spinuptui 1.2.0 → 1.2.1

package/CHANGELOG.md

@@ -11,6 +11,12 @@ version; such changes are called out here.
 
 ## [Unreleased]
 
+## [1.2.1] - 2026-10-27
+
+### Fixed
+- **WordPress versions no longer go stale.** The version shown for a site was read once, when the site was first identified, and never again, so sites updated outside SpinupTUI (auto-updates, wp-admin, deploys) kept showing the old version, and `r` didn't help. Versions older than a day are now re-checked in the background when the site list loads, one site at a time per server, stopping at a server's first failure so unattended SSH can't trip fail2ban. A reading that couldn't be refreshed shows its age in the Stacks list, and the Details pane always says when it was taken.
+- **`w` opens the site or server you picked, not the SpinupWP dashboard.** Deep links need the account slug, which SpinupWP's API doesn't provide and first-run setup never asked for, so unless you had added `accountSlug` to `config.json` by hand, `w` quietly fell back to the dashboard. Now `w` asks for the slug the first time it needs it (pasting any dashboard URL works), saves it to the current account and opens the right page. First-run setup also asks for it, as an optional step after the token.
+
 ## [1.2.0] - 2026-10-21
 
 ### Added
@@ -1490,7 +1496,8 @@ Initial tagged release.
 ### Notes
 - Read-only release: works with a SpinupWP **Read Only** API token.
 
-[Unreleased]: https://github.com/mwender/spinupwp-tui/compare/v1.2.0...HEAD
+[Unreleased]: https://github.com/mwender/spinupwp-tui/compare/v1.2.1...HEAD
+[1.2.1]: https://github.com/mwender/spinupwp-tui/compare/v1.2.0...v1.2.1
 [1.2.0]: https://github.com/mwender/spinupwp-tui/compare/v1.1.2...v1.2.0
 [1.1.2]: https://github.com/mwender/spinupwp-tui/compare/v1.1.1...v1.1.2
 [1.1.1]: https://github.com/mwender/spinupwp-tui/compare/v1.1.0...v1.1.1

package/README.md

@@ -305,8 +305,9 @@ These can be set in `config.json` or via an environment variable:
 - **`accountSlug`** / `SPINUPWP_ACCOUNT_SLUG` — your SpinupWP account/team slug
   (the first path segment in a SpinupWP URL, e.g. `acme-agency` in
   `https://spinupwp.app/acme-agency/servers/12345`). The API
-  doesn't expose it, so set it to enable the `w` deep links into the web app.
-  Without it, `w` opens the SpinupWP dashboard root.
+  doesn't expose it, so it's needed for the `w` deep links into the web app.
+  You don't have to set it by hand: first-run setup asks for it (optional), and
+  `w` asks the first time it's needed, then saves it to the current account.
 - **`sshUser`** / `SPINUPWP_SSH_USER` — override the SSH user for the health view
   and stack probes (see "Server health" below).
 - **`localSync`** / `SPINUPWP_LOCAL_SYNC` — opt-in for the **Pull production →

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spinuptui",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "SpinupTUI — a terminal dashboard for browsing, monitoring, and managing your SpinupWP servers and sites.",
   "type": "module",
   "bin": {

package/src/lib/spinupweb.test.ts

@@ -0,0 +1,22 @@
+import { describe, expect, test } from "bun:test"
+import { parseAccountSlug, siteWebUrl } from "./spinupweb.ts"
+
+describe("parseAccountSlug", () => {
+  test("a bare slug", () => {
+    expect(parseAccountSlug("  acme-agency ")).toBe("acme-agency")
+  })
+  test("a whole dashboard URL", () => {
+    expect(parseAccountSlug("https://spinupwp.app/acme-agency/sites/123#git")).toBe("acme-agency")
+    expect(parseAccountSlug("spinupwp.app/acme-agency")).toBe("acme-agency")
+    expect(parseAccountSlug("https://SpinupWP.app/acme-agency/?tab=servers")).toBe("acme-agency")
+  })
+  test("anything that isn't a slug", () => {
+    expect(parseAccountSlug("")).toBeNull()
+    expect(parseAccountSlug("https://spinupwp.app/")).toBeNull()
+    expect(parseAccountSlug("acme agency")).toBeNull()
+    expect(parseAccountSlug("../etc")).toBeNull()
+  })
+  test("feeds the deep link", () => {
+    expect(siteWebUrl(42, parseAccountSlug("https://spinupwp.app/acme-agency/sites"))).toBe("https://spinupwp.app/acme-agency/sites/42")
+  })
+})

package/src/lib/spinupweb.ts

@@ -12,6 +12,17 @@
 
 const WEB_BASE = "https://spinupwp.app"
 
