osdy-pi 1.11.12 → 1.11.14

package/README.md

@@ -6,6 +6,8 @@ Osdy Pi gives [Pi](https://github.com/earendil-works/pi) a themed, responsive te
 
 ## Release highlights
 
+**Audio notifications share a bundled 180 ms default sound on macOS and Windows**, with a persistent master mute in `/osdyConfig` → **Sounds**. Custom paths take precedence: startup flag → saved global path → bundled default. Muting preserves those paths and visual alerts; explicit **Test effective** still plays while muted. See [Audio notifications](#audio-notifications).
+
 **The Control Center consolidates Osdy controls in `/osdyConfig`**: ten categories cover appearance, Git, sounds, accounts, usage, and TODO/Agents provider settings. Account quota previews query a selected stored Codex profile without switching it. The header shows the installed Osdy package version when it fits; constrained layouts show only the centered mascot. See [Control Center in Pi](#control-center-in-pi) for confirmation and persistence boundaries.
 
 **Codex banked resets show counts and per-reset local expiry** in `/usage` and the Control Center. Press **u** in `/usage` or select **Usage → Use or check banked reset** for Cancel-first, active-account use or pending-attempt checks; stored-profile previews stay read-only. See [Use or check a banked reset](#use-or-check-a-banked-reset).
@@ -15,6 +17,7 @@ Osdy Pi gives [Pi](https://github.com/earendil-works/pi) a themed, responsive te
 | Area | What ships |
 | --- | --- |
 | Control Center | **Ctrl+Option+O** or `/osdyConfig` opens ten categories, including confirmed TODO/Agents provider selection and explicit per-profile Codex quota previews. |
+| Audio | Shared bundled default, per-event custom paths, and persistent automatic-audio mute; [explicit tests remain available](#audio-notifications). |
 | Local analytics (1.10.0) | `/osdy-usage` opens Summary, Profiles, Models, and History pages for recorded tokens and estimated cost—not billing or subscription quota. |
 | Themes introduced in 1.11.0 | Spider-Man Classic, Miles Morales, and Spider-Verse add three distinct dark palettes. |
 | Themes introduced in 1.9.0 | Halloween and Halloween Killer add two dark palettes. |
@@ -85,7 +88,7 @@ Positive counts also trigger a best-effort read-only reset-details GET within th
 - A selection shows **Saving** until persistence finishes and **Saved globally** only on success. Failed saves retain the live preference but report **could not be saved**; select again to retry. Application errors report **Not saved**, without claiming the runtime change succeeded. Duplicate selections are ignored while saving.
 - **Git** shows the current branch (or detached HEAD), changed-entry count/clean status, and the current widget position as a read-only session detail. Working-tree enablement applies and saves through the same owner as `/osdy-pi working-tree`; Git inspection never writes Git. `/osdy-pi diff` and position commands are unchanged.
 - **Sounds** shows each event's saved and effective path/source. Configure opens a single-line path editor **inside this overlay**: enter a readable `.mp3`/`.wav` path, then **Enter** to validate and save immediately, or **Esc** to cancel editing. Relative paths resolve against the project directory and save as absolute paths. Clear removes only that event's saved path from the existing v1 audio store (`<agent-dir>/extensions/osdy-pi/audio-notifications.json`). Notifications read this store afresh; refresh failures are reported separately from save failures.
-- Sounds' master enablement is **unavailable**: the existing schema has paths, not an enable switch or presets. Startup `--osdy-pi-sound-<event>` flags override saved paths, so **clearing a saved path does not disable flag-configured playback**. Only **Test effective** explicitly plays a sound; opening categories and configuring paths never play. Tests report unavailable files/platforms or playback failures; playback remains macOS/Windows only. The legacy `/osdy-pi sound setup` wizard is preserved.
