diff --git a/README.md b/README.md
index 5a3ef61..e695c0b 100644
--- a/README.md
+++ b/README.md
@@ -40,6 +40,7 @@ Contains plugin sources, installable `.piplug` packages, and the generated marke
 | **pi.log-viewer** | Large log viewer with streaming pagination, live tail, search highlighting and multi-file tabs | Tioit-Wang |
 | **pi.bianqian** | Markdown desktop sticky notes: multi-note, live preview, task lists, highlighter and trash | ZY |
 | **io.github.muzimu217.session-import** | Universal session import + forge: bring sessions in from ZCode, WorkBuddy, Claude Code, Codex, OpenCode and Pi, then distill them into project conventions and reusable practices | muzimu217 |
+| **io.github.liushunqiu.pi-idea-git** | IDEA-style Git tool window: staged/unstaged change lists, hunk-level stage & revert, commit, branch switcher, graph log and stashes | liushunqiu |
 
 ### Demos
 
diff --git a/README.zh-CN.md b/README.zh-CN.md
index 5122230..8879020 100644
--- a/README.zh-CN.md
+++ b/README.zh-CN.md
@@ -39,6 +39,7 @@
 | **pi.log-viewer** | 大日志查看器：流式分页、实时跟随、搜索高亮、多文件页签 | Tioit-Wang |
 | **pi.bianqian** | Markdown 桌面便签：多便签、实时预览、任务列表、荧光笔与回收站 | ZY |
 | **io.github.muzimu217.session-import** | 一体化会话导入与熔炉：导入 ZCode、WorkBuddy、Claude Code、Codex、OpenCode、Pi 的会话，再蒸馏成项目约定与可复用做法 | muzimu217 |
+| **io.github.liushunqiu.pi-idea-git** | IDEA 风格 Git 工具窗口：暂存/未暂存分组、按代码块暂存与还原、提交、分支切换、图形化日志与储藏 | liushunqiu |
 
 ### 示例插件（学习参考）
 
diff --git a/catalog.json b/catalog.json
index 1ff631e..149759e 100644
--- a/catalog.json
+++ b/catalog.json
@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "providerId": "official",
   "name": "PI-Desktop Official Plugins",
-  "updatedAt": "2026-09-13T13:55:42Z",
+  "updatedAt": "2026-09-14T03:28:52Z",
   "homepage": "https://github.com/vastsa/pi-desktop-plugins",
   "plugins": [
     {
@@ -150,6 +150,61 @@
         }
       ]
     },
+    {
+      "id": "io.github.liushunqiu.pi-idea-git",
+      "name": "IDEA Git",
+      "description": "An IntelliJ-IDEA-style Git tool window for PI-Desktop: staged/unstaged change lists, hunk-level stage & revert, commit, branch switcher, graph log and stashes. IDEA Git \u98ce\u683c\u7684 Git \u5de5\u5177\u7a97\u53e3\uff1a\u6682\u5b58/\u672a\u6682\u5b58\u5206\u7ec4\u3001\u6309\u4ee3\u7801\u5757\u6682\u5b58\u4e0e\u8fd8\u539f\u3001\u63d0\u4ea4\u3001\u5206\u652f\u5207\u6362\u3001\u56fe\u5f62\u5316\u65e5\u5fd7\u4e0e\u50a8\u85cf\u3002",
+      "i18n": {
+        "en": {
+          "name": "IDEA Git",
+          "description": "An IntelliJ-IDEA-style Git tool window for PI-Desktop: staged/unstaged change lists, hunk-level stage & revert, commit, branch switcher, graph log and stashes.",
+          "safetyNotes": "Reads workspace files through the host fs APIs (Open File / Reveal only); discarding an untracked file deletes it (with a confirmation dialog) \u2014 every other write goes through Git commands. Commit-message generation calls the host model with your own model setup and quota (host rate limit 8/min); the plugin holds no API keys, makes no network requests, no telemetry. HTTPS credentials come from your own Git credential helper; keys that live only in ssh-agent do not work \u2014 use an HTTPS remote or a keychain-backed key."
+        },
+        "zh-CN": {
+          "name": "IDEA Git",
+          "description": "PI-Desktop \u7684 IDEA \u98ce\u683c Git \u5de5\u5177\u7a97\u53e3\uff1a\u6682\u5b58/\u672a\u6682\u5b58\u5206\u7ec4\u3001\u6309\u4ee3\u7801\u5757\u6682\u5b58\u4e0e\u8fd8\u539f\u3001\u63d0\u4ea4\u3001\u5206\u652f\u5207\u6362\u3001\u56fe\u5f62\u5316\u65e5\u5fd7\u4e0e\u50a8\u85cf\u3002",
+          "safetyNotes": "\u53ea\u8bfb\u5de5\u4f5c\u533a\u6587\u4ef6\uff08Open File / Reveal \u8d70\u5bbf\u4e3b fs \u63a5\u53e3\uff09\uff1b\u4e22\u5f03\u672a\u8ddf\u8e2a\u6587\u4ef6\u65f6\u4f1a\u76f4\u63a5\u5220\u9664\u8be5\u6587\u4ef6\uff08\u64cd\u4f5c\u524d\u6709\u786e\u8ba4\u6846\uff09\uff0c\u5176\u4f59\u5199\u64cd\u4f5c\u4e00\u5f8b\u8d70 Git \u547d\u4ee4\u3002\u751f\u6210\u63d0\u4ea4\u4fe1\u606f\u8c03\u7528\u5bbf\u4e3b\u6a21\u578b\uff0c\u7528\u7684\u662f\u4f60\u81ea\u5df1\u7684\u6a21\u578b\u914d\u7f6e\u4e0e\u989d\u5ea6\uff08\u5bbf\u4e3b\u9650\u6d41 8 \u6b21/\u5206\uff09\uff0c\u63d2\u4ef6\u4e0d\u6301\u6709\u4efb\u4f55 API Key\uff0c\u4e0d\u53d1\u8d77\u7f51\u7edc\u8bf7\u6c42\uff0c\u65e0\u9065\u6d4b\u3002HTTPS \u51ed\u636e\u8d70\u4f60\u81ea\u5df1\u7684 Git \u51ed\u636e\u52a9\u624b\uff1b\u53ea\u6d3b\u5728 ssh-agent \u91cc\u7684\u5bc6\u94a5\u7528\u4e0d\u4e86\uff0c\u8bf7\u7528 HTTPS \u8fdc\u7aef\u6216\u94a5\u5319\u4e32\u5bc6\u94a5\u3002"
+        }
+      },
+      "author": "liushunqiu",
+      "categories": [
+        "developer-tools",
+        "productivity"
+      ],
+      "verified": true,
+      "downloads": 0,
+      "homepage": "https://github.com/vastsa/pi-desktop-plugins/tree/main/plugins/io.github.liushunqiu.pi-idea-git",
+      "repository": "https://github.com/vastsa/pi-desktop-plugins",
+      "readmeMarkdown": "# IDEA Git \u2014\u2014 PI-Desktop \u7684 IntelliJ IDEA \u98ce\u683c Git \u5de5\u5177\u7a97\u53e3\n\n`io.github.liushunqiu.pi-idea-git` \u628a IntelliJ IDEA \u7684 Git \u754c\u9762\u642c\u8fdb PI-Desktop\uff1a\u4f60\u771f\u7684\u4f1a\u4e00\u76f4\u5f85\u5728\u91cc\u9762\u7684\u90a3\u4e24\u4e2a\n\u5de5\u5177\u7a97\u53e3\u3001\u6682\u5b58/\u672a\u6682\u5b58\u5206\u7ec4\u3001\u6309\u4ee3\u7801\u5757\uff08hunk\uff09\u6682\u5b58\u3001\u56fe\u5f62\u5316\u65e5\u5fd7\u4e0e Console\u3002\n\n\u8fd9\u91cc\u7684\u6bcf\u4e00\u4e2a Git \u52a8\u4f5c\u90fd\u662f**\u771f\u7684\u53bb\u8c03 `git`**\uff0c\u5bf9\u7740\u771f\u5b9e\u7684\u7d22\u5f15\u5e72\u6d3b\u3002\u6ca1\u6709\u4efb\u4f55\u529f\u80fd\u662f\u5728\u6e32\u67d3\u5c42\n\u5047\u88c5\u51fa\u6765\u7684\uff0c\u6240\u4ee5\u7ec8\u7aef\u91cc\u7684 `git status` \u6c38\u8fdc\u548c\u9762\u677f\u663e\u793a\u4e00\u81f4\u3002\n\n\u2014\u2014 \u4ee5\u4e0b\u5185\u5bb9\u6309\u300c\u80fd\u770b\u5230\u4ec0\u4e48 \u2192 \u600e\u4e48\u7528 \u2192 \u4e3a\u4ec0\u4e48\u8fd9\u6837\u5b9e\u73b0 \u2192 \u600e\u4e48\u6539\u300d\u6392\u5217\u3002\n\n| \u7ae0\u8282 | \u5185\u5bb9 |\n| --- | --- |\n| \u754c\u9762\u4e0e\u529f\u80fd | \u4e24\u4e2a\u89c6\u56fe\u3001Changes \u533a\u3001diff \u9762\u677f\u3001Log/Console \u5168\u90e8\u80fd\u529b\u8868 |\n| \u5feb\u6377\u952e | \u7ed1\u5b9a\u8868\uff0c\u4ee5\u53ca\u300c\u7126\u70b9\u5728\u54ea\u51b3\u5b9a\u8c01\u80fd\u6536\u5230\u6309\u952e\u300d |\n| \u4e0e IDEA \u7684\u6709\u610f\u5dee\u5f02 | \u54ea\u4e9b\u5730\u65b9\u523b\u610f\u4e0d\u7167\u6284 |\n| \u6743\u9650 | 6 \u9879\u6743\u9650\u5404\u81ea\u4e3a\u4ec0\u4e48\u9700\u8981 |\n| \u5de5\u7a0b\u7ed3\u6784 | \u6e90\u7801\u5e03\u5c40\u3001\u4e3a\u4ec0\u4e48\u5fc5\u987b\u6784\u5efa\u3001\u751f\u6210\u7269\u4e3a\u4ec0\u4e48\u4e0d\u80fd\u624b\u6539 |\n| \u5f15\u64ce\u8bbe\u8ba1 | \u89c6\u56fe\u5982\u4f55\u4e0e Git \u901a\u4fe1\u3001\u73af\u5883\u8865\u9f50\u3001\u72b6\u6001\u4e0e\u8865\u4e01\u7684\u5173\u952e\u53d6\u820d |\n| \u4e00\u4e2a\u9879\u76ee\u91cc\u7684\u591a\u4e2a\u4ed3\u5e93 | \u5b50\u6a21\u5757\u4e0e\u5d4c\u5957\u4ed3\u5e93\u7684\u8bc6\u522b\u3001Root \u9009\u62e9\u5668\u4e0e\u5176\u8fb9\u754c |\n| \u8fdc\u7aef\u540c\u6b65 | \u63a8\u9001\u88ab\u62d2\u3001\u5206\u53c9\u3001\u51b2\u7a81\u3001\u4ee5\u53ca\u672a\u5b8c\u6210\u5408\u5e76\u7684\u51fa\u8def |\n| \u8ba4\u8bc1 | \u4e3a\u4ec0\u4e48\u63d2\u4ef6\u4e0d\u9700\u8981\u51ed\u636e\uff0c\u4ee5\u53ca\u552f\u4e00\u505a\u4e0d\u5230\u7684\u4e8b |\n| \u751f\u6210\u63d0\u4ea4\u4fe1\u606f | \u7528\u5bbf\u4e3b\u6a21\u578b\u8d77\u8349\uff0c\u8bed\u8a00/\u683c\u5f0f/\u8303\u56f4\u5982\u4f55\u5904\u7406 |\n| \u914d\u8272 | \u54ea\u4e9b\u53d6\u81ea JetBrains \u6587\u6863\uff0c\u54ea\u4e9b\u662f\u523b\u610f\u7684\u504f\u79bb |\n| \u6d4b\u8bd5\u4e0e\u5de5\u5177 | harness / smoke / drive / \u51b3\u7b56\u7b14\u8bb0\u95e8\u7981 |\n| \u5f00\u53d1\u4e0e\u6253\u5305 | \u52a0\u8f7d\u672c\u5730\u63d2\u4ef6\u3001\u6784\u5efa\u3001\u6253\u5305\u542b\u6743\u9650\u6269\u5f20\u7684\u5751 |\n| \u5df2\u77e5\u7f3a\u53e3 | \u8bda\u5b9e\u6e05\u5355\uff1a\u54ea\u4e9b\u63a7\u4ef6\u65e0\u6548\u3001\u54ea\u4e9b\u80fd\u529b\u53d7\u9650 |\n| \u8bb0\u5fc6\u4e0e\u51b3\u7b56\u7b14\u8bb0 | `.memories/`\u3001`.agents/notes/` \u4e0e\u53cd\u5411\u7d22\u5f15 |\n\n## \u754c\u9762\u4e0e\u529f\u80fd\n\n\u5de5\u4f5c\u9762\u677f\u91cc\u6709\u4e24\u4e2a docked \u89c6\u56fe\uff0c\u5bf9\u5e94 IDEA \u7684\u4e24\u4e2a\u5de5\u5177\u7a97\u53e3\uff1a\n\n| \u9762\u677f | \u5bf9\u5e94 IDEA | \u5185\u5bb9 |\n| --- | --- | --- |\n| **\u63d0\u4ea4**\uff08`views/commit.html`\uff09 | Commit \u5de5\u5177\u7a97\u53e3\uff0c`Alt+0` | Changes \u533a\uff08Staged / Unstaged / Unversioned Files / Merge Conflicts\uff09\u3001\u9009\u4e2d\u6587\u4ef6\u7684 diff\u3001\u5e26\u5386\u53f2\u7684\u63d0\u4ea4\u4fe1\u606f\u6846\u3001Amend\u3001Sign-off\u3001Commit\u3001Commit and Push |\n| **Git**\uff08`views/git.html`\uff09 | Git \u5de5\u5177\u7a97\u53e3\uff0c`Alt+9` | **Log** \u9875\u7b7e\uff08\u5206\u652f\u9762\u677f\u3001\u5e26\u56fe\u5f62\u4e0e\u5f15\u7528\u5fbd\u6807\u7684\u63d0\u4ea4\u5217\u8868\u3001changed files\u3001commit details\uff09\u4e0e **Console** \u9875\u7b7e |\n\n> `Alt+0` / `Alt+9` \u662f IDEA \u81ea\u5df1\u7684\u7ed1\u5b9a\uff0c\u63d2\u4ef6**\u6ca1\u6709**\u6ce8\u518c\u70ed\u952e\uff08`manifest.json` \u91cc\u6ca1\u6709\n> `keybindings` \u6bb5\uff09\uff1b\u8fd9\u91cc\u53ea\u662f\u544a\u8bc9\u4f60\u5b83\u4eec\u5728 IDEA \u91cc\u5bf9\u5e94\u4ec0\u4e48\u3002\n\n\u547d\u4ee4\u9762\u677f\u91cc\u53e6\u6709\u4e24\u6761\u547d\u4ee4\uff1a`IDEA Git: Open as a separate window`\uff08\u628a\u4e24\u4e2a\u7a97\u53e3\u5e76\u5230\u4e00\u4e2a\u6807\u7b7e\u680f\u91cc\uff0c\n\u5bbd\u5c4f\u7528\uff0c\u52a0\u8f7d `renderer/index.html`\uff09\u4e0e `IDEA Git: Refresh repository`\u3002\u63d2\u4ef6\u5728\u542f\u52a8\u65f6\u6fc0\u6d3b\n\uff08`activationEvents: onStartup`\uff09\u3002\n\n### \u529f\u80fd\u5bf9\u7167\u8868\uff08\u7528 IDEA \u81ea\u5df1\u7684\u8bf4\u6cd5\uff09\n\n| \u529f\u80fd | \u4f4d\u7f6e | \u8bf4\u660e |\n| --- | --- | --- |\n| `Staged` / `Unstaged` / `Unversioned Files` / `Merge Conflicts` | \u63d0\u4ea4 \u2192 Changes \u533a | \u6309**\u76ee\u5f55\u6811**\u5206\u7ec4\uff0c\u6bcf\u4e2a\u6587\u4ef6\u843d\u5728\u5b83\u6240\u5c5e\u7684\u6587\u4ef6\u5939\u4e0b\u3002\u6587\u4ef6\u5939\u7684\u52fe\u9009\u662f\u7ea7\u8054\u7684\uff1a\u52fe\u4e0a\u4f1a\u628a\u5176\u4e0b\u6240\u6709\u6587\u4ef6\uff08\u542b\u66f4\u6df1\u5c42\u76ee\u5f55\uff09\u52a0\u5165\u7d22\u5f15\uff0c\u53d6\u6d88\u5219\u6574\u68f5\u5b50\u6811\u79fb\u51fa\u7d22\u5f15\u3002\u540c\u65f6\u6709\u5df2\u6682\u5b58\u4e0e\u672a\u6682\u5b58\u6539\u52a8\u7684\u6587\u4ef6\u4f1a**\u540c\u65f6\u51fa\u73b0\u5728\u4e24\u7ec4\u91cc**\u2014\u2014Git \u81ea\u5df1\u5c31\u662f\u8fd9\u4e48\u62a5\u7684 |\n| \u89c6\u56fe\u9009\u9879\uff08\u9f7f\u8f6e\uff09 | \u63d0\u4ea4 \u2192 Changes \u5934\u90e8 | `Group by Directory`\uff08\u76ee\u5f55\u6811\uff09\u4e0e\u5e73\u94fa\u6a21\u5f0f\u5207\u6362\uff08\u5173\u6389\u5b83\u5c31\u662f\u5e73\u94fa\uff09\u3001`Compact Middle Directories`\uff08`src/views/app` \u5408\u6210\u4e00\u884c\uff09\u3001`Collapse All`\u3001\u4ee5\u53ca\u300c\u5168\u90e8\u52a0\u5165\u7d22\u5f15 / \u5168\u90e8\u79fb\u51fa\u7d22\u5f15\u300d\u4e24\u4e2a\u52a8\u4f5c\u3002\u4e24\u4e2a\u89c6\u56fe\u9009\u9879\u90fd\u4f1a\u6301\u4e45\u5316 |\n| \u8fc7\u6ee4\u53d8\u66f4 | \u63d0\u4ea4 \u2192 Changes \u5934\u90e8 | \u628a\u6811\u6536\u7a84\u5230\u5339\u914d\u7684\u6587\u4ef6\u3001\u5e76\u4fdd\u7559\u5176\u7956\u5148\u76ee\u5f55\uff1b\u5206\u7ec4\u6807\u9898\u663e\u793a `matched/total`\u3002`Esc` \u6e05\u7a7a |\n| `Commit Message` + \u63d0\u4ea4\u4fe1\u606f\u5386\u53f2 | \u63d0\u4ea4 \u2192 \u5e95\u90e8 | \u65f6\u949f\u6309\u94ae\u56de\u653e\u4e4b\u524d\u5199\u8fc7\u7684\u4fe1\u606f\uff0c\u6700\u65b0\u5728\u524d\uff0c\u8de8\u91cd\u542f\u4fdd\u7559\uff08\u672c\u5730\u65e0\u5386\u53f2\u65f6\u7ed9\u63d0\u793a\uff0c\u83dc\u5355\u5e95\u90e8\u6709 `Clear All`\uff09 |\n| `Generate Commit Message` | \u63d0\u4ea4 \u2192 \u5e95\u90e8 | \u7528**\u5bbf\u4e3b\u81ea\u5df1\u7684\u6a21\u578b**\u8d77\u8349\u4fe1\u606f\u3002\u63cf\u8ff0\u5f53\u524d\u9009\u4e2d\u7684\u6587\u4ef6\uff1b\u6ca1\u9009\u6587\u4ef6\u65f6\u63cf\u8ff0\u6240\u6709\u5df2\u6682\u5b58\u5185\u5bb9\uff1b\u7bad\u5934\u83dc\u5355\u7528\u6765\u6311\u6a21\u578b |\n| `Amend`\u3001`Sign-off commit` | \u63d0\u4ea4 \u2192 \u5e95\u90e8 | `--amend`\u3001`--signoff` |\n| `Commit`\u3001`Commit and Push` | \u63d0\u4ea4 \u2192 \u5e95\u90e8 | \u62c6\u5206\u6309\u94ae\uff1b\u4e0b\u62c9\u91cc\u8fd8\u6709 Amend / Sign-off / \u56de\u6eda\uff08\u628a\u5df2\u6682\u5b58\u5185\u5bb9\u5168\u90e8\u79fb\u51fa\u7d22\u5f15\uff09 |\n| \u6bcf\u4e2a\u4ee3\u7801\u5757\u7684 `Include into commit` | \u63d0\u4ea4 \u2192 diff \u9762\u677f | **\u5c40\u90e8\u63d0\u4ea4**\u3002\u6bcf\u4e2a hunk \u5e26\u4e00\u4e2a\u52fe\u9009\u6846\uff1b\u5207\u6362\u5b83\u65f6\u7528\u91cd\u5efa\u51fa\u6765\u7684\u8865\u4e01\u8dd1 `git apply --cached`\uff08\u6216 `-R`\uff09\uff0c\u4e8e\u662f\u53ea\u6709\u88ab\u9009\u4e2d\u7684 hunk \u8fdb\u5165\u8fd9\u6b21\u63d0\u4ea4 |\n| `Stage Hunk` / `Discard Hunk` / `Unstage Hunk` | \u63d0\u4ea4 \u2192 diff \u9762\u677f | \u9f20\u6807\u60ac\u505c\u5230\u5de5\u4f5c\u533a diff \u7684 hunk \u5934\u65f6\u51fa\u73b0\uff1b\u5df2\u6682\u5b58 diff \u4e0a\u5219\u662f\u53cd\u5411\u7684 `Unstage Hunk` |\n| hunk \u5934\u4e0a\u7684\u9644\u6ce8 | \u63d0\u4ea4 \u2192 diff \u9762\u677f | \u7eaf\u7a7a\u767d hunk \u6807 `\u00b7 whitespace only`\uff1b\u5b50\u6a21\u5757\u6307\u9488\u53d8\u5316\u6807 `\u00b7 submodule abc1234 \u2192 def5678` |\n| `Show Diff`\u3001`Rollback`\u3001`Add`/`Remove from index`\u3001`Open File`\u3001`Reveal in File Manager`\u3001`Copy Hash` | \u63d0\u4ea4 \u2192 \u6587\u4ef6\u53f3\u952e\u83dc\u5355 | `Rollback` \u4f1a\u5148\u786e\u8ba4\uff1b\u5b83\u4f1a\u5220\u9664\u672a\u8ddf\u8e2a\u6587\u4ef6\u3001\u8fd8\u539f\u5df2\u8ddf\u8e2a\u6587\u4ef6 |\n | \u5206\u652f\u63a7\u4ef6\uff08`main \u21912 \u21931`\uff09 | \u4e24\u4e2a\u5de5\u5177\u680f | \u5206\u652f\u540d\u3001\u9886\u5148/\u843d\u540e\uff0c\u70b9\u5f00\u662f\u672c\u5730/\u8fdc\u7aef\u5206\u652f\u5217\u8868\uff0c\u70b9\u4e00\u884c\u5373 checkout\uff1b`New Branch`\u3001`Merge into Current\u2026`\u3001`Rebase Current onto\u2026`\u3001`Rename`\u3001`Set/Unset Upstream`\u3001`Delete\u2026`\u3001`Fetch`\u3001`Pull`\u3001`Push`\u3001`Force Push (with lease)`\u3001`Stash Changes` \u4e0e\u50a8\u85cf\u5217\u8868\uff08Apply/Pop/Drop\uff09\u3002\uff08\u5206\u652f\u7684**\u5b8c\u6574\u53f3\u952e\u52a8\u4f5c\u83dc\u5355\u5728 Git \u89c6\u56fe\u7684 `Branches` \u9762\u677f**\u91cc\uff0c\u5de5\u5177\u680f\u5f39\u5c42\u662f\u5e38\u7528\u5b50\u96c6\uff09 |\n| \u4ed3\u5e93\u63a7\u4ef6\uff08`mod \u00b7 submodule`\uff09 | \u4e24\u4e2a\u5de5\u5177\u680f | \u5217\u51fa\u5de5\u4f5c\u533a\u4ed3\u5e93\u4ee5\u53ca\u5d4c\u5957\u5728\u5b83\u91cc\u9762\u7684\u6bcf\u4e00\u4e2a\u4ed3\u5e93\u2014\u2014\u5b50\u6a21\u5757\u3001\u4ee5\u53ca\u6070\u597d\u4f4f\u5728\u8fd9\u91cc\u7684\u514b\u9686\u2014\u2014\u9009\u4e2d\u5b83\u5c31\u628a\u6574\u4e2a\u5de5\u5177\u7a97\u53e3\u5bf9\u51c6\u90a3\u4e2a\u4ed3\u5e93\u3002\u53ea\u6709\u4e00\u4e2a\u4ed3\u5e93\u65f6\uff08\u5355\u4ed3\u5e93\u9879\u76ee\uff09\u9690\u85cf |\n| `Log`\u3001`Console` | Git \u2192 \u9875\u7b7e | Console \u663e\u793a\u63d2\u4ef6\u8dd1\u8fc7\u7684\u547d\u4ee4\u4e0e\u8f93\u51fa\uff0c\u5931\u8d25\u6807\u7ea2\uff0c\u53ef `Clear All`\uff08\u89c1\u4e0b\u65b9\u300c\u5df2\u77e5\u7f3a\u53e3\u300d\uff1a\u63a2\u6d4b\u578b\u547d\u4ee4\u6210\u529f\u65f6\u4e0d\u8bb0\u5f55\uff09 |\n| \u63d0\u4ea4\u56fe | Git \u2192 Log | \u6cf3\u9053\u7531\u7236\u63d0\u4ea4\u4fe1\u606f\u7b97\u51fa\uff1b\u5206\u652f\u5c16\u7aef\u9ec4\u8272\u3001\u672c\u5730\u5206\u652f\u7eff\u8272\u3001\u8fdc\u7aef\u7d2b\u8272\u3001\u6807\u7b7e\u7070\u8272\u3002\u81ea\u5df1\u7684\u63d0\u4ea4 subject \u52a0\u7c97\uff0c\u5f53\u524d\u5206\u652f\u7684\u884c\u6709\u5e95\u8272 |\n | `Branches` \u9762\u677f | Git \u2192 Log \u2192 \u5de6\u4fa7 | `HEAD`\uff08\u70b9\u4e00\u70b9\u56de\u5230\u5f53\u524d\u63d0\u4ea4\uff09\uff0f`Local branches`\uff0f`Remote branches`\uff08`feature/*` \u8fd9\u7c7b\u6309 `/` \u6298\u6210\u53ef\u5c55\u5f00\u7684\u6587\u4ef6\u5939\uff1b\u70b9\u8fdc\u7aef\u5206\u652f\u4f1a\u81ea\u52a8\u5efa\u672c\u5730\u8ddf\u8e2a\u5206\u652f\uff0c\u4e0d\u518d\u662f detached HEAD\uff09\uff0f`Tags`\uff08\u70b9\u4e00\u70b9\u6309\u8be5\u6807\u7b7e\u8fc7\u6ee4\u65e5\u5fd7\uff09\uff0f`Remotes`\uff08Fetch / Fetch+Prune / \u590d\u5236\u5730\u5740\uff09\uff0f`Stashes`\uff08Show / Apply / Pop / Drop\uff09\u3002\u5206\u652f\u53f3\u952e\uff1a`Checkout`\u3001`New Branch from Here`\u3001`Merge into Current`\u3001`Rebase Current onto Selected`\u3001`Rename`\u3001`Set/Unset Upstream`\u3001`Delete`\uff08\u672a\u5b8c\u5168\u5408\u5e76\u8d70\u4e8c\u6b21\u786e\u8ba4\uff09\u3001`Copy Branch Name`\u3001`Push`\u3001`Fetch` |\n| `Changed Files`\u3001`Commit Details` | Git \u2192 Log \u2192 \u5217\u8868\u4e0b\u65b9 | Details \u663e\u793a\u54c8\u5e0c\u3001\u4f5c\u8005\u3001\u65e5\u671f\u3001subject \u4e0e\u5b8c\u6574\u6b63\u6587 |\n| `Graph Options` | Git \u2192 \u5de5\u5177\u680f | `By commit date` / `Topologically`\u3001`Show First Parent`\u3001`No Merges`\u3001`Show Graph`\u3001\u5404\u9762\u677f\u5f00\u5173 |\n | \u8fc7\u6ee4 | Git \u2192 \u5de5\u5177\u680f | \u6587\u672c\u641c\u7d22\uff08\u672c\u5730 substring\uff09\u3001\u5206\u652f\u8fc7\u6ee4\u3001\u7528\u6237\u8fc7\u6ee4\uff08\u5168\u90e8\uff0f\u53ea\u770b\u6211\u7684\uff09\u3001\u65e5\u671f\u8fc7\u6ee4\uff08\u5168\u90e8\uff0f24 \u5c0f\u65f6\uff0f\u4e00\u5468\uff0f\u4e00\u6708\uff09\u3001\u8def\u5f84\u8fc7\u6ee4\uff08\u670d\u52a1\u7aef `git log -- <path>`\uff0c\u8f93\u5165\u9632\u6296 450ms\u3001\u56de\u8f66\u7acb\u5373\u5237\uff09 |\n | \u63d0\u4ea4\u52a8\u4f5c | Git \u2192 Log \u2192 \u53f3\u952e\u63d0\u4ea4 | `Show Diff`\u3001`Copy Revision Number`\u3001`Copy Message`\u3001`Compare with HEAD`\u3001`Checkout Revision`\u3001`New Branch from Here`\u3001`New Tag`\u3001`Cherry-Pick`\u3001`Revert`\u3001`Reset Current Branch to Here`\uff08soft/mixed/hard\uff09\u3001`Edit Commit Message`\uff08\u4ec5 HEAD\uff09 |\n| `Side-by-side viewer` / `Unified viewer` | diff \u9762\u677f\u5934\u90e8 | \u4e24\u8005\u6e32\u67d3\u540c\u4e00\u4efd\u89e3\u6790\u597d\u7684 hunk |\n| `Ignore Differences` \u2192 `None` / `Ignore whitespaces` | diff \u9762\u677f\u9f7f\u8f6e | \u7531 Git \u81ea\u5df1\u5b9e\u73b0\uff08`git diff -w`\uff09\uff0c\u4e0d\u662f\u628a\u884c\u85cf\u8d77\u6765\u3002\u5f00\u7740\u5b83\u65f6**\u7981\u7528 hunk \u6682\u5b58**\uff0c\u56e0\u4e3a\u5ffd\u7565\u7a7a\u767d\u7684 diff \u4e0d\u662f\u5408\u6cd5\u8865\u4e01 |\n| `Show Whitespaces` | diff \u9762\u677f\u773c\u775b\u56fe\u6807 | \u7a7a\u683c\u6e32\u67d3\u6210 `\u00b7`\uff0c\u5236\u8868\u7b26\u6e32\u67d3\u6210 `\u2192` |\n| `Show Line Numbers` | diff \u9762\u677f\u9f7f\u8f6e / commit diff \u6d6e\u5c42\u5934\u90e8 | \u884c\u53f7\u680f\u3002\u63d0\u4ea4\u89c6\u56fe\u9ed8\u8ba4**\u5173**\u3001\u4e14\u8fd9\u4e2a\u5f00\u5173\u4f1a\u88ab\u8bb0\u4f4f\uff1bcommit diff \u6d6e\u5c42\u9ed8\u8ba4**\u5f00**\uff0c\u4f46\u6bcf\u6b21\u6253\u5f00\u90fd\u56de\u5230\u9ed8\u8ba4\uff08\u6d6e\u5c42\u4e0d\u6301\u4e45\u5316\uff09 |\n| `Collapse Unchanged Fragments` | diff \u9762\u677f | \u957f\u7684\u4e0a\u4e0b\u6587\u4f1a\u6298\u53e0\u6210\u4e00\u884c\u53ef\u70b9\u51fb\u7684\u6761\uff08`\u22ee N \u884c\u672a\u4fee\u6539`\uff09\u3002\u53ea\u5728**\u7edf\u4e00\u89c6\u56fe**\u91cc\u6298\u53e0\uff0c\u5e76\u6392\u89c6\u56fe\u4e0d\u6298 |\n| \u9ad8\u4eae\u5dee\u5f02 | diff \u9762\u677f | **\u8bcd\u7ea7**\uff1a\u884c\u4e2d\u95f4\u53d8\u5316\u7684\u90e8\u5206\u88ab\u6807\u51fa\u6765\uff0c\u4e8e\u662f `1.0.0` \u2192 `1.1.0` \u53ea\u6807\u51fa\u90a3\u4e00\u4e2a\u4e0d\u540c\u7684\u5b57\u7b26 |\n| \u63d0\u4ea4\u533a\u72b6\u6001\u884c | \u63d0\u4ea4 \u2192 \u63d0\u4ea4\u6309\u94ae\u4e0a\u65b9 | \u4e09\u79cd\u72b6\u6001\uff1a\u8fdb\u884c\u4e2d\u7684\u64cd\u4f5c\uff08\u5e26 `Continue`/`Abort`\uff09\u3001\u51b2\u7a81\u63d0\u793a\u3001`Nothing is staged` \u8b66\u544a\uff0c\u5e38\u89c4\u65f6\u663e\u793a\u300c\u5c06\u63d0\u4ea4 N / M \u4e2a\u6587\u4ef6\u300d |\n| Console \u7ec6\u8282 | Git \u2192 Console | \u6bcf\u6761\u547d\u4ee4\u5e26 `[hh:mm:ss]` \u65f6\u95f4\u6233\u3001\u53f3\u4e0a\u89d2\u663e\u793a\u6761\u6570\u3001\u72ec\u7acb\u7684 Refresh\u3001\u7a7a\u6001\u63d0\u793a |\n| \u5de5\u5177\u680f\u53f3\u4fa7 | \u4e24\u4e2a\u5de5\u5177\u680f | \u5f53\u524d\u4ed3\u5e93/\u5de5\u4f5c\u533a\u76ee\u5f55\u540d |\n\n`Ctrl+F5` \u7684\u884c\u4e3a\u2014\u2014\u300c\u6bcf\u4e2a\u52a8\u4f5c\u4e4b\u540e\u90fd\u5237\u65b0\u300d\u2014\u2014\u662f\u5185\u5efa\u7684\uff1a\u4efb\u4f55\u5199\u5165\u52a8\u4f5c\u4e4b\u540e\u90fd\u4f1a\u5237\u65b0\u72b6\u6001\u3001diff \u4e0e\u5217\u8868\u3002\n\n## \u5feb\u6377\u952e\n\n\u5bbf\u4e3b\u5728\u4e3b\u7a97\u53e3\u6e32\u67d3\u5c42\u8dd1\u5e94\u7528\u81ea\u5df1\u7684\u5feb\u6377\u952e\uff0c\u800c\u63d2\u4ef6\u89c6\u56fe\u662f\u72ec\u7acb\u7684 `WebContentsView`\u2014\u2014\u6240\u4ee5**\u7126\u70b9\u5728\u89c6\u56fe\u91cc\u65f6\uff0c\u5bbf\u4e3b\u6536\u4e0d\u5230\u6309\u952e**\u3002\n\u7ed3\u8bba\uff1a**\u51e1\u662f\u6309\u94ae\u5e7f\u544a\u51fa\u6765\u7684\u952e\uff0c\u90fd\u5fc5\u987b\u5728\u9875\u5185\u81ea\u5df1\u7ed1\u5b9a**\uff0c\u4e0b\u9762\u8fd9\u4e9b\u5c31\u662f\uff1a\n\n| \u52a8\u4f5c | macOS | Windows / Linux |\n| --- | --- | --- |\n| \u5237\u65b0 | `\u2318R` | `Ctrl+R` |\n| \u5237\u65b0\uff08IDEA \u7684\u7ed1\u5b9a\uff09 | `\u2303F5` | `Ctrl+F5` |\n| \u52a0\u5165\u7d22\u5f15 | `\u2318\u2325A` | `Ctrl+Alt+A` |\n| \u56de\u6eda\uff08\u5148\u786e\u8ba4\uff09 | `\u2318\u2325Z` | `Ctrl+Alt+Z` |\n| Show Diff | `\u2318D` | `Ctrl+D` |\n| \u63d0\u4ea4\u4fe1\u606f\uff08\u63d0\u4ea4\u89c6\u56fe\uff09 | `\u2318K` | `Ctrl+K` |\n| \u641c\u7d22\u65e5\u5fd7\uff08Git \u89c6\u56fe\uff09 | `\u2318F` | `Ctrl+F` |\n| \u5173\u95ed\u5bf9\u8bdd\u6846 / \u83dc\u5355 / diff | `Esc` | `Esc` |\n| \u5728\u63d0\u4ea4\u5217\u8868\u4e2d\u79fb\u52a8 | `\u2191` `\u2193` | `\u2191` `\u2193` |\n\n\u63d0\u793a\u6587\u6848\u7531\u7ed1\u5b9a\u7684\u540c\u4e00\u4efd\u89c4\u683c\u751f\u6210\uff08`PIG.formatShortcut`\uff09\uff0c\u6240\u4ee5**\u4e0d\u53ef\u80fd\u51fa\u73b0\u300c\u5199\u4e86\u5374\u6309\u4e0d\u51fa\u300d\u7684\u63d0\u793a\u952e**\u2014\u2014\n\u8fd9\u662f\u4e2a\u503c\u5f97\u5728\u8bbe\u8ba1\u4e0a\u6392\u9664\u7684\u9519\u8bef\uff0c\u56e0\u4e3a\u5b83\u76f4\u5230\u6709\u4eba\u53bb\u6309\u624d\u4f1a\u66b4\u9732\u3002\n\n\u4ee3\u7801\u91cc\u8fd8\u7ed1\u4e86\uff1a\u63d0\u4ea4\u884c\u4e0a `Enter` / `Space` \u9009\u4e2d\u8be5\u63d0\u4ea4\uff1b\u5bf9\u8bdd\u6846\u91cc `Enter` \u786e\u8ba4\uff1b\u5f39\u51fa\u83dc\u5355\u6253\u5f00\u65f6\u81ea\u52a8\u805a\u7126\u7b2c\u4e00\u4e2a\u53ef\u9009\u9879\uff1b\n`\u2318\u21e7P` \u4f1a\u5f39\u4e00\u53e5\u63d0\u793a\uff08\u89c1\u4e0b\uff09\u3002\n\n### \u54ea\u4e2a\u952e\u5728\u54ea\u91cc\u6709\u6548\n\n\u5bbf\u4e3b\u7684\u52a0\u901f\u952e\u4e0e\u63d2\u4ef6\u7684\u7ed1\u5b9a\u4f4f\u5728\u4e0d\u540c\u5730\u65b9\uff0c\u6240\u4ee5\u300c\u540c\u4e00\u4e2a\u952e\u5e72\u4ec0\u4e48\u300d\u53d6\u51b3\u4e8e\u7126\u70b9\u5728\u54ea\u3002\u503c\u5f97\u7cbe\u786e\u77e5\u9053\uff1a\n\n| \u6309\u952e | \u5e94\u7528\u5185\uff08\u7126\u70b9\u4e0d\u5728\u89c6\u56fe\u91cc\uff09 | \u672c\u63d2\u4ef6\u89c6\u56fe\u5185 |\n| --- | --- | --- |\n| `\u2318K` / `Ctrl+K` | \u5e94\u7528\u7684**\u4f1a\u8bdd\u641c\u7d22** | **\u63d0\u4ea4\u89c6\u56fe**\uff1a\u805a\u7126\u63d0\u4ea4\u4fe1\u606f\u6846\u3002**Git \u89c6\u56fe**\uff1a\u65e0\uff08\u5e94\u7528\u7684\u641c\u7d22\u5728\u8fd9\u91cc\u591f\u4e0d\u5230\uff09 |\n| `\u2318\u21e7P` / `Ctrl+Shift+P` | \u5e94\u7528\u7684**\u547d\u4ee4\u9762\u677f** | \u6ca1\u7528\u2014\u2014\u6309\u952e\u5230\u4e0d\u4e86\u5e94\u7528\uff0c\u6240\u4ee5\u89c6\u56fe\u4f1a\u660e\u786e\u544a\u8bc9\u4f60\u8be5\u53bb\u54ea\uff08`Alt+Space`\uff09 |\n| `Alt+Space` | \u63d2\u4ef6\u542f\u52a8\u5668 | **\u4e00\u6837\u53ef\u7528\u2014\u2014\u5b83\u662f\u771f\u6b63\u7684\u5168\u5c40\u5feb\u6377\u952e** |\n| `\u2318R` / `Ctrl+R` | \u91cd\u65b0\u52a0\u8f7d | \u5237\u65b0\u4ed3\u5e93 |\n| `\u2318D`\u3001`\u2318\u2325A`\u3001`\u2318\u2325Z`\u3001`\u2318F`\u3001`Esc`\u3001`\u2191` `\u2193` | \u5e94\u7528\u81ea\u5df1\u7684\u542b\u4e49 | \u63d2\u4ef6\u7684\u542b\u4e49\uff0c\u89c1\u4e0a\u8868 |\n\n\u6240\u4ee5\uff1a**\u8981\u8dd1\u5e94\u7528\u7ea7\u547d\u4ee4\uff08\u5305\u62ec `IDEA Git: Open as a separate window`\uff09\uff0c\u6309 `Alt+Space`\uff0c\u6216\u8005\u70b9\u56de\u5e94\u7528\u91cc\u7528 `\u2318\u21e7P`\u3002**\n\u73b0\u5728\u5728\u89c6\u56fe\u91cc\u6309 `\u2318\u21e7P` \u4f1a\u5f39\u4e00\u53e5\u8bf4\u660e\uff0c\u800c\u4e0d\u662f\u6beb\u65e0\u53cd\u5e94\u3002\n\n## \u4e0e IDEA \u7684\u6709\u610f\u5dee\u5f02\n\n- **\u6ca1\u6709\u7f16\u8f91\u5668\u3002** IDEA \u628a diff \u5f00\u5728\u7f16\u8f91\u5668\u6807\u7b7e\u9875\u91cc\uff1b\u8fd9\u91cc\u63d0\u4ea4\u7684 diff \u5f00\u5728 Git \u5de5\u5177\u7a97\u53e3\u5185\u7684\u6d6e\u5c42\u91cc\u3002\n  `Jump to Source` \u6362\u6210\u4e86 `Open File`\uff08\u4ea4\u7ed9\u7cfb\u7edf\u9ed8\u8ba4\u7a0b\u5e8f\u6253\u5f00\uff09\u4e0e `Reveal in File Manager`\u3002\n- **\u6ca1\u6709 changelist\u3002** IDEA \u7684 changelist \u662f IDE \u4fa7\u6982\u5ff5\uff0cGit \u91cc\u6ca1\u6709\u5bf9\u5e94\u7269\uff1bStaged/Unstaged \u7684\u5206\u7ec4\u53d6\u4ee3\u4e86\u5b83\u3002\n  \u4e00\u4efd\u5de5\u4f5c\u526f\u672c\uff0c\u4e00\u4efd\u53d8\u66f4\u96c6\u3002\n- **\u6ca1\u6709 shelf\u3002** `Stash` \u8986\u76d6 Git \u539f\u751f\u7684\u90a3\u90e8\u5206\u573a\u666f\u3002\n- **\u5e76\u6392\u89c6\u56fe\u4e0d\u8054\u52a8\u6eda\u52a8\u3002** \u5de6\u53f3\u4e24\u680f\u4f5c\u4e3a\u4e00\u4e2a\u7f51\u683c\u4e00\u8d77\u6a2a\u5411\u6eda\u52a8\uff0c\u4e8e\u662f\u4e24\u680f\u6c38\u8fdc\u5728\u540c\u4e00\u4e2a\u504f\u79fb\u4e0a\u3002\n- **`Edit Commit Message` \u53ea\u5bf9\u5c16\u7aef\u63d0\u4ea4\u5f00\u653e**\uff0c\u56e0\u4e3a\u6539\u5199\u66f4\u65e9\u7684\u63d0\u4ea4\u9700\u8981 rebase\u3002\n- **`Ignore whitespaces` \u6a21\u5f0f\u4e0b\u7981\u7528 hunk \u6682\u5b58**\uff0c\u672a\u8ddf\u8e2a\u6587\u4ef6\u4e5f\u7981\u7528\u2014\u2014\u5ffd\u7565\u7a7a\u767d\u7684 diff\u3001\u4ee5\u53ca\u5bf9\u7740 `/dev/null` \u7684 diff\uff0c\n  \u90fd\u4e0d\u662f Git \u4f1a\u63a5\u53d7\u7684\u8865\u4e01\u3002\u6574\u6587\u4ef6\u7684 `Add` \u4ecd\u7136\u53ef\u7528\u3002\n- **\u5220\u9664\u884c\u662f\u7ea2\u8272\uff0c\u4e0d\u662f JetBrains \u7684\u7070\u8272**\uff0c\u6697\u8272 diff \u914d\u8272\u662f\u8c03\u51fa\u6765\u7684\u800c\u975e\u7167\u6284\u7684\u3002\u89c1\u300c\u914d\u8272\u300d\u3002\n\n## \u6743\u9650\n\n| \u6743\u9650 | \u4e3a\u4ec0\u4e48 |\n| --- | --- |\n| `ui.panel` | \u72ec\u7acb\u7a97\u53e3\uff08`renderer/index.html`\uff09 |\n| `ui.view` | \u4e24\u4e2a docked \u89c6\u56fe |\n| `clipboard.write` | `Copy Revision Number`\u3001`Copy Hash` \u8fd9\u7c7b\u590d\u5236\u52a8\u4f5c |\n| `fs.read` | \u5bf9\u53d8\u66f4\u6587\u4ef6\u6267\u884c `Open File` \u4e0e `Reveal in File Manager` |\n| `models.list` | \u751f\u6210\u6309\u94ae\u4e0a\u7684\u6a21\u578b\u9009\u62e9\u83dc\u5355 |\n| `agent.complete` | \u7528\u5bbf\u4e3b\u6a21\u578b\u8d77\u8349\u63d0\u4ea4\u4fe1\u606f |\n\n`PluginCheck` \u4f1a\u628a `clipboard.write` \u4e0e `fs.read` \u62a5\u6210 unused\uff0c\u56e0\u4e3a\u5b83\u53ea\u626b `main.js`\uff1b\u8fd9\u4e24\u4e2a\u90fd\u662f\u4ece\u89c6\u56fe\u7ecf\u9762\u677f\u6865\u8c03\u7684\n\uff08`clipboard.writeText` \u5728 `src/common.js`\uff0c`fs.openDefault` / `fs.reveal` \u5728 `src/commit-view.js`\uff09\uff0c\u5c5e\u8bef\u62a5\u3002\n\n`fs` \u7684\u8bfb\u53d6\u8303\u56f4\u58f0\u660e\u4e3a `{\"root\":\"workspace\",\"scope\":[\"**\"]}`\u2014\u2014\u53ea\u8bfb\u5de5\u4f5c\u533a\u3002\n\n**\u552f\u4e00\u4e00\u5904\u63d2\u4ef6\u5199\u5de5\u4f5c\u533a\u7684\u5730\u65b9**\u662f\u4e22\u5f03\u672a\u8ddf\u8e2a\u6587\u4ef6\uff08\u6216\u8fd8\u539f\u672a\u8ddf\u8e2a\u6587\u4ef6\u7684 hunk\uff09\uff1a\u5f15\u64ce\u76f4\u63a5 `fs.rmSync` \u5220\u6587\u4ef6\uff0c\n\u89c6\u56fe\u4fa7\u4f1a\u5148\u786e\u8ba4\u3002\u9664\u6b64\u4e4b\u5916\u4e0d\u78b0\u5de5\u4f5c\u533a\u7684\u6587\u4ef6\u2014\u2014\u6240\u6709\u53d8\u66f4\u90fd\u7ecf\u8fc7 `git`\u3002\n\uff08\u63d2\u4ef6\u53e6\u6709\u4e00\u5904\u5199\u76d8\uff0c\u5199\u7684\u662f\u5b83**\u81ea\u5df1**\u7684\u6570\u636e\u76ee\u5f55\uff1a`prefs.json`\uff0c\u5b58\u63d0\u4ea4\u4fe1\u606f\u5386\u53f2\u4e0e\u89c6\u56fe\u9009\u9879\uff0c\u4e0d\u843d\u5728\u4ed3\u5e93\u91cc\u3002\uff09\n\n## \u5de5\u7a0b\u7ed3\u6784\n\n```\nmain.js              Node \u8fdb\u7a0b\uff1aGit \u5f15\u64ce + \u901a\u9053\u8def\u7531\uff08\u7ea6 2600 \u884c\uff09\nsrc/theme.css        IDEA \u8c03\u8272\u677f\u4e0e\u7ec4\u4ef6\u6837\u5f0f \u2500\u2510\nsrc/layout.css       \u5e03\u5c40\u4e0e\u54cd\u5e94\u5f0f            \u2500\u2524\nsrc/common.js        \u6865\u3001i18n\u3001\u56fe\u6807\u3001\u5f39\u51fa\u83dc\u5355 \u2500\u2524 tools/build.mjs\nsrc/diff.js          \u7edf\u4e00 diff \u89e3\u6790\u4e0e\u6e32\u67d3    \u2500\u2524 \u5185\u8054\u8fdb\nsrc/commit-view.js   \u63d0\u4ea4\u5de5\u5177\u7a97\u53e3            \u2500\u2524\nsrc/git-view.js      Log + Console\uff0c\u4ee5\u53ca\u542f\u52a8 \u2500\u2518\nviews/commit.html    \u751f\u6210\u7269\u2014\u2014\u4e0d\u8981\u624b\u6539\nviews/git.html       \u751f\u6210\u7269\u2014\u2014\u4e0d\u8981\u624b\u6539\nrenderer/index.html  \u751f\u6210\u7269\u2014\u2014\u4e24\u4e2a\u7a97\u53e3\u5e76\u5230\u4e00\u4e2a\u6807\u7b7e\u680f\ntools/build.mjs      \u5185\u8054\u5668\ntools/harness.mjs    \u5f15\u64ce\u56de\u5f52\uff08\u771f\u5b9e\u4ed3\u5e93\uff0c136 \u6761\u65ad\u8a00\uff09\ntools/drive.mjs      \u4e0d\u5f00 GUI \u76f4\u63a5\u9a71\u52a8\u5f15\u64ce\ntools/smoke.mjs      \u7528\u6869 bridge \u6e32\u67d3\u89c6\u56fe\u5230 .smoke/\ntools/notes.mjs      \u51b3\u7b56\u7b14\u8bb0\u95e8\u7981\uff08+ tools/agent-notes/ \u7684 vendored \u6821\u9a8c\u5668\uff09\nmanifest.json        \u6e05\u5355\uff1a\u89c6\u56fe\u3001\u547d\u4ee4\u3001\u6743\u9650\u3001engines\n```\n\n### \u4e3a\u4ec0\u4e48\u5fc5\u987b\u6709\u6784\u5efa\u6b65\u9aa4\n\n\u5bbf\u4e3b\u7528 `loadURL(pathToFileURL(entry))` \u52a0\u8f7d\u89c6\u56fe\uff0c\u4e5f\u5c31\u662f `file://` URL\uff0c\u800c **Chromium \u62d2\u7edd\u4ece `file://` \u52a0\u8f7d ES module**\n\uff08\u4e0d\u900f\u660e\u6e90\uff09\u3002\u5b98\u65b9\u81ea\u5e26\u63d2\u4ef6\u662f\u9760\u300c\u6bcf\u4e2a\u89c6\u56fe\u4e00\u4e2a\u5de8\u5927\u7684\u81ea\u5305\u542b HTML\u300d\u7ed5\u8fc7\u53bb\u7684\uff1b`tools/build.mjs` \u4ece\u53ef\u8bfb\u7684\u6e90\u7801\u4ea7\u51fa\u540c\u6837\u7684\u5f62\u72b6\uff1a\n\n```bash\nnode tools/build.mjs     # \u5199\u51fa views/*.html \u4e0e renderer/index.html\n```\n\n\u6539 `src/`\uff0c\u8dd1\u6784\u5efa\uff0c\u6b63\u5728\u8fd0\u884c\u7684\u5f00\u53d1\u63d2\u4ef6\u4f1a\u70ed\u91cd\u8f7d\u3002\u76f4\u63a5\u6539\u751f\u6210\u51fa\u6765\u7684 HTML \u662f\u767d\u8d39\u529b\u6c14\u2014\u2014\u4e0b\u6b21\u6784\u5efa\u5c31\u8986\u76d6\u4e86\u3002\n\n> \u751f\u6210\u5668\u56fa\u5b9a\u5199 `lang=\"en\"`\uff08`tools/build.mjs`\uff09\uff0c\u4e0e\u754c\u9762\u8bed\u8a00\u65e0\u5173\u3002\u53ea\u5f71\u54cd\u65e0\u969c\u788d\u8bed\u4e49\u4e0e\u5b57\u4f53\u56de\u9000\uff0c\u4e0d\u5f71\u54cd\u663e\u793a\u3002\n\n## \u5f15\u64ce\u8bbe\u8ba1\n\n### \u89c6\u56fe\u600e\u4e48\u8ddf Git \u8bf4\u8bdd\n\n`main.js` \u8dd1\u5728\u4e13\u5c5e Node \u8fdb\u7a0b\u91cc\uff08Electron `utilityProcess`\uff09\uff0c\u6240\u4ee5\u5b83\u6709\u771f\u6b63\u7684 Node API\u3001\u80fd\u8d77 `git` \u8fdb\u7a0b\u3002\n\u89c6\u56fe\u662f\u6c99\u7bb1\u9875\u9762\uff0c\u53ea\u62ff\u5230 `window.pluginBridge`\u3002\u5bbf\u4e3b\u81ea\u5df1\u4e0d\u5b9e\u73b0\u7684\u901a\u9053**\u5168\u90e8**\u8f6c\u53d1\u7ed9\u63d2\u4ef6\u5bfc\u51fa\u7684 `onPanelInvoke`\u2014\u2014\n\u8fd9\u6b63\u662f\u81ea\u5b9a\u4e49\u901a\u9053\u80fd\u5de5\u4f5c\u7684\u539f\u56e0\uff1a\n\n```\n\u89c6\u56fe  --pluginBridge.invoke(\"git/\u2026\")-->  \u5bbf\u4e3b  -->  onPanelInvoke  -->  git\n```\n\n`onPanelInvoke` \u91cc\u4e00\u5171 **36 \u4e2a `git/*` \u901a\u9053**\uff1b\u4e0d\u8ba4\u8bc6\u7684\u901a\u9053\u4f1a\u660e\u786e\u56de `Unsupported channel`\uff0c\u800c\u4e0d\u662f\u9759\u9ed8\u4ec0\u4e48\u90fd\u4e0d\u505a\u3002\n\n### \u4e24\u4e2a\u73af\u5883\u4e8b\u5b9e\u51b3\u5b9a\u4e86\u5f15\u64ce\u7684\u5f62\u72b6\n\n- \u63d2\u4ef6\u8fdb\u7a0b\u53ea\u88ab\u4ea4\u7ed9 `PATH`\u3001`LANG` \u548c\u4e34\u65f6\u76ee\u5f55\u53d8\u91cf\uff0c**\u6ca1\u6709 `HOME`**\uff08Windows \u4e0a\u662f `USERPROFILE`\uff09\uff0c\n  \u800c Git \u9700\u8981\u5b83\u6765\u8bfb `~/.gitconfig`\uff08\u8eab\u4efd\u3001\u51ed\u636e\u52a9\u624b\uff09\u3002\u6240\u4ee5\u6bcf\u6b21\u8c03\u7528\u90fd\u81ea\u5df1\u8865\u56de\u53bb\u3002**\u8fd9\u662f\u300c\u96f6\u914d\u7f6e\u8ba4\u8bc1\u300d\u7684\u5b9e\u73b0\u57fa\u7840\u3002**\n- \u6ca1\u6709\u7ec8\u7aef\uff0c\u6240\u4ee5\u4ea4\u4e92\u5f0f\u63d0\u793a\u88ab\u5173\u6389\uff08`GIT_TERMINAL_PROMPT=0`\u3001`GIT_ASKPASS=echo`\u3001`GIT_EDITOR=true`\u2026\uff09\uff0c\n  \u4e8e\u662f `push` / `pull` \u4f1a**\u5feb\u901f\u3001\u53ef\u89c1\u5730\u5931\u8d25**\uff0c\u800c\u4e0d\u662f\u5bf9\u7740\u4e00\u4e2a\u6ca1\u4eba\u80fd\u8f93\u5165\u7684\u5bc6\u7801\u6846\u6c38\u8fdc\u6302\u7740\u3002\n\n\u987a\u5e26\u8865\u4e0a\u7684\u8fd8\u6709 `GIT_OPTIONAL_LOCKS=0`\uff08\u8bfb\u64cd\u4f5c\u4e0d\u62ff\u7d22\u5f15\u9501\uff09\u3001`GIT_PAGER=cat`\u3001`GIT_CONFIG_NOSYSTEM` \u515c\u5e95\u3002\n`git` \u53ef\u6267\u884c\u6587\u4ef6\u5728 `PATH` \u4e0e\u4e00\u7ec4\u6807\u51c6\u5b89\u88c5\u8def\u5f84\u91cc\u627e\uff0c\u627e\u4e0d\u5230\u4f1a\u7ed9\u4e00\u6761\u660e\u786e\u7684\u9519\u8bef\uff0c\u800c\u4e0d\u662f\u8ba9\u6bcf\u4e2a\u52a8\u4f5c\u90fd\u83ab\u540d\u5931\u8d25\u3002\n\n### \u547d\u4ee4\u7684\u6267\u884c\u8fb9\u754c\n\n\u5355\u6761\u547d\u4ee4 **25 \u79d2**\u540e SIGKILL\u2014\u2014\u523b\u610f\u77ed\u4e8e\u5bbf\u4e3b\u7684 30 \u79d2\u9762\u677f\u8d85\u65f6\uff0c\u5426\u5219\u8d85\u65f6\u4f1a\u4ee5\u300c\u9762\u677f\u65e0\u54cd\u5e94\u300d\u7684\u5f62\u5f0f\u51fa\u73b0\uff0c\n\u800c\u770b\u4e0d\u5230 Git \u5230\u5e95\u5361\u5728\u54ea\u3002\u6bcf\u6761\u8f93\u51fa\u6d41\u4e0a\u9650 **8 MiB**\uff0c\u8d85\u51fa\u7684\u90e8\u5206\u662f\u5de8\u91cf\u65e5\u5fd7\uff0c\u4e0d\u662f\u4fe1\u606f\u3002\n\n### \u72b6\u6001\u662f\u600e\u4e48\u8bfb\u7684\n\n\u72b6\u6001\u7528 `git status --porcelain=v2 -z` \u8bfb\uff1a`-z` \u662f\u552f\u4e00\u80fd**\u539f\u6837**\u8fd4\u56de\u8def\u5f84\u7684\u5f62\u5f0f\uff0c\u6240\u4ee5\u7a7a\u683c\u4e0e\u975e ASCII \u6587\u4ef6\u540d\u80fd\u6d3b\u4e0b\u6765\uff1b\nv2 \u628a\u7d22\u5f15\u5217\u4e0e\u5de5\u4f5c\u533a\u5217\u5206\u5f00\uff0c\u800c\u8fd9\u4e24\u5217\u6b63\u597d\u5c31\u662f\u754c\u9762\u663e\u793a\u7684\u300c\u5df2\u6682\u5b58 / \u672a\u6682\u5b58\u300d\u3002\n\uff08\u53ea\u6709\u4e00\u5904\u4f8b\u5916\uff1a\u751f\u6210\u63d0\u4ea4\u4fe1\u606f\u65f6\u4e3a\u4e86\u907f\u514d\u91cd\u547d\u540d\u88ab\u91cd\u590d\u63cf\u8ff0\uff0c\u53e6\u8dd1\u4e86\u4e00\u6b21 v1 \u7684 `--porcelain`\u3002\uff09\n\n### diff \u4e0e\u8865\u4e01\n\ndiff \u7528 Git \u9ed8\u8ba4\u7684 `a/`-`b/` \u524d\u7f00\u4ea7\u51fa\uff0c\u56e0\u4e3a `git apply` \u4f1a\u5265\u6389\u4e00\u4e2a\u524d\u5bfc\u8def\u5f84\u5206\u91cf\u2014\u2014\n**\u7ed9 `git diff` \u52a0 `--no-prefix` \u4f1a\u8ba9 hunk \u8865\u4e01\u88ab\u62d2\u7edd**\uff0c\u8fd9\u662f\u672c\u4ed3\u5e93\u7684\u4e00\u6761\u786c\u6027\u7ea6\u5b9a\u3002\n\u56de\u4f20\u7ed9 Git \u7684\u8865\u4e01\u662f\u300c\u539f\u59cb\u5934\u90e8 + \u88ab\u9009\u4e2d\u7684 hunk\u300d\uff0c\u8fd9\u6b63\u662f `--recount` \u80fd\u63a5\u53d7\u90e8\u5206\u9009\u62e9\u7684\u539f\u56e0\u3002\n\n\u8865\u4e01\u8fd8\u5e26**\u6765\u6e90\u4ed3\u5e93\u6807\u8bc6**\uff1a`git/apply-patch` \u4f1a\u6821\u9a8c `root`\uff0c\u4e0d\u7b26\u5219\u56de `STALE_REPOSITORY`\u3002\n\u56e0\u4e3a `discard` \u4f1a\u5199\u5de5\u4f5c\u6811\uff0c\u4e00\u4e2a\u300c\u8bfb\u51fa\u6765\u3001\u8fc7\u4e00\u4f1a\u513f\u518d\u5199\u56de\u53bb\u300d\u7684\u901a\u9053\u5fc5\u987b\u80fd\u62d2\u7edd\u6765\u81ea\u5df2\u5207\u6362\u4ed3\u5e93\u7684\u65e7\u8865\u4e01\u3002\n\n### Console \u8bb0\u4ec0\u4e48\n\nConsole \u662f\u73af\u5f62\u7f13\u51b2\uff1a**\u6700\u591a 200 \u6761**\uff0c\u6bcf\u6761 stdout / stderr \u5404\u622a\u5230 **4000 \u5b57\u7b26**\u3002\n\u63a2\u6d4b\u578b\u547d\u4ee4\uff08`rev-parse`\u3001`ls-files`\u3001`for-each-ref`\u3001`config`\u3001`--version` \u7b49\uff09\u6210\u529f\u65f6**\u4e0d\u8bb0\u5f55**\u2014\u2014\n\u5b83\u4eec\u6bcf\u6b21\u5237\u65b0\u90fd\u8dd1\uff0c\u8bb0\u4e0b\u6765\u53ea\u4f1a\u628a\u6709\u7528\u7684\u8f93\u51fa\u51b2\u6389\u3002\n\n### \u5931\u8d25\u4fe1\u606f\u662f\u5206\u5c42\u7684\n\n\u77ed\u6d88\u606f\u53ea\u4fdd\u7559 6 \u884c\uff0c\u5e76**\u5254\u9664 `hint:` \u884c**\u2014\u2014\u90a3\u4e9b\u884c\u662f\u7ed9\u7ec8\u7aef\u8bfb\u8005\u7684\uff0c\u754c\u9762\u6539\u7528\u672c\u5730\u5316\u7684\u8865\u6551\u8bf4\u660e\uff1b\n\u4f46\u5982\u679c\u5254\u9664\u540e\u4f1a\u4e00\u4e2a\u5b57\u90fd\u4e0d\u5269\uff0c\u5c31\u9000\u56de\u4fdd\u7559 hint\uff08\u89c4\u5219\u662f\u300c\u8bf4\u70b9\u4ec0\u4e48\u300d\uff0c\u4e0d\u662f\u300c\u6765\u81ea hint \u7684\u5c31\u4e00\u5f8b\u4e0d\u8bf4\u300d\uff09\u3002\n\u5b8c\u6574 stdout+stderr \u8d70 `detail` \u5b57\u6bb5\uff0c\u7531 toast \u4e0a\u7684\u300c\u8be6\u60c5\u300d\u94fe\u63a5\u6253\u5f00\u5bf9\u8bdd\u6846\u67e5\u770b\uff08detail \u4e5f\u6709 4000 \u5b57\u7b26\u4e0a\u9650\uff0c\u8d85\u51fa\u52a0\u7701\u7565\u53f7\uff09\u3002\n\n\u5f15\u64ce\u7ed9\u6bcf\u4e00\u7c7b\u5931\u8d25\u6253**\u7a33\u5b9a\u7684\u5206\u7c7b\u7801**\uff0c\u7531\u89c6\u56fe\u672c\u5730\u5316\u6210\u63aa\u8f9e\uff1a`authHint`\uff08`ssh` / `credentials`\uff09\u3001\n`pushHint`\uff08`remote-ahead` / `remote-rejected`\uff09\u3001`pullHint`\uff08`diverged` / `conflicts`\uff09\u3002\n\uff08`needsReconcile` \u4e0d\u662f\u5206\u7c7b\u7801\uff0c\u5b83\u662f\u5f15\u64ce\u5185\u90e8\u7528\u6765\u5224\u65ad\u300c\u662f\u5426\u8be5\u8865\u4e00\u6b21 `--no-rebase`\u300d\u7684\u8c13\u8bcd\uff0c\u89c6\u56fe\u770b\u4e0d\u5230\u5b83\u3002\uff09\n\u65b0\u589e\u4efb\u4f55\u5931\u8d25\u5206\u652f\u65f6\uff0c\u522b\u628a Git \u7684\u539f\u6587\u4e22\u6389\uff0c\u4e5f\u522b\u628a\u6574\u6bb5\u585e\u8fdb toast\u3002\n\n### \u76f8\u5bf9\u8def\u5f84\u4e0e\u771f\u5b9e\u8def\u5f84\n\n\u8def\u5f84\u6bd4\u8f83\u4e00\u5f8b\u6309**\u771f\u5b9e\u8def\u5f84**\uff1aGit \u8fd4\u56de\u7684\u662f\u771f\u5b9e\u8def\u5f84\uff08macOS \u4e0a `/private/var/\u2026`\uff09\uff0c\u5bbf\u4e3b\u7ed9\u7684\u662f\u7528\u6237\u6253\u5f00\u65f6\u7684\u8def\u5f84\uff08`/var/\u2026`\uff09\u3002\n\u7528\u5b57\u7b26\u4e32\u524d\u7f00\u6bd4\u8f83\u4f1a\u628a\u540c\u4e00\u4e2a\u76ee\u5f55\u5224\u6210\u4e24\u4e2a\uff0c\u540e\u679c\u662f**\u9759\u9ed8\u964d\u7ea7**\uff08\u300c\u6253\u5f00\u6587\u4ef6 / \u5728\u8bbf\u8fbe\u4e2d\u663e\u793a\u300d\u88ab\u7981\u7528\uff09\uff0c\u800c\u4e0d\u662f\u62a5\u9519\u3002\n\u89c6\u56fe\u4fa7\u4e0d\u8981\u81ea\u5df1\u62fc\u7edd\u5bf9\u8def\u5f84\uff0c\u7528\u5f15\u64ce\u7b97\u597d\u7684 `repo.workspacePrefix`\uff08`null` \u6709\u8bed\u4e49\uff1a\u4ed3\u5e93\u5728\u5de5\u4f5c\u533a\u4e4b\u4e0a\uff0c\u4e0d\u80fd\u6298\u6210 `\".\"`\uff09\u3002\n\n## \u4e00\u4e2a\u9879\u76ee\u91cc\u7684\u591a\u4e2a\u4ed3\u5e93\n\n\u4e00\u4e2a\u9879\u76ee\u5e38\u5e38\u4e0d\u6b62\u4e00\u4e2a\u4ed3\u5e93\uff1a\u4e00\u4e2a\u5df2\u68c0\u51fa\u7684\u5b50\u6a21\u5757\uff0c\u6216\u8005\u4e00\u4e2a\u6070\u597d\u4f4f\u5728\u53e6\u4e00\u4e2a\u4ed3\u5e93\u91cc\u7684\u514b\u9686\u3002\u5b83\u4eec\u662f**\u72ec\u7acb\u7684\u4ed3\u5e93\uff0c\u4e0d\u662f\u6587\u4ef6\u5939**\u2014\u2014\n\u7236\u4ed3\u5e93\u53ea\u8bb0\u5f55\u5b50\u6a21\u5757*\u6307\u5411\u54ea\u4e2a\u63d0\u4ea4*\u2014\u2014\u6240\u4ee5\u7236\u4ed3\u5e93\u7684 `git status` \u6c38\u8fdc\u53ea\u7ed9\u4e00\u884c gitlink\uff0c\u770b\u4e0d\u5230\u5b50\u6a21\u5757\u91cc\u9762\u7684\u6587\u4ef6\u3002\nCommit \u89c6\u56fe\u56e0\u6b64\u505a\u6210 IDEA \u5f0f\u7684**\u805a\u5408\u663e\u793a**\uff1a\u5148\u6309\u6682\u5b58/\u672a\u6682\u5b58/\u51b2\u7a81/\u672a\u8ddf\u8e2a\u5206\u5927\u7c7b\uff0c\u5927\u7c7b\u4e0b\u6309**\u4ed3\u5e93**\u6392\u2014\u2014\n\u6bcf\u4e2a\u6709\u6539\u52a8\u7684\u4ed3\u5e93\uff08\u7236\u4ed3\u5e93\u53c2\u4e0e\u5b57\u6bcd\u6392\u5e8f\uff09\u5404\u5360\u4e00\u884c\"\u989c\u8272\u5757 + \u540d + N \u4e2a\u6587\u4ef6 + \u5206\u652f\u5fbd\u6807\"\uff0c\u6587\u4ef6\u518d\u5d4c\u5728\u884c\u4e0b\u5c55\u5f00\uff0c\n\u6682\u5b58\u3001diff\u3001hunk\u3001\u56de\u6eda\u90fd\u76f4\u63a5\u53ef\u7528\uff1b\n\u63d0\u4ea4\u6309\u94ae\u7528\u540c\u4e00\u63d0\u4ea4\u4fe1\u606f\u9010\u4ed3\u63d0\u4ea4\uff08\u5b50\u6a21\u5757\u5148\u3001\u7236\u4ed3\u5e93\u540e\uff09\uff0c\u7236\u4ed3\u5e93\u968f\u540e\u51fa\u73b0\u7684\u6307\u9488\u66f4\u65b0\u518d\u63d0\u4ea4\u4e00\u6b21\u5373\u6536\u655b\u3002\n`Commit and Push` \u628a\u521a\u624d\u63d0\u4ea4\u7684\u90a3 N \u4e2a\u4ed3\u9010\u4e2a\u63a8\u51fa\u53bb\uff0c\u4e0d\u518d\u53ea\u63a8\u5f53\u524d\u4ed3\u3002\n\u4ed3\u5e93\u884c\u53f3\u952e\"\u5207\u6362\u5230\u8be5\u4ed3\u5e93\"\u4f1a\u8df3\u5230 Root \u9009\u62e9\u5668\u7684\u90a3\u4e2a\u4ed3\u5e93\uff08Log/\u5206\u652f/\u50a8\u85cf\u4ecd\u6309\u4ed3\u5e93\u5207\u6362\u67e5\u770b\uff09\u3002\n\u63a8\u9001\u8d70 IDEA \u5f0f\u7684 **Push \u5bf9\u8bdd\u6846**\uff1a\u591a\u4ed3\u65f6\u5de5\u5177\u680f Push \u5217\u51fa\u6bcf\u4e2a\u4ed3\u5e93\u7684\u5206\u652f\u53bb\u5411\uff08`main \u2192 origin/main`\uff09\u3001`\u2191/\u2193` \u4e0e\u52fe\u9009\u6846\uff0c\n`Push All` \u9010\u4ed3\u63a8\u9001\uff0c\u5355\u4e2a\u5931\u8d25\u4e0d\u6321\u5176\u4ed6\u4ed3\uff0c\u884c\u5185\u663e\u793a\u6210\u529f/\u62d2\u56e0\uff1b\u5355\u4ed3\u65f6\u4fdd\u6301\u76f4\u63a5\u63a8\u9001\u3002Git \u89c6\u56fe\u5de5\u5177\u680f\u540c\u6837\u6709 Push \u5165\u53e3\u3002\n\u4e24\u4e2a\u5de5\u5177\u680f\u6700\u5de6\u8fb9\u7684\u4ed3\u5e93\u63a7\u4ef6\u4ecd\u7136\u662f\u5207\u6362\u5f53\u524d\u4ed3\u5e93\u7684\u4e1c\u897f\uff1a\u9009\u4e2d\u4e00\u4e2a\uff0c\u89c6\u56fe\u80cc\u540e\u7684\u6bcf\u6761\u547d\u4ee4\uff08\u72b6\u6001\u3001diff\u3001\u65e5\u5fd7\u3001\u5206\u652f\u3001\u50a8\u85cf\u3001\u63d0\u4ea4\u3001hunk \u6682\u5b58\uff09\n\u5c31\u90fd\u5728\u5b83\u91cc\u9762\u8dd1\u3002\n\n\u5de5\u4f5c\u533a\u672c\u8eab\u4e0d\u662f\u4ed3\u5e93\u3001\u4f46\u6587\u4ef6\u5939\u91cc\u5e76\u6392\u6446\u7740\u591a\u4e2a\u4ed3\u5e93\u65f6\uff08`repoA/`\u3001`repoB/`\uff09\uff0c\u540c\u6837\u53ef\u7528\uff1a\u4ed3\u5e93\u5217\u8868\u5217\u51fa\u5b83\u4eec\uff08`sibling repository`\n\u5fbd\u6807\uff09\uff0cCommit \u89c6\u56fe\u805a\u5408\u663e\u793a\u5176\u4ed6\u5e73\u7ea7\u4ed3\u7684\u6539\u52a8\uff0cPush \u5bf9\u8bdd\u6846\u4e00\u6b21\u63a8\u5b8c\u3002\u7a7a\u6587\u4ef6\u5939\uff08\u5185\u65e0\u4ed3\u5e93\uff09\u4ecd\u62a5\"\u4e0d\u662f Git \u4ed3\u5e93\"\u3002\n\n\u5217\u8868\u7531\u5de5\u4f5c\u533a\u4ed3\u5e93\u51fa\u53d1\u904d\u5386\u6784\u5efa\uff0c\u4e14**\u904d\u5386\u662f\u6709\u8fb9\u754c\u7684**\uff1a\u6700\u591a 4 \u5c42\u6df1\u3001\u6700\u591a 5000 \u4e2a\u76ee\u5f55\uff0c\u5e76\u4e14\u4e0d\u4e0b\u6f5c\u4f9d\u8d56/\u6784\u5efa/\u7f13\u5b58\u76ee\u5f55\n\uff08`node_modules`\u3001`vendor`\u3001`Pods`\u3001`.venv`\u2026 \u5171 17 \u4e2a\u540d\u5b57\uff0c\u542b `.git`\uff09\u3002\n\u4f46 `.gitmodules` \u91cc**\u58f0\u660e**\u7684\u8def\u5f84\u4e0d\u53d7\u8fd9\u4e9b\u8fb9\u754c\u9650\u5236\u2014\u2014\u90a3\u91cc\u7684\u6761\u76ee\u662f\u5173\u4e8e\u9879\u76ee\u7684\u65ad\u8a00\uff0c\u800c\u8fb9\u754c\u53ea\u662f\u5bf9\u9879\u76ee\u89c4\u6a21\u7684\u731c\u6d4b\u3002\n\u5df2\u58f0\u660e\u4f46\u672a\u68c0\u51fa\u7684\u5b50\u6a21\u5757\u4e0d\u5217\u51fa\uff1a\u6ca1\u6709\u5de5\u4f5c\u6811\uff0c\u5c31\u6ca1\u5f97\u663e\u793a\u3001\u4e5f\u6ca1\u5f97\u63d0\u4ea4\u3002\n\n\u4e24\u4e2a\u957f\u5f97\u5f88\u50cf\u7684\u4ed3\u5e93\u662f**\u6309\u7236\u4ed3\u5e93\u7684\u7d22\u5f15**\u533a\u5206\u7684\uff0c\u4e0d\u662f\u6309 `.gitmodules`\uff1a\u88ab\u7236\u4ed3\u5e93\u8bb0\u6210 `160000` gitlink \u7684\u8def\u5f84\u662f**\u5b50\u6a21\u5757**\n\uff08\u5728\u90a3\u91cc\u6682\u5b58\u7b49\u4e8e\u8bb0\u5f55\u4e00\u4e2a\u63d0\u4ea4\uff09\uff0c\u5176\u4ed6\u90fd\u662f**\u5d4c\u5957\u4ed3\u5e93**\uff08\u7236\u4ed3\u5e93\u4e0d\u5b58\u5b83\u7684\u4efb\u4f55\u6587\u4ef6\uff09\u3002\u754c\u9762\u4e0a\u5206\u522b\u6253 `submodule` / `nested repository` \u5fbd\u6807\u3002\n\n\u8fd9\u4e2a\u9009\u62e9\u5c5e\u4e8e**\u6253\u5f00\u7684\u90a3\u4e2a\u9879\u76ee**\uff0c\u4e0d\u5199\u8fdb prefs\uff1a\u5207\u9879\u76ee\u3001\u6216\u8005\u628a\u76ee\u5f55\u79fb\u8d70\uff0c\u5c31\u9000\u56de\u5de5\u4f5c\u533a\u81ea\u5df1\u7684\u4ed3\u5e93\u3002\n\n## \u8fdc\u7aef\u540c\u6b65\uff1a\u63a8\u9001\u88ab\u62d2\u4e0e\u5408\u5e76\u51b2\u7a81\n\n\u88ab\u62d2\u7edd\u7684\u63a8\u9001\u662f**\u5e38\u89c4\u60c5\u51b5\uff0c\u4e0d\u662f\u5f02\u5e38**\uff1a\u522b\u4eba\u5f80\u540c\u4e00\u4e2a\u5206\u652f\u63a8\u4e86\u4e1c\u897f\u3002Git \u4f1a\u5728 stderr \u4e0a\u8bf4\u660e\uff0c\u5e76\u5728 `hint:` \u884c\u91cc\u7ed9\u51fa\u8865\u6551\u529e\u6cd5\uff0c\n\u8fd9\u4e24\u8005\u90fd\u8bfb\u2014\u2014\u77ed\u6d88\u606f\u91cc\u662f Git \u81ea\u5df1\u90a3\u51e0\u884c\uff0c\u4e0a\u9762\u90a3\u53e5\u5206\u7c7b\u597d\u7684\u8865\u6551\u8bf4\u660e\u662f\u63d2\u4ef6\u7684\uff1a\n\n| \u5931\u8d25 | \u63d2\u4ef6\u600e\u4e48\u8bf4 |\n| --- | --- |\n| \u63a8\u9001\u88ab\u62d2\uff08`fetch first`\u3001`non-fast-forward`\u3001`stale info`\uff09 | \u8fdc\u7aef\u6709\u4f60\u6ca1\u6709\u7684\u63d0\u4ea4\u2014\u2014\u5148 Fetch\uff0c\u518d Pull\uff0c\u7136\u540e\u91cd\u65b0\u63a8\u9001\uff1b\u5982\u679c\u8be5\u4fdd\u7559\u7684\u662f\u672c\u5730\u5386\u53f2\uff0c\u7528 Force Push |\n| \u63a8\u9001\u88ab\u62d2\uff08`protected branch`\u3001\u94a9\u5b50\uff09 | \u670d\u52a1\u5668\u62d2\u7edd\u4e86\u5b83\uff1b\u5206\u652f\u5927\u6982\u662f\u53d7\u4fdd\u62a4\u7684 |\n| \u62c9\u53d6\u5361\u5728\u51b2\u7a81\u4e0a | \u5728 Changes \u533a\u91cc\u89e3\u51b3\uff0c\u7136\u540e\u63d0\u4ea4 |\n| \u5206\u53c9\u4e14 `pull.ff = only` | \u5148 merge \u6216 rebase\uff0c\u518d\u63a8\u9001 |\n| \u6ca1\u6709\u5b58\u4e0b\u6765\u7684\u51ed\u636e\uff08HTTPS\uff09 | \u5728\u7ec8\u7aef\u91cc\u8dd1\u4e00\u6b21 `git push` \u8ba9\u51ed\u636e\u52a9\u624b\u5b58\u4e0b\u6765\uff0c\u518d\u91cd\u8bd5 |\n| `Permission denied (publickey)` | \u6362\u6210 HTTPS \u8fdc\u7aef\uff0c\u6216\u8005\u8ba9\u5bc6\u94a5\u4e0d\u4f9d\u8d56 `ssh-agent`\u2014\u2014\u5bbf\u4e3b\u4e0d\u4f20 `SSH_AUTH_SOCK` |\n\n\u4e09\u6761\u5f15\u64ce\u51b3\u7b56\u6491\u8d77\u8fd9\u5957\u884c\u4e3a\uff1a\n\n- **\u4e24\u4e2a\u6d41\u90fd\u8bfb\u3002** `git push` \u628a\u62d2\u7edd\u5199\u5728 stderr\uff0c\u4f46 `git merge`\uff08\u4e5f\u5c31\u662f `git pull` \u7684\u540e\u534a\u6bb5\uff09\u628a `CONFLICT` \u5199\u5728 stdout\u3002\n  \u53ea\u8bfb stderr \u4f1a\u628a\u4e00\u6b21\u51b2\u7a81\u7684 pull \u6e32\u67d3\u6210\u4e00\u6bb5\u300c\u770b\u8d77\u6765\u50cf\u6210\u529f\u7684 fetch \u65e5\u5fd7\u300d\u3002\n  **\u5224\u636e\u662f\u300c\u5931\u8d25\u65f6\u54ea\u4e00\u884c\u80fd\u6307\u51fa\u4e0b\u4e00\u6b65\u300d\uff0c\u4e0d\u662f\u300c\u54ea\u4e2a\u6d41\u66f4\u50cf\u9519\u8bef\u6d41\u300d\u3002**\n- **`git pull` \u6309\u914d\u7f6e\u8dd1\uff0c\u53ea\u5728 Git \u81ea\u5df1\u56e0\u7f3a\u7b56\u7565\u800c\u62d2\u7edd\u65f6\u91cd\u8bd5\u4e00\u6b21\u3002** \u81ea\u4ece 2.27\uff0c\u5728\u5206\u53c9\u5206\u652f\u4e0a\u88f8\u8dd1 `git pull` \u662f\u786c\u5931\u8d25\n  \uff08`fatal: Need to specify how to reconcile divergent branches`\uff09\u2014\u2014\u4e8e\u662f\u88ab\u62d2\u7684\u63a8\u9001\u8ba9\u4f60\u8dd1\u7684\u90a3\u6761\u547d\u4ee4\u81ea\u5df1\u8dd1\u4e0d\u8d77\u6765\u3002\n  \u53ea\u6709\u8fd9\u4e00\u4e2a\u5931\u8d25\u4f1a\u88ab `--no-rebase`\uff08merge\uff09\u91cd\u8bd5\u4e00\u6b21\uff0c\u5176\u4f59\u7ed3\u679c\u90fd\u662f Git \u7684\u3002\n  \u8fd9\u91cc\u4e0d\u505a\u7b56\u7565\u63a8\u5bfc\uff0c\u6240\u4ee5 `branch.