+// Read an account slug from what a user types: the slug itself, or any dashboard
+// URL pasted whole ("https://spinupwp.app/acme-agency/sites/123" → "acme-agency").
+// Null when it doesn't look like a slug.
+export function parseAccountSlug(input: string): string | null {
+  let s = input.trim()
+  const at = s.toLowerCase().indexOf("spinupwp.app/")
+  if (at >= 0) s = s.slice(at + "spinupwp.app/".length)
+  s = s.replace(/^\/+/, "").split(/[/?#]/)[0] ?? ""
+  return /^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(s) ? s : null
+}
+
 export function serverWebUrl(id: number, accountSlug: string | null): string {
   return accountSlug ? `${WEB_BASE}/${accountSlug}/servers/${id}` : WEB_BASE
 }

package/src/lib/stackCache.test.ts

@@ -0,0 +1,43 @@
+import { describe, expect, test } from "bun:test"
+import { isRecheckDue, isVersionOld, VERSION_MAX_AGE_MS, type CachedProbe } from "./stackCache.ts"
+
+const NOW = 1_800_000_000_000
+
+function entry(version: string | null, ageMs: number): CachedProbe {
+  return {
+    result: { kind: version ? "wordpress" : "whmcs", app: "x", version, label: "x" },
+    detectedAt: NOW - ageMs,
+    signature: "true:",
+  }
+}
+
+describe("isVersionOld", () => {
+  test("a fresh version reading isn't old", () => {
+    expect(isVersionOld(entry("7.1.3", 60_000), NOW)).toBe(false)
+  })
+  test("a version reading past the max age is old", () => {
+    expect(isVersionOld(entry("7.0", VERSION_MAX_AGE_MS + 1), NOW)).toBe(true)
+  })
+  test("an identity without a version never goes old", () => {
+    expect(isVersionOld(entry(null, 365 * VERSION_MAX_AGE_MS), NOW)).toBe(false)
+  })
+  test("no entry isn't old", () => {
+    expect(isVersionOld(undefined, NOW)).toBe(false)
+  })
+})
+
+describe("isRecheckDue", () => {
+  const old = entry("7.0", 3 * VERSION_MAX_AGE_MS)
+  test("an old version with no attempt yet is due", () => {
+    expect(isRecheckDue(old, NOW)).toBe(true)
+  })
+  test("an attempt inside the window (even a failed one) holds it off", () => {
+    expect(isRecheckDue({ ...old, recheckedAt: NOW - 60_000 }, NOW)).toBe(false)
+  })
+  test("an attempt from a previous window doesn't", () => {
+    expect(isRecheckDue({ ...old, recheckedAt: NOW - VERSION_MAX_AGE_MS - 1 }, NOW)).toBe(true)
+  })
+  test("a fresh reading is never due", () => {
+    expect(isRecheckDue(entry("7.1.3", 60_000), NOW)).toBe(false)
+  })
+})

package/src/lib/stackCache.ts

@@ -5,7 +5,8 @@
 //   - set()   is called after a successful `d` probe; it upserts the entry and
 //             writes the whole file back immediately (write-through), so a probe
 //             survives even if the TUI is killed with q / Ctrl+C.
-// Probing itself is always on-demand and per-site — this cache exists to avoid
+// Probing is on-demand and per-site, with one exception: a WP version older than
+// VERSION_MAX_AGE_MS is re-probed in the background. This cache exists to avoid
 // repeating the slow SSH round-trips across launches, not to save RAM. It's a
 // deliberately small, reusable pattern for other expensive derived data later.
 
@@ -21,6 +22,10 @@ export interface CachedProbe {
   result: ProbeResult
   detectedAt: number // epoch ms
   signature: string // invalidation key (see siteSignature)
+  // Last automatic re-check of an old version (epoch ms), kept even when it
+  // failed, so the once-per-window limit holds across launches. A successful
+  // probe replaces the whole entry, which clears it.
+  recheckedAt?: number
 }
 
 interface CacheFile {
@@ -32,6 +37,25 @@ export function stackCachePath(dir = profileDataDir()): string {
   return join(dir, "stack-cache.json")
 }
 
+// A WordPress version is a fact about the server that changes without us: auto-
+// updates, wp-admin and deploys all move it, and none of them touch the site's
+// shape below. So a reading that carries a version is re-checked once it's older
+// than this (in the background, when the site list loads), and its age is shown.
+export const VERSION_MAX_AGE_MS = 24 * 60 * 60 * 1000
+
+// True when the entry carries a WP version read longer ago than the max age.
+// Identities without a version (WHMCS, Laravel, static) don't drift this way.
+export function isVersionOld(entry: CachedProbe | undefined, now = Date.now()): boolean {
+  return entry?.result.version != null && now - entry.detectedAt > VERSION_MAX_AGE_MS
+}
+
+// True when an old version is due an automatic re-check: none was attempted in
+// the current window. Unattended SSH that fails must not repeat on every launch.
+export function isRecheckDue(entry: CachedProbe | undefined, now = Date.now()): boolean {
+  if (!entry || !isVersionOld(entry, now)) return false
+  return entry.recheckedAt == null || now - entry.recheckedAt > VERSION_MAX_AGE_MS
+}
+
 // A cached probe is considered stale when the site's relevant shape changes.
 // Keying on is_wordpress + public_folder catches the cases that would alter the
 // probe's target paths or expected result.
@@ -83,6 +107,16 @@ export class StackCache {
     await this.persist()
   }
 
