@codexhost/cli-darwin-x64 0.12.0 → 0.12.2

package/app/console-web.js

@@ -41,12 +41,13 @@
     }
     return payload;
   }
-  async function consolePost(path, body = {}) {
+  async function consolePost(path, body = {}, signal) {
     const response = await fetch(path, {
       method: "POST",
       credentials: "same-origin",
       headers: { "content-type": "application/json", [CONSOLE_REQUEST_HEADER]: "1" },
-      body: JSON.stringify(body)
+      body: JSON.stringify(body),
+      ...signal ? { signal } : {}
     });
     const payload = await response.json().catch(() => null);
     if (!response.ok) {
@@ -57,8 +58,9 @@
   }
   function hostRequestManager() {
     return {
-      async sendRequest(method, params) {
-        const reply = await consolePost("/api/host/request", { method, params });
+      async sendRequest(method, params, options) {
+        const signal = options instanceof AbortSignal ? options : void 0;
+        const reply = await consolePost("/api/host/request", { method, params }, signal);
         if (reply.error) {
           throw Object.assign(new Error(reply.error.message), { code: reply.error.code });
         }
@@ -14661,6 +14663,20 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     initializeOnly: external_exports.boolean().optional()
   });
 
+  // ../shared-contracts/dist/ids.js
+  var opaqueIdSchema = external_exports.string().refine((value) => value.trim().length > 0, {
+    message: "Identifier must not be empty or whitespace"
+  });
+  var harnessIdSchema = opaqueIdSchema.brand();
+  var hostThreadIdSchema = opaqueIdSchema.brand();
+  var hostTurnIdSchema = opaqueIdSchema.brand();
+  var hostItemIdSchema = opaqueIdSchema.brand();
+  var hostInteractionIdSchema = opaqueIdSchema.brand();
+
+  // ../shared-contracts/dist/thread-prewarm.js
+  var threadPrewarmDiscardParamsSchema = external_exports.object({ threadId: hostThreadIdSchema });
+  var threadPrewarmDiscardResultSchema = external_exports.object({ discarded: external_exports.boolean() });
+
   // ../shared-contracts/dist/console.js
   var consoleAnnouncementSchema = external_exports.strictObject({
     title: external_exports.string().trim().min(1).max(200),
@@ -14674,6 +14690,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     url: external_exports.string().max(2048).regex(/^http:\/\/(?:127\.0\.0\.1|localhost):\d{1,5}\/(?:\?.*)?$/u)
   });
   var CONSOLE_HOST_METHODS = Object.freeze([
+    "codexhost/console/remote-connections",
+    "codexhost/runtime/status",
+    "codexhost/remote/ssh-setup",
     "codexhost/harness/plugins/list",
     "codexhost/harness/display-settings/get",
     "codexhost/harness/display-settings/set",
@@ -14742,16 +14761,6 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     inactiveMs: external_exports.number().nonnegative()
   }));
 
-  // ../shared-contracts/dist/ids.js
-  var opaqueIdSchema = external_exports.string().refine((value) => value.trim().length > 0, {
-    message: "Identifier must not be empty or whitespace"
-  });
-  var harnessIdSchema = opaqueIdSchema.brand();
-  var hostThreadIdSchema = opaqueIdSchema.brand();
-  var hostTurnIdSchema = opaqueIdSchema.brand();
-  var hostItemIdSchema = opaqueIdSchema.brand();
-  var hostInteractionIdSchema = opaqueIdSchema.brand();
-
   // ../shared-contracts/dist/manual-compaction.js
   var threadManualCompactionStartedSchema = external_exports.strictObject({
     threadId: hostThreadIdSchema,
@@ -15670,11 +15679,54 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     hostname: external_exports.string().min(1).max(1024).refine((value) => !value.startsWith("-") && !/\s/u.test(value)),
     port: external_exports.number().int().min(1).max(65535).nullable(),
     identity: external_exports.string().max(4096).nullable(),
-    action: external_exports.enum(["inspect", "install", "update", "repair"]),
+    action: external_exports.enum(["inspect", "install", "update", "repair", "uninstall"]),
+    uninstallPackage: external_exports.boolean().optional(),
     version: external_exports.string().regex(/^\d+\.\d+\.\d+$/u).nullable()
   }).strict();
   var remoteSshSetupResultSchema = external_exports.object({ state: external_exports.enum(["installed", "not-installed"]) }).strict();
 
+  // ../shared-contracts/dist/remote-connections.js
+  var CONSOLE_REMOTE_CONNECTIONS_METHOD = "codexhost/console/remote-connections";
+  var hostId = external_exports.string().min(1).max(1024);
+  var codexSshConnectionSchema = external_exports.object({
+    hostId,
+    displayName: external_exports.string().min(1).max(1024),
+    source: external_exports.enum(["codex-managed", "discovered"]),
+    sshAlias: external_exports.string().max(1024).nullable(),
+    sshHost: external_exports.string().min(1).max(1024),
+    sshPort: external_exports.number().int().min(1).max(65535).nullable(),
+    identity: external_exports.string().max(4096).nullable(),
+    autoConnect: external_exports.boolean(),
+    connectionAnalyticsId: external_exports.string().max(1024).optional()
+  });
+  var codexSshDraftSchema = external_exports.strictObject({
+    displayName: external_exports.string().min(1).max(1024),
+    hostname: external_exports.string().min(1).max(1024),
+    sshPort: external_exports.number().int().min(1).max(65535).nullable(),
+    identity: external_exports.string().max(4096).nullable()
+  });
+  var remoteConnectionsRequestSchema = external_exports.discriminatedUnion("action", [
+    external_exports.strictObject({ action: external_exports.literal("list") }),
+    external_exports.strictObject({
+      action: external_exports.literal("save"),
+      draft: codexSshDraftSchema,
+      previous: codexSshConnectionSchema.nullable()
+    }),
+    external_exports.strictObject({ action: external_exports.literal("remove"), previous: codexSshConnectionSchema }),
+    external_exports.strictObject({ action: external_exports.literal("connect"), hostId, enabled: external_exports.boolean() }),
+    external_exports.strictObject({ action: external_exports.literal("state"), hostId }),
+    external_exports.strictObject({ action: external_exports.literal("runtime"), hostId }),
+    external_exports.strictObject({
+      action: external_exports.literal("update"),
+      hostId: hostId.refine((id) => id !== "local"),
+      version: remoteUpdateParamsSchema.shape.version
+    })
+  ]);
+  var remoteConnectionsReplySchema = external_exports.union([
+    external_exports.strictObject({ result: jsonValueSchema }),
+    external_exports.strictObject({ error: external_exports.strictObject({ code: external_exports.number().int(), message: external_exports.string() }) })
+  ]);
+
   // ../shared-contracts/dist/index.js
   var workspaceContractVersionSchema = external_exports.literal(WORKSPACE_CONTRACT_VERSION);
 
@@ -15797,6 +15849,35 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     ["path", { d: "M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6" }]
   ];
 
+  // ../../node_modules/lucide/dist/esm/icons/eye.mjs
+  var Eye = [
+    [
+      "path",
+      {
+        d: "M2.062 12.348a1 1 0 0 1 0-.696 10.75 10.75 0 0 1 19.876 0 1 1 0 0 1 0 .696 10.75 10.75 0 0 1-19.876 0"
+      }
+    ],
+    ["circle", { cx: "12", cy: "12", r: "3" }]
+  ];
+
+  // ../../node_modules/lucide/dist/esm/icons/eye-off.mjs
+  var EyeOff = [
+    [
+      "path",
+      {
+        d: "M10.733 5.076a10.744 10.744 0 0 1 11.205 6.575 1 1 0 0 1 0 .696 10.747 10.747 0 0 1-1.444 2.49"
+      }
+    ],
+    ["path", { d: "M14.084 14.158a3 3 0 0 1-4.242-4.242" }],
+    [
+      "path",
+      {
+        d: "M17.479 17.499a10.75 10.75 0 0 1-15.417-5.151 1 1 0 0 1 0-.696 10.75 10.75 0 0 1 4.446-5.143"
+      }
+    ],
+    ["path", { d: "m2 2 20 20" }]
+  ];
+
   // ../../node_modules/lucide/dist/esm/icons/ellipsis.mjs
   var Ellipsis = [
     ["circle", { cx: "12", cy: "12", r: "1" }],
@@ -16040,6 +16121,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     info: Info,
     "external-link": ExternalLink,
     refresh: RefreshCw,
+    eye: Eye,
+    "eye-off": EyeOff,
     unavailable: CircleOff,
     alert: TriangleAlert,
     check: CircleCheck,
@@ -16585,8 +16668,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     const installation = client.installation?.bind(client);
     return {
       ...installation ? {
-        installation: async (hostId, agent, action) => {
-          if (hostId !== "local") {
+        installation: async (hostId2, agent, action) => {
+          if (hostId2 !== "local") {
             throw new Error("Web console installation only supports the local Host");
           }
           return installation({ harnessId: harnessIdSchema.parse(agent), action });
@@ -17392,6 +17475,60 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     }
   };
 
+  // src/console/remote-connections.ts
+  function createConsoleRemoteConnections(manager) {
+    const request = (input, signal) => manager.sendRequest(
+      CONSOLE_REMOTE_CONNECTIONS_METHOD,
+      remoteConnectionsRequestSchema.parse(input),
+      signal
+    );
+    return {
+      ssh: {
+        async list(signal) {
+          return codexSshConnectionSchema.array().parse(await request({ action: "list" }, signal));
+        },
+        async save(draft, previous, signal) {
+          await request({ action: "save", draft, previous }, signal);
+        },
+        async remove(previous, signal) {
+          await request({ action: "remove", previous }, signal);
+        },
+        async connect(hostId2, enabled, signal) {
+          await request({ action: "connect", hostId: hostId2, enabled }, signal);
+        },
+        async state(hostId2, signal) {
+          const result = await request({ action: "state", hostId: hostId2 }, signal);
+          if (!result || typeof result !== "object" || !("state" in result) || typeof result.state !== "string")
+            throw new Error("Invalid Codex connection state");
+          return {
+            state: result.state,
+            error: "error" in result && typeof result.error === "string" ? result.error : null
+          };
+        }
+      },
+      async setup(connection, action, version2, uninstallPackage) {
+        return remoteSshSetupResultSchema.parse(
+          await manager.sendRequest(REMOTE_SSH_SETUP_METHOD, {
+            hostname: connection.sshAlias ?? connection.sshHost,
+            port: connection.sshPort,
+            identity: connection.identity,
+            action,
+            version: version2 ?? null,
+            ...action === "uninstall" ? { uninstallPackage: uninstallPackage ?? false } : {}
+          })
+        );
+      },
+      async runtime(hostId2) {
+        return runtimeStatusSchema.parse(
+          await (hostId2 === "local" ? manager.sendRequest(RUNTIME_STATUS_METHOD, {}) : request({ action: "runtime", hostId: hostId2 }))
+        );
+      },
+      async update(hostId2, version2) {
+        return runtimeStatusSchema.parse(await request({ action: "update", hostId: hostId2, version: version2 }));
+      }
+    };
+  }
+
   // src/renderer-request-sender.ts
   var RendererMethodUnavailableError = class extends Error {
     constructor(method, cause) {
@@ -17871,6 +18008,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
   color: var(--settings-muted);
   font-variant-numeric: tabular-nums;
 }
+/* Email privacy belongs to the identity column, so it sits beside the account count on the
+   left; quota controls (used/remaining, refresh) stay together on the right. */
+.settings-account-privacy-toggle {
+  margin-left: -8px;
+}
+.settings-account-privacy-toggle[aria-pressed="true"] {
+  color: var(--settings-text);
+  background: var(--settings-active);
+}
 .settings-account-search {
   display: flex;
   align-items: center;
@@ -17940,10 +18086,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
   background: light-dark(#f8f8fa, #202024);
   font-size: 11px;
   font-weight: 500;
-  text-align: left;
-}
-.settings-account-table th:last-child {
-  text-align: right;
+  text-align: center;
 }
 .settings-account-table td {
   padding: 17px 16px;
@@ -18263,26 +18406,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     border: 0;
   }
   .settings-account-person-cell,
-  .settings-account-management-cell,
+  .settings-account-usage-cell[colspan="2"],
   .settings-account-usage-cell--message,
   .settings-account-balance-cell {
     grid-column: 1 / -1;
   }
-  .settings-account-table .settings-account-row > td.settings-account-management-cell--empty {
-    display: none;
-  }
-  .settings-account-row--targets {
-    position: relative;
-  }
-  .settings-account-row--targets .settings-account-person-cell {
-    padding-right: 32px;
-  }
-  .settings-account-table .settings-account-row--targets > td.settings-account-management-cell {
-    position: absolute;
-    top: 14px;
-    right: 12px;
-    width: auto;
-  }
   .settings-account-email {
     font-size: 13px;
   }
@@ -18300,32 +18428,57 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
   }
 }
 
