tty7/src/ui/settings.rs

use gpui::{
    Animation, AnimationExt as _, AnyElement, App, Background, Context, Div, Entity,
    Focusable as _, FontWeight, Image, ImageFormat, KeyDownEvent, MouseButton, SharedString,
    Stateful, Subscription, Window, div, img, prelude::*, px, relative, rgb,
};
use gpui_component::InteractiveElementExt as _;
use gpui_component::button::{Button, ButtonCustomVariant, ButtonVariants as _};
use gpui_component::color_picker::{ColorPicker, ColorPickerState};
use gpui_component::input::{Input, InputEvent, InputState};
use gpui_component::link::Link;
use gpui_component::menu::{ContextMenuExt as _, DropdownMenu as _, PopupMenu, PopupMenuItem};
use gpui_component::notification::{Notification, NotificationType};
use gpui_component::select::{SearchableVec, Select, SelectEvent, SelectState};
use gpui_component::sidebar::{Sidebar, SidebarCollapsible, SidebarMenu, SidebarMenuItem};
use gpui_component::slider::{Slider, SliderState};
use gpui_component::{
    ActiveTheme as _, Disableable as _, Icon, IconName, IndexPath, Selectable as _, Sizable as _,
    WindowExt as _, h_flex, v_flex,
};
use std::cell::{Cell, RefCell};
use std::sync::Arc;

use uuid::Uuid;

use crate::core::config::{
    BellMode, Config, CursorStyle, LinkFileOpen, MouseZoomModifier, NewTabPosition, NotifyMode,
    TabBarPosition, UI_FONT_SIZE_DEFAULT, UpdateChannel, WindowBackdrop,
};
use crate::core::keychain::{
    CredentialRef, CredentialStore as _, OsCredentialStore, key_account_from_contents,
};
use crate::core::ssh_profile::{
    Algorithms, AuthMode, ForwardKind, ForwardRule, HostPort, SshProfile, to_connect_string,
};
use crate::daemon::protocol::{SshTestNeed, SshTestReport};
use crate::ui::app::{
    FONT_SIZE_STEP, LINE_HEIGHT_STEP, TILE_GLYPH_LINE, TILE_SIZE, TITLE_BAR_HEIGHT, ThemeEdit,
    Tty7App, UI_FONT_SIZE_STEP,
};
use crate::ui::host_ops::HostId;
use crate::ui::i18n::{L10nKey, t, t_fmt, t_plural};
use crate::ui::presets;
use crate::ui::rounding;
use crate::ui::rounding::RoundedCorners as _;

/// The settings nav, the SSH host list, the theme panel, and the padding each
/// page sets — the chrome a row has to share the window with.
const NAV_W: f32 = 220.;
const SSH_LIST_W: f32 = 280.;
const THEME_PANEL_W: f32 = 300.;
const SSH_DETAIL_PAD: f32 = 64.;
const PAGE_PAD: f32 = 80.;

/// The narrowest window these numbers have to hold for.
///
/// `ui::windows::MIN_SIZE` declares 720, but the settings window in the report
/// this file was fixed for measured 641pt: `window_min_size` governs dragging,
/// not the bounds a window opens with, so a remembered bound walked straight
/// under it. `ui::windows::at_least_min_size` now closes that path, and this
/// stays below it deliberately — a declared minimum is a claim about the code,
/// and this file would rather be laid out for the window that turns up.
const NARROWEST_WINDOW: f32 = 640.;

/// The narrowest each list is still itself: a nav item that still shows a label
/// beside its icon (40 of icon, gap and padding, then the longest label), a
/// host row that still shows a name, a theme card that is still a recognisable
/// picture of a theme.
///
/// The nav floor is sized for the longest nav label in *any* locale, not the
/// one the developer happens to be reading. `SidebarMenuItem` clips its label
/// rather than eliding it, so a floor that fits English cuts a glyph in half in
/// Chinese and Japanese: at 140 the zh-CN "窗口与标签页" lost the right half of
/// its last character. The widest is ja-JP "ウィンドウとタブ" — 8 full-width
/// kana beside the icon, which is 36 more than the 6-glyph Chinese label needs.
const NAV_W_MIN: f32 = 176.;
const SSH_LIST_W_MIN: f32 = 180.;
const THEME_PANEL_W_MIN: f32 = 240.;

/// The reading column every scrolled page caps itself at. Wider than this and
/// a description stops being a paragraph and becomes a line to scan across.
const READING_COLUMN: f32 = 640.;

/// How far the content scrollbar stays clear of the top and bottom of the
/// window. The page has no chrome of its own to stop at, so a bar drawn to the
/// last pixel runs into the window's rounded corner and looks cut off.
const SCROLLBAR_WINDOW_INSET: f32 = 12.;

/// What the page gets before any list does, and the floor it may be pushed to
/// when even that cannot be had — the numbers this file did not have.
///
/// Every list beside the page was a fixed width that never gave anything back,
/// so the page absorbed the entire shortfall. On a half-width window with the
/// theme panel open that ran all the way down: a Chinese description came out
/// one character per line, twenty-five lines tall, and the theme cards under it
/// were slivers clipped by the window edge.
///
/// `CONTENT_W` holds a stacked row's widest control — the 260px text fields —
/// with a description beside it that still reads as a paragraph. `CONTENT_MIN_W`
/// is not chosen at all: it is what the narrowest window in the wild leaves the
/// SSH page, the one that spends a second list, once both lists are standing on
/// their own floors. A control wider than it has to be able to shrink, which is
/// what `max_w_full` on the wrappers below is for.
const CONTENT_W: f32 = 420.;
const CONTENT_MIN_W: f32 = NARROWEST_WINDOW - NAV_W_MIN - SSH_LIST_W_MIN - SSH_DETAIL_PAD;

/// What the settings page is made of at a given window width.
#[derive(Clone, Copy, PartialEq, Debug)]
struct SettingsColumns {
    nav: f32,
    /// Zero off the SSH page.
    ssh_list: f32,
    /// The width to *draw* the theme panel at, whether it is taking a column or
    /// covering one — zero only when it is closed.
    theme_panel: f32,
    /// The panel no longer fits beside the page, so it lays itself over the
    /// page instead of taking width from it. The panel is a temporary layer
    /// over one choice; the page underneath is what the window is for.
    panel_overlays: bool,
}

/// Hand every list its full width, then take the shortfall back from all of
/// them at once — each in proportion to what it has to spare — until the page
/// between them reaches `CONTENT_W`. Once every list is standing on its own
/// floor the page takes whatever is left, which from `NARROWEST_WINDOW` up is
/// never less than `CONTENT_MIN_W`. The theme panel leaves the row altogether
/// rather than let it come to that.
///
/// Every width here is one this row can actually have, so the columns always
/// add up to the window. That is deliberate: the fix for a page squeezed to
/// nothing is not a `min_w` the row cannot honour — a floor a flex row cannot
/// meet does not push back, it overflows, and overflow here means content
/// painted off the edge of the window, which is the other half of this bug.
fn settings_columns(
    section: SettingsSection,
    theme_panel_open: bool,
    viewport: f32,
) -> SettingsColumns {
    let ssh = matches!(section, SettingsSection::Ssh);
    // The panel belongs to Appearance; a stale open flag on any other page is
    // not a column, the same way `render_settings` does not draw one.
    let theme_panel_open = theme_panel_open && matches!(section, SettingsSection::Appearance);
    let pad = if ssh { SSH_DETAIL_PAD } else { PAGE_PAD };
    let page = CONTENT_W + pad;

    // Even with the nav and the panel both at their floors there has to be a
    // readable page left between them. Below that width the panel stops being a
    // column — this is the one place the *floor* is the test, because the panel
    // leaving the row is what buys the page its preferred width back.
    let panel_overlays =
        theme_panel_open && viewport - NAV_W_MIN - THEME_PANEL_W_MIN - PAGE_PAD < CONTENT_MIN_W;
    let beside = theme_panel_open && !panel_overlays;

    let mut nav = NAV_W;
    let mut ssh_list = only_when(ssh, SSH_LIST_W);
    let mut theme_panel = only_when(beside, THEME_PANEL_W);
    let (nav_slack, list_slack, panel_slack) = (
        NAV_W - NAV_W_MIN,
        only_when(ssh, SSH_LIST_W - SSH_LIST_W_MIN),
        only_when(beside, THEME_PANEL_W - THEME_PANEL_W_MIN),
    );
    let slack = nav_slack + list_slack + panel_slack;
    let short = (nav + ssh_list + theme_panel + page - viewport).max(0.);
    if short > 0. && slack > 0. {
        let give = (short / slack).min(1.);
        nav -= nav_slack * give;
        ssh_list -= list_slack * give;
        theme_panel -= panel_slack * give;
    }
    if panel_overlays {
        // Covering the page, not replacing it: leave a strip of the page in
        // view so the panel reads as something laid on top and dismissible.
        theme_panel = THEME_PANEL_W
            .min(viewport - nav - CONTENT_MIN_W / 2.)
            .max(THEME_PANEL_W_MIN);
    }
    SettingsColumns {
        nav: nav.round(),
        ssh_list: ssh_list.round(),
        theme_panel: theme_panel.round(),
        panel_overlays,
    }
}

/// What a row on this page really has to lay out in.
///
/// The nav is always in front of it; the SSH page puts its host list there too,
/// the theme panel takes another slice of Appearance for as long as it is open
/// *and* still fits beside it, and only the scrolled pages cap the reading
/// column.
fn settings_row_width(
    section: SettingsSection,
    theme_panel_open: bool,
    viewport: f32,
    ui_scale: f32,
) -> f32 {
    let cols = settings_columns(section, theme_panel_open, viewport);
    let panel = only_when(!cols.panel_overlays, cols.theme_panel);
    match section {
        SettingsSection::Ssh => (viewport - cols.nav - cols.ssh_list - SSH_DETAIL_PAD).max(0.),
        _ => (viewport - cols.nav - panel - PAGE_PAD).clamp(0., READING_COLUMN * ui_scale),
    }
}

fn only_when(on: bool, w: f32) -> f32 {
    if on { w } else { 0. }
}

/// How much wider every piece of text on this page is than the px thresholds
/// below assume.
///
/// Those thresholds are widths a *label* needs, measured at the default
/// interface font. The interface has a font size of its own and it goes up to
/// 24 — half as wide again — while a slider or a text field beside that label
/// stays the px width it was built at. Without this the row that has to stack
/// first is the one that never does.
fn ui_scale(cx: &App) -> f32 {
    cx.global::<Config>().ui_font_size / UI_FONT_SIZE_DEFAULT
}

/// How wide a control in the right-hand column is.
///
/// One number for the whole of settings, across every sub-page. It used to be
/// three: text fields took 260, sliders 240 and dropdowns 180, each picked
/// where it was written. Every row still ended on the same right edge, so on
/// any one page the difference read as controls that had been aligned
/// carelessly rather than as controls of different kinds — and moving between
/// Appearance and Terminal, where the mix differs, the column visibly changed
/// width. 260 is the widest of the three because it is the one with a
/// requirement behind it: a font name or a shell path has to be readable
/// without being truncated.
const FIELD_W: f32 = 260.;

/// The host editor's own two numbers: the column its labels stand in, and how
/// wide a field beside one grows to. The label column fits the longest field
/// name in any locale at the default interface font; the field is wider than
/// [`FIELD_W`] because the form is what a path, a key file and a hostname are
/// actually typed into.
const SSH_LABEL_W: f32 = 104.;
const FORM_FIELD_W: f32 = 320.;

/// Width a host-editor row needs before its label column and its field fit
/// side by side. Under it the label goes above the field instead, which is
/// what the narrowest window leaves the SSH page room for.
const STACK_FIELD_ROW_BELOW: f32 = 420.;

/// Width a settings row needs before its label and its control fit side by
/// side: a [`FIELD_W`] control, the `gap_8` between them, and enough left for a
/// description to read as prose rather than as a column of words.
const STACK_ROW_BELOW: f32 = 500.;

/// Width a port-forwarding rule needs before its kind switch, its two host:port
/// pairs, its description and its remove button all fit on one line: about 580
/// with every field at its floor, rounded up. Past this the rule takes two
/// lines instead of running off the page.
const SPLIT_FORWARD_ROW_BELOW: f32 = 620.;

/// And the width below which even `bind → target` is more than one line holds:
/// two host fields at their narrow floor, two ports and the arrow come to about
/// 310, which is more than `CONTENT_MIN_W`. The SSH page reaches this on the
/// window the report came from, so the two ends take a line each.
const STACK_FORWARD_ENDS_BELOW: f32 = 340.;

/// The scrollback presets, and the labels their cells carry, in draw order.
/// One list each so the number a cell writes is the number it shows —
/// `preset_row_labels_name_the_value_they_write` holds the two together.
const SCROLLBACK_BUCKETS: [usize; 3] = [1_000, 10_000, 100_000];
const SCROLLBACK_LABELS: [&str; 3] = ["1,000", "10,000", "100,000"];

/// The notify-threshold presets. The last one is drawn in minutes, which is
/// why these labels are written out rather than derived.
const NOTIFY_THRESHOLD_BUCKETS: [u64; 4] = [5, 10, 30, 60];
const NOTIFY_THRESHOLD_LABELS: [&str; 4] = ["5s", "10s", "30s", "1m"];

/// Which preset a live value *is*, and — when it is none of them — the label
/// for the trailing cell that names it.
///
/// The match is exact on purpose. Matching a *range* is what made
/// `scrollback_limit: 5000` light up "10,000" and `notify_threshold_secs: 20`
/// light up "30s", with no digits anywhere on the row to correct the
/// impression, and clicking the cell that was wrongly lit overwrote the real
/// value with the bucket's (#550).
fn preset_choice<T: Copy + PartialEq>(
    buckets: &[T],
    value: T,
    name: impl FnOnce(T) -> String,
) -> (Option<usize>, Option<String>) {
    match buckets.iter().position(|&b| b == value) {
        Some(ix) => (Some(ix), None),
        None => (
            None,
            Some(t_fmt(
                L10nKey::SettingsCustomValue,
                &[("value", &name(value))],
            )),
        ),
    }
}

/// `50000` beside cells reading `10,000` and `100,000` looks like a different
/// kind of number, so the custom cell groups its digits the way the presets
/// next to it are written. Every locale tty7 ships writes these counts the
/// same way — the preset labels themselves are one set of literals for all
/// three.
fn group_thousands(n: usize) -> String {
    let digits = n.to_string();
    let mut out = String::with_capacity(digits.len() + digits.len() / 3);
    for (i, c) in digits.char_indices() {
        if i > 0 && (digits.len() - i) % 3 == 0 {
            out.push(',');
        }
        out.push(c);
    }
    out
}

fn settings_row_id(label: &str, _desc: &str) -> SharedString {
    let id = settings_search_entries()
        .iter()
        .find(|entry| t(entry.title) == label)
        .map(|entry| format!("{:?}", entry.title))
        .or_else(|| {
            L10nKey::ALL
                .iter()
                .find(|&&key| t(key) == label)
                .map(|key| format!("{key:?}"))
        })
        .unwrap_or_else(|| label.to_string());
    SharedString::from(format!("settings-row-{id}"))
}

fn settings_header_id(title: &str) -> SharedString {
    let id = L10nKey::ALL
        .iter()
        .find(|&&key| t(key) == title)
        .map(|key| format!("{key:?}"))
        .unwrap_or_else(|| title.to_string());
    SharedString::from(format!("settings-header-{id}"))
}

/// Whether the reset control has any effective override to clear on this
/// platform. A synchronized Windows backdrop remains stored elsewhere but is
/// inert here, so only platforms that expose it locally may count it.
fn window_overrides_active(config: &Config, backdrop_is_local: bool) -> bool {
    config.window_opacity.is_some()
        || config.window_blur.is_some()
        || (backdrop_is_local && config.window_backdrop != WindowBackdrop::Auto)
}

#[derive(Clone, Copy, PartialEq, Eq)]
pub(crate) enum SettingsSection {
    General,
    Appearance,
    Terminal,
    KeyboardMouse,
    Ssh,
    Agents,
    WindowTabs,
    Keybindings,
    About,
}

impl SettingsSection {
    pub(crate) const ALL: [SettingsSection; 8] = [
        SettingsSection::General,
        SettingsSection::Appearance,
        SettingsSection::Terminal,
        SettingsSection::KeyboardMouse,
        SettingsSection::WindowTabs,
        SettingsSection::Ssh,
        SettingsSection::Agents,
        SettingsSection::About,
    ];

    pub(crate) fn navigation_section(self) -> Self {
        match self {
            Self::Keybindings => Self::KeyboardMouse,
            other => other,
        }
    }

    fn title(self) -> L10nKey {
        match self {
            Self::General => L10nKey::SettingsNavGeneral,
            Self::Appearance => L10nKey::SettingsNavAppearance,
            Self::Terminal => L10nKey::SettingsNavTerminal,
            Self::KeyboardMouse => L10nKey::SettingsNavInput,
            Self::Ssh => L10nKey::SettingsNavSsh,
            Self::Agents => L10nKey::SettingsNavAgents,
            Self::WindowTabs => L10nKey::SettingsNavWindowTabs,
            Self::Keybindings => L10nKey::SettingsNavKeybindings,
            Self::About => L10nKey::SettingsNavAbout,
        }
    }

    fn icon(self) -> Icon {
        Icon::new(match self {
            Self::General => IconName::Settings2,
            Self::Appearance => IconName::Palette,
            Self::Terminal => IconName::SquareTerminal,
            Self::KeyboardMouse | Self::Keybindings => IconName::CaseSensitive,
            Self::Ssh => IconName::Globe,
            Self::Agents => IconName::Bot,
            Self::WindowTabs => IconName::WindowRestore,
            Self::About => return Icon::empty().path("icons/circle-info.svg"),
        })
    }

    fn profile_label(self) -> &'static str {
        match self {
            SettingsSection::General => "settings:general",
            SettingsSection::Appearance => "settings:appearance",
            SettingsSection::Terminal => "settings:terminal",
            SettingsSection::KeyboardMouse => "settings:keyboard-mouse",
            SettingsSection::Ssh => "settings:ssh",
            SettingsSection::Agents => "settings:agents",
            SettingsSection::WindowTabs => "settings:window-tabs",
            SettingsSection::Keybindings => "settings:keybindings",
            SettingsSection::About => "settings:about",
        }
    }
}

struct SearchEntry {
    section: SettingsSection,
    title: L10nKey,
    keywords: L10nKey,
}

use crate::core::update::{localized_update_install_hint, localized_update_phase};

fn settings_search_entries() -> &'static [SearchEntry] {
    use L10nKey::*;
    use SettingsSection::*;
    &[
        SearchEntry {
            section: Appearance,
            title: SettingsUiFontSize,
            keywords: SettingsSearchFontSizeKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: SettingsPerPaneHistory,
            keywords: SettingsSearchHistorySearchKeywords,
        },
        SearchEntry {
            section: KeyboardMouse,
            title: SettingsMouseZoom,
            keywords: SettingsSearchScrollSpeedKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: SettingsCustomPath,
            keywords: SettingsSearchStartInKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: SettingsOpenFilesCommand,
            keywords: SettingsSearchOpenFilesWithKeywords,
        },
        #[cfg(target_os = "macos")]
        SearchEntry {
            section: General,
            title: SettingsDefaultTerminal,
            keywords: SettingsSearchAboutKeywords,
        },
        SearchEntry {
            section: General,
            title: SettingsServer,
            keywords: SettingsSearchAboutKeywords,
        },
        SearchEntry {
            section: General,
            title: SettingsLanguage,
            keywords: SettingsSearchLanguageKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsThemeIntroTitle,
            keywords: SettingsSearchThemeKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsSyncWithSystem,
            keywords: SettingsSearchSyncWithSystemKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsLegiblePalette,
            keywords: SettingsSearchLegiblePaletteKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsCustomThemes,
            keywords: SettingsSearchCustomThemesKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsOpacity,
            keywords: SettingsSearchOpacityKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsBlur,
            keywords: SettingsSearchBlurKeywords,
        },
        #[cfg(target_os = "windows")]
        SearchEntry {
            section: Appearance,
            title: SettingsBackdrop,
            keywords: SettingsSearchBackdropKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsDimInactivePanes,
            keywords: SettingsSearchDimInactivePanesKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsFontSize,
            keywords: SettingsSearchFontSizeKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsUiFontFamily,
            keywords: SettingsSearchUiFontFamilyKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsLineHeight,
            keywords: SettingsSearchLineHeightKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsFontFamily,
            keywords: SettingsSearchFontFamilyKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsBoldFont,
            keywords: SettingsSearchBoldFontKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsItalicFont,
            keywords: SettingsSearchItalicFontKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsFontLigatures,
            keywords: SettingsSearchFontLigaturesKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsCursorShape,
            keywords: SettingsSearchCursorShapeKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsCursorBlink,
            keywords: SettingsSearchCursorBlinkKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsAnsiColors,
            keywords: SettingsSearchAnsiColorsKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsBackgroundImage,
            keywords: SettingsSearchBackgroundImageKeywords,
        },
        SearchEntry {
            section: Appearance,
            title: SettingsImageOpacity,
            keywords: SettingsSearchImageOpacityKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: SettingsProgram,
            keywords: SettingsSearchProgramKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: SettingsArguments,
            keywords: SettingsSearchArgumentsKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: SettingsStartIn,
            keywords: SettingsSearchStartInKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: SettingsScrollback,
            keywords: SettingsSearchScrollbackKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: SettingsScrollSpeed,
            keywords: SettingsSearchScrollSpeedKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: SettingsSmoothScroll,
            keywords: SettingsSearchSmoothScrollKeywords,
        },
        SearchEntry {
            section: KeyboardMouse,
            title: SettingsFocusFollowsMouse,
            keywords: SettingsSearchFocusFollowsMouseKeywords,
        },
        SearchEntry {
            section: KeyboardMouse,
            title: SettingsHideMouseWhileTyping,
            keywords: SettingsSearchHideMouseWhileTypingKeywords,
        },
        SearchEntry {
            section: KeyboardMouse,
            title: SettingsReportMouseToApps,
            keywords: SettingsSearchReportMouseToAppsKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: SettingsTerminalBell,
            keywords: SettingsSearchTerminalBellKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: DetectUrls,
            keywords: SettingsSearchDetectUrlsKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: ForwardSshLoopbackLinks,
            keywords: SettingsSearchForwardSshLoopbackLinksKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: OpenFilesWith,
            keywords: SettingsSearchOpenFilesWithKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: SettingsPromptEditor,
            keywords: SettingsSearchPromptEditorKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: SettingsTabCompletion,
            keywords: SettingsSearchTabCompletionKeywords,
        },
        SearchEntry {
            section: Terminal,
            title: SettingsHistorySearch,
            keywords: SettingsSearchHistorySearchKeywords,
        },
        #[cfg(target_os = "macos")]
        SearchEntry {
            section: KeyboardMouse,
            title: SettingsOptionAsMeta,
            keywords: SettingsSearchOptionAsMetaKeywords,
        },
        SearchEntry {
            section: KeyboardMouse,
            title: SettingsSmartSelection,
            keywords: SettingsSearchSmartSelectionKeywords,
        },
        SearchEntry {
            section: KeyboardMouse,
            title: SettingsCopyOnSelect,
            keywords: SettingsSearchCopyOnSelectKeywords,
        },
        SearchEntry {
            section: KeyboardMouse,
            title: SettingsTrimTrailingSpaces,
            keywords: SettingsSearchTrimTrailingSpacesKeywords,
        },
        SearchEntry {
            section: Ssh,
            title: SettingsHosts,
            keywords: SettingsSearchHostsKeywords,
        },
        SearchEntry {
            section: Ssh,
            title: SettingsVerifyHostKeys,
            keywords: SettingsSearchVerifyHostKeysKeywords,
        },
        SearchEntry {
            section: Ssh,
            title: WarnBeforeClosing,
            keywords: SettingsSearchWarnBeforeClosingKeywords,
        },
        SearchEntry {
            section: Ssh,
            title: SettingsPortForwarding,
            keywords: SettingsSearchPortForwardingKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentClaudeCode,
            keywords: SettingsSearchClaudeCodeKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentCodex,
            keywords: SettingsSearchCodexKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentTraeCode,
            keywords: SettingsSearchTraeCodeKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentCopilotCli,
            keywords: SettingsSearchCopilotCliKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentOpencode,
            keywords: SettingsSearchOpencodeKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentPi,
            keywords: SettingsSearchPiKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentGrokBuild,
            keywords: SettingsSearchGrokBuildKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentOhMyPi,
            keywords: SettingsSearchOhMyPiKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentGemini,
            keywords: SettingsSearchGeminiKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentDroid,
            keywords: SettingsSearchDroidKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentQwenCode,
            keywords: SettingsSearchQwenCodeKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentGoose,
            keywords: SettingsSearchGooseKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentKimiCode,
            keywords: SettingsSearchKimiCodeKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentQoderCLI,
            keywords: SettingsSearchQoderCLIKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsAgentCrush,
            keywords: SettingsSearchCrushKeywords,
        },
        SearchEntry {
            section: General,
            title: SettingsStartupWindow,
            keywords: SettingsSearchStartupWindowKeywords,
        },
        SearchEntry {
            section: General,
            title: SettingsRememberWindowSize,
            keywords: SettingsSearchRememberWindowSizeKeywords,
        },
        SearchEntry {
            section: General,
            title: SettingsRestoreLastLayout,
            keywords: SettingsSearchRestoreLastLayoutKeywords,
        },
        SearchEntry {
            section: General,
            title: SettingsShowTrayIcon,
            keywords: SettingsSearchShowTrayIconKeywords,
        },
        SearchEntry {
            section: WindowTabs,
            title: SettingsNewTabPosition,
            keywords: SettingsSearchNewTabPositionKeywords,
        },
        SearchEntry {
            section: WindowTabs,
            title: SettingsTabBarPosition,
            keywords: SettingsSearchTabBarPositionKeywords,
        },
        SearchEntry {
            section: WindowTabs,
            title: SettingsSidebarGrouping,
            keywords: SettingsSearchSidebarGroupingKeywords,
        },
        SearchEntry {
            section: WindowTabs,
            title: SettingsDiffPreviewFromCounts,
            keywords: SettingsSearchDiffPreviewFromCountsKeywords,
        },
        SearchEntry {
            section: General,
            title: SettingsNotifyOnCommandFinish,
            keywords: SettingsSearchNotifyOnCommandFinishKeywords,
        },
        SearchEntry {
            section: General,
            title: SettingsNotifyThreshold,
            keywords: SettingsSearchNotifyThresholdKeywords,
        },
        SearchEntry {
            section: KeyboardMouse,
            title: SettingsSearchKeybindingsTitle,
            keywords: SettingsSearchKeybindingsKeywords,
        },
        SearchEntry {
            section: About,
            title: SettingsNavAbout,
            keywords: SettingsSearchAboutKeywords,
        },
        SearchEntry {
            section: General,
            title: SettingsAppHttpProxy,
            keywords: SettingsSearchAppHttpProxyKeywords,
        },
        SearchEntry {
            section: General,
            title: SettingsUpdateChannel,
            keywords: SettingsSearchUpdateChannelKeywords,
        },
        SearchEntry {
            section: General,
            title: SettingsCheckUpdatesOnLaunch,
            keywords: SettingsSearchCheckUpdatesOnLaunchKeywords,
        },
        SearchEntry {
            section: General,
            title: SettingsAutoDownload,
            keywords: SettingsSearchAutoDownloadKeywords,
        },
        SearchEntry {
            section: Agents,
            title: SettingsInstallCliOnPath,
            keywords: SettingsSearchCommandLineToolKeywords,
        },
    ]
}

impl SearchEntry {
    fn config_key(&self) -> &'static str {
        match self.title {
            L10nKey::SettingsDimInactivePanes => "dim_inactive_panes",
            L10nKey::SettingsCursorBlink => "cursor_blink",
            L10nKey::SettingsCursorShape => "cursor_style",
            L10nKey::SettingsScrollback => "scrollback_limit",
            L10nKey::SettingsNewTabPosition => "new_tab_position",
            L10nKey::SettingsTabBarPosition => "tab_bar_position",
            L10nKey::SettingsSidebarGrouping => "sidebar_grouping",
            L10nKey::SettingsDiffPreviewFromCounts => "sidebar_diff_preview",
            L10nKey::SettingsNotifyOnCommandFinish => "notify_on_command_finish",
            L10nKey::SettingsNotifyThreshold => "notify_threshold_secs",
            L10nKey::SettingsTerminalBell => "bell",
            L10nKey::SettingsRestoreLastLayout => "restore_session",
            L10nKey::SettingsPerPaneHistory => "per_pane_history",
            L10nKey::SettingsShowTrayIcon => "show_tray_icon",
            L10nKey::SettingsOptionAsMeta => "macos_option_as_alt",
            L10nKey::SettingsHideMouseWhileTyping => "mouse_hide_while_typing",
            L10nKey::SettingsFocusFollowsMouse => "focus_follows_mouse",
            L10nKey::SettingsReportMouseToApps => "mouse_reporting",
            L10nKey::SettingsScrollSpeed => "mouse_scroll_multiplier",
            L10nKey::SettingsSmoothScroll => "smooth_scroll",
            L10nKey::SettingsMouseZoom => "mouse_zoom_modifier",
            L10nKey::SettingsTrimTrailingSpaces => "clipboard_trim_trailing_spaces",
            L10nKey::SettingsCopyOnSelect => "copy_on_select",
            L10nKey::SettingsSmartSelection => "smart_select",
            L10nKey::SettingsPromptEditor => "prompt_editor",
            L10nKey::SettingsTabCompletion => "tab_completion",
            L10nKey::SettingsHistorySearch => "history_search",
            L10nKey::SettingsStartupWindow => "startup_mode",
            L10nKey::SettingsRememberWindowSize => "remember_window_size",
            L10nKey::SettingsCheckUpdatesOnLaunch => "check_for_updates",
            L10nKey::SettingsAutoDownload => "auto_download_updates",
            L10nKey::SettingsUpdateChannel => "update_channel",
            L10nKey::DetectUrls => "link_url",
            L10nKey::ForwardSshLoopbackLinks => "ssh_loopback_forward",
            L10nKey::SettingsVerifyHostKeys => "verify_host_keys",
            L10nKey::WarnBeforeClosing => "ssh_warn_on_close",
            L10nKey::SettingsLanguage => "gui_language",
            L10nKey::SettingsProgram => "shell.program",
            L10nKey::SettingsArguments => "shell.args",
            L10nKey::SettingsStartIn => "working_directory.strategy",
            L10nKey::SettingsCustomPath => "working_directory.path",
            L10nKey::SettingsFontSize => "font_size",
            L10nKey::SettingsUiFontSize => "ui_font_size",
            L10nKey::SettingsLineHeight => "line_height",
            L10nKey::SettingsFontFamily => "font_family",
            L10nKey::SettingsBoldFont => "font_family_bold",
            L10nKey::SettingsItalicFont => "font_family_italic",
            L10nKey::SettingsUiFontFamily => "ui_font_family",
            L10nKey::SettingsFontLigatures => "font_features",
            L10nKey::SettingsOpacity => "window_opacity",
            L10nKey::SettingsBlur => "window_blur",
            L10nKey::SettingsBackdrop => "window_backdrop",
            L10nKey::SettingsSyncWithSystem => "theme_follow_system",
            L10nKey::SettingsLegiblePalette => "theme_legible_palette",
            L10nKey::SettingsThemeIntroTitle => "theme_preset",
            L10nKey::SettingsAppHttpProxy => "http_proxy",
            L10nKey::SettingsOpenFilesCommand => "link_file_command",
            L10nKey::OpenFilesWith => "link_file_open",
            L10nKey::SettingsInstallCliOnPath => "install_cli_on_path",
            L10nKey::SettingsSearchKeybindingsTitle => "keybindings",
            L10nKey::SettingsHosts => "ssh_profiles",
            _ => "",
        }
    }
    fn description(&self) -> &'static str {
        match self.title {
            L10nKey::SettingsUiFontSize => t(L10nKey::SettingsUiFontSizeDesc),
            L10nKey::SettingsMouseZoom => t(L10nKey::SettingsMouseZoomDesc),
            L10nKey::SettingsCustomPath => t(L10nKey::SettingsCustomPathDesc),
            L10nKey::SettingsDefaultTerminal => t(L10nKey::SettingsDefaultTerminalDesc),
            L10nKey::SettingsServer => t(L10nKey::SettingsServerDesc),
            L10nKey::SettingsLanguage => t(L10nKey::SettingsLanguageDesc),
            L10nKey::SettingsSyncWithSystem => t(L10nKey::SettingsSyncWithSystemDesc),
            L10nKey::SettingsLegiblePalette => t(L10nKey::SettingsLegiblePaletteDesc),
            L10nKey::SettingsOpacity => t(L10nKey::SettingsOpacityDesc),
            L10nKey::SettingsBlur => t(L10nKey::SettingsBlurDesc),
            L10nKey::SettingsBackdrop => t(L10nKey::SettingsBackdropDesc),
            L10nKey::SettingsDimInactivePanes => t(L10nKey::SettingsDimInactivePanesDesc),
            L10nKey::SettingsFontSize => t(L10nKey::SettingsFontSizeDesc),
            L10nKey::SettingsUiFontFamily => t(L10nKey::SettingsUiFontFamilyDesc),
            L10nKey::SettingsLineHeight => t(L10nKey::SettingsLineHeightDesc),
            L10nKey::SettingsFontFamily => t(L10nKey::SettingsFontFamilyDesc),
            L10nKey::SettingsBoldFont => t(L10nKey::SettingsBoldFontDesc),
            L10nKey::SettingsItalicFont => t(L10nKey::SettingsItalicFontDesc),
            L10nKey::SettingsFontLigatures => t(L10nKey::SettingsFontLigaturesDesc),
            L10nKey::SettingsCursorShape => t(L10nKey::SettingsCursorShapeDesc),
            L10nKey::SettingsCursorBlink => t(L10nKey::SettingsCursorBlinkDesc),
            L10nKey::SettingsBackgroundImage => t(L10nKey::SettingsBackgroundImageDesc),
            L10nKey::SettingsImageOpacity => t(L10nKey::SettingsImageOpacityDesc),
            L10nKey::SettingsProgram => t(L10nKey::SettingsProgramDesc),
            L10nKey::SettingsArguments => t(L10nKey::SettingsArgumentsDesc),
            L10nKey::SettingsStartIn => t(L10nKey::SettingsStartInDesc),
            L10nKey::SettingsScrollback => t(L10nKey::SettingsScrollbackDesc),
            L10nKey::SettingsScrollSpeed => t(L10nKey::SettingsScrollSpeedDesc),
            L10nKey::SettingsSmoothScroll => t(L10nKey::SettingsSmoothScrollDesc),
            L10nKey::SettingsFocusFollowsMouse => t(L10nKey::SettingsFocusFollowsMouseDesc),
            L10nKey::SettingsHideMouseWhileTyping => t(L10nKey::SettingsHideMouseWhileTypingDesc),
            L10nKey::SettingsReportMouseToApps => t(L10nKey::SettingsReportMouseToAppsDesc),
            L10nKey::SettingsTerminalBell => t(L10nKey::SettingsTerminalBellDesc),
            L10nKey::SettingsPromptEditor => t(L10nKey::SettingsPromptEditorDesc),
            L10nKey::SettingsTabCompletion => t(L10nKey::SettingsTabCompletionDesc),
            L10nKey::SettingsHistorySearch => t(L10nKey::SettingsHistorySearchDesc),
            L10nKey::SettingsOptionAsMeta => t(L10nKey::SettingsOptionAsMetaDesc),
            L10nKey::SettingsSmartSelection => t(L10nKey::SettingsSmartSelectionDesc),
            L10nKey::SettingsCopyOnSelect => t(L10nKey::SettingsCopyOnSelectDesc),
            L10nKey::SettingsTrimTrailingSpaces => t(L10nKey::SettingsTrimTrailingSpacesDesc),
            L10nKey::SettingsVerifyHostKeys => t(L10nKey::SettingsVerifyHostKeysDesc),
            L10nKey::SettingsStartupWindow => t(L10nKey::SettingsStartupWindowDesc),
            L10nKey::SettingsRememberWindowSize => t(L10nKey::SettingsRememberWindowSizeDesc),
            L10nKey::SettingsRestoreLastLayout => t(L10nKey::SettingsRestoreLastLayoutDesc),
            L10nKey::SettingsShowTrayIcon => t(L10nKey::SettingsShowTrayIconDesc),
            L10nKey::SettingsNewTabPosition => t(L10nKey::SettingsNewTabPositionDesc),
            L10nKey::SettingsTabBarPosition => t(L10nKey::SettingsTabBarPositionDesc),
            L10nKey::SettingsSidebarGrouping => t(L10nKey::SettingsSidebarGroupingDesc),
            L10nKey::SettingsDiffPreviewFromCounts => t(L10nKey::SettingsDiffPreviewFromCountsDesc),
            L10nKey::SettingsNotifyOnCommandFinish => t(L10nKey::SettingsNotifyOnCommandFinishDesc),
            L10nKey::SettingsNotifyThreshold => t(L10nKey::SettingsNotifyThresholdDesc),
            L10nKey::SettingsAppHttpProxy => t(L10nKey::SettingsAppHttpProxyDesc),
            L10nKey::SettingsUpdateChannel => t(L10nKey::SettingsUpdateChannelDesc),
            L10nKey::SettingsAutoDownload => t(L10nKey::SettingsAutoDownloadDesc),
            L10nKey::SettingsPerPaneHistory => t(L10nKey::SettingsPerPaneHistoryDescription),
            L10nKey::DetectUrls => t(L10nKey::SettingsDetectUrlsDesc),
            L10nKey::ForwardSshLoopbackLinks => t(L10nKey::SettingsForwardSshLoopbackLinksDesc),
            L10nKey::OpenFilesWith => t(L10nKey::SettingsOpenFilesModeDesc),
            _ => "",
        }
    }
    fn rank(&self, query: &str) -> u8 {
        let label = t(self.title).to_lowercase();
        let key = self.config_key();
        if label == query || key == query {
            0
        } else if label.starts_with(query) || (!key.is_empty() && key.starts_with(query)) {
            1
        } else if t(self.keywords)
            .split_whitespace()
            .any(|word| word.eq_ignore_ascii_case(query))
        {
            2
        } else {
            3
        }
    }
    fn modified(&self, cfg: &Config) -> bool {
        let defaults = Config::default();
        match self.title {
            L10nKey::SettingsDimInactivePanes => {
                cfg.dim_inactive_panes != defaults.dim_inactive_panes
            }
            L10nKey::SettingsCursorBlink => cfg.cursor_blink != defaults.cursor_blink,
            L10nKey::SettingsCursorShape => cfg.cursor_style != defaults.cursor_style,
            L10nKey::SettingsScrollback => cfg.scrollback_limit != defaults.scrollback_limit,
            L10nKey::SettingsNewTabPosition => cfg.new_tab_position != defaults.new_tab_position,
            L10nKey::SettingsTabBarPosition => cfg.tab_bar_position != defaults.tab_bar_position,
            L10nKey::SettingsSidebarGrouping => cfg.sidebar_grouping != defaults.sidebar_grouping,
            L10nKey::SettingsDiffPreviewFromCounts => {
                cfg.sidebar_diff_preview != defaults.sidebar_diff_preview
            }
            L10nKey::SettingsNotifyOnCommandFinish => {
                cfg.notify_on_command_finish != defaults.notify_on_command_finish
            }
            L10nKey::SettingsNotifyThreshold => {
                cfg.notify_threshold_secs != defaults.notify_threshold_secs
            }
            L10nKey::SettingsTerminalBell => cfg.bell != defaults.bell,
            L10nKey::SettingsRestoreLastLayout => cfg.restore_session != defaults.restore_session,
            L10nKey::SettingsPerPaneHistory => cfg.per_pane_history != defaults.per_pane_history,
            L10nKey::SettingsShowTrayIcon => cfg.show_tray_icon != defaults.show_tray_icon,
            L10nKey::SettingsOptionAsMeta => {
                cfg.macos_option_as_alt != defaults.macos_option_as_alt
            }
            L10nKey::SettingsHideMouseWhileTyping => {
                cfg.mouse_hide_while_typing != defaults.mouse_hide_while_typing
            }
            L10nKey::SettingsFocusFollowsMouse => {
                cfg.focus_follows_mouse != defaults.focus_follows_mouse
            }
            L10nKey::SettingsReportMouseToApps => cfg.mouse_reporting != defaults.mouse_reporting,
            L10nKey::SettingsScrollSpeed => {
                cfg.mouse_scroll_multiplier != defaults.mouse_scroll_multiplier
            }
            L10nKey::SettingsSmoothScroll => cfg.smooth_scroll != defaults.smooth_scroll,
            L10nKey::SettingsMouseZoom => cfg.mouse_zoom_modifier != defaults.mouse_zoom_modifier,
            L10nKey::SettingsTrimTrailingSpaces => {
                cfg.clipboard_trim_trailing_spaces != defaults.clipboard_trim_trailing_spaces
            }
            L10nKey::SettingsCopyOnSelect => cfg.copy_on_select != defaults.copy_on_select,
            L10nKey::SettingsSmartSelection => cfg.smart_select != defaults.smart_select,
            L10nKey::SettingsPromptEditor => cfg.prompt_editor != defaults.prompt_editor,
            L10nKey::SettingsTabCompletion => cfg.tab_completion != defaults.tab_completion,
            L10nKey::SettingsHistorySearch => cfg.history_search != defaults.history_search,
            L10nKey::SettingsStartupWindow => cfg.startup_mode != defaults.startup_mode,
            L10nKey::SettingsRememberWindowSize => {
                cfg.remember_window_size != defaults.remember_window_size
            }
            L10nKey::SettingsCheckUpdatesOnLaunch => {
                cfg.check_for_updates != defaults.check_for_updates
            }
            L10nKey::SettingsAutoDownload => {
                cfg.auto_download_updates != defaults.auto_download_updates
            }
            L10nKey::SettingsUpdateChannel => cfg.update_channel != defaults.update_channel,
            L10nKey::DetectUrls => cfg.link_url != defaults.link_url,
            L10nKey::ForwardSshLoopbackLinks => {
                cfg.ssh_loopback_forward != defaults.ssh_loopback_forward
            }
            L10nKey::SettingsVerifyHostKeys => cfg.verify_host_keys != defaults.verify_host_keys,
            L10nKey::WarnBeforeClosing => cfg.ssh_warn_on_close != defaults.ssh_warn_on_close,
            L10nKey::SettingsLanguage => cfg.gui_language != defaults.gui_language,
            L10nKey::SettingsFontSize => cfg.font_size != defaults.font_size,
            L10nKey::SettingsUiFontSize => cfg.ui_font_size != defaults.ui_font_size,
            L10nKey::SettingsLineHeight => cfg.line_height != defaults.line_height,
            L10nKey::SettingsFontFamily => cfg.font_family != defaults.font_family,
            L10nKey::SettingsBoldFont => cfg.font_family_bold != defaults.font_family_bold,
            L10nKey::SettingsItalicFont => cfg.font_family_italic != defaults.font_family_italic,
            L10nKey::SettingsUiFontFamily => cfg.ui_font_family != defaults.ui_font_family,
            L10nKey::SettingsOpacity => cfg.window_opacity != defaults.window_opacity,
            L10nKey::SettingsBlur => cfg.window_blur != defaults.window_blur,
            L10nKey::SettingsBackdrop => cfg.window_backdrop != defaults.window_backdrop,
            L10nKey::SettingsSyncWithSystem => {
                cfg.theme_follow_system != defaults.theme_follow_system
            }
            L10nKey::SettingsLegiblePalette => {
                cfg.theme_legible_palette != defaults.theme_legible_palette
            }
            L10nKey::SettingsThemeIntroTitle => {
                cfg.theme_preset != defaults.theme_preset
                    || cfg.theme_preset_light != defaults.theme_preset_light
                    || cfg.theme_preset_dark != defaults.theme_preset_dark
            }
            L10nKey::SettingsAppHttpProxy => cfg.http_proxy != defaults.http_proxy,
            L10nKey::SettingsOpenFilesCommand => {
                cfg.link_file_command != defaults.link_file_command
            }
            L10nKey::OpenFilesWith => cfg.link_file_open != defaults.link_file_open,
            L10nKey::SettingsSearchKeybindingsTitle => {
                cfg.keybindings != defaults.keybindings
                    || cfg.keybinding_preset != defaults.keybinding_preset
                    || cfg.prefix != defaults.prefix
            }
            L10nKey::SettingsProgram => {
                cfg.shell.as_ref().map(|s| &s.program)
                    != defaults.shell.as_ref().map(|s| &s.program)
            }
            L10nKey::SettingsArguments => cfg.shell.as_ref().is_some_and(|s| !s.args.is_empty()),
            L10nKey::SettingsStartIn => {
                cfg.working_directory.strategy != defaults.working_directory.strategy
            }
            L10nKey::SettingsCustomPath => {
                cfg.working_directory.path != defaults.working_directory.path
            }
            L10nKey::SettingsFontLigatures => cfg.font_features != defaults.font_features,
            _ => false,
        }
    }
}

fn entry_matches(entry: &SearchEntry, query: &str) -> bool {
    let query = query.trim().to_lowercase();
    query.split_whitespace().all(|word| {
        t(entry.title).to_lowercase().contains(word)
            || match entry.title {
                L10nKey::SettingsMouseZoom => {
                    "zoom modifier scroll wheel 缩放 滚轮 修饰键 ズーム".contains(word)
                }
                L10nKey::SettingsPerPaneHistory => {
                    "per pane shell history independent 独立 命令历史".contains(word)
                }
                L10nKey::SettingsServer => {
                    "daemon server background service 后台 服务".contains(word)
                }
                _ => false,
            }
            || t(entry.keywords).to_lowercase().contains(word)
            || entry.description().to_lowercase().contains(word)
            || entry.config_key().contains(word)
            || crate::ui::i18n::alias_translations(entry.title)
                .iter()
                .any(|s| s.to_lowercase().contains(word))
            || crate::ui::i18n::alias_translations(entry.keywords)
                .iter()
                .any(|s| s.to_lowercase().contains(word))
    })
}

