@inventec/dsh-copilot-auth 1.2.6 → 1.2.8

package/lib/client.js

@@ -34,68 +34,250 @@ var import_react = require("react");
 
 // src/shared.mjs
 var ROUTE_PREFIX = "/copilot-auth";
+var PROTOCOL_VERSION = 2;
 var routes = () => ({
   start: `${ROUTE_PREFIX}/start`,
   state: `${ROUTE_PREFIX}/state`,
   status: `${ROUTE_PREFIX}/status`,
   logout: `${ROUTE_PREFIX}/logout`,
+  cancel: `${ROUTE_PREFIX}/cancel`,
   refreshPreview: `${ROUTE_PREFIX}/refresh/preview`,
-  refreshApply: `${ROUTE_PREFIX}/refresh/apply`
+  refreshApply: `${ROUTE_PREFIX}/refresh/apply`,
+  refreshRetire: `${ROUTE_PREFIX}/refresh/retire`
 });
 
+// src/client-http.mjs
+var SAFE_ERROR_CODE = /^[A-Za-z][A-Za-z0-9 -]{0,79}$/;
+var SAFE_CONTENT_TYPE = /^[\w./+-]{0,100}$/;
+function sanitizeErrorCode(value) {
+  return typeof value === "string" && SAFE_ERROR_CODE.test(value) ? value : "http-error";
+}
+var SAFE_STRING = /^[A-Za-z0-9][A-Za-z0-9 -]{0,127}$/;
+function deepSanitize(value) {
+  if (typeof value === "string") return SAFE_STRING.test(value) ? value : void 0;
+  if (value === null || typeof value === "number" || typeof value === "boolean") return value;
+  if (Array.isArray(value)) return value.map(deepSanitize);
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      const s = deepSanitize(v);
+      if (s !== void 0) out[k] = s;
+    }
+    return out;
+  }
+  return void 0;
+}
+function sanitizeContentType(value) {
+  if (typeof value !== "string" || !SAFE_CONTENT_TYPE.test(value)) return void 0;
+  return value;
+}
+async function requestJson(fetchImpl, url, init = {}) {
+  let res;
+  try {
+    res = await fetchImpl(url, init);
+  } catch {
+    return { ok: false, httpStatus: null, body: void 0, error: { messageKey: "network-error", details: {} } };
+  }
+  const httpStatus = res.status;
+  let text = "";
+  try {
+    text = await res.text();
+  } catch {
+    text = "";
+  }
+  if (typeof text !== "string" || text.trim() === "") {
+    return {
+      ok: false,
+      httpStatus,
+      body: void 0,
+      error: { messageKey: httpStatus >= 500 ? "bad-gateway" : "bad-response", details: { httpStatus } }
+    };
+  }
+  let body;
+  try {
+    body = JSON.parse(text);
+  } catch {
+    const contentType = sanitizeContentType(res.headers?.get?.("content-type"));
+    const looksHtml = contentType?.includes("html") || /^\s*<(?:!doctype|html)/i.test(text);
+    const messageKey = httpStatus >= 500 || looksHtml ? "bad-gateway" : "bad-response";
+    const details2 = { httpStatus };
+    if (contentType !== void 0) details2.contentType = contentType;
+    return { ok: false, httpStatus, body: void 0, error: { messageKey, details: details2 } };
+  }
+  const ok = res.ok && body?.ok !== false;
+  if (ok) return { ok: true, httpStatus, body, error: void 0 };
+  const details = {};
+  if (!res.ok) details.httpStatus = httpStatus;
+  const errorCode = sanitizeErrorCode(body?.error);
+  if (errorCode !== void 0) details.errorCode = errorCode;
+  return { ok: false, httpStatus, body: deepSanitize(body), error: { messageKey: "http-error", details } };
+}
+
 // src/refresh-flow.mjs
-var initial = Object.freeze({ name: "idle", catalogWritable: null, catalogMode: null });
+var initial = Object.freeze({
+  name: "idle",
+  flags: { catalogMode: null, blockedReason: null, scopeAvailable: true, legacyStateDetected: false },
+  lastResult: null
+});
+var fromRefresh = (state, refresh) => ({
+  ...state,
+  flags: {
+    catalogMode: refresh && "catalogMode" in refresh ? refresh.catalogMode : state.flags.catalogMode,
+    blockedReason: refresh && "blockedReason" in refresh ? refresh.blockedReason : state.flags.blockedReason,
+    scopeAvailable: refresh ? refresh.scopeAvailable !== false : state.flags.scopeAvailable,
+    legacyStateDetected: refresh?.legacyStateDetected === true
+  },
+  lastResult: refresh?.lastResult ?? null
+});
+var restartStates = /* @__PURE__ */ new Set(["pending-restart"]);
+function refreshBlocked(flags) {
+  const mode = flags?.catalogMode;
+  return flags?.scopeAvailable === false || mode === "blocked" || mode === "unknown";
+}
 function reduce(state, event) {
   switch (state.name) {
     case "idle":
     case "failed":
-    case "restartNeeded": {
+    case "result":
+    case "pendingRestart":
+    case "busy":
+    case "resultUnknown": {
       if (event.type === "start") {
-        return [{ name: "previewing", mode: event.mode, stale: false }, { type: "preview", mode: event.mode }];
+        return [{
+          name: "previewing",
+          flags: state.flags ?? initial.flags,
+          operation: event.operation === "rebuild" ? "rebuild" : "supplement",
+          catalogSource: event.catalogSource,
+          stale: false
+        }, {
+          type: "preview",
+          operation: event.operation === "rebuild" ? "rebuild" : "supplement",
+          catalogSource: event.catalogSource
+        }];
+      }
+      if (event.type === "init" && state.name === "idle") return [state, { type: "status" }];
+      if (event.type === "check" && state.name === "resultUnknown") {
+        return [{ ...state, name: "checking", operationId: state.operationId }, { type: "statusQuery", operationId: state.operationId }];
+      }
+      if (event.type === "retire-request" && state.name === "result") {
+        return [{ name: "retireConfirm", result: state.result }, null];
+      }
+      if (event.type === "dismiss" && state.name === "failed") {
+        return [{ ...initial, flags: state.flags }, null];
       }
-      if (state.name === "failed" && event.type === "dismiss") return [initial, null];
-      if (state.name === "idle" && event.type === "init") return [state, { type: "status" }];
       if (event.type === "hydrate") {
         const refresh = event.status?.refresh;
         if (!event.status) return [state, null];
-        if (refresh?.lastError === "state-corrupt") return [{ name: "failed", error: "state-corrupt" }, null];
-        if (refresh?.pendingRestart === true) {
-          return [{ name: "restartNeeded", catalogWritable: refresh?.catalogWritable ?? null, catalogMode: refresh?.catalogMode ?? null }, null];
+        if (refresh?.lastError === "state-corrupt") return [{ ...state, name: "failed", error: "state-corrupt" }, null];
+        const base = fromRefresh({ ...initial, name: "idle" }, refresh);
+        if (restartStates.has(refresh?.lastResult?.status ?? "") || refresh?.pendingRestart === true) {
+          return [{ ...base, name: "pendingRestart", result: refresh.lastResult }, null];
+        }
+        const st = refresh?.lastResult?.status;
+        if (st && ["recovery-needed", "rollback-conflict", "conflict", "partial", "rolled-back", "intent-retired", "applied"].includes(st)) {
+          return [{ ...base, name: "result", result: refresh.lastResult }, null];
         }
-        const writable = refresh && "catalogWritable" in refresh ? refresh.catalogWritable : state.catalogWritable ?? null;
-        const mode = refresh && "catalogMode" in refresh ? refresh.catalogMode : state.catalogMode ?? null;
-        return [{ ...state, catalogWritable: writable, catalogMode: mode }, null];
+        if (refresh?.activeOperation) return [{ ...base, name: "busy", active: refresh.activeOperation }, null];
+        return [base, null];
       }
       return [state, null];
     }
     case "previewing": {
       if (event.type === "preview-ok") {
-        return [{ name: "confirming", preview: event.preview, mode: state.mode, staleNotice: state.stale === true }, null];
+        return [{ name: "confirming", flags: state.flags ?? initial.flags, preview: event.preview, staleNotice: state.stale === true }, null];
       }
-      if (event.type === "preview-fail") return [{ name: "failed", error: event.error }, null];
+      if (event.type === "preview-fail") return [{ name: "failed", flags: state.flags ?? initial.flags, error: event.error }, null];
       return [state, null];
     }
     case "confirming": {
+      const p = state.preview;
+      if (event.type === "select") {
+        return [{
+          name: "previewing",
+          flags: state.flags ?? initial.flags,
+          operation: p.operation,
+          catalogSource: p.catalogSource,
+          stale: false
+        }, {
+          type: "preview",
+          operation: p.operation,
+          catalogSource: p.catalogSource,
+          basePreviewId: p.previewId,
+          selectedIds: event.selectedIds ?? [],
+          confirmEmpty: event.confirmEmpty === true
+        }];
+      }
       if (event.type === "start") {
-        return [{ name: "previewing", mode: event.mode, stale: false }, { type: "preview", mode: event.mode }];
+        return [{
+          name: "previewing",
+          operation: event.operation === "rebuild" ? "rebuild" : p.operation,
+          catalogSource: event.catalogSource,
+          stale: false
+        }, {
+          type: "preview",
+          operation: event.operation === "rebuild" ? "rebuild" : p.operation,
+          catalogSource: event.catalogSource
+        }];
       }
       if (event.type === "confirm") {
-        return [
-          { name: "applying", mode: state.mode, digests: state.preview.digests },
-          { type: "apply", mode: state.mode, digests: state.preview.digests }
-        ];
+        const isRebuild = p.operation === "rebuild";
+        const emptyTarget = isRebuild && (p.diff?.targetView?.models ?? []).length === 0;
+        if (isRebuild && event.second !== true) return [state, null];
+        if (emptyTarget && event.empty !== true) return [state, null];