<name>.rebase`\u3001`pull.rebase = merges|interactive`\u3001`pull.ff = only` \u5168\u90e8\u7167\u5e38\u751f\u6548\u2014\u2014\n  \u5b83\u4eec\u662f\u88ab**\u7b2c\u4e00\u6b21\u5c1d\u8bd5**\u8bfb\u5230\u7684\uff0c\u800c\u4e0d\u662f\u88ab\u4e00\u4efd\u66f4\u5dee\u7684 Git \u4f18\u5148\u7ea7\u89c4\u5219\u526f\u672c\u8bfb\u5230\u7684\u3002\n- **Force push \u53ea\u80fd\u662f lease\uff0c\u4e0d\u80fd\u662f\u88f8 force\u3002** `--force-with-lease` \u662f\u63d2\u4ef6\u552f\u4e00\u80fd\u53d1\u51fa\u7684 force\uff1a\u5982\u679c\u8fdc\u7aef\u5df2\u7ecf\u4e0d\u5728\u8fd9\u4e2a\u7a97\u53e3\n  \u4e0a\u6b21\u770b\u5230\u7684\u4f4d\u7f6e\uff0c\u5b83\u5c31\u4f1a\u88ab\u62d2\u7edd\uff0c\u4e8e\u662f\u540c\u4e8b\u7684\u63a8\u9001\u6c38\u8fdc\u4e0d\u4f1a\u88ab\u62b9\u6389\u3002\u8fdc\u7aef\u4e0e ref \u662f\u4f4d\u7f6e\u53c2\u6570\uff0c\u6240\u4ee5\u4ea4\u7ed9 Git \u4e4b\u524d\u4f1a\u5148\u6821\u9a8c\u2014\u2014\n  `git push origin --force` \u6b63\u662f\u300c\u672a\u6821\u9a8c\u7684 `-` \u5f00\u5934\u53d6\u503c\u300d\u4f1a\u4ea7\u51fa\u7684\u4e1c\u897f\u3002\n\n**\u63a8\u9001\u63a8\u5230\u54ea\u91cc\uff0c\u7531\u5206\u652f\u8ffd\u8e2a\u5173\u7cfb\u51b3\u5b9a**\uff0c\u4e0d\u662f `origin` + \u672c\u5730\u5206\u652f\u540d\u3002\u8fd9\u4e24\u8005\u53ea\u5728\u5206\u652f\u8ffd\u8e2a\u540c\u4e00\u5904\u65f6\u624d\u4e00\u81f4\u2014\u2014\n\u4e00\u65e6\u5206\u652f\u8ffd\u8e2a\u522b\u5904\uff0c\u65e7\u884c\u4e3a\u5c31\u4f1a\u628a\u65b0\u5206\u652f\u63a8\u5230 `origin`\uff0c\u800c \u2191/\u2193 \u6807\u7b7e\u8fd8\u5728\u5bf9\u7740\u771f\u6b63\u7684 upstream \u8ba1\u6570\u3002\n\u5b8c\u5168\u6ca1\u6709 upstream \u65f6\u56de\u9000\u8303\u56f4\u5f88\u7a84\uff1a`origin`\uff0c\u6216\u8005\u53ea\u6709\u4e00\u4e2a\u8fdc\u7aef\u65f6\u5c31\u7528\u5b83\u3002\n\u6709\u591a\u4e2a\u8fdc\u7aef\u53c8\u6ca1 upstream \u65f6\u65e0\u4ece\u63a8\u65ad\uff0c\u4e8e\u662f\u62d2\u7edd\u63a8\u9001\u5e76\u5217\u51fa\u8fdc\u7aef\u5217\u8868\uff0c\u800c\u4e0d\u662f\u628a\u5206\u652f\u53d1\u5e03\u5230\u6392\u5e8f\u7b2c\u4e00\u4e2a\u7684\u540d\u5b57\u4e0a\u53bb\u3002\n\u9996\u6b21\u63a8\u9001\u53ef\u4ee5\u76f4\u63a5\u5efa\u7acb\u8ffd\u8e2a\uff08\u8ffd\u52a0 `--set-upstream`\uff09\u3002\n\u53e6\u5916\u4e24\u79cd\u4f1a\u660e\u786e\u62d2\u7edd\u7684\u60c5\u51b5\uff1a\u5206\u652f\u8ffd\u8e2a\u7684\u662f\u4e00\u4e2a**\u672c\u5730\u5206\u652f**\uff08\u540d\u5b57\u91cc\u6ca1\u6709 `/`\uff09\uff0c\u4ee5\u53ca**\u5c1a\u65e0\u63d0\u4ea4**\u7684\u5206\u652f\u3002\n\n### \u79bb\u5f00\u4e00\u4e2a\u672a\u5b8c\u6210\u7684\u5408\u5e76\n\n\u51b2\u7a81\u7684 `pull` \u4f1a\u628a\u4ed3\u5e93\u7559\u5728\u5408\u5e76\u4e2d\u95f4\uff0c\u4e8e\u662f\u63d0\u4ea4\u6309\u94ae\u4e0a\u65b9\u7684\u72b6\u6001\u884c\u4f1a\u5199\u51fa**\u8fdb\u884c\u4e2d\u7684\u64cd\u4f5c**\u5e76\u5e26\u4e0a\u5b83\u7684\u51fa\u53e3\uff1a\n\u56db\u4e2a\u64cd\u4f5c\u90fd\u6709 **Abort**\uff0c\u53ea\u6709\u5e8f\u5217\u7c7b\u7684\u4e09\u4e2a\uff08cherry-pick / revert / rebase\uff09\u6709 **Continue**\u3002\nmerge **\u4e0d\u8fdb\u8fd9\u4e2a\u5217\u8868**\uff1a\u5b83\u6ca1\u6709\u9700\u8981\u7ee7\u7eed\u7684\u534a\u6210\u54c1\u72b6\u6001\uff0c\u4e00\u6b21\u5408\u5e76\u662f\u9760**\u63d0\u4ea4**\u6765\u7ed3\u675f\u7684\u2014\u2014\u6240\u4ee5\u63d2\u4ef6\u4e0d\u7ed9\u5b83 Continue\n\uff08\u987a\u5e26\u8bf4\u660e\uff1a`git merge --continue` \u5728\u7ec8\u7aef\u91cc\u662f\u5b58\u5728\u7684\uff0c\u53ea\u662f\u8fd9\u91cc\u7528\u4e0d\u4e0a\uff0c\u56e0\u6b64\u4e0d\u63d0\u4f9b\uff09\u3002\nContinue \u7528 `core.editor=true` \u8dd1\uff0c\u56e0\u4e3a\u6ca1\u6709\u7ec8\u7aef\u53ef\u4ee5\u5199\u63d0\u4ea4\u4fe1\u606f\uff0c\u5426\u5219 Git \u53ea\u4f1a\u5931\u8d25\u2014\u2014\u7528\u7684\u662f\u8be5\u64cd\u4f5c\u5df2\u7ecf\u8bb0\u5f55\u597d\u7684\u90a3\u6761\u4fe1\u606f\u3002\n\n\u8fd9\u884c\u5728**\u51b2\u7a81\u88ab\u6682\u5b58\u4e4b\u540e**\u4ecd\u7136\u4fdd\u7559\u64cd\u4f5c\u540d\uff0c\u8fd9\u624d\u662f\u91cd\u70b9\uff1a\u89e3\u51b3\u51b2\u7a81\u4f1a\u628a `u` \u884c\u53d8\u6210\u666e\u901a\u7d22\u5f15\u884c\uff0c\n\u4e8e\u662f porcelain \u4e0d\u518d\u63d0\u5b83\u2014\u2014\u800c\u300c\u628a\u6240\u6709\u51b2\u7a81\u90fd\u6682\u5b58\u4e86\u300d\u6b63\u662f `--continue` \u5f00\u59cb\u80fd\u591f\u6210\u529f\u7684\u65f6\u523b\u3002\n\u628a\u68c0\u67e5\u9650\u5236\u5728\u300c\u6709\u51b2\u7a81\u65f6\u300d\u4f1a\u85cf\u8d77\u6765\u63d2\u4ef6\u81ea\u5df1\u521b\u9020\u7684\u90a3\u4e2a\u72b6\u6001\u7684\u552f\u4e00\u51fa\u53e3\uff0c\u6240\u4ee5\u63a2\u9488\u5728**\u6709\u51b2\u7a81 _\u6216_ \u521a\u624d\u53d1\u73b0\u8fc7\u64cd\u4f5c**\u65f6\u90fd\u8fd0\u884c\u3002\n\n\u4e0d\u8ba4\u8bc6\u7684\u64cd\u4f5c\u540d\u4e0d\u4f1a\u88ab\u8fd0\u884c\uff1a\u5f15\u64ce\u53ea\u63a5\u53d7\u5b83\u80fd\u62a5\u51fa\u7684\u90a3\u56db\u4e2a\u540d\u5b57\uff0c\u6240\u4ee5\u4e00\u4e2a\u7578\u5f62\u7684\u8f7d\u8377\u4e0d\u4f1a\u53d8\u6210\u4e00\u4e2a\u4efb\u610f\u7684 `git` \u52a8\u8bcd\u3002\n\n### \u914d\u7f6e\u914d\u65b9\n\n**GitHub\uff0cHTTPS** \u2014\u2014 `gh auth login` \u7136\u540e `gh auth setup-git` \u4f1a\u628a\u52a9\u624b\u5199\u8fdb `~/.gitconfig`\u3002\u4e0d\u9700\u8981\u522b\u7684\u3002\n\n**GitLab\uff08\u4efb\u610f\u4e3b\u673a\uff09\uff0cHTTPS** \u2014\u2014 \u8ba9 Git \u5b58\u4e00\u6b21\uff1a\n\n```bash\ngit config --global credential.helper osxkeychain   # macOS\uff08Linux \u7528 libsecret\uff0c\n                                                    # Windows \u7528 manager\uff09\ngit push            # \u8f93\u4e00\u6b21 token\uff0c\u6b64\u540e\u90fd\u4f1a\u88ab\u5b58\u4e0b\u6765\n```\n\n\u81ea\u5efa GitLab **\u4e0d\u9700\u8981\u4efb\u4f55\u63d2\u4ef6\u4fa7\u914d\u7f6e**\uff0c\u56e0\u4e3a\u7528\u7684\u5c31\u662f\u4f60 shell \u7528\u7684\u90a3\u4e2a\u51ed\u636e\u5e93\u3002\n\n**SSH** \u2014\u2014 \u65e0\u53e3\u4ee4\u7684\u5bc6\u94a5\u3001\u6216\u8005\u53e3\u4ee4\u5b58\u5728 macOS \u94a5\u5319\u4e32\u91cc\uff08`UseKeychain yes`\uff09\u7684\u5bc6\u94a5\uff0c\u53ef\u4ee5\u76f4\u63a5\u7528\u3002\n\u53ea\u6d3b\u5728 `ssh-agent` \u91cc\u7684\u5bc6\u94a5\u4e0d\u884c\uff0c\u56e0\u4e3a\u5bbf\u4e3b\u4e0d\u4f1a\u628a `SSH_AUTH_SOCK` \u4ea4\u7ed9\u63d2\u4ef6\u8fdb\u7a0b\uff1b\u8fd9\u7c7b\u60c5\u51b5\u8bf7\u7528 HTTPS \u8fdc\u7aef\uff0c\u6216\u628a\u5bc6\u94a5\u52a0\u8fdb\u94a5\u5319\u4e32\u3002\n\n> \u591a\u8d26\u53f7\u914d\u7f6e\uff1a\u63d2\u4ef6\u8bfb\u7684\u662f\u4f60\u7684\u51ed\u636e\u52a9\u624b\u4e3a\u8be5 URL \u89e3\u6790\u51fa\u7684\u90a3\u4e2a\u8d26\u53f7\uff0c\u6240\u4ee5\n> `credential.<url>.username` \u548c `includeIf \"gitdir:\u2026\"` \u7684\u89c4\u5219\u5728\u8fd9\u91cc\u548c\u7ec8\u7aef\u91cc\u4e00\u6837\u751f\u6548\u3002\n\n## \u8ba4\u8bc1\n\n**\u63d2\u4ef6\u4e0d\u6301\u6709\u4efb\u4f55\u51ed\u636e\uff0c\u4e5f\u4e0d\u9700\u8981\u3002** \u5b83\u8dd1\u7684\u662f\u7528\u6237\u81ea\u5df1\u7684 `git`\u3001\u5e26\u7684\u662f\u7528\u6237\u81ea\u5df1\u7684 `HOME`\uff0c\n\u4e8e\u662f\u5b83\u7ee7\u627f\u7684\u6b63\u662f\u7ec8\u7aef\u5df2\u7ecf\u5728\u7528\u7684\u90a3\u5957\u4e1c\u897f\uff1a\u540c\u4e00\u4e2a `~/.gitconfig`\u3001\u540c\u4e00\u4e2a\u51ed\u636e\u52a9\u624b\u3001\u540c\u4e00\u4efd `~/.ssh/config` \u4e0e\u5bc6\u94a5\u3002\nshell \u91cc\u4ec0\u4e48\u80fd\u8ba4\u8bc1\u4e00\u6b21 `git push`\uff0c\u8fd9\u91cc\u5c31\u80fd\uff0c\u5728 GitHub\u3001\u81ea\u5efa GitLab \u6216\u4efb\u4f55\u522b\u7684\u5730\u65b9\u2014\u2014**\u6ca1\u6709\u4efb\u4f55\u6309\u4e3b\u673a\u914d\u7f6e\u7684\u4e1c\u897f**\u3002\n\n\u8fd9\u79cd\u7ee7\u627f\u662f\u523b\u610f\u7684\u3002\u63d2\u4ef6\u4e0d\u8be5\u88ab\u6258\u4ed8 token\uff0c\u800c\u4e00\u4efd\u300c\u6309\u4e3b\u673a\u586b\u51ed\u636e\u300d\u7684\u8868\u5355\u4e5f\u53ea\u80fd\u8986\u76d6\u5b83\u8ba4\u8bc6\u7684\u90a3\u4e9b\u4e3b\u673a\u3002\n\n\u63d2\u4ef6\u552f\u4e00\u505a\u4e0d\u5230\u7684\u4e8b\u662f**\u63d0\u95ee**\u3002\u5de5\u5177\u7a97\u53e3\u80cc\u540e\u6ca1\u6709\u7ec8\u7aef\uff0c\u6240\u4ee5\u63d0\u793a\u88ab\u5173\u6389\uff0c\u547d\u4ee4\u4f1a\u7acb\u523b\u5931\u8d25\uff0c\u800c\u4e0d\u662f\u6c38\u8fdc\u6302\u5728\u4e00\u4e2a\u6ca1\u4eba\u80fd\u8f93\u5165\u7684\u5bc6\u7801\u4e0a\u3002\n\u53d1\u751f\u8fd9\u79cd\u60c5\u51b5\u65f6\uff0c\u539f\u59cb\u7684 Git \u9519\u8bef\u4f1a\u8fde\u540c\u300c\u8be5\u600e\u4e48\u529e\u300d\u4e00\u8d77\u663e\u793a\uff08\u89c1\u4e0a\u4e00\u8282\u7684\u8868\uff09\u3002\n\n## \u751f\u6210\u63d0\u4ea4\u4fe1\u606f\n\n\u63d0\u4ea4\u4fe1\u606f\u6846\u65c1\u8fb9\u7684\u95ea\u5149\u6309\u94ae\u4f1a\u66ff\u4f60\u8d77\u8349\u4fe1\u606f\u3002\u5b83\u901a\u8fc7 `pi.agent.complete` \u627e**\u5bbf\u4e3b**\u7684\u6a21\u578b\uff0c\n\u6240\u4ee5\u7528\u7684\u5c31\u662f\u4f60**\u5df2\u7ecf**\u914d\u597d\u7684 provider\u3001\u6a21\u578b\u4e0e\u989d\u5ea6\u2014\u2014\u63d2\u4ef6\u4e0d\u6301\u6709 API key\uff0c\u4e5f\u4e0d\u65b0\u589e\u4efb\u4f55\u8d26\u53f7\u3002\n\n\u5b83\u53d1\u51fa\u53bb\u7684\u662f\u4e09\u6837\u4e1c\u897f\uff1a\u53d8\u66f4\u672c\u8eab\u3001\u4ed3\u5e93\u8fd1\u671f\u63d0\u4ea4\u7684**subject \u4e0e\u6b63\u6587\u6837\u672c**\uff0c\u4ee5\u53ca\u8fd9\u4efd\u6837\u672c\u6d4b\u51fa\u6765\u7684\u4e1c\u897f\u2014\u2014\n\u63d0\u4ea4\u8bed\u8a00\u3001subject \u662f\u5426\u5e26 `type(scope):` \u524d\u7f00\u3001\u6709\u6ca1\u6709\u4eba\u5199\u6b63\u6587\u3002\u6837\u672c\u53d6**\u6700\u8fd1 40 \u6761**\u63d0\u4ea4\u3002\ndiff \u622a\u65ad\u5728 **12 000 \u5b57\u7b26**\uff1a\u8fd9\u662f\u63d0\u793a\u8bcd\uff0c\u4e0d\u662f\u5907\u4efd\u3002\n\n**\u8bed\u8a00\u3002** \u7531\u95ea\u5149\u6309\u94ae\u65c1\u7684\u7bad\u5934\u83dc\u5355\u51b3\u5b9a\uff0c\u56e0\u4e3a\u300c\u7167\u7740\u4ed3\u5e93\u5199\u300d\u4e0d\u662f\u4e00\u6761\u8bed\u8a00\u7b56\u7565\uff1a\n\u4e00\u4efd\u5168\u82f1\u6587\u7684\u5386\u53f2\u4f1a\u8ba9\u4e2d\u6587\u8bfb\u8005\u4e5f\u62ff\u5230\u82f1\u6587\u8349\u7a3f\u3002\u9009\u9879\u662f\n**\u8ddf\u968f\u4ed3\u5e93\u5386\u53f2**\uff08\u9ed8\u8ba4\uff1a\u7528\u5b9e\u6d4b\u8bed\u8a00\uff0c\u6ca1\u6709\u5386\u53f2\u65f6\u56de\u9000\u5230\u754c\u9762\u8bed\u8a00\uff09\u3001**\u7b80\u4f53\u4e2d\u6587**\u3001**English**\u3002\n\u65e0\u8bba\u54ea\u79cd\uff0c`type` \u4e0e `scope` \u90fd\u4fdd\u6301 ASCII\uff0c\u5c31\u50cf Conventional Commits \u7684\u5404\u79cd\u8bed\u8a00\u8bd1\u672c\u505a\u7684\u90a3\u6837\u2014\u2014\n`feat(\u767b\u5f55): \u652f\u6301\u77ed\u4fe1\u9a8c\u8bc1\u7801`\u3002\n\n\u63d0\u793a\u8bcd\u6309 Git \u81ea\u5df1\u7684\u60ef\u4f8b\uff08git-commit(1)\u3001Tim Pope\u3001Chris Beams\u3001Conventional Commits 1.0.0\uff09\u5199\u660e\u786c\u6027\u89c4\u5219\uff1a\nsubject \u540e\u4e00\u4e2a\u7a7a\u884c\u3001\u76ee\u6807 50 \u5b57\u7b26\u4e0a\u9650 72\uff08\u4e2d\u6587\u7ea6 25 \u5b57\uff0c\u56e0\u4e3a CJK \u5b57\u5f62\u5927\u81f4\u662f\u4e24\u500d\u5bbd\uff09\u3001\n\u7ed3\u5c3e\u4e0d\u52a0\u53e5\u53f7\u3001\u82f1\u6587 subject \u7528\u7948\u4f7f\u53e5\u3001\u6b63\u6587\u8bf4 **why** \u800c\u4e0d\u662f\u590d\u8ff0 diff\u3001\n`BREAKING CHANGE:` \u662f\u552f\u4e00\u5141\u8bb8\u5b83\u81ea\u884c\u8ffd\u52a0\u7684 trailer\u3002\n\n**\u5f62\u72b6\u662f\u88ab\u5f3a\u5236\u7684\uff0c\u4e0d\u662f\u88ab\u8bf7\u6c42\u7684\u3002** \u63d0\u793a\u8bcd\u4e0d\u80fd\u662f\u683c\u5f0f\u7684\u6700\u540e\u4e00\u9053\u9632\u7ebf\uff0c\u56e0\u4e3a\u8981\u547d\u7684\u90a3\u4e2a\u5931\u8d25\u5bf9\u5199\u63d0\u793a\u8bcd\u7684\u4eba\u662f\u9690\u5f62\u7684\uff1a\nGit \u628a**\u7b2c\u4e00\u4e2a\u7a7a\u884c\u4e4b\u524d\u7684\u6bcf\u4e00\u884c**\u90fd\u5f53\u6210\u6807\u9898\uff0c\u6240\u4ee5\u4e00\u4e2a\u628a\u6b63\u6587\u7d27\u8d34\u5728 subject \u4e0b\u9762\u7684\u56de\u590d**\u6839\u672c\u6ca1\u6709\u6b63\u6587**\u2014\u2014\n\u5b83\u662f\u4e00\u4e2a\u5de8\u5927\u7684 subject\uff0c\u800c\u8fd9\u6b63\u662f\u8bfb\u8005\u53e3\u4e2d\u7684\u300c\u63d0\u4ea4\u4fe1\u606f\u4e0d\u89c4\u8303\u300d\u3002\u6240\u4ee5\u56de\u590d\u5728\u8fdb\u5165\u4fe1\u606f\u6846\u4e4b\u524d\u4f1a\u8fc7\u4e00\u904d `formatCommitMessage`\uff1a\n\n- \u5148\u5265\u6389 ``` \u4ee3\u7801\u56f4\u680f\u548c `commit message:` / `\u63d0\u4ea4\u4fe1\u606f:` \u8fd9\u7c7b\u524d\u7f00\uff08\u6a21\u578b\u5f88\u7231\u52a0\uff09\uff1b\n- \u4fdd\u8bc1 subject \u662f\u5355\u884c\uff0c\u5e76\u4e14\u65e0\u8bba\u6a21\u578b\u600e\u4e48\u6392\uff0c\u540e\u9762\u90fd\u6070\u597d\u4e00\u4e2a\u7a7a\u884c\uff1b\n- \u8fc7\u957f\u7684 subject \u4f1a\u628a\u5c3e\u5df4**\u5728\u4ece\u53e5\u8fb9\u754c**\u632a\u8fdb\u6b63\u6587\uff0c\u800c\u4e0d\u662f\u622a\u65ad\uff0c\u4e8e\u662f\u6a21\u578b\u4ece diff \u91cc\u8bfb\u5230\u7684\u4fe1\u606f\u4e0d\u4f1a\u4e22\uff1b\n- \u628a\u6b63\u6587\u6298\u5230 Git \u7684 72 \u5217\uff0cCJK \u5b57\u5f62\u6309\u7ec8\u7aef\u90a3\u6837\u7b97\u4e24\u5217\uff1b\n- \u628a\u5206\u53f7\u4e32\u8d77\u6765\u7684\u4ece\u53e5\u62c6\u6210\u300c\u4e00\u4e2a\u60f3\u6cd5\u4e00\u6761\u300d\u7684\u9879\u76ee\u7b26\u53f7\uff1b\n- \u5f53 `,` `;` \u5939\u5728\u4e2d\u6587\u5b57\u7b26\u4e4b\u95f4\u65f6\u89c4\u8303\u6210 `\uff0c` `\uff1b`\u2014\u2014\u800c ASCII \u539f\u6837\u4fdd\u7559\uff0c\u6240\u4ee5 `feat(a,b): \u2026` \u4e0d\u4f1a\u88ab\u78b0\u3002\n\n\u5b83\u4e0d\u6539\u5199\u4efb\u4f55\u63aa\u8f9e\uff0c\u800c\u4e14\u662f**\u5e42\u7b49**\u7684\uff1a\u5f62\u72b6\u5df2\u7ecf\u6b63\u786e\u7684\u8349\u7a3f\u4f1a\u539f\u6837\u901a\u8fc7\u3002\n\n**\u8303\u56f4\u3002** Changes \u5217\u8868\u91cc\u6709\u9009\u4e2d\u7684\u6587\u4ef6\u65f6\uff0c\u5b83\u63cf\u8ff0*\u90a3\u4e2a\u6587\u4ef6*\uff1b\u6ca1\u9009\u4e2d\u65f6\u63cf\u8ff0*\u6240\u6709\u5df2\u6682\u5b58\u5185\u5bb9*\u3002\n\u7528\u4e86\u54ea\u4e00\u79cd\u4f1a\u5728\u63d0\u793a\u6761\u91cc\u8bf4\u660e\uff0c\u6240\u4ee5\u8303\u56f4\u6c38\u8fdc\u4e0d\u662f\u731c\u7684\u3002\u4e24\u8005\u90fd\u4e0d\u5b58\u5728\u65f6\u5b83\u4f1a\u76f4\u8bf4\uff0c\u800c\u4e0d\u662f\u7f16\u4e00\u6761\u4fe1\u606f\u51fa\u6765\u3002\n\n**\u8349\u7a3f\u5c31\u662f\u8349\u7a3f\u3002** \u5b83\u843d\u5728\u4fe1\u606f\u6846\u91cc\uff0c\u53ef\u4ee5\u7167\u5e38\u7f16\u8f91\u3002\u5982\u679c\u4f60\u5df2\u7ecf\u5199\u4e86\u5185\u5bb9\uff0c\u5b83\u4f1a\u5148\u95ee\u4e00\u53e5\u518d\u66ff\u6362\u3002\n\n\u6743\u9650\u662f `models.list`\uff08\u63d0\u4f9b\u6a21\u578b\u83dc\u5355\uff09\u4e0e `agent.complete`\uff08\u9ad8\u98ce\u9669\u2014\u2014\u4f1a\u82b1\u4f60\u7684\u6a21\u578b\u989d\u5ea6\uff09\u3002\n\u5bbf\u4e3b\u628a\u8fd9\u4ef6\u4e8b\u9650\u6d41\u5230**\u6bcf\u5206\u949f 8 \u6b21**\uff1b\u63d2\u4ef6\u628a\u8fd9\u4e2a\u9650\u5236\u62a5\u51fa\u6765\uff0c\u800c\u4e0d\u662f\u76f2\u76ee\u91cd\u8bd5\u3002\n\n## \u914d\u8272\n\n\u6d45\u8272\u914d\u8272\u5927\u90e8\u5206\u6284\u81ea JetBrains \u81ea\u5df1\u7684\u6587\u6863\uff1a\u65b0\u589e\u884c `#c6e4c1`\u3001\u4fee\u6539\u884c `#e9eff9`\u3001\u53d8\u5316\u7247\u6bb5\u84dd `#c6d7f0`\u3001\n\u9762\u677f\u5206\u9694\u7ebf\u3001\u7f16\u8f91\u5668\u8fb9\u680f\u7684\u53d8\u66f4\u6761\uff0c\u4ee5\u53ca\u6587\u4ef6\u72b6\u6001\u8272\uff08\u65b0\u589e `#0a7700`\u3001\u4fee\u6539 `#0032a0`\u3001\u672a\u7248\u672c\u63a7\u5236 `#993300` \u7b49\uff09\u3002\n\u4f59\u4e0b\u7684\u754c\u9762\u9970\u4ef6\u7167\u7740 IntelliJ Light \u4e0e Darcula \u7684\u6837\u5b50\u6765\uff0c\u90a3\u4e9b\u5730\u65b9 JetBrains \u6ca1\u6709\u516c\u5e03\u6570\u503c\u3002\n\n**\u4e00\u4e2a\u523b\u610f\u7684\u504f\u79bb\uff0c\u4e24\u5957\u4e3b\u9898\u90fd\u6709\uff1a** JetBrains \u628a\u5220\u9664\u884c\u8bb0\u6210\u4e00\u4e2a\u4e2d\u6027\u7070\uff08\u6d45\u8272 `#D7D6D6`\uff09\u3002\n\u7d27\u6328\u7740\u7eff\u8272\u7684\u65b0\u589e\uff0c\u90a3\u4e2a\u7070\u8bfb\u8d77\u6765\u50cf*\u892a\u8272*\u800c\u4e0d\u662f*\u88ab\u5220\u6389*\uff0c\u6240\u4ee5\u5220\u9664\u7528\u67d4\u548c\u7684\u7ea2\u8272\u2014\u2014\u6d45\u8272 `#f7d2d2`\uff0c\u6697\u8272 `#452a2e`\u3002\n\n**\u6697\u8272 diff \u914d\u8272\u662f\u8c03\u51fa\u6765\u7684\uff0c\u4e0d\u662f\u6284\u7684\u3002** \u6587\u6863\u91cc\u7684\u6697\u8272\u503c\u7ed9\u51fa\u4e00\u79cd\u504f\u68d5\u7684\u884c\u5e95\u8272\uff0c\u800c\u4e00\u5757\u94a2\u84dd\u8272\u7684\u7247\u6bb5\u8865\u4e01\u538b\u5728\u6697\u7ea2\u884c\u4e0a\u4f1a\u53d8\u6210\u4e00\u56e2\u6ce5\u3002\n\u6240\u4ee5\u6697\u8272\u5e26\u81ea\u5df1\u7684\u4e00\u5957\u503c\uff0c\u800c\u4e14\u53d8\u5316\u7247\u6bb5\u7684\u989c\u8272\u8ddf\u7740\u5b83\u6240\u5728\u7684\u884c\u8d70\uff1a\u5220\u9664\u884c\u4e0a\u66f4\u7ea2\uff0c\u65b0\u589e\u884c\u4e0a\u66f4\u7eff\u3002\n`--diff-fragment-deleted` / `--diff-fragment-inserted` \u662f\u4e24\u4e2a\u8986\u76d6\u70b9\uff08\u53ea\u5728\u6697\u8272\u4e3b\u9898\u91cc\u5b9a\u4e49\uff09\uff1b\u6d45\u8272\u4e3b\u9898\u4e0d\u8bbe\u5b83\u4eec\uff0c\u4fdd\u7559 JetBrains \u7684\u84dd\u3002\n\n\u4e3b\u9898\u5207\u6362\u8d70 `document.documentElement.dataset.theme`\uff0c\u7531 `app.getAppearance` \u521d\u59cb\u5316\u3001\u5e76\u8ba2\u9605 `appearance:changed` \u8ddf\u968f\u5bbf\u4e3b\u3002\n\u5168\u90e8\u90fd\u5728 `src/theme.css` \u9876\u90e8\u7684 CSS \u53d8\u91cf\u91cc\uff0c\u6240\u4ee5\u91cd\u65b0\u8c03\u4e00\u5904\u5c31\u662f\u6539\u4e00\u884c\u3002\n\n## \u6d4b\u8bd5\u4e0e\u5de5\u5177\n\n### \u5f15\u64ce\u56de\u5f52\n\n`tools/harness.mjs` \u5bf9\u7740**\u5f53\u573a\u9020\u51fa\u6765\u7684\u771f\u5b9e\u4ed3\u5e93**\u9a71\u52a8\u5f15\u64ce\u2014\u2014\u4e00\u4e2a\u88f8\u8fdc\u7aef\u3001\u4e00\u4e2a\u76f4\u63a5\u521d\u59cb\u5316\u7684\u5de5\u4f5c\u526f\u672c\u52a0\u4e00\u4e2a\u771f\u6b63\u7684 `git clone`\u3001\n\u4e00\u6b21\u771f\u5b9e\u7684\u53cc\u4eba\u5206\u53c9\u3001\u4e00\u4e2a\u5185\u542b\u5b50\u6a21\u5757\u7684\u5b50\u6a21\u5757\u2014\u2014\n\u5e76\u65ad\u8a00\u90a3\u4e9b\u300c\u62d2\u7edd\u300d\u6240\u4f9d\u8d56\u7684\u884c\u4e3a\uff1a\u5206\u7c7b\u3001\u6d88\u606f\u3001\u8be6\u60c5\u3001\u5148\u9648\u65e7\u518d fetch \u7684 ahead/behind \u6807\u7b7e\u3001\u51b2\u7a81\u7684\u5408\u5e76\u53ca\u5176\u51fa\u53e3\u3001\n\u4e00\u6b21\u63a8\u9001\u843d\u5230\u54ea\u91cc\uff08\u4ee5\u53ca\u88ab\u62d2\u7edd\u843d\u5230\u54ea\u91cc\uff09\u3001\u9648\u65e7\u7684 lease \u6c38\u8fdc\u4e0d\u4f1a\u8986\u76d6\u540c\u4e8b\u7684\u5de5\u4f5c\uff1b\n\u6700\u540e\u51e0\u6bb5\u8fd8\u5305\u62ec\uff1a\u5d4c\u5957\u5728\u53e6\u4e00\u4e2a\u4ed3\u5e93\u91cc\u7684\u4ed3\u5e93\u4f1a\u88ab\u5217\u51fa\u3001\u53ef\u4ee5\u88ab\u9009\u4e2d\u3001\u53ef\u4ee5\u5728\u91cc\u9762\u63d0\u4ea4\u3001\u626b\u63cf\u80fd\u770b\u591a\u8fdc\u3001\n`.gitmodules` \u7684\u58f0\u660e\u80fd\u63a8\u7ffb\u4ec0\u4e48\uff0c\u4ee5\u53ca\u4e00\u4efd\u6765\u81ea\u300c\u89c6\u56fe\u5df2\u7ecf\u79bb\u5f00\u7684\u4ed3\u5e93\u300d\u7684\u8865\u4e01\u4f1a\u88ab\u62d2\u7edd\u800c\u4e0d\u662f\u88ab\u5e94\u7528\u3002\n\n```bash\nnode tools/harness.mjs        # \u5b9e\u6d4b\u8f93\u51fa\uff1a136/136 passed\uff0c\u5168\u90e8\u5bf9\u7740\u771f\u5b9e git\nnode tools/harness.mjs --keep # \u4fdd\u7559\u4e34\u65f6\u4ed3\u5e93\uff0c\u4fbf\u4e8e\u4e8b\u540e\u7ffb\u770b\n```\n\n`PLUGIN_DIR` \u53ef\u4ee5\u628a harness \u6307\u5411\u53e6\u4e00\u4efd\u68c0\u51fa\u3002\n\n### \u51b3\u7b56\u7b14\u8bb0\u95e8\u7981\n\n`.agents/notes/` \u4e0b\u7684\u7b14\u8bb0\u627f\u8f7d\u300c\u4ee3\u7801\u672c\u8eab\u5e26\u4e0d\u52a8\u7684\u51b3\u5b9a\u300d\u2014\u2014\u4e3a\u4ec0\u4e48\u662f\u8fd9\u4e2a\u5f62\u72b6\uff0c\u4ee5\u53ca\u5b83\u6362\u6389\u4e86\u4ec0\u4e48\u3002\n\u4e00\u7bc7\u6ca1\u4eba\u80fd\u627e\u5230\u7684\u7b14\u8bb0\u3001\u6216\u8005\u5934\u5757\u6f02\u79fb\u4e86\u7684\u7b14\u8bb0\uff0c\u662f\u4e0b\u4e00\u4e2a\u8bfb\u8005\uff08\u4eba\u6216 agent\uff09\u4e0d\u4f1a\u4fe1\u4efb\u7684\u7b14\u8bb0\uff0c\n\u6240\u4ee5\u5f62\u72b6\u662f**\u5f3a\u5236**\u7684\u800c\u4e0d\u662f\u7ea6\u5b9a\u4fd7\u6210\u7684\uff1a\n\n```bash\nnode tools/notes.mjs        # \u4e24\u9879\u6821\u9a8c\uff1a\u76ee\u5f55/\u5206\u7c7b/\u76f8\u5bf9\u94fe\u63a5 + \u5934\u5757/Status/\u5fc5\u9700\u7ae0\u8282\n```\n\n\u4e24\u4e2a\u6821\u9a8c\u5668\u9010\u5b57\u8282 vendored \u5728 `tools/agent-notes/` \u4e0b\uff0c\u6240\u4ee5**\u65e0\u8bba\u673a\u5668\u4e0a\u88c5\u6ca1\u88c5\u90a3\u4e2a skill \u90fd\u80fd\u8dd1**\uff1b\n\u5b83\u4eec\u4e5f\u7531 `node tools/harness.mjs` \u4e00\u8d77\u65ad\u8a00\uff08136 \u6761\u91cc\u6709 2 \u6761\u6765\u81ea\u8fd9\u91cc\uff09\u3002\n\u672c\u673a Node 26 \u80fd\u76f4\u63a5\u6267\u884c `.ts`\uff0c\u4e0d\u9700\u8981 tsx \u6216\u4efb\u4f55 flag\u3002\n\n### \u4e0d\u5f00 GUI \u9a71\u52a8\u5f15\u64ce\n\n`tools/drive.mjs` \u8c03\u7528\u7684\u662f\u89c6\u56fe\u8c03\u7528**\u540c\u4e00\u6279** `onPanelInvoke` \u901a\u9053\uff0c\u53ea\u662f\u7ed9\u4e86\u4e2a\u6869 `pi` \u5168\u5c40\uff0c\n\u6240\u4ee5\u4e00\u6761\u6d41\u7a0b\u53ef\u4ee5\u4ece\u7ec8\u7aef\u6216\u6d4b\u8bd5\u811a\u672c\u91cc\u8dd1\u901a\uff1a\n\n```bash\nnode tools/drive.mjs /path/to/repo git/repo\nnode tools/drive.mjs /path/to/repo git/stage '{\"paths\":[\"src/app.js\"]}'\nnode tools/drive.mjs /path/to/repo git/commit '{\"message\":\"Fix the