-/* Small Harness target mark: muted when nothing is copied, full-strength with a dot when it is. */
-.settings-account-harness-target {
-  position: relative;
-  width: 26px;
-  height: 28px;
-  color: var(--settings-subtle);
+/* Identity extras: reset cards and the Pi import chip share one wrapping line. */
+.settings-account-row__extras {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  gap: 4px 10px;
+  margin-top: 6px;
+}
+/* Pi import chip: dashed "Import into Pi" until copied, then the entry name with a check. */
+.settings-account-pi-import {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  min-height: 24px;
+  padding: 2px 8px;
+  color: var(--settings-muted);
+  font: inherit;
+  font-size: 11px;
+  white-space: nowrap;
+  background: transparent;
+  border: 1px dashed var(--settings-border);
+  border-radius: 6px;
+  cursor: pointer;
 }
-.settings-account-harness-target:hover:not(:disabled) {
+.settings-account-pi-import:hover:not(:disabled) {
   color: var(--settings-text);
+  border-style: solid;
+  background: var(--settings-hover);
 }
-.settings-account-harness-target:disabled {
-  opacity: 0.4;
+.settings-account-pi-import:disabled {
+  opacity: 0.45;
   cursor: default;
 }
-.settings-account-harness-target[data-state] {
+.settings-account-pi-import[data-state="imported"] {
   color: var(--settings-text);
+  background: var(--settings-inset);
+  border-style: solid;
 }
-.settings-account-harness-target[data-state]::after {
-  content: "";
-  position: absolute;
-  top: 5px;
-  right: 3px;
-  width: 6px;
-  height: 6px;
-  border-radius: 50%;
-  background: var(--settings-text);
+.settings-account-pi-import code {
+  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+  font-size: 11px;
+}
+.settings-account-pi-import > svg {
+  flex: none;
+}
+.settings-account-pi-import[data-state="imported"] > svg:last-child {
+  color: light-dark(#2f7d4f, #7fd19b);
+}
+.settings-account-pi-import:focus-visible {
+  outline: 2px solid var(--settings-focus);
+  outline-offset: 1px;
 }
 /* Dedicated "imported into Pi" section: same card language as the account table, lighter header. */
 .settings-pi-accounts {
@@ -18336,18 +18489,67 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 }
 .settings-pi-accounts__header {
   display: flex;
+  flex-wrap: wrap;
   align-items: center;
-  gap: 8px;
+  gap: 8px 12px;
   padding: 0 2px 12px;
   font-size: 13px;
 }
-.settings-pi-accounts__header > svg {
+.settings-pi-accounts__fold {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  padding: 4px 0;
+  color: var(--settings-text);
+  font: inherit;
+  background: transparent;
+  border: 0;
+  cursor: pointer;
+}
+.settings-pi-accounts__fold > svg {
   flex: none;
 }
-.settings-pi-accounts__header > :last-child {
+.settings-pi-accounts__fold > svg:first-child {
+  color: var(--settings-muted);
+  transition: transform 120ms ease;
+}
+.settings-pi-accounts__fold[aria-expanded="true"] > svg:first-child {
+  transform: rotate(90deg);
+}
+.settings-pi-accounts__count {
   color: var(--settings-muted);
   font-variant-numeric: tabular-nums;
 }
+.settings-pi-accounts__hint {
+  margin-right: auto;
+  color: var(--settings-muted);
+  font-size: 12px;
+}
+.settings-pi-accounts__import {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  min-height: 30px;
+  padding: 4px 10px;
+  color: var(--settings-text);
+  font: inherit;
+  font-size: 12px;
+  background: light-dark(#ffffff, #232326);
+  border: 1px solid var(--settings-border);
+  border-radius: 7px;
+  cursor: pointer;
+}
+.settings-pi-accounts__import:hover:not(:disabled) {
+  background: var(--settings-hover);
+}
+.settings-pi-accounts__import:disabled {
+  opacity: 0.45;
+  cursor: default;
+}
+.settings-pi-accounts__import[hidden],
+.settings-pi-accounts__card[hidden] {
+  display: none;
+}
 .settings-pi-accounts__card {
   container-type: inline-size;
   overflow: hidden;
@@ -18484,6 +18686,54 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
   color: var(--settings-muted);
   font-size: 12px;
 }
+.settings-credential-dialog__sources {
+  display: grid;
+  gap: 8px;
+  margin: 0;
+  padding: 0;
+  border: 0;
+}
+.settings-credential-dialog__sources > legend {
+  margin-bottom: 6px;
+  padding: 0;
+  color: var(--settings-muted);
+  font-size: 12px;
+}
+.settings-credential-dialog__source {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 9px 12px;
+  border: 1px solid var(--settings-border);
+  border-radius: 8px;
+  cursor: pointer;
+}
+.settings-credential-dialog__source:has(input:checked) {
+  border-color: var(--settings-focus);
+  background: var(--settings-hover);
+}
+.settings-credential-dialog__source > span {
+  display: grid;
+  gap: 2px;
+  min-width: 0;
+}
+.settings-credential-dialog__source strong {
+  font-size: 13px;
+  font-weight: 500;
+  overflow-wrap: anywhere;
+}
+.settings-credential-dialog__source > span > span {
+  color: var(--settings-muted);
+  font-size: 12px;
+}
+.settings-credential-dialog .settings-credential-dialog__source input {
+  flex: none;
+  width: auto;
+  min-height: 0;
+  margin: 0;
+  padding: 0;
+  accent-color: var(--settings-focus);
+}
 .settings-credential-dialog input {
   width: 100%;
   box-sizing: border-box;
@@ -18530,9 +18780,6 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 }
 