+        if (p.evidence?.stale === true) return [state, null];
+        return [{ name: "applying", flags: state.flags ?? initial.flags, preview: p }, { type: "apply", previewId: p.previewId, operationId: p.operationId }];
       }
-      if (event.type === "cancel") return [initial, null];
+      if (event.type === "cancel") return [{ ...initial, flags: state.flags ?? initial.flags, lastResult: state.lastResult ?? null }, null];
       return [state, null];
     }
     case "applying": {
       if (event.type === "apply-ok") {
-        return event.restartRequired === false ? [{ name: "applied", mode: event.mode ?? null, injected: event.injected ?? 0 }, null] : [{ name: "restartNeeded", catalogMode: state.catalogMode ?? null }, null];
+        return restartStates.has(event.result?.status ?? "") ? [{ ...state, name: "pendingRestart", result: event.result }, null] : [{ ...state, name: "result", result: event.result }, null];
       }
       if (event.type === "apply-stale") {
-        return [{ name: "previewing", mode: state.mode, stale: true }, { type: "preview", mode: state.mode }];
+        return [{
+          name: "previewing",
+          flags: state.flags ?? initial.flags,
+          operation: state.preview.operation,
+          catalogSource: state.preview.catalogSource,
+          stale: true
+        }, { type: "preview", operation: state.preview.operation, catalogSource: state.preview.catalogSource }];
+      }
+      if (event.type === "apply-busy") {
+        return [{ ...state, name: "checking" }, { type: "status" }];
+      }
+      if (event.type === "apply-unknown") {
+        return [{ ...state, name: "checking", operationId: state.preview.operationId }, { type: "statusQuery", operationId: state.preview.operationId }];
       }
-      if (event.type === "apply-fail") return [{ name: "failed", error: event.error }, null];
+      if (event.type === "apply-fail") return [{ ...state, name: "failed", error: event.error }, null];
+      return [state, null];
+    }
+    case "checking": {
+      if (event.type === "query-result") {
+        if (event.query === "active") return [{ ...state, name: "busy", active: event.active }, null];
+        if (event.query === "last") {
+          return restartStates.has(event.lastResult?.status ?? "") ? [{ ...state, name: "pendingRestart", result: event.lastResult }, null] : [{ ...state, name: "result", result: event.lastResult }, null];
+        }
+        return [{ ...state, name: "resultUnknown", operationId: state.operationId }, null];
+      }
+      if (event.type === "hydrate") {
+        const refresh = event.status?.refresh;
+        if (refresh?.activeOperation) return [{ ...state, name: "busy", active: refresh.activeOperation }, null];
+        if (refresh?.lastResult) return [{ ...state, name: "result", result: refresh.lastResult }, null];
+        return [{ ...state, name: "resultUnknown", operationId: state.operationId }, null];
+      }
+      return [state, null];
+    }
+    case "retireConfirm": {
+      if (event.type === "retire-confirm") {
+        return [{ name: "retiring", operationId: state.result?.operationId, result: state.result }, { type: "retire", operationId: state.result?.operationId }];
+      }
+      if (event.type === "cancel") return [{ name: "result", result: state.result }, null];
+      return [state, null];
+    }
+    case "retiring": {
+      if (event.type === "retire-ok") return [{ ...state, name: "checking" }, { type: "status" }];
+      if (event.type === "retire-fail") return [{ name: "result", result: state.result, retireError: event.error }, null];
       return [state, null];
     }
     default:
@@ -104,52 +286,58 @@ function reduce(state, event) {
 }
 async function runEffect(effect, fetchImpl) {
   const r = routes();
-  const post = (url, body) => fetchImpl(url, {
+  const post = (url, body) => requestJson(fetchImpl, url, {
     method: "POST",
     headers: { "content-type": "application/json" },
-    body: JSON.stringify(body)
+    body: JSON.stringify({ protocolVersion: PROTOCOL_VERSION, ...body })
   });
   if (effect.type === "preview") {
-    try {
-      const res = await post(r.refreshPreview, effect.mode ? { mode: effect.mode } : {});
-      const body = await res.json();
-      return res.status === 200 && body?.ok ? { type: "preview-ok", preview: body } : { type: "preview-fail", error: body?.error ?? `HTTP ${res.status}` };
-    } catch (err) {
-      return { type: "preview-fail", error: String(err?.message ?? err) };
-    }
+    const res = await post(r.refreshPreview, {
+      operation: effect.operation,
+      ...effect.catalogSource ? { catalogSource: effect.catalogSource } : {},
+      ...effect.basePreviewId ? { basePreviewId: effect.basePreviewId, selectedIds: effect.selectedIds ?? [] } : {},
+      ...effect.confirmEmpty ? { confirmEmpty: true } : {}
+    });
+    if (res.ok) return { type: "preview-ok", preview: res.body };
+    return { type: "preview-fail", error: res.error?.details?.errorCode ?? res.error?.messageKey };
   }
   if (effect.type === "apply") {
-    try {
-      const res = await post(r.refreshApply, {
-        digests: effect.digests,
-        ...effect.mode ? { mode: effect.mode } : {}
-      });
-      const body = await res.json().catch(() => null);
-      if (res.status === 409) return { type: "apply-stale" };
-      return res.status === 200 && body?.ok ? {
-        type: "apply-ok",
-        restartRequired: body.restartRequired !== false,
-        mode: body.mode ?? null,
-        injected: Array.isArray(body.injected) ? body.injected.length : 0
-      } : { type: "apply-fail", error: body?.error ?? `HTTP ${res.status}` };
-    } catch (err) {
-      return { type: "apply-fail", error: String(err?.message ?? err) };
+    const res = await post(r.refreshApply, { previewId: effect.previewId, operationId: effect.operationId });
+    if (res.ok) return { type: "apply-ok", result: res.body?.result ?? { status: "unknown" } };
+    const code = res.error?.details?.errorCode ?? "";
+    const status = res.httpStatus;
+    if (status === null) return { type: "apply-unknown" };
+    if (status === 423 || code === "resource-busy") return { type: "apply-busy" };
+    if (status === 409 && ["preview-stale", "auth-changed", "preview-invalid"].includes(code)) {
+      return { type: "apply-stale", error: code };
     }
+    return { type: "apply-fail", error: code || res.error?.messageKey };
+  }
+  if (effect.type === "retire") {
+    const res = await post(r.refreshRetire, { operationId: effect.operationId });
+    if (res.ok) return { type: "retire-ok", result: res.body?.result ?? null };
+    return { type: "retire-fail", error: res.error?.details?.errorCode ?? res.error?.messageKey };
   }
   if (effect.type === "status") {
-    try {
-      const res = await fetchImpl(r.status);
-      return { type: "hydrate", status: await res.json() };
-    } catch {
-      return { type: "hydrate", status: null };
+    const res = await requestJson(fetchImpl, r.status, { method: "GET" });
+    if (res.ok) return { type: "hydrate", status: res.body };
+    return { type: "hydrate", status: null };
+  }
+  if (effect.type === "statusQuery") {
+    const res = await requestJson(fetchImpl, `${r.status}?operationId=${encodeURIComponent(effect.operationId ?? "")}`, { method: "GET" });
+    if (res.ok && res.body?.operation) {
+      return { type: "query-result", query: res.body.operation.query, active: res.body.operation.active, lastResult: res.body.operation.lastResult };
     }
+    return { type: "query-result", query: "unknown" };
   }
   throw new Error(`unknown effect: ${effect.type}`);
 }
 async function advance(state, event, fetchImpl, onState) {
   let [s, fx] = reduce(state, event);
   onState?.(s);
+  let guard = 0;
   while (fx) {
+    if (guard++ > 8) throw new Error("effect loop guard");
     const resultEvent = await runEffect(fx, fetchImpl);
     [s, fx] = reduce(s, resultEvent);
     onState?.(s);
@@ -157,6 +345,174 @@ async function advance(state, event, fetchImpl, onState) {
   return s;
 }
 
+// src/auth-flow.mjs
+var POLL_INTERVAL_MS = 1e3;
+var BACKOFF_STEPS_S = [1, 2, 4, 8, 15];
+var AUTO_RETRY_LIMIT_MS = 6e4;
+var LIVE_STATUSES = ["starting", "waiting", "finishing"];
+var defaultClock = () => ({
+  now: () => Date.now(),
+  setTimeout: (fn, ms) => setTimeout(fn, ms),
+  clearTimeout: (id) => clearTimeout(id)
+});
+function createAuthFlow({ fetchImpl, clock = defaultClock(), onState = () => {
+} } = {}) {
+  let generation = 0;
+  let timer = null;
+  let failures = 0;
+  let backoffIdx = 0;
+  let failureWindowStart = null;
+  let last = { phase: "loading", connectivity: "online", shared: false };
+  const emit = (patch) => {
+    last = { ...last, ...patch };
+    onState({ ...last });
+  };
+  const stale = (gen) => gen !== generation;
+  const clearTimer = () => {
+    if (timer !== null) {
+      clock.clearTimeout(timer);
+      timer = null;
+    }
+  };
+  const schedule = (gen, delayMs) => {
+    if (stale(gen)) return;
+    clearTimer();
+    timer = clock.setTimeout(() => {
+      timer = null;
+      void pollTick(gen);
+    }, delayMs);
+  };
+  function applySnapshot(gen, s) {
+    if (stale(gen)) return;
+    emit({ attempt: s, riskLatch: s?.riskLatch ?? null });
+    if (LIVE_STATUSES.includes(s?.status)) {
+      emit({ phase: "waiting" });
+      schedule(gen, POLL_INTERVAL_MS);
+      return;
+    }
+    if (s?.status === "authorized") {
+      emit({ phase: "authorized", error: void 0 });
+      return;
+    }
+    if (s?.status === "failed") {
