@hienlh/ppm 0.23.14 → 0.23.15

package/CHANGELOG.md

@@ -1,6 +1,45 @@
 # Changelog
 
-## [Unreleased]
+## [0.23.15] - 2026-10-22
+
+### Added
+
+- **The AI can work on your saved databases without ever seeing their passwords.** Every connection with **Available to the AI chat** on (the default; it is in each connection's settings) is offered to Claude and Codex through three tools PPM serves itself, so the AI never holds a password, URL or key.
+  - **`db_query`** reads. Its SQL runs in a read-only transaction on every connection, readonly or not, so it cannot change anything, and the rows reach the AI marked as data, not instructions.
+  - **`open_query`** opens a Query tab beside the chat holding a script the AI wrote, on the right connection and database. Nothing runs until you press Run.
+  - **`db_execute`** changes data only once you approve it. A card in the chat shows the connection, the AI's reason and the exact SQL, and **Run once** runs it after you type PPM's password; you are notified as for any approval. It runs in one transaction: a statement that fails, or a number of rows changed other than the one the AI said to expect, rolls all of it back. MySQL and MariaDB commit a CREATE, ALTER, DROP or TRUNCATE by itself, with everything before it, so there the card says which statements cannot be rolled back before you approve, and the result says which were kept. A readonly connection can be changed this way too, for that one script. Declining, sending a message, pressing Stop or not answering within 10 minutes runs nothing.
+  - **Run with write access (once)**: a Query tab on a readonly connection whose script was refused as a write now offers to run it once with write access, after PPM's password — which is how a script the AI opened for you runs on a readonly connection.
+  - Everything the AI ran is in the query audit log as the AI's, and in the Query tab's History with the agent badge.
+  - Inside an AI chat, `ppm db tables`, `schema`, `data`, `query` and `run` refuse and name the tool to use instead, so the AI cannot step around a switch in **Settings → Tools** or an approval through its shell; with the tool switched off, the chat is told the database is closed to it. At your own terminal nothing changes.
+  - PPM's password is the one you sign in with. It confirms that you, at the screen, want the change; it is not a secret from an agent running as your user, which could read PPM's own files.
+
+- **The AI can show you the app it is running, read your terminals, and type a command for you to run.** Three more tools in **Settings → Tools**, on by default, for Claude and Codex:
+  - **`open_url`** (Show running apps) opens a server running on PPM's machine, such as the dev server the AI just started, in a tab beside the chat. From another device it goes through the Tailscale forward you already have for that port, or a private one PPM starts, which only your own Tailscale devices can open and which stays in Port Forwarding until you stop it. PPM never makes a public link for it, starts private forwards for four ports of a chat at most (forward any more yourself in Port Forwarding), and opens only that machine's own servers, never other sites.
+  - **`read_terminal`** (Read terminals) reads what PPM's terminals in the chat's project printed, as the screen shows it, so you need not paste an error into the chat. What it reads reaches the AI marked as data, not instructions.
+  - **`run_in_terminal`** (Type commands) opens a terminal in the dock with a command typed at the prompt, for a step that needs your password or your eyes, such as `sudo apt install`. Nothing runs until you press Enter, and the command must be one line you can read in full. When the new shell starts by asking a question of its own, such as an update's `[Y/n]`, nothing is typed and the AI asks you to answer it first. Once you have run it, the AI can read what it printed.
+  - Each call is a card in the chat, such as "Open app localhost:5173/" or "Type in terminal sudo apt install ffmpeg".
+
+- **Settings → Tools turns each of PPM's own AI tools on or off.** One switch per tool — Open files, Show pages, Show running apps, Read terminals, Type commands, Read databases, Open Query tabs and Change databases — for Claude and Codex alike, in place of the single "Let the AI open tabs in PPM" switch, whose choice Open files and Show pages keep until you switch either. Every other tool starts on. A new chat gets only the tools that are on; turning one off also stops it in chats already open, and with Change databases off the AI is told to hand you the script in a Query tab instead.
+
+- **Share a design for review.** Share for review makes a link anyone can open without a PPM account; reviewers pin comments and reply to each other, and their threads land on your canvas to answer or send to the AI. Each link has its own expiry, revoke and "Update to latest", and you can edit the message before it goes into the chat. (An older build drops comment replies the next time it saves.)
+- **Notifications for reviewer comments**, at most once a minute per link ("Reviewer comments" in Settings → Notifications).
+
+### Fixed
+
+- **Security: HTML in chat, Markdown, Mermaid diagrams or `.docx` previews could run script in PPM's page and read your sign-in token.** It now goes through an allow-list; ordinary formatting still renders.
+- **Security: anyone who could reach a development server could stop it** through `GET /api/debug/crash`; it now needs sign-in and `PPM_DEBUG_CRASH_ROUTE=1`.
+- **Long-pressing an element on a design canvas sometimes closed the comment form as it opened.**
+- **A chat that had changed a few thousand files slowed all of PPM down while its changes bar was worked out.** The bar asked for its list again every time the transcript moved, and every answer re-read and re-diffed each file the chat had changed: two to three minutes on a session with 1,923 files, a new ask about every minute, and every other chat, Source Control and the session list waiting behind it. The list is now worked out only once you open the changes bar, its Review button or a turn's pill; until then the bar says how many files changed. From then on PPM keeps it and sends the row of each file the agent has just changed, so the bar, the pill under each answer and an open Review tab stay current without asking again, and the bar's refresh button works out again only the files that moved, in milliseconds. The first list of such a chat still takes a while, without holding up anything else. Past 500 changed files, the bar lists the 500 changed last instead of the first.
+
+- **Inline blame showed nothing in a project folder that holds several repositories.** It asked git in the folder itself unless the right repository was picked in Source Control; it now blames each file in the repository that holds it. A diff tab opened from Git Graph on such a file also no longer says "No content changes" or "not a git repository".
+
+- **Scrolling up past a compaction showed "File not found" in a chat whose session had changed folder.** Claude Code names the transcript in a compaction summary after the folder the session was started or resumed in, so a session resumed in a subfolder (a bot reopening it inside a checkout, say) pointed at a project folder that was never created. When the file a summary names does not exist, PPM now looks for that session's transcript in the folder of the chat's own project instead, and in no other project's.
+
+- **Remote Desktop on Wayland showed a solid green or black picture on a host without a GPU encoder.** It happened on a fresh Ubuntu 24.04 with GNOME (#48). The software encoder splits each frame into slices, and PPM sent every slice to the browser as a frame of its own, which no browser can decode. Slices of one frame now travel together. The same fix repairs the Android viewer on a host without a hardware encoder, and makes Remote Desktop on an X11 host without one respond about a second sooner: it had avoided the split by encoding many frames at once, which held each frame back by about a second on a 24-thread machine.
+
+- **Remote Desktop on Wayland no longer needs gst-plugins-bad, and notices GStreamer packages installed while PPM runs.** A host with the software encoder but not that package passed the checklist and then lost every session at start to `no element "h264parse"`; PPM no longer uses that element. And PPM looked for GStreamer elements once per run, so a GPU encoder installed afterwards was ignored until PPM restarted, although the checklist says it re-checks automatically. It now looks again until nothing is missing, and at the start of every session. Once the host is ready, the Remote Desktop window also stops re-checking it; it used to re-check every two seconds for as long as a session lasted.
+
+- **Login with Claude could refuse the code you pasted, and then refuse every retry.** The code Claude shows ends in `#` and the id of the sign-in link it came from. PPM dropped that part and paired the code with the newest link the dialog had opened, so a code from an earlier tab (a second Login with Claude, or a tab left open) failed with "Code challenge failed", and the link it had used was then spent, so every Connect after that said "Invalid or expired OAuth state". The code is now matched to its own link, a refused code no longer spends the link, and a link PPM no longer holds (older than 10 minutes, or from before a restart) takes the dialog back to Login with Claude with a message saying so. Signing in again from an account's card no longer reports a plain success when Claude signs in a different account: that account is kept, and the message names the one that is still signed out.
 
 ## [0.23.14] - 2026-10-08
 

package/CLAUDE.md

@@ -127,7 +127,8 @@ Related: `configService.save()`/`set()` throw when `load()` has not run, because
 - **Remote desktop text injection on macOS**: `CGEventKeyboardSetUnicodeString` still carries a keycode, and IMEs that hook by key (OpenKey/EVKey) re-read keycode 0 as a literal "a" (`"日本"` → `"â"`); function/unassigned keycodes produce no text at all. The carrier is Space (`TEXT_CARRIER_KEYCODE`). Text is still subject to the host's active IME (Telex rewrote "World" → "ửold") on every OS.
 - **Remote desktop on Linux is chosen per *session*, not per platform, and Wayland must win the tie**: `process.platform === "linux"` says nothing about how to capture or inject. A Wayland session almost always also runs XWayland, which sets `DISPLAY` and answers `x11grab` **successfully** — with a view of XWayland clients only, i.e. a black or half-empty screen rather than an error. So `remote-desktop-linux-session.ts` checks Wayland *before* X11, and `XDG_SESSION_TYPE` outranks both. It also has to *probe* rather than read the env: a PPM started by its systemd user unit has no `DISPLAY`/`XAUTHORITY` at all while a full desktop runs two feet away, so the fallbacks are the `X<N>` socket in `/tmp/.X11-unix`, the `wayland-N` socket in `$XDG_RUNTIME_DIR`, and for auth the `xauth_*` file Xorg was launched with (`-auth /run/user/1000/xauth_XXXXXX`) before `~/.Xauthority`. ffmpeg is then spawned with that env merged over `process.env`. Wayland capture goes through a **different backend entirely** (`remote-desktop-capture-wayland.ts`) rather than another ffmpeg grabber — see the portal bullet below.
 - **Key injection on Linux goes through evdev codes, never keysyms**: `XKeysymToKeycode(XK_a)` answers "which key currently *produces* an a", which on an AZERTY host is the physical Q key — so a keysym table silently transposes the whole keyboard for anyone not on a US layout. `remote-desktop-evdev-key-map.ts` maps `KeyboardEvent.code` → evdev code, which names the physical switch just as `code` does; X11 keycode = evdev + 8 (`X11_KEYCODE_OFFSET`), verified against a live server for all 50 spot-checked keys. The same table feeds uinput, which wants the raw code. X11 also has no "type this string" call: `text()` uses the real keymap when the character is in it (all ASCII, no round trip) and otherwise borrows a keycode with no keysyms, binds it to `0x01000000|codepoint`, and needs a real ~12ms delay after the remap — the server applies it at once but the focused *client* only learns from its `MappingNotify`, so a key pressed sooner is read with the old mapping.
-- **Wayland capture is a portal session that must outlive the capture, and the three things that make it work were each measured**: a compositor shares the screen only through `org.freedesktop.portal.ScreenCast`, which is D-Bus, which Bun does not speak — so `remote-desktop-portal.ts` is `bun:ffi` against `libdbus-1.so.3` (present on any host with a session bus). Three findings turn this from impossible to routine. **`OpenPipeWireRemote` is never called**: the documented flow ends by receiving a PipeWire *file descriptor*, which no shell-out (`busctl`, `gdbus`) can hand to a separate process — and it turns out not to be needed, because the node lives in the user's own PipeWire daemon, so a bare `pipewiresrc path=<node>` reaches it through `$XDG_RUNTIME_DIR/pipewire-0` (measured: negotiated `BGRA 1920x1080` with no fd in the pipeline). **The D-Bus connection owns the session** — the node dies with it, so the handle is held for the capture's whole life and `dbus_bus_get_private` is used rather than the shared connection, which is refcounted process-wide. And **`persist_mode: 2` + a stored `restore_token`** (under `getPpmDir()`, 0600) is what stops a consent dialog appearing on the *host's* screen every session, which on a remote desktop is a prompt only someone sitting at the machine could answer; the first session still asks. ffmpeg is not the capture tool here at all: reading PipeWire needs `--enable-libpipewire`, which distributions do not do (Arch's own `ffmpeg 2:9.0.1-4.1` does not), so GStreamer does it — exactly as RustDesk does (`Depends On: gst-plugins-base gst-plugin-pipewire` + `libdbus-1.so.3` linked in; it is Rust, not magic). Four traps in the pipeline, each silent. **`videorate max-rate=30` does not cap** — measured 59 fps through it, and 133 fps at `max-rate=60`; only a capsfilter `video/x-raw,framerate=30/1` caps. That same capsfilter is also **what makes an idle desktop watchable**: a portal stream is damage-driven and a still screen pushed **14 frames in 60 seconds**, so a viewer joining a quiet host would see nothing at all — `videorate` duplicates the last frame and held **29.6 fps on a completely static screen**, which keeps keyframes flowing so a late joiner syncs within one GOP. **`vapostproc` + `video/x-raw(memory:VAMemory)` must pair with `vah264enc`** and not with `x264enc`, or every frame is downloaded back out of VA memory; the GPU path cost **14.9% of a core at 1080p30 against 52% for software conversion uncapped**. And the **portal stream dies under consumer churn** — it wants one long-lived `pipewiresrc`, so anything that reconnects per quality change must re-run the handshake rather than reattach. Measured end to end through `startCapture`: first access unit at **430 ms**, 28.8 fps, 3.2 Mbit/s, SPS parsed from GStreamer's bytes by the same `AccessUnitAssembler` ffmpeg's output feeds. `listDisplays()` still answers `[]` on Wayland and that is correct — the portal's own dialog chooses which output is shared, so PPM neither enumerates nor picks.
+- **Wayland capture is a portal session that must outlive the capture, and the three things that make it work were each measured**: a compositor shares the screen only through `org.freedesktop.portal.ScreenCast`, which is D-Bus, which Bun does not speak — so `remote-desktop-portal.ts` is `bun:ffi` against `libdbus-1.so.3` (present on any host with a session bus). Three findings turn this from impossible to routine. **`OpenPipeWireRemote` is never called**: the documented flow ends by receiving a PipeWire *file descriptor*, which no shell-out (`busctl`, `gdbus`) can hand to a separate process — and it turns out not to be needed, because the node lives in the user's own PipeWire daemon, so a bare `pipewiresrc path=<node>` reaches it through `$XDG_RUNTIME_DIR/pipewire-0` (measured: negotiated `BGRA 1920x1080` with no fd in the pipeline). **The D-Bus connection owns the session** — the node dies with it, so the handle is held for the capture's whole life and `dbus_bus_get_private` is used rather than the shared connection, which is refcounted process-wide. And **`persist_mode: 2` + a stored `restore_token`** (under `getPpmDir()`, 0600) is what stops a consent dialog appearing on the *host's* screen every session, which on a remote desktop is a prompt only someone sitting at the machine could answer; the first session still asks. ffmpeg is not the capture tool here at all: reading PipeWire needs `--enable-libpipewire`, which distributions do not do (Arch's own `ffmpeg 2:9.0.1-4.1` does not), so GStreamer does it — exactly as RustDesk does (`Depends On: gst-plugins-base gst-plugin-pipewire` + `libdbus-1.so.3` linked in; it is Rust, not magic). Four traps in the pipeline, each silent. **`videorate max-rate=30` does not cap** — measured 59 fps through it, and 133 fps at `max-rate=60`; only a capsfilter `video/x-raw,framerate=30/1` caps. That same capsfilter is also **what makes an idle desktop watchable**: a portal stream is damage-driven and a still screen pushed **14 frames in 60 seconds**, so a viewer joining a quiet host would see nothing at all — `videorate` duplicates the last frame and held **29.6 fps on a completely static screen**, which keeps keyframes flowing so a late joiner syncs within one GOP. **`vapostproc` + `video/x-raw(memory:VAMemory)` must pair with `vah264enc`** and not with `x264enc`, or every frame is downloaded back out of VA memory; the GPU path cost **14.9% of a core at 1080p30 against 52% for software conversion uncapped**. And the **portal stream dies under consumer churn** — it wants one long-lived `pipewiresrc`, so anything that reconnects per quality change must re-run the handshake rather than reattach. Measured end to end through `startCapture` on the `vah264enc` path only (the `x264enc` fallback was not measured; see the slices entry below): first access unit at **430 ms**, 28.8 fps, 3.2 Mbit/s, SPS parsed from GStreamer's bytes by the same `AccessUnitAssembler` ffmpeg's output feeds. `listDisplays()` still answers `[]` on Wayland and that is correct — the portal's own dialog chooses which output is shared, so PPM neither enumerates nor picks.
+- **An H.264 frame can arrive as many slices, so an access unit ends where the next *picture* begins, not the next slice**: x264's `tune=zerolatency` threads within a frame, one slice per thread — measured ~17 per 1080p frame on a 24-thread host, ~24 per portrait frame of the Android viewer. `AccessUnitAssembler` used to cut at every slice, so each reached `VideoDecoder` as a frame of its own: Chrome decoded none ("Decoding error.", a black canvas) and an Ubuntu 24.04 GNOME host showed solid green (#48). Three paths had it: the Wayland `x264enc` fallback, the Android viewer's libx264 fallback, and X11's libx264, which had dodged it with `sliced-threads=0` at a price nobody measured — x264 then threads *across* frames and holds one per thread, ~1.1 s later per frame than single-threaded on that host (GStreamer's `sliced-threads=false`: 954 ms against 8 ms). `startsPicture` reads `first_mb_in_slice`, the slice header's first Exp-Golomb field, where a leading 1 bit means 0. Hand-made NAL fixtures cannot catch this, because they encode the assembler's own assumption; `access-unit-assembler-real-encoders.test.ts` asks the real encoders. And the colour of a failed decode belongs to the viewer's decoder, not to the cause: the green was first blamed on DMA-BUF, which PPM's `video/x-raw` filter already keeps out (pipewiresrc 1.0 offers a modifier only for `memory:DMABuf` caps, and without one mutter 46 sends MemFd).
 