 @media (forced-colors: active) {
-  .settings-account-harness-target[data-state]::after {
-    background: Highlight;
-  }
   .settings-account-usage__bar {
     border: 1px solid CanvasText;
   }
@@ -18587,9 +18834,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 
   // src/settings/credential-import-messages.ts
   var credentialImportEnglish = {
-    column: "Use in Harness",
     sectionTitle: "Accounts in Pi",
-    sectionEmpty: "No logins in Pi yet. Use the Pi mark on a Codex or Grok account above to import one.",
+    sectionHint: "Copy a local Codex or Grok login into a Pi model entry.",
+    sectionImport: "Import account",
+    sectionEmpty: "No logins in Pi yet. Use \u201CImport account\u201D, or \u201CImport into Pi\u201D on a Codex or Grok account above.",
     rowReimport: "Copy again",
     rowRemove: "Remove",
     othersTitle: "Pi's own logins",
@@ -18602,6 +18850,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     entry: "Entry in Pi",
     name: "Model entry name",
     source: "Source account",
+    sourceCurrent: "Current login",
+    sourceImported: "Already in Pi as {name}/\u2026; another entry can be added",
     preview: "Creates {name}/\u2026 in Pi. Existing Provider configurations remain unchanged.",
     warning: "Copies the current authorization once; it does not synchronize logins or add quota. Pi and the original app may refresh the same token, which can require signing in again. Usage follows this Provider's billing rules.",
     confirm: "Confirm import",
@@ -18617,9 +18867,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     close: "Done"
   };
   var credentialImportChinese = {
-    column: "\u7528\u4E8E Harness",
     sectionTitle: "Pi \u4E2D\u7684\u8D26\u53F7",
-    sectionEmpty: "Pi \u4E2D\u8FD8\u6CA1\u6709\u767B\u5F55\u3002\u70B9\u51FB\u4E0A\u65B9 Codex \u6216 Grok \u8D26\u53F7\u884C\u7684 Pi \u56FE\u6807\u5373\u53EF\u5BFC\u5165\u3002",
+    sectionHint: "\u628A Codex\u3001Grok \u7684\u672C\u5730\u767B\u5F55\u590D\u5236\u6210 Pi \u7684\u6A21\u578B\u5165\u53E3",
+    sectionImport: "\u5BFC\u5165\u8D26\u53F7",
+    sectionEmpty: "Pi \u4E2D\u8FD8\u6CA1\u6709\u767B\u5F55\u3002\u70B9\u51FB\u300C\u5BFC\u5165\u8D26\u53F7\u300D\uFF0C\u6216\u4E0A\u65B9 Codex\u3001Grok \u8D26\u53F7\u884C\u7684\u300C\u5BFC\u5165\u5230 Pi\u300D\u5373\u53EF\u5BFC\u5165\u3002",
     rowReimport: "\u91CD\u65B0\u5BFC\u5165",
     rowRemove: "\u79FB\u9664",
     othersTitle: "Pi \u81EA\u6709\u914D\u7F6E",
@@ -18632,6 +18883,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     entry: "Pi \u4E2D\u7684\u5165\u53E3",
     name: "\u6A21\u578B\u5165\u53E3\u540D\u79F0",
     source: "\u6765\u6E90\u8D26\u53F7",
+    sourceCurrent: "\u5F53\u524D\u767B\u5F55",
+    sourceImported: "\u5DF2\u5BFC\u5165\u4E3A {name}/\u2026\uFF0C\u53EF\u518D\u65B0\u589E\u4E00\u4E2A\u5165\u53E3",
     preview: "\u5C06\u5728 Pi \u4E2D\u65B0\u589E {name}/\u2026\uFF0C\u4FDD\u7559\u5168\u90E8\u5DF2\u6709 Provider \u914D\u7F6E\u3002",
     warning: "\u4EC5\u590D\u5236\u5F53\u524D\u6388\u6743\uFF0C\u4E0D\u6301\u7EED\u540C\u6B65\u767B\u5F55\uFF0C\u4E5F\u4E0D\u589E\u52A0\u989D\u5EA6\u3002Pi \u4E0E\u539F\u751F\u5DE5\u5177\u5206\u522B\u5237\u65B0\u540C\u4E00\u51ED\u8BC1\u65F6\uFF0C\u53EF\u80FD\u9700\u8981\u91CD\u65B0\u767B\u5F55\u3002\u5B9E\u9645\u7528\u91CF\u9075\u5FAA\u8BE5 Provider \u7684\u8BA1\u8D39\u89C4\u5219\u3002",
     confirm: "\u786E\u8BA4\u5BFC\u5165",
@@ -18805,6 +19058,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     accountCreditsFailed: "Could not load limits",
     accountCreditsRetry: "Retry",
     accountCreditsRefresh: "Refresh limits",
+    accountEmailsHide: "Hide emails",
+    accountEmailsShow: "Show emails",
     accountLoadFailed: "Could not load Codex Accounts.",
     accountCreditsUsed: "Used",
     accountCreditsResetAt: "Quota resets: {time}",
@@ -19075,6 +19330,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     accountCreditsFailed: "\u989D\u5EA6\u8BFB\u53D6\u5931\u8D25",
     accountCreditsRetry: "\u91CD\u8BD5",
     accountCreditsRefresh: "\u5237\u65B0\u989D\u5EA6",
+    accountEmailsHide: "\u9690\u85CF\u90AE\u7BB1",
+    accountEmailsShow: "\u663E\u793A\u90AE\u7BB1",
     accountLoadFailed: "\u65E0\u6CD5\u52A0\u8F7D Codex \u8D26\u53F7\u3002",
     accountCreditsUsed: "\u5DF2\u7528",
     accountCreditsResetAt: "\u989D\u5EA6\u91CD\u7F6E\u65F6\u95F4\uFF1A{time}",
@@ -19273,6 +19530,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 
   // src/settings/remote-failure-messages.ts
   var REMOTE_FAILURE_CHINESE = Object.freeze({
+    "Remote connection management is unavailable. Restart Codex through codexhost": "\u8FDC\u7A0B\u8FDE\u63A5\u7BA1\u7406\u6682\u4E0D\u53EF\u7528\uFF0C\u8BF7\u901A\u8FC7 codexhost \u91CD\u65B0\u542F\u52A8 Codex",
+    "Remote connection request timed out. Refresh before retrying": "\u8FDC\u7A0B\u8FDE\u63A5\u8BF7\u6C42\u8D85\u65F6\uFF0C\u8BF7\u5237\u65B0\u540E\u518D\u8BD5",
+    "Invalid remote connection request": "\u8FDC\u7A0B\u8FDE\u63A5\u8BF7\u6C42\u65E0\u6548",
     // SSH helper: installing, updating and repairing over SSH.
     "Invalid SSH address or port": "SSH \u5730\u5740\u6216\u7AEF\u53E3\u65E0\u6548",
     "Install requires a published stable version": "\u53EA\u80FD\u5B89\u88C5\u5DF2\u53D1\u5E03\u7684\u6B63\u5F0F\u7248\u672C",
@@ -19282,7 +19542,13 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     "This release is not published on npm, or the remote computer cannot reach the registry": "\u8BE5\u7248\u672C\u5C1A\u672A\u53D1\u5E03\u5230 npm\uFF0C\u6216\u8FDC\u7A0B\u7535\u8111\u65E0\u6CD5\u8BBF\u95EE npm \u4ED3\u5E93",
     "codexhost was installed but is not on the remote PATH. Update this remote manually": "codexhost \u5DF2\u5B89\u88C5\uFF0C\u4F46\u4E0D\u5728\u8FDC\u7A0B\u7535\u8111\u7684 PATH \u4E2D\uFF0C\u8BF7\u5728\u8FDC\u7A0B\u7535\u8111\u4E0A\u624B\u52A8\u66F4\u65B0",
     "Only Mac and Linux remote computers are supported": "\u53EA\u652F\u6301 Mac \u548C Linux \u8FDC\u7A0B\u7535\u8111",
-    "Node.js, npm or Codex CLI was not found over SSH. Install them on the remote computer and make sure non-interactive SSH sessions have them on PATH": "\u901A\u8FC7 SSH \u627E\u4E0D\u5230 Node.js\u3001npm \u6216 Codex CLI\u3002\u8BF7\u5728\u8FDC\u7A0B\u7535\u8111\u4E0A\u5B89\u88C5\u5B83\u4EEC\uFF0C\u5E76\u786E\u4FDD\u975E\u4EA4\u4E92\u5F0F SSH \u4F1A\u8BDD\u7684 PATH \u4E2D\u5305\u542B\u5B83\u4EEC",
+    "Node.js was not detected over SSH. Install it on the remote computer or add it to the login shell PATH, then retry": "\u901A\u8FC7 SSH \u672A\u68C0\u6D4B\u5230 Node.js\u3002\u8BF7\u5728\u8FDC\u7A0B\u7535\u8111\u4E0A\u5B89\u88C5\uFF0C\u6216\u5C06\u5DF2\u5B89\u88C5\u7684 Node.js \u52A0\u5165\u767B\u5F55 shell \u7684 PATH \u540E\u91CD\u8BD5",
+    "npm was not detected over SSH. Install it on the remote computer or add it to the login shell PATH, then retry": "\u901A\u8FC7 SSH \u672A\u68C0\u6D4B\u5230 npm\u3002\u8BF7\u5728\u8FDC\u7A0B\u7535\u8111\u4E0A\u5B89\u88C5\uFF0C\u6216\u5C06\u5DF2\u5B89\u88C5\u7684 npm \u52A0\u5165\u767B\u5F55 shell \u7684 PATH \u540E\u91CD\u8BD5",
+    "Codex CLI was not detected over SSH. Install the command-line tool on the remote computer or add it to the login shell PATH, then retry. Codex Desktop is not required": "\u901A\u8FC7 SSH \u672A\u68C0\u6D4B\u5230 Codex CLI\uFF08\u547D\u4EE4\u884C\u5DE5\u5177\uFF09\u3002\u8BF7\u5728\u8FDC\u7A0B\u7535\u8111\u4E0A\u5B89\u88C5\uFF0C\u6216\u5C06\u5DF2\u5B89\u88C5\u7684 Codex CLI \u52A0\u5165\u767B\u5F55 shell \u7684 PATH \u540E\u91CD\u8BD5\u3002\u65E0\u9700\u5B89\u88C5 Codex \u684C\u9762\u7AEF",
+    "codexhost was not detected over SSH. Install it on the remote computer or add it to the login shell PATH, then retry": "\u901A\u8FC7 SSH \u672A\u68C0\u6D4B\u5230 codexhost\u3002\u8BF7\u5728\u8FDC\u7A0B\u7535\u8111\u4E0A\u5B89\u88C5\uFF0C\u6216\u5C06\u5DF2\u5B89\u88C5\u7684 codexhost \u52A0\u5165\u767B\u5F55 shell \u7684 PATH \u540E\u91CD\u8BD5",
+    "The active codexhost does not match the global npm installation. Uninstall only the remote service, or remove the package manually on the remote computer": "\u5F53\u524D codexhost \u4E0E npm \u5168\u5C40\u5B89\u88C5\u4F4D\u7F6E\u4E0D\u5339\u914D\u3002\u8BF7\u9009\u62E9\u4EC5\u5378\u8F7D\u8FDC\u7A0B\u670D\u52A1\uFF0C\u6216\u5728\u8FDC\u7A0B\u7535\u8111\u4E0A\u624B\u52A8\u5378\u8F7D\u8F6F\u4EF6\u5305",
+    "The remote service was uninstalled, but removing the codexhost package failed. Check npm permissions on the remote computer and retry": "\u8FDC\u7A0B\u670D\u52A1\u5DF2\u5378\u8F7D\uFF0C\u4F46 codexhost \u8F6F\u4EF6\u5305\u5378\u8F7D\u5931\u8D25\u3002\u8BF7\u68C0\u67E5\u8FDC\u7A0B\u7535\u8111\u4E0A\u7684 npm \u6743\u9650\u540E\u91CD\u8BD5",
+    "Remote Node.js is unsupported. Select Node.js 22.19 or later in the 22.x series, or Node.js 24.x": "\u8FDC\u7A0B Node.js \u7248\u672C\u4E0D\u53D7\u652F\u6301\uFF0C\u8BF7\u9009\u62E9 Node.js 22.19 \u53CA\u4EE5\u4E0A\u7684 22.x \u7248\u672C\uFF0C\u6216 Node.js 24.x",
     "npm installation failed. Check network access and global installation permissions": "npm \u5B89\u88C5\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u7F51\u7EDC\u548C\u5168\u5C40\u5B89\u88C5\u6743\u9650",
     "Remote service configuration failed. Check Codex CLI and the remote desktop login": "\u8FDC\u7A0B\u670D\u52A1\u914D\u7F6E\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5 Codex CLI \u4EE5\u53CA\u8FDC\u7A0B\u7535\u8111\u7684\u684C\u9762\u767B\u5F55\u72B6\u6001",
     "Remote service could not stop. Check the remote service before retrying": "\u8FDC\u7A0B\u670D\u52A1\u65E0\u6CD5\u505C\u6B62\uFF0C\u8BF7\u68C0\u67E5\u8FDC\u7A0B\u670D\u52A1\u540E\u91CD\u8BD5",
@@ -19580,6 +19846,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     }
     const serviceActions = remoteElement(document2, "div", "settings-remote-card__actions");
     if (!row.probing) {
+      if (row.installation === "installed" && !remoteBusy(remote)) {
+        serviceActions.append(command("uninstall", t("\u5378\u8F7D\u8FDC\u7A0B\u670D\u52A1", "Uninstall remote service")));
+      }
       const outdated = !remote && !!row.remoteIssue?.outdated && row.installation !== "not-installed";
       if (outdated) {
         const upgrade = command("upgrade", t("\u66F4\u65B0\u8FDC\u7A0B\u670D\u52A1", "Update remote service"), true);
@@ -19896,6 +20165,61 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     });
     dialog.show(t("\u79FB\u9664", "Remove"), t("\u79FB\u9664\u4E2D\u2026", "Removing\u2026"), true);
   }
+  function openRemoteServiceUninstall(options) {
+    const { t, connection } = options;
+    const dialog = createRemoteDialog(
+      options,
+      t(
+        `\u5378\u8F7D\u201C${connection.displayName}\u201D\u7684\u8FDC\u7A0B\u670D\u52A1\uFF1F`,
+        `Uninstall remote service on "${connection.displayName}"?`
+      )
+    );
+    if (!dialog) return;
+    const document2 = options.container.ownerDocument;
+    dialog.body.append(
+      remoteElement(
+        document2,
+        "p",
+        "",
+        t(
+          "\u5378\u8F7D\u4F1A\u4E2D\u65AD codexhost \u542F\u52A8\u7684\u4F1A\u8BDD\u3002\u5982\u9700\u5728\u8BE5\u7535\u8111\u7EE7\u7EED\u4F7F\u7528\uFF0C\u8BF7\u624B\u52A8\u901A\u8FC7 codexhost \u91CD\u65B0\u542F\u52A8\u3002",
+          "Uninstalling interrupts sessions started through codexhost. To keep using it on that computer, manually relaunch through codexhost."
+        )
+      )
+    );
+    const label = remoteElement(document2, "label", "settings-remote-dialog__package-option");
+    const removePackage = remoteElement(document2, "input");
+    removePackage.type = "checkbox";
+    label.append(
+      removePackage,
+      t("\u540C\u65F6\u5378\u8F7D codexhost \u8F6F\u4EF6\u5305", "Also uninstall the codexhost package")
+    );
+    dialog.body.append(
+      label,
+      remoteElement(
+        document2,
+        "p",
+        "",
+        t(
+          "\u52FE\u9009\u540E\uFF0C\u518D\u6B21\u4F7F\u7528\u524D\u9700\u91CD\u65B0\u5B89\u88C5 codexhost\u3002",
+          "If selected, reinstall codexhost before using it again."
+        )
+      )
+    );
+    dialog.form.addEventListener("submit", (event) => {
+      event.preventDefault();
+      const selected = removePackage.checked;
+      dialog.submit(async () => {
+        removePackage.disabled = true;
+        try {
+          await options.uninstall(selected);
+        } finally {
+          removePackage.disabled = false;
+        }
+      });
+    });
+    dialog.show(t("\u5378\u8F7D", "Uninstall"), t("\u5378\u8F7D\u4E2D\u2026", "Uninstalling\u2026"), true);
+  }
 
