cohvu 2.21.0 → 3.0.0

package/dist/tui/App.js

@@ -1,2245 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// Main TUI component — state, data loading, SSE, key handling, and layout.
-// Direct translation of dashboard.ts into React hooks.
-import { useReducer, useRef, useEffect, useCallback } from 'react';
-import { Box, Text, useInput, useApp, useStdout } from 'ink';
-import { reduce, initialState, TABS, getActiveProject, getActiveTeam, isTeamLocked, filterToSameEntity } from './state.js';
-import { ApiClient } from '../api.js';
-import { runSetup } from '../setup.js';
-import { detectPlatformStatuses } from './platform-detect.js';
-import { Header } from './components/Header.js';
-import { TabBar } from './components/TabBar.js';
-import { Banner } from './components/Banner.js';
-import { Footer } from './components/Footer.js';
-import { Toast } from './components/Toast.js';
-import { Divider } from './components/Divider.js';
-import { ModalView } from './components/Modal.js';
-import { KnowledgeTab } from './tabs/KnowledgeTab.js';
-import { TeamTab } from './tabs/TeamTab.js';
-import { BillingTab } from './tabs/BillingTab.js';
-import { ProjectTab } from './tabs/ProjectTab.js';
-import { KeysTab } from './tabs/KeysTab.js';
-import { YouTab } from './tabs/YouTab.js';
-import { ALL_KEY_ACTIONS } from './state.js';
-import { timeUntil } from './utils.js';
-import { exec, execFile } from 'child_process';
-import { existsSync, readFileSync, writeFileSync, mkdirSync, unlinkSync, watch } from 'fs';
-import { join } from 'path';
-import { homedir } from 'os';
-const STATE_FILE = join(homedir(), '.cohvu', 'state.json');
-const PAGE_SIZE = 20;
-export default function App() {
-    const { exit } = useApp();
-    const { stdout } = useStdout();
-    const rows = stdout.rows;
-    const cols = stdout.columns;
-    // ---- State ----
-    const [state, rawDispatch] = useReducer(reduce, undefined, initialState);
-    const stateRef = useRef(state);
-    stateRef.current = state;
-    const api = useRef(new ApiClient()).current;
-    // Timers
-    const toastTimerRef = useRef(null);
-    const liveDotTimerRef = useRef(null);
-    const copiedTimerRef = useRef(null);
-    const inlineErrorTimerRef = useRef(null);
-    const bannerTimerRef = useRef(null);
-    const feedDisconnectRef = useRef(null);
-    const pollIntervalRef = useRef(null);
-    const watchersRef = useRef([]);
-    const lastSyncErrorAt = useRef(0);
-    const busyRef = useRef(false);
-    const dispatch = rawDispatch;
-    // ---- Helpers ----
-    const showToast = useCallback((message, type, durationMs = 3000) => {
-        if (toastTimerRef.current)
-            clearTimeout(toastTimerRef.current);
-        dispatch({ type: 'SET_TOAST', toast: { message, type, expiresAt: Date.now() + durationMs } });
-        toastTimerRef.current = setTimeout(() => {
-            dispatch({ type: 'SET_TOAST', toast: null });
-        }, durationMs);
-    }, [dispatch]);
-    const showInlineError = useCallback((message, durationMs) => {
-        dispatch({ type: 'SET_INLINE_ERROR', message });
-        if (inlineErrorTimerRef.current)
-            clearTimeout(inlineErrorTimerRef.current);
-        inlineErrorTimerRef.current = setTimeout(() => {
-            dispatch({ type: 'SET_INLINE_ERROR', message: null });
-        }, durationMs);
-    }, [dispatch]);
-    function openBrowser(url) {
-        if (process.platform === 'win32') {
-            exec(`start "" "${url}"`);
-        }
-        else {
-            const cmd = process.platform === 'darwin' ? 'open' : 'xdg-open';
-            execFile(cmd, [url], () => { });
-        }
-    }
-    function copyToClipboard(text) {
-        const cmd = process.platform === 'darwin' ? 'pbcopy'
-            : process.platform === 'win32' ? 'clip' : 'xclip -selection clipboard';
-        const child = exec(cmd);
-        child.stdin?.write(text);
-        child.stdin?.end();
-    }
-    // ---- SSE feed ----
-    const connectFeed = useCallback((projectId) => {
-        if (feedDisconnectRef.current)
-            feedDisconnectRef.current();
-        const conn = api.connectFeed(projectId, {
-            onEvent: (eventType, data) => {
-                // Guard: ignore events if we've since switched to a different project
-                if (stateRef.current.activeProjectId !== projectId)
-                    return;
-                if (eventType === 'contribution') {
-                    const event = data;
-                    if (event.operation === 'create') {
-                        dispatch({ type: 'ADD_CONTRIBUTION', contribution: { id: event.id, body: event.body, updated_at: event.updated_at, contributed_by: event.contributed_by, contribution_type: event.contribution_type } });
-                        dispatch({ type: 'SET_LIVE_DOT', contributionId: event.id });
-                        if (liveDotTimerRef.current)
-                            clearTimeout(liveDotTimerRef.current);
-                        liveDotTimerRef.current = setTimeout(() => dispatch({ type: 'CLEAR_LIVE_DOT' }), 10000);
-                    }
-                    else if (event.operation === 'update') {
-                        dispatch({ type: 'UPDATE_CONTRIBUTION', contribution: { id: event.id, body: event.body, updated_at: event.updated_at } });
-                        dispatch({ type: 'SET_LIVE_DOT', contributionId: event.id });
-                        if (liveDotTimerRef.current)
-                            clearTimeout(liveDotTimerRef.current);
-                        liveDotTimerRef.current = setTimeout(() => dispatch({ type: 'CLEAR_LIVE_DOT' }), 10000);
-                    }
-                    else if (event.operation === 'delete') {
-                        dispatch({ type: 'REMOVE_CONTRIBUTION', id: event.id });
-                    }
-                }
-                else if (eventType === 'role_change') {
-                    api.me().then(me => dispatch({ type: 'SET_USER_DATA', me })).catch(() => {
-                        if (Date.now() - lastSyncErrorAt.current > 30000) {
-                            lastSyncErrorAt.current = Date.now();
-                            showToast('Sync error', 'error');
-                        }
-                    });
-                }
-                else if (eventType === 'notification') {
-                    api.listNotifications().then(notifications => {
-                        dispatch({ type: 'SET_NOTIFICATIONS', notifications });
-                        api.markNotificationsSeen().catch(() => { });
-                        // Clear banners after a few seconds so they don't persist
-                        setTimeout(() => dispatch({ type: 'SET_NOTIFICATIONS', notifications: [] }), 5000);
-                    }).catch(() => {
-                        if (Date.now() - lastSyncErrorAt.current > 30000) {
-                            lastSyncErrorAt.current = Date.now();
-                            showToast('Sync error', 'error');
-                        }
-                    });
-                }
-                else if (eventType === 'usage') {
-                    const usage = data;
-                    dispatch({ type: 'SET_USAGE', ops_used: usage.ops_used, ops_limit: usage.ops_limit });
-                }
-                else if (eventType === 'approval') {
-                    const team = getActiveTeam(stateRef.current);
-                    if (team) {
-                        api.listApprovals(team.team_id).then(approvals => {
-                            dispatch({ type: 'SET_PENDING_APPROVALS', approvals });
-                        }).catch(() => { });
-                    }
-                }
-            },
-            onConnected: () => {
-                dispatch({ type: 'SET_SSE_CONNECTED', connected: true });
-                // Refresh contributions on reconnection — guard against stale project
-                if (stateRef.current.activeProjectId === projectId) {
-                    api.listContributions(projectId, { limit: PAGE_SIZE, offset: 0 }).then(result => {
-                        if (result && stateRef.current.activeProjectId === projectId) {
-                            dispatch({ type: 'SET_CONTRIBUTIONS', contributions: result.contributions, total: result.total });
-                        }
-                    }).catch(() => { });
-                }
-            },
-            onDisconnected: () => {
-                dispatch({ type: 'SET_SSE_CONNECTED', connected: false });
-            },
-        });
-        feedDisconnectRef.current = conn.disconnect;
-    }, [api, dispatch, showToast]);
-    // ---- Data loading ----
-    const loadTabData = useCallback(async () => {
-        const s = stateRef.current;
-        const projectId = s.activeProjectId;
-        if (!projectId)
-            return;
-        const activeProject = getActiveProject(s);
-        const activeTeam = getActiveTeam(s);
-        const isTeamProject = activeProject?.owner.kind === 'team';
-        try {
-            switch (s.tab) {
-                case 'knowledge': {
-                    dispatch({ type: 'SET_LOADING', loading: true });
-                    const result = await api.listContributions(projectId, { limit: PAGE_SIZE, offset: 0 });
-                    // Guard: project may have changed during async load
-                    if (stateRef.current.activeProjectId !== projectId)
-                        break;
-                    dispatch({ type: 'SET_CONTRIBUTIONS', contributions: result.contributions, total: result.total });
-                    break;
-                }
-                case 'team': {
-                    if (isTeamProject && activeTeam) {
-                        const [members, links] = await Promise.all([
-                            api.listTeamMembers(activeTeam.team_id),
-                            api.listTeamInviteLinks(activeTeam.team_id).catch(() => []),
-                        ]);
-                        if (stateRef.current.activeProjectId !== projectId)
-                            break;
-                        dispatch({ type: 'SET_MEMBERS', members });
-                        dispatch({ type: 'SET_INVITE_LINKS', links });
-                        const approvals = await api.listApprovals(activeTeam.team_id).catch(() => []);
-                        if (stateRef.current.activeProjectId !== projectId)
-                            break;
-                        dispatch({ type: 'SET_PENDING_APPROVALS', approvals });
-                    }
-                    else {
-                        dispatch({ type: 'SET_MEMBERS', members: [] });
-                        dispatch({ type: 'SET_INVITE_LINKS', links: [] });
-                    }
-                    break;
-                }
-                case 'billing': {
-                    if (isTeamProject && activeTeam) {
-                        const billing = await api.getTeamBilling(activeTeam.team_id);
-                        if (stateRef.current.activeProjectId !== projectId)
-                            break;
-                        dispatch({ type: 'SET_BILLING', billing });
-                    }
-                    else {
-                        const billing = await api.getIndividualBilling();
-                        if (stateRef.current.activeProjectId !== projectId)
-                            break;
-                        dispatch({ type: 'SET_BILLING', billing });
-                    }
-                    break;
-                }
-                case 'project':
-                    break;
-                case 'keys': {
-                    dispatch({ type: 'SET_API_KEYS_LOADING', loading: true });
-                    // Integration keys require admin on the active project — skip the
-                    // call if not, since the API will 403 anyway.
-                    const integrationKeys = (s.userRole === 'admin')
-                        ? await api.listIntegrationKeys(projectId).catch(() => [])
-                        : [];
-                    if (stateRef.current.activeProjectId !== projectId)
-                        break;
-                    dispatch({ type: 'SET_API_KEYS', keys: integrationKeys });
-                    break;
-                }
-            }
-        }
-        catch {
-            showToast('Failed to load data', 'error');
-        }
-    }, [api, dispatch, showToast]);
-    const loadMoreMemories = useCallback(async () => {
-        const s = stateRef.current;
-        const projectId = s.activeProjectId;
-        if (!projectId || !s.contributionHasMore)
-            return;
-        dispatch({ type: 'SET_LOADING', loading: true });
-        try {
-            const result = await api.listContributions(projectId, { limit: PAGE_SIZE, offset: s.contributions.length });
-            dispatch({ type: 'SET_CONTRIBUTIONS', contributions: result.contributions, total: result.total, append: true });
-        }
-        catch {
-            showToast('Failed to load more', 'error');
-            dispatch({ type: 'SET_LOADING', loading: false });
-        }
-    }, [api, dispatch, showToast]);
-    // ---- Project switching (single source of truth) ----
-    // Every flow that changes the active project calls this.