+  // Record an automatic re-check attempt on existing entries, in one write.
+  async noteRecheck(siteIds: number[]): Promise<void> {
+    const now = Date.now()
+    for (const id of siteIds) {
+      const e = this.entries.get(id)
+      if (e) this.entries.set(id, { ...e, recheckedAt: now })
+    }
+    await this.persist()
+  }
+
   // A copy of all entries (for rendering aggregates without exposing the map).
   snapshot(): Map<number, CachedProbe> {
     return new Map(this.entries)

package/src/ui/App.tsx

@@ -19,6 +19,7 @@ import { SiteUpdate } from "./views/SiteUpdate.tsx"
 import { BulkWpUpdate } from "./views/BulkWpUpdate.tsx"
 import { HttpsToggle } from "./views/HttpsToggle.tsx"
 import { PurgeCache } from "./views/PurgeCache.tsx"
+import { AccountSlugPrompt } from "./views/AccountSlugPrompt.tsx"
 import { SiteOffline } from "./views/SiteOffline.tsx"
 import { ReleaseNotes } from "./views/ReleaseNotes.tsx"
 import { GrantKey } from "./views/GrantKey.tsx"
@@ -89,7 +90,8 @@ export function App() {
     store.dnsInventoryServer !== null ||
     store.connectZoneTarget !== null ||
     store.dnsRecordsTarget !== null ||
-    store.kumaSite !== null
+    store.kumaSite !== null ||
+    store.slugPrompt !== null
   useEffect(() => {
     store.setOverlayOpen(overlayActive)
   }, [overlayActive, store])
@@ -127,6 +129,9 @@ export function App() {
     // The Accounts overlay owns the keyboard while open.
     if (showAccounts) return
 
+    // The account-slug prompt (from `w`) owns the keyboard while open.
+    if (store.slugPrompt) return
+
     // The release-notes overlay owns the keyboard while open (any key dismisses).
     if (store.releaseNotesInfo) return
 
@@ -290,6 +295,7 @@ export function App() {
       {store.dnsRecordsTarget && <DnsRecords />}
       {store.kumaSite && <KumaSite />}
       {showAccounts && <Accounts onClose={() => setShowAccounts(false)} />}
+      {store.slugPrompt && <AccountSlugPrompt />}
       <ToastStack />
     </box>
   )

package/src/ui/Details.tsx

@@ -180,7 +180,13 @@ export function SiteDetail({ site, serverName }: { site: Site; serverName: strin
       <Field label="Stack" value={stack} valueColor={stackColor(stack)} />
       <Field
         label="Detected"
-        value={probing ? "identifying…" : probe ? probe.result.label + (isProbeStale(site) ? " (stale)" : "") : "not identified · d"}
+        value={
+          probing
+            ? "identifying…"
+            : probe
+              ? `${probe.result.label}${isProbeStale(site) ? " (stale)" : ""} · ${timeAgo(new Date(probe.detectedAt).toISOString())}`
+              : "not identified · d"
+        }
         valueColor={probing ? theme.textDim : probe ? probeKindColor(probe.result.kind) : theme.textFaint}
       />
       <Field label="Type" value={isWordPress ? "WordPress" : "Generic"} valueColor={isWordPress ? theme.brand : theme.textDim} />

package/src/ui/Onboarding.tsx

@@ -2,20 +2,25 @@
 //
 // Shown when no token is found in the environment or config file. Collects an
 // API token, validates it against the live API, persists it to ~/.config, then
-// hands control back to the app.
+// asks (optionally) for the account slug that `w` deep links need — the API
+// can't tell us — and hands control back to the app.
 
 import { useState } from "react"
 import { theme } from "../lib/theme.ts"
 import { Spinner, SecretInput } from "./components.tsx"
 import { SpinupWPClient } from "../api/client.ts"
 import { DEFAULT_BASE_URL, saveConfig, configPath } from "../config.ts"
+import { parseAccountSlug } from "../lib/spinupweb.ts"
 
-type Phase = "input" | "validating" | "error"
+type Phase = "input" | "validating" | "error" | "slug"
+
+const INPUT_STYLE = { backgroundColor: theme.bgAlt, focusedBackgroundColor: theme.bgAlt, textColor: theme.text }
 
 export function Onboarding({ onComplete }: { onComplete: () => void }) {
   const [value, setValue] = useState("")
   const [phase, setPhase] = useState<Phase>("input")
   const [error, setError] = useState<string | null>(null)
+  const [slug, setSlug] = useState("")
 
   async function submit(token: string) {
     const trimmed = token.trim()
@@ -26,13 +31,76 @@ export function Onboarding({ onComplete }: { onComplete: () => void }) {
     const result = await client.validateToken()
     if (result.ok) {
       await saveConfig({ token: trimmed, baseUrl: DEFAULT_BASE_URL })
-      onComplete()
+      setPhase("slug")
     } else {
       setError(result.reason)
       setPhase("error")
     }
   }
 