/// Whether one keybinding row answers the query.
///
/// The label is what the page shows and what someone searching for a feature
/// will type; the action name is what the docs and `keybindings.json` spell, so
/// `ScmSync` finds the row a reader arrived from the configuration page with.
pub(crate) fn keybinding_matches_query(action: &str, query: &str) -> bool {
    if query.is_empty() {
        return false;
    }
    let (_, label) = crate::ui::keymap::action_entry(action);
    label.to_lowercase().contains(query) || action.to_lowercase().contains(query)
}

/// The Keybindings page is the one page whose rows are not in the search index
/// above: there are eighty-odd of them, they are generated from the binding
/// table, and their labels are already localized there. Counting them here is
/// what puts an `(n)` on the nav item and lets `best_matching_section` land on
/// the page — without it, searching for a feature by name found the settings
/// that mention it and never the shortcut named exactly that (#444).
fn keybinding_match_count(query: &str) -> usize {
    if query.is_empty() {
        return 0;
    }
    crate::ui::keymap::default_bindings()
        .into_iter()
        .filter(|(action, _)| keybinding_matches_query(action, query))
        .count()
}

pub(crate) fn section_match_count(section: SettingsSection, query: &str) -> usize {
    let indexed = settings_search_entries()
        .iter()
        .filter(|e| e.section == section && entry_matches(e, query))
        .count();
    match section {
        SettingsSection::KeyboardMouse | SettingsSection::Keybindings => {
            indexed + keybinding_match_count(query)
        }
        _ => indexed,
    }
}

/// Whether a rendered row is one of the ones the section's `(n)` badge counted.
/// A row can match on its own label, or through the keyword list the search
/// index carries for it — "palette" finds "Theme" and nothing in that label
/// contains the word.
fn row_matches_query(section: SettingsSection, label: &str, query: &str) -> bool {
    if query.is_empty() {
        return false;
    }
    if label.to_lowercase().contains(query) {
        return true;
    }
    settings_search_entries()
        .iter()
        .any(|e| e.section == section && t(e.title) == label && entry_matches(e, query))
}

pub(crate) fn total_match_count(query: &str) -> usize {
    SettingsSection::ALL
        .into_iter()
        .map(|s| section_match_count(s, query))
        .sum()
}

#[cfg(test)]
pub(crate) fn best_matching_section(query: &str) -> Option<SettingsSection> {
    settings_search_entries()
        .iter()
        .filter(|entry| entry_matches(entry, query))
        .min_by_key(|entry| entry.rank(query))
        .map(|entry| entry.section)
        .or_else(|| (keybinding_match_count(query) > 0).then_some(SettingsSection::KeyboardMouse))
}

pub(crate) struct ThemeEditor {
    #[allow(dead_code)]
    pub(crate) for_id: String,
    pub(crate) seed: Vec<(ThemeEdit, Entity<ColorPickerState>)>,
    pub(crate) ansi: Vec<(ThemeEdit, Entity<ColorPickerState>)>,
    pub(crate) image_opacity_slider: Option<Entity<SliderState>>,
    pub(crate) _subs: Vec<Subscription>,
}

pub(crate) struct SettingsState {
    pub(crate) focus_handle: gpui::FocusHandle,
    pub(crate) section: SettingsSection,
    pub(crate) search: Entity<InputState>,
    pub(crate) shortcut_search: Entity<InputState>,
    pub(crate) modified_only: bool,
    pub(crate) save_error: Option<String>,
    pub(crate) saved_config: Config,
    pub(crate) search_active: bool,
    pub(crate) search_return_offset: gpui::Point<gpui::Pixels>,
    pub(crate) search_selection: usize,
    pub(crate) search_rows: RefCell<Option<Vec<(L10nKey, AnyElement)>>>,
    pub(crate) focused_setting: Option<L10nKey>,
    /// The page's own scroll, and an anchor on it that the first matching row
    /// claims. Searching tells you "Appearance (2)"; these are what carry you
    /// to the two, which on a long page start well below the fold.
    pub(crate) content_scroll: gpui::ScrollHandle,
    pub(crate) ssh_master_scroll: gpui::ScrollHandle,
    pub(crate) ssh_detail_scroll: gpui::ScrollHandle,
    pub(crate) theme_list_scroll: gpui::ScrollHandle,
    pub(crate) search_anchor: gpui::ScrollAnchor,
    /// Set when the query or the section changes, and spent by the next render
    /// that has somewhere to go. A `Cell` because that render only holds `&self`.
    pub(crate) reveal_first_hit: Cell<bool>,
    pub(crate) font_select: Entity<SelectState<SearchableVec<String>>>,
    pub(crate) font_bold_select: Entity<SelectState<SearchableVec<String>>>,
    pub(crate) font_italic_select: Entity<SelectState<SearchableVec<String>>>,
    pub(crate) ui_font_select: Entity<SelectState<SearchableVec<String>>>,
    pub(crate) language_select: Entity<SelectState<SearchableVec<String>>>,
    #[cfg(target_os = "windows")]
    pub(crate) window_backdrop_select: Entity<SelectState<SearchableVec<String>>>,
    pub(crate) shell_program_input: Entity<InputState>,
    pub(crate) shell_args_input: Entity<InputState>,
    pub(crate) wd_path_input: Entity<InputState>,
    pub(crate) link_file_command_input: Entity<InputState>,
    pub(crate) http_proxy_input: Entity<InputState>,
    pub(crate) scroll_slider: Entity<SliderState>,
    pub(crate) window_opacity_slider: Entity<SliderState>,
    pub(crate) theme_editor: Option<ThemeEditor>,
    pub(crate) theme_draft: Option<(presets::Theme, presets::Theme)>,
    pub(crate) theme_draft_error: Option<String>,
    pub(crate) theme_panel_open: bool,
    pub(crate) theme_panel_slot: ThemeSlot,
    pub(crate) theme_search: Entity<InputState>,
    pub(crate) recording: Option<Recording>,
    pub(crate) rebinding_note: Option<String>,
    pub(crate) ssh_form: Option<SshProfileForm>,
    pub(crate) ssh_detail: SshDetail,
    pub(crate) ssh_filter: Entity<InputState>,
    pub(crate) ssh_collapsed_groups: std::collections::HashSet<String>,
    pub(crate) ssh_quick_connect: Entity<InputState>,
    pub(crate) agent_hooks_host: HostId,
    pub(crate) agent_hooks_states: AgentHooksView,
    pub(crate) agent_hooks_seq: u64,
    pub(crate) agent_hooks_note: Option<(crate::core::agent_hooks::HookAgent, String)>,
    pub(crate) _subs: Vec<Subscription>,
}

#[derive(Clone)]
pub(crate) enum AgentHooksView {
    Loading,
    Ready(Vec<AgentHookRow>),
    Unavailable(String),
}

#[derive(Clone)]
pub(crate) struct AgentHookRow {
    pub(crate) agent: crate::core::agent_hooks::HookAgent,
    pub(crate) state: crate::core::agent_hooks::HooksState,
    pub(crate) target: String,
}

#[derive(Clone)]
pub(crate) struct AgentHooksMachine {
    pub(crate) host: HostId,
    pub(crate) label: String,
}

#[derive(Clone, Copy, PartialEq, Eq)]
pub(crate) enum ThemeSlot {
    Manual,
    Light,
    Dark,
}

#[derive(Clone, Copy, PartialEq, Eq)]
pub(crate) enum SshDetail {
    None,
    Defaults,
    Profile(Uuid),
}

fn ssh_group_key(p: &SshProfile) -> &str {
    p.group.as_deref().unwrap_or("")
}

fn ssh_group_label(key: &str) -> &str {
    match key {
        crate::core::ssh_config::IMPORTED_GROUP => "~/.ssh/config",
        "" => t(L10nKey::SettingsInTty7),
        other => other,
    }
}

fn ssh_group_rank(key: &str) -> u8 {
    match key {
        crate::core::ssh_config::IMPORTED_GROUP => 0,
        "" => 2,
        _ => 1,
    }
}

fn ssh_row_matches(p: &SshProfile, query: &str) -> bool {
    if query.is_empty() {
        return true;
    }
    let hit = |s: &str| s.to_lowercase().contains(query);
    hit(&p.name) || hit(&p.host) || hit(&p.user) || hit(&p.port.to_string())
}

/// How many *other* profiles reach the same `user@host:port` as this one.
///
/// The keychain is keyed by the endpoint, not by the profile, so two hosts that
/// differ only in how they get there — one direct, one through a jump host —
/// hand the same saved password back and forth. Every path that is about to
/// remove that password has to know this first: deleting a profile keeps the
/// secret while someone else still needs it, and forgetting one says out loud
/// who else it takes down. Both used to work the answer out on their own, which
/// is exactly how the two policies would have drifted apart.
fn profiles_sharing_endpoint(cfg: &Config, id: Uuid) -> usize {
    let Some(profile) = cfg.ssh_profiles.iter().find(|p| p.id == id) else {
        return 0;
    };
    cfg.ssh_profiles
        .iter()
        .filter(|p| {
            p.id != id && (&p.user, &p.host, p.port) == (&profile.user, &profile.host, profile.port)
        })
        .count()
}

pub(crate) struct SshProfileForm {
    editing: Uuid,
    carry_group: Option<String>,
    carry_credential_ref: Option<CredentialRef>,

    show_jump: bool,
    show_forwards: bool,
    show_advanced: bool,

    name: Entity<InputState>,
    host: Entity<InputState>,
    port: Entity<InputState>,
    user: Entity<InputState>,
    auth: AuthMode,
    auth_select: Entity<SelectState<SearchableVec<String>>>,

    /// The secret half of a connection. Neither of these is part of the
    /// profile — they live in the system keychain, and the config file holds
    /// no copy — so the form carries what the keychain had when it opened and
    /// compares against it on the way out. A form that was only read writes
    /// nothing back, and one that cleared a field says so.
    password: Entity<InputState>,
    passphrase: Entity<InputState>,
    loaded_password: String,
    loaded_passphrase: String,
    /// The endpoint the password above was read for, and the key file the
    /// passphrase belongs to. An edit to the address moves the entry, and
    /// without these there is nothing left pointing at the one to remove.
    loaded_endpoint: (String, String, u16),
    loaded_key: Option<String>,

    jump: Entity<InputState>,

    forwards: Vec<ForwardRuleForm>,

    identity_files: Entity<InputState>,
    proxy_command: Entity<InputState>,
    socks: Entity<InputState>,
    http: Entity<InputState>,
    kex: Entity<InputState>,
    cipher: Entity<InputState>,
    mac: Entity<InputState>,
    hostkey: Entity<InputState>,
    compression: Entity<InputState>,
    keepalive_interval: Entity<InputState>,
    keepalive_count: Entity<InputState>,
    connect_timeout: Entity<InputState>,
    login_scripts: Entity<InputState>,

    agent_forward: bool,
    x11: bool,
    skip_banner: bool,
    shell_integration: bool,
    remote_clipboard_write: bool,
    verify_host_keys: Option<bool>,
    warn_on_close: Option<bool>,

    /// The last Test Connection on this form, or `None` when there has not
    /// been one — or when an edit since made the old answer a lie.
    test: Option<SshTestState>,

    _subs: Vec<Subscription>,
}

pub(crate) enum SshTestState {
    Running,
    Done(SshTestReport),
}

impl SshProfileForm {
    /// Whether the group that identifies the host — name, host, port, user —
    /// is still untouched. Every field notifies on change, so the form
    /// re-renders on each keystroke; without this a new host would be told it
    /// needs a host before anyone had the chance to type one. Same deal the
    /// forward rows strike with `ForwardRuleForm::is_blank`.
    fn core_is_blank(&self, cx: &App) -> bool {
        // The port is not in the list: it opens on 22 and is never empty, so
        // counting it meant a brand-new host was never "untouched" and the
        // form opened with "Needs a host" already in red under an empty box
        // nobody had reached yet.
        [&self.name, &self.host, &self.user]
            .iter()
            .all(|e| e.read(cx).value().trim().is_empty())
    }

    /// Whether either secret differs from what the keychain handed over.
    ///
    /// Nothing about a password reaches the profile, so the dirty check that
    /// compares profiles cannot see one being typed — without this, Save stays
    /// greyed out over a password the user just entered.
    ///
    /// Untrimmed on purpose: a trailing space is a character of the secret,
    /// and the server is the one that decides whether it belongs.
    fn secrets_changed(&self, cx: &App) -> bool {
        self.password.read(cx).value().as_ref() != self.loaded_password
            || self.passphrase.read(cx).value().as_ref() != self.loaded_passphrase
    }

    fn wants_password(&self) -> bool {
        auth_uses_password(self.auth)
    }

    fn wants_key(&self) -> bool {
        auth_uses_key(self.auth)
    }
}

/// Which credential fields a method actually uses — the same split
/// `ssh_connect::build_spec_inner` makes when it decides what to hand the
/// daemon. A password box under "Agent" would be a secret that is stored and
/// then never offered, and a form holding one quietly is worse than a form
/// that has none.
fn auth_uses_password(mode: AuthMode) -> bool {
    matches!(mode, AuthMode::Auto | AuthMode::Password)
}

fn auth_uses_key(mode: AuthMode) -> bool {
    matches!(mode, AuthMode::Auto | AuthMode::PublicKey)
}

/// What saving does to the keychain for the password field: which entry to
/// drop, and whether to write one.
///
/// A plain function because these are the cases a keychain makes expensive to
/// reach by hand — an address edited out from under a saved password, a field
/// cleared to mean "stop remembering this", a form opened and closed without a
/// keystroke.
#[derive(Clone, Copy, PartialEq, Eq, Debug)]
struct PasswordPlan {
    drop_old: bool,
    store: bool,
}

fn password_plan(was: &str, typed: &str, moved: bool) -> PasswordPlan {
    PasswordPlan {
        // Only what this form read is ours to drop, and only once it is no
        // longer the entry this form would write to.
        drop_old: !was.is_empty() && (moved || typed.is_empty()),
        // A move rewrites even an unchanged secret: the account it is filed
        // under is the address, and the address is what changed.
        store: !typed.is_empty() && (typed != was || moved),
    }
}

pub(crate) struct ForwardRuleForm {
    pub(crate) kind: ForwardKind,
    pub(crate) bind_host: Entity<InputState>,
    pub(crate) bind_port: Entity<InputState>,
    pub(crate) target_host: Entity<InputState>,
    pub(crate) target_port: Entity<InputState>,
    pub(crate) description: Entity<InputState>,
}

impl ForwardRuleForm {
    fn collect(&self, cx: &App) -> Option<ForwardRule> {
        let val = |e: &Entity<InputState>| e.read(cx).value().trim().to_string();
        let bind_port: u16 = val(&self.bind_port).parse().ok().filter(|p| *p > 0)?;
        let bind = HostPort::new(val(&self.bind_host), bind_port);
        let target = if self.kind == ForwardKind::Dynamic {
            HostPort::default()
        } else {
            let port: u16 = val(&self.target_port).parse().ok().filter(|p| *p > 0)?;
            let host = val(&self.target_host);
            if host.is_empty() {
                return None;
            }
            HostPort::new(host, port)
        };
        Some(ForwardRule {
            kind: self.kind,
            bind,
            target,
            description: val(&self.description),
        })
    }

    fn is_blank(&self, cx: &App) -> bool {
        [
            &self.bind_host,
            &self.bind_port,
            &self.target_host,
            &self.target_port,
            &self.description,
        ]
        .iter()
        .all(|e| e.read(cx).value().trim().is_empty())
    }
}

pub(crate) struct Recording {
    pub(crate) action: String,
    pub(crate) chords: Vec<String>,
    pub(crate) _intercept: Subscription,
}

pub(crate) fn font_default_label() -> &'static str {
    t(L10nKey::SettingsFontDefault)
}

/// The same first row for the interface face, spelled for what it actually
/// does. The bold and italic dropdowns fall back to the *terminal's* primary
/// family, which is what their label promises; the interface falls back to the
/// system UI font instead, so it cannot borrow that label without telling the
/// reader the chrome will come out in Hack.
pub(crate) fn ui_font_default_label() -> &'static str {
    t(L10nKey::SettingsUiFontDefault)
}

#[cfg(target_os = "macos")]
const LINK_MODIFIER_LABEL: &str = "⌘";
#[cfg(not(target_os = "macos"))]
const LINK_MODIFIER_LABEL: &str = "Ctrl";

pub(crate) fn humanize_action(action: &str) -> String {
    let mut out = String::new();
    for (i, ch) in action.chars().enumerate() {
        if i > 0 && ch.is_uppercase() {
            out.push(' ');
        }
        out.push(ch);
    }
    out
}

/// What a blank port field means. The same number `SshProfile`'s serde default
/// writes for a config that never mentioned a port, which is why leaving the
/// field empty has to stay legal: every host imported from `~/.ssh/config`
/// leaves it empty.
const DEFAULT_SSH_PORT: u16 = 22;

/// The port each proxy scheme listens on when the field names only a host.
const DEFAULT_SOCKS_PORT: u16 = 1080;
const DEFAULT_HTTP_PROXY_PORT: u16 = 8080;

/// A port as a form field spells it. Nothing here accepts 0: every port in a
/// profile is one something has to connect to, and no listener answers on 0.
fn parse_port(s: &str) -> Option<u16> {
    s.trim().parse::<u16>().ok().filter(|p| *p > 0)
}

/// A proxy address as the form spells it: blank is "no proxy", a bare host
/// takes the scheme's default port, and anything else has to carry a port that
/// exists. This used to be `parse().unwrap_or(0)`, so `proxy.example.com:88O`
/// saved a proxy on port 0 and the failure surfaced far away, in the socket
/// layer. The default port is not a secret either — `host_port_text` writes it
/// back into the field the next time the form opens.
fn parse_host_port_checked(s: &str, default_port: u16) -> Result<Option<HostPort>, SshFieldError> {
    let s = s.trim();
    if s.is_empty() {
        return Ok(None);
    }
    match s.rsplit_once(':') {
        Some((h, p)) => match parse_port(p) {
            Some(port) => Ok(Some(HostPort::new(h.trim(), port))),
            None => Err(SshFieldError::ProxyPortRange),
        },
        None => Ok(Some(HostPort::new(s, default_port))),
    }
}

fn host_port_text(hp: &Option<HostPort>) -> String {
    hp.as_ref()
        .map(|h| format!("{}:{}", h.host, h.port))
        .unwrap_or_default()
}

fn split_list(s: &str) -> Vec<String> {
    s.split([',', ' ', '\n'])
        .map(str::trim)
        .filter(|t| !t.is_empty())
        .map(str::to_string)
        .collect()
}

fn split_lines(s: &str) -> Vec<String> {
    s.lines()
        .map(str::trim)
        .filter(|l| !l.is_empty())
        .map(str::to_string)
        .collect()
}

/// Why one field of the SSH profile form cannot be saved. A value rather than
/// a finished sentence, so the rules stay a plain function a test can call —
/// the wording, and the locale it is written in, belong to the render pass.
#[derive(Debug, Clone, PartialEq, Eq)]
pub(crate) enum SshFieldError {
    /// Nothing to connect to. Saved anyway, the profile used to render as an
    /// empty row in the host list and hand `TcpStream::connect` an empty name.
    HostMissing,
    /// A port field that is neither blank nor a port.
    PortRange,
    /// The same, for the port half of a proxy address.
    ProxyPortRange,
    /// The jump field names a profile no host list has.
    JumpUnknown(String),
    /// The jump field names the profile being edited.
    JumpIsSelf,
}

impl SshFieldError {
    fn message(&self) -> String {
        match self {
            Self::HostMissing => t(L10nKey::SettingsHostRequired).to_string(),
            Self::PortRange => t(L10nKey::SettingsPortInvalid).to_string(),
            Self::ProxyPortRange => t(L10nKey::SettingsProxyPortInvalid).to_string(),
            Self::JumpUnknown(name) => {
                t_fmt(L10nKey::SettingsJumpHostUnknown, &[("jump_name", name)])
            }
            Self::JumpIsSelf => t(L10nKey::SettingsJumpHostSelf).to_string(),
        }
    }
}

/// What the form has to fix before it can be saved, one slot per field so each
/// complaint can be printed under the control it is about.
#[derive(Debug, Clone, Default, PartialEq, Eq)]
pub(crate) struct SshFormErrors {
    host: Option<SshFieldError>,
    port: Option<SshFieldError>,
    jump: Option<SshFieldError>,
    socks: Option<SshFieldError>,
    http: Option<SshFieldError>,
}

impl SshFormErrors {
    fn is_empty(&self) -> bool {
        self.host.is_none()
            && self.port.is_none()
            && self.jump.is_none()
            && self.socks.is_none()
            && self.http.is_none()
    }
}

/// The SSH profile form as plain text, lifted out of the `InputState` entities
/// it lives in. The rules that turn it into a profile are the part worth
/// testing, and a GPUI entity is not something a unit test can hand them, so
/// the window layer's job stops at reading the strings out.
#[derive(Debug, Clone, Default)]
pub(crate) struct SshFormDraft {
    id: Uuid,
    name: String,
    group: Option<String>,
    host: String,
    port: String,
    user: String,
    jump: String,
    proxy_command: String,
    socks: String,
    http: String,
    auth: AuthMode,
    identity_files: String,
    agent_forward: bool,
    credential_ref: Option<CredentialRef>,
    forwards: Vec<ForwardRule>,
    keepalive_interval: String,
    keepalive_count: String,
    connect_timeout: String,
    warn_on_close: Option<bool>,
    skip_banner: bool,
    shell_integration: bool,
    remote_clipboard_write: bool,
    login_scripts: String,
    x11: bool,
    kex: String,
    cipher: String,
    mac: String,
    hostkey: String,
    compression: String,
    verify_host_keys: Option<bool>,
}

/// The one place that decides what the form would save and what is wrong with
/// it. Both, always — never one or the other: the Escape prompt asks whether
/// the form differs from what is on disk, and a form that is merely invalid
/// still holds everything the user typed. Handing back only the errors would
/// make a brand-new invalid profile compare equal to the nothing on disk, and
/// Escape would throw the typing away without asking.
///
/// A missing `name` is deliberately not an error: the host list already falls
/// back to the host for a nameless profile, and requiring one would refuse
/// every host imported from `~/.ssh/config`.
fn validate_ssh_draft(draft: SshFormDraft, profiles: &[SshProfile]) -> (SshProfile, SshFormErrors) {
    let mut errors = SshFormErrors::default();

    let host = draft.host.trim().to_string();
    if host.is_empty() {
        errors.host = Some(SshFieldError::HostMissing);
    }

    let port_text = draft.port.trim();
    let port = match port_text.is_empty() {
        true => DEFAULT_SSH_PORT,
        false => parse_port(port_text).unwrap_or_else(|| {
            errors.port = Some(SshFieldError::PortRange);
            DEFAULT_SSH_PORT
        }),
    };

    // The field is a name but the profile stores an id, so a jump host already
    // survives its target being renamed. What it never survived was a name
    // nobody has: the lookup returned `None`, the profile saved as a direct
    // connection, and reopening the form showed an empty field.
    let jump_name = draft.jump.trim();
    let jump_host = if jump_name.is_empty() {
        None
    } else {
        let named = |p: &&SshProfile| p.name == jump_name;
        // Duplicate names resolve to whichever profile comes first, as they
        // always have. The one profile that can never be the answer is the one
        // being edited, and typing its own name is worth saying out loud
        // rather than quietly connecting direct.
        match profiles.iter().filter(named).find(|p| p.id != draft.id) {
            Some(p) => Some(p.id),
            None => {
                errors.jump = Some(match profiles.iter().any(|p| p.name == jump_name) {
                    true => SshFieldError::JumpIsSelf,
                    false => SshFieldError::JumpUnknown(jump_name.to_string()),
                });
                None
            }
        }
    };

    let proxy = |text: &str, default_port: u16, slot: &mut Option<SshFieldError>| {
        match parse_host_port_checked(text, default_port) {
            Ok(hp) => hp,
            Err(e) => {
                *slot = Some(e);
                None
            }
        }
    };
    let socks_proxy = proxy(&draft.socks, DEFAULT_SOCKS_PORT, &mut errors.socks);
    let http_proxy = proxy(&draft.http, DEFAULT_HTTP_PROXY_PORT, &mut errors.http);

    let proxy_command = draft.proxy_command.trim();
    let profile = SshProfile {
        id: draft.id,
        name: draft.name.trim().to_string(),
        group: draft.group,
        host,
        port,
        user: draft.user.trim().to_string(),
        jump_host,
        proxy_command: (!proxy_command.is_empty()).then(|| proxy_command.to_string()),
        socks_proxy,
        http_proxy,
        auth: draft.auth,
        identity_files: split_lines(&draft.identity_files),
        agent_forward: draft.agent_forward,
        credential_ref: draft.credential_ref,
        forwards: draft.forwards,
        keepalive_interval_s: draft.keepalive_interval.trim().parse().ok(),
        keepalive_count_max: draft.keepalive_count.trim().parse().ok(),
        connect_timeout_s: draft.connect_timeout.trim().parse().ok(),
        warn_on_close: draft.warn_on_close,
        skip_banner: draft.skip_banner,
        shell_integration: draft.shell_integration,
        remote_clipboard_write: draft.remote_clipboard_write,
        login_scripts: split_lines(&draft.login_scripts),
        x11: draft.x11,
        algorithms: Algorithms {
            kex: split_list(&draft.kex),
            cipher: split_list(&draft.cipher),
            mac: split_list(&draft.mac),
            hostkey: split_list(&draft.hostkey),
            compression: split_list(&draft.compression),
        },
        verify_host_keys: draft.verify_host_keys,
    };
    (profile, errors)
}

/// The inline complaint under a field: one line, in the danger colour, in the
/// column the control sits in. Built before the row rather than inside a
/// `when` closure so it borrows the app for the length of one call.
fn field_error(message: impl Into<String>, cx: &App) -> Div {
    div()
        .text_xs()
        .text_color(cx.theme().danger)
        .child(message.into())
}

/// A duration as a test result should read it: milliseconds while the number
/// still means something, seconds once it does not.
fn human_millis(ms: u32) -> String {
    match ms < 1000 {
        true => format!("{ms} ms"),
        false => format!("{:.1} s", f64::from(ms) / 1000.0),
    }
}

/// What the handshake stopped to ask for, as the one line explaining why a
/// reachable host still is not a connected one.
fn ssh_test_need_message(need: SshTestNeed) -> L10nKey {
    match need {
        SshTestNeed::Password => L10nKey::SettingsTestNeedsPassword,
        SshTestNeed::KeyPassphrase => L10nKey::SettingsTestNeedsPassphrase,
        SshTestNeed::KeyboardInteractive => L10nKey::SettingsTestNeedsInteractive,
        SshTestNeed::HostKeyDecision => L10nKey::SettingsTestNeedsHostKey,
        SshTestNeed::HostKeyChanged => L10nKey::SettingsTestHostKeyChanged,
    }
}

/// The authentication methods in the order the form lists them, and the one
/// place that order is written down — the labels, the index the dropdown opens
/// on, and the mode a pick resolves to all read from here.
pub(crate) const AUTH_MODES: [AuthMode; 6] = [
    AuthMode::Auto,
    AuthMode::Gssapi,
    AuthMode::Password,
    AuthMode::PublicKey,
    AuthMode::Agent,
    AuthMode::KeyboardInteractive,
];

fn auth_mode_labels() -> Vec<String> {
    AUTH_MODES.iter().map(|m| auth_mode_label(*m)).collect()
}

fn auth_mode_label(mode: AuthMode) -> String {
    match mode {
        AuthMode::Auto => t(L10nKey::SettingsAuthModeAuto).to_string(),
        AuthMode::Gssapi => "GSSAPI".to_string(),
        AuthMode::Password => t(L10nKey::SettingsAuthModePassword).to_string(),
        AuthMode::PublicKey => t(L10nKey::SettingsAuthModeKey).to_string(),
        AuthMode::Agent => t(L10nKey::SettingsAuthModeAgent).to_string(),
        AuthMode::KeyboardInteractive => t(L10nKey::SettingsAuthMode2Fa).to_string(),
    }
}

fn auth_mode_index(mode: AuthMode) -> usize {
    AUTH_MODES.iter().position(|m| *m == mode).unwrap_or(0)
}

/// The same line in the muted colour, for a field that is filled in and
/// legal but will not be the one used. Not an error: nothing is wrong with
/// what was typed, it is just not what the connection will do.
fn field_note(message: impl Into<String>, cx: &App) -> Div {
    div()
        .text_xs()
        .text_color(cx.theme().muted_foreground)
        .child(message.into())
}

/// Which of the three proxy fields a connection would actually go through.
/// They read as three independent settings and are not: `map_proxy` picks the
/// first one filled, in this order, and ignores the rest without a word.
#[derive(Clone, Copy, PartialEq, Eq, Debug)]
pub(crate) enum ProxyPick {
    Command,
    Socks,
    Http,
}

impl ProxyPick {
    fn of(command: bool, socks: bool, http: bool) -> Option<Self> {
        match (command, socks, http) {
            (true, _, _) => Some(Self::Command),
            (_, true, _) => Some(Self::Socks),
            (_, _, true) => Some(Self::Http),
            _ => None,
        }
    }

    fn label(self) -> &'static str {
        match self {
            Self::Command => t(L10nKey::SettingsProxyCommand),
            Self::Socks => t(L10nKey::SettingsSocks5Proxy),
            Self::Http => t(L10nKey::SettingsHttpProxy),
        }
    }

    /// The note this field carries when it holds an address that another one
    /// outranks. An empty field has nothing to be overridden.
    fn overridden_by(self, filled: bool, winner: Option<Self>) -> Option<String> {
        let winner = winner?;
        (filled && winner != self).then(|| {
            t_fmt(
                L10nKey::SettingsProxyOverridden,
                &[("winner", winner.label())],
            )
        })
    }
}

fn forward_row_inputs(row: &ForwardRuleForm) -> [&Entity<InputState>; 5] {
    [
        &row.bind_host,
        &row.bind_port,
        &row.target_host,
        &row.target_port,
        &row.description,
    ]
}

fn seed_forward_row(
    window: &mut Window,
    cx: &mut Context<Tty7App>,
    rule: &ForwardRule,
) -> ForwardRuleForm {
    let port = |p: u16| if p == 0 { String::new() } else { p.to_string() };
    ForwardRuleForm {
        kind: rule.kind,
        bind_host: seed_hinted(window, cx, &rule.bind.host, "localhost"),
        bind_port: seed_hinted(window, cx, &port(rule.bind.port), "8080"),
        target_host: seed_hinted(window, cx, &rule.target.host, "127.0.0.1"),
        target_port: seed_hinted(window, cx, &port(rule.target.port), "80"),
        description: seed_hinted(
            window,
            cx,
            &rule.description,
            t(L10nKey::ForwardDescriptionPlaceholder),
        ),
    }
}

fn seed_hinted(
    window: &mut Window,
    cx: &mut Context<Tty7App>,
    value: &str,
    placeholder: &'static str,
) -> Entity<InputState> {
    let value = value.to_string();
    cx.new(|cx| {
        InputState::new(window, cx)
            .placeholder(placeholder)
            .default_value(value)
    })
}

fn seed_input(
    window: &mut Window,
    cx: &mut Context<Tty7App>,
    value: &str,
    multi_line: bool,
) -> Entity<InputState> {
    let value = value.to_string();
    cx.new(|cx| {
        InputState::new(window, cx)
            .multi_line(multi_line)
            .default_value(value)
    })
}

fn seed_hinted_multi(
    window: &mut Window,
    cx: &mut Context<Tty7App>,
    value: &str,
    placeholder: &'static str,
) -> Entity<InputState> {
    let value = value.to_string();
    cx.new(|cx| {
        InputState::new(window, cx)
            .multi_line(true)
            .placeholder(placeholder)
            .default_value(value)
    })
}

/// A picked path written the way a config file spells it. `~/.ssh/id_ed25519`
/// keeps meaning the right file on another machine, or after the account is
/// renamed; the absolute path the system picker hands back does not.
fn tildify(path: &str) -> String {
    #[cfg(windows)]
    let home = std::env::var("USERPROFILE").ok();
    #[cfg(not(windows))]
    let home = std::env::var("HOME").ok();
    tildify_with(path, home.as_deref().filter(|h| !h.is_empty()))
}

fn tildify_with(path: &str, home: Option<&str>) -> String {
    let Some(home) = home else {
        return path.to_string();
    };
    let home = home.trim_end_matches(['/', '\\']);
    match path.strip_prefix(home) {
        // A separator has to follow, or `/Users/adalovelace` would come back
        // as a file inside `/Users/ada`.
        Some(rest) if rest.starts_with('/') || rest.starts_with('\\') => format!(
            "~/{}",
            rest.trim_start_matches(['/', '\\']).replace('\\', "/")
        ),
        _ => path.to_string(),
    }
}

/// What the key field shows while it is empty: the file ssh would reach for on
/// its own. A hint, not a value — an empty field still means "try the usual
/// `~/.ssh` keys", which is exactly what `default_identity_candidates` does.
const DEFAULT_KEY_HINT: &str = "~/.ssh/id_ed25519";

/// The password the keychain holds for this profile's endpoint, or nothing.
///
/// Read once, when a host is opened for editing — not per render, and not per
/// keystroke. A profile with no host yet has no endpoint to ask about: the
/// account would come out as `@:22`, which belongs to no server.
fn stored_password(profile: &SshProfile) -> String {
    if profile.host.trim().is_empty() {
        return String::new();
    }
    OsCredentialStore
        .password_for(&profile.user, &profile.host, profile.port)
        .ok()
        .flatten()
        .unwrap_or_default()
}

/// The first key file a profile would offer that is actually there.
///
/// A passphrase is accounted by the key's *contents*, not by its path, so a
/// file that cannot be read is a key nothing can be stored against.
fn first_readable_key(profile: &SshProfile) -> Option<String> {
    first_readable_key_in(&profile.identity_files, &profile.host, &profile.user)
}

/// The same answer for a form that has not been collected into a profile yet:
/// the key field as typed, with the host and user beside it filling in `%h`
/// and `%r`.
fn first_readable_key_in(files: &[String], host: &str, user: &str) -> Option<String> {
    first_readable_key_or(
        files,
        host,
        user,
        crate::core::ssh_profile::default_identity_candidates,
    )
}

/// An empty key field is not "no key": `build_spec_inner` offers the `~/.ssh`
/// defaults then, and looks their passphrases up by those exact strings. The
/// box has to follow the same list, or the most common setup — no key named,
/// an encrypted `id_ed25519` — could never be given a passphrase here.
fn first_readable_key_or(
    files: &[String],
    host: &str,
    user: &str,
    defaults: impl FnOnce() -> Vec<String>,
) -> Option<String> {
    let candidates = if files.is_empty() {
        defaults()
    } else {
        files
            .iter()
            .map(|f| crate::core::ssh_profile::expand_identity_placeholders(f, host, user))
            .collect()
    };
    candidates
        .into_iter()
        .find(|p| std::fs::metadata(p).is_ok())
}

fn stored_passphrase(key_path: &str) -> String {
    let path = crate::core::ssh_profile::expand_tilde(key_path);
    let Ok(bytes) = std::fs::read(&path) else {
        return String::new();
    };
    OsCredentialStore
        .passphrase_for_key(&key_account_from_contents(&bytes))
        .ok()
        .flatten()
        .unwrap_or_default()
}

impl Tty7App {
    pub(crate) fn with_settings_edits_resolved(
        &mut self,
        window: &mut Window,
        cx: &mut Context<Self>,
        action: impl FnOnce(&mut Self, &mut Window, &mut Context<Self>) + 'static,
    ) {
        let save_failed = self
            .active_settings()
            .is_some_and(|s| s.save_error.is_some());
        if !save_failed && !self.ssh_form_dirty(cx) && !self.theme_draft_dirty() {
            action(self, window, cx);
            return;
        }
        let answer = window.prompt::<gpui::PromptButton>(
            gpui::PromptLevel::Warning,
            t(L10nKey::SettingsUnsavedTitle),
            Some(t(L10nKey::SettingsUnsavedBody)),
            &[
                gpui::PromptButton::ok(t(L10nKey::SettingsSaveChanges)),
                gpui::PromptButton::new(t(L10nKey::EditorDiscard)),
                gpui::PromptButton::cancel(t(L10nKey::SettingsKeepEditing)),
            ],
            cx,
        );
        cx.spawn_in(window, async move |this, cx| {
            let Ok(choice) = answer.await else {
                return;
            };
            let _ = this.update_in(cx, |this, window, cx| {
                match choice {
                    0 => {
                        if this
                            .active_settings()
                            .is_some_and(|s| s.save_error.is_some())
                        {
                            this.persist_settings_config(cx);
                            if this
                                .active_settings()
                                .is_some_and(|s| s.save_error.is_some())
                            {
                                return;
                            }
                        }
                        if this.ssh_form_dirty(cx)
                            && this.save_editing_profile(window, cx).is_none()
                        {
                            return;
                        }
                        if !this.save_theme_draft(window, cx) {
                            return;
                        }
                    }
                    1 => {
                        this.discard_unsaved_settings(window, cx);
                        this.cancel_theme_draft(window, cx);
                        if let Some(s) = this.active_settings_mut() {
                            s.ssh_form = None;
                        }
                    }
                    _ => return,
                }
                action(this, window, cx);
            });
        })
        .detach();
    }

    pub(crate) fn navigate_settings(
        &mut self,
        target: SettingsSection,
        setting: Option<L10nKey>,
        window: &mut Window,
        cx: &mut Context<Self>,
    ) {
        if self.ssh_form_dirty(cx)
            || self.theme_draft_dirty()
            || self
                .active_settings()
                .is_some_and(|s| s.save_error.is_some())
        {
            self.with_settings_edits_resolved(window, cx, move |this, window, cx| {
                this.navigate_settings(target, setting, window, cx)
            });
            return;
        }
        if let Some(state) = self.active_settings() {
            state
                .search
                .clone()
                .update(cx, |search, cx| search.set_value("", window, cx));
        }
        let setting = match setting {
            Some(L10nKey::SettingsCustomPath)
                if cx.global::<Config>().working_directory.strategy
                    != crate::core::config::WdStrategy::Custom =>
            {
                Some(L10nKey::SettingsStartIn)
            }
            Some(L10nKey::SettingsOpenFilesCommand)
                if cx.global::<Config>().file_open_mode() != LinkFileOpen::Command =>
            {
                Some(L10nKey::OpenFilesWith)
            }
            other => other,
        };
        if let Some(state) = self.active_settings_mut() {
            state.modified_only = false;
            state.search_active = false;
            state.focused_setting = setting;
            state.reveal_first_hit.set(setting.is_some());
            state.content_scroll.set_offset(gpui::point(px(0.), px(0.)));
            state.theme_panel_open = false;
            if target == SettingsSection::Ssh
                && matches!(
                    setting,
                    Some(L10nKey::SettingsVerifyHostKeys | L10nKey::WarnBeforeClosing)
                )
            {
                state.ssh_detail = SshDetail::Defaults;
            }
        }
        self.select_settings_section(target, cx);
    }

    fn render_settings_search(&self, cx: &mut Context<Self>) -> AnyElement {
        let Some(state) = self.active_settings() else {
            return div().into_any_element();
        };
        let query = state.search.read(cx).value().trim().to_lowercase();
        let modified_only = state.modified_only;
        *state.search_rows.borrow_mut() = Some(Vec::new());
        // Build once, then retain the matching controls. Discarded page chrome
        // never enters the element tree, so controls keep their usual IDs.
        for section in SettingsSection::ALL {
            if !settings_search_entries()
                .iter()
                .any(|entry| entry.section == section && entry_matches(entry, &query))
            {
                continue;
            }
            match section {
                SettingsSection::General => {
                    self.render_settings_general(cx);
                }
                SettingsSection::Appearance => {
                    self.render_settings_appearance(cx);
                }
                SettingsSection::Terminal => {
                    self.render_settings_terminal(cx);
                }
                SettingsSection::KeyboardMouse => {
                    self.render_settings_input(cx);
                }
                SettingsSection::WindowTabs => {
                    self.render_window_preferences(false, cx);
                }
                SettingsSection::About => {
                    self.render_settings_about(cx);
                }
                // These pages have their own host/action editors.
                _ => {}
            }
        }
        let mut controls = self
            .active_settings()
            .unwrap()
            .search_rows
            .borrow_mut()
            .take()
            .unwrap_or_default();
        let cfg = cx.global::<Config>();
        let mut matches = settings_search_entries()
            .iter()
            .filter(|entry| entry_matches(entry, &query) && (!modified_only || entry.modified(cfg)))
            .collect::<Vec<_>>();
        matches.sort_by_key(|entry| {
            (
                entry.rank(&query),
                SettingsSection::ALL
                    .iter()
                    .position(|&s| s == entry.section)
                    .unwrap_or(0),
            )
        });
        let mut list = v_flex().gap_3();
        for (index, entry) in matches.iter().enumerate() {
            let title = entry.title;
            let section = if title == L10nKey::SettingsSearchKeybindingsTitle {
                SettingsSection::Keybindings
            } else {
                entry.section
            };
            let control = controls
                .iter()
                .position(|(key, _)| *key == title)
                .map(|i| controls.remove(i).1);
            let path = format!("{} › {}", t(entry.section.title()), t(title));
            let row = v_flex()
                .id(SharedString::from(format!("search-result-{title:?}")))
                .px_3()
                .py_2()
                .rounded_lg()
                .border_1()
                .border_color(cx.theme().border)
                .anchor_scroll(
                    self.active_settings()
                        .filter(|s| s.search_selection == index)
                        .map(|s| s.search_anchor.clone()),
                )
                .when(
                    self.active_settings()
                        .is_some_and(|s| s.search_selection == index),
                    |v| v.border_color(cx.theme().primary),
                )
                .child(
                    Button::new(SharedString::from(format!("search-path-{title:?}")))
                        .label(path)
                        .ghost()
                        .small()
                        .on_click(cx.listener(move |this, _, window, cx| {
                            this.navigate_settings(section, Some(title), window, cx)
                        })),
                )
                .child(control.unwrap_or_else(|| {
                    self.settings_row(
                        t(title),
                        entry.description(),
                        Button::new(SharedString::from(format!("search-open-{title:?}")))
                            .label(t(L10nKey::SettingsOpenSetting))
                            .small()
                            .on_click(cx.listener(move |this, _, window, cx| {
                                this.navigate_settings(section, Some(title), window, cx)
                            }))
                            .into_any_element(),
                        cx,
                    )
                    .into_any_element()
                }));
            list = list.child(row);
        }
        if matches.is_empty() && (modified_only || keybinding_match_count(&query) == 0) {
            list = list.child(
                div()
                    .text_sm()
                    .text_color(cx.theme().muted_foreground)
                    .child(if modified_only {
                        t(L10nKey::SettingsNoModified).to_string()
                    } else {
                        t_fmt(L10nKey::SettingsNothingMatches, &[("query", &query)])
                    }),
            );
        }
        // Action names remain searchable without exposing an entire shortcut
        // editor in the results list.
        if !query.is_empty() && !modified_only {
            let mut index = matches.len();
            for (action, _) in crate::ui::keymap::default_bindings() {
                if keybinding_matches_query(&action, &query) {
                    let (_, label) = crate::ui::keymap::action_entry(&action);
                    let anchor = self
                        .active_settings()
                        .filter(|s| s.search_selection == index)
                        .map(|s| s.search_anchor.clone());
                    let button = Button::new(SharedString::from(format!("search-action-{action}")))
                        .label(format!(
                            "{} › {}",
                            t(L10nKey::SettingsNavKeybindings),
                            label
                        ))
                        .ghost()
                        .small()
                        .selected(
                            self.active_settings()
                                .is_some_and(|s| s.search_selection == index),
                        )
                        .on_click(cx.listener(move |this, _, window, cx| {
                            let action = action.clone();
                            this.with_settings_edits_resolved(
                                window,
                                cx,
                                move |this, window, cx| {
                                    this.navigate_settings(
                                        SettingsSection::Keybindings,
                                        None,
                                        window,
                                        cx,
                                    );
                                    if let Some(s) = this.active_settings() {
                                        s.shortcut_search
                                            .clone()
                                            .update(cx, |s, cx| s.set_value(action, window, cx));
                                    }
                                },
                            );
                        }));
                    list = list.child(
                        div()
                            .id(SharedString::from(format!("search-shortcut-{index}")))
                            .anchor_scroll(anchor)
                            .child(button),
                    );
                    index += 1;
                }
            }
        }
        list.into_any_element()
    }

    pub(crate) fn render_settings(
        &self,
        window: &mut Window,
        cx: &mut Context<Self>,
    ) -> impl IntoElement + use<> {
        let theme = cx.theme();
        // The settings panel covers the whole window. Paint it on an opaque
        // surface so the workspace translucency (window opacity / backdrop
        // material) never shows through the settings UI — while keeping the
        // preset's gradient fill instead of collapsing to a flat color.
        let background: Background = crate::ui::theme::overlay_background(cx);
        // That opaque fill also covers the theme background image the
        // workspace root paints, so the panel carries its own copy (dimmed by
        // the workspace fill, or the settings text would sit straight on the
        // wallpaper); without it the image would blink out for as long as
        // settings is open.
        let background_layers = crate::ui::app::overlay_surface_layers(cx);
        let (foreground, header_muted) = (theme.foreground, theme.muted_foreground);
        let note_bg = theme.secondary.opacity(0.5);

        let (focus_handle, section, theme_panel_open, search) = match self.active_settings() {
            Some(s) => (
                s.focus_handle.clone(),
                s.section,
                s.theme_panel_open,
                s.search.clone(),
            ),
            None => return div(),
        };
        let query = search.read(cx).value().trim().to_lowercase();
        let searching = self.active_settings().is_some_and(|s| s.search_active);
        let layout_section = if searching {
            SettingsSection::General
        } else {
            section
        };
        let show_theme_panel =
            !searching && theme_panel_open && section == SettingsSection::Appearance;

        let viewport_w = window.viewport_size().width.as_f32();
        let ui_scale = ui_scale(cx);
        self.settings_viewport_w.set(viewport_w);
        let cols = settings_columns(layout_section, show_theme_panel, viewport_w);
        self.settings_row_width.set(settings_row_width(
            layout_section,
            show_theme_panel,
            viewport_w,
            ui_scale,
        ));
        self.settings_hit_anchored.set(false);