thing\"}'\n```\n\n\u7528**\u524a\u51cf\u8fc7\u7684\u73af\u5883**\u8dd1\u5b83\uff0c\u624d\u548c\u771f\u5b9e\u63d2\u4ef6\u8fdb\u7a0b\u62ff\u5230\u7684\u4e1c\u897f\u4e00\u81f4\u2014\u2014`PATH`\u3001`LANG` \u548c\u4e34\u65f6\u53d8\u91cf\uff0c\u4f46**\u6ca1\u6709 `HOME`**\uff1a\n\n```bash\nenv -i PATH=\"$PATH\" TMPDIR=\"${TMPDIR:-/tmp}\" node tools/drive.mjs . git/repo\n```\n\n\u8fd9\u4e48\u8dd1\u7b49\u4e8e\u590d\u73b0\u4e86\u771f\u5b9e\u63d2\u4ef6\u8fdb\u7a0b\u7684\u73af\u5883\uff0c\u6240\u4ee5\u63a8\u9001\u8def\u5f84\u4e5f\u80fd\u5728**\u4e0d\u52a0\u7ec8\u7aef**\u7684\u60c5\u51b5\u4e0b\u5bf9\u7740\u4efb\u610f\u8fdc\u7aef\u8bd5\u2014\u2014\n\uff08\u6ce8\u610f harness \u91cc\u5168\u90e8\u8fdc\u7aef\u90fd\u662f\u672c\u5730\u88f8\u4ed3\uff0c\u6ca1\u6709\u771f\u7684\u5f80 HTTPS \u8fdc\u7aef\u63a8\u8fc7\uff1b\u8981\u9a8c\u8bc1\u771f\u5b9e\u6258\u7ba1\uff0c\u8bf7\u81ea\u5df1\u6311\u4e00\u4e2a\u8fdc\u7aef\u8dd1\u4e0a\u9762\u8fd9\u6761\u547d\u4ee4\u3002\uff09\n\n\u6a21\u578b\u76f8\u5173\u7684\u4e24\u4e2a\u901a\u9053\u6709\u6869\uff1a`PIG_FAKE_MODELS`\uff08\u503c `denied` \u4f1a\u8fd4\u56de `PERMISSION_DENIED`\uff09\u3001\n`PIG_FAKE_COMPLETE`\uff08`RATE_LIMITED` / `error:\u2026`\uff09\u3001`PIG_SHOW_PROMPT=1` \u4f1a\u628a\u771f\u6b63\u53d1\u51fa\u53bb\u7684\u63d0\u793a\u8bcd\u6253\u51fa\u6765\u3002\n\n### \u6ca1\u6709\u5bbf\u4e3b\u4e5f\u80fd\u770b\u89c6\u56fe\n\n`tools/smoke.mjs` \u628a\u6784\u5efa\u597d\u7684\u89c6\u56fe\u914d\u4e0a\u6869 `window.pluginBridge` \u5199\u5230 `.smoke/`\uff0c\n\u4e8e\u662f\u90a3\u4e9b\u96be\u4ee5\u6309\u9700\u5236\u9020\u7684\u72b6\u6001\uff08\u4ed3\u5e93\u5361\u5728\u5408\u5e76\u4e2d\u3001\u4e00\u6b21\u88ab\u8fdc\u7aef\u62d2\u7edd\u7684\u63a8\u9001\u3001\u4e00\u4e2a\u5df2\u68c0\u51fa\u7684\u5b50\u6a21\u5757\u4f5c\u4e3a\u5f53\u524d\u4ed3\u5e93\uff09\u53ef\u4ee5\u6e32\u67d3\u51fa\u6765\u770b\uff1a\n\n```bash\nnode tools/build.mjs && node tools/smoke.mjs commit zh-CN\n```\n\n\u89c6\u56fe\u540d\u4e0e\u8bed\u8a00\u90fd\u662f\u4f4d\u7f6e\u53c2\u6570\uff08\u4ea7\u7269\u662f `.smoke/<\u89c6\u56fe>-<\u8bed\u8a00>.html`\uff09\u3002\u6869\u5728\u5de5\u5177\u91cc\uff0c\u4e0d\u5728\u63d2\u4ef6\u91cc\uff0c`.smoke/` \u5df2 gitignore\u3002\n\n## \u5f00\u53d1\u4e0e\u6253\u5305\n\n1. \u6269\u5c55\u9875\u53f3\u4e0a\u89d2 **`\u00b7\u00b7\u00b7` \u2192 \u300c\u52a0\u8f7d\u672c\u5730\u63d2\u4ef6\u300d** \u2192 \u9009\u8fd9\u4e2a\u76ee\u5f55\u3002\n2. \u6539 `src/`\uff0c\u8dd1 `node tools/build.mjs`\uff0c\u89c6\u56fe\u4f1a\u70ed\u91cd\u8f7d\u3002\n3. \u7ec4\u88c5\u5e72\u51c0\u7684\u53d1\u5e03\u76ee\u5f55\u518d\u6253 Pack\uff1a`node tools/build.mjs && node tools/make-publish-dir.mjs`\uff0c\u7136\u540e\u5bf9 `dist-publish/io.github.liushunqiu.pi-idea-git/` \u8dd1 `PluginCheck` / `PluginPack`\uff08\u4ea7\u7269\u5728\u8be5\u76ee\u5f55\u7684 `dist/*.piplug`\uff0c8 \u4e2a\u6587\u4ef6\u7ea6 0.9MB\uff09\u3002**\u4e0d\u8981\u76f4\u63a5\u5bf9\u4ed3\u5e93\u6839\u6253 Pack**\u2014\u2014\u5b83\u4f1a\u628a `.smoke/`\u3001`.memories/`\u3001`tools/`\u3001`src/` \u7b49\u5f00\u53d1\u6587\u4ef6\u4e00\u8d77\u6253\u8fdb\u53bb\uff08`PluginPack` \u4e0d\u8bfb `.gitignore`\uff0c\u4e14\u6ca1\u6709\u6392\u9664\u6587\u4ef6\u673a\u5236\uff0c\u5b9e\u6d4b 2.1MB / 46 \u6587\u4ef6\uff09\u3002\n   \u4ece\u8001 ID `local.pi-idea-git` \u5347\u7ea7\u4e0a\u6765\u7684\u7528\u6237\uff0c\u63d0\u4ea4\u4fe1\u606f\u5386\u53f2\u4e0e\u89c6\u56fe\u9009\u9879\u4e0d\u4f1a\u8fc1\u79fb\uff08\u63d2\u4ef6\u6570\u636e\u76ee\u5f55\u6309 ID \u9694\u79bb\uff09\u3002\n\n\u8d28\u91cf\u5e95\u7ebf\uff08\u6539\u5b8c\u4ee3\u7801\u8fc7\u4e00\u904d\uff09\uff1a`node --check` \u6bcf\u4e2a `src/*.js`\u3001`PluginCheck` \u65e0 error\u3001`node tools/harness.mjs` \u5168\u7eff\u3002\n\n> **\u6269\u5927 `permissions` \u9700\u8981\u6bd4\u300cReload\u300d\u6309\u94ae\u66f4\u957f\u7684\u8def\u5f84\u3002**\n> \u4fdd\u5b58\u89e6\u53d1\u7684\u70ed\u91cd\u8f7d\u4f1a\u62d2\u7edd\u4e00\u4e2a\u300c\u8981\u7684\u6743\u9650\u591a\u4e8e\u8fd0\u884c\u5b9e\u4f8b\u5df2\u83b7\u6279\u7684\u300d\u6e05\u5355\u3002\u5361\u7247\u4e0a\u7684 **Reload** \u6309\u94ae\u4e5f\u4e0d\u591f\uff1a\n> \u5b83\u628a\u65b0\u6e05\u5355\u4e0e `registry.json` \u91cc\u8bb0\u5f55\u7684\u6743\u9650\u6c42\u4ea4\u96c6\uff0c**\u9759\u9ed8\u4e22\u6389\u65b0\u589e\u7684\u90a3\u4e9b\uff0c\u5374\u7167\u6837\u62a5\u544a\u6210\u529f**\u3002\n> \u53ea\u6709 **`\u00b7\u00b7\u00b7` \u2192 \u300c\u52a0\u8f7d\u672c\u5730\u63d2\u4ef6\u300d**\uff08\u91cd\u65b0\u9009\u4e00\u6b21\u76ee\u5f55\uff09\u4f1a\u91cd\u8bfb\u6e05\u5355\u5e76\u91cd\u65b0\u5f81\u6c42\u540c\u610f\u3002\n\n\u5bbf\u4e3b\u7248\u672c\u8981\u6c42\u5199\u5728\u540c\u4e00\u4efd\u6e05\u5355\u91cc\uff1a`engines.piDesktop >= 0.8.0`\u3002\n\n## \u5df2\u77e5\u7f3a\u53e3\n\n\u8bda\u5b9e\u6e05\u5355\u2014\u2014\u8fd9\u4e9b\u662f\u5f53\u524d\u5b9e\u73b0\u91cc\u786e\u5b9e\u5b58\u5728\u3001\u4e14\u7528\u6237\u53ef\u80fd\u649e\u4e0a\u7684\u9650\u5236\uff1a\n\n - **\u6587\u672c\u641c\u7d22\u662f\u672c\u5730\u8fc7\u6ee4**\uff1a\u5de5\u5177\u680f\u641c\u7d22\u6846\u53ea\u5728\u5df2\u53d6\u56de\u7684 200 \u6761\u5185\u505a substring \u5339\u914d\uff1b\u8981\u6309\u63d0\u4ea4\u4fe1\u606f\u5728\u670d\u52a1\u7aef\u67e5\uff0c\u7528\u5206\u652f\uff0f\u7528\u6237\uff0f\u65e5\u671f\uff0f\u8def\u5f84\u8fc7\u6ee4\uff08\u5b83\u4eec\u90fd\u8fdb `git log` \u53c2\u6570\uff09\u3002\n- **Console \u4e0d\u662f\u300c\u6bcf\u6761\u547d\u4ee4\u90fd\u8bb0\u300d**\uff1a\u63a2\u6d4b\u578b\u547d\u4ee4\u6210\u529f\u65f6\u4e0d\u8bb0\u5f55\uff08\u89c1\u300c\u5f15\u64ce\u8bbe\u8ba1\u300d\uff09\uff0c\u5931\u8d25\u65f6 short/detail \u90fd\u6709\u957f\u5ea6\u4e0a\u9650\u3002\n- **hunk \u7ea7\u64cd\u4f5c\u7684\u9002\u7528\u9762**\uff1a`Ignore whitespaces` \u6253\u5f00\u65f6\u7981\u7528\uff0c\u672a\u8ddf\u8e2a\u6587\u4ef6\u7981\u7528\uff08\u6574\u6587\u4ef6 `Add` \u4ecd\u53ef\u7528\uff09\u3002\n- **`Edit Commit Message` \u53ea\u5bf9 HEAD \u5f00\u653e**\u3002\n- **Commit \u89c6\u56fe\u6587\u4ef6\u83dc\u5355\u7684\u590d\u5236\u9879**\uff1a\u6709\u63d0\u4ea4\u65f6\u663e\u793a\u300cCopy Revision Number\u300d\u5e76\u590d\u5236 HEAD\uff08\u4e0e Log \u89c6\u56fe\u4e00\u81f4\uff09\uff0c\u5c1a\u65e0\u63d0\u4ea4\u65f6\u663e\u793a\u300c\u590d\u5236\u8def\u5f84/Copy Path\u300d\u5e76\u590d\u5236\u6587\u4ef6\u8def\u5f84\u3002\n- **\u4e24\u5904\u300c\u56de\u6eda\u300d\u540c\u540d\u4e0d\u540c\u4e49**\uff1a\u63d0\u4ea4\u4e0b\u62c9\u91cc\u7684\u300c\u56de\u6eda\u300d\u628a\u5df2\u6682\u5b58\u5185\u5bb9\u79fb\u51fa\u7d22\u5f15\uff08`git/unstage`\uff09\uff0c\u6587\u4ef6\u53f3\u952e\u91cc\u7684\u300c\u56de\u6eda\u300d\u4f1a**\u4e22\u5f03\u6539\u52a8**\uff08`git/discard`\uff0c\u672a\u8ddf\u8e2a\u6587\u4ef6\u76f4\u63a5\u5220\u9664\uff09\u3002\u540c\u540d\uff0c\u4f46\u5371\u9669\u7b49\u7ea7\u4e0d\u540c\u2014\u2014\u6309\u4e0b\u53bb\u4e4b\u524d\u5148\u770b\u5b83\u95ee\u7684\u662f\u4ec0\u4e48\u3002\n- **\u751f\u6210\u7684 HTML \u56fa\u5b9a `lang=\"en\"`**\uff0c\u4e0e\u754c\u9762\u8bed\u8a00\u65e0\u5173\u3002\n- **\u6267\u884c\u8fb9\u754c**\uff1a\u5355\u6761\u547d\u4ee4 25 \u79d2\u540e\u88ab\u6740\uff1bConsole \u53ea\u7559\u6700\u8fd1 200 \u6761\u3001\u65e5\u5fd7\u4e00\u6b21\u6700\u591a\u53d6 500 \u6761\u3001\u9519\u8bef\u8be6\u60c5\u4e0e Console \u7684\u6bcf\u6761\u8f93\u51fa\u90fd\u622a\u5230 4000 \u5b57\u7b26\u2014\u2014\u8fd9\u4e9b\u622a\u65ad\u662f\u9759\u9ed8\u7684\u3002\u552f\u4e00\u4f1a**\u62a5\u51fa\u6765**\u7684\u662f stdout \u8d85\u8fc7 8 MiB\uff1a\u90a3\u6761\u547d\u4ee4\u88ab\u6740\u6b7b\u5e76\u62a5 `Git output exceeded the size limit.`\uff08stderr \u8d85\u9650\u5219\u662f\u9759\u9ed8\u505c\u6b62\u6536\u96c6\uff09\u3002\n- **\u5bbf\u4e3b\u8d85\u65f6**\uff1a\u4efb\u4f55\u4e00\u6b21\u9762\u677f\u8c03\u7528\u8d85\u8fc7 30 \u79d2\uff0c\u90fd\u4f1a\u4ee5\u5bbf\u4e3b\u4fa7\u8d85\u65f6\u7684\u5f62\u5f0f\u5931\u8d25\uff1b\u5f15\u64ce\u7684 25 \u79d2\u4e0a\u9650\u5c31\u662f\u4e3a\u4e86\u8ba9\u5931\u8d25\u5148\u53d1\u751f\u5728 Git \u8fd9\u4e00\u4fa7\u3002\n- **\u6d4b\u8bd5\u4e0d\u8986\u76d6\u771f\u5b9e\u5bbf\u4e3b**\uff1aharness \u4e0e smoke \u7528\u7684\u662f\u6869\uff0c`PluginCheck` \u53ea\u770b `main.js`\uff08\u4e8e\u662f\u89c6\u56fe\u7ecf\u6865\u8c03\u7528\u7684\u6743\u9650\u88ab\u8bef\u62a5\u4e3a unused\uff09\u3002\n\n## \u8bb0\u5fc6\u4e0e\u51b3\u7b56\u7b14\u8bb0\n\n\u4ed3\u5e93\u91cc\u4e24\u7c7b\u7b14\u8bb0\u90fd\u662f\u7eaf Markdown\uff0c\u968f\u5305\u4e00\u8d77\u8d70\uff1a\n\n- `.memories/` \u2014\u2014 \u6392\u67e5\u8fc7\u7a0b\u4e0e\u8fd0\u884c\u65f6\u4e8b\u5b9e\uff08\u63d2\u4ef6\u8fd0\u884c\u65f6\u7ea6\u675f\u3001\u6e32\u67d3\u8fdb\u7a0b CPU \u8bca\u65ad\u6cd5\u3001\u5bbf\u4e3b API \u4e8b\u5b9e\u3001\n  push/pull \u51b2\u7a81\u3001\u5d4c\u5957\u4ed3\u5e93\u3001\u7b14\u8bb0 skill \u6f02\u79fb\uff09\u3002\n- `.agents/notes/implemented/architecture/` \u2014\u2014 \u56db\u7bc7\u843d\u5730\u51b3\u7b56\u7b14\u8bb0\uff1a\u4e3a\u4ec0\u4e48\u7528 Git CLI \u800c\u4e0d\u662f\u89e3\u6790 `.git/`\u3001\n  \u4e3a\u4ec0\u4e48\u505a\u6210\u4e24\u4e2a docked view\u3001\u4e3a\u4ec0\u4e48\u52a0\u6784\u5efa\u6b65\u9aa4\u3001\u53d8\u66f4\u5217\u8868\u4e3a\u4ec0\u4e48\u6539\u6210\u76ee\u5f55\u6811\uff1b\n  \u63d0\u4ea4\u4fe1\u606f\u63d0\u793a\u8bcd\u4e3a\u4ec0\u4e48\u628a\u8bed\u8a00\u505a\u6210\u663e\u5f0f\u53c2\u6570\uff1b\u8fdc\u7aef\u51b2\u7a81\u4e3a\u4ec0\u4e48\u5fc5\u987b\u8bfb\u4e24\u4e2a\u6d41\u3001\u4e3a\u4ec0\u4e48\u53ea\u80fd\u6709 `--force-with-lease`\uff1b\n  \u4e3a\u4ec0\u4e48\u4ed3\u5e93\u5217\u8868\u662f\u4f1a\u8bdd\u7ea7\u7684\u3001\u4ee5\u53ca `kind` \u4e3a\u4ec0\u4e48\u7531 gitlink \u5224\u5b9a\u3002\n\n\u6838\u5fc3\u4ee3\u7801\u5165\u53e3\u7559\u4e86\u4e00\u884c `// Note: <\u4e3a\u4ec0\u4e48\u8fd9\u6837\u505a\u3001\u653e\u5f03\u4e86\u4ec0\u4e48> \u2014 \u89c1 .agents/notes/\u2026`\uff0c\u523b\u610f\u4e0d\u9010\u884c\u6807\uff1b\n\u51b3\u5b9a\u88ab\u53d6\u4ee3\u65f6\uff0c\u8fd9\u4e9b\u6ce8\u91ca\u5c31\u662f\u8981\u540c\u6b65\u7684\u4ee3\u7801\u6e05\u5355\u3002\n",
+      "safetyNotes": "\u53ea\u8bfb\u5de5\u4f5c\u533a\u6587\u4ef6\uff08Open File / Reveal \u8d70\u5bbf\u4e3b fs \u63a5\u53e3\uff09\uff1b\u4e22\u5f03\u672a\u8ddf\u8e2a\u6587\u4ef6\u65f6\u4f1a\u76f4\u63a5\u5220\u9664\u8be5\u6587\u4ef6\uff08\u64cd\u4f5c\u524d\u6709\u786e\u8ba4\u6846\uff09\uff0c\u5176\u4f59\u5199\u64cd\u4f5c\u4e00\u5f8b\u8d70 Git \u547d\u4ee4\u3002\u751f\u6210\u63d0\u4ea4\u4fe1\u606f\u8c03\u7528\u5bbf\u4e3b\u6a21\u578b\uff0c\u7528\u7684\u662f\u4f60\u81ea\u5df1\u7684\u6a21\u578b\u914d\u7f6e\u4e0e\u989d\u5ea6\uff08\u5bbf\u4e3b\u9650\u6d41 8 \u6b21/\u5206\uff09\uff0c\u63d2\u4ef6\u4e0d\u6301\u6709\u4efb\u4f55 API Key\uff0c\u4e0d\u53d1\u8d77\u7f51\u7edc\u8bf7\u6c42\uff0c\u65e0\u9065\u6d4b\u3002HTTPS \u51ed\u636e\u8d70\u4f60\u81ea\u5df1\u7684 Git \u51ed\u636e\u52a9\u624b\uff1b\u53ea\u6d3b\u5728 ssh-agent \u91cc\u7684\u5bc6\u94a5\u7528\u4e0d\u4e86\uff0c\u8bf7\u7528 HTTPS \u8fdc\u7aef\u6216\u94a5\u5319\u4e32\u5bc6\u94a5\u3002",
+      "versions": [
+        {
+          "version": "0.3.0",
+          "publishedAt": "2026-09-14T03:27:28Z",
+          "changelog": "Release 0.3.0: Git operations parity (Branches panel with HEAD/Tags/Remotes/Stashes groups and slash-folder collapsing; branch merge/rebase/rename/upstream/delete; commit copy/compare; toolbar user/date/path server-side filters, Go to HEAD, Fetch+Pull shortcuts); git/log server-side author/since/until/search/paths filters plus git/tags, git/remotes, git/merge, git/rebase and more; remote checkout creates a tracking branch (IDEA behavior); commit-message drafting follows the checked/staged scope.",
+          "minPiDesktop": ">=0.8.0",
+          "shasum": "fbf784997dfa00c617437bc3d90d30b1d818d1af37cfb0927c4e22c2b37701f5",
+          "url": "packages/io.github.liushunqiu.pi-idea-git-0.3.0.piplug",
+          "sizeBytes": 1057159,
+          "permissions": [
+            "ui.panel",
+            "ui.view",
+            "clipboard.write",
+            "fs.read",
+            "models.list",
+            "agent.complete"
+          ],
+          "fs": {
+            "read": {
+              "root": "workspace",
+              "scope": [
+                "**"
+              ]
+            }
+          }
+        }
+      ]
+    },
     {
       "id": "io.github.muzimu217.deps-audit",
       "name": "Deps Audit",
diff --git a/packages/io.github.liushunqiu.pi-idea-git-0.3.0.piplug b/packages/io.github.liushunqiu.pi-idea-git-0.3.0.piplug
new file mode 100644
index 0000000..72119cf
Binary files /dev/null and b/packages/io.github.liushunqiu.pi-idea-git-0.3.0.piplug differ
diff --git a/plugins/io.github.liushunqiu.pi-idea-git/CHANGELOG.md b/plugins/io.github.liushunqiu.pi-idea-git/CHANGELOG.md
new file mode 100644
index 0000000..130231d
--- /dev/null
+++ b/plugins/io.github.liushunqiu.pi-idea-git/CHANGELOG.md
@@ -0,0 +1,42 @@
+ # Changelog
+
+ ## 0.3.0 — 2026-09-14
+
+ - Git 操作补齐（对标 IDEA 日志／分支面板，见
+   `.agents/notes/implemented/feature/2026-09-14-git-operations-parity.md`）：
+   Branches 面板加 HEAD 行、Tags／Remotes／Stashes 组与 `/` 文件夹折叠；
+   分支右键补合并／变基／改名／upstream／删除；提交右键补复制提交信息／与
+   HEAD 比较；工具栏补用户／日期／路径服务端过滤、Go to HEAD 与 Fetch＋Pull
+   快捷按钮；提交视图分支弹层跟随。`git/log` 支持 author／since／until／
+   search／paths；新增 `git/tags`、`git/remotes`、`git/merge`、`git/rebase`、
+   `git/branch-delete`、`git/branch-rename`、`git/branch-upstream`、
+   `git/tag-delete`、`git/tag-push`、`git/stash-show`、`git/compare`，
+   `git/fetch` 支持 `prune`。harness 198 条全绿（新增 34 条行为回归）。
+ - 远端分支检出改为 IDEA 行为：`git/checkout` 加 `track` 意图位，建本地跟踪分支
+   并附着 HEAD（已存在则落到本地同名分支；裸 revision 仍 detach）。
+ - 生成提交信息改按已勾选／已暂存范围取 diff，多仓聚合一次描述，与实际提交一致；
+   日志提交者过滤支持指定人（名单按提交数排序加手输）。harness 208 条全绿。
+ 
+
+## 0.2.0 — 2026-09-12
+
+首个对外发布版本。发布 ID 为 `io.github.liushunqiu.pi-idea-git`
+（开发期曾用 `local.pi-idea-git`；插件数据目录按 ID 隔离，
+改名后提交信息历史与视图选项从空开始）。
+
+- 提交 / Git 双工具窗口：Staged / Unstaged / Unversioned Files /
+  Merge Conflicts 分组目录树，hunk 级暂存、取消暂存与丢弃，
+  图形化 Log、分支面板、储藏与 Console。
+- 多仓库聚合：子模块与嵌套仓库统一显示、逐仓提交；
+  Push 对话框逐仓显示去向并支持 Push All。
+- 远端同步：推送被拒 / 分叉 / 冲突的分类补救说明；
+  force push 只允许 `--force-with-lease`。
+- 宿主模型生成提交信息：语言菜单（跟随仓库历史 / 简体中文 / English），
+  回复落框前强制整形（空行、行宽、项目符号）。
+- 在 PI-Desktop 0.14.6 上验证；`engines` 声明 `>= 0.8.0`。
+
+First public release under `io.github.liushunqiu.pi-idea-git`
+(renamed from the dev id `local.pi-idea-git`; per-plugin prefs start fresh).
+Commit/Git tool windows, multi-repo aggregation, classified push/pull
+remedies with lease-only force push, and host-model commit-message drafting.
+Verified on PI-Desktop 0.14.6.
diff --git a/plugins/io.github.liushunqiu.pi-idea-git/LICENSE b/plugins/io.github.liushunqiu.pi-idea-git/LICENSE
new file mode 100644
index 0000000..5ae4de0
--- /dev/null
+++ b/plugins/io.github.liushunqiu.pi-idea-git/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 liushunqiu
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/plugins/io.github.liushunqiu.pi-idea-git/README.md b/plugins/io.github.liushunqiu.pi-idea-git/README.md
new file mode 100644
index 0000000..07cb7e4
--- /dev/null
+++ b/plugins/io.github.liushunqiu.pi-idea-git/README.md
@@ -0,0 +1,527 @@
+# IDEA Git —— PI-Desktop 的 IntelliJ IDEA 风格 Git 工具窗口
+
+`io.github.liushunqiu.pi-idea-git` 把 IntelliJ IDEA 的 Git 界面搬进 PI-Desktop：你真的会一直待在里面的那两个
+工具窗口、暂存/未暂存分组、按代码块（hunk）暂存、图形化日志与 Console。
+
+这里的每一个 Git 动作都是**真的去调 `git`**，对着真实的索引干活。没有任何功能是在渲染层
+假装出来的，所以终端里的 `git status` 永远和面板显示一致。
+
+—— 以下内容按「能看到什么 → 怎么用 → 为什么这样实现 → 怎么改」排列。
+
+| 章节 | 内容 |
+| --- | --- |
+| 界面与功能 | 两个视图、Changes 区、diff 面板、Log/Console 全部能力表 |
+| 快捷键 | 绑定表，以及「焦点在哪决定谁能收到按键」 |
+| 与 IDEA 的有意差异 | 哪些地方刻意不照抄 |
+| 权限 | 6 项权限各自为什么需要 |
+| 工程结构 | 源码布局、为什么必须构建、生成物为什么不能手改 |
+| 引擎设计 | 视图如何与 Git 通信、环境补齐、状态与补丁的关键取舍 |
+| 一个项目里的多个仓库 | 子模块与嵌套仓库的识别、Root 选择器与其边界 |
+| 远端同步 | 推送被拒、分叉、冲突、以及未完成合并的出路 |
+| 认证 | 为什么插件不需要凭据，以及唯一做不到的事 |
+| 生成提交信息 | 用宿主模型起草，语言/格式/范围如何处理 |
+| 配色 | 哪些取自 JetBrains 文档，哪些是刻意的偏离 |
+| 测试与工具 | harness / smoke / drive / 决策笔记门禁 |
+| 开发与打包 | 加载本地插件、构建、打包含权限扩张的坑 |
+| 已知缺口 | 诚实清单：哪些控件无效、哪些能力受限 |
+| 记忆与决策笔记 | `.memories/`、`.agents/notes/` 与反向索引 |
+
+## 界面与功能
+
+工作面板里有两个 docked 视图，对应 IDEA 的两个工具窗口：
+
+| 面板 | 对应 IDEA | 内容 |
+| --- | --- | --- |
+| **提交**（`views/commit.html`） | Commit 工具窗口，`Alt+0` | Changes 区（Staged / Unstaged / Unversioned Files / Merge Conflicts）、选中文件的 diff、带历史的提交信息框、Amend、Sign-off、Commit、Commit and Push |
+| **Git**（`views/git.html`） | Git 工具窗口，`Alt+9` | **Log** 页签（分支面板、带图形与引用徽标的提交列表、changed files、commit details）与 **Console** 页签 |
+
+> `Alt+0` / `Alt+9` 是 IDEA 自己的绑定，插件**没有**注册热键（`manifest.json` 里没有
+> `keybindings` 段）；这里只是告诉你它们在 IDEA 里对应什么。
+
+命令面板里另有两条命令：`IDEA Git: Open as a separate window`（把两个窗口并到一个标签栏里，
+宽屏用，加载 `renderer/index.html`）与 `IDEA Git: Refresh repository`。插件在启动时激活
+（`activationEvents: onStartup`）。
+
+### 功能对照表（用 IDEA 自己的说法）
+
+| 功能 | 位置 | 说明 |
+| --- | --- | --- |
+| `Staged` / `Unstaged` / `Unversioned Files` / `Merge Conflicts` | 提交 → Changes 区 | 按**目录树**分组，每个文件落在它所属的文件夹下。文件夹的勾选是级联的：勾上会把其下所有文件（含更深层目录）加入索引，取消则整棵子树移出索引。同时有已暂存与未暂存改动的文件会**同时出现在两组里**——Git 自己就是这么报的 |
+| 视图选项（齿轮） | 提交 → Changes 头部 | `Group by Directory`（目录树）与平铺模式切换（关掉它就是平铺）、`Compact Middle Directories`（`src/views/app` 合成一行）、`Collapse All`、以及「全部加入索引 / 全部移出索引」两个动作。两个视图选项都会持久化 |
+| 过滤变更 | 提交 → Changes 头部 | 把树收窄到匹配的文件、并保留其祖先目录；分组标题显示 `matched/total`。`Esc` 清空 |
+| `Commit Message` + 提交信息历史 | 提交 → 底部 | 时钟按钮回放之前写过的信息，最新在前，跨重启保留（本地无历史时给提示，菜单底部有 `Clear All`） |
+| `Generate Commit Message` | 提交 → 底部 | 用**宿主自己的模型**起草信息。描述当前选中的文件；没选文件时描述所有已暂存内容；箭头菜单用来挑模型 |
+| `Amend`、`Sign-off commit` | 提交 → 底部 | `--amend`、`--signoff` |
+| `Commit`、`Commit and Push` | 提交 → 底部 | 拆分按钮；下拉里还有 Amend / Sign-off / 回滚（把已暂存内容全部移出索引） |
+| 每个代码块的 `Include into commit` | 提交 → diff 面板 | **局部提交**。每个 hunk 带一个勾选框；切换它时用重建出来的补丁跑 `git apply --cached`（或 `-R`），于是只有被选中的 hunk 进入这次提交 |
+| `Stage Hunk` / `Discard Hunk` / `Unstage Hunk` | 提交 → diff 面板 | 鼠标悬停到工作区 diff 的 hunk 头时出现；已暂存 diff 上则是反向的 `Unstage Hunk` |
+| hunk 头上的附注 | 提交 → diff 面板 | 纯空白 hunk 标 `· whitespace only`；子模块指针变化标 `· submodule abc1234 → def5678` |
+| `Show Diff`、`Rollback`、`Add`/`Remove from index`、`Open File`、`Reveal in File Manager`、`Copy Hash` | 提交 → 文件右键菜单 | `Rollback` 会先确认；它会删除未跟踪文件、还原已跟踪文件 |
+ | 分支控件（`main ↑2 ↓1`） | 两个工具栏 | 分支名、领先/落后，点开是本地/远端分支列表，点一行即 checkout；`New Branch`、`Merge into Current…`、`Rebase Current onto…`、`Rename`、`Set/Unset Upstream`、`Delete…`、`Fetch`、`Pull`、`Push`、`Force Push (with lease)`、`Stash Changes` 与储藏列表（Apply/Pop/Drop）。（分支的**完整右键动作菜单在 Git 视图的 `Branches` 面板**里，工具栏弹层是常用子集） |
+| 仓库控件（`mod · submodule`） | 两个工具栏 | 列出工作区仓库以及嵌套在它里面的每一个仓库——子模块、以及恰好住在这里的克隆——选中它就把整个工具窗口对准那个仓库。只有一个仓库时（单仓库项目）隐藏 |
+| `Log`、`Console` | Git → 页签 | Console 显示插件跑过的命令与输出，失败标红，可 `Clear All`（见下方「已知缺口」：探测型命令成功时不记录） |
+| 提交图 | Git → Log | 泳道由父提交信息算出；分支尖端黄色、本地分支绿色、远端紫色、标签灰色。自己的提交 subject 加粗，当前分支的行有底色 |
+ | `Branches` 面板 | Git → Log → 左侧 | `HEAD`（点一点回到当前提交）／`Local branches`／`Remote branches`（`feature/*` 这类按 `/` 折成可展开的文件夹；点远端分支会自动建本地跟踪分支，不再是 detached HEAD）／`Tags`（点一点按该标签过滤日志）／`Remotes`（Fetch / Fetch+Prune / 复制地址）／`Stashes`（Show / Apply / Pop / Drop）。分支右键：`Checkout`、`New Branch from Here`、`Merge into Current`、`Rebase Current onto Selected`、`Rename`、`Set/Unset Upstream`、`Delete`（未完全合并走二次确认）、`Copy Branch Name`、`Push`、`Fetch` |
+| `Changed Files`、`Commit Details` | Git → Log → 列表下方 | Details 显示哈希、作者、日期、subject 与完整正文 |
+| `Graph Options` | Git → 工具栏 | `By commit date` / `Topologically`、`Show First Parent`、`No Merges`、`Show Graph`、各面板开关 |
+ | 过滤 | Git → 工具栏 | 文本搜索（本地 substring）、分支过滤、用户过滤（全部／只看我的）、日期过滤（全部／24 小时／一周／一月）、路径过滤（服务端 `git log -- <path>`，输入防抖 450ms、回车立即刷） |
+ | 提交动作 | Git → Log → 右键提交 | `Show Diff`、`Copy Revision Number`、`Copy Message`、`Compare with HEAD`、`Checkout Revision`、`New Branch from Here`、`New Tag`、`Cherry-Pick`、`Revert`、`Reset Current Branch to Here`（soft/mixed/hard）、`Edit Commit Message`（仅 HEAD） |
+| `Side-by-side viewer` / `Unified viewer` | diff 面板头部 | 两者渲染同一份解析好的 hunk |
+| `Ignore Differences` → `None` / `Ignore whitespaces` | diff 面板齿轮 | 由 Git 自己实现（`git diff -w`），不是把行藏起来。开着它时**禁用 hunk 暂存**，因为忽略空白的 diff 不是合法补丁 |
+| `Show Whitespaces` | diff 面板眼睛图标 | 空格渲染成 `·`，制表符渲染成 `→` |
+| `Show Line Numbers` | diff 面板齿轮 / commit diff 浮层头部 | 行号栏。提交视图默认**关**、且这个开关会被记住；commit diff 浮层默认**开**，但每次打开都回到默认（浮层不持久化） |
+| `Collapse Unchanged Fragments` | diff 面板 | 长的上下文会折叠成一行可点击的条（`⋮ N 行未修改`）。只在**统一视图**里折叠，并排视图不折 |
+| 高亮差异 | diff 面板 | **词级**：行中间变化的部分被标出来，于是 `1.0.0` → `1.1.0` 只标出那一个不同的字符 |
+| 提交区状态行 | 提交 → 提交按钮上方 | 三种状态：进行中的操作（带 `Continue`/`Abort`）、冲突提示、`Nothing is staged` 警告，常规时显示「将提交 N / M 个文件」 |
+| Console 细节 | Git → Console | 每条命令带 `[hh:mm:ss]` 时间戳、右上角显示条数、独立的 Refresh、空态提示 |
+| 工具栏右侧 | 两个工具栏 | 当前仓库/工作区目录名 |
+
+`Ctrl+F5` 的行为——「每个动作之后都刷新」——是内建的：任何写入动作之后都会刷新状态、diff 与列表。
+
+## 快捷键
+
+宿主在主窗口渲染层跑应用自己的快捷键，而插件视图是独立的 `WebContentsView`——所以**焦点在视图里时，宿主收不到按键**。
+结论：**凡是按钮广告出来的键，都必须在页内自己绑定**，下面这些就是：
+
+| 动作 | macOS | Windows / Linux |
+| --- | --- | --- |
+| 刷新 | `⌘R` | `Ctrl+R` |
+| 刷新（IDEA 的绑定） | `⌃F5` | `Ctrl+F5` |
+| 加入索引 | `⌘⌥A` | `Ctrl+Alt+A` |
+| 回滚（先确认） | `⌘⌥Z` | `Ctrl+Alt+Z` |
+| Show Diff | `⌘D` | `Ctrl+D` |
+| 提交信息（提交视图） | `⌘K` | `Ctrl+K` |
+| 搜索日志（Git 视图） | `⌘F` | `Ctrl+F` |
+| 关闭对话框 / 菜单 / diff | `Esc` | `Esc` |
+| 在提交列表中移动 | `↑` `↓` | `↑` `↓` |
+
+提示文案由绑定的同一份规格生成（`PIG.formatShortcut`），所以**不可能出现「写了却按不出」的提示键**——
+这是个值得在设计上排除的错误，因为它直到有人去按才会暴露。
+
+代码里还绑了：提交行上 `Enter` / `Space` 选中该提交；对话框里 `Enter` 确认；弹出菜单打开时自动聚焦第一个可选项；
+`⌘⇧P` 会弹一句提示（见下）。
+
+### 哪个键在哪里有效
+
+宿主的加速键与插件的绑定住在不同地方，所以「同一个键干什么」取决于焦点在哪。值得精确知道：
+
+| 按键 | 应用内（焦点不在视图里） | 本插件视图内 |
+| --- | --- | --- |
+| `⌘K` / `Ctrl+K` | 应用的**会话搜索** | **提交视图**：聚焦提交信息框。**Git 视图**：无（应用的搜索在这里够不到） |
+| `⌘⇧P` / `Ctrl+Shift+P` | 应用的**命令面板** | 没用——按键到不了应用，所以视图会明确告诉你该去哪（`Alt+Space`） |
+| `Alt+Space` | 插件启动器 | **一样可用——它是真正的全局快捷键** |
+| `⌘R` / `Ctrl+R` | 重新加载 | 刷新仓库 |
+| `⌘D`、`⌘⌥A`、`⌘⌥Z`、`⌘F`、`Esc`、`↑` `↓` | 应用自己的含义 | 插件的含义，见上表 |
+
+所以：**要跑应用级命令（包括 `IDEA Git: Open as a separate window`），按 `Alt+Space`，或者点回应用里用 `⌘⇧P`。**
+现在在视图里按 `⌘⇧P` 会弹一句说明，而不是毫无反应。
+
+## 与 IDEA 的有意差异
+
+- **没有编辑器。** IDEA 把 diff 开在编辑器标签页里；这里提交的 diff 开在 Git 工具窗口内的浮层里。
+  `Jump to Source` 换成了 `Open File`（交给系统默认程序打开）与 `Reveal in File Manager`。
+- **没有 changelist。** IDEA 的 changelist 是 IDE 侧概念，Git 里没有对应物；Staged/Unstaged 的分组取代了它。
+  一份工作副本，一份变更集。
+- **没有 shelf。** `Stash` 覆盖 Git 原生的那部分场景。
+- **并排视图不联动滚动。** 左右两栏作为一个网格一起横向滚动，于是两栏永远在同一个偏移上。
+- **`Edit Commit Message` 只对尖端提交开放**，因为改写更早的提交需要 rebase。
+- **`Ignore whitespaces` 模式下禁用 hunk 暂存**，未跟踪文件也禁用——忽略空白的 diff、以及对着 `/dev/null` 的 diff，
+  都不是 Git 会接受的补丁。整文件的 `Add` 仍然可用。
+- **删除行是红色，不是 JetBrains 的灰色**，暗色 diff 配色是调出来的而非照抄的。见「配色」。
+
+## 权限
+
+| 权限 | 为什么 |
+| --- | --- |
+| `ui.panel` | 独立窗口（`renderer/index.html`） |
+| `ui.view` | 两个 docked 视图 |
+| `clipboard.write` | `Copy Revision Number`、`Copy Hash` 这类复制动作 |
+| `fs.read` | 对变更文件执行 `Open File` 与 `Reveal in File Manager` |
+| `models.list` | 生成按钮上的模型选择菜单 |
+| `agent.complete` | 用宿主模型起草提交信息 |
+
+`PluginCheck` 会把 `clipboard.write` 与 `fs.read` 报成 unused，因为它只扫 `main.js`；这两个都是从视图经面板桥调的