-    const switchToProject = useCallback((projectId) => {
-        if (pollIntervalRef.current)
-            clearInterval(pollIntervalRef.current);
-        connectFeed(projectId);
-        pollIntervalRef.current = setInterval(async () => {
-            const ps = stateRef.current;
-            if (ps.tab !== 'knowledge' || ps.activeProjectId !== projectId)
-                return;
-            try {
-                const result = await api.listContributions(projectId, { limit: PAGE_SIZE, offset: 0 });
-                if (result && stateRef.current.activeProjectId === projectId && result.total !== stateRef.current.contributionTotal) {
-                    dispatch({ type: 'SET_CONTRIBUTIONS', contributions: result.contributions, total: result.total });
-                }
-            }
-            catch { }
-        }, 30_000);
-        // Team overview powers the lock card when a team sub is canceled. It's
-        // cheap and always reflects the current team's shape — fetch on every
-        // project switch into a team project, clear when switching to personal.
-        const project = stateRef.current.projects.find(p => p.project_id === projectId);
-        if (project?.owner.kind === 'team') {
-            const teamId = project.owner.teamId;
-            api.getTeamOverview(teamId)
-                .then(overview => {
-                if (stateRef.current.activeProjectId === projectId) {
-                    dispatch({ type: 'SET_TEAM_OVERVIEW', overview });
-                }
-            })
-                .catch(() => { });
-        }
-        else {
-            dispatch({ type: 'SET_TEAM_OVERVIEW', overview: null });
-        }
-        setTimeout(() => loadTabData(), 0);
-    }, [api, connectFeed, dispatch, loadTabData]);
-    const executeSearch = useCallback(async () => {
-        const s = stateRef.current;
-        const projectId = s.activeProjectId;
-        if (!projectId || s.searchQuery.length === 0)
-            return;
-        dispatch({ type: 'SET_SEARCHING', searching: true });
-        try {
-            const result = await api.searchContributions(projectId, s.searchQuery);
-            dispatch({ type: 'SET_SEARCH_RESULTS', results: result.contributions });
-        }
-        catch {
-            showToast('Search failed', 'error');
-        }
-        dispatch({ type: 'SET_SEARCHING', searching: false });
-    }, [api, dispatch, showToast]);
-    // ---- Initial data load ----
-    useEffect(() => {
-        let cancelled = false;
-        async function load() {
-            // First-login state
-            const saved = loadPersistedState();
-            if (!saved.hasOpenedDashboard) {
-                dispatch({ type: 'SET_FIRST_LOGIN', firstLogin: true });
-                bannerTimerRef.current = setTimeout(() => {
-                    dispatch({ type: 'SET_FIRST_LOGIN', firstLogin: false });
-                }, 5000);
-            }
-            try {
-                const me = await api.me();
-                if (cancelled)
-                    return;
-                dispatch({ type: 'SET_USER_DATA', me });
-                // Locked-mode short-circuit. If the account is pending deletion
-                // (user hit `d` earlier, possibly from another machine or before
-                // reinstalling), skip all the data-loading fan-out — the server
-                // would reject those calls anyway. Force the You tab so the
-                // countdown + cancel flow is immediately visible; everything else
-                // stays empty until the user either presses `c` or the purge runs.
-                if (me.user.deletion_scheduled_at) {
-                    dispatch({ type: 'SWITCH_TAB', tab: 'you' });
-                    const platforms = detectPlatformStatuses();
-                    dispatch({ type: 'SET_PLATFORMS', platforms });
-                    return;
-                }
-                // Detect platforms without re-running setup (setup already ran in enterDashboard)
-                const platforms = detectPlatformStatuses();
-                dispatch({ type: 'SET_PLATFORMS', platforms });
-                // Load paused state
-                const { isPaused } = await import('../pause.js');
-                dispatch({ type: 'SET_PAUSED', paused: isPaused() });
-                const flatProjects = deriveFlatProjectsFromMe(me);
-                const activeProject = flatProjects.find(p => p.project_id === me.user.active_project_id) ?? flatProjects[0] ?? null;
-                const projectId = activeProject?.project_id ?? null;
-                const isTeamProject = activeProject?.owner.kind === 'team';
-                const activeTeamId = isTeamProject && activeProject.owner.kind === 'team' ? activeProject.owner.teamId : null;
-                const activeTeam = activeTeamId ? me.teams.find(t => t.team_id === activeTeamId) : null;
-                if (projectId) {
-                    // Initial-load failures are usually transient (backend warming up,
-                    // SSE not yet connected, auxiliary endpoints slow). The UI renders
-                    // empty states gracefully for any piece that's null, and the SSE
-                    // onConnected handler re-fetches contributions once the stream is
-                    // live. No toast needed here — showing "Some data failed to load"
-                    // on first launch creates anxiety for a condition that resolves
-                    // itself within seconds.
-                    const [memResult, members, billing, inviteLinks, notifications] = await Promise.all([
-                        api.listContributions(projectId, { limit: PAGE_SIZE, offset: 0 }).catch(() => null),
-                        isTeamProject && activeTeam
-                            ? api.listTeamMembers(activeTeam.team_id).catch(() => [])
-                            : Promise.resolve([]),
-                        isTeamProject && activeTeam
-                            ? api.getTeamBilling(activeTeam.team_id).catch(() => null)
-                            : api.getIndividualBilling().catch(() => null),
-                        isTeamProject && activeTeam
-                            ? api.listTeamInviteLinks(activeTeam.team_id).catch(() => [])
-                            : Promise.resolve([]),
-                        api.listNotifications().catch(() => []),
-                    ]);
-                    if (cancelled)
-                        return;
-                    if (memResult)
-                        dispatch({ type: 'SET_CONTRIBUTIONS', contributions: memResult.contributions, total: memResult.total });
-                    dispatch({ type: 'SET_MEMBERS', members });
-                    if (billing)
-                        dispatch({ type: 'SET_BILLING', billing });
-                    dispatch({ type: 'SET_INVITE_LINKS', links: inviteLinks });
-                    dispatch({ type: 'SET_NOTIFICATIONS', notifications });
-                    if (isTeamProject && activeTeam) {
-                        dispatch({ type: 'SET_REQUIRE_CONSENSUS', value: activeTeam.require_consensus ?? false });
-                        const ssoConfig = await api.getSso(activeTeam.team_id).catch(() => null);
-                        if (ssoConfig)
-                            dispatch({ type: 'SET_SSO_CONFIG', config: ssoConfig });
-                    }
-                    if (isTeamProject && activeTeam) {
-                        const approvals = await api.listApprovals(activeTeam.team_id).catch(() => []);
-                        dispatch({ type: 'SET_PENDING_APPROVALS', approvals });
-                    }
-                    if (notifications.length > 0) {
-                        api.markNotificationsSeen().catch(() => { });
-                        setTimeout(() => dispatch({ type: 'SET_NOTIFICATIONS', notifications: [] }), 5000);
-                    }
-                    connectFeed(projectId);
-                    // Background poll
-                    pollIntervalRef.current = setInterval(async () => {
-                        const s = stateRef.current;
-                        if (s.tab !== 'knowledge' || s.activeProjectId !== projectId)
-                            return;
-                        try {
-                            const result = await api.listContributions(projectId, { limit: PAGE_SIZE, offset: 0 });
-                            if (result && stateRef.current.activeProjectId === projectId && result.total !== stateRef.current.contributionTotal) {
-                                dispatch({ type: 'SET_CONTRIBUTIONS', contributions: result.contributions, total: result.total });
-                            }
-                        }
-                        catch { }
-                    }, 30_000);
-                }
-                if (!saved.hasOpenedDashboard) {
-                    savePersistedState({ hasOpenedDashboard: true });
-                }
-            }
-            catch {
-                if (!cancelled) {
-                    dispatch({ type: 'SET_OFFLINE', offline: true });
-                    dispatch({ type: 'SET_ERROR', error: "can't reach cohvu" });
-                }
-            }
-        }
-        load();
-        return () => {
-            cancelled = true;
-            if (feedDisconnectRef.current)
-                feedDisconnectRef.current();
-            if (pollIntervalRef.current)
-                clearInterval(pollIntervalRef.current);
-        };
-    }, []); // eslint-disable-line react-hooks/exhaustive-deps
-    // ---- File watchers ----
-    useEffect(() => {
-        const configPaths = [
-            join(homedir(), '.claude.json'),
-            join(homedir(), '.cursor', 'mcp.json'),
-        ];
-        for (const configPath of configPaths) {
-            if (existsSync(configPath)) {
-                try {
-                    const w = watch(configPath, () => {
-                        const platforms = detectPlatformStatuses();
-                        dispatch({ type: 'SET_PLATFORMS', platforms });
-                    });
-                    watchersRef.current.push(w);
-                }
-                catch { }
-            }
-        }
-        return () => {
-            watchersRef.current.forEach(w => w.close());
-            watchersRef.current = [];
-        };
-    }, [dispatch]);
-    // ---- Cleanup timers on unmount ----
-    useEffect(() => {
-        return () => {
-            if (toastTimerRef.current)
-                clearTimeout(toastTimerRef.current);
-            if (liveDotTimerRef.current)
-                clearTimeout(liveDotTimerRef.current);
-            if (copiedTimerRef.current)
-                clearTimeout(copiedTimerRef.current);
-            if (inlineErrorTimerRef.current)
-                clearTimeout(inlineErrorTimerRef.current);
-            if (bannerTimerRef.current)
-                clearTimeout(bannerTimerRef.current);
-        };
-    }, []);
-    // ---- Key handling ----
-    useInput((input, key) => {
-        void handleKey(input, key);
-    });
-    async function handleKey(input, key) {
-        const s = stateRef.current;
-        // Dismiss informational banners on any keypress
-        if (s.notifications.some(n => !n.seen)) {
-            dispatch({ type: 'DISMISS_NOTIFICATION_BANNERS' });
-        }
-        if (s.firstLogin) {
-            dispatch({ type: 'SET_FIRST_LOGIN', firstLogin: false });
-        }
-        if (s.joinedProjectName) {
-            dispatch({ type: 'SET_JOINED_PROJECT', name: null });
-        }
-        // Global: ctrl+c always exits
-        if (input === 'c' && key.ctrl) {
-            exit();
-            return;
-        }
-        // Global: q exits (unless modal open, help open, or in knowledge search/remove/detail mode)
-        if (input === 'q' && !s.modal && !s.showHelp && !(s.tab === 'knowledge' && s.knowledgeMode !== 'browse')) {
-            exit();
-            return;
-        }
-        // Global: ? toggles help, escape/q closes it
-        if (input === '?' && !s.modal && !(s.tab === 'knowledge' && s.knowledgeMode === 'search')) {
-            dispatch({ type: 'SET_SHOW_HELP', show: !s.showHelp });
-            return;
-        }
-        if (s.showHelp) {
-            if (key.escape || input === 'q' || input === '?') {
-                dispatch({ type: 'SET_SHOW_HELP', show: false });
-            }
-            return;
-        }
-        // Prevent re-entrant async operations (double-press protection)
-        if (busyRef.current && (key.return || input === 'y'))
-            return;
-        // Modal keys
-        if (s.modal) {
-            await handleModalKey(input, key);
-            return;
-        }
-        // Team sub canceled — admins can hit `r` from any team tab to start
-        // resubscribe checkout. Members just see the contact list in the lock
-        // card; `r` does nothing for them.