        // A query that matched here has to be reachable, not just counted. The
        // anchor lands on the first matching row below, and `scroll_to` reads
        // where it ended up on the frame after this one — by which time this
        // render has been painted and the anchor knows its own origin.
        //
        // A query that matched nowhere has to be reachable too: the note
        // saying so sits at the top of the page, and a reader who searched
        // from halfway down would otherwise be left with the untouched page
        // the note exists to explain.
        if searching
            && let Some(s) = self.active_settings()
            && s.reveal_first_hit.replace(false)
        {
            s.search_anchor.scroll_to(window, cx);
        }
        if let Some(s) = self.active_settings()
            && !searching
            && s.reveal_first_hit.get()
        {
            s.reveal_first_hit.set(false);
            let matched_here =
                section_match_count(section, &query) > 0 || s.focused_setting.is_some();
            let matched_nowhere = total_match_count(&query) == 0;
            if s.focused_setting.is_some()
                || (!query.is_empty() && (matched_here || matched_nowhere))
            {
                s.search_anchor.scroll_to(window, cx);
            }
        }

        let prof = crate::ui::perf::enabled()
            .then(|| (std::time::Instant::now(), section.profile_label()));

        let nav_item = |label: &'static str, target: SettingsSection, icon: Icon| {
            let view = cx.entity();
            let count = if query.is_empty() {
                0
            } else {
                section_match_count(target, &query)
            };
            let item = SidebarMenuItem::new(label)
                .icon(icon)
                .active(section.navigation_section() == target)
                .on_click(move |_, window, cx| {
                    view.update(cx, |this, cx| {
                        this.navigate_settings(target, None, window, cx)
                    });
                });
            if count > 0 {
                item.suffix(move |_w, _cx| {
                    div()
                        .text_xs()
                        .text_color(header_muted)
                        .child(format!("({count})"))
                })
            } else {
                item
            }
        };

        let nav_body = SettingsSection::ALL
            .into_iter()
            .fold(SidebarMenu::new(), |menu, target| {
                menu.child(nav_item(t(target.title()), target, target.icon()))
            });

        let sidebar = Sidebar::new("settings-sidebar")
            .collapsible(SidebarCollapsible::None)
            .w(px(cols.nav))
            .header(
                v_flex()
                    .w_full()
                    .px_2()
                    .gap_2()
                    .pt(px(crate::ui::app::TITLE_BAR_HEIGHT))
                    .pb_1()
                    .child(
                        div()
                            .text_xs()
                            .font_weight(FontWeight::MEDIUM)
                            .text_color(header_muted)
                            .child(t(L10nKey::SettingsHeader)),
                    )
                    .child(
                        h_flex()
                            .items_center()
                            .gap_2()
                            .child(
                                Icon::empty()
                                    .path("stock/icons/search.svg")
                                    .size(px(16.))
                                    .text_color(header_muted),
                            )
                            .child(
                                div()
                                    .flex_1()
                                    .min_w_0()
                                    .child(Input::new(&search).appearance(false).pl_0()),
                            ),
                    ),
            )
            .child(nav_body)
            .footer(
                Button::new("settings-modified-filter")
                    .label(t(L10nKey::SettingsModifiedOnly))
                    .ghost()
                    .small()
                    .selected(self.active_settings().is_some_and(|s| s.modified_only))
                    .on_click(cx.listener(|this, _, _window, cx| {
                        if let Some(s) = this.active_settings_mut() {
                            s.modified_only = !s.modified_only;
                        }
                        this.autoselect_settings_search(cx);
                    })),
            );

        let content = if searching {
            self.render_settings_search(cx)
        } else {
            match section {
                SettingsSection::General => self.render_settings_general(cx),
                SettingsSection::Appearance => self.render_settings_appearance(cx),
                SettingsSection::Terminal => self.render_settings_terminal(cx),
                SettingsSection::KeyboardMouse => self.render_settings_input(cx),
                SettingsSection::Ssh => self.render_settings_ssh(cx),
                SettingsSection::Agents => self.render_settings_agents(cx),
                SettingsSection::WindowTabs => self.render_window_preferences(false, cx),
                SettingsSection::Keybindings => self.render_settings_keybindings(cx),
                SettingsSection::About => self.render_settings_about(cx),
            }
        };

        // A query that matches nothing anywhere leaves the nav badge-less and
        // `autoselect_settings_search` with nowhere to go, so without this the
        // page just sits there looking like the search did nothing.
        let no_match_note = (!searching && !query.is_empty() && total_match_count(&query) == 0)
            .then(|| {
                div()
                    .id("settings-no-match")
                    .anchor_scroll(self.active_settings().map(|s| s.search_anchor.clone()))
                    .mb_6()
                    .px_3()
                    .py_2()
                    .rounded_lg()
                    .bg(note_bg)
                    .text_sm()
                    .text_color(header_muted)
                    .child(t_fmt(
                        L10nKey::SettingsNothingMatches,
                        &[("query", query.as_str())],
                    ))
            });

        // No fill of its own: the root already paints the opaque surface and
        // the background image behind it, and repainting here would hide the
        // image again in the one pane that fills most of the panel.
        //
        // `min_w_0` and not a `CONTENT_MIN_W` floor: `settings_columns` sized
        // the chrome so this pane clears it, and a floor a flex row cannot
        // honour does not push the nav back — it overflows, and overflow here
        // means content painted off the edge of the window, which is the other
        // half of the bug this file is fixing.
        let content_pane = if !searching && section == SettingsSection::Ssh {
            v_flex()
                .id("settings-content")
                .flex_1()
                .min_w_0()
                .h_full()
                .when_some(
                    self.active_settings().and_then(|s| s.save_error.clone()),
                    |v, error| {
                        v.child(
                            v_flex()
                                .p_3()
                                .gap_2()
                                .child(
                                    div().text_sm().child(t_fmt(
                                        L10nKey::SettingsSaveError,
                                        &[("error", &error)],
                                    )),
                                )
                                .child(
                                    Button::new("retry-ssh-settings-save")
                                        .label(t(L10nKey::SettingsRetrySave))
                                        .small()
                                        .on_click(cx.listener(|this, _, _window, cx| {
                                            this.persist_settings_config(cx)
                                        })),
                                ),
                        )
                    },
                )
                .child(content)
                .into_any_element()
        } else {
            let body = v_flex()
                .id("settings-content")
                .size_full()
                .overflow_y_scroll()
                .when_some(self.active_settings(), |pane, s| {
                    pane.track_scroll(&s.content_scroll)
                })
                .child(
                    // The padding box needs its own width for the reading
                    // column's `w_full` to resolve against something definite;
                    // without it the percentage falls back to the content, and
                    // `max_w` loses to a row that measures wider — which is how
                    // the theme card came to run the width of the window on the
                    // Chinese and Japanese pages while every other row stopped
                    // at the column.
                    //
                    // `mx_auto` on the column centres it across the page. The
                    // cap keeps a description a paragraph rather than a line to
                    // scan across, but left-aligning what it caps put the whole
                    // page against the nav: on a window as wide as the display
                    // it was made for, 640 points of settings sat beside 1600
                    // points of nothing. Centred, the page is one column with
                    // air on both sides at every width, and below the cap —
                    // where the column is the page — this does nothing at all.
                    //
                    // The centring has to come from the margin, not from an
                    // `items_center` on a flex box here. The scroll pane is a
                    // flex column and this box is its item: as a block it
                    // reports the full height of the page it stacks, but as a
                    // flex box it negotiates a height with the pane and lands
                    // near the viewport, and `content_size` — which is just
                    // this box's laid-out bounds — then leaves most of the page
                    // outside the scroll range. `flex_shrink_0` does not buy
                    // its way out of that; only staying a block does.
                    div().w_full().px_10().py_8().child(
                        div()
                            .w_full()
                            .max_w(px(READING_COLUMN * ui_scale))
                            .mx_auto()
                            .children(no_match_note)
                            .child(
                                div()
                                    .mb_5()
                                    .text_xl()
                                    .font_weight(FontWeight::SEMIBOLD)
                                    .child(t(if searching {
                                        L10nKey::SettingsSearchResults
                                    } else {
                                        section.title()
                                    })),
                            )
                            .when(self.theme_draft_dirty(), |v| {
                                v.child(
                                    v_flex()
                                        .mb_4()
                                        .gap_2()
                                        .child(
                                            div().text_sm().child(t(L10nKey::SettingsThemeDraft)),
                                        )
                                        .when_some(
                                            self.active_settings()
                                                .and_then(|s| s.theme_draft_error.clone()),
                                            |v, error| {
                                                v.child(div().text_sm().child(t_fmt(
                                                    L10nKey::SettingsSaveError,
                                                    &[("error", &error)],
                                                )))
                                            },
                                        )
                                        .child(
                                            h_flex()
                                                .gap_2()
                                                .child(
                                                    Button::new("save-theme-draft")
                                                        .label(t(L10nKey::SettingsSaveChanges))
                                                        .small()
                                                        .on_click(cx.listener(
                                                            |this, _, window, cx| {
                                                                this.save_theme_draft(window, cx);
                                                            },
                                                        )),
                                                )
                                                .child(
                                                    Button::new("cancel-theme-draft")
                                                        .label(t(L10nKey::Cancel))
                                                        .ghost()
                                                        .small()
                                                        .on_click(cx.listener(
                                                            |this, _, window, cx| {
                                                                this.cancel_theme_draft(window, cx)
                                                            },
                                                        )),
                                                ),
                                        ),
                                )
                            })
                            .when_some(
                                self.active_settings().and_then(|s| s.save_error.clone()),
                                |v, error| {
                                    v.child(
                                        v_flex()
                                            .mb_4()
                                            .gap_2()
                                            .child(div().text_sm().child(t_fmt(
                                                L10nKey::SettingsSaveError,
                                                &[("error", &error)],
                                            )))
                                            .child(
                                                Button::new("retry-settings-save")
                                                    .label(t(L10nKey::SettingsRetrySave))
                                                    .small()
                                                    .on_click(cx.listener(
                                                        |this, _, _window, cx| {
                                                            this.persist_settings_config(cx)
                                                        },
                                                    )),
                                            ),
                                    )
                                },
                            )
                            .child(content),
                    ),
                );
            v_flex()
                .flex_1()
                .min_w_0()
                .h_full()
                // No fill here either: the root paints it, and a second one on
                // the pane that covers most of the page would hide the theme
                // image behind it.
                .when_some(self.active_settings(), |pane, s| {
                    // Inset: this pane reaches both ends of the window, so a
                    // full-height bar ends up on the rounded corner.
                    pane.child(crate::ui::scrollbar::with_inset_vertical_scrollbar(
                        "settings-content-scrollbar",
                        body,
                        &s.content_scroll,
                        px(SCROLLBAR_WINDOW_INSET),
                    ))
                })
                .into_any_element()
        };

        let root = div()
            .size_full()
            .relative()
            .flex()
            .flex_row()
            .bg(background)
            .text_color(foreground)
            .track_focus(&focus_handle)
            // Escape peels one layer at a time. With the theme picker open that
            // layer is the picker: closing the whole page instead threw away a
            // panel the user had opened a moment ago, and left them to walk
            // back to Appearance to try again.
            .capture_key_down(cx.listener(move |this, ev: &KeyDownEvent, window, cx| {
                if searching
                    && this
                        .active_settings()
                        .is_some_and(|s| s.search.read(cx).focus_handle(cx).is_focused(window))
                {
                    let key = ev.keystroke.key.as_str();
                    if matches!(key, "up" | "down" | "enter") {
                        let s = this.active_settings().unwrap();
                        let query = s.search.read(cx).value().trim().to_lowercase();
                        let mut entries = settings_search_entries()
                            .iter()
                            .filter(|e| {
                                entry_matches(e, &query)
                                    && (!s.modified_only || e.modified(cx.global::<Config>()))
                            })
                            .collect::<Vec<_>>();
                        entries.sort_by_key(|e| {
                            (
                                e.rank(&query),
                                SettingsSection::ALL
                                    .iter()
                                    .position(|&s| s == e.section)
                                    .unwrap_or(0),
                            )
                        });
                        let actions = if s.modified_only {
                            Vec::new()
                        } else {
                            crate::ui::keymap::default_bindings()
                                .into_iter()
                                .filter(|(action, _)| keybinding_matches_query(action, &query))
                                .map(|(action, _)| action)
                                .collect::<Vec<_>>()
                        };
                        let count = entries.len() + actions.len();
                        if count > 0 {
                            let index = s.search_selection.min(count - 1);
                            if key == "enter" && index >= entries.len() {
                                let action = actions[index - entries.len()].clone();
                                this.with_settings_edits_resolved(
                                    window,
                                    cx,
                                    move |this, window, cx| {
                                        this.navigate_settings(
                                            SettingsSection::Keybindings,
                                            None,
                                            window,
                                            cx,
                                        );
                                        if let Some(s) = this.active_settings() {
                                            s.shortcut_search.clone().update(cx, |s, cx| {
                                                s.set_value(action, window, cx)
                                            });
                                        }
                                    },
                                );
                            } else if key == "enter" {
                                let entry = entries[index];
                                let target =
                                    if entry.title == L10nKey::SettingsSearchKeybindingsTitle {
                                        SettingsSection::Keybindings
                                    } else {
                                        entry.section
                                    };
                                this.navigate_settings(target, Some(entry.title), window, cx);
                            } else if let Some(s) = this.active_settings_mut() {
                                s.search_selection = if key == "down" {
                                    (index + 1).min(count - 1)
                                } else {
                                    index.saturating_sub(1)
                                };
                                s.reveal_first_hit.set(true);
                                cx.notify();
                            }
                        }
                        cx.stop_propagation();
                        return;
                    }
                }
            }))
            .on_key_down(cx.listener(move |this, ev: &KeyDownEvent, window, cx| {
                if ev.keystroke.key.as_str() != "escape" {
                    return;
                }
                if show_theme_panel {
                    this.close_theme_panel(window, cx);
                    return;
                }
                if searching {
                    if let Some(s) = this.active_settings_mut() {
                        s.modified_only = false;
                    }
                    if let Some(s) = this.active_settings() {
                        s.search
                            .clone()
                            .update(cx, |s, cx| s.set_value("", window, cx));
                    }
                    this.autoselect_settings_search(cx);
                    cx.stop_propagation();
                    return;
                }
                this.close_settings_checked(window, cx);
            }))
            .children(background_layers)
            .child(sidebar)
            .child(content_pane)
            .child(
                crate::ui::app::window_move_gesture(
                    div()
                        .id("settings-titlebar-drag")
                        .absolute()
                        .top_0()
                        .left_0()
                        .right_0()
                        .h(px(crate::ui::app::TITLE_BAR_HEIGHT)),
                    "settings-titlebar-drag",
                    window,
                    cx,
                )
                .on_double_click(|_, window, _| window.titlebar_double_click()),
            )
            // Beside the page while there is room for both, over it when there
            // is not. As a column it was taking its 300px from the page and
            // from nothing else, which is how a half-width window ended up
            // rendering a description one character wide.
            .when(show_theme_panel && !cols.panel_overlays, |r| {
                r.child(self.render_theme_panel(cx))
            })
            .when(show_theme_panel && cols.panel_overlays, |r| {
                r.child(
                    div()
                        .absolute()
                        .top_0()
                        .right_0()
                        .bottom_0()
                        .occlude()
                        .shadow_lg()
                        .child(self.render_theme_panel(cx)),
                )
            })
            .when(!show_theme_panel, |r| {
                r.child(
                    div()
                        .absolute()
                        .top(px((TITLE_BAR_HEIGHT - TILE_SIZE) / 2.))
                        .right(px(10.))
                        .occlude()
                        .child(
                            Button::new("settings-close")
                                .icon(Icon::new(IconName::Close))
                                .ghost()
                                .with_size(px(
                                    TILE_GLYPH_LINE / crate::ui::tab_strip::BUTTON_ICON_SCALE
                                ))
                                .w(px(TILE_SIZE))
                                .h(px(TILE_SIZE))
                                .rounded_lg()
                                .tooltip(t(L10nKey::Close))
                                .on_click(cx.listener(|this, _, window, cx| {
                                    this.close_settings_checked(window, cx)
                                })),
                        ),
                )
            });

        if let Some((start, label)) = prof {
            crate::ui::perf::record(label, start.elapsed());
        }
        root
    }

    /// The column widths this render settled on. `settings_columns` is pure and
    /// cheap, so the two pages that draw chrome of their own work them out
    /// again rather than have the answer threaded through every builder.
    fn settings_columns_now(&self) -> SettingsColumns {
        let (section, panel_open) = match self.active_settings() {
            Some(s) => (
                s.section,
                s.theme_panel_open && s.section == SettingsSection::Appearance,
            ),
            None => (SettingsSection::Appearance, false),
        };
        settings_columns(section, panel_open, self.settings_viewport_w.get())
    }

    /// Whether the row measured this render came out narrower than a threshold
    /// quoted at the default interface font — the only way those px thresholds
    /// mean anything to a reader who scaled the interface up.
    fn settings_row_under(&self, at_default_font: f32, cx: &App) -> bool {
        self.settings_row_width.get() < at_default_font * ui_scale(cx)
    }

    fn header_text(&self, title: &str, cx: &Context<Self>) -> Div {
        div()
            .text_base()
            .font_weight(FontWeight::SEMIBOLD)
            .text_color(cx.theme().foreground)
            .child(title.to_string())
    }

    /// A heading *inside* a section — quieter than `section_header`, for
    /// breaking a long run of rows into groups you can scan.
    fn subgroup_header(&self, key: L10nKey, cx: &Context<Self>) -> Div {
        div()
            .pt_4()
            .pb_1()
            .text_xs()
            .font_weight(FontWeight::MEDIUM)
            .text_color(cx.theme().muted_foreground)
            .child(t(key))
    }

    /// The scroll anchor for the first thing on the page the query matched,
    /// whatever kind of element that is. A section header can be the only
    /// match on its page — "ansi", "how shells work" — and while the dimming
    /// around it already picks it out, nothing was carrying the page to it:
    /// search "ansi" from the bottom of Appearance and every row greys out
    /// with the one answer left above the fold.
    fn first_hit_anchor(&self, label: &str, cx: &Context<Self>) -> Option<gpui::ScrollAnchor> {
        let s = self.active_settings()?;
        if s.search_active || s.search_rows.borrow().is_some() {
            return None;
        }
        if let Some(target) = s.focused_setting {
            if t(target) == label && !self.settings_hit_anchored.replace(true) {
                return Some(s.search_anchor.clone());
            }
            return None;
        }
        let query = s.search.read(cx).value().trim().to_lowercase();
        if query.is_empty() || section_match_count(s.section, &query) == 0 {
            return None;
        }
        if !row_matches_query(s.section, label, &query) {
            return None;
        }
        match self.settings_hit_anchored.replace(true) {
            false => Some(s.search_anchor.clone()),
            true => None,
        }
    }

    pub(crate) fn section_header(&self, title: &str, cx: &Context<Self>) -> Stateful<Div> {
        self.header_text(title, cx)
            .mb_4()
            .id(settings_header_id(title))
            .anchor_scroll(self.first_hit_anchor(title, cx))
    }

    fn section_intro(
        &self,
        title: &str,
        desc: impl Into<String>,
        cx: &Context<Self>,
    ) -> Stateful<Div> {
        v_flex()
            .mb_4()
            .gap_1()
            .id(settings_header_id(title))
            .anchor_scroll(self.first_hit_anchor(title, cx))
            .child(self.header_text(title, cx))
            .child(
                div()
                    .text_xs()
                    .text_color(cx.theme().muted_foreground)
                    .child(desc.into()),
            )
    }

    pub(crate) fn section_rule(&self, cx: &Context<Self>) -> Div {
        div().h(px(1.)).my_7().bg(cx.theme().sidebar_border)
    }

    pub(crate) fn settings_row(
        &self,
        label: impl Into<String>,
        desc: impl Into<String>,
        control: AnyElement,
        cx: &Context<Self>,
    ) -> Stateful<Div> {
        self.settings_row_gated_when(label, desc, control, false, cx)
    }

    /// The same row, greyed out when `gated` — for a control another setting
    /// has switched off, whose own value is still there for when it comes back.
    ///
    /// Only the text dims. The control draws its own disabled state — a
    /// switch's thumb is already down to 35% there — and dimming the whole row
    /// on top of that leaves a pill with nothing visible inside it.
    pub(crate) fn settings_row_gated_when(
        &self,
        label: impl Into<String>,
        desc: impl Into<String>,
        control: AnyElement,
        gated: bool,
        cx: &Context<Self>,
    ) -> Stateful<Div> {
        let theme = cx.theme();
        let label = label.into();
        let desc = desc.into();
        let entry = settings_search_entries()
            .iter()
            .find(|entry| t(entry.title) == label);
        let modified = entry.is_some_and(|entry| entry.modified(cx.global::<Config>()));
        let capture = self
            .active_settings()
            .is_some_and(|s| s.search_rows.borrow().is_some());
        // Descriptions can contain live status (for example an agent hook target), so they
        // must not participate in the identity that preserves GPUI's hover state.
        let element_id = settings_row_id(&label, &desc);
        // The nav badge says "Appearance (2)"; this is what makes those two
        // findable once you are on the page. Only mark rows when the section
        // actually holds a match — otherwise a query that landed elsewhere
        // would grey out a page the user is simply reading.
        let (hit, miss) = match self
            .active_settings()
            .filter(|s| !s.search_active && !capture)
        {
            Some(s) => {
                let query = s.search.read(cx).value().trim().to_lowercase();
                match query.is_empty() || section_match_count(s.section, &query) == 0 {
                    true => (false, false),
                    false => {
                        let hit = row_matches_query(s.section, &label, &query);
                        (hit, !hit)
                    }
                }
            }
            None => (false, false),
        };
        let first_hit_anchor = self.first_hit_anchor(&label, cx);
        // The control never shrinks, so on a narrow pane it takes the width and
        // the label column — which must keep `min_w_0` or long descriptions
        // stop wrapping — is squeezed to a letter per line. Below the width
        // where both still fit, put the control on its own line instead.
        // Measured, not `flex_wrap`: wrapping made the label column size to its
        // description, which then ran out past the row on every wide page.
        let stacked = self.settings_row_under(STACK_ROW_BELOW, cx);
        let labels = v_flex()
            .gap_0p5()
            .min_w_0()
            .when(gated, |col| col.opacity(0.45))
            .child(
                div()
                    .text_sm()
                    .font_weight(FontWeight::MEDIUM)
                    .text_color(theme.foreground)
                    .child(label),
            )
            .when(!desc.is_empty(), |col| {
                col.child(
                    div()
                        .text_xs()
                        .text_color(theme.muted_foreground)
                        .child(desc),
                )
            });
        let labels = labels.when(modified, |v| {
            v.child(
                h_flex()
                    .gap_2()
                    .items_center()
                    .child(
                        div()
                            .text_xs()
                            .text_color(theme.muted_foreground)
                            .child(t(L10nKey::SettingsModified)),
                    )
                    .when_some(
                        entry.filter(|e| {
                            e.title != L10nKey::SettingsSearchKeybindingsTitle
                                && e.title != L10nKey::SettingsThemeIntroTitle
                        }),
                        |v, entry| {
                            let key = entry.title;
                            v.child(
                                Button::new(SharedString::from(format!("reset-setting-{key:?}")))
                                    .label(t(L10nKey::SettingsResetValue))
                                    .ghost()
                                    .small()
                                    .on_click(cx.listener(move |this, _, window, cx| {
                                        this.reset_settings_value(key, window, cx)
                                    })),
                            )
                        },
                    ),
            )
        });
        let row = div()
            .id(element_id)
            .flex()
            .when(stacked, |row| row.flex_col().items_start().gap_2())
            .when(!stacked, |row| {
                row.flex_row().items_center().justify_between().gap_8()
            })
            .py_2()
            .px_2p5()
            .mx_neg_2p5()
            .rounded_lg()
            .when(hit, |row| row.bg(theme.accent))
            // Only the first hit on the page carries the anchor: it is the one
            // the page scrolls to, and a later row claiming it would drag the
            // view past the matches above.
            .anchor_scroll(first_hit_anchor)
            .when(miss, |row| row.opacity(0.45))
            .child(labels)
            // Stacked, the control column takes the row: that is what gives a
            // `max_w_full` control a definite width to shrink against, and on
            // the SSH page the widest of them is 260 in a column that can be
            // `CONTENT_MIN_W`.
            .child(
                h_flex()
                    .when(stacked, |c| c.w_full())
                    .when(!stacked, |c| c.flex_shrink_0())
                    .child(control),
            );
        if capture {
            if let Some(entry) = entry {
                self.active_settings()
                    .unwrap()
                    .search_rows
                    .borrow_mut()
                    .as_mut()
                    .unwrap()
                    .push((entry.title, row.into_any_element()));
                return div().id("captured-setting");
            }
        }
        row
    }

    pub(crate) fn segmented(
        &self,
        id: impl Into<SharedString>,
        options: &[&str],
        selected: usize,
        cx: &mut Context<Self>,
        on_pick: impl Fn(&mut Self, usize, &mut Window, &mut Context<Self>) + 'static,
    ) -> AnyElement {
        let sf = cx.global::<presets::Surfaces>().window;
        self.segmented_on(sf, id, options, selected, cx, on_pick)
    }

    pub(crate) fn segmented_on(
        &self,
        sf: presets::Surface,
        id: impl Into<SharedString>,
        options: &[&str],
        selected: usize,
        cx: &mut Context<Self>,
        on_pick: impl Fn(&mut Self, usize, &mut Window, &mut Context<Self>) + 'static,
    ) -> AnyElement {
        self.segmented_full(sf, id, options, Some(selected), None, cx, on_pick)
    }

    /// A segmented control over a fixed set of values, used where the config
    /// accepts anything in a range. When the live value matches a bucket
    /// exactly that bucket is highlighted; when it does not, a trailing
    /// "Custom (N)" cell carries the highlight instead of the nearest bucket
    /// getting a label it does not have — `scrollback_limit: 5000` used to
    /// light up "10,000", and clicking that cell silently overwrote the real
    /// value with the bucket's (#550).
    ///
    /// `selected` and `custom_label` come as a pair out of [`preset_choice`]:
    /// exactly one of them is `Some`, so exactly one cell is highlighted. The
    /// custom cell is not a button — there is no bucket value behind it to
    /// write — so it takes neither a click handler nor a pointer cursor, and
    /// the buckets beside it stay clickable to move off the custom value.
    pub(crate) fn segmented_valued(
        &self,
        id: impl Into<SharedString>,
        options: &[&str],
        selected: Option<usize>,
        custom_label: Option<String>,
        cx: &mut Context<Self>,
        on_pick: impl Fn(&mut Self, usize, &mut Window, &mut Context<Self>) + 'static,
    ) -> AnyElement {
        let sf = cx.global::<presets::Surfaces>().window;
        self.segmented_full(sf, id, options, selected, custom_label, cx, on_pick)
    }

    fn segmented_full(
        &self,
        sf: presets::Surface,
        id: impl Into<SharedString>,
        options: &[&str],
        selected: Option<usize>,
        custom_label: Option<String>,
        cx: &mut Context<Self>,
        on_pick: impl Fn(&mut Self, usize, &mut Window, &mut Context<Self>) + 'static,
    ) -> AnyElement {
        let border = cx.theme().border;
        let id: SharedString = id.into();
        let on_pick = std::rc::Rc::new(on_pick);
        let count = options.len() + usize::from(custom_label.is_some());
        // The display cells: the fixed buckets, then the custom cell if the
        // live value matched none of them.
        let cells: Vec<(String, Option<usize>)> = options
            .iter()
            .enumerate()
            .map(|(i, l)| (l.to_string(), Some(i)))
            .chain(custom_label.map(|l| (l, None)))
            .collect();
        h_flex()
            .id(gpui::ElementId::Name(id.clone()))
            .h(px(24.))
            .rounded(rounding::TRACK_RADIUS)
            .border_1()
            .border_color(border)
            .bg(gpui::rgb(sf.base))
            .overflow_hidden()
            .children(cells.into_iter().enumerate().map(|(i, (label, bucket))| {
                // A bucket is highlighted only on an exact match, and the
                // custom cell (`bucket == None`) exactly when no bucket was.
                let active = bucket == selected;
                let on_pick = on_pick.clone();
                let corners =
                    rounding::segment_corners(i, count, rounding::TRACK_RADIUS, rounding::HAIRLINE);
                let cell = h_flex()
                    .id(gpui::ElementId::NamedInteger(id.clone(), i as u64))
                    .items_center()
                    .justify_center()
                    .h_full()
                    .px_2p5()
                    .text_sm()
                    .rounded_corners(corners)
                    .when(i > 0, |s| s.border_l_1().border_color(border))
                    .when(active, |s| {
                        s.bg(gpui::rgb(sf.selected))
                            .text_color(gpui::rgb(sf.text_selected))
                            .font_weight(FontWeight::MEDIUM)
                    })
                    .when(!active, |s| {
                        s.text_color(gpui::rgb(sf.text_resting))
                            .hover(|h| h.bg(gpui::rgb(sf.hover)))
                    })
                    .child(label);
                match bucket {
                    Some(ix) => cell
                        .cursor_pointer()
                        .active(|s| s.bg(gpui::rgb(sf.pressed)))
                        .on_click(cx.listener(move |this, _, window, cx| {
                            on_pick(this, ix, window, cx);
                        })),
                    // The custom cell names the current value; it is not a
                    // button, because there is no bucket value to write.
                    None => cell,
                }
            }))
            .into_any_element()
    }

    fn render_settings_general(&self, cx: &mut Context<Self>) -> AnyElement {
        let Some(state) = self.active_settings() else {
            return div().into_any_element();
        };
        let language_select = state.language_select.clone();
        let foreground = cx.theme().foreground;
        let muted_fg = cx.theme().muted_foreground;
        let control_h = px(24.);
        let language_control = Select::new(&language_select)
            .small()
            .w(px(FIELD_W))
            .h(control_h)
            .menu_max_h(px(224.))
            .into_any_element();

        v_flex()
            .child(self.settings_row(t(L10nKey::SettingsLanguage), t(L10nKey::SettingsLanguageDesc), language_control, cx))
            .child(self.section_rule(cx))
            .child(self.render_window_preferences(true, cx))
            .when(cfg!(target_os = "macos"), |this| {
                this.child(self.section_rule(cx)).child(
                    v_flex()
                        .gap_2()
                        .child(
                            div()
                                .text_sm()
                                .font_weight(FontWeight::SEMIBOLD)
                                .text_color(foreground)
                                .child(t(L10nKey::SettingsDefaultTerminal)),
                        )
                        .child(
                            div()
                                .text_xs()
                                .text_color(muted_fg)
                                .child(t(L10nKey::SettingsDefaultTerminalDesc)),
                        )
                        .child(
                            Button::new("set-default-terminal")
                                .label(t(L10nKey::SettingsDefaultTerminalSet))
                                .small()
                                .on_click(cx.listener(|_, _, window, cx| {
                                    let message = match crate::core::default_terminal::set_as_default_terminal() {
                                        Ok(()) => t(L10nKey::SettingsDefaultTerminalSetSuccess).to_string(),
                                        Err(error) => t_fmt(
                                            L10nKey::SettingsDefaultTerminalSetFailed,
                                            &[("error", &error)],
                                        ),
                                    };
                                    window.push_notification(message, cx);
                                })),
                        ),
                )
            })

            .child(self.section_rule(cx))
            .child(self.render_settings_maintenance(cx))
            .into_any_element()
    }

    fn render_settings_appearance(&self, cx: &mut Context<Self>) -> AnyElement {
        let theme = cx.theme();
        let foreground = theme.foreground;
        let border = theme.border;
        let hover_bg = gpui::rgb(cx.global::<presets::Surfaces>().window.hover);
        let stepper_bg = theme.secondary.opacity(0.35);
        let font_size = self.font_size;
        let (font_select, font_bold_select, font_italic_select, ui_font_select) =
            match self.active_settings() {
                Some(s) => (
                    s.font_select.clone(),
                    s.font_bold_select.clone(),
                    s.font_italic_select.clone(),
                    s.ui_font_select.clone(),
                ),
                None => return div().into_any_element(),
            };
        let cfg = cx.global::<Config>();
        let cursor_style = cfg.cursor_style;
        let cursor_blink = cfg.cursor_blink;
        let font_ligatures = cfg.font_features.as_ref().is_some_and(|features| {
            features.is_calt_enabled() == Some(true)
                || features
                    .tag_value_list()
                    .iter()
                    .any(|(tag, value)| tag == "liga" && *value != 0)
        });

        let step = move |id: &'static str, glyph: &'static str, slot: usize| {
            let corners =
                rounding::segment_corners(slot, 3, rounding::TRACK_RADIUS, rounding::HAIRLINE);
            h_flex()
                .id(id)
                .items_center()
                .justify_center()
                .h_full()
                .px_2p5()
                .text_sm()
                .cursor_pointer()
                .text_color(foreground)
                .when(slot > 0, |s| s.border_l_1().border_color(border))
                .rounded_corners(corners)
                .hover(|h| h.bg(hover_bg))
                .child(glyph)
        };
        let control_h = px(24.);
        let stepper_row = move |dec: Stateful<Div>, value: String, inc: Stateful<Div>| {
            h_flex()
                .items_center()
                .gap_3()
                .child(
                    h_flex()
                        .items_center()
                        .h(control_h)
                        .rounded(rounding::TRACK_RADIUS)
                        .bg(stepper_bg)
                        .border_1()
                        .border_color(border)
                        .overflow_hidden()
                        .child(dec)
                        .child(
                            div()
                                .min_w(px(40.))
                                .border_l_1()
                                .border_color(border)
                                .py_1()
                                .text_center()
                                .text_sm()
                                .text_color(foreground)
                                .child(value),
                        )
                        .child(inc),
                )
                .into_any_element()
        };
        let font_size_control = stepper_row(
            step("font-dec", "−", 0).on_click(
                cx.listener(|this, _, _w, cx| this.change_font_size(-FONT_SIZE_STEP, cx)),
            ),
            format!("{:.0}", font_size),
            step("font-inc", "+", 2)
                .on_click(cx.listener(|this, _, _w, cx| this.change_font_size(FONT_SIZE_STEP, cx))),
        );

        let ui_font_size = self.ui_font_size(cx);
        let ui_font_size_control = stepper_row(
            step("ui-font-dec", "−", 0).on_click(
                cx.listener(|this, _, _w, cx| this.change_ui_font_size(-UI_FONT_SIZE_STEP, cx)),
            ),
            format!("{ui_font_size:.0}"),
            step("ui-font-inc", "+", 2).on_click(
                cx.listener(|this, _, _w, cx| this.change_ui_font_size(UI_FONT_SIZE_STEP, cx)),
            ),
        );

        let line_height = self.line_height;
        let line_height_control = stepper_row(
            step("lh-dec", "−", 0).on_click(
                cx.listener(|this, _, _w, cx| this.change_line_height(-LINE_HEIGHT_STEP, cx)),
            ),
            format!("{:.2}", line_height),
            step("lh-inc", "+", 2).on_click(
                cx.listener(|this, _, _w, cx| this.change_line_height(LINE_HEIGHT_STEP, cx)),
            ),
        );

        let font_dropdown = |state: &Entity<SelectState<SearchableVec<String>>>| {
            Select::new(state)
                .small()
                .w(px(FIELD_W))
                .h(control_h)
                .search_placeholder(crate::ui::i18n::t(crate::ui::i18n::L10nKey::SearchFonts))
                .menu_max_h(px(224.))
                .into_any_element()
        };
        let font_family_control = font_dropdown(&font_select);
        let font_bold_control = font_dropdown(&font_bold_select);
        let font_italic_control = font_dropdown(&font_italic_select);
        let ui_font_family_control = font_dropdown(&ui_font_select);
        let ligature_switch = crate::ui::theme::switch("font-ligatures", cx)
            .checked(font_ligatures)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_font_ligatures(*on, cx)))
            .into_any_element();

        let cursor_idx = match cursor_style {
            CursorStyle::Block => 0,
            CursorStyle::Bar => 1,
            CursorStyle::Underline => 2,
        };
        let cursor_style_control = self.segmented(
            "cursor-style",
            &[
                t(L10nKey::CursorShapeBlock),
                t(L10nKey::CursorShapeBar),
                t(L10nKey::CursorShapeUnderline),
            ],
            cursor_idx,
            cx,
            |this, ix, _w, cx| {
                let style = match ix {
                    0 => CursorStyle::Block,
                    1 => CursorStyle::Bar,
                    _ => CursorStyle::Underline,
                };
                this.set_cursor_style(style, cx);
            },
        );
        let blink_switch = crate::ui::theme::switch("cursor-blink", cx)
            .checked(cursor_blink)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_cursor_blink(*on, cx)))
            .into_any_element();

        v_flex()
            .child(self.section_intro(
                t(L10nKey::SettingsThemeIntroTitle),
                t(L10nKey::SettingsThemeIntroDesc),
                cx,
            ))
            .child(self.render_theme_selection(cx))
            .child(self.render_custom_themes(cx))
            .child(self.section_rule(cx))
            .child(self.render_window_section(cx))
            .child(self.section_rule(cx))
            .child(self.section_header(t(L10nKey::SettingsInterfaceFontGroup), cx))
            .child(self.settings_row(
                t(L10nKey::SettingsUiFontFamily),
                t(L10nKey::SettingsUiFontFamilyDesc),
                ui_font_family_control,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsUiFontSize),
                t(L10nKey::SettingsUiFontSizeDesc),
                ui_font_size_control,
                cx,
            ))
            .child(self.section_rule(cx))
            .child(self.section_header(t(L10nKey::SettingsTerminalFontGroup), cx))
            .child(self.settings_row(
                t(L10nKey::SettingsFontFamily),
                t(L10nKey::SettingsFontFamilyDesc),
                font_family_control,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsFontSize),
                t(L10nKey::SettingsFontSizeDesc),
                font_size_control,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsLineHeight),
                t(L10nKey::SettingsLineHeightDesc),
                line_height_control,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsBoldFont),
                t(L10nKey::SettingsBoldFontDesc),
                font_bold_control,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsItalicFont),
                t(L10nKey::SettingsItalicFontDesc),
                font_italic_control,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsFontLigatures),
                t(L10nKey::SettingsFontLigaturesDesc),
                ligature_switch,
                cx,
            ))
            .child(self.section_rule(cx))
            .child(self.section_header(t(L10nKey::SettingsCursor), cx))
            .child(self.settings_row(
                t(L10nKey::SettingsCursorShape),
                t(L10nKey::SettingsCursorShapeDesc),
                cursor_style_control,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsCursorBlink),
                t(L10nKey::SettingsCursorBlinkDesc),
                blink_switch,
                cx,
            ))
            .into_any_element()
    }

    fn render_window_section(&self, cx: &mut Context<Self>) -> AnyElement {
        let Some(slider) = self
            .active_settings()
            .map(|s| s.window_opacity_slider.clone())
        else {
            return div().into_any_element();
        };
        let config = cx.global::<Config>();
        let overridden = window_overrides_active(config, cfg!(target_os = "windows"));
        let dim_inactive_panes = config.dim_inactive_panes;
        let opacity = Tty7App::effective_window_opacity(cx);

        let opacity_control = h_flex()
            .items_center()
            .gap_3()
            .w(px(FIELD_W))
            .max_w_full()
            .child(div().flex_1().child(Slider::new(&slider)))
            .child(
                div()
                    .w(px(38.))
                    .flex_shrink_0()
                    .whitespace_nowrap()
                    .text_right()
                    .text_sm()
                    .text_color(cx.theme().foreground)
                    .child(format!("{:.0}%", opacity * 100.)),
            )
            .into_any_element();
        // Windows exposes the native backdrop materials directly; macOS keeps
        // the simple blur toggle, which drives its vibrancy.
        #[cfg(target_os = "windows")]
        let blur_control = {
            // Both selects come from the same SettingsState resolved at the
            // top of this function (window_opacity_slider), so the None arm
            // is unreachable today; fall back to an empty control rather
            // than returning from the whole section — a missing select must
            // never silently drop the opacity slider and the rest.
            match self
                .active_settings()
                .map(|s| s.window_backdrop_select.clone())
            {
                Some(select) => Select::new(&select)
                    .small()
                    .w(px(FIELD_W))
                    .h(px(24.))
                    .menu_max_h(px(224.))
                    .into_any_element(),
                None => div().into_any_element(),
            }
        };
        #[cfg(not(target_os = "windows"))]
        let blur_control =
            {
                let theme = presets::by_id(cx, &crate::ui::theme::effective_preset_id(cx));
                let blur = config.window_blur.unwrap_or(theme.blur);
                crate::ui::theme::switch("window-blur", cx)
                    .checked(blur)
                    .on_click(cx.listener(|this, on: &bool, window, cx| {
                        this.set_window_blur(*on, window, cx)
                    }))
                    .into_any_element()
            };
        // `Auto` is the one backdrop that still defers to the legacy blur
        // flag, which is shared with the other platforms' vibrancy switch and
        // travels with a synced config. Offer that switch here exactly when it
        // has an effect — otherwise a stored `window_blur: true` would blur
        // the window with no visible control to clear it, short of the reset
        // button, which also discards the user's opacity.
        #[cfg(target_os = "windows")]
        let auto_blur_row = (config.window_backdrop == WindowBackdrop::Auto).then(|| {
            let theme = presets::by_id(cx, &crate::ui::theme::effective_preset_id(cx));
            let blur = config.window_blur.unwrap_or(theme.blur);
            let control =
                crate::ui::theme::switch("window-blur", cx)
                    .checked(blur)
                    .on_click(cx.listener(|this, on: &bool, window, cx| {
                        this.set_window_blur(*on, window, cx)
                    }))
                    .into_any_element();
            self.settings_row(
                t(L10nKey::SettingsBlur),
                // Not `SettingsBlurDesc` — that one describes the switch's
                // usual job, blurring whatever sits behind the window. This
                // row explains its one remaining job on Windows: feeding the
                // `Auto` material.
                t(L10nKey::SettingsBlurAutoDesc),
                control,
                cx,
            )
        });
        #[cfg(not(target_os = "windows"))]
        let auto_blur_row: Option<Stateful<Div>> = None;
        let dim_switch = crate::ui::theme::switch("dim-inactive-panes", cx)
            .checked(dim_inactive_panes)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_dim_inactive_panes(*on, cx)))
            .into_any_element();

        v_flex()
            .child(self.section_header(t(L10nKey::SettingsTransparency), cx))
            .child(self.settings_row(
                t(L10nKey::SettingsOpacity),
                t(L10nKey::SettingsOpacityDesc),
                opacity_control,
                cx,
            ))
            .child(self.settings_row(
                t(if cfg!(target_os = "windows") {
                    L10nKey::SettingsBackdrop
                } else {
                    L10nKey::SettingsBlur
                }),
                t(if cfg!(target_os = "windows") {
                    L10nKey::SettingsBackdropDesc
                } else {
                    L10nKey::SettingsBlurDesc
                }),
                blur_control,
                cx,
            ))
            .children(auto_blur_row)
            .when(overridden, |this| {
                this.child(
                    h_flex().mt_2().child(
                        Button::new("follow-theme-window")
                            .label(t(L10nKey::FollowTheme))
                            .small()
                            .on_click(cx.listener(|this, _, window, cx| {
                                this.reset_window_overrides(window, cx)
                            })),
                    ),
                )
            })
            .child(self.settings_row(
                t(L10nKey::SettingsDimInactivePanes),
                t(L10nKey::SettingsDimInactivePanesDesc),
                dim_switch,
                cx,
            ))
            .into_any_element()
    }