+  // Optional: empty skips (an existing slug, e.g. on `spinuptui login`, is kept).
+  async function submitSlug() {
+    if (!slug.trim()) return onComplete()
+    const parsed = parseAccountSlug(slug)
+    if (!parsed) {
+      setError("That doesn't look like a slug — paste the part after spinupwp.app/, or the whole URL.")
+      return
+    }
+    await saveConfig({ accountSlug: parsed })
+    onComplete()
+  }
+
+  if (phase === "slug") {
+    return (
+      <box
+        style={{
+          width: "100%",
+          height: "100%",
+          flexDirection: "column",
+          justifyContent: "center",
+          alignItems: "center",
+          backgroundColor: theme.bg,
+        }}
+      >
+        <ascii-font text="SPINUPTUI" font="block" color={[theme.brand, theme.accent]} />
+        <box style={{ height: 1 }} />
+        <box
+          title=" Almost done "
+          titleColor={theme.brand}
+          border
+          borderColor={theme.border}
+          style={{ flexDirection: "column", width: 70, paddingLeft: 2, paddingRight: 2, paddingTop: 1, paddingBottom: 1 }}
+        >
+          <text content="✓ Token works." fg={theme.good} />
+          <box style={{ height: 1 }} />
+          <text content="One more (optional): your SpinupWP account slug, the part" fg={theme.text} wrapMode="none" />
+          <text content="after spinupwp.app/ in your dashboard's address. With it, w" fg={theme.text} wrapMode="none" />
+          <text content="opens a site or server straight in SpinupWP." fg={theme.text} wrapMode="none" />
+          <text content="Pasting any dashboard URL works too." fg={theme.textDim} wrapMode="none" />
+          <box style={{ height: 1 }} />
+          <text content="Account slug" fg={theme.accent} />
+          <input
+            focused
+            value={slug}
+            placeholder="acme-agency"
+            onInput={(v: string) => {
+              setSlug(v)
+              setError(null)
+            }}
+            onSubmit={() => void submitSlug()}
+            style={INPUT_STYLE}
+          />
+          <box style={{ height: 1 }} />
+          {error ? (
+            <text content={"✕ " + error} fg={theme.bad} wrapMode="none" />
+          ) : (
+            <text content="Press Enter to finish. Leave it empty to skip; w will ask later." fg={theme.textFaint} wrapMode="none" />
+          )}
+        </box>
+      </box>
+    )
+  }
+
   return (
     <box
       style={{

package/src/ui/store.tsx

@@ -51,7 +51,7 @@ import { carrySiteSettings, type SettingsCarryResult } from "../lib/cloneSetting
 import { syncAdditionalDomains } from "../lib/cloneDomains.ts"
 import { parseRepo, deployKeysSettingsUrl, ghAvailable, ghDeployKeyPresent, ghAddDeployKey, generateDeployKeypair, type RepoHost } from "../lib/gitDeployKey.ts"
 import { keychainAvailable, setSudoPassword, getSudoPassword, deleteSudoPassword } from "../lib/keychain.ts"
-import { StackCache, siteSignature, type CachedProbe } from "../lib/stackCache.ts"
+import { StackCache, siteSignature, isRecheckDue, type CachedProbe } from "../lib/stackCache.ts"
 import { resolvePhpEolDates, refreshPhpEolDates, isPhpEol as isPhpEolWith, offeredPhpVersions as offeredPhpVersionsWith, type PhpEolDates } from "../lib/phpEol.ts"
 import { resolveUbuntuEolDates, refreshUbuntuEolDates, isUbuntuEol as isUbuntuEolWith, type UbuntuEolDates } from "../lib/ubuntuEol.ts"
 import { wpCoreBusy } from "./wpCoreJobs.tsx"
@@ -819,6 +819,14 @@ interface StoreValue extends DataState {
   enableLocalSync: () => void
   // SpinupWP account slug (from env/config) for building web deep links.
   accountSlug: string | null
+  // Open a page in the SpinupWP web app. Deep links need the account slug, which
+  // the API doesn't expose; with none saved this asks for it (slugPrompt) and
+  // opens the page once it's given, rather than landing on the dashboard root.
+  // Returns true when the page opened straight away.
+  openInSpinupWP: (build: (slug: string) => string) => boolean
+  slugPrompt: { build: (slug: string) => string } | null
+  setSlugPrompt: (p: { build: (slug: string) => string } | null) => void
+  saveAccountSlug: (slug: string) => void
   // The account (profile) this store is mounted for — see config.ts "Accounts".
   // Switching remounts the whole store, so these never change under a view.
   profileId: string
@@ -1032,6 +1040,24 @@ export function StoreProvider({ children }: { children: ReactNode }) {
     })
   }, [])
   const [profileLabel, setProfileLabel] = useState(cfgRef.current.profileLabel)
+  const [accountSlug, setAccountSlug] = useState(cfgRef.current.accountSlug)
+  const [slugPrompt, setSlugPrompt] = useState<{ build: (slug: string) => string } | null>(null)
+  const saveAccountSlug = useCallback((slug: string) => {
+    cfgRef.current.accountSlug = slug
+    setAccountSlug(slug)
+    void saveProfileConfig({ accountSlug: slug })
+  }, [])
+  const openInSpinupWP = useCallback(
+    (build: (slug: string) => string) => {
+      if (accountSlug) {
+        openUrl(build(accountSlug))
+        return true
+      }
+      setSlugPrompt({ build })
+      return false
+    },
+    [accountSlug],
+  )
   const [route, setRoute] = useState<Route>("dashboard")
   const [inputMode, setInputMode] = useState(false)
   const [overlayOpen, setOverlayOpen] = useState(false)
@@ -1250,7 +1276,7 @@ export function StoreProvider({ children }: { children: ReactNode }) {
   }, [])
 