-        if (isTeamLocked(s) && input === 'r' && s.userRole === 'admin') {
-            const team = getActiveTeam(s);
-            if (team) {
-                try {
-                    showToast('Opening checkout...', 'info');
-                    const c = await api.createTeamCheckout(team.team_id);
-                    if (c.checkout_url)
-                        openBrowser(c.checkout_url);
-                }
-                catch {
-                    showToast('Failed to open checkout', 'error');
-                }
-            }
-            return;
-        }
-        // Pro canceled with locked personal project in view — `u` opens Pro
-        // checkout. One checkout unlocks every personal project at once, no
-        // per-project choice. Integration keys stay disabled and need manual
-        // restore after.
-        if (input === 'u' && !s.modal) {
-            const project = getActiveProject(s);
-            if (project?.owner.kind === 'personal' && project.locked) {
-                try {
-                    showToast('Opening checkout...', 'info');
-                    const c = await api.createIndividualCheckout();
-                    if (c.checkout_url)
-                        openBrowser(c.checkout_url);
-                }
-                catch {
-                    showToast('Failed to open checkout', 'error');
-                }
-                return;
-            }
-        }
-        // Approval keys (when approvals exist, on team/project tab, team project)
-        if ((input === 'a' || input === 'x') && !s.modal && s.pendingApprovals.length > 0 && (s.tab === 'team' || s.tab === 'project')) {
-            const activeProject = getActiveProject(s);
-            if (activeProject?.owner.kind === 'team') {
-                const approval = s.pendingApprovals[0];
-                if (input === 'a') {
-                    dispatch({ type: 'OPEN_MODAL', modal: {
-                            kind: 'approve-action',
-                            approvalId: approval.id,
-                            description: approval.description,
-                            initiator: approval.initiator_email ?? approval.initiator_name ?? 'unknown',
-                            expiresIn: timeUntil(approval.expires_at),
-                        } });
-                }
-                else if (input === 'x') {
-                    const team = getActiveTeam(s);
-                    if (team) {
-                        try {
-                            await api.cancelApproval(team.team_id, approval.id);
-                            const approvals = await api.listApprovals(team.team_id);
-                            dispatch({ type: 'SET_PENDING_APPROVALS', approvals });
-                            showToast('Canceled', 'success');
-                        }
-                        catch {
-                            showToast('Failed to cancel', 'error');
-                        }
-                    }
-                }
-                return;
-            }
-        }
-        // Tab switching
-        if (key.tab) {
-            dispatch({ type: 'NEXT_TAB' });
-            setTimeout(() => loadTabData(), 0);
-            return;
-        }
-        // Locked-mode short-circuit: when the account is pending deletion,
-        // the only meaningful action is `c` (cancel deletion) on the You tab,
-        // plus `q`/`ctrl-c` to exit. Other tabs would only show empty API
-        // failures, and billing shortcuts don't apply to a locked account.
-        const locked = !!s.user?.deletion_scheduled_at;
-        // Number keys switch tabs (but not when typing in search mode)
-        const tabIdx = parseInt(input, 10);
-        if (tabIdx >= 1 && tabIdx <= TABS.length && !key.ctrl && !key.meta && !(s.tab === 'knowledge' && s.knowledgeMode !== 'browse')) {
-            if (locked)
-                return;
-            dispatch({ type: 'SWITCH_TAB', tab: TABS[tabIdx - 1] });
-            setTimeout(() => loadTabData(), 0);
-            return;
-        }
-        // Global 'b' shortcut — subscribe/billing portal from banner
-        if (input === 'b' && !locked && s.userRole === 'admin' && s.tab !== 'billing' && !(s.tab === 'knowledge' && s.knowledgeMode !== 'browse')) {
-            await handleBillingShortcut();
-            return;
-        }
-        // Tab-specific keys
-        switch (s.tab) {
-            case 'knowledge':
-                await handleKnowledgeKey(input, key);
-                break;
-            case 'team':
-                await handleTeamKey(input, key);
-                break;
-            case 'billing':
-                await handleBillingKey(input, key);
-                break;
-            case 'project':
-                await handleProjectKey(input, key);
-                break;
-            case 'keys':
-                await handleKeysKey(input, key);
-                break;
-            case 'you':
-                await handleYouKey(input, key);
-                break;
-        }
-    }
-    // ---- Keys tab keys ----
-    async function handleKeysKey(input, key) {
-        const s = stateRef.current;
-        if (key.upArrow) {
-            dispatch({ type: 'SET_API_KEYS_SELECTED', index: Math.max(0, s.apiKeysSelected - 1) });
-            return;
-        }
-        if (key.downArrow) {
-            const max = Math.max(0, s.apiKeys.length - 1);
-            dispatch({ type: 'SET_API_KEYS_SELECTED', index: Math.min(max, s.apiKeysSelected + 1) });
-            return;
-        }
-        if (input === 'n' && s.userRole === 'admin') {
-            if (!hasPaidPlan(s)) {
-                showToast('Keys require a paid plan', 'error');
-                return;
-            }
-            dispatch({ type: 'OPEN_MODAL', modal: {
-                    kind: 'create-integration-key',
-                    step: 'name',
-                    input: '',
-                    agentName: '',
-                    projectSelectedIdx: 0,
-                    selectedProjectIds: new Set(),
-                    projectScopes: new Map(),
-                    permProjectIdx: 0,
-                    permActionIdx: 0,
-                    globalScope: 'own',
-                    limitsField: 'expiry',
-                    expiresInDays: '',
-                    opsLimit: '',
-                } });
-            return;
-        }
-        if (input === 'x' && s.apiKeys.length > 0) {
-            const target = s.apiKeys[s.apiKeysSelected];
-            if (target) {
-                dispatch({ type: 'OPEN_MODAL', modal: { kind: 'confirm-revoke-key', keyId: target.id, keyName: target.name } });
-            }
-            return;
-        }
-        // Restore a disabled integration key. Only valid when the selected key
-        // is disabled — otherwise `r` is a no-op here. Server rotates the
-        // secret and returns it once; TUI shows the "new secret" modal so the
-        // admin can copy it into their external systems.
-        if (input === 'r' && s.userRole === 'admin' && s.apiKeys.length > 0) {
-            const target = s.apiKeys[s.apiKeysSelected];
-            if (target && target.disabled_at) {
-                try {
-                    dispatch({ type: 'SET_OPERATION', operation: 'Restoring key' });
-                    const { api_key, key } = await api.restoreApiKey(target.id);
-                    dispatch({ type: 'SET_OPERATION', operation: null });
-                    dispatch({ type: 'OPEN_MODAL', modal: {
-                            kind: 'key-created',
-                            keyId: api_key.id,
-                            keyValue: key,
-                            keyName: api_key.name,
-                            kind2: 'integration',
-                        } });
-                    // Refresh the list so the restored key moves out of the disabled section.
-                    if (s.activeProjectId) {
-                        const keys = await api.listIntegrationKeys(s.activeProjectId);
-                        dispatch({ type: 'SET_API_KEYS', keys });
-                    }
-                }
-                catch {
-                    dispatch({ type: 'SET_OPERATION', operation: null });
-                    showToast('Failed to restore key', 'error');
-                }
-            }
-            return;
-        }
-    }
-    // ---- Knowledge keys ----
-    async function handleKnowledgeKey(input, key) {
-        const s = stateRef.current;
-        // alt+d or ∂ enters remove mode
-        if (((key.meta && input === 'd') || input === '∂') && s.userRole !== 'viewer') {
-            const list = s.searchResults ?? s.contributions;
-            if (list.length > 0)
-                dispatch({ type: 'ENTER_REMOVE' });
-            return;
-        }
-        if (s.knowledgeMode === 'detail') {
-            if (key.escape || input === 'q') {
-                dispatch({ type: 'SET_DETAIL_CONTRIBUTION', contributionId: null });
-            }
-            return;
-        }
-        if (s.knowledgeMode === 'search') {
-            if (key.escape) {
-                dispatch({ type: 'EXIT_SEARCH' });
-            }
-            else if (key.return && s.searchQuery.length > 0) {
-                await executeSearch();
-            }
-            else if (key.backspace || key.delete) {
-                dispatch({ type: 'SEARCH_BACKSPACE' });
-            }
-            else if (input === ' ') {
-                dispatch({ type: 'SEARCH_INPUT', char: ' ' });
-            }
-            else if (key.upArrow) {
-                dispatch({ type: 'SCROLL_UP' });
-            }
-            else if (key.downArrow) {
-                dispatch({ type: 'SCROLL_DOWN' });
-            }
-            else if (input.length === 1 && !key.ctrl && !key.meta) {
-                dispatch({ type: 'SEARCH_INPUT', char: input });
-            }
-            return;
-        }
-        if (s.knowledgeMode === 'remove') {
-            const removeList = s.searchResults ?? s.contributions;
-            const filtered = s.userRole === 'admin'
-                ? removeList
-                : removeList.filter(m => m.contributed_by?.user_id === s.user?.id);
-            if (s.removeConfirming && input === 'y') {
-                const projectId = s.activeProjectId;
-                if (projectId) {
-                    let failures = 0;
-                    dispatch({ type: 'SET_OPERATION', operation: 'Removing contributions' });
-                    await Promise.all([...s.removeSelected].map(async (id) => {
-                        try {
-                            await api.deleteContribution(projectId, id);
-                            dispatch({ type: 'REMOVE_CONTRIBUTION', id });
-                        }
-                        catch {
-                            failures++;
-                        }
-                    }));
-                    dispatch({ type: 'SET_OPERATION', operation: null });
-                    dispatch({ type: 'EXIT_REMOVE' });
-                    if (failures > 0)
-                        showToast(`${failures} failed to remove`, 'error');
-                    else
-                        showToast('Removed', 'success');
-                }
-            }
-            else if (s.removeConfirming && (key.escape || input === 'n')) {
-                dispatch({ type: 'SET_REMOVE_CONFIRMING', confirming: false });
-            }
-            else if (key.escape) {
-                dispatch({ type: 'EXIT_REMOVE' });
-            }
-            else if (input === ' ') {
-                const mem = filtered[s.contributionSelected];
-                if (mem)
-                    dispatch({ type: 'TOGGLE_REMOVE', contributionId: mem.id });
-            }
-            else if (key.upArrow) {
-                if (s.contributionSelected > 0)
-                    dispatch({ type: 'SCROLL_UP' });
-            }
-            else if (key.downArrow) {
-                if (s.contributionSelected < filtered.length - 1)
-                    dispatch({ type: 'SCROLL_DOWN' });
-            }
-            else if (key.return && s.removeSelected.size > 0 && !s.removeConfirming) {
-                dispatch({ type: 'SET_REMOVE_CONFIRMING', confirming: true });
-            }
-            return;
-        }
-        // Browse mode
-        if (input === '/') {
-            dispatch({ type: 'ENTER_SEARCH' });
-        }
-        else if (input === 'd' && s.userRole !== 'viewer' && s.contributions.length > 0) {
-            dispatch({ type: 'ENTER_REMOVE' });
-        }
-        else if (input === 'D' && s.userRole === 'admin') {
-            const project = getActiveProject(s);
-            if (project)
-                dispatch({ type: 'OPEN_MODAL', modal: { kind: 'confirm-remove-all', slug: project.slug, contributionCount: s.contributionTotal, input: '' } });
-        }
-        else if (key.return && s.contributions.length > 0) {
-            const mem = s.contributions[s.contributionSelected];
-            if (mem)
-                dispatch({ type: 'SET_DETAIL_CONTRIBUTION', contributionId: mem.id });
-        }
-        else if (key.upArrow) {
-            dispatch({ type: 'SCROLL_UP' });
-        }
-        else if (key.downArrow) {
-            dispatch({ type: 'SCROLL_DOWN' });
-        }
-        else if (input === ' ') {
-            await loadMoreMemories();
-        }
-    }
-    // ---- Team keys ----
-    async function handleTeamKey(input, key) {
-        const s = stateRef.current;
-        const activeProject = getActiveProject(s);
-        if (!activeProject || activeProject.owner.kind === 'personal')
-            return;
-        const team = getActiveTeam(s);
-        if (!team)
-            return;
-        const memberCount = s.members.length;
-        const linkRoles = ['admin', 'member', 'viewer'];
-        // Settings rows (admin only): name, consensus, sso, then 3 invite link rows
-        const settingsCount = s.userRole === 'admin' ? 6 : 0; // 3 settings + 3 links
-        const totalRows = memberCount + settingsCount;
-        const sel = s.teamSelected;
-        const onMemberRow = sel < memberCount;
-        const onLinkRow = s.userRole === 'admin' && sel >= memberCount + 3;
-        if (key.upArrow) {
-            dispatch({ type: 'SET_TEAM_SELECTED', index: Math.max(0, sel - 1) });
-            return;
-        }
-        if (key.downArrow) {
-            dispatch({ type: 'SET_TEAM_SELECTED', index: Math.min(totalRows - 1, sel + 1) });
-            return;
-        }
-        // 'i' key (admin) — open invite modal
-        if (input === 'i' && s.userRole === 'admin') {
-            dispatch({ type: 'OPEN_MODAL', modal: { kind: 'invite', selected: 0 } });
-            return;
-        }
-        // Enter or 'r' key on name row — rename team
-        if ((key.return || input === 'r') && s.userRole === 'admin' && sel === memberCount + 0) {
-            dispatch({ type: 'OPEN_MODAL', modal: { kind: 'confirm-rename-team', input: '' } });
-            return;
-        }
-        // 'r' key on invite link row — regen (member/viewer) or mint-new (admin).