    fn render_custom_themes(&self, cx: &mut Context<Self>) -> AnyElement {
        let editor = self.active_settings().and_then(|s| s.theme_editor.as_ref());

        let folder_button = Button::new("open-themes-folder")
            .label(t(L10nKey::SettingsOpenThemesFolder))
            .small()
            .on_click(cx.listener(|this, _, w, cx| this.open_themes_folder(w, cx)));

        if let Some(editor) = editor {
            let label_of = |&(edit, ref state): &(ThemeEdit, Entity<ColorPickerState>)| {
                (
                    crate::ui::app::theme_edit_label(edit).to_string(),
                    state.clone(),
                )
            };
            let seed: Vec<_> = editor.seed.iter().map(label_of).collect();
            let ansi: Vec<_> = editor.ansi.iter().map(label_of).collect();
            let image_opacity_slider = editor.image_opacity_slider.clone();

            let theme = presets::by_id(cx, &crate::ui::theme::effective_preset_id(cx));
            let image = theme.image.clone();
            let image_name = image.as_ref().map(|i| {
                i.path
                    .file_name()
                    .map(|n| n.to_string_lossy().to_string())
                    .unwrap_or_else(|| i.path.display().to_string())
            });
            let image_control = h_flex()
                .items_center()
                .gap_2()
                .w(px(FIELD_W))
                .child(
                    Button::new("pick-theme-image")
                        .label(if image.is_some() {
                            t(L10nKey::SettingsChangeThemeImage)
                        } else {
                            t(L10nKey::SettingsChooseThemeImage)
                        })
                        .small()
                        .on_click(cx.listener(|this, _, _w, cx| this.pick_theme_image(cx))),
                )
                .when_some(image_name, |this, name| {
                    this.child(
                        div()
                            .flex_1()
                            .min_w_0()
                            .overflow_hidden()
                            .text_sm()
                            .text_color(cx.theme().muted_foreground)
                            .child(name),
                    )
                    .child(
                        Button::new("remove-theme-image")
                            .label(t(L10nKey::SettingsRemoveThemeImage))
                            .small()
                            .on_click(cx.listener(|this, _, window, cx| {
                                this.remove_theme_image(window, cx)
                            })),
                    )
                })
                .into_any_element();
            let image_opacity_row = image_opacity_slider.map(|slider| {
                let readout = image.as_ref().map(|i| i.opacity).unwrap_or(0.3);
                let control = h_flex()
                    .items_center()
                    .gap_3()
                    .w(px(FIELD_W))
                    .child(div().flex_1().child(Slider::new(&slider)))
                    .child(
                        div()
                            .w(px(38.))
                            .flex_shrink_0()
                            .whitespace_nowrap()
                            .text_right()
                            .text_sm()
                            .text_color(cx.theme().foreground)
                            .child(format!("{:.0}%", readout * 100.)),
                    )
                    .into_any_element();
                self.settings_row(
                    t(L10nKey::SettingsImageOpacity),
                    t(L10nKey::SettingsImageOpacityDesc),
                    control,
                    cx,
                )
            });

            return v_flex()
                .mt_5()
                .child(self.section_intro(
                    t(L10nKey::SettingsEditTheme),
                    t(L10nKey::SettingsEditThemeIntro),
                    cx,
                ))
                .children(
                    seed.into_iter()
                        .map(|(label, state)| self.render_theme_color_row(label, state, cx)),
                )
                .child(self.settings_row(
                    t(L10nKey::SettingsBackgroundImage),
                    t(L10nKey::SettingsBackgroundImageDesc),
                    image_control,
                    cx,
                ))
                .children(image_opacity_row)
                .child(self.section_header(t(L10nKey::SettingsAnsiColors), cx))
                .children(
                    ansi.into_iter()
                        .map(|(label, state)| self.render_theme_color_row(label, state, cx)),
                )
                .child(h_flex().mt_4().child(folder_button))
                .into_any_element();
        }

        v_flex()
            .mt_5()
            .child(self.section_intro(
                t(L10nKey::SettingsCustomThemes),
                t(L10nKey::SettingsCustomThemesIntro),
                cx,
            ))
            .child(
                h_flex()
                    .gap_3()
                    .child(
                        Button::new("duplicate-theme")
                            .label(t(L10nKey::SettingsDuplicateToEdit))
                            .small()
                            .on_click(cx.listener(|this, _, window, cx| {
                                this.fork_active_theme(window, cx)
                            })),
                    )
                    .child(folder_button),
            )
            .into_any_element()
    }

    fn render_theme_color_row(
        &self,
        label: String,
        state: Entity<ColorPickerState>,
        cx: &mut Context<Self>,
    ) -> impl IntoElement + use<> {
        let control = ColorPicker::new(&state).small().into_any_element();
        self.settings_row(label, "", control, cx)
    }

    fn render_settings_ssh(&self, cx: &mut Context<Self>) -> AnyElement {
        let border = cx.theme().border;
        let Some((master_scroll, detail_scroll)) = self
            .active_settings()
            .map(|s| (s.ssh_master_scroll.clone(), s.ssh_detail_scroll.clone()))
        else {
            return div().into_any_element();
        };
        let master = v_flex()
            .id("ssh-master")
            .size_full()
            .overflow_y_scroll()
            .track_scroll(&master_scroll)
            .child(self.render_ssh_master(cx));
        let detail = v_flex()
            .id("ssh-detail")
            .size_full()
            .overflow_y_scroll()
            .track_scroll(&detail_scroll)
            .child(
                div()
                    .pt(px(crate::ui::app::TITLE_BAR_HEIGHT))
                    .px_8()
                    .pb_8()
                    .child(
                        div()
                            .w_full()
                            .max_w(px(720.))
                            .child(self.render_ssh_detail(cx)),
                    ),
            );
        h_flex()
            .size_full()
            .items_start()
            .child(
                v_flex()
                    .flex_shrink_0()
                    .w(px(self.settings_columns_now().ssh_list))
                    .h_full()
                    .border_r_1()
                    .border_color(border)
                    .child(crate::ui::scrollbar::with_vertical_scrollbar(
                        "ssh-master-scrollbar",
                        master,
                        &master_scroll,
                    )),
            )
            .child(v_flex().flex_1().min_w_0().h_full().child(
                crate::ui::scrollbar::with_vertical_scrollbar(
                    "ssh-detail-scrollbar",
                    detail,
                    &detail_scroll,
                ),
            ))
            .into_any_element()
    }

    fn render_ssh_master(&self, cx: &mut Context<Self>) -> AnyElement {
        let muted = cx.theme().muted_foreground;
        let sf = cx.global::<presets::Surfaces>().window;
        let profiles = cx.global::<Config>().ssh_profiles.clone();
        let (filter, collapsed, detail) = match self.active_settings() {
            Some(s) => (
                s.ssh_filter.clone(),
                s.ssh_collapsed_groups.clone(),
                s.ssh_detail,
            ),
            None => return div().into_any_element(),
        };
        let query = filter.read(cx).value().trim().to_lowercase();
        let live = self.live_ssh_profiles(cx);
        let menu_app = cx.entity().downgrade();

        let header = v_flex()
            .gap_2()
            .child(self.header_text(t(L10nKey::SettingsHosts), cx))
            .child(
                h_flex()
                    .items_center()
                    .gap_2()
                    .child(
                        Icon::empty()
                            .path("stock/icons/search.svg")
                            .size(px(16.))
                            .text_color(muted),
                    )
                    .child(
                        div()
                            .flex_1()
                            .min_w_0()
                            .child(Input::new(&filter).appearance(false).pl_0()),
                    )
                    .child(
                        h_flex()
                            .flex_shrink_0()
                            .gap_0p5()
                            .child(
                                Button::new("ssh-profiles-add")
                                    .icon(Icon::new(IconName::Plus))
                                    .ghost()
                                    .small()
                                    .tooltip(t(L10nKey::SettingsNewHost))
                                    .on_click(cx.listener(|this, _, window, cx| {
                                        this.add_new_profile(window, cx)
                                    })),
                            )
                            .child(
                                Button::new("ssh-profiles-more")
                                    .icon(Icon::empty().path("stock/icons/ellipsis.svg"))
                                    .ghost()
                                    .small()
                                    .tooltip(t(L10nKey::TabTooltipMore))
                                    .dropdown_menu_with_anchor(
                                        gpui::Anchor::TopRight,
                                        move |menu, _window, _cx| {
                                            Self::ssh_master_menu(menu, &menu_app)
                                        },
                                    ),
                            ),
                    ),
            );

        let mut groups: Vec<(String, Vec<SshProfile>)> = Vec::new();
        for p in profiles.iter().filter(|p| ssh_row_matches(p, &query)) {
            let key = ssh_group_key(p).to_string();
            match groups.iter_mut().find(|(k, _)| *k == key) {
                Some((_, bucket)) => bucket.push(p.clone()),
                None => groups.push((key, vec![p.clone()])),
            }
        }
        groups.sort_by(|a, b| {
            ssh_group_rank(&a.0)
                .cmp(&ssh_group_rank(&b.0))
                .then_with(|| a.0.cmp(&b.0))
        });

        let mut list = v_flex().gap_0p5().w_full().child(self.render_ssh_row(
            "ssh-defaults-row",
            t(L10nKey::SettingsDefaults),
            t(L10nKey::SettingsInheritedByEveryHost),
            detail == SshDetail::Defaults,
            None,
            sf,
            cx.listener(|this, _, window, cx| this.select_ssh_defaults(window, cx)),
            None,
            cx,
        ));

        if profiles.is_empty() {
            list = list.child(
                div()
                    .py_4()
                    // px_2 is what `render_ssh_row` insets its title by: a note
                    // standing in for the rows starts on their column, not on
                    // the list's own edge.
                    .px_2()
                    .text_sm()
                    .text_color(muted)
                    .child(t(L10nKey::SettingsNoSavedHosts)),
            );
        } else if groups.is_empty() {
            list = list.child(
                div()
                    .py_4()
                    .px_2()
                    .text_sm()
                    .text_color(muted)
                    .child(t_fmt(L10nKey::SettingsNothingMatches, &[("query", &query)])),
            );
        }

        for (key, bucket) in groups {
            let is_collapsed = query.is_empty() && collapsed.contains(&key);
            let live_here = bucket.iter().filter(|p| live.contains(&p.id)).count();
            list = list.child(self.render_ssh_group_header(
                &key,
                bucket.len(),
                is_collapsed,
                live_here,
                cx,
            ));
            if is_collapsed {
                continue;
            }
            for p in &bucket {
                list = list.child(self.render_ssh_host_row(
                    p,
                    detail == SshDetail::Profile(p.id),
                    live.contains(&p.id),
                    sf,
                    cx,
                ));
            }
        }

        v_flex()
            .p_2()
            .gap_2()
            .pt(px(crate::ui::app::TITLE_BAR_HEIGHT))
            .child(header)
            .child(list)
            .into_any_element()
    }

    fn ssh_master_menu(menu: PopupMenu, app: &gpui::WeakEntity<Self>) -> PopupMenu {
        menu.min_w(px(200.))
            .item(
                PopupMenuItem::new(t(L10nKey::SettingsImportFromSshConfig)).on_click({
                    let app = app.clone();
                    move |_, window, cx| {
                        let _ =
                            app.update(cx, |this, cx| this.import_ssh_config_profiles(window, cx));
                    }
                }),
            )
            .item(
                PopupMenuItem::new(t(L10nKey::SettingsExpandAllGroups)).on_click({
                    let app = app.clone();
                    move |_, _window, cx| {
                        let _ = app.update(cx, |this, cx| {
                            if let Some(s) = this.active_settings_mut() {
                                s.ssh_collapsed_groups.clear();
                            }
                            cx.notify();
                        });
                    }
                }),
            )
    }

    fn render_ssh_group_header(
        &self,
        key: &str,
        count: usize,
        collapsed: bool,
        live_here: usize,
        cx: &mut Context<Self>,
    ) -> AnyElement {
        let muted = cx.theme().muted_foreground;
        let sf = cx.global::<presets::Surfaces>().window;
        let owned_key = key.to_string();
        let chevron = if collapsed {
            IconName::ChevronRight
        } else {
            IconName::ChevronDown
        };
        h_flex()
            .id(SharedString::from(format!("ssh-group-{key}")))
            .items_center()
            .gap_1()
            .w_full()
            .mt_2()
            .py_1()
            // 8 + 10 + 4 puts the group name on the same column as a host
            // title, which sits 8 + 6 + 8 past the list edge — and it hands
            // the header the same 8px inset the rows hover with.
            .px_2()
            .rounded_md()
            .cursor_pointer()
            .text_xs()
            .text_color(muted)
            .hover(|s| s.bg(gpui::rgb(sf.hover)))
            .on_mouse_down(
                MouseButton::Left,
                cx.listener(move |this, _, _w, cx| {
                    cx.stop_propagation();
                    this.toggle_ssh_group(owned_key.clone(), cx);
                }),
            )
            .child(Icon::new(chevron).size(px(10.)))
            .child(div().truncate().child(ssh_group_label(key).to_string()))
            .child(div().child(format!("· {count}")))
            .child(div().flex_1())
            .when(collapsed && live_here > 0, |row| {
                row.child(
                    h_flex()
                        .items_center()
                        .gap_1()
                        .child(div().size(px(5.)).rounded_full().bg(cx.theme().success))
                        .child(div().child(live_here.to_string())),
                )
            })
            .into_any_element()
    }

    fn render_ssh_host_row(
        &self,
        p: &SshProfile,
        selected: bool,
        live: bool,
        sf: presets::Surface,
        cx: &mut Context<Self>,
    ) -> AnyElement {
        let id = p.id;
        let row_idx = id.as_u128() as usize;
        let subtitle = to_connect_string(p);
        let title = if p.name.is_empty() {
            subtitle.clone()
        } else {
            p.name.clone()
        };
        self.render_ssh_row(
            SharedString::from(format!("ssh-profile-row-{row_idx}")),
            title,
            subtitle,
            selected,
            Some(live),
            sf,
            cx.listener(move |this, _, window, cx| {
                if selected {
                    return;
                }
                if let Some(profile) = cx
                    .global::<Config>()
                    .ssh_profiles
                    .iter()
                    .find(|p| p.id == id)
                    .cloned()
                {
                    this.ssh_form_load(&profile, window, cx);
                }
            }),
            Some(id),
            cx,
        )
    }

    #[allow(clippy::too_many_arguments)]
    fn render_ssh_row(
        &self,
        element_id: impl Into<gpui::ElementId>,
        title: impl Into<SharedString>,
        subtitle: impl Into<SharedString>,
        selected: bool,
        dot: Option<bool>,
        sf: presets::Surface,
        on_select: impl Fn(&gpui::MouseDownEvent, &mut Window, &mut App) + 'static,
        menu_for: Option<Uuid>,
        cx: &mut Context<Self>,
    ) -> AnyElement {
        let muted = cx.theme().muted_foreground;
        let success = cx.theme().success;
        let border = cx.theme().border;
        let title: SharedString = title.into();
        let group_name = SharedString::from(format!("ssh-row-group-{title}"));
        let hover_group = group_name.clone();

        let row = h_flex()
            .id(element_id)
            .group(group_name)
            .items_center()
            .gap_2()
            .w_full()
            .py_2()
            .px_2()
            .rounded_md()
            .when(selected, |r| r.bg(gpui::rgb(sf.selected)))
            .when(!selected, |r| r.hover(|s| s.bg(gpui::rgb(sf.hover))))
            .on_mouse_down(MouseButton::Left, move |ev, window, cx| {
                cx.stop_propagation();
                on_select(ev, window, cx);
            })
            // The gutter is here on every row, dot or no dot. Only hosts carry
            // a liveness dot, and skipping the space on the rows that don't —
            // Defaults, and nothing else — started their title 14px left of
            // every host title under them.
            .child(
                div()
                    .flex_shrink_0()
                    .size(px(6.))
                    .when_some(dot, |d, live| {
                        d.rounded_full()
                            .when(live, |d| d.bg(success))
                            .when(!live, |d| d.border_1().border_color(border))
                    }),
            )
            .child(
                v_flex()
                    .min_w_0()
                    .flex_1()
                    .gap_0p5()
                    .child(
                        div()
                            .text_sm()
                            .truncate()
                            .when(selected, |d| {
                                d.text_color(gpui::rgb(sf.text_selected))
                                    .font_weight(FontWeight::MEDIUM)
                            })
                            .when(!selected, |d| d.text_color(gpui::rgb(sf.text_resting)))
                            .child(title),
                    )
                    .child(
                        div()
                            .text_xs()
                            .text_color(muted)
                            .truncate()
                            .child(subtitle.into()),
                    ),
            );

        let Some(id) = menu_for else {
            return row.into_any_element();
        };
        let menu_app = cx.entity().downgrade();
        let ctx_app = cx.entity().downgrade();
        let row_idx = id.as_u128() as usize;
        row.child(
            div()
                .flex_shrink_0()
                .on_mouse_down(MouseButton::Left, |_, _, cx| cx.stop_propagation())
                .when(!selected, move |s| {
                    s.opacity(0.).group_hover(hover_group, |s| s.opacity(1.))
                })
                .child(
                    Button::new(("ssh-prof-menu", row_idx))
                        .icon(Icon::empty().path("stock/icons/ellipsis.svg"))
                        .ghost()
                        .small()
                        .tooltip(t(L10nKey::TabTooltipMore))
                        .dropdown_menu_with_anchor(
                            gpui::Anchor::TopRight,
                            move |menu, _window, cx| {
                                Self::ssh_profile_row_menu(menu, id, cx.theme().danger, &menu_app)
                            },
                        ),
                ),
        )
        .context_menu(move |menu, _window, cx| {
            Self::ssh_profile_row_menu(menu, id, cx.theme().danger, &ctx_app)
        })
        .into_any_element()
    }

    fn live_ssh_profiles(&self, cx: &App) -> std::collections::HashSet<Uuid> {
        use crate::daemon::protocol::SshPhase;
        let mut live = std::collections::HashSet::new();
        for tab in &self.tabs {
            for leaf in tab.pane.terminals() {
                let v = leaf.read(cx);
                if !matches!(v.ssh_phase(), Some(SshPhase::Connected)) || v.terminal.exited {
                    continue;
                }
                if let Some(id) = v
                    .ssh_spec()
                    .and_then(|s| s.profile_id.clone())
                    .and_then(|id| Uuid::parse_str(&id).ok())
                {
                    live.insert(id);
                }
            }
        }
        live
    }

    pub(crate) fn select_ssh_defaults(&mut self, window: &mut Window, cx: &mut Context<Self>) {
        if self.ssh_form_dirty(cx) {
            self.with_settings_edits_resolved(window, cx, |this, window, cx| {
                this.select_ssh_defaults(window, cx)
            });
            return;
        }
        if let Some(s) = self.active_settings_mut() {
            s.ssh_form = None;
            s.ssh_detail = SshDetail::Defaults;
        }
        cx.notify();
    }

    fn toggle_ssh_group(&mut self, key: String, cx: &mut Context<Self>) {
        if let Some(s) = self.active_settings_mut() {
            if !s.ssh_collapsed_groups.remove(&key) {
                s.ssh_collapsed_groups.insert(key);
            }
        }
        // Collapsing the list never discards the profile being edited.
        cx.notify();
    }

    fn render_ssh_detail(&self, cx: &mut Context<Self>) -> AnyElement {
        let detail = self
            .active_settings()
            .map(|s| s.ssh_detail)
            .unwrap_or(SshDetail::None);
        match detail {
            SshDetail::Defaults => self.render_ssh_defaults_detail(cx),
            SshDetail::Profile(_)
                if self.active_settings().is_some_and(|s| s.ssh_form.is_some()) =>
            {
                self.render_ssh_profile_form(cx)
            }
            _ => self.render_ssh_empty_state(cx),
        }
    }

    fn render_ssh_empty_state(&self, cx: &mut Context<Self>) -> AnyElement {
        let muted = cx.theme().muted_foreground;
        let Some(input) = self.active_settings().map(|s| s.ssh_quick_connect.clone()) else {
            return div().into_any_element();
        };
        let target = input.read(cx).value().trim().to_string();
        let parsed = crate::core::ssh_profile::parse_quick_connect(&target);
        let saved = cx.global::<Config>().ssh_profiles.len();

        let unlinked = {
            let known: std::collections::HashSet<String> = cx
                .global::<Config>()
                .ssh_profiles
                .iter()
                .map(|p| p.name.clone())
                .collect();
            crate::core::ssh_config::import_profiles()
                .into_iter()
                .filter(|i| !known.contains(&i.profile.name))
                .map(|i| i.profile.name)
                .collect::<Vec<_>>()
        };

        let heading = if saved == 0 {
            t(L10nKey::SettingsNoHostsYet)
        } else {
            t(L10nKey::SettingsNothingSelected)
        };

        let mut body = v_flex()
            .gap_1()
            .child(self.header_text(heading, cx))
            .child(
                div()
                    .text_sm()
                    .text_color(muted)
                    .child(t(L10nKey::SettingsTypeAddressToConnect)),
            )
            .child(
                h_flex()
                    .mt_3()
                    .w_full()
                    .max_w(px(380.))
                    .gap_2()
                    .child(
                        div()
                            .flex_1()
                            .min_w_0()
                            .child(Input::new(&input).small().w_full()),
                    )
                    .child(
                        Button::new("ssh-quick-connect")
                            .label(t(L10nKey::Connect))
                            .primary()
                            .small()
                            .disabled(parsed.is_none())
                            .on_click(cx.listener(|this, _, window, cx| {
                                this.ssh_quick_connect_from_settings(window, cx)
                            })),
                    ),
            );

        if !unlinked.is_empty() {
            let n = unlinked.len();
            let names = unlinked.join(", ");
            body = body.child(
                h_flex()
                    .mt_6()
                    .gap_3()
                    .items_center()
                    .w_full()
                    .max_w(px(460.))
                    .p_3()
                    .rounded_lg()
                    .border_1()
                    .border_color(cx.theme().border)
                    .child(
                        v_flex()
                            .flex_1()
                            .min_w_0()
                            .gap_0p5()
                            .child(div().text_sm().font_weight(FontWeight::MEDIUM).child(t_fmt(
                                L10nKey::SettingsMoreInSshConfig,
                                &[("count", &n.to_string())],
                            )))
                            .child(div().text_xs().text_color(muted).truncate().child(names)),
                    )
                    .child(
                        Button::new("ssh-empty-import")
                            .label(t(L10nKey::Link))
                            .small()
                            .on_click(cx.listener(|this, _, window, cx| {
                                this.import_ssh_config_profiles(window, cx)
                            })),
                    ),
            );
        }

        body.into_any_element()
    }

    fn ssh_quick_connect_from_settings(&mut self, window: &mut Window, cx: &mut Context<Self>) {
        let Some(target) = self
            .active_settings()
            .map(|s| s.ssh_quick_connect.read(cx).value().trim().to_string())
        else {
            return;
        };
        let Some(qc) = crate::core::ssh_profile::parse_quick_connect(&target) else {
            return;
        };
        self.close_settings(window, cx);
        self.quick_connect(qc, window, cx);
    }

    fn render_ssh_defaults_detail(&self, cx: &mut Context<Self>) -> AnyElement {
        let muted = cx.theme().muted_foreground;
        let imported = cx
            .global::<Config>()
            .ssh_profiles
            .iter()
            .filter(|p| p.group.as_deref() == Some(crate::core::ssh_config::IMPORTED_GROUP))
            .count();

        let config_block = v_flex()
            .child(self.section_intro(
                "~/.ssh/config",
                t_plural(L10nKey::SettingsAliasesLinked, imported, &[]),
                cx,
            ))
            .child(
                self.settings_row(
                    t(L10nKey::SettingsImportAliases),
                    t(L10nKey::SettingsImportAliasesDesc),
                    Button::new("ssh-defaults-import")
                        .label(t(L10nKey::SettingsImportNow))
                        .small()
                        .on_click(cx.listener(|this, _, window, cx| {
                            this.import_ssh_config_profiles(window, cx)
                        }))
                        .into_any_element(),
                    cx,
                ),
            );

        v_flex()
            .child(
                v_flex()
                    .gap_1()
                    .mb_6()
                    .child(self.header_text(t(L10nKey::SettingsDefaults), cx))
                    .child(
                        div()
                            .text_sm()
                            .text_color(muted)
                            .child(t(L10nKey::SettingsDefaultsIntro)),
                    ),
            )
            .child(self.render_ssh_security_block(cx))
            .child(self.section_rule(cx))
            .child(config_block)
            .into_any_element()
    }

    fn ssh_profile_row_menu(
        menu: PopupMenu,
        id: Uuid,
        danger: gpui::Hsla,
        app: &gpui::WeakEntity<Self>,
    ) -> PopupMenu {
        let menu = menu
            .min_w(px(180.))
            .item(PopupMenuItem::new(t(L10nKey::Connect)).on_click({
                let app = app.clone();
                move |_, window, cx| {
                    let _ = app.update(cx, |this, cx| {
                        this.close_settings(window, cx);
                        this.connect_ssh_profile(id, window, cx);
                    });
                }
            }))
            .item(
                PopupMenuItem::new(t(L10nKey::SettingsCopyAddress)).on_click({
                    let app = app.clone();
                    move |_, _window, cx| {
                        let _ = app.update(cx, |this, cx| this.copy_profile_connect_string(id, cx));
                    }
                }),
            )
            .item(PopupMenuItem::new(t(L10nKey::SettingsDuplicate)).on_click({
                let app = app.clone();
                move |_, window, cx| {
                    let _ = app.update(cx, |this, cx| this.duplicate_profile(id, window, cx));
                }
            }))
            .item(
                PopupMenuItem::new(t(L10nKey::SettingsForgetPassword)).on_click({
                    let app = app.clone();
                    move |_, window, cx| {
                        let _ =
                            app.update(cx, |this, cx| this.forget_profile_password(id, window, cx));
                    }
                }),
            )
            .separator();

        menu.item(
            PopupMenuItem::element(move |_window, _cx| {
                div().text_color(danger).child(t(L10nKey::Delete))
            })
            .on_click({
                let app = app.clone();
                move |_, window, cx| {
                    let _ = app.update(cx, |this, cx| this.delete_profile(id, window, cx));
                }
            }),
        )
    }

    fn render_ssh_security_block(&self, cx: &mut Context<Self>) -> AnyElement {
        let verify = cx.global::<Config>().verify_host_keys;
        let verify_switch = crate::ui::theme::switch("ssh-verify-host-keys", cx)
            .checked(verify)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_verify_host_keys(*on, cx)))
            .into_any_element();

        let warn_on_close = cx.global::<Config>().ssh_warn_on_close;
        let warn_switch = crate::ui::theme::switch("ssh-warn-on-close", cx)
            .checked(warn_on_close)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_ssh_warn_on_close(*on, cx)))
            .into_any_element();

        v_flex()
            .child(self.section_intro(
                t(L10nKey::SettingsSecurity),
                t(L10nKey::SettingsSecurityIntro),
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsVerifyHostKeys),
                t(L10nKey::SettingsVerifyHostKeysDesc),
                verify_switch,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::WarnBeforeClosing),
                t(L10nKey::SettingsWarnBeforeClosingDesc),
                warn_switch,
                cx,
            ))
            .into_any_element()
    }

    fn ssh_form_mut(&mut self) -> Option<&mut SshProfileForm> {
        self.active_settings_mut().and_then(|s| s.ssh_form.as_mut())
    }

    pub(crate) fn ssh_form_load(
        &mut self,
        profile: &SshProfile,
        window: &mut Window,
        cx: &mut Context<Self>,
    ) {
        if self.ssh_form_dirty(cx) {
            let profile = profile.clone();
            self.with_settings_edits_resolved(window, cx, move |this, window, cx| {
                this.ssh_form_load(&profile, window, cx)
            });
            return;
        }
        let jump_name = profile
            .jump_host
            .and_then(|id| {
                cx.global::<Config>()
                    .ssh_profiles
                    .iter()
                    .find(|p| p.id == id)
                    .map(|p| p.name.clone())
            })
            .unwrap_or_default();

        let name = seed_hinted(window, cx, &profile.name, t(L10nKey::SettingsNameHint));
        let host = seed_hinted(window, cx, &profile.host, t(L10nKey::SettingsHostHint));
        let port = seed_input(window, cx, &profile.port.to_string(), false);
        let user = seed_hinted(window, cx, &profile.user, t(L10nKey::SettingsUserHint));
        let jump = seed_input(window, cx, &jump_name, false);
        let forwards: Vec<ForwardRuleForm> = profile
            .forwards
            .iter()
            .map(|r| seed_forward_row(window, cx, r))
            .collect();
        let identity_files = seed_hinted_multi(
            window,
            cx,
            &profile.identity_files.join("\n"),
            DEFAULT_KEY_HINT,
        );

        // One keychain read per host opened, not one per keystroke: the
        // password box shows what is actually stored, the way every other SSH
        // client shows it, so it can be read back, corrected or cleared
        // without connecting first.
        let loaded_password = stored_password(profile);
        let loaded_key = first_readable_key(profile);
        let loaded_passphrase = loaded_key
            .as_deref()
            .map(stored_passphrase)
            .unwrap_or_default();
        let password = cx.new(|cx| {
            InputState::new(window, cx)
                .masked(true)
                .placeholder(t(L10nKey::SettingsPasswordHint))
                .default_value(loaded_password.clone())
        });
        let passphrase = cx.new(|cx| {
            InputState::new(window, cx)
                .masked(true)
                .placeholder(t(L10nKey::SettingsPasswordHint))
                .default_value(loaded_passphrase.clone())
        });
        let proxy_command = seed_input(
            window,
            cx,
            profile.proxy_command.as_deref().unwrap_or(""),
            false,
        );
        let socks = seed_input(window, cx, &host_port_text(&profile.socks_proxy), false);
        let http = seed_input(window, cx, &host_port_text(&profile.http_proxy), false);
        let kex = seed_input(window, cx, &profile.algorithms.kex.join(", "), false);
        let cipher = seed_input(window, cx, &profile.algorithms.cipher.join(", "), false);
        let mac = seed_input(window, cx, &profile.algorithms.mac.join(", "), false);
        let hostkey = seed_input(window, cx, &profile.algorithms.hostkey.join(", "), false);
        let compression = seed_input(
            window,
            cx,
            &profile.algorithms.compression.join(", "),
            false,
        );
        let keepalive_interval = seed_input(
            window,
            cx,
            &profile
                .keepalive_interval_s
                .map(|n| n.to_string())
                .unwrap_or_default(),
            false,
        );
        let keepalive_count = seed_input(
            window,
            cx,
            &profile
                .keepalive_count_max
                .map(|n| n.to_string())
                .unwrap_or_default(),
            false,
        );
        let connect_timeout = seed_input(
            window,
            cx,
            &profile
                .connect_timeout_s
                .map(|n| n.to_string())
                .unwrap_or_default(),
            false,
        );
        let login_scripts = seed_input(window, cx, &profile.login_scripts.join("\n"), true);

        let auth_select = cx.new(|cx| {
            SelectState::new(
                SearchableVec::new(auth_mode_labels()),
                Some(IndexPath::default().row(auth_mode_index(profile.auth))),
                window,
                cx,
            )
        });

        let mut subs = Vec::new();
        subs.push(cx.subscribe_in(
            &auth_select,
            window,
            |this, _select, ev: &SelectEvent<SearchableVec<String>>, _window, cx| {
                let SelectEvent::Confirm(Some(label)) = ev else {
                    return;
                };
                let picked = auth_mode_labels().iter().position(|l| l == label);
                if let (Some(ix), Some(form)) = (picked, this.ssh_form_mut()) {
                    form.auth = AUTH_MODES[ix];
                    // The same reason the typed fields drop it: the answer on
                    // screen was about a handshake this form would no longer
                    // make. A green line under a changed method reads as a
                    // method that was proved, and it was not.
                    form.test = None;
                    cx.notify();
                }
            },
        ));
        // The passphrase belongs to whichever key the field above names, so
        // when that answer changes the box has to change with it. Without this
        // a form opened on one key and pointed at another would carry the
        // first key's passphrase across and save it over the second's. Host and
        // user count too: they fill in a `%h` / `%r` in the key's path.
        for input in [&identity_files, &host, &user] {
            subs.push(
                cx.subscribe_in(input, window, |this, _i, ev: &InputEvent, window, cx| {
                    if matches!(ev, InputEvent::Change) {
                        this.resync_key_passphrase(window, cx);
                    }
                }),
            );
        }
        let mut watch = vec![
            &name,
            &host,
            &port,
            &user,
            &jump,
            &password,
            &passphrase,
            &identity_files,
            &proxy_command,
            &socks,
            &http,
            &kex,
            &cipher,
            &mac,
            &hostkey,
            &compression,
            &keepalive_interval,
            &keepalive_count,
            &connect_timeout,
            &login_scripts,
        ];
        for row in &forwards {
            watch.extend(forward_row_inputs(row));
        }
        for input in watch {
            subs.push(
                cx.subscribe_in(input, window, |this, _i, ev: &InputEvent, _w, cx| {
                    if matches!(ev, InputEvent::Change) {
                        // The test answered for the host as it was typed a
                        // moment ago. Keeping the green line under a changed
                        // address would be the form vouching for something it
                        // never dialled.
                        if let Some(form) = this.ssh_form_mut() {
                            form.test = None;
                        }
                        cx.notify();
                    }
                }),
            );
        }

        let form = SshProfileForm {
            editing: profile.id,
            carry_group: profile.group.clone(),
            carry_credential_ref: profile.credential_ref.clone(),
            show_jump: profile.jump_host.is_some(),
            show_forwards: !profile.forwards.is_empty(),
            show_advanced: false,
            name,
            host,
            port,
            user,
            auth: profile.auth,
            auth_select,
            password,
            passphrase,
            loaded_password,
            loaded_passphrase,
            loaded_endpoint: (profile.user.clone(), profile.host.clone(), profile.port),
            loaded_key,
            jump,
            forwards,
            identity_files,
            proxy_command,
            socks,
            http,
            kex,
            cipher,
            mac,
            hostkey,
            compression,
            keepalive_interval,
            keepalive_count,
            connect_timeout,
            login_scripts,
            agent_forward: profile.agent_forward,
            x11: profile.x11,
            skip_banner: profile.skip_banner,
            shell_integration: profile.shell_integration,
            remote_clipboard_write: profile.remote_clipboard_write,
            verify_host_keys: profile.verify_host_keys,
            warn_on_close: profile.warn_on_close,
            test: None,
            _subs: subs,
        };
        let editing = form.editing;
        if let Some(s) = self.active_settings_mut() {
            s.ssh_form = Some(form);
            s.ssh_detail = SshDetail::Profile(editing);
        }
        cx.notify();
    }

    /// Reads the form out of its entities and runs it past
    /// [`validate_ssh_draft`]. The profile that comes back is what the form
    /// would save; the errors are what stands in the way.
    fn ssh_form_collect(&self, cx: &App) -> Option<(SshProfile, SshFormErrors)> {
        let form = self.active_settings()?.ssh_form.as_ref()?;
        let val = |e: &Entity<InputState>| e.read(cx).value().trim().to_string();
        // The multi-line and comma-separated fields do their own splitting, so
        // they travel whole rather than trimmed.
        let raw = |e: &Entity<InputState>| e.read(cx).value().to_string();

        let draft = SshFormDraft {
            id: form.editing,
            name: val(&form.name),
            group: form.carry_group.clone(),
            host: val(&form.host),
            port: val(&form.port),
            user: val(&form.user),
            jump: val(&form.jump),
            proxy_command: val(&form.proxy_command),
            socks: val(&form.socks),
            http: val(&form.http),
            auth: form.auth,
            identity_files: raw(&form.identity_files),
            agent_forward: form.agent_forward,
            credential_ref: form.carry_credential_ref.clone(),
            forwards: form.forwards.iter().filter_map(|r| r.collect(cx)).collect(),
            keepalive_interval: val(&form.keepalive_interval),
            keepalive_count: val(&form.keepalive_count),
            connect_timeout: val(&form.connect_timeout),
            warn_on_close: form.warn_on_close,
            skip_banner: form.skip_banner,
            shell_integration: form.shell_integration,
            remote_clipboard_write: form.remote_clipboard_write,
            login_scripts: raw(&form.login_scripts),
            x11: form.x11,
            kex: raw(&form.kex),
            cipher: raw(&form.cipher),
            mac: raw(&form.mac),
            hostkey: raw(&form.hostkey),
            compression: raw(&form.compression),
            verify_host_keys: form.verify_host_keys,
        };
        Some(validate_ssh_draft(
            draft,
            &cx.global::<Config>().ssh_profiles,
        ))
    }

    /// Point the passphrase box at the key the form now names.
    ///
    /// A passphrase is stored against the contents of the key it unlocks, so
    /// the box is only ever right about one key at a time. A box the user has
    /// started typing in is left alone — it is the one place where what is on
    /// screen outranks what the keychain holds.
    fn resync_key_passphrase(&mut self, window: &mut Window, cx: &mut Context<Self>) {
        let Some(form) = self.active_settings().and_then(|s| s.ssh_form.as_ref()) else {
            return;
        };
        let files = split_lines(&form.identity_files.read(cx).value());
        let host = form.host.read(cx).value().trim().to_string();
        let user = form.user.read(cx).value().trim().to_string();
        let key = first_readable_key_in(&files, &host, &user);
        if key == form.loaded_key {
            return;
        }
        let stored = key.as_deref().map(stored_passphrase).unwrap_or_default();
        // A box the user has already typed in keeps what they typed — only
        // the key it will be saved against moves under it.
        let untouched = form.passphrase.read(cx).value().as_ref() == form.loaded_passphrase;
        let input = form.passphrase.clone();
        if let Some(form) = self.ssh_form_mut() {
            form.loaded_key = key;
            form.loaded_passphrase = stored.clone();
        }
        if untouched {
            input.update(cx, |i, cx| i.set_value(stored, window, cx));
        }
        cx.notify();
    }

    /// Add key files to the profile from the system file picker, one per line
    /// alongside whatever is already named. Typing the path still works — this
    /// is for the far more common case of knowing the key by sight and not by
    /// path.
    pub(crate) fn pick_ssh_identity_file(&mut self, window: &mut Window, cx: &mut Context<Self>) {
        let rx = cx.prompt_for_paths(gpui::PathPromptOptions {
            files: true,
            directories: false,
            multiple: true,
            prompt: None,
        });
        cx.spawn_in(window, async move |this, cx| {
            let Ok(Ok(Some(paths))) = rx.await else {
                return;
            };
            let _ = this.update_in(cx, |this, window, cx| {
                let Some(form) = this.active_settings().and_then(|s| s.ssh_form.as_ref()) else {
                    return;
                };
                let input = form.identity_files.clone();
                let mut lines = split_lines(&input.read(cx).value());
                for path in paths {
                    let path = tildify(&path.to_string_lossy());
                    if !lines.contains(&path) {
                        lines.push(path);
                    }
                }
                input.update(cx, |i, cx| i.set_value(lines.join("\n"), window, cx));
            });
        })
        .detach();
    }

    pub(crate) fn save_editing_profile(
        &mut self,
        window: &mut Window,
        cx: &mut Context<Self>,
    ) -> Option<Uuid> {
        let (profile, errors) = self.ssh_form_collect(cx)?;
        // Save and Connect are both disabled while anything is wrong, but this
        // is the door all of them go through, and what gets past it lands in
        // the config file — where a host-less profile is a blank row nobody
        // can identify or delete on sight.
        if !errors.is_empty() {
            return None;
        }
        let id = profile.id;
        self.update_config(cx, |cfg| {
            if let Some(slot) = cfg.ssh_profiles.iter_mut().find(|p| p.id == id) {
                *slot = profile.clone();
            } else {
                cfg.ssh_profiles.push(profile.clone());
            }
        });
        if self
            .active_settings()
            .is_some_and(|s| s.save_error.is_some())
        {
            return None;
        }
        self.save_ssh_form_secrets(&profile, window, cx);
        Some(id)
    }

    fn cancel_ssh_form(&mut self, window: &mut Window, cx: &mut Context<Self>) {
        let id = self
            .active_settings()
            .and_then(|s| s.ssh_form.as_ref().map(|form| form.editing));
        let saved = id.and_then(|id| {
            cx.global::<Config>()
                .ssh_profiles
                .iter()
                .find(|p| p.id == id)
                .cloned()
        });
        if let Some(s) = self.active_settings_mut() {
            s.ssh_form = None;
            s.ssh_detail = SshDetail::Defaults;
        }
        if let Some(profile) = saved {
            self.ssh_form_load(&profile, window, cx);
        }
        cx.notify();
    }

    /// Move the two secrets in the form into the keychain — or out of it.
    ///
    /// The config file never holds either of them, so this is the whole of
    /// what saving means for a password: an entry keyed by the endpoint the
    /// profile now names. Editing the address moves the entry rather than
    /// leaving the old one behind to be offered to a host that no longer
    /// exists, and clearing the field removes it.
    fn save_ssh_form_secrets(
        &mut self,
        profile: &SshProfile,
        window: &mut Window,
        cx: &mut Context<Self>,
    ) {
        let Some(form) = self.active_settings().and_then(|s| s.ssh_form.as_ref()) else {
            return;
        };
        let typed = form.password.read(cx).value().to_string();
        let typed_passphrase = form.passphrase.read(cx).value().to_string();
        let (old_user, old_host, old_port) = form.loaded_endpoint.clone();
        let was = form.loaded_password.clone();
        let was_passphrase = form.loaded_passphrase.clone();
        let moved = (old_user.as_str(), old_host.as_str(), old_port)
            != (profile.user.as_str(), profile.host.as_str(), profile.port);

        let mut failures: Vec<String> = Vec::new();
        let endpoint = |u: &str, h: &str, p: u16| format!("{u}@{h}:{p}");
        let plan = password_plan(&was, &typed, moved);

        // The entry the form read from, once it is no longer the entry the
        // form would write to. Left alone when another profile still dials the
        // same address — the keychain accounts by endpoint, not by profile.
        let stranded = plan.drop_old && !old_host.trim().is_empty();
        if stranded
            && !self.endpoint_still_in_use(&old_user, &old_host, old_port, profile.id, cx)
            && let Err(e) = OsCredentialStore.delete_password(&old_user, &old_host, old_port)
        {
            failures.push(t_fmt(
                L10nKey::SettingsCouldntForgetPassword,
                &[
                    ("endpoint", &endpoint(&old_user, &old_host, old_port)),
                    ("error", &e.to_string()),
                ],
            ));
        }
        if plan.store
            && !profile.host.trim().is_empty()
            && let Err(e) =
                OsCredentialStore.set_password(&profile.user, &profile.host, profile.port, &typed)
        {
            failures.push(t_fmt(
                L10nKey::SettingsCouldntSavePassword,
                &[
                    (
                        "endpoint",
                        &endpoint(&profile.user, &profile.host, profile.port),
                    ),
                    ("error", &e.to_string()),
                ],
            ));
        }

        // A passphrase belongs to the key it unlocks, not to this profile, so
        // a save only ever touches the entry for the key named here. Pointing
        // the profile at a different key leaves the first key's passphrase
        // alone — other hosts use that key too.
        let key = first_readable_key(profile);
        if typed_passphrase != was_passphrase {
            match key.as_deref() {
                Some(path) => self.write_key_passphrase(path, &typed_passphrase, &mut failures),
                // Nowhere to put it: the field names no key, or names one that
                // is not on this machine. Storing nothing quietly would lose a
                // passphrase the user watched themselves type.
                None if !typed_passphrase.is_empty() => {
                    failures.push(t(L10nKey::SettingsPassphraseNeedsKey).to_string())
                }
                None => {}
            }
        }

        for line in failures {
            window.push_notification(line, cx);
        }

        // What the form would now read back, so a save leaves it clean.
        if let Some(form) = self.ssh_form_mut() {
            form.loaded_password = typed;
            form.loaded_passphrase = typed_passphrase;
            form.loaded_endpoint = (profile.user.clone(), profile.host.clone(), profile.port);
            form.loaded_key = key;
        }
    }

    /// A blank secret deletes rather than stores: an empty string is not a
    /// passphrase, and leaving one behind would keep offering it.
    fn write_key_passphrase(&self, key_path: &str, secret: &str, failures: &mut Vec<String>) {
        let path = crate::core::ssh_profile::expand_tilde(key_path);
        let bytes = match std::fs::read(&path) {
            Ok(bytes) => bytes,
            Err(e) => {
                failures.push(t_fmt(
                    L10nKey::SettingsCouldntSavePassphrase,
                    &[("key", key_path), ("error", &e.to_string())],
                ));
                return;
            }
        };
        let account = key_account_from_contents(&bytes);
        let result = if secret.is_empty() {
            OsCredentialStore.delete_key_passphrase(&account)
        } else {
            OsCredentialStore
                .set_key_passphrase(&account, secret)
                .map(|_| ())
        };
        if let Err(e) = result {
            failures.push(t_fmt(
                L10nKey::SettingsCouldntSavePassphrase,
                &[("key", key_path), ("error", &e.to_string())],
            ));
        }
    }