+（`clipboard.writeText` 在 `src/common.js`，`fs.openDefault` / `fs.reveal` 在 `src/commit-view.js`），属误报。
+
+`fs` 的读取范围声明为 `{"root":"workspace","scope":["**"]}`——只读工作区。
+
+**唯一一处插件写工作区的地方**是丢弃未跟踪文件（或还原未跟踪文件的 hunk）：引擎直接 `fs.rmSync` 删文件，
+视图侧会先确认。除此之外不碰工作区的文件——所有变更都经过 `git`。
+（插件另有一处写盘，写的是它**自己**的数据目录：`prefs.json`，存提交信息历史与视图选项，不落在仓库里。）
+
+## 工程结构
+
+```
+main.js              Node 进程：Git 引擎 + 通道路由（约 2600 行）
+src/theme.css        IDEA 调色板与组件样式 ─┐
+src/layout.css       布局与响应式            ─┤
+src/common.js        桥、i18n、图标、弹出菜单 ─┤ tools/build.mjs
+src/diff.js          统一 diff 解析与渲染    ─┤ 内联进
+src/commit-view.js   提交工具窗口            ─┤
+src/git-view.js      Log + Console，以及启动 ─┘
+views/commit.html    生成物——不要手改
+views/git.html       生成物——不要手改
+renderer/index.html  生成物——两个窗口并到一个标签栏
+tools/build.mjs      内联器
+tools/harness.mjs    引擎回归（真实仓库，136 条断言）
+tools/drive.mjs      不开 GUI 直接驱动引擎
+tools/smoke.mjs      用桩 bridge 渲染视图到 .smoke/
+tools/notes.mjs      决策笔记门禁（+ tools/agent-notes/ 的 vendored 校验器）
+manifest.json        清单：视图、命令、权限、engines
+```
+
+### 为什么必须有构建步骤
+
+宿主用 `loadURL(pathToFileURL(entry))` 加载视图，也就是 `file://` URL，而 **Chromium 拒绝从 `file://` 加载 ES module**
+（不透明源）。官方自带插件是靠「每个视图一个巨大的自包含 HTML」绕过去的；`tools/build.mjs` 从可读的源码产出同样的形状：
+
+```bash
+node tools/build.mjs     # 写出 views/*.html 与 renderer/index.html
+```
+
+改 `src/`，跑构建，正在运行的开发插件会热重载。直接改生成出来的 HTML 是白费力气——下次构建就覆盖了。
+
+> 生成器固定写 `lang="en"`（`tools/build.mjs`），与界面语言无关。只影响无障碍语义与字体回退，不影响显示。
+
+## 引擎设计
+
+### 视图怎么跟 Git 说话
+
+`main.js` 跑在专属 Node 进程里（Electron `utilityProcess`），所以它有真正的 Node API、能起 `git` 进程。
+视图是沙箱页面，只拿到 `window.pluginBridge`。宿主自己不实现的通道**全部**转发给插件导出的 `onPanelInvoke`——
+这正是自定义通道能工作的原因：
+
+```
+视图  --pluginBridge.invoke("git/…")-->  宿主  -->  onPanelInvoke  -->  git
+```
+
+`onPanelInvoke` 里一共 **36 个 `git/*` 通道**；不认识的通道会明确回 `Unsupported channel`，而不是静默什么都不做。
+
+### 两个环境事实决定了引擎的形状
+
+- 插件进程只被交给 `PATH`、`LANG` 和临时目录变量，**没有 `HOME`**（Windows 上是 `USERPROFILE`），
+  而 Git 需要它来读 `~/.gitconfig`（身份、凭据助手）。所以每次调用都自己补回去。**这是「零配置认证」的实现基础。**
+- 没有终端，所以交互式提示被关掉（`GIT_TERMINAL_PROMPT=0`、`GIT_ASKPASS=echo`、`GIT_EDITOR=true`…），
+  于是 `push` / `pull` 会**快速、可见地失败**，而不是对着一个没人能输入的密码框永远挂着。
+
+顺带补上的还有 `GIT_OPTIONAL_LOCKS=0`（读操作不拿索引锁）、`GIT_PAGER=cat`、`GIT_CONFIG_NOSYSTEM` 兜底。
+`git` 可执行文件在 `PATH` 与一组标准安装路径里找，找不到会给一条明确的错误，而不是让每个动作都莫名失败。
+
+### 命令的执行边界
+
+单条命令 **25 秒**后 SIGKILL——刻意短于宿主的 30 秒面板超时，否则超时会以「面板无响应」的形式出现，
+而看不到 Git 到底卡在哪。每条输出流上限 **8 MiB**，超出的部分是巨量日志，不是信息。
+
+### 状态是怎么读的
+
+状态用 `git status --porcelain=v2 -z` 读：`-z` 是唯一能**原样**返回路径的形式，所以空格与非 ASCII 文件名能活下来；
+v2 把索引列与工作区列分开，而这两列正好就是界面显示的「已暂存 / 未暂存」。
+（只有一处例外：生成提交信息时为了避免重命名被重复描述，另跑了一次 v1 的 `--porcelain`。）
+
+### diff 与补丁
+
+diff 用 Git 默认的 `a/`-`b/` 前缀产出，因为 `git apply` 会剥掉一个前导路径分量——
+**给 `git diff` 加 `--no-prefix` 会让 hunk 补丁被拒绝**，这是本仓库的一条硬性约定。
+回传给 Git 的补丁是「原始头部 + 被选中的 hunk」，这正是 `--recount` 能接受部分选择的原因。
+
+补丁还带**来源仓库标识**：`git/apply-patch` 会校验 `root`，不符则回 `STALE_REPOSITORY`。
+因为 `discard` 会写工作树，一个「读出来、过一会儿再写回去」的通道必须能拒绝来自已切换仓库的旧补丁。
+
+### Console 记什么
+
+Console 是环形缓冲：**最多 200 条**，每条 stdout / stderr 各截到 **4000 字符**。
+探测型命令（`rev-parse`、`ls-files`、`for-each-ref`、`config`、`--version` 等）成功时**不记录**——
+它们每次刷新都跑，记下来只会把有用的输出冲掉。
+
+### 失败信息是分层的
+
+短消息只保留 6 行，并**剔除 `hint:` 行**——那些行是给终端读者的，界面改用本地化的补救说明；
+但如果剔除后会一个字都不剩，就退回保留 hint（规则是「说点什么」，不是「来自 hint 的就一律不说」）。
+完整 stdout+stderr 走 `detail` 字段，由 toast 上的「详情」链接打开对话框查看（detail 也有 4000 字符上限，超出加省略号）。
+
+引擎给每一类失败打**稳定的分类码**，由视图本地化成措辞：`authHint`（`ssh` / `credentials`）、
+`pushHint`（`remote-ahead` / `remote-rejected`）、`pullHint`（`diverged` / `conflicts`）。
+（`needsReconcile` 不是分类码，它是引擎内部用来判断「是否该补一次 `--no-rebase`」的谓词，视图看不到它。）
+新增任何失败分支时，别把 Git 的原文丢掉，也别把整段塞进 toast。
+
+### 相对路径与真实路径
+
+路径比较一律按**真实路径**：Git 返回的是真实路径（macOS 上 `/private/var/…`），宿主给的是用户打开时的路径（`/var/…`）。
+用字符串前缀比较会把同一个目录判成两个，后果是**静默降级**（「打开文件 / 在访达中显示」被禁用），而不是报错。
+视图侧不要自己拼绝对路径，用引擎算好的 `repo.workspacePrefix`（`null` 有语义：仓库在工作区之上，不能折成 `"."`）。
+
+## 一个项目里的多个仓库
+
+一个项目常常不止一个仓库：一个已检出的子模块，或者一个恰好住在另一个仓库里的克隆。它们是**独立的仓库，不是文件夹**——
+父仓库只记录子模块*指向哪个提交*——所以父仓库的 `git status` 永远只给一行 gitlink，看不到子模块里面的文件。
+Commit 视图因此做成 IDEA 式的**聚合显示**：先按暂存/未暂存/冲突/未跟踪分大类，大类下按**仓库**排——
+每个有改动的仓库（父仓库参与字母排序）各占一行"颜色块 + 名 + N 个文件 + 分支徽标"，文件再嵌在行下展开，
+暂存、diff、hunk、回滚都直接可用；
+提交按钮用同一提交信息逐仓提交（子模块先、父仓库后），父仓库随后出现的指针更新再提交一次即收敛。
+`Commit and Push` 把刚才提交的那 N 个仓逐个推出去，不再只推当前仓。
+仓库行右键"切换到该仓库"会跳到 Root 选择器的那个仓库（Log/分支/储藏仍按仓库切换查看）。
+推送走 IDEA 式的 **Push 对话框**：多仓时工具栏 Push 列出每个仓库的分支去向（`main → origin/main`）、`↑/↓` 与勾选框，
+`Push All` 逐仓推送，单个失败不挡其他仓，行内显示成功/拒因；单仓时保持直接推送。Git 视图工具栏同样有 Push 入口。
+两个工具栏最左边的仓库控件仍然是切换当前仓库的东西：选中一个，视图背后的每条命令（状态、diff、日志、分支、储藏、提交、hunk 暂存）
+就都在它里面跑。
+
+工作区本身不是仓库、但文件夹里并排摆着多个仓库时（`repoA/`、`repoB/`），同样可用：仓库列表列出它们（`sibling repository`
+徽标），Commit 视图聚合显示其他平级仓的改动，Push 对话框一次推完。空文件夹（内无仓库）仍报"不是 Git 仓库"。
+
+列表由工作区仓库出发遍历构建，且**遍历是有边界的**：最多 4 层深、最多 5000 个目录，并且不下潜依赖/构建/缓存目录
+（`node_modules`、`vendor`、`Pods`、`.venv`… 共 17 个名字，含 `.git`）。
+但 `.gitmodules` 里**声明**的路径不受这些边界限制——那里的条目是关于项目的断言，而边界只是对项目规模的猜测。
+已声明但未检出的子模块不列出：没有工作树，就没得显示、也没得提交。
+
+两个长得很像的仓库是**按父仓库的索引**区分的，不是按 `.gitmodules`：被父仓库记成 `160000` gitlink 的路径是**子模块**
+（在那里暂存等于记录一个提交），其他都是**嵌套仓库**（父仓库不存它的任何文件）。界面上分别打 `submodule` / `nested repository` 徽标。
+
+这个选择属于**打开的那个项目**，不写进 prefs：切项目、或者把目录移走，就退回工作区自己的仓库。
+
+## 远端同步：推送被拒与合并冲突
+
+被拒绝的推送是**常规情况，不是异常**：别人往同一个分支推了东西。Git 会在 stderr 上说明，并在 `hint:` 行里给出补救办法，
+这两者都读——短消息里是 Git 自己那几行，上面那句分类好的补救说明是插件的：
+
+| 失败 | 插件怎么说 |
+| --- | --- |
+| 推送被拒（`fetch first`、`non-fast-forward`、`stale info`） | 远端有你没有的提交——先 Fetch，再 Pull，然后重新推送；如果该保留的是本地历史，用 Force Push |
+| 推送被拒（`protected branch`、钩子） | 服务器拒绝了它；分支大概是受保护的 |
+| 拉取卡在冲突上 | 在 Changes 区里解决，然后提交 |
+| 分叉且 `pull.ff = only` | 先 merge 或 rebase，再推送 |
+| 没有存下来的凭据（HTTPS） | 在终端里跑一次 `git push` 让凭据助手存下来，再重试 |
+| `Permission denied (publickey)` | 换成 HTTPS 远端，或者让密钥不依赖 `ssh-agent`——宿主不传 `SSH_AUTH_SOCK` |
+
+三条引擎决策撑起这套行为：
+
+- **两个流都读。** `git push` 把拒绝写在 stderr，但 `git merge`（也就是 `git pull` 的后半段）把 `CONFLICT` 写在 stdout。
+  只读 stderr 会把一次冲突的 pull 渲染成一段「看起来像成功的 fetch 日志」。
+  **判据是「失败时哪一行能指出下一步」，不是「哪个流更像错误流」。**
+- **`git pull` 按配置跑，只在 Git 自己因缺策略而拒绝时重试一次。** 自从 2.27，在分叉分支上裸跑 `git pull` 是硬失败
+  （`fatal: Need to specify how to reconcile divergent branches`）——于是被拒的推送让你跑的那条命令自己跑不起来。
+  只有这一个失败会被 `--no-rebase`（merge）重试一次，其余结果都是 Git 的。
+  这里不做策略推导，所以 `branch.<name>.rebase`、`pull.rebase = merges|interactive`、`pull.ff = only` 全部照常生效——
+  它们是被**第一次尝试**读到的，而不是被一份更差的 Git 优先级规则副本读到的。
+- **Force push 只能是 lease，不能是裸 force。** `--force-with-lease` 是插件唯一能发出的 force：如果远端已经不在这个窗口
+  上次看到的位置，它就会被拒绝，于是同事的推送永远不会被抹掉。远端与 ref 是位置参数，所以交给 Git 之前会先校验——
+  `git push origin --force` 正是「未校验的 `-` 开头取值」会产出的东西。
+
+**推送推到哪里，由分支追踪关系决定**，不是 `origin` + 本地分支名。这两者只在分支追踪同一处时才一致——
+一旦分支追踪别处，旧行为就会把新分支推到 `origin`，而 ↑/↓ 标签还在对着真正的 upstream 计数。
+完全没有 upstream 时回退范围很窄：`origin`，或者只有一个远端时就用它。
+有多个远端又没 upstream 时无从推断，于是拒绝推送并列出远端列表，而不是把分支发布到排序第一个的名字上去。
+首次推送可以直接建立追踪（追加 `--set-upstream`）。
+另外两种会明确拒绝的情况：分支追踪的是一个**本地分支**（名字里没有 `/`），以及**尚无提交**的分支。
+
+### 离开一个未完成的合并
+
+冲突的 `pull` 会把仓库留在合并中间，于是提交按钮上方的状态行会写出**进行中的操作**并带上它的出口：
+四个操作都有 **Abort**，只有序列类的三个（cherry-pick / revert / rebase）有 **Continue**。
+merge **不进这个列表**：它没有需要继续的半成品状态，一次合并是靠**提交**来结束的——所以插件不给它 Continue
+（顺带说明：`git merge --continue` 在终端里是存在的，只是这里用不上，因此不提供）。
+Continue 用 `core.editor=true` 跑，因为没有终端可以写提交信息，否则 Git 只会失败——用的是该操作已经记录好的那条信息。
+
+这行在**冲突被暂存之后**仍然保留操作名，这才是重点：解决冲突会把 `u` 行变成普通索引行，
+于是 porcelain 不再提它——而「把所有冲突都暂存了」正是 `--continue` 开始能够成功的时刻。
+把检查限制在「有冲突时」会藏起来插件自己创造的那个状态的唯一出口，所以探针在**有冲突 _或_ 刚才发现过操作**时都运行。
+
+不认识的操作名不会被运行：引擎只接受它能报出的那四个名字，所以一个畸形的载荷不会变成一个任意的 `git` 动词。
+
+### 配置配方
+
+**GitHub，HTTPS** —— `gh auth login` 然后 `gh auth setup-git` 会把助手写进 `~/.gitconfig`。不需要别的。
+
+**GitLab（任意主机），HTTPS** —— 让 Git 存一次：
+
+```bash
+git config --global credential.helper osxkeychain   # macOS（Linux 用 libsecret，
+                                                    # Windows 用 manager）
+git push            # 输一次 token，此后都会被存下来
+```
+
+自建 GitLab **不需要任何插件侧配置**，因为用的就是你 shell 用的那个凭据库。
+
+**SSH** —— 无口令的密钥、或者口令存在 macOS 钥匙串里（`UseKeychain yes`）的密钥，可以直接用。
+只活在 `ssh-agent` 里的密钥不行，因为宿主不会把 `SSH_AUTH_SOCK` 交给插件进程；这类情况请用 HTTPS 远端，或把密钥加进钥匙串。
+
+> 多账号配置：插件读的是你的凭据助手为该 URL 解析出的那个账号，所以
+> `credential.<url>.username` 和 `includeIf "gitdir:…"` 的规则在这里和终端里一样生效。
+
+## 认证
+
+**插件不持有任何凭据，也不需要。** 它跑的是用户自己的 `git`、带的是用户自己的 `HOME`，
+于是它继承的正是终端已经在用的那套东西：同一个 `~/.gitconfig`、同一个凭据助手、同一份 `~/.ssh/config` 与密钥。
+shell 里什么能认证一次 `git push`，这里就能，在 GitHub、自建 GitLab 或任何别的地方——**没有任何按主机配置的东西**。
+
+这种继承是刻意的。插件不该被托付 token，而一份「按主机填凭据」的表单也只能覆盖它认识的那些主机。
+
+插件唯一做不到的事是**提问**。工具窗口背后没有终端，所以提示被关掉，命令会立刻失败，而不是永远挂在一个没人能输入的密码上。
+发生这种情况时，原始的 Git 错误会连同「该怎么办」一起显示（见上一节的表）。
+
+## 生成提交信息
+
+提交信息框旁边的闪光按钮会替你起草信息。它通过 `pi.agent.complete` 找**宿主**的模型，
+所以用的就是你**已经**配好的 provider、模型与额度——插件不持有 API key，也不新增任何账号。
+
+它发出去的是三样东西：变更本身、仓库近期提交的**subject 与正文样本**，以及这份样本测出来的东西——
+提交语言、subject 是否带 `type(scope):` 前缀、有没有人写正文。样本取**最近 40 条**提交。
+diff 截断在 **12 000 字符**：这是提示词，不是备份。
+
+**语言。** 由闪光按钮旁的箭头菜单决定，因为「照着仓库写」不是一条语言策略：
+一份全英文的历史会让中文读者也拿到英文草稿。选项是
+**跟随仓库历史**（默认：用实测语言，没有历史时回退到界面语言）、**简体中文**、**English**。
+无论哪种，`type` 与 `scope` 都保持 ASCII，就像 Conventional Commits 的各种语言译本做的那样——
+`feat(登录): 支持短信验证码`。
+
+提示词按 Git 自己的惯例（git-commit(1)、Tim Pope、Chris Beams、Conventional Commits 1.0.0）写明硬性规则：
+subject 后一个空行、目标 50 字符上限 72（中文约 25 字，因为 CJK 字形大致是两倍宽）、
+结尾不加句号、英文 subject 用祈使句、正文说 **why** 而不是复述 diff、
+`BREAKING CHANGE:` 是唯一允许它自行追加的 trailer。
+
+**形状是被强制的，不是被请求的。** 提示词不能是格式的最后一道防线，因为要命的那个失败对写提示词的人是隐形的：
+Git 把**第一个空行之前的每一行**都当成标题，所以一个把正文紧贴在 subject 下面的回复**根本没有正文**——
+它是一个巨大的 subject，而这正是读者口中的「提交信息不规范」。所以回复在进入信息框之前会过一遍 `formatCommitMessage`：
+
+- 先剥掉 ``` 代码围栏和 `commit message:` / `提交信息:` 这类前缀（模型很爱加）；
+- 保证 subject 是单行，并且无论模型怎么排，后面都恰好一个空行；
+- 过长的 subject 会把尾巴**在从句边界**挪进正文，而不是截断，于是模型从 diff 里读到的信息不会丢；
+- 把正文折到 Git 的 72 列，CJK 字形按终端那样算两列；
+- 把分号串起来的从句拆成「一个想法一条」的项目符号；
+- 当 `,` `;` 夹在中文字符之间时规范成 `，` `；`——而 ASCII 原样保留，所以 `feat(a,b): …` 不会被碰。
+
+它不改写任何措辞，而且是**幂等**的：形状已经正确的草稿会原样通过。
+
+**范围。** Changes 列表里有选中的文件时，它描述*那个文件*；没选中时描述*所有已暂存内容*。
+用了哪一种会在提示条里说明，所以范围永远不是猜的。两者都不存在时它会直说，而不是编一条信息出来。
+
+**草稿就是草稿。** 它落在信息框里，可以照常编辑。如果你已经写了内容，它会先问一句再替换。
+
+权限是 `models.list`（提供模型菜单）与 `agent.complete`（高风险——会花你的模型额度）。
+宿主把这件事限流到**每分钟 8 次**；插件把这个限制报出来，而不是盲目重试。
+
+## 配色
+
+浅色配色大部分抄自 JetBrains 自己的文档：新增行 `#c6e4c1`、修改行 `#e9eff9`、变化片段蓝 `#c6d7f0`、
+面板分隔线、编辑器边栏的变更条，以及文件状态色（新增 `#0a7700`、修改 `#0032a0`、未版本控制 `#993300` 等）。
+余下的界面饰件照着 IntelliJ Light 与 Darcula 的样子来，那些地方 JetBrains 没有公布数值。
+
+**一个刻意的偏离，两套主题都有：** JetBrains 把删除行记成一个中性灰（浅色 `#D7D6D6`）。
+紧挨着绿色的新增，那个灰读起来像*褪色*而不是*被删掉*，所以删除用柔和的红色——浅色 `#f7d2d2`，暗色 `#452a2e`。
+
+**暗色 diff 配色是调出来的，不是抄的。** 文档里的暗色值给出一种偏棕的行底色，而一块钢蓝色的片段补丁压在暗红行上会变成一团泥。
+所以暗色带自己的一套值，而且变化片段的颜色跟着它所在的行走：删除行上更红，新增行上更绿。
+`--diff-fragment-deleted` / `--diff-fragment-inserted` 是两个覆盖点（只在暗色主题里定义）；浅色主题不设它们，保留 JetBrains 的蓝。
+
+主题切换走 `document.documentElement.dataset.theme`，由 `app.getAppearance` 初始化、并订阅 `appearance:changed` 跟随宿主。
+全部都在 `src/theme.css` 顶部的 CSS 变量里，所以重新调一处就是改一行。
+
+## 测试与工具
+
+### 引擎回归
+
+`tools/harness.mjs` 对着**当场造出来的真实仓库**驱动引擎——一个裸远端、一个直接初始化的工作副本加一个真正的 `git clone`、
+一次真实的双人分叉、一个内含子模块的子模块——
+并断言那些「拒绝」所依赖的行为：分类、消息、详情、先陈旧再 fetch 的 ahead/behind 标签、冲突的合并及其出口、
+一次推送落到哪里（以及被拒绝落到哪里）、陈旧的 lease 永远不会覆盖同事的工作；
+最后几段还包括：嵌套在另一个仓库里的仓库会被列出、可以被选中、可以在里面提交、扫描能看多远、
+`.gitmodules` 的声明能推翻什么，以及一份来自「视图已经离开的仓库」的补丁会被拒绝而不是被应用。
+
+```bash
+node tools/harness.mjs        # 实测输出：136/136 passed，全部对着真实 git
+node tools/harness.mjs --keep # 保留临时仓库，便于事后翻看
+```
+
+`PLUGIN_DIR` 可以把 harness 指向另一份检出。
+
+### 决策笔记门禁
+
+`.agents/notes/` 下的笔记承载「代码本身带不动的决定」——为什么是这个形状，以及它换掉了什么。
+一篇没人能找到的笔记、或者头块漂移了的笔记，是下一个读者（人或 agent）不会信任的笔记，
+所以形状是**强制**的而不是约定俗成的：
+
+```bash
+node tools/notes.mjs        # 两项校验：目录/分类/相对链接 + 头块/Status/必需章节
+```
+
+两个校验器逐字节 vendored 在 `tools/agent-notes/` 下，所以**无论机器上装没装那个 skill 都能跑**；
+它们也由 `node tools/harness.mjs` 一起断言（136 条里有 2 条来自这里）。
+本机 Node 26 能直接执行 `.ts`，不需要 tsx 或任何 flag。
+
+### 不开 GUI 驱动引擎
+
+`tools/drive.mjs` 调用的是视图调用**同一批** `onPanelInvoke` 通道，只是给了个桩 `pi` 全局，
+所以一条流程可以从终端或测试脚本里跑通：
+
+```bash
+node tools/drive.mjs /path/to/repo git/repo
+node tools/drive.mjs /path/to/repo git/stage '{"paths":["src/app.js"]}'
+node tools/drive.mjs /path/to/repo git/commit '{"message":"Fix the thing"}'
+```
+
+用**削减过的环境**跑它，才和真实插件进程拿到的东西一致——`PATH`、`LANG` 和临时变量，但**没有 `HOME`**：
+
+```bash
+env -i PATH="$PATH" TMPDIR="${TMPDIR:-/tmp}" node tools/drive.mjs . git/repo
+```
+
+这么跑等于复现了真实插件进程的环境，所以推送路径也能在**不加终端**的情况下对着任意远端试——
+（注意 harness 里全部远端都是本地裸仓，没有真的往 HTTPS 远端推过；要验证真实托管，请自己挑一个远端跑上面这条命令。）
+
+模型相关的两个通道有桩：`PIG_FAKE_MODELS`（值 `denied` 会返回 `PERMISSION_DENIED`）、
+`PIG_FAKE_COMPLETE`（`RATE_LIMITED` / `error:…`）、`PIG_SHOW_PROMPT=1` 会把真正发出去的提示词打出来。
+
+### 没有宿主也能看视图
+
+`tools/smoke.mjs` 把构建好的视图配上桩 `window.pluginBridge` 写到 `.smoke/`，
+于是那些难以按需制造的状态（仓库卡在合并中、一次被远端拒绝的推送、一个已检出的子模块作为当前仓库）可以渲染出来看：
+
+```bash
+node tools/build.mjs && node tools/smoke.mjs commit zh-CN
+```
+
+视图名与语言都是位置参数（产物是 `.smoke/<视图>-<语言>.html`）。桩在工具里，不在插件里，`.smoke/` 已 gitignore。
+
+## 开发与打包
+
+1. 扩展页右上角 **`···` → 「加载本地插件」** → 选这个目录。
+2. 改 `src/`，跑 `node tools/build.mjs`，视图会热重载。
+3. 组装干净的发布目录再打 Pack：`node tools/build.mjs && node tools/make-publish-dir.mjs`，然后对 `dist-publish/io.github.liushunqiu.pi-idea-git/` 跑 `PluginCheck` / `PluginPack`（产物在该目录的 `dist/*.piplug`，8 个文件约 0.9MB）。**不要直接对仓库根打 Pack**——它会把 `.smoke/`、`.memories/`、`tools/`、`src/` 等开发文件一起打进去（`PluginPack` 不读 `.gitignore`，且没有排除文件机制，实测 2.1MB / 46 文件）。
+   从老 ID `local.pi-idea-git` 升级上来的用户，提交信息历史与视图选项不会迁移（插件数据目录按 ID 隔离）。
+
+质量底线（改完代码过一遍）：`node --check` 每个 `src/*.js`、`PluginCheck` 无 error、`node tools/harness.mjs` 全绿。
+
+> **扩大 `permissions` 需要比「Reload」按钮更长的路径。**
+> 保存触发的热重载会拒绝一个「要的权限多于运行实例已获批的」清单。卡片上的 **Reload** 按钮也不够：
+> 它把新清单与 `registry.json` 里记录的权限求交集，**静默丢掉新增的那些，却照样报告成功**。
+> 只有 **`···` → 「加载本地插件」**（重新选一次目录）会重读清单并重新征求同意。
+
+宿主版本要求写在同一份清单里：`engines.piDesktop >= 0.8.0`。
+
+## 已知缺口
+
+诚实清单——这些是当前实现里确实存在、且用户可能撞上的限制：
+
+ - **文本搜索是本地过滤**：工具栏搜索框只在已取回的 200 条内做 substring 匹配；要按提交信息在服务端查，用分支／用户／日期／路径过滤（它们都进 `git log` 参数）。
+- **Console 不是「每条命令都记」**：探测型命令成功时不记录（见「引擎设计」），失败时 short/detail 都有长度上限。
+- **hunk 级操作的适用面**：`Ignore whitespaces` 打开时禁用，未跟踪文件禁用（整文件 `Add` 仍可用）。
+- **`Edit Commit Message` 只对 HEAD 开放**。
+- **Commit 视图文件菜单的复制项**：有提交时显示「Copy Revision Number」并复制 HEAD（与 Log 视图一致），尚无提交时显示「复制路径/Copy Path」并复制文件路径。
+- **两处「回滚」同名不同义**：提交下拉里的「回滚」把已暂存内容移出索引（`git/unstage`），文件右键里的「回滚」会**丢弃改动**（`git/discard`，未跟踪文件直接删除）。同名，但危险等级不同——按下去之前先看它问的是什么。
+- **生成的 HTML 固定 `lang="en"`**，与界面语言无关。
+- **执行边界**：单条命令 25 秒后被杀；Console 只留最近 200 条、日志一次最多取 500 条、错误详情与 Console 的每条输出都截到 4000 字符——这些截断是静默的。唯一会**报出来**的是 stdout 超过 8 MiB：那条命令被杀死并报 `Git output exceeded the size limit.`（stderr 超限则是静默停止收集）。
+- **宿主超时**：任何一次面板调用超过 30 秒，都会以宿主侧超时的形式失败；引擎的 25 秒上限就是为了让失败先发生在 Git 这一侧。
+- **测试不覆盖真实宿主**：harness 与 smoke 用的是桩，`PluginCheck` 只看 `main.js`（于是视图经桥调用的权限被误报为 unused）。
+
+## 记忆与决策笔记
+
+仓库里两类笔记都是纯 Markdown，随包一起走：
+
+- `.memories/` —— 排查过程与运行时事实（插件运行时约束、渲染进程 CPU 诊断法、宿主 API 事实、
+  push/pull 冲突、嵌套仓库、笔记 skill 漂移）。
+- `.agents/notes/implemented/architecture/` —— 四篇落地决策笔记：为什么用 Git CLI 而不是解析 `.git/`、
+  为什么做成两个 docked view、为什么加构建步骤、变更列表为什么改成目录树；
+  提交信息提示词为什么把语言做成显式参数；远端冲突为什么必须读两个流、为什么只能有 `--force-with-lease`；
+  为什么仓库列表是会话级的、以及 `kind` 为什么由 gitlink 判定。
+
+核心代码入口留了一行 `// Note: <为什么这样做、放弃了什么> — 见 .agents/notes/…`，刻意不逐行标；
+决定被取代时，这些注释就是要同步的代码清单。
diff --git a/plugins/io.github.liushunqiu.pi-idea-git/main.js b/plugins/io.github.liushunqiu.pi-idea-git/main.js
new file mode 100644
index 0000000..303dad8
--- /dev/null
+++ b/plugins/io.github.liushunqiu.pi-idea-git/main.js
@@ -0,0 +1,3326 @@
+/**
+ * IDEA Git — PI-Desktop plugin entry.
+ *
+ * Architecture
+ * ------------
+ * `main.js` runs in a dedicated Node process (Electron `utilityProcess`), so it
+ * has the real Node API. The work-panel view and the detached panel are
+ * sandboxed pages that only get `window.pluginBridge`. The host forwards every
+ * channel it does not implement itself to `onPanelInvoke` below, which makes
+ * this file the single place where Git actually executes.
+ *
+ *   view/panel  --pluginBridge.invoke("git/…")-->  host  -->  onPanelInvoke  -->  git
+ *
+ * Why the Git CLI instead of reading `.git/` through the host file APIs:
+ * `.git/` sits on the host's credential refusal list, and porcelain output is
+ * the only stable, quoting-safe contract for status, diffs and staging. The
+ * process receives a reduced environment (PATH/LANG/TEMP but no HOME), so every
+ * invocation restores HOME explicitly — without it Git cannot read the user's
+ * global identity or credential helper.
+ *
+ * Nothing here writes to the repository except when the user asked for it:
+ * stage / unstage / discard / commit / branch / stash all map to one explicit
+ *
+ * A project can hold more than one repository: submodules, and repositories
+ * that merely live inside another one. `readRepo` is the single place that
+ * decides which of them every command runs against, so picking one in the
+ * repository list redirects the whole tool window without any other command
+ * knowing about it; `git/repos` is what the list is built from.
+ * Git command, and hunk operations pipe a patch that Git validates itself.
+ */
+
+// Note: 为什么用 Git CLI 而不是解析 .git/（宿主硬拒 .git/，porcelain 是唯一对空格/非 ASCII 路径无歧义的契约）、为什么做成两个 docked view 而不是一个、变更列表为什么按分组各自建树 — 见 .agents/notes/implemented/architecture/2026-09-11-idea-git-tool-window.md
+const { spawn } = require("node:child_process");
+const os = require("node:os");
+const path = require("node:path");
+const fs = require("node:fs");
+
+/** Host aborts a panel call after 30s; stay under it so the UI gets a message. */
+const COMMAND_TIMEOUT_MS = 25_000;
+/** Hard cap on one command's stream so a runaway log cannot exhaust memory. */
+const MAX_OUTPUT_BYTES = 8 * 1024 * 1024;
+/** Field/record separators for `git log` — control chars cannot appear in messages. */
+const FS_CHAR = "\u001f";
+const RS_CHAR = "\u001e";
+
+/**
+ * Every command this plugin runs is kept in a small ring buffer. The host's
+ * Console tab is meant to show "the results of executing VCS-related
+ * commands", and because each work-panel view is its own page, the buffer has
+ * to live here rather than in a page's memory.
+ */
+const CONSOLE_LIMIT = 200;
+let consoleEntries = [];
+/**
+ * Commands whose output is pure plumbing and would only add noise — plus
+ * `config`, which this plugin only ever runs to *read* something (the user's
+ * identity, `.gitmodules`). A failed read is still recorded.
+ */
+const CONSOLE_QUIET = new Set([
+  "rev-parse",
+  "ls-files",
+  "for-each-ref",
+  "config",
+  "--version",
+]);
+
+function recordConsole(args, result, cwd) {
+  if (CONSOLE_QUIET.has(args[0]) && result.ok) return;
+  consoleEntries.push({
+    ts: Date.now(),
+    cwd,
+    command: `git ${args.join(" ")}`,
+    ok: result.ok,
+    stdout: (result.stdout ?? "").slice(0, 4000),
+    stderr: (result.stderr ?? "").slice(0, 4000),
+    message: result.message,
+    code: result.code,
+  });
+  if (consoleEntries.length > CONSOLE_LIMIT) {
+    consoleEntries = consoleEntries.slice(-CONSOLE_LIMIT);
+  }
+}
+
+function consoleLog() {
+  return consoleEntries;
+}
+
+function clearConsoleLog() {
+  consoleEntries = [];
+}
+
+/**
+ * Small persisted state: the commit-message history IDEA keeps behind the
+ * clock button, and the view preferences (unified vs side-by-side, graph
+ * options). `plugin.getDataPath()` is the plugin's own directory, so this
+ * never touches the user's workspace.
+ */
+let prefsCache = null;
+const MAX_MESSAGE_HISTORY = 30;
+
+async function prefsFile() {
+  const dir = await pi.plugin.getDataPath();
+  return path.join(dir, "prefs.json");
+}
+
+async function readPrefs() {
+  if (prefsCache) return prefsCache;
+  try {
+    const parsed = JSON.parse(fs.readFileSync(await prefsFile(), "utf8"));
+    prefsCache = {
+      messages: Array.isArray(parsed?.messages) ? parsed.messages : [],
+      ui: parsed?.ui && typeof parsed.ui === "object" ? parsed.ui : {},
+    };
+  } catch {
+    prefsCache = { messages: [], ui: {} };
+  }
+  return prefsCache;
+}
+
+async function writePrefs(prefs) {
+  prefsCache = prefs;
+  try {
+    fs.writeFileSync(await prefsFile(), JSON.stringify(prefs, null, 2), "utf8");
+  } catch {
+    // Persistence is a convenience; a failure must not break the view.
+  }
+  return prefs;
+}
+
+/** Newest first, de-duplicated, so re-using a message promotes it. */
+function rememberMessage(prefs, message) {
+  const trimmed = String(message ?? "").trim();
+  if (!trimmed) return prefs;
+  const messages = [trimmed, ...prefs.messages.filter((value) => value !== trimmed)];
+  return { ...prefs, messages: messages.slice(0, MAX_MESSAGE_HISTORY) };
+}
+
+// ---------------------------------------------------------------------------
+// Locating git
+// ---------------------------------------------------------------------------
+
+let gitBinaryCache;
+
+/**
+ * Electron started from a desktop launcher inherits a minimal PATH, so a
+ * `git` that exists in the user's shell may be invisible here. Probe PATH
+ * through the filesystem and then fall back to the usual install locations.
+ */
+function resolveGitBinary() {
+  if (gitBinaryCache !== undefined) return gitBinaryCache;
+  const exe = process.platform === "win32" ? "git.exe" : "git";
+  const dirs = [
+    ...(process.env.PATH ?? "").split(path.delimiter).filter(Boolean),
+    "/usr/bin",
+    "/usr/local/bin",
+    "/opt/homebrew/bin",
+    "/opt/local/bin",
+    path.join(os.homedir(), ".local", "bin"),
+    "C:\\Program Files\\Git\\cmd",
+    "C:\\Program Files (x86)\\Git\\cmd",
+    path.join(os.homedir(), "AppData", "Local", "Programs", "Git", "cmd"),
+  ];
+  for (const dir of dirs) {
+    const candidate = path.join(dir, exe);
+    try {
+      fs.accessSync(candidate, fs.constants.X_OK);
+      gitBinaryCache = candidate;
+      return candidate;
+    } catch {
+      // Not here; keep looking.
+    }
+  }
+  gitBinaryCache = null;
+  return null;
+}
+
+/**
+ * The plugin process gets PATH/LANG/TEMP but never HOME, and Git needs HOME for
+ * `~/.gitconfig` (identity, aliases, credential helper). Prompts are disabled
+ * because there is no terminal to answer them.
+ */
+function gitEnv() {
+  const env = { ...process.env };
+  if (!env.HOME) env.HOME = os.homedir();
+  if (!env.USERPROFILE) env.USERPROFILE = os.homedir();
+  env.GIT_TERMINAL_PROMPT = "0";
+  env.GIT_ASKPASS = "echo";
+  env.GIT_OPTIONAL_LOCKS = "0";
+  env.GIT_PAGER = "cat";
+  env.GIT_EDITOR = "true";
+  env.GIT_CONFIG_NOSYSTEM = env.GIT_CONFIG_NOSYSTEM ?? "";
+  return env;
+}
+
+// ---------------------------------------------------------------------------
+// Running git
+// ---------------------------------------------------------------------------
+
+/**
+ * Run one Git command and always resolve — never reject — so the UI can render
+ * a real error message instead of an opaque bridge failure.