-        // Admin regen is semantically the same as mint since each admin link is
-        // single-use; we just mint and surface instead of asking for confirmation.
-        if (input === 'r' && s.userRole === 'admin' && onLinkRow) {
-            const linkIdx = sel - memberCount - 3;
-            const role = linkRoles[linkIdx];
-            if (role === 'admin' && team) {
-                try {
-                    const link = await api.mintAdminInvite(team.team_id);
-                    dispatch({ type: 'OPEN_MODAL', modal: { kind: 'invite-link', role: 'admin', url: link.url } });
-                }
-                catch {
-                    showToast('Failed to mint admin invite', 'error');
-                }
-                return;
-            }
-            dispatch({ type: 'OPEN_MODAL', modal: { kind: 'confirm-regen-link', role } });
-            return;
-        }
-        // Enter on consensus row — toggle
-        if (key.return && s.userRole === 'admin' && sel === memberCount + 1) {
-            if (team) {
-                try {
-                    const newValue = !s.requireConsensus;
-                    await api.updateTeamSettings(team.team_id, { require_consensus: newValue });
-                    dispatch({ type: 'SET_REQUIRE_CONSENSUS', value: newValue });
-                    showToast(newValue ? 'Consensus required' : 'Consensus off', 'success');
-                }
-                catch {
-                    showToast('Failed to update', 'error');
-                }
-            }
-            return;
-        }
-        // Enter or 's' key on SSO row — configure or manage SSO
-        if ((key.return || input === 's') && s.userRole === 'admin' && sel === memberCount + 2) {
-            if (s.ssoConfig) {
-                // SSO already exists — offer edit/delete
-                dispatch({ type: 'OPEN_MODAL', modal: { kind: 'manage-sso' } });
-            }
-            else {
-                dispatch({ type: 'OPEN_MODAL', modal: {
-                        kind: 'configure-sso', step: 1, issuer: '', clientId: '', clientSecret: '', domains: '', defaultRole: 0, requireSso: false,
-                    } });
-            }
-            return;
-        }
-        // 'c' key on invite link row — copy link. Admin row has no persistent
-        // URL (admin invites are minted on demand) so 'c' is a no-op there.
-        if (input === 'c' && s.userRole === 'admin' && onLinkRow) {
-            const linkIdx = sel - memberCount - 3;
-            const role = linkRoles[linkIdx];
-            if (role === 'admin')
-                return;
-            const link = s.inviteLinks.find(l => l.role === role);
-            if (link) {
-                copyToClipboard(link.url);
-                dispatch({ type: 'SET_COPIED_FEEDBACK', active: true });
-                if (copiedTimerRef.current)
-                    clearTimeout(copiedTimerRef.current);
-                copiedTimerRef.current = setTimeout(() => dispatch({ type: 'SET_COPIED_FEEDBACK', active: false }), 1500);
-            }
-            return;
-        }
-        // 'o' key on invite link row — open in browser. Same as 'c', admin row
-        // has nothing to open since the link doesn't exist until minted.
-        if (input === 'o' && s.userRole === 'admin' && onLinkRow) {
-            const linkIdx = sel - memberCount - 3;
-            const role = linkRoles[linkIdx];
-            if (role === 'admin')
-                return;
-            const link = s.inviteLinks.find(l => l.role === role);
-            if (link)
-                openBrowser(link.url);
-            return;
-        }
-        // Enter on the admin invite row — mint a fresh short-lived single-use
-        // link and surface it via the invite-link modal (copy/open affordances).
-        if (key.return && s.userRole === 'admin' && onLinkRow) {
-            const linkIdx = sel - memberCount - 3;
-            const role = linkRoles[linkIdx];
-            if (role === 'admin' && team) {
-                try {
-                    const link = await api.mintAdminInvite(team.team_id);
-                    dispatch({ type: 'OPEN_MODAL', modal: { kind: 'invite-link', role: 'admin', url: link.url } });
-                }
-                catch {
-                    showToast('Failed to mint admin invite', 'error');
-                }
-                return;
-            }
-        }
-        // 'd' key (admin) — delete team
-        if (input === 'd' && s.userRole === 'admin') {
-            if (team) {
-                dispatch({ type: 'OPEN_MODAL', modal: { kind: 'confirm-delete-team', slug: team.slug, teamName: team.name, input: '' } });
-            }
-            return;
-        }
-        // 'e' key on member row — edit role
-        if (input === 'e' && s.userRole === 'admin' && onMemberRow) {
-            const target = s.members[sel];
-            if (target) {
-                if (target.user_id === s.user?.id) {
-                    showInlineError('you cannot change your own role', 2000);
-                    return;
-                }
-                const roleIdx = ['admin', 'member', 'viewer'].indexOf(target.role ?? 'member');
-                dispatch({ type: 'OPEN_MODAL', modal: {
-                        kind: 'edit-role',
-                        targetEmail: target.email ?? target.user_id,
-                        targetUserId: target.user_id,
-                        currentRole: target.role ?? 'member',
-                        selected: roleIdx >= 0 ? roleIdx : 1,
-                    } });
-            }
-            return;
-        }
-        // 'x' key — remove member or leave
-        if (input === 'x') {
-            if (s.userRole === 'admin' && onMemberRow && team) {
-                const target = s.members[sel];
-                if (target) {
-                    if (target.user_id === s.user?.id) {
-                        const adminCount = s.members.filter(m => m.role === 'admin').length;
-                        if (adminCount <= 1) {
-                            showInlineError('you are the only admin · promote another member before leaving', 3000);
-                            return;
-                        }
-                        dispatch({ type: 'OPEN_MODAL', modal: { kind: 'confirm-leave' } });
-                    }
-                    else {
-                        dispatch({ type: 'OPEN_MODAL', modal: { kind: 'confirm-remove-member', email: target.email ?? target.user_id, userId: target.user_id } });
-                    }
-                }
-            }
-            else if (s.userRole !== 'admin') {
-                dispatch({ type: 'OPEN_MODAL', modal: { kind: 'confirm-leave' } });
-            }
-        }
-    }
-    // ---- Billing keys ----
-    async function handleBillingKey(input, _key) {
-        const s = stateRef.current;
-        if (s.userRole !== 'admin')
-            return;
-        const project = getActiveProject(s);
-        if (!project)
-            return;
-        const isTeam = project.owner.kind === 'team';
-        const team = getActiveTeam(s);
-        if (input === 's') {
-            try {
-                showToast('Opening checkout...', 'info');
-                if (isTeam && team) {
-                    const checkout = await api.createTeamCheckout(team.team_id);
-                    if (checkout.checkout_url)
-                        openBrowser(checkout.checkout_url);
-                }
-                else {
-                    const checkout = await api.createIndividualCheckout();
-                    if (checkout.checkout_url)
-                        openBrowser(checkout.checkout_url);
-                }
-            }
-            catch {
-                showToast('Failed to open checkout', 'error');
-            }
-        }
-        else if (input === 'p') {
-            try {
-                showToast('Opening billing portal...', 'info');
-                if (isTeam && team) {
-                    const portal = await api.getTeamPortalUrl(team.team_id);
-                    if (portal.url)
-                        openBrowser(portal.url);
-                }
-                else {
-                    const portal = await api.getIndividualPortalUrl();
-                    if (portal.url)
-                        openBrowser(portal.url);
-                }
-            }
-            catch {
-                showToast('Failed to open billing portal', 'error');
-            }
-        }
-    }
-    // ---- Project keys ----
-    async function handleProjectKey(input, key) {
-        const s = stateRef.current;
-        if (input === 't') {
-            dispatch({ type: 'OPEN_MODAL', modal: { kind: 'create-team', input: '' } });
-            return;
-        }
-        if (input === 'r' && s.userRole === 'admin' && s.activeProjectId) {
-            dispatch({ type: 'OPEN_MODAL', modal: { kind: 'rename', input: '' } });
-        }
-        else if (input === 'n') {
-            dispatch({ type: 'OPEN_MODAL', modal: { kind: 'select-owner', selected: 0 } });
-        }
-        else if (input === 'w' && s.projects.length > 1) {
-            dispatch({ type: 'OPEN_MODAL', modal: { kind: 'switch-project', selected: 0 } });
-        }
-        else if (input === 'c' && s.userRole === 'admin') {
-            const project = getActiveProject(s);
-            if (project)
-                dispatch({ type: 'OPEN_MODAL', modal: { kind: 'confirm-clear', slug: project.slug, contributionCount: s.contributionTotal, input: '' } });
-        }
-        else if (input === 'd' && s.userRole === 'admin') {
-            const project = getActiveProject(s);
-            if (project)
-                dispatch({ type: 'OPEN_MODAL', modal: { kind: 'confirm-delete', slug: project.slug, contributionCount: s.contributionTotal, input: '' } });
-        }
-    }
-    // ---- You keys ----
-    async function handleYouKey(input, _key) {
-        const s = stateRef.current;
-        if (input === 'r') {
-            await runSetup();
-            const platforms = detectPlatformStatuses();
-            dispatch({ type: 'SET_PLATFORMS', platforms });
-        }
-        else if (input === 'p') {
-            const { isPaused, setPaused } = await import('../pause.js');
-            const newPaused = !isPaused();
-            setPaused(newPaused);
-            dispatch({ type: 'SET_PAUSED', paused: newPaused });
-            showToast(newPaused ? 'Paused — agents won\'t see tools until resumed' : 'Resumed', 'success');
-        }
-        else if (input === 'l') {
-            dispatch({ type: 'OPEN_MODAL', modal: { kind: 'confirm-logout' } });
-        }
-        else if (input === 'd' && !s.user?.deletion_scheduled_at) {
-            // Open the delete-account confirmation. Email-typed confirm prevents
-            // muscle-memory destruction.