    /// Whether some other saved host still dials this endpoint. The keychain
    /// entry is the address's, not the profile's — the same reason "Forget
    /// password" counts the hosts it would sign out.
    fn endpoint_still_in_use(
        &self,
        user: &str,
        host: &str,
        port: u16,
        except: Uuid,
        cx: &App,
    ) -> bool {
        cx.global::<Config>()
            .ssh_profiles
            .iter()
            .any(|p| p.id != except && p.user == user && p.host == host && p.port == port)
    }

    pub(crate) fn save_ssh_form(&mut self, window: &mut Window, cx: &mut Context<Self>) {
        self.save_editing_profile(window, cx);
        cx.notify();
    }

    /// Whether the SSH profile form on screen holds edits that were never
    /// saved. Save is enabled off exactly this, so closing on it is the same
    /// question the button already answers — and it compares what the form
    /// would save even when the form cannot be saved yet, so a half-typed new
    /// host is still something Escape has to ask about.
    pub(crate) fn ssh_form_dirty(&self, cx: &App) -> bool {
        let Some(form) = self.active_settings().and_then(|s| s.ssh_form.as_ref()) else {
            return false;
        };
        let saved = cx
            .global::<Config>()
            .ssh_profiles
            .iter()
            .find(|p| p.id == form.editing)
            .cloned();
        self.ssh_form_collect(cx).map(|(profile, _)| profile) != saved || form.secrets_changed(cx)
    }

    /// Closing from Escape or the X is the user leaving; every other caller
    /// closes as the tail of something they explicitly chose, and has already
    /// saved or does not care.
    pub(crate) fn close_settings_checked(&mut self, window: &mut Window, cx: &mut Context<Self>) {
        self.with_settings_edits_resolved(window, cx, |this, window, cx| {
            this.close_settings(window, cx)
        });
    }

    /// Dial the host the form is holding — without saving it, and without
    /// spending a tab on the answer. The daemon does the connecting, so this is
    /// the same path Connect would take.
    pub(crate) fn test_ssh_form_connection(&mut self, window: &mut Window, cx: &mut Context<Self>) {
        let Some((profile, errors)) = self.ssh_form_collect(cx) else {
            return;
        };
        if !errors.is_empty() {
            return;
        }
        let mut spec = Box::new(self.native_ssh_spec_for_profile(&profile, cx));
        // The spec is built from the keychain, so without this Test would dial
        // with the *saved* password while a new one sits typed on screen —
        // and report a failure the form could not explain.
        if let Some(form) = self.active_settings().and_then(|s| s.ssh_form.as_ref()) {
            if form.wants_password() {
                let typed = form.password.read(cx).value().to_string();
                if !typed.is_empty() {
                    spec.password = Some(typed);
                }
            }
            if form.wants_key() {
                let typed = form.passphrase.read(cx).value().to_string();
                if let (false, Some(key)) = (typed.is_empty(), first_readable_key(&profile)) {
                    spec.key_passphrases
                        .get_or_insert_with(Default::default)
                        .insert(key, typed);
                }
            }
        }
        let editing = profile.id;
        if let Some(form) = self.ssh_form_mut() {
            form.test = Some(SshTestState::Running);
        }
        cx.notify();

        let probe = cx
            .background_executor()
            .spawn(async move { crate::terminal::RemoteTerminal::test_ssh(spec) });
        cx.spawn_in(window, async move |this, cx| {
            let report = probe.await;
            let _ = this.update(cx, |this, cx| {
                // The form may have been closed, or moved to another host, in
                // the seconds the handshake took. An answer about a host nobody
                // is looking at any more is not worth showing.
                if let Some(form) = this.ssh_form_mut().filter(|f| f.editing == editing) {
                    form.test = Some(SshTestState::Done(report));
                    cx.notify();
                }
            });
        })
        .detach();
    }

    pub(crate) fn save_and_connect_profile(&mut self, window: &mut Window, cx: &mut Context<Self>) {
        if let Some(id) = self.save_editing_profile(window, cx) {
            self.close_settings(window, cx);
            self.connect_ssh_profile(id, window, cx);
        }
    }

    pub(crate) fn add_new_profile(&mut self, window: &mut Window, cx: &mut Context<Self>) {
        let profile = SshProfile::new(String::new());
        self.ssh_form_load(&profile, window, cx);
    }

    pub(crate) fn duplicate_profile(
        &mut self,
        id: Uuid,
        window: &mut Window,
        cx: &mut Context<Self>,
    ) {
        let Some(mut profile) = cx
            .global::<Config>()
            .ssh_profiles
            .iter()
            .find(|p| p.id == id)
            .cloned()
        else {
            return;
        };
        profile.id = Uuid::new_v4();
        profile.name = t_fmt(L10nKey::SettingsProfileCopied, &[("name", &profile.name)]);
        self.update_config(cx, |cfg| cfg.ssh_profiles.push(profile.clone()));
        self.ssh_form_load(&profile, window, cx);
    }

    pub(crate) fn delete_profile(&mut self, id: Uuid, window: &mut Window, cx: &mut Context<Self>) {
        let Some(profile) = cx
            .global::<Config>()
            .ssh_profiles
            .iter()
            .find(|p| p.id == id)
            .cloned()
        else {
            return;
        };
        let name = profile.name.clone();
        // The entries routing through this profile are forgotten along with
        // it (#485) — say so up front, naming the endpoint: once the profile
        // is gone, its address is the part nobody can reproduce (the route
        // origins are in-memory, the keychain entry goes too). Entries with
        // a live or in-flight link are excluded, and nothing is ever sent to
        // the machine — the remote sessions keep running.
        let cascade = crate::ui::windows::cascade_for_profile(cx, id);
        let mut body = t(L10nKey::SettingsDeleteProfileBody).to_string();
        if !cascade.is_empty() {
            let endpoint = crate::core::session::RouteSnapshot::of_profile(&profile).endpoint();
            body.push(' ');
            body.push_str(&t_plural(
                L10nKey::SettingsDeleteProfileCascade,
                cascade.len(),
                &[("endpoint", endpoint.as_str())],
            ));
        }
        let answer = window.prompt(
            gpui::PromptLevel::Warning,
            &t_fmt(L10nKey::FileTreeDeleteTitle, &[("name", &name)]),
            Some(&body),
            &crate::ui::confirm_answers(t(L10nKey::Delete), t(L10nKey::Cancel)),
            cx,
        );
        cx.spawn_in(window, async move |this, cx| {
            let Ok(0) = answer.await else { return };
            let _ = this.update(cx, |this, cx| this.delete_profile_confirmed(id, cx));
        })
        .detach();
    }

    fn delete_profile_confirmed(&mut self, id: Uuid, cx: &mut Context<Self>) {
        // "Forget password" lives on the menu that is about to stop existing,
        // so deleting the profile used to strand its keychain entry with no UI
        // left to remove it. Only let go of the secret when nothing else on the
        // list still points at the same endpoint.
        let cfg = cx.global::<Config>();
        let endpoint = cfg
            .ssh_profiles
            .iter()
            .find(|p| p.id == id)
            .map(|p| (p.user.clone(), p.host.clone(), p.port));
        let shared = profiles_sharing_endpoint(cfg, id) > 0;
        if let Some((user, host, port)) = endpoint.filter(|_| !shared) {
            use crate::core::keychain::{CredentialStore, OsCredentialStore};
            let _ = OsCredentialStore.delete_password(&user, &host, port);
        }
        // The same argument for the key passphrases this profile taught the
        // app about: the comment above says "the secret", but until now only
        // the password was let go of, so a deleted profile stranded its
        // passphrase entries with no UI left to reach them. A key is only
        // forgotten when no surviving profile still lists it.
        use crate::core::keychain::{CredentialStore as _, OsCredentialStore};
        let mine = cfg
            .ssh_profiles
            .iter()
            .find(|p| p.id == id)
            .map(|p| p.expanded_identity_files())
            .unwrap_or_default();
        let kept: std::collections::HashSet<String> = cfg
            .ssh_profiles
            .iter()
            .filter(|p| p.id != id)
            .flat_map(|p| p.expanded_identity_files())
            .collect();
        for path in mine.iter().filter(|p| !kept.contains(*p)) {
            // Keyed by the key file's contents, so a key already gone from
            // disk cannot be looked up — and has no live passphrase to leak.
            let Ok(bytes) = std::fs::read(path) else {
                continue;
            };
            let account = crate::core::keychain::key_account_from_contents(&bytes);
            let _ = OsCredentialStore.delete_key_passphrase(&account);
        }

        // Forget the entries that routed through this profile (#485) —
        // forgotten, not deleted: `forget_workspace` never sends
        // `WorkspaceRemove`, so the remote sessions keep running and a new
        // profile to the same machine rediscovers them. Recomputed here
        // rather than carried from the prompt: the set can only have shrunk
        // (a new live link) while the dialog was up.
        let cascade = crate::ui::windows::cascade_for_profile(cx, id);
        for workspace in cascade {
            crate::ui::windows::forget_workspace(cx, workspace);
        }
        self.update_config(cx, |cfg| {
            cfg.ssh_profiles.retain(|p| p.id != id);
            cfg.ssh_profile_frecency.remove(&id);
        });
        let editing_deleted =
            self.active_settings().map(|s| s.ssh_detail) == Some(SshDetail::Profile(id));
        if let Some(s) = self.active_settings_mut().filter(|_| editing_deleted) {
            s.ssh_form = None;
            s.ssh_detail = SshDetail::None;
        }
        cx.notify();
    }

    /// Import `~/.ssh/config`, and say what that did.
    ///
    /// Every branch here ends in a notification because every branch used to
    /// end in nothing: a missing file, a file of nothing but `Host *`, and a
    /// clean import of six hosts were all the same silent button press, and the
    /// only way to tell them apart was to go count the host list.
    pub(crate) fn import_ssh_config_profiles(
        &mut self,
        window: &mut Window,
        cx: &mut Context<Self>,
    ) {
        // One id for all three outcomes, so pressing the button again replaces
        // what it said last time instead of stacking a second toast on top of
        // an answer that is now out of date.
        const NOTIFICATION: &str = "ssh-config-import";
        // A toast is 448pt wide. A config with a dozen unsupported keywords in
        // it would push the counts out of view, so the notification names the
        // first few and the log line below carries the whole list, with the
        // hosts each keyword was set on.
        const OPTIONS_SHOWN: usize = 5;

        let report = crate::core::ssh_config::import_report();
        let source = report.source.display().to_string();

        if !report.source_read {
            window.push_notification(
                Notification::error(t_fmt(
                    L10nKey::SettingsImportUnreadable,
                    &[("path", &source)],
                ))
                .id1::<Self>(NOTIFICATION),
                cx,
            );
            return;
        }
        if report.profiles.is_empty() {
            window.push_notification(
                Notification::warning(t_fmt(L10nKey::SettingsImportNoHosts, &[("path", &source)]))
                    .id1::<Self>(NOTIFICATION),
                cx,
            );
            return;
        }

        let read = report.profiles.len();
        let ignored = report.ignored;
        let mut stats = crate::core::ssh_config::MergeStats::default();
        self.update_config(cx, |cfg| {
            stats = crate::core::ssh_config::merge_imported(&mut cfg.ssh_profiles, report.profiles);
        });

        let dropped: Vec<String> = ignored
            .iter()
            .map(|opt| format!("{} ({})", opt.option, opt.hosts.join(", ")))
            .collect();
        log::info!(
            "imported {read} alias(es) from {source} ({} file(s) read): {} added, {} updated, \
             {} unchanged; no tty7 setting for: [{}]",
            report.files_read,
            stats.added,
            stats.updated,
            stats.unchanged,
            dropped.join("; ")
        );

        let mut notification = Notification::new()
            .with_type(NotificationType::Success)
            .title(t_plural(
                L10nKey::SettingsImportSummary,
                stats.added,
                &[
                    ("updated", &stats.updated.to_string()),
                    ("unchanged", &stats.unchanged.to_string()),
                ],
            ))
            .id1::<Self>(NOTIFICATION);
        if !ignored.is_empty() {
            let mut options: Vec<String> = ignored
                .iter()
                .take(OPTIONS_SHOWN)
                .map(|opt| opt.option.clone())
                .collect();
            let rest = ignored.len() - options.len();
            if rest > 0 {
                options.push(t_fmt(
                    L10nKey::SettingsImportMoreOptions,
                    &[("count", &rest.to_string())],
                ));
            }
            notification = notification
                .message(t_plural(
                    L10nKey::SettingsImportIgnored,
                    ignored.len(),
                    &[("options", &options.join(", "))],
                ))
                // A list of what the import could not carry is something to
                // read and act on, and four seconds is not long enough to do
                // either. The counts alone still fade on their own.
                .autohide(false);
        }
        window.push_notification(notification, cx);
    }

    pub(crate) fn copy_profile_connect_string(&mut self, id: Uuid, cx: &mut Context<Self>) {
        if let Some(profile) = cx
            .global::<Config>()
            .ssh_profiles
            .iter()
            .find(|p| p.id == id)
        {
            let s = to_connect_string(profile);
            cx.write_to_clipboard(gpui::ClipboardItem::new_string(s));
        }
    }

    pub(crate) fn forget_profile_password(
        &mut self,
        id: Uuid,
        window: &mut Window,
        cx: &mut Context<Self>,
    ) {
        let cfg = cx.global::<Config>();
        let Some(endpoint) = cfg
            .ssh_profiles
            .iter()
            .find(|p| p.id == id)
            .map(|p| format!("{}@{}:{}", p.user, p.host, p.port))
        else {
            return;
        };
        // One click used to be the whole gesture, and the thing it removed does
        // not come back. Worse, the entry is the endpoint's rather than this
        // row's, so a menu opened on one host can sign several of them out —
        // name that count here instead of letting it turn up at the next
        // connect on a host nobody touched.
        let others = profiles_sharing_endpoint(cfg, id);
        let body = if others == 0 {
            t(L10nKey::SettingsForgetPasswordBody).to_string()
        } else {
            t_plural(
                L10nKey::SettingsForgetPasswordSharedBody,
                others,
                &[("endpoint", &endpoint)],
            )
        };
        let answer = window.prompt(
            gpui::PromptLevel::Warning,
            &t_fmt(
                L10nKey::SettingsForgetPasswordTitle,
                &[("endpoint", &endpoint)],
            ),
            Some(&body),
            &crate::ui::confirm_answers(t(L10nKey::SettingsForgetPassword), t(L10nKey::Cancel)),
            cx,
        );
        cx.spawn_in(window, async move |this, cx| {
            let Ok(0) = answer.await else { return };
            // The notification is the only sign the keychain was touched, and
            // by now the click that asked for it is long gone — so it has to be
            // raised from in here, on the window the prompt belonged to.
            let _ = this.update_in(cx, |this, window, cx| {
                if let Some(msg) = this.forget_profile_password_confirmed(id, cx) {
                    window.push_notification(msg, cx);
                }
            });
        })
        .detach();
    }

    fn forget_profile_password_confirmed(
        &mut self,
        id: Uuid,
        cx: &mut Context<Self>,
    ) -> Option<String> {
        use crate::core::keychain::{CredentialStore, OsCredentialStore};
        let (user, host, port) = cx
            .global::<Config>()
            .ssh_profiles
            .iter()
            .find(|p| p.id == id)
            .map(|p| (p.user.clone(), p.host.clone(), p.port))?;
        let endpoint = format!("{user}@{host}:{port}");
        Some(
            match OsCredentialStore.delete_password(&user, &host, port) {
                Ok(()) => t_fmt(
                    L10nKey::SettingsForgotPasswordFor,
                    &[("endpoint", &endpoint)],
                ),
                Err(e) => t_fmt(
                    L10nKey::SettingsCouldntForgetPassword,
                    &[("endpoint", &endpoint), ("error", &e.to_string())],
                ),
            },
        )
    }

    fn render_ssh_profile_form(&self, cx: &mut Context<Self>) -> AnyElement {
        let Some(form) = self.active_settings().and_then(|s| s.ssh_form.as_ref()) else {
            return div().into_any_element();
        };
        let editing = form.editing;
        let muted = cx.theme().muted_foreground;
        let success = cx.theme().success;

        let saved = cx
            .global::<Config>()
            .ssh_profiles
            .iter()
            .find(|p| p.id == editing)
            .cloned();
        let (collected, errors) = self.ssh_form_collect(cx).unzip();
        let errors = errors.unwrap_or_default();
        // A password is not part of the profile, so a change to one is
        // invisible to the comparison above — and Save would sit greyed out
        // over a secret the user just typed.
        let dirty = collected != saved || form.secrets_changed(cx);
        let address = collected
            .as_ref()
            .map(to_connect_string)
            .unwrap_or_default();
        let jump_name = form.jump.read(cx).value().trim().to_string();
        let live = self.live_ssh_profiles(cx).contains(&editing);
        let name = form.name.read(cx).value().trim().to_string();
        let host = form.host.read(cx).value().trim().to_string();
        let title = match (name.is_empty(), host.is_empty()) {
            (false, _) => name,
            (true, false) => host,
            (true, true) => t(L10nKey::SettingsNewHost).to_string(),
        };

        let testing = matches!(form.test, Some(SshTestState::Running));
        let test_line = form.test.as_ref().map(|state| match state {
            SshTestState::Running => field_note(t(L10nKey::SettingsTestRunning), cx),
            SshTestState::Done(report) => match report {
                SshTestReport::Authenticated { elapsed_ms } => {
                    div().text_xs().text_color(success).child(t_fmt(
                        L10nKey::SettingsTestReached,
                        &[("time", &human_millis(*elapsed_ms))],
                    ))
                }
                SshTestReport::NeedsInput { need, .. } => {
                    field_note(t(ssh_test_need_message(*need)), cx)
                }
                SshTestReport::Failed { reason } => field_error(
                    t_fmt(L10nKey::SettingsTestFailed, &[("reason", reason)]),
                    cx,
                ),
            },
        });

        let header = h_flex()
            .w_full()
            .when(self.settings_row_under(STACK_ROW_BELOW, cx), |v| {
                v.flex_col()
            })
            .items_start()
            .justify_between()
            .gap_4()
            .child(
                v_flex()
                    .min_w_0()
                    .flex_1()
                    .gap_1()
                    .child(
                        div()
                            .text_lg()
                            .font_weight(FontWeight::SEMIBOLD)
                            .truncate()
                            .child(title),
                    )
                    .child(
                        h_flex()
                            .gap_1p5()
                            .text_xs()
                            .text_color(muted)
                            .child(div().truncate().child(address))
                            .when(!jump_name.is_empty(), |r| {
                                r.child(div().child(t_fmt(
                                    L10nKey::SettingsJumpHostVia,
                                    &[("jump_name", &jump_name)],
                                )))
                            })
                            .when(live, |r| {
                                r.child(
                                    div()
                                        .text_color(success)
                                        .child(format!("· {}", t(L10nKey::SettingsConnected))),
                                )
                            }),
                    ),
            )
            .child(
                h_flex()
                    .flex_shrink_0()
                    .max_w_full()
                    .flex_wrap()
                    .gap_2()
                    .child(
                        Button::new("ssh-form-cancel")
                            .label(t(L10nKey::Cancel))
                            .ghost()
                            .small()
                            .disabled(!dirty)
                            .on_click(
                                cx.listener(|this, _, window, cx| this.cancel_ssh_form(window, cx)),
                            ),
                    )
                    .child(
                        // Dials the host exactly as Connect would — proxy, jump
                        // and all — but keeps the answer here instead of
                        // spending a tab on finding out.
                        Button::new("ssh-form-test")
                            .label(t(L10nKey::SettingsTestConnection))
                            .small()
                            .disabled(!errors.is_empty() || testing)
                            .on_click(cx.listener(|this, _, window, cx| {
                                this.test_ssh_form_connection(window, cx)
                            })),
                    )
                    .child(
                        Button::new("ssh-form-save")
                            .label(t(L10nKey::Save))
                            .small()
                            .disabled(!dirty || !errors.is_empty())
                            .on_click(
                                cx.listener(|this, _, window, cx| this.save_ssh_form(window, cx)),
                            ),
                    )
                    .child(
                        // Connect saves first, so it answers to the same
                        // rules. Before this it answered to none at all, and
                        // an empty host reached the socket layer as a DNS
                        // error about a name nobody typed.
                        Button::new("ssh-form-connect")
                            .label(t(L10nKey::Connect))
                            .primary()
                            .small()
                            .disabled(!errors.is_empty())
                            .on_click(cx.listener(|this, _, window, cx| {
                                this.save_and_connect_profile(window, cx)
                            })),
                    ),
            );

        // Every field notifies on change, so this form re-renders on each
        // keystroke: telling a brand-new host that it needs a host is
        // something it would say before the user had typed a character. Hold
        // that one line back until the group it belongs to has something in
        // it. A malformed value has nothing to wait for and says so at once.
        let core_blank = form.core_is_blank(cx);
        let host_error = errors
            .host
            .as_ref()
            .filter(|_| !core_blank)
            .map(|e| field_error(e.message(), cx));
        let port_error = errors.port.as_ref().map(|e| field_error(e.message(), cx));

        // Three fields whose labels say everything a sentence under them
        // would: what goes in them is shown in the box itself, as a hint that
        // gets out of the way the moment anything is typed.
        let core = v_flex()
            .gap_1()
            .child(self.ssh_field_row(
                t(L10nKey::SettingsName),
                Input::new(&form.name).small().w_full().into_any_element(),
                vec![],
                cx,
            ))
            .child(
                self.ssh_field_row(
                    t(L10nKey::SettingsHost),
                    h_flex()
                        .w_full()
                        .gap_2()
                        .child(Input::new(&form.host).small().flex_1().min_w_0())
                        .child(Input::new(&form.port).small().w(px(64. * ui_scale(cx))))
                        .into_any_element(),
                    host_error
                        .into_iter()
                        .chain(port_error)
                        .map(IntoElement::into_any_element)
                        .collect(),
                    cx,
                ),
            )
            .child(self.ssh_field_row(
                t(L10nKey::SettingsUser),
                Input::new(&form.user).small().w_full().into_any_element(),
                vec![],
                cx,
            ));

        v_flex()
            .gap_4()
            .child(header)
            // Under the buttons that produced it, on the right, where the eye
            // already is after pressing Test.
            .when_some(test_line, |col, line| {
                col.child(h_flex().w_full().justify_end().child(line))
            })
            .child(core)
            .child(self.render_ssh_profile_auth_section(form, cx))
            .child(self.render_ssh_profile_jump_section(form, &errors, cx))
            .child(self.render_ssh_profile_forwards_section(form, cx))
            .child(self.render_ssh_profile_advanced_section(form, &errors, cx))
            .into_any_element()
    }

    /// One field of the host editor: its label in a narrow column on the left,
    /// the field immediately beside it, and whatever the field has to say —
    /// its description, or a complaint about what is in it — underneath the
    /// field rather than underneath the label.
    ///
    /// The settings rows on the rest of this page push their control to the
    /// far right edge of the page, which is right for a list of independent
    /// switches and wrong for a form: it left a hand's width of nothing
    /// between the word "Host" and the box a hostname goes in, and the eye had
    /// to cross it once per field. Every SSH client worth borrowing from keeps
    /// the two together.
    fn ssh_field_row(
        &self,
        label: &str,
        control: AnyElement,
        under: Vec<AnyElement>,
        cx: &Context<Self>,
    ) -> AnyElement {
        let stacked = self.settings_row_under(STACK_FIELD_ROW_BELOW, cx);
        let scale = ui_scale(cx);
        div()
            .flex()
            .w_full()
            .py_1p5()
            .when(stacked, |row| row.flex_col().items_start().gap_1())
            .when(!stacked, |row| row.flex_row().items_start().gap_3())
            .child(
                div()
                    .when(!stacked, |l| {
                        // Right up against the field, and level with the text
                        // inside it rather than with the top of its border —
                        // a left-aligned column of short words would leave a
                        // different-sized hole after every label.
                        l.w(px(SSH_LABEL_W * scale))
                            .flex_shrink_0()
                            .pt(px(6.))
                            .text_right()
                    })
                    .text_sm()
                    .font_weight(FontWeight::MEDIUM)
                    .text_color(cx.theme().foreground)
                    .child(label.to_string()),
            )
            .child(
                // A definite width, not `flex_1`: a percentage inside a
                // flex-grown box has no definite parent to resolve against,
                // and every `w_full` control in here came out at its intrinsic
                // size — a hostname field one character wide.
                v_flex()
                    .w(px(FORM_FIELD_W * scale))
                    .max_w_full()
                    .gap_1()
                    .child(control)
                    .children(under),
            )
            .into_any_element()
    }

    /// The credential half of the form, and the only part of it that is not
    /// stored in the config file.
    ///
    /// Which boxes appear follows the method, the way every SSH client does
    /// it: a password box under a key-only method would be a secret that is
    /// stored and never offered. The split is the one `build_spec_inner`
    /// makes when it decides what to hand the daemon.
    fn render_ssh_profile_auth_section(
        &self,
        form: &SshProfileForm,
        cx: &mut Context<Self>,
    ) -> AnyElement {
        // Whether there is a key to *store a passphrase against* — which is a
        // readable file, not merely a path someone typed. `loaded_key` is that
        // answer, kept current by `resync_key_passphrase`.
        let has_key = form.loaded_key.is_some();
        v_flex()
            .gap_1()
            .child(self.subgroup_header(L10nKey::SettingsGroupAuthentication, cx))
            .child(
                self.ssh_field_row(
                    t(L10nKey::SettingsAuth),
                    // Six methods is more than a segmented control can label
                    // without squeezing, so a dropdown carries the choice — the
                    // way the other long-form pickers on this page do.
                    Select::new(&form.auth_select)
                        .small()
                        .w_full()
                        .into_any_element(),
                    vec![field_note(t(L10nKey::SettingsAuthDesc), cx).into_any_element()],
                    cx,
                ),
            )
            .when(form.wants_password(), |col| {
                col.child(
                    self.ssh_field_row(
                        t(L10nKey::SettingsPassword),
                        Input::new(&form.password)
                            .small()
                            .mask_toggle()
                            .w_full()
                            .into_any_element(),
                        vec![field_note(t(L10nKey::SettingsPasswordDesc), cx).into_any_element()],
                        cx,
                    ),
                )
            })
            .when(form.wants_key(), |col| {
                col.child(
                    self.ssh_field_row(
                        t(L10nKey::SettingsIdentityFiles),
                        h_flex()
                            .w_full()
                            .items_start()
                            .gap_2()
                            .child(Input::new(&form.identity_files).small().flex_1().min_w_0())
                            .child(
                                Button::new("ssh-form-browse-key")
                                    .label(t(L10nKey::SettingsBrowseKey))
                                    .small()
                                    .on_click(cx.listener(|this, _, window, cx| {
                                        this.pick_ssh_identity_file(window, cx)
                                    })),
                            )
                            .into_any_element(),
                        vec![
                            field_note(t(L10nKey::SettingsIdentityFilesDesc), cx)
                                .into_any_element(),
                        ],
                        cx,
                    ),
                )
                .child(
                    self.ssh_field_row(
                        t(L10nKey::SettingsKeyPassphrase),
                        Input::new(&form.passphrase)
                            .small()
                            .mask_toggle()
                            .disabled(!has_key)
                            .w_full()
                            .into_any_element(),
                        vec![
                            field_note(
                                match has_key {
                                    true => t(L10nKey::SettingsKeyPassphraseDesc),
                                    false => t(L10nKey::SettingsPassphraseNeedsKey),
                                },
                                cx,
                            )
                            .into_any_element(),
                        ],
                        cx,
                    ),
                )
            })
            .into_any_element()
    }

    fn disclosure_header(
        &self,
        id: &'static str,
        label: &str,
        summary: &str,
        open: bool,
        cx: &mut Context<Self>,
        on_toggle: impl Fn(&mut Self, &mut Context<Self>) + 'static,
    ) -> AnyElement {
        let muted = cx.theme().muted_foreground;
        let sf = cx.global::<presets::Surfaces>().window;
        let caret = if open { "▾" } else { "▸" };
        h_flex()
            .id(id)
            .items_center()
            .gap_2()
            .py_2()
            // The other collapsible header on this page lights up under the
            // pointer; this one only changed the cursor, so the two rows a
            // reader folds and unfolds answered differently to the same move.
            .px_2p5()
            .mx_neg_2p5()
            .rounded_lg()
            .cursor_pointer()
            .hover(|s| s.bg(gpui::rgb(sf.hover)))
            .on_mouse_down(
                MouseButton::Left,
                cx.listener(move |this, _, _w, cx| on_toggle(this, cx)),
            )
            .child(div().text_color(muted).child(caret.to_string()))
            .child(
                div()
                    .font_weight(gpui::FontWeight::MEDIUM)
                    .child(label.to_string()),
            )
            .child(div().text_xs().text_color(muted).child(summary.to_string()))
            .into_any_element()
    }

    fn render_ssh_profile_jump_section(
        &self,
        form: &SshProfileForm,
        errors: &SshFormErrors,
        cx: &mut Context<Self>,
    ) -> AnyElement {
        let summary = {
            let name = form.jump.read(cx).value().trim().to_string();
            if name.is_empty() {
                t(L10nKey::SettingsNoneSummary).to_string()
            } else {
                name
            }
        };
        // A complaint nobody can see is a Save button that is greyed out for
        // no reason the user can read, and the field keeps its text whether
        // this section is folded or not — so an error holds it open.
        let open = form.show_jump || errors.jump.is_some();
        let mut section = v_flex().child(self.disclosure_header(
            "ssh-sec-jump",
            t(L10nKey::SettingsJumpHost),
            &summary,
            open,
            cx,
            |this, cx| {
                if let Some(f) = this.ssh_form_mut() {
                    f.show_jump = !f.show_jump;
                    cx.notify();
                }
            },
        ));
        if open {
            let error = errors.jump.as_ref().map(|e| field_error(e.message(), cx));
            section = section.child(
                self.settings_row(
                    t(L10nKey::SettingsJumpHost),
                    t(L10nKey::SettingsJumpHostDesc),
                    v_flex()
                        .gap_1()
                        .w(px(FIELD_W))
                        .max_w_full()
                        .child(Input::new(&form.jump).small())
                        .when_some(error, |col, line| col.child(line))
                        .into_any_element(),
                    cx,
                ),
            );
        }
        section.into_any_element()
    }

    fn render_ssh_profile_forwards_section(
        &self,
        form: &SshProfileForm,
        cx: &mut Context<Self>,
    ) -> AnyElement {
        let muted = cx.theme().muted_foreground;
        let count = form
            .forwards
            .iter()
            .filter(|r| r.collect(cx).is_some())
            .count();
        let summary = match count {
            0 => t(L10nKey::SettingsNoneSummary).to_string(),
            _ => t_plural(L10nKey::SettingsRulesOpenedWithConnection, count, &[]),
        };
        let mut section = v_flex().child(self.disclosure_header(
            "ssh-sec-fwd",
            t(L10nKey::SettingsPortForwarding),
            &summary,
            form.show_forwards,
            cx,
            |this, cx| {
                if let Some(f) = this.ssh_form_mut() {
                    f.show_forwards = !f.show_forwards;
                    cx.notify();
                }
            },
        ));
        if !form.show_forwards {
            return section.into_any_element();
        }

        for (idx, row) in form.forwards.iter().enumerate() {
            section = section.child(self.render_forward_rule_row(idx, row, cx));
        }

        section
            .child(
                h_flex().pt_1p5().child(
                    Button::new("ssh-fwd-add")
                        .label(t(L10nKey::SettingsAddRule))
                        .ghost()
                        .small()
                        .on_click(
                            cx.listener(|this, _, window, cx| this.add_forward_rule(window, cx)),
                        ),
                ),
            )
            .child(
                h_flex()
                    .flex_wrap()
                    .gap_3()
                    .pt_1()
                    .text_xs()
                    .text_color(muted)
                    .child(t(L10nKey::SettingsFwdLegendLocal))
                    .child(t(L10nKey::SettingsFwdLegendRemote))
                    .child(t(L10nKey::SettingsFwdLegendDynamic)),
            )
            .into_any_element()
    }

    fn render_forward_rule_row(
        &self,
        idx: usize,
        row: &ForwardRuleForm,
        cx: &mut Context<Self>,
    ) -> AnyElement {
        let muted = cx.theme().muted_foreground;
        let needs_target = row.kind != ForwardKind::Dynamic;
        let kind_idx = match row.kind {
            ForwardKind::Local => 0,
            ForwardKind::Remote => 1,
            ForwardKind::Dynamic => 2,
        };
        let incomplete = (row.collect(cx).is_none() && !row.is_blank(cx)).then(|| {
            field_error(
                match needs_target {
                    true => t(L10nKey::SettingsFwdNeedsBoth),
                    false => t(L10nKey::SettingsFwdNeedsListen),
                },
                cx,
            )
        });

        // Below `SPLIT_FORWARD_ROW_BELOW` the five controls stop fitting on one
        // line. The kind switch, the description and the remove button keep the
        // first line; the mapping the rule is actually about takes the second,
        // where two host fields, two ports and an arrow are what has to fit
        // inside `CONTENT_MIN_W` — hence the lower floor on the host field.
        let split = self.settings_row_under(SPLIT_FORWARD_ROW_BELOW, cx);
        let stack_ends = self.settings_row_under(STACK_FORWARD_ENDS_BELOW, cx);
        let host_min = if split { 80. } else { 104. };
        let endpoint = |host: &Entity<InputState>, port: &Entity<InputState>| {
            h_flex()
                .gap_1()
                .items_center()
                // Was pinned at 104px, which does not hold
                // `ip-10-0-3-217.eu-west-1.compute.internal`. Same floor, but
                // the field now takes a share of the row's slack instead of
                // handing all of it to the free-text description beside it.
                .child(
                    div()
                        .flex_1()
                        .min_w(px(host_min))
                        .child(Input::new(host).xsmall()),
                )
                .child(div().text_xs().text_color(muted).child(":"))
                .child(div().w(px(58.)).child(Input::new(port).xsmall()))
        };
        let mapping = |line: Div| {
            line.child(
                div()
                    .flex_1()
                    .when(stack_ends, |end| end.w_full())
                    .child(endpoint(&row.bind_host, &row.bind_port)),
            )
            .child(div().flex_shrink_0().text_xs().text_color(muted).child("→"))
            .child(
                div()
                    .flex_1()
                    .opacity(if needs_target {
                        1.0
                    } else {
                        crate::ui::forwards::NO_TARGET_FADE
                    })
                    .when(stack_ends, |end| end.w_full())
                    .child(endpoint(&row.target_host, &row.target_port)),
            )
        };

        let kind_switch = div().flex_shrink_0().child(self.segmented(
            format!("ssh-fwd-kind-{idx}"),
            &["L", "R", "D"],
            kind_idx,
            cx,
            move |this, ix, _w, cx| {
                let kind = match ix {
                    1 => ForwardKind::Remote,
                    2 => ForwardKind::Dynamic,
                    _ => ForwardKind::Local,
                };
                if let Some(f) = this.ssh_form_mut()
                    && let Some(r) = f.forwards.get_mut(idx)
                {
                    r.kind = kind;
                    cx.notify();
                }
            },
        ));
        let description = div()
            .flex_1()
            .min_w(px(80.))
            .child(Input::new(&row.description).xsmall());
        let remove = crate::ui::tab_strip::hit_target(
            Button::new(("ssh-fwd-remove", idx))
                .icon(Icon::new(IconName::Close))
                .ghost()
                .xsmall(),
        )
        .tooltip(t(L10nKey::SettingsRemoveRule))
        .on_click(cx.listener(move |this, _, _w, cx| this.remove_forward_rule(idx, cx)));

        let rule = match split {
            true => v_flex()
                .gap_1()
                .child(
                    h_flex()
                        .gap_2()
                        .items_center()
                        .child(kind_switch)
                        .child(description)
                        .child(remove),
                )
                .child(match stack_ends {
                    true => mapping(v_flex().gap_1().items_start()),
                    false => mapping(h_flex().gap_2().items_center()),
                }),
            false => mapping(h_flex().gap_2().items_center().child(kind_switch))
                .child(description)
                .child(remove),
        };

        v_flex()
            .gap_0p5()
            .py_1()
            .child(rule)
            .when_some(incomplete, |col, line| col.child(line))
            .into_any_element()
    }

    fn add_forward_rule(&mut self, window: &mut Window, cx: &mut Context<Self>) {
        let row = seed_forward_row(window, cx, &ForwardRule::default());
        let subs: Vec<_> = forward_row_inputs(&row)
            .into_iter()
            .map(|input| {
                cx.subscribe_in(input, window, |_this, _i, ev: &InputEvent, _w, cx| {
                    if matches!(ev, InputEvent::Change) {
                        cx.notify();
                    }
                })
            })
            .collect();
        if let Some(f) = self.ssh_form_mut() {
            f.forwards.push(row);
            f._subs.extend(subs);
            f.show_forwards = true;
        }
        cx.notify();
    }

    fn remove_forward_rule(&mut self, idx: usize, cx: &mut Context<Self>) {
        if let Some(f) = self.ssh_form_mut()
            && idx < f.forwards.len()
        {
            f.forwards.remove(idx);
        }
        cx.notify();
    }

    fn render_ssh_profile_advanced_section(
        &self,
        form: &SshProfileForm,
        errors: &SshFormErrors,
        cx: &mut Context<Self>,
    ) -> AnyElement {
        // This section opens folded, and a proxy address saved back when the
        // form wrote port 0 is wrong the moment the profile is opened. Let the
        // error unfold it, or Save is disabled over something out of sight.
        let open = form.show_advanced || errors.socks.is_some() || errors.http.is_some();
        let mut section = v_flex().child(self.disclosure_header(
            "ssh-sec-adv",
            t(L10nKey::SettingsAdvanced),
            t(L10nKey::SettingsAdvancedSummary),
            open,
            cx,
            |this, cx| {
                if let Some(f) = this.ssh_form_mut() {
                    f.show_advanced = !f.show_advanced;
                    cx.notify();
                }
            },
        ));
        if !open {
            return section.into_any_element();
        }

        let text_row = |this: &Self,
                        label: &str,
                        desc: &str,
                        input: &Entity<InputState>,
                        cx: &mut Context<Self>| {
            this.settings_row(
                label.to_string(),
                desc.to_string(),
                div()
                    .w(px(FIELD_W))
                    .max_w_full()
                    .child(Input::new(input).small())
                    .into_any_element(),
                cx,
            )
        };
        // The three proxy fields are the only advanced ones with rules of
        // their own, so they carry room for a line under the control: a
        // complaint when the address is wrong, and otherwise a word about
        // which of them the connection is actually going to use.
        let proxy_row = |this: &Self,
                         label: &str,
                         desc: &str,
                         input: &Entity<InputState>,
                         error: Option<&SshFieldError>,
                         note: Option<String>,
                         cx: &mut Context<Self>| {
            let line = match error {
                Some(e) => Some(field_error(e.message(), cx)),
                None => note.map(|n| field_note(n, cx)),
            };
            this.settings_row(
                label.to_string(),
                desc.to_string(),
                v_flex()
                    .gap_1()
                    .w(px(FIELD_W))
                    .max_w_full()
                    .child(Input::new(input).small())
                    .when_some(line, |col, line| col.child(line))
                    .into_any_element(),
                cx,
            )
        };

        // Filling in two of these has always meant one of them doing nothing.
        // Which one was left for the user to find out by connecting (#438).
        let filled = |input: &Entity<InputState>| !input.read(cx).value().trim().is_empty();
        let (cmd_set, socks_set, http_set) = (
            filled(&form.proxy_command),
            filled(&form.socks),
            filled(&form.http),
        );
        let pick = ProxyPick::of(cmd_set, socks_set, http_set);

        let on_off = |b: bool| {
            if b {
                t(L10nKey::SettingsValueOn)
            } else {
                t(L10nKey::SettingsValueOff)
            }
        };
        let vhk_default = on_off(cx.global::<Config>().verify_host_keys);
        let woc_default = on_off(cx.global::<Config>().ssh_warn_on_close);
        let vhk_idx = match form.verify_host_keys {
            None => 0,
            Some(true) => 1,
            Some(false) => 2,
        };
        let woc_idx = match form.warn_on_close {
            None => 0,
            Some(true) => 1,
            Some(false) => 2,
        };

        section = section
            // The key file and the two secrets moved up to the Authentication
            // block on the form itself — they are what a connection is made
            // of, not a corner of it. What is left here is the option that
            // hands this host the local agent, which is a decision about
            // trust rather than about how to log in.
            .child(self.subgroup_header(L10nKey::SettingsGroupAuthentication, cx))
            .child(
                self.settings_row(
                    t(L10nKey::SettingsAgentForwarding),
                    t(L10nKey::SettingsAgentForwardingDesc),
                    crate::ui::theme::switch("ssh-form-agent", cx)
                        .checked(form.agent_forward)
                        .on_click(cx.listener(|this, on: &bool, _w, cx| {
                            if let Some(f) = this.ssh_form_mut() {
                                f.agent_forward = *on;
                                cx.notify();
                            }
                        }))
                        .into_any_element(),
                    cx,
                ),
            )
            .child(self.subgroup_header(L10nKey::SettingsGroupProxies, cx))
            .child(proxy_row(
                self,
                t(L10nKey::SettingsProxyCommand),
                t(L10nKey::SettingsProxyCommandDesc),
                &form.proxy_command,
                None,
                ProxyPick::Command.overridden_by(cmd_set, pick),
                cx,
            ))
            .child(proxy_row(
                self,
                t(L10nKey::SettingsSocks5Proxy),
                t(L10nKey::SettingsSocks5ProxyDesc),
                &form.socks,
                errors.socks.as_ref(),
                ProxyPick::Socks.overridden_by(socks_set, pick),
                cx,
            ))
            .child(proxy_row(
                self,
                t(L10nKey::SettingsHttpProxy),
                t(L10nKey::SettingsHttpProxyDesc),
                &form.http,
                errors.http.as_ref(),
                ProxyPick::Http.overridden_by(http_set, pick),
                cx,
            ))
            .child(self.subgroup_header(L10nKey::SettingsGroupAlgorithms, cx))
            .child(text_row(
                self,
                t(L10nKey::SettingsKexAlgorithms),
                t(L10nKey::SettingsKexAlgorithmsDesc),
                &form.kex,
                cx,
            ))
            .child(text_row(
                self,
                t(L10nKey::SettingsCiphers),
                t(L10nKey::SettingsCiphersDesc),
                &form.cipher,
                cx,
            ))
            .child(text_row(
                self,
                t(L10nKey::SettingsMacs),
                t(L10nKey::SettingsMacsDesc),
                &form.mac,
                cx,
            ))
            .child(text_row(
                self,
                t(L10nKey::SettingsHostKeyAlgorithms),
                t(L10nKey::SettingsHostKeyAlgorithmsDesc),
                &form.hostkey,
                cx,
            ))
            // Compression here is the algorithm list russh negotiates, not
            // ssh_config's yes/no switch, so it belongs with the other three
            // lists rather than under Connection with the keepalives.
            .child(text_row(
                self,
                t(L10nKey::SettingsCompression),
                t(L10nKey::SettingsCompressionDesc),
                &form.compression,
                cx,
            ))
            .child(self.subgroup_header(L10nKey::SettingsGroupConnection, cx))
            .child(text_row(
                self,
                t(L10nKey::SettingsKeepaliveInterval),
                t(L10nKey::SettingsKeepaliveIntervalDesc),
                &form.keepalive_interval,
                cx,
            ))
            .child(text_row(
                self,
                t(L10nKey::SettingsKeepaliveCountMax),
                t(L10nKey::SettingsKeepaliveCountMaxDesc),
                &form.keepalive_count,
                cx,
            ))
            .child(text_row(
                self,
                t(L10nKey::SettingsConnectTimeout),
                t(L10nKey::SettingsConnectTimeoutDesc),
                &form.connect_timeout,
                cx,
            ))
            .child(self.subgroup_header(L10nKey::SettingsGroupSession, cx))
            .child(
                self.settings_row(
                    t(L10nKey::SettingsX11Forwarding),
                    t(L10nKey::SettingsX11ForwardingDesc),
                    crate::ui::theme::switch("ssh-form-x11", cx)
                        .checked(form.x11)
                        .on_click(cx.listener(|this, on: &bool, _w, cx| {
                            if let Some(f) = this.ssh_form_mut() {
                                f.x11 = *on;
                                cx.notify();
                            }
                        }))
                        .into_any_element(),
                    cx,
                ),
            )
            .child(
                self.settings_row(
                    t(L10nKey::SettingsShellIntegration),
                    t(L10nKey::SettingsShellIntegrationDesc),
                    crate::ui::theme::switch("ssh-form-shell-integration", cx)
                        .checked(form.shell_integration)
                        .on_click(cx.listener(|this, on: &bool, _w, cx| {
                            if let Some(f) = this.ssh_form_mut() {
                                f.shell_integration = *on;
                                cx.notify();
                            }
                        }))
                        .into_any_element(),
                    cx,
                ),
            )
            .child(text_row(
                self,
                t(L10nKey::SettingsLoginScripts),
                t(L10nKey::SettingsLoginScriptsDesc),
                &form.login_scripts,
                cx,
            ))
            .child(
                self.settings_row(
                    t(L10nKey::SettingsSkipBanner),
                    t(L10nKey::SettingsSkipBannerDesc),
                    crate::ui::theme::switch("ssh-form-banner", cx)
                        .checked(form.skip_banner)
                        .on_click(cx.listener(|this, on: &bool, _w, cx| {
                            if let Some(f) = this.ssh_form_mut() {
                                f.skip_banner = *on;
                                cx.notify();
                            }
                        }))
                        .into_any_element(),
                    cx,
                ),
            )
            .child(self.subgroup_header(L10nKey::SettingsGroupSecurity, cx))
            .child(
                self.settings_row(
                    t(L10nKey::SettingsRemoteClipboardWrite),
                    t(L10nKey::SettingsRemoteClipboardWriteDesc),
                    crate::ui::theme::switch("ssh-form-remote-clipboard-write", cx)
                        .checked(form.remote_clipboard_write)
                        .on_click(cx.listener(|this, on: &bool, _w, cx| {
                            if let Some(f) = this.ssh_form_mut() {
                                f.remote_clipboard_write = *on;
                                cx.notify();
                            }
                        }))
                        .into_any_element(),
                    cx,
                ),
            )
            .child(self.settings_row(
                t(L10nKey::SettingsVerifyHostKeys),
                t_fmt(
                    L10nKey::SettingsDefaultFollowsDefaults,
                    &[("value", vhk_default)],
                ),
                self.segmented(
                    "ssh-form-vhk",
                    &[
                        t(L10nKey::SettingsDefault),
                        t(L10nKey::SettingsOn),
                        t(L10nKey::SettingsOff),
                    ],
                    vhk_idx,
                    cx,
                    |this, ix, _w, cx| {
                        if let Some(f) = this.ssh_form_mut() {
                            f.verify_host_keys = match ix {
                                1 => Some(true),
                                2 => Some(false),
                                _ => None,
                            };
                            cx.notify();
                        }
                    },
                ),
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::WarnBeforeClosing),
                t_fmt(
                    L10nKey::SettingsDefaultFollowsDefaults,
                    &[("value", woc_default)],
                ),
                self.segmented(
                    "ssh-form-woc",
                    &[
                        t(L10nKey::SettingsDefault),
                        t(L10nKey::SettingsOn),
                        t(L10nKey::SettingsOff),
                    ],
                    woc_idx,
                    cx,
                    |this, ix, _w, cx| {
                        if let Some(f) = this.ssh_form_mut() {
                            f.warn_on_close = match ix {
                                1 => Some(true),
                                2 => Some(false),
                                _ => None,
                            };
                            cx.notify();
                        }
                    },
                ),
                cx,
            ));
        section.into_any_element()
    }

    fn render_shell_group(&self, cx: &mut Context<Self>) -> AnyElement {
        let muted_fg = cx.theme().muted_foreground;
        let (program_input, args_input, wd_path_input) = match self.active_settings() {
            Some(s) => (
                s.shell_program_input.clone(),
                s.shell_args_input.clone(),
                s.wd_path_input.clone(),
            ),
            None => return div().into_any_element(),
        };
        let wd_strategy = cx.global::<Config>().working_directory.strategy;

        let platform_default = if cfg!(windows) {
            "PowerShell"
        } else {
            t(L10nKey::SettingsShellDefaultLoginShell)
        };