   // src/settings/remote-connections-page.ts
   var POLL_INTERVAL_MS = 5e3;
@@ -20024,17 +20348,17 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
           banner.hidden = !loadError;
           bannerText.textContent = loadError ? `${t("\u8BFB\u53D6\u8FDE\u63A5\u5931\u8D25", "Could not load connections")}: ${localizeRemoteFailure(loadError, t)}` : "";
           renderPlaceholder();
-          for (const [hostId, card] of cards) {
-            if (rows.has(hostId)) continue;
+          for (const [hostId2, card] of cards) {
+            if (rows.has(hostId2)) continue;
             card.element.remove();
-            cards.delete(hostId);
+            cards.delete(hostId2);
           }
           const active = focusedElement();
-          order.forEach((hostId, index) => {
-            const row = rows.get(hostId);
+          order.forEach((hostId2, index) => {
+            const row = rows.get(hostId2);
             if (!row) return;
             const signature = JSON.stringify([row, local]);
-            let card = cards.get(hostId);
+            let card = cards.get(hostId2);
             if (card?.signature !== signature) {
               const element = renderRemoteCard(
                 document2,
@@ -20046,7 +20370,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
               const focusedAction = active && card?.element.contains(active) ? active.dataset.action : void 0;
               if (card) card.element.replaceWith(element);
               card = { element, signature };
-              cards.set(hostId, card);
+              cards.set(hostId2, card);
               if (focusedAction) focusAction(element, focusedAction);
             }
             if (list.children[index] !== card.element)
@@ -20058,38 +20382,41 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
           target?.focus();
         }
         async function probe(row) {
-          const { hostId } = row.connection;
-          const token = (probeTokens.get(hostId) ?? 0) + 1;
-          probeTokens.set(hostId, token);
-          const state = await control.ssh.state(hostId, signal).catch((error51) => ({ state: "unknown", error: remoteErrorMessage(error51) }));
+          const { hostId: hostId2 } = row.connection;
+          const token = (probeTokens.get(hostId2) ?? 0) + 1;
+          probeTokens.set(hostId2, token);
+          const state = await control.ssh.state(hostId2, signal).catch((error51) => ({ state: "unknown", error: remoteErrorMessage(error51) }));
           let remote = null;
           let remoteIssue = null;
           if (state.state === "connected")
-            remote = await control.runtime(hostId).catch((error51) => {
+            remote = await control.runtime(hostId2).catch((error51) => {
               remoteIssue = remoteVersionIssue(error51);
               return null;
             });
+          if (signal.aborted || rows.get(hostId2) !== row || probeTokens.get(hostId2) !== token) return;
           let expectedGap = false;
-          if (remote && remoteBusy(remote)) restarting.set(hostId, Date.now() + RESTART_GRACE_MS);
-          else if (remote || (restarting.get(hostId) ?? 0) <= Date.now()) restarting.delete(hostId);
+          if (remote && remoteBusy(remote)) restarting.set(hostId2, Date.now() + RESTART_GRACE_MS);
+          else if (remote || (restarting.get(hostId2) ?? 0) <= Date.now()) restarting.delete(hostId2);
           else if (row.remote) {
             expectedGap = true;
             remote = { ...row.remote, update: { ...row.remote.update, phase: "restarting" } };
             remoteIssue = null;
           }
-          if (remote) installations.set(hostId, "installed");
-          else if (!installations.has(hostId) && Date.now() - (inspectFailures.get(hostId) ?? -INSPECT_RETRY_MS) >= INSPECT_RETRY_MS) {
+          if (remote) installations.set(hostId2, "installed");
+          else if (!installations.has(hostId2) && Date.now() - (inspectFailures.get(hostId2) ?? -INSPECT_RETRY_MS) >= INSPECT_RETRY_MS) {
             const inspected = await control.setup(row.connection, "inspect").catch(() => null);
-            if (inspected) installations.set(hostId, inspected.state);
-            else inspectFailures.set(hostId, Date.now());
+            if (signal.aborted || rows.get(hostId2) !== row || probeTokens.get(hostId2) !== token)
+              return;
+            if (inspected) installations.set(hostId2, inspected.state);
+            else inspectFailures.set(hostId2, Date.now());
           }
-          if (signal.aborted || rows.get(hostId) !== row || probeTokens.get(hostId) !== token) return;
+          if (signal.aborted || rows.get(hostId2) !== row || probeTokens.get(hostId2) !== token) return;
           row.probing = false;
           row.state = expectedGap ? "connecting" : state.state;
           row.stateError = expectedGap ? null : state.error;
           row.remote = remote;
           row.remoteIssue = remoteIssue;
-          row.installation = installations.get(hostId) ?? "unknown";
+          row.installation = installations.get(hostId2) ?? "unknown";
           render();
         }
         async function refresh(actingHostId, wait = "acting") {
@@ -20129,27 +20456,28 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
                 notice: null
               });
           }
-          for (const hostId of [...rows.keys()]) {
-            if (order.includes(hostId)) continue;
-            rows.delete(hostId);
-            installations.delete(hostId);
-            probeTokens.delete(hostId);
-            inspectFailures.delete(hostId);
-            restarting.delete(hostId);
+          for (const hostId2 of [...rows.keys()]) {
+            if (order.includes(hostId2)) continue;
+            rows.delete(hostId2);
+            installations.delete(hostId2);
+            probeTokens.delete(hostId2);
+            inspectFailures.delete(hostId2);
+            restarting.delete(hostId2);
           }
           render();
           const probes = [...rows.values()].filter((row) => !row.pending || row.connection.hostId === actingHostId).map((row) => ({ hostId: row.connection.hostId, done: probe(row) }));
           const awaited = wait === "all" ? probes : probes.filter((p) => p.hostId === actingHostId);
           await Promise.all([localTask, ...awaited.map((p) => p.done)]);
         }
-        async function act(row, action, label, operation) {
-          const { hostId } = row.connection;
+        async function act(row, action, label, operation, rethrow = false) {
+          const { hostId: hostId2 } = row.connection;
+          probeTokens.set(hostId2, (probeTokens.get(hostId2) ?? 0) + 1);
           row.pending = label;
           row.notice = null;
           render();
           try {
             const done = await operation();
-            await refresh(hostId);
+            await refresh(hostId2);
             if (typeof done === "string") {
               const notice = { tone: "success", text: done };
               row.notice = notice;
@@ -20161,14 +20489,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
             }
           } catch (error51) {
             row.notice = { tone: "danger", text: remoteErrorMessage(error51) };
-            installations.delete(hostId);
-            inspectFailures.delete(hostId);
-            void refresh(hostId);
+            installations.delete(hostId2);
+            inspectFailures.delete(hostId2);
+            void refresh(hostId2);
+            if (rethrow) throw error51;
           } finally {
             row.pending = null;
             if (!signal.aborted) {
               render();
-              const card = cards.get(hostId)?.element;
+              const card = cards.get(hostId2)?.element;
               if (card && !focusedElement()) focusAction(card, action);
             }
           }
@@ -20193,9 +20522,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         function handle(row, action) {
           if (row.pending) return;
           const { connection } = row;
-          const { hostId } = connection;
+          const { hostId: hostId2 } = connection;
           const setConnected = async (enabled) => {
-            const request = control.ssh.connect(hostId, enabled, signal);
+            const request = control.ssh.connect(hostId2, enabled, signal);
             request.catch(() => void 0);
             await Promise.race([
               request,
@@ -20203,8 +20532,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
             ]);
           };
           const reconnect = async () => {
-            installations.delete(hostId);
-            inspectFailures.delete(hostId);
+            installations.delete(hostId2);
+            inspectFailures.delete(hostId2);
             await setConnected(true);
           };
           switch (action) {
@@ -20239,8 +20568,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
               break;
             case "recheck":
               void act(row, action, t("\u6B63\u5728\u91CD\u65B0\u68C0\u6D4B\u2026", "Checking again\u2026"), async () => {
-                installations.delete(hostId);
-                inspectFailures.delete(hostId);
+                installations.delete(hostId2);
+                inspectFailures.delete(hostId2);
               });
               break;
             case "install": {
@@ -20285,6 +20614,47 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
                 }
               );
               break;
+            case "uninstall":
+              if (row.installation !== "installed" || remoteBusy(row.remote)) break;
+              openRemoteServiceUninstall({
+                container: root,
+                signal,
+                t,
+                connection,
+                async uninstall(removePackage) {
+                  if (row.pending || remoteBusy(row.remote))
+                    throw new Error(
+                      t(
+                        "\u8FDC\u7A0B\u670D\u52A1\u6B63\u5728\u6267\u884C\u5176\u4ED6\u64CD\u4F5C\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",
+                        "Another remote operation is active; retry shortly"
+                      )
+                    );
+                  await act(
+                    row,
+                    action,
+                    t("\u6B63\u5728\u5378\u8F7D\u8FDC\u7A0B\u670D\u52A1\u2026", "Uninstalling remote service\u2026"),
+                    async () => {
+                      await control.ssh.connect(hostId2, false, signal);
+                      await control.setup(connection, "uninstall", void 0, removePackage);
+                      installations.set(hostId2, "not-installed");
+                      inspectFailures.delete(hostId2);
+                      restarting.delete(hostId2);
+                      row.remote = null;
+                      row.remoteIssue = null;
+                      row.stateError = null;
+                      return removePackage ? t(
+                        "\u8FDC\u7A0B\u670D\u52A1\u548C codexhost \u8F6F\u4EF6\u5305\u5DF2\u5378\u8F7D",
+                        "Remote service and codexhost package uninstalled"
+                      ) : t(
+                        "\u8FDC\u7A0B\u670D\u52A1\u5DF2\u5378\u8F7D\uFF0Ccodexhost \u8F6F\u4EF6\u5305\u5DF2\u4FDD\u7559",
+                        "Remote service uninstalled; codexhost package kept"
+                      );
+                    },
+                    true
+                  );
+                }
+              });
+              break;
             case "update": {
               const target = row.remote ? remoteMaintenanceTarget(local, row.remote) : null;
               if (!target) break;
@@ -20294,7 +20664,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
                 action,
                 restart ? t("\u6B63\u5728\u91CD\u542F\u8FDC\u7A0B\u670D\u52A1\u2026", "Restarting remote service\u2026") : t("\u6B63\u5728\u63D0\u4EA4\u66F4\u65B0\u2026", "Starting update\u2026"),
                 async () => {
-                  await control.update(hostId, target);
+                  await control.update(hostId2, target);
                   await setConnected(true);
                 }
               );
@@ -20766,7 +21136,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
   }
 