-            dispatch({ type: 'OPEN_MODAL', modal: { kind: 'confirm-account-delete', email: s.user?.email ?? '', input: '' } });
-        }
-        else if (input === 'c' && s.user?.deletion_scheduled_at) {
-            dispatch({ type: 'OPEN_MODAL', modal: { kind: 'confirm-cancel-account-deletion' } });
-        }
-    }
-    // ---- Billing shortcut (from banner) ----
-    async function handleBillingShortcut() {
-        const s = stateRef.current;
-        const project = getActiveProject(s);
-        if (!project)
-            return;
-        const isTeam = project.owner.kind === 'team';
-        const team = getActiveTeam(s);
-        if (isTeam && team) {
-            const sub = team.subscription;
-            if (!sub || sub.status !== 'active') {
-                try {
-                    showToast('Opening checkout...', 'info');
-                    const c = await api.createTeamCheckout(team.team_id);
-                    if (c.checkout_url)
-                        openBrowser(c.checkout_url);
-                }
-                catch {
-                    showToast('Failed to open checkout', 'error');
-                }
-            }
-            else {
-                try {
-                    showToast('Opening billing portal...', 'info');
-                    const p = await api.getTeamPortalUrl(team.team_id);
-                    if (p.url)
-                        openBrowser(p.url);
-                }
-                catch {
-                    showToast('Failed to open billing portal', 'error');
-                }
-            }
-        }
-        else {
-            const sub = s.individualSubscription;
-            if (!sub || sub.status !== 'active') {
-                try {
-                    showToast('Opening checkout...', 'info');
-                    const c = await api.createIndividualCheckout();
-                    if (c.checkout_url)
-                        openBrowser(c.checkout_url);
-                }
-                catch {
-                    showToast('Failed to open checkout', 'error');
-                }
-            }
-            else {
-                try {
-                    showToast('Opening billing portal...', 'info');
-                    const p = await api.getIndividualPortalUrl();
-                    if (p.url)
-                        openBrowser(p.url);
-                }
-                catch {
-                    showToast('Failed to open billing portal', 'error');
-                }
-            }
-        }
-    }
-    // ---- Modal keys ----
-    async function handleModalKey(input, key) {
-        const s = stateRef.current;
-        if (!s.modal)
-            return;
-        if (key.escape) {
-            dispatch({ type: 'CLOSE_MODAL' });
-            return;
-        }
-        const modal = s.modal;
-        // y/n modals
-        if (modal.kind === 'confirm-remove' || modal.kind === 'confirm-remove-member' ||
-            modal.kind === 'confirm-leave' || modal.kind === 'confirm-logout' ||
-            modal.kind === 'confirm-regen-link' || modal.kind === 'initiate-consensus' ||
-            modal.kind === 'approve-action' || modal.kind === 'confirm-revoke-key' ||
-            modal.kind === 'confirm-cancel-account-deletion') {
-            if (input === 'y') {
-                const willExit = modal.kind === 'confirm-logout';
-                await confirmModal(modal);
-                if (!willExit)
-                    dispatch({ type: 'CLOSE_MODAL' });
-            }
-            else if (input === 'n') {
-                dispatch({ type: 'CLOSE_MODAL' });
-            }
-            return;
-        }
-        // Info-only modals — any key dismisses.
-        if (modal.kind === 'account-delete-blocked' || modal.kind === 'account-delete-scheduled') {
-            dispatch({ type: 'CLOSE_MODAL' });
-            return;
-        }
-        // Type-email-to-confirm: account delete.
-        if (modal.kind === 'confirm-account-delete') {
-            if (key.return && modal.input === modal.email) {
-                await confirmModal(modal);
-                return;
-            }
-            if (key.backspace || key.delete) {
-                dispatch({ type: 'OPEN_MODAL', modal: { ...modal, input: modal.input.slice(0, -1) } });
-            }
-            else if (input.length === 1 && !key.ctrl && !key.meta) {
-                dispatch({ type: 'OPEN_MODAL', modal: { ...modal, input: modal.input + input } });
-            }
-            return;
-        }
-        // Integration key creation wizard
-        if (modal.kind === 'create-integration-key') {
-            // Silo rule: once one project is selected, only same-entity projects
-            // are reachable. Filter here so index arithmetic in the picker stays
-            // consistent with what the Modal renders.
-            const adminProjects = filterToSameEntity(adminScopableProjects(s), modal.selectedProjectIds, s.user?.id ?? null);
-            if (modal.step === 'name') {
-                if (key.return && modal.input.trim().length > 0) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, step: 'agent' } });
-                }
-                else if (key.backspace || key.delete) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, input: modal.input.slice(0, -1) } });
-                }
-                else if (input === ' ') {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, input: modal.input + ' ' } });
-                }
-                else if (input.length === 1 && !key.ctrl && !key.meta) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, input: modal.input + input } });
-                }
-                return;
-            }
-            if (modal.step === 'agent') {
-                if (key.return) {
-                    if (adminProjects.length === 0) {
-                        showInlineError('no projects you can scope a key to', 3000);
-                        return;
-                    }
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, step: 'projects' } });
-                }
-                else if (key.backspace || key.delete) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, agentName: modal.agentName.slice(0, -1) } });
-                }
-                else if (input === ' ') {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, agentName: modal.agentName + ' ' } });
-                }
-                else if (input.length === 1 && !key.ctrl && !key.meta) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, agentName: modal.agentName + input } });
-                }
-                return;
-            }
-            if (modal.step === 'projects') {
-                if (adminProjects.length === 0)
-                    return;
-                if (key.upArrow) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, projectSelectedIdx: Math.max(0, modal.projectSelectedIdx - 1) } });
-                }
-                else if (key.downArrow) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, projectSelectedIdx: Math.min(adminProjects.length - 1, modal.projectSelectedIdx + 1) } });
-                }
-                else if (input === ' ') {
-                    const p = adminProjects[modal.projectSelectedIdx];
-                    if (p) {
-                        const next = new Set(modal.selectedProjectIds);
-                        if (next.has(p.project_id))
-                            next.delete(p.project_id);
-                        else
-                            next.add(p.project_id);
-                        dispatch({ type: 'OPEN_MODAL', modal: { ...modal, selectedProjectIds: next } });
-                    }
-                }
-                else if (key.return && modal.selectedProjectIds.size > 0) {
-                    // Initialize default scopes for new projects (all actions on)
-                    const scopes = new Map(modal.projectScopes);
-                    for (const pid of modal.selectedProjectIds) {
-                        if (!scopes.has(pid)) {
-                            scopes.set(pid, new Set([...ALL_KEY_ACTIONS]));
-                        }
-                    }
-                    // Remove scopes for deselected projects
-                    for (const pid of scopes.keys()) {
-                        if (!modal.selectedProjectIds.has(pid))
-                            scopes.delete(pid);
-                    }
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, step: 'permissions', projectScopes: scopes, permProjectIdx: 0, permActionIdx: 0 } });
-                }
-                return;
-            }
-            if (modal.step === 'permissions') {
-                const selectedProjects = adminProjects.filter(p => modal.selectedProjectIds.has(p.project_id));
-                const projectCount = selectedProjects.length;
-                if (projectCount === 0)
-                    return;
-                if (key.tab) {
-                    // tab cycles through projects
-                    const next = (modal.permProjectIdx + 1) % projectCount;
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, permProjectIdx: next, permActionIdx: 0 } });
-                }
-                else if (key.upArrow) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, permProjectIdx: Math.max(0, modal.permProjectIdx - 1), permActionIdx: 0 } });
-                }
-                else if (key.downArrow) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, permProjectIdx: Math.min(projectCount - 1, modal.permProjectIdx + 1), permActionIdx: 0 } });
-                }
-                else if (key.leftArrow) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, permActionIdx: Math.max(0, modal.permActionIdx - 1) } });
-                }
-                else if (key.rightArrow) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, permActionIdx: Math.min(ALL_KEY_ACTIONS.length - 1, modal.permActionIdx + 1) } });
-                }
-                else if (input === ' ') {
-                    const p = selectedProjects[modal.permProjectIdx];
-                    if (p) {
-                        const action = ALL_KEY_ACTIONS[modal.permActionIdx];
-                        const scopes = new Map(modal.projectScopes);
-                        const actions = new Set(scopes.get(p.project_id) ?? []);
-                        if (actions.has(action))
-                            actions.delete(action);
-                        else
-                            actions.add(action);
-                        scopes.set(p.project_id, actions);
-                        dispatch({ type: 'OPEN_MODAL', modal: { ...modal, projectScopes: scopes } });
-                    }
-                }
-                else if (key.return) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, step: 'scope' } });
-                }
-                return;
-            }
-            if (modal.step === 'scope') {
-                if (key.upArrow || key.downArrow) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, globalScope: modal.globalScope === 'own' ? 'all' : 'own' } });
-                }
-                else if (key.return) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, step: 'limits' } });
-                }
-                return;
-            }
-            if (modal.step === 'limits') {
-                if (key.return) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, step: 'confirm' } });
-                }
-                else if (key.tab) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, limitsField: modal.limitsField === 'expiry' ? 'ops' : 'expiry' } });
-                }
-                else if (key.backspace || key.delete) {
-                    if (modal.limitsField === 'expiry') {
-                        dispatch({ type: 'OPEN_MODAL', modal: { ...modal, expiresInDays: modal.expiresInDays.slice(0, -1) } });
-                    }
-                    else {
-                        dispatch({ type: 'OPEN_MODAL', modal: { ...modal, opsLimit: modal.opsLimit.slice(0, -1) } });
-                    }
-                }
-                else if (/^[0-9]$/.test(input)) {
-                    if (modal.limitsField === 'expiry') {
-                        dispatch({ type: 'OPEN_MODAL', modal: { ...modal, expiresInDays: modal.expiresInDays + input } });
-                    }
-                    else {
-                        dispatch({ type: 'OPEN_MODAL', modal: { ...modal, opsLimit: modal.opsLimit + input } });
-                    }
-                }
-                return;
-            }
-            if (modal.step === 'confirm') {
-                if (input === 'y') {
-                    await confirmModal(modal);
-                }
-                else if (input === 'n') {
-                    dispatch({ type: 'CLOSE_MODAL' });
-                }
-                return;
-            }
-            return;
-        }
-        // Key created — copy or dismiss (esc handled at top)
-        if (modal.kind === 'key-created') {
-            if (input === 'c') {
-                copyToClipboard(modal.keyValue);
-                dispatch({ type: 'SET_COPIED_FEEDBACK', active: true });
-                if (copiedTimerRef.current)
-                    clearTimeout(copiedTimerRef.current);
-                copiedTimerRef.current = setTimeout(() => dispatch({ type: 'SET_COPIED_FEEDBACK', active: false }), 1500);
-            }
-            return;
-        }
-        // Text input modals
-        if ('input' in modal) {
-            if (key.return) {
-                const chained = await confirmModal(modal);
-                if (!chained)
-                    dispatch({ type: 'CLOSE_MODAL' });
-            }
-            else if (key.backspace || key.delete) {
-                dispatch({ type: 'MODAL_BACKSPACE' });
-            }
-            else if (input === ' ') {
-                dispatch({ type: 'MODAL_INPUT', char: ' ' });
-            }
-            else if (input.length === 1 && !key.ctrl && !key.meta) {
-                dispatch({ type: 'MODAL_INPUT', char: input });
-            }
-            return;
-        }
-        // Switch project modal
-        if (modal.kind === 'switch-project') {
-            if (key.upArrow) {
-                dispatch({ type: 'OPEN_MODAL', modal: { kind: 'switch-project', selected: Math.max(0, modal.selected - 1) } });
-            }
-            else if (key.downArrow) {
-                dispatch({ type: 'OPEN_MODAL', modal: { kind: 'switch-project', selected: Math.min(s.projects.length, modal.selected + 1) } });
-            }
-            else if (key.return) {
-                if (modal.selected === s.projects.length) {
-                    dispatch({ type: 'CLOSE_MODAL' });
-                    dispatch({ type: 'OPEN_MODAL', modal: { kind: 'select-owner', selected: 0 } });
-                }
-                else {
-                    const project = s.projects[modal.selected];
-                    if (project) {
-                        try {
-                            await api.switchProject(project.project_id);
-                            const me = await api.me();
-                            dispatch({ type: 'SET_USER_DATA', me });
-                            dispatch({ type: 'CLOSE_MODAL' });
-                            const newProjectId = me.user.active_project_id;
-                            if (newProjectId)
-                                switchToProject(newProjectId);
-                        }
-                        catch {
-                            dispatch({ type: 'CLOSE_MODAL' });
-                            showToast('Failed to switch project', 'error');
-                        }
-                    }
-                }
-            }
-            return;
-        }
-        // Edit role modal
-        if (modal.kind === 'edit-role') {
-            const roles = ['admin', 'member', 'viewer'];
-            if (key.upArrow) {
-                dispatch({ type: 'OPEN_MODAL', modal: { ...modal, selected: Math.max(0, modal.selected - 1) } });
-            }
-            else if (key.downArrow) {
-                dispatch({ type: 'OPEN_MODAL', modal: { ...modal, selected: Math.min(roles.length - 1, modal.selected + 1) } });
-            }
-            else if (key.return) {
-                const newRole = roles[modal.selected];
-                if (newRole !== modal.currentRole) {
-                    if (modal.currentRole === 'admin' && newRole !== 'admin') {
-                        const adminCount = s.members.filter(m => m.role === 'admin').length;
-                        if (adminCount <= 1) {
-                            showInlineError('cannot demote the last admin · promote another member first', 2000);
-                            dispatch({ type: 'CLOSE_MODAL' });
-                            return;
-                        }
-                    }
-                    const changeTeam = getActiveTeam(s);
-                    if (changeTeam) {
-                        try {
-                            // Server decides whether consensus applies — if so, it returns
-                            // 202 with a pending_approval object; otherwise the role change
-                            // applies immediately. We don't branch client-side.
