spinuptui 0.27.0 → 1.0.0

package/CHANGELOG.md

@@ -5,12 +5,38 @@ All notable changes to this project are documented here.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-While the project is in `0.x`, the public surface (CLI subcommands/flags, config
-file location and format, and token-resolution behavior) may change between minor
-versions; such changes are called out here.
+From 1.0.0, the public surface (CLI subcommands/flags, config file location and
+format, and token-resolution behavior) changes incompatibly only in a major
+version; such changes are called out here.
 
 ## [Unreleased]
 
+## [1.0.0] - 2026-09-24
+
+### Added
+- **Install with Homebrew.** `brew install mwender/tap/spinuptui` installs SpinupTUI along with Bun, and `brew upgrade spinuptui` updates it. The About panel (`?`) recognizes a Homebrew install and shows `brew upgrade spinuptui` as its update command instead of the Bun one.
+- **API headroom in the header.** The top bar now shows how many SpinupWP API requests are left in the current minute (`API 52/60`). It stays dim while there's plenty, turns amber once three-quarters of the minute's budget is spent, and red when SpinupTUI starts spacing out requests to avoid hitting the limit, so a slow moment has a visible reason. It refills on its own when the minute rolls over.
+- **Clone Radicle sites.** The clone wizard now clones git-deployed Radicle sites properly. Uploads come across from `content/uploads`, and after the database import the site's own deploy script runs on the new server, so the front-end is built (`npm ci`, `npm run build`, Acorn caches) the way a normal deploy would. Before creating anything, the wizard stops if the Radicle site has no deploy script, or if its script needs Node and the destination server doesn't have it. SpinupWP servers don't come with Node, so install it on the destination first.
+- **Clones keep your cron jobs.** Lines you added to a site's crontab (a feed import, a report, an Acorn or Laravel command) are copied to the clone under a `# Carried over from …` comment. Lines you commented out are copied as they are, SpinupWP's own WordPress cron entry is left to SpinupWP, and a retry never adds a line twice. The verify pane (`v`) says how many lines came across.
+
+### Changed
+- **Clones match the source's page cache and push-to-deploy** instead of using fixed defaults, and send the source's own deploy script.
+
+### Fixed
+- **Plugins & themes (`e`) no longer shows an empty list on sites with noisy plugins.** Some plugins print PHP notices into wp-cli's output, sometimes on the same line as the plugin list, and the view read that as "no plugins installed". The list is now found wherever it sits in the output, and if wp-cli returns no list at all the view says so, with the first line of what it printed, instead of showing zero plugins. The WordPress core update check uses the same parsing.
+
+### Notes
+- **SpinupWP clears a deploy script set through its API** a minute or two after the site is created, and there's no API call to set it afterwards. After a clone, the wizard checks the new site; if the script is gone, the roster marks the site and the verify pane offers `g`, which copies the source's script and opens the new site's Git settings so you can paste it back. The same check flags a push-to-deploy setting that didn't carry over.
+
+## [0.28.0] - 2026-09-23
+
+### Added
+- **Multiple SpinupWP accounts.** Press `A` from anywhere to open **Accounts**: add another account (its token is checked with SpinupWP before it's saved), switch between accounts, rename them, or remove one. You work in one account at a time, never a merged fleet, so an action can't land on the wrong client's server, and the header always shows `Account: …`. Switching reloads the app on the new account, and it waits until running changes (PHP upgrades, DNS edits, clones, WordPress updates…) finish. Each account keeps its own token, DNS provider connections, local-copy links, sudo users and saved Keychain passwords, monitors, and cached probes. Machine-level settings (terminal app, local scan roots, the Uptime Kuma login) are shared by all of them. Your existing setup becomes the first account automatically; nothing moves on disk. Removing an account also deletes its Keychain passwords and caches, but never files in your local working copies. For commands, `SPINUPTUI_ACCOUNT=<id>` picks an account for one run, and `spinuptui where` lists the account ids.
+- **Vanity Site in Stacks.** Non-WP now has a **Vanity Site** row for each server's own-hostname site, the same rule the vanity features use, so these show up without an SSH probe instead of sitting under Unknown or unprobed. Their rows read `Vanity Site` in place of `Unknown`.
+
+### Notes
+- **Config migration.** The first time this version saves a setting, `config.json` is rewritten in the new accounts shape. A version before 0.28.0 can't read the token from it and would run first-time setup, so back up `~/.config/spinupwp-tui/config.json` if you might downgrade. Accounts are stored per machine; add them on each machine where you use SpinupTUI.
+
 ## [0.27.0] - 2026-09-23
 
 ### Added
@@ -1427,7 +1453,9 @@ Initial tagged release.
 ### Notes
 - Read-only release: works with a SpinupWP **Read Only** API token.
 