   // src/settings/harness-installation-panel.ts
-  function createHarnessInstallationPanel(document2, agent, hostId, messages, copy, installation) {
+  function createHarnessInstallationPanel(document2, agent, hostId2, messages, copy, installation) {
     const zh = messages.locale === "zh-CN";
     const guide = harnessInstallationGuide(agent, messages.locale);
     const panel = document2.createElement("div");
@@ -20776,7 +21146,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       p.textContent = text;
       panel.append(p);
     };
-    if (hostId !== "local") {
+    if (hostId2 !== "local") {
       paragraph(zh ? "\u8BF7\u5728\u8FDC\u7A0B Host \u4E0A\u5B89\u88C5\u3002" : "Install on the remote Host.");
     }
     if (guide.before) paragraph(guide.before);
@@ -20969,9 +21339,32 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       }
     };
     update.addEventListener("click", () => void run("update"));
-    signal.addEventListener("abort", render, { once: true });
+    const owner = document2.defaultView;
+    let checkFrame = null;
+    let checkTimer = null;
+    signal.addEventListener(
+      "abort",
+      () => {
+        if (checkFrame !== null) owner?.cancelAnimationFrame(checkFrame);
+        if (checkTimer !== null) owner?.clearTimeout(checkTimer);
+        render();
+      },
+      { once: true }
+    );
+    status.textContent = messages.harnessVersionChecking;
     render();
-    void run("check");
+    if (!signal.aborted && owner?.requestAnimationFrame) {
+      checkFrame = owner.requestAnimationFrame(() => {
+        checkFrame = null;
+        if (signal.aborted) return;
+        checkTimer = owner.setTimeout(() => {
+          checkTimer = null;
+          void run("check");
+        }, 0);
+      });
+    } else {
+      void run("check");
+    }
     return panel;
   }
 
@@ -20996,11 +21389,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     if (availability === "notInstalled") return "setup";
     return "failed";
   }
-  function diagnosticText(hostId, item) {
+  function diagnosticText(hostId2, item) {
     const error51 = item.error;
     return [
       "codexhost connection diagnostics",
-      `host: ${hostId}`,
+      `host: ${hostId2}`,
       `agent: ${item.name}`,
       `status: ${item.availability}`,
       ...error51 ? [
@@ -21035,10 +21428,10 @@ ${error51.stderrTail}`] : []
       () => showCopyButtonFeedback(button2, messages.connectionCopyFailed, restoreLabel)
     );
   }
-  function connectionHostName(hostId, messages) {
-    if (hostId === "local") return messages.connectionLocalHost;
-    const separator = hostId.lastIndexOf(":");
-    const encodedName = separator >= 0 ? hostId.slice(separator + 1) : hostId;
+  function connectionHostName(hostId2, messages) {
+    if (hostId2 === "local") return messages.connectionLocalHost;
+    const separator = hostId2.lastIndexOf(":");
+    const encodedName = separator >= 0 ? hostId2.slice(separator + 1) : hostId2;
     try {
       return decodeURIComponent(encodedName);
     } catch {
@@ -21233,7 +21626,7 @@ ${error51.stderrTail}`] : []
     header.append(identity, status);
     return header;
   }
-  function renderConnectionInspector(document2, inspector, item, hostId, messages, diagnostics, existingLaunchControls, refresh) {
+  function renderConnectionInspector(document2, inspector, item, hostId2, messages, diagnostics, existingLaunchControls, refresh) {
     inspector.replaceChildren(createInspectorHeader(document2, item, messages));
     const body = document2.createElement("div");
     body.className = "settings-connection-inspector__body";
@@ -21263,7 +21656,7 @@ ${error51.stderrTail}`] : []
         createHarnessInstallationPanel(
           document2,
           item.agentSnapshot.agent,
-          hostId,
+          hostId2,
           messages,
           (button2, command, label) => copyDiagnosticsToClipboard(document2, button2, command, messages, label),
           item.install ? {
@@ -21302,7 +21695,7 @@ ${error51.stderrTail}`] : []
       copy.type = "button";
       copy.className = "settings-command-button settings-command-button--secondary";
       setCopyButtonLabel(copy, messages.connectionCopyDetails);
-      const report = diagnosticText(hostId, item);
+      const report = diagnosticText(hostId2, item);
       copy.addEventListener("click", () => {
         copyDiagnosticsToClipboard(document2, copy, report, messages, messages.connectionCopyDetails);
       });
@@ -21355,10 +21748,10 @@ ${error51.stderrTail}`] : []
     const agent = item.agentSnapshot?.agent;
     const getLaunchSettings = diagnostics?.getLaunchSettings?.bind(diagnostics);
     const setLaunchSettings = diagnostics?.setLaunchSettings?.bind(diagnostics);
-    if (hostId === "local" && (agent === "zcode" || agent === "workbuddy") && getLaunchSettings && setLaunchSettings) {
+    if (hostId2 === "local" && (agent === "zcode" || agent === "workbuddy") && getLaunchSettings && setLaunchSettings) {
       launchControls = existingLaunchControls ?? createHarnessLaunchControls(document2, messages, agent, {
-        get: () => getLaunchSettings(hostId, agent),
-        set: (path) => setLaunchSettings(hostId, agent, path)
+        get: () => getLaunchSettings(hostId2, agent),
+        set: (path) => setLaunchSettings(hostId2, agent, path)
       });
       body.append(launchControls);
     }
@@ -21412,7 +21805,7 @@ ${error51.stderrTail}`] : []
     button2.addEventListener("click", onReset);
     return button2;
   }
-  function createConnectionsSettingsPage(messages, getDiagnostics, groupPreference = getSharedAgentGroupPreferenceStore()) {
+  function createConnectionsSettingsPage(messages, getDiagnostics, groupPreference = getSharedAgentGroupPreferenceStore(), getRemoteConnections = () => null) {
     return Object.freeze({
       id: "connections",
       label: messages.pageLabels.connections,
@@ -21447,8 +21840,33 @@ ${error51.stderrTail}`] : []
         let launchControls = null;
         const versionPanels = /* @__PURE__ */ new Map();
         const updatingVersions = /* @__PURE__ */ new Set();
+        const hostNames = /* @__PURE__ */ new Map();
         let latestSnapshot = null;
         let disposeHostScroller = () => void 0;
+        let disposed = false;
+        let renderQueued = false;
+        let renderFrame = null;
+        const scheduleRender = () => {
+          if (disposed || context.signal.aborted || renderQueued) return;
+          renderQueued = true;
+          const flush = () => {
+            renderFrame = null;
+            renderQueued = false;
+            if (!disposed && !context.signal.aborted) {
+              render(diagnostics?.snapshot() ?? latestSnapshot);
+            }
+          };
+          if (document2.defaultView?.requestAnimationFrame) {
+            renderFrame = document2.defaultView.requestAnimationFrame(flush);
+          } else {
+            queueMicrotask(flush);
+          }
+        };
+        const cancelRender = () => {
+          disposed = true;
+          if (renderFrame !== null) document2.defaultView?.cancelAnimationFrame(renderFrame);
+          renderFrame = null;
+        };
         const diagnostics = getDiagnostics();
         const installs = diagnostics ? harnessInstallStore(diagnostics) : null;
         const runRefresh = () => {
@@ -21538,7 +21956,7 @@ ${error51.stderrTail}`] : []
             tab.setAttribute("aria-controls", panelId);
             tab.setAttribute("aria-selected", String(host.hostId === selectedHost.hostId));
             tab.tabIndex = host.hostId === selectedHost.hostId ? 0 : -1;
-            const hostName = connectionHostName(host.hostId, messages);
+            const hostName = hostNames.get(host.hostId) || connectionHostName(host.hostId, messages);
             tab.textContent = hostName;
             tab.title = host.active ? `${hostName} \xB7 ${messages.connectionActiveHost}` : hostName;
             tab.addEventListener("click", () => {
@@ -21632,14 +22050,14 @@ ${error51.stderrTail}`] : []
               const key = JSON.stringify([selectedHost.hostId, agent]);
               let panel = versionPanels.get(key);
               if (!panel) {
-                const hostId = selectedHost.hostId;
+                const hostId2 = selectedHost.hostId;
                 panel = createHarnessVersionPanel(document2, messages, context.signal, agent, {
                   async run(action) {
-                    if (action !== "update") return installation(hostId, agent, action);
+                    if (action !== "update") return installation(hostId2, agent, action);
                     updatingVersions.add(key);
                     if (diagnostics) render(diagnostics.snapshot());
                     try {
-                      return await installation(hostId, agent, action);
+                      return await installation(hostId2, agent, action);
                     } finally {
                       updatingVersions.delete(key);
                       if (!context.signal.aborted && diagnostics) render(diagnostics.snapshot());
@@ -21831,20 +22249,31 @@ ${error51.stderrTail}`] : []
           }
         };
         render(diagnostics?.snapshot() ?? null);
-        const unsubscribeGroup = groupPreference.subscribe(
-          () => render(diagnostics?.snapshot() ?? latestSnapshot)
+        void getRemoteConnections()?.ssh.list(context.signal).then(
+          (connections) => {
+            if (context.signal.aborted) return;
+            for (const connection of connections) {
+              hostNames.set(connection.hostId, connection.displayName.trim());
+            }
+            render(diagnostics?.snapshot() ?? null);
+          },
+          () => {
+          }
         );
+        const unsubscribeGroup = groupPreference.subscribe(scheduleRender);
         if (!diagnostics) {
           refresh.disabled = true;
           return () => {
+            cancelRender();
             disposeHostScroller();
             unsubscribeGroup();
           };
         }
         refresh.addEventListener("click", runRefresh);
-        const unsubscribe = diagnostics.subscribe(() => render(diagnostics.snapshot()));
-        const unsubscribeInstalls = installs?.subscribe(() => render(diagnostics.snapshot()));
+        const unsubscribe = diagnostics.subscribe(scheduleRender);
+        const unsubscribeInstalls = installs?.subscribe(scheduleRender);
         return () => {
+          cancelRender();
           disposeHostScroller();
           unsubscribeInstalls?.();
           unsubscribe();
@@ -22415,7 +22844,7 @@ ${error51.stderrTail}`] : []
           void context.runLatest(
             async (signal) => {
               const missing = new Set(
-                getDiagnostics()?.snapshot().hosts.find(({ hostId }) => hostId === "local")?.agents.filter(({ availability }) => availability === "notInstalled").map(({ agent }) => agent)
+                getDiagnostics()?.snapshot().hosts.find(({ hostId: hostId2 }) => hostId2 === "local")?.agents.filter(({ availability }) => availability === "notInstalled").map(({ agent }) => agent)
               );
               const harnesses = (await client.listSessionImportSources()).harnesses.filter(
                 ({ harnessId }) => !missing.has(harnessId)
@@ -22758,8 +23187,28 @@ ${error51.stderrTail}`] : []
     });
   }
 