-                            const resp = await api.changeTeamRole(changeTeam.team_id, modal.targetUserId, newRole);
-                            if (resp.pending_approval) {
-                                const approvals = await api.listApprovals(changeTeam.team_id);
-                                dispatch({ type: 'SET_PENDING_APPROVALS', approvals });
-                                showToast('Role change proposed — waiting for majority', 'info');
-                            }
-                            else {
-                                const members = await api.listTeamMembers(changeTeam.team_id);
-                                dispatch({ type: 'SET_MEMBERS', members });
-                                showToast('Role updated', 'success');
-                            }
-                        }
-                        catch {
-                            showToast('Failed to update role', 'error');
-                        }
-                    }
-                }
-                dispatch({ type: 'CLOSE_MODAL' });
-            }
-        }
-        // Select owner modal
-        if (modal.kind === 'select-owner') {
-            const itemCount = 1 + s.teams.length + 1; // "personal" + each team + "+ new team"
-            if (key.upArrow) {
-                dispatch({ type: 'OPEN_MODAL', modal: { ...modal, selected: Math.max(0, modal.selected - 1) } });
-            }
-            else if (key.downArrow) {
-                dispatch({ type: 'OPEN_MODAL', modal: { ...modal, selected: Math.min(itemCount - 1, modal.selected + 1) } });
-            }
-            else if (key.return) {
-                dispatch({ type: 'CLOSE_MODAL' });
-                if (modal.selected === 0) {
-                    // Personal
-                    dispatch({ type: 'OPEN_MODAL', modal: { kind: 'create-project', input: '', teamId: null } });
-                }
-                else if (modal.selected <= s.teams.length) {
-                    // Existing team
-                    const team = s.teams[modal.selected - 1];
-                    dispatch({ type: 'OPEN_MODAL', modal: { kind: 'create-project', input: '', teamId: team.team_id } });
-                }
-                else {
-                    // + new team → chains to create-team → create-team-project
-                    dispatch({ type: 'OPEN_MODAL', modal: { kind: 'create-team', input: '' } });
-                }
-            }
-            return;
-        }
-        // Invite modal — select role
-        if (modal.kind === 'invite') {
-            const roles = ['admin', 'member', 'viewer'];
-            if (key.upArrow) {
-                dispatch({ type: 'OPEN_MODAL', modal: { ...modal, selected: Math.max(0, modal.selected - 1) } });
-            }
-            else if (key.downArrow) {
-                dispatch({ type: 'OPEN_MODAL', modal: { ...modal, selected: Math.min(2, modal.selected + 1) } });
-            }
-            else if (key.return) {
-                const role = roles[modal.selected];
-                const team = getActiveTeam(s);
-                if (!team) {
-                    dispatch({ type: 'CLOSE_MODAL' });
-                    showToast('No team selected', 'error');
-                    return;
-                }
-                if (role === 'admin') {
-                    // Admin invites are minted on the fly — short-lived, single-use.
-                    // No persistent link in state.inviteLinks; each invite is fresh.
-                    try {
-                        const link = await api.mintAdminInvite(team.team_id);
-                        dispatch({ type: 'CLOSE_MODAL' });
-                        dispatch({ type: 'OPEN_MODAL', modal: { kind: 'invite-link', role, url: link.url } });
-                    }
-                    catch {
-                        dispatch({ type: 'CLOSE_MODAL' });
-                        showToast('Failed to mint admin invite', 'error');
-                    }
-                    return;
-                }
-                const link = s.inviteLinks.find(l => l.role === role);
-                if (link) {
-                    dispatch({ type: 'CLOSE_MODAL' });
-                    dispatch({ type: 'OPEN_MODAL', modal: { kind: 'invite-link', role, url: link.url } });
-                }
-                else {
-                    dispatch({ type: 'CLOSE_MODAL' });
-                    showToast('Invite link not available', 'error');
-                }
-            }
-            return;
-        }
-        // Invite link modal — copy or open
-        if (modal.kind === 'invite-link') {
-            if (input === 'c') {
-                copyToClipboard(modal.url);
-                dispatch({ type: 'SET_COPIED_FEEDBACK', active: true });
-                if (copiedTimerRef.current)
-                    clearTimeout(copiedTimerRef.current);
-                copiedTimerRef.current = setTimeout(() => dispatch({ type: 'SET_COPIED_FEEDBACK', active: false }), 1500);
-            }
-            else if (input === 'o') {
-                openBrowser(modal.url);
-                showToast('Opened in browser', 'info');
-            }
-            return;
-        }
-        // Manage existing SSO — edit or delete
-        if (modal.kind === 'manage-sso') {
-            if (input === 'e') {
-                // Edit — open wizard pre-filled with current values
-                const sso = s.ssoConfig;
-                dispatch({ type: 'CLOSE_MODAL' });
-                dispatch({ type: 'OPEN_MODAL', modal: {
-                        kind: 'configure-sso', step: 1,
-                        issuer: sso?.issuer ?? '', clientId: '', clientSecret: '',
-                        domains: sso?.allowed_domains.join(', ') ?? '', defaultRole: ['member', 'viewer', 'admin'].indexOf(sso?.default_role ?? 'member'),
-                        requireSso: sso?.require_sso ?? false,
-                    } });
-            }
-            else if (input === 'd') {
-                const team = getActiveTeam(s);
-                if (team) {
-                    try {
-                        await api.deleteSso(team.team_id);
-                        dispatch({ type: 'SET_SSO_CONFIG', config: null });
-                        dispatch({ type: 'CLOSE_MODAL' });
-                        showToast('SSO removed', 'success');
-                    }
-                    catch {
-                        showToast('Failed to remove SSO', 'error');
-                    }
-                }
-            }
-            return;
-        }
-        // Configure SSO wizard
-        if (modal.kind === 'configure-sso') {
-            if (key.escape) {
-                dispatch({ type: 'CLOSE_MODAL' });
-                return;
-            }
-            const fieldMap = { 1: 'issuer', 2: 'clientId', 3: 'clientSecret', 4: 'domains' };
-            if (modal.step >= 1 && modal.step <= 4) {
-                const field = fieldMap[modal.step];
-                const current = modal[field];
-                if (key.return && current.length > 0) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, step: modal.step + 1 } });
-                }
-                else if (key.backspace || key.delete) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, [field]: current.slice(0, -1) } });
-                }
-                else if (input === ' ') {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, [field]: current + ' ' } });
-                }
-                else if (input.length === 1 && !key.ctrl && !key.meta) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, [field]: current + input } });
-                }
-            }
-            else if (modal.step === 5) {
-                // Role selection (member=0, viewer=1, admin=2)
-                if (key.upArrow) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, defaultRole: Math.max(0, modal.defaultRole - 1) } });
-                }
-                else if (key.downArrow) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, defaultRole: Math.min(2, modal.defaultRole + 1) } });
-                }
-                else if (key.return) {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, step: 6 } });
-                }
-            }
-            else if (modal.step === 6) {
-                // Require SSO toggle
-                if (input === 'y') {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, requireSso: true, step: 7 } });
-                }
-                else if (input === 'n') {
-                    dispatch({ type: 'OPEN_MODAL', modal: { ...modal, requireSso: false, step: 7 } });
-                }
-            }
-            else if (modal.step === 7) {
-                // Confirm
-                if (key.return) {
-                    const team = getActiveTeam(s);
-                    if (team) {
-                        const roles = ['member', 'viewer', 'admin'];
-                        try {
-                            dispatch({ type: 'SET_OPERATION', operation: 'Configuring SSO' });
-                            const ssoPayload = {
-                                issuer: modal.issuer,
-                                client_id: modal.clientId,
-                                client_secret: modal.clientSecret,
-                                allowed_domains: modal.domains.split(',').map((d) => d.trim()).filter(Boolean),
-                                default_role: roles[modal.defaultRole],
-                                require_sso: modal.requireSso,
-                            };
-                            if (s.ssoConfig) {
-                                await api.updateSso(team.team_id, ssoPayload);
-                            }
-                            else {
-                                await api.configureSso(team.team_id, ssoPayload);
-                            }
-                            const ssoConfig = await api.getSso(team.team_id);
-                            dispatch({ type: 'SET_SSO_CONFIG', config: ssoConfig });
-                            dispatch({ type: 'SET_OPERATION', operation: null });
-                            showToast('SSO configured', 'success');
-                        }
-                        catch {
-                            dispatch({ type: 'SET_OPERATION', operation: null });
-                            showToast('Failed to configure SSO', 'error');
-                        }
-                    }
-                    dispatch({ type: 'CLOSE_MODAL' });
-                }
-            }
-            return;
-        }
-    }
-    // ---- Modal confirmation ----
-    async function confirmModal(modal) {
-        if (busyRef.current)
-            return false;
-        busyRef.current = true;
-        try {
-            return await confirmModalInner(modal);
-        }
-        finally {
-            busyRef.current = false;
-        }
-    }
-    async function confirmModalInner(modal) {
-        const s = stateRef.current;
-        // Logout doesn't need a project
-        if (modal.kind === 'confirm-logout') {
-            try {
-                const credentialsFile = join(homedir(), '.cohvu', 'credentials');
-                if (existsSync(credentialsFile))
-                    unlinkSync(credentialsFile);
-            }
-            catch { }
-            exit();
-            return false;
-        }
-        // Account deletion flow.