-[Unreleased]: https://github.com/mwender/spinupwp-tui/compare/v0.27.0...HEAD
+[Unreleased]: https://github.com/mwender/spinupwp-tui/compare/v1.0.0...HEAD
+[1.0.0]: https://github.com/mwender/spinupwp-tui/compare/v0.28.0...v1.0.0
+[0.28.0]: https://github.com/mwender/spinupwp-tui/compare/v0.27.0...v0.28.0
 [0.27.0]: https://github.com/mwender/spinupwp-tui/compare/v0.26.1...v0.27.0
 [0.26.1]: https://github.com/mwender/spinupwp-tui/compare/v0.26.0...v0.26.1
 [0.26.0]: https://github.com/mwender/spinupwp-tui/compare/v0.25.0...v0.26.0

package/README.md

@@ -38,6 +38,7 @@
   probe for precise identification. → [docs/stack-detection.md](docs/stack-detection.md)
 - **Global search** — fuzzy search across every server and site by name, domain,
   or IP, with inline actions on the result.
+- **Multiple SpinupWP accounts** (`A`) — keep several accounts (say, your agency's and a client's) and switch between them in-app; the header always names the one you're on. → [docs/multiple-accounts.md](docs/multiple-accounts.md)
 - **Events feed** — recent provisioning/operation activity with per-event detail.
 - **Live server health** (`h`) — real-time CPU/load/memory/disk over SSH.
   → [docs/server-health.md](docs/server-health.md)
@@ -111,14 +112,20 @@
 
 ## Install & run
 
-The easy way — install the published package globally:
+The easy way — Homebrew (it installs Bun for you):
 
 ```sh
-bun install -g spinuptui
+brew install mwender/tap/spinuptui
 spinuptui login          # save your API token to the config file (once)
 spinuptui                # launch from any directory
 ```
 
+Or, if you already have Bun, install the published package globally:
+
+```sh
+bun install -g spinuptui
+```
+
 On first launch, if no token is configured you'll be guided through a short
 onboarding flow that validates your token and saves it locally.
 
@@ -154,6 +161,8 @@ bun run build:binary     # produces ./spinuptui — move it onto your PATH
 The app tells you when a newer release exists — a gold `✦ vX.Y.Z` appears next
 to the version in the header (and in the `?` About panel).
 
+- **Homebrew:** `brew upgrade spinuptui` (the About panel shows the same
+  command).
 - **Package install:** `bun add -g spinuptui@latest` (the About panel shows
   the same command). Don't use `bun update -g` — while spinuptui is pre-1.0,
   it records a caret range (e.g. `^0.22.2`) that excludes every later minor
@@ -262,13 +271,15 @@ The token is resolved in this order (first match wins):
 To reconfigure, delete the config file (the path is shown on the onboarding
 screen) and relaunch, or set the environment variable.
 
+More than one SpinupWP account? Add the others in-app with `A`. Each keeps its own token and account settings; see [docs/multiple-accounts.md](docs/multiple-accounts.md).
+
 ### Optional settings
 
 These can be set in `config.json` or via an environment variable:
 
 - **`accountSlug`** / `SPINUPWP_ACCOUNT_SLUG` — your SpinupWP account/team slug
-  (the first path segment in a SpinupWP URL, e.g. `wenmark-digital-solutions` in
-  `https://spinupwp.app/wenmark-digital-solutions/servers/35633`). The API
+  (the first path segment in a SpinupWP URL, e.g. `acme-agency` in
+  `https://spinupwp.app/acme-agency/servers/12345`). The API
   doesn't expose it, so set it to enable the `w` deep links into the web app.
   Without it, `w` opens the SpinupWP dashboard root.
 - **`sshUser`** / `SPINUPWP_SSH_USER` — override the SSH user for the health view
@@ -333,6 +344,7 @@ These can be set in `config.json` or via an environment variable:
 | `K` | Grant / revoke an SSH key on a site, or every site on the server (Servers / Search; needs sudo connected) |
 | `w` | Open the selected server/site in the SpinupWP web app |
 | `/` | Jump to global search |
+| `A` | Accounts — switch, add, rename, or remove SpinupWP accounts (from anywhere) |
 | `r` | Refresh data from the API |
 | `i` | Explain the current screen (what each pane and key does) |
 | `?` | Toggle the help overlay |