+- **Sounds → Mute automatic audio / Enable automatic audio** is a persistent master switch, enabled by default (including existing v1 files). Muting suppresses all automatic event sounds, even startup-flag paths, without losing saved paths or changing visual notifications. It applies to the next notification without reload; already-started playback is not stopped. **Test effective** still plays while muted; opening categories and configuring paths never play. Startup `--osdy-pi-sound-<event>` flags override saved paths, so **clearing a saved path does not disable flag-configured playback**. Tests report unavailable files/platforms or playback failures; playback remains macOS/Windows only. Configure, Clear, and the legacy `/osdy-pi sound setup` wizard preserve the master state.
 - **Account** shows one row per validated profile, marked **Active** and **Default** where applicable. Select a profile, then use its visible context bar: **v View usage**, **s Switch** (inactive profiles), **d Set default**, and **c Clear default** (when a default exists). **v** or **Enter** explicitly queries that profile's stored Codex credentials without activating it; no second action list appears. Opening, navigating or highlighting never queries; stored profiles are never polled. A dedicated quota view reuses `/usage` dashboard content: Session/Weekly cards, additional bucket groups, remaining-capacity bars, resets, and the quotas/account summary with plan and credits when available. Identity belongs to the selected stored profile; unknown provider/model metadata is labeled honestly. Checked and updated times use local time; absent data is unknown, not zero. Refresh/Back controls and query feedback stay pinned while long dashboard content scrolls. **r Refresh** repeats the selected profile query; **s Switch**, when available, confirms activation of the currently viewed inactive profile. Cancelling that confirmation preserves the quota view and scroll position. **b Back** or **Esc** returns to the overview with the profile selected, without closing the overlay. In quota details, **↑/↓** selects Refresh/Back and **Enter** activates it; **Page Up/Down** and **Home/End** scroll long quota data. Switch, set default, and clear default require an **in-screen confirmation** with Cancel selected initially; **Esc** cancels confirmation without closing the overlay. Single blank separators group the confirmation title, complete effects, choices, and instructions; gaps yield on short viewports. Resize if the full confirmation cannot fit—acceptance stays hidden and blocked. Switching through `/osdyConfig` waits for Pi to become idle; Ctrl+Option+O refuses busy account changes. Successful switching activates through the existing backend and refreshes subscription usage. Login remains Pi-owned (`/login`); create/rename/remove remain available in `/osdy-account`. Category navigation never changes profiles or credentials.
 - **Usage** shows the runtime's cached active Codex subscription quota (remaining-capacity bars and percentages, window, reset/fetch times) and the existing local history owner's recorded token/cache totals, cost gaps, and model detail. Select **Range: day/week/month** for the current local calendar period; toggle **Accounts: all/current** for local analytics (unmanaged when no valid current profile exists). Quota always belongs to the active account, not the analytics filter; local token/cost totals never become quota percentages. Select **Refresh quota and local history** explicitly; rendering and filters never fetch. Empty, loading, unavailable, and limited/incomplete coverage are reported honestly. Estimates are not billing or subscription quota. `/usage` remains the subscription dashboard; `/osdy-usage` remains local analytics.
 - **Esc** closes without undoing live or saved changes, except when cancelling a confirmation/input or returning from Account quota details. Account read-only queries are cancelled on Back/Esc, category exit or close; late results are ignored even if cancellation is not honored. Other in-flight operations still finish and are not claimed cancelled. Late results cannot replace a closed overlay or another category. On narrow terminals, categories and details share the viewport; use Tab to switch.
@@ -235,7 +238,7 @@ For a project-local installation, run `pi remove -l npm:@juicesharp/rpiv-todo` i
 