+      emit({ phase: "failed", error: s?.error ?? "authorization-failed" });
+      return;
+    }
+    if (s?.status === "withdrawal-pending-unverified" || s?.status === "timed-out-unverified") {
+      emit({ phase: "risk", riskKind: s.status });
+      return;
+    }
+    emit({ phase: "idle" });
+  }
+  async function pollTick(gen) {
+    const r = await requestJson(fetchImpl, "/copilot-auth/state", { method: "GET" });
+    if (stale(gen)) return;
+    if (r.ok) {
+      failures = 0;
+      backoffIdx = 0;
+      failureWindowStart = null;
+      emit({ connectivity: "online" });
+      applySnapshot(gen, r.body);
+      return;
+    }
+    failures += 1;
+    if (failureWindowStart === null) failureWindowStart = clock.now();
+    const cumulative = clock.now() - failureWindowStart;
+    if (cumulative >= AUTO_RETRY_LIMIT_MS) {
+      emit({ connectivity: "manual" });
+      return;
+    }
+    emit({ connectivity: "retrying" });
+    const delayS = BACKOFF_STEPS_S[Math.min(backoffIdx, BACKOFF_STEPS_S.length - 1)];
+    backoffIdx += 1;
+    schedule(gen, delayS * 1e3);
+  }
+  function beginPolling(gen) {
+    void pollTick(gen);
+  }
+  async function init() {
+    const gen = ++generation;
+    clearTimer();
+    const status = await requestJson(fetchImpl, "/copilot-auth/status", { method: "GET" });
+    if (stale(gen)) return;
+    if (!status.ok) {
+      emit({ phase: "idle", error: status.error?.messageKey });
+      return;
+    }
+    const body = status.body ?? {};
+    if (body.refresh?.scopeAvailable === false) {
+      emit({ phase: "unavailable" });
+      return;
+    }
+    emit({ status: body });
+    if (body.authorization?.riskLatch) {
+      emit({ riskLatch: body.authorization.riskLatch });
+    }
+    if (body.configured === true) {
+      emit({ phase: "authorized" });
+      return;
+    }
+    const r = await requestJson(fetchImpl, "/copilot-auth/state", { method: "GET" });
+    if (stale(gen)) return;
+    if (!r.ok) {
+      emit({ phase: "idle" });
+      return;
+    }
+    applySnapshot(gen, r.body);
+  }
+  async function start() {
+    const gen = ++generation;
+    clearTimer();
+    failures = 0;
+    backoffIdx = 0;
+    failureWindowStart = null;
+    emit({ phase: "waiting", shared: false, error: void 0, connectivity: "online" });
+    const r = await requestJson(fetchImpl, "/copilot-auth/start", { method: "POST" });
+    if (stale(gen)) return;
+    if (r.ok) {
+      beginPolling(gen);
+      return;
+    }
+    const errorCode = r.error?.details?.errorCode;
+    if (r.httpStatus === 409) {
+      emit({ shared: true });
+      beginPolling(gen);
+      return;
+    }
+    if (errorCode === "auth-unsafe") {
+      emit({ phase: "risk", riskKind: "auth-unsafe" });
+      return;
+    }
+    if (errorCode === "scope-unavailable" || r.httpStatus === 503) {
+      emit({ phase: "unavailable" });
+      return;
+    }
+    emit({ phase: "failed", error: errorCode ?? r.error?.messageKey });
+  }
+  async function cancel() {
+    const r = await requestJson(fetchImpl, "/copilot-auth/cancel", { method: "POST" });
+    if (r.ok) {
+      emit({ withdrawalDelivery: r.body?.withdrawalDelivery ?? "unavailable" });
+      return;
+    }
+    emit({ withdrawalDelivery: "failed", error: r.error?.details?.errorCode ?? r.error?.messageKey });
+  }
+  function refresh() {
+    const gen = ++generation;
+    clearTimer();
+    failures = 0;
+    backoffIdx = 0;
+    failureWindowStart = null;
+    emit({ connectivity: "online" });
+    void pollTick(gen);
+  }
+  function dispose() {
+    generation += 1;
+    clearTimer();
+  }
+  return { init, start, cancel, refresh, dispose };
+}
+
 // src/client.jsx
 var import_jsx_runtime = require("react/jsx-runtime");
 var name = "copilot-auth-ui";
@@ -164,107 +520,166 @@ var inject = ["slots", "locale"];
 var DICTS = {
   en: {
     nav: "GHC Settings",
-    title: "GitHub Copilot Sign-in",
-    intro: "Sign in to Copilot with your company GitHub account using the device code \u2014 no API token required.",
+    title: "GitHub Copilot",
+    intro: "Authorize with a personal or organization account on github.com that has Copilot access. No API token is required.",
     idle: "Not signed in",
-    running: "Signing in\u2026",
+    waiting: "Waiting for you to authorize on GitHub",
     authorized: "Signed in",
     failed: "Failed",
     loading: "\u2026",
     login: "Sign in",
     logout: "Sign out",
+    reauthorize: "Reauthorize",
+    withdrawAuth: "Request withdrawal",
+    withdrawal: "Withdrawal requested; the outcome remains unverified.",
+    withdrawalUnavailable: "The withdrawal request could not be sent to the host; the outcome remains unverified.",
+    authUnsafe: "Safe completion of the authorization flow is unconfirmed. Sign-out and a new authorization attempt are unavailable.",
+    attemptTimeout: "Authorization wait timed out; the outcome remains unverified. A new authorization attempt is unavailable. Check the status or verify it manually.",
+    attemptShared: "An authorization attempt is already running in this instance.",
+    unavailable: "This runtime lacks the capabilities needed to apply changes safely.",
+    connection: "Connection lost. The last confirmed status is shown.",
+    retryNow: "Check status",
+    copyFailed: "Copy failed. Select and copy the device code manually.",
+    riskBadge: "Outcome unverified",
     codeHint: "Open the link below and enter this code to finish signing in:",
     copy: "Copy",
     copied: "Copied \u2713",
     unknown: "Unknown error",
-    refreshNow: "Refresh model catalog",
-    refreshTitle: "Refresh available model catalog",
-    refreshDesc: "This pulls your account's available models and the latest pi-ai catalog data, then applies a data-level, add-only patch to the local catalog (pi-ai version stays unchanged). Review the diff before confirming.",
-    riskRemoved: "Models no longer available to your account will DISAPPEAR from the model list after restart.",
-    riskReset: "Your customizations (trimmed model list, per-model field tweaks, modelOverrides) will be RESET to the mirrored set.",
-    riskRestart: "Takes effect only after a dsh web restart (two-phase: catalog patch now, settings sync on next boot).",
-    addedModels: "New models",
-    removedModels: "Removed (no longer available)",
+    // ---- Model management (protocol v2, design §5) ----
+    supplement: "Add models",
+    rebuild: "Rebuild model list",
+    supplementTitle: "Add models",
+    rebuildTitle: "Rebuild model list",
+    candidates: "Models available to add",
+    selectAll: "Select all",
+    supplementRisk: "Existing models and customizations will be kept. Only selected models will be added.",
+    rebuildRisk: "This rebuilds Copilot model configuration from the verified account list and clears the model customizations below. Other provider settings remain unchanged.",
+    clearRisk: "This clears the Copilot model list and its model customizations. Confirm clearing separately.",
+    secondConfirm: "This is destructive. Click again to confirm.",
+    applyChanges: "Apply changes",
+    addedModels: "Models to add",
+    removedModels: "Models to be removed",
     keptModels: "Kept",
+    removedAccount: "Not included in this account model list",
+    removedUnresolvable: "Not resolvable by the current catalog",
+    warnings: "Warnings",
     skippedModels: "Upstream entries skipped by validation",
-    customReset: "These customizations will be reset:",
-    customEntries: "field tweaks",
-    customOverrides: "modelOverrides",
-    confirmRefresh: "Confirm refresh",
-    cancel: "Cancel",
-    refreshing: "Fetching preview\u2026",
-    applying: "Applying\u2026",
-    restartNeeded: "Catalog patched. Restart dsh web to finish syncing the model list.",
-    stalePreview: "Inputs changed \u2014 review the new diff",
-    overlayBtn: "Preview with bundled overlay",
-    stateCorrupt: "State file was corrupted and quarantined; auto self-heal is disabled \u2014 run a refresh to re-activate.",
-    srcLive: "Account models: live fetch",
-    srcCache: "Account models: credential cache (live fetch failed)",
+    srcLive: "Account models: live",
+    srcCache: "Account models: cached at {time}; add-only use",
+    srcStale: "The cache has no trusted timestamp, is expired, or belongs to changed authorization; reference only.",
     srcLatest: "Catalog source: latest pi-ai from npm",
-    srcLocal: "Catalog source: local only (npm fetch failed)",
+    srcLocal: "Catalog source: local (npm fetch failed)",
     srcOverlay: "Catalog source: bundled overlay (offline bootstrap)",
+    overlayBtn: "Preview with bundled overlay",
+    previewStale: "Configuration or data changed. Preview and confirm again.",
     none: "(none)",
-    notWritable: "This DSH installation packages the model catalog read-only (inside app.asar) \u2014 the refresh cannot be written. Use a web/service deployment for catalog refresh, or wait for a desktop build that unpacks pi-ai.",
-    registryMode: "This installation's app.asar is read-only, so the refresh does not write the catalog file: new entries are injected into the running catalog registry instead. No restart needed.",
-    registryApplied: "Injected %s new model(s) into the running catalog \u2014 live now. The boot sequence replays them after a restart.",
-    registryFailed: "Catalog registry injection failed \u2014 nothing was written and your model list was left unchanged.",
-    riskImmediate: "Takes effect immediately in this process (registry injection); the boot sequence replays it after a restart."