 - **Xlib's default I/O error handler calls `exit()` on the PPM server**: a logout, a GPU reset or `systemctl restart sddm` makes libX11 print `XIO: fatal IO error` and terminate the *calling process* — every project, terminal and chat session gone because someone logged out of the desktop. `remote-desktop-x11.ts` replaces all three handlers (`XSetErrorHandler`, `XSetIOErrorHandler`, and libX11 ≥ 1.7's `XSetIOErrorExitHandler`, which cancels the exit that happens even when the first one returns) and holds the `JSCallback`s in module scope — a GC'd callback leaves Xlib calling a freed trampoline, i.e. a segfault instead of the crash it was installed to prevent. A connection that took an I/O error has no safe call left on it, not even `XCloseDisplay`, so it is dropped un-closed and the next caller reopens.
 - **`xrandr` the binary and `libXrandr` the library are different packages**: this dev host has `libXrandr.so.2` and no `xrandr`, so anything that shells out to enumerate monitors reports "no displays" on a working desktop. `remote-desktop-displays.ts` reads `XRRGetMonitors` over FFI (`sizeof(XRRMonitorInfo)` = 56 on x86-64: name Atom at 0, primary at 8, x/y/w/h at 20/24/28/32) and falls back to one whole-root-window entry when the library is absent. X11 puts every monitor in one root coordinate space, so a per-monitor capture is a crop — `-video_size WxH -i :0.0+X,Y` — and `-i :0.0` alone grabs the union of all of them.
@@ -192,6 +193,11 @@ Related: `configService.save()`/`set()` throw when `load()` has not run, because
 - **Design exports are octet-stream Blobs, and the view tabs are real links**: a `blob:` URL has PPM's origin, and a browser that ignores `download` (iOS Safari) would open an HTML one and run the design beside the token in `localStorage`. Print and "Open in new tab" are `<a target=_blank rel="noopener noreferrer">` to tokens minted when the menu opens, because a `noopener` `window.open` cannot report a blocked popup. `allow-modals` is reachable only through a print-purpose token; the CDN hosts the design CSP allows (jsdelivr, unpkg) run any npm or GitHub code, which is accepted.
 - **`tabSessionId()` is the only way to ask a tab for its session**: design tabs hold chat sessions too, so `type === "chat" && metadata.sessionId` makes a design session look unopened, and reopening it starts a plain chat outside design mode (`src/web/lib/tab-session-id.ts`).
 - **Hono's global `cors()` overwrites the `Access-Control-Allow-Origin` a route sets**: headers set before the handler are copied over the handler's response, so `design-preview.ts` re-asserts `null` in a middleware after `next()`, and its unit test mounts `cors()` like the real server. The same re-wrap (`new Response(res.body, res)`) makes Bun lose a `BunFile.slice()` body: behind `cors()` a `rangeFileResponse` 206 for `bytes=2-5` sends `Content-Length: 8` and bytes 2 to EOF. That one is still open; route unit tests mount without `cors()`, which is why none caught it.
+- **A reviewer's files never go through the canvas's `systems/<id>/**` alias**: for the `default` app that alias is `designs/` itself, i.e. every other design and the live copy of the shared one. A share link serves its pinned snapshot plus `design-guest-alias.ts`'s allow-list (`tokens.css`, and the snapshot's own app's `tokens.css` + `kit/**`, live), with the kit contained in its own folder so a `kit` that links elsewhere under `designs/` is refused.
+- **`/s` is mounted before `cors()` and ends in a catch-all**: behind `cors()` a reviewer response answers `ACAO: *` and its range bodies hit the re-wrap above; without the catch-all an unknown `/s` path falls to `staticRoutes` and gets the app shell and its service worker. `tests/integration/api/design-share-guest-mount.test.ts` runs against the real `app` and fails when the mount moves. The reviewer page shares PPM's origin, `localStorage` and token included, so it renders reviewer text as text only.
+- **Share codes are derived, never stored**: HMAC of link id + code version under `<ppm dir>/design-share.key`, with only the code's hash in the database, so a copied `ppm.db` or backup opens no link and the owner can still copy one again. `resolveShareCode` also re-derives the code and compares in constant time, so a link waiting for a new code does not open for its old one. Deleting the key retires every code without a restart.
+- **Behind the supervisor every LAN and Tailscale reviewer is one loopback address**: the share routes' client key is `"local"` for all of them (`CF-Connecting-IP` is believed only from loopback with the tunnel's `Host`), so write spacing is keyed by client *and* reviewer key, or a reply sent right after a colleague's comment is refused; the per-link cap bounds a sender that invents keys.
+- **`rehype-raw` without a sanitiser is script on PPM's origin**: the app shell has no CSP and keeps the token in `localStorage`, so an `<iframe srcdoc>` in an AI reply or a Markdown file could read it. `markdown-sanitize.ts` runs right after `rehype-raw` and before KaTeX, and leaves URLs to `markdownUrlTransform` (a scheme allow-list would delete `README.md:5` and `C:\x.png`); it prefixes ids, so `#fragment` links get the same prefix and remark-rehype's own footnote prefix is off. Two more renderers had the same hole: Mermaid's `securityLevel: "loose"` keeps `click … href "javascript:…"` live in the SVG (now `strict`), and mammoth does no sanitising and passes `javascript:` hyperlinks through, so `docx-html-sanitize.ts` checks schemes itself. A `<task-notification>` result renders with `rawHtml={false}`.
 - **A gem installed into PPM's own folder cannot find itself, and a release zip needs a tool Bun does not have**: `gem install --install-dir <dir>` writes a binstub that asks RubyGems for its gem, and `<dir>` is on no gem path — measured, it exits with `Gem::GemNotFoundException` unless spawned with `GEM_PATH` naming `<dir>` (`installedServerEnv`, threaded `resolveCommand` → `LspSession.start`). Solargraph's dependencies (prism, rbs, jaro_winkler) compile C, so a host with no compiler fails with "Failed to build gem native extension" and a message that ends on a log path; `lsp-install.ts` says what is missing instead and deletes the half-install gem leaves "for inspection" (a first install only — a working one being updated keeps its folder). For downloads: `Bun.Archive` answers "Unrecognized archive format" for a zip and GNU tar cannot read one either, so a zip off Windows needs `unzip` or `bsdtar` on PATH (Windows' own `tar.exe` is bsdtar), and a host with neither has no button.
 - **The dev bundle's terminal connects straight to `:8081`, whatever server the page came from**: `use-terminal.ts` bypasses Vite's WebSocket proxy in dev, so under the html-preview harness (random API port) every terminal sits on "Reconnecting…" — and if a dev PPM is up on 8081, an e2e's terminal opens a shell *in that instance* and types into it. Check `ss -ltn` for 8081 first; to test a live terminal, put the scratch API on 8081 itself. React's `StrictMode` also double-mounts it in dev, so each terminal spawns two shells and a handed-over command is typed into both, showing twice in one xterm — dev only; a production build mounts once.
 - **A leading BOM makes parse5 drop the locations of `<html>`, `<head>` and `<body>`**: it is read as body text, so those explicit start tags lose `sourceCodeLocation`. Strip it first and address everything in the BOM-less text (`decodeDesignText`); parse5 offsets are UTF-16 code units of exactly the string parsed, as `String#slice` counts them, and `startTag.attrs` is keyed by the lowercased source name.
@@ -231,6 +237,13 @@ Related: `configService.save()`/`set()` throw when `load()` has not run, because
 - **A forwarded page that refuses framing is let into PPM's tab by the hop, never by stripping the header**: the web-preview tab is an iframe on PPM's origin, so Rails' default `X-Frame-Options: SAMEORIGIN`, Django's `DENY` or any CSP `frame-ancestors` rendered a blocked frame. Deleting those headers would let every site frame the dev app, which matters for a public Cloudflare forward. `frame-ancestors.ts` translates instead: SAMEORIGIN becomes `frame-ancestors 'self' <PPM>`, DENY becomes `frame-ancestors <PPM>`, and an existing `frame-ancestors` gains PPM's origins (`'none'` dropped, since it cannot stand beside a source). `X-Frame-Options` cannot name an origin (`ALLOW-FROM` is ignored everywhere), and an enforced `frame-ancestors` makes browsers skip it. PPM's origin has to come from the browser: the server cannot know every name it is reached by (LAN address, tunnel, reverse proxy). So the tab POSTs `location.origin` to `/api/tunnels/frame-ancestors` before its frame loads and again on Reload; the list is in memory like the hops, so a restart forgets it. CSP has no IPv6 literal, so a PPM opened at `http://[::1]:<port>` cannot be named. `bun tests/e2e/forward-hop-framing-e2e.ts` checks the verdict in Chromium, Firefox and WebKit: PPM may frame every page, another site still may not. In a UI e2e, note that Forward opens the tab by itself, so nothing read after Forward is a "before".
 - **Headless Chromium cannot subscribe to push, so a push e2e has to enter at the service worker**: `pushManager.subscribe` there fails with `Registration failed - permission denied`, so no test ever reaches a real FCM endpoint. The two halves are checked apart: the server's by encrypting a real push (`src/services/web-push/`) to a local HTTPS receiver, the worker's with CDP `ServiceWorker.deliverPushMessage` for `push` and a `NotificationEvent` dispatched inside the worker (`page.context().serviceWorkers()` → `evaluate`) for `notificationclick`. Chrome accepts only `userVisibleOnly: true` subscriptions, so `sw.ts` shows a notification for every push and never drops one. Like wake lock and WebCodecs, push needs a secure context, and on iOS a Home Screen install too; the Notifications pane says which one is missing instead of offering a switch that cannot work.
 - **A log line's timestamp is a claim, not its place in the file**: the live `ppm.log.1` held a record stamped `2026-10-06T03:06:13Z` among `20:49Z` ones. The old build logged tool output verbatim (`tool_result: … output=`), that output quoted an example log line from the docs, and the reader took the quoted line for a record of its own. Merged by timestamp, it carried everything after it in the file seven hours forward. `formatLogLine` still writes a multi-line message as it is, so any text that quotes a log line can do it again. `log-columns.ts` therefore orders records by an `order` key: the longest run of in-step timestamps (patience sort), with each line off that run taking the time of the last in-step line before it. `merge()` and the time-range search compare that key, and `ppm.log.3` → `ppm.log` are one chain read in file order; only separate logs are interleaved by time. Related: Show in Logs reaches lines older than the first page with `reach=<id>`, one request capped at `MAX_REACH` (15,000 lines) that answers `reachMissed: "far" | "gone"` rather than leaving an empty selection.
+- **A `db_execute` approval is answered over HTTP, never over the chat socket**: the card posts `{ approved, password }` to `/api/db/ai-approvals/:requestId` so a wrong password can be answered on the card while the approval stays pending, and so the password is never in a socket broadcast or the session trace. `ws/chat.ts` drops an `approval_response` naming one of these requests (`dbApprovalBroker.has`) — without that, an older bundle's generic Allow cleared the slot and took the card off every device while the broker went on waiting, so the AI sat out the ten minutes.
+- **A session has one approval slot, and a provider's approval must keep it**: `entry.pendingApprovalEvent` is what `session_state` replays and what the browser's single `pendingApproval` shows. A `db_execute` announced while Claude or Codex waits on its own approval (parallel tool calls in a non-bypass session) used to overwrite it — the provider's card vanished and its turn waited forever. `announceDbApproval` now leaves the slot alone and returns true; `showWaitingDbApproval` shows the database approval once the provider's is answered. `tests/unit/ws/chat-db-approval.test.ts` pins it.
+- **"PPM's password" is the auth token, so it proves presence, not a secret the AI lacks**: the token sits in `ppm.db`, which any process of the same OS user — the agent included — can read. The user chose it knowing that; the protection that holds regardless is that the connection's credentials never leave PPM and every change is shown, approved once and audited. Do not describe it as more than that.
+- **`db_query` must open the connection read-only whatever the row says**: `aiTargetConfig(conn, db, true)`. `isReadOnlyQuery` is only the first layer; `SELECT nextval(...)` passes it and only a read-only session refuses it (the PostgreSQL test in `tests/integration/db-ai-tools.test.ts`). Likewise `db_execute` opens with `readonly: false` — the approval is what lifts a readonly connection, for that script only.
+- **PPM owns the transaction a change runs in**: `db_execute` refuses `BEGIN`/`COMMIT`/`ROLLBACK`/`SAVEPOINT` in the script before asking anyone, because a `COMMIT` inside it would keep half a change that the expected-rows check then could not roll back. MySQL and MariaDB still commit DDL implicitly; the tool description tells the AI.
+- **Stripping ANSI codes from a terminal buffer leaks what the screen never showed**: a line editor redraws in place, so zsh-autosuggestions draws the rest of a history entry in grey and the next key erases it with cursor moves — a regex that drops escape sequences keeps that text and hands the AI the user's shell history as if it were output. `read_terminal` replays the buffer into `@xterm/headless` at the terminal's own size instead (`terminal-text.ts`), which also keeps a progress bar's last state and a full-screen program's screen; any new reader of terminal output should go through it.
+- **Playwright's headless shell ignores `--unsafely-treat-insecure-origin-as-secure`**: the default `headless: true` launches `chromium-headless-shell`, where a page on a mapped name (`--host-resolver-rules=MAP ppm-remote.test 127.0.0.1`) stays an insecure origin and loses every API a browser keeps for secure contexts. That is how PPM's chat send was found broken on plain HTTP: it called `crypto.randomUUID`, so a turn never started and the test read as hung. Full Chromium (`channel: "chromium"`, also headless) honours the flag; `ai-tab-tools-e2e.mjs` launches it only for its device-that-is-not-the-host step.
 