package/bun.lock

@@ -0,0 +1,103 @@
+{
+  "lockfileVersion": 1,
+  "configVersion": 1,
+  "workspaces": {
+    "": {
+      "name": "spinuptui",
+      "dependencies": {
+        "@opentui/core": "^0.4.1",
+        "@opentui/react": "^0.4.1",
+        "react": "^19.0.0",
+        "socket.io-client": "^4.8.3",
+      },
+      "devDependencies": {
+        "@types/bun": "^1.3.14",
+        "@types/react": "^19.0.0",
+        "typescript": "^5.6.0",
+      },
+    },
+  },
+  "packages": {
+    "@opentui/core": ["@opentui/core@0.4.5", "", { "dependencies": { "bun-ffi-structs": "0.2.4", "diff": "9.0.0", "marked": "17.0.1", "string-width": "7.2.0", "strip-ansi": "7.1.2" }, "optionalDependencies": { "@opentui/core-darwin-arm64": "0.4.5", "@opentui/core-darwin-x64": "0.4.5", "@opentui/core-linux-arm64": "0.4.5", "@opentui/core-linux-arm64-musl": "0.4.5", "@opentui/core-linux-x64": "0.4.5", "@opentui/core-linux-x64-musl": "0.4.5", "@opentui/core-win32-arm64": "0.4.5", "@opentui/core-win32-x64": "0.4.5" }, "peerDependencies": { "web-tree-sitter": "0.25.10" } }, "sha512-JsgRTPkA6e+Vxmumxai6SElOSlRQkbzNKHlCfemlArRiLhfC1IZ9RXJo2QH4xSu+uBOWAM90uss73/pPlkdEig=="],
+
+    "@opentui/core-darwin-arm64": ["@opentui/core-darwin-arm64@0.4.5", "", { "os": "darwin", "cpu": "arm64" }, "sha512-8KUG0oRidnR+oW1RSZJ72/PhZLl+qRRMk5U/mieF4c0SJ5V3tYACpBZAKzQfHNd1f7QzD8FHZct1lPpQgtmkWg=="],
+
+    "@opentui/core-darwin-x64": ["@opentui/core-darwin-x64@0.4.5", "", { "os": "darwin", "cpu": "x64" }, "sha512-R2bocsg55gwjOqCp/MWFgFYzRmsduKegB6nzgFAPCvAD/L5Jf30xpWJWFlSg3x8vxe1L9WJ84dfqa4M7mZZ3wA=="],
+
+    "@opentui/core-linux-arm64": ["@opentui/core-linux-arm64@0.4.5", "", { "os": "linux", "cpu": "arm64" }, "sha512-R4MZ25a4CzOAGVjW9aj1hUfzQGVfCJwrwBDbNs2SXaIvzcZqkxCVtU4FoQ5LsaD0j/BdNQVg2CIfFkFsm1fDuQ=="],
+
+    "@opentui/core-linux-arm64-musl": ["@opentui/core-linux-arm64-musl@0.4.5", "", { "os": "linux", "cpu": "arm64" }, "sha512-ieqdyKI6EIYPalYAETB2wsdP83hr5Ifi+dFnBFUmdEEFHsoKwBmn2S7bsTOYlX7Bg03F4/YPIg+IvRpeC+cUJw=="],
+
+    "@opentui/core-linux-x64": ["@opentui/core-linux-x64@0.4.5", "", { "os": "linux", "cpu": "x64" }, "sha512-SNyuQoxMKI1vuJhgxSSW96adWM6LqFl2SoS3GM4tGeneGOanVVG2Y06PvlytXvF4cKik97t0rqkVMRetmOs93w=="],
+
+    "@opentui/core-linux-x64-musl": ["@opentui/core-linux-x64-musl@0.4.5", "", { "os": "linux", "cpu": "x64" }, "sha512-mKVKcIcPiSVVZZsdPSBoWwoa2/TCeQAaMDeHF7PFw2kt5bTXZPP7xxWfRQLCNIcA1eaGl59UuwUWHDR2Ve548Q=="],
+
+    "@opentui/core-win32-arm64": ["@opentui/core-win32-arm64@0.4.5", "", { "os": "win32", "cpu": "arm64" }, "sha512-GHTTsqeR45q2Iek9Rb7ty+x/hAKn2jZ1ujlCgPR8LBKyF7h0E1dNFryoZ7ehMc3kJndP1sKn836IemKFqxuDdQ=="],
+
+    "@opentui/core-win32-x64": ["@opentui/core-win32-x64@0.4.5", "", { "os": "win32", "cpu": "x64" }, "sha512-Y8T/yXCDGagRGiQrtmuB6AhRcPucKFs/Dre3v8kJwNYqDccI4FzUPKclZ7djfmRZNjl7JUqPhZZP/PwDpQocMg=="],
+
+    "@opentui/react": ["@opentui/react@0.4.5", "", { "dependencies": { "@opentui/core": "0.4.5", "react-reconciler": "^0.33.0" }, "peerDependencies": { "react": ">=19.2.0", "react-devtools-core": "^7.0.1", "ws": "^8.18.0" } }, "sha512-n88Vx0cMmAu++/S14WscjvdcT46IDcxve02jMtcfHQ9j6cySRHfILfGEpOB7xxc8RpCwQceEyOjkKkfzPzm6Jg=="],
+
+    "@socket.io/component-emitter": ["@socket.io/component-emitter@3.1.2", "", {}, "sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA=="],
+
+    "@types/bun": ["@types/bun@1.3.14", "", { "dependencies": { "bun-types": "1.3.14" } }, "sha512-h1hFqFVcvAvD9j9K7ZW7vd82aSA+rTdznZa+5bwvCwqSB1jmmfLcbIWhOLx1/+boy/xmjgCs/OMUL8hRJSmnPw=="],
+
+    "@types/node": ["@types/node@26.1.2", "", { "dependencies": { "undici-types": "~8.3.0" } }, "sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg=="],
+
+    "@types/react": ["@types/react@19.2.18", "", { "dependencies": { "csstype": "^3.2.2" } }, "sha512-AnzbBERsrLKtk2XSfTbYRLjQPdy116Sty4q+T+Bp3IC4l6jNBvreVPAHmpq9qhXQM7CXZPjLVmGMw9sy+hxQ3w=="],
+
+    "ansi-regex": ["ansi-regex@6.2.2", "", {}, "sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg=="],
+
+    "bun-ffi-structs": ["bun-ffi-structs@0.2.4", "", { "peerDependencies": { "typescript": "^5" } }, "sha512-AJzsqoVFs1KBbJbWHIYrVZLDC3NhTqqh25awRXqzoLzmBAKr5oqk6+CwuYHAekKx+VBCYVohBoKuRq40dV+TYg=="],
+
+    "bun-types": ["bun-types@1.3.14", "", { "dependencies": { "@types/node": "*" } }, "sha512-4N0ig0fEomHt5R0KCFWjovxow98rIoRwKolrYdCcknNwMekCXRnWEUvgu5soYV8QXtVsrUD8B95MBOZGPvr6KQ=="],
+
+    "csstype": ["csstype@3.2.3", "", {}, "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ=="],
+
+    "debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" }, "peerDependencies": { "supports-color": "*" }, "optionalPeers": ["supports-color"] }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