+    applying: "Applying\u2026",
+    refreshing: "Fetching preview\u2026",
+    cancel: "Cancel",
+    applied: "Changes are active. No restart is needed.",
+    pendingRestart: "Changes are saved and require restarting this instance's service or application. Refreshing the page alone is not enough.",
+    conflict: "Configuration changed. To protect your edits, preview and confirm again.",
+    partial: "Changes were only partially applied. Review the current status and recovery guidance.",
+    rolledBack: "This operation's model configuration changes were rolled back. Catalog data may still have been added.",
+    rollbackConflict: "Newer configuration was detected and preserved. Automatic rollback did not complete.",
+    busy: "Another operation is using this resource. Please retry shortly.",
+    unknownResult: "Completion has not been confirmed. Check the current status before submitting again.",
+    recoveryNeeded: "A previous configuration intent is stale or conflicted. End it before applying new changes.",
+    retireBtn: "End previous configuration intent",
+    retireTitle: "End previous configuration intent",
+    retireConfirmText: "End the intent only; existing changes are not rolled back or undone.",
+    legacy: "Legacy shared recovery state was found. It will not be applied automatically; preview and confirm in this profile.",
+    techDetails: "Technical details",
+    stateCorrupt: "State file was corrupted and quarantined. Preview and confirm again.",
+    blockedReasons: {
+      "inject-unavailable": "The in-process catalog registry is unavailable in this installation.",
+      "install-unresolved": "The pi-ai installation could not be located."
+    }
   },
   zh: {
     nav: "GHC\u8BBE\u7F6E",
-    title: "GitHub Copilot \u767B\u5F55",
-    intro: "\u4F7F\u7528\u516C\u53F8 GitHub \u8D26\u53F7\u901A\u8FC7\u8BBE\u5907\u7801\u6388\u6743\u767B\u5F55 Copilot\uFF0C\u65E0\u9700\u586B\u5199 API Token\u3002",
+    title: "GitHub Copilot",
+    intro: "\u4F7F\u7528\u5177\u6709 Copilot \u6743\u9650\u7684 github.com \u4E2A\u4EBA\u6216\u7EC4\u7EC7\u8D26\u53F7\u6388\u6743\uFF0C\u65E0\u9700\u586B\u5199 API Token\u3002",
     idle: "\u672A\u767B\u5F55",
-    running: "\u8FDB\u884C\u4E2D\u2026",
+    waiting: "\u7B49\u5F85\u4F60\u5728 GitHub \u5B8C\u6210\u6388\u6743",
     authorized: "\u5DF2\u767B\u5F55",
     failed: "\u5931\u8D25",
     loading: "\u2026",
-    login: "\u767B\u5F55",
-    logout: "\u6CE8\u9500",
+    login: "\u6388\u6743\u767B\u5F55",
+    logout: "\u9000\u51FA\u767B\u5F55",
+    reauthorize: "\u91CD\u65B0\u6388\u6743",
+    withdrawAuth: "\u8BF7\u6C42\u64A4\u56DE",
+    withdrawal: "\u64A4\u56DE\u8BF7\u6C42\u5DF2\u53D1\u9001\uFF0C\u7ED3\u679C\u4ECD\u5F85\u6838\u5B9E\u3002",
+    withdrawalUnavailable: "\u672A\u80FD\u5411\u5BBF\u4E3B\u53D1\u9001\u64A4\u56DE\u8BF7\u6C42\uFF0C\u7ED3\u679C\u4ECD\u5F85\u6838\u5B9E\u3002",
+    authUnsafe: "\u5C1A\u4E0D\u80FD\u786E\u8BA4\u6388\u6743\u6D41\u7A0B\u5DF2\u5B89\u5168\u7ED3\u675F\uFF0C\u6682\u4E0D\u80FD\u9000\u51FA\u6216\u53D1\u8D77\u65B0\u7684\u6388\u6743\u5C1D\u8BD5\u3002",
+    attemptTimeout: "\u7B49\u5F85\u6388\u6743\u8D85\u65F6\uFF0C\u7ED3\u679C\u4ECD\u5F85\u6838\u5B9E\u3002\u5F53\u524D\u4E0D\u80FD\u53D1\u8D77\u65B0\u7684\u6388\u6743\u5C1D\u8BD5\uFF0C\u8BF7\u67E5\u8BE2\u72B6\u6001\u6216\u4EBA\u5DE5\u6838\u5B9E\u3002",
+    attemptShared: "\u6B64\u5B9E\u4F8B\u5DF2\u6709\u6388\u6743\u6B63\u5728\u8FDB\u884C\u3002",
+    connection: "\u8FDE\u63A5\u5F02\u5E38\uFF0C\u663E\u793A\u7684\u662F\u6700\u540E\u786E\u8BA4\u7684\u72B6\u6001\u3002",
+    retryNow: "\u67E5\u8BE2\u72B6\u6001",
+    copyFailed: "\u590D\u5236\u5931\u8D25\uFF0C\u8BF7\u624B\u52A8\u9009\u4E2D\u8BBE\u5907\u7801\u590D\u5236\u3002",
+    riskBadge: "\u7ED3\u679C\u5F85\u6838\u5B9E",
     codeHint: "\u5728\u6D4F\u89C8\u5668\u6253\u5F00\u4E0B\u9762\u7684\u94FE\u63A5\uFF0C\u8F93\u5165\u8FD9\u4E32\u4EE3\u7801\u5B8C\u6210\u6388\u6743\uFF1A",
     copy: "\u590D\u5236",
     copied: "\u5DF2\u590D\u5236 \u2713",
     unknown: "\u672A\u77E5\u9519\u8BEF",
-    refreshNow: "\u5237\u65B0\u53EF\u7528\u6A21\u578B\u76EE\u5F55",
-    refreshTitle: "\u5237\u65B0\u53EF\u7528\u6A21\u578B\u76EE\u5F55",
-    refreshDesc: "\u5C06\u73B0\u573A\u62C9\u53D6\u8D26\u53F7\u53EF\u7528\u6A21\u578B\u4E0E\u6700\u65B0 pi-ai \u76EE\u5F55\u6570\u636E\uFF0C\u5BF9\u672C\u673A\u76EE\u5F55\u505A\u6570\u636E\u7EA7\u53EA\u589E\u8865\u4E01\uFF08pi-ai \u7248\u672C\u4E0D\u53D8\uFF09\u3002\u786E\u8BA4\u524D\u8BF7\u6838\u5BF9\u4E0B\u65B9\u5DEE\u5F02\u3002",
-    riskRemoved: "\u5931\u6548\u6A21\u578B\uFF08\u8D26\u53F7\u5DF2\u4E0D\u518D\u53EF\u7528\u7684\u6A21\u578B\uFF09\u91CD\u542F\u540E\u5C06\u4ECE\u6A21\u578B\u5217\u8868\u6D88\u5931\u3002",
-    riskReset: "\u4F60\u7684\u5B9A\u5236\uFF08\u7CBE\u7B80\u88C1\u526A\u3001\u6761\u76EE\u5B57\u6BB5\u5FAE\u8C03\u3001modelOverrides\uFF09\u5C06\u88AB\u91CD\u7F6E\u4E3A\u955C\u50CF\u96C6\u5408\u3002",
-    riskRestart: "\u9700\u91CD\u542F dsh web \u540E\u751F\u6548\uFF08\u4E24\u9636\u6BB5\uFF1A\u73B0\u5728\u5199\u76EE\u5F55\u8865\u4E01\uFF0C\u4E0B\u4E2A boot \u540C\u6B65 settings\uFF09\u3002",
-    addedModels: "\u65B0\u589E\u6A21\u578B",
-    removedModels: "\u79FB\u9664\uFF08\u5DF2\u5931\u6548\uFF09",
+    // ---- 模型管理（协议 v2，设计§5） ----
+    supplement: "\u8865\u5145\u6A21\u578B",
+    rebuild: "\u91CD\u5EFA\u6A21\u578B\u5217\u8868",
+    supplementTitle: "\u8865\u5145\u6A21\u578B",
+    rebuildTitle: "\u91CD\u5EFA\u6A21\u578B\u5217\u8868",
+    candidates: "\u53EF\u65B0\u589E\u7684\u6A21\u578B",
+    selectAll: "\u5168\u9009",
+    supplementRisk: "\u5C06\u4FDD\u7559\u73B0\u6709\u6A21\u578B\u53CA\u5B9A\u5236\uFF0C\u53EA\u6DFB\u52A0\u4F60\u52FE\u9009\u7684\u6A21\u578B\u3002",
+    rebuildRisk: "\u5C06\u6309\u672C\u6B21\u53EF\u4FE1\u8D26\u53F7\u5217\u8868\u91CD\u5EFA Copilot \u6A21\u578B\u914D\u7F6E\uFF0C\u5E76\u6E05\u9664\u4E0B\u5217\u6A21\u578B\u53C2\u6570\u4E0E\u8986\u76D6\u914D\u7F6E\u3002\u5176\u4ED6\u63D0\u4F9B\u65B9\u8BBE\u7F6E\u4E0D\u53D8\u3002",
+    clearRisk: "\u672C\u6B21\u5C06\u6E05\u7A7A Copilot \u6A21\u578B\u5217\u8868\u5E76\u6E05\u9664\u5176\u6A21\u578B\u5B9A\u5236\u3002\u8BF7\u5355\u72EC\u786E\u8BA4\u6E05\u7A7A\u3002",
+    secondConfirm: "\u6B64\u64CD\u4F5C\u5177\u6709\u7834\u574F\u6027\uFF0C\u8BF7\u518D\u6B21\u70B9\u51FB\u786E\u8BA4\u3002",
+    applyChanges: "\u5E94\u7528\u66F4\u6539",
+    addedModels: "\u5C06\u6DFB\u52A0\u7684\u6A21\u578B",
+    removedModels: "\u5C06\u79FB\u9664\u7684\u6A21\u578B",
     keptModels: "\u4FDD\u7559",
+    removedAccount: "\u672A\u5305\u542B\u5728\u672C\u6B21\u8D26\u53F7\u6A21\u578B\u5217\u8868",
+    removedUnresolvable: "\u5F53\u524D\u76EE\u5F55\u65E0\u6CD5\u89E3\u6790",
+    warnings: "\u8B66\u544A",
     skippedModels: "\u88AB\u6821\u9A8C\u8DF3\u8FC7\u7684\u4E0A\u6E38\u6761\u76EE",
-    customReset: "\u4EE5\u4E0B\u5B9A\u5236\u5C06\u88AB\u91CD\u7F6E\uFF1A",
-    customEntries: "\u5B57\u6BB5\u5FAE\u8C03",
-    customOverrides: "modelOverrides",
-    confirmRefresh: "\u786E\u8BA4\u5237\u65B0",
-    cancel: "\u53D6\u6D88",
-    refreshing: "\u62C9\u53D6\u9884\u89C8\u4E2D\u2026",
-    applying: "\u5E94\u7528\u4E2D\u2026",
-    restartNeeded: "\u76EE\u5F55\u8865\u4E01\u5DF2\u5199\u5165\u3002\u91CD\u542F dsh web \u540E\u5B8C\u6210\u6A21\u578B\u5217\u8868\u540C\u6B65\u3002",
-    stalePreview: "\u6570\u636E\u5DF2\u53D8\u5316\uFF0C\u8BF7\u91CD\u65B0\u786E\u8BA4\u5DEE\u5F02",
-    overlayBtn: "\u6539\u7528\u5185\u7F6E\u8986\u76D6\u5C42\u9884\u89C8",
-    stateCorrupt: "\u72B6\u6001\u6587\u4EF6\u5DF2\u635F\u574F\u5E76\u88AB\u9694\u79BB\uFF1B\u81EA\u52A8\u81EA\u6108\u5DF2\u505C\u7528\uFF0C\u8BF7\u91CD\u65B0\u6267\u884C\u4E00\u6B21\u5237\u65B0\u4EE5\u6FC0\u6D3B\u3002",
-    srcLive: "\u8D26\u53F7\u6A21\u578B\uFF1A\u73B0\u573A\u62C9\u53D6",
-    srcCache: "\u8D26\u53F7\u6A21\u578B\uFF1A\u51ED\u8BC1\u7F13\u5B58\uFF08\u73B0\u573A\u62C9\u53D6\u5931\u8D25\uFF09",
+    srcLive: "\u8D26\u53F7\u6A21\u578B\uFF1A\u5B9E\u65F6\u83B7\u53D6",
+    srcCache: "\u8D26\u53F7\u6A21\u578B\uFF1A\u7F13\u5B58\uFF0C\u83B7\u53D6\u4E8E {time}\uFF0C\u4EC5\u53EF\u7528\u4E8E\u8865\u5145",
+    srcStale: "\u7F13\u5B58\u7F3A\u5C11\u53EF\u4FE1\u65F6\u95F4\u3001\u5DF2\u8FC7\u671F\u6216\u6388\u6743\u5DF2\u53D8\u5316\uFF0C\u4EC5\u4F9B\u53C2\u8003\u3002",
     srcLatest: "\u76EE\u5F55\u6765\u6E90\uFF1Anpm \u6700\u65B0 pi-ai",
-    srcLocal: "\u76EE\u5F55\u6765\u6E90\uFF1A\u4EC5\u672C\u5730\u76EE\u5F55\uFF08npm \u62C9\u53D6\u5931\u8D25\uFF09",
+    srcLocal: "\u76EE\u5F55\u6765\u6E90\uFF1A\u672C\u5730\u76EE\u5F55\uFF08npm \u62C9\u53D6\u5931\u8D25\uFF09",
     srcOverlay: "\u76EE\u5F55\u6765\u6E90\uFF1A\u5185\u7F6E\u8986\u76D6\u5C42\uFF08\u79BB\u7EBF bootstrap\uFF09",
+    overlayBtn: "\u6539\u7528\u5185\u7F6E\u76EE\u5F55\u6570\u636E\u9884\u89C8",