 ## UI Rules
 
@@ -298,7 +311,9 @@ Before planning or implementing a new feature, read `docs/project-roadmap.md` to
 - `src/services/tailscale/` — Settings → Remote Access → Tailscale, PPM at `https://<name>.<tailnet>.ts.net` through the Tailscale Service `svc:<name>`. `tailscale-cli.ts` finds and runs the CLI (shared with `port-forward/tailscale-forward.ts`), `tailscale-state.ts` reads the setup from `status --json`, `debug prefs` and `serve status --json` and changes nothing, `tailscale-login.ts` is the in-app sign-in (`tailscale up --json`, its link and QR code), `tailscale-app-service.ts` is the switch (the `tailscale_service` config row) and the start-up re-apply. The step order is `currentSetupStep` in `src/shared/tailscale-setup.ts`, shared by the server's refusal messages and the pane's checklist. Routes `src/server/routes/tailscale.ts` (`/api/tailscale`), UI `src/web/components/settings/tailscale/`, fake CLI for tests `tests/fixtures/fake-tailscale.ts`
 - `src/web/components/settings/remote-access/` — Settings → Remote Access, every way to reach PPM itself from another device, one sub-tab each (`remote-access-tab-store.ts`, which `openRemoteAccess(tab)` sets before opening Settings): Tailscale (the pane above, mounted as it is) and Public link (`public-link-pane.tsx`: the `/api/tunnel` switch plus the temporary-vs-own-domain choice, the named-tunnel flow rendered inline). Forwarding a dev server is the sidebar's Port Forwarding section (id `tunnels`), `src/web/components/tunnels/port-forwarding-panel.tsx` over `/api/tunnels`, which the palette's Forward a Port reaches through `open-port-forwarding.ts` (the drawer on a phone). Its two rows say where Tailscale (`/api/tunnels/transports`) and PPM's own Cloudflare domain (`/api/tunnel/named/status`) stand, and their Set up / Manage buttons are the links into these sub-tabs — signing in to either is never done in the panel. `tests/unit/web/remote-access-settings.test.tsx`, `tests/unit/web/port-forwarding-panel.test.tsx`
 - `src/services/design/` — Design mode: a design is `designs/<slug>/` with its canvas data in the git-ignored, unwatched `.design/`. `design-store.service.ts` (folders, `design.json`), `design-snapshots.service.ts` + `design-restore.service.ts`/`design-restore-journal.ts` (history, crash-safe restore), `design-turn-snapshot.ts` (a snapshot after each design turn, scheduled from `chatService.sendMessage`), `design-instructions.ts` + `design-tool-policy.ts` (the per-turn instructions `chatService.prepareSendOptions` adds, and the `acceptEdits` policy), `design-skill-install.service.ts` (Settings → Design's Install for the suggested skill: the pinned npm tarball laid out exactly as upstream's `uipro init --global`, checked by `tests/e2e/design-skill-install-e2e.ts`), `preview/` (capability tokens, CSP, parse5 `data-ppm-id` instrumentation, print view), `bridge/` (the in-frame script, shipped as source), `source/` (the patchers behind tweaks and move/resize), `comments/`, `export/` and `design-edit-undo-journal.ts`. Routes `src/server/routes/designs.ts` with its `design-*.ts` sub-routers, and `design-preview.ts` for the canvas; protocol `src/shared/design-bridge-protocol.ts`; UI `src/web/components/design/` with client helpers in `src/web/lib/design/`; docs `docs/architecture/workspace-and-ui.md` → Design mode; e2e `tests/e2e/design-mode-e2e.mjs` (fixture server and scripted provider in `tests/e2e/fixtures/design-mode-server.ts` / `design-script-provider.ts`)
-- `src/services/tab-tools-mcp/` — the AI's tab tools, `open_file` (optional `line`) and `open_preview`, given to every chat that is not a design session while Settings → AI Provider → *Let the AI open tabs in PPM* (`ai.tab_tools`) is on; Claude's claude.ai Artifact tools are turned off with it (`CLAUDE_CODE_DISABLE_ARTIFACT=1`), and a call made after the setting went off is refused at the endpoint, because a chat keeps the tools it started with. `/api/tab-tools-mcp` (`tab-tools-mcp-endpoint.ts`, mounted before auth) is built from the same parts as `/api/design-mcp`: `src/services/mcp-http-endpoint.ts` (JSON-only Streamable HTTP, a request with an `Origin` refused, 64 KB cap) and `src/services/mcp-session-tokens.ts` (per-session capability tokens, memory only, looked up by SHA-256); `tab-tools-mcp-tokens.ts` binds a token to the session id alone, so a warm spare's token is the one its session's turns mint. `tab-target.ts` resolves the agent's `path` under the editor's own read rules, and `tab-open-broker.ts` sends `tab_open` over the chat WebSocket and waits for the first `tab_open_result` (8 s for a file, 40 s for a page; 4 calls in flight and 20 a minute per session) — `deliverTabOpen` in `src/server/ws/chat.ts` picks the device that sent the turn's message, else every device showing the chat, and never buffers it for replay. Protocol and the per-provider tool names in `src/shared/tab-open-protocol.ts`; provider wiring `tabToolsMcpServers` (`claude-agent-sdk-query-options.ts`) and `tabToolsMcpConfig`/`tabToolsMcpEnv` (`codex-thread-params.ts`), from the access `chatService.prepareSendOptions` mints. Browser: `src/web/lib/open-ai-tab.ts` (answers `tab_open` from `use-chat.ts`: opens the tab, waits for the page, runs its check), `ai-tab-placement.ts` (pure: beside the chat on a desktop, the whole screen on a phone), `html-preview-loads.ts` (which preview shows which page, by load), `tab-tool-call.ts` + `src/web/components/chat/tab-tool-card.tsx` (the card and its Open button). The HTML preview route serves the design canvas's CSP (`buildDesignCsp`, so the design CDNs load) and injects `design/bridge/html-preview-bridge.ts`, the design bridge's core plus its self-check. Docs `docs/architecture/ai-chat-and-providers.md` → AI tab tools; e2e `PPM_PLAYWRIGHT_MODULE=<playwright>/index.mjs node tests/e2e/ai-tab-tools-e2e.mjs` (scripted provider in `tests/e2e/fixtures/tab-tools-server.ts`; `PPM_TAB_TOOLS_WEB_DIR` reuses a scratch build) and `tests/e2e/html-preview-cdn-check-e2e.mjs`
+- `src/services/design/share/` — design share links (docs `docs/architecture/workspace-and-ui.md` → Design mode → Share links): `design-share-code.ts` (derived codes), `design-share-links.service.ts` + `design-share-links-store.ts` + `design-share-resolve.ts` (links, pinned snapshots, status), `design-share-comments.service.ts` (a reviewer's view of the threads, 304 ETags), `design-share-rate-limit.ts` + `design-share-client-key.ts`, `design-share-address.ts`, `design-share-notifier.ts` (`design_review`); allow-list `preview/design-guest-alias.ts`, guest bridge `bridge/guest-bridge.ts`, replies in `design-comment-replies.service.ts`. Owner routes `src/server/routes/design-shares.ts` (`/api/project/:name/designs/:slug/shares`) and `design-share-address.ts` (`/api/design-shares/address`); reviewer routes `src/server/routes/design-share-guest*.ts` on `/s/<code>`; owner UI `src/web/components/design/share/`; reviewer page `src/web/design-share-page/`, built by `vite.share.config.ts` inside `build:web`. e2e `PPM_PLAYWRIGHT_MODULE=<playwright>/index.mjs node tests/e2e/design-share-e2e.mjs` and `tests/e2e/design-comment-threads-e2e.mjs`; Markdown/Mermaid/docx sanitising `tests/e2e/markdown-sanitize-e2e.mjs`
+- `src/services/tab-tools-mcp/` — the AI's tab tools, `open_file` (optional `line`), `open_preview`, `open_url`, `read_terminal` and `run_in_terminal`, given to every chat that is not a design session while any is on in Settings → Tools (`ai.ppm_tools`, decided by `src/shared/ppm-tools.ts`; `open_file`/`open_preview` never switched there follow the older single switch `ai.tab_tools`, the other three default on, so the server reaches every chat by default); Claude's claude.ai Artifact tools are turned off while `open_preview` is on (`CLAUDE_CODE_DISABLE_ARTIFACT=1`), and a call to a tool turned off since is refused at the endpoint (`unavailable` in `mcp-http-endpoint.ts`), because a chat keeps the tools it started with. `/api/tab-tools-mcp` (`tab-tools-mcp-endpoint.ts`, mounted before auth) is built from the same parts as `/api/design-mcp`: `src/services/mcp-http-endpoint.ts` (JSON-only Streamable HTTP, a request with an `Origin` refused, 64 KB cap) and `src/services/mcp-session-tokens.ts` (per-session capability tokens, memory only, looked up by SHA-256); `tab-tools-mcp-tokens.ts` binds a token to the session id alone, so a warm spare's token is the one its session's turns mint. `tab-target.ts` resolves the agent's `path` under the editor's own read rules, and `tab-open-broker.ts` sends `tab_open` over the chat WebSocket and waits for the first `tab_open_result` (8 s for a file, 40 s for a page; 4 calls in flight and 20 a minute per session) — `deliverTabOpen` in `src/server/ws/chat.ts` picks the device that sent the turn's message, else every device showing the chat, and never buffers it for replay. Protocol and the per-provider tool names in `src/shared/tab-open-protocol.ts`; provider wiring `tabToolsMcpServers` (`claude-agent-sdk-query-options.ts`) and `tabToolsMcpConfig`/`tabToolsMcpEnv` (`codex-thread-params.ts`), from the access `chatService.prepareSendOptions` mints. Browser: `src/web/lib/open-ai-tab.ts` (answers `tab_open` from `use-chat.ts`: opens the tab, waits for the page, runs its check), `ai-tab-placement.ts` (pure: beside the chat on a desktop, the whole screen on a phone), `html-preview-loads.ts` (which preview shows which page, by load), `tab-tool-call.ts` + `src/web/components/chat/tab-tool-card.tsx` (the card and its Open button). The three tools that take no file: `open-url-tool.ts` (host servers only; an existing forward, else a private Tailscale forward it starts, else the address itself, which `openAiUrlTab` accepts only on a page loaded from loopback), `terminal-tools.ts` (`read_terminal` over the chat's project terminals plus the ones it opened; `run_in_terminal` starts the shell, has the device dock it via `openAiTerminal`, types one checked line with no newline) and `terminal-text.ts` (the raw buffer replayed through `@xterm/headless` into the lines the screen shows); their card is `src/web/components/chat/device-tool-card.tsx`. The HTML preview route serves the design canvas's CSP (`buildDesignCsp`, so the design CDNs load) and injects `design/bridge/html-preview-bridge.ts`, the design bridge's core plus its self-check. Docs `docs/architecture/ai-chat-and-providers.md` → AI tab tools; e2e `PPM_PLAYWRIGHT_MODULE=<playwright>/index.mjs node tests/e2e/ai-tab-tools-e2e.mjs` (scripted provider in `tests/e2e/fixtures/tab-tools-server.ts`, which also mounts the terminal socket; `PPM_TAB_TOOLS_WEB_DIR` reuses a scratch build; a stand-in `tailscale` on its `PATH` keeps `open_url` off the real tailnet) and `tests/e2e/html-preview-cdn-check-e2e.mjs`
+- `src/services/db-ai-tools/` — the AI chat's database tools, `db_query` (read-only), `open_query` (a Query tab holding a script the user runs) and `db_execute` (a change, once, after the user approves it with PPM's password), on the saved connections with *Available to the AI chat* on, each tool on or off in Settings → Tools (`ai.ppm_tools`, all three on by default; `src/shared/ppm-tools.ts`). `db_query` names only the change tools that are on (`dbChangeHint`). `/api/db-tools-mcp` (`db-ai-tools-endpoint.ts`, mounted before auth) is built like `/api/tab-tools-mcp`: `mcp-http-endpoint.ts` + per-session tokens (`db-ai-tools-tokens.ts`). `db-ai-tools-tool.ts` holds the tool definitions and limits, `db-ai-connections.ts` which connections (light on purpose: `chat.service.ts` imports it, and the CLI loads `chat.service.ts`), `db-ai-target.ts` the adapter config with the *tool's* `readonly`, `db-ai-run.ts` the runs (`QueryScriptRun` for reads, `runApprovedScript` for one approved transaction), `db-ai-format.ts` rows as fenced untrusted data, `db-approval-broker.ts` the wait for the user's answer. Shared names and the approval's shape in `src/shared/db-ai-tools.ts`; the password check in `src/services/ppm-password.ts`. Chat side: `announceDbApproval` / `dbApprovalResolved` / `showWaitingDbApproval` in `src/server/ws/chat.ts`; the answer route `POST /api/db/ai-approvals/:requestId` in `src/server/routes/database.ts`. Browser: `src/web/components/chat/db-execute-approval-card.tsx`, `db-tool-card.tsx` + `src/web/lib/db-tool-call.ts`, `openAiQueryTab` in `src/web/lib/open-ai-tab.ts`, and the Query tab's *Run with write access (once)* (`write-once-dialog.tsx`, `writeOnce` on `/query/script`). Docs `docs/architecture/ai-chat-and-providers.md` → AI database tools; e2e `PPM_PLAYWRIGHT_MODULE=<playwright>/index.mjs node tests/e2e/ai-db-tools-e2e.mjs` (scripted provider in `tests/e2e/fixtures/db-tools-server.ts`; `PPM_DB_TOOLS_WEB_DIR` reuses a scratch build).
 - `src/services/agent-transcript/` — one hub per `(providerId, sessionId)` streaming an Agent card's or teammate's own transcript live over `/ws/global`, independent of the chat WebSocket and of whether the root turn is still running. `session-ownership.ts` proves the session belongs to the caller's project before any file is named; `agent-transcript-sources.ts` resolves a card/teammate to the exact file(s), including Codex descendants via `session_meta.parent_thread_id`; `agent-transcript-session-hub.ts` + `agent-transcript-hub.ts` are the per-session tail/page/cursor loop, `agent-transcript-session-hub-activity.ts` the separate "who is running" feed. Protocol in `src/shared/agent-transcript-protocol.ts`; UI entry points `src/web/components/chat/{agent-card-summary,agent-session-window-content,agent-session-sheet,running-agents-bar}.tsx` via `use-agent-session-stream.ts`/`use-agent-activity.ts`; docs `docs/architecture/ai-chat-and-providers.md` → Agent session transcripts
-- `src/services/session-file-baselines/` — the session review (the changes bar above the composer and the block-by-block Review tab): `session-file-baselines.service.ts` keeps each file's state from before the session's first write (`<ppm dir>/session-baselines/<session id>/`, first capture wins, 5 MB cap, credential paths never copied, 30-day prune), `session-file-changes.service.ts` compares it with the disk (git HEAD only as a fallback inside the project), `reverse-unified-diff.ts` works a Codex patch's "before" out, `shell-change-tracker.ts` brackets each Claude shell command with `git status`, `session-review-marks.ts` keeps what the user marked reviewed (a snapshot per file under `<session dir>/reviewed/`, written only at the version the browser showed; a file changed after its mark is diffed against the mark). Blocks are cut by `src/shared/review-blocks.ts`, shared because the server cuts them again from the disk before acting on a key the browser sent; `session-review-blocks.ts` records the kept ones per base hash, and `session-review-actions.ts` keeps, reopens and reverts blocks or whole files on disk (`/file-changes/answer`, refused as `stale` unless the file is at the version drawn) and undoes any answer all-or-nothing from its journal (`/file-changes/undo`). `session-file-history.ts` logs each file's state just before and after every call that writes it (`<session dir>/history/`, as line deltas), `session-file-blame.ts` replays that log to name the calls behind each block, and `session-turn-revert.ts` puts a turn's calls back where their lines are still intact (`/file-changes/revert-turn`: a preview first, then `stale` unless every file is at the previewed version). Captured by the Claude PreToolUse file-write hook and the shell hooks around each `Bash` call (`buildToolHooks` in `claude-agent-sdk-query-options.ts`) and by `codex-file-baselines.ts`. Routes `src/server/routes/chat-file-changes.ts`, shapes `src/shared/session-file-changes.ts`; UI `src/web/components/chat/session-changes-bar.tsx` + `session-change-row.tsx`, and `src/web/components/session-review/` (`review-desktop.tsx`, `review-phone.tsx` below `md`, `review-code.tsx` for the blocks and their turn chips, `review-tokens.tsx` for shiki colours), the chat's per-answer pill and tray `src/web/components/chat/turn-change-{rollup,tray,sheet,review}.tsx` over `src/web/hooks/use-turn-review.ts` + `src/web/lib/turn-review.ts` (the list reaches them through `session-changes-context.tsx`), turns from `src/web/lib/session-turns.ts` through `src/web/stores/session-turns-store.ts` (published by the chat, read by `use-session-turns.ts` when no chat is open), Show in chat through `src/web/stores/chat-jump-store.ts`, state `src/web/hooks/use-session-review.ts` over the pure `src/web/lib/session-review-model.ts`, data `src/web/hooks/use-session-file-changes.ts` + `src/web/lib/session-file-changes{,-client}.ts`; docs `docs/architecture/ai-chat-and-providers.md` → Session changes and review; e2e `bun tests/e2e/session-changes-e2e.mjs`
+- `src/services/session-file-baselines/` — the session review (the changes bar above the composer and the block-by-block Review tab): `session-file-baselines.service.ts` keeps each file's state from before the session's first write (`<ppm dir>/session-baselines/<session id>/`, first capture wins, 5 MB cap, credential paths never copied, 30-day prune), `session-file-changes.service.ts` compares it with the disk (git HEAD only as a fallback inside the project), keeps each session's list between asks to work out again only the files whose `stat` stamp moved, and pushes the rows of a file a call just wrote (`session-file-writes.ts`, `session:file-changes` on `/ws/global`), `reverse-unified-diff.ts` works a Codex patch's "before" out, `shell-change-tracker.ts` brackets each Claude shell command with `git status`, `session-review-marks.ts` keeps what the user marked reviewed (a snapshot per file under `<session dir>/reviewed/`, written only at the version the browser showed; a file changed after its mark is diffed against the mark). Blocks are cut by `src/shared/review-blocks.ts`, shared because the server cuts them again from the disk before acting on a key the browser sent; `session-review-blocks.ts` records the kept ones per base hash, and `session-review-actions.ts` keeps, reopens and reverts blocks or whole files on disk (`/file-changes/answer`, refused as `stale` unless the file is at the version drawn) and undoes any answer all-or-nothing from its journal (`/file-changes/undo`). `session-file-history.ts` logs each file's state just before and after every call that writes it (`<session dir>/history/`, as line deltas), `session-file-blame.ts` replays that log to name the calls behind each block, and `session-turn-revert.ts` puts a turn's calls back where their lines are still intact (`/file-changes/revert-turn`: a preview first, then `stale` unless every file is at the previewed version). Captured by the Claude PreToolUse file-write hook and the shell hooks around each `Bash` call (`buildToolHooks` in `claude-agent-sdk-query-options.ts`) and by `codex-file-baselines.ts`. Routes `src/server/routes/chat-file-changes.ts`, shapes `src/shared/session-file-changes.ts`; UI `src/web/components/chat/session-changes-bar.tsx` + `session-change-row.tsx`, and `src/web/components/session-review/` (`review-desktop.tsx`, `review-phone.tsx` below `md`, `review-code.tsx` for the blocks and their turn chips, `review-tokens.tsx` for shiki colours), the chat's per-answer pill and tray `src/web/components/chat/turn-change-{rollup,tray,sheet,review}.tsx` over `src/web/hooks/use-turn-review.ts` + `src/web/lib/turn-review.ts` (the list reaches them through `session-changes-context.tsx`), turns from `src/web/lib/session-turns.ts` through `src/web/stores/session-turns-store.ts` (published by the chat, read by `use-session-turns.ts` when no chat is open), Show in chat through `src/web/stores/chat-jump-store.ts`, state `src/web/hooks/use-session-review.ts` over the pure `src/web/lib/session-review-model.ts`, data `src/web/hooks/use-session-file-changes.ts` + `src/web/lib/session-file-changes{,-client}.ts`; docs `docs/architecture/ai-chat-and-providers.md` → Session changes and review; e2e `bun tests/e2e/session-changes-e2e.mjs`
 - `src/services/notification.service.ts` — notifications, configured in Settings → Notifications. `broadcast(type, payload, { stillUnseen })` drops a switched-off event, waits `delay_seconds` (one pending per session: a newer event replaces it) and sends only if `stillUnseen()` still holds — the chat is still unread, and for an approval the same request is still pending (`src/server/ws/chat.ts`); schedules and Jira pass none and always send. `deliver` fans out to push, Telegram and ntfy, plus PPM Cloud's `sendNotification`, which is inert in the server process because that connection lives in the supervisor. Settings shape and defaults in `src/shared/notification-settings.ts`, text and links in `notification-format.ts`. Push is standard Web Push with no dependency, `src/services/web-push/` (VAPID ES256 + RFC 8291 aes128gcm on WebCrypto; keys and subscriptions are the config rows `web_push_vapid` / `web_push_subscriptions` and never reach a browser); the browser half is `src/web/sw.ts` (`push`, and `notificationclick` → `src/web/sw-notification-click.ts`, which hands the session to an open window through `src/web/hooks/use-notification-clicks.ts`) and `src/web/lib/web-push-{support,client}.ts`. Telegram sends through `telegram-notification.service.ts` to the chats in the `telegram_notify_chats` config row, and to nobody else: PPMBot has a bot and chats of its own (`telegram-bots.ts` — the `ppmbot_telegram` row and `clawbot_paired_chats`; both rows sit outside `CONFIG_TABLE_KEYS` like the VAPID key, and an install that shared one bot is split once, on first read). The one-tap Connect link is `telegram-connect.service.ts`, one per bot owner, which polls a bot itself unless PPMBot is reading that bot (Telegram allows one `getUpdates` reader per bot; the bots are compared by id, the digits before the token's colon). ntfy is `ntfy-notification.service.ts`: one JSON publish per notification (the header form cannot carry a non-ASCII title), the config row `ntfy` with its token in `SECRET_CONFIG_KEYS`, dropped when Settings saves a different server so it is not sent to the new one (`PUT /ntfy`; `ppm config set ntfy.server` does not drop it). Both channels take their link back into PPM from `notification-link.ts`: the tunnel URL, else the Tailscale Service address, else localhost — never the LAN address, which is plain HTTP on an insecure origin where the browser withholds every permission PPM asks for. Routes `src/server/routes/notifications.ts` (`/api/notifications/*`), UI `src/web/components/settings/notifications-settings-section.tsx` + `telegram-bot-token-field.tsx` + `ntfy-server-form.tsx`, fake ntfy for tests `tests/helpers/fake-ntfy-server.ts`

package/THIRD-PARTY-NOTICES.md

@@ -17,7 +17,7 @@ bun scripts/gen-nerd-font.ts
 
 ## Product icons
 
-`src/web/lib/icons.generated.tsx` holds the path data for 199 glyphs, emitted by
+`src/web/lib/icons.generated.tsx` holds the path data for 200 glyphs, emitted by
 `scripts/gen-product-icons.ts` at 20px Regular. The outlines are reproduced unchanged;
 only the surrounding component is PPM's. The 15 names Fluent has no glyph for stay on
 `lucide-react`, which is a dependency rather than something vendored here.

package/assets/skills/ppm/SKILL.md

@@ -36,7 +36,7 @@ Invoke when the user asks to:
 3. **List projects** → `ppm projects list`
 4. **Add project** → `ppm projects add <path>`
 5. **List DB connections** → `PPM_AI_CHAT=1 ppm db list`
-6. **Query a saved DB connection** → `PPM_AI_CHAT=1 ppm db query <connection-name> "<sql>"`
+6. **Read or change data in a saved connection** → the `db_query` / `db_execute` tools, not this CLI (see Rules of Thumb)
 7. **Read config** → `ppm config get <key>` (e.g. `port`, `auth.enabled`)
 8. **Tail logs** → `ppm logs --tail 100` or `ppm logs -f` to follow
 9. **Upgrade PPM** → `ppm upgrade` (or `--check` to only check)
@@ -47,6 +47,7 @@ Invoke when the user asks to:
 - Always run `ppm status` before assuming the server is up.
 - Commands exit non-zero on failure and print to stderr. Capture both streams.
 - Set `PPM_AI_CHAT=1` for every `ppm db` command, as above: connections the user has made unavailable to AI are then left out of `db list` and refused by the rest. PPM's own chat sets it already.
+- Inside a PPM chat, `db tables/schema/data/query/run` do **not** run — they refuse and name the tool that serves them (`db_query`, `db_execute`). Those tools are what the user can switch off per tool in Settings → Tools, and a write through `db_execute` waits for the user to approve it; the CLI obeys neither, so it is for a person at a terminal. The connection commands (`list`, `add`, `test`, `remove`, `driver`) are unaffected.
 - Most listing commands accept `--json` for structured output; prefer JSON when parsing. Check `--help` if unsure.
 - The config DB is **SQLite**. You may open `~/.ppm/ppm.db` read-only for inspection — see [references/db-schema.md](references/db-schema.md).
 - Do NOT edit the config DB directly while the server is running; use `ppm config set` or the HTTP API.
@@ -72,4 +73,4 @@ This skill covers the `ppm` CLI, its HTTP API, and its config DB. It does **not*
 - Third-party extensions (inspect via `ppm ext list`).
 - The Claude Agent SDK internals (separate skill).
 