 **Quick path:** `/osdyConfig` → **Account** → select a profile → **v** (or **Enter**) for quota bars. Use **r Refresh** to query again or **b Back** / **Esc** to return with the profile selected. From the overview or quota dashboard, **s Switch** opens the same Cancel-first confirmation for the eligible inactive profile; cancelling from quota preserves the view and scroll position. From the overview, **d** sets the default and **c** clears an existing default, also with Cancel-first confirmation. The active profile also supports explicit stored-credential queries.
 
-Preview is **Codex only**, a live query using the selected profile's **stored credentials snapshot**, with no automatic refresh or stored-profile polling. Only **View usage** and the quota view's **Refresh** query; profile navigation does not. It never activates, borrows active credentials, refreshes tokens, writes auth, changes models/session state or overwrites active quota. Missing, malformed, expired or remotely rejected snapshots are unavailable—not zero quota. Even the current profile's stored snapshot may be stale: log in and save through the normal account workflow outside preview. Profile labels and decoded JWT claims do not verify human identity or server validity. Local history remains token/cost estimates, not subscription quota. Legacy `/osdy-account`, `/usage` and `/osdy-usage` remain available; Agents configuration remains normal personal Pi only.
+Preview is **Codex only**, a live query using the selected profile's **stored credentials snapshot**, with no automatic refresh or stored-profile polling. In the Control Center, only **View usage** and the quota view's **Refresh** query; profile navigation does not. `/osdy-account` → **Switch** queries all saved profiles before opening the selector, with up to four previews in parallel. It never activates, borrows active credentials, refreshes tokens, writes auth, changes models/session state or overwrites active quota. Missing, malformed, expired or remotely rejected snapshots are unavailable—not zero quota. Even the current profile's stored snapshot may be stale: log in and save through the normal account workflow outside preview. Profile labels and decoded JWT claims do not verify human identity or server validity. Local history remains token/cost estimates, not subscription quota. Legacy `/osdy-account`, `/usage` and `/osdy-usage` remain available; Agents configuration remains normal personal Pi only.
 
 Osdy Pi can keep multiple ChatGPT Plus/Pro accounts authenticated and let you choose which one starts Pi. `personal` and `work` are only examples—you can create as many named profiles as you need.
 
@@ -245,13 +248,17 @@ Osdy Pi can keep multiple ChatGPT Plus/Pro accounts authenticated and let you ch
 
 | Action | Behavior |
 | --- | --- |
-| **Switch** | Waits for idle, safely replaces Pi's canonical auth with the selected profile, and updates active/default together without restarting Pi. |
+| **Switch** | Lists profile names and active/default markers only. Use arrows to highlight, **v** for `/usage`-style quota details, and **Enter from the list only** to switch the exact profile after idle waiting. |
 | **Add** | Creates an isolated profile without restarting or changing the default. Select it with **Switch**, then run `/login`. |
 | **Default** | Shows, changes, or clears the profile used by future plain installed `pi` and `npm run pi:dev` launches. It does not switch the current process. |
 | **Rename** | Renames an inactive profile. The default follows the new name when applicable. |
 | **Remove** | Permanently deletes an inactive profile after exact-name confirmation. Removing the default requires a replacement. |
 | **Account info** | Shows the available profiles and marks the active and default profiles without reading credentials. |
 
+In **Switch**, press **v** on the highlighted profile to explore its saved preview using the same dashboard as `/usage`, without selecting or activating it. Scroll details with **↑/↓**, **Page Up/Down**, or **Home/End**. **Esc** or **b** returns to the same highlighted profile; **Enter does nothing in details**. **Esc from the list** cancels selection.
+
+Switch previews are read-only and never activate accounts, refresh tokens, use resets or persist auth. Quota and **usage unavailable** messaging appear only in **v** details, never in the Switch list. Failed, expired or unsupported profiles remain selectable, including after viewing unavailable details. Opening details reuses the selector's snapshot without another request; reopening **Switch** queries again (up to four in parallel), never polls saved profiles. Reset timings include relative time and UTC timestamps when supplied by Codex. The detailed selector requires Pi's terminal UI.
+
 Pi does not expose a supported API for extensions to invoke its OAuth login dialog. After switching to a newly created profile, run Pi's native `/login` and choose **ChatGPT Plus/Pro (Codex)**. This is the only step that remains a separate Pi command; it does not require leaving Pi or opening another terminal.
 
 Terminal commands remain available as recovery and automation alternatives:
@@ -323,7 +330,7 @@ Before rename or removal, close this Pi process when it uses the target and **ma
 | Status | Six activity labels with compact per-state glyphs and a shared theme-color pulse, responsive footer metrics, dynamic extension statuses, and Codex subscription quota with low-capacity emphasis |
 | Local analytics | Four keyboard-selectable pages with shared filters, token charts, estimated cost, and private metadata-only history from new assistant turns |
 | Git | Working-tree summary and a centered, filterable diff panel |
-| Audio | Optional event sounds on macOS and Windows |
+| Audio | Default-on event sounds on macOS and Windows, with master mute and custom paths |
 
 <img width="1280" height="433" alt="Osdy Pi header and editor" src="https://github.com/user-attachments/assets/20c7624d-9ad8-4494-97fb-6b6d81aaf328" />
 
@@ -554,7 +561,7 @@ Use `working-tree position top` or `bottom` to place the summary above or below
 
