npm - @profoundlogic/coderflow-server - Versions diffs - 0.2.1 - Mend

@profoundlogic/coderflow-server 0.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (202) hide show

package/LICENSE.txt +322 -0
package/README.md +158 -0
package/dist/LICENSE.txt +322 -0
package/dist/README.md +158 -0
package/dist/base-image/Dockerfile +184 -0
package/dist/base-image/agent-wrapper.sh +143 -0
package/dist/base-image/apply-local-state.sh +357 -0
package/dist/base-image/coder-git-credential-helper +307 -0
package/dist/base-image/entrypoint.sh +942 -0
package/dist/base-image/ssh_config_template +41 -0
package/dist/base-image/start-code-server.sh +76 -0
package/dist/base-image/sync-repos.sh +170 -0
package/dist/base-image/vscode-extensions.txt +10 -0
package/dist/base-image/vscode-settings.json +41 -0
package/dist/coder-server.js +2 -0
package/dist/config/cli-models.json +45 -0
package/dist/config/imported-skills.schema.json +83 -0
package/dist/config/skill-catalog.json +18 -0
package/dist/config/skill-catalog.schema.json +140 -0
package/dist/config.js +1 -0
package/dist/examples/oidc.json.example +11 -0
package/dist/lib/agent-keepalive.js +1 -0
package/dist/lib/api-keys.js +1 -0
package/dist/lib/apiKeys.js +1 -0
package/dist/lib/auto-judge.js +1 -0
package/dist/lib/basic-auth.js +1 -0
package/dist/lib/build-history.js +1 -0
package/dist/lib/build-output-service.js +1 -0
package/dist/lib/build-scheduler.js +1 -0
package/dist/lib/build-service.js +1 -0
package/dist/lib/claude-oauth-refresh.js +1 -0
package/dist/lib/cli/build.js +1 -0
package/dist/lib/cli/config-command.js +1 -0
package/dist/lib/cli/config.js +1 -0
package/dist/lib/cli/create-user.js +1 -0
package/dist/lib/cli/init.js +1 -0
package/dist/lib/cli/jira.js +1 -0
package/dist/lib/cli/license.js +1 -0
package/dist/lib/cli/server-manager.js +1 -0
package/dist/lib/container-tokens.js +1 -0
package/dist/lib/data-dir.js +1 -0
package/dist/lib/deployment-history.js +1 -0
package/dist/lib/deployment-service.js +1 -0
package/dist/lib/docker-utils.js +1 -0
package/dist/lib/email.js +1 -0
package/dist/lib/emailTemplates.js +1 -0
package/dist/lib/entitlement.js +1 -0
package/dist/lib/fetch-utils.js +1 -0
package/dist/lib/git-provider-service.js +1 -0
package/dist/lib/git-provider-setup/assets/coderflow_github_app.png +0 -0
package/dist/lib/git-provider-setup/github-setup-handler.js +1 -0
package/dist/lib/git-provider-setup/index.js +1 -0
package/dist/lib/git-provider-setup/setup-factory.js +1 -0
package/dist/lib/git-provider-setup/setup-interface.js +1 -0
package/dist/lib/git-providers/azure-devops-provider.js +1 -0
package/dist/lib/git-providers/github-app-provider.js +1 -0
package/dist/lib/git-providers/index.js +1 -0
package/dist/lib/git-providers/provider-factory.js +1 -0
package/dist/lib/git-providers/provider-interface.js +1 -0
package/dist/lib/jira-client.js +1 -0
package/dist/lib/logger.js +1 -0
package/dist/lib/model-fetcher.js +1 -0
package/dist/lib/notifications.js +1 -0
package/dist/lib/oidc-auth.js +1 -0
package/dist/lib/oidc-device-flow.js +1 -0
package/dist/lib/passwordTokens.js +1 -0
package/dist/lib/pin-cascade.js +1 -0
package/dist/lib/provider-accounts.js +1 -0
package/dist/lib/provider-oauth.js +1 -0
package/dist/lib/provider-profile.js +1 -0
package/dist/lib/provider-token-refresh.js +1 -0
package/dist/lib/roles.js +1 -0
package/dist/lib/secrets.js +1 -0
package/dist/lib/state-capture.js +1 -0
package/dist/lib/static-files.js +1 -0
package/dist/lib/task-name-generator.js +1 -0
package/dist/lib/users.js +1 -0
package/dist/middleware/requireAuth.js +1 -0
package/dist/middleware/requireInit.js +1 -0
package/dist/middleware/requirePermission.js +1 -0
package/dist/package-lock.json +4151 -0
package/dist/package.json +50 -0
package/dist/routes/apiKeys.js +1 -0
package/dist/routes/auth-oidc.js +1 -0
package/dist/routes/auth.js +1 -0
package/dist/routes/build.js +1 -0
package/dist/routes/containers.js +1 -0
package/dist/routes/deploy-task.js +1 -0
package/dist/routes/environment-management.js +1 -0
package/dist/routes/environments.js +1 -0
package/dist/routes/external-skills.js +1 -0
package/dist/routes/git-credentials.js +1 -0
package/dist/routes/git-provider-setup.js +1 -0
package/dist/routes/health.js +1 -0
package/dist/routes/jira.js +1 -0
package/dist/routes/objective-management.js +1 -0
package/dist/routes/password.js +1 -0
package/dist/routes/prompt.js +1 -0
package/dist/routes/provider-auth.js +1 -0
package/dist/routes/qa.js +1 -0
package/dist/routes/settings.js +1 -0
package/dist/routes/skill-management.js +1 -0
package/dist/routes/skills.js +1 -0
package/dist/routes/tasks.js +2 -0
package/dist/routes/templates.js +1 -0
package/dist/routes/test-task.js +1 -0
package/dist/routes/test.js +1 -0
package/dist/routes/users.js +1 -0
package/dist/routes/visualizations.js +1 -0
package/dist/schemas/template-metadata.schema.json +178 -0
package/dist/scripts/create-user.js +2 -0
package/dist/shipped-skills/environment-instructions/SKILL.md +154 -0
package/dist/shipped-skills/environment-templates/SKILL.md +282 -0
package/dist/shipped-skills/objective-management/SKILL.md +238 -0
package/dist/shipped-skills/skill-editor/SKILL.md +326 -0
package/dist/start.js +2 -0
package/dist/web-ui/public/activity-detail-modal.js +1 -0
package/dist/web-ui/public/activity-feed.js +1 -0
package/dist/web-ui/public/activity-formatters.js +1 -0
package/dist/web-ui/public/agent-event-parser.js +1 -0
package/dist/web-ui/public/app.js +1 -0
package/dist/web-ui/public/approve-dialog.js +1 -0
package/dist/web-ui/public/coderflow-logo-reversed.svg +46 -0
package/dist/web-ui/public/coderflow-logo.svg +46 -0
package/dist/web-ui/public/comments-widget.js +1 -0
package/dist/web-ui/public/docs/.nojekyll +0 -0
package/dist/web-ui/public/docs/README.md +26 -0
package/dist/web-ui/public/docs/_sidebar.md +47 -0
package/dist/web-ui/public/docs/admin/ai-providers.md +132 -0
package/dist/web-ui/public/docs/admin/email-notifications.md +69 -0
package/dist/web-ui/public/docs/admin/environments.md +215 -0
package/dist/web-ui/public/docs/admin/git-providers.md +147 -0
package/dist/web-ui/public/docs/admin/installation.md +313 -0
package/dist/web-ui/public/docs/admin/skills.md +35 -0
package/dist/web-ui/public/docs/admin/sso.md +241 -0
package/dist/web-ui/public/docs/admin/users-and-roles.md +57 -0
package/dist/web-ui/public/docs/code/cli.md +102 -0
package/dist/web-ui/public/docs/code/files-and-editing.md +86 -0
package/dist/web-ui/public/docs/code/terminal-access.md +110 -0
package/dist/web-ui/public/docs/code/vscode-extension.md +58 -0
package/dist/web-ui/public/docs/getting-started/core-concepts.md +129 -0
package/dist/web-ui/public/docs/getting-started/overview.md +46 -0
package/dist/web-ui/public/docs/index.html +151 -0
package/dist/web-ui/public/docs/integrations/custom.md +58 -0
package/dist/web-ui/public/docs/integrations/ibmi/overview.md +58 -0
package/dist/web-ui/public/docs/integrations/overview.md +48 -0
package/dist/web-ui/public/docs/objectives/qa-mode.md +90 -0
package/dist/web-ui/public/docs/objectives/staged-tasks.md +60 -0
package/dist/web-ui/public/docs/objectives/working-with-objectives.md +102 -0
package/dist/web-ui/public/docs/tasks/approval-and-deployment.md +83 -0
package/dist/web-ui/public/docs/tasks/creating-tasks.md +111 -0
package/dist/web-ui/public/docs/tasks/judging.md +114 -0
package/dist/web-ui/public/docs/tasks/providing-feedback.md +41 -0
package/dist/web-ui/public/docs/tasks/task-groups.md +73 -0
package/dist/web-ui/public/docs/tasks/winner-selection.md +75 -0
package/dist/web-ui/public/docs/templates/batch-processing.md +152 -0
package/dist/web-ui/public/docs/templates/task-templates.md +44 -0
package/dist/web-ui/public/docs/templates/template-examples.md +93 -0
package/dist/web-ui/public/docs/testing/profound-automated-testing.md +77 -0
package/dist/web-ui/public/docs/testing/task-visualizations.md +42 -0
package/dist/web-ui/public/docs/testing/testing-menu.md +118 -0
package/dist/web-ui/public/environments.css +3942 -0
package/dist/web-ui/public/environments.html +1791 -0
package/dist/web-ui/public/environments.js +1 -0
package/dist/web-ui/public/favicon-16.png +0 -0
package/dist/web-ui/public/favicon-32.png +0 -0
package/dist/web-ui/public/favicon.ico +0 -0
package/dist/web-ui/public/feedback-widget.css +3133 -0
package/dist/web-ui/public/feedback-widget.js +1 -0
package/dist/web-ui/public/git-history.css +2663 -0
package/dist/web-ui/public/git-history.html +272 -0
package/dist/web-ui/public/git-history.js +1 -0
package/dist/web-ui/public/git-status.js +1 -0
package/dist/web-ui/public/index.html +1459 -0
package/dist/web-ui/public/index.js +1 -0
package/dist/web-ui/public/login.html +346 -0