   const probeOne = useCallback(
-    async (site: Site) => {
+    async (site: Site): Promise<boolean> => {
       const cache = cacheRef.current!
       setProbingIds((prev) => new Set(prev).add(site.id))
       setProbeErrors((prev) => {
@@ -1272,6 +1298,7 @@ export function StoreProvider({ children }: { children: ReactNode }) {
         next.delete(site.id)
         return next
       })
+      return outcome.ok
     },
     [servers],
   )
@@ -1305,6 +1332,41 @@ export function StoreProvider({ children }: { children: ReactNode }) {
 
   const isProbeStale = useCallback((site: Site) => cacheRef.current!.isStale(site.id, siteSignature(site)), [])
 
+  // Re-check WordPress versions that have gone old, whenever the site list loads
+  // (launch, and every `r`). Only sites already probed successfully: an unprobed
+  // site's stack is the user's call (`d`/`D`), and it may not be reachable at all.
+  // Each site gets at most one automatic attempt per max-age window, recorded in
+  // the cache so it holds across launches: a site whose probe now fails keeps its
+  // old reading (shown with its age) instead of being retried on every launch or
+  // refresh. Dev Mode's servers aren't real.
+  //
+  // Unattended SSH must not trip fail2ban, which bans the source IP after a few
+  // failed logins on one server. So each server's sites go one at a time, and the
+  // first failure on a server ends that server's run for this window: at most one
+  // failed login per server per day. Servers run in parallel, a few at a time.
+  useEffect(() => {
+    if (isDevMode() || servers.length === 0) return
+    const cache = cacheRef.current!
+    const now = Date.now()
+    const due = sites.filter((s) => isRecheckDue(cache.get(s.id), now))
+    if (due.length === 0) return
+    // Marked up front, all of them: a reload mid-run must not queue these again,
+    // and a server's sites after its first failure are skipped for the window too.
+    void cache.noteRecheck(due.map((s) => s.id))
+    const byServer = new Map<number, Site[]>()
+    for (const s of due) byServer.set(s.server_id, [...(byServer.get(s.server_id) ?? []), s])
+    const queues = [...byServer.values()]
+    let cursor = 0
+    const worker = async () => {
+      while (cursor < queues.length) {
+        for (const site of queues[cursor++]) if (!(await probeOne(site))) break
+      }
+    }
+    for (let i = 0; i < Math.min(3, queues.length); i++) void worker()
+    // probeOne changes identity with `servers`, which reloads together with
+    // `sites` — this should only re-run when the site list itself is reloaded.
+  }, [sites, servers])
+
   const isPhpEol = useCallback((version: string | null | undefined) => isPhpEolWith(version, phpEolDates), [phpEolDates])
   const offeredPhpVersions = useCallback(
     (current?: string | null) => offeredPhpVersionsWith(phpEolDates, current),
@@ -4575,7 +4637,11 @@ export function StoreProvider({ children }: { children: ReactNode }) {
     enableLocalSyncSite,
     setEnableLocalSyncSite,
     enableLocalSync,
-    accountSlug: cfgRef.current.accountSlug,
+    accountSlug,
+    openInSpinupWP,
+    slugPrompt,
+    setSlugPrompt,
+    saveAccountSlug,
     profileId: cfgRef.current.profileId,
     profileLabel,
     setProfileLabel,