+    previewStale: "\u914D\u7F6E\u6216\u6570\u636E\u5DF2\u53D8\u5316\uFF0C\u8BF7\u91CD\u65B0\u9884\u89C8\u5E76\u786E\u8BA4\u3002",
     none: "\uFF08\u65E0\uFF09",
-    notWritable: "\u5F53\u524D DSH \u5B89\u88C5\u628A\u6A21\u578B\u76EE\u5F55\u6253\u5305\u5728\u53EA\u8BFB\u7684 app.asar \u5185\uFF0C\u5237\u65B0\u65E0\u6CD5\u5199\u5165\u3002\u8BF7\u5728 Web/\u670D\u52A1\u90E8\u7F72\u5F62\u6001\u4E0B\u5237\u65B0\u76EE\u5F55\uFF0C\u6216\u7B49\u5F85\u684C\u9762\u7248\u63D0\u4F9B\u53EF\u5199\u5E03\u5C40\u540E\u91CD\u8BD5\u3002",
-    registryMode: "\u5F53\u524D\u5B89\u88C5\u7684 app.asar \u53EA\u8BFB\uFF0C\u5237\u65B0\u4E0D\u5199\u76EE\u5F55\u6587\u4EF6\uFF1A\u65B0\u6761\u76EE\u76F4\u63A5\u6CE8\u5165\u8FD0\u884C\u4E2D\u7684\u76EE\u5F55\u6CE8\u518C\u8868\u3002\u65E0\u9700\u91CD\u542F\u3002",
-    registryApplied: "\u5DF2\u5411\u8FD0\u884C\u4E2D\u7684\u76EE\u5F55\u6CE8\u5165 %s \u4E2A\u65B0\u6A21\u578B\u2014\u2014\u5373\u523B\u751F\u6548\uFF1B\u91CD\u542F\u540E\u7531\u542F\u52A8\u5E8F\u5217\u81EA\u52A8\u91CD\u653E\u3002",
-    registryFailed: "\u76EE\u5F55\u6CE8\u518C\u8868\u6CE8\u5165\u5931\u8D25\u2014\u2014\u672A\u5199\u5165\u4EFB\u4F55\u5185\u5BB9\uFF0C\u6A21\u578B\u5217\u8868\u4FDD\u6301\u539F\u6837\u3002",
-    riskImmediate: "\u672C\u8FDB\u7A0B\u5185\u5373\u523B\u751F\u6548\uFF08\u6CE8\u518C\u8868\u6CE8\u5165\uFF09\uFF1B\u91CD\u542F\u540E\u7531\u542F\u52A8\u5E8F\u5217\u81EA\u52A8\u91CD\u653E\u3002"
+    applying: "\u5E94\u7528\u4E2D\u2026",
+    refreshing: "\u62C9\u53D6\u9884\u89C8\u4E2D\u2026",
+    cancel: "\u53D6\u6D88",
+    applied: "\u66F4\u6539\u5DF2\u751F\u6548\uFF0C\u65E0\u9700\u91CD\u542F\u3002",
+    pendingRestart: "\u66F4\u6539\u5DF2\u4FDD\u5B58\uFF0C\u5F85\u91CD\u542F\u751F\u6548\u3002\u8BF7\u91CD\u542F\u8FD0\u884C\u6B64\u5B9E\u4F8B\u7684\u670D\u52A1\u6216\u5E94\u7528\uFF1B\u4EC5\u5237\u65B0\u9875\u9762\u4E0D\u4F1A\u751F\u6548\u3002",
+    conflict: "\u914D\u7F6E\u5DF2\u53D8\u5316\u3002\u4E3A\u4FDD\u62A4\u4F60\u7684\u4FEE\u6539\uFF0C\u8BF7\u91CD\u65B0\u9884\u89C8\u5E76\u786E\u8BA4\u3002",
+    partial: "\u66F4\u6539\u672A\u5B8C\u5168\u5E94\u7528\uFF0C\u8BF7\u67E5\u770B\u5F53\u524D\u72B6\u6001\u548C\u6062\u590D\u5EFA\u8BAE\u3002",
+    rolledBack: "\u672C\u6B21\u6A21\u578B\u914D\u7F6E\u66F4\u6539\u5DF2\u56DE\u6EDA\u3002\u76EE\u5F55\u6570\u636E\u53EF\u80FD\u4ECD\u5DF2\u8865\u5145\u3002",
+    rollbackConflict: "\u68C0\u6D4B\u5230\u66F4\u65B0\u7684\u914D\u7F6E\uFF0C\u5DF2\u4FDD\u7559\u4F60\u7684\u4FEE\u6539\uFF1B\u81EA\u52A8\u56DE\u6EDA\u672A\u5B8C\u6210\u3002",
+    busy: "\u53E6\u4E00\u4E2A\u64CD\u4F5C\u6B63\u5728\u5904\u7406\u6B64\u8D44\u6E90\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002",
+    unknownResult: "\u5C1A\u672A\u786E\u8BA4\u64CD\u4F5C\u5B8C\u6210\u3002\u8BF7\u6838\u5B9E\u5F53\u524D\u72B6\u6001\uFF0C\u52FF\u91CD\u590D\u63D0\u4EA4\u3002",
+    recoveryNeeded: "\u5B58\u5728\u5DF2\u5931\u6548\u6216\u51B2\u7A81\u7684\u65E7\u914D\u7F6E\u610F\u56FE\uFF0C\u8BF7\u5148\u7ED3\u675F\u65E7\u610F\u56FE\u518D\u5E94\u7528\u65B0\u66F4\u6539\u3002",
+    retireBtn: "\u7ED3\u675F\u65E7\u914D\u7F6E\u610F\u56FE",
+    retireTitle: "\u7ED3\u675F\u65E7\u914D\u7F6E\u610F\u56FE",
+    retireConfirmText: "\u53EA\u7ED3\u675F\u65E7\u610F\u56FE\uFF0C\u4E0D\u56DE\u6EDA\u6216\u64A4\u9500\u5DF2\u53D1\u751F\u7684\u66F4\u6539\u3002",
+    legacy: "\u68C0\u6D4B\u5230\u65E7\u7684\u5171\u4EAB\u6062\u590D\u72B6\u6001\u3002\u4E0D\u4F1A\u81EA\u52A8\u5E94\u7528\uFF0C\u8BF7\u5728\u5F53\u524D profile \u91CD\u65B0\u9884\u89C8\u786E\u8BA4\u3002",
+    techDetails: "\u6280\u672F\u8BE6\u60C5",
+    stateCorrupt: "\u6062\u590D\u72B6\u6001\u65E0\u6CD5\u8BFB\u53D6\uFF0C\u539F\u4EF6\u5DF2\u4FDD\u7559\u3002\u8BF7\u91CD\u65B0\u9884\u89C8\u786E\u8BA4\u3002",
+    unavailable: "\u5F53\u524D\u8FD0\u884C\u65F6\u7F3A\u5C11\u5B89\u5168\u5E94\u7528\u6240\u9700\u7684\u80FD\u529B\uFF0C\u6682\u4E0D\u80FD\u5E94\u7528\u66F4\u6539\u3002",
+    blockedReasons: {
+      "inject-unavailable": "\u5F53\u524D\u5B89\u88C5\u7684\u8FDB\u7A0B\u5185\u76EE\u5F55\u6CE8\u518C\u8868\u4E0D\u53EF\u7528\u3002",
+      "install-unresolved": "\u65E0\u6CD5\u5B9A\u4F4D pi-ai \u5B89\u88C5\u3002"
+    }
   }
 };
 var NAV_TEXTS = Object.keys(DICTS).map((locale) => DICTS[locale].nav);
-function isRegistryMode(flags) {
-  return flags?.catalogWritable === false && flags?.catalogMode === "registry";
-}
-function refreshBlocked(flags) {
-  return flags?.catalogWritable === false && flags?.catalogMode !== "registry";
+function blockedReasonText(t, flags) {
+  const reason = flags?.blockedReason;
+  if (reason && t("blockedReasons")?.[reason]) return t("blockedReasons")[reason];
+  return t("unavailable");
 }
 var COPILOT_ICON_SVG = '<svg aria-hidden="true" width="16" height="16" viewBox="0 0 16 16" fill="currentColor" style="flex:none"><path d="M7.998 15.035c-4.562 0-7.873-2.914-7.998-3.749V9.338c.085-.628.677-1.686 1.588-2.065.013-.07.024-.143.036-.218.029-.183.06-.384.126-.612-.201-.508-.254-1.084-.254-1.656 0-.87.128-1.769.693-2.484.579-.733 1.494-1.124 2.724-1.261 1.206-.134 2.262.034 2.944.765.05.053.096.108.139.165.044-.057.094-.112.143-.165.682-.731 1.738-.899 2.944-.765 1.23.137 2.145.528 2.724 1.261.566.715.693 1.614.693 2.484 0 .572-.053 1.148-.254 1.656.066.228.098.429.126.612.924.385 1.522 1.471 1.591 2.095v1.872c0 .766-3.351 3.795-8.002 3.795Zm0-1.485c2.28 0 4.584-1.11 5.002-1.433V7.862l-.023-.116c-.49.21-1.075.291-1.727.291-1.146 0-2.059-.327-2.71-.991A3.222 3.222 0 0 1 8 6.303a3.24 3.24 0 0 1-.544.743c-.65.664-1.563.991-2.71.991-.652 0-1.236-.081-1.727-.291l-.023.116v4.255c.419.323 2.722 1.433 5.002 1.433ZM6.762 2.83c-.193-.206-.637-.413-1.682-.297-1.019.113-1.479.404-1.713.7-.247.312-.369.789-.369 1.554 0 .793.129 1.171.308 1.371.162.181.519.379 1.442.379.853 0 1.339-.235 1.638-.54.315-.322.527-.827.617-1.553.117-.935-.037-1.395-.241-1.614Zm4.155-.297c-1.044-.116-1.488.091-1.681.297-.204.219-.359.679-.242 1.614.091.726.303 1.231.618 1.553.299.305.784.54 1.638.54.922 0 1.28-.198 1.442-.379.179-.2.308-.578.308-1.371 0-.765-.123-1.242-.37-1.554-.233-.296-.693-.587-1.713-.7Z"/><path d="M6.25 9.037a.75.75 0 0 1 .75.75v1.501a.75.75 0 0 1-1.5 0V9.787a.75.75 0 0 1 .75-.75Zm4.25.75v1.501a.75.75 0 0 1-1.5 0V9.787a.75.75 0 0 1 1.5 0Z"/></svg>';
 function enforceNavIcon(labelText) {
@@ -373,7 +788,7 @@ var styles = {
   modalActions: { display: "flex", gap: 10, justifyContent: "flex-end", marginTop: 4 },
   mono: { fontFamily: "ui-monospace, monospace" }
 };
-var badgeColor = { idle: "#adb5bd", running: "#f59f00", authorized: "#37b24d", failed: "#e03131", loading: "#adb5bd" };
+var badgeColor = { idle: "#adb5bd", waiting: "#f59f00", authorized: "#37b24d", failed: "#e03131", loading: "#adb5bd", risk: "#f59f00", unavailable: "#adb5bd" };
 function sampleThemeSurface() {
   if (typeof document === "undefined") return { bg: "#fff", fg: "inherit" };
   const cs = getComputedStyle(document.body);
@@ -381,108 +796,182 @@ function sampleThemeSurface() {
   const bg = m ? `rgb(${m[1].split(",").slice(0, 3).join(",")})` : "#fff";
   return { bg, fg: cs.color || "inherit" };
 }
-function RefreshModal({ t, flow, onConfirm, onCancel, onOverlay }) {
+function RefreshModal({ t, flow, onSelect, onConfirm, onCancel, onOverlay }) {
   const p = flow.preview;
+  const diff = p.diff ?? {};
+  const isRebuild = p.operation === "rebuild";
+  const emptyTarget = isRebuild && (diff.targetView?.models ?? []).length === 0;
+  const candidates = diff.candidates ?? [];
+  const selectedIds = new Set(diff.added ?? []);
+  const [stage, setStage] = (0, import_react.useState)(0);
+  const cancelRef = (0, import_react.useRef)(null);
   const surface = (0, import_react.useRef)(null);
   if (!surface.current) surface.current = sampleThemeSurface();
-  const sourceKeys = [
-    p.source === "live" ? "srcLive" : "srcCache",
-    p.catalogSource === "latest" ? "srcLatest" : p.catalogSource === "overlay" ? "srcOverlay" : "srcLocal"
-  ];
-  const list = (ids, style) => ids.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: { opacity: 0.6 }, children: t("none") }) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)("ul", { style: styles.diffList, children: ids.map((id) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("li", { style: { ...style, ...styles.mono }, children: id }, id)) });
-  const resets = [
-    ...p.customizationReset.modelEntryIds.map((id) => `${id} (${t("customEntries")})`),
-    ...p.customizationReset.modelOverrideIds.map((id) => `${id} (${t("customOverrides")})`)
-  ];
-  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: styles.modalMask, role: "dialog", "aria-modal": "true", children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { ...styles.modal, background: surface.current.bg, color: surface.current.fg }, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h4", { style: styles.modalTitle, children: t("refreshTitle") }),