-        if (modal.kind === 'confirm-account-delete') {
-            try {
-                dispatch({ type: 'SET_OPERATION', operation: 'Scheduling deletion' });
-                const result = await api.scheduleAccountDeletion();
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                // Refresh the user record so the You tab reflects the locked state.
-                const me = await api.me();
-                dispatch({ type: 'SET_USER_DATA', me });
-                dispatch({ type: 'OPEN_MODAL', modal: { kind: 'account-delete-scheduled', scheduledAt: result.deletion_scheduled_at } });
-            }
-            catch (err) {
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                // 409 sole-admin → redirect to the blocked modal with the team list.
-                // ApiError.body is a JSON string; parse it for the structured payload.
-                let handled = false;
-                const raw = err?.body;
-                if (typeof raw === 'string') {
-                    try {
-                        const parsed = JSON.parse(raw);
-                        if (parsed.error?.code === 'SOLE_ADMIN' && parsed.error.details?.teams) {
-                            dispatch({ type: 'OPEN_MODAL', modal: { kind: 'account-delete-blocked', teams: parsed.error.details.teams } });
-                            handled = true;
-                        }
-                    }
-                    catch { }
-                }
-                if (!handled) {
-                    showToast('Failed to schedule deletion', 'error');
-                    dispatch({ type: 'CLOSE_MODAL' });
-                }
-            }
-            return false;
-        }
-        if (modal.kind === 'confirm-cancel-account-deletion') {
-            try {
-                dispatch({ type: 'SET_OPERATION', operation: 'Canceling deletion' });
-                await api.cancelAccountDeletion();
-                const me = await api.me();
-                dispatch({ type: 'SET_USER_DATA', me });
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                showToast('Deletion canceled — account restored', 'success');
-            }
-            catch {
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                showToast('Failed to cancel deletion', 'error');
-            }
-            return true;
-        }
-        // These modals don't require an active project
-        if (modal.kind === 'create-project') {
-            if (!modal.input)
-                return false;
-            const slug = modal.input.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
-            try {
-                dispatch({ type: 'SET_OPERATION', operation: 'Creating project' });
-                const project = modal.teamId
-                    ? await api.createTeamProject(modal.teamId, modal.input, slug)
-                    : await api.createProject(modal.input, slug);
-                await api.switchProject(project.id);
-                const me = await api.me();
-                dispatch({ type: 'SET_USER_DATA', me });
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                const newProjectId = me.user.active_project_id;
-                if (newProjectId)
-                    switchToProject(newProjectId);
-                showToast('Project created', 'success');
-            }
-            catch {
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                showToast('Failed to create project', 'error');
-            }
-            return false;
-        }
-        if (modal.kind === 'create-team') {
-            if (!modal.input)
-                return false;
-            const slug = modal.input.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
-            try {
-                dispatch({ type: 'SET_OPERATION', operation: 'Opening team checkout' });
-                // Team creation is gated on a team subscription — we hand the user
-                // to Stripe checkout; the webhook creates the team + sub atomically
-                // on payment. The new team appears on the next me() refresh.
-                const { checkout_url } = await api.createTeam(modal.input, slug);
-                if (checkout_url)
-                    openBrowser(checkout_url);
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                showToast('Complete checkout in your browser — team will appear after payment', 'info');
-            }
-            catch {
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                showToast('Failed to start team checkout', 'error');
-            }
-            return false;
-        }
-        if (modal.kind === 'create-team-project') {
-            if (!modal.input)
-                return false;
-            const slug = modal.input.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
-            try {
-                dispatch({ type: 'SET_OPERATION', operation: 'Creating project' });
-                const project = await api.createTeamProject(modal.teamId, modal.input, slug);
-                await api.switchProject(project.id);
-                const me = await api.me();
-                dispatch({ type: 'SET_USER_DATA', me });
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                const newProjectId = me.user.active_project_id;
-                if (newProjectId)
-                    switchToProject(newProjectId);
-                showToast('Team created', 'success');
-            }
-            catch {
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                showToast('Failed to create project', 'error');
-            }
-            return false;
-        }
-        if (modal.kind === 'create-integration-key') {
-            if (modal.step !== 'confirm')
-                return false;
-            if (!modal.input.trim() || modal.selectedProjectIds.size === 0)
-                return false;
-            try {
-                dispatch({ type: 'SET_OPERATION', operation: 'Creating key' });
-                const projects = [...modal.selectedProjectIds].map(pid => ({
-                    project_id: pid,
-                    scope: modal.globalScope,
-                    allowed_actions: [...(modal.projectScopes.get(pid) ?? [])],
-                }));
-                const result = await api.createApiKey({
-                    kind: 'integration',
-                    name: modal.input.trim(),
-                    projects,
-                    ...(modal.agentName.trim() ? { default_agent_name: modal.agentName.trim() } : {}),
-                    ...(modal.expiresInDays ? { expires_in_days: parseInt(modal.expiresInDays, 10) } : {}),
-                    ...(modal.opsLimit ? { ops_limit: parseInt(modal.opsLimit, 10) } : {}),
-                });
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                const integrationKeys = stateRef.current.userRole === 'admin' && stateRef.current.activeProjectId
-                    ? await api.listIntegrationKeys(stateRef.current.activeProjectId).catch(() => [])
-                    : [];
-                dispatch({ type: 'SET_API_KEYS', keys: integrationKeys });
-                dispatch({ type: 'OPEN_MODAL', modal: {
-                        kind: 'key-created',
-                        keyId: result.api_key.id,
-                        keyValue: result.key,
-                        keyName: result.api_key.name,
-                        kind2: 'integration',
-                    } });
-                return true;
-            }
-            catch {
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                showToast('Failed to create key', 'error');
-            }
-            return false;
-        }
-        if (modal.kind === 'confirm-revoke-key') {
-            try {
-                dispatch({ type: 'SET_OPERATION', operation: 'Revoking key' });
-                await api.deleteApiKey(modal.keyId);
-                dispatch({ type: 'REMOVE_API_KEY', id: modal.keyId });
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                showToast('Key revoked', 'success');
-            }
-            catch {
-                dispatch({ type: 'SET_OPERATION', operation: null });
-                showToast('Failed to revoke key', 'error');
-            }
-            return false;
-        }
-        const projectId = s.activeProjectId;
-        if (!projectId)
-            return false;
-        switch (modal.kind) {
-            case 'approve-action': {
-                const team = getActiveTeam(s);
-                if (team && 'approvalId' in modal) {
-                    try {
-                        dispatch({ type: 'SET_OPERATION', operation: 'Approving' });
-                        await api.approveAction(team.team_id, modal.approvalId);
-                        const approvals = await api.listApprovals(team.team_id);
-                        dispatch({ type: 'SET_PENDING_APPROVALS', approvals });
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        const me = await api.me();
-                        dispatch({ type: 'SET_USER_DATA', me });
-                        await loadTabData();
-                        showToast('Approved', 'success');
-                    }
-                    catch {
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        showToast('Failed to approve', 'error');
-                    }
-                }
-                break;
-            }
-            case 'confirm-remove':
-                try {
-                    dispatch({ type: 'SET_OPERATION', operation: 'Removing contribution' });
-                    await api.deleteContribution(projectId, modal.contributionId);
-                    dispatch({ type: 'REMOVE_CONTRIBUTION', id: modal.contributionId });
-                    dispatch({ type: 'SET_OPERATION', operation: null });
-                    showToast('Contribution removed', 'success');
-                }
-                catch {
-                    dispatch({ type: 'SET_OPERATION', operation: null });
-                    showToast('Failed to remove contribution', 'error');
-                }
-                break;
-            case 'confirm-remove-all':
-            case 'confirm-clear': {
-                const project = getActiveProject(s);
-                if (project && modal.input === project.slug) {
-                    try {
-                        dispatch({ type: 'SET_OPERATION', operation: 'Clearing contributions' });
-                        // Server gates this behind consensus for team projects. If the
-                        // response includes pending_approval, the action is queued.