package/src/ui/views/AccountSlugPrompt.tsx

@@ -0,0 +1,102 @@
+// Ask for the SpinupWP account slug the first time `w` needs it.
+//
+// Deep links into the web app are account-scoped (spinupwp.app/{slug}/sites/{id})
+// and the API doesn't expose the slug, so without one `w` could only open the
+// dashboard root. Instead of that, `w` opens this prompt: the user pastes the
+// slug (or any dashboard URL), it's saved to the current account, and the page
+// they asked for opens. Every later `w` goes straight there.
+
+import { useEffect, useState } from "react"
+import { useKeyboard } from "@opentui/react"
+import { theme } from "../../lib/theme.ts"
+import { openUrl } from "../../lib/open.ts"
+import { parseAccountSlug } from "../../lib/spinupweb.ts"
+import { Panel, Centered } from "../components.tsx"
+import { StatusBar } from "../StatusBar.tsx"
+import { useStore } from "../store.tsx"
+import { toast } from "../toast.ts"
+
+const INPUT_STYLE = { backgroundColor: theme.bgAlt, focusedBackgroundColor: theme.bgAlt, textColor: theme.text }
+
+export function AccountSlugPrompt() {
+  const { slugPrompt, setSlugPrompt, saveAccountSlug, setInputMode } = useStore()
+  const [value, setValue] = useState("")
+  const [error, setError] = useState<string | null>(null)
+
+  // The input owns the keyboard while this is open.
+  useEffect(() => {
+    setInputMode(true)
+    return () => setInputMode(false)
+  }, [setInputMode])
+
+  const close = () => setSlugPrompt(null)
+
+  const submit = () => {
+    if (!slugPrompt) return
+    const slug = parseAccountSlug(value)
+    if (!slug) {
+      setError(value.trim() ? "That doesn't look like a slug — paste the part after spinupwp.app/, or the whole URL." : "Paste your account slug, or Esc to cancel.")
+      return
+    }
+    saveAccountSlug(slug)
+    openUrl(slugPrompt.build(slug))
+    toast.success(`Saved “${slug}” — opening in SpinupWP…`)
+    close()
+  }
+
+  // Esc reaches us even with the input focused (it doesn't consume it).
+  useKeyboard((key) => {
+    if (key.name === "escape") close()
+  })
+
+  if (!slugPrompt) return null
+
+  return (
+    <box
+      style={{
+        position: "absolute",
+        top: 0,
+        left: 0,
+        width: "100%",
+        height: "100%",
+        flexDirection: "column",
+        backgroundColor: theme.bg,
+        zIndex: 300,
+      }}
+    >
+      <Centered>
+        <Panel title=" Open in SpinupWP " active>
+          <box style={{ flexDirection: "column", width: 68, paddingTop: 1, paddingBottom: 1 }}>
+            <text content="To open the right page, SpinupTUI needs your SpinupWP account slug:" fg={theme.text} wrapMode="none" />
+            <text content="the part after spinupwp.app/ in your dashboard's address." fg={theme.text} wrapMode="none" />
+            <box style={{ height: 1 }} />
+            <text content="SpinupWP's API doesn't provide it, so this asks once and saves it." fg={theme.textDim} wrapMode="none" />
+            <text content="Pasting any dashboard URL works too." fg={theme.textDim} wrapMode="none" />
+            <box style={{ height: 1 }} />
+            <text content="Account slug" fg={theme.accent} />
+            <input
+              focused
+              value={value}
+              placeholder="acme-agency"
+              onInput={(v: string) => {
+                setValue(v)
+                setError(null)
+              }}
+              onSubmit={submit}
+              style={INPUT_STYLE}
+            />
+            <box style={{ height: 1 }} />
+            {error ? <text content={"✕ " + error} fg={theme.bad} wrapMode="none" /> : <text content="Saved to this account in config.json." fg={theme.textFaint} wrapMode="none" />}
+          </box>
+        </Panel>
+      </Centered>
+      <StatusBar
+        hints={[
+          { key: "⏎", label: "save & open" },
+          { key: "esc", label: "cancel" },
+        ]}
+        showGlobal={false}
+      />
+    </box>
+  )
+}

package/src/ui/views/Browser.tsx

@@ -24,7 +24,7 @@ type Focus = "servers" | "sites"
 
 export function Browser({ rows }: { rows: number }) {
   const store = useStore()
-  const { servers, sitesForServer, route, inputMode, overlayOpen, setHealthServer, setWpInventorySite, runProbe, probes, accountSlug, setPhpUpgradeSite, phpUpgrades, setHttpsToggleSite, setPurgeCacheSite, setSiteOfflineSite, setGrantKeySite, setSudoConnectServer, isSudoConnected, setServerActionsServer, serverOps, setLocalLinkSite, openLocalTerminal, openLocalUrl, sshSite, setDnsInventoryServer, setNewServerSource, setNewServerOpen, setVanityServer, vanityJob, beginClone, isServerOsEol, setKumaSite, kumaConfigured, startKumaSetup, startVanityReseed, setDbSyncSite, localSync, localLinks, setDbBackupSite, setMediaFallbackSite, setEnableLocalSyncSite } = store
+  const { servers, sitesForServer, route, inputMode, overlayOpen, setHealthServer, setWpInventorySite, runProbe, probes, openInSpinupWP, setPhpUpgradeSite, phpUpgrades, setHttpsToggleSite, setPurgeCacheSite, setSiteOfflineSite, setGrantKeySite, setSudoConnectServer, isSudoConnected, setServerActionsServer, serverOps, setLocalLinkSite, openLocalTerminal, openLocalUrl, sshSite, setDnsInventoryServer, setNewServerSource, setNewServerOpen, setVanityServer, vanityJob, beginClone, isServerOsEol, setKumaSite, kumaConfigured, startKumaSetup, startVanityReseed, setDbSyncSite, localSync, localLinks, setDbBackupSite, setMediaFallbackSite, setEnableLocalSyncSite } = store
 
