },
     [loc, move]
   );
-  const keyState = useRef17({ loc, go });
+  const keyState = useRef18({ loc, go });
   keyState.current = { loc, go };
-  useEffect21(() => {
+  useEffect22(() => {
     const onKey = (e) => {
       if (e.defaultPrevented || e.metaKey || e.ctrlKey || e.altKey) return;
       const root = rootRef.current;
@@ -8223,8 +8310,8 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
     document.addEventListener("keydown", onKey);
     return () => document.removeEventListener("keydown", onKey);
   }, []);
-  const keepSearchFocus = useRef17(false);
-  useEffect21(() => {
+  const keepSearchFocus = useRef18(false);
+  useEffect22(() => {
     if (!keepSearchFocus.current) return;
     keepSearchFocus.current = false;
     const search = rootRef.current?.querySelector('input[aria-label^="Search"]');
@@ -8233,13 +8320,13 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
     search.setSelectionRange(search.value.length, search.value.length);
   }, [loc.q]);
   const hasPrompts = useHostPrompts(host.capture, host.fillSetup);
-  const knobsRef = useRef17(host.knobs);
+  const knobsRef = useRef18(host.knobs);
   knobsRef.current = host.knobs;
-  const [signedOut, setSignedOut] = useState39(false);
-  const [refreshError, setRefreshError] = useState39(null);
-  const [refreshing, setRefreshing] = useState39(false);
-  const loadedAt = useRef17(0);
-  const inFlight = useRef17(false);
+  const [signedOut, setSignedOut] = useState40(false);
+  const [refreshError, setRefreshError] = useState40(null);
+  const [refreshing, setRefreshing] = useState40(false);
+  const loadedAt = useRef18(0);
+  const inFlight = useRef18(false);
   const apply = useCallback4(
     (s) => {
       loadedAt.current = Date.now();
@@ -8287,11 +8374,11 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
     knobsRef.current?.().catch(() => void 0);
     port.lists.recents?.list().then(setRecents, () => void 0);
   }, [port, apply]);
-  useEffect21(load, [load]);
-  const quietRef = useRef17({ loc, ready: false });
+  useEffect22(load, [load]);
+  const quietRef = useRef18({ loc, ready: false });
   quietRef.current = { loc, ready: snap !== null && !error };
-  const [knobSeconds, setKnobSeconds] = useState39(null);
-  useEffect21(() => {
+  const [knobSeconds, setKnobSeconds] = useState40(null);
+  useEffect22(() => {
     if (host.refreshSeconds !== void 0 || !knobsRef.current) return;
     let live = true;
     knobsRef.current().then(
@@ -8306,7 +8393,7 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
     };
   }, [host.refreshSeconds]);
   const everySeconds = host.refreshSeconds ?? knobSeconds;
-  useEffect21(() => {
+  useEffect22(() => {
     const quietly = (minGapMs) => {
       const { loc: here, ready } = quietRef.current;
       if (!ready || document.visibilityState === "hidden" || dirty.current || here.mode !== "view") return;
@@ -8324,17 +8411,17 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
       if (timer2) clearInterval(timer2);
     };
   }, [refresh, everySeconds]);
-  const inventoryRef = useRef17(onInventory);
+  const inventoryRef = useRef18(onInventory);
   inventoryRef.current = onInventory;
-  useEffect21(() => {
+  useEffect22(() => {
     if (snap) inventoryRef.current?.({ items, definitions: snap.definitions });
   }, [snap, items]);
-  useEffect21(() => {
+  useEffect22(() => {
     if (!loc.itemId || !port.lists.recents) return;
     const id = loc.itemId;
     port.lists.recents.record(id).then(() => setRecents((r) => [id, ...(r ?? []).filter((x) => x !== id)]), () => void 0);
   }, [loc.itemId, port]);
-  const orgs = snap?.organizations ?? [];
+  const orgs = useMemo6(() => orderOrganizations(snap?.organizations ?? [], items, recents), [snap?.organizations, items, recents]);
   const definitions = snap?.definitions ?? [];
   const inThisVault = useMemo6(() => items.filter((i) => inVault(i, loc.vault)), [items, loc.vault]);
   const vaultMixesOwners = new Set(inThisVault.map((i) => i.owner.organizationId ?? i.owner.kind)).size > 1;
@@ -8417,7 +8504,7 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
   const hasFavorites = port.lists.favorites !== void 0;
   const title = loc.vault === "all" && loc.view === "all" ? "All items" : viewLabel(loc.view, views);
   const compactHeader = mode === "full" ? void 0 : /* @__PURE__ */ jsxs35("div", { className: "grid grid-cols-[repeat(auto-fit,minmax(11rem,1fr))] gap-2", "data-vault-compact-header": "", children: [
-    /* @__PURE__ */ jsx37(VaultSelect, { value: loc.vault, choices, onChange: (vault) => go({ vault, itemId: null, panel: null }) }),
+    /* @__PURE__ */ jsx37(VaultSelect, { value: loc.vault, choices, searchAt: host.organizationSearchAt, onChange: (vault) => go({ vault, itemId: null, panel: null }) }),
     /* @__PURE__ */ jsx37(Select12, { value: loc.view, onValueChange: (view) => go({ view, itemId: null, panel: null }), options: viewOptions(views, inThisVault.length, deleted.length, hasFavorites, port.lists.recents !== void 0, host.page !== void 0, loc.view), "aria-label": "Show" })
   ] });
   const compactActions = mode === "full" ? void 0 : /* @__PURE__ */ jsxs35("div", { className: "flex shrink-0 items-center gap-2", "data-vault-compact-actions": "", children: [
@@ -8654,6 +8741,11 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
         arg: panelArg ?? null,
         onClose: closePanel,
         onPanel,
+        onOpenItem: (next) => {
+          replaceItem(next);
+          const holds = loc.vault === "all" || loc.vault === "mine" && next.owner.kind === "me" || loc.vault === next.owner.organizationId;
+          go({ ...holds ? {} : { vault: "all" }, itemId: next.id, mode: "view", panel: null });
+        },
         onChanged: (next) => {
           if (next) replaceItem(next);
           else if (next === null) {
@@ -8693,6 +8785,7 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
           vault: loc.vault,
           choices,
           onVault: (vault) => go({ vault, itemId: null, panel: null }),
+          organizationSearchAt: host.organizationSearchAt,
           view: loc.view,
           allCount: inThisVault.length,
           deletedCount: deleted.length,