 ## Audio notifications
 
-Osdy Pi can play readable `.mp3` or `.wav` files on macOS and Windows. Other platforms safely skip playback. macOS playback requires the system `afplay` command; Windows playback requires `powershell.exe` and the Windows Media Player COM component (`WMPlayer.OCX`).
+Osdy Pi plays one shared, short, subtle original bundled WAV by default for every unconfigured audio event on macOS and Windows. Automatic audio is enabled by default; mute it in **Sounds** to turn it off without changing visual alerts. Custom readable `.mp3` or `.wav` files can replace the default per event. Other platforms safely skip playback. macOS playback requires the system `afplay` command; Windows playback requires `powershell.exe` and the Windows Media Player COM component (`WMPlayer.OCX`).
 
 | Event | Current meaning |
 | --- | --- |
@@ -563,7 +570,9 @@ Osdy Pi can play readable `.mp3` or `.wav` files on macOS and Windows. Other pla
 | `permission` | Hook is available but dormant until an explicit Pi approval integration uses it. |
 | `question` | Hook is available but dormant until an explicit Pi question integration uses it. |
 
-Run the guided wizard:
+To mute or re-enable automatic audio, open `/osdyConfig` → **Sounds** and select **Mute automatic audio / Enable automatic audio**. Saved paths stay intact; **Test effective** remains available while muted.
+
+Run the guided wizard to configure paths (without changing the master switch):
 
 ```text
 /osdy-pi sound setup
@@ -581,7 +590,7 @@ pi \
   --osdy-pi-sound-question /absolute/path/question.wav
 ```
 
-Precedence is startup flag, then saved global setting, then unconfigured. Empty flags do not override saved settings; relative startup paths resolve from the current working directory, while the wizard saves normalized absolute paths. Missing, unreadable, or unsupported files are skipped safely.
+Path precedence is **startup flag → saved global path → bundled default**. Clearing a saved path (or choosing **Use bundled default** in the wizard) restores the default unless a startup flag overrides. The bundled asset resolves relative to the installed module, not the project directory or home. The master mute suppresses automatic playback from every source; explicit **Test effective** can still play the default while muted. Empty flags do not override saved settings; relative startup paths resolve from the current working directory, while the wizard saves normalized absolute paths. Invalid configured paths (missing, unreadable, or unsupported) are skipped safely **without falling back** to the default.
 
 ## Local install and development
 
@@ -638,9 +647,9 @@ An isolated agent directory does **not** make custom audio paths or real provide
 - Account (manual): with disposable profiles only, check Cancel-first switch/set-default/clear-default confirmations, Esc cancellation, idle switching, and current/default labels. Verify Ctrl+Option+O refuses all three changes while busy, succeeds when idle, and `/osdyConfig` still waits for idle. Check one row per profile with **v/s/d/c** context actions and **Enter** usage fallback, without a second action list. From **v** quota details, check eligible **s Switch** opens the same Cancel-first confirmation, with blank separators between the title/effects, choices, and instructions; Cancel/Esc must retain the quota view and scroll position. Check gaps yield on short viewports without hiding safety content or enabling acceptance when the full confirmation cannot fit. Check remaining-capacity bars, **r Refresh**, **b Back/Esc** returning to the selected profile, long-view scrolling, no query on navigation, no stored-profile polling, and cancellation on exit. Create/rename/remove stay in `/osdy-account`, login in `/login`.
 - Subscription quota (manual): compare **Ctrl+Option+U** and `/usage` (Ctrl+Alt+U on other platforms), including **r Refresh** and Esc/q closing. Verify actual terminal chord delivery; use `/usage` if intercepted or unsupported.
 - Usage (manual): check day/week/month and all/current filters, empty/unavailable/limited states, and explicit refresh. Authenticated quota and post-switch account correctness need an intentionally authorized live provider check; local estimates are not billing.
-- Sounds (manual): use disposable readable `.mp3`/`.wav` files to check configure, cancel, clear, and startup-flag precedence. Only choose **Test effective** when playback is intended; actual macOS/Windows playback still needs a live check.
+- Sounds (manual): use disposable readable `.mp3`/`.wav` files to check configure, cancel, clear, and startup-flag precedence. Only choose **Test effective** when playback is intended. The user reported successful live playback of the bundled default; exhaustive macOS/Windows coverage still needs a live check.
 