   const [serverIndex, setServerIndex] = useState(0)
   const [siteIndex, setSiteIndex] = useState(0)
@@ -283,11 +283,11 @@ export function Browser({ rows }: { rows: number }) {
         // Open the focused server/site in the SpinupWP web app — useful for
         // actions the API can't do (e.g. running a pending server upgrade).
         if (focus === "sites" && sites[siteIndex]) {
-          openUrl(siteWebUrl(sites[siteIndex].id, accountSlug))
-          setFlash(accountSlug ? "Opening in SpinupWP…" : "Set accountSlug for deep links — opening dashboard")
+          const id = sites[siteIndex].id
+          if (openInSpinupWP((slug) => siteWebUrl(id, slug))) setFlash("Opening in SpinupWP…")
         } else if (server) {
-          openUrl(serverWebUrl(server.id, accountSlug))
-          setFlash(accountSlug ? "Opening in SpinupWP…" : "Set accountSlug for deep links — opening dashboard")
+          const id = server.id
+          if (openInSpinupWP((slug) => serverWebUrl(id, slug))) setFlash("Opening in SpinupWP…")
         }
         setTimeout(() => setFlash(null), 2000)
         return

package/src/ui/views/Search.tsx

@@ -36,7 +36,7 @@ function score(haystack: string, q: string): number | null {
 
 export function Search({ rows }: { rows: number }) {
   const store = useStore()
-  const { servers, sites, serverById, sitesForServer, setInputMode, setRoute, route, overlayOpen, setHealthServer, setPhpUpgradeSite, setHttpsToggleSite, setPurgeCacheSite, setSiteOfflineSite, setServerActionsServer, accountSlug, localLinks, setLocalLinkSite, openLocalTerminal, openLocalUrl, sshSite, setDnsInventoryServer, setDbBackupSite, dbBackups, setDbSyncSite, dbSyncs, localSync, setMediaFallbackSite, beginClone, setSudoConnectServer, setKumaSite, kumaConfigured, startKumaSetup, startVanityReseed, setWpInventorySite, setGrantKeySite, runProbe, setEnableLocalSyncSite, setVanityServer, vanityJob } = store
+  const { servers, sites, serverById, sitesForServer, setInputMode, setRoute, route, overlayOpen, setHealthServer, setPhpUpgradeSite, setHttpsToggleSite, setPurgeCacheSite, setSiteOfflineSite, setServerActionsServer, openInSpinupWP, localLinks, setLocalLinkSite, openLocalTerminal, openLocalUrl, sshSite, setDnsInventoryServer, setDbBackupSite, dbBackups, setDbSyncSite, dbSyncs, localSync, setMediaFallbackSite, beginClone, setSudoConnectServer, setKumaSite, kumaConfigured, startKumaSetup, startVanityReseed, setWpInventorySite, setGrantKeySite, runProbe, setEnableLocalSyncSite, setVanityServer, vanityJob } = store
   const [query, setQuery] = useState("")
   const [selected, setSelected] = useState(0)
   // "query" = typing/filtering (input focused); "actions" = input blurred so the
@@ -101,9 +101,8 @@ export function Search({ rows }: { rows: number }) {
     openUrl((s.https?.enabled ? "https://" : "http://") + s.domain)
     flashMsg(`Opening ${s.domain}…`)
   }
-  const openInSpinup = (url: string) => {
-    openUrl(url)
-    flashMsg(accountSlug ? "Opening in SpinupWP…" : "Set accountSlug for deep links — opening dashboard")
+  const openInSpinup = (build: (slug: string) => string) => {
+    if (openInSpinupWP(build)) flashMsg("Opening in SpinupWP…")
   }
 
   useKeyboard((key) => {
@@ -141,8 +140,8 @@ export function Search({ rows }: { rows: number }) {
         if (current?.kind === "site") openSite(current.site)
         return
       case "w":
-        if (current?.kind === "site") openInSpinup(siteWebUrl(current.site.id, accountSlug))
-        else if (current?.kind === "server") openInSpinup(serverWebUrl(current.server.id, accountSlug))
+        if (current?.kind === "site") openInSpinup((slug) => siteWebUrl(current.site.id, slug))
+        else if (current?.kind === "server") openInSpinup((slug) => serverWebUrl(current.server.id, slug))
         return
       case "u":
         if (current?.kind === "site") setPhpUpgradeSite(current.site)

package/src/ui/views/ServerActions.tsx

@@ -19,7 +19,6 @@ import { Panel, Spinner, Centered } from "../components.tsx"
 import { StatusBar } from "../StatusBar.tsx"
 import { useStore } from "../store.tsx"
 import { moveSelection } from "../List.tsx"
-import { openUrl } from "../../lib/open.ts"
 import { serverWebUrl } from "../../lib/spinupweb.ts"
 import { toast } from "../toast.ts"
 import type { RebootInfo } from "../../lib/ssh.ts"
@@ -67,7 +66,7 @@ export function ServerActions() {
     rebootInfoLoading,
     rebootInfoErrors,
     loadRebootInfo,
-    accountSlug,
+    openInSpinupWP,
     refresh,
   } = store
 