-    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.modalText, children: t("refreshDesc") }),
+  (0, import_react.useEffect)(() => {
+    setStage(0);
+  }, [p.previewId]);
+  (0, import_react.useEffect)(() => {
+    if (stage > 0) cancelRef.current?.focus();
+  }, [stage]);
+  const escCancel = (e) => {
+    if (e.key === "Escape") onCancel();
+  };
+  const confirmClick = () => {
+    if (p.evidence?.stale === true) return;
+    if (!isRebuild) {
+      onConfirm({ second: false, empty: false });
+      return;
+    }
+    if (stage === 0) {
+      setStage(1);
+      return;
+    }
+    if (emptyTarget && stage === 1) {
+      setStage(2);
+      return;
+    }
+    onConfirm({ second: true, empty: emptyTarget });
+  };
+  const sourceLine = [
+    p.evidence?.source === "live" ? t("srcLive") : p.evidence?.source === "cache" ? t("srcCache").replace("{time}", String(p.evidence?.fetchedAt ?? "")) : null,
+    p.catalogSource === "latest" ? t("srcLatest") : p.catalogSource === "overlay" ? t("srcOverlay") : t("srcLocal")
+  ].filter(Boolean).join(" \xB7 ");
+  const list = (items, style, render) => items.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: { opacity: 0.6 }, children: t("none") }) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)("ul", { style: styles.diffList, children: items.map((x, i) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("li", { style: { ...style, ...styles.mono }, children: render ? render(x) : x }, x?.id ?? x ?? i)) });
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: styles.modalMask, role: "dialog", "aria-modal": "true", onKeyDown: escCancel, children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { ...styles.modal, background: surface.current.bg, color: surface.current.fg }, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h4", { style: styles.modalTitle, children: t(isRebuild ? "rebuildTitle" : "supplementTitle") }),
     flow.staleNotice && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
       "\u26A0 ",
-      t("stalePreview")
+      t("previewStale")
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.modalText, children: sourceLine }),
+    p.evidence?.stale === true && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
+      "\u26A0 ",
+      t("srcStale")
+    ] }),
+    !isRebuild && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.modalText, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("candidates") }),
+        "\uFF08",
+        candidates.length,
+        "\uFF09",
+        candidates.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.secondary, height: 24, marginLeft: 10, fontSize: 12 }, onClick: () => onSelect(candidates), children: t("selectAll") })
+      ] }),
+      list(candidates, styles.added, (id) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("label", { style: { display: "flex", gap: 8, alignItems: "center" }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("input", { type: "checkbox", checked: selectedIds.has(id), onChange: () => {
+          const next = new Set(selectedIds);
+          if (next.has(id)) next.delete(id);
+          else next.add(id);
+          onSelect([...next]);
+        } }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { children: id })
+      ] })),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.risk, children: [
+        "\u26A0 ",
+        t("supplementRisk")
+      ] })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.modalText, children: sourceKeys.map((k) => t(k)).join(" \xB7 ") }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.modalText, children: [
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("addedModels") }),
       "\uFF08",
-      p.added.length,
+      (diff.added ?? []).length,
       "\uFF09"
     ] }),
-    list(p.added, styles.added),
+    list(diff.added ?? [], styles.added),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.modalText, children: [
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("removedModels") }),
       "\uFF08",
-      p.removed.length,
+      (diff.removed ?? []).length,
       "\uFF09"
     ] }),
-    list(p.removed, styles.removed),
+    list(diff.removed ?? [], styles.removed, (x) => `${x.id} \u2014 ${t(x.reason === "unresolvable" ? "removedUnresolvable" : "removedAccount")}`),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.modalText, children: [
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("keptModels") }),
       "\uFF08",
-      p.kept.length,
+      (diff.kept ?? []).length,
       "\uFF09"
     ] }),
-    p.skipped.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+    (diff.warnings ?? []).length > 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
       /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.modalText, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("skippedModels") }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("warnings") }),
         "\uFF08",
-        p.skipped.length,
+        diff.warnings.length,
         "\uFF09"
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("ul", { style: styles.diffList, children: p.skipped.map((s) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("li", { style: styles.skipped, children: [
-        s.id,
-        " \u2014 ",
-        s.reason
-      ] }, s.id)) })
-    ] }),
-    resets.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.modalText, children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("customReset") }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("ul", { style: styles.diffList, children: resets.map((x) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("li", { style: styles.skipped, children: x }, x)) })
+      list(diff.warnings, styles.skipped, (w) => `${w.id ?? ""} \u2014 ${w.reason ?? ""}`)
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.risk, children: [
+    isRebuild && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.risk, children: [
       "\u26A0 ",
-      t("riskRemoved")
+      t("rebuildRisk")
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.risk, children: [
+    emptyTarget && stage >= 1 && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.risk, children: [
       "\u26A0 ",
-      t("riskReset")
+      t("clearRisk")
     ] }),
-    isRegistryMode(p) ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.modalText, children: t("riskImmediate") }) : /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.risk, children: [
+    stage === 1 && !emptyTarget && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.risk, children: [
       "\u26A0 ",
-      t("riskRestart")
+      t("secondConfirm")
     ] }),
-    isRegistryMode(p) && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
-      "\u24D8 ",
-      t("registryMode")
+    (p.skipped ?? []).length > 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("details", { style: styles.modalText, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("summary", { children: [
+        t("skippedModels"),
+        "\uFF08",
+        p.skipped.length,
+        "\uFF09"
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("ul", { style: styles.diffList, children: p.skipped.map((s) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("li", { style: styles.skipped, children: [
+        s.id,
+        " \u2014 ",
+        s.reason
+      ] }, s.id)) })
     ] }),
-    refreshBlocked(p) && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.error, children: [
-      "\u26A0 ",
-      t("notWritable")
+    p.catalogError && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("details", { style: styles.modalText, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("summary", { children: t("techDetails") }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: { ...styles.mono, fontSize: 12 }, children: p.catalogError })
     ] }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: styles.modalActions, children: [
       p.catalogSource === "local" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.secondary, marginRight: "auto" }, onClick: onOverlay, children: t("overlayBtn") }),
-      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.secondary }, onClick: onCancel, children: t("cancel") }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { ref: cancelRef, type: "button", style: { ...styles.button, ...styles.secondary }, onClick: onCancel, children: t("cancel") }),
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
         "button",
         {
           type: "button",
-          style: { ...styles.button, ...styles.primary, ...refreshBlocked(p) ? { opacity: 0.5, cursor: "not-allowed" } : null },
-          disabled: refreshBlocked(p),
-          onClick: onConfirm,