        // tty7 already knows which shells are installed — it lists them on the
        // new-tab button. Settings asked you to type one from memory instead,
        // so the same choice was a menu in one place and a blind text field in
        // the other. The field stays: a shell tty7 did not find still has to be
        // reachable by path.
        // Detected shells only. A `custom_shells` row is a menu extra rather
        // than a candidate for the platform default, and this picker hands its
        // choice on as a program alone — so offering one here would set the
        // default to a bare program and drop the arguments the user wrote it
        // for, silently.
        let shells: Vec<_> = self
            .shells
            .shells
            .iter()
            .filter(|shell| !shell.user_authored)
            .cloned()
            .collect();
        let current_program = program_input.read(cx).value().trim().to_string();
        let platform_default_item: SharedString = if cfg!(windows) {
            "PowerShell".into()
        } else {
            t(L10nKey::AppPlaceholderLoginShell).into()
        };
        let picker_app = cx.entity().downgrade();
        let picker_input = program_input.clone();
        // The chevron rides inside the field rather than beside it: hung on the
        // outside it would either push the box narrower than the Arguments box
        // directly below or push past the column every other control ends on.
        let program_picker = crate::ui::tab_strip::hit_target(
            Button::new("shell-program-detected")
                .icon(IconName::ChevronDown)
                // No fill in any state, so it reads the way `Select` draws its
                // own chevron: a mark inside the field, not a control sitting
                // on top of one. `ghost` gave it a filled rounded rectangle
                // while the menu was open, and `hit_target` sizes it to the
                // 24px accessibility floor — which is exactly the field's inner
                // height, so that fill met the border top and bottom and looked
                // like a patch stuck over the field's right end. The field's
                // own border and the tooltip carry the affordance.
                .custom(ButtonCustomVariant::new(cx).foreground(muted_fg))
                .xsmall(),
        )
        .disabled(shells.is_empty())
        .tooltip(t(L10nKey::SettingsShellDetected))
        .dropdown_menu_with_anchor(gpui::Anchor::TopRight, move |menu, _window, _cx| {
            // As wide as the field it drops out of. Anchored `TopRight` on a
            // chevron that sits *inside* the field, a 200px menu hung off the
            // field's right half with its left edge 110px in from the field's
            // own — a menu that looked like it belonged to something else.
            let mut menu = menu.min_w(px(FIELD_W));
            let pick = |program: String| {
                let app = picker_app.clone();
                let input = picker_input.clone();
                move |_: &_, window: &mut Window, cx: &mut App| {
                    input.update(cx, |state, cx| state.set_value(program.clone(), window, cx));
                    if let Some(app) = app.upgrade() {
                        app.update(cx, |this, cx| this.commit_shell_from_picker(cx));
                    }
                }
            };
            menu = menu.item(
                PopupMenuItem::new(platform_default_item.clone())
                    .checked(current_program.is_empty())
                    .on_click(pick(String::new())),
            );
            if !shells.is_empty() {
                menu = menu.item(PopupMenuItem::separator());
            }
            for shell in &shells {
                menu = menu.item(
                    PopupMenuItem::new(shell.label.clone())
                        .checked(current_program == shell.program)
                        .on_click(pick(shell.program.clone())),
                );
            }
            menu
        });
        let program_control = div()
            .w(px(FIELD_W))
            .max_w_full()
            .child(Input::new(&program_input).small().suffix(program_picker))
            .into_any_element();
        // Args become argv verbatim, so a quote that never closes is a value
        // that cannot be saved at all — `commit_shell` refuses it, and this
        // line is the explanation (#551). The proxy row's pattern, including
        // its caveat: the input commits on Enter/blur and this parent renders
        // on that commit, so a half-typed quote is never marked wrong
        // mid-keystroke.
        let args_value = args_input.read(cx).value();
        let args_error = crate::ui::app::split_shell_args(&args_value)
            .is_err()
            .then(|| field_error(t(L10nKey::SettingsArgumentsInvalid), cx));
        let args_control = v_flex()
            .gap_1()
            .w(px(FIELD_W))
            .max_w_full()
            .child(Input::new(&args_input).small())
            .when_some(args_error, |this, line| this.child(line))
            .into_any_element();

        use crate::core::config::WdStrategy;
        let wd_idx = match wd_strategy {
            WdStrategy::Inherit => 0,
            WdStrategy::Home => 1,
            WdStrategy::Custom => 2,
        };
        let wd_radio = self.segmented(
            "wd-strategy",
            &[
                t(L10nKey::SettingsWdInherit),
                t(L10nKey::SettingsWdHome),
                t(L10nKey::SettingsWdCustom),
            ],
            wd_idx,
            cx,
            |this, ix, _w, cx| {
                let s = match ix {
                    0 => WdStrategy::Inherit,
                    1 => WdStrategy::Home,
                    _ => WdStrategy::Custom,
                };
                this.set_working_directory_strategy(s, cx);
            },
        );
        let wd_path_control = if wd_strategy == WdStrategy::Custom {
            // Same pattern as the Arguments row above, with its caveat: the
            // input commits on Enter/blur and this parent renders on that
            // commit, so a half-typed path is never marked wrong
            // mid-keystroke. `commit_working_directory_path` refuses the same
            // value through the same predicate, so the red line and the
            // not-saved config always agree (#601).
            let wd_path_value = wd_path_input.read(cx).value();
            let wd_path_error = (!crate::ui::app::wd_path_saveable(&wd_path_value))
                .then(|| field_error(t(L10nKey::SettingsWdPathInvalid), cx));
            v_flex()
                .gap_1()
                .w(px(FIELD_W))
                .max_w_full()
                .child(Input::new(&wd_path_input).small())
                .when_some(wd_path_error, |this, line| this.child(line))
                .into_any_element()
        } else {
            div().into_any_element()
        };

        v_flex()
            .child(self.section_intro(
                t(L10nKey::SettingsShell),
                t_fmt(
                    L10nKey::SettingsShellIntro,
                    &[("default", platform_default)],
                ),
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsProgram),
                t(L10nKey::SettingsProgramDesc),
                program_control,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsArguments),
                t(L10nKey::SettingsArgumentsDesc),
                args_control,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsStartIn),
                t(L10nKey::SettingsStartInDesc),
                wd_radio,
                cx,
            ))
            .when(
                wd_strategy == crate::core::config::WdStrategy::Custom,
                |v| {
                    v.child(self.settings_row(
                        t(L10nKey::SettingsCustomPath),
                        t(L10nKey::SettingsCustomPathDesc),
                        wd_path_control,
                        cx,
                    ))
                },
            )
            .child(
                div()
                    .mt_3()
                    .text_xs()
                    .text_color(muted_fg)
                    .child(t(L10nKey::SettingsShellFooter)),
            )
            .into_any_element()
    }

    fn render_settings_terminal(&self, cx: &mut Context<Self>) -> AnyElement {
        let foreground = cx.theme().foreground;
        let cfg = cx.global::<Config>();
        let link_url = cfg.link_url;
        let ssh_loopback_forward = cfg.ssh_loopback_forward;
        let scroll_mult = cfg.mouse_scroll_multiplier;
        let smooth_scroll = cfg.smooth_scroll;
        let bell = cfg.bell;
        // A bucket highlights only on an exact match; any other value gets a
        // "Custom (N)" cell so the highlight never claims a number the config
        // does not have, and clicking that cell cannot overwrite it (#550).
        // Read off `cfg` here, with the rest of the copies: the control itself
        // is built further down, past calls that borrow `cx` mutably.
        let (scrollback_sel, scrollback_custom) =
            preset_choice(&SCROLLBACK_BUCKETS, cfg.scrollback_limit, group_thousands);
        let scroll_slider = match self.active_settings() {
            Some(s) => s.scroll_slider.clone(),
            None => return div().into_any_element(),
        };
        let link_file_command_input = match self.active_settings() {
            Some(s) => s.link_file_command_input.clone(),
            None => return div().into_any_element(),
        };

        let link_switch = crate::ui::theme::switch("term-link-url", cx)
            .checked(link_url)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_link_url(*on, cx)))
            .into_any_element();
        let ssh_loopback_switch = crate::ui::theme::switch("term-ssh-loopback-forward", cx)
            .checked(ssh_loopback_forward)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_ssh_loopback_forward(*on, cx)))
            .into_any_element();
        let link_file_open = cfg.file_open_mode();
        let link_file_open_radio = self.segmented(
            "term-link-file-open",
            &[
                t(L10nKey::SettingsOpenFilesInternal),
                t(L10nKey::SettingsOpenFilesSystem),
                t(L10nKey::SettingsOpenFilesCommand),
            ],
            match link_file_open {
                LinkFileOpen::Internal => 0,
                LinkFileOpen::System => 1,
                LinkFileOpen::Command => 2,
            },
            cx,
            |this, ix, _w, cx| {
                let mode = match ix {
                    0 => LinkFileOpen::Internal,
                    1 => LinkFileOpen::System,
                    _ => LinkFileOpen::Command,
                };
                this.set_link_file_open(mode, cx);
            },
        );
        // Only shown under `Command`: an empty box next to two working modes
        // reads as "this is what file links do", which is the one thing it is
        // not unless the mode above says so.
        let link_file_command_control = (link_file_open == LinkFileOpen::Command).then(|| {
            div()
                .w(px(300.))
                .max_w_full()
                .child(Input::new(&link_file_command_input).small())
                .into_any_element()
        });
        let scrollback_radio = self.segmented_valued(
            "term-scrollback",
            &SCROLLBACK_LABELS,
            scrollback_sel,
            scrollback_custom,
            cx,
            |this, ix, _w, cx| {
                let lines = SCROLLBACK_BUCKETS
                    .get(ix)
                    .copied()
                    .unwrap_or(Config::default().scrollback_limit);
                this.set_scrollback_limit(lines, cx);
            },
        );

        let bell_idx = match bell {
            BellMode::None => 0,
            BellMode::Visual => 1,
            BellMode::Audible => 2,
            BellMode::Both => 3,
        };
        let bell_control = self.segmented(
            "term-bell",
            &[
                t(L10nKey::SettingsBellModeOff),
                t(L10nKey::SettingsBellModeVisual),
                t(L10nKey::SettingsBellModeAudible),
                t(L10nKey::SettingsBellModeBoth),
            ],
            bell_idx,
            cx,
            |this, ix, _w, cx| {
                let mode = match ix {
                    0 => BellMode::None,
                    1 => BellMode::Visual,
                    2 => BellMode::Audible,
                    3 => BellMode::Both,
                    _ => BellMode::default(),
                };
                this.set_bell_mode(mode, cx);
            },
        );
        let scroll_control = h_flex()
            .items_center()
            .gap_3()
            .w(px(FIELD_W))
            .max_w_full()
            .child(div().flex_1().child(Slider::new(&scroll_slider)))
            .child(
                div()
                    .w(px(38.))
                    .flex_shrink_0()
                    .whitespace_nowrap()
                    .text_right()
                    .text_sm()
                    .text_color(foreground)
                    .child(format!("{scroll_mult:.2}×")),
            )
            .into_any_element();
        let smooth_scroll_switch = crate::ui::theme::switch("term-smooth-scroll", cx)
            .checked(smooth_scroll)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_smooth_scroll(*on, cx)))
            .into_any_element();

        v_flex()
            .child(self.render_shell_group(cx))
            .child(self.section_rule(cx))
            .child(self.render_input_groups(true, cx))
            .child(self.section_rule(cx))
            .child(self.section_header(t(L10nKey::SettingsScrolling), cx))
            .child(self.settings_row(
                t(L10nKey::SettingsScrollback),
                t(L10nKey::SettingsScrollbackDesc),
                scrollback_radio,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsScrollSpeed),
                t(L10nKey::SettingsScrollSpeedDesc),
                scroll_control,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsSmoothScroll),
                t(L10nKey::SettingsSmoothScrollDesc),
                smooth_scroll_switch,
                cx,
            ))
            .child(self.section_rule(cx))
            .child(self.section_header(t(L10nKey::SettingsBell), cx))
            .child(self.settings_row(
                t(L10nKey::SettingsTerminalBell),
                t(L10nKey::SettingsTerminalBellDesc),
                bell_control,
                cx,
            ))
            .child(self.section_rule(cx))
            .child(self.section_header(t(L10nKey::SettingsLinks), cx))
            .child(self.settings_row(
                t(L10nKey::DetectUrls),
                t_fmt(
                    L10nKey::SettingsDetectUrlsDesc,
                    &[("modifier", LINK_MODIFIER_LABEL)],
                ),
                link_switch,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::ForwardSshLoopbackLinks),
                t(L10nKey::SettingsForwardSshLoopbackLinksDesc),
                ssh_loopback_switch,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::OpenFilesWith),
                t_fmt(
                    L10nKey::SettingsOpenFilesModeDesc,
                    &[("modifier", LINK_MODIFIER_LABEL)],
                ),
                link_file_open_radio,
                cx,
            ))
            .children(link_file_command_control.map(|control| {
                self.settings_row(
                    t(L10nKey::SettingsOpenFilesCommand),
                    t_fmt(
                        L10nKey::SettingsOpenFilesWithDesc,
                        &[
                            ("modifier", LINK_MODIFIER_LABEL),
                            ("path", "{path}"),
                            ("line", "{line}"),
                            ("column", "{column}"),
                        ],
                    ),
                    control,
                    cx,
                )
            }))
            .into_any_element()
    }

    fn render_settings_input(&self, cx: &mut Context<Self>) -> AnyElement {
        let cfg = cx.global::<Config>();
        let mouse_hide = cfg.mouse_hide_while_typing;
        let focus_follows = cfg.focus_follows_mouse;
        let mouse_reporting = cfg.mouse_reporting;
        let mouse_zoom = cfg.mouse_zoom_modifier;
        let focus_switch = crate::ui::theme::switch("term-focus-follows", cx)
            .checked(focus_follows)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_focus_follows_mouse(*on, cx)))
            .into_any_element();
        let mouse_hide_switch = crate::ui::theme::switch("term-mouse-hide", cx)
            .checked(mouse_hide)
            .on_click(
                cx.listener(|this, on: &bool, _w, cx| this.set_mouse_hide_while_typing(*on, cx)),
            )
            .into_any_element();
        let mouse_report_switch = crate::ui::theme::switch("term-mouse-report", cx)
            .checked(mouse_reporting)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_mouse_reporting(*on, cx)))
            .into_any_element();
        // Ctrl only earns a cell where it is a different key from the
        // platform modifier: off macOS the two are the same key, and a
        // segmented control with the same key twice is a bug the user has to
        // decode. A config that names `ctrl` there still highlights it, in the
        // one cell that means it.
        let mac = cfg!(target_os = "macos");
        let zoom_labels: Vec<&str> = if mac {
            vec!["⌘", "⌃", "⌥", t(L10nKey::SettingsMouseZoomOff)]
        } else {
            vec!["Ctrl", "Alt", t(L10nKey::SettingsMouseZoomOff)]
        };
        let zoom_idx = match (mouse_zoom, mac) {
            (MouseZoomModifier::Platform, _) => 0,
            (MouseZoomModifier::Ctrl, true) => 1,
            (MouseZoomModifier::Ctrl, false) => 0,
            (MouseZoomModifier::Alt, true) => 2,
            (MouseZoomModifier::Alt, false) => 1,
            (MouseZoomModifier::None, true) => 3,
            (MouseZoomModifier::None, false) => 2,
        };
        let zoom_control = self.segmented(
            "term-mouse-zoom",
            &zoom_labels,
            zoom_idx,
            cx,
            move |this, ix, _w, cx| {
                let modifier = match (ix, mac) {
                    (0, _) => MouseZoomModifier::Platform,
                    (1, true) => MouseZoomModifier::Ctrl,
                    (1, false) => MouseZoomModifier::Alt,
                    (2, true) => MouseZoomModifier::Alt,
                    _ => MouseZoomModifier::None,
                };
                this.set_mouse_zoom_modifier(modifier, cx);
            },
        );
        v_flex()
            .child(
                self.settings_row(
                    t(L10nKey::SettingsSearchKeybindingsTitle),
                    t(L10nKey::SettingsKeybindingsIntroDesc),
                    Button::new("open-keybindings")
                        .label(t(L10nKey::SettingsEditShortcuts))
                        .small()
                        .on_click(cx.listener(|this, _, window, cx| {
                            this.navigate_settings(SettingsSection::Keybindings, None, window, cx)
                        }))
                        .into_any_element(),
                    cx,
                ),
            )
            .child(self.render_input_groups(false, cx))
            .child(self.section_rule(cx))
            .child(self.section_header(t(L10nKey::SettingsMouse), cx))
            .child(self.settings_row(
                t(L10nKey::SettingsFocusFollowsMouse),
                t(L10nKey::SettingsFocusFollowsMouseDesc),
                focus_switch,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsHideMouseWhileTyping),
                t(L10nKey::SettingsHideMouseWhileTypingDesc),
                mouse_hide_switch,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsReportMouseToApps),
                t(L10nKey::SettingsReportMouseToAppsDesc),
                mouse_report_switch,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsMouseZoom),
                t(L10nKey::SettingsMouseZoomDesc),
                zoom_control,
                cx,
            ))
            .into_any_element()
    }

    fn render_input_groups(&self, prompt: bool, cx: &mut Context<Self>) -> AnyElement {
        let cfg = cx.global::<Config>();
        let option_as_alt = cfg.macos_option_as_alt;
        let prompt_editor = cfg.prompt_editor;
        let tab_completion = cfg.tab_completion;
        let history_search = cfg.history_search;
        let per_pane_history = cfg.per_pane_history;
        let smart_select = cfg.smart_select;
        let copy_on_select = cfg.copy_on_select;
        let clip_trim = cfg.clipboard_trim_trailing_spaces;

        // Tab completion and history search are menus tty7 opens *inside* its
        // own prompt editor. With the editor off, both keys already belong to
        // the shell, so the switches have nothing left to switch: grey them
        // out and say why, rather than leave two controls that quietly do
        // nothing. Their stored values are untouched and come back with it.
        let gated = |desc: L10nKey| match prompt_editor {
            true => t(desc).to_string(),
            false => format!("{} {}", t(desc), t(L10nKey::SettingsNeedsPromptEditor)),
        };

        let prompt_editor_switch = crate::ui::theme::switch("term-prompt-editor", cx)
            .checked(prompt_editor)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_prompt_editor(*on, cx)))
            .into_any_element();
        let tab_completion_switch = crate::ui::theme::switch("term-tab-completion", cx)
            .checked(tab_completion)
            .disabled(!prompt_editor)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_tab_completion(*on, cx)))
            .into_any_element();
        let history_search_switch = crate::ui::theme::switch("term-history-search", cx)
            .checked(history_search)
            .disabled(!prompt_editor)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_history_search(*on, cx)))
            .into_any_element();
        let per_pane_history_switch = crate::ui::theme::switch("term-per-pane-history", cx)
            .checked(per_pane_history)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_per_pane_history(*on, cx)))
            .into_any_element();
        let smart_select_switch = crate::ui::theme::switch("term-smart-select", cx)
            .checked(smart_select)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_smart_select(*on, cx)))
            .into_any_element();
        let copy_on_select_switch = crate::ui::theme::switch("term-copy-on-select", cx)
            .checked(copy_on_select)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_copy_on_select(*on, cx)))
            .into_any_element();
        let trim_switch = crate::ui::theme::switch("term-clip-trim", cx)
            .checked(clip_trim)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_clipboard_trim(*on, cx)))
            .into_any_element();
        let option_alt_row = cfg!(target_os = "macos").then(|| {
            let switch = crate::ui::theme::switch("term-option-as-alt", cx)
                .checked(option_as_alt)
                .on_click(
                    cx.listener(|this, on: &bool, _w, cx| this.set_macos_option_as_alt(*on, cx)),
                )
                .into_any_element();
            self.settings_row(
                t(L10nKey::SettingsOptionAsMeta),
                t(L10nKey::SettingsOptionAsMetaDesc),
                switch,
                cx,
            )
        });

        v_flex()
            .when(prompt, |v| {
                v.child(self.section_intro(
                    t(L10nKey::SettingsPrompt),
                    t(L10nKey::SettingsPromptIntro),
                    cx,
                ))
                .child(self.settings_row(
                    t(L10nKey::SettingsPromptEditor),
                    t(L10nKey::SettingsPromptEditorDesc),
                    prompt_editor_switch,
                    cx,
                ))
                .child(self.settings_row_gated_when(
                    t(L10nKey::SettingsTabCompletion),
                    gated(L10nKey::SettingsTabCompletionDesc),
                    tab_completion_switch,
                    !prompt_editor,
                    cx,
                ))
                .child(self.settings_row_gated_when(
                    t(L10nKey::SettingsHistorySearch),
                    gated(L10nKey::SettingsHistorySearchDesc),
                    history_search_switch,
                    !prompt_editor,
                    cx,
                ))
                .child(self.settings_row(
                    t(L10nKey::SettingsPerPaneHistory),
                    t(L10nKey::SettingsPerPaneHistoryDescription),
                    per_pane_history_switch,
                    cx,
                ))
            })
            .when(!prompt, |v| {
                v.child(self.section_rule(cx))
                    .child(self.section_header(t(L10nKey::SettingsSelectionClipboard), cx))
                    .child(self.settings_row(
                        t(L10nKey::SettingsSmartSelection),
                        t(L10nKey::SettingsSmartSelectionDesc),
                        smart_select_switch,
                        cx,
                    ))
                    .child(self.settings_row(
                        t(L10nKey::SettingsCopyOnSelect),
                        t(L10nKey::SettingsCopyOnSelectDesc),
                        copy_on_select_switch,
                        cx,
                    ))
                    .child(self.settings_row(
                        t(L10nKey::SettingsTrimTrailingSpaces),
                        t(L10nKey::SettingsTrimTrailingSpacesDesc),
                        trim_switch,
                        cx,
                    ))
                    .when_some(option_alt_row, |v, row| {
                        v.child(self.section_rule(cx))
                            .child(self.section_header(t(L10nKey::SettingsKeyboard), cx))
                            .child(row)
                    })
            })
            .into_any_element()
    }

    fn render_settings_agents(&self, cx: &mut Context<Self>) -> AnyElement {
        use crate::core::agent_hooks::HooksState;

        let theme = cx.theme();
        let (foreground, muted_fg) = (theme.foreground, theme.muted_foreground);
        let (success, warning) = (theme.success, theme.warning);
        let (view, note, selected_host) = match self.active_settings() {
            Some(s) => (
                s.agent_hooks_states.clone(),
                s.agent_hooks_note.clone(),
                s.agent_hooks_host,
            ),
            None => (AgentHooksView::Loading, None, HostId::LOCAL),
        };
        let stacked = self.settings_row_under(STACK_ROW_BELOW, cx);
        let mut page = v_flex().child(self.section_intro(
            t(L10nKey::SettingsAgentsIntro),
            t(L10nKey::SettingsAgentsIntroDesc),
            cx,
        ));

        page = page.children(self.agent_hooks_machine_picker(selected_host, cx));

        // The hook rows describe whichever machine is selected above; the
        // command-line section below is always about this GUI's own host, so it
        // is appended after the match rather than inside the ready arm.
        match view {
            AgentHooksView::Loading => {
                page = page.child(
                    div()
                        .py_4()
                        .text_sm()
                        .text_color(muted_fg)
                        .child(t(L10nKey::SettingsReadingAgentConfig)),
                );
            }
            AgentHooksView::Unavailable(reason) => {
                page = page.child(div().py_4().text_sm().text_color(warning).child(reason));
            }
            AgentHooksView::Ready(rows) => {
                for (i, row) in rows.into_iter().enumerate() {
                    let agent = row.agent;
                    let (dot_color, status_text) = match row.state {
                        HooksState::NotInstalled => {
                            (muted_fg, t(L10nKey::SettingsStatusNotInstalled))
                        }
                        HooksState::Installed => (success, t(L10nKey::SettingsStatusInstalled)),
                        HooksState::Outdated => (warning, t(L10nKey::SettingsStatusOutdated)),
                    };
                    let primary_label = match row.state {
                        HooksState::NotInstalled => t(L10nKey::SettingsInstall),
                        HooksState::Installed => t(L10nKey::SettingsReinstall),
                        HooksState::Outdated => t(L10nKey::SettingsUpdate),
                    };
                    let row_note = note
                        .as_ref()
                        .filter(|(for_agent, _)| *for_agent == agent)
                        .map(|(_, text)| text.clone());

                    // Right-aligned beside its label, left-aligned under it —
                    // `settings_row` gives the control column the whole row
                    // once it stacks, and buttons flush to the far edge of a
                    // row whose label starts at the near one read as unrelated.
                    let control = v_flex()
                        .gap_2()
                        .when(!stacked, |c| c.items_end())
                        .child(
                            h_flex()
                                .gap_2()
                                .items_center()
                                .child(div().size_2().rounded_full().bg(dot_color))
                                .child(div().text_sm().text_color(foreground).child(status_text)),
                        )
                        .child(
                            h_flex()
                                .gap_2()
                                .child(
                                    Button::new(("agent-hooks-install", i))
                                        .label(primary_label)
                                        .small()
                                        .on_click(cx.listener(move |this, _, _w, cx| {
                                            this.settings_install_agent_hooks(agent, cx)
                                        })),
                                )
                                .when(row.state != HooksState::NotInstalled, |r| {
                                    r.child(
                                        Button::new(("agent-hooks-uninstall", i))
                                            .label(t(L10nKey::SettingsUninstall))
                                            .small()
                                            .on_click(cx.listener(move |this, _, _w, cx| {
                                                this.settings_uninstall_agent_hooks(agent, cx)
                                            })),
                                    )
                                }),
                        )
                        .when_some(row_note, |col, text| {
                            col.child(
                                div()
                                    // One cap, not two: `max_w` holds a single
                                    // length, so stating both left the note
                                    // sized against a shrink-proof column that
                                    // is itself sized to the note — no cap at
                                    // all, and a long error (Codex's missing
                                    // `codex` binary) inflated the row until
                                    // the label column, `min_w_0`, came out one
                                    // character per line. Stacked, the control
                                    // column *is* the row, so a relative cap
                                    // resolves; beside the label it cannot, and
                                    // 320 is what the row has room for.
                                    .when(stacked, |note| note.max_w_full())
                                    .when(!stacked, |note| note.max_w_80())
                                    .text_xs()
                                    .when(!stacked, |note| note.text_right())
                                    .text_color(muted_fg)
                                    .child(text),
                            )
                        })
                        .into_any_element();

                    page = page.child(self.settings_row(
                        agent.display_name(),
                        row.target,
                        control,
                        cx,
                    ));
                }
            }
        }

        let install_cli_on_path = cx.global::<Config>().install_cli_on_path;
        let cli_switch = crate::ui::theme::switch("install-cli-on-path", cx)
            .checked(install_cli_on_path)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_install_cli_on_path(*on, cx)));
        // Built from the same pieces as every other setting in the app: a
        // section header, then a row whose label and description sit left of
        // its control. Hand-rolled, this was the one switch that stood to the
        // left of its own label — and the one row the settings search could
        // neither highlight nor dim, so a query that counted it in the nav
        // badge left nothing on the page looking like the match.
        page.child(self.section_rule(cx))
            .child(self.section_header(t(L10nKey::SettingsCommandLine), cx))
            .child(self.settings_row(
                t(L10nKey::SettingsInstallCliOnPath),
                t(L10nKey::SettingsCommandLineDesc),
                cli_switch.into_any_element(),
                cx,
            ))
            .into_any_element()
    }

    fn agent_hooks_machine_picker(&self, selected: HostId, cx: &mut Context<Self>) -> Option<Div> {
        let sf = cx.global::<presets::Surfaces>().window;
        let border = cx.theme().border;
        let muted_fg = cx.theme().muted_foreground;
        let machines = self.agent_hooks_machines(cx);
        let offline = self.agent_hooks_offline_count(cx);
        if machines.len() < 2 && offline == 0 {
            return None;
        }

        Some(
            v_flex()
                .gap_2()
                .mb_4()
                .child(
                    h_flex()
                        .flex_wrap()
                        .gap_1p5()
                        .children(machines.into_iter().map(|machine| {
                            let active = machine.host == selected;
                            let host = machine.host;
                            h_flex()
                                .id(("agent-hooks-machine", host.0 as usize))
                                .h(px(24.))
                                .px_2p5()
                                .items_center()
                                .rounded_lg()
                                .border_1()
                                .border_color(border)
                                .bg(rgb(sf.base))
                                .text_sm()
                                .cursor_pointer()
                                .when(active, |s| {
                                    s.bg(rgb(sf.selected))
                                        .text_color(rgb(sf.text_selected))
                                        .font_weight(FontWeight::MEDIUM)
                                })
                                .when(!active, |s| {
                                    s.text_color(rgb(sf.text_resting))
                                        .hover(|h| h.bg(rgb(sf.hover)))
                                })
                                .active(|s| s.bg(rgb(sf.pressed)))
                                .child(machine.label)
                                .on_click(cx.listener(move |this, _, _w, cx| {
                                    this.select_agent_hooks_host(host, cx)
                                }))
                        })),
                )
                .when(offline > 0, |col| {
                    col.child(div().text_xs().text_color(muted_fg).child(t_plural(
                        L10nKey::SettingsOfflineMachines,
                        offline,
                        &[],
                    )))
                }),
        )
    }

    fn render_window_preferences(&self, general: bool, cx: &mut Context<Self>) -> AnyElement {
        let cfg = cx.global::<Config>();
        let startup_idx = match cfg.startup_mode {
            crate::core::config::StartupMode::Normal => 0,
            crate::core::config::StartupMode::Maximized => 1,
            crate::core::config::StartupMode::Fullscreen => 2,
        };
        let new_tab_idx = match cfg.new_tab_position {
            NewTabPosition::AfterCurrent => 0,
            NewTabPosition::End => 1,
        };
        let restore_session = cfg.restore_session;
        let remember_window_size = cfg.remember_window_size;
        let show_tray_icon = cfg.show_tray_icon;
        let tab_bar_idx = match cfg.tab_bar_position {
            TabBarPosition::Top => 0,
            TabBarPosition::Left => 1,
        };
        let sidebar_diff_preview = cfg.sidebar_diff_preview;
        let sidebar_grouping_idx = match cfg.sidebar_grouping {
            crate::core::config::SidebarGrouping::Repo => 0,
            crate::core::config::SidebarGrouping::RepoOrDirectory => 1,
            crate::core::config::SidebarGrouping::None => 2,
        };
        let notify_idx = match cfg.notify_on_command_finish {
            NotifyMode::Never => 0,
            NotifyMode::Unfocused => 1,
            NotifyMode::Always => 2,
        };
        // Exact-match highlight with a "Custom (Ns)" fallback, same as the
        // scrollback row: a hand-set 20s used to light up "30s" (#550).
        let (threshold_sel, threshold_custom) = preset_choice(
            &NOTIFY_THRESHOLD_BUCKETS,
            cfg.notify_threshold_secs,
            |secs| format!("{secs}s"),
        );
        let notify_radio = self.segmented(
            "wt-notify",
            &[
                t(L10nKey::NotifyModeNever),
                t(L10nKey::NotifyModeUnfocused),
                t(L10nKey::NotifyModeAlways),
            ],
            notify_idx,
            cx,
            |this, ix, _w, cx| {
                let mode = match ix {
                    0 => NotifyMode::Never,
                    1 => NotifyMode::Unfocused,
                    _ => NotifyMode::Always,
                };
                this.set_notify_mode(mode, cx);
            },
        );
        let threshold_radio = self.segmented_valued(
            "wt-notify-threshold",
            &NOTIFY_THRESHOLD_LABELS,
            threshold_sel,
            threshold_custom,
            cx,
            |this, ix, _w, cx| {
                let secs = NOTIFY_THRESHOLD_BUCKETS
                    .get(ix)
                    .copied()
                    .unwrap_or(Config::default().notify_threshold_secs);
                this.set_notify_threshold(secs, cx);
            },
        );

        let restore_switch = crate::ui::theme::switch("wt-restore-session", cx)
            .checked(restore_session)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_restore_session(*on, cx)))
            .into_any_element();
        let remember_window_switch = crate::ui::theme::switch("wt-remember-window", cx)
            .checked(remember_window_size)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_remember_window_size(*on, cx)))
            .into_any_element();
        let tray_switch = crate::ui::theme::switch("wt-tray-icon", cx)
            .checked(show_tray_icon)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_show_tray_icon(*on, cx)))
            .into_any_element();
        let startup_radio = self.segmented(
            "wt-startup",
            &[
                t(L10nKey::SettingsStartupNormal),
                t(L10nKey::SettingsStartupMaximized),
                t(L10nKey::SettingsStartupFullscreen),
            ],
            startup_idx,
            cx,
            |this, ix, _w, cx| {
                let mode = match ix {
                    0 => crate::core::config::StartupMode::Normal,
                    1 => crate::core::config::StartupMode::Maximized,
                    _ => crate::core::config::StartupMode::Fullscreen,
                };
                this.set_startup_mode(mode, cx);
            },
        );
        let new_tab_radio = self.segmented(
            "wt-new-tab-pos",
            &[t(L10nKey::SettingsAfterCurrent), t(L10nKey::SettingsAtEnd)],
            new_tab_idx,
            cx,
            |this, ix, _w, cx| {
                let pos = if ix == 0 {
                    NewTabPosition::AfterCurrent
                } else {
                    NewTabPosition::End
                };
                this.set_new_tab_position(pos, cx);
            },
        );
        let tab_bar_radio = self.segmented(
            "wt-tab-bar-pos",
            &[t(L10nKey::SettingsTop), t(L10nKey::SettingsLeft)],
            tab_bar_idx,
            cx,
            |this, ix, _w, cx| {
                let pos = if ix == 0 {
                    TabBarPosition::Top
                } else {
                    TabBarPosition::Left
                };
                this.set_tab_bar_position(pos, cx);
            },
        );
        let sidebar_diff_switch = crate::ui::theme::switch("wt-sidebar-diff-preview", cx)
            .checked(sidebar_diff_preview)
            .on_click(cx.listener(|this, on: &bool, _w, cx| this.set_sidebar_diff_preview(*on, cx)))
            .into_any_element();
        let sidebar_grouping_radio = self.segmented(
            "wt-sidebar-grouping",
            &[
                t(L10nKey::SettingsByRepo),
                t(L10nKey::SettingsByRepoOrFolder),
                t(L10nKey::SettingsFlat),
            ],
            sidebar_grouping_idx,
            cx,
            |this, ix, _w, cx| {
                let grouping = match ix {
                    0 => crate::core::config::SidebarGrouping::Repo,
                    1 => crate::core::config::SidebarGrouping::RepoOrDirectory,
                    _ => crate::core::config::SidebarGrouping::None,
                };
                this.set_sidebar_grouping(grouping, cx);
            },
        );

        v_flex()
            .when(general, |v| {
                v.child(self.section_header(t(L10nKey::SettingsWindow), cx))
                    .child(self.settings_row(
                        t(L10nKey::SettingsStartupWindow),
                        t(L10nKey::SettingsStartupWindowDesc),
                        startup_radio,
                        cx,
                    ))
                    .child(self.settings_row(
                        t(L10nKey::SettingsRememberWindowSize),
                        t(L10nKey::SettingsRememberWindowSizeDesc),
                        remember_window_switch,
                        cx,
                    ))
                    .child(self.settings_row(
                        t(L10nKey::SettingsRestoreLastLayout),
                        t(L10nKey::SettingsRestoreLastLayoutDesc),
                        restore_switch,
                        cx,
                    ))
                    .child(self.settings_row(
                        t(L10nKey::SettingsShowTrayIcon),
                        t(L10nKey::SettingsShowTrayIconDesc),
                        tray_switch,
                        cx,
                    ))
            })
            .when(!general, |v| {
                v.child(self.section_rule(cx))
                    .child(self.section_header(t(L10nKey::SettingsTabs), cx))
                    .child(self.settings_row(
                        t(L10nKey::SettingsNewTabPosition),
                        t(L10nKey::SettingsNewTabPositionDesc),
                        new_tab_radio,
                        cx,
                    ))
                    .child(self.settings_row(
                        t(L10nKey::SettingsTabBarPosition),
                        t(L10nKey::SettingsTabBarPositionDesc),
                        tab_bar_radio,
                        cx,
                    ))
                    .child(self.settings_row(
                        t(L10nKey::SettingsSidebarGrouping),
                        t(L10nKey::SettingsSidebarGroupingDesc),
                        sidebar_grouping_radio,
                        cx,
                    ))
                    .child(self.settings_row(
                        t(L10nKey::SettingsDiffPreviewFromCounts),
                        t(L10nKey::SettingsDiffPreviewFromCountsDesc),
                        sidebar_diff_switch,
                        cx,
                    ))
            })
            .when(general, |v| {
                v.child(self.section_rule(cx))
                    .child(self.section_header(t(L10nKey::SettingsNotifications), cx))
                    .child(self.settings_row(
                        t(L10nKey::SettingsNotifyOnCommandFinish),
                        t(L10nKey::SettingsNotifyOnCommandFinishDesc),
                        notify_radio,
                        cx,
                    ))
                    .child(self.settings_row(
                        t(L10nKey::SettingsNotifyThreshold),
                        t(L10nKey::SettingsNotifyThresholdDesc),
                        threshold_radio,
                        cx,
                    ))
            })
            .into_any_element()
    }

    fn theme_preview(&self, p: &presets::Theme) -> Div {
        let to_u32 = |(r, g, b): (u8, u8, u8)| (r as u32) << 16 | (g as u32) << 8 | b as u32;
        let accent = rgb(p.accent);
        let ansi = |i: usize| rgb(to_u32(p.ansi16[i]));
        let fg = rgb(p.foreground);
        let bar = |frac: f32, color: gpui::Rgba| {
            div().h(px(4.)).w(relative(frac)).rounded(px(1.5)).bg(color)
        };

        v_flex()
            .w_full()
            .bg(rgb(p.background_color()))
            .rounded(rounding::TRACK_RADIUS)
            .overflow_hidden()
            .px_3()
            .py_3()
            .gap(px(10.))
            .child(
                h_flex()
                    .items_center()
                    .gap_2()
                    .child(div().text_size(px(11.)).text_color(accent).child("❯"))
                    .child(bar(0.5, fg)),
            )
            .child(
                h_flex()
                    .gap_2()
                    .child(bar(0.2, ansi(2)))
                    .child(bar(0.36, ansi(4)))
                    .child(bar(0.12, ansi(3))),
            )
            .child(
                h_flex()
                    .gap_2()
                    .child(bar(0.14, ansi(1)))
                    .child(bar(0.44, fg)),
            )
            .child(
                h_flex()
                    .gap_2()
                    .child(bar(0.1, ansi(6)))
                    .child(bar(0.32, accent)),
            )
    }

    fn render_theme_selection(&self, cx: &mut Context<Self>) -> AnyElement {
        let follow = cx.global::<Config>().theme_follow_system;
        let follow_switch = crate::ui::theme::switch("theme-follow-system", cx)
            .checked(follow)
            .on_click(cx.listener(|this, on: &bool, window, cx| {
                this.set_theme_follow_system(*on, window, cx)
            }))
            .into_any_element();
        let legible = cx.global::<Config>().theme_legible_palette;
        let legible_switch = crate::ui::theme::switch("theme-legible-palette", cx)
            .checked(legible)
            .on_click(cx.listener(|this, on: &bool, window, cx| {
                this.set_theme_legible_palette(*on, window, cx)
            }))
            .into_any_element();
        let root = v_flex()
            .child(self.settings_row(
                t(L10nKey::SettingsSyncWithSystem),
                t(L10nKey::SettingsSyncWithSystemDesc),
                follow_switch,
                cx,
            ))
            .child(self.settings_row(
                t(L10nKey::SettingsLegiblePalette),
                t(L10nKey::SettingsLegiblePaletteDesc),
                legible_switch,
                cx,
            ));
        if follow {
            root.child(self.render_theme_card(ThemeSlot::Light, cx))
                .child(self.render_theme_card(ThemeSlot::Dark, cx))
                .into_any_element()
        } else {
            root.child(self.render_theme_card(ThemeSlot::Manual, cx))
                .into_any_element()
        }
    }

    fn render_theme_card(&self, slot: ThemeSlot, cx: &mut Context<Self>) -> AnyElement {
        let theme = cx.theme();
        let border = theme.border;
        let foreground = theme.foreground;
        let muted_fg = theme.muted_foreground;
        let hover_bg = gpui::rgb(cx.global::<presets::Surfaces>().window.hover);
        let surface = theme.secondary.opacity(0.28);

        let config = cx.global::<Config>();
        let (card_id, active_id) = match slot {
            ThemeSlot::Manual => ("theme-card-manual", config.theme_preset.clone()),
            ThemeSlot::Light => ("theme-card-light", config.theme_preset_light.clone()),
            ThemeSlot::Dark => ("theme-card-dark", config.theme_preset_dark.clone()),
        };
        let active = presets::by_id(cx, &active_id);
        let name = active.name.clone();
        let kind = if active.path.is_some() {
            t(L10nKey::SettingsCustom)
        } else {
            t(L10nKey::SettingsBuiltIn)
        };
        let mode = if active.dark {
            t(L10nKey::SettingsDark)
        } else {
            t(L10nKey::SettingsLight)
        };
        let mode_label = if active.dark {
            t(L10nKey::SettingsDarkMode)
        } else {
            t(L10nKey::SettingsLightMode)
        };
        let caption = match slot {
            ThemeSlot::Manual => format!("{kind} · {mode}"),
            ThemeSlot::Light if !crate::ui::theme::system_dark(cx) => {
                format!("{mode_label} · {kind} · {}", t(L10nKey::SettingsActive))
            }
            ThemeSlot::Light => format!("{mode_label} · {kind}"),
            ThemeSlot::Dark if crate::ui::theme::system_dark(cx) => {
                format!("{mode_label} · {kind} · {}", t(L10nKey::SettingsActive))
            }
            ThemeSlot::Dark => format!("{mode_label} · {kind}"),
        };
        let to_u32 = |(r, g, b): (u8, u8, u8)| (r as u32) << 16 | (g as u32) << 8 | b as u32;
        let swatches = h_flex().gap_1().mt_1p5().children((1..=6).map(|i| {
            div()
                .w(px(10.))
                .h(px(10.))
                .rounded(px(3.))
                .bg(rgb(to_u32(active.ansi16[i])))
        }));
        // Inset inside the card's border, the way the same preview is inset
        // inside the same card in the theme panel.
        let preview = self.theme_preview(&active).rounded(rounding::inner_radius(
            rounding::TRACK_RADIUS,
            rounding::HAIRLINE,
        ));
        let open = self
            .active_settings()
            .is_some_and(|s| s.theme_panel_open && s.theme_panel_slot == slot);
        // The same width a row stacks at: the card is a row too, just one whose
        // control happens to be a whole preview.
        let narrow = self.settings_row_under(STACK_ROW_BELOW, cx);

        div()
            .id(card_id)
            .mt_1()
            .mb_2()
            .w_full()
            .cursor_pointer()
            .on_click(
                cx.listener(move |this, _, window, cx| this.toggle_theme_panel(slot, window, cx)),
            )
            .child(
                h_flex()
                    .w_full()
                    .items_center()
                    .gap_4()
                    .p_3()
                    .rounded(rounding::TRACK_RADIUS)
                    .border_1()
                    .border_color(if open {
                        foreground.opacity(0.35)
                    } else {
                        border
                    })
                    .bg(surface)
                    .hover(|h| h.bg(hover_bg))
                    // The preview is the first thing to go: it is a picture of a
                    // choice the two lines beside it already name, and at the
                    // width where it stops fitting it was pushing the "change
                    // theme" affordance off the card.
                    .when(!narrow, |card| {
                        card.child(div().w(px(150.)).flex_shrink_0().child(preview))
                    })
                    .child(
                        v_flex()
                            .flex_1()
                            .min_w_0()
                            .gap_0p5()
                            .child(div().text_xs().text_color(muted_fg).child(caption))
                            .child(
                                div()
                                    .text_sm()
                                    .font_weight(FontWeight::SEMIBOLD)
                                    .text_color(foreground)
                                    .child(name),
                            )
                            .child(swatches),
                    )
                    .child(
                        h_flex()
                            .flex_shrink_0()
                            .items_center()
                            .gap_1()
                            .text_sm()
                            .text_color(muted_fg)
                            .child(t(L10nKey::SettingsChangeTheme))
                            .child(Icon::new(IconName::ChevronRight).small()),
                    ),
            )
            .into_any_element()
    }

    fn render_theme_panel(&self, cx: &mut Context<Self>) -> AnyElement {
        let theme = cx.theme();
        let border = theme.border;
        let foreground = theme.foreground;
        let muted_fg = theme.muted_foreground;
        let bg = theme.sidebar;

        let (search, query, slot) = match self.active_settings() {
            Some(s) => (
                s.theme_search.clone(),
                s.theme_search.read(cx).value().trim().to_lowercase(),
                s.theme_panel_slot,
            ),
            None => return div().into_any_element(),
        };
        let list_scroll = self.active_settings().map(|s| s.theme_list_scroll.clone());
        let config = cx.global::<Config>();
        let slot = match (config.theme_follow_system, slot) {
            (false, _) => ThemeSlot::Manual,
            (true, ThemeSlot::Manual) => {
                if crate::ui::theme::system_dark(cx) {
                    ThemeSlot::Dark
                } else {
                    ThemeSlot::Light
                }
            }
            (true, s) => s,
        };
        let active_id = match slot {
            ThemeSlot::Manual => config.theme_preset.clone(),
            ThemeSlot::Light => config.theme_preset_light.clone(),
            ThemeSlot::Dark => config.theme_preset_dark.clone(),
        };

        let header = h_flex()
            .items_center()
            .justify_between()
            .px_4()
            .pt_4()
            .pb_1()
            .child(
                div()
                    .text_base()
                    .font_weight(FontWeight::SEMIBOLD)
                    .text_color(foreground)
                    .child(t(L10nKey::SettingsThemes)),
            )
            .child(
                div().occlude().child(
                    Button::new("theme-panel-close")
                        .icon(IconName::Close)
                        .ghost()
                        .small()
                        .tooltip(t(L10nKey::SettingsThemesCloseTooltip))
                        .on_click(
                            cx.listener(|this, _, window, cx| this.close_theme_panel(window, cx)),
                        ),
                ),
            );

        let subtitle = div()
            .px_4()
            .pb_3()
            .text_xs()
            .text_color(muted_fg)
            .child(match slot {
                ThemeSlot::Manual => t(L10nKey::SettingsThemePanelManual),
                ThemeSlot::Light => t(L10nKey::SettingsThemePanelLight),
                ThemeSlot::Dark => t(L10nKey::SettingsThemePanelDark),
            });

        let search_box = div().px_4().pb_3().child(
            div().w_full().child(
                Input::new(&search).small().prefix(
                    Icon::empty()
                        .path("stock/icons/search.svg")
                        .small()
                        .text_color(muted_fg),
                ),
            ),
        );