@@ -161,8 +160,11 @@ export function ServerActions() {
           return
         case "w":
           if (upgradeRequired && server) {
-            openUrl(serverWebUrl(server.id, accountSlug))
-            toast.success(accountSlug ? "Opening in SpinupWP…" : "Set accountSlug for deep links — opening dashboard")
+            const id = server.id
+            if (openInSpinupWP((slug) => serverWebUrl(id, slug))) toast.success("Opening in SpinupWP…")
+            // No slug yet: the prompt takes over — close this overlay so its
+            // keys don't fire underneath.
+            else close()
           }
           return
       }

package/src/ui/views/Stacks.tsx

@@ -16,7 +16,8 @@
 import { useEffect, useMemo, useRef, useState } from "react"
 import { useKeyboard } from "@opentui/react"
 import { theme, statusColor, statusDot } from "../../lib/theme.ts"
-import { bar, truncate } from "../../lib/format.ts"
+import { bar, timeAgo, truncate } from "../../lib/format.ts"
+import { isVersionOld } from "../../lib/stackCache.ts"
 import { STACKS, effectiveStack, stackColor, type Stack } from "../../lib/stack.ts"
 import { phpSortKey } from "../../lib/phpEol.ts"
 import { probeKindColor, type ProbeKind } from "../../lib/probe.ts"
@@ -75,7 +76,7 @@ function nonWpSub(kind: ProbeKind | null, vanity: boolean): NonWpSub {
 export function Stacks({ rows }: { rows: number }) {
   const store = useStore()
   const wpCoreJobs = useWpCoreJobs()
-  const { sites, serverById, route, inputMode, overlayOpen, probes, probingIds, probeErrors, runProbe, runProbeMany, isProbeStale, isPhpEol, accountSlug, setPhpUpgradeSite, setBulkWpGroup, phpUpgrades, setHttpsToggleSite, setPurgeCacheSite, setSiteOfflineSite, setLocalLinkSite, openLocalTerminal, openLocalUrl, localLinks, setDiscoverOpen, setForgottenOpen, setForgottenStack, sshSite, setKumaSite } =
+  const { sites, serverById, route, inputMode, overlayOpen, probes, probingIds, probeErrors, runProbe, runProbeMany, isProbeStale, isPhpEol, openInSpinupWP, setPhpUpgradeSite, setBulkWpGroup, phpUpgrades, setHttpsToggleSite, setPurgeCacheSite, setSiteOfflineSite, setLocalLinkSite, openLocalTerminal, openLocalUrl, localLinks, setDiscoverOpen, setForgottenOpen, setForgottenStack, sshSite, setKumaSite } =
     store
 
   const [groupIndex, setGroupIndex] = useState(0)
@@ -218,8 +219,8 @@ export function Stacks({ rows }: { rows: number }) {
       case "w":
         // Open the selected site in the SpinupWP web app.
         if (focus === "sites" && groupSites[siteIndex]) {
-          openUrl(siteWebUrl(groupSites[siteIndex].id, accountSlug))
-          flashMsg(accountSlug ? "Opening in SpinupWP…" : "Set accountSlug for deep links — opening dashboard")
+          const id = groupSites[siteIndex].id
+          if (openInSpinupWP((slug) => siteWebUrl(id, slug))) flashMsg("Opening in SpinupWP…")
         }
         return
       case "d":
@@ -421,11 +422,23 @@ export function Stacks({ rows }: { rows: number }) {
                     ) : vanity ? (
                       <text content="Vanity Site" fg={selected ? theme.text : VANITY_COLOR} wrapMode="none" />
                     ) : cached ? (
-                      <text
-                        content={truncate(cached.result.label, 20) + (isProbeStale(s) ? "*" : "")}
-                        fg={probeKindColor(cached.result.kind, selected)}
-                        wrapMode="none"
-                      />
+                      <>
+                        <text
+                          content={truncate(cached.result.label, 20) + (isProbeStale(s) ? "*" : "")}
+                          fg={probeKindColor(cached.result.kind, selected)}
+                          wrapMode="none"
+                        />
+                        {/* A version past its re-check age (the background re-probe
+                            failed or hasn't run) says how old it is, so it can't
+                            pass for current. */}
+                        {isVersionOld(cached) && (
+                          <text
+                            content={" " + timeAgo(new Date(cached.detectedAt).toISOString()).replace(/ ago$/, "")}
+                            fg={selected ? theme.text : theme.warn}
+                            wrapMode="none"
+                          />
+                        )}
+                      </>
                     ) : errored ? (
                       <text content="probe failed" fg={selected ? theme.text : theme.bad} wrapMode="none" />
                     ) : (