+ *
+ * @param {string[]} args
+ * @param {{cwd?: string, input?: string, timeoutMs?: number}} [options]
+ * `message` is the short form for a toast; on failure it is built from *both*
+ * streams (`gitError`) and `detail` carries what Git said, truncated to
+ * `ERROR_DETAIL_CHARS` (see `gitDetail`).
+ * @returns {Promise<{ok: boolean, stdout: string, stderr: string, code: number|null, message?: string, detail?: string|null}>}
+ */
+function runGit(args, options = {}) {
+  const binary = resolveGitBinary();
+  if (!binary) {
+    return Promise.resolve({
+      ok: false,
+      stdout: "",
+      stderr: "",
+      code: null,
+      message:
+        "Git executable not found. Install Git, or make sure it is on PATH.",
+    });
+  }
+  const cwd = options.cwd || workspacePath();
+  if (!cwd) {
+    return Promise.resolve({
+      ok: false,
+      stdout: "",
+      stderr: "",
+      code: null,
+      message: "No workspace is open.",
+    });
+  }
+  return new Promise((resolve) => {
+    let child;
+    try {
+      child = spawn(binary, args, {
+        cwd,
+        env: gitEnv(),
+        stdio: ["pipe", "pipe", "pipe"],
+        windowsHide: true,
+      });
+    } catch (error) {
+      resolve({
+        ok: false,
+        stdout: "",
+        stderr: "",
+        code: null,
+        message: String(error?.message ?? error),
+      });
+      return;
+    }
+
+    const out = [];
+    const err = [];
+    let outBytes = 0;
+    let errBytes = 0;
+    let settled = false;
+    let truncated = false;
+
+    const finish = (code, failure) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      const stdout = Buffer.concat(out).toString("utf8");
+      const stderr = Buffer.concat(err).toString("utf8");
+      const result = {
+        ok: code === 0,
+        stdout,
+        stderr,
+        code,
+        message: failure ?? (code === 0 ? undefined : gitError(stdout, stderr, code)),
+        // `detail` is stdout+stderr for the dialog behind the toast, truncated to
+        // `ERROR_DETAIL_CHARS` with a trailing ellipsis (see `gitDetail`), so a
+        // runaway command cannot push megabytes through the bridge.
+        detail: code === 0 ? undefined : gitDetail(stdout, stderr),
+        truncated,
+      };
+      // `quiet` is for a probe whose *failure* is an expected answer (asking
+      // whether a file is tracked, say): recording it would dress an ordinary
+      // path up as a failure in the Console.
+      if (!options.quiet) recordConsole(args, result, cwd);
+      resolve(result);
+    };
+
+    const effectiveTimeoutMs = options.timeoutMs ?? COMMAND_TIMEOUT_MS;
+    const timer = setTimeout(() => {
+      try {
+        child.kill("SIGKILL");
+      } catch {
+        // Already gone.
+      }
+      finish(null, `git ${args[0] ?? ""} timed out after ${Math.round(effectiveTimeoutMs / 1000)}s`);
+    }, effectiveTimeoutMs);
+
+    child.stdout.on("data", (chunk) => {
+      outBytes += chunk.length;
+      if (outBytes > MAX_OUTPUT_BYTES) {
+        truncated = true;
+        try {
+          child.kill("SIGKILL");
+        } catch {
+          // Already gone.
+        }
+        finish(null, "Git output exceeded the size limit.");
+        return;
+      }
+      out.push(chunk);
+    });
+    child.stderr.on("data", (chunk) => {
+      errBytes += chunk.length;
+      if (errBytes > MAX_OUTPUT_BYTES) {
+        truncated = true;
+        return;
+      }
+      err.push(chunk);
+    });
+    child.on("error", (error) => finish(null, String(error?.message ?? error)));
+    child.on("close", (code) => finish(code));
+
+    if (options.input !== undefined) {
+      child.stdin.on("error", () => {
+        // Git exited before reading (e.g. a rejected patch); the close handler
+        // reports the real reason.
+      });
+      child.stdin.end(options.input, "utf8");
+    } else {
+      child.stdin.end();
+    }
+  });
+}
+
+function firstLine(text) {
+  const line = String(text ?? "").trim().split("\n").find((value) => value.trim());
+  return line ? line.trim() : "";
+}
+
+/**
+ * How many lines of Git's own output the one-line message carries. The toast is
+ * small and disappears; `detail` is where the whole thing goes.
+ */
+const ERROR_LINES = 6;
+/** Bounded so a runaway command cannot push megabytes through the bridge. */
+const ERROR_DETAIL_CHARS = 4000;
+
+// Note: 报错管线必须同时读 stdout 和 stderr——判据是"失败时哪一行能指出下一步"，不是"哪个流更像错误流"（push 的拒绝在 stderr，merge 的 CONFLICT 在 stdout）；hint 行从短消息里剔除、改用代码分类后的本地化补救，但完整输出仍进 detail 不丢 — 见 .agents/notes/implemented/architecture/2026-09-12-remote-sync-conflicts.md
+/**
+ * Turn a failed command's output into something a person can act on.
+ *
+ * Both streams are read, because Git does not agree on one: `git push` reports
+ * the rejection on **stderr**, while `git merge` — and therefore the second half
+ * of `git pull` — reports `CONFLICT` on **stdout**. Reading only stderr, which
+ * is what this used to do, turned a conflicted pull into a message that read
+ * like a successful fetch log.
+ *
+ * `hint:` lines are dropped here because they are Git's generic advice, in
+ * English; the remedy shown instead is classified by
+ * `authHint`/`pushHint`/`pullHint` and worded by the views in the user's own
+ * language. They are still in `detail`, which is what the toast links to. When
+ * dropping them would leave nothing at all they are kept: the rule is "say
+ * something", not "say nothing that came from a hint".
+ */
+function gitError(stdout, stderr, code) {
+  const meaningful = [];
+  const hints = [];
+  const seen = new Set();
+  for (const stream of [stderr, stdout]) {
+    for (const raw of String(stream ?? "").split("\n")) {
+      const line = raw.trimEnd();
+      const key = line.trim();
+      if (!key || seen.has(key)) continue;
+      seen.add(key);
+      (key.startsWith("hint:") ? hints : meaningful).push(line);
+    }
+  }
+  const lines = meaningful.length ? meaningful : hints;
+  if (!lines.length) return `git exited with ${code}`;
+  return lines.slice(0, ERROR_LINES).join("\n");
+}
+
+/** The untrimmed output, for the details dialog behind an error toast. */
+function gitDetail(stdout, stderr) {
+  const text = [stderr, stdout]
+    .map((stream) => String(stream ?? "").trim())
+    .filter(Boolean)
+    .join("\n");
+  if (!text) return null;
+  return text.length > ERROR_DETAIL_CHARS ? `${text.slice(0, ERROR_DETAIL_CHARS)}\n…` : text;
+}
+
+/**
+ * Classify an authentication failure so the views can explain it.
+ *
+ * The plugin deliberately holds no credentials: it runs the user's own `git`
+ * with the user's own `HOME`, so it inherits exactly the credential helpers,
+ * `~/.ssh/config` and keys that their terminal uses. That inheritance is the
+ * whole design — but it also means that when it is missing, the plugin has no
+ * way to ask. Prompts are disabled so a command fails fast rather than hanging
+ * with no terminal, which turns "no credential configured" into a dead end
+ * whose raw output names no remedy.
+ *
+ * Returns a stable code, never prose: the wording belongs to the views, which
+ * are the only part that knows the user's language.
+ */
+function authHint(stdout, stderr) {
+  const text = `${stderr ?? ""}\n${stdout ?? ""}`;
+  if (!text.trim()) return null;
+  if (/Permission denied \(publickey\)|Host key verification failed|Could not read from remote repository/i.test(text)) {
+    return "ssh";
+  }
+  if (
+    /Authentication failed|could not read Username|could not read Password|terminal prompts disabled|Invalid username or token|HTTP 401|401 Unauthorized/i.test(text)
+  ) {
+    return "credentials";
+  }
+  return null;
+}
+
+/**
+ * Classify a refused push so the views can name the way out.
+ *
+ * Git prints `! [rejected]` (or `[remote rejected]`) and then the reason in
+ * parentheses. Two of those reasons are one situation for the user — someone
+ * else moved the branch, and it has to be integrated before it can be pushed
+ * again — and the rest are the server saying no outright. Returns a stable
+ * code, never prose.
+ */
+function pushHint(stdout, stderr) {
+  const text = `${stderr ?? ""}\n${stdout ?? ""}`;
+  if (!/!\s*\[(?:remote )?rejected\]/i.test(text)) return null;
+  if (/\((?:fetch first|non-fast-forward|stale info)\)/i.test(text)) return "remote-ahead";
+  return "remote-rejected";
+}
+/**
+ * True when `git pull` refused only because no reconcile strategy is
+ * configured — the one failure this plugin answers itself, by retrying with
+ * `--no-rebase`. Every other refusal is the user's configuration talking, and
+ * is reported as it came.
+ */
+function needsReconcile(stdout, stderr) {
+  return /Need to specify how to reconcile divergent branches/i.test(`${stdout ?? ""}\n${stderr ?? ""}`);
+}
+
+/**
+ * Classify a failed pull.
+ *
+ * `diverged` is what a user's own `pull.ff = only` says when it refuses a
+ * diverged branch. `conflicts` is the other outcome worth naming: Git reports it
+ * on stdout, and "there are conflicts to resolve" is the one thing the user must
+ * be told, since a pull that half-succeeded otherwise looks like a plain fetch.
+ */
+function pullHint(stdout, stderr) {
+  const text = `${stdout ?? ""}\n${stderr ?? ""}`;
+  if (/Need to specify how to reconcile|Not possible to fast-forward/i.test(text)) return "diverged";
+  if (/CONFLICT \(|Automatic merge failed|fix conflicts and then commit/i.test(text)) return "conflicts";
+  return null;
+}
+
+// ---------------------------------------------------------------------------
+// Commit-message drafting
+// ---------------------------------------------------------------------------
+
+/**
+ * The message is written by the host's own model, through `pi.agent.complete`.
+ * The plugin holds no API key and picks no provider: the user's configured
+ * models are whatever `pi.models.list()` reports, which is exactly the set they
+ * already pay for.
+ */
+
+/** Enough history for the model to copy the repository's conventions. */
+const STYLE_SAMPLE_COMMITS = 40;
+/** The diff is a prompt, not a backup: keep it small enough to stay quick. */
+const MAX_PROMPT_PATCH_CHARS = 12_000;
+
+// Note: 语言是显式参数，而不是"匹配仓库历史"推断（英文历史会稳定压过用户的界面语言）；格式类规则提示词也保证不了，必须由 formatCommitMessage 在模型输出后强制成立 — 见 .agents/notes/implemented/architecture/2026-09-11-commit-message-prompt.md
+/**
+ * The instruction the model follows.
+ *
+ * "Match the repository" is the obvious rule and the one that used to be here,
+ * but it leaves two things to a guess: the language, which then follows training
+ * data back to English however Chinese the user is, and the shape of a good
+ * message, which the model has seen plenty of but not necessarily in this diff.
+ * So the language arrives as a parameter, and the facts `buildCommitContext`
+ * measured about the repository (language, subject prefix, body usage) arrive
+ * with the request.
+ *
+ * The prompt is deliberately long. A commit subject is short-lived in attention
+ * but permanent in history, and every clause below answers a failure that shows
+ * up in real drafts: a code fence, a "commit message:" prefix, a body that
+ * restates the diff, an English subject on a Chinese project, a subject that
+ * never ends, punctuation half full-width.
+ */
+function buildSystemPrompt(lang, style) {
+  // The history's language and the drafted message's language are two different
+  // things, and the model will follow whichever it is told about last. So every
+  // branch below states the language the message MUST be written in, then says
+  // what the history is for: evidence of tone and structure, never a licence to
+  // switch language.
+  //
+  // This note is keyed on the history being *empty*, not on its language being
+  // unmeasurable: a repository whose subjects carry no letters still has a
+  // history, and telling the model otherwise would contradict the samples it is
+  // shown in the same request.
+  const noHistory = style.count === 0;
+  const historyNote = noHistory
+    ? "This repository has no commit history to follow, so the rules above are the only guidance on how the message reads."
+    : null;
+
+  const languageRule = lang === "zh"
+    ? [
+        "Write the commit message in Simplified Chinese, including the subject and every line of the body.",
+        style.language === "zh"
+          ? "The repository's own history is Chinese too, so match its tone as well."
+          : style.language === "en"
+            ? "The repository's history is in English, but that is not the language of this message: use Chinese anyway, and use that history only as a model for structure and for how long a subject runs."
+            : historyNote ?? "The repository's history gives no clear signal about wording; follow the rules above.",
+        "Use half-width punctuation where characters are ASCII and full-width where they are Chinese: `feat(登录): 支持短信验证码`, not `feat（登录）:支持短信验证码`.",
+      ]
+    : [
+        "Write the commit message in English, including the subject and every line of the body.",
+        "Keep the subject in the imperative mood, start it with a capital letter, and do not end it with a full stop.",
+        // The same guard the Chinese branch carries, for the same reason: a
+        // Chinese history must not drag an explicitly-English draft into
+        // Chinese.
+        style.language === "zh"
+          ? "The repository's history is Chinese, but that is not the language of this message: use English anyway, and use that history only as a model for structure and for how long a subject runs."
+          : historyNote ?? "The repository's history gives no clear signal about wording; follow the rules above.",
+      ].filter(Boolean);
+
+  const conventional = style.conventional
+    ? "This repository prefixes its subjects: `type(scope): description`. Keep that shape, keep the `type` and `scope` in ASCII exactly as the samples spell them, and pick the one type that dominates this change. If the samples use no scope, leave the parentheses out rather than inventing one."
+    : "Do not invent a `type:` prefix. Follow the subject shape this repository already uses.";
+
+  // Keyed off the language the message is actually written in, not off the
+  // repository's measured history: for a Chinese draft the guidance on line
+  // length has to be the Chinese one even when the history was English or empty.
+  const bodyStyle = lang === "zh"
+    ? "In the body wrap English lines near 72 columns and keep Chinese lines short; write each bullet as one idea rather than one file."
+    : "In the body wrap English lines near 72 columns; write each bullet as one idea rather than one file.";
+
+  return [
+    "You write a single Git commit message.",
+    "Reply with that message and nothing else: no preamble, no explanation, no analysis, no markdown code fences, no `commit message:` label, no surrounding quotes.",
+    "First line is the subject; it states what the change does, never what it is.",
+    "Keep the subject short: aim for 50 characters and never exceed 72. A Chinese character is about twice as wide as a Latin one, so a Chinese subject stays under about 25 characters, and the subject is a single line — never continue it into the first sentence of the body.",
+    "The blank line after the subject is mandatory. Git treats every line up to the first blank line as the title, so a message without it has no body at all — only one enormous subject.",
+    "The body says why the change was made and what it makes different from here on: not a file list, not a walk through the diff, not the names of the functions you saw. Write one idea per line, and when the change has several parts give each part its own line.",
+    "When the change is thoroughly self-evident, the subject alone is the whole message.",
+    bodyStyle,
+    "After the body, leave another blank line and then footers, when they apply: `BREAKING CHANGE: <what callers must do>` for a change that is not backward compatible. Do not add any other trailer.",
+    "Never mention that you wrote the message, never address the user, and never ask a question.",
+    conventional,
+    // A worked example beats another rule, and it is the one thing that fixes
+    // the failure this prompt kept hitting: the model knew the words "blank
+    // line" and still returned subject-then-body with nothing between them.
+    // Showing the shape is unambiguous in a way the sentence was not.
+    "Reply in exactly this shape, with your own content:",
+    "<commit-message>",
+    ...(lang === "zh"
+      ? [
+          style.conventional ? "feat(登录): 支持短信验证码登录" : "支持短信验证码登录",
+          "",
+          "- 验证码 60 秒内可重发，过期后提示重新获取",
+          "- 连续失败三次锁定十分钟，避免被暴力猜解",
+          "- 未登录用户仍可用密码登录，行为不变",
+        ]
+      : [
+          style.conventional ? "feat(auth): add SMS code sign-in" : "Add SMS code sign-in",
+          "",
+          "- Let the code be resent after 60 seconds and say so once it expires",
+          "- Lock the account for ten minutes after three failed attempts",
+          "- Password sign-in is unchanged for accounts without a phone number",
+        ]),
+    "</commit-message>",
+    ...languageRule,
+  ].join("\n");
+}
+
+/**
+ * Which language the message must be written in. `auto` is not "guess": it is
+ * the language the repository's own subjects are written in, measured by
+ * `commitStyle`, and it falls back to the view's locale so a brand-new
+ * repository still lands in the language the user reads.
+ */
+function resolveCommitLang(preference, style, locale) {
+  if (preference === "zh") return "zh";
+  if (preference === "en") return "en";
+  if (style.language) return style.language;
+  return String(locale ?? "").toLowerCase().startsWith("zh") ? "zh" : "en";
+}
+
+/** Strip the shapes a model adds around a message even when told not to. */
+function tidyCommitMessage(raw) {
+  let text = String(raw ?? "").trim();
+  const fence = /^```[a-zA-Z]*\n([\s\S]*?)\n?```$/.exec(text);
+  if (fence) text = fence[1].trim();
+  text = text.replace(/^(commit message|提交信息)\s*[:：]\s*/i, "");
+  return text.replace(/\s+$/, "");
+}
+
+// ---------------------------------------------------------------------------
+// Shaping the message
+//
+// The model is asked for a shape; this section *enforces* it. Everything here
+// answers a defect that shows up in real drafts and that a prompt alone did not
+// prevent:
+//
+//   - the body begins on the line straight after the subject, with no blank
+//     line between them. Git takes everything up to the first blank line as the
+//     title, so that draft is one enormous subject — the defect a reader
+//     reports as "this is not a proper commit message".
+//   - the body is one run-on sentence, or three ideas joined by `；`, where one
+//     idea per line belongs.
+//   - nothing is wrapped: a model does not measure columns, so a Chinese body
+//     arrives as a single 150-column line.
+//
+// None of it rewrites the model's words. It only puts those words where Git
+// expects to find them.
+// ---------------------------------------------------------------------------
+
+/**
+ * Display width, not `String.length`: every terminal and every web Git host
+ * renders a CJK glyph two columns wide, which is why the 50/72 rule from
+ * git-commit(1) means about 25 Chinese characters rather than 50.
+ */
+const WIDE_CHAR = /[\u1100-\u115f\u2e80-\u303e\u3041-\u33ff\u3400-\u4dbf\u4e00-\u9fff\ua000-\ua4cf\uac00-\ud7a3\uf900-\ufaff\ufe30-\ufe6f\uff00-\uff60\uffe0-\uffe6]/;
+
+function textWidth(value) {
+  let width = 0;
+  for (const char of String(value ?? "")) width += WIDE_CHAR.test(char) ? 2 : 1;
+  return width;
+}
+
+/** git-commit(1) asks for 50 columns and tools start truncating at 72. */
+const SUBJECT_TARGET_WIDTH = 50;
+const SUBJECT_MAX_WIDTH = 72;
+const BODY_WRAP_WIDTH = 72;
+
+/**
+ * Hard-wrap to `limit` columns. Latin breaks at the last space so words survive
+ * intact; CJK has no spaces and may break between any two characters, which is
+ * what a reader of Chinese expects anyway.
+ */
+function wrapText(value, limit) {
+  const out = [];
+  let line = "";
+  const flush = () => {
+    if (line) out.push(line);
+    line = "";
+  };
+  for (const char of String(value ?? "")) {
+    if (char === "\n") {
+      flush();
+      continue;
+    }
+    if (!line || textWidth(line) + textWidth(char) <= limit) {
+      line += char;
+      continue;
+    }
+    const space = line.lastIndexOf(" ");
+    // Only honour a space in the back half of the line: breaking at one far to
+    // the left would leave every wrapped line ragged.
+    if (space >= limit / 2) {
+      out.push(line.slice(0, space));
+      line = `${line.slice(space + 1)}${char}`;
+    } else {
+      flush();
+      line = char;
+    }
+  }
+  flush();
+  return out;
+}
+
+/** A title is never a list item and never ends in punctuation. */
+const TITLE_TRIM = /^[-*+\s]+|[\s。．.，,；;：:、]+$/g;
+
+/**
+ * Keep the subject a subject. Handed a change with three parts, a model tends to
+ * write all three into the first line, which is how a subject ends up past the
+ * 72-column ceiling and reads like a paragraph. The overflow moves into the body
+ * at a clause boundary rather than being truncated: nothing the model saw in the
+ * diff is discarded, it is only put where Git expects it.
+ */
+function splitSubject(value) {
+  const subject = String(value ?? "").replace(TITLE_TRIM, "");
+  if (textWidth(subject) <= SUBJECT_MAX_WIDTH) return { subject, rest: [] };
+
+  const boundaries = [];
+  const pattern = /[，,；;：:。！？!?]\s*/g;
+  let match;
+  while ((match = pattern.exec(subject))) boundaries.push(match.index + match[0].length);
+  const fitsTarget = boundaries
+    .filter((index) => textWidth(subject.slice(0, index)) <= SUBJECT_TARGET_WIDTH)
+    .pop();
+  const fitsCeiling = boundaries.find((index) => textWidth(subject.slice(0, index)) <= SUBJECT_MAX_WIDTH);
+  const cut = fitsTarget ?? fitsCeiling;
+  // No boundary fits: the subject is one unbroken phrase, and cutting it would
+  // invent a title the model never wrote. Leave it alone.
+  if (!cut) return { subject, rest: [] };
+
+  return {
+    subject: subject.slice(0, cut).replace(TITLE_TRIM, ""),
+    rest: [subject.slice(cut).trim()],
+  };
+}
+
+/**
+ * Chinese punctuation inside Chinese text. Models drift to the ASCII `,` and
+ * `;` mid-sentence, which reads as a typo in a commit log. The guard is strictly
+ * Han-on-both-sides, so `feat(a,b): 支持` and anything else in ASCII — paths,
+ * identifiers, URLs — is left exactly as written.
+ */
+function normalizeCommitPunctuation(value) {
+  return String(value ?? "").replace(
+    /([\p{Script=Han}])([,;])(?=[\p{Script=Han}])/gu,
+    (match, before, mark) => `${before}${mark === "," ? "，" : "；"}`,
+  );
+}
+
+/** A body line indented under the bullet above it — the shape wrapping produces. */
+const CONTINUATION_LINE = /^[ \t]/;
+
+/**
+ * Rejoin a line with the one it was wrapped from. Latin wrapping consumes the
+ * space it broke at, so it has to be put back; CJK wrapping breaks between two
+ * characters and must not gain one. Asking whether the two ends are ASCII is
+ * enough to tell those apart, and it is what makes this function idempotent.
+ */
+function joinWrapped(previous, next) {
+  const needsSpace = /[A-Za-z0-9,;:.)\]"'`]$/.test(previous) && /^[A-Za-z0-9(\["'`]/.test(next);
+  return needsSpace ? `${previous} ${next}` : `${previous}${next}`;
+}
+
+/** One logical line of the body, rendered into `out` at Git's 72-column width. */
+function renderParagraph(out, text) {
+  const bullet = /^[-*+]\s+/.exec(text);
+  // A semicolon joins separate ideas, and the prompt asked for one idea per
+  // line — but only when the line is long enough for that to be the problem:
+  // splitting `修复拼写；无行为变化` into two bullets would be noise.
+  const clauses = bullet ? [text] : text.split(/[；;]/).map((part) => part.trim()).filter(Boolean);
+  if (clauses.length > 1 && textWidth(text) > SUBJECT_TARGET_WIDTH) {
+    for (const clause of clauses) {
+      // The marker spends two columns, so the text keeps the same right edge.
+      wrapText(clause, BODY_WRAP_WIDTH - 2).forEach((line, index) => {
+        out.push(index ? `  ${line}` : `- ${line}`);
+      });
+    }
+    return;
+  }
+  if (bullet) {
+    const indent = " ".repeat(bullet[0].length);
+    wrapText(text.slice(bullet[0].length), BODY_WRAP_WIDTH - bullet[0].length).forEach((line, index) => {
+      out.push(index ? `${indent}${line}` : `${bullet[0]}${line}`);
+    });
+    return;
+  }
+  out.push(...wrapText(text, BODY_WRAP_WIDTH));
+}
+
+/**
+ * The message the user actually receives — shaped here rather than trusted from
+ * the model. `subject` is one line; exactly one blank line separates it from the
+ * body, even when the model forgot it; the body is wrapped to Git's 72 columns,
+ * and semicolon-joined clauses become one bullet each.
+ *
+ * Idempotent on a well-formed draft, which matters because this runs on every
+ * reply and that reply may already be correct: a subject under the ceiling keeps
+ * its line, a body already broken into bullets is only re-wrapped (its
+ * continuation lines are re-joined first, then wrapped to the same result), and
+ * a paragraph with a single clause stays prose.
+ */
+function formatCommitMessage(raw) {
+  const text = normalizeCommitPunctuation(tidyCommitMessage(raw)).replace(/\r\n?/g, "\n");
+  const lines = text.split("\n").map((line) => line.replace(/\s+$/, ""));
+
+  let index = 0;
+  while (index < lines.length && !lines[index].trim()) index++;
+  if (index >= lines.length) return "";
+  const { subject, rest } = splitSubject(lines[index].trim());
+  index++;
+
+  // Fold the body into logical lines. An indented line continues the line above
+  // it, which is how this function itself writes a wrapped bullet or sentence; a
+  // blank line is a paragraph break and nothing else is.
+  const logical = [];
+  let pending = null;
+  for (const line of lines.slice(index)) {
+    if (!line.trim()) {
+      if (pending) {
+        logical.push(pending);
+        pending = null;
+      }
+      if (logical.length && !logical[logical.length - 1].paragraphBreak) {
+        logical.push({ paragraphBreak: true });
+      }
+      continue;
+    }
+    if (pending && CONTINUATION_LINE.test(line)) {
+      pending = { text: joinWrapped(pending.text, line.trim()) };
+      continue;
+    }
+    if (pending) logical.push(pending);
+    pending = { text: line.trim() };
+  }
+  if (pending) logical.push(pending);
+  while (logical.length && logical[logical.length - 1].paragraphBreak) logical.pop();
+
+  const body = [];
+  for (const item of [...rest.map((text_) => ({ text: text_ })), ...logical]) {
+    if (item.paragraphBreak) {
+      // Paragraph breaks the model wrote are preserved, never doubled.
+      if (body.length && body[body.length - 1] !== "") body.push("");
+      continue;
+    }
+    renderParagraph(body, item.text);
+  }
+  while (body.length && body[body.length - 1] === "") body.pop();
+
+  return body.length ? `${subject}\n\n${body.join("\n")}` : subject;
+}
+
+/** A subject prefix (`fix(parser)!: …`) — the pattern, not its type names. */
+const SUBJECT_PREFIX = /^[a-z][a-z0-9-]*(?:\([^)\n]{1,30}\))?!?: \S/;
+
+// Note: 风格事实由插件实测，而不是让模型猜（历史语言 / 是否用 type(scope): 前缀 / 是否写正文），并由 buildCommitContext 措辞进用户消息；language 测不出来时必须是 null，折成 "en" 会让界面语言回退变成死代码 — 见 .agents/notes/implemented/architecture/2026-09-11-commit-message-prompt.md
+/**
+ * What the repository's recent history says about how to write here: which
+ * language it commits in, whether it prefixes its subjects, and whether anyone
+ * writes a body. Read from full messages rather than subjects, because the last
+ * two are properties of the whole message.
+ *
+ * `language` is `null` only when there is nothing to measure — an empty history,
+ * or subjects with no letters at all. It used to collapse that case to `"en"`,
+ * which made `resolveCommitLang`'s locale fallback dead code: a brand-new
+ * repository drafted in English no matter which language the window spoke.
+ * "Unknown" is a real answer and has to survive this far for the caller to act
+ * on it — but it must stay reserved for that case. A repository that *does*
+ * have history has a language, and folding a tie into `null` would hand a
+ * Chinese repository to the locale fallback just because its subjects also
+ * contain ASCII.
+ */
+function commitStyle(samples) {
+  // A subject with Chinese in it is a Chinese subject, full stop: the two
+  // buckets are mutually exclusive rather than both-incrementing. Counting
+  // `feat(登录): 支持短信验证码` in *both* buckets (it has CJK and a 3-letter
+  // ASCII run) made every subject in a Chinese Conventional-Commits repository
+  // cancel out, so the tie-break decided the language instead of the evidence.
+  const isChinese = (value) => /[\u3400-\u9fff]/.test(value);
+  const chinese = samples.filter((entry) => isChinese(entry.subject)).length;
+  const english = samples.filter(
+    (entry) => !isChinese(entry.subject) && /[A-Za-z]{3}/.test(entry.subject),
+  ).length;
+  return {
+    // `count` is what callers need to tell "no history" apart from "history I
+    // could not classify": `language` is null in both cases, but only the first
+    // one lets the prompt say the repository has no history.
+    count: samples.length,
+    language: chinese || english ? (chinese >= english ? "zh" : "en") : null,
+    conventional: samples.filter((entry) => SUBJECT_PREFIX.test(entry.subject)).length >= 2,
+    bodies: samples.some((entry) => entry.body),
+  };
+}
+
+/**
+ * Parse `git log --format=%s%x00%b%x1e` into subjects and bodies. The
+ * separators are control characters, which no commit message can contain, so
+ * this stays a split rather than a regex over user text.
+ */
+function parseStyleSamples(stdout) {
+  return String(stdout ?? "")
+    .split(RS_CHAR)
+    .map((record) => {
+      const [subject, body] = record.split(FS_CHAR);
+      return { subject: String(subject ?? "").trim(), body: String(body ?? "").trim() };
+    })
+    .filter((entry) => entry.subject);
+}
+
+/**
+ * What the model gets to read: the change, plus what the repository's own
+ * history says about how a message is written here. The facts are computed by
+ * us and stated in prose; the samples stay as evidence of tone.
+ */
+async function buildCommitContext(repo, payload) {
+  const path = typeof payload?.path === "string" && payload.path.trim() ? payload.path.trim() : null;
+  const mode = payload?.mode === "index" ? "index" : "worktree";
+// Note: 多仓已暂存聚合进一个 prompt（stagedRoots）— 见 .agents/notes/implemented/bug-fix/2026-09-14-commit-message-checked-scope.md
+  // Multi-repo staged draft: the Commit view commits every repo with staged
+  // files using one message, so the draft must read all of them — not just the
+  // selected repo's index (which for a parent is often only gitlink bumps).
+  const stagedRoots = Array.isArray(payload?.stagedRoots)
+    ? [...new Set((payload.stagedRoots ?? []).filter((value) => typeof value === "string" && value))]
+    : null;
+
+  // The caller passes repository-relative paths; only paths that stay inside
+  // the repository are accepted, the same rule the staging channels use.
+  if (path && !isSafePath(path)) {
+    return { ok: false, code: "BAD_PATH", message: "Unsafe path rejected." };
+  }
+
+  const log = await runGit(
+    ["log", `-${STYLE_SAMPLE_COMMITS}`, `--pretty=format:%s${FS_CHAR}%b${RS_CHAR}`],
+    { cwd: repo.root },
+  );
+  const samples = log.ok ? parseStyleSamples(log.stdout) : [];
+  const style = commitStyle(samples);
+  const lang = resolveCommitLang(payload?.lang, style, payload?.locale);
+
+  let patch = "";
+  let scope = "";
+  let files = [];
+
+  if (path) {
+    const diff = await readDiff(repo, path, mode, false);
+    if (!diff.ok) return { ok: false, code: "NO_DIFF", message: diff.message ?? "No changes to describe." };
+    patch = diff.text;
+    scope = { kind: "file", path, mode };
+    files = [path];
+  } else if (stagedRoots && stagedRoots.length) {
+    const baseWs = repo.workspaceRoot ?? repo.workspace ?? repo.root;
+    const parts = [];
+    const aggregated = [];
+    let okRepos = 0;
+    for (const rawRoot of stagedRoots) {
+      if (!rawRoot || !isInside(baseWs, rawRoot)) continue;
+      const resolved = await resolveRepositoryRoot(rawRoot);
+      if (!resolved) continue;
+      const diff = await runGit(
+        // `--no-prefix` only trims a/ and b/ noise out of the prompt; this text is
+        // never fed back to `git apply`.
+        ["diff", "--cached", "--no-color", "--no-ext-diff", "--no-prefix", "-U3"],
+        { cwd: resolved },
+      );
+      if (!diff.ok) continue;
+      const text = diff.stdout ?? "";
+      if (!text.trim()) continue;
+      okRepos += 1;
+      let rel = null;
+      try {
+        rel = workspaceRelativeRoot(baseWs, resolved);
+      } catch {
+        rel = null;
+      }
+      if (!rel || rel === ".") {
+        rel = samePath(resolved, repo.root) ? (repo.rel ?? ".") : path.basename(resolved);
+      }
+      parts.push(rel && rel !== "." ? `=== ${rel} ===\n${text}` : text);
+      const names = await runGit(["diff", "--cached", "--name-only", "--no-color"], { cwd: resolved });
+      if (names.ok) {
+        for (const line of names.stdout.split("\n")) {
+          const name = line.trim();
+          if (!name) continue;
+          aggregated.push(rel && rel !== "." ? `${rel}/${name}` : name);
+        }
+      }
+    }
+    if (!parts.length) {
+      return {
+        ok: false,
+        code: "EMPTY_DIFF",
+        message: "Nothing is staged. Stage the change first, or select a file in the Changes list.",
+      };
+    }
+    patch = parts.join("\n");
+    scope = { kind: "staged", repos: okRepos };
+    files = [...new Set(aggregated)];
+  } else {
+    const diff = await runGit(
+      // `--no-prefix` only trims a/ and b/ noise out of the prompt; this text is
+      // never fed back to `git apply`.
+      ["diff", "--cached", "--no-color", "--no-ext-diff", "--no-prefix", "-U3"],
+      { cwd: repo.root },
+    );
+    if (!diff.ok) return { ok: false, code: "NO_DIFF", message: diff.message ?? "No changes to describe." };
+    patch = diff.stdout;
+    scope = { kind: "staged" };
+    // `status --porcelain` folds a rename into one record and marks a
+    // conflicted file once, where `diff --name-only` repeats a path that is
+    // changed in both the index and the worktree.
+    const names = await runGit(["status", "--porcelain", "--untracked-files=no"], { cwd: repo.root });
+    files = names.ok
+      ? [...new Set(names.stdout.split("\n").map((line) => line.slice(3).trim()).filter(Boolean))]
+      : [];
+  }
+
+  if (!patch.trim()) {
+    return {
+      ok: false,
+      code: "EMPTY_DIFF",
+      message: path
+        ? `No changes to describe for ${path}.`
+        : "Nothing is staged. Stage the change first, or select a file in the Changes list.",
+    };
+  }
+
+  const truncated = patch.length > MAX_PROMPT_PATCH_CHARS;
+  // State the language the message must be written in, not merely what the
+  // history happens to be: when those disagreed (English history, Chinese
+  // draft) the old wording restated the history and the model followed *it*.
+  // Branch on `style.language` itself, never on the display string derived from
+  // it, so rewording a label cannot silently flip which clause is chosen.
+  const hasHistory = style.count > 0;
+  const historyLanguage = style.language === "zh"
+    ? "Chinese"
+    : style.language === "en" ? "English" : null;
+  const styleLines = [
+    // "No history" is a claim about `samples`, so it is gated on `samples`:
+    // `language` is also null for an empty history, but a measured history can
+    // still have no lettered subjects, and calling that "no history" while the
+    // samples are printed below would contradict the same message.
+    hasHistory && historyLanguage
+      ? `Language of recent commit subjects: ${historyLanguage}.`
+      : hasHistory
+        ? "Language of recent commit subjects: not determinable from the samples below."
+        : "Recent commit subjects: none to measure — this repository has no commit history yet.",
+    lang === "zh"
+      ? `Write this message in Simplified Chinese${style.language === "en"
+          ? " even though the history is English; use that history only for structure and subject length."
+          : style.language === "zh" ? ", matching the history." : "."}`
+      : `Write this message in English${style.language === "zh"
+          ? ", even though the history is Chinese."
+          : style.language === "en" ? ", matching the history." : "."}`,
+  ];
+  const body = [
+    "Repository commit style",
+    "-----------------------",
+    ...styleLines,
+    `Subject prefix: ${style.conventional
+      ? "recent subjects look like `type(scope): description`; keep that shape."
+      : "recent subjects carry no `type:` prefix; do not add one."}`,
+    style.bodies
+      ? "Recent commits do write bodies; use one when the change needs it."
+      : "Recent commits are usually a single line; add a body only when the change genuinely needs one.",
+    "",
+    "Format the message as:",
+    "  subject",
+    "  <blank line>",
+    "  body, when it helps",
+    "",
+    samples.length
+      ? `Recent commit messages from this repository:\n${samples.map((entry) => entry.subject).join("\n")}`
+      : "This repository has no commit history yet.",
+    "",
+    scope?.repos > 1
+      ? `Change to describe (${scope.repos} repositories share this one message; sections are marked === <repo> === — describe them together and name the repo for a part that belongs to only one)`
+      : "Change to describe",
+    "------------------",
+    "```diff",
+    truncated ? patch.slice(0, MAX_PROMPT_PATCH_CHARS) : patch,
+    truncated ? "[diff truncated: describe what is visible here, and nothing you cannot see]" : "",
+    "```",
+  ].filter((line) => line !== "").join("\n");
+
+  // The prompt describes the scope in prose; the caller gets the structure above
+  // and phrases it in the user's language.
+  return { ok: true, content: body, lang, style, scope, files };
+}
+
+async function listModels() {
+  let models;
+  try {
+    models = await pi.models.list();
+  } catch (error) {
+    return {
+      ok: false,
+      code: String(error?.code ?? "MODEL_LIST_FAILED"),
+      message: String(error?.message ?? error),
+      models: [],
+    };
+  }
+  if (!Array.isArray(models) || !models.length) {
+    return { ok: false, code: "NO_MODEL", message: "No model is available.", models: [] };
+  }
+  return { ok: true, models };
+}
+
+/**
+ * Draft a message for everything checked (staged) — the set Commit will commit,
+ * across repos when several have staged files — or, when nothing is staged, for
+ * the selected file. `text` carries the draft; `message` stays what it is
+ * everywhere else in this file — the error text.
+ */
+async function draftCommitMessage(repo, payload) {
+  const listing = await listModels();
+  if (!listing.ok) return listing;
+  const models = listing.models;
+
+  const wanted = String(payload?.modelKey ?? "").trim();
+  const model = models.find((row) => row.key === wanted) ?? models[0];
+
+  const context = await buildCommitContext(repo, payload);
+  if (!context.ok) return context;
+  const system = buildSystemPrompt(context.lang, context.style);
+
+  try {
+    const result = await pi.agent.complete({
+      modelKey: model.key,
+      system,
+      messages: [{ role: "user", content: context.content }],
+    });
+    // Shaped here, not trusted from the model: see `formatCommitMessage`.
+    const text = formatCommitMessage(result?.text);
+    if (!text) return { ok: false, code: "EMPTY_REPLY", message: "The model returned nothing." };
+    return {
+      ok: true,
+      text,
+      modelKey: result?.modelKey ?? model.key,
+      lang: context.lang,
+      scope: context.scope,
+      files: context.files,
+    };
+  } catch (error) {
+    // The host reports these as codes; keep them so the view can phrase them.
+    return {
+      ok: false,
+      code: String(error?.code ?? "FAILED"),
+      message: String(error?.message ?? error),
+    };
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Workspace and repository
+// ---------------------------------------------------------------------------
+
+/**
+ * The active workspace, kept as a cache that is *always* refreshed before it is
+ * trusted.
+ *
+ * This used to latch on first read, which quietly pinned the plugin to whatever
+ * project was open when it first ran: switching projects left the tool window
+ * reading (and writing) the previous repository. The host announces switches on
+ * `workspace:changed`, and the one host call needed to read the current value is
+ * trivially cheap next to spawning `git`, so there is no reason to guess.