+  // src/settings/account-privacy.ts
+  var EMAIL_PATTERN = /([^\s@]+)@([^\s@]+\.[^\s@]+)/gu;
+  var MASK = "****";
+  function maskEmailLocalPart(local) {
+    const chars = Array.from(local);
+    if (chars.length <= 1) return MASK;
+    if (chars.length <= 4) return `${chars[0]}${MASK}${chars.length > 2 ? chars.at(-1) : ""}`;
+    return `${chars.slice(0, 2).join("")}${MASK}${chars.slice(-2).join("")}`;
+  }
+  function maskEmails(text) {
+    return text.replace(
+      EMAIL_PATTERN,
+      (_match, local, domain2) => `${maskEmailLocalPart(local)}@${domain2}`
+    );
+  }
+  function accountDisplayText(text, hideEmails) {
+    return hideEmails ? maskEmails(text) : text;
+  }
+
   // src/settings/credential-imports.ts
   var TARGET_HARNESS_ID = "pi";
+  var SECTION_IMPORT_KEY = "section:import";
   var VENDOR_AGENTS = {
     "openai-codex": "codex",
     xai: "grok"
@@ -22794,9 +23243,17 @@ ${error51.stderrTail}`] : []
     let busy = false;
     let dialog;
     let othersExpanded = false;
+    let sectionExpanded = true;
+    let hideEmails = false;
+    const shown = (text) => accountDisplayText(text, hideEmails);
     const targetButtons = /* @__PURE__ */ new Map();
     const importedRecords = () => snapshot.targets.find((target) => target.harnessId === TARGET_HARNESS_ID)?.imports ?? [];
     const sourceOf = (record2) => snapshot.sources.find((source) => source.id === record2.source.id);
+    const piTarget = () => snapshot.targets.find((candidate) => candidate.harnessId === TARGET_HARNESS_ID);
+    const compatibleSources = () => {
+      const target = piTarget();
+      return target ? snapshot.sources.filter((source) => target.providers.includes(source.provider)) : [];
+    };
     const section = document2.createElement("section");
     section.className = "settings-pi-accounts";
     section.hidden = true;
@@ -22804,12 +23261,46 @@ ${error51.stderrTail}`] : []
     section.setAttribute("aria-label", messages.sectionTitle);
     const sectionHeader = document2.createElement("div");
     sectionHeader.className = "settings-pi-accounts__header";
+    const sectionToggle = document2.createElement("button");
+    sectionToggle.type = "button";
+    sectionToggle.className = "settings-pi-accounts__fold";
+    sectionToggle.setAttribute("aria-expanded", "true");
     const sectionTitle = document2.createElement("strong");
     sectionTitle.textContent = messages.sectionTitle;
     const sectionCount = document2.createElement("span");
-    sectionHeader.append(createRendererAgentIcon("pi", 16, document2), sectionTitle, sectionCount);
+    sectionCount.className = "settings-pi-accounts__count";
+    sectionToggle.append(
+      createRendererSettingsIcon("chevron-right", 14),
+      createRendererAgentIcon("pi", 16, document2),
+      sectionTitle,
+      sectionCount
+    );
+    const sectionHint = document2.createElement("span");
+    sectionHint.className = "settings-pi-accounts__hint";
+    sectionHint.textContent = messages.sectionHint;
+    const sectionImport = document2.createElement("button");
+    sectionImport.type = "button";
+    sectionImport.className = "settings-pi-accounts__import";
+    sectionImport.setAttribute("aria-haspopup", "dialog");
+    sectionImport.append(createRendererSettingsIcon("add", 14), messages.sectionImport);
+    sectionImport.addEventListener("click", () => {
+      const sources = compatibleSources();
+      const free = sources.find(
+        (source2) => !importedRecords().some((record2) => record2.source.id === source2.id)
+      );
+      const source = free ?? sources[0];
+      if (source) openDialog("add", { source, choose: true }, SECTION_IMPORT_KEY);
+    });
+    sectionHeader.append(sectionToggle, sectionHint, sectionImport);
     const card = document2.createElement("div");
     card.className = "settings-pi-accounts__card";
+    card.id = "settings-pi-accounts-card";
+    sectionToggle.setAttribute("aria-controls", card.id);
+    sectionToggle.addEventListener("click", () => {
+      sectionExpanded = !sectionExpanded;
+      card.hidden = !sectionExpanded;
+      sectionToggle.setAttribute("aria-expanded", String(sectionExpanded));
+    });
     const othersToggle = document2.createElement("button");
     othersToggle.type = "button";
     othersToggle.className = "settings-pi-accounts__toggle";
@@ -22850,15 +23341,15 @@ ${error51.stderrTail}`] : []
       row.className = "settings-pi-accounts__row";
       row.tabIndex = -1;
       row.dataset.importName = record2.name;
-      row.setAttribute("aria-label", record2.source.label);
+      row.setAttribute("aria-label", shown(record2.source.label));
       const agent = KNOWN_RENDERER_AGENTS.find((candidate) => candidate === record2.source.harnessId);
       const mark = createMark(agent);
       const identity = document2.createElement("div");
       identity.className = "settings-pi-accounts__identity";
       const label = document2.createElement("strong");
       label.className = "settings-account-email";
-      label.textContent = record2.source.label;
-      label.title = record2.source.label;
+      label.textContent = shown(record2.source.label);
+      label.title = label.textContent;
       label.translate = false;
       const meta3 = document2.createElement("div");
       meta3.className = "settings-account-metadata";
@@ -22888,7 +23379,7 @@ ${error51.stderrTail}`] : []
       reimport.type = "button";
       reimport.className = "settings-account-action";
       reimport.textContent = messages.rowReimport;
-      reimport.setAttribute("aria-label", `${messages.reimport}: ${record2.source.label}`);
+      reimport.setAttribute("aria-label", `${messages.reimport}: ${shown(record2.source.label)}`);
       reimport.disabled = busy || !source;
       reimport.title = messages.reimport;
       reimport.addEventListener("click", () => {
@@ -22898,7 +23389,7 @@ ${error51.stderrTail}`] : []
       remove.type = "button";
       remove.className = "settings-account-action settings-pi-accounts__remove";
       remove.textContent = messages.rowRemove;
-      remove.setAttribute("aria-label", `${messages.remove}: ${record2.source.label}`);
+      remove.setAttribute("aria-label", `${messages.remove}: ${shown(record2.source.label)}`);
       remove.disabled = busy;
       remove.addEventListener("click", () => openDialog("remove", { record: record2 }, `row:${record2.name}`));
       if (source) actions.append(reimport);
@@ -22914,14 +23405,14 @@ ${error51.stderrTail}`] : []
       const agent = login.vendor ? VENDOR_AGENTS[login.vendor] : void 0;
       row.setAttribute(
         "aria-label",
-        [login.label ?? login.provider, agent && RENDERER_AGENT_LABELS[agent]].filter(Boolean).join(" \xB7 ")
+        [shown(login.label ?? login.provider), agent && RENDERER_AGENT_LABELS[agent]].filter(Boolean).join(" \xB7 ")
       );
       const mark = createMark(agent);
       const identity = document2.createElement("div");
       identity.className = "settings-pi-accounts__identity";
       const title = document2.createElement("strong");
       title.className = "settings-account-email";
-      title.textContent = login.label ?? login.provider;
+      title.textContent = shown(login.label ?? login.provider);
       title.title = title.textContent;
       title.translate = false;
       const meta3 = document2.createElement("div");
@@ -22942,11 +23433,14 @@ ${error51.stderrTail}`] : []
       return row;
     };
     const renderSection = () => {
-      const target = snapshot.targets.find((candidate) => candidate.harnessId === TARGET_HARNESS_ID);
+      const target = piTarget();
       section.hidden = !target;
       const records = importedRecords();
       const others = target?.others ?? [];
       sectionCount.textContent = String(records.length + others.length);
+      card.hidden = !sectionExpanded;
+      sectionImport.hidden = compatibleSources().length === 0;
+      sectionImport.disabled = busy;
       rows.clear();
       if (records.length + others.length === 0) {
         const empty = document2.createElement("p");
@@ -23009,6 +23503,9 @@ ${error51.stderrTail}`] : []
       let state = initial;
       let mode = initialMode;
       let nameInput;
+      let nameEdited = false;
+      let sourceRadios = [];
+      let refreshPreview = () => void 0;
       const command = (text, onClick, variant = "secondary") => {
         const button2 = document2.createElement("button");
         button2.type = "button";
@@ -23032,9 +23529,50 @@ ${error51.stderrTail}`] : []
         paragraph.textContent = text;
         return paragraph;
       };
+      const sourcePicker = (choices) => {
+        const group = document2.createElement("fieldset");
+        group.className = "settings-credential-dialog__sources";
+        const legend = document2.createElement("legend");
+        legend.textContent = messages.source;
+        group.append(legend);
+        for (const choice of choices) {
+          const option = document2.createElement("label");
+          option.className = "settings-credential-dialog__source";
+          const radio = document2.createElement("input");
+          radio.type = "radio";
+          radio.name = "settings-credential-source";
+          radio.value = choice.id;
+          radio.checked = choice.id === state.source?.id;
+          sourceRadios.push(radio);
+          const copy = document2.createElement("span");
+          const label = document2.createElement("strong");
+          label.textContent = shown(choice.label);
+          label.translate = false;
+          const existing = importedRecords().find((record2) => record2.source.id === choice.id);
+          const agent = KNOWN_RENDERER_AGENTS.find((candidate) => candidate === choice.harnessId);
+          const detail = document2.createElement("span");
+          detail.textContent = [
+            agent && RENDERER_AGENT_LABELS[agent] || choice.harnessId,
+            existing ? messages.sourceImported.replace("{name}", existing.name) : messages.sourceCurrent
+          ].join(" \xB7 ");
+          copy.append(label, detail);
+          radio.addEventListener("change", () => {
+            if (!radio.checked) return;
+            state = { ...state, source: choice };
+            if (nameInput && !nameEdited) {
+              nameInput.value = defaultImportName(choice, importedRecords());
+            }
+            refreshPreview();
+          });
+          option.append(radio, copy);
+          group.append(option);
+        }
+        return group;
+      };
       const setBusy = (value) => {
         for (const child of controls.children) child.disabled = value;
         if (nameInput) nameInput.disabled = value;
+        for (const radio of sourceRadios) radio.disabled = value;
       };
       const submit = async (request, next) => {
         error51.textContent = "";
@@ -23062,6 +23600,7 @@ ${error51.stderrTail}`] : []
         mode = next;
         error51.textContent = "";
         nameInput = void 0;
+        sourceRadios = [];
         body.replaceChildren();
         controls.replaceChildren();
         const { source, record: record2 } = state;
@@ -23070,7 +23609,9 @@ ${error51.stderrTail}`] : []
           title.textContent = mode === "add" ? messages.add : messages.reimport;
           modal.setAttribute("aria-label", title.textContent);
           const active = source ?? record2?.source;
-          if (active) body.append(line(messages.source, active.label));
+          const choices = mode === "add" && state.choose ? compatibleSources() : [];
+          if (choices.length > 1) body.append(sourcePicker(choices));
+          else if (active) body.append(line(messages.source, shown(active.label)));
           const input = document2.createElement("input");
           input.type = "text";
           input.maxLength = 48;
@@ -23078,6 +23619,9 @@ ${error51.stderrTail}`] : []
           input.spellcheck = false;
           input.value = record2?.name ?? (source ? defaultImportName(source, importedRecords()) : "codex");
           input.readOnly = Boolean(record2);
+          input.addEventListener("input", () => {
+            nameEdited = true;
+          });
           nameInput = input;
           const label = document2.createElement("label");
           label.className = "settings-credential-dialog__field";
@@ -23089,6 +23633,7 @@ ${error51.stderrTail}`] : []
             preview.textContent = (mode === "reimport" ? messages.reimportPreview : messages.preview).replace("{name}", input.value);
           };
           input.addEventListener("input", update);
+          refreshPreview = update;
           update();
           body.append(label, preview, note(messages.warning));
           controls.append(
@@ -23096,7 +23641,8 @@ ${error51.stderrTail}`] : []
             command(
               messages.confirm,
               async () => {
-                if (!source) return;
+                const source2 = state.source;
+                if (!source2) return;
                 if (!credentialImportNameSchema.safeParse(input.value).success) {
                   error51.textContent = messages.invalidName;
                   input.focus();
@@ -23105,7 +23651,7 @@ ${error51.stderrTail}`] : []
                 await submit(
                   {
                     action: mode === "reimport" ? "reimport" : "import",
-                    sourceId: source.id,
+                    sourceId: source2.id,
                     name: record2?.name ?? input.value,
                     confirmed: true
                   },
@@ -23147,7 +23693,7 @@ ${error51.stderrTail}`] : []
       modal.addEventListener("close", () => {
         modal.remove();
         dialog = void 0;
-        const target = returnKey ? targetButtons.get(returnKey) ?? rows.get(returnKey.replace(/^row:/, "")) : void 0;
+        const target = returnKey ? returnKey === SECTION_IMPORT_KEY ? sectionImport : targetButtons.get(returnKey) ?? rows.get(returnKey.replace(/^row:/, "")) : void 0;
         (target?.isConnected ? target : section).focus();
       });
       show(initialMode);
@@ -23157,6 +23703,12 @@ ${error51.stderrTail}`] : []
     signal.addEventListener("abort", () => dialog?.remove(), { once: true });
     renderSection();
     return {
+      /** Mask the middle of email addresses in the section and dialogs (screen sharing). */
+      setHideEmails(value) {
+        if (hideEmails === value) return;
+        hideEmails = value;
+        renderSection();
+      },
       /** Dedicated "imported into Pi" section, rendered below the account table. */
       section,
       refresh: async () => {
@@ -23178,20 +23730,33 @@ ${error51.stderrTail}`] : []
         const key = `${harnessId}:${accountLabel}:import`;
         const button2 = document2.createElement("button");
         button2.type = "button";
-        button2.className = "settings-icon-button settings-account-harness-target";
+        button2.className = "settings-account-pi-import";
         button2.dataset.accountFocus = key;
         button2.disabled = busy;
-        if (record2) button2.dataset.state = "imported";
         const hint = record2 ? messages.importedHint.replace("{name}", record2.name) : messages.add;
         button2.title = hint;
         button2.setAttribute("aria-label", hint);
-        button2.setAttribute("aria-haspopup", "dialog");
-        button2.append(createRendererAgentIcon("pi", 16, document2));
+        button2.append(createRendererAgentIcon("pi", 12, document2));
+        if (record2) {
+          button2.dataset.state = "imported";
+          const name = document2.createElement("code");
+          name.textContent = `${record2.name}/\u2026`;
+          name.translate = false;
+          button2.append(name, createRendererSettingsIcon("check", 12));
+        } else {
+          button2.setAttribute("aria-haspopup", "dialog");
+          button2.append(messages.add);
+        }
         button2.addEventListener("click", () => {
           if (!record2) {
             openDialog("add", { source }, key);
             return;
           }
+          if (!sectionExpanded) {
+            sectionExpanded = true;
+            renderSection();
+            sectionToggle.setAttribute("aria-expanded", "true");
+          }
           const row = rows.get(record2.name);
           row?.scrollIntoView({ block: "nearest", behavior: "smooth" });
           row?.focus();
@@ -23572,37 +24137,35 @@ ${error51.stderrTail}`] : []
       return { cells: [cell], continuationCells: [] };
     }
     const { rows, additional } = splitUsageWindows(state.credits, messages, filter);
-    const onlyRow = rows.length === 1 ? rows[0] : void 0;
-    if (additional.length && onlyRow && !Object.keys(onlyRow.columns).length) rows.pop();
-    for (let index = 0; index < additional.length; index += 2) {
-      const first = additional[index];
-      const second = additional[index + 1];
-      rows.push({
-        columns: {
-          ...first ? { five_hour: first } : {},
-          ...second ? { seven_day: second } : {}
-        }
-      });
+    const windows = [
+      ...rows.flatMap(
+        (row) => ["five_hour", "seven_day"].flatMap(
+          (period) => row.columns[period] ? [row.columns[period]] : []
+        )
+      ),
+      ...additional
+    ];
+    const packed = [];
+    for (let index = 0; index < windows.length; index += 2) {
+      const pair = windows.slice(index, index + 2);
+      packed.push(
+        pair.map((window2) => {
+          const cell = document2.createElement("td");
+          cell.className = "settings-account-usage-cell";
+          if (pair.length === 1) cell.colSpan = 2;
+          cell.append(renderUsageWindow(document2, window2, messages, display));
+          return cell;
+        })
+      );
     }
-    const renderCells = (row) => ["five_hour", "seven_day"].map((period) => {
+    if (packed.length === 0) {
       const cell = document2.createElement("td");
-      cell.className = "settings-account-usage-cell";
-      const window2 = row.columns[period];
-      if (window2) cell.append(renderUsageWindow(document2, window2, messages, display));
-      else {
-        const missing = document2.createElement("div");
-        missing.className = "settings-account-usage__missing";
-        const dash = document2.createElement("span");
-        dash.textContent = "\u2014";
-        dash.setAttribute("aria-hidden", "true");
-        missing.append(dash);
-        cell.append(missing);
-      }
-      return cell;
-    });
-    const [firstRow = { columns: {} }, ...continuations] = rows;
-    const cells = renderCells(firstRow);
-    const continuationCells = continuations.map(renderCells);
+      cell.colSpan = 2;
+      cell.className = "settings-account-usage-cell settings-account-usage-cell--message";
+      cell.textContent = messages.accountCreditsEmpty;
+      packed.push([cell]);
+    }
+    const [cells = [], ...continuationCells] = packed;
     return { cells, continuationCells };
   }
   function renderAccountResetCredits(document2, credits, messages) {
@@ -23696,14 +24259,14 @@ ${error51.stderrTail}`] : []
     table.className = "settings-account-table";
     table.setAttribute("aria-label", messages.pageLabels.accounts);
     const columns = document2.createElement("colgroup");
-    for (const width of [32, 24, 24, 20]) {
+    for (const width of [36, 32, 32]) {
       const column = document2.createElement("col");
       column.style.width = `${width}%`;
       columns.append(column);
     }
     const head = document2.createElement("thead");
     const row = document2.createElement("tr");
-    const headers = Array.from({ length: 3 }, (_, index) => {
+    const headers = Array.from({ length: 2 }, (_, index) => {
       const cell = document2.createElement("th");
       cell.scope = index === 1 ? "colgroup" : "col";
       if (index === 1) cell.colSpan = 2;
@@ -23711,11 +24274,7 @@ ${error51.stderrTail}`] : []
       return cell;
     });
     const updateDisplay = (display) => {
-      const labels = [
-        messages.accountColumnAccount,
-        accountUsageColumnLabel(display, messages),
-        messages.credentialImports.column
-      ];
+      const labels = [messages.accountColumnAccount, accountUsageColumnLabel(display, messages)];
       headers.forEach((cell, index) => {
         cell.textContent = labels[index] ?? "";
       });
@@ -23767,11 +24326,13 @@ ${error51.stderrTail}`] : []
     person.append(input.mark, identity);
     return person;
   }
-  function createTargetCell(document2, action) {
-    const cell = document2.createElement("td");
-    cell.className = action ? "settings-account-management-cell" : "settings-account-management-cell settings-account-management-cell--empty";
-    if (action) cell.append(action);
-    return cell;
+  function appendAccountExtras(cell, items) {
+    const present = items.filter((item) => Boolean(item));
+    if (present.length === 0) return;
+    const extras = cell.ownerDocument.createElement("div");
+    extras.className = "settings-account-row__extras";
+    extras.append(...present);
+    cell.append(extras);
   }
   function renderAccountBalance(document2, messages, balance) {
     const cell = document2.createElement("td");
@@ -23796,8 +24357,8 @@ ${error51.stderrTail}`] : []
     row.dataset.accountId = account.accountId;
     row.dataset.accountFocus = `${account.accountId}:row`;
     row.tabIndex = -1;
-    const name = codexAccountDisplayName(account);
-    row.setAttribute("aria-label", name.full);
+    const name = accountDisplayText(codexAccountDisplayName(account).full, input.hideEmails === true);
+    row.setAttribute("aria-label", name);
     const personCell = document2.createElement("td");
     personCell.className = "settings-account-person-cell";
     const mark = document2.createElement("div");
@@ -23807,7 +24368,7 @@ ${error51.stderrTail}`] : []
     mark.append(createRendererAgentIcon("codex", 26, document2));
     personCell.append(
       createAccountPerson(document2, messages, {
-        name: name.full,
+        name,
         agent: "Codex",
         plan: accountPlanLabel(account.planType),
         highlighted: account.planType === "pro" || account.planType === "prolite",
@@ -23823,8 +24384,6 @@ ${error51.stderrTail}`] : []
       input.onRetry,
       account.planType === "pro" ? "weekly-only" : "all"
     );
-    const actionsCell = createTargetCell(document2, input.importAction);
-    if (input.importAction) row.className += " settings-account-row--targets";
     const continuationRows = usage.continuationCells.map((cells) => {
       const continuation = document2.createElement("tr");
       continuation.className = "settings-account-row settings-account-quota-continuation-row";
@@ -23835,18 +24394,19 @@ ${error51.stderrTail}`] : []
     if (continuationRows.length > 0) {
       personCell.rowSpan = continuationRows.length + 1;
       personCell.className += " settings-account-spanning-cell";
-      actionsCell.rowSpan = continuationRows.length + 1;
-      actionsCell.className += " settings-account-spanning-cell";
     }
-    row.append(personCell, ...usage.cells, actionsCell);
+    row.append(personCell, ...usage.cells);
     const reset = input.usage?.status === "ready" ? renderAccountResetCredits(document2, input.usage.credits, messages) : null;
-    if (!reset) return [row, ...continuationRows];
+    if (!reset) {
+      appendAccountExtras(personCell, [input.importAction]);
+      return [row, ...continuationRows];
+    }
     const detailsRow = document2.createElement("tr");
     detailsRow.className = "settings-account-details-row";
     detailsRow.id = `settings-account-reset-${++resetDetailsSequence}`;
     detailsRow.hidden = !input.resetExpanded;
     const detailsCell = document2.createElement("td");
-    detailsCell.colSpan = 4;
+    detailsCell.colSpan = 3;
     detailsCell.append(reset.details);
     detailsRow.append(detailsCell);
     reset.summary.dataset.accountFocus = `${account.accountId}:reset`;
@@ -23857,15 +24417,18 @@ ${error51.stderrTail}`] : []
       reset.summary.setAttribute("aria-expanded", String(!detailsRow.hidden));
       input.onResetExpanded(!detailsRow.hidden);
     });
-    personCell.append(reset.summary);
+    appendAccountExtras(personCell, [reset.summary, input.importAction]);
     return [row, ...continuationRows, detailsRow];
   }
-  function renderHarnessAccountRows(document2, account, messages, display, importAction) {
+  function renderHarnessAccountRows(document2, account, messages, display, importAction, hideEmails = false) {
     const row = document2.createElement("tr");
     row.className = "settings-account-row";
     row.dataset.harnessId = account.harnessId;
     row.tabIndex = -1;
-    const name = account.email ?? account.label ?? account.harnessName;
+    const name = accountDisplayText(
+      account.email ?? account.label ?? account.harnessName,
+      hideEmails
+    );
     row.setAttribute("aria-label", name);
     const personCell = document2.createElement("td");
     personCell.className = "settings-account-person-cell";
@@ -23890,9 +24453,8 @@ ${error51.stderrTail}`] : []
       () => void 0,
       account.harnessId === "grok" ? "weekly-only" : "all"
     ) : renderAccountBalance(document2, messages, account.balance);
-    const managementCell = createTargetCell(document2, importAction);
-    if (importAction) row.className += " settings-account-row--targets";
     personCell.title = messages.accountNativeManagementHint.replace("{harness}", account.harnessName);
+    appendAccountExtras(personCell, [importAction]);
     const continuationRows = usage.continuationCells.map((cells) => {
       const continuation = document2.createElement("tr");
       continuation.className = "settings-account-row settings-account-quota-continuation-row";
@@ -23903,10 +24465,8 @@ ${error51.stderrTail}`] : []
     if (continuationRows.length > 0) {
       personCell.rowSpan = continuationRows.length + 1;
       personCell.className += " settings-account-spanning-cell";
-      managementCell.rowSpan = continuationRows.length + 1;
-      managementCell.className += " settings-account-spanning-cell";
     }
-    row.append(personCell, ...usage.cells, managementCell);
+    row.append(personCell, ...usage.cells);
     return [row, ...continuationRows];
   }
 