-<!-- Generated for PPM v0.23.14 at build time. Re-run `ppm export skill --install` to refresh. -->
+<!-- Generated for PPM v0.23.15 at build time. Re-run `ppm export skill --install` to refresh. -->

package/assets/skills/ppm/references/cli-reference.md

@@ -807,7 +807,7 @@ Show recent runs for a schedule
 Manage and inspect discovered skills & commands
 
 **Options:**
-- `--project <path>` — Project path (default: `"C:\\Users\\PC\\ppm-release-prep"`)
+- `--project <path>` — Project path (default: `"C:\\Users\\PC\\ppm-release"`)
 
 **Usage:** `ppm skills [options] [command]`
 
@@ -817,7 +817,7 @@ List all discovered skills and commands
 
 **Options:**
 - `--json` — JSON output
-- `--project <path>` — Project path (default: `"C:\\Users\\PC\\ppm-release-prep"`)
+- `--project <path>` — Project path (default: `"C:\\Users\\PC\\ppm-release"`)
 
 ### `ppm skills search`
 
@@ -825,7 +825,7 @@ Fuzzy search skills and commands
 
 **Options:**
 - `--json` — JSON output
-- `--project <path>` — Project path (default: `"C:\\Users\\PC\\ppm-release-prep"`)
+- `--project <path>` — Project path (default: `"C:\\Users\\PC\\ppm-release"`)
 
 **Usage:** `ppm skills search [options] <query>`
 
@@ -835,7 +835,7 @@ Show detailed info for a specific skill
 
 **Options:**
 - `--json` — JSON output
-- `--project <path>` — Project path (default: `"C:\\Users\\PC\\ppm-release-prep"`)
+- `--project <path>` — Project path (default: `"C:\\Users\\PC\\ppm-release"`)
 
 **Usage:** `ppm skills info [options] <name>`
 

package/assets/skills/ppm/references/common-tasks.md

@@ -52,6 +52,12 @@ ppm db test staging
 
 ## Task 5: Query a saved DB connection
 
+Inside a PPM chat, use the `db_query` tool (and `db_execute` for a change, which the user
+approves). `ppm db query` refuses there and names the tool, because the CLI obeys neither the
+per-tool switch in Settings → Tools nor the approval.
+
+For a person at a terminal:
+
 ```bash
 # Run a SQL query against a registered connection
 ppm db query staging "SELECT count(*) AS total FROM users"

package/assets/skills/ppm/references/http-api.md

@@ -111,6 +111,7 @@ _Base URL: `http://localhost:8080` (default; override via `ppm config set port <
 ## /api/db
 
 - `GET    /api/db/ssh/agent`
+- `POST   /api/db/ai-approvals/:requestId`
 - `GET    /api/db/connections`
 - `GET    /api/db/connections/export`
 - `POST   /api/db/connections/import`
@@ -136,6 +137,10 @@ _Base URL: `http://localhost:8080` (default; override via `ppm config set port <
 - `GET    /api/db/connections/:id/export`
 - `GET    /api/db/search`
 
+## /api/design-shares
+
+- `GET    /api/design-shares/address`
+
 ## /api/extensions
 
 - `GET    /api/extensions`
@@ -472,10 +477,17 @@ _Base URL: `http://localhost:8080` (default; override via `ppm config set port <
 - `GET    /proxy/:provider/v1/models`
 - `GET    /proxy/stats`
 
+## /s
+
+- `GET    /s/:code/info`
+- `GET    /s/:code`
+- `ALL    /s`
+- `ALL    /s/*`
+
 ## WebSocket
 
 - `ws://<host>/ws/chat` — AI chat stream (Claude Agent SDK)
 - `ws://<host>/ws/terminal` — PTY terminal multiplexer
 - `ws://<host>/ws/extensions` — extension host channel
 
-<!-- Generated from src/server/routes/ for PPM v0.23.14 -->
+<!-- Generated from src/server/routes/ for PPM v0.23.15 -->

package/bun.lock

@@ -21,6 +21,7 @@
         "@xterm/addon-fit": "0.12.0-beta.285",
         "@xterm/addon-web-links": "0.13.0-beta.285",
         "@xterm/addon-webgl": "0.20.0-beta.284",
+        "@xterm/headless": "6.1.0-beta.285",
         "@xterm/xterm": "6.1.0-beta.285",
         "archiver": "^7.0.1",
         "class-variance-authority": "^0.7.1",
@@ -52,7 +53,10 @@
         "react-resizable-panels": "^4.7.3",
         "rehype-highlight": "^7.0.2",
         "rehype-katex": "^7.0.1",
+        "rehype-parse": "^9.0.1",
         "rehype-raw": "^7.0.0",
+        "rehype-sanitize": "^6.0.0",
+        "rehype-stringify": "^10.0.1",
         "remark-breaks": "^4.0.0",
         "remark-gfm": "^4.0.1",
         "remark-math": "^6.0.0",
@@ -875,6 +879,8 @@
 
     "@xterm/addon-webgl": ["@xterm/addon-webgl@0.20.0-beta.284", "", { "peerDependencies": { "@xterm/xterm": "^6.1.0-beta.285" } }, "sha512-tzkUiEfdpHCY8mXCbuIaP9V67QDfBJvDr9jdxs5jjxNCIQvw+NCoKD97y5sUrQhrIlr7xrDGniPgPYThQ/1FWg=="],
 
+    "@xterm/headless": ["@xterm/headless@6.1.0-beta.285", "", {}, "sha512-NJud+XEUjKMT2LwPqcIh/gazktV+R2AHjEPMQsn/l6+53rgFusuifmJjVkWLwZ228YYsUaN5+lJELeExS26q4A=="],
+
     "@xterm/xterm": ["@xterm/xterm@6.1.0-beta.285", "", {}, "sha512-S3K58tepMkbpWRBzOGKd0In6AVvt9QPAnNs8DJ8rPUPODYtsCYWAtINHKYtC2OpXcE5EBKM35dl+Dgv03OoE/w=="],
 
     "abbrev": ["abbrev@1.1.1", "", {}, "sha512-nne9/IiQ/hzIhY6pdDnbBtz7DjPTKrY00P/zvPSm5pOFkl6xuGrGnXn/VtTNNfNtAfZ9/1RtehkszU9qcTii0Q=="],
@@ -1337,6 +1343,8 @@
 
     "hast-util-raw": ["hast-util-raw@9.1.0", "", { "dependencies": { "@types/hast": "^3.0.0", "@types/unist": "^3.0.0", "@ungap/structured-clone": "^1.0.0", "hast-util-from-parse5": "^8.0.0", "hast-util-to-parse5": "^8.0.0", "html-void-elements": "^3.0.0", "mdast-util-to-hast": "^13.0.0", "parse5": "^7.0.0", "unist-util-position": "^5.0.0", "unist-util-visit": "^5.0.0", "vfile": "^6.0.0", "web-namespaces": "^2.0.0", "zwitch": "^2.0.0" } }, "sha512-Y8/SBAHkZGoNkpzqqfCldijcuUKh7/su31kEBp67cFY09Wy0mTRgtsLYsiIxMJxlu0f6AA5SUTbDR8K0rxnbUw=="],
 
+    "hast-util-sanitize": ["hast-util-sanitize@5.0.2", "", { "dependencies": { "@types/hast": "^3.0.0", "@ungap/structured-clone": "^1.0.0", "unist-util-position": "^5.0.0" } }, "sha512-3yTWghByc50aGS7JlGhk61SPenfE/p1oaFeNwkOOyrscaOkMGrcW9+Cy/QAIOBpZxP1yqDIzFMR0+Np0i0+usg=="],
+
     "hast-util-to-html": ["hast-util-to-html@9.0.5", "", { "dependencies": { "@types/hast": "^3.0.0", "@types/unist": "^3.0.0", "ccount": "^2.0.0", "comma-separated-tokens": "^2.0.0", "hast-util-whitespace": "^3.0.0", "html-void-elements": "^3.0.0", "mdast-util-to-hast": "^13.0.0", "property-information": "^7.0.0", "space-separated-tokens": "^2.0.0", "stringify-entities": "^4.0.0", "zwitch": "^2.0.4" } }, "sha512-OguPdidb+fbHQSU4Q4ZiLKnzWo8Wwsf5bZfbvu7//a9oTYoqD/fWpe96NuHkoS9h0ccGOTe0C4NGXdtS0iObOw=="],
 
     "hast-util-to-jsx-runtime": ["hast-util-to-jsx-runtime@2.3.6", "", { "dependencies": { "@types/estree": "^1.0.0", "@types/hast": "^3.0.0", "@types/unist": "^3.0.0", "comma-separated-tokens": "^2.0.0", "devlop": "^1.0.0", "estree-util-is-identifier-name": "^3.0.0", "hast-util-whitespace": "^3.0.0", "mdast-util-mdx-expression": "^2.0.0", "mdast-util-mdx-jsx": "^3.0.0", "mdast-util-mdxjs-esm": "^2.0.0", "property-information": "^7.0.0", "space-separated-tokens": "^2.0.0", "style-to-js": "^1.0.0", "unist-util-position": "^5.0.0", "vfile-message": "^4.0.0" } }, "sha512-zl6s8LwNyo1P9uw+XJGvZtdFF1GdAkOg8ujOw+4Pyb76874fLps4ueHXDhXWdk6YHQ6OgUtinliG7RsYvCbbBg=="],
@@ -1871,8 +1879,14 @@
 
     "rehype-katex": ["rehype-katex@7.0.1", "", { "dependencies": { "@types/hast": "^3.0.0", "@types/katex": "^0.16.0", "hast-util-from-html-isomorphic": "^2.0.0", "hast-util-to-text": "^4.0.0", "katex": "^0.16.0", "unist-util-visit-parents": "^6.0.0", "vfile": "^6.0.0" } }, "sha512-OiM2wrZ/wuhKkigASodFoo8wimG3H12LWQaH8qSPVJn9apWKFSH3YOCtbKpBorTVw/eI7cuT21XBbvwEswbIOA=="],
 
+    "rehype-parse": ["rehype-parse@9.0.1", "", { "dependencies": { "@types/hast": "^3.0.0", "hast-util-from-html": "^2.0.0", "unified": "^11.0.0" } }, "sha512-ksCzCD0Fgfh7trPDxr2rSylbwq9iYDkSn8TCDmEJ49ljEUBxDVCzCHv7QNzZOfODanX4+bWQ4WZqLCRWYLfhag=="],
+
     "rehype-raw": ["rehype-raw@7.0.0", "", { "dependencies": { "@types/hast": "^3.0.0", "hast-util-raw": "^9.0.0", "vfile": "^6.0.0" } }, "sha512-/aE8hCfKlQeA8LmyeyQvQF3eBiLRGNlfBJEvWH7ivp9sBqs7TNqBL5X3v157rM4IFETqDnIOO+z5M/biZbo9Ww=="],
 
+    "rehype-sanitize": ["rehype-sanitize@6.0.0", "", { "dependencies": { "@types/hast": "^3.0.0", "hast-util-sanitize": "^5.0.0" } }, "sha512-CsnhKNsyI8Tub6L4sm5ZFsme4puGfc6pYylvXo1AeqaGbjOYyzNv3qZPwvs0oMJ39eryyeOdmxwUIo94IpEhqg=="],
+
+    "rehype-stringify": ["rehype-stringify@10.0.1", "", { "dependencies": { "@types/hast": "^3.0.0", "hast-util-to-html": "^9.0.0", "unified": "^11.0.0" } }, "sha512-k9ecfXHmIPuFVI61B9DeLPN0qFHfawM6RsuX48hoqlaKSF61RskNjSm1lI8PhBEM0MRdLxVVm4WmTqJQccH9mA=="],
+
     "remark-breaks": ["remark-breaks@4.0.0", "", { "dependencies": { "@types/mdast": "^4.0.0", "mdast-util-newline-to-break": "^2.0.0", "unified": "^11.0.0" } }, "sha512-IjEjJOkH4FuJvHZVIW0QCDWxcG96kCq7An/KVH2NfJe6rKZU2AsHeB3OEjPNRxi4QC34Xdx7I2KGYn6IpT7gxQ=="],
 
     "remark-gfm": ["remark-gfm@4.0.1", "", { "dependencies": { "@types/mdast": "^4.0.0", "mdast-util-gfm": "^3.0.0", "micromark-extension-gfm": "^3.0.0", "remark-parse": "^11.0.0", "remark-stringify": "^11.0.0", "unified": "^11.0.0" } }, "sha512-1quofZ2RQ9EWdeN34S79+KExV1764+wCUGop5CPL1WGdD0ocPpu91lzPGbwWMECpEpd42kJGQwzRfyov9j4yNg=="],
@@ -2250,6 +2264,7 @@
     "zwitch": ["zwitch@2.0.4", "", {}, "sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A=="],
 
     "@grpc/grpc-js/@grpc/proto-loader": ["@grpc/proto-loader@0.8.1", "", { "dependencies": { "lodash.camelcase": "^4.3.0", "long": "^5.0.0", "protobufjs": "^7.5.5", "yargs": "^17.7.2" }, "bin": { "proto-loader-gen-types": "build/bin/proto-loader-gen-types.js" } }, "sha512-wtF6h+DY6M3YaDBPAmvuuA6jV8Sif9MjtOI5euKFWRgCDl5PeDpPsHR9u2l6St5ceY8AZgoNDww5+HvEsXFsGg=="],
+
     "@inquirer/external-editor/iconv-lite": ["iconv-lite@0.7.2", "", { "dependencies": { "safer-buffer": ">= 2.1.2 < 3.0.0" } }, "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw=="],
 
     "@rollup/plugin-node-resolve/@rollup/pluginutils": ["@rollup/pluginutils@5.3.0", "", { "dependencies": { "@types/estree": "^1.0.0", "estree-walker": "^2.0.2", "picomatch": "^4.0.2" }, "peerDependencies": { "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-5EdhGZtnu3V88ces7s53hhfK5KSASnJZv8Lulpc04cWO3REESroJXg73DFsOmgbU2BhwV0E20bu2IDZb3VKW4Q=="],

package/dist/web/assets/_basePickBy-CPcPjurU.js

@@ -0,0 +1 @@
+import{A as e,B as t,C as n,E as r,H as i,M as a,U as o,V as s,k as c,p as l,w as u,z as d}from"./isArrayLikeObject-DHTG10am.js";import{A as f,C as p,D as m,M as h,N as g,S as _,T as v,f as y,h as b,u as x,w as S}from"./_baseUniq-DI0z-mx3.js";var C=/\s/;function w(e){for(var t=e.length;t--&&C.test(e.charAt(t)););return t}var ee=/^\s+/;function T(e){return e&&e.slice(0,w(e)+1).replace(ee,``)}var E=NaN,D=/^[-+]0x[0-9a-f]+$/i,O=/^0b[01]+$/i,k=/^0o[0-7]+$/i,A=parseInt;function j(e){if(typeof e==`number`)return e;if(g(e))return E;if(t(e)){var n=typeof e.valueOf==`function`?e.valueOf():e;e=t(n)?n+``:n}if(typeof e!=`string`)return e===0?e:+e;e=T(e);var r=O.test(e);return r||k.test(e)?A(e.slice(2),r?2:8):D.test(e)?E:+e}var M=1/0,N=17976931348623157e292;function P(e){return e?(e=j(e),e===M||e===-M?(e<0?-1:1)*N:e===e?e:0):e===0?e:0}function F(e){var t=P(e),n=t%1;return t===t?n?t-n:t:0}function I(e){return e!=null&&e.length?_(e,1):[]}var L=Object.prototype,R=L.hasOwnProperty,z=r(function(t,r){t=Object(t);var i=-1,a=r.length,o=a>2?r[2]:void 0;for(o&&n(r[0],r[1],o)&&(a=1);++i<a;)for(var s=r[i],c=l(s),u=-1,d=c.length;++u<d;){var f=c[u],p=t[f];(p===void 0||e(p,L[f])&&!R.call(t,f))&&(t[f]=s[f])}return t});function B(e){var t=e==null?0:e.length;return t?e[t-1]:void 0}function V(e){return function(t,n,r){var i=Object(t);if(!u(t)){var a=y(n,3);t=m(t),n=function(e){return a(i[e],e,i)}}var o=e(t,n,r);return o>-1?i[a?t[o]:o]:void 0}}var H=Math.max;function U(e,t,n){var r=e==null?0:e.length;if(!r)return-1;var i=n==null?0:F(n);return i<0&&(i=H(r+i,0)),f(e,y(t,3),i)}var W=V(U);function G(e,t){var n=-1,r=u(e)?Array(e.length):[];return x(e,function(e,i,a){r[++n]=t(e,i,a)}),r}function K(e,t){return(s(e)?h:G)(e,y(t,3))}var q=Object.prototype.hasOwnProperty;function J(e,t){return e!=null&&q.call(e,t)}function Y(e,t){return e!=null&&b(e,t,J)}var X=`[object String]`;function Z(e){return typeof e==`string`||!s(e)&&i(e)&&o(e)==X}function Q(e,t){return e<t}function $(e,t,n){for(var r=-1,i=e.length;++r<i;){var a=e[r],o=t(a);if(o!=null&&(s===void 0?o===o&&!g(o):n(o,s)))var s=o,c=a}return c}function te(e){return e&&e.length?$(e,d,Q):void 0}function ne(e,n,r,i){if(!t(e))return e;n=v(n,e);for(var o=-1,s=n.length,l=s-1,u=e;u!=null&&++o<s;){var d=S(n[o]),f=r;if(d===`__proto__`||d===`constructor`||d===`prototype`)return e;if(o!=l){var p=u[d];f=i?i(p,d,u):void 0,f===void 0&&(f=t(p)?p:a(n[o+1])?[]:{})}c(u,d,f),u=u[d]}return e}function re(e,t,n){for(var r=-1,i=t.length,a={};++r<i;){var o=t[r],s=p(e,o);n(s,o)&&ne(a,v(o,e),s)}return a}export{Z as a,G as c,z as d,I as f,Q as i,W as l,P as m,te as n,Y as o,F as p,$ as r,K as s,re as t,B as u};

package/dist/web/assets/_baseUniq-DI0z-mx3.js

@@ -0,0 +1 @@
+import{A as e,B as t,F as n,H as r,M as i,O as a,T as o,U as s,V as c,W as l,_ as u,a as d,b as f,c as p,d as m,g as h,h as g,i as _,k as v,l as y,n as ee,o as b,p as x,r as te,s as ne,u as re,v as ie,w as S,y as C,z as w}from"./isArrayLikeObject-DHTG10am.js";import{i as ae,n as T,r as E}from"./isEmpty-dcb0OVvj.js";var oe=`[object Symbol]`;function D(e){return typeof e==`symbol`||r(e)&&s(e)==oe}function O(e,t){for(var n=-1,r=e==null?0:e.length,i=Array(r);++n<r;)i[n]=t(e[n],n,e);return i}var se=1/0,ce=l?l.prototype:void 0,le=ce?ce.toString:void 0;function ue(e){if(typeof e==`string`)return e;if(c(e))return O(e,ue)+``;if(D(e))return le?le.call(e):``;var t=e+``;return t==`0`&&1/e==-se?`-0`:t}function de(){}function fe(e,t){for(var n=-1,r=e==null?0:e.length;++n<r&&t(e[n],n,e)!==!1;);return e}function pe(e,t,n,r){for(var i=e.length,a=n+(r?1:-1);r?a--:++a<i;)if(t(e[a],a,e))return a;return-1}function me(e){return e!==e}function he(e,t,n){for(var r=n-1,i=e.length;++r<i;)if(e[r]===t)return r;return-1}function ge(e,t,n){return t===t?he(e,t,n):pe(e,me,n)}function _e(e,t){return!!(e!=null&&e.length)&&ge(e,t,0)>-1}function k(e){return S(e)?g(e):ae(e)}var ve=/\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/,ye=/^\w*$/;function A(e,t){if(c(e))return!1;var n=typeof e;return n==`number`||n==`symbol`||n==`boolean`||e==null||D(e)?!0:ye.test(e)||!ve.test(e)||t!=null&&e in Object(t)}var be=500;function xe(e){var t=re(e,function(e){return n.size===be&&n.clear(),e}),n=t.cache;return t}var Se=/[^.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|$))/g,Ce=/\\(\\)?/g,we=xe(function(e){var t=[];return e.charCodeAt(0)===46&&t.push(``),e.replace(Se,function(e,n,r,i){t.push(r?i.replace(Ce,`$1`):n||e)}),t});function j(e){return e==null?``:ue(e)}function M(e,t){return c(e)?e:A(e,t)?[e]:we(j(e))}var Te=1/0;function N(e){if(typeof e==`string`||D(e))return e;var t=e+``;return t==`0`&&1/e==-Te?`-0`:t}function P(e,t){t=M(t,e);for(var n=0,r=t.length;e!=null&&n<r;)e=e[N(t[n++])];return n&&n==r?e:void 0}function Ee(e,t,n){var r=e==null?void 0:P(e,t);return r===void 0?n:r}function F(e,t){for(var n=-1,r=t.length,i=e.length;++n<r;)e[i+n]=t[n];return e}var I=l?l.isConcatSpreadable:void 0;function De(e){return c(e)||f(e)||!!(I&&e&&e[I])}function L(e,t,n,r,i){var a=-1,o=e.length;for(n||=De,i||=[];++a<o;){var s=e[a];t>0&&n(s)?t>1?L(s,t-1,n,r,i):F(i,s):r||(i[i.length]=s)}return i}function Oe(e,t,n,r){var i=-1,a=e==null?0:e.length;for(r&&a&&(n=e[++i]);++i<a;)n=t(n,e[i],i,e);return n}function ke(e,t){return e&&a(t,k(t),e)}function Ae(e,t){return e&&a(t,x(t),e)}function R(e,t){for(var n=-1,r=e==null?0:e.length,i=0,a=[];++n<r;){var o=e[n];t(o,n,e)&&(a[i++]=o)}return a}function z(){return[]}var je=Object.prototype.propertyIsEnumerable,B=Object.getOwnPropertySymbols,V=B?function(e){return e==null?[]:(e=Object(e),R(B(e),function(t){return je.call(e,t)}))}:z;function Me(e,t){return a(e,V(e),t)}var Ne=Object.getOwnPropertySymbols?function(e){for(var t=[];e;)F(t,V(e)),e=y(e);return t}:z;function Pe(e,t){return a(e,Ne(e),t)}function Fe(e,t,n){var r=t(e);return c(e)?r:F(r,n(e))}function H(e){return Fe(e,k,V)}function Ie(e){return Fe(e,x,Ne)}var Le=Object.prototype.hasOwnProperty;function Re(e){var t=e.length,n=new e.constructor(t);return t&&typeof e[0]==`string`&&Le.call(e,`index`)&&(n.index=e.index,n.input=e.input),n}function ze(e,t){var n=t?d(e.buffer):e.buffer;return new e.constructor(n,e.byteOffset,e.byteLength)}var Be=/\w*$/;function Ve(e){var t=new e.constructor(e.source,Be.exec(e));return t.lastIndex=e.lastIndex,t}var He=l?l.prototype:void 0,Ue=He?He.valueOf:void 0;function We(e){return Ue?Object(Ue.call(e)):{}}var Ge=`[object Boolean]`,Ke=`[object Date]`,qe=`[object Map]`,Je=`[object Number]`,Ye=`[object RegExp]`,Xe=`[object Set]`,Ze=`[object String]`,Qe=`[object Symbol]`,$e=`[object ArrayBuffer]`,et=`[object DataView]`,tt=`[object Float32Array]`,nt=`[object Float64Array]`,rt=`[object Int8Array]`,it=`[object Int16Array]`,at=`[object Int32Array]`,ot=`[object Uint8Array]`,st=`[object Uint8ClampedArray]`,ct=`[object Uint16Array]`,lt=`[object Uint32Array]`;function ut(e,t,n){var r=e.constructor;switch(t){case $e:return d(e);case Ge:case Ke:return new r(+e);case et:return ze(e,n);case tt:case nt:case rt:case it:case at:case ot:case st:case ct:case lt:return _(e,n);case qe:return new r;case Je:case Ze:return new r(e);case Ye:return Ve(e);case Xe:return new r;case Qe:return We(e)}}var dt=`[object Map]`;function ft(e){return r(e)&&T(e)==dt}var pt=u&&u.isMap,mt=pt?ie(pt):ft,ht=`[object Set]`;function gt(e){return r(e)&&T(e)==ht}var _t=u&&u.isSet,vt=_t?ie(_t):gt,yt=1,bt=2,xt=4,St=`[object Arguments]`,Ct=`[object Array]`,wt=`[object Boolean]`,Tt=`[object Date]`,Et=`[object Error]`,Dt=`[object Function]`,Ot=`[object GeneratorFunction]`,kt=`[object Map]`,At=`[object Number]`,jt=`[object Object]`,Mt=`[object RegExp]`,Nt=`[object Set]`,Pt=`[object String]`,Ft=`[object Symbol]`,It=`[object WeakMap]`,Lt=`[object ArrayBuffer]`,Rt=`[object DataView]`,zt=`[object Float32Array]`,Bt=`[object Float64Array]`,Vt=`[object Int8Array]`,Ht=`[object Int16Array]`,Ut=`[object Int32Array]`,Wt=`[object Uint8Array]`,Gt=`[object Uint8ClampedArray]`,Kt=`[object Uint16Array]`,qt=`[object Uint32Array]`,U={};U[St]=U[Ct]=U[Lt]=U[Rt]=U[wt]=U[Tt]=U[zt]=U[Bt]=U[Vt]=U[Ht]=U[Ut]=U[kt]=U[At]=U[jt]=U[Mt]=U[Nt]=U[Pt]=U[Ft]=U[Wt]=U[Gt]=U[Kt]=U[qt]=!0,U[Et]=U[Dt]=U[It]=!1;function W(e,r,i,a,o,s){var l,u=r&yt,d=r&bt,f=r&xt;if(i&&(l=o?i(e,a,o,s):i(e)),l!==void 0)return l;if(!t(e))return e;var m=c(e);if(m){if(l=Re(e),!u)return n(e,l)}else{var h=T(e),g=h==Dt||h==Ot;if(C(e))return ne(e,u);if(h==jt||h==St||g&&!o){if(l=d||g?{}:te(e),!u)return d?Pe(e,Ae(l,e)):Me(e,ke(l,e))}else{if(!U[h])return o?e:{};l=ut(e,h,u)}}s||=new p;var _=s.get(e);if(_)return _;s.set(e,l),vt(e)?e.forEach(function(t){l.add(W(t,r,i,t,e,s))}):mt(e)&&e.forEach(function(t,n){l.set(n,W(t,r,i,n,e,s))});var y=m?void 0:(f?d?Ie:H:d?x:k)(e);return fe(y||e,function(t,n){y&&(n=t,t=e[n]),v(l,n,W(t,r,i,n,e,s))}),l}var Jt=`__lodash_hash_undefined__`;function Yt(e){return this.__data__.set(e,Jt),this}function Xt(e){return this.__data__.has(e)}function G(e){var t=-1,n=e==null?0:e.length;for(this.__data__=new m;++t<n;)this.add(e[t])}G.prototype.add=G.prototype.push=Yt,G.prototype.has=Xt;function Zt(e,t){for(var n=-1,r=e==null?0:e.length;++n<r;)if(t(e[n],n,e))return!0;return!1}function K(e,t){return e.has(t)}var Qt=1,$t=2;function en(e,t,n,r,i,a){var o=n&Qt,s=e.length,c=t.length;if(s!=c&&!(o&&c>s))return!1;var l=a.get(e),u=a.get(t);if(l&&u)return l==t&&u==e;var d=-1,f=!0,p=n&$t?new G:void 0;for(a.set(e,t),a.set(t,e);++d<s;){var m=e[d],h=t[d];if(r)var g=o?r(h,m,d,t,e,a):r(m,h,d,e,t,a);if(g!==void 0){if(g)continue;f=!1;break}if(p){if(!Zt(t,function(e,t){if(!K(p,t)&&(m===e||i(m,e,n,r,a)))return p.push(t)})){f=!1;break}}else if(!(m===h||i(m,h,n,r,a))){f=!1;break}}return a.delete(e),a.delete(t),f}function tn(e){var t=-1,n=Array(e.size);return e.forEach(function(e,r){n[++t]=[r,e]}),n}function q(e){var t=-1,n=Array(e.size);return e.forEach(function(e){n[++t]=e}),n}var nn=1,rn=2,an=`[object Boolean]`,on=`[object Date]`,sn=`[object Error]`,cn=`[object Map]`,ln=`[object Number]`,un=`[object RegExp]`,dn=`[object Set]`,fn=`[object String]`,pn=`[object Symbol]`,mn=`[object ArrayBuffer]`,hn=`[object DataView]`,gn=l?l.prototype:void 0,J=gn?gn.valueOf:void 0;function _n(t,n,r,i,a,o,s){switch(r){case hn:if(t.byteLength!=n.byteLength||t.byteOffset!=n.byteOffset)return!1;t=t.buffer,n=n.buffer;case mn:return!(t.byteLength!=n.byteLength||!o(new b(t),new b(n)));case an:case on:case ln:return e(+t,+n);case sn:return t.name==n.name&&t.message==n.message;case un:case fn:return t==n+``;case cn:var c=tn;case dn:var l=i&nn;if(c||=q,t.size!=n.size&&!l)return!1;var u=s.get(t);if(u)return u==n;i|=rn,s.set(t,n);var d=en(c(t),c(n),i,a,o,s);return s.delete(t),d;case pn:if(J)return J.call(t)==J.call(n)}return!1}var vn=1,yn=Object.prototype.hasOwnProperty;function bn(e,t,n,r,i,a){var o=n&vn,s=H(e),c=s.length;if(c!=H(t).length&&!o)return!1;for(var l=c;l--;){var u=s[l];if(!(o?u in t:yn.call(t,u)))return!1}var d=a.get(e),f=a.get(t);if(d&&f)return d==t&&f==e;var p=!0;a.set(e,t),a.set(t,e);for(var m=o;++l<c;){u=s[l];var h=e[u],g=t[u];if(r)var _=o?r(g,h,u,t,e,a):r(h,g,u,e,t,a);if(!(_===void 0?h===g||i(h,g,n,r,a):_)){p=!1;break}m||=u==`constructor`}if(p&&!m){var v=e.constructor,y=t.constructor;v!=y&&`constructor`in e&&`constructor`in t&&!(typeof v==`function`&&v instanceof v&&typeof y==`function`&&y instanceof y)&&(p=!1)}return a.delete(e),a.delete(t),p}var xn=1,Sn=`[object Arguments]`,Cn=`[object Array]`,Y=`[object Object]`,wn=Object.prototype.hasOwnProperty;function Tn(e,t,n,r,i,a){var o=c(e),s=c(t),l=o?Cn:T(e),u=s?Cn:T(t);l=l==Sn?Y:l,u=u==Sn?Y:u;var d=l==Y,f=u==Y,m=l==u;if(m&&C(e)){if(!C(t))return!1;o=!0,d=!1}if(m&&!d)return a||=new p,o||h(e)?en(e,t,n,r,i,a):_n(e,t,l,n,r,i,a);if(!(n&xn)){var g=d&&wn.call(e,`__wrapped__`),_=f&&wn.call(t,`__wrapped__`);if(g||_){var v=g?e.value():e,y=_?t.value():t;return a||=new p,i(v,y,n,r,a)}}return m?(a||=new p,bn(e,t,n,r,i,a)):!1}function X(e,t,n,i,a){return e===t?!0:e==null||t==null||!r(e)&&!r(t)?e!==e&&t!==t:Tn(e,t,n,i,X,a)}var En=1,Dn=2;function On(e,t,n,r){var i=n.length,a=i,o=!r;if(e==null)return!a;for(e=Object(e);i--;){var s=n[i];if(o&&s[2]?s[1]!==e[s[0]]:!(s[0]in e))return!1}for(;++i<a;){s=n[i];var c=s[0],l=e[c],u=s[1];if(o&&s[2]){if(l===void 0&&!(c in e))return!1}else{var d=new p;if(r)var f=r(l,u,c,e,t,d);if(!(f===void 0?X(u,l,En|Dn,r,d):f))return!1}}return!0}function kn(e){return e===e&&!t(e)}function An(e){for(var t=k(e),n=t.length;n--;){var r=t[n],i=e[r];t[n]=[r,i,kn(i)]}return t}function Z(e,t){return function(n){return n==null?!1:n[e]===t&&(t!==void 0||e in Object(n))}}function jn(e){var t=An(e);return t.length==1&&t[0][2]?Z(t[0][0],t[0][1]):function(n){return n===e||On(n,e,t)}}function Mn(e,t){return e!=null&&t in Object(e)}function Nn(e,t,n){t=M(t,e);for(var r=-1,a=t.length,s=!1;++r<a;){var l=N(t[r]);if(!(s=e!=null&&n(e,l)))break;e=e[l]}return s||++r!=a?s:(a=e==null?0:e.length,!!a&&o(a)&&i(l,a)&&(c(e)||f(e)))}function Pn(e,t){return e!=null&&Nn(e,t,Mn)}var Fn=1,In=2;function Ln(e,t){return A(e)&&kn(t)?Z(N(e),t):function(n){var r=Ee(n,e);return r===void 0&&r===t?Pn(n,e):X(t,r,Fn|In)}}function Rn(e){return function(t){return t?.[e]}}function zn(e){return function(t){return P(t,e)}}function Bn(e){return A(e)?Rn(N(e)):zn(e)}function Q(e){return typeof e==`function`?e:e==null?w:typeof e==`object`?c(e)?Ln(e[0],e[1]):jn(e):Bn(e)}function Vn(e,t){return e&&ee(e,t,k)}function Hn(e,t){return function(n,r){if(n==null)return n;if(!S(n))return e(n,r);for(var i=n.length,a=t?i:-1,o=Object(n);(t?a--:++a<i)&&r(o[a],a,o)!==!1;);return n}}var $=Hn(Vn);function Un(e,t,n){for(var r=-1,i=e==null?0:e.length;++r<i;)if(n(t,e[r]))return!0;return!1}function Wn(e){return typeof e==`function`?e:w}function Gn(e,t){return(c(e)?fe:$)(e,Wn(t))}function Kn(e,t){var n=[];return $(e,function(e,r,i){t(e,r,i)&&n.push(e)}),n}function qn(e,t){return(c(e)?R:Kn)(e,Q(t,3))}function Jn(e,t){return O(t,function(t){return e[t]})}function Yn(e){return e==null?[]:Jn(e,k(e))}function Xn(e){return e===void 0}function Zn(e,t,n,r,i){return i(e,function(e,i,a){n=r?(r=!1,e):t(n,e,i,a)}),n}function Qn(e,t,n){var r=c(e)?Oe:Zn,i=arguments.length<3;return r(e,Q(t,4),n,i,$)}var $n=E&&1/q(new E([,-0]))[1]==1/0?function(e){return new E(e)}:de,er=200;function tr(e,t,n){var r=-1,i=_e,a=e.length,o=!0,s=[],c=s;if(n)o=!1,i=Un;else if(a>=er){var l=t?null:$n(e);if(l)return q(l);o=!1,i=K,c=new G}else c=t?[]:s;outer:for(;++r<a;){var u=e[r],d=t?t(u):u;if(u=n||u!==0?u:0,o&&d===d){for(var f=c.length;f--;)if(c[f]===d)continue outer;t&&c.push(d),s.push(u)}else i(c,d,n)||(c!==s&&c.push(d),s.push(u))}return s}export{pe as A,P as C,k as D,j as E,O as M,D as N,_e as O,L as S,M as T,Zt as _,qn as a,Ie as b,Wn as c,Vn as d,Q as f,K as g,Nn as h,Yn as i,de as j,ge as k,Un as l,Pn as m,Qn as n,Kn as o,Rn as p,Xn as r,Gn as s,tr as t,$ as u,G as v,N as w,R as x,W as y};

package/dist/web/assets/accounts-settings-section-B5YXy0vd.js

@@ -0,0 +1 @@
+import{s as e}from"./rolldown-runtime-C5c2KzVm.js";import{D as t,E as n}from"./vendor-markdown-C-P1aR4p.js";import"./vendor-ui-BTSIXzhZ.js";import{At as r,Cn as i,Cr as a,J as o,Kr as s,Zr as c,cr as l,ht as u,li as d,ln as f,ut as p,xn as m}from"./icons-BwyIKaTT.js";import{a as h}from"./api-client-xQDlhUTu.js";import{n as g}from"./utils-Bslrbb-G.js";import"./portal-container-context-NBi-KGK0.js";import"./chat-preparation-cache-190LLyy7.js";import{n as _}from"./use-is-mobile-VRV9eZy1.js";import{r as v}from"./clipboard-D-VCry-F.js";import{r as y,t as b}from"./button-C9ZXWb3b.js";import{a as x,i as S,n as C,o as w,r as T,t as E}from"./dialog-Dn_2tuYa.js";import{t as D}from"./mobile-bottom-sheet-DArbIyrD.js";import"./use-visual-viewport-MmugpRg-.js";import{t as O}from"./input-C3oVNCMq.js";import{Ai as k,Er as A,Gi as j,Gn as M,Hn as N,Kn as P,Ui as F,Un as I,Vn as ee,Wi as L,Wn as te}from"./index-DLB3j_P0.js";import{_ as ne,a as re,h as ie,m as ae,o as oe,p as se,r as ce,v as le,x as R,y as ue}from"./api-settings-vmIRFNwZ.js";import{_ as de,a as fe,b as pe,c as me,d as he,g as z,h as B,l as ge,m as _e,n as ve,o as ye,p as V,r as be,s as H,t as xe,u as Se,x as U,y as W}from"./codex-reset-credit-button-DQDtyvnd.js";var G=e(t(),1),K=n(),q=[`Mon`,`Tue`,`Wed`,`Thu`,`Fri`,`Sat`,`Sun`],J=Array.from({length:24},(e,t)=>t);function Ce(e,t){let n=Array.from({length:7},()=>Array.from({length:24},()=>({sum:0,count:0,avg:0})));for(let r of e){let e=t===`5h`?r.five_hour_util:r.weekly_util;if(e==null)continue;let i=new Date(r.recorded_at+(r.recorded_at.endsWith(`Z`)?``:`Z`)),a=(i.getDay()+6)%7,o=i.getHours();n[a][o].sum+=e,n[a][o].count+=1}for(let e of n)for(let t of e)t.avg=t.count>0?t.sum/t.count:0;return n}function we(e){return e.map(e=>{let t=e.reduce((e,t)=>e+t.sum,0),n=e.reduce((e,t)=>e+t.count,0);return n>0?t/n:0})}function Te(e){return J.map(t=>{let n=0,r=0;for(let i of e)n+=i[t].sum,r+=i[t].count;return r>0?n/r:0})}function Y(e){return e===0?`bg-surface-elevated`:e<.3?`bg-success/30`:e<.5?`bg-success/60`:e<.7?`bg-warning/50`:e<.9?`bg-warning/80`:`bg-error/80`}function Ee(e){return e<.3?`bg-success`:e<.7?`bg-warning`:`bg-error`}function De({accountId:e}){let[t,n]=(0,G.useState)(null),[r,i]=(0,G.useState)(!0),[a,o]=(0,G.useState)(`5h`);(0,G.useEffect)(()=>{i(!0),se(e).then(n).catch(()=>n([])).finally(()=>i(!1))},[e]);let s=(0,G.useMemo)(()=>t?Ce(t,a):null,[t,a]),c=(0,G.useMemo)(()=>s?we(s):[],[s]),l=(0,G.useMemo)(()=>s?Te(s):[],[s]),u=Math.max(...c,.01);if(Math.max(...l,.01),r)return(0,K.jsx)(`div`,{className:`flex items-center justify-center py-3`,children:(0,K.jsx)(m,{className:`size-3 animate-spin text-text-subtle`})});if(!t||t.length===0)return(0,K.jsx)(`div`,{className:`text-[10px] text-text-subtle py-2 text-center`,children:`No usage history yet`});let d=t.length,f=new Set(t.map(e=>new Date(e.recorded_at+(e.recorded_at.endsWith(`Z`)?``:`Z`)).toDateString())).size;return(0,K.jsxs)(`div`,{className:`mt-2 space-y-2`,children:[(0,K.jsxs)(`div`,{className:`flex items-center justify-between`,children:[(0,K.jsx)(`span`,{className:`text-[10px] font-medium text-text-subtle`,children:`Usage Pattern (7d)`}),(0,K.jsxs)(`div`,{className:`flex gap-0.5 text-[9px]`,children:[(0,K.jsx)(`button`,{onClick:()=>o(`5h`),className:`px-1.5 py-0.5 rounded cursor-pointer transition-colors ${a===`5h`?`bg-primary/15 text-primary`:`text-text-subtle hover:text-text-secondary`}`,title:`5-hour rolling window limit — resets every 5 hours`,children:`5h`}),(0,K.jsx)(`button`,{onClick:()=>o(`weekly`),className:`px-1.5 py-0.5 rounded cursor-pointer transition-colors ${a===`weekly`?`bg-primary/15 text-primary`:`text-text-subtle hover:text-text-secondary`}`,title:`Weekly limit — resets every 7 days`,children:`Wk`})]})]}),(0,K.jsxs)(`p`,{className:`text-[9px] text-text-subtle leading-tight`,children:[`Avg `,a===`5h`?`5-hour`:`weekly`,` limit usage over `,f,`d (`,d,` samples). Higher % = closer to rate limit. Hover cells for details.`]}),(0,K.jsxs)(`div`,{children:[(0,K.jsx)(`span`,{className:`text-[9px] text-text-subtle`,children:`Avg usage by day of week`}),(0,K.jsx)(`div`,{className:`flex flex-col gap-[2px] mt-0.5`,children:q.map((e,t)=>{let n=c[t]??0;return(0,K.jsxs)(`div`,{className:`flex items-center gap-1`,children:[(0,K.jsx)(`span`,{className:`text-[8px] text-text-subtle w-5 shrink-0 text-right tabular-nums`,children:e}),(0,K.jsx)(`div`,{className:`flex-1 h-2.5 bg-surface-elevated rounded-sm overflow-hidden`,children:(0,K.jsx)(`div`,{className:`h-full rounded-sm transition-all ${Ee(n)}`,style:{width:`${Math.round(n/u*100)}%`}})}),(0,K.jsxs)(`span`,{className:`text-[8px] text-text-subtle w-6 shrink-0 text-right tabular-nums`,children:[Math.round(n*100),`%`]})]},e)})})]}),(0,K.jsxs)(`div`,{children:[(0,K.jsx)(`span`,{className:`text-[9px] text-text-subtle`,children:`Avg usage by hour (0h-23h)`}),(0,K.jsx)(`div`,{className:`flex gap-[1px] mt-0.5`,children:J.map(e=>{let t=l[e]??0;return(0,K.jsxs)(`div`,{className:`flex-1 flex flex-col items-center gap-[1px]`,children:[(0,K.jsx)(`div`,{className:`w-full aspect-square rounded-[2px] ${Y(t)}`,title:`${e}:00 — avg ${Math.round(t*100)}% usage`}),e%6==0&&(0,K.jsx)(`span`,{className:`text-[7px] text-text-subtle tabular-nums`,children:e})]},e)})})]}),s&&(0,K.jsxs)(`div`,{children:[(0,K.jsx)(`span`,{className:`text-[9px] text-text-subtle`,children:`Day x Hour heatmap`}),(0,K.jsxs)(`div`,{className:`flex flex-col gap-[1px] mt-0.5`,children:[q.map((e,t)=>(0,K.jsxs)(`div`,{className:`flex items-center gap-[1px]`,children:[(0,K.jsx)(`span`,{className:`text-[7px] text-text-subtle w-4 shrink-0 text-right`,children:e.charAt(0)}),J.map(n=>{let r=s[t][n];return(0,K.jsx)(`div`,{className:`flex-1 aspect-square rounded-[1px] ${Y(r.avg)}`,title:`${e} ${n}:00 — ${r.count>0?`avg ${Math.round(r.avg*100)}% (${r.count} samples)`:`no data`}`},n)})]},e)),(0,K.jsxs)(`div`,{className:`flex items-center gap-[1px]`,children:[(0,K.jsx)(`span`,{className:`w-4 shrink-0`}),J.map(e=>(0,K.jsx)(`div`,{className:`flex-1 text-center`,children:e%6==0&&(0,K.jsx)(`span`,{className:`text-[7px] text-text-subtle tabular-nums`,children:e})},e))]})]})]}),(0,K.jsxs)(`div`,{className:`flex items-center gap-1.5 text-[8px] text-text-subtle`,children:[(0,K.jsx)(`span`,{children:`Low`}),(0,K.jsxs)(`div`,{className:`flex gap-[2px]`,children:[(0,K.jsx)(`div`,{className:`size-2 rounded-[1px] bg-success/30`}),(0,K.jsx)(`div`,{className:`size-2 rounded-[1px] bg-success/60`}),(0,K.jsx)(`div`,{className:`size-2 rounded-[1px] bg-warning/50`}),(0,K.jsx)(`div`,{className:`size-2 rounded-[1px] bg-warning/80`}),(0,K.jsx)(`div`,{className:`size-2 rounded-[1px] bg-error/80`})]}),(0,K.jsx)(`span`,{children:`High`}),(0,K.jsx)(`span`,{className:`ml-1`,children:`|`}),(0,K.jsx)(`div`,{className:`size-2 rounded-[1px] bg-surface-elevated border border-border/30`}),(0,K.jsx)(`span`,{children:`No data`})]})]})}function Oe({profile:e,accountId:t,onClose:n}){let r=[[`Name`,e.account?.display_name],[`Email`,e.account?.email],[`Org`,e.organization?.name],[`Type`,e.organization?.organization_type],[`Tier`,e.organization?.rate_limit_tier],[`Status`,e.organization?.subscription_status]];return(0,K.jsxs)(`section`,{className:`space-y-2 border-t border-border pt-3`,"data-testid":`account-profile-panel`,children:[(0,K.jsxs)(`div`,{className:`flex items-center justify-between`,children:[(0,K.jsx)(`h3`,{className:`text-sm font-medium`,children:`Profile`}),(0,K.jsx)(`button`,{className:`p-2 text-muted-foreground hover:text-foreground cursor-pointer`,onClick:n,"aria-label":`Close profile`,children:(0,K.jsx)(d,{className:`size-4`})})]}),(0,K.jsx)(`div`,{className:`grid grid-cols-[80px_1fr] gap-x-3 gap-y-1 text-xs`,children:r.map(([e,t])=>t?(0,K.jsxs)(`span`,{className:`contents`,children:[(0,K.jsx)(`span`,{className:`text-muted-foreground`,children:e}),(0,K.jsx)(`span`,{className:`break-all`,children:t})]},e):null)}),(0,K.jsx)(De,{accountId:t})]})}function ke({display:e,onConfirm:t,onCancel:n}){let r=_(),i=(0,K.jsxs)(`div`,{className:`space-y-4`,"data-testid":`account-delete-confirm`,children:[(0,K.jsxs)(`p`,{className:`text-sm`,children:[`Remove `,(0,K.jsx)(`span`,{className:`font-medium`,children:e}),`?`]}),(0,K.jsx)(`p`,{className:`text-xs text-text-subtle`,children:`The stored token is deleted from this machine. Any export you already made keeps working.`}),(0,K.jsxs)(`div`,{className:`flex flex-col-reverse md:flex-row gap-2 md:justify-end pt-2`,children:[(0,K.jsx)(b,{variant:`outline`,onClick:n,className:`min-h-11`,children:`Cancel`}),(0,K.jsx)(b,{variant:`destructive`,autoFocus:!1,onClick:t,className:`min-h-11`,children:`Remove account`})]})]});return r?(0,K.jsx)(D,{open:!0,onClose:n,children:(0,K.jsxs)(`div`,{className:`px-4 pb-4`,children:[(0,K.jsx)(`h2`,{className:`text-base font-semibold mb-3`,children:`Remove account`}),i]})}):(0,K.jsx)(E,{open:!0,onOpenChange:e=>{e||n()},children:(0,K.jsxs)(C,{className:`sm:max-w-sm`,children:[(0,K.jsx)(x,{children:(0,K.jsx)(w,{className:`text-sm`,children:`Remove account`})}),i]})})}function Ae(e){let t=new Blob([e],{type:`application/json`}),n=document.createElement(`a`);n.href=URL.createObjectURL(t),n.download=`ppm-accounts-backup.json`,n.click(),URL.revokeObjectURL(n.href)}function je({open:e,onOpenChange:t,accounts:n,preselectId:r,onMessage:a}){let o=n.filter(e=>e.hasRefreshToken),[s,c]=(0,G.useState)(new Set),[l,d]=(0,G.useState)(``),[f,g]=(0,G.useState)(!1),[_,y]=(0,G.useState)(!1),[D,k]=(0,G.useState)(!1),[j,M]=(0,G.useState)(!1);e&&!j&&(c(r?new Set([r]):new Set(o.map(e=>e.id))),M(!0)),!e&&j&&M(!1);function N(){t(!1),d(``),g(!1),y(!1)}async function P(e){if(s.size===0)return;k(!0);let t=l.trim()||`ppm-hienlh`;try{let n={"Content-Type":`application/json`},r=h();r&&(n.Authorization=`Bearer ${r}`);let i=await fetch(`/api/accounts/export`,{method:`POST`,headers:n,body:JSON.stringify({password:t,accountIds:[...s],includeRefreshToken:f,refreshBeforeExport:_})});if(!i.ok){let e=await i.json();throw Error(e.error??`Export failed: ${i.status}`)}let o=await i.text();e&&await v(o)?a?.(`Backup copied to clipboard!`):(Ae(o),a?.(`Backup downloaded.`)),N()}catch{}k(!1)}let F=s.size>0&&!D;return(0,K.jsx)(E,{open:e,onOpenChange:e=>{e||N()},children:(0,K.jsxs)(C,{className:`sm:max-w-md`,children:[(0,K.jsxs)(x,{children:[(0,K.jsxs)(w,{className:`text-sm flex items-center gap-1.5`,children:[(0,K.jsx)(i,{className:`size-3.5`}),` Export Accounts`]}),(0,K.jsx)(T,{className:`text-xs`,children:`Select accounts and set a password to protect the backup.`})]}),(0,K.jsxs)(`div`,{className:`space-y-3`,children:[(0,K.jsxs)(`div`,{className:`space-y-1`,children:[(0,K.jsxs)(`div`,{className:`flex items-center justify-between mb-1`,children:[(0,K.jsx)(`p`,{className:`text-[11px] font-medium text-muted-foreground`,children:`Accounts to export`}),(0,K.jsx)(`button`,{className:`text-[10px] text-primary hover:underline cursor-pointer`,onClick:()=>c(s.size===o.length?new Set:new Set(o.map(e=>e.id))),children:s.size===o.length?`Deselect all`:`Select all`})]}),o.length===0?(0,K.jsx)(`p`,{className:`text-[10px] text-muted-foreground p-2 border rounded`,children:`No exportable accounts.`}):(0,K.jsx)(`div`,{className:`max-h-36 overflow-y-auto space-y-1 border rounded p-2`,children:o.map(e=>(0,K.jsxs)(`div`,{className:`flex items-center gap-2`,children:[(0,K.jsx)(`input`,{type:`checkbox`,id:`exp-${e.id}`,checked:s.has(e.id),onChange:t=>{let n=new Set(s);t.target.checked?n.add(e.id):n.delete(e.id),c(n)},className:`size-3.5 accent-primary cursor-pointer`}),(0,K.jsx)(`label`,{htmlFor:`exp-${e.id}`,className:`text-xs cursor-pointer truncate`,children:e.label??e.email??e.id.slice(0,8)})]},e.id))})]}),(0,K.jsxs)(`div`,{className:`space-y-1.5`,children:[(0,K.jsxs)(A,{className:`text-xs`,children:[`Password `,(0,K.jsx)(`span`,{className:`text-muted-foreground font-normal`,children:`(optional)`})]}),(0,K.jsx)(O,{type:`password`,placeholder:`Leave empty for default`,value:l,onChange:e=>d(e.target.value),className:`text-xs h-8`,autoComplete:`new-password`})]}),(0,K.jsxs)(`div`,{className:`flex items-center gap-2`,children:[(0,K.jsx)(`input`,{type:`checkbox`,id:`exp-full`,checked:f,onChange:e=>g(e.target.checked),className:`size-3.5 accent-primary cursor-pointer`}),(0,K.jsx)(`label`,{htmlFor:`exp-full`,className:`text-[11px] cursor-pointer`,children:`Include refresh tokens (full transfer)`})]}),(0,K.jsxs)(`div`,{className:`flex items-center gap-2`,children:[(0,K.jsx)(`input`,{type:`checkbox`,id:`exp-refresh`,checked:_,onChange:e=>y(e.target.checked),className:`size-3.5 accent-primary cursor-pointer`}),(0,K.jsx)(`label`,{htmlFor:`exp-refresh`,className:`text-[11px] cursor-pointer`,children:`Refresh tokens before export`})]}),f?(0,K.jsxs)(`div`,{className:`rounded-md border border-error/30 bg-error/5 p-2.5`,children:[(0,K.jsx)(`p`,{className:`text-[10px] font-medium text-error`,children:`Full transfer — source accounts will expire`}),(0,K.jsx)(`p`,{className:`text-[10px] text-muted-foreground`,children:`Refresh tokens included. Source machine expires in ~1h after target refreshes.`})]}):_?(0,K.jsx)(`div`,{className:`rounded-md border border-warning/30 bg-warning/5 p-2.5`,children:(0,K.jsx)(`p`,{className:`text-[10px] font-medium text-warning`,children:`Refresh before export — invalidates previous shares`})}):(0,K.jsx)(`div`,{className:`rounded-md border border-success/30 bg-success/5 p-2.5`,children:(0,K.jsx)(`p`,{className:`text-[10px] font-medium text-success`,children:`Share current token (safe)`})}),(0,K.jsx)(`p`,{className:`text-[10px] text-muted-foreground`,children:`Encrypted with AES-256-GCM + scrypt.`})]}),(0,K.jsxs)(S,{className:`gap-1.5 flex-col sm:flex-row`,children:[(0,K.jsx)(b,{size:`sm`,variant:`outline`,className:`text-xs h-7 cursor-pointer`,onClick:N,children:`Cancel`}),(0,K.jsxs)(b,{size:`sm`,variant:`outline`,className:`text-xs h-7 cursor-pointer`,disabled:!F,onClick:()=>P(!0),children:[(0,K.jsx)(p,{className:`size-3 mr-1`}),` Copy`]}),(0,K.jsx)(b,{size:`sm`,className:`text-xs h-7 cursor-pointer`,disabled:!F,onClick:()=>P(!1),children:D?(0,K.jsxs)(K.Fragment,{children:[(0,K.jsx)(m,{className:`size-3 animate-spin mr-1`}),` Exporting...`]}):(0,K.jsxs)(K.Fragment,{children:[(0,K.jsx)(u,{className:`size-3 mr-1`}),` Download`]})})]})]})})}function Me({open:e,onOpenChange:t,onSuccess:n}){let[r,a]=(0,G.useState)(``),[o,s]=(0,G.useState)(``),[c,l]=(0,G.useState)(!1),[u,d]=(0,G.useState)(null);function f(){t(!1),a(``),s(``),d(null)}async function p(){if(r.trim()){l(!0),d(null);try{let e=await ae({data:r.trim(),password:o.trim()||`ppm-hienlh`});f(),n(`Imported ${e.imported} account(s)`)}catch(e){d(e.message||`Import failed`)}l(!1)}}return(0,K.jsx)(E,{open:e,onOpenChange:e=>{e||f()},children:(0,K.jsxs)(C,{className:`sm:max-w-md`,children:[(0,K.jsxs)(x,{children:[(0,K.jsxs)(w,{className:`text-sm flex items-center gap-1.5`,children:[(0,K.jsx)(i,{className:`size-3.5`}),` Import Accounts`]}),(0,K.jsx)(T,{className:`text-xs`,children:`Paste backup data and enter the export password. Imported accounts are temporary (~1h).`})]}),(0,K.jsxs)(`div`,{className:`space-y-3`,children:[(0,K.jsxs)(`div`,{className:`space-y-1.5`,children:[(0,K.jsx)(A,{className:`text-xs`,children:`Backup data`}),(0,K.jsx)(`textarea`,{value:r,onChange:e=>a(e.target.value),placeholder:`Paste backup JSON here...`,rows:4,className:`w-full text-xs p-2 rounded border border-border bg-background font-mono resize-none focus:outline-none focus:ring-1 focus:ring-primary`})]}),(0,K.jsxs)(`div`,{className:`space-y-1.5`,children:[(0,K.jsxs)(A,{className:`text-xs`,children:[`Password `,(0,K.jsx)(`span`,{className:`text-muted-foreground font-normal`,children:`(optional)`})]}),(0,K.jsx)(O,{type:`password`,placeholder:`Leave empty for default`,value:o,onChange:e=>s(e.target.value),className:`text-xs h-8`,autoComplete:`current-password`})]})]}),u&&(0,K.jsx)(`div`,{className:`text-[11px] p-2 rounded bg-error/10 text-error`,children:u}),(0,K.jsxs)(S,{children:[(0,K.jsx)(b,{size:`sm`,variant:`outline`,className:`text-xs h-7 cursor-pointer`,onClick:f,children:`Cancel`}),(0,K.jsx)(b,{size:`sm`,className:`text-xs h-7 cursor-pointer`,disabled:!r.trim()||c,onClick:p,children:c?(0,K.jsxs)(K.Fragment,{children:[(0,K.jsx)(m,{className:`size-3 animate-spin mr-1`}),` Importing...`]}):`Import`})]})]})})}var X=typeof window<`u`?window.matchMedia(`(min-width: 768px)`):null;function Ne(e){return X?.addEventListener(`change`,e),()=>X?.removeEventListener(`change`,e)}function Pe(){return X?.matches??!0}function Z(){let[e,t]=(0,G.useState)(null),[n,r]=(0,G.useState)(!0);return(0,G.useEffect)(()=>{r(!0),oe().then(t).finally(()=>r(!1))},[]),n?(0,K.jsx)(`p`,{className:`text-xs text-text-subtle py-4 text-center`,children:`Loading...`}):e?(0,K.jsxs)(`div`,{className:`space-y-4`,children:[(0,K.jsxs)(`div`,{className:`space-y-1.5`,children:[(0,K.jsx)(`label`,{className:`text-xs font-medium text-text-primary`,children:`Rotation Strategy`}),(0,K.jsxs)(ee,{value:e.strategy,onValueChange:async e=>{t(await R({strategy:e}))},children:[(0,K.jsx)(te,{className:`w-full h-9 text-xs`,children:(0,K.jsx)(M,{})}),(0,K.jsxs)(N,{children:[(0,K.jsx)(I,{value:`round-robin`,children:`Round-robin`}),(0,K.jsx)(I,{value:`fill-first`,children:`Fill-first`}),(0,K.jsx)(I,{value:`lowest-usage`,children:`Lowest usage`})]})]}),(0,K.jsxs)(`p`,{className:`text-[10px] text-text-subtle`,children:[e.strategy===`round-robin`&&`Cycles through accounts evenly`,e.strategy===`fill-first`&&`Uses one account until its limit, then moves on`,e.strategy===`lowest-usage`&&`Picks the account with the lowest current usage`]})]}),(0,K.jsxs)(`div`,{className:`space-y-1.5`,children:[(0,K.jsx)(`label`,{className:`text-xs font-medium text-text-primary`,children:`Max Retry`}),(0,K.jsx)(`input`,{type:`number`,min:0,value:e.maxRetry,className:`w-full h-9 text-xs border rounded-md px-3 bg-background`,onChange:async e=>{let n=parseInt(e.target.value,10);!isNaN(n)&&n>=0&&t(await R({maxRetry:n}))}}),(0,K.jsx)(`p`,{className:`text-[10px] text-text-subtle`,children:`How many accounts to try on failure. 0 = try all available accounts.`})]}),(0,K.jsxs)(`div`,{className:`space-y-1.5 border-t border-border pt-3`,children:[(0,K.jsxs)(`div`,{className:`flex items-center justify-between`,children:[(0,K.jsx)(`label`,{className:`text-xs font-medium text-text-primary`,children:`Cooldown parking`}),(0,K.jsx)(P,{checked:e.cooldownEnabled,onCheckedChange:async e=>{t(await R({cooldownEnabled:e}))}})]}),(0,K.jsx)(`p`,{className:`text-[10px] text-text-subtle`,children:`Park a failing account (rate limit / usage limit / auth error) until it recovers. Off: accounts stay selectable — rotation still skips accounts already ≥95% on the 5-hour limit.`})]}),(0,K.jsxs)(`div`,{className:`flex items-center justify-between text-xs border-t border-border pt-3`,children:[(0,K.jsx)(`span`,{className:`text-text-subtle`,children:`Active accounts`}),(0,K.jsx)(`span`,{className:`font-medium text-text-primary`,children:e.activeCount})]})]}):(0,K.jsx)(`p`,{className:`text-xs text-text-subtle py-4 text-center`,children:`Failed to load settings`})}function Fe({open:e,onOpenChange:t}){let n=(0,G.useSyncExternalStore)(Ne,Pe);return e?n?(0,K.jsx)(E,{open:e,onOpenChange:t,children:(0,K.jsxs)(C,{className:`sm:max-w-sm`,children:[(0,K.jsx)(x,{children:(0,K.jsxs)(w,{className:`text-sm flex items-center gap-2`,children:[(0,K.jsx)(a,{className:`size-4`}),` Rotation & Retry`]})}),(0,K.jsx)(Z,{})]})}):(0,K.jsxs)(K.Fragment,{children:[(0,K.jsx)(`div`,{className:`fixed inset-0 z-50 transition-opacity duration-200 opacity-100`,onClick:()=>t(!1),style:{backgroundColor:`rgba(0,0,0,0.5)`}}),(0,K.jsxs)(`div`,{className:g(`fixed bottom-0 left-0 right-0 z-50 bg-background rounded-t-2xl border-t border-border shadow-2xl`,`transition-transform duration-300 ease-out max-h-[85vh] overflow-y-auto`,`translate-y-0`),children:[(0,K.jsx)(`div`,{className:`flex justify-center pt-3 pb-1`,children:(0,K.jsx)(`div`,{className:`w-10 h-1 rounded-full bg-border`})}),(0,K.jsxs)(`div`,{className:`flex items-center justify-between px-4 py-2 border-b border-border`,children:[(0,K.jsxs)(`span`,{className:`text-sm font-semibold flex items-center gap-2`,children:[(0,K.jsx)(a,{className:`size-4`}),` Rotation & Retry`]}),(0,K.jsx)(`button`,{onClick:()=>t(!1),className:`flex items-center justify-center size-7 rounded-md hover:bg-surface-elevated transition-colors`,children:(0,K.jsx)(d,{className:`size-4`})})]}),(0,K.jsx)(`div`,{className:`px-4 py-4 pb-8`,children:(0,K.jsx)(Z,{})})]})]}):null}var Ie=y(`inline-flex items-center rounded-md border px-2.5 py-0.5 text-xs font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2`,{variants:{variant:{default:`border-transparent bg-primary text-primary-foreground shadow`,secondary:`border-transparent bg-secondary text-secondary-foreground`,destructive:`border-transparent bg-destructive text-destructive-foreground shadow`,outline:`text-foreground`}},defaultVariants:{variant:`default`}});function Q({className:e,variant:t,...n}){return(0,K.jsx)(`div`,{className:g(Ie({variant:t}),e),...n})}function Le(e){let t=Math.floor(Date.now()/1e3);return e>t?`${Math.floor((e-t)/60)}m`:`exp`}function Re({accounts:e}){let[t,n]=(0,G.useState)([]),[r,i]=(0,G.useState)(!1),[a,o]=(0,G.useState)(!1),[s,c]=(0,G.useState)(new Map),l=e.filter(e=>e.hasRefreshToken);async function u(){if(l.length!==0){i(!0);try{let e=await le(l.map(e=>e.id),a);n(t=>[...t,{round:t.length+1,time:new Date().toLocaleTimeString(),includeRefresh:a,items:e}])}catch{}i(!1)}}async function d(e,t){c(t=>new Map(t).set(e,{loading:!0}));try{let n=await ue(t);c(t=>new Map(t).set(e,{loading:!1,...n}))}catch(t){c(n=>new Map(n).set(e,{loading:!1,status:`error`,error:t.message}))}}function f(e,t){return[{key:`r${e.round}-pre-${t.id}`,label:`Pre-export`,token:t.preExportTokenFull,preview:t.preExportToken,expires:t.preExportExpires},{key:`r${e.round}-exp-${t.id}`,label:`Exported`,token:t.exportedTokenFull,preview:t.exportedToken,expires:t.exportedExpires},{key:`r${e.round}-post-${t.id}`,label:`Post-export`,token:t.postExportTokenFull,preview:t.postExportToken,expires:t.postExportExpires}]}function p(){for(let e of t)for(let t of e.items)for(let n of f(e,t))n.token&&d(n.key,n.token)}return(0,K.jsxs)(`section`,{className:`border-t pt-4 space-y-2`,children:[(0,K.jsxs)(`div`,{className:`flex items-center justify-between gap-2`,children:[(0,K.jsx)(`p`,{className:`text-xs font-medium`,children:`Simulate export`}),t.length>0&&(0,K.jsxs)(`span`,{className:`text-[10px] text-muted-foreground`,children:[t.length,` round(s)`]})]}),(0,K.jsx)(`p`,{className:`text-[11px] text-muted-foreground`,children:`Every run appends a round. Earlier rounds are kept so tokens can be compared across runs.`}),l.length===0?(0,K.jsx)(`p`,{className:`text-xs text-muted-foreground`,children:`No OAuth account with a refresh token to export.`}):(0,K.jsxs)(`div`,{className:`flex items-center gap-3`,children:[(0,K.jsxs)(`div`,{className:`flex items-center gap-1.5`,children:[(0,K.jsx)(P,{id:`sim-include-refresh`,checked:a,onCheckedChange:o,className:`cursor-pointer`}),(0,K.jsx)(A,{htmlFor:`sim-include-refresh`,className:`text-[11px] cursor-pointer`,children:`Include refresh tokens`})]}),(0,K.jsx)(b,{size:`sm`,className:`h-7 text-xs cursor-pointer`,disabled:r,onClick:()=>void u(),children:r?(0,K.jsxs)(K.Fragment,{children:[(0,K.jsx)(m,{className:`size-3 animate-spin mr-1`}),` Exporting...`]}):`Run export #${t.length+1}`})]}),t.length>0&&(0,K.jsxs)(`div`,{className:`space-y-3`,children:[(0,K.jsxs)(b,{size:`sm`,variant:`outline`,className:`w-full h-7 text-[11px] cursor-pointer`,onClick:p,children:[`Test all tokens (`,t.reduce((e,t)=>e+t.items.length*3,0),`)`]}),t.map(e=>(0,K.jsxs)(`div`,{className:`space-y-1.5`,children:[(0,K.jsxs)(`div`,{className:`flex items-center gap-2`,children:[(0,K.jsxs)(`p`,{className:`text-xs font-medium text-primary`,children:[`Round #`,e.round]}),(0,K.jsx)(`span`,{className:`text-[10px] text-muted-foreground`,children:e.time}),(0,K.jsx)(Q,{variant:e.includeRefresh?`destructive`:`secondary`,className:`text-[9px] px-1 py-0`,children:e.includeRefresh?`with refresh`:`access only`})]}),e.items.map(t=>(0,K.jsxs)(`div`,{className:`p-2 rounded-lg border bg-card space-y-1.5`,children:[(0,K.jsxs)(`div`,{className:`flex items-center gap-2`,children:[(0,K.jsx)(`span`,{className:`text-[11px] font-medium`,children:t.label??t.email??t.id.slice(0,8)}),t.tokenChanged&&(0,K.jsx)(Q,{variant:`secondary`,className:`text-[9px] px-1 py-0`,children:`DB token changed`})]}),f(e,t).map(e=>{let t=s.get(e.key);return(0,K.jsxs)(`div`,{className:`flex items-center gap-1.5 text-[11px]`,children:[(0,K.jsx)(`span`,{className:`w-20 shrink-0 text-muted-foreground text-[10px]`,children:e.label}),(0,K.jsx)(`code`,{className:`flex-1 truncate font-mono text-[10px] bg-muted px-1 rounded`,children:e.preview??`N/A`}),e.expires&&(0,K.jsx)(`span`,{className:`text-[10px] text-muted-foreground shrink-0`,children:Le(e.expires)}),e.token?(0,K.jsx)(b,{size:`sm`,variant:`outline`,className:`h-6 text-[10px] px-1.5 cursor-pointer shrink-0`,disabled:t?.loading,onClick:()=>void d(e.key,e.token),children:t?.loading?(0,K.jsx)(m,{className:`size-3 animate-spin`}):`Test`}):(0,K.jsx)(`span`,{className:`text-[10px] text-muted-foreground`,children:`-`}),t&&!t.loading&&(0,K.jsx)(`span`,{className:`text-[10px] font-medium shrink-0 ${t.status?.startsWith(`valid`)?`text-success`:`text-error`}`,children:t.status})]},e.key)})]},`r${e.round}-${t.id}`))]},e.round))]})]})}function ze(e){let t=Math.floor(Date.now()/1e3),n=Math.floor(Math.abs(e-t)/60);return e>t?`${n}m left`:`expired ${n}m ago`}function Be({open:e,onOpenChange:t,accounts:n}){let[i,a]=(0,G.useState)(new Map),[o,s]=(0,G.useState)(!1);async function c(e){a(t=>new Map(t).set(e,{loading:!0}));try{let t=await ne(e,o);a(n=>new Map(n).set(e,{loading:!1,result:t}))}catch(t){a(n=>new Map(n).set(e,{loading:!1,error:t.message}))}}function l(){for(let e of n.filter(e=>e.expiresAt!==null))c(e.id)}return(0,K.jsx)(E,{open:e,onOpenChange:t,children:(0,K.jsxs)(C,{className:`sm:max-w-xl max-h-[85vh] flex flex-col`,children:[(0,K.jsxs)(x,{children:[(0,K.jsxs)(w,{className:`text-sm flex items-center gap-1.5`,children:[(0,K.jsx)(r,{className:`size-4`}),` Token Test`]}),(0,K.jsx)(T,{className:`text-xs`,children:`Probe stored tokens for validity. Nothing is modified.`})]}),(0,K.jsxs)(`div`,{className:`space-y-4 overflow-y-auto flex-1 pr-1`,children:[(0,K.jsxs)(`section`,{className:`space-y-2`,children:[(0,K.jsxs)(`div`,{className:`flex items-center justify-between gap-2`,children:[(0,K.jsx)(`p`,{className:`text-xs font-medium`,children:`Current tokens`}),(0,K.jsxs)(`div`,{className:`flex items-center gap-3`,children:[(0,K.jsxs)(`div`,{className:`flex items-center gap-1.5`,children:[(0,K.jsx)(P,{id:`token-test-refresh`,checked:o,onCheckedChange:s,className:`cursor-pointer`}),(0,K.jsx)(A,{htmlFor:`token-test-refresh`,className:`text-[11px] cursor-pointer`,children:`Also test refresh`})]}),(0,K.jsx)(b,{size:`sm`,variant:`outline`,className:`h-7 text-xs cursor-pointer`,onClick:l,children:`Test all`})]})]}),n.length===0&&(0,K.jsx)(`p`,{className:`text-xs text-muted-foreground`,children:`No accounts to test.`}),(0,K.jsx)(`div`,{className:`space-y-1.5`,children:n.map(e=>{let t=i.get(e.id),n=t?.result?.accessToken.status;return(0,K.jsxs)(`div`,{className:`p-2 rounded border bg-card space-y-1`,children:[(0,K.jsxs)(`div`,{className:`flex items-center justify-between gap-2`,children:[(0,K.jsxs)(`div`,{className:`min-w-0 flex-1`,children:[(0,K.jsx)(`span`,{className:`text-xs font-medium truncate block`,children:e.label??e.email??e.id.slice(0,8)}),e.expiresAt&&(0,K.jsx)(`span`,{className:`text-[10px] text-muted-foreground`,children:ze(e.expiresAt)})]}),(0,K.jsx)(b,{size:`sm`,variant:`outline`,className:`h-7 text-xs cursor-pointer shrink-0`,disabled:t?.loading,onClick:()=>void c(e.id),children:t?.loading?(0,K.jsx)(m,{className:`size-3 animate-spin`}):`Test`})]}),t&&!t.loading&&(0,K.jsxs)(`div`,{className:`text-[11px] pl-2 border-l-2 border-muted`,children:[t.error&&(0,K.jsx)(`p`,{className:`text-error`,children:t.error}),n&&(0,K.jsxs)(`span`,{className:n.startsWith(`valid`)?`text-success`:`text-error`,children:[n,t.result?.accessToken.code?` (${t.result.accessToken.code})`:``]})]})]},e.id)})})]}),(0,K.jsx)(Re,{accounts:n})]}),(0,K.jsx)(S,{children:(0,K.jsx)(b,{size:`sm`,variant:`outline`,className:`text-xs cursor-pointer`,onClick:()=>t(!1),children:`Close`})})]})})}function Ve(){let{usages:e,accounts:t,activeAccountId:n,initialLoading:i,refreshing:o,flashIds:s,reload:d}=ge(),[p,h]=(0,G.useState)(null),[g,_]=(0,G.useState)(null),[v,y]=(0,G.useState)(null),[x,S]=(0,G.useState)(null),[C,w]=(0,G.useState)(null),[T,E]=(0,G.useState)(null),[D,O]=(0,G.useState)(void 0);function k(e){d(),e&&h(e)}async function A(e,t){_(e);try{await ie(e,{status:t===`disabled`?`active`:`disabled`})}catch(e){h(e.message)}_(null),d()}async function j(){if(v){try{await ce(v.id),h(`Account "${v.display}" removed.`),d()}catch(e){h(`Failed to remove: ${e.message}`)}y(null)}}let M=new Map(t.map(e=>[e.id,e])),N=e[0]?.usage.lastFetchedAt;return(0,K.jsxs)(`div`,{className:`space-y-4`,children:[(0,K.jsx)(B,{description:`Connect multiple Claude accounts. PPM rotates between them automatically to avoid rate limits.