package/dist/web-ui/public/login.js +1 -0
package/dist/web-ui/public/markdown-editor.js +1 -0
package/dist/web-ui/public/markdown-file-editor.js +1 -0
package/dist/web-ui/public/modal-maximize.js +1 -0
package/dist/web-ui/public/notifications.js +1 -0
package/dist/web-ui/public/server-health.js +1 -0
package/dist/web-ui/public/settings.css +761 -0
package/dist/web-ui/public/settings.html +1044 -0
package/dist/web-ui/public/settings.js +1 -0
package/dist/web-ui/public/setup-password.html +355 -0
package/dist/web-ui/public/setup-password.js +1 -0
package/dist/web-ui/public/skills.css +1949 -0
package/dist/web-ui/public/skills.html +820 -0
package/dist/web-ui/public/skills.js +1 -0
package/dist/web-ui/public/sse-client.js +1 -0
package/dist/web-ui/public/sse-shared-worker.js +1 -0
package/dist/web-ui/public/styles.css +18614 -0
package/dist/web-ui/public/task.html +1779 -0
package/dist/web-ui/public/task.js +1 -0
package/dist/web-ui/public/terminal.html +45 -0
package/dist/web-ui/public/terminal.js +1 -0
package/dist/web-ui/public/theme.js +1 -0
package/dist/web-ui/public/users.html +298 -0
package/dist/web-ui/public/users.js +1 -0
package/dist/web-ui/public/variant-grouping.js +1 -0
package/package.json +63 -0

package/dist/web-ui/public/settings.html ADDED Viewed

@@ -0,0 +1,1044 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Server Settings - CoderFlow</title>
+  <link rel="icon" href="/favicon.svg" type="image/svg+xml">
+  <link rel="icon" href="/favicon-32.png" type="image/png" sizes="32x32">
+  <link rel="icon" href="/favicon-16.png" type="image/png" sizes="16x16">
+  <link rel="icon" href="/favicon.ico">
+  <script>
+    (() => {
+      const key = 'profound-coder-theme';
+      try {
+        const stored = localStorage.getItem(key);
+        const prefersDark = window.matchMedia && window.matchMedia('(prefers-color-scheme: dark)').matches;
+        const theme = stored === 'dark' || stored === 'light' ? stored : (prefersDark ? 'dark' : 'light');
+        document.documentElement.dataset.theme = theme;
+        document.documentElement.style.colorScheme = theme === 'dark' ? 'dark' : 'light';
+      } catch (error) {
+        document.documentElement.dataset.theme = 'light';
+      }
+    })();
+  </script>
+  <link rel="stylesheet" href="styles.css?v=84">
+  <link rel="stylesheet" href="settings.css?v=1">
+  <script type="module" src="app.js?v=67"></script>
+  <script type="module" src="settings.js?v=1"></script>
+</head>
+<body>
+  <main class="task-detail">
+    <div class="task-hero">
+      <div class="hero-top">
+        <nav class="breadcrumb" aria-label="Breadcrumb">
+          <a class="breadcrumb-link" href="index.html">
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
+              <path d="M3 11.5L12 4l9 7.5"></path>
+              <path d="M5 10.5V20h5v-5h4v5h5v-9.5"></path>
+            </svg>
+            <span>Home</span>
+          </a>
+          <span class="breadcrumb-separator" aria-hidden="true">/</span>
+          <span class="breadcrumb-current">Settings</span>
+        </nav>
+        <span class="task-context">Administration</span>
+        <!-- Admin Menu (gear icon) -->
+        <div class="admin-menu-container" id="admin-menu-container" hidden>
+          <button class="btn-icon-admin" id="admin-menu-btn" title="Admin">
+            <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+              <circle cx="12" cy="12" r="3"></circle>
+              <path d="M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 0 1 0 2.83 2 2 0 0 1-2.83 0l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 0 1-2 2 2 2 0 0 1-2-2v-.09A1.65 1.65 0 0 0 9 19.4a1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 0 1-2.83 0 2 2 0 0 1 0-2.83l.06-.06a1.65 1.65 0 0 0 .33-1.82 1.65 1.65 0 0 0-1.51-1H3a2 2 0 0 1-2-2 2 2 0 0 1 2-2h.09A1.65 1.65 0 0 0 4.6 9a1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 0 1 0-2.83 2 2 0 0 1 2.83 0l.06.06a1.65 1.65 0 0 0 1.82.33H9a1.65 1.65 0 0 0 1-1.51V3a2 2 0 0 1 2-2 2 2 0 0 1 2 2v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 0 1 2.83 0 2 2 0 0 1 0 2.83l-.06.06a1.65 1.65 0 0 0-.33 1.82V9a1.65 1.65 0 0 0 1.51 1H21a2 2 0 0 1 2 2 2 2 0 0 1-2 2h-.09a1.65 1.65 0 0 0-1.51 1z"></path>
+            </svg>
+          </button>
+          <div class="dropdown-menu admin-dropdown" id="admin-menu" hidden>
+            <button type="button" class="dropdown-item admin-menu-item" onclick="window.location.href='users.html'">
+              <svg class="option-icon icon-users" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                <path d="M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2"></path>
+                <circle cx="9" cy="7" r="4"></circle>
+                <path d="M23 21v-2a4 4 0 0 0-3-3.87"></path>
+                <path d="M16 3.13a4 4 0 0 1 0 7.75"></path>
+              </svg>
+              <span class="option-text">Users</span>
+            </button>
+            <button type="button" class="dropdown-item admin-menu-item" onclick="window.location.href='environments.html'">
+              <svg class="option-icon icon-environments" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                <circle cx="12" cy="12" r="10"></circle>
+                <line x1="2" y1="12" x2="22" y2="12"></line>
+                <path d="M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z"></path>
+              </svg>
+              <span class="option-text">Environments</span>
+            </button>
+            <button type="button" class="dropdown-item admin-menu-item" onclick="window.location.href='skills.html'">
+              <svg class="option-icon icon-skills" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                <path d="M14.7 6.3a1 1 0 0 0 0 1.4l1.6 1.6a1 1 0 0 0 1.4 0l3.77-3.77a6 6 0 0 1-7.94 7.94l-6.91 6.91a2.12 2.12 0 0 1-3-3l6.91-6.91a6 6 0 0 1 7.94-7.94l-3.76 3.76z"></path>
+              </svg>
+              <span class="option-text">Skills</span>
+            </button>
+            <button type="button" class="dropdown-item admin-menu-item" id="server-health-btn">
+              <svg class="option-icon icon-health" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                <path d="M22 12h-4l-3 9L9 3l-3 9H2"></path>
+              </svg>
+              <span class="option-text">Server Health</span>
+            </button>
+            <button type="button" class="dropdown-item admin-menu-item" onclick="window.location.href='git-history.html'">
+              <svg class="option-icon icon-git-history" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                <circle cx="6" cy="6" r="2"></circle>
+                <circle cx="6" cy="18" r="2"></circle>
+                <circle cx="18" cy="12" r="2"></circle>
+                <path d="M6 8v8"></path>
+                <path d="M6 12h10"></path>
+              </svg>
+              <span class="option-text">Git History</span>
+            </button>
+          </div>
+        </div>
+        <div id="theme-toggle-container"></div>
+      </div>
+      <div class="status-hero">
+        <div class="status-copy">
+          <h1>Server Settings</h1>
+          <p class="task-subtitle">Configure global server settings and integrations</p>
+        </div>
+      </div>
+    </div>
+    <!-- Loading State -->
+    <div id="settings-loading" class="loading">
+      <svg class="loading-spinner" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+        <path d="M21 12a9 9 0 1 1-6.219-8.56"></path>
+      </svg>
+      <span>Loading settings...</span>
+    </div>
+    <!-- Error State -->
+    <div id="settings-error" class="empty-state-card" hidden>
+      <div class="empty-state-icon">⚠️</div>
+      <h2>Failed to load settings</h2>
+      <p id="settings-error-message" class="text-muted"></p>
+      <button class="btn-primary" id="retry-settings-btn">Try Again</button>
+    </div>
+    <!-- Main Content -->
+    <div id="settings-content" class="settings-layout" hidden>
+      <!-- Settings Navigation -->
+      <aside class="settings-sidebar">
+        <nav class="settings-nav" role="tablist">
+          <button class="settings-nav-item active" data-section="general" role="tab">
+            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+              <path d="M12.22 2h-.44a2 2 0 0 0-2 2v.18a2 2 0 0 1-1 1.73l-.43.25a2 2 0 0 1-2 0l-.15-.08a2 2 0 0 0-2.73.73l-.22.38a2 2 0 0 0 .73 2.73l.15.1a2 2 0 0 1 1 1.72v.51a2 2 0 0 1-1 1.74l-.15.09a2 2 0 0 0-.73 2.73l.22.38a2 2 0 0 0 2.73.73l.15-.08a2 2 0 0 1 2 0l.43.25a2 2 0 0 1 1 1.73V20a2 2 0 0 0 2 2h.44a2 2 0 0 0 2-2v-.18a2 2 0 0 1 1-1.73l.43-.25a2 2 0 0 1 2 0l.15.08a2 2 0 0 0 2.73-.73l.22-.39a2 2 0 0 0-.73-2.73l-.15-.08a2 2 0 0 1-1-1.74v-.5a2 2 0 0 1 1-1.74l.15-.09a2 2 0 0 0 .73-2.73l-.22-.38a2 2 0 0 0-2.73-.73l-.15.08a2 2 0 0 1-2 0l-.43-.25a2 2 0 0 1-1-1.73V4a2 2 0 0 0-2-2z"></path>
+              <circle cx="12" cy="12" r="3"></circle>
+            </svg>
+            General
+          </button>
+          <button class="settings-nav-item" data-section="keepalive" role="tab">
+            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+              <path d="M21 12a9 9 0 1 1-9-9c2.52 0 4.93 1 6.74 2.74L21 8"></path>
+              <path d="M21 3v5h-5"></path>
+            </svg>
+            Agent Keepalive
+          </button>
+          <button class="settings-nav-item" data-section="apikeys" role="tab">
+            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+              <path d="M21 2l-2 2m-7.61 7.61a5.5 5.5 0 1 1-7.778 7.778 5.5 5.5 0 0 1 7.777-7.777zm0 0L15.5 7.5m0 0l3 3L22 7l-3-3m-3.5 3.5L19 4"></path>
+            </svg>
+            API Keys
+          </button>
+          <button class="settings-nav-item" data-section="provider-auth" role="tab">
+            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+              <path d="M15 3h4a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2h-4"></path>
+              <polyline points="10 17 15 12 10 7"></polyline>
+              <line x1="15" y1="12" x2="3" y2="12"></line>
+            </svg>
+            Provider Authentication
+          </button>
+          <button class="settings-nav-item" data-section="models" role="tab">
+            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+              <rect x="3" y="3" width="18" height="18" rx="2" ry="2"></rect>
+              <line x1="3" y1="9" x2="21" y2="9"></line>
+              <line x1="9" y1="21" x2="9" y2="9"></line>
+            </svg>
+            Model Configuration
+          </button>
+          <button class="settings-nav-item" data-section="email" role="tab">
+            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+              <path d="M4 4h16c1.1 0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1 0-2-.9-2-2V6c0-1.1.9-2 2-2z"></path>
+              <polyline points="22,6 12,13 2,6"></polyline>
+            </svg>
+            Email (SMTP)
+          </button>
+          <button class="settings-nav-item" data-section="git-providers" role="tab">
+            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+              <path d="M9 19c-5 1.5-5-2.5-7-3m14 6v-3.87a3.37 3.37 0 0 0-.94-2.61c3.14-.35 6.44-1.54 6.44-7A5.44 5.44 0 0 0 20 4.77 5.07 5.07 0 0 0 19.91 1S18.73.65 16 2.48a13.38 13.38 0 0 0-7 0C6.27.65 5.09 1 5.09 1A5.07 5.07 0 0 0 5 4.77a5.44 5.44 0 0 0-1.5 3.78c0 5.42 3.3 6.61 6.44 7A3.37 3.37 0 0 0 9 18.13V22"></path>
+            </svg>
+            Git Providers
+          </button>
+          <button class="settings-nav-item" data-section="sso" role="tab">
+            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+              <rect x="3" y="11" width="18" height="11" rx="2" ry="2"></rect>
+              <path d="M7 11V7a5 5 0 0 1 10 0v4"></path>
+            </svg>
+            Single Sign-On
+          </button>
+        </nav>
+      </aside>
+      <!-- Settings Panels -->
+      <section class="settings-panels">
+        <!-- General Settings -->
+        <div id="section-general" class="settings-panel active" role="tabpanel">
+          <div class="content-card">
+            <div class="card-header">
+              <h3>General Settings</h3>
+            </div>
+            <div class="card-body">
+              <div id="general-inline-message" class="inline-message" hidden></div>
+              <div class="form-single-column">
+                <div class="form-row">
+                  <label for="settings-name">Setup Name</label>
+                  <input type="text" id="settings-name" class="form-input" placeholder="e.g., my-coder-setup">
+                </div>
+                <div class="form-row">
+                  <label for="settings-default-agent">Default Agent</label>
+                  <div id="settings-default-agent-container"></div>
+                </div>
+                <div class="form-row">
+                  <label for="settings-default-environment">Default Environment</label>
+                  <div id="settings-default-environment-container"></div>
+                </div>
+                <div class="form-row">
+                  <label for="settings-max-concurrent-agents">Max Concurrent Agents</label>
+                  <input type="number" id="settings-max-concurrent-agents" class="form-input" min="1" max="100" value="8" style="max-width: 120px;">
+                  <span class="form-hint">Limit how many agents can run simultaneously (tasks exceeding this limit will be queued)</span>
+                </div>
+              </div>
+            </div>
+            <div class="card-actions">
+              <button type="button" class="btn-primary" id="save-general-btn">Save</button>
+            </div>
+          </div>
+        </div>
+        <!-- Agent Keepalive Settings -->
+        <div id="section-keepalive" class="settings-panel" role="tabpanel" hidden>
+          <div class="content-card">
+            <div class="card-header">
+              <h3>Agent Keepalive Settings</h3>
+            </div>
+            <div class="card-body">
+              <div id="keepalive-inline-message" class="inline-message" hidden></div>
+              <p class="text-muted" style="margin-bottom: 20px;">Configure automatic token refresh for each agent to keep them authenticated and responsive</p>
+              <div id="keepalive-agents-container">
+                <!-- Claude -->
+                <div class="keepalive-agent-section">
+                  <div class="keepalive-agent-header">
+                    <h4>Claude</h4>
+                    <label class="toggle-switch">
+                      <input type="checkbox" id="keepalive-claude-enabled">
+                      <span class="toggle-slider"></span>
+                    </label>
+                  </div>
+                  <div class="keepalive-agent-row">
+                    <label for="keepalive-claude-interval">Refresh Interval (hours)</label>
+                    <input type="number" id="keepalive-claude-interval" class="form-input" min="1" max="24" value="6">
+                  </div>
+                  <div class="keepalive-agent-status" id="keepalive-claude-status-row">
+                    <span id="keepalive-claude-status">Loading status...</span>
+                  </div>
+                </div>
+                <!-- Codex -->
+                <div class="keepalive-agent-section">
+                  <div class="keepalive-agent-header">
+                    <h4>Codex</h4>
+                    <label class="toggle-switch">
+                      <input type="checkbox" id="keepalive-codex-enabled">
+                      <span class="toggle-slider"></span>
+                    </label>
+                  </div>
+                  <div class="keepalive-agent-row">
+                    <label for="keepalive-codex-interval">Refresh Interval (hours)</label>
+                    <input type="number" id="keepalive-codex-interval" class="form-input" min="1" max="24" value="8">
+                  </div>
+                  <div class="keepalive-agent-status" id="keepalive-codex-status-row">
+                    <span id="keepalive-codex-status">Loading status...</span>
+                  </div>
+                </div>
+                <!-- Gemini -->
+                <div class="keepalive-agent-section">
+                  <div class="keepalive-agent-header">
+                    <h4>Gemini</h4>
+                    <label class="toggle-switch">
+                      <input type="checkbox" id="keepalive-gemini-enabled">
+                      <span class="toggle-slider"></span>
+                    </label>
+                  </div>
+                  <div class="keepalive-agent-row">
+                    <label for="keepalive-gemini-interval">Refresh Interval (hours)</label>
+                    <input type="number" id="keepalive-gemini-interval" class="form-input" min="1" max="24" value="6">
+                  </div>
+                  <div class="keepalive-agent-status" id="keepalive-gemini-status-row">
+                    <span id="keepalive-gemini-status">Loading status...</span>
+                  </div>
+                </div>
+              </div>
+            </div>
+            <div class="card-actions">
+              <button type="button" class="btn-primary" id="save-keepalive-btn">Save</button>
+            </div>
+          </div>
+        </div>
+        <!-- API Keys Settings -->
+        <div id="section-apikeys" class="settings-panel" role="tabpanel" hidden>
+          <div class="content-card">
+            <div class="card-header">
+              <h3>API Keys</h3>
+            </div>
+            <div class="card-body" style="padding-top: 8px;">
+              <div id="apikeys-inline-message" class="inline-message" hidden></div>
+              <div class="apikeys-list">
+                <!-- Claude (Anthropic) -->
+                <div class="apikey-row">
+                  <div class="apikey-header">
+                    <span class="apikey-name">Claude</span>
+                    <span class="apikey-provider">Anthropic</span>
+                  </div>
+                  <div class="apikey-controls">
+                    <div class="apikey-input-group">
+                      <input type="password" id="apikey-claude" class="form-input code-font" placeholder="sk-ant-...">
+                      <button type="button" class="btn-icon apikey-toggle-visibility" data-target="apikey-claude" title="Toggle visibility">
+                        <svg class="eye-open" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                          <path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"></path>
+                          <circle cx="12" cy="12" r="3"></circle>
+                        </svg>
+                        <svg class="eye-closed" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="display: none;">
+                          <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24"></path>
+                          <line x1="1" y1="1" x2="23" y2="23"></line>
+                        </svg>
+                      </button>
+                    </div>
+                    <label class="toggle-switch" title="Enable for AI tasks">
+                      <input type="checkbox" id="apikey-claude-enabled">
+                      <span class="toggle-slider"></span>
+                    </label>
+                  </div>
+                </div>
+                <!-- Codex (OpenAI) -->
+                <div class="apikey-row">
+                  <div class="apikey-header">
+                    <span class="apikey-name">Codex</span>
+                    <span class="apikey-provider">OpenAI</span>
+                  </div>
+                  <div class="apikey-controls">
+                    <div class="apikey-input-group">
+                      <input type="password" id="apikey-codex" class="form-input code-font" placeholder="sk-...">
+                      <button type="button" class="btn-icon apikey-toggle-visibility" data-target="apikey-codex" title="Toggle visibility">
+                        <svg class="eye-open" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                          <path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"></path>
+                          <circle cx="12" cy="12" r="3"></circle>
+                        </svg>
+                        <svg class="eye-closed" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="display: none;">
+                          <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24"></path>
+                          <line x1="1" y1="1" x2="23" y2="23"></line>
+                        </svg>
+                      </button>
+                    </div>
+                    <label class="toggle-switch" title="Enable for AI tasks">
+                      <input type="checkbox" id="apikey-codex-enabled">
+                      <span class="toggle-slider"></span>
+                    </label>
+                  </div>
+                </div>
+                <!-- Gemini (Google) -->
+                <div class="apikey-row">
+                  <div class="apikey-header">
+                    <span class="apikey-name">Gemini</span>
+                    <span class="apikey-provider">Google</span>
+                  </div>
+                  <div class="apikey-controls">
+                    <div class="apikey-input-group">
+                      <input type="password" id="apikey-gemini" class="form-input code-font" placeholder="AIza...">
+                      <button type="button" class="btn-icon apikey-toggle-visibility" data-target="apikey-gemini" title="Toggle visibility">
+                        <svg class="eye-open" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                          <path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"></path>
+                          <circle cx="12" cy="12" r="3"></circle>
+                        </svg>
+                        <svg class="eye-closed" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="display: none;">
+                          <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24"></path>
+                          <line x1="1" y1="1" x2="23" y2="23"></line>
+                        </svg>
+                      </button>
+                    </div>
+                    <label class="toggle-switch" title="Enable for AI tasks">
+                      <input type="checkbox" id="apikey-gemini-enabled">
+                      <span class="toggle-slider"></span>
+                    </label>
+                  </div>
+                </div>
+              </div>
+            </div>
+            <div class="card-actions">
+              <button type="button" class="btn-primary" id="save-apikeys-btn">Save</button>
+            </div>
+          </div>
+        </div>
+        <!-- Provider Authentication Settings -->
+        <div id="section-provider-auth" class="settings-panel" role="tabpanel" hidden>
+          <div class="content-card">
+            <div class="card-header">
+              <h3>Provider Authentication</h3>
+            </div>
+            <div class="card-body" style="padding-top: 8px;">
+              <div id="provider-auth-inline-message" class="inline-message" hidden></div>
+              <p class="text-muted" style="margin-bottom: 16px;">Sign in to AI provider accounts. Multiple accounts can be connected per provider.</p>
+              <div class="provider-auth-list">
+                <!-- Claude (Anthropic) -->
+                <div class="provider-auth-section" data-provider="claude">
+                  <div class="provider-auth-header-row">
+                    <div class="provider-auth-title">
+                      <span class="provider-name">Claude</span>
+                      <span class="provider-company">Anthropic</span>
+                    </div>
+                    <button class="btn-primary btn-small" id="provider-claude-add-btn">
+                      <svg width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" style="margin-right: 4px; vertical-align: -1px;">
+                        <line x1="12" y1="5" x2="12" y2="19"></line>
+                        <line x1="5" y1="12" x2="19" y2="12"></line>
+                      </svg>
+                      Add Account
+                    </button>
+                  </div>
+                  <div class="provider-accounts-list" id="provider-claude-accounts">
+                    <div class="provider-no-accounts">No accounts connected</div>
+                  </div>
+                </div>
+                <!-- Codex (OpenAI) -->
+                <div class="provider-auth-section" data-provider="codex">
+                  <div class="provider-auth-header-row">
+                    <div class="provider-auth-title">
+                      <span class="provider-name">Codex</span>
+                      <span class="provider-company">OpenAI</span>
+                    </div>
+                    <button class="btn-primary btn-small" id="provider-codex-add-btn">
+                      <svg width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" style="margin-right: 4px; vertical-align: -1px;">
+                        <line x1="12" y1="5" x2="12" y2="19"></line>
+                        <line x1="5" y1="12" x2="19" y2="12"></line>
+                      </svg>
+                      Add Account
+                    </button>
+                  </div>
+                  <div class="provider-accounts-list" id="provider-codex-accounts">
+                    <div class="provider-no-accounts">No accounts connected</div>
+                  </div>
+                </div>
+                <!-- Gemini (Google) -->
+                <div class="provider-auth-section" data-provider="gemini">
+                  <div class="provider-auth-header-row">
+                    <div class="provider-auth-title">
+                      <span class="provider-name">Gemini</span>
+                      <span class="provider-company">Google</span>
+                    </div>
+                    <button class="btn-primary btn-small" id="provider-gemini-add-btn">
+                      <svg width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" style="margin-right: 4px; vertical-align: -1px;">
+                        <line x1="12" y1="5" x2="12" y2="19"></line>
+                        <line x1="5" y1="12" x2="19" y2="12"></line>
+                      </svg>
+                      Add Account
+                    </button>
+                  </div>
+                  <div class="provider-accounts-list" id="provider-gemini-accounts">
+                    <div class="provider-no-accounts">No accounts connected</div>
+                  </div>
+                </div>
+              </div>
+            </div>
+          </div>
+        </div>
+        <!-- Model Configuration Settings -->
+        <div id="section-models" class="settings-panel" role="tabpanel" hidden>
+          <div class="content-card">
+            <div class="card-header">
+              <h3>Model Configuration</h3>
+            </div>
+            <div class="card-body">
+              <div id="models-inline-message" class="inline-message" hidden></div>
+              <p class="text-muted" style="margin-bottom: 16px;">Configure which models to use for each AI provider</p>
+              <div class="form-single-column">
+                <div class="form-row">
+                  <label for="model-claude">Claude Model</label>
+                  <div id="model-claude-container"></div>
+                </div>
+                <div class="form-row">
+                  <label for="model-codex">Codex Model</label>
+                  <div id="model-codex-container"></div>
+                </div>
+                <div class="form-row" id="codex-reasoning-row" hidden>
+                  <label for="model-codex-reasoning">Codex Reasoning Level</label>
+                  <div id="model-codex-reasoning-container"></div>
+                </div>
+                <div class="form-row">
+                  <label for="model-gemini">Gemini Model</label>
+                  <div id="model-gemini-container"></div>
+                </div>
+              </div>
+            </div>
+            <div class="card-actions">
+              <button type="button" class="btn-secondary" id="refresh-models-btn">Refresh Models</button>
+              <button type="button" class="btn-primary" id="save-models-btn">Save</button>
+            </div>
+          </div>
+        </div>
+        <!-- Email (SMTP) Settings -->
+        <div id="section-email" class="settings-panel" role="tabpanel" hidden>
+          <div class="content-card">
+            <div class="card-header">
+              <h3>Email Settings (SMTP)</h3>
+            </div>
+            <div class="card-body">
+              <div id="email-inline-message" class="inline-message" hidden></div>
+              <div class="form-single-column">
+                <div class="form-row">
+                  <label for="email-host">SMTP Host</label>
+                  <input type="text" id="email-host" class="form-input" placeholder="smtp.example.com">
+                </div>
+                <div class="form-row">
+                  <label for="email-port">SMTP Port</label>
+                  <input type="number" id="email-port" class="form-input" value="587" style="max-width: 120px;">
+                </div>
+                <div class="form-row">
+                  <label for="email-secure">Use TLS/SSL</label>
+                  <label class="toggle-switch">
+                    <input type="checkbox" id="email-secure">
+                    <span class="toggle-slider"></span>
+                  </label>
+                  <span class="form-hint">Enable for port 465, disable for port 587 with STARTTLS</span>
+                </div>
+                <div class="form-row">
+                  <label for="email-user">Username</label>
+                  <input type="text" id="email-user" class="form-input" placeholder="user@example.com">
+                </div>
+                <div class="form-row">
+                  <label for="email-password">Password</label>
+                  <div class="apikey-input-group">
+                    <input type="password" id="email-password" class="form-input" placeholder="Enter password or leave blank to keep existing">
+                    <button type="button" class="btn-icon apikey-toggle-visibility" data-target="email-password" title="Toggle visibility">
+                      <svg class="eye-open" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                        <path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"></path>
+                        <circle cx="12" cy="12" r="3"></circle>
+                      </svg>
+                      <svg class="eye-closed" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="display: none;">
+                        <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24"></path>
+                        <line x1="1" y1="1" x2="23" y2="23"></line>
+                      </svg>
+                    </button>
+                  </div>
+                  <span id="email-password-status" class="form-hint"></span>
+                </div>
+                <div class="form-row">
+                  <label for="email-from">From Address</label>
+                  <input type="email" id="email-from" class="form-input" placeholder="noreply@example.com">
+                </div>
+                <div class="form-row">
+                  <label for="email-from-name">From Name</label>
+                  <input type="text" id="email-from-name" class="form-input" placeholder="CoderFlow">
+                </div>
+              </div>
+              <div class="email-test-section" style="margin-top: 24px; padding-top: 16px; border-top: 1px solid var(--color-border);">
+                <div class="subsection-header" style="margin-bottom: 12px;">
+                  <h4 style="margin: 0;">Test Configuration</h4>
+                </div>
+                <div class="form-single-column">
+                  <div class="form-row">
+                    <label for="email-test-recipient">Test Recipient</label>
+                    <input type="email" id="email-test-recipient" class="form-input code-font" placeholder="your@email.com">
+                  </div>
+                  <div class="form-row">
+                    <label></label>
+                    <div style="display: flex; gap: 8px;">
+                      <button type="button" class="btn-secondary btn-small" id="email-test-connection-btn">
+                        Test Connection
+                      </button>
+                      <button type="button" class="btn-secondary btn-small" id="email-send-test-btn">
+                        Send Test Email
+                      </button>
+                    </div>
+                  </div>
+                  <div class="form-row" id="email-test-result-row" hidden>
+                    <label></label>
+                    <div id="email-test-result" class="email-test-result"></div>
+                  </div>
+                </div>
+              </div>
+            </div>
+            <div class="card-actions">
+              <button type="button" class="btn-primary" id="save-email-btn">Save</button>
+            </div>
+          </div>
+        </div>
+        <!-- Git Providers Settings -->
+        <div id="section-git-providers" class="settings-panel" role="tabpanel" hidden>
+          <div class="content-card">
+            <div class="card-header">
+              <h3>Global Git Providers</h3>
+            </div>
+            <div class="card-body">
+              <div id="git-providers-inline-message" class="inline-message" hidden></div>
+              <p class="text-muted" style="margin-bottom: 16px;">Configure global git providers that can be used by any environment. Environment-specific providers can be configured in each environment's settings.</p>
+              <!-- Token Expiration Setting -->
+              <div class="form-single-column" style="margin-bottom: 20px;">
+                <div class="form-row">
+                  <label for="git-token-expiration">Container Token Expiration</label>
+                  <div class="token-expiry-controls">
+                    <input type="number" id="git-token-expiration" class="form-input" min="1" value="7" style="width: 80px;">
+                    <span class="token-expiry-suffix">days</span>
+                    <button type="button" class="btn-secondary btn-small" id="save-git-token-expiration-btn">Save</button>
+                  </div>
+                  <span class="form-hint">Containers can access Git credentials until expiration; start a new task to renew</span>
+                </div>
+              </div>
+              <div class="git-providers-list" id="global-git-providers-list">
+                <!-- Git providers will be populated here -->
+              </div>
+              <div class="git-provider-add-section" style="margin-top: 16px; padding-top: 16px; border-top: 1px solid var(--color-border);">
+                <button type="button" class="btn-secondary" id="add-global-git-provider-btn">
+                  <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="margin-right: 4px;">
+                    <line x1="12" y1="5" x2="12" y2="19"></line>
+                    <line x1="5" y1="12" x2="19" y2="12"></line>
+                  </svg>
+                  Add Git Provider
+                </button>
+              </div>
+            </div>
+          </div>
+        </div>
+        <!-- Single Sign-On Settings -->
+        <div id="section-sso" class="settings-panel" role="tabpanel" hidden>
+          <div class="content-card">
+            <div class="card-header">
+              <h3>Single Sign-On (OIDC)</h3>
+            </div>
+            <div class="card-body" id="sso-config">
+              <!-- Inline message area -->
+              <div id="sso-inline-message" class="inline-message" hidden></div>
+              <!-- Tabs -->
+              <div class="sso-tabs">
+                <button type="button" class="sso-tab active" data-tab="connection">Connection</button>
+                <button type="button" class="sso-tab" data-tab="provisioning">User Provisioning</button>
+              </div>
+              <!-- Connection Tab -->
+              <div id="sso-tab-connection" class="sso-tab-content active">
+                <div class="form-single-column">
+                  <div class="form-row">
+                    <label for="sso-enabled">Enable SSO</label>
+                    <label class="toggle-switch">
+                      <input type="checkbox" id="sso-enabled">
+                      <span class="toggle-slider"></span>
+                    </label>
+                  </div>
+                  <div class="form-row">
+                    <label for="sso-provider">Identity Provider</label>
+                    <div id="sso-provider-container"></div>
+                  </div>
+                  <div class="form-row">
+                    <label for="sso-display-name">Button Text</label>
+                    <input type="text" id="sso-display-name" class="form-input" placeholder="e.g., Sign in with Microsoft">
+                  </div>
+                  <div class="form-row">
+                    <label for="sso-client-id">Client ID <span class="required">*</span></label>
+                    <input type="text" id="sso-client-id" class="form-input code-font" placeholder="Application/Client ID from your IdP">
+                  </div>
+                  <div class="form-row">
+                    <label for="sso-client-secret">Client Secret <span class="required">*</span></label>
+                    <div>
+                      <input type="password" id="sso-client-secret" class="form-input code-font" placeholder="Client secret from your IdP">
+                      <span id="sso-secret-hint" class="form-hint" style="display: none; margin-top: 4px;">Leave blank to keep existing secret</span>
+                    </div>
+                  </div>
+                  <div class="form-row">
+                    <label for="sso-issuer">Issuer URL <span class="required">*</span></label>
+                    <div>
+                      <input type="text" id="sso-issuer" class="form-input code-font" placeholder="e.g., https://login.microsoftonline.com/{tenant-id}/v2.0">
+                      <span class="form-hint" style="margin-top: 4px;">The OIDC discovery URL for your identity provider</span>
+                    </div>
+                  </div>
+                  <div class="form-row">
+                    <label></label>
+                    <div>
+                      <button type="button" class="btn-secondary btn-small" id="sso-test-btn">
+                        Test Connection
+                      </button>
+                      <div id="sso-test-result" class="sso-test-result" hidden></div>
+                    </div>
+                  </div>
+                </div>
+              </div>
+              <!-- User Provisioning Tab -->
+              <div id="sso-tab-provisioning" class="sso-tab-content">
+                <div class="form-single-column">
+                  <div class="form-row">
+                    <label for="sso-auto-provision">Auto-provision users</label>
+                    <label class="toggle-switch">
+                      <input type="checkbox" id="sso-auto-provision" checked>
+                      <span class="toggle-slider"></span>
+                    </label>
+                  </div>
+                  <p class="sso-field-description">Automatically create user accounts when someone logs in via SSO for the first time.</p>
+                  <div class="form-row">
+                    <label for="sso-default-role">Default Role</label>
+                    <div id="sso-default-role-container"></div>
+                  </div>
+                  <p class="sso-field-description">Role assigned to auto-provisioned users. Can be changed later per user.</p>
+                  <div class="form-row">
+                    <label for="sso-allow-local">Allow local login</label>
+                    <label class="toggle-switch">
+                      <input type="checkbox" id="sso-allow-local" checked>
+                      <span class="toggle-slider"></span>
+                    </label>
+                  </div>
+                  <p class="sso-field-description">Show username/password form alongside SSO button. Disable for SSO-only authentication.</p>
+                </div>
+              </div>
+            </div>
+            <div class="card-actions">
+              <button type="button" class="btn-danger btn-small" id="sso-remove-btn" style="margin-right: auto;" hidden>Remove SSO</button>
+              <button type="button" class="btn-primary" id="save-sso-btn">Save</button>
+            </div>
+          </div>
+        </div>
+      </section>
+    </div>
+  </main>
+  <!-- Provider Sign-In Flow Modal -->
+  <div id="provider-signin-modal" class="modal" hidden>
+    <div class="modal-overlay"></div>
+    <div class="modal-content">
+      <div class="modal-header">
+        <h2 id="provider-signin-title">Sign in with Provider</h2>
+        <button type="button" class="modal-close" aria-label="Close">&times;</button>
+      </div>
+      <div class="modal-body">
+        <div class="signin-steps">
+          <div class="signin-step">
+            <span class="step-number">1</span>
+            <span class="step-text">Open the secure sign-in page</span>
+          </div>
+          <button class="btn-primary" id="provider-signin-open-btn" style="width: 100%; margin: 8px 0 16px 0;">
+            <svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" style="margin-right: 8px; vertical-align: -2px;">
+              <path d="M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6"></path>
+              <polyline points="15 3 21 3 21 9"></polyline>
+              <line x1="10" y1="14" x2="21" y2="3"></line>
+            </svg>
+            Open Sign-In Page
+          </button>
+          <div class="signin-step">
+            <span class="step-number">2</span>
+            <span class="step-text" id="provider-signin-instructions">
+              Complete sign-in and copy the authorization code
+            </span>
+          </div>
+          <!-- Secure redirect notice for URL-copy flow (Codex/Gemini) -->
+          <div id="provider-signin-localhost-notice" class="secure-redirect-notice" hidden>
+            <div class="secure-redirect-header">
+              <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                <rect x="3" y="11" width="18" height="11" rx="2" ry="2"></rect>
+                <path d="M7 11V7a5 5 0 0 1 10 0v4"></path>
+              </svg>
+              <span>Secure Local Redirect</span>
+            </div>
+            <p>After signing in, your browser will redirect to a local address. The page won't load &mdash; this is expected. This secure method keeps your authorization tokens private.</p>
+            <div class="secure-redirect-instruction">
+              <strong>Copy the complete URL</strong> from your browser's address bar and paste it below.
+            </div>
+          </div>
+          <div class="form-row" style="margin-top: 12px; grid-template-columns: auto 1fr; gap: 8px;">
+            <label for="provider-signin-input" id="provider-signin-label">Authorization Code or URL</label>
+            <input type="text" id="provider-signin-input" class="form-input code-font"
+                   placeholder="Paste code or URL here">
+          </div>
+          <div class="signin-step" style="margin-top: 16px;">
+            <span class="step-number">3</span>
+            <span class="step-text">Name this account</span>
+          </div>
+          <div class="form-row" style="margin-top: 8px; grid-template-columns: auto 1fr; gap: 8px;">
+            <label for="provider-signin-label-input">Account Label</label>
+            <input type="text" id="provider-signin-label-input" class="form-input"
+                   placeholder="e.g., Production, Development, Team">
+          </div>
+        </div>
+      </div>
+      <div class="modal-actions">
+        <button type="button" class="btn-secondary" id="provider-signin-cancel-btn">Cancel</button>
+        <button type="button" class="btn-primary" id="provider-signin-submit-btn">Complete Sign-In</button>
+      </div>
+    </div>
+  </div>
+  <!-- Provider Rename Modal -->
+  <div id="provider-rename-modal" class="modal" hidden>
+    <div class="modal-overlay"></div>
+    <div class="modal-content modal-content-narrow">
+      <div class="modal-header">
+        <h2>Rename Account</h2>
+        <button type="button" class="modal-close" aria-label="Close">&times;</button>
+      </div>
+      <div class="modal-body">
+        <label for="provider-rename-input" style="display: block; margin-bottom: 8px; font-weight: 500;">Account Name</label>
+        <input type="text" id="provider-rename-input" class="form-input" placeholder="Enter account name">
+      </div>
+      <div class="modal-actions">
+        <button type="button" class="btn-secondary" id="provider-rename-cancel-btn">Cancel</button>
+        <button type="button" class="btn-primary" id="provider-rename-save-btn">Rename</button>
+      </div>
+    </div>
+  </div>
+  <!-- Add Provider Type Selection Modal -->
+  <div id="add-provider-type-modal" class="modal" hidden>
+    <div class="modal-overlay"></div>
+    <div class="modal-content modal-content-narrow">
+      <div class="modal-header">
+        <h2>Add Git Provider</h2>
+        <button type="button" class="modal-close" aria-label="Close">&times;</button>
+      </div>
+      <div class="modal-body">
+        <p class="modal-description">Choose the type of provider to add:</p>
+        <div class="provider-type-options">
+          <button type="button" class="provider-type-option" id="add-provider-github-btn">
+            <div class="provider-type-icon">
+              <svg width="24" height="24" viewBox="0 0 98 96"><path fill-rule="evenodd" clip-rule="evenodd" d="M48.854 0C21.839 0 0 22 0 49.217c0 21.756 13.993 40.172 33.405 46.69 2.427.49 3.316-1.059 3.316-2.362 0-1.141-.08-5.052-.08-9.127-13.59 2.934-16.42-5.867-16.42-5.867-2.184-5.704-5.42-7.17-5.42-7.17-4.448-3.015.324-3.015.324-3.015 4.934.326 7.523 5.052 7.523 5.052 4.367 7.496 11.404 5.378 14.235 4.074.404-3.178 1.699-5.378 3.074-6.6-10.839-1.141-22.243-5.378-22.243-24.283 0-5.378 1.94-9.778 5.014-13.2-.485-1.222-2.184-6.275.486-13.038 0 0 4.125-1.304 13.426 5.052a46.97 46.97 0 0 1 12.214-1.63c4.125 0 8.33.571 12.213 1.63 9.302-6.356 13.427-5.052 13.427-5.052 2.67 6.763.97 11.816.485 13.038 3.155 3.422 5.015 7.822 5.015 13.2 0 18.905-11.404 23.06-22.324 24.283 1.78 1.548 3.316 4.481 3.316 9.126 0 6.6-.08 11.897-.08 13.526 0 1.304.89 2.853 3.316 2.364 19.412-6.52 33.405-24.935 33.405-46.691C97.707 22 75.788 0 48.854 0z" fill="currentColor"/></svg>
+            </div>
+            <div class="provider-type-info">
+              <strong>GitHub</strong>
+              <span class="provider-type-desc">GitHub App</span>
+            </div>
+          </button>
+          <button type="button" class="provider-type-option" id="add-provider-azure-btn">
+            <div class="provider-type-icon">
+              <svg width="24" height="24" viewBox="0 0 24 24"><path fill="currentColor" d="M13.05 4.24L6.56 18.05l2.09.81L18 9.77l.3-.41-5.25-5.12zm-4.21 2.6l5.79 5.64-.42.4-9.28 2.6 3.91-8.64zm-1.79 10.1l9.31-2.59.43-.39 1.61 1.57L4.67 19.2l2.38-2.26z"/></svg>
+            </div>
+            <div class="provider-type-info">
+              <strong>Azure DevOps</strong>
+              <span class="provider-type-desc">Service Principal</span>
+            </div>
+          </button>
+        </div>
+      </div>
+      <div class="modal-actions">
+        <button type="button" class="btn-secondary" id="add-provider-type-cancel-btn">Cancel</button>
+      </div>
+    </div>
+  </div>
+  <!-- GitHub App Setup Wizard Modal -->
+  <div id="github-app-setup-wizard-modal" class="modal" hidden>
+    <div class="modal-overlay"></div>
+    <div class="modal-content modal-medium">
+      <div class="modal-header">
+        <h2 id="github-setup-wizard-title">Create GitHub App</h2>
+        <button type="button" class="modal-close" aria-label="Close">&times;</button>
+      </div>
+      <div class="modal-body">
+        <div id="github-setup-wizard-error" class="modal-error" hidden></div>
+        <!-- Step 1: Configuration -->
+        <div id="github-setup-step-1" class="wizard-step">
+          <p class="modal-description">Create a GitHub App for repository access. When you click Next, you'll be redirected to GitHub to approve and install the app.</p>
+          <p class="modal-description text-muted" style="font-size: 0.9em;">
+            Note: You must be <a href="https://github.com/login" target="_blank">logged into GitHub</a> before proceeding.
+          </p>
+          <div class="form-single-column">
+            <div class="form-row">
+              <label for="github-setup-provider-name">Provider Name <span class="required">*</span></label>
+              <input type="text" id="github-setup-provider-name" class="form-input code-font" placeholder="e.g., github-myorg" required>
+              <span class="form-hint">Lowercase alphanumeric with hyphens. Used to reference this provider in environments.</span>
+            </div>
+            <div class="form-row">
+              <label for="github-setup-app-name">GitHub App Name <span class="required">*</span></label>
+              <input type="text" id="github-setup-app-name" class="form-input" placeholder="e.g., CoderFlow-MyOrg" required>
+              <span class="form-hint">Name for the GitHub App (visible on GitHub)</span>
+            </div>
+            <div class="form-row">
+              <label for="github-setup-description">Description</label>
+              <input type="text" id="github-setup-description" class="form-input" placeholder="e.g., CoderFlow integration for repository access">
+            </div>
+            <div class="form-row">
+              <label for="github-setup-account-type">Account Type <span class="required">*</span></label>
+              <div id="github-setup-account-type-container"></div>
+            </div>
+            <div class="form-row" id="github-setup-org-row">
+              <label for="github-setup-org-name">Organization Name <span class="required">*</span></label>
+              <input type="text" id="github-setup-org-name" class="form-input code-font" placeholder="e.g., my-organization">
+              <span class="form-hint">The GitHub organization where the app will be created</span>
+            </div>
+          </div>
+        </div>
+        <!-- Hidden form for manifest submission (auto-submitted after validation) -->
+        <form id="github-setup-manifest-form" method="post" style="display: none;">
+          <input type="hidden" name="manifest" id="github-setup-manifest-input">
+        </form>
+      </div>
+      <div class="modal-actions">
+        <button type="button" class="btn-secondary" id="github-setup-cancel-btn">Cancel</button>
+        <button type="button" class="btn-primary" id="github-setup-next-btn">Next</button>
+      </div>
+    </div>
+  </div>
+  <!-- Git Provider Modal -->
+  <div id="git-provider-modal" class="modal" hidden>
+    <div class="modal-overlay"></div>
+    <div class="modal-content">
+      <div class="modal-header">
+        <h2 id="git-provider-modal-title">Add Git Provider</h2>
+        <button type="button" class="modal-close" aria-label="Close">&times;</button>
+      </div>
+      <div class="modal-body">
+        <div id="git-provider-modal-error" class="modal-error" hidden></div>
+        <div class="form-single-column">
+          <div class="form-row">
+            <label for="git-provider-name">Provider Name <span id="git-provider-name-required" class="required">*</span></label>
+            <input type="text" id="git-provider-name" class="form-input code-font" placeholder="e.g., github-myorg" required>
+            <span id="git-provider-name-hint" class="form-hint">Lowercase alphanumeric with hyphens</span>
+          </div>
+          <div class="form-row">
+            <label for="git-provider-type">Provider Type <span id="git-provider-type-required" class="required">*</span></label>
+            <div id="git-provider-type-container"></div>
+          </div>
+          <div id="github-provider-fields" class="form-single-column">
+            <div class="form-row">
+              <label for="git-provider-app-id">App ID <span class="required">*</span></label>
+              <input type="text" id="git-provider-app-id" class="form-input code-font" placeholder="e.g., 123456" required>
+            </div>
+            <div class="form-row">
+              <label for="git-provider-installation-id">Installation ID <span class="required">*</span></label>
+              <input type="text" id="git-provider-installation-id" class="form-input code-font" placeholder="e.g., 78901234" required>
+            </div>
+            <!-- GitHub Installation Settings Button (only visible in edit mode when URL is available) -->
+            <div id="github-installation-link-row" class="form-row" hidden>
+              <label>Installation Settings</label>
+              <div>
+                <button type="button" id="github-installation-btn" class="btn-secondary btn-small">Show on GitHub</button>
+              </div>
+            </div>
+            <!-- OAuth Credentials (for User Access Token flows) -->
+            <div id="github-oauth-fields" class="form-single-column" hidden>
+              <div class="form-row">
+                <label for="git-provider-oauth-client-id">Client ID <span id="git-provider-oauth-client-id-required" class="required" hidden>*</span></label>
+                <input type="text" id="git-provider-oauth-client-id" class="form-input code-font">
+              </div>
+              <div class="form-row">
+                <label for="git-provider-oauth-client-secret">Client Secret</label>
+                <input type="text" id="git-provider-oauth-client-secret" class="form-input code-font" placeholder="(Leave blank to keep current secret)">
+              </div>
+            </div>
+            <div class="form-row">
+              <label for="git-provider-private-key">Private Key (PEM) <span id="git-provider-private-key-required" class="required">*</span></label>
+              <textarea id="git-provider-private-key" class="form-input code-font" rows="8" placeholder="-----BEGIN RSA PRIVATE KEY-----&#10;...&#10;-----END RSA PRIVATE KEY-----"></textarea>
+              <div class="form-row-actions" style="margin-top: 8px;">
+                <button type="button" class="btn-secondary btn-small" id="git-provider-import-key-btn">
+                  <span>📁</span> Import from file...
+                </button>
+                <input type="file" id="git-provider-key-input" hidden accept=".pem,.key">
+              </div>
+            </div>
+          </div>
+          <div id="azure-devops-provider-fields" class="form-single-column" hidden>
+            <div class="form-row">
+              <label for="git-provider-organization">Organization <span class="required">*</span></label>
+              <input type="text" id="git-provider-organization" class="form-input code-font" placeholder="e.g., myorg" required>
+              <span class="form-hint">Azure DevOps organization name</span>
+            </div>
+            <div class="form-row">
+              <label for="git-provider-tenant-id">Tenant ID <span class="required">*</span></label>
+              <input type="text" id="git-provider-tenant-id" class="form-input code-font" placeholder="xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" required>
+              <span class="form-hint">Microsoft Entra ID tenant ID (GUID format)</span>
+            </div>
+            <div class="form-row">
+              <label for="git-provider-client-id">Client ID <span class="required">*</span></label>
+              <input type="text" id="git-provider-client-id" class="form-input code-font" placeholder="yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy" required>
+              <span class="form-hint">App Registration client ID (GUID format)</span>
+            </div>
+            <div class="form-row">
+              <label for="git-provider-auth-method">Authentication Method <span class="required">*</span></label>
+              <div id="git-provider-auth-method-container"></div>
+            </div>
+            <div id="azure-secret-fields" class="form-row">
+              <label for="git-provider-client-secret">Client Secret <span class="required">*</span></label>
+              <input type="text" id="git-provider-client-secret" class="form-input code-font" placeholder="Enter client secret">
+            </div>
+            <div id="azure-certificate-fields" class="form-row" hidden>
+              <label for="git-provider-certificate">Certificate (PEM with Private Key) <span class="required">*</span></label>
+              <textarea id="git-provider-certificate" class="form-input code-font" rows="8" placeholder="-----BEGIN CERTIFICATE-----&#10;...&#10;-----END CERTIFICATE-----&#10;-----BEGIN PRIVATE KEY-----&#10;...&#10;-----END PRIVATE KEY-----"></textarea>
+              <div class="form-row-actions" style="margin-top: 8px;">
+                <button type="button" class="btn-secondary btn-small" id="git-provider-import-cert-btn">
+                  <span>📁</span> Import from file...
+                </button>
+                <input type="file" id="git-provider-cert-input" hidden accept=".pem,.crt,.cer,.key">
+              </div>
+            </div>
+          </div>
+        </div>
+      </div>
+      <div class="modal-actions">
+        <button type="button" class="btn-secondary" id="git-provider-test-btn">Test Connection</button>
+        <button type="button" class="btn-secondary" id="git-provider-cancel-btn">Cancel</button>
+        <button type="button" class="btn-primary" id="git-provider-save-btn">Save Provider</button>
+      </div>
+    </div>
+  </div>
+  <!-- Delete Git Provider Modal -->
+  <div id="delete-git-provider-modal" class="modal" hidden>
+    <div class="modal-overlay"></div>
+    <div class="modal-content modal-content-narrow">
+      <div class="modal-header">
+        <h2>Delete Git Provider</h2>
+        <button type="button" class="modal-close" aria-label="Close">&times;</button>
+      </div>
+      <div class="modal-body">
+        <p>Are you sure you want to delete the git provider "<strong id="delete-git-provider-name"></strong>"?</p>
+        <p class="text-muted">This action cannot be undone.</p>
+      </div>
+      <div class="modal-actions">
+        <button type="button" class="btn-secondary" id="delete-git-provider-cancel-btn">Cancel</button>
+        <button type="button" class="btn-danger" id="delete-git-provider-confirm-btn">Delete</button>
+      </div>
+    </div>
+  </div>
+</body>
+</html>