-          children: t("confirmRefresh")
+          style: { ...styles.button, ...styles.primary, ...p.evidence?.stale === true ? { opacity: 0.5, cursor: "not-allowed" } : null },
+          disabled: p.evidence?.stale === true,
+          onClick: confirmClick,
+          children: t("applyChanges")
         }
       )
     ] })
   ] }) });
 }
+function RetireDialog({ t, onConfirm, onCancel }) {
+  const cancelRef = (0, import_react.useRef)(null);
+  const surface = (0, import_react.useRef)(null);
+  if (!surface.current) surface.current = sampleThemeSurface();
+  (0, import_react.useEffect)(() => {
+    cancelRef.current?.focus();
+  }, []);
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: styles.modalMask, role: "dialog", "aria-modal": "true", onKeyDown: (e) => {
+    if (e.key === "Escape") onCancel();
+  }, children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { ...styles.modal, background: surface.current.bg, color: surface.current.fg, maxWidth: 420 }, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h4", { style: styles.modalTitle, children: t("retireTitle") }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.modalText, children: t("retireConfirmText") }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: styles.modalActions, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { ref: cancelRef, type: "button", style: { ...styles.button, ...styles.secondary }, onClick: onCancel, children: t("cancel") }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.primary }, onClick: onConfirm, children: t("retireBtn") })
+    ] })
+  ] }) });
+}
 function CopilotSection({ t = (key) => DICTS.en[key] ?? key }) {
-  const [page, setPage] = (0, import_react.useState)("loading");
-  const [notices, setNotices] = (0, import_react.useState)([]);
-  const [error, setError] = (0, import_react.useState)(void 0);
+  const [auth, setAuth] = (0, import_react.useState)({ phase: "loading", connectivity: "online", shared: false });
   const [copied, setCopied] = (0, import_react.useState)(false);
-  const timer = (0, import_react.useRef)(null);
+  const [copyFail, setCopyFail] = (0, import_react.useState)(false);
   const [flow, setFlow] = (0, import_react.useState)(initial);
   const flowRef = (0, import_react.useRef)(flow);
+  const authFlowRef = (0, import_react.useRef)(null);
+  if (!authFlowRef.current && typeof fetch === "function") {
+    authFlowRef.current = createAuthFlow({ onState: (s) => setAuth(s) });
+  }
   const drive = (event) => advance(flowRef.current, event, fetch, (next) => {
     flowRef.current = next;
     setFlow(next);
@@ -492,141 +981,183 @@ function CopilotSection({ t = (key) => DICTS.en[key] ?? key }) {
     drive({ type: "init" });
   }, []);
   (0, import_react.useEffect)(() => {
-    let alive = true;
-    fetch("/copilot-auth/status").then((r) => r.json()).then((d) => {
-      if (!alive) return;
-      if (d.configured) {
-        setPage("authorized");
-        return;
-      }
-      fetch("/copilot-auth/state").then((r) => r.json()).then((s) => {
-        if (!alive) return;
-        setNotices(s.notices ?? []);
-        if (s.status === "failed") {
-          setPage("failed");
-          setError(s.error ?? t("unknown"));
-        } else if (s.status === "running") {
-          setPage("running");
-          poll();
-        } else {
-          setPage("idle");
-        }
-      }).catch(() => {
-        if (alive) setPage("idle");
-      });
-    }).catch(() => {
-      if (alive) setPage("idle");
-    });
-    return () => {
-      alive = false;
-      if (timer.current) clearInterval(timer.current);
-    };
+    void authFlowRef.current?.init();
+    return () => authFlowRef.current?.dispose();
   }, []);
-  const poll = () => {
-    if (timer.current) clearInterval(timer.current);
-    timer.current = setInterval(() => {
-      fetch("/copilot-auth/state").then((r) => r.json()).then((s) => {
-        setNotices(s.notices ?? []);
-        if (s.status !== "running") {
-          if (timer.current) clearInterval(timer.current);
-          timer.current = null;
-          if (s.status === "authorized") {
-            setPage("authorized");
-          } else {
-            setPage("failed");
-            setError(s.error ?? t("unknown"));
-          }
-        }
-      }).catch(() => {
-      });
-    }, 1e3);
-  };
   const login = () => {
     setCopied(false);
-    setError(void 0);
-    setNotices([]);
-    fetch("/copilot-auth/start", { method: "POST" }).catch(() => {
-    });
-    setPage("running");
-    poll();
+    setCopyFail(false);
+    void authFlowRef.current?.start();
   };
-  const logout = async () => {
-    if (timer.current) {
-      clearInterval(timer.current);
-      timer.current = null;
-    }
-    try {
-      await fetch("/copilot-auth/logout", { method: "POST" });
-    } catch {
-    }
-    setNotices([]);
-    setError(void 0);
-    setPage("idle");
+  const withdraw = () => {
+    void authFlowRef.current?.cancel();
+  };
+  const checkStatus = () => {
+    void authFlowRef.current?.refresh();
   };
   const copyCode = async (code) => {
     try {
       await navigator.clipboard.writeText(code);
       setCopied(true);
+      setCopyFail(false);
       setTimeout(() => setCopied(false), 2e3);
     } catch {
+      setCopyFail(true);
     }
   };
-  const codeNotice = [...notices].reverse().find((n) => n && typeof n.code === "string" && n.code !== "");
-  const badgeText = page === "loading" ? t("loading") : t(page);
+  const phase = auth.phase;
+  const attempt = auth.attempt;
+  const notices = [...attempt?.notices ?? []].reverse();
+  const codeNotice = typeof attempt?.code === "string" && attempt.code !== "" ? { code: attempt.code, url: attempt.url } : (() => {
+    const n = notices.find((x) => x && typeof x.code === "string" && x.code !== "");
+    return n ? { code: n.code, url: n.url } : null;
+  })();
+  const badgeText = t(phase === "risk" ? "riskBadge" : phase === "loading" ? "loading" : phase);
   return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: styles.section, children: [
     /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h3", { style: styles.title, children: t("title") }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.intro, children: t("intro") }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: styles.badgeRow, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: { ...styles.dot, background: badgeColor[page] ?? "#adb5bd" } }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: { ...styles.dot, background: badgeColor[phase] ?? "#adb5bd" } }),
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: styles.badge, children: badgeText })
     ] }),
-    page === "running" && codeNotice && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: styles.card, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.codeHint, children: t("codeHint") }),
-      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: styles.codeRow, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: styles.code, children: codeNotice.code }),
-        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.secondary }, onClick: () => copyCode(codeNotice.code), children: copied ? t("copied") : t("copy") })
-      ] }),
-      codeNotice.url && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("a", { style: styles.link, href: codeNotice.url, target: "_blank", rel: "noreferrer", children: codeNotice.url })
+    auth.connectivity !== "online" && phase !== "loading" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
+      "\u26A0 ",
+      t("connection")
     ] }),
-    page === "failed" && error && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.error, children: error }),
-    page === "authorized" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { display: "flex", gap: 10, alignItems: "center", flexWrap: "wrap" }, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.secondary }, onClick: logout, children: t("logout") }),
-      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
-        "button",
-        {
-          type: "button",
-          style: { ...styles.button, ...styles.primary, ...refreshBlocked(flow) ? { opacity: 0.5, cursor: "not-allowed" } : null },
-          disabled: refreshBlocked(flow) || flow.name === "previewing" || flow.name === "applying",
-          onClick: () => drive({ type: "start" }),
-          children: flow.name === "previewing" ? t("refreshing") : flow.name === "applying" ? t("applying") : t("refreshNow")
-        }
-      )
+    auth.connectivity === "manual" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.secondary }, onClick: checkStatus, children: t("retryNow") }) }),
+    phase === "waiting" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+      auth.shared && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