`,onRefresh:()=>void d(),refreshing:o,disabled:i,actions:(0,K.jsxs)(K.Fragment,{children:[(0,K.jsxs)(b,{size:`sm`,className:`cursor-pointer gap-1.5`,onClick:()=>{O(void 0),E(`add`)},children:[(0,K.jsx)(l,{className:`size-4`}),` Add account`]}),(0,K.jsxs)(b,{size:`sm`,variant:`outline`,className:`cursor-pointer gap-1.5`,onClick:()=>{w(null),E(`export`)},children:[(0,K.jsx)(u,{className:`size-4`}),` Export`]}),(0,K.jsxs)(b,{size:`sm`,variant:`outline`,className:`cursor-pointer gap-1.5`,onClick:()=>E(`import`),children:[(0,K.jsx)(c,{className:`size-4`}),` Import`]}),(0,K.jsxs)(b,{size:`sm`,variant:`outline`,className:`cursor-pointer gap-1.5`,onClick:()=>E(`rotation`),children:[(0,K.jsx)(a,{className:`size-4`}),` Rotation`]}),(0,K.jsxs)(b,{size:`sm`,variant:`outline`,className:`cursor-pointer gap-1.5`,onClick:()=>E(`token-test`),children:[(0,K.jsx)(r,{className:`size-4`}),` Token test`]})]})}),(0,K.jsx)(z,{message:p,onDismiss:()=>h(null)}),(0,K.jsxs)(`section`,{className:`space-y-2`,children:[(0,K.jsxs)(`div`,{className:`flex items-center justify-between`,children:[(0,K.jsx)(`h3`,{className:`text-sm font-medium`,children:`Accounts`}),N&&(0,K.jsxs)(`span`,{className:`text-[10px] text-muted-foreground`,children:[`usage `,pe(new Date(N).getTime())]})]}),i?(0,K.jsxs)(`div`,{className:`flex items-center gap-2 py-6 text-xs text-muted-foreground`,children:[(0,K.jsx)(m,{className:`size-4 animate-spin`}),` Loading accounts...`]}):e.length===0?(0,K.jsxs)(`div`,{className:`flex flex-col items-center gap-2 py-8 text-center`,children:[(0,K.jsx)(f,{className:`size-5 text-muted-foreground`}),(0,K.jsx)(`p`,{className:`text-sm text-muted-foreground`,children:`No accounts connected yet.`}),(0,K.jsx)(`p`,{className:`text-xs text-muted-foreground`,children:`Add one to start using PPM.`})]}):(0,K.jsx)(V,{children:e.map(e=>(0,K.jsx)(Se,{layout:`strip`,entry:e,isActive:e.accountId===n,accountInfo:M.get(e.accountId),onToggle:A,toggling:g===e.accountId,onDelete:(e,t)=>y({id:e,display:t}),onExport:e=>{w(e),E(`export`)},onViewProfile:(e,t)=>S({profile:e,accountId:t}),onReauth:()=>{O({id:e.accountId,label:e.accountLabel??e.accountId.slice(0,8)}),E(`add`)},flash:s.has(e.accountId)},e.accountId))})]}),x&&(0,K.jsx)(Oe,{profile:x.profile,accountId:x.accountId,onClose:()=>S(null)}),v&&(0,K.jsx)(ke,{display:v.display,onConfirm:()=>void j(),onCancel:()=>y(null)}),(0,K.jsx)(me,{open:T===`add`,onOpenChange:e=>{E(e?`add`:null),e||O(void 0)},onSuccess:k,signInAgainFor:D}),(0,K.jsx)(je,{open:T===`export`,onOpenChange:e=>{E(e?`export`:null),e||w(null)},accounts:t,preselectId:C,onMessage:h}),(0,K.jsx)(Me,{open:T===`import`,onOpenChange:e=>E(e?`import`:null),onSuccess:k}),(0,K.jsx)(Fe,{open:T===`rotation`,onOpenChange:e=>E(e?`rotation`:null)}),(0,K.jsx)(Be,{open:T===`token-test`,onOpenChange:e=>E(e?`token-test`:null),accounts:t})]})}function He({mode:e,onOpenChange:t,password:n,onPasswordChange:r,busy:a,onExport:o,onImport:s,error:l}){let d=(0,G.useRef)(null),f=e===`export`;return(0,K.jsx)(E,{open:e!==null,onOpenChange:t,children:(0,K.jsxs)(C,{className:`sm:max-w-md`,children:[(0,K.jsxs)(x,{children:[(0,K.jsxs)(w,{className:`text-sm flex items-center gap-1.5`,children:[(0,K.jsx)(i,{className:`size-4`}),` `,f?`Export Codex Accounts`:`Import Codex Accounts`]}),(0,K.jsx)(T,{className:`text-xs leading-relaxed`,children:f?`Writes a password-encrypted file containing each account's login.`:`Reads a backup file. The password must be the one it was exported with.`})]}),(0,K.jsxs)(`div`,{className:`space-y-1.5`,children:[(0,K.jsx)(A,{htmlFor:`codex-backup-password`,className:`text-xs`,children:`Password`}),(0,K.jsx)(O,{id:`codex-backup-password`,type:`password`,placeholder:f?`Choose a password`:`Password used for the export`,value:n,onChange:e=>r(e.target.value),className:`text-xs`,autoComplete:f?`new-password`:`current-password`}),(0,K.jsx)(`p`,{className:`text-[10px] text-muted-foreground`,children:`A backup holds full logins — keep the file and its password together.`})]}),l&&(0,K.jsx)(`div`,{className:`text-[11px] p-2 rounded bg-error/10 text-error`,children:l}),(0,K.jsx)(`input`,{ref:d,type:`file`,accept:`application/json,.json`,className:`hidden`,onChange:e=>{let t=e.target.files?.[0];e.target.value=``,t&&s(t)}}),(0,K.jsxs)(S,{children:[(0,K.jsx)(b,{size:`sm`,variant:`outline`,className:`text-xs cursor-pointer`,onClick:()=>t(!1),children:`Cancel`}),(0,K.jsxs)(b,{size:`sm`,className:`text-xs cursor-pointer gap-1.5`,disabled:!n.trim()||a,onClick:()=>f?o():d.current?.click(),children:[a?(0,K.jsx)(m,{className:`size-3.5 animate-spin`}):f?(0,K.jsx)(u,{className:`size-3.5`}):(0,K.jsx)(c,{className:`size-3.5`}),f?`Download backup`:`Choose file`]})]})]})})}var Ue=[{value:`round-robin`,label:`Round-robin`,hint:`Take the next account each time.`},{value:`fill-first`,label:`Fill-first`,hint:`Stay on one account until it runs out.`},{value:`lowest-usage`,label:`Lowest usage`,hint:`Pick whichever has the most left.`}];function We({open:e,onOpenChange:t,strategy:n,onChange:r}){return(0,K.jsx)(E,{open:e,onOpenChange:t,children:(0,K.jsxs)(C,{className:`sm:max-w-md`,children:[(0,K.jsxs)(x,{children:[(0,K.jsx)(w,{className:`text-sm`,children:`Codex Rotation`}),(0,K.jsx)(T,{className:`text-xs leading-relaxed`,children:`How a new chat chooses among your Codex accounts.`})]}),(0,K.jsx)(`div`,{className:`space-y-2`,children:Ue.map(e=>(0,K.jsxs)(`button`,{type:`button`,onClick:()=>r(e.value),"aria-current":n===e.value?`true`:void 0,className:g(`w-full text-left rounded-md border px-3 py-2.5 min-h-11 cursor-pointer transition-colors`,n===e.value?`border-primary bg-primary/10`:`border-border hover:bg-accent/50 active:bg-accent`),children:[(0,K.jsx)(`p`,{className:`text-sm font-medium`,children:e.label}),(0,K.jsx)(`p`,{className:`text-xs text-muted-foreground`,children:e.hint})]},e.value))}),(0,K.jsx)(S,{children:(0,K.jsx)(b,{size:`sm`,variant:`outline`,className:`text-xs cursor-pointer`,onClick:()=>t(!1),children:`Done`})})]})})}function $(e){return e==null?null:Math.round(e*100)}function Ge({usage:e}){let t=e.session==null&&e.weekly==null;return(0,K.jsxs)(`div`,{className:`space-y-2`,children:[(t||e.session!=null)&&(0,K.jsx)(W,{label:`5-Hour Session`,pct:$(e.fiveHour),reset:U(e.session),resetsAt:e.session?.resetsAt}),(t||e.weekly!=null)&&(0,K.jsx)(W,{label:`Weekly`,pct:$(e.sevenDay),reset:U(e.weekly),resetsAt:e.weekly?.resetsAt})]})}function Ke(){let[e,t]=(0,G.useState)(null),n=fe(()=>t(null)),[r,i]=(0,G.useState)(null);return(0,K.jsxs)(`div`,{className:`space-y-4`,children:[(0,K.jsx)(B,{description:(0,K.jsxs)(K.Fragment,{children:[`Each Codex account keeps its own login (`,(0,K.jsx)(`code`,{children:`CODEX_HOME`}),`). One is picked per chat by the rotation setting.`]}),onRefresh:()=>void n.load(),refreshing:n.loading,actions:(0,K.jsxs)(K.Fragment,{children:[(0,K.jsxs)(b,{size:`sm`,className:`cursor-pointer gap-1.5`,onClick:()=>t(`add`),children:[(0,K.jsx)(l,{className:`size-4`}),` Add account`]}),(0,K.jsxs)(b,{size:`sm`,variant:`outline`,className:`cursor-pointer gap-1.5`,onClick:()=>t(`export`),children:[(0,K.jsx)(u,{className:`size-4`}),` Export`]}),(0,K.jsxs)(b,{size:`sm`,variant:`outline`,className:`cursor-pointer gap-1.5`,onClick:()=>t(`import`),children:[(0,K.jsx)(c,{className:`size-4`}),` Import`]}),(0,K.jsxs)(b,{size:`sm`,variant:`outline`,className:`cursor-pointer gap-1.5`,onClick:()=>t(`rotation`),children:[(0,K.jsx)(a,{className:`size-4`}),` Rotation`]})]})}),(0,K.jsx)(z,{message:n.msg??n.err,onDismiss:()=>{n.setMsg(null),n.setErr(null)}}),(0,K.jsxs)(`section`,{className:`space-y-2`,children:[(0,K.jsxs)(`div`,{className:`flex items-center justify-between`,children:[(0,K.jsx)(`h3`,{className:`text-sm font-medium`,children:`Codex Accounts`}),(0,K.jsx)(`span`,{className:`text-[10px] text-muted-foreground capitalize`,children:n.strategy.replace(`-`,` `)})]}),n.loading&&n.accounts.length===0?(0,K.jsxs)(`div`,{className:`flex items-center gap-2 py-6 text-xs text-muted-foreground`,children:[(0,K.jsx)(m,{className:`size-4 animate-spin`}),` Loading accounts...`]}):n.accounts.length===0?(0,K.jsxs)(`div`,{className:`flex flex-col items-center gap-2 py-8 text-center`,children:[(0,K.jsx)(f,{className:`size-5 text-muted-foreground`}),(0,K.jsx)(`p`,{className:`text-sm text-muted-foreground`,children:`No Codex accounts yet.`}),(0,K.jsxs)(`p`,{className:`text-xs text-muted-foreground`,children:[`Chats use your default `,(0,K.jsx)(`code`,{children:`~/.codex`}),` login until you add one.`]})]}):(0,K.jsx)(V,{children:n.accounts.map(e=>{let t=n.usages[e.id]??{};return(0,K.jsxs)(_e,{dense:!0,className:`min-w-[300px] shrink-0 snap-start${e.signedOut?` opacity-60`:``}`,"data-testid":`account-card`,"data-account-id":e.id,children:[(0,K.jsxs)(`div`,{className:`flex items-center gap-2`,children:[(0,K.jsx)(`span`,{className:`text-sm font-medium truncate flex-1 min-w-0`,children:e.label}),e.signedOut&&(0,K.jsx)(de,{className:`text-[10px] text-error shrink-0 font-medium`,hint:`Codex rejected this account's login (revoked or expired), so no turn can run on it and it is skipped. The usage shown is the last reading. Click to sign in again — the account keeps its settings and chats.`,onClick:e.type===`chatgpt`?()=>i(e):void 0,children:`Sign in again`}),(0,K.jsx)(`span`,{className:`text-[10px] uppercase tracking-wide text-text-subtle border border-border rounded px-1 shrink-0`,children:e.type}),H(e.planType)&&(0,K.jsx)(`span`,{className:`text-[10px] text-text-subtle shrink-0`,children:H(e.planType)}),(0,K.jsx)(P,{checked:e.status!==`disabled`,onCheckedChange:()=>void n.toggle(e.id,e.status??`active`),disabled:n.toggling.has(e.id),"aria-label":e.status===`disabled`?`Enable account`:`Disable account`,className:`cursor-pointer shrink-0`}),(0,K.jsxs)(F,{children:[(0,K.jsx)(j,{asChild:!0,children:(0,K.jsx)(`button`,{type:`button`,onClick:()=>void n.remove(e.id),"aria-label":`Remove account`,className:`p-2 rounded cursor-pointer text-text-subtle hover:text-error hover:bg-surface-elevated transition-colors shrink-0`,children:(0,K.jsx)(s,{className:`size-4`})})}),(0,K.jsx)(L,{side:`top`,children:`Remove account`})]})]}),(0,K.jsx)(Ge,{usage:t}),t.resetCredits&&(0,K.jsxs)(`div`,{className:`flex items-center gap-2 flex-wrap text-[10px] text-text-subtle`,children:[(0,K.jsx)(he,{credits:t.resetCredits}),(0,K.jsx)(xe,{account:e,usage:t,onDone:e=>{n.setMsg(e),n.load()}})]}),t.session==null&&(()=>{let r=ye(t.weekly);return r?(0,K.jsxs)(`div`,{className:`flex min-h-12 items-center justify-between gap-3 rounded-md border px-2.5 py-1.5 ${e.dailyGuardEnabled&&r.blocked?`border-error/40 bg-error/5`:`border-border/50 bg-surface/40`}`,children:[(0,K.jsxs)(`div`,{className:`min-w-0 space-y-0.5`,children:[(0,K.jsxs)(`div`,{className:`flex items-center gap-1.5 text-xs font-medium ${e.dailyGuardEnabled&&r.blocked?`text-error`:`text-text-secondary`}`,children:[(0,K.jsx)(`span`,{children:`Daily guard`}),(0,K.jsxs)(F,{children:[(0,K.jsx)(j,{asChild:!0,children:(0,K.jsx)(`button`,{type:`button`,"aria-label":`About Daily guard`,className:`text-text-subtle hover:text-text-primary cursor-help`,children:(0,K.jsx)(o,{className:`size-3.5`})})}),(0,K.jsx)(L,{side:`top`,className:`max-w-64 text-xs leading-relaxed`,children:`Spreads the weekly quota across five weekdays, adding 20% per weekday. Weekend slots keep the previous cap; unused allowance carries forward. Daily slots start at the reset time and use UTC weekdays. Turn it off any time to use the remaining quota freely.`})]})]}),(0,K.jsx)(`p`,{className:`text-[10px] tabular-nums ${e.dailyGuardEnabled&&r.blocked?`text-error`:`text-text-subtle`}`,children:e.dailyGuardEnabled&&r.blocked?`${Math.round(r.used*100)}% used / ${Math.round(r.cap*100)}% daily cap. New turns paused.`:`Weekday ${r.day}/5, ${Math.round(r.cap*100)}% daily cap`})]}),(0,K.jsxs)(`span`,{className:`hidden`,title:`Weekday ${r.day}/5: hold weekly usage at or below ${Math.round(r.cap*100)}% to last until reset.`,children:[`Daily guard `,e.dailyGuardEnabled?`· Weekday ${r.day}/5 cap ${Math.round(r.cap*100)}%`:``]}),(0,K.jsx)(P,{checked:!!e.dailyGuardEnabled,onCheckedChange:()=>void n.toggleDailyGuard(e.id,!!e.dailyGuardEnabled),disabled:n.toggling.has(e.id),"aria-label":e.dailyGuardEnabled?`Disable Daily guard`:`Enable Daily guard`,className:`cursor-pointer shrink-0`})]}):null})()]},e.id)})})]}),(0,K.jsx)(be,{open:e===`add`,onOpenChange:e=>{e||n.cancelLogin(),t(e?`add`:null)},label:n.label,onLabelChange:n.setLabel,apiKey:n.apiKey,onApiKeyChange:n.setApiKey,adding:n.adding,onAddApiKey:()=>void n.addApiKey(),deviceWaiting:n.deviceWaiting,onStartDevice:()=>void n.startDevice(),device:n.device,browser:n.browser,onStartBrowser:()=>void n.startBrowser(),loginStarting:n.loginStarting,callbackUrl:n.callbackUrl,onCallbackUrlChange:n.setCallbackUrl,submittingCallback:n.submittingCallback,onSubmitCallback:()=>void n.submitCallback(),error:n.err}),(0,K.jsx)(He,{mode:e===`export`?`export`:e===`import`?`import`:null,onOpenChange:e=>{e||t(null)},password:n.backupPassword,onPasswordChange:n.setBackupPassword,busy:n.exporting||n.importing,onExport:()=>void n.doExport(),onImport:e=>void n.doImport(e),error:n.err}),r&&(0,K.jsx)(ve,{account:r,onClose:()=>i(null),onDone:()=>void n.load()}),(0,K.jsx)(We,{open:e===`rotation`,onOpenChange:e=>t(e?`rotation`:null),strategy:n.strategy,onChange:e=>void n.changeStrategy(e)})]})}var qe=[{id:`claude`,label:`Claude`},{id:`codex`,label:`Codex`}];function Je(){let[e,t]=(0,G.useState)(null),[n,r]=(0,G.useState)(`claude`);(0,G.useEffect)(()=>{let e=!1;return re().then(n=>{e||t(new Set(Object.keys(n.providers??{})))}).catch(()=>{e||t(new Set([`claude`]))}),()=>{e=!0}},[]);let i=qe.filter(t=>t.id===`claude`||e?.has(t.id)),a=i.length>1;return(0,K.jsxs)(`div`,{className:`space-y-4`,"data-testid":`accounts-pane`,"data-provider":n,children:[a&&(0,K.jsx)(`div`,{className:`flex gap-1 border-b border-border/50`,children:i.map(e=>(0,K.jsxs)(`button`,{onClick:()=>r(e.id),"data-testid":`accounts-tab-${e.id}`,"aria-current":n===e.id?`page`:void 0,className:`flex items-center gap-1.5 px-3 py-2 text-xs rounded-t transition-colors cursor-pointer ${n===e.id?`text-primary border-b-2 border-primary font-medium`:`text-text-subtle hover:text-text-secondary`}`,children:[(0,K.jsx)(k,{providerId:e.id}),e.label]},e.id))}),e===null&&!a&&(0,K.jsxs)(`div`,{className:`flex items-center gap-2 text-xs text-muted-foreground`,children:[(0,K.jsx)(m,{className:`size-3 animate-spin`}),` Checking configured providers...`]}),n===`claude`?(0,K.jsx)(Ve,{}):(0,K.jsx)(Ke,{})]})}export{Je as AccountsSettingsSection};

package/dist/web/assets/adaptive-context-menu-C4jNSORA.js

@@ -0,0 +1 @@
+import{s as e}from"./rolldown-runtime-C5c2KzVm.js";import{D as t,E as n}from"./vendor-markdown-C-P1aR4p.js";import{Y as r}from"./icons-BwyIKaTT.js";import{n as i}from"./utils-Bslrbb-G.js";import{a,c as o,i as s,l as c,n as l,o as u,r as d,s as f,t as p,u as m}from"./context-menu-BCuZYfWC.js";import{n as h}from"./use-is-mobile-VRV9eZy1.js";import{a as g,i as _,n as v,o as y,r as b,t as x}from"./mobile-bottom-sheet-DArbIyrD.js";var S=e(t(),1),C=n(),w=400,T=S.createContext(!1),E=S.createContext({});function D({children:e,...t}){let n=h(),[r,i]=(0,S.useState)(!1);return n?(0,C.jsx)(T.Provider,{value:!0,children:(0,C.jsx)(v.Provider,{value:{open:r,setOpen:i},children:e})}):(0,C.jsx)(p,{...t,children:e})}function O({children:e,asChild:t,...n}){let r=S.useContext(T),{setOpen:i}=S.useContext(v),a=(0,S.useRef)(void 0),o=(0,S.useRef)(!1);if(!r)return(0,C.jsx)(m,{asChild:t,...n,children:e});let s=(0,S.useCallback)(e=>{e.stopPropagation(),o.current=!1,a.current=setTimeout(()=>{i(!0),o.current=!0},w)},[i]),c=(0,S.useCallback)(()=>{clearTimeout(a.current)},[]),l=(0,S.useCallback)(e=>{clearTimeout(a.current),o.current&&e.cancelable&&e.preventDefault()},[]);return(0,S.useEffect)(()=>()=>clearTimeout(a.current),[]),(0,C.jsx)(`div`,{onTouchStart:s,onTouchMove:c,onTouchEnd:l,onTouchCancel:l,onClickCapture:(0,S.useCallback)(e=>{o.current&&=(e.preventDefault(),e.stopPropagation(),!1)},[]),onContextMenu:(0,S.useCallback)(e=>{e.preventDefault(),e.stopPropagation()},[]),className:`contents`,children:e})}function k(e){let t=document.activeElement;t&&t!==document.body&&e.preventDefault()}function A({children:e,className:t,onCloseAutoFocus:n,...r}){if(!S.useContext(T))return(0,C.jsx)(l,{className:t,onCloseAutoFocus:e=>{n?.(e),k(e)},...r,children:e});let{open:a,setOpen:o}=S.useContext(v);return(0,C.jsx)(x,{open:a,onClose:()=>o(!1),className:i(`p-2`,t),children:(0,C.jsx)(`div`,{className:`max-h-[60vh] overflow-y-auto overflow-x-hidden`,children:e})})}function j({children:e,className:t,variant:n,onClick:r,disabled:i,...a}){return S.useContext(T)?(0,C.jsx)(b,{className:t,variant:n,disabled:i,onClick:r,children:e}):(0,C.jsx)(d,{className:t,variant:n,disabled:i,onClick:r,...a,children:e})}function M({className:e,...t}){return S.useContext(T)?(0,C.jsx)(_,{className:e}):(0,C.jsx)(u,{className:e,...t})}function N({value:e,onValueChange:t,children:n,...r}){return S.useContext(T)?(0,C.jsx)(E.Provider,{value:{value:e,onValueChange:t},children:n}):(0,C.jsx)(s,{value:e,onValueChange:t,...r,children:n})}function P({value:e,children:t,className:n,...i}){let o=S.useContext(T),{value:s,onValueChange:c}=S.useContext(E);return o?(0,C.jsxs)(b,{className:n,onClick:()=>c?.(e),children:[(0,C.jsx)(`span`,{className:`flex size-4 shrink-0 items-center justify-center`,children:s===e&&(0,C.jsx)(r,{className:`size-2 fill-current`})}),t]}):(0,C.jsx)(a,{value:e,className:n,...i,children:t})}function F({children:e,...t}){return S.useContext(T)?(0,C.jsx)(C.Fragment,{children:e}):(0,C.jsx)(f,{...t,children:e})}function I({children:e,className:t,...n}){return S.useContext(T)?(0,C.jsx)(y,{className:t,children:e}):(0,C.jsx)(c,{className:t,...n,children:e})}function L({children:e,className:t,...n}){return S.useContext(T)?(0,C.jsx)(g,{className:t,children:e}):(0,C.jsx)(o,{className:t,...n,children:e})}export{P as a,L as c,N as i,I as l,A as n,M as o,j as r,F as s,D as t,O as u};