-                        const resp = await api.clearContributions(projectId);
-                        if (resp.pending_approval) {
-                            const team = getActiveTeam(s);
-                            if (team) {
-                                const approvals = await api.listApprovals(team.team_id);
-                                dispatch({ type: 'SET_PENDING_APPROVALS', approvals });
-                            }
-                            dispatch({ type: 'SET_OPERATION', operation: null });
-                            showToast('Clear proposed — waiting for majority', 'info');
-                        }
-                        else {
-                            dispatch({ type: 'SET_CONTRIBUTIONS', contributions: [], total: 0 });
-                            dispatch({ type: 'SET_OPERATION', operation: null });
-                            showToast('All contributions cleared', 'success');
-                        }
-                    }
-                    catch {
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        showToast('Failed to clear contributions', 'error');
-                    }
-                }
-                break;
-            }
-            case 'confirm-delete': {
-                const project = getActiveProject(s);
-                if (project && modal.input === project.slug) {
-                    try {
-                        dispatch({ type: 'SET_OPERATION', operation: 'Deleting project' });
-                        await api.deleteProject(projectId);
-                        const me = await api.me();
-                        dispatch({ type: 'SET_USER_DATA', me });
-                        dispatch({ type: 'SWITCH_TAB', tab: 'knowledge' });
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        const newProjectId = me.user.active_project_id;
-                        if (newProjectId) {
-                            switchToProject(newProjectId);
-                        }
-                        else {
-                            if (feedDisconnectRef.current) {
-                                feedDisconnectRef.current();
-                                feedDisconnectRef.current = null;
-                            }
-                            if (pollIntervalRef.current)
-                                clearInterval(pollIntervalRef.current);
-                            dispatch({ type: 'SET_CONTRIBUTIONS', contributions: [], total: 0 });
-                            dispatch({ type: 'SET_MEMBERS', members: [] });
-                        }
-                        showToast('Project deleted', 'success');
-                    }
-                    catch {
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        showToast('Failed to delete project', 'error');
-                    }
-                }
-                break;
-            }
-            case 'confirm-remove-member': {
-                const teamForRemove = getActiveTeam(s);
-                if (teamForRemove) {
-                    try {
-                        dispatch({ type: 'SET_OPERATION', operation: 'Removing member' });
-                        await api.removeTeamMember(teamForRemove.team_id, modal.userId);
-                        const members = await api.listTeamMembers(teamForRemove.team_id);
-                        dispatch({ type: 'SET_MEMBERS', members });
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        showToast('Member removed', 'success');
-                    }
-                    catch {
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        showToast('Failed to remove member', 'error');
-                    }
-                }
-                break;
-            }
-            case 'confirm-leave': {
-                const teamForLeave = getActiveTeam(s);
-                if (teamForLeave) {
-                    try {
-                        dispatch({ type: 'SET_OPERATION', operation: 'Leaving' });
-                        await api.removeTeamMember(teamForLeave.team_id, s.user.id);
-                        const me = await api.me();
-                        dispatch({ type: 'SET_USER_DATA', me });
-                        dispatch({ type: 'SWITCH_TAB', tab: 'knowledge' });
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        const newProjectId = me.user.active_project_id;
-                        if (newProjectId) {
-                            switchToProject(newProjectId);
-                        }
-                        else {
-                            if (feedDisconnectRef.current) {
-                                feedDisconnectRef.current();
-                                feedDisconnectRef.current = null;
-                            }
-                            if (pollIntervalRef.current)
-                                clearInterval(pollIntervalRef.current);
-                            dispatch({ type: 'SET_CONTRIBUTIONS', contributions: [], total: 0 });
-                            dispatch({ type: 'SET_MEMBERS', members: [] });
-                        }
-                        showToast('Left', 'success');
-                    }
-                    catch {
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        showToast('Failed to leave', 'error');
-                    }
-                }
-                break;
-            }
-            // confirm-logout handled above (before projectId check)
-            case 'rename': {
-                if (!modal.input)
-                    break;
-                const slug = modal.input.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
-                try {
-                    dispatch({ type: 'SET_OPERATION', operation: 'Renaming' });
-                    await api.renameProject(projectId, modal.input, slug);
-                    const me = await api.me();
-                    dispatch({ type: 'SET_USER_DATA', me });
-                    dispatch({ type: 'SET_OPERATION', operation: null });
-                    showToast('Project renamed', 'success');
-                }
-                catch {
-                    dispatch({ type: 'SET_OPERATION', operation: null });
-                    showToast('Failed to rename', 'error');
-                }
-                break;
-            }
-            case 'confirm-regen-link': {
-                const teamForRegen = getActiveTeam(s);
-                if (teamForRegen) {
-                    try {
-                        dispatch({ type: 'SET_OPERATION', operation: 'Regenerating link' });
-                        await api.regenerateTeamInviteLink(teamForRegen.team_id, modal.role);
-                        const links = await api.listTeamInviteLinks(teamForRegen.team_id);
-                        dispatch({ type: 'SET_INVITE_LINKS', links });
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        showToast('Link regenerated', 'success');
-                    }
-                    catch {
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        showToast('Failed to regenerate link', 'error');
-                    }
-                }
-                break;
-            }
-            case 'confirm-rename-team': {
-                if (!modal.input)
-                    break;
-                const slug = modal.input.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
-                const teamForRename = getActiveTeam(s);
-                if (teamForRename) {
-                    try {
-                        dispatch({ type: 'SET_OPERATION', operation: 'Renaming team' });
-                        await api.renameTeam(teamForRename.team_id, modal.input, slug);
-                        const me = await api.me();
-                        dispatch({ type: 'SET_USER_DATA', me });
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        showToast('Team renamed', 'success');
-                    }
-                    catch {
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        showToast('Failed to rename team', 'error');
-                    }
-                }
-                break;
-            }
-            case 'confirm-delete-team': {
-                const teamForDelete = getActiveTeam(s);
-                if (teamForDelete && modal.input === modal.slug) {
-                    try {
-                        dispatch({ type: 'SET_OPERATION', operation: 'Deleting team' });
-                        const resp = await api.deleteTeam(teamForDelete.team_id);
-                        if (resp.pending_approval) {
-                            const approvals = await api.listApprovals(teamForDelete.team_id);
-                            dispatch({ type: 'SET_PENDING_APPROVALS', approvals });
-                            dispatch({ type: 'SET_OPERATION', operation: null });
-                            showToast('Team deletion proposed — waiting for majority', 'info');
-                            break;
-                        }
-                        const me = await api.me();
-                        dispatch({ type: 'SET_USER_DATA', me });
-                        dispatch({ type: 'SWITCH_TAB', tab: 'knowledge' });
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        const newProjectId = me.user.active_project_id;
-                        if (newProjectId) {
-                            switchToProject(newProjectId);
-                        }
-                        else {
-                            if (feedDisconnectRef.current) {
-                                feedDisconnectRef.current();
-                                feedDisconnectRef.current = null;
-                            }
-                            if (pollIntervalRef.current)
-                                clearInterval(pollIntervalRef.current);
-                            dispatch({ type: 'SET_CONTRIBUTIONS', contributions: [], total: 0 });
-                            dispatch({ type: 'SET_MEMBERS', members: [] });
-                        }
-                        showToast('Team deleted', 'success');
-                    }
-                    catch {
-                        dispatch({ type: 'SET_OPERATION', operation: null });
-                        showToast('Failed to delete team', 'error');
-                    }
-                }
-                break;
-            }
-        }
-        return false;
-    }
-    // ---- Small terminal guard ----
-    if (cols < 80 || rows < 20) {
-        return (_jsxs(Box, { flexDirection: "column", height: rows, children: [_jsx(Box, { height: 1 }), _jsx(Text, { color: "gray", children: "  terminal too small" }), _jsx(Text, { color: "gray", dimColor: true, children: "  resize to continue" })] }));
-    }
-    // ---- Determine content height ----
-    // Header + divider + (banner + divider?) + tabbar + divider = top
-    // toast? + operation? + divider + footer = bottom
-    const hasBanners = state.notifications.some(n => !n.seen) || hasBillingBanner(state) || state.firstLogin || !!state.joinedProjectName || state.pendingApprovals.some(a => new Date(a.expires_at) > new Date());
-    const topLines = 2 + (hasBanners ? 2 : 0) + 2; // header+div, (banner+div), tabbar+div
-    const bottomLines = (state.toast ? 1 : 0) + (state.operationPending ? 1 : 0) + 2; // div + footer
-    const contentHeight = Math.max(1, rows - topLines - bottomLines);
-    // ---- Render ----
-    return (_jsxs(Box, { flexDirection: "column", height: rows, children: [_jsx(Header, { state: state }), _jsx(Divider, {}), _jsx(Banner, { state: state }), hasBanners && _jsx(Divider, {}), _jsx(TabBar, { active: state.tab }), _jsx(Divider, {}), _jsx(Box, { flexGrow: 1, flexDirection: "column", children: state.showHelp
-                    ? _jsx(HelpOverlay, { state: state })
-                    : state.modal
-                        ? _jsx(ModalView, { state: state, height: contentHeight })
-                        : renderTab(state, contentHeight) }), state.toast && _jsx(Toast, { toast: state.toast }), state.operationPending && _jsxs(Text, { color: "gray", dimColor: true, children: ["  ", state.operationPending, "..."] }), _jsx(Divider, {}), _jsx(Footer, { state: state })] }));
-}
-function renderTab(state, height) {
-    switch (state.tab) {
-        case 'knowledge': return _jsx(KnowledgeTab, { state: state, height: height });
-        case 'team': return _jsx(TeamTab, { state: state, height: height });
-        case 'billing': return _jsx(BillingTab, { state: state, height: height });
-        case 'project': return _jsx(ProjectTab, { state: state, height: height });
-        case 'keys': return _jsx(KeysTab, { state: state, height: height });
-        case 'you': return _jsx(YouTab, { state: state, height: height });
-    }
-}
-// Projects the caller can scope an integration key to. Personal projects are
-// always scopable by their owner; team projects only by team admins.
-function adminScopableProjects(s) {
-    return s.projects.filter(p => {
-        if (p.owner.kind === 'personal')
-            return true; // user owns it
-        const teamId = p.owner.teamId;
-        const team = s.teams.find(t => t.team_id === teamId);
-        return team?.role === 'admin';
-    });
-}
-function HelpOverlay({ state }) {
-    const lines = [
-        ['tab / 1-6', 'switch tabs'],
-        ['?', 'toggle this help'],
-        ['q', 'quit'],
-        ['', ''],
-    ];
-    switch (state.tab) {
-        case 'knowledge':
-            lines.push(['/', 'search'], ['enter', 'expand contribution'], ['↑↓', 'navigate'], ['space', 'load more'], ['d', 'remove mode'], ['D', 'remove all (admin)']);
-            break;
-        case 'team':
-            lines.push(['↑↓', 'navigate'], ['i', 'invite'], ['e', 'edit role (admin)'], ['x', 'remove member'], ['c', 'copy invite link'], ['r', 'regenerate link']);
-            break;
-        case 'billing':
-            lines.push(['s', 'subscribe'], ['p', 'billing portal']);
-            break;
-        case 'project':
-            lines.push(['↑↓', 'navigate links'], ['w', 'switch project'], ['n', 'new project'], ['t', 'new team'], ['r', 'rename'], ['c', 'clear knowledge'], ['d', 'delete project']);
-            break;
-        case 'keys':
-            lines.push(['↑↓', 'navigate'], ['n', 'new key'], ['x', 'revoke selected']);
-            break;
-        case 'you':
-            lines.push(['p', 'pause / resume'], ['r', 're-run setup'], ['l', 'logout']);
-            break;
-    }
-    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Box, { height: 1 }), _jsxs(Text, { color: "gray", children: ["  keybindings \u00B7 ", state.tab] }), _jsx(Box, { height: 1 }), lines.map(([key, desc], i) => key === '' ? _jsx(Box, { height: 1 }, i) : (_jsxs(Box, { children: [_jsx(Box, { width: 16, children: _jsxs(Text, { color: "gray", children: ["  ", key] }) }), _jsx(Text, { dimColor: true, children: desc })] }, i))), _jsx(Box, { height: 1 }), _jsx(Text, { color: "gray", dimColor: true, children: "  press ? or esc to close" })] }));
-}
-function hasPaidPlan(state) {
-    const project = getActiveProject(state);
-    if (!project)
-        return false;
-    if (project.owner.kind === 'team') {
-        const team = getActiveTeam(state);
-        const sub = team?.subscription;
-        return !!sub && (sub.status === 'active' || sub.status === 'past_due');
-    }
-    const sub = state.individualSubscription;
-    return !!sub && (sub.status === 'active' || sub.status === 'past_due');
-}
-function hasBillingBanner(state) {
-    const project = getActiveProject(state);
-    if (!project)
-        return false;
-    if (project.owner.kind === 'team') {
-        const team = getActiveTeam(state);
-        const sub = team?.subscription;
-        if (sub?.status === 'past_due')
-            return true;
-        return false;
-    }
-    const sub = state.individualSubscription;
-    if (sub?.status === 'past_due')
-        return true;
-    return false;
-}
-// Helper: derive flat projects from MeResponse (same logic as state.ts)
-function deriveFlatProjectsFromMe(me) {
-    const list = [];
-    for (const p of me.personal_projects) {
-        list.push({ project_id: p.project_id, slug: p.slug, name: p.name, created_at: p.created_at, locked: p.locked ?? false, owner: { kind: 'personal' } });
-    }
-    for (const team of me.teams) {
-        const teamCanceled = team.subscription?.status === 'canceled';
-        for (const p of team.projects) {
-            list.push({ project_id: p.project_id, slug: p.slug, name: p.name, created_at: p.created_at, locked: teamCanceled, owner: { kind: 'team', teamId: team.team_id, teamName: team.name, teamSlug: team.slug } });
-        }
-    }
-    return list;
-}
-function loadPersistedState() {
-    try {
-        if (existsSync(STATE_FILE))
-            return JSON.parse(readFileSync(STATE_FILE, 'utf8'));
-    }
-    catch { }
-    return { hasOpenedDashboard: false };
-}
-function savePersistedState(data) {
-    try {
-        const dir = join(homedir(), '.cohvu');
-        if (!existsSync(dir))
-            mkdirSync(dir, { recursive: true, mode: 0o700 });
-        writeFileSync(STATE_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });
-    }
-    catch { }
-}
-//# sourceMappingURL=App.js.map