@@ -24074,6 +24634,26 @@ ${error51.stderrTail}`] : []
         refreshUsage.title = messages.accountCreditsRefresh;
         refreshUsage.setAttribute("aria-label", messages.accountCreditsRefresh);
         refreshUsage.append(createRendererSettingsIcon("refresh", 16));
+        let hideEmails = false;
+        const privacyToggle = document2.createElement("button");
+        privacyToggle.type = "button";
+        privacyToggle.className = "settings-icon-button settings-account-privacy-toggle";
+        const updatePrivacyToggle = () => {
+          const label = hideEmails ? messages.accountEmailsShow : messages.accountEmailsHide;
+          privacyToggle.title = label;
+          privacyToggle.setAttribute("aria-label", label);
+          privacyToggle.setAttribute("aria-pressed", String(hideEmails));
+          privacyToggle.replaceChildren(
+            createRendererSettingsIcon(hideEmails ? "eye-off" : "eye", 16)
+          );
+        };
+        updatePrivacyToggle();
+        privacyToggle.addEventListener("click", () => {
+          hideEmails = !hideEmails;
+          updatePrivacyToggle();
+          credentialImports.setHideEmails(hideEmails);
+          render();
+        });
         refreshUsage.addEventListener("click", () => {
           usageByAccountId.clear();
           loadUsage(accounts);
@@ -24081,7 +24661,7 @@ ${error51.stderrTail}`] : []
           void credentialImports.refresh();
         });
         search.addEventListener("input", () => render());
-        toolbar.append(connected, searchWrapper, displayControls, refreshUsage);
+        toolbar.append(connected, privacyToggle, searchWrapper, displayControls, refreshUsage);
         const list = document2.createElement("div");
         list.className = "settings-account-list";
         const { table, body, updateDisplay } = createAccountsTable(document2, messages);
@@ -24126,7 +24706,7 @@ ${error51.stderrTail}`] : []
           if (visibleAccounts.length + visibleHarnessAccounts.length === 0) {
             const emptyRow = document2.createElement("tr");
             const emptyCell = document2.createElement("td");
-            emptyCell.colSpan = 4;
+            emptyCell.colSpan = 3;
             emptyCell.className = "settings-account-empty";
             emptyCell.textContent = query ? messages.accountNoMatches : messages.accountEmpty;
             emptyRow.append(emptyCell);
@@ -24136,10 +24716,6 @@ ${error51.stderrTail}`] : []
             body.append(
               ...renderAccountRows(document2, account, messages, {
                 current: accountPhase === "ready" && account.accountId === currentAccountId,
-                importAction: credentialImports.button(
-                  "codex",
-                  codexAccountDisplayName(account).full
-                ),
                 usage: usageByAccountId.get(account.accountId),
                 display: usageDisplay,
                 resetExpanded: expandedResetAccounts.has(account.accountId),
@@ -24150,7 +24726,12 @@ ${error51.stderrTail}`] : []
                 onResetExpanded: (open) => {
                   if (open) expandedResetAccounts.add(account.accountId);
                   else expandedResetAccounts.delete(account.accountId);
-                }
+                },
+                importAction: credentialImports.button(
+                  "codex",
+                  codexAccountDisplayName(account).full
+                ),
+                hideEmails
               })
             );
           }
@@ -24164,7 +24745,8 @@ ${error51.stderrTail}`] : []
                 credentialImports.button(
                   account.harnessId,
                   account.email ?? account.label ?? account.harnessName
-                )
+                ),
+                hideEmails
               )
             );
           }
@@ -24271,8 +24853,8 @@ ${error51.stderrTail}`] : []
         } catch {
         }
         const harnessAccounts = createHarnessAccounts(context.signal, getClient, render);
-        void credentialImports.refresh();
         void harnessAccounts.refresh();
+        void credentialImports.refresh();
         load();
         return () => {
           stopCountdowns();
@@ -24834,7 +25416,7 @@ ${error51.stderrTail}`] : []
   }
   function createDefaultRendererSettingsPages(messages = DEFAULT_RENDERER_SETTINGS_MESSAGES, getUpdateClient = () => null, getDiagnostics = () => null, getAccountClient = () => null, getSessionImportClient = () => null, openImportedThread = () => Promise.reject(new Error("Imported Thread navigation is unavailable")), getLoadedSessionsClient = () => null, getRemoteConnections = () => null) {
     return Object.freeze([
-      createConnectionsSettingsPage(messages, getDiagnostics),
+      createConnectionsSettingsPage(messages, getDiagnostics, void 0, getRemoteConnections),
       createRemoteConnectionsPage(messages, getRemoteConnections),
       createAccountsSettingsPage(messages, getAccountClient),
       createSessionImportSettingsPage(
@@ -27338,6 +27920,23 @@ ${error51.stderrTail}`] : []
   outline-offset: -1px;
 }
 