-The user confirmed physical Ctrl+Option+O and Ctrl+Option+U delivery on one Mac terminal; other terminals may intercept or not support these chords. Live TUI appearance, real account switching/authenticated quota, and actual audio playback remain unverified; this checklist is not a recorded full pass.
+The user confirmed physical Ctrl+Option+O and Ctrl+Option+U delivery on one Mac terminal; other terminals may intercept or not support these chords. The user also reported that the bundled default audio works correctly in their live session. Other live TUI appearance, real account switching/authenticated quota, and exhaustive audio/platform coverage remain unverified; this checklist is not a recorded full pass.
 
 Install a local checkout into Pi with:
 

package/extensions/osdy-pi/account-profile-selector.test.ts

@@ -0,0 +1,186 @@
+import assert from "node:assert/strict";
+import { existsSync } from "node:fs";
+import { registerHooks } from "node:module";
+import test from "node:test";
+import { fileURLToPath } from "node:url";
+import { InteractiveMode, type ExtensionContext } from "@earendil-works/pi-coding-agent";
+import { TuiAltScreen, visibleWidth, type Component, type OverlayHandle } from "@earendil-works/pi-tui";
+import type { AccountProfileChoice } from "./account-profile-selector.js";
+
+registerHooks({ resolve(specifier, context, next) {
+	if (specifier.startsWith(".") && specifier.endsWith(".js") && context.parentURL?.endsWith(".ts")) {
+		const url = new URL(`${specifier.slice(0, -3)}.ts`, context.parentURL);
+		if (existsSync(fileURLToPath(url))) return { shortCircuit: true, url: url.href };
+	}
+	return next(specifier, context);
+} });
+const { AccountProfileSelector, selectAccountProfile } = await import("./account-profile-selector.js");
+const { renderCodexUsageDashboardContentLines } = await import("./codex-usage-ui.js");
+const theme = { fg: (_color: string, text: string) => text };
+const choice: AccountProfileChoice = { profile: "Work", label: "Work · 5h 75% left", usage: {
+	status: "ready", profile: "Work", checkedAt: 0, quotaSnapshot: {
+		fetchedAt: 0, planType: "plus", credits: undefined, ordinaryUsageAllowed: true,
+		bankedResetCount: 2, bankedResetDetails: [{ id: "one", expiresAt: 86400000 }, { id: "two", expiresAt: undefined }],
+		buckets: [{ id: "codex", label: undefined,
+			primary: { usedPercent: 25, windowMinutes: 300, resetsAt: 3600 },
+			secondary: { usedPercent: 60, windowMinutes: 10080, resetsAt: 86400 } },
+		{ id: "extra", label: "Extra quota", primary: { usedPercent: 5, windowMinutes: 60, resetsAt: 100 }, secondary: undefined }],
+	},
+} };
+
+// Exercise the installed SDK's actual custom lifecycle and fullscreen input router,
+// without a real terminal, session, auth, or network. Only its host editor is stubbed.
+async function mountedSelector(choices: readonly AccountProfileChoice[]) {
+	let input: (data: string) => void = () => {};
+	let resize: () => void = () => {};
+	const terminal = {
+		columns: 80, rows: 8, kittyProtocolActive: false,
+		start: (onInput: (data: string) => void, onResize: () => void) => { input = onInput; resize = onResize; },
+		stop() {}, async drainInput() {}, write() {}, moveBy() {}, hideCursor() {},
+		showCursor() {}, clearLine() {}, clearFromCursor() {}, clearScreen() {},
+		setTitle() {}, setProgress() {},
+	};
+	const tui = new TuiAltScreen(terminal);
+	let component: Component | undefined;
+	let handle: OverlayHandle | undefined;
+	let options: Parameters<ExtensionContext["ui"]["custom"]>[1];
+	const host = {
+		ui: tui, editor: { getText: () => "preserved", setText() {} },
+		editorContainer: { clear() {}, addChild(value: Component) { component = value; } },
+		keybindings: {}, disposeActiveSelector() {},
+	};
+	// This private SDK method is the implementation behind ctx.ui.custom.
+	const custom = (InteractiveMode.prototype as unknown as {
+		showExtensionCustom: ExtensionContext["ui"]["custom"];
+	}).showExtensionCustom;
+	const ui = { custom: ((factory, opts) => {
+		options = opts;
+		return custom.call(host, (sdkTui, sdkTheme, keys, done) => {
+			// Inject a deterministic theme instead of initializing user theme discovery.
+			const result = factory(sdkTui, theme as typeof sdkTheme, keys, done);
+			if (!(result instanceof Promise)) component = result;
+			return result;
+		}, { ...opts, onHandle: value => { handle = value; opts?.onHandle?.(value); } });
+	}) as ExtensionContext["ui"]["custom"] };
+	const result = selectAccountProfile(ui, choices);
+	await Promise.resolve();
+	tui.start();
+	tui.renderNow();
+	assert(component);
+	return { tui, terminal, result, component, options,
+		bounds: () => handle?.getBounds(),
+		screen: () => (tui as unknown as { previousScreen: string[] }).previousScreen.join("\n"),
+		input: (key: string) => { input(key); tui.renderNow(); },
+		resize: (columns: number, rows: number) => { terminal.columns = columns; terminal.rows = rows; resize(); tui.renderNow(); },
+	};
+}
+
+void test("custom selector mounts a capturing fullscreen overlay and receives viewport navigation", async () => {
+	const choices = Array.from({ length: 30 }, (_value, index) => ({ ...choice, profile: `Profile-${index}`, label: `Profile-${index}`, usage: undefined }));
+	const mounted = await mountedSelector(choices);
+	try {
+		assert.equal(mounted.options?.overlay, true);
+		assert(mounted.tui.hasOverlay());
+		mounted.input("\u001b[F");
+		assert.match(mounted.screen(), /> Profile-29/);
+		mounted.input("\u001b[H");
+		assert.match(mounted.screen(), /> Profile-0/);
+		mounted.input("\u001b[6~");
+		assert.match(mounted.screen(), /> Profile-6/);
+		mounted.input("\u001b[5~");
+		assert.match(mounted.screen(), /> Profile-0/);
+		mounted.input("v");
+		mounted.input("\r");
+		assert(mounted.tui.hasOverlay(), "Enter in details must not complete");
+		mounted.input("b");
+		mounted.input("\r");
+		assert.equal(await mounted.result, "Profile-0");
+		assert.equal(mounted.tui.hasOverlay(), false);
+	} finally { mounted.tui.stop(); }
+});
+
+void test("SDK overlay and component share a responsive viewport at short heights and resize", async () => {
+	const mounted = await mountedSelector([choice]);
+	try {
+		assert.equal(mounted.options?.overlay, true);
+		const options = typeof mounted.options?.overlayOptions === "function" ? mounted.options.overlayOptions() : mounted.options?.overlayOptions;
+		assert.deepEqual(options, { width: "100%", maxHeight: "100%", margin: 0, nonCapturing: false });
+		mounted.input("v");
+		for (const [width, height] of [[80, 8], [12, 4], [1, 1], [32, 3], [100, 24], [80, 8]] as const) {
+			mounted.resize(width, height);
+			mounted.input("\u001b[F");
+			const lines = mounted.component.render(width);
+			assert(lines.length <= height);
+			assert(lines.every(line => visibleWidth(line) <= width));
+			assert.deepEqual(mounted.bounds(), { row: 0, col: 0, width, height: lines.length });
+			if (height >= 3) {
+				assert.equal(lines.length, height, "use exactly the SDK viewport, without invisible content");
+				assert.match(lines.at(-1)!, /esc\/b/);
+			}
+		}
+		assert.match(mounted.screen(), /Banked resets: 2/);
+		mounted.input("\u001b[H");
+		assert.match(mounted.screen(), /Checked:/);
+		mounted.input("\u001b");
+		mounted.input("\u001b");
+		assert.equal(await mounted.result, undefined);
+	} finally { mounted.tui.stop(); }
+});
+
+void test("details reuse the complete dashboard without active-model attribution or action controls", () => {
+	const results: (string | undefined)[] = [];
+	const panel = new AccountProfileSelector([choice], theme, () => 500, () => {}, value => results.push(value));
+	panel.handleInput("v");
+	assert(choice.usage?.status === "ready");
+	const dashboard = renderCodexUsageDashboardContentLines(theme, choice.usage.quotaSnapshot,
+		{ profile: "Work", provider: "openai-codex" }, 0, 100);
+	assert.deepEqual(panel.render(100).slice(3, -1), dashboard);
+	assert.match(dashboard.join("\n"), /Banked resets: 2/);
+	assert.match(dashboard.join("\n"), /Extra quota/);
+	for (const key of ["\r", "r", "u", "s"]) panel.handleInput(key);
+	assert.deepEqual(results, []);
+	panel.handleInput("\u001b");
+	panel.handleInput("\r");
+	panel.handleInput("\r");
+	assert.deepEqual(results, ["Work"]);
+});
+
+void test("details scrolling and resizing bound every line and reach the final dashboard fields", () => {
+	let height = 8;
+	let renders = 0;
+	const panel = new AccountProfileSelector([choice], theme, () => height, () => { renders++; }, () => assert.fail("details cannot finish"));
+	panel.handleInput("v");
+	for (const width of [1, 3, 12, 32, 100]) {
+		for (const key of ["\u001b[H", "\u001b[B", "\u001b[6~", "\u001b[5~", "\u001b[F"]) {
+			panel.render(width);
+			panel.handleInput(key);
+			const lines = panel.render(width);
+			assert(lines.length <= height);
+			assert(lines.every(line => visibleWidth(line) <= width));
+		}
+	}
+	assert.match(panel.render(100).join("\n"), /Banked resets: 2/);
+	height = 4;
+	assert(panel.render(12).length <= height);
+	height = 500;
+	const expanded = panel.render(100).join("\n");
+	assert.match(expanded, /Checked:/);
+	assert.match(expanded, /Extra quota/);
+	assert(renders > 0);
+});
+
+void test("long lists keep highlight visible, back preserves identity, and cancellation returns undefined", () => {
+	const choices = Array.from({ length: 30 }, (_value, index) => ({ profile: `Profile-${index}`, label: `Profile-${index}`, usage: undefined }));
+	const results: (string | undefined)[] = [];
+	const panel = new AccountProfileSelector(choices, theme, () => 5, () => {}, value => results.push(value));
+	panel.handleInput("\u001b[F");
+	assert.match(panel.render(80).join("\n"), /> Profile-29/);
+	panel.handleInput("v");
+	assert.match(panel.render(80).join("\n"), /usage unavailable/i);
+	panel.handleInput("\u001b[B"); // Scroll, never change the profile in details.
+	panel.handleInput("\u001b");
+	assert.match(panel.render(80).join("\n"), /> Profile-29/);
+	panel.handleInput("\u001b");
+	panel.handleInput("\r");
+	assert.deepEqual(results, [undefined]);
+});