+        "\u24D8 ",
+        t("attemptShared")
+      ] }),
+      codeNotice && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: styles.card, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.codeHint, children: t("codeHint") }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: styles.codeRow, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: styles.code, children: codeNotice.code }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.secondary }, onClick: () => copyCode(codeNotice.code), children: copied ? t("copied") : t("copy") })
+        ] }),
+        codeNotice.url && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("a", { style: styles.link, href: codeNotice.url, target: "_blank", rel: "noreferrer", children: codeNotice.url }),
+        copyFail && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.error, children: t("copyFailed") })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.secondary }, onClick: withdraw, children: t("withdrawAuth") }) })
     ] }),
-    page === "authorized" && isRegistryMode(flow) && flow.name !== "failed" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
-      "\u24D8 ",
-      t("registryMode")
+    phase === "risk" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: styles.card, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
+        "\u26A0 ",
+        t("authUnsafe")
+      ] }),
+      auth.riskKind === "withdrawal-pending-unverified" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.modalText, children: auth.withdrawalDelivery === "invoked" ? t("withdrawal") : t("withdrawalUnavailable") }),
+      auth.riskKind === "timed-out-unverified" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.modalText, children: t("attemptTimeout") }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.secondary }, onClick: checkStatus, children: t("retryNow") }) })
     ] }),
-    page === "authorized" && refreshBlocked(flow) && flow.name !== "failed" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
+    phase === "unavailable" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
       "\u26A0 ",
-      t("notWritable")
+      t("unavailable")
     ] }),
-    page === "authorized" && flow.name === "applied" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.banner, children: t("registryApplied").replace("%s", String(flow.injected ?? 0)) }),
-    page === "authorized" && flow.name === "restartNeeded" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
-      "\u26A0 ",
-      t("restartNeeded")
+    phase === "failed" && attempt?.error && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.error, children: attempt.error }),
+    phase === "authorized" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: styles.card, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { display: "flex", gap: 10, alignItems: "center", flexWrap: "wrap" }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.secondary, opacity: 0.5, cursor: "not-allowed" }, disabled: true, title: t("authUnsafe"), children: t("logout") }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.secondary, opacity: 0.5, cursor: "not-allowed" }, disabled: true, title: t("authUnsafe"), children: t("reauthorize") }),
+        ["previewing", "applying", "checking", "retiring"].includes(flow.name) ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.primary, opacity: 0.5 }, disabled: true, children: flow.name === "applying" ? t("applying") : t("refreshing") }) : /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+            "button",
+            {
+              type: "button",
+              style: { ...styles.button, ...styles.primary, ...refreshBlocked(flow.flags) ? { opacity: 0.5, cursor: "not-allowed" } : null },
+              disabled: refreshBlocked(flow.flags),
+              onClick: () => drive({ type: "start", operation: "supplement" }),
+              children: t("supplement")
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+            "button",
+            {
+              type: "button",
+              style: { ...styles.button, ...styles.primary, ...refreshBlocked(flow.flags) ? { opacity: 0.5, cursor: "not-allowed" } : null },
+              disabled: refreshBlocked(flow.flags),
+              onClick: () => drive({ type: "start", operation: "rebuild" }),
+              children: t("rebuild")
+            }
+          )
+        ] })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
+        "\u24D8 ",
+        t("authUnsafe")
+      ] }),
+      refreshBlocked(flow.flags) && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
+        "\u26A0 ",
+        blockedReasonText(t, flow.flags)
+      ] }),
+      flow.flags?.legacyStateDetected && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
+        "\u24D8 ",
+        t("legacy")
+      ] }),
+      flow.name === "pendingRestart" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
+        "\u26A0 ",
+        t("pendingRestart")
+      ] }),
+      flow.name === "busy" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.banner, children: [
+        "\u24D8 ",
+        t("busy")
+      ] }),
+      flow.name === "resultUnknown" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: styles.error, children: [
+          "\u26A0 ",
+          t("unknownResult")
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.secondary }, onClick: () => drive({ type: "check" }), children: t("retryNow") }) })
+      ] }),
+      flow.name === "result" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { children: [
+        (() => {
+          const st = flow.result?.status;
+          const key = {
+            applied: "applied",
+            conflict: "conflict",
+            partial: "partial",
+            "rolled-back": "rolledBack",
+            "rollback-conflict": "rollbackConflict",
+            "recovery-needed": "recoveryNeeded",
+            "intent-retired": "recoveryNeeded"
+          }[st];
+          return key ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: st === "applied" ? styles.banner : styles.error, children: [
+            st === "applied" ? "\u2713" : "\u26A0",
+            " ",
+            t(key)
+          ] }) : null;
+        })(),
+        ["recovery-needed", "rollback-conflict", "intent-retired"].includes(flow.result?.status) && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.secondary }, onClick: () => drive({ type: "retire-request" }), children: t("retireBtn") }) }),
+        (flow.result?.error || flow.result?.changes) && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("details", { style: styles.modalText, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("summary", { children: t("techDetails") }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { style: { ...styles.mono, fontSize: 12 }, children: [
+            flow.result?.error ?? "",
+            flow.result?.changes ? ` ${JSON.stringify(flow.result.changes)}` : ""
+          ] })
+        ] })
+      ] }),
+      flow.name === "failed" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.error, children: flow.error === "state-corrupt" ? t("stateCorrupt") : flow.error })
     ] }),
-    page === "authorized" && flow.name === "failed" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: styles.error, children: flow.error === "state-corrupt" ? t("stateCorrupt") : flow.error === "catalog-not-writable" ? t("notWritable") : flow.error === "registry-inject-failed" || flow.error === "registry-not-effective" ? t("registryFailed") : flow.error }),
     flow.name === "confirming" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
       RefreshModal,
       {
         t,
         flow,
-        onConfirm: () => drive({ type: "confirm" }),
+        onSelect: (selectedIds) => drive({ type: "select", selectedIds }),
+        onConfirm: (opts) => drive({ type: "confirm", ...opts }),
         onCancel: () => drive({ type: "cancel" }),
-        onOverlay: () => drive({ type: "start", mode: "overlay" })
+        onOverlay: () => drive({ type: "start", catalogSource: "overlay" })
+      }
+    ),
+    flow.name === "retireConfirm" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+      RetireDialog,
+      {
+        t,
+        onConfirm: () => drive({ type: "retire-confirm" }),
+        onCancel: () => drive({ type: "cancel" })
       }
     ),
-    (page === "idle" || page === "failed") && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.primary }, onClick: login, children: t("login") }) })
+    (phase === "idle" || phase === "failed") && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", style: { ...styles.button, ...styles.primary }, onClick: login, children: t("login") }) })
   ] });
 }
 function apply(ctx) {