        // A theme file that fails to parse used to log a warning and then just
        // not be in the list. This is a folder the user opens and drops files
        // into; "it isn't there" needs a reason attached to it.
        let rejected = presets::rejected(cx);
        let rejected_note = (!rejected.is_empty() && query.is_empty()).then(|| {
            let mut note = v_flex()
                .mx_4()
                .mb_4()
                .p_3()
                .gap_1p5()
                .rounded(rounding::TRACK_RADIUS)
                .border_1()
                .border_color(theme.danger.opacity(0.4))
                .child(
                    div()
                        .text_xs()
                        .font_weight(FontWeight::MEDIUM)
                        .text_color(foreground)
                        .child(t(L10nKey::SettingsThemesRejected)),
                );
            for (name, why) in &rejected {
                note = note.child(
                    v_flex()
                        .gap_0p5()
                        .child(div().text_xs().text_color(theme.danger).child(name.clone()))
                        .child(div().text_xs().text_color(muted_fg).child(why.clone())),
                );
            }
            note
        });

        let mut list = v_flex().px_4().pb_4().gap_4();
        // Filtering every preset out left the panel blank under its own search
        // box — the one filter in the app that said nothing about it.
        let mut any_themes = false;
        for p in presets::all(cx) {
            if !query.is_empty() && !p.name.to_lowercase().contains(&query) {
                continue;
            }
            any_themes = true;
            let id = p.id.clone();
            let is_active = active_id == id;
            let preview = self.theme_preview(&p).rounded(rounding::inner_radius(
                rounding::TRACK_RADIUS,
                rounding::HAIRLINE,
            ));
            let click_id = id.clone();
            list = list.child(
                v_flex()
                    .id(SharedString::from(format!("panel-theme-{id}")))
                    .gap_1p5()
                    .cursor_pointer()
                    .child(
                        div()
                            .w_full()
                            .rounded(rounding::TRACK_RADIUS)
                            .overflow_hidden()
                            .border_1()
                            .border_color(if is_active {
                                foreground.opacity(0.5)
                            } else {
                                border
                            })
                            .when(is_active, |s| s.shadow_md())
                            .when(!is_active, |s| {
                                s.hover(|h| h.border_color(foreground.opacity(0.25)))
                            })
                            .child(preview),
                    )
                    .child(
                        h_flex()
                            .items_center()
                            .gap_1p5()
                            .w_full()
                            .child(
                                div()
                                    .truncate()
                                    .text_sm()
                                    .font_weight(if is_active {
                                        FontWeight::SEMIBOLD
                                    } else {
                                        FontWeight::MEDIUM
                                    })
                                    .text_color(if is_active { foreground } else { muted_fg })
                                    .child(p.name.clone()),
                            )
                            .when(is_active, |s| {
                                s.child(
                                    Icon::new(IconName::Check)
                                        .small()
                                        .flex_shrink_0()
                                        .text_color(foreground),
                                )
                            }),
                    )
                    .on_click(cx.listener(move |this, _, window, cx| match slot {
                        ThemeSlot::Manual => this.set_preset(&click_id, window, cx),
                        ThemeSlot::Light => this.set_slot_preset(false, &click_id, window, cx),
                        ThemeSlot::Dark => this.set_slot_preset(true, &click_id, window, cx),
                    })),
            );
        }

        if !any_themes {
            list = list.child(div().py_2().text_sm().text_color(muted_fg).child(t_fmt(
                L10nKey::SettingsNothingMatches,
                &[("query", query.as_str())],
            )));
        }

        v_flex()
            .w(px(self.settings_columns_now().theme_panel))
            .h_full()
            .flex_shrink_0()
            .bg(bg)
            .border_l_1()
            .border_color(border)
            .child(header)
            .child(subtitle)
            .child(search_box)
            .when_some(list_scroll, |panel, scroll| {
                panel.child(crate::ui::scrollbar::with_vertical_scrollbar(
                    "theme-panel-scrollbar",
                    v_flex()
                        .id("theme-panel-list")
                        .size_full()
                        .overflow_y_scroll()
                        .track_scroll(&scroll)
                        .children(rejected_note)
                        .child(list),
                    &scroll,
                ))
            })
            .into_any_element()
    }

    fn render_settings_keybindings(&self, cx: &mut Context<Self>) -> AnyElement {
        let section = SettingsSection::Keybindings;
        let query = self
            .active_settings()
            .map(|s| s.shortcut_search.read(cx).value().trim().to_lowercase())
            .unwrap_or_default();
        let (foreground, muted, border, kbd_bg, accent) = {
            let t = cx.theme();
            (
                t.foreground,
                t.muted_foreground,
                t.border,
                t.secondary.opacity(0.6),
                t.primary,
            )
        };

        let (preset, prefix, overridden) = {
            let cfg = cx.global::<Config>();
            let overridden: std::collections::HashSet<String> =
                cfg.keybindings.keys().cloned().collect();
            (
                cfg.keybinding_preset.clone(),
                cfg.prefix.clone(),
                overridden,
            )
        };
        let tmux = preset == "tmux";
        let effective = crate::ui::keymap::effective_chords(cx);

        let recording = self
            .active_settings()
            .and_then(|s| s.recording.as_ref())
            .map(|r| (r.action.clone(), r.chords.clone()));
        let record_gen = self.record_gen;
        let note = self
            .active_settings()
            .and_then(|s| s.rebinding_note.clone());

        let keycap = move |tok: String| {
            div()
                .flex()
                .items_center()
                .justify_center()
                .min_w(px(22.))
                .h(px(22.))
                .px_1p5()
                .rounded_md()
                .bg(kbd_bg)
                .border_1()
                .border_color(border)
                .text_xs()
                .text_color(foreground)
                .child(tok)
        };

        let preset_control = self.segmented(
            "kb-preset",
            &[t(L10nKey::SettingsDefault), "tmux"],
            usize::from(tmux),
            cx,
            |this, ix, _w, cx| {
                this.set_keybinding_preset(if ix == 0 { "default" } else { "tmux" }, cx)
            },
        );
        let prefix_control = self.segmented(
            "kb-prefix",
            &["Ctrl-B", "Ctrl-A"],
            usize::from(prefix == "ctrl-a"),
            cx,
            |this, ix, _w, cx| {
                this.set_keybinding_prefix(if ix == 0 { "ctrl-b" } else { "ctrl-a" }, cx)
            },
        );

        // The label column has to be allowed to shrink, or its description sets
        // the row's width and the control it belongs to is pushed off the page.
        // `settings_row` does this for every other row in Settings; these two
        // are hand-rolled and were missing it. They take its breakpoint too:
        // the segmented controls beside them are the widest on the page.
        let stacked = self.settings_row_under(STACK_ROW_BELOW, cx);
        let hand_rolled_row = |row: Div| {
            row.w_full()
                .flex()
                .when(stacked, |r| r.flex_col().items_start().gap_2())
                .when(!stacked, |r| {
                    r.flex_row().items_center().justify_between().gap_8()
                })
        };
        let preset_row = hand_rolled_row(div().py_2())
            .child(
                v_flex()
                    .min_w_0()
                    .gap_0p5()
                    .child(
                        div()
                            .text_sm()
                            .font_weight(FontWeight::MEDIUM)
                            .text_color(foreground)
                            .child(t(L10nKey::SettingsPreset)),
                    )
                    .child(
                        div()
                            .text_xs()
                            .text_color(muted)
                            .child(t(L10nKey::SettingsPresetDesc)),
                    ),
            )
            .child(h_flex().flex_shrink_0().child(preset_control));

        let prefix_row = hand_rolled_row(div().py_2())
            .child(
                div()
                    .min_w_0()
                    .text_sm()
                    .font_weight(FontWeight::MEDIUM)
                    .text_color(foreground)
                    .child(t(L10nKey::SettingsPrefix)),
            )
            .child(h_flex().flex_shrink_0().child(prefix_control));

        // Eighty-nine undivided rows, in the order the binding table happens to
        // be written. Read them in the same seven sections the command palette
        // uses, so a shortcut is found by where it belongs rather than by
        // scrolling.
        //
        // With a query that this page answers, the page *is* the answer: the
        // rows that match, and nothing else. Every other page greys its misses
        // instead, which works when a page is a dozen rows and does not when it
        // is eighty-nine — the reader would still be scrolling for the grey to
        // stop. Filtering also takes the preset control and the destructive
        // "restore all" button out of a view that is a search result and not a
        // page anyone is configuring.
        let filtering = !query.is_empty() && section_match_count(section, &query) > 0;
        let mut grouped: Vec<(
            crate::ui::palette::CommandGroup,
            Vec<(String, Vec<String>, String)>,
        )> = Vec::new();
        for (action, key) in effective {
            if filtering && !keybinding_matches_query(&action, &query) {
                continue;
            }
            let (group, label) = crate::ui::keymap::action_entry(&action);
            let slot = match grouped.iter_mut().find(|(g, _)| *g == group) {
                Some(slot) => slot,
                None => {
                    grouped.push((group, Vec::new()));
                    grouped.last_mut().expect("just pushed")
                }
            };
            slot.1.push((action, key, label));
        }
        grouped.sort_by_key(|(g, _)| {
            crate::ui::palette::CommandGroup::ORDER
                .iter()
                .position(|o| o == g)
                .unwrap_or(usize::MAX)
        });
        let rows: Vec<(String, Vec<String>, String)> = grouped
            .iter()
            .flat_map(|(_, rows)| rows.iter().cloned())
            .collect();
        let heading_at: std::collections::HashMap<usize, &'static str> = {
            let mut map = std::collections::HashMap::new();
            let mut at = 0usize;
            for (group, rows) in &grouped {
                map.insert(at, group.title());
                at += rows.len();
            }
            map
        };
        let count = rows.len();
        let mut list = v_flex().mt_2();
        for (i, (action, key, label)) in rows.into_iter().enumerate() {
            let is_recording = recording.as_ref().is_some_and(|(a, _)| a == &action);
            let is_overridden = overridden.contains(&action);

            // Wrapping, because a four-chord binding is wider than the column a
            // narrow window leaves for it, and the alternative to a second line
            // is a first one that runs off the page.
            let keycaps = |spec: &str| {
                h_flex().flex_wrap().gap_2().children(
                    crate::ui::keymap::key_chords(spec)
                        .into_iter()
                        .map(|chord| h_flex().gap_1().children(chord.into_iter().map(&keycap))),
                )
            };

            let captured: gpui::AnyElement = if is_recording {
                let chords = recording
                    .as_ref()
                    .map(|(_, c)| c.clone())
                    .unwrap_or_default();
                let row = h_flex().gap_2().items_center();
                let row = if chords.is_empty() {
                    row.child(
                        div()
                            .text_xs()
                            .text_color(accent)
                            .child(t(L10nKey::SettingsPressKeys)),
                    )
                } else {
                    // The binding commits on a pause, and the pause was
                    // invisible: the hint asked people to time something they
                    // could not see. The bar runs the same clock the commit
                    // does, and restarts with every extra chord.
                    row.child(keycaps(&chords.join(" "))).child(
                        v_flex()
                            .gap(px(3.))
                            .child(
                                div()
                                    .text_xs()
                                    .text_color(muted)
                                    .child(t(L10nKey::SettingsPauseToSaveEsc)),
                            )
                            .child(
                                div()
                                    .h(px(2.))
                                    .w_full()
                                    .overflow_hidden()
                                    .rounded_full()
                                    .bg(border)
                                    .child(
                                        div().h_full().rounded_full().bg(accent).with_animation(
                                            ("kb-record-countdown", record_gen as usize),
                                            Animation::new(std::time::Duration::from_millis(
                                                crate::ui::app::RECORD_COMMIT_DELAY_MS,
                                            )),
                                            |bar, delta| bar.w(relative(delta)),
                                        ),
                                    ),
                            ),
                    )
                };
                row.into_any_element()
            } else if key.is_empty() {
                div()
                    .text_sm()
                    .text_color(muted)
                    .child("—")
                    .into_any_element()
            } else {
                // An action can answer to more than one chord — its default and
                // one added beside it in config.json (#868) — and this is the
                // one page that lists them, so a row shows every one.
                h_flex()
                    .flex_wrap()
                    .items_center()
                    .gap_2()
                    .children(key.iter().enumerate().map(|(n, spec)| {
                        h_flex()
                            .items_center()
                            .gap_2()
                            .when(n > 0, |d| {
                                d.child(div().text_xs().text_color(muted).child("/"))
                            })
                            .child(keycaps(spec))
                    }))
                    .into_any_element()
            };

            let action_for_click = action.clone();
            let capture = div()
                .id(SharedString::from(format!("kb-{action}")))
                .flex()
                .items_center()
                .gap_2()
                .px_2()
                .py_1()
                .rounded_md()
                .cursor_pointer()
                .when(is_recording, |d| d.border_1().border_color(accent))
                .hover(|d| d.bg(kbd_bg))
                .child(captured)
                .on_click(cx.listener(move |this, _, window, cx| {
                    this.start_recording_key(action_for_click.clone(), window, cx)
                }));

            let action_for_reset = action.clone();
            let right = h_flex()
                .items_center()
                .gap_1()
                .child(capture)
                .when(is_overridden, |r| {
                    r.child(
                        Button::new(SharedString::from(format!("reset-{action}")))
                            .label(t(L10nKey::Reset))
                            .small()
                            .on_click(cx.listener(move |this, _, _w, cx| {
                                this.reset_keybinding(action_for_reset.clone(), cx)
                            })),
                    )
                });

            if let Some(title) = heading_at.get(&i) {
                list = list.child(
                    div()
                        .pt_5()
                        .pb_1p5()
                        .text_xs()
                        .font_weight(FontWeight::MEDIUM)
                        .text_color(muted)
                        .child(*title),
                );
            }
            let last_in_group = heading_at.contains_key(&(i + 1)) || i + 1 == count;
            list = list.child(
                hand_rolled_row(div().py_1p5())
                    .when(!last_in_group, |s| s.border_b_1().border_color(border))
                    .child(
                        div()
                            .min_w_0()
                            .text_sm()
                            .text_color(foreground)
                            .child(label),
                    )
                    .child(right.flex_shrink_0()),
            );
        }

        v_flex()
            .when_some(self.active_settings(), |v, s| {
                v.child(Input::new(&s.shortcut_search).small())
                    .child(self.section_rule(cx))
            })
            .child(self.section_intro(
                t(L10nKey::SettingsNavKeybindings),
                t(L10nKey::SettingsKeybindingsIntroDesc),
                cx,
            ))
            .when(!filtering, |v| {
                v.child(preset_row)
                    .when(tmux, |v| v.child(prefix_row))
                    .when(tmux, |v| {
                        v.child(
                            div()
                                .py_1()
                                .text_xs()
                                .text_color(muted)
                                .child(t(L10nKey::SettingsPrefixNote)),
                        )
                    })
            })
            // The rebinding note is the answer to something the reader just
            // did, so it outlives the filter that a stale query would hide it
            // behind.
            .when_some(note, |v, note| {
                v.child(div().py_1().text_xs().text_color(accent).child(note))
            })
            .when(!filtering, |v| {
                v.child(
                    h_flex().justify_end().py_2().child(
                        Button::new("kb-restore-all")
                            .label(t(L10nKey::SettingsRestoreAllDefaults))
                            .small()
                            .on_click(cx.listener(|this, _, window, cx| {
                                this.restore_default_keybindings(window, cx)
                            })),
                    ),
                )
            })
            .child(list)
            .into_any_element()
    }

    fn render_settings_maintenance(&self, cx: &mut Context<Self>) -> AnyElement {
        let foreground = cx.theme().foreground;
        let muted_fg = cx.theme().muted_foreground;
        let stale_daemon = crate::daemon::spawn::local_daemon_stale_build();
        // Whether picking up the new build costs the user their running panes
        // decides what this offer is, so it decides what it says.
        let stale_daemon_note = if crate::daemon::spawn::local_daemon_supports(
            crate::daemon::protocol::FEATURE_HANDOFF,
        ) {
            L10nKey::SettingsDaemonStaleDescInPlace
        } else {
            L10nKey::SettingsDaemonStaleDesc
        };
        let check_for_updates = cx.global::<Config>().check_for_updates;
        let auto_download = cx.global::<Config>().auto_download_updates;
        let channel_idx = match cx.global::<Config>().update_channel {
            UpdateChannel::Stable => 0,
            UpdateChannel::Nightly => 1,
        };
        let channel_picker = self.segmented(
            "wt-update-channel",
            &[
                t(L10nKey::SettingsUpdateChannelStable),
                t(L10nKey::SettingsUpdateChannelNightly),
            ],
            channel_idx,
            cx,
            |this, ix, _w, cx| {
                let channel = match ix {
                    0 => UpdateChannel::Stable,
                    _ => UpdateChannel::Nightly,
                };
                this.set_update_channel(channel, cx);
            },
        );
        let http_proxy_input = match self.active_settings() {
            Some(s) => s.http_proxy_input.clone(),
            None => return div().into_any_element(),
        };
        // Only flags a committed value: the input commits on Enter/blur, so a
        // half-typed address is never marked wrong mid-keystroke.
        let http_proxy_value = http_proxy_input.read(cx).value().trim().to_string();
        let http_proxy_invalid = !http_proxy_value.is_empty()
            && !tty7_core::daemon::install::proxy::is_valid_manual(&http_proxy_value);
        let http_proxy_error =
            http_proxy_invalid.then(|| field_error(t(L10nKey::SettingsAppHttpProxyInvalid), cx));
        let http_proxy_control = v_flex()
            .gap_1()
            .w(px(FIELD_W))
            .max_w_full()
            .child(Input::new(&http_proxy_input).small())
            .when_some(http_proxy_error, |this, line| this.child(line))
            .into_any_element();

        v_flex()
            .child(self.section_header(t(L10nKey::SettingsUpdates), cx))
            .child(self.settings_row(
                t(L10nKey::SettingsUpdateChannel),
                t(L10nKey::SettingsUpdateChannelDesc),
                channel_picker,
                cx,
            ))
            .child(
                self.settings_row(
                    t(L10nKey::SettingsCheckUpdatesOnLaunch),
                    t(L10nKey::SettingsCheckUpdatesDesc),
                    crate::ui::theme::switch("check-updates", cx)
                        .checked(check_for_updates)
                        .on_click(cx.listener(|this, on: &bool, _w, cx| {
                            this.set_check_for_updates(*on, cx)
                        }))
                        .into_any_element(),
                    cx,
                ),
            )
            .child(
                self.settings_row(
                    t(L10nKey::SettingsAutoDownload),
                    t(L10nKey::SettingsAutoDownloadDesc),
                    crate::ui::theme::switch("auto-download-updates", cx)
                        .checked(auto_download)
                        .on_click(cx.listener(|this, on: &bool, _w, cx| {
                            this.set_auto_download_updates(*on, cx)
                        }))
                        .into_any_element(),
                    cx,
                ),
            )
            .child(self.settings_row(
                t(L10nKey::SettingsAppHttpProxy),
                t(L10nKey::SettingsAppHttpProxyDesc),
                http_proxy_control,
                cx,
            ))
            .child(self.section_rule(cx))
            .child(self.section_header(t(L10nKey::SettingsServer), cx))
            .child(
                v_flex()
                    .gap_2()
                    // The other half of an in-place update: the app is new, the
                    // process serving every pane is not. Said here rather than
                    // beside the update controls, so the one button that offers
                    // to pick the new build up stays the only one on the page.
                    .when_some(stale_daemon.as_deref(), |this, build| {
                        this.child(
                            div()
                                .text_sm()
                                .text_color(foreground)
                                .child(t_fmt(L10nKey::SettingsDaemonStale, &[("build", build)])),
                        )
                    })
                    .child(
                        div()
                            .text_sm()
                            .text_color(muted_fg)
                            // A stale server has a more specific thing to say
                            // than the section's standing description, and it
                            // ends with the same button.
                            .child(t(if stale_daemon.is_some() {
                                stale_daemon_note
                            } else {
                                L10nKey::SettingsServerDesc
                            })),
                    )
                    .child(
                        h_flex().child(
                            Button::new("restart-daemon")
                                .label(t(L10nKey::SettingsRestartServer))
                                .small()
                                .on_click(cx.listener(|this, _, window, cx| {
                                    this.restart_daemon(window, cx)
                                })),
                        ),
                    ),
            )
            .into_any_element()
    }

    fn render_settings_about(&self, cx: &mut Context<Self>) -> AnyElement {
        // Copy colors before constructing controls that borrow `cx` mutably.
        let (foreground, muted_fg, danger) = {
            let theme = cx.theme();
            (theme.foreground, theme.muted_foreground, theme.danger)
        };

        let update_status = cx
            .try_global::<crate::core::update::UpdateStatus>()
            .cloned()
            .unwrap_or_default();
        let update = update_status.available.clone();
        let update_busy = matches!(
            update_status.phase,
            crate::core::update::UpdatePhase::Checking
                | crate::core::update::UpdatePhase::Downloading { .. }
                | crate::core::update::UpdatePhase::Verifying
                | crate::core::update::UpdatePhase::Installing
        );
        let transferring = matches!(
            update_status.phase,
            crate::core::update::UpdatePhase::Downloading { .. }
                | crate::core::update::UpdatePhase::Verifying
        );
        // A staged package whose directory has since been swept away is not an
        // offer worth making.
        let ready = update_status
            .ready
            .clone()
            .filter(crate::core::update::PendingUpdate::is_usable);
        // "You're running the latest version" directly above "27.0.0 is ready
        // to install" is a contradiction, and a reachable one: a release that
        // gets pulled after someone downloaded it leaves exactly this pair.
        // The staged package is the more useful of the two claims.
        let phase_text = localized_update_phase(&update_status.phase).filter(|_| {
            ready.is_none()
                || !matches!(
                    update_status.phase,
                    crate::core::update::UpdatePhase::UpToDate
                )
        });
        let failure = update_status.failure.clone();
        let logo = Arc::new(Image::from_bytes(
            ImageFormat::Png,
            include_bytes!("../../assets/logo@256.png").to_vec(),
        ));

        v_flex()
            .child(
                h_flex()
                    .gap_4()
                    .items_center()
                    .child(img(logo).size_12().rounded_lg())
                    .child(
                        v_flex()
                            .gap_0p5()
                            .child(
                                div()
                                    .text_xl()
                                    .font_weight(FontWeight::SEMIBOLD)
                                    .text_color(foreground)
                                    .child("tty7"),
                            )
                            .child(div().text_sm().text_color(muted_fg).child(format!(
                                "{} {}",
                                t(L10nKey::SettingsVersion),
                                env!("CARGO_PKG_VERSION")
                            )))
                            .child(
                                Link::new("about-github")
                                    .href("https://github.com/l0ng-ai/tty7")
                                    .text_sm()
                                    .child("github.com/l0ng-ai/tty7"),
                            ),
                    ),
            )
            .child(
                div()
                    .mt_4()
                    .text_sm()
                    .text_color(muted_fg)
                    .child(t(L10nKey::SettingsAboutDesc1)),
            )
            .child(self.section_rule(cx))
            .child(self.section_header(t(L10nKey::SettingsUpdates), cx))
            .child(
                v_flex()
                    // The section can carry several stacked states at once —
                    // a failure, a staged package, a skipped version. At gap_2
                    // they read as one paragraph.
                    .gap_3()
                    // A failure the user can act on. Persisted, so it is still
                    // here tomorrow — the old in-memory phase died with the
                    // process and took the only evidence with it.
                    .when_some(failure, |this, failure| {
                        this.child(
                            v_flex()
                                .gap_1()
                                .child(div().text_sm().text_color(danger).child(t_fmt(
                                    L10nKey::SettingsUpdateFailedTitle,
                                    &[("version", &failure.version)],
                                )))
                                .child(
                                    div()
                                        .text_xs()
                                        .text_color(muted_fg)
                                        .child(failure.detail.clone()),
                                )
                                .child(
                                    h_flex()
                                        .gap_2()
                                        .child(
                                            Button::new("update-retry")
                                                .label(t(L10nKey::SettingsUpdateRetry))
                                                .small()
                                                .disabled(update_busy)
                                                .on_click(cx.listener(|_, _, _window, cx| {
                                                    crate::core::update::dismiss_failure(cx);
                                                    crate::core::update::install_available(cx);
                                                })),
                                        )
                                        .child(
                                            Button::new("update-manual")
                                                .label(t(L10nKey::SettingsUpdateDownloadManually))
                                                .small()
                                                .on_click(cx.listener(|_, _, _window, _cx| {
                                                    crate::core::update::open_releases_page()
                                                })),
                                        )
                                        .child(
                                            Button::new("update-dismiss")
                                                .label(t(L10nKey::SettingsUpdateDismiss))
                                                .small()
                                                .on_click(cx.listener(|_, _, _window, cx| {
                                                    crate::core::update::dismiss_failure(cx)
                                                })),
                                        ),
                                ),
                        )
                    })
                    // Downloaded and verified: the decision left is "may I
                    // restart", not "will you spend five minutes on this".
                    .when_some(ready.clone(), |this, pending| {
                        this.child(
                            v_flex()
                                .gap_1()
                                .child(div().text_sm().text_color(foreground).child(t_fmt(
                                    L10nKey::SettingsUpdateReady,
                                    &[("version", &pending.version)],
                                )))
                                .when(pending.apply_on_launch, |this| {
                                    this.child(
                                        div()
                                            .text_xs()
                                            .text_color(muted_fg)
                                            .child(t(L10nKey::SettingsUpdateReadyNextLaunch)),
                                    )
                                })
                                .child(
                                    h_flex()
                                        .gap_2()
                                        .child(
                                            Button::new("install-ready")
                                                .label(t(L10nKey::SettingsUpdateInstallNow))
                                                .small()
                                                .disabled(update_busy)
                                                .on_click(cx.listener(|_, _, _window, cx| {
                                                    crate::core::update::install_available(cx)
                                                })),
                                        )
                                        .child(
                                            Button::new("discard-ready")
                                                .label(t(L10nKey::SettingsUpdateDiscard))
                                                .small()
                                                .disabled(update_busy)
                                                .on_click(cx.listener(|_, _, _window, cx| {
                                                    crate::core::update::discard_pending(cx)
                                                })),
                                        ),
                                ),
                        )
                    })
                    // One action, not the three that used to crowd this row.
                    // The update dialog covers the rest, but it is a moment
                    // rather than a place: after "Later" it does not come back
                    // for days, and where the package cannot be installed for
                    // the user — Linux, an unsupported install — the release
                    // page is the whole update path. That cannot live only in a
                    // dialog that has already been dismissed.
                    .when_some(update.filter(|_| ready.is_none()), |this, upd| {
                        let availability = t_fmt(
                            L10nKey::SettingsVersionAvailable,
                            &[("version", &upd.version)],
                        );
                        // `install_available` opens the release page by itself
                        // when there is nothing to install, so both labels lead
                        // to the one call.
                        let action = if upd.installable {
                            t(L10nKey::SettingsUpdateAndRelaunch)
                        } else {
                            t(L10nKey::SettingsUpdateViewRelease)
                        };
                        this.child(
                            v_flex()
                                .gap_2()
                                .child(
                                    h_flex()
                                        .gap_3()
                                        .items_center()
                                        .child(
                                            div()
                                                .text_sm()
                                                .text_color(foreground)
                                                .child(availability),
                                        )
                                        .child(
                                            Button::new("install-update")
                                                .label(action)
                                                .small()
                                                .disabled(update_busy)
                                                .on_click(cx.listener(|_, _, _window, cx| {
                                                    crate::core::update::install_available(cx)
                                                })),
                                        ),
                                )
                                .when_some(upd.install_hint, |this, hint| {
                                    this.child(
                                        div()
                                            .text_xs()
                                            .text_color(muted_fg)
                                            .child(localized_update_install_hint(&hint)),
                                    )
                                }),
                        )
                    })
                    .when_some(phase_text, |this, text| {
                        this.child(div().text_sm().text_color(muted_fg).child(text))
                    })
                    .child(
                        h_flex()
                            .gap_2()
                            .child(
                                Button::new("check-update-now")
                                    .label(
                                        if matches!(
                                            update_status.phase,
                                            crate::core::update::UpdatePhase::Checking
                                        ) {
                                            t(L10nKey::SettingsUpdateChecking)
                                        } else {
                                            t(L10nKey::SettingsUpdateCheckNow)
                                        },
                                    )
                                    .small()
                                    .disabled(update_busy)
                                    .on_click(cx.listener(|_, _, _window, cx| {
                                        crate::core::update::spawn_check_forced(cx)
                                    })),
                            )
                            // Thirty megabytes on a slow link is exactly the
                            // download someone wants to call off; without this
                            // the only way out was to kill the app.
                            .when(transferring, |this| {
                                this.child(
                                    Button::new("cancel-update-download")
                                        .label(t(L10nKey::SettingsUpdateCancel))
                                        .small()
                                        .on_click(cx.listener(|_, _, _window, cx| {
                                            crate::core::update::cancel_download(cx)
                                        })),
                                )
                            }),
                    ),
            )
            .into_any_element()
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn the_catalog_has_unique_titles_and_default_values_are_unmodified() {
        let defaults = Config::default();
        for (i, entry) in settings_search_entries().iter().enumerate() {
            assert!(
                !settings_search_entries()[..i]
                    .iter()
                    .any(|e| e.title == entry.title),
                "duplicate {:?}",
                entry.title
            );
            assert!(
                !entry.modified(&defaults),
                "default {:?} is modified",
                entry.title
            );
            assert!(SettingsSection::ALL.contains(&entry.section));
        }
        assert_eq!(SettingsSection::ALL.len(), 8);
        assert!(!SettingsSection::ALL.contains(&SettingsSection::Keybindings));
    }

    #[test]
    fn config_keys_and_cross_language_names_reach_the_same_setting() {
        for locale in ["en", "zh-CN", "ja-JP"] {
            crate::ui::i18n::set_locale(locale);
            for (query, title, section) in [
                (
                    "gui_language",
                    L10nKey::SettingsLanguage,
                    SettingsSection::General,
                ),
                (
                    "mouse_zoom_modifier",
                    L10nKey::SettingsMouseZoom,
                    SettingsSection::KeyboardMouse,
                ),
                (
                    "per_pane_history",
                    L10nKey::SettingsPerPaneHistory,
                    SettingsSection::Terminal,
                ),
                (
                    "ui_font_size",
                    L10nKey::SettingsUiFontSize,
                    SettingsSection::Appearance,
                ),
                (
                    "Shell program",
                    L10nKey::SettingsProgram,
                    SettingsSection::Terminal,
                ),
            ] {
                let entry = settings_search_entries()
                    .iter()
                    .find(|e| e.title == title)
                    .unwrap();
                assert!(entry_matches(entry, query), "{locale}: {query}");
                assert_eq!(
                    best_matching_section(query).unwrap().profile_label(),
                    section.profile_label()
                );
            }
        }
        crate::ui::i18n::set_locale("en");
    }

    #[test]
    fn settings_row_ids_survive_language_changes() {
        for key in [
            L10nKey::SettingsFontSize,
            L10nKey::SettingsLanguage,
            L10nKey::SettingsMouseZoom,
        ] {
            crate::ui::i18n::set_locale("en");
            let expected = settings_row_id(t(key), "");
            for locale in ["zh-CN", "ja-JP"] {
                crate::ui::i18n::set_locale(locale);
                assert_eq!(settings_row_id(t(key), ""), expected);
            }
        }
        crate::ui::i18n::set_locale("en");
    }

    #[test]
    fn modified_settings_compare_their_own_values_only() {
        let mut cfg = Config::default();
        cfg.notify_threshold_secs += 1;
        let changed = settings_search_entries()
            .iter()
            .filter(|e| e.modified(&cfg))
            .map(|e| e.title)
            .collect::<Vec<_>>();
        assert_eq!(changed, vec![L10nKey::SettingsNotifyThreshold]);
    }

    /// A shortcut is the first thing someone searching a settings window for a
    /// feature by name is after, and the Keybindings page was the one page the
    /// search could not see into: searching "split" found the settings that
    /// merely mention splits and never the row labelled exactly that (#444).
    #[test]
    fn searching_for_a_feature_finds_its_shortcut() {
        crate::ui::i18n::set_locale("en");
        let kb = SettingsSection::Keybindings;

        // Split Right and Split Down, at least — the index carries no entry
        // for either, so before this every one of these counts was zero.
        assert!(
            section_match_count(kb, "split") >= 2,
            "got {}",
            section_match_count(kb, "split")
        );
        assert!(keybinding_matches_query("SplitRight", "split right"));

        // The action name is what the docs and `keybindings.json` spell, so a
        // reader arriving from either finds the row they read about.
        assert!(keybinding_matches_query("ScmSync", "scmsync"));

        // An empty query matches no row, or clearing the box would filter the
        // page down to nothing rather than back to every row. (The count above
        // it answers `contains("")` for the one indexed entry this section has
        // always carried, which is why the page gates on the query itself
        // before it consults either.)
        assert!(!keybinding_matches_query("SplitRight", ""));
        assert_eq!(keybinding_match_count(""), 0);

        // A query this page cannot answer leaves it alone — the page only
        // filters itself when it has something to show.
        assert_eq!(section_match_count(kb, "no such action anywhere"), 0);
    }

    /// Every outcome of a test has a line of its own, and the timing reads as
    /// a number a person can compare rather than four digits of milliseconds.
    #[test]
    fn a_test_result_reads_as_one_line_per_outcome() {
        crate::ui::i18n::set_locale("en");
        assert_eq!(human_millis(640), "640 ms");
        assert_eq!(human_millis(999), "999 ms");
        assert_eq!(human_millis(1000), "1.0 s");
        assert_eq!(human_millis(12_400), "12.4 s");

        let needs = [
            SshTestNeed::Password,
            SshTestNeed::KeyPassphrase,
            SshTestNeed::KeyboardInteractive,
            SshTestNeed::HostKeyDecision,
            SshTestNeed::HostKeyChanged,
        ];
        let lines: Vec<&str> = needs.iter().map(|n| t(ssh_test_need_message(*n))).collect();
        assert!(lines.iter().all(|l| !l.is_empty()));
        assert_eq!(
            lines.iter().collect::<std::collections::HashSet<_>>().len(),
            lines.len(),
            "each thing the handshake can stop for gets said differently"
        );
    }

    /// The credential boxes the form shows have to be the ones the connection
    /// will actually offer. `build_spec_inner` sends a password for Auto and
    /// Password and key passphrases for Auto and Key, and nothing for the
    /// rest — a box outside that split collects a secret, stores it in the
    /// keychain, and never hands it to anybody.
    #[test]
    fn a_credential_box_only_appears_where_the_handshake_would_use_it() {
        for mode in AUTH_MODES {
            assert_eq!(
                auth_uses_password(mode),
                matches!(mode, AuthMode::Auto | AuthMode::Password),
                "{mode:?} password box"
            );
            assert_eq!(
                auth_uses_key(mode),
                matches!(mode, AuthMode::Auto | AuthMode::PublicKey),
                "{mode:?} key boxes"
            );
        }
        assert!(!auth_uses_password(AuthMode::Agent));
        assert!(!auth_uses_key(AuthMode::Gssapi));
    }

    /// The password lives in the keychain under the address, not in the
    /// profile — so saving has to decide two things the config file cannot
    /// record: whether the entry the form read is now stranded, and whether
    /// there is anything new to write.
    #[test]
    fn saving_moves_a_password_with_the_address_it_belongs_to() {
        let plan = |was, typed, moved| password_plan(was, typed, moved);

        // A form nobody typed in writes nothing at all.
        assert_eq!(
            plan("hunter2", "hunter2", false),
            PasswordPlan {
                drop_old: false,
                store: false
            }
        );
        // A new secret replaces the old one in place.
        assert_eq!(
            plan("hunter2", "correct horse", false),
            PasswordPlan {
                drop_old: false,
                store: true
            }
        );
        // Clearing the box is how a saved password is let go of.
        assert_eq!(
            plan("hunter2", "", false),
            PasswordPlan {
                drop_old: true,
                store: false
            }
        );
        // Retargeting the host carries the secret across and leaves nothing
        // behind under the old address — even when the secret itself is
        // untouched, because the account it is filed under is the address.
        assert_eq!(
            plan("hunter2", "hunter2", true),
            PasswordPlan {
                drop_old: true,
                store: true
            }
        );
        // A host that never had one, and still does not.
        assert_eq!(
            plan("", "", true),
            PasswordPlan {
                drop_old: false,
                store: false
            }
        );
        // The first password a host is given.
        assert_eq!(
            plan("", "hunter2", false),
            PasswordPlan {
                drop_old: false,
                store: true
            }
        );
    }

    /// A key picked from the system dialog arrives as an absolute path under
    /// the home directory. Written back that way it names the right file on
    /// this machine and the wrong one everywhere else — and `~` is how the
    /// rest of the field, and `~/.ssh/config` itself, spells it.
    #[test]
    fn a_picked_key_is_written_the_way_the_config_spells_it() {
        let home = Some("/Users/ada");
        assert_eq!(
            tildify_with("/Users/ada/.ssh/id_ed25519", home),
            "~/.ssh/id_ed25519"
        );
        // Outside the home directory there is nothing to shorten.
        assert_eq!(tildify_with("/etc/ssh/key", home), "/etc/ssh/key");
        // And a sibling that merely starts with the same letters is not
        // inside it.
        assert_eq!(
            tildify_with("/Users/adalovelace/key", home),
            "/Users/adalovelace/key"
        );
        // A trailing separator on the home directory changes nothing.
        assert_eq!(
            tildify_with("/Users/ada/.ssh/id_rsa", Some("/Users/ada/")),
            "~/.ssh/id_rsa"
        );
        // Nowhere to anchor against leaves the path as it came.
        assert_eq!(
            tildify_with("/Users/ada/.ssh/id_rsa", None),
            "/Users/ada/.ssh/id_rsa"
        );
    }

    /// The passphrase box is about one key at a time: the first one named that
    /// is actually on disk, with `%h` and `%r` filled in the way the daemon
    /// will fill them. A path that is not there can hold no passphrase.
    #[test]
    fn the_passphrase_follows_the_first_key_that_is_really_there() {
        let dir = std::env::temp_dir().join(format!("tty7-keyform-{}", std::process::id()));
        std::fs::create_dir_all(&dir).unwrap();
        let real = dir.join("id_example.com");
        std::fs::write(&real, b"key").unwrap();
        let missing = dir.join("absent").to_string_lossy().to_string();
        let pattern = dir.join("id_%h").to_string_lossy().to_string();

        assert_eq!(
            first_readable_key_in(&[missing.clone(), pattern], "example.com", "ada"),
            Some(real.to_string_lossy().to_string())
        );
        assert_eq!(
            first_readable_key_in(&[missing.clone()], "example.com", "ada"),
            None
        );
        // An empty field falls back to the defaults the handshake offers —
        // and a named key, even a missing one, replaces them entirely.
        let defaults = || vec![missing.clone(), real.to_string_lossy().to_string()];
        assert_eq!(
            first_readable_key_or(&[], "example.com", "ada", defaults),
            Some(real.to_string_lossy().to_string())
        );
        assert_eq!(
            first_readable_key_or(&[missing.clone()], "example.com", "ada", defaults),
            None
        );
        assert_eq!(
            first_readable_key_or(&[], "example.com", "ada", Vec::new),
            None
        );
        std::fs::remove_dir_all(&dir).ok();
    }

    /// The dropdown resolves a pick by its row index, so the row a mode opens
    /// on and the mode that row saves have to be the same one. A list that
    /// drifted out of step would quietly save the wrong method.
    #[test]
    fn every_auth_mode_opens_on_its_own_row() {
        crate::ui::i18n::set_locale("en");
        let labels = auth_mode_labels();
        assert_eq!(labels.len(), AUTH_MODES.len());
        for mode in AUTH_MODES {
            let ix = auth_mode_index(mode);
            assert_eq!(AUTH_MODES[ix], mode);
            assert_eq!(labels[ix], auth_mode_label(mode));
        }
        assert_eq!(
            labels
                .iter()
                .collect::<std::collections::HashSet<_>>()
                .len(),
            labels.len(),
            "two methods sharing a label would resolve to whichever comes first"
        );
    }