package/extensions/osdy-pi/account-profile-selector.ts

@@ -0,0 +1,124 @@
+import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
+import { Key, matchesKey, truncateToWidth, type Component } from "@earendil-works/pi-tui";
+import { renderCodexUsageDashboardContentLines } from "./codex-usage-ui.js";
+import type { ProfileCodexUsageResult } from "./profile-codex-usage.js";
+import type { SimpleTheme } from "./types.js";
+
+export interface AccountProfileChoice {
+	profile: string;
+	label: string;
+	usage: ProfileCodexUsageResult | undefined;
+}
+
+/** Snapshot-only explorer: completion is possible only from the profile list. */
+export class AccountProfileSelector implements Component {
+	private index = 0;
+	private details = false;
+	private scroll = 0;
+	private width = 80;
+	private closed = false;
+
+	private readonly choices: readonly AccountProfileChoice[];
+	private readonly theme: SimpleTheme;
+	private readonly height: () => number;
+	private readonly requestRender: () => void;
+	private readonly done: (profile: string | undefined) => void;
+
+	constructor(
+		choices: readonly AccountProfileChoice[],
+		theme: SimpleTheme,
+		height: () => number,
+		requestRender: () => void,
+		done: (profile: string | undefined) => void,
+	) {
+		this.choices = choices;
+		this.theme = theme;
+		this.height = height;
+		this.requestRender = requestRender;
+		this.done = done;
+	}
+
+	private capacity(): number { return Math.max(1, this.height() - 2); }
+
+	private detailLines(width: number): string[] {
+		const choice = this.choices[this.index];
+		const usage = choice?.usage;
+		if (!choice || usage?.status !== "ready" || usage.profile.toLowerCase() !== choice.profile.toLowerCase()) {
+			return [this.theme.fg("muted", "Profile usage unavailable. You can still switch from the list.")];
+		}
+		return [
+			this.theme.fg("muted", `Checked: ${new Date(usage.checkedAt).toLocaleString()} (local time)`),
+			this.theme.fg("muted", `Updated: ${new Date(usage.quotaSnapshot.fetchedAt).toLocaleString()} (local time)`),
+			...renderCodexUsageDashboardContentLines(this.theme, usage.quotaSnapshot,
+				{ profile: choice.profile, provider: "openai-codex" }, usage.checkedAt, width),
+		];
+	}
+
+	handleInput(data: string): void {
+		if (this.closed) return;
+		if (matchesKey(data, Key.escape) || (this.details && matchesKey(data, "b"))) {
+			if (this.details) { this.details = false; this.scroll = 0; }
+			else { this.closed = true; this.done(undefined); }
+		} else if (!this.details && matchesKey(data, Key.enter)) {
+			this.closed = true;
+			this.done(this.choices[this.index]?.profile);
+		} else if (!this.details && matchesKey(data, "v")) {
+			this.details = true;
+			this.scroll = 0;
+		} else {
+			const maximum = this.details ? Math.max(0, this.detailLines(this.width).length - this.capacity())
+				: Math.max(0, this.choices.length - 1);
+			let position = this.details ? this.scroll : this.index;
+			if (matchesKey(data, Key.up)) position--;
+			else if (matchesKey(data, Key.down)) position++;
+			else if (matchesKey(data, Key.pageUp)) position -= this.capacity();
+			else if (matchesKey(data, Key.pageDown)) position += this.capacity();
+			else if (matchesKey(data, Key.home)) position = 0;
+			else if (matchesKey(data, Key.end)) position = maximum;
+			else return; // Enter, refresh and reset controls never act in details.
+			position = Math.max(0, Math.min(maximum, position));
+			if (this.details) this.scroll = position;
+			else this.index = position;
+		}
+		this.requestRender();
+	}
+
+	render(width: number): string[] {
+		this.width = Math.max(1, Math.floor(width));
+		const capacity = this.capacity();
+		let content: string[];
+		let hint: string;
+		if (this.details) {
+			const lines = this.detailLines(this.width);
+			this.scroll = Math.min(this.scroll, Math.max(0, lines.length - capacity));
+			content = lines.slice(this.scroll, this.scroll + capacity);
+			hint = `esc/b back · ↑/↓ PgUp/PgDn Home/End scroll · ${this.scroll + 1}–${Math.min(lines.length, this.scroll + capacity)}/${lines.length}`;
+		} else {
+			const start = Math.max(0, this.index - capacity + 1);
+			content = this.choices.slice(start, start + capacity).map((choice, offset) =>
+				this.theme.fg(start + offset === this.index ? "accent" : "text",
+					`${start + offset === this.index ? ">" : " "} ${choice.label}`));
+			hint = "↑/↓ highlight · v usage details · enter switch · esc cancel";
+		}
+		return [
+			this.theme.fg("accent", this.details ? `Usage: ${this.choices[this.index]?.profile ?? "unknown"} (read-only)` : "Switch OpenAI account"),
+			...content,
+			this.theme.fg("muted", hint),
+		].slice(0, Math.max(1, this.height())).map(line => truncateToWidth(line, this.width, ""));
+	}
+
+	invalidate(): void {} // Output is recomputed with the current theme and viewport.
+}
+
+export function selectAccountProfile(
+	ui: Pick<ExtensionContext["ui"], "custom">,
+	choices: readonly AccountProfileChoice[],
+): Promise<string | undefined> {
+	return ui.custom<string | undefined>((tui, theme, _keys, done) => new AccountProfileSelector(
+		// Match the SDK's 100%-height, zero-margin overlay viewport on every resize.
+		choices, theme, () => Math.max(1, tui.terminal.rows), () => tui.requestRender(), done,
+	), {
+		overlay: true,
+		overlayOptions: { width: "100%", maxHeight: "100%", margin: 0, nonCapturing: false },
+	});
+}