+ */
+let cachedWorkspace = null;
+
+function workspacePath() {
+  return cachedWorkspace;
+}
+
+async function refreshWorkspace() {
+  try {
+    const workspace = await pi.workspace.get();
+    const next = workspace?.path ?? null;
+    // A chosen repository belongs to the project it was chosen in. The plugin
+    // process outlives project switches, so the choice is dropped the moment
+    // the workspace changes — otherwise every command would keep running in
+    // the previous project's submodule.
+    if (next !== cachedWorkspace) selectedRoot = null;
+    cachedWorkspace = next;
+  } catch {
+    selectedRoot = null;
+    cachedWorkspace = null;
+  }
+  return cachedWorkspace;
+}
+
+// ---------------------------------------------------------------------------
+// Repositories
+// ---------------------------------------------------------------------------
+
+// Note: 一个项目多个仓库做成「仓库列表 + Root 选择器」，而不是给 41 个通道加参数或每仓库一个视图；选择属于打开的那个项目（会话级、不写 prefs、工作区一变就由 refreshWorkspace 清除），因为下次打开项目该看到项目自己的仓库 — 见 .agents/notes/implemented/architecture/2026-09-12-nested-repositories.md
+/**
+ * The repository the tool windows are pointed at when it is not the workspace's
+ * own repository: a checked-out submodule, or a repository nested anywhere
+ * inside it. `null` means "the workspace's own repository", which keeps the
+ * ordinary single-repository project free of any state.
+ * TODO: `selectedRoot` is module-global mutable state shared by overlapping
+ * `onPanelInvoke` calls; a `git/select-repo` racing a `readRepo` refresh can
+ * interleave the `refreshWorkspace` clear with the `isInside` check. Needs a
+ * generation counter or per-call snapshot, but that widens the change surface.
+ */
+let selectedRoot = null;
+
+/**
+ * How far the discovery walk goes below the workspace root, how many
+ * directories it is willing to look at, and the trees it will not enter.
+ *
+ * The walk runs on a refresh, in a project whose size is not known in advance,
+ * so it is bounded three ways. The skip list holds dependency, cache and build
+ * trees: they are large, and a Git repository inside one is a vendored or
+ * generated copy rather than something a person works in. A declared submodule
+ * is listed even when it sits outside all three bounds — see
+ * `discoverRepositories`.
+ */
+const REPO_SCAN_DEPTH = 4;
+const REPO_SCAN_BUDGET = 5000;
+const REPO_SCAN_SKIP = new Set([
+  ".git",
+  "node_modules",
+  "bower_components",
+  "vendor",
+  ".venv",
+  "venv",
+  "__pycache__",
+  ".mypy_cache",
+  ".pytest_cache",
+  ".tox",
+  ".gradle",
+  ".dart_tool",
+  "Pods",
+  ".cache",
+  ".next",
+  ".nuxt",
+  ".terraform",
+]);
+
+/**
+ * A path with symlinks resolved where the filesystem allows it.
+ *
+ * This is not pedantry: `git rev-parse --show-toplevel` answers with the real
+ * path, while the host hands out the workspace path as the user opened it, and
+ * on macOS the temporary directory alone differs by a `/private` prefix. A
+ * comparison of the two raw strings would conclude that a repository is not
+ * inside its own workspace.
+ */
+function realPath(value) {
+  try {
+    return fs.realpathSync(value);
+  } catch {
+    return path.resolve(value);
+  }
+}
+
+function samePath(left, right) {
+  if (!left || !right) return false;
+  return left === right || realPath(left) === realPath(right);
+}
+
+/** Is `child` the same directory as `parent`, or somewhere below it? */
+function isInside(parent, child) {
+  const base = realPath(parent);
+  const target = realPath(child);
+  return target === base || target.startsWith(base + path.sep);
+}
+
+/**
+ * The absolute path of the repository rooted exactly at `directory`, or null.
+ *
+ * `rev-parse` alone is not enough: run in a subdirectory it happily answers
+ * with the enclosing repository, which would let a view point the tool windows
+ * at `src/` and call it a repository of its own. A path that is not a
+ * directory, or not there at all, is not a repository either.
+ */
+async function resolveRepositoryRoot(directory) {
+  if (typeof directory !== "string" || !directory) return null;
+  let stats;
+  try {
+    stats = fs.statSync(directory);
+  } catch {
+    return null;
+  }
+  if (!stats.isDirectory()) return null;
+  const top = await runGit(["rev-parse", "--show-toplevel"], { cwd: directory });
+  if (!top.ok) return null;
+  const root = top.stdout.trim();
+  return samePath(root, directory) ? root : null;
+}
+
+/** The paths `.gitmodules` declares, read by Git's own config parser. */
+async function declaredSubmodulePaths(root) {
+  const paths = new Set();
+  const file = path.join(root, ".gitmodules");
+  // Asked only when there is something to ask. `config -f` on a missing file
+  // exits 1, which would show up in the Console as a failure on the ordinary
+  // path — and a project without submodules is the ordinary path.
+  if (!fs.existsSync(file)) return paths;
+  const result = await runGit(
+    ["config", "-f", ".gitmodules", "--get-regexp", "^submodule\\..*\\.path$"],
+    { cwd: root },
+  );
+  if (!result.ok) return paths;
+  for (const line of result.stdout.split("\n")) {
+    // `<key> <value>`; the value is the path, and it may contain spaces.
+    const match = /^\S+\s+(.+)$/.exec(line.trim());
+    if (match) paths.add(match[1].replace(/\\/g, "/"));
+  }
+  return paths;
+}
+
+/**
+ * Walk `root` for repositories, alphabetically by path.
+ *
+ * A directory holding `.git` is a repository: a submodule worktree has a file
+ * there, an ordinary clone a directory. Finding one does not end the walk —
+ * descending through it is what makes a submodule's own submodules, or a
+ * repository inside a vendored one, reachable at all, since the list is always
+ * built from the workspace's repository. Symlinked directories are skipped
+ * (`Dirent.isDirectory()` is already false for them), which also means a link
+ * pointing back up the tree cannot be followed.
+ */
+function scanNestedRepositories(root) {
+  const found = [];
+  let scanned = 0;
+
+  const walk = (directory, relative, depth) => {
+    if (depth > REPO_SCAN_DEPTH || scanned > REPO_SCAN_BUDGET) return;
+    let entries;
+    try {
+      entries = fs.readdirSync(directory, { withFileTypes: true });
+    } catch {
+      // Unreadable, or it went away mid-walk. Its parent is still a usable
+      // answer, so this is not an error worth surfacing.
+      return;
+    }
+    for (const entry of entries) {
+      if (!entry.isDirectory() || REPO_SCAN_SKIP.has(entry.name)) continue;
+      const childRelative = relative ? `${relative}/${entry.name}` : entry.name;
+      const child = path.join(directory, entry.name);
+      if (fs.existsSync(path.join(child, ".git"))) {
+        found.push({ root: child, rel: childRelative });
+      }
+      scanned += 1;
+      if (scanned > REPO_SCAN_BUDGET) return;
+      walk(child, childRelative, depth + 1);
+    }
+  };
+
+  walk(root, "", 1);
+  return found.sort((left, right) => left.rel.localeCompare(right.rel));
+}
+
+/**
+ * Which of these nested repositories the repository holding them records as a
+ * submodule.
+ *
+ * The index is the authority here, not `.gitmodules`: the parent records the
+ * exact commit of a submodule as a `160000` entry, and that entry is what
+ * staging and committing in the parent act on. A nested repository without such
+ * an entry is one that merely happens to live inside another repository — the
+ * parent stores its files instead, or ignores them. The question is asked once
+ * per holding repository, with every candidate as a single pathspec, so the
+ * cost does not grow with the number of nested repositories.
+ *
+ * @param {string} workspaceRoot
+ * @param {{root: string, rel: string}[]} nested
+ * @returns {Promise<Set<string>>} the `rel` of every submodule
+ */
+async function submodulePaths(workspaceRoot, nested) {
+  const rels = new Set(nested.map((entry) => entry.rel));
+  /** The repository directly holding `rel`: the longest prefix, or the root. */
+  const holderOf = (rel) => {
+    const parts = rel.split("/");
+    for (let length = parts.length - 1; length > 0; length -= 1) {
+      const candidate = parts.slice(0, length).join("/");
+      if (rels.has(candidate)) return candidate;
+    }
+    return "";
+  };
+
+  /*
+   * Grouped by the repository that holds them: the question goes to *that*
+   * repository's index, and the pathspec has to be in its terms — `mod/dep` is
+   * `dep` to `mod`. The full path would match nothing there, which would
+   * quietly classify every submodule of a submodule as merely nested.
+   */
+  const groups = new Map();
+  for (const entry of nested) {
+    const holder = holderOf(entry.rel);
+    if (!groups.has(holder)) {
+      groups.set(holder, {
+        root: holder ? path.join(workspaceRoot, holder) : workspaceRoot,
+        specs: [],
+      });
+    }
+    groups.get(holder).specs.push(holder ? entry.rel.slice(holder.length + 1) : entry.rel);
+  }
+
+  const submodules = new Set();
+  for (const [holder, group] of groups) {
+    const result = await runGit(
+      ["ls-files", "--stage", "-z", "--", ...group.specs],
+      { cwd: group.root },
+    );
+    if (!result.ok) continue;
+    for (const record of result.stdout.split("\0")) {
+      // `<mode> <object> <stage>\t<path>`
+      if (!record.startsWith("160000 ")) continue;
+      const tab = record.indexOf("\t");
+      if (tab < 0) continue;
+      // The record's path is the holder's, so the holder has to go back on
+      // before it can mean anything in the workspace-wide listing.
+      const found = record.slice(tab + 1).replace(/\\/g, "/");
+      submodules.add(holder ? `${holder}/${found}` : found);
+    }
+  }
+  return submodules;
+}
+
+// Note: 发现边界（深度 4 / 5000 目录 / 跳过依赖构建缓存树）只是对项目大小的猜测，.gitmodules 声明优先于猜测；kind 由持有者 index 里的 160000 gitlink 判定，而不是 .gitmodules — 见 .agents/notes/implemented/architecture/2026-09-12-nested-repositories.md
+/**
+ * Every repository the tool windows can be pointed at: the workspace's own
+ * repository first, then everything nested inside it.
+ *
+ * A declared submodule is added even when the walk's bounds left it out — a
+ * submodule placed deeper than `REPO_SCAN_DEPTH`, or inside a tree the skip
+ * list excludes. An entry in `.gitmodules` is a statement about the project,
+ * while the walk's limits are a guess about its size. A declared path that is
+ * not checked out is left out: there is no working tree to show or commit in.
+ */
+async function discoverRepositories(workspaceRoot) {
+  const workspaceIsRepo = await resolveRepositoryRoot(workspaceRoot);
+  const nested = scanNestedRepositories(workspaceRoot);
+  const known = new Set(nested.map((entry) => entry.rel));
+  for (const rel of await declaredSubmodulePaths(workspaceRoot)) {
+    if (known.has(rel)) continue;
+    const absolute = path.join(workspaceRoot, rel);
+    if (!isInside(workspaceRoot, absolute)) continue;
+    if (!fs.existsSync(path.join(absolute, ".git"))) continue;
+    nested.push({ root: absolute, rel });
+    known.add(rel);
+  }
+
+  const submodules = workspaceIsRepo ? await submodulePaths(workspaceRoot, nested) : new Set();
+  const repositories = nested
+    .sort((left, right) => left.rel.localeCompare(right.rel))
+    .map((entry) => ({
+      root: entry.root,
+      name: path.basename(entry.root),
+      rel: entry.rel,
+      // Note: 平级模式无父仓 index 可问，kind 记 sibling 而不是 nested，视图据此显示“平级仓库” — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+      kind: !workspaceIsRepo ? "sibling" : (submodules.has(entry.rel) ? "submodule" : "nested"),
+    }));
+  if (!workspaceIsRepo) return repositories;
+  return [
+    { root: workspaceRoot, name: path.basename(workspaceRoot), rel: ".", kind: "root" },
+    ...repositories,
+  ];
+}
+
+// Note: 「哪个仓库」只由 readRepo 决定——41 处 runGit 里只有它的 --show-toplevel 探测用默认 cwd，重定向这一个函数等于重定向整张命令表；选择每次校验、失效静默回退（回退比报错更接近用户预期），路径比较一律按 realpath（macOS /private/var 与 /var 是同一目录） — 见 .agents/notes/implemented/architecture/2026-09-12-nested-repositories.md
+/**
+ * Resolve the repository the commands run against: the one the user picked in
+ * the repository list, or the workspace's own repository.
+ *
+ * `git rev-parse` walks up parent directories, so a workspace nested inside a
+ * repository still resolves to that repository's root. A picked repository is
+ * honoured only while the workspace it was picked in is still open, it is still
+ * inside that workspace, and it is still a repository — a submodule can be
+ * deinitialised between two refreshes, and the tool windows have to fall back
+ * rather than fail.
+ */
+async function readRepo() {
+  await refreshWorkspace();
+  if (!cachedWorkspace) {
+    return { ok: false, code: "NO_WORKSPACE", message: "No workspace is open." };
+  }
+  const top = await runGit(["rev-parse", "--show-toplevel"]);
+  if (!top.ok) {
+    // Note: 平级多仓回退——工作区本身不是仓库但内含仓库时，以首个/已选平级仓为当前仓（siblingMode），而不是 NO_REPOSITORY；无命中仍返回 NO_REPOSITORY，单仓库行为不变 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+    // Sibling mode: the workspace is a plain folder containing repositories
+    // rather than a repository itself. Fall back to the selected (if still a
+    // repo inside it) or the first nested repository, so the repo list,
+    // aggregated commit and push dialog all work there too.
+    let siblings = [];
+    try {
+      siblings = scanNestedRepositories(cachedWorkspace);
+    } catch {
+      siblings = [];
+    }
+    if (!siblings.length) {
+      return {
+        ok: false,
+        code: "NO_REPOSITORY",
+        message: `Not a Git repository: ${cachedWorkspace}`,
+      };
+    }
+    let siblingRoot = null;
+    if (selectedRoot && isInside(cachedWorkspace, selectedRoot)) {
+      siblingRoot = await resolveRepositoryRoot(selectedRoot);
+      if (!siblingRoot) selectedRoot = null;
+    } else if (selectedRoot) {
+      selectedRoot = null;
+    }
+    if (!siblingRoot) {
+      const first = siblings.slice().sort((a, b) => String(a.rel).localeCompare(String(b.rel)))[0];
+      siblingRoot = (await resolveRepositoryRoot(first.root)) ?? first.root;
+      selectedRoot = siblingRoot;
+    }
+    if (!siblingRoot) {
+      return {
+        ok: false,
+        code: "NO_REPOSITORY",
+        message: `Not a Git repository: ${cachedWorkspace}`,
+      };
+    }
+    const siblingGitDir = await runGit(["rev-parse", "--absolute-git-dir"], { cwd: siblingRoot });
+    // Note: macOS 上 Git 给 /private/var 而宿主给 /var，直接 path.relative 会算出 ../../..；统一走 realPath（workspaceRelativeRoot 内部已做） — 见 nested-repositories 记忆第 2 节
+    const siblingRel = workspaceRelativeRoot(cachedWorkspace, siblingRoot);
+    return {
+      ok: true,
+      root: siblingRoot,
+      name: path.basename(siblingRoot),
+      rel: siblingRel ?? path.basename(siblingRoot),
+      workspacePrefix: siblingRel,
+      workspaceRoot: cachedWorkspace,
+      siblingMode: true,
+      gitDir: siblingGitDir.ok ? siblingGitDir.stdout.trim() : path.join(siblingRoot, ".git"),
+      workspace: cachedWorkspace,
+    };
+  }
+  const workspaceRoot = top.stdout.trim();
+  let root = workspaceRoot;
+  if (selectedRoot && !samePath(selectedRoot, workspaceRoot)) {
+    const resolved = isInside(workspaceRoot, selectedRoot)
+      ? await resolveRepositoryRoot(selectedRoot)
+      : null;
+    if (resolved) root = resolved;
+    else selectedRoot = null;
+  }
+  if (samePath(root, workspaceRoot)) selectedRoot = null;
+
+  const gitDir = await runGit(["rev-parse", "--absolute-git-dir"], { cwd: root });
+  const relative = path.relative(workspaceRoot, root);
+  return {
+    ok: true,
+    root,
+    name: path.basename(root),
+    // Where the repository sits inside the workspace's own repository; "." is
+    // the workspace's own.
+    rel: relative ? relative.split(path.sep).join("/") : ".",
+    // Where the repository sits inside the *workspace*, which is the form the
+    // host's `fs` channels resolve against, and null when it is not inside it
+    // at all (a workspace that is itself inside the repository, say).
+    //
+    // Computed here rather than in the views because it has to be compared as a
+    // real path: Git answers with `/private/var/…` where the host handed out
+    // `/var/…`, and a view holding only strings would conclude that the
+    // repository is outside the workspace and refuse to open any file in it.
+    workspacePrefix: workspaceRelativeRoot(cachedWorkspace, root),
+    // The repository the workspace *is*: what a picked repository must stay
+    // inside, and what the repository list is built from.
+    workspaceRoot,
+    gitDir: gitDir.ok ? gitDir.stdout.trim() : path.join(root, ".git"),
+    workspace: cachedWorkspace,
+  };
+}
+
+/**
+ * The path of `root` inside `workspace`, POSIX-separated, or null when it is
+ * not inside it. "." means the two are the same directory.
+ */
+function workspaceRelativeRoot(workspace, root) {
+  if (!workspace || !root) return null;
+  const base = realPath(workspace);
+  const target = realPath(root);
+  if (target === base) return ".";
+  if (!target.startsWith(base + path.sep)) return null;
+  return target.slice(base.length + 1).split(path.sep).join("/");
+}
+
+ /** Every repository-scoped command runs from the repository root. */
+ async function withRepo(handler) {
+   const repo = await readRepo();
+   if (!repo.ok) return repo;
+   return handler(repo);
+ }
+
+ // Note: 聚合视图用 repoRoot 直接作用子模块文件而不切换选中仓（父仓 status 永远只给一行 gitlink，见 .agents/notes/implemented/architecture/2026-09-12-submodule-aggregation.md）
+ /**
+  * Build the repo object for an explicit absolute path inside the current
+  * workspace's repository (the aggregated Commit view acting on a submodule's
+  * files without switching `selectedRoot`). Returns the base repo when no
+  * override was requested, so single-repo callers keep their behaviour.
+  */
+ function targetRootFromPayload(payload) {
+   const candidate = payload?.repoRoot ?? payload?.root ?? null;
+   return typeof candidate === "string" && candidate ? candidate : null;
+ }
+
+ async function readRepoFor(overrideRoot) {
+   const base = await readRepo();
+   if (!base.ok) return base;
+   if (!overrideRoot || samePath(overrideRoot, base.root)) return base;
+   if (!isInside(base.workspaceRoot, overrideRoot)) {
+     return { ok: false, message: `Not a repository inside this workspace: ${overrideRoot}` };
+   }
+   const resolved = await resolveRepositoryRoot(overrideRoot);
+   if (!resolved) {
+     return { ok: false, message: `Not a repository inside this workspace: ${overrideRoot}` };
+   }
+  const gitDir = await runGit(["rev-parse", "--absolute-git-dir"], { cwd: resolved });
+  const forRel = workspaceRelativeRoot(base.workspaceRoot, resolved) ?? path.relative(realPath(base.workspaceRoot), realPath(resolved));
+  return {
+    ok: true,
+    root: resolved,
+    name: path.basename(resolved),
+    rel: forRel ? String(forRel).split(path.sep).join("/") : ".",
+    workspacePrefix: workspaceRelativeRoot(base.workspace, resolved),
+    workspace: base.workspace,
+    workspaceRoot: base.workspaceRoot,
+    siblingMode: base.siblingMode === true,
+    gitDir: gitDir.ok ? gitDir.stdout.trim() : path.join(resolved, ".git"),
+  };
+ }
+
+ /**
+  * Like `withRepo`, but honours an explicit `repoRoot` (or legacy `root`) in
+  * the payload so one aggregated view can stage/diff/commit a submodule's
+  * files while the selector still points at the parent.
+  */
+ async function withRepoAt(payload, handler) {
+   const override = targetRootFromPayload(payload);
+   const repo = override ? await readRepoFor(override) : await readRepo();
+   if (!repo.ok) return repo;
+   return handler(repo);
+ }
+
+/**
+ * The refs that say an operation is unfinished. None of them is visible in
+ * porcelain output.
+ */
+const SEQUENCER_REFS = [
+  ["MERGE_HEAD", "merge"],
+  ["REBASE_HEAD", "rebase"],
+  ["CHERRY_PICK_HEAD", "cherry-pick"],
+  ["REVERT_HEAD", "revert"],
+];
+
+/** Which operation is in progress, or null. One command per candidate. */
+async function probeOperation(repoRoot) {
+  for (const [ref, name] of SEQUENCER_REFS) {
+    const result = await runGit(["rev-parse", "-q", "--verify", ref], { cwd: repoRoot });
+    if (result.ok && result.stdout.trim()) return name;
+  }
+  return null;
+}
+
+/**
+ * The last answer `readOperation` gave, so the probe can stop asking on an
+ * ordinary refresh without losing the answer exactly when it matters.
+ * TODO: single-slot cache keyed by one root; rapid switches between nested
+ * repositories (or overlapping `readStatus` calls) can clobber each other's
+ * answer. Needs a per-root map, but that changes eviction behaviour.
+ */
+let pendingOperation = { root: null, operation: null };
+
+/**
+ * Which unfinished operation left these conflicts behind, if any.
+ *
+ * The gate is not "there are conflicts". Once every conflicted file has been
+ * staged, porcelain v2 simply stops reporting `u` lines — but the merge or
+ * rebase is still in progress, and that is precisely the moment Continue starts
+ * being able to succeed. Gating on `conflicted` therefore hid the only way out
+ * of the state the plugin itself can create. So the probe runs while there are
+ * conflicts *or* while it found an operation a moment ago, and stops only when
+ * Git agrees the operation is over. A refresh outside both cases pays nothing.
+ */
+async function readOperation(repoRoot, conflicted) {
+  if (pendingOperation.root !== repoRoot) pendingOperation = { root: repoRoot, operation: null };
+  if (!conflicted.length && !pendingOperation.operation) return null;
+  pendingOperation.operation = await probeOperation(repoRoot);
+  return pendingOperation.operation;
+}
+
+/**
+ * A ref name or remote that came from a caller, checked before it is handed to
+ * Git as a positional argument.
+ *
+ * `git push origin --force` is what a `-`-prefixed value produces, which is the
+ * one thing the lease-only rule is supposed to make impossible; the same shape
+ * would turn `git fetch` into something else entirely. The views no longer send
+ * these fields at all, so this is the engine's own boundary: the panel bridge
+ * forwards any channel to `onPanelInvoke`, and a boundary that trusts its input
+ * is not a boundary.
+ */
+function refArg(value) {
+  const text = String(value ?? "").trim();
+  if (!text) return "";
+  if (text.startsWith("-") || /\s/.test(text)) return null;
+  return text;
+}
+
+/**
+ * A branch name before it becomes a positional argument. Beyond the option
+ * prefix and whitespace, `..` (range) and `@{` (reflog) would change which
+ * revision Git resolves, and control characters never belong in a ref; Git's
+ * own `check-ref-format` would reject more (trailing `/`/`.`, `.lock`), but
+ * those only fail the command and their errors still bubble up.
+ */
+function isBranchNameSafe(value) {
+  if (/[\s~^:?*\[\\]/.test(value) || value.startsWith("-")) return false;
+  if (value.includes("..") || value.includes("@{")) return false;
+  if (/[\x00-\x1f\x7f]/.test(value)) return false;
+  return true;
+}
+
+// Note: 推送目标从 @{upstream} 解析，而不是硬编码 origin 或取 git remote 的第一个（字典序会决定分支发布到哪并顺手绑定 tracking）；没有 upstream 时只接受 origin 或唯一远端，多个远端时报错而不替用户猜 — 见 .agents/notes/implemented/architecture/2026-09-12-remote-sync-conflicts.md
+/**
+ * Where a push should go.
+ *
+ * The branch's own upstream is the only target that agrees with the ↑/↓ chip:
+ * the views used to send `origin` plus the local branch name, which pushed a new
+ * branch to `origin` while the chip kept counting against the real upstream.
+ * With no upstream there is nothing to agree with, so the fallback stays narrow
+ * — `origin`, or the single remote when there is only one — and refuses to guess
+ * when there are several. Choosing "the first remote" would be alphabetical
+ * order deciding where someone's branch gets published.
+ */
+async function resolvePushTarget(repoRoot) {
+  const upstream = await runGit(["rev-parse", "--abbrev-ref", "--symbolic-full-name", "@{upstream}"], { cwd: repoRoot });
+  const name = upstream.ok ? upstream.stdout.trim() : "";
+  if (name) {
+    const slash = name.indexOf("/");
+    // No slash means the branch tracks another *local* branch
+    // (`branch.<name>.remote = .`). There is nowhere to push to, and falling
+    // back to a remote would publish the branch somewhere it was never pointed.
+    if (slash < 1) {
+      return { ok: false, message: `This branch tracks the local branch "${name}", so there is no remote to push to.` };
+    }
+    return { ok: true, remote: name.slice(0, slash), branch: name.slice(slash + 1) };
+  }
+
+  const head = await runGit(["rev-parse", "--abbrev-ref", "HEAD"], { cwd: repoRoot });
+  // An unborn branch makes `rev-parse` print HEAD and exit non-zero: there is no
+  // commit to push, and saying so beats Git's "no upstream branch" for a command
+  // whose whole point was to set one up.
+  if (!head.ok || head.stdout.trim() === "HEAD") {
+    return { ok: false, message: "This branch has no commits yet, so there is nothing to push." };
+  }
+  const branch = head.stdout.trim();
+
+  const remotes = await runGit(["remote"], { cwd: repoRoot });
+  const names = remotes.ok ? remotes.stdout.split("\n").map((line) => line.trim()).filter(Boolean) : [];
+  if (names.includes("origin")) return { ok: true, remote: "origin", branch };
+  if (names.length === 1) return { ok: true, remote: names[0], branch };
+  if (!names.length) return { ok: false, message: "This repository has no remote to push to." };
+
+  return {
+    ok: false,
+    message: `"${branch}" has no upstream, and this repository has several remotes (${names.join(", ")}). Set one with \`git push --set-upstream <remote> ${branch}\`.`,
+  };
+}
+
+/**
+ * The sequencer commands this plugin is willing to continue or abort, and
+ * nothing else: the name comes back from `readOperation`, and a whitelist keeps
+ * a malformed payload from becoming an arbitrary `git` verb.
+ */
+const SEQUENCER = new Set(["merge", "rebase", "cherry-pick", "revert"]);
+
+/**
+ * Shape a network command's outcome for the views.
+ *
+ * `message` is what a toast can hold; `detail` is stdout+stderr for the dialog
+ * behind it, truncated to `ERROR_DETAIL_CHARS` (see `gitDetail`); the three
+ * hint codes are stable identifiers that the views word in the user's own language.
+ */
+function syncOutcome(channel, result) {
+  if (result.ok) return { ok: true, stdout: result.stdout };
+  return {
+    ok: false,
+    stdout: result.stdout,
+    stderr: result.stderr,
+    message: result.message,
+    detail: gitDetail(result.stdout, result.stderr),
+    authHint: authHint(result.stdout, result.stderr),
+    pushHint: channel === "git/push" ? pushHint(result.stdout, result.stderr) : null,
+    pullHint: channel === "git/pull" ? pullHint(result.stdout, result.stderr) : null,
+  };
+}
+
+// ---------------------------------------------------------------------------
+// Status parsing (porcelain v2)
+// ---------------------------------------------------------------------------
+
+const INDEX_LABELS = {
+  M: "Modified",
+  A: "Added",
+  D: "Deleted",
+  R: "Renamed",
+  C: "Copied",
+  T: "Type changed",
+};
+
+const CONFLICT_LABELS = {
+  DD: "Both deleted",
+  AU: "Added by us",
+  UD: "Deleted by them",
+  UA: "Added by them",
+  DU: "Deleted by us",
+  AA: "Both added",
+  UU: "Both modified",
+};
+
+function labelFor(code, conflicted) {
+  if (conflicted) return CONFLICT_LABELS[code] ?? "Unmerged";
+  return INDEX_LABELS[code] ?? code;
+}
+
+/**
+ * `git status --porcelain=v2 -z` is the only status form that is unambiguous:
+ * `-z` suppresses the C-style path quoting, so spaces and non-ASCII paths come
+ * back verbatim, and v2 keeps the index and worktree columns apart — which is
+ * exactly the staged/unstaged split the UI shows.
+ * TODO: no pagination — a huge change list is returned whole over the bridge.
+ * Chunking needs a view-side protocol change, so behaviour stays as-is.
+ */
+async function readStatus(repo) {
+  const result = await runGit(
+    ["status", "--porcelain=v2", "-z", "--branch", "--untracked-files=all"],
+    { cwd: repo.root },
+  );
+  if (!result.ok) return result;
+
+  const branch = {
+    oid: null,
+    head: null,
+    upstream: null,
+    ahead: 0,
+    behind: 0,
+    detached: false,
+    unborn: false,
+  };
+  const staged = [];
+  const unstaged = [];
+  const untracked = [];
+  const conflicted = [];
+
+  const tokens = result.stdout.split("\0");
+  for (let index = 0; index < tokens.length; index += 1) {
+    const token = tokens[index].replace(/^\n/, "");
+    if (!token) continue;
+
+    if (token.startsWith("# ")) {
+      const header = token.slice(2);
+      if (header.startsWith("branch.oid ")) {
+        const value = header.slice("branch.oid ".length).trim();
+        branch.oid = value;
+        // "(initial)" means the branch exists but has no commit yet — an unborn
+        // branch, not a detached HEAD. Detachment is reported by branch.head.
+        branch.unborn = value === "(initial)";
+      } else if (header.startsWith("branch.head ")) {
+        const value = header.slice("branch.head ".length).trim();
+        branch.head = value === "(detached)" ? null : value;
+        if (value === "(detached)") branch.detached = true;
+      } else if (header.startsWith("branch.upstream ")) {
+        branch.upstream = header.slice("branch.upstream ".length).trim();
+      } else if (header.startsWith("branch.ab ")) {
+        const match = /\+(\d+)\s+-(\d+)/.exec(header);
+        if (match) {
+          branch.ahead = Number(match[1]);
+          branch.behind = Number(match[2]);
+        }
+      }
+      continue;
+    }
+
+    const kind = token[0];
+
+    if (kind === "1" || kind === "2") {
+      const parts = token.split(" ");
+      const xy = parts[1] ?? "..";
+      const sub = parts[2] ?? "N...";
+      const track = kind === "2" ? parts[8] : "";
+      const offset = kind === "2" ? 9 : 8;
+      const filePath = parts.slice(offset).join(" ");
+      const originalPath =
+        kind === "2" ? (tokens[index + 1] ?? "").replace(/^\n/, "") : null;
+      if (kind === "2") index += 1;
+
+      const x = xy[0];
+      const y = xy[1];
+      // `S<c><m><u>`: a submodule, with C=new commits, M=modified content,
+      // U=untracked content. Staging a submodule from the parent repository
+      // records which commit it points at; it cannot touch anything inside, so
+      // a submodule with dirty content keeps a worktree-side change that no
+      // amount of `git add` here will clear.
+      const isSubmodule = sub.startsWith("S") || parts[3] === "160000";
+      const subState = isSubmodule
+        ? { commits: sub[1] === "C", modified: sub[2] === "M", untracked: sub[3] === "U" }
+        : null;
+      const insideSubmodule = Boolean(subState && (subState.modified || subState.untracked));
+
+      if (x !== ".") {
+        staged.push({
+          path: filePath,
+          originalPath,
+          status: x,
+          label: labelFor(x, false),
+          score: track ? ` (${Number(track.slice(1))}%)` : "",
+          submodule: isSubmodule,
+          sub: subState,
+        });
+      }
+      if (y !== ".") {
+        unstaged.push({
+          path: filePath,
+          originalPath,
+          status: y,
+          label: labelFor(y, false),
+          submodule: isSubmodule,
+          sub: subState,
+          // The remaining worktree change lives inside the submodule.
+          insideSubmodule,
+        });
+      }
+      continue;
+    }
+
+    if (kind === "u") {
+      const parts = token.split(" ");
+      const xy = parts[1] ?? "UU";
+      const filePath = parts.slice(10).join(" ");
+      conflicted.push({
+        path: filePath,
+        originalPath: null,
+        status: xy,
+        label: labelFor(xy, true),
+      });
+      continue;
+    }
+
+    if (kind === "?") {
+      untracked.push({ path: token.slice(2), originalPath: null, status: "?", label: "Unversioned" });
+      continue;
+    }
+    // kind === "!" (ignored) needs no UI.
+  }
+
+  // A conflicted merge/rebase/cherry-pick cannot be finished from porcelain
+  // output alone, and it is the state a conflicted `pull` leaves behind, so it
+  // has to reach the views: without it they cannot offer the way out.
+  const operation = await readOperation(repo.root, conflicted);
+
+  return {
+    ok: true,
+    // `workspace` lets the views translate repository-relative paths into the
+    // workspace-relative form the host's fs channels are scoped to.
+    repo: {
+      root: repo.root,
+      name: repo.name,
+      // "." is the workspace's own repository; a nested one also shows where it
+      // sits inside that repository, which is how the views label it.
+      rel: repo.rel ?? ".",
+      // The form the host's `fs` channels resolve against, so a view never has
+      // to rebuild it from two absolute paths that may spell the same directory
+      // differently.
+      // Deliberately null when the repository is not inside the workspace: the
+      // view then falls back to its own rebasing, whereas a "." would send it
+      // looking for `mod/f.txt` inside a workspace that is a *subdirectory* of
+      // the repository.
+      workspacePrefix: repo.workspacePrefix ?? null,
+      workspace: repo.workspace ?? null,
+    },
+    branch,
+    operation,
+    staged,
+    unstaged,
+    untracked,
+    conflicted,
+  };
+}
+ /**
+  * Direct submodules (and embedded nested repos) with their own inner status.
+  *
+  * `git status` in the parent only prints one gitlink line per submodule
+  * (`1 .M S.M.. 160000 … backend`), so a parent-only Commit view can never
+  * show the 15 files changed inside `backend` the way IDEA does. This runs
+  * `readStatus` for each dirty submodule/nested repo found in the parent
+  * status, so the Commit view can render them inline like IDEA's grouped
+  * changes. Only dirty ones are queried: a clean submodule has no inner
+  * files to show, and probing every declared submodule on each refresh
+  * would cost a process per submodule even when there is nothing to show.
+  */
+async function readSubmoduleStatuses(repo, parentStatus) {
+  // Note: 平级模式无父仓可聚合，返回除当前仓外所有脏平级仓（kind sibling），视图复用同一分组渲染 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+  if (repo?.siblingMode) {
+    let siblings = [];
+    try {
+      siblings = scanNestedRepositories(repo.workspaceRoot ?? repo.root);
+    } catch {
+      siblings = [];
+    }
+    const submodules = [];
+    for (const entry of siblings) {
+      let subRoot = null;
+      try {
+        subRoot = await resolveRepositoryRoot(entry.root);
+      } catch {
+        subRoot = null;
+      }
+      if (!subRoot || samePath(subRoot, repo.root)) continue;
+      // scan 已给出工作区相对 rel（realpath 安全），不重算 path.relative。
+      const rel = entry.rel;
+      if (!rel || rel === "." || rel.includes("..")) continue;
+      const subRepo = {
+        root: subRoot,
+        name: path.basename(subRoot),
+        rel,
+        workspacePrefix: workspaceRelativeRoot(repo.workspace, subRoot),
+        workspace: repo.workspace ?? null,
+        workspaceRoot: repo.workspaceRoot ?? repo.root,
+      };
+      let subStatus = null;
+      try {
+        subStatus = await readStatus(subRepo);
+      } catch {
+        subStatus = null;
+      }
+      if (!subStatus?.ok) continue;
+      const total = (subStatus.staged?.length ?? 0)
+        + (subStatus.unstaged?.length ?? 0)
+        + (subStatus.untracked?.length ?? 0)
+        + (subStatus.conflicted?.length ?? 0);
+      if (!total) continue;
+      submodules.push({ rel, root: subRoot, name: subRepo.name, kind: "sibling", status: subStatus });
+    }
+    submodules.sort((a, b) => String(a.rel).localeCompare(String(b.rel)));
+    return { ok: true, submodules };
+  }
+  const status = parentStatus?.ok ? parentStatus : await readStatus(repo);
+  if (!status.ok) return status;
+   const candidates = new Map();
+   for (const file of [...(status.staged ?? []), ...(status.unstaged ?? [])]) {
+     if (file?.submodule && file?.path) candidates.set(file.path, "submodule");
+   }
+   // Embedded (non-submodule) repos show as a single untracked dir entry;
+   // Git never descends into them, so their inner changes are invisible too.
+   // Only entries that actually resolve to a repository root are expanded,
+   // which keeps the 106-untracked-files case from spawning 106 processes.
+   for (const file of status.untracked ?? []) {
+     const rel = String(file?.path ?? "").replace(/\/+$/, "");
+     if (!rel || rel.includes("/")) continue;
+     if (candidates.has(rel) || candidates.has(`${rel}/`)) continue;
+     candidates.set(rel, "maybe-nested");
+   }
+   const submodules = [];
+   for (const [rel, kind] of candidates) {
+     const cleanRel = String(rel).replace(/\/+$/, "");
+     if (!cleanRel || cleanRel === "." || cleanRel.includes("..")) continue;
+     const absolute = path.join(repo.root, cleanRel);
+     if (!isInside(repo.workspaceRoot ?? repo.root, absolute)) continue;
+     let subRoot = null;
+     try {
+       subRoot = await resolveRepositoryRoot(absolute);
+     } catch {
+       subRoot = null;
+     }
+     if (!subRoot) continue;
+     if (kind === "maybe-nested" && samePath(subRoot, repo.root)) continue;
+     const relative = path.relative(repo.workspaceRoot ?? repo.root, subRoot);
+     const subRepo = {
+       root: subRoot,
+       name: path.basename(subRoot),
+       rel: relative ? relative.split(path.sep).join("/") : cleanRel,
+       workspacePrefix: workspaceRelativeRoot(repo.workspace, subRoot),
+       workspace: repo.workspace ?? null,
+       workspaceRoot: repo.workspaceRoot ?? repo.root,
+     };
+     let subStatus = null;
+     try {
+       subStatus = await readStatus(subRepo);
+     } catch {
+       subStatus = null;
+     }
+     if (!subStatus?.ok) continue;
+     const total = (subStatus.staged?.length ?? 0)
+       + (subStatus.unstaged?.length ?? 0)
+       + (subStatus.untracked?.length ?? 0)
+       + (subStatus.conflicted?.length ?? 0);
+     // A nested dir that turned out to be an empty/clean repo adds no signal.
+     if (!total) continue;
+     submodules.push({
+       rel: subRepo.rel,
+       root: subRoot,
+       name: subRepo.name,
+       kind: kind === "submodule" ? "submodule" : "nested",
+       status: subStatus,
+     });
+   }
+   submodules.sort((a, b) => String(a.rel).localeCompare(String(b.rel)));
+   return { ok: true, submodules };
+ }
+
+// ---------------------------------------------------------------------------
+// Diffs
+// ---------------------------------------------------------------------------
+
+/**
+ * Unstaged worktree diff, or the index diff when `mode === "index"`.
+ * `--no-ext-diff` keeps a user-configured external diff tool from hijacking the
+ * output, and `--no-color` keeps our own renderer authoritative.
+ * TODO: a very large diff is returned whole; truncating needs a view-side
+ * "show more" contract, so behaviour stays as-is.
+ */
+async function readDiff(repo, filePath, mode, ignoreWhitespace) {
+  if (!filePath) return { ok: false, message: "No file given." };
+  // Same boundary as stage/discard: the path arrives over the bridge and is
+  // passed to Git as a pathspec, so reject absolute/`..`/root shapes here.