+.settings-remote-dialog__package-option {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  cursor: pointer;
+}
+
+.settings-remote-dialog .settings-remote-dialog__package-option input {
+  flex: none;
+  width: 16px;
+  height: 16px;
+  min-height: 16px;
+  margin: 0;
+  padding: 0;
+  accent-color: var(--settings-focus);
+}
+
 @keyframes settings-remote-spin {
   to {
     transform: rotate(360deg);
@@ -27441,13 +28040,16 @@ ${error51.stderrTail}`] : []
       (method, params) => manager.sendRequest(method, params)
     );
     const updateClient = consoleUpdateClient();
+    const remoteConnections = createConsoleRemoteConnections(manager);
     const settingsPages = createDefaultRendererSettingsPages(
       settingsMessages,
       () => updateClient,
       () => diagnostics,
       () => modelClient,
       () => sessionImportClient,
-      null
+      null,
+      () => null,
+      () => remoteConnections
     );
     const navigate = (pageId) => {
       window.location.hash = pageId;
@@ -27470,6 +28072,7 @@ ${error51.stderrTail}`] : []
               () => state.overview?.inspect?.runtime.running ?? false
             )
           ),
+          hostPage(required2(settingsPages, "remote-connections"), messages, state),
           hostPage(required2(settingsPages, "accounts"), messages, state),
           hostPage(required2(settingsPages, "session-import"), messages, state),
           required2(settingsPages, "updates")
@@ -27640,6 +28243,8 @@ lucide/dist/esm/icons/circle-off.mjs:
 lucide/dist/esm/icons/copy.mjs:
 lucide/dist/esm/icons/download.mjs:
 lucide/dist/esm/icons/external-link.mjs:
+lucide/dist/esm/icons/eye.mjs:
+lucide/dist/esm/icons/eye-off.mjs:
 lucide/dist/esm/icons/ellipsis.mjs:
 lucide/dist/esm/icons/folder-input.mjs:
 lucide/dist/esm/icons/grip-vertical.mjs: