The suite re-imports GoogleAPIService after vi.resetModules() in every test;
under the parallel full run the first import exceeded 5 s and failed
(passes alone in about 1 s).
Add accessible names (and aria-pressed for toggles) to the layout switcher,
overflow menu, selection clear, API key reveal/copy and pricing buttons,
reusing existing i18n keys. Replace the hard-coded English 'Menu' sr-only
text on the account cards with common.openMenu.
responseCache was a plain Map keyed by the JSON of the whole request. Entries
were only removed when the same key was read again after expiring, so every
distinct prompt stayed in memory for the lifetime of the gateway. Replace it
with a TtlCache that prunes expired entries on write and caps the size at 100
entries (TTL unchanged at 60 s).
The cloud ORPC routes (addGoogleAccount, listCloudAccounts, refreshAccountQuota,
syncLocalAccount) returned the full account including access and refresh
tokens, but the renderer never reads them. Blank the two secrets in those
responses; token metadata (expiry, project id) is kept so the schema holds.
Also compare the presented gateway API key with timingSafeEqual.
Delete files with no importers (src/actions/{account,database,window}.ts,
drag-window-region, navigation-menu, ui/navigation-menu, ui/toggle,
ui/toggle-group) and the packages only they or nothing used
(@icons-pack/react-simple-icons, @radix-ui/react-icons,
@sentry/integrations, @radix-ui/react-{navigation-menu,toggle,toggle-group}).
Drop the duplicated Playwright block in .gitignore.
Pin the current behavior with characterization tests (claude-request-mapper,
model-mapping, rate-limit-reason; 91 cases, all green before the refactor),
then split buildContents, buildGenerationConfig, transformClaudeRequestIn,
resolveModelRoute, detectRateLimitReason and computeRetryAfterSeconds into
small helpers. Also declare the emitted toolConfig on GeminiRequest.
evandro