    /// The three proxy fields look independent and are not — one connection
    /// goes through one proxy. The note under the losing field is the only
    /// thing saying so, so it has to name the same winner `map_proxy` picks
    /// when the profile is dialled, and has to stay quiet where there is no
    /// contest.
    #[test]
    fn a_proxy_field_says_when_another_one_outranks_it() {
        crate::ui::i18n::set_locale("en");
        let note = |me: ProxyPick, filled: bool, (c, s, h): (bool, bool, bool)| {
            me.overridden_by(filled, ProxyPick::of(c, s, h))
        };

        assert_eq!(ProxyPick::of(true, true, true), Some(ProxyPick::Command));
        assert_eq!(ProxyPick::of(false, true, true), Some(ProxyPick::Socks));
        assert_eq!(ProxyPick::of(false, false, true), Some(ProxyPick::Http));
        assert_eq!(ProxyPick::of(false, false, false), None);

        assert!(
            note(ProxyPick::Socks, true, (true, true, false)).is_some(),
            "a proxy command outranks a SOCKS address"
        );
        assert!(
            note(ProxyPick::Http, true, (false, true, true)).is_some(),
            "so does a SOCKS address over an HTTP one"
        );
        assert!(
            note(ProxyPick::Command, true, (true, true, true)).is_none(),
            "the field being used has nothing to apologise for"
        );
        assert!(
            note(ProxyPick::Http, false, (true, false, false)).is_none(),
            "an empty field is not being overridden, it is just empty"
        );
        assert!(note(ProxyPick::Socks, true, (false, true, false)).is_none());
    }

    /// The row keeps its side-by-side shape while both halves fit, and stacks
    /// once they do not. The SSH page reaches that point first — it spends its
    /// host list before the row gets anything.
    #[test]
    fn a_row_stacks_once_its_label_and_control_stop_fitting() {
        use SettingsSection::*;
        assert!(settings_row_width(Terminal, false, 1440., 1.) >= STACK_ROW_BELOW);
        assert!(settings_row_width(Terminal, false, 900., 1.) >= STACK_ROW_BELOW);
        // At the narrowest window that turns up the page is 420 wide, which is
        // under the width where a label and a control still share a line.
        assert!(settings_row_width(Terminal, false, NARROWEST_WINDOW, 1.) < STACK_ROW_BELOW);
        // Capped at the reading column, so a wider window never widens the row.
        assert_eq!(
            settings_row_width(Terminal, false, 4000., 1.),
            READING_COLUMN
        );
        // SSH crosses over while the window is still wide — it is the page that
        // spends a host list before its rows get anything.
        assert!(settings_row_width(Ssh, false, 1440., 1.) >= STACK_ROW_BELOW);
        assert!(settings_row_width(Ssh, false, 900., 1.) < STACK_ROW_BELOW);
        // And never goes negative on a window narrower than its own chrome.
        assert_eq!(settings_row_width(Ssh, false, 100., 1.), 0.);
    }

    /// Every list gives width back before the page does, and no combination of
    /// page and panel leaves the page below the width it is derived to keep.
    /// 641pt is the window the report came from — under the declared 720 —- so
    /// that is the case that has to hold, not the one the manifest promises.
    #[test]
    fn the_page_keeps_a_readable_width_at_every_window_that_turns_up() {
        use SettingsSection::*;
        for section in SettingsSection::ALL {
            for panel_open in [false, true] {
                for viewport in [NARROWEST_WINDOW, 641., 720., 900., 1100., 1440., 2560.] {
                    let cols = settings_columns(section, panel_open, viewport);
                    let pad = match section {
                        Ssh => SSH_DETAIL_PAD,
                        _ => PAGE_PAD,
                    };
                    let panel = only_when(!cols.panel_overlays, cols.theme_panel);
                    let page = viewport - cols.nav - cols.ssh_list - panel - pad;
                    assert!(
                        page >= CONTENT_MIN_W,
                        "{viewport}px, {panel_open}: page got {page}, floor is {CONTENT_MIN_W}"
                    );
                    // And the columns add up to the window rather than past it,
                    // which is what keeps the rightmost one on screen.
                    assert!(cols.nav + cols.ssh_list + panel + pad + page <= viewport + 1.);
                    assert!(cols.nav >= NAV_W_MIN && cols.nav <= NAV_W);
                }
            }
        }
    }

    /// The three screenshots in the report, by the numbers measured off them.
    /// Every one of them is the same 641pt window.
    #[test]
    fn the_reported_window_lays_out_without_running_off_the_screen() {
        use SettingsSection::*;
        const REPORTED: f32 = 641.;

        // Shot 1 — SSH. Nav 220 and host list 280 left the detail 141pt and its
        // empty state painted ~270 past the window edge. Both lists now stand
        // on their floors and the detail keeps the rest.
        let ssh = settings_columns(Ssh, false, REPORTED);
        assert_eq!((ssh.nav, ssh.ssh_list), (NAV_W_MIN, SSH_LIST_W_MIN));
        let detail = settings_row_width(Ssh, false, REPORTED, 1.);
        assert!(detail >= CONTENT_MIN_W, "SSH detail got {detail}");

        // Shot 2 — Appearance, panel closed. The opacity row measured a 78pt
        // label beside a 240pt slider; at this width the row has to stack.
        // The page does not reach its preferred `CONTENT_W` here: the nav floor
        // is sized to show a Japanese nav label whole, and at 641 that costs the
        // page the difference. Readable and stacked is the property that matters.
        let page = settings_row_width(Appearance, false, REPORTED, 1.);
        assert_eq!(page, REPORTED - NAV_W_MIN - PAGE_PAD);
        assert!(page >= CONTENT_MIN_W, "the page got {page}");
        assert!(
            page < STACK_ROW_BELOW,
            "the opacity row has to stack at 641"
        );

        // Shot 3 — Appearance with the theme panel. 220 + 300 of chrome left
        // the page ~125pt, one Chinese character per line. The panel now lifts
        // off the row entirely and the page is back to shot 2's width.
        assert!(settings_columns(Appearance, true, REPORTED).panel_overlays);
        assert_eq!(settings_row_width(Appearance, true, REPORTED, 1.), page);
    }

    /// The list that has to give the most is the one the window has the least
    /// room for, and no list is ever asked for more than it has to spare.
    #[test]
    fn the_lists_shrink_together_and_stop_at_their_floors() {
        use SettingsSection::*;
        // Wide enough for everyone: nothing moves.
        let wide = settings_columns(Ssh, false, 1440.);
        assert_eq!((wide.nav, wide.ssh_list), (NAV_W, SSH_LIST_W));
        // The reported window — half of a 1440pt screen, three columns on SSH.
        // Both lists give, neither past its floor, and the detail comes out at
        // its preferred width instead of the 336 it used to be left with.
        let half = settings_columns(Ssh, false, 900.);
        assert!(half.nav < NAV_W && half.ssh_list < SSH_LIST_W);
        assert!(half.nav >= NAV_W_MIN && half.ssh_list >= SSH_LIST_W_MIN);
        assert_eq!(
            settings_row_width(Ssh, false, 900., 1.).round(),
            CONTENT_W,
            "the SSH detail should get its preferred width at 900pt"
        );
        // The narrowest window that turns up: both at the floor, page readable.
        let tiny = settings_columns(Ssh, false, NARROWEST_WINDOW);
        assert_eq!((tiny.nav, tiny.ssh_list), (NAV_W_MIN, SSH_LIST_W_MIN));
        assert_eq!(
            settings_row_width(Ssh, false, NARROWEST_WINDOW, 1.),
            CONTENT_MIN_W
        );
    }

    /// A preset row lights up the bucket the value *is*, and nothing when it
    /// is none of them — the range match it used to do labelled a hand-set
    /// value with a number the config did not hold, and the row carried no
    /// digits anywhere to correct it (#550).
    #[test]
    fn a_preset_row_highlights_only_the_bucket_the_value_actually_is() {
        // The default lands on a bucket, so the common case still reads as a
        // plain radio row.
        let (sel, custom) = preset_choice(
            &SCROLLBACK_BUCKETS,
            Config::default().scrollback_limit,
            group_thousands,
        );
        assert_eq!((sel, custom), (Some(1), None));

        // 50,000 is the value `docs/reference/configuration.mdx` puts in its
        // example config, so this is what following the documentation shows.
        let (sel, custom) = preset_choice(&SCROLLBACK_BUCKETS, 50_000, group_thousands);
        assert_eq!(sel, None, "50,000 is not one of the presets");
        let custom = custom.expect("a value off the presets names itself");
        assert!(
            custom.contains("50,000"),
            "the custom cell has to carry the real value, got {custom:?}"
        );

        // Boundaries: the old range match lit "10,000" for everything from
        // 1,001 up, and "100,000" for everything above that.
        assert_eq!(
            preset_choice(&SCROLLBACK_BUCKETS, 1_001, group_thousands).0,
            None
        );
        assert_eq!(
            preset_choice(&SCROLLBACK_BUCKETS, 100_000, group_thousands).0,
            Some(2)
        );

        // Same rule on the notify row, where 20s used to light up "30s".
        let (sel, custom) = preset_choice(&NOTIFY_THRESHOLD_BUCKETS, 20, |secs| format!("{secs}s"));
        assert_eq!(sel, None);
        assert!(custom.is_some_and(|c| c.contains("20s")));
        assert_eq!(
            preset_choice(&NOTIFY_THRESHOLD_BUCKETS, 60, |secs| format!("{secs}s")).0,
            Some(3),
            "60s is the '1m' cell, not a custom value"
        );
    }

    /// Each preset cell has to name the number clicking it writes, and the
    /// custom cell has to be written the same way as the cells beside it.
    #[test]
    fn preset_row_labels_name_the_value_they_write() {
        assert_eq!(SCROLLBACK_BUCKETS.len(), SCROLLBACK_LABELS.len());
        for (bucket, label) in SCROLLBACK_BUCKETS.iter().zip(SCROLLBACK_LABELS) {
            assert_eq!(group_thousands(*bucket), label);
        }
        assert_eq!(
            NOTIFY_THRESHOLD_BUCKETS.len(),
            NOTIFY_THRESHOLD_LABELS.len()
        );
        // Grouping starts at four digits and repeats every three.
        assert_eq!(group_thousands(0), "0");
        assert_eq!(group_thousands(999), "999");
        assert_eq!(group_thousands(1_000_000), "1,000,000");
    }

    /// The thresholds are widths a *label* needs, and a reader who scaled the
    /// interface up scaled every label with it while the slider beside it kept
    /// the px width it was built at. A window that reads fine at the default
    /// font is a starved label column at the largest one.
    #[test]
    fn the_stacking_width_follows_the_interface_font() {
        use crate::core::config::UI_FONT_SIZE_MAX;
        use SettingsSection::*;
        let large = UI_FONT_SIZE_MAX / UI_FONT_SIZE_DEFAULT;
        // Side by side at the default font...
        assert!(settings_row_width(Appearance, false, 900., 1.) >= STACK_ROW_BELOW);
        // ...and stacked at the largest, where the same row holds half as much.
        assert!(
            settings_row_width(Appearance, false, 900., large) < STACK_ROW_BELOW * large,
            "a 900pt window at the largest interface font has to stack"
        );
        // The reading column grows with the font, so a wide window does not.
        assert!(settings_row_width(Appearance, false, 1600., large) >= STACK_ROW_BELOW * large);
    }

    /// The theme panel took its 300px from the page and from nothing else, so
    /// a half-width window with it open rendered a description one character
    /// wide. It now shrinks with everything else, and stops being a column at
    /// all once even that is not enough.
    #[test]
    fn the_theme_panel_yields_before_the_page_does() {
        use SettingsSection::*;
        assert!(settings_row_width(Appearance, true, 900., 1.) < STACK_ROW_BELOW);
        assert!(
            settings_row_width(Appearance, true, 900., 1.)
                < settings_row_width(Appearance, false, 900., 1.)
        );
        // Beside the page while both fit — which, with the panel and the nav
        // both allowed down to their floors, still holds at 720.
        assert!(!settings_columns(Appearance, true, 900.).panel_overlays);
        assert!(!settings_columns(Appearance, true, 720.).panel_overlays);
        // ...and over it once they do not, at which point the page is back to
        // the width it has with the panel closed.
        assert!(settings_columns(Appearance, true, 641.).panel_overlays);
        assert_eq!(
            settings_row_width(Appearance, true, 641., 1.),
            settings_row_width(Appearance, false, 641., 1.)
        );
        // The panel is the only chrome that can leave, so it has to leave in
        // time: at 641 there is no arrangement in which it and a readable page
        // both fit in a row.
        assert!(
            NARROWEST_WINDOW - NAV_W_MIN - THEME_PANEL_W_MIN - PAGE_PAD < CONTENT_MIN_W,
            "the overlay threshold has to fire at the narrowest window"
        );
        // Wide enough and the cap is the reading column either way.
        assert_eq!(
            settings_row_width(Appearance, true, 1600., 1.),
            READING_COLUMN
        );
    }

    #[test]
    fn a_row_is_marked_by_its_label_or_by_the_keywords_behind_it() {
        // Straight label hit.
        assert!(row_matches_query(
            SettingsSection::Appearance,
            "Blur",
            "blur"
        ));
        // Keyword hit: the label says "Theme" and nothing more, but the index
        // says that row answers "palette".
        assert!(row_matches_query(
            SettingsSection::Appearance,
            t(L10nKey::SettingsThemeIntroTitle),
            "palette"
        ));
        // A row on some other page is not a hit just because the query matches
        // an entry elsewhere.
        assert!(!row_matches_query(
            SettingsSection::Terminal,
            "Blur",
            "palette"
        ));
        // An empty query marks nothing at all, so no page ever renders greyed
        // out just because the field is focused.
        assert!(!row_matches_query(SettingsSection::Appearance, "Blur", ""));
    }

    #[test]
    fn a_query_that_matches_nothing_is_distinguishable_from_one_that_does() {
        assert_eq!(total_match_count("zzqqxx"), 0);
        assert!(total_match_count("blur") > 0);
        assert!(total_match_count("palette") > 0);
    }

    #[test]
    fn settings_row_identity_depends_only_on_its_stable_label() {
        assert_eq!(
            settings_row_id("Claude Code", "Installing…"),
            settings_row_id("Claude Code", "Installed in C:\\tools")
        );
        assert_ne!(
            settings_row_id("Claude Code", "Installed"),
            settings_row_id("Codex", "Installed")
        );
    }

    #[test]
    fn synced_windows_backdrop_is_only_a_local_override_on_windows() {
        let mut config = Config::default();
        config.window_backdrop = WindowBackdrop::MicaAlt;

        assert!(window_overrides_active(&config, true));
        assert!(!window_overrides_active(&config, false));
    }

    #[test]
    fn opacity_and_blur_are_local_overrides_on_every_platform() {
        let mut opacity = Config::default();
        opacity.window_opacity = Some(0.8);
        opacity.window_backdrop = WindowBackdrop::Mica;
        let mut blur = Config::default();
        blur.window_blur = Some(true);
        blur.window_backdrop = WindowBackdrop::Acrylic;

        assert!(window_overrides_active(&opacity, false));
        assert!(window_overrides_active(&blur, false));
    }

    #[test]
    fn every_section_has_search_entries() {
        for section in SettingsSection::ALL {
            let n = settings_search_entries()
                .iter()
                .filter(|e| e.section == section)
                .count();
            assert!(
                n > 0,
                "section {:?} has no search entries",
                section.profile_label()
            );
        }
    }

    #[test]
    fn best_matching_section_can_reach_every_section() {
        for section in SettingsSection::ALL {
            let entry = settings_search_entries()
                .iter()
                .find(|e| e.section == section)
                .expect("checked by every_section_has_search_entries");
            let query = t(entry.title).to_lowercase();
            let landed = best_matching_section(&query);
            assert!(
                landed.is_some(),
                "query {query:?} matched nothing at all (section {:?})",
                section.profile_label()
            );
        }
    }

    #[test]
    fn previously_unsearchable_settings_are_findable() {
        use SettingsSection::*;
        let mut cases: Vec<(&str, SettingsSection)> = vec![
            ("opacity", Appearance),
            ("blur", Appearance),
            ("completion", Terminal),
            ("ctrl-r", Terminal),
            ("grouping", WindowTabs),
            ("threshold", General),
            ("report mouse", KeyboardMouse),
            ("nushell", Terminal),
            ("open files with", Terminal),
            ("bell", Terminal),
            ("known_hosts", Ssh),
            ("claude", Agents),
            ("symlink", Agents),
            // Rows the index had no entry for at all, so the query counted
            // nothing, no badge appeared and no row lit up: the whole Updates
            // group on General, and Smooth scrolling between two rows that were
            // both findable.
            ("smooth", Terminal),
            ("nightly", General),
            ("channel", General),
            ("metered", General),
            ("automatic", General),
            // A headline feature the index had never heard of: "background
            // image" matched nothing, and typing it walked the page to About
            // because "background" alone hits Download updates in the
            // background.
            ("background image", Appearance),
            ("wallpaper", Appearance),
            ("image opacity", Appearance),
        ];
        #[cfg(target_os = "windows")]
        cases.extend([
            ("material", Appearance),
            ("mica", Appearance),
            ("acrylic", Appearance),
        ]);
        for (query, expected) in cases {
            assert_eq!(
                best_matching_section(query).map(|s| s.profile_label()),
                Some(expected.profile_label()),
                "query {query:?} should land on {:?}",
                expected.profile_label()
            );
        }
    }

    /// The `tty7` CLI exists so scripts and coding agents can drive tty7, so it
    /// lives with the other agent integrations rather than under About.
    #[test]
    fn command_line_tool_is_searchable_under_agents() {
        let entry = settings_search_entries()
            .iter()
            .find(|entry| entry.title == L10nKey::SettingsInstallCliOnPath)
            .expect("the CLI setting should be searchable");

        assert_eq!(entry.section.profile_label(), "settings:agents");
    }

    #[test]
    fn index_titles_match_rendered_row_labels() {
        for title in [
            "Starting directory",
            "Restore last layout",
            "Terminal bell",
            "Report mouse to apps",
            "Open files with",
            "Sidebar grouping",
            "Tab completion",
            "Command history search",
            "Dim inactive panes",
            "Option (⌥) acts as Meta",
            "Install the tty7 command on PATH",
        ] {
            if title == "Option (⌥) acts as Meta" && !cfg!(target_os = "macos") {
                continue;
            }
            assert!(
                settings_search_entries()
                    .iter()
                    .any(|e| t(e.title) == title),
                "no index entry titled {title:?}"
            );
        }
    }

    #[test]
    fn agent_rows_are_in_the_search_index() {
        for agent in crate::core::agent_hooks::HookAgent::ALL {
            assert!(
                settings_search_entries()
                    .iter()
                    .any(|e| e.section == SettingsSection::Agents
                        && t(e.title) == agent.display_name()),
                "no Agents index entry titled {:?}",
                agent.display_name()
            );
        }
    }

    #[test]
    fn humanize_action_splits_on_capitals() {
        assert_eq!(humanize_action("NewTab"), "New Tab");
        assert_eq!(
            humanize_action("ToggleMaximizePane"),
            "Toggle Maximize Pane"
        );
        assert_eq!(humanize_action("Quit"), "Quit");
    }

    #[test]
    fn the_host_filter_matches_name_address_and_port() {
        let mut p = SshProfile::new("prod-web");
        p.host = "10.0.1.21".to_string();
        p.user = "deploy".to_string();
        p.port = 2222;

        assert!(ssh_row_matches(&p, ""), "an empty query keeps everything");
        assert!(ssh_row_matches(&p, "prod"));
        assert!(ssh_row_matches(&p, "10.0.1"));
        assert!(ssh_row_matches(&p, "deploy"));
        assert!(ssh_row_matches(&p, "2222"));
        assert!(!ssh_row_matches(&p, "staging"));
    }

    #[test]
    fn the_host_filter_ignores_case() {
        let mut p = SshProfile::new("Prod-Web");
        p.host = "Example.COM".to_string();
        assert!(ssh_row_matches(&p, "prod"));
        assert!(ssh_row_matches(&p, "example.com"));
    }

    #[test]
    fn group_buckets_sort_imported_first_and_ungrouped_last() {
        let mut keys = vec!["", "Work", crate::core::ssh_config::IMPORTED_GROUP];
        keys.sort_by_key(|k| ssh_group_rank(k));
        assert_eq!(
            keys,
            vec![crate::core::ssh_config::IMPORTED_GROUP, "Work", ""]
        );
    }

    #[test]
    fn group_labels_name_the_file_and_the_app() {
        assert_eq!(
            ssh_group_label(crate::core::ssh_config::IMPORTED_GROUP),
            "~/.ssh/config"
        );
        assert_eq!(ssh_group_label(""), "In tty7");
        assert_eq!(ssh_group_label("Work"), "Work");
    }

    #[test]
    fn group_key_falls_back_to_the_ungrouped_bucket() {
        let mut p = SshProfile::new("a");
        assert_eq!(ssh_group_key(&p), "");
        p.group = Some("Work".to_string());
        assert_eq!(ssh_group_key(&p), "Work");
    }

    #[test]
    fn parse_host_port_handles_blank_and_ports() {
        assert!(
            parse_host_port_checked("  ", DEFAULT_SOCKS_PORT)
                .unwrap()
                .is_none()
        );
        let hp = parse_host_port_checked("example.com:2222", DEFAULT_SOCKS_PORT)
            .unwrap()
            .unwrap();
        assert_eq!(hp.host, "example.com");
        assert_eq!(hp.port, 2222);
        // Used to be port 0, which no proxy answers on.
        assert_eq!(
            parse_host_port_checked("host", DEFAULT_SOCKS_PORT)
                .unwrap()
                .unwrap()
                .port,
            DEFAULT_SOCKS_PORT
        );
    }

    /// A form with the one field that is genuinely required, and nothing else.
    fn draft_with_host() -> SshFormDraft {
        SshFormDraft {
            host: "example.com".to_string(),
            ..Default::default()
        }
    }

    #[test]
    fn a_profile_with_no_host_is_not_saveable() {
        let (_, errors) = validate_ssh_draft(SshFormDraft::default(), &[]);
        assert_eq!(errors.host, Some(SshFieldError::HostMissing));
        assert!(!errors.is_empty());
    }

    #[test]
    fn spaces_are_not_a_host() {
        let draft = SshFormDraft {
            host: "   ".to_string(),
            ..Default::default()
        };
        let (profile, errors) = validate_ssh_draft(draft, &[]);
        assert_eq!(errors.host, Some(SshFieldError::HostMissing));
        assert_eq!(profile.host, "");
    }

    #[test]
    fn a_name_is_not_required() {
        // Every host imported from ~/.ssh/config arrives without one, and the
        // list falls back to the address.
        let (profile, errors) = validate_ssh_draft(draft_with_host(), &[]);
        assert_eq!(profile.name, "");
        assert!(errors.is_empty());
    }

    #[test]
    fn a_blank_port_still_means_22() {
        let (profile, errors) = validate_ssh_draft(draft_with_host(), &[]);
        assert_eq!(profile.port, 22);
        assert_eq!(errors.port, None);
    }

    #[test]
    fn a_port_that_is_not_a_port_is_refused() {
        // "0" parses as a u16 and used to be saved as written; the other two
        // failed to parse and were silently rewritten to 22.
        for text in ["0", "abc", "70000", "-1", "22 "] {
            let draft = SshFormDraft {
                port: text.to_string(),
                ..draft_with_host()
            };
            let (profile, errors) = validate_ssh_draft(draft, &[]);
            match text {
                "22 " => {
                    assert_eq!(errors.port, None, "{text:?} is a port with spare space");
                    assert_eq!(profile.port, 22);
                }
                _ => {
                    assert_eq!(errors.port, Some(SshFieldError::PortRange), "{text:?}");
                    assert!(!errors.is_empty());
                }
            }
        }
    }

    #[test]
    fn a_jump_host_that_exists_is_kept_by_id() {
        let bastion = SshProfile::new("bastion");
        let draft = SshFormDraft {
            jump: "bastion".to_string(),
            ..draft_with_host()
        };
        let (profile, errors) = validate_ssh_draft(draft, &[bastion.clone()]);
        assert_eq!(profile.jump_host, Some(bastion.id));
        assert!(errors.is_empty());
    }

    #[test]
    fn a_mistyped_jump_host_says_which_name_it_could_not_find() {
        let draft = SshFormDraft {
            jump: "bastian".to_string(),
            ..draft_with_host()
        };
        let (profile, errors) = validate_ssh_draft(draft, &[SshProfile::new("bastion")]);
        assert_eq!(
            errors.jump,
            Some(SshFieldError::JumpUnknown("bastian".to_string()))
        );
        assert_eq!(
            profile.jump_host, None,
            "a typo never saves as a direct connection"
        );
    }

    #[test]
    fn a_host_cannot_jump_through_itself() {
        let me = SshProfile::new("prod");
        let draft = SshFormDraft {
            id: me.id,
            jump: "prod".to_string(),
            ..draft_with_host()
        };
        let (profile, errors) = validate_ssh_draft(draft, &[me]);
        assert_eq!(errors.jump, Some(SshFieldError::JumpIsSelf));
        assert_eq!(profile.jump_host, None);
    }

    #[test]
    fn a_bare_proxy_host_takes_the_scheme_default_port() {
        let draft = SshFormDraft {
            socks: "socks.example.com".to_string(),
            http: "http.example.com".to_string(),
            ..draft_with_host()
        };
        let (profile, errors) = validate_ssh_draft(draft, &[]);
        assert_eq!(
            profile.socks_proxy,
            Some(HostPort::new("socks.example.com", 1080))
        );
        assert_eq!(
            profile.http_proxy,
            Some(HostPort::new("http.example.com", 8080))
        );
        assert!(errors.is_empty());
    }

    #[test]
    fn a_proxy_address_with_a_colon_and_no_port_is_refused() {
        for text in ["proxy.example.com:", "proxy.example.com:abc", "proxy:0"] {
            let draft = SshFormDraft {
                socks: text.to_string(),
                ..draft_with_host()
            };
            let (profile, errors) = validate_ssh_draft(draft, &[]);
            assert_eq!(
                errors.socks,
                Some(SshFieldError::ProxyPortRange),
                "{text:?}"
            );
            assert_eq!(profile.socks_proxy, None, "{text:?}");
        }
    }

    #[test]
    fn a_form_that_cannot_be_saved_still_reports_what_it_would_save() {
        // The Escape prompt asks whether the form differs from the config, so
        // an invalid form has to hand back a profile to compare — otherwise a
        // half-typed new host looks identical to the nothing on disk and
        // Escape throws it away without asking.
        let draft = SshFormDraft {
            name: "half typed".to_string(),
            ..Default::default()
        };
        let (profile, errors) = validate_ssh_draft(draft, &[]);
        assert!(!errors.is_empty());
        assert_eq!(profile.name, "half typed");
    }

    fn profile_at(name: &str, user: &str, host: &str, port: u16) -> SshProfile {
        let mut p = SshProfile::new(name);
        p.user = user.to_string();
        p.host = host.to_string();
        p.port = port;
        p
    }

    /// The saved password belongs to `user@host:port`, so what counts as
    /// "shared" is exactly that triple — a different name or a jump host in
    /// front of it changes nothing, and a different port makes it a different
    /// secret entirely.
    #[test]
    fn the_same_endpoint_under_two_names_counts_as_shared() {
        let direct = profile_at("direct", "ana", "build.example.com", 22);
        let mut via_jump = profile_at("via bastion", "ana", "build.example.com", 22);
        via_jump.jump_host = Some(direct.id);
        let staging = profile_at("staging", "ana", "build.example.com", 2222);
        let other_user = profile_at("root", "root", "build.example.com", 22);

        let mut cfg = Config::default();
        let (direct_id, jump_id, staging_id) = (direct.id, via_jump.id, staging.id);
        cfg.ssh_profiles = vec![direct, via_jump, staging, other_user];

        // The two that reach the same endpoint see each other, and neither
        // counts itself.
        assert_eq!(profiles_sharing_endpoint(&cfg, direct_id), 1);
        assert_eq!(profiles_sharing_endpoint(&cfg, jump_id), 1);
        // A port apart is a keychain entry apart, so this one is alone even
        // though the user and host match two of the others.
        assert_eq!(profiles_sharing_endpoint(&cfg, staging_id), 0);
        // A profile that is no longer on the list shares with nobody.
        assert_eq!(profiles_sharing_endpoint(&cfg, Uuid::new_v4()), 0);
    }
}

#[cfg(test)]
mod gpui_tests {
    use super::SettingsSection;
    use crate::core::config::{Config, MouseZoomModifier};
    use crate::core::session::Session;
    use crate::ui::app::Tty7App;
    use gpui::{AppContext as _, Entity, TestAppContext, VisualTestContext, px, size};

    fn harness(cx: &mut TestAppContext) -> (Entity<Tty7App>, VisualTestContext) {
        crate::core::config::pin_test_config_dir();
        cx.executor().allow_parking();
        cx.update(|cx| {
            gpui_component::init(cx);
            cx.set_global(Config::default());
            crate::ui::keymap::init(cx);
        });
        let window = cx.add_window(|window, cx| {
            let app =
                cx.new(|cx| Tty7App::with_session(None, Some(Session::default()), window, cx));
            gpui_component::Root::new(app, window, cx)
        });
        cx.background_executor.run_until_parked();
        let app = window
            .update(cx, |root, _, _| {
                root.view()
                    .clone()
                    .downcast::<Tty7App>()
                    .unwrap_or_else(|_| panic!("window root wraps a Tty7App"))
            })
            .unwrap();
        let vcx = VisualTestContext::from_window(window.into(), cx);
        (app, vcx)
    }

    /// The password is the one field on the host editor that never reaches the
    /// profile — it goes to the system keychain — so the dirty check that
    /// compares profiles is blind to it. Without the secret folded in, Save
    /// stays greyed out over a password the user has just typed, and the only
    /// way to store one is to connect and wait to be asked.
    #[gpui::test]
    fn a_typed_password_is_something_the_form_has_to_save(cx: &mut TestAppContext) {
        crate::core::config::pin_test_config_dir();
        let (app, mut vcx) = harness(cx);
        app.update_in(&mut vcx, |app, window, cx| {
            app.open_settings_section(SettingsSection::Ssh, window, cx);
            // A saved host that names no address, so opening its editor asks
            // the keychain nothing and starts out with nothing to save.
            let profile = crate::core::ssh_profile::SshProfile::new("blank");
            app.update_config(cx, |cfg| cfg.ssh_profiles.push(profile.clone()));
            app.ssh_form_load(&profile, window, cx);
        });
        vcx.simulate_resize(size(px(1100.), px(800.)));
        vcx.run_until_parked();

        assert!(
            !vcx.update(|_, cx| app.read(cx).ssh_form_dirty(cx)),
            "a form nobody has typed in has nothing to save"
        );

        let password = vcx.update(|_, cx| {
            app.read(cx)
                .active_settings()
                .and_then(|s| s.ssh_form.as_ref())
                .map(|f| f.password.clone())
                .expect("the host editor is open")
        });
        app.update_in(&mut vcx, |_app, window, cx| {
            password.update(cx, |input, cx| input.set_value("hunter2", window, cx));
        });
        vcx.run_until_parked();

        assert!(
            vcx.update(|_, cx| app.read(cx).ssh_form_dirty(cx)),
            "a password typed into the form is an unsaved change"
        );
    }

    #[gpui::test]
    fn enter_on_a_shortcut_search_result_opens_its_local_filter(cx: &mut TestAppContext) {
        let (app, mut vcx) = harness(cx);
        app.update_in(&mut vcx, |app, window, cx| {
            app.open_settings_section(SettingsSection::General, window, cx);
            let input = app.active_settings().unwrap().search.clone();
            input.update(cx, |input, cx| input.set_value("SplitRight", window, cx));
            app.autoselect_settings_search(cx);
        });
        vcx.run_until_parked();
        vcx.simulate_keystrokes("enter");
        vcx.run_until_parked();
        app.update_in(&mut vcx, |app, _, cx| {
            let state = app.active_settings().unwrap();
            assert!(state.section == SettingsSection::Keybindings);
            assert!(!state.search_active);
            assert_eq!(
                state.shortcut_search.read(cx).value().as_str(),
                "SplitRight"
            );
        });
    }

    #[gpui::test]
    fn external_ssh_navigation_resolves_the_current_form_once(cx: &mut TestAppContext) {
        crate::core::config::pin_test_config_dir();
        let (app, mut vcx) = harness(cx);
        let mut original = crate::core::ssh_profile::SshProfile::new("original");
        original.host = "original.example.com".into();
        let id = original.id;
        app.update_in(&mut vcx, |app, window, cx| {
            cx.global_mut::<Config>()
                .ssh_profiles
                .push(original.clone());
            app.open_ssh_profile_in_settings(id, window, cx);
            let input = app
                .active_settings()
                .unwrap()
                .ssh_form
                .as_ref()
                .unwrap()
                .host
                .clone();
            input.update(cx, |input, cx| {
                input.set_value("edited.example.com", window, cx)
            });
            app.open_ssh_profile_new_from_target("new.example.com".into(), window, cx);
        });
        vcx.run_until_parked();
        assert!(vcx.has_pending_prompt());
        vcx.simulate_prompt_answer(crate::ui::i18n::t(
            crate::ui::i18n::L10nKey::SettingsKeepEditing,
        ));
        vcx.run_until_parked();
        app.update_in(&mut vcx, |app, window, cx| {
            assert_eq!(
                app.active_settings()
                    .unwrap()
                    .ssh_form
                    .as_ref()
                    .unwrap()
                    .editing,
                id
            );
            assert!(app.ssh_form_dirty(cx));
            app.open_ssh_profile_new_from_target("new.example.com".into(), window, cx);
        });
        vcx.run_until_parked();
        assert!(vcx.has_pending_prompt());
        vcx.simulate_prompt_answer(crate::ui::i18n::t(crate::ui::i18n::L10nKey::EditorDiscard));
        vcx.run_until_parked();
        assert!(!vcx.has_pending_prompt());
        app.update_in(&mut vcx, |app, _, cx| {
            let form = app.active_settings().unwrap().ssh_form.as_ref().unwrap();
            assert_ne!(form.editing, id);
            assert_eq!(form.host.read(cx).value().as_str(), "new.example.com");
        });
        app.update_in(&mut vcx, |app, window, cx| {
            app.cancel_ssh_form(window, cx);
            app.open_ssh_profile_in_settings(id, window, cx);
            let input = app
                .active_settings()
                .unwrap()
                .ssh_form
                .as_ref()
                .unwrap()
                .host
                .clone();
            input.update(cx, |s, cx| s.set_value("saved.example.com", window, cx));
            app.open_ssh_profile_in_settings(id, window, cx);
        });
        vcx.run_until_parked();
        vcx.simulate_prompt_answer(crate::ui::i18n::t(
            crate::ui::i18n::L10nKey::SettingsSaveChanges,
        ));
        vcx.run_until_parked();
        assert!(!vcx.has_pending_prompt());
        app.update_in(&mut vcx, |app, _, cx| {
            assert!(!app.ssh_form_dirty(cx));
            assert_eq!(
                app.active_settings()
                    .unwrap()
                    .ssh_form
                    .as_ref()
                    .unwrap()
                    .host
                    .read(cx)
                    .value()
                    .as_str(),
                "saved.example.com"
            );
        });
    }

    #[gpui::test]
    fn failed_settings_writes_remain_visible_until_retry_succeeds(cx: &mut TestAppContext) {
        crate::core::config::pin_test_config_dir();
        let (app, mut vcx) = harness(cx);
        app.update_in(&mut vcx, |app, window, cx| {
            app.open_settings_section(SettingsSection::General, window, cx);
            cx.global_mut::<Config>().quarantined = true;
            app.set_notify_threshold(73, cx);
            assert!(app.active_settings().unwrap().save_error.is_some());
            cx.global_mut::<Config>().quarantined = false;
            app.persist_settings_config(cx);
            assert!(app.active_settings().unwrap().save_error.is_none());
            assert_eq!(cx.global::<Config>().notify_threshold_secs, 73);
        });
        vcx.run_until_parked();
    }

    #[gpui::test]
    fn theme_edits_preview_without_writing_and_cancel_restores_original(cx: &mut TestAppContext) {
        crate::core::config::pin_test_config_dir();
        let dir = tempfile::tempdir().unwrap();
        let path = dir.path().join("draft.yaml");
        let (app, mut vcx) = harness(cx);
        app.update_in(&mut vcx, |app, window, cx| {
            let mut theme = crate::ui::presets::all(cx).remove(0);
            theme.id = "settings-test-theme".into();
            theme.path = Some(path.clone());
            crate::ui::presets::write_theme_file(&theme).unwrap();
            let original_file = std::fs::read(&path).unwrap();
            let original_color = theme.accent;
            let mut themes = crate::ui::presets::all(cx);
            themes.push(theme);
            cx.set_global(crate::ui::presets::Themes(themes));
            cx.global_mut::<Config>().theme_follow_system = false;
            cx.global_mut::<Config>().theme_preset = "settings-test-theme".into();
            app.open_settings_section(SettingsSection::Appearance, window, cx);
            app.edit_active_theme(
                crate::ui::app::ThemeEdit::Accent,
                gpui::rgb(0x123456).into(),
                window,
                cx,
            );
            assert!(app.theme_draft_dirty());
            assert_eq!(std::fs::read(&path).unwrap(), original_file);
            app.cancel_theme_draft(window, cx);
            assert!(!app.theme_draft_dirty());
            assert_eq!(
                crate::ui::presets::by_id(cx, "settings-test-theme").accent,
                original_color
            );
            app.edit_active_theme(
                crate::ui::app::ThemeEdit::Accent,
                gpui::rgb(0x654321).into(),
                window,
                cx,
            );
            assert!(app.save_theme_draft(window, cx));
            assert_ne!(std::fs::read(&path).unwrap(), original_file);
            assert!(!app.theme_draft_dirty());
            app.edit_active_theme(
                crate::ui::app::ThemeEdit::Accent,
                gpui::rgb(0x102030).into(),
                window,
                cx,
            );
            app.active_settings_mut()
                .unwrap()
                .theme_draft
                .as_mut()
                .unwrap()
                .1
                .path = Some(dir.path().to_path_buf());
            assert!(!app.save_theme_draft(window, cx));
            assert!(app.theme_draft_dirty());
            assert!(app.active_settings().unwrap().theme_draft_error.is_some());
        });
    }

    #[gpui::test]
    fn search_reuses_rows_and_reset_changes_only_the_selected_setting(cx: &mut TestAppContext) {
        crate::core::config::pin_test_config_dir();
        let (app, mut vcx) = harness(cx);
        app.update_in(&mut vcx, |app, window, cx| {
            app.open_settings_section(SettingsSection::General, window, cx);
            app.set_notify_threshold(71, cx);
            app.set_copy_on_select(!Config::default().copy_on_select, cx);
            let search = app.active_settings().unwrap().search.clone();
            search.update(cx, |s, cx| s.set_value("notify_threshold_secs", window, cx));
            app.autoselect_settings_search(cx);
        });
        vcx.simulate_resize(size(px(720.), px(560.)));
        vcx.run_until_parked();
        app.update_in(&mut vcx, |app, window, cx| {
            assert!(app.active_settings().unwrap().search_active);
            assert!(
                app.active_settings()
                    .unwrap()
                    .search_rows
                    .borrow()
                    .is_none()
            );
            app.reset_settings_value(
                crate::ui::i18n::L10nKey::SettingsNotifyThreshold,
                window,
                cx,
            );
            assert_eq!(
                cx.global::<Config>().notify_threshold_secs,
                Config::default().notify_threshold_secs
            );
            assert_eq!(
                cx.global::<Config>().copy_on_select,
                !Config::default().copy_on_select
            );
        });
        vcx.run_until_parked();
    }

    #[gpui::test]
    fn every_category_and_full_search_can_layout_at_minimum_width(cx: &mut TestAppContext) {
        let (app, mut vcx) = harness(cx);
        for section in SettingsSection::ALL {
            app.update_in(&mut vcx, |app, window, cx| {
                app.open_settings_section(section, window, cx)
            });
            vcx.simulate_resize(size(px(720.), px(560.)));
            vcx.run_until_parked();
        }
        app.update_in(&mut vcx, |app, _, cx| {
            app.active_settings_mut().unwrap().modified_only = true;
            app.autoselect_settings_search(cx);
        });
        vcx.run_until_parked();
    }

    #[gpui::test]
    fn clearing_search_preserves_the_category_and_target_navigation_clears_search(
        cx: &mut TestAppContext,
    ) {
        let (app, mut vcx) = harness(cx);
        app.update_in(&mut vcx, |app, window, cx| {
            app.open_settings_section(SettingsSection::WindowTabs, window, cx);
            let search = app.active_settings().unwrap().search.clone();
            search.update(cx, |s, cx| s.set_value("mouse", window, cx));
            app.autoselect_settings_search(cx);
            assert!(app.active_settings().unwrap().section == SettingsSection::WindowTabs);
            search.update(cx, |s, cx| s.set_value("", window, cx));
            app.autoselect_settings_search(cx);
            assert!(!app.active_settings().unwrap().search_active);
            app.navigate_settings(
                SettingsSection::KeyboardMouse,
                Some(crate::ui::i18n::L10nKey::SettingsMouseZoom),
                window,
                cx,
            );
            assert!(app.active_settings().unwrap().section == SettingsSection::KeyboardMouse);
        });
        vcx.run_until_parked();
    }

    #[gpui::test]
    fn appearance_section_lays_out_with_its_rounded_controls(cx: &mut TestAppContext) {
        let (app, mut vcx) = harness(cx);
        app.update_in(&mut vcx, |app, window, cx| {
            app.open_settings_section(SettingsSection::Appearance, window, cx);
        });

        vcx.simulate_resize(size(px(1100.), px(800.)));
        vcx.run_until_parked();

        app.update_in(&mut vcx, |app, _, cx| {
            if let Some(s) = app.active_settings_mut() {
                s.theme_panel_open = true;
            }
            cx.notify();
        });
        vcx.simulate_resize(size(px(720.), px(560.)));
        vcx.run_until_parked();

        let section = vcx.update(|_, cx| app.read(cx).active_settings().map(|s| s.section));
        assert!(
            matches!(section, Some(SettingsSection::Appearance)),
            "the panel should still be on Appearance after two paint passes",
        );
    }

    /// #668: the Terminal page carries the control that moves the zoom off the
    /// platform modifier, so the page has to paint with it, and the pick has to
    /// reach the config the wheel reads.
    #[gpui::test]
    fn the_terminal_page_paints_the_zoom_modifier_row(cx: &mut TestAppContext) {
        crate::core::config::pin_test_config_dir();
        let (app, mut vcx) = harness(cx);
        app.update_in(&mut vcx, |app, window, cx| {
            app.open_settings_section(SettingsSection::Terminal, window, cx);
        });
        vcx.simulate_resize(size(px(1100.), px(800.)));
        vcx.run_until_parked();

        let modifier = vcx.update(|_, cx| cx.global::<Config>().mouse_zoom_modifier);
        assert_eq!(
            modifier,
            MouseZoomModifier::Platform,
            "the wheel still zooms out of the box"
        );

        app.update_in(&mut vcx, |app, _, cx| {
            app.set_mouse_zoom_modifier(MouseZoomModifier::None, cx)
        });
        vcx.run_until_parked();
        let modifier = vcx.update(|_, cx| cx.global::<Config>().mouse_zoom_modifier);
        assert_eq!(modifier, MouseZoomModifier::None, "and the pick sticks");
    }

    /// The Input page paints with the prompt editor off — that is the state
    /// where two of its rows are greyed out and their switches disabled — and
    /// the cascade only *disables* those two. It must not rewrite what they
    /// hold, or turning the editor back on would hand the user a completion
    /// menu they had switched off.
    #[gpui::test]
    fn the_prompt_editor_greys_its_dependants_without_rewriting_them(cx: &mut TestAppContext) {
        crate::core::config::pin_test_config_dir();
        let (app, mut vcx) = harness(cx);
        app.update_in(&mut vcx, |app, window, cx| {
            app.open_settings_section(SettingsSection::Terminal, window, cx);
            app.set_history_search(false, cx);
            app.set_prompt_editor(false, cx);
        });
        vcx.simulate_resize(size(px(1100.), px(800.)));
        vcx.run_until_parked();

        let (prompt_editor, tab_completion, history_search) = vcx.update(|_, cx| {
            let cfg = cx.global::<Config>();
            (cfg.prompt_editor, cfg.tab_completion, cfg.history_search)
        });
        assert!(!prompt_editor, "the switch stuck");
        assert!(
            tab_completion,
            "a greyed-out row keeps its value for when the editor comes back"
        );
        assert!(!history_search, "and one the user had turned off stays off");

        app.update_in(&mut vcx, |app, _, cx| app.set_prompt_editor(true, cx));
        vcx.run_until_parked();
        let (prompt_editor, tab_completion) = vcx.update(|_, cx| {
            let cfg = cx.global::<Config>();
            (cfg.prompt_editor, cfg.tab_completion)
        });
        assert!(prompt_editor);
        assert!(tab_completion, "the completion menu comes back with it");
    }
}