+
+    "diff": ["diff@9.0.0", "", {}, "sha512-svtcdpS8CgJyqAjEQIXdb3OjhFVVYjzGAPO8WGCmRbrml64SPw/jJD4GoE98aR7r25A0XcgrK3F02yw9R/vhQw=="],
+
+    "emoji-regex": ["emoji-regex@10.6.0", "", {}, "sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A=="],
+
+    "engine.io-client": ["engine.io-client@6.6.6", "", { "dependencies": { "@socket.io/component-emitter": "~3.1.0", "debug": "~4.4.1", "engine.io-parser": "~5.2.1", "ws": "~8.21.0", "xmlhttprequest-ssl": "~2.1.1" } }, "sha512-iY6QdftLQ9pyiPoX082bpf/u1UewnOaJrtJIF9T0++QB34lZrj0uP+Q/bj8AlUsAxqhnkTV2BS8SBZSxOmoV5Q=="],
+
+    "engine.io-parser": ["engine.io-parser@5.2.3", "", {}, "sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q=="],
+
+    "get-east-asian-width": ["get-east-asian-width@1.6.0", "", {}, "sha512-QRbvDIbx6YklUe6RxeTeleMR0yv3cYH6PsPZHcnVn7xv7zO1BHN8r0XETu8n6Ye3Q+ahtSarc3WgtNWmehIBfA=="],
+
+    "marked": ["marked@17.0.1", "", { "bin": { "marked": "bin/marked.js" } }, "sha512-boeBdiS0ghpWcSwoNm/jJBwdpFaMnZWRzjA6SkUMYb40SVaN1x7mmfGKp0jvexGcx+7y2La5zRZsYFZI6Qpypg=="],
+
+    "ms": ["ms@2.1.3", "", {}, "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+
+    "react": ["react@19.2.8", "", {}, "sha512-PWaYA1L/q9u2u7xYQi+Y3L3Yfnie7XyLeaJICV1MGD6LprsBxcAqGjYyr0eY3p+QdsA+x/Irkt4Qif8D63+Sbw=="],
+
+    "react-devtools-core": ["react-devtools-core@7.0.1", "", { "dependencies": { "shell-quote": "^1.6.1", "ws": "^7" } }, "sha512-C3yNvRHaizlpiASzy7b9vbnBGLrhvdhl1CbdU6EnZgxPNbai60szdLtl+VL76UNOt5bOoVTOz5rNWZxgGt+Gsw=="],
+
+    "react-reconciler": ["react-reconciler@0.33.0", "", { "dependencies": { "scheduler": "^0.27.0" }, "peerDependencies": { "react": "^19.2.0" } }, "sha512-KetWRytFv1epdpJc3J4G75I4WrplZE5jOL7Yq0p34+OVOKF4Se7WrdIdVC45XsSSmUTlht2FM/fM1FZb1mfQeA=="],
+
+    "scheduler": ["scheduler@0.27.0", "", {}, "sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q=="],
+
+    "shell-quote": ["shell-quote@1.10.0", "", {}, "sha512-w1aiOKwKuRgtwAReIIj89puqg+I7GvX4IbLrvmhXbzQsj1+Zwi4VO3+fa6ZF91TWSjIxoEkKnMeHcLEODK5ZXA=="],
+
+    "socket.io-client": ["socket.io-client@4.8.3", "", { "dependencies": { "@socket.io/component-emitter": "~3.1.0", "debug": "~4.4.1", "engine.io-client": "~6.6.1", "socket.io-parser": "~4.2.4" } }, "sha512-uP0bpjWrjQmUt5DTHq9RuoCBdFJF10cdX9X+a368j/Ft0wmaVgxlrjvK3kjvgCODOMMOz9lcaRzxmso0bTWZ/g=="],
+
+    "socket.io-parser": ["socket.io-parser@4.2.7", "", { "dependencies": { "@socket.io/component-emitter": "~3.1.0", "debug": "~4.4.1" } }, "sha512-IH/iSeO9T6gz1KkFleGDWkG9N3dl4jXVYUtMhIqH10Md0ttMer8nUNWiP1DKuNrybD2xBrixLJdCC9J6ECoYkg=="],
+
+    "string-width": ["string-width@7.2.0", "", { "dependencies": { "emoji-regex": "^10.3.0", "get-east-asian-width": "^1.0.0", "strip-ansi": "^7.1.0" } }, "sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ=="],
+
+    "strip-ansi": ["strip-ansi@7.1.2", "", { "dependencies": { "ansi-regex": "^6.0.1" } }, "sha512-gmBGslpoQJtgnMAvOVqGZpEz9dyoKTCzy2nfz/n8aIFhN/jCE/rCmcxabB6jOOHV+0WNnylOxaxBQPSvcWklhA=="],
+
+    "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="],
+
+    "undici-types": ["undici-types@8.3.0", "", {}, "sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ=="],
+
+    "web-tree-sitter": ["web-tree-sitter@0.25.10", "", { "peerDependencies": { "@types/emscripten": "^1.40.0" }, "optionalPeers": ["@types/emscripten"] }, "sha512-Y09sF44/13XvgVKgO2cNDw5rGk6s26MgoZPXLESvMXeefBf7i6/73eFurre0IsTW6E14Y0ArIzhUMmjoc7xyzA=="],
+
+    "ws": ["ws@8.21.2", "", { "peerDependencies": { "bufferutil": "^4.0.1", "utf-8-validate": ">=5.0.2" }, "optionalPeers": ["bufferutil", "utf-8-validate"] }, "sha512-54dMVAo4WIe6SKy3vBgN+9bJZqqQ8IMRevAkOLQALhi49qkkQDQfWdAZ8KQlXiEabw88ARXXdUrlvtbKQX+aKw=="],
+
+    "xmlhttprequest-ssl": ["xmlhttprequest-ssl@2.1.2", "", {}, "sha512-TEU+nJVUUnA4CYJFLvK5X9AOeH4KvDvhIfm0vV1GaQRtchnG0hgK5p8hw/xjv8cunWYCsiPCSDzObPyhEwq3KQ=="],
+
+    "react-devtools-core/ws": ["ws@7.5.13", "", { "peerDependencies": { "bufferutil": "^4.0.1", "utf-8-validate": "^5.0.2" }, "optionalPeers": ["bufferutil", "utf-8-validate"] }, "sha512-rsKI6xDBFVf4r/x8XyChGK04QR/XHroxs/jUcoWvtEZM8TPU/X/uIY9B1CsSzYws9ZJb/6bbBu7dPhFW00CAoA=="],
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spinuptui",
-  "version": "0.27.0",
+  "version": "1.0.0",
   "description": "SpinupTUI — a terminal dashboard for browsing, monitoring, and managing your SpinupWP servers and sites.",
   "type": "module",
   "bin": {
@@ -11,7 +11,8 @@
     "src",
     "README.md",
     "CHANGELOG.md",
-    "LICENSE"
+    "LICENSE",
+    "bun.lock"
   ],
   "repository": {
     "type": "git",

package/src/api/client.ts

@@ -110,15 +110,44 @@ const MAX_PAGES = 100 // hard safety cap when auto-paginating
 // event polling burned the window and made SUCCESSFUL operations look failed.
 let rlRemaining = Infinity
 let rlResetAt = 0
-const RL_LOW_WATER = 8 // start pacing when fewer than this many requests remain
+let rlLimit = 0 // X-RateLimit-Limit as last seen; 0 = no response yet
+export const RL_LOW_WATER = 8 // start pacing when fewer than this many requests remain
 const RL_MAX_RETRIES = 3
 const sleep = (ms: number) => new Promise((r) => setTimeout(r, ms))
 
 function rlUpdate(headers: Headers): void {
-  const rem = Number(headers.get("x-ratelimit-remaining"))
-  if (Number.isFinite(rem)) rlRemaining = rem
+  // Number(null) is 0, so a missing header must not read as "0 left".
+  const remHeader = headers.get("x-ratelimit-remaining")
+  const rem = Number(remHeader)
+  if (remHeader !== null && Number.isFinite(rem)) rlRemaining = rem
+  const limit = Number(headers.get("x-ratelimit-limit"))
+  if (Number.isFinite(limit) && limit > 0) rlLimit = limit
   // No reset header outside 429s — assume the standard 1-minute window rolls over.
   if (rlResetAt < Date.now()) rlResetAt = Date.now() + 60_000
+  rlNotify()
+}
+
+// Read side for the header's headroom indicator: what's left of this minute's
+// budget, so a user sees the wall coming before a 429 (or before pacing makes
+// the app feel slow). null until the first response has told us the limit.
+export interface RateLimitSnapshot {
+  remaining: number
+  limit: number
+  resetAt: number
+}
+const rlListeners = new Set<() => void>()
+function rlNotify(): void {
+  for (const l of rlListeners) l()
+}
+export function rateLimitSnapshot(): RateLimitSnapshot | null {
+  if (!rlLimit || !Number.isFinite(rlRemaining)) return null
+  // Past the window's end the last count is stale: a fresh window is full.
+  const remaining = rlResetAt < Date.now() ? rlLimit : rlRemaining
+  return { remaining, limit: rlLimit, resetAt: rlResetAt }
+}
+export function onRateLimitChange(listener: () => void): () => void {
+  rlListeners.add(listener)
+  return () => rlListeners.delete(listener)
 }
 
 async function rlGate(): Promise<void> {
@@ -154,6 +183,7 @@ export class SpinupWPClient implements SpinupWPClientLike {
         const waitMs = (Number.isFinite(ra) && ra > 0 ? ra : 20) * 1000
         rlRemaining = 0
         rlResetAt = Date.now() + waitMs
+        rlNotify()
         await sleep(waitMs + Math.random() * 500)
         continue
       }

package/src/config.ts

@@ -6,6 +6,16 @@
 //
 // This lets the original author keep a project-local .env while letting other
 // users configure the tool globally after a `bun install -g`.
+//
+// Accounts (profiles): config.json can hold several SpinupWP accounts under
+// `profiles`, one of them active. Everything that belongs to an account — its
+// token, DNS connections, local-copy links, sudo users, jobs… (PROFILE_KEYS) —
+// lives inside its profile; machine-level settings (terminal app, local scan
+// roots, the Uptime Kuma login, last-seen version) stay at the top level and are
+// shared. Callers never see the split: readStoredConfig() returns the active
+// profile flattened over the globals, and saveConfig() routes each key back to
+// where it belongs. A pre-profiles file is read as a single profile, "default",
+// and rewritten in the new shape on its next save.
 
 import { homedir } from "node:os"
 import { join } from "node:path"
@@ -17,13 +27,16 @@ import { ALL_PROVIDERS, type Connection, type ConnProvider } from "./lib/provide
 export const DEFAULT_BASE_URL = "https://api.spinupwp.app/v1"
 
 export interface AppConfig {
+  // The active account's profile id and human label (see "Accounts" above).
+  profileId: string
+  profileLabel: string
   token: string
   baseUrl: string
   tokenSource: "env" | "file" | "none"
   // Optional override for the SSH user used by the server health view. When unset,
   // the health view derives the user from a site on the server (its `site_user`).
   sshUser: string | null
-  // SpinupWP account/team slug (e.g. "wenmark-digital-solutions"), used to build
+  // SpinupWP account/team slug (e.g. "acme-agency"), used to build
   // deep links into the SpinupWP web app. The API doesn't expose it, so it's
   // configured. When unset, deep links fall back to the dashboard root.
   accountSlug: string | null
@@ -191,6 +204,64 @@ export interface StoredConfig {
   lastSeenVersion?: string
 }
 
+// ---- Accounts (profiles) -------------------------------------------------------
+
+// The keys that belong to one SpinupWP account. Server and site ids are assigned
+// per account (two accounts can both have a server #42), so anything keyed by
+// them MUST be here, as must DNS provider credentials (each client's own).
+// Everything else in StoredConfig is machine-level and shared by every profile.
+// `kumaMonitors` is per account, the Kuma login (`uptimeKuma`) is shared: one
+// agency's Kuma watches every account's sites.
+const PROFILE_KEYS = [
+  "token",
+  "baseUrl",
+  "accountSlug",
+  "sshUser",
+  "localSites",
+  "localSync",
+  "providers",
+  "serverProviders",
+  "jobs",
+  "sudoUsers",
+  "preferredGrantKeys",
+  "grantedKeys",
+  "zoneAccessNotes",
+  "vanityHealthKeys",
+  "kumaMonitors",
+] as const satisfies readonly (keyof StoredConfig)[]
+type ProfileKey = (typeof PROFILE_KEYS)[number]
+const isProfileKey = (k: string): k is ProfileKey => (PROFILE_KEYS as readonly string[]).includes(k)
+
+export type StoredProfile = Pick<StoredConfig, ProfileKey> & { label?: string }
+
+// The on-disk shape: globals at the top, accounts under `profiles`.
+interface StoredFile extends Omit<StoredConfig, ProfileKey> {
+  activeProfile?: string
+  profiles?: Record<string, StoredProfile>
+}
+
+// The profile a pre-profiles config migrates into. Its Keychain entries and cache
+// files keep their original (un-namespaced) names, so migrating moves nothing.
+export const DEFAULT_PROFILE = "default"
+
+export interface ProfileSummary {
+  id: string
+  label: string
+  accountSlug: string | null
+  active: boolean
+  // How many sudo passwords this account has saved in the Keychain — what a
+  // removal will scrub.
+  keychainServers: number[]
+}
+
+// Picks a profile for this process only (no write) — the SPINUPTUI_ACCOUNT env
+// var, so a CLI command can target an account without switching the app's.
+let processProfile: string | null = process.env.SPINUPTUI_ACCOUNT?.trim() || null
+
+export function profileLabel(p: StoredProfile | undefined, id: string): string {
+  return p?.label?.trim() || p?.accountSlug?.trim() || id
+}
+
 export function configDir(): string {
   const xdg = process.env.XDG_CONFIG_HOME
   return xdg ? join(xdg, "spinupwp-tui") : join(homedir(), ".config", "spinupwp-tui")
@@ -206,19 +277,142 @@ export function keysDir(): string {
   return join(configDir(), "keys")
 }
 
-function readStoredConfig(): StoredConfig {
+function readRawFile(): Record<string, unknown> {
   try {
     const path = configPath()
     if (!existsSync(path)) return {}
-    return JSON.parse(readFileSync(path, "utf8")) as StoredConfig
+    return JSON.parse(readFileSync(path, "utf8")) as Record<string, unknown>
   } catch {
     return {}
   }
 }
 
+// Read config.json in the profiles shape, migrating a flat (pre-profiles) file
+// in memory: its account keys become the "default" profile.
+function readStoredFile(): StoredFile {
+  const raw = readRawFile()
+  if (raw.profiles && typeof raw.profiles === "object") return raw as StoredFile
+  const file: Record<string, unknown> = {}
+  const profile: Record<string, unknown> = {}
+  for (const [k, v] of Object.entries(raw)) (isProfileKey(k) ? profile : file)[k] = v
+  // Nothing account-shaped yet (fresh install): no profile until one is saved.
+  if (Object.keys(profile).length === 0) return file as StoredFile
+  return { ...(file as StoredFile), activeProfile: DEFAULT_PROFILE, profiles: { [DEFAULT_PROFILE]: profile as StoredProfile } }
+}
+
+// The id of the profile this process reads and writes. Falls back to the first
+// profile when the stored pointer is missing or dangling.
+function resolveActive(file: StoredFile): string {
+  const ids = Object.keys(file.profiles ?? {})
+  for (const want of [processProfile, file.activeProfile]) if (want && ids.includes(want)) return want
+  return ids[0] ?? DEFAULT_PROFILE
+}
+
+export function activeProfileId(): string {
+  return resolveActive(readStoredFile())
+}
+
+// The active profile flattened over the machine-level settings — the shape every
+// caller has always read.
+function readStoredConfig(): StoredConfig {
+  const file = readStoredFile()
+  const { profiles, activeProfile: _active, ...globals } = file
+  const profile = profiles?.[resolveActive(file)] ?? {}
+  const { label: _label, ...fields } = profile
+  return { ...globals, ...fields }
+}
+
+// Where an account's disk caches (probe results, DNS, verified zones) live. The
+// default profile keeps the original top-level paths, so migrating moves no
+// files; any other account gets its own directory, since those caches are keyed
+// by per-account site ids and zones.
+export function profileDataDir(id = activeProfileId()): string {
+  return id === DEFAULT_PROFILE ? configDir() : join(configDir(), "profiles", id)
+}
+
+// The per-account cache files, by name, inside profileDataDir() — listed so
+// removing an account can delete exactly these (the default profile's sit
+// beside machine-level files in the config dir itself).
+export const PROFILE_CACHE_FILES = ["stack-cache.json", "dns-cache.json", "providers-cache.json"]
+
+export function listProfiles(): ProfileSummary[] {
+  const file = readStoredFile()
+  const active = resolveActive(file)
+  return Object.entries(file.profiles ?? {}).map(([id, p]) => ({
+    id,
+    label: profileLabel(p, id),
+    accountSlug: p.accountSlug?.trim() || null,
+    active: id === active,
+    keychainServers: Object.entries(p.sudoUsers ?? {})
+      .filter(([, u]) => u.keychain)
+      .map(([sid]) => Number(sid)),
+  }))
+}
+
+// A lowercase, dash-separated id from a label, unique among existing profiles.
+function profileIdFor(label: string, taken: string[]): string {
+  const base = label.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40) || "account"
+  let id = base
+  for (let n = 2; taken.includes(id); n++) id = `${base}-${n}`
+  return id
+}
+
+// Add an account (token already validated by the caller). Does not switch to it.
+export async function addProfile(p: { label: string; token: string; baseUrl?: string; accountSlug?: string }): Promise<string> {
+  const file = readStoredFile()
+  const profiles = { ...(file.profiles ?? {}) }
+  const id = profileIdFor(p.label, Object.keys(profiles))
+  profiles[id] = {
+    label: p.label.trim(),
+    token: p.token.trim(),
+    baseUrl: p.baseUrl ?? DEFAULT_BASE_URL,
+    ...(p.accountSlug?.trim() ? { accountSlug: p.accountSlug.trim() } : {}),
+  }
+  await writeStoredFile({ ...file, activeProfile: resolveActive(file), profiles })
+  return id
+}
+
+export async function renameProfile(id: string, label: string): Promise<void> {
+  const file = readStoredFile()
+  const p = file.profiles?.[id]
+  if (!p || !label.trim()) return
+  await writeStoredFile({ ...file, activeProfile: resolveActive(file), profiles: { ...file.profiles, [id]: { ...p, label: label.trim() } } })
+}
+
+// Drop an account's profile. The caller scrubs its Keychain entries and cache
+// directory (see removeAccount in the Accounts overlay). The active account
+// can't be removed — switch away first.
+export async function removeProfile(id: string): Promise<void> {
+  const file = readStoredFile()
+  const active = resolveActive(file)
+  if (id === active || !file.profiles?.[id]) return
+  const { [id]: _gone, ...rest } = file.profiles
+  await writeStoredFile({ ...file, activeProfile: active, profiles: rest })
+}
+
+// Lock this process to the account active right now. The TUI calls it at
+// launch: without it, a second instance on the same machine
+// switching accounts would rewrite `activeProfile` in the shared file, and this
+// process's call-time reads — Keychain names, cache dirs, jobs, local links —
+// would quietly follow it while its screens still show the old account.
+export function pinActiveProfile(): string {
+  processProfile = resolveActive(readStoredFile())
+  return processProfile
+}
+
+// Make `id` the active account, for this process and future launches.
+export async function setActiveProfile(id: string): Promise<void> {
+  const file = readStoredFile()
+  if (!file.profiles?.[id]) return
+  processProfile = id
+  await writeStoredFile({ ...file, activeProfile: id })
+}
+
 // Resolve the active config from env + stored file. Never throws.
 export function loadConfig(): AppConfig {
   const stored = readStoredConfig()
+  const file = readStoredFile()
+  const profileId = resolveActive(file)
   const envToken = process.env.SPINUPWP_ACCESS_TOKEN?.trim()
   const fileToken = stored.token?.trim()
 
@@ -257,11 +451,16 @@ export function loadConfig(): AppConfig {
   }
 
   return {
+    profileId,
+    profileLabel: profileLabel(file.profiles?.[profileId], profileId),
     token,
     baseUrl: (stored.baseUrl || DEFAULT_BASE_URL).replace(/\/+$/, ""),
     tokenSource,
     sshUser: process.env.SPINUPWP_SSH_USER?.trim() || stored.sshUser?.trim() || null,
-    accountSlug: process.env.SPINUPWP_ACCOUNT_SLUG?.trim() || stored.accountSlug?.trim() || null,
+    // The env slug describes the env token's account (or the one account a
+    // pre-profiles setup had) — never another profile the user switched to.
+    accountSlug:
+      ((tokenSource === "env" || profileId === DEFAULT_PROFILE) && process.env.SPINUPWP_ACCOUNT_SLUG?.trim()) || stored.accountSlug?.trim() || null,
     terminalApp: process.env.SPINUPWP_TERMINAL_APP?.trim() || stored.terminalApp?.trim() || null,
     localSync: ((): boolean => {
       // Env overrides the file when present; otherwise the stored flag (default off).
@@ -295,12 +494,37 @@ export function hasToken(): boolean {
   return loadConfig().token.length > 0
 }
 
-// Persist a token (and optional base URL) to the config file. Used by onboarding.
-export async function saveConfig(partial: StoredConfig): Promise<void> {
+// Merge settings into the config file: account keys into the active profile
+// (created as "default" if there is none yet — first-run onboarding), the rest
+// at the top level. `profileId` pins the account keys to a specific profile —
+// the app passes the one it was started for, so a write that lands after an
+// account switch can't leak into the newly active account (and one for an
+// account removed meanwhile is dropped).
+export async function saveConfig(partial: StoredConfig, profileId?: string): Promise<void> {
+  const file = readStoredFile()
+  const active = resolveActive(file)
+  if (profileId && profileId !== active && !file.profiles?.[profileId]) {
+    partial = Object.fromEntries(Object.entries(partial).filter(([k]) => !isProfileKey(k)))
+    if (Object.keys(partial).length === 0) return
+  }
+  const target = profileId && file.profiles?.[profileId] ? profileId : active
+  const profile: StoredProfile = { ...(file.profiles?.[target] ?? {}) }
+  const next: StoredFile = { ...file }
+  for (const [k, v] of Object.entries(partial)) {
+    if (isProfileKey(k)) (profile as Record<string, unknown>)[k] = v
+    else (next as Record<string, unknown>)[k] = v
+  }
+  const hasProfile = file.profiles?.[target] || PROFILE_KEYS.some((k) => k in partial)
+  if (hasProfile) {
+    next.profiles = { ...(file.profiles ?? {}), [target]: profile }
+    next.activeProfile = active
+  }
+  await writeStoredFile(next)
+}
+
+async function writeStoredFile(next: StoredFile): Promise<void> {
   const dir = configDir()
   await mkdir(dir, { recursive: true })
-  const current = readStoredConfig()
-  const next: StoredConfig = { ...current, ...partial }
   const path = configPath()
   await Bun.write(path, JSON.stringify(next, null, 2) + "\n")
   // The file holds an API token — restrict it to the owner.