+  if (!isSafePath(filePath)) return { ok: false, message: "Unsafe path rejected." };
+  const base = [
+    "diff",
+    "--no-color",
+    "--no-ext-diff",
+    "-U3",
+    // IDEA's "Ignore whitespaces" view option, implemented by Git itself
+    // rather than by hiding lines in the renderer.
+    ignoreWhitespace ? "-w" : null,
+    mode === "index" ? "--cached" : null,
+    "--",
+    filePath,
+  ].filter((value) => value !== null);
+
+  let result = await runGit(base, { cwd: repo.root });
+
+  // An untracked file has no index entry, so `git diff` prints nothing for it:
+  // an empty diff is not proof that there is nothing to show.
+  //
+  // The same empty output is what a clean tracked file produces, which is why
+  // being untracked has to be *asked*, not inferred — without the `ls-files`
+  // probe, selecting a file that has no changes renders the whole of it as an
+  // addition. This became reachable once the tool windows could be pointed at
+  // another repository, because a selection can outlive the change list it came
+  // from; it was wrong in the single-repository case too.
+  if (
+    mode !== "index" &&
+    result.ok &&
+    !result.stdout.trim() &&
+    fs.existsSync(path.resolve(repo.root, filePath))
+  ) {
+    // Asked, not inferred, and quietly: "is it tracked" fails for exactly the
+    // files this branch exists for.
+    const tracked = await runGit(["ls-files", "--error-unmatch", "--", filePath], {
+      cwd: repo.root,
+      quiet: true,
+    });
+    if (!tracked.ok) {
+      const nullDevice = process.platform === "win32" ? "NUL" : "/dev/null";
+      result = await runGit(
+        ["diff", "--no-color", "--no-ext-diff", "-U3", "--no-index", "--", nullDevice, filePath],
+        { cwd: repo.root },
+      );
+    }
+  }
+
+  // `git diff --no-index` exits 1 when the files differ: that is success here.
+  const ok = result.ok || result.code === 1;
+  const text = result.stdout;
+  return {
+    ok,
+    filePath,
+    mode,
+    // Which repository the diff was read from, so a patch built from it can be
+    // refused if the repository has changed by the time it comes back.
+    root: repo.root,
+    text,
+    binary: /^Binary files |^GIT binary patch/m.test(text),
+    message: ok ? undefined : result.message,
+  };
+}
+
+/**
+ * Split a unified diff into one entry per file, each keeping its exact header
+ * lines plus its hunks. Handing the header back verbatim is what lets a
+ * hunk patch preserve modes, renames and the pre-image blob.
+ */
+function splitPatch(text) {
+  const files = [];
+  let current = null;
+  let hunk = null;
+
+  for (const line of text.split("\n")) {
+    if (line.startsWith("diff --git ")) {
+      current = { header: [line], hunks: [] };
+      files.push(current);
+      hunk = null;
+      continue;
+    }
+    if (!current) continue;
+    if (line.startsWith("@@")) {
+      hunk = { header: line, lines: [] };
+      current.hunks.push(hunk);
+      continue;
+    }
+    if (hunk) hunk.lines.push(line);
+    else current.header.push(line);
+  }
+  return files;
+}
+
+/**
+ * Stage, unstage or discard exactly the hunks the user picked. The patch is
+ * rebuilt from the original header + selected hunks; `--recount` lets Git
+ * accept it even though the selected subset no longer matches the line counts
+ * in the original hunk headers.
+ */
+async function applyPatch(repo, patch, action) {
+  const text = String(patch ?? "");
+  if (!text.trim()) return { ok: false, message: "Empty patch." };
+  const base = [
+    "apply",
+    "--recount",
+    "--whitespace=nowarn",
+    // Diffs are produced with git's default `a/`-`b/` prefixes, so strip one
+    // leading component. Stating it keeps the two halves in step.
+    "-p1",
+    action === "stage" ? "--cached" : null,
+    action === "unstage" ? "--cached" : null,
+    action === "unstage" || action === "discard" ? "-R" : null,
+  ].filter((value) => value !== null);
+
+  const result = await runGit([...base, "-"], { cwd: repo.root, input: text });
+  return {
+    ok: result.ok,
+    message: result.ok ? undefined : result.message,
+    stderr: result.stderr,
+  };
+}
+
+// ---------------------------------------------------------------------------
+// Log, branches, stashes
+// ---------------------------------------------------------------------------
+
+async function readLog(repo, limit, options = {}) {
+  const count = Math.min(Math.max(Number(limit) || 150, 1), 500);
+  const format = ["%H", "%P", "%h", "%an", "%at", "%s", "%D"].join(FS_CHAR) + RS_CHAR;
+  const branch = String(options.branch ?? "").trim();
+  const author = String(options.author ?? "").trim();
+  const since = String(options.since ?? "").trim();
+  const until = String(options.until ?? "").trim();
+  const search = String(options.search ?? "").trim();
+  const paths = Array.isArray(options.paths) ? options.paths.filter((v) => typeof v === "string" && v) : [];
+  const args = ["log", options.topo ? "--topo-order" : "--date-order", `--max-count=${count}`];
+  // Naming a branch replaces `--all`; Git rejects the two together.
+  if (branch) {
+    if (!isBranchNameSafe(branch)) {
+      return { ok: false, message: "Invalid branch filter." };
+    }
+    args.push(branch);
+  } else {
+    args.push("--all");
+  }
+  if (options.firstParent) args.push("--first-parent");
+  if (options.noMerges) args.push("--no-merges");
+  // Note: 过滤条件全部拼成 `--key=value` 单参数进 Git，author 文本含空格也不拆词；since/until 只接受日期与相对口径，前导 `-` 拒绝以防 option 注入 — 见 .agents/notes/implemented/feature/2026-09-14-git-operations-parity.md
+  if (author) {
+    if (author.startsWith("-")) return { ok: false, message: "Invalid author filter." };
+    args.push(`--author=${author}`);
+  }
+  for (const [flag, value] of [["--since", since], ["--until", until]]) {
+    if (!value) continue;
+    if (value.startsWith("-") || /[\x00-\x1f\x7f]/.test(value)) return { ok: false, message: "Invalid date filter." };
+    args.push(`${flag}=${value}`);
+  }
+  if (search) {
+    if (search.startsWith("-")) return { ok: false, message: "Invalid search text." };
+    args.push(`--grep=${search}`, "--regexp-ignore-case");
+  }
+  args.push(`--pretty=format:${format}`);
+  if (paths.length) {
+    if (!paths.every(isSafePath)) return { ok: false, message: "Unsafe path rejected." };
+    args.push("--", ...paths);
+  }
+  const result = await runGit(args, { cwd: repo.root });
+  if (!result.ok) {
+    // A repository without commits is not an error worth shouting about.
+    return { ok: true, commits: [], empty: true, message: result.message };
+  }
+  const commits = result.stdout
+    .split(RS_CHAR)
+    .map((record) => record.replace(/^\n/, ""))
+    .filter((record) => record.trim())
+    .map((record) => {
+      const [hash, parents, short, commitAuthor, at, subject, refs] = record.split(FS_CHAR);
+      return {
+        hash,
+        parents: parents ? parents.split(" ").filter(Boolean) : [],
+        short,
+        author: commitAuthor,
+        timestamp: Number(at) * 1000,
+        subject,
+        refs: refs
+          ? refs
+              .split(", ")
+              .map((value) => value.trim())
+              .filter(Boolean)
+              .map(cleanRef)
+          : [],
+      };
+    });
+  return { ok: true, commits, empty: commits.length === 0 };
+}
+
+/**
+ * Distinct recent committers for the Log's User filter — IDEA shows All / Me /
+ * a user list. Aggregated from recent history (capped) rather than the whole
+ * repository, so a large repository stays fast: the list is a picker, not a
+ * census, and anything beyond it is reachable by typing the name or email
+ * (which filters server-side through `--author`).
+ * Note: 名单 capped 而手输兜底、切仓丢具名的取舍 — 见 .agents/notes/implemented/feature/2026-09-14-git-log-user-filter.md
+ */
+async function readAuthors(repo, limit) {
+  const want = Math.min(Math.max(Number(limit) || 30, 1), 100);
+  const result = await runGit(
+    ["log", "--all", "--max-count=2000", "--pretty=format:%an%x1f%ae"],
+    { cwd: repo.root },
+  );
+  // A repository without commits (or an unreadable one) simply has no
+  // committers to pick from — the filter still offers All / Mine / typing.
+  if (!result.ok) return { ok: true, authors: [] };
+  const counts = new Map();
+  for (const line of result.stdout.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+    const sep = trimmed.indexOf(FS_CHAR);
+    const name = (sep < 0 ? trimmed : trimmed.slice(0, sep)).trim();
+    const email = (sep < 0 ? "" : trimmed.slice(sep + 1)).trim();
+    if (!name) continue;
+    const entry = counts.get(name) ?? { name, email: "", count: 0 };
+    if (!entry.email && email) entry.email = email;
+    entry.count += 1;
+    counts.set(name, entry);
+  }
+  const authors = [...counts.values()]
+    .sort((a, b) => b.count - a.count || a.name.localeCompare(b.name))
+    .slice(0, want);
+  return { ok: true, authors };
+}
+
+/** `%D` yields `HEAD -> main, origin/main, tag: v1`; turn that into typed chips. */
+function cleanRef(raw) {
+  let value = raw;
+  let head = false;
+  if (value.startsWith("HEAD -> ")) {
+    head = true;
+    value = value.slice("HEAD -> ".length);
+  } else if (value === "HEAD") {
+    return { name: "HEAD", kind: "head", head: true };
+  }
+  let kind = "branch";
+  if (value.startsWith("tag: ")) {
+    kind = "tag";
+    value = value.slice("tag: ".length);
+  } else if (value.includes("/")) {
+    kind = "remote";
+  }
+  return { name: value, kind, head };
+}
+
+async function readBranches(repo) {
+  const fields = [
+    "%(refname)",
+    "%(refname:short)",
+    "%(objectname:short)",
+    "%(HEAD)",
+    "%(upstream:short)",
+    "%(committerdate:unix)",
+    "%(contents:subject)",
+  ].join(FS_CHAR);
+  const result = await runGit(
+    ["for-each-ref", `--format=${fields}`, "refs/heads", "refs/remotes"],
+    { cwd: repo.root },
+  );
+  if (!result.ok) return { ok: false, message: result.message };
+  const branches = result.stdout
+    .split("\n")
+    .filter((line) => line.trim())
+    .map((line) => {
+      const [ref, name, short, head, upstream, date, subject] = line.split(FS_CHAR);
+      return {
+        ref,
+        name,
+        short,
+        current: head === "*",
+        upstream: upstream || null,
+        timestamp: Number(date) * 1000,
+        subject: subject ?? "",
+        remote: ref.startsWith("refs/remotes/"),
+      };
+    })
+    // Drop the remote's symbolic HEAD (`refs/remotes/origin/HEAD`). The test
+    // runs on the full refname because `%(refname:short)` shortens that ref to
+    // plain `origin`, which matches no `/HEAD` suffix and used to surface as a
+    // phantom local branch named `origin`.
+    .filter((branch) => !branch.ref.endsWith("/HEAD"));
+  return { ok: true, branches: branches.map(({ ref, ...rest }) => rest) };
+}
+
+async function readStashes(repo) {
+  const result = await runGit(["stash", "list", "--pretty=format:%gd\u001f%gs\u001f%at"], {
+    cwd: repo.root,
+  });
+  if (!result.ok) return { ok: true, stashes: [] };
+  const stashes = result.stdout
+    .split("\n")
+    .filter((line) => line.trim())
+    .map((line) => {
+      const [ref, subject, at] = line.split(FS_CHAR);
+      return { ref, subject, timestamp: Number(at) * 1000 };
+    });
+  return { ok: true, stashes };
+}
+async function readTags(repo) {
+  const fields = ["%(refname:short)", "%(objectname:short)", "%(*objectname:short)", "%(creatordate:unix)", "%(contents:subject)"].join(FS_CHAR);
+  const result = await runGit(["for-each-ref", `--format=${fields}`, "refs/tags"], { cwd: repo.root });
+  if (!result.ok) return { ok: false, message: result.message };
+  const tags = result.stdout
+    .split("\n")
+    .filter((line) => line.trim())
+    .map((line) => {
+      const [name, short, target, date, subject] = line.split(FS_CHAR);
+      return { name, short, target: target || short, timestamp: Number(date) * 1000 || 0, subject: subject ?? "" };
+    });
+  tags.sort((a, b) => (b.timestamp || 0) - (a.timestamp || 0));
+  return { ok: true, tags };
+}
+
+async function readRemotes(repo) {
+  const result = await runGit(["remote", "-v"], { cwd: repo.root });
+  if (!result.ok) return { ok: false, message: result.message };
+  const byName = new Map();
+  for (const line of result.stdout.split("\n")) {
+    const match = line.trim().match(/^(\S+)\s+(\S+)\s+\((fetch|push)\)$/);
+    if (!match) continue;
+    const [, name, url, kind] = match;
+    if (!byName.has(name)) byName.set(name, { name, fetch: null, push: null });
+    byName.get(name)[kind] = url;
+  }
+  return { ok: true, remotes: [...byName.values()] };
+}
+
+// ---------------------------------------------------------------------------
+// Guarded helpers
+// ---------------------------------------------------------------------------
+
+function requirePaths(payload) {
+  const paths = Array.isArray(payload?.paths) ? payload.paths : [];
+  return paths.filter((value) => typeof value === "string" && value.length > 0);
+}
+
+/**
+ * A path is only ever passed to Git as a pathspec after `--`, so it cannot be
+ * mistaken for a revision or an option; this check rejects the two shapes that
+ * are still dangerous regardless: absolute paths and `..` traversal.
+ * It also rejects anything that normalises to the repository root itself
+ * (`"."`, `""`, `"./"`): `discard` deletes untracked paths with `rmSync`, and
+ * without this `"."` would resolve to `repo.root` and delete the whole tree.
+ */
+function isSafePath(value) {
+  if (typeof value !== "string" || !value) return false;
+  if (path.isAbsolute(value)) return false;
+  const normalised = value.replace(/\\/g, "/");
+  if (normalised.split("/").includes("..")) return false;
+  // `normalize("./")` keeps the trailing slash (`"./"`), so strip it first:
+  // `"."`, `"./"`, `".//"` and `"a/.."` must all refuse as the repo root.
+  const stripped = normalised.replace(/\/+$/, "");
+  if (!stripped || path.posix.normalize(stripped) === ".") return false;
+  return true;
+}
+
+// ---------------------------------------------------------------------------
+// Channel router
+// ---------------------------------------------------------------------------
+
+/**
+ * Every `pluginBridge.invoke("git/…")` from the view or the panel lands here.
+ * Unknown methods fail loudly instead of returning undefined.
+ */
+async function onPanelInvoke(channel, payload = {}) {
+  switch (channel) {
+    // -- repository ---------------------------------------------------------
+    case "git/repo": {
+      const repo = await readRepo();
+      if (!repo.ok) return repo;
+      const [status, stashes, user] = await Promise.all([
+        readStatus(repo),
+        readStashes(repo),
+        runGit(["config", "--get", "user.name"], { cwd: repo.root }),
+      ]);
+      if (!status.ok) return status;
+      return {
+        ...status,
+        siblingMode: repo.siblingMode === true,
+        stashes: stashes.stashes ?? [],
+        available: true,
+        // Drives the Log's "My Commits" bolding.
+        user: user.ok ? user.stdout.trim() : null,
+        version: (await runGit(["--version"], { cwd: repo.root })).stdout.trim(),
+      };
+    }
+
+    // -- repository list ----------------------------------------------------
+    /**
+     * Every repository the tool windows can be pointed at. Separate from
+     * `git/repo` because it is the expensive one: it walks the tree, while
+     * `git/repo` runs on every refresh and must stay a couple of Git calls.
+     */
+    case "git/repos": {
+      const repo = await readRepo();
+      if (!repo.ok) return repo;
+      const repositories = await discoverRepositories(repo.workspaceRoot);
+      return {
+        ok: true,
+        // Which repository the commands currently run against, as a `rel`.
+        active: repo.rel,
+        repos: repositories.map((entry) => ({
+          ...entry,
+          active: samePath(entry.root, repo.root),
+        })),
+      };
+    }
+
+    /**
+     * Point every command at another repository. Accepted only for a directory
+     * that is a repository root inside the current workspace's repository: the
+     * bridge forwards whatever a view sends, so this validates its own input
+     * rather than trusting a path that arrived over it.
+     */
+    case "git/select-repo": {
+      const repo = await readRepo();
+      if (!repo.ok) return repo;
+      const requested = String(payload.root ?? "");
+      const resolved = isInside(repo.workspaceRoot, requested)
+        ? await resolveRepositoryRoot(requested)
+        : null;
+      if (!resolved) {
+        return {
+          ok: false,
+          message: `Not a repository inside this workspace: ${requested}`,
+        };
+      }
+      // Choosing the workspace's own repository is the absence of a choice.
+      selectedRoot = samePath(resolved, repo.workspaceRoot) ? null : resolved;
+      const next = await readRepo();
+      if (!next.ok) return next;
+      return { ok: true, active: next.rel, root: next.root, name: next.name };
+    }
+
+     case "git/status":
+       return withRepoAt(payload, (repo) => readStatus(repo));
+
+     case "git/submodule-statuses":
+       return withRepo(async (repo) => readSubmoduleStatuses(repo));
+
+     case "git/diff":
+       return withRepoAt(payload, (repo) =>
+         readDiff(
+           repo,
+           String(payload.path ?? ""),
+           payload.mode === "index" ? "index" : "worktree",
+           payload.ignoreWhitespace === true,
+         ),
+       );
+
+    case "git/log":
+      return withRepo((repo) =>
+        readLog(repo, payload.limit, {
+          branch: payload.branch,
+          firstParent: payload.firstParent === true,
+          noMerges: payload.noMerges === true,
+          topo: payload.topo === true,
+          author: payload.author,
+          since: payload.since,
+          until: payload.until,
+          search: payload.search,
+          paths: payload.paths,
+        }),
+      );
+
+    case "git/authors":
+      return withRepo((repo) => readAuthors(repo, payload.limit));
+
+    case "git/commit-diff":
+      return withRepo(async (repo) => {
+        const hash = String(payload.hash ?? "");
+        if (!/^[0-9a-f]{4,64}$/i.test(hash)) return { ok: false, message: "Invalid commit hash." };
+        const result = await runGit(
+          ["show", "--no-color", "--no-ext-diff", "--format=", "-U3", hash],
+          { cwd: repo.root },
+        );
+        const meta = await runGit(
+          ["show", "--no-color", "--no-patch", `--format=%H${FS_CHAR}%h${FS_CHAR}%an${FS_CHAR}%ae${FS_CHAR}%at${FS_CHAR}%s${FS_CHAR}%b`, hash],
+          { cwd: repo.root },
+        );
+        const [full, short, author, email, at, subject, body] = meta.stdout.split(FS_CHAR);
+        return {
+          ok: result.ok,
+          text: result.stdout,
+          meta: {
+            hash: full,
+            short,
+            author,
+            email,
+            timestamp: Number(at) * 1000,
+            subject,
+            body: (body ?? "").trim(),
+          },
+          message: result.ok ? undefined : result.message,
+        };
+      });
+
+    case "git/branches": {
+      const branches = await withRepo((repo) => readBranches(repo));
+      return branches;
+    }
+
+    case "git/tags":
+      return withRepo((repo) => readTags(repo));
+
+    case "git/remotes":
+      return withRepo((repo) => readRemotes(repo));
+
+    case "git/stashes":
+      return withRepo((repo) => readStashes(repo));
+
+    // -- staging ------------------------------------------------------------
+     case "git/stage":
+     case "git/unstage": {
+       const paths = requirePaths(payload);
+       if (!paths.length) return { ok: false, message: "No paths given." };
+       if (!paths.every(isSafePath)) return { ok: false, message: "Unsafe path rejected." };
+       return withRepoAt(payload, async (repo) => {
+         const staging = channel === "git/stage";
+         const args = staging
+           ? ["add", "--", ...paths]
+           : ["restore", "--staged", "--", ...paths];
+         let result = await runGit(args, { cwd: repo.root });
+         // `git restore --staged` needs HEAD; in a fresh repository there is none.
+         if (!staging && !result.ok) {
+           result = await runGit(["rm", "--cached", "-r", "--", ...paths], { cwd: repo.root });
+         }
+         return { ok: result.ok, message: result.ok ? undefined : result.message };
+       });
+     }
+
+     case "git/discard": {
+       const paths = requirePaths(payload);
+       if (!paths.length) return { ok: false, message: "No paths given." };
+       if (!paths.every(isSafePath)) return { ok: false, message: "Unsafe path rejected." };
+       return withRepoAt(payload, async (repo) => {
+         const tracked = [];
+         const removed = [];
+         for (const filePath of paths) {
+           // An untracked file has no worktree version to restore, so discarding
+           // it means deleting the file. Everything else is a worktree restore.
+           const check = await runGit(["ls-files", "--error-unmatch", "--", filePath], {
+             cwd: repo.root,
+           });
+           if (check.ok) tracked.push(filePath);
+           else removed.push(filePath);
+         }
+         const messages = [];
+         if (tracked.length) {
+           const result = await runGit(["restore", "--worktree", "--", ...tracked], {
+             cwd: repo.root,
+           });
+           if (!result.ok) messages.push(result.message);
+         }
+         for (const filePath of removed) {
+           const resolved = path.resolve(repo.root, filePath);
+           // Defense in depth with `isSafePath`: never delete the repository root
+           // itself even if a `"."` pathspec slipped through.
+           if (samePath(resolved, repo.root)) {
+             messages.push(`Refused to discard repository root: ${filePath}`);
+             continue;
+           }
+           try {
+             fs.rmSync(resolved, { recursive: true, force: true });
+           } catch (error) {
+             messages.push(String(error?.message ?? error));
+           }
+         }
+         return { ok: messages.length === 0, message: messages.filter(Boolean).join("; ") || undefined };
+       });
+     }
+
+     case "git/apply-patch": {
+       const action = String(payload.action ?? "");
+       if (!["stage", "unstage", "discard"].includes(action)) {
+         return { ok: false, message: `Unknown patch action: ${action}` };
+       }
+       // A patch carries the file paths and the content it was built from, and
+       // `discard` writes to the worktree. The repository list is one click away
+       // and a switch starts a reload the user can click through, so a patch can
+       // outlive the repository it came from — where its paths can name a
+       // different file entirely. Refuse rather than edit the wrong one.
+       const from = typeof payload.root === "string" && payload.root ? payload.root : null;
+       // Aggregated view: `repoRoot` names the repo to act in, `root` the repo
+       // the diff was read from. Both are the submodule root for submodule
+       // files; legacy callers send only `root` and act in the selected repo.
+       const targetOverride = typeof payload.repoRoot === "string" && payload.repoRoot ? payload.repoRoot : null;
+       const runner = targetOverride ? (handler) => withRepoAt({ repoRoot: targetOverride }, handler) : withRepo;
+       return runner((repo) => {
+         if (from && !samePath(from, repo.root)) {
+           return {
+             ok: false,
+             code: "STALE_REPOSITORY",
+             message: "This diff came from another repository; refresh and try again.",
+           };
+         }
+         return applyPatch(repo, payload.patch, action);
+       });
+     }
+
+     // -- committing ---------------------------------------------------------
+     case "git/commit": {
+       const message = String(payload.message ?? "").trim();
+       if (!message && !payload.amend) return { ok: false, message: "Commit message is empty." };
+       return withRepoAt(payload, async (repo) => {
+         const args = ["commit"];
+         if (payload.amend) args.push("--amend");
+         if (message) args.push("-F", "-");
+         else args.push("--no-edit");
+         if (payload.signoff) args.push("--signoff");
+         const result = await runGit(args, { cwd: repo.root, input: message });
+         return {
+           ok: result.ok,
+           stdout: result.stdout,
+           message: result.ok ? undefined : result.message,
+         };
+       });
+     }
+
+    case "git/last-message":
+      return withRepo(async (repo) => {
+        const result = await runGit(["log", "-1", "--pretty=format:%B"], { cwd: repo.root });
+        return { ok: result.ok, message: result.ok ? result.stdout.trim() : result.message };
+      });
+
+    // -- branches and sync ---------------------------------------------------
+    case "git/checkout":
+      return withRepo(async (repo) => {
+        const name = String(payload.name ?? "").trim();
+        const startPointRaw = String(payload.startPoint ?? "").trim();
+        // `startPoint` becomes a positional argument too: the same option-injection
+        // shape (`-b`, `--upload-pack=…`) must not pass through unchecked.
+        const startPoint = startPointRaw ? refArg(startPointRaw) : "";
+        if (!name) return { ok: false, message: "Branch name is required." };
+        if (!isBranchNameSafe(name)) {
+          return { ok: false, message: "Branch name contains invalid characters." };
+        }
+        if (startPoint === null) return { ok: false, message: "Invalid start point." };
+        // `track: true` means the caller picked a remote-tracking branch out of
+        // a list it already classified (the Branches pane, the branch chip):
+        // check it out the way IDEA does — a local branch tracking it — instead
+        // of detaching at it. The remote-ness is re-verified here rather than
+        // trusted, because the panel bridge forwards any channel to
+        // `onPanelInvoke`. A raw revision still takes the `--detach` path below.
+        // Note: 跟踪检出取代了原来的 detach 语义（用户要的是 IDEA 行为）——见 .agents/notes/implemented/bug-fix/2026-09-12-checkout-remote-pathspec.md
+        if (payload.track === true && !payload.create) {
+          if (!startPoint || !startPoint.includes("/") || startPoint.endsWith("/HEAD")) {
+            return { ok: false, message: "Not a remote-tracking branch." };
+          }
+          const probe = await runGit(["rev-parse", "--verify", "--quiet", `refs/remotes/${startPoint}`], { cwd: repo.root });
+          if (!probe.ok) return { ok: false, message: "Not a remote-tracking branch." };
+          const local = startPoint.slice(startPoint.indexOf("/") + 1);
+          const first = await runGit(["switch", "--track", startPoint], { cwd: repo.root });
+          if (first.ok) return { ok: true, message: undefined };
+          if (/already exists/i.test(first.message ?? "")) {
+            // The local branch is already there — it is what the click meant.
+            // Its own error (a dirty tree names the file) is the actionable
+            // one here, not the expected "already exists".
+            const existing = await runGit(["switch", local], { cwd: repo.root });
+            if (existing.ok) return { ok: true, message: undefined };
+            const existingFallback = await runGit(["checkout", local], { cwd: repo.root });
+            return { ok: existingFallback.ok, message: existingFallback.ok ? undefined : existing.message };
+          }
+          const second = await runGit(["checkout", "--track", startPoint], { cwd: repo.root });
+          // When both fail, keep the FIRST error (see below).
+          return { ok: second.ok, message: second.ok ? undefined : first.message };
+        }
+        // A remote-tracking branch (or any raw revision) cannot be "switched
+        // to": `switch` demands `--detach` for those, and `checkout` with two
+        // positionals reads the second as a pathspec — `checkout origin/main
+        // origin/main` fails with `error: pathspec 'origin/main' did not match
+        // any file(s) known to git`. Build both commands in the same shape so
+        // the fallback cannot disagree with the attempt.
+        // Note: 兜底曾经是 checkout <startPoint> <name>，切远端分支必现 pathspec 误报且吞掉 switch 的真报错（含 --detach 提示）— 见 .agents/notes/implemented/bug-fix/2026-09-12-checkout-remote-pathspec.md
+        const attempt = payload.create
+          ? ["switch", "--create", name, ...(startPoint ? [startPoint] : [])]
+          : startPoint
+            ? ["switch", "--detach", startPoint]
+            : ["switch", name];
+        const fallback = payload.create
+          ? ["checkout", "-b", name, ...(startPoint ? [startPoint] : [])]
+          : startPoint
+            ? ["checkout", "--detach", startPoint]
+            : ["checkout", name];
+        let result = await runGit(attempt, { cwd: repo.root });
+        if (!result.ok) {
+          // No `switch` (Git < 2.23), or `switch` refusing a real checkout.
+          // When both fail, keep the FIRST error: it names the actual cause
+          // (local changes in the way, the --detach hint), while the
+          // fallback's wording only adds confusion.
+          const second = await runGit(fallback, { cwd: repo.root });
+          if (second.ok) result = second;
+        }
+        return { ok: result.ok, message: result.ok ? undefined : result.message };
+      });
+    case "git/create-branch":
+      return withRepo(async (repo) => {
+        const name = String(payload.name ?? "").trim();
+        if (!name) return { ok: false, message: "Branch name is required." };
+        if (!isBranchNameSafe(name)) {
+          return { ok: false, message: "Branch name contains invalid characters." };
+        }
+        const result = await runGit(["branch", "--", name], { cwd: repo.root });
+        return { ok: result.ok, message: result.ok ? undefined : result.message };
+      });
+
+    case "git/fetch": {
+      const remote = refArg(payload.remote);
+      const branch = refArg(payload.branch);
+      if (remote === null || branch === null) return { ok: false, message: "Invalid remote or branch name." };
+      const target = [remote, branch].filter(Boolean);
+      const prune = payload.prune === true;
+      return withRepo(async (repo) => {
+        // Prompts are disabled, so this fails fast and visibly rather than
+        // hanging with no terminal to answer it.
+        const result = await runGit(["fetch", ...(prune ? ["--prune"] : []), ...target], {
+          cwd: repo.root,
+          timeoutMs: COMMAND_TIMEOUT_MS,
+        });
+        return syncOutcome("git/fetch", result);
+      });
+    }
+
+    // Note: 分支的合并/变基/改名/删除/upstream 全部是独立通道：渲染层只传 ref 名、不拼 Git 参数，option 注入由 refArg/isBranchNameSafe 在引擎边界拦 — 见 .agents/notes/implemented/feature/2026-09-14-git-operations-parity.md
+    case "git/merge": {
+      const ref = refArg(payload.ref ?? payload.name);
+      if (ref === null) return { ok: false, message: "Invalid ref name." };
+      if (!ref) return { ok: false, message: "Branch name is required." };
+      return withRepo(async (repo) => {
+        const result = await runGit(["merge", "--no-edit", ref], { cwd: repo.root });
+        return {
+          ok: result.ok,
+          stdout: result.stdout,
+          stderr: result.stderr,
+          message: result.ok ? undefined : result.message,
+          detail: result.ok ? undefined : gitDetail(result.stdout, result.stderr),
+        };
+      });
+    }
+
+    case "git/rebase": {
+      const ref = refArg(payload.ref ?? payload.name);
+      if (ref === null) return { ok: false, message: "Invalid ref name." };
+      if (!ref) return { ok: false, message: "Branch name is required." };
+      return withRepo(async (repo) => {
+        const result = await runGit(["rebase", ref], { cwd: repo.root });
+        return {
+          ok: result.ok,
+          stdout: result.stdout,
+          stderr: result.stderr,
+          message: result.ok ? undefined : result.message,
+          detail: result.ok ? undefined : gitDetail(result.stdout, result.stderr),
+        };
+      });
+    }
+
+    case "git/branch-delete": {
+      const name = String(payload.name ?? "").trim();
+      if (!name) return { ok: false, message: "Branch name is required." };
+      if (!isBranchNameSafe(name)) return { ok: false, message: "Branch name contains invalid characters." };
+      const remote = refArg(payload.remote);
+      if (remote === null) return { ok: false, message: "Invalid remote name." };
+      return withRepo(async (repo) => {
+        if (remote) {
+          const short = name.includes("/") ? name.slice(name.indexOf("/") + 1) : name;
+          const result = await runGit(["push", remote, "--delete", short], { cwd: repo.root, timeoutMs: COMMAND_TIMEOUT_MS });
+          return syncOutcome("git/fetch", result);
+        }
+        const force = payload.force === true;
+        const result = await runGit(["branch", force ? "-D" : "-d", "--", name], { cwd: repo.root });
+        return { ok: result.ok, message: result.ok ? undefined : result.message };
+      });
+    }
+
+    case "git/branch-rename": {
+      const oldName = String(payload.old ?? payload.name ?? "").trim();
+      const newName = String(payload.new ?? payload.to ?? "").trim();
+      if (!oldName || !newName) return { ok: false, message: "Branch name is required." };
+      if (!isBranchNameSafe(oldName) || !isBranchNameSafe(newName)) {
+        return { ok: false, message: "Branch name contains invalid characters." };
+      }
+      return withRepo(async (repo) => {
+        const result = await runGit(["branch", "-m", "--", oldName, newName], { cwd: repo.root });
+        return { ok: result.ok, message: result.ok ? undefined : result.message };
+      });
+    }
+
+    case "git/branch-upstream": {
+      const name = String(payload.name ?? "").trim();
+      const upstream = refArg(payload.upstream);
+      if (upstream === null) return { ok: false, message: "Invalid upstream name." };
+      if (name && !isBranchNameSafe(name)) return { ok: false, message: "Branch name contains invalid characters." };
+      return withRepo(async (repo) => {
+        const args = payload.unset === true
+          ? ["branch", "--unset-upstream", ...(name ? [name] : [])]
+          : upstream
+            ? ["branch", `--set-upstream-to=${upstream}`, ...(name ? [name] : [])]
+            : null;
+        if (!args) return { ok: false, message: "Upstream is required." };
+        const result = await runGit(args, { cwd: repo.root });
+        return { ok: result.ok, message: result.ok ? undefined : result.message };
+      });
+    }
+
+    case "git/tag-delete": {
+      const name = String(payload.name ?? "").trim();
+      if (!name || /[\s~^:?*\[\\]/.test(name) || name.startsWith("-")) {
+        return { ok: false, message: "Invalid tag name." };
+      }
+      return withRepo(async (repo) => {
+        const result = await runGit(["tag", "-d", "--", name], { cwd: repo.root });
+        return { ok: result.ok, message: result.ok ? undefined : result.message };
+      });
+    }
+
+    case "git/tag-push": {
+      const name = String(payload.name ?? "").trim();
+      if (!name || /[\s~^:?*\[\\]/.test(name) || name.startsWith("-")) {
+        return { ok: false, message: "Invalid tag name." };
+      }
+      const remote = refArg(payload.remote);
+      if (remote === null) return { ok: false, message: "Invalid remote name." };
+      return withRepo(async (repo) => {
+        let targetRemote = remote;
+        if (!targetRemote) {
+          const remotes = await runGit(["remote"], { cwd: repo.root });
+          const names = remotes.ok ? remotes.stdout.split("\n").map((l) => l.trim()).filter(Boolean) : [];
+          if (names.includes("origin")) targetRemote = "origin";
+          else if (names.length === 1) targetRemote = names[0];
+          else if (!names.length) return { ok: false, message: "This repository has no remote to push to." };
+          else return { ok: false, message: `Several remotes (${names.join(", ")}). Choose one to push the tag to.` };
+        }
+        const result = await runGit(["push", targetRemote, "tag", "--", name], { cwd: repo.root, timeoutMs: COMMAND_TIMEOUT_MS });
+        return syncOutcome("git/push", result);
+      });
+    }
+
+    case "git/stash-show": {
+      const ref = String(payload.ref ?? "").trim();
+      if (ref && !/^stash@\{\d+\}$/.test(ref)) return { ok: false, message: "Invalid stash ref." };
+      return withRepo(async (repo) => {
+        const result = await runGit(["stash", "show", "-p", ...(ref ? [ref] : [])], { cwd: repo.root });
+        return { ok: result.ok, text: result.stdout, message: result.ok ? undefined : result.message };
+      });
+    }
+
+    case "git/compare": {
+      const a = refArg(payload.a);
+      const b = refArg(payload.b);
+      if (a === null || b === null) return { ok: false, message: "Invalid revision." };
+      if (!a || !b) return { ok: false, message: "Two revisions are required." };
+      return withRepo(async (repo) => {
+        const result = await runGit(["diff", "--no-color", "--no-ext-diff", `${a}...${b}`], { cwd: repo.root });
+        if (!result.ok || !result.stdout.trim()) {
+          const fallback = await runGit(["diff", "--no-color", "--no-ext-diff", a, b], { cwd: repo.root });
+          return { ok: fallback.ok, text: fallback.stdout, message: fallback.ok ? undefined : fallback.message };
+        }
+        return { ok: true, text: result.stdout };
+      });
+    }
+
+    // Note: 推送只能走 --force-with-lease（裸 --force 会静默抹掉同事的提交）；pull 先按用户配置原样跑、只在 Git 因没策略拒绝时补一次 --no-rebase——自己读 pull.rebase/pull.ff 拼参数是 Git 优先级规则的第二个、更差的副本 — 见 .agents/notes/implemented/architecture/2026-09-12-remote-sync-conflicts.md
+    case "git/push": {
+      const remote = refArg(payload.remote);
+      const branch = refArg(payload.branch);
+      if (remote === null || branch === null) return { ok: false, message: "Invalid remote or branch name." };
+      // Note: 聚合推送不切换选中仓——repoRoot 显式覆盖让 Push 对话框与 Commit and Push 逐仓推送，缺省仍是当前仓 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+      return withRepoAt(payload, async (repo) => {
+        const target = remote && branch ? { ok: true, remote, branch } : await resolvePushTarget(repo.root);
+        if (!target.ok) return target;
+        const args = ["push", target.remote, target.branch].filter(Boolean);
+        // The views send this whenever the branch has no upstream, so that the
+        // first push establishes tracking and the ahead/behind counts start
+        // working. It used to be accepted and then ignored.
+        if (payload.setUpstream === true) args.push("--set-upstream");
+        // Never a bare `--force`: the lease keeps the overwrite conditional on
+        // the remote still being where it was when this plugin last saw it, so a
+        // push that landed in between is refused instead of erased. `refArg`
+        // above is what keeps a caller from smuggling `--force` in as the remote.
+        if (payload.forceWithLease === true) args.push("--force-with-lease");
+        const result = await runGit(args, { cwd: repo.root, timeoutMs: COMMAND_TIMEOUT_MS });
+        return syncOutcome("git/push", result);
+      });
+    }
+
+    case "git/push-statuses": {
+      const repo = await readRepo();
+      if (!repo.ok) return repo;
+      const repositories = await discoverRepositories(repo.workspaceRoot);
+      const out = [];
+      for (const entry of repositories) {
+        let resolved = null;
+        try {
+          resolved = await resolveRepositoryRoot(entry.root);
+        } catch {
+          resolved = null;
+        }
+        if (!resolved) continue;
+        // discover 已给出工作区相对 rel（realpath 安全），不重算。
+        const repoObj = {
+          root: resolved,
+          name: path.basename(resolved),
+          rel: entry.rel,
+          workspacePrefix: workspaceRelativeRoot(repo.workspace, resolved),
+          workspace: repo.workspace ?? null,
+          workspaceRoot: repo.workspaceRoot ?? resolved,
+        };
+        let status = null;
+        try {
+          status = await readStatus(repoObj);
+        } catch {
+          status = null;
+        }
+        if (!status?.ok) continue;
+        const target = await resolvePushTarget(resolved);
+        out.push({
+          rel: repoObj.rel,
+          root: resolved,
+          name: repoObj.name,
+          kind: entry.kind,
+          active: samePath(resolved, repo.root),
+          branch: status.branch,
+          pushTarget: target.ok ? { remote: target.remote, branch: target.branch } : null,
+          pushError: target.ok ? null : (target.message ?? null),
+        });
+      }
+      out.sort((a, b) => String(a.rel).localeCompare(String(b.rel)));
+      return { ok: true, repos: out };
+    }
+
+    case "git/pull": {
+      const remote = refArg(payload.remote);
+      const branch = refArg(payload.branch);
+      if (remote === null || branch === null) return { ok: false, message: "Invalid remote or branch name." };
+      const target = [remote, branch].filter(Boolean);
+      return withRepo(async (repo) => {
+        // Run it as the user configured it. `git pull` itself knows
+        // `branch.<name>.rebase`, `pull.rebase` (including `merges` and
+        // `interactive`), `pull.ff` and `pull.rebase=false`; re-deriving any of
+        // that here would be a second, worse copy of Git's own precedence rules.
+        const first = await runGit(["pull", ...target], { cwd: repo.root, timeoutMs: COMMAND_TIMEOUT_MS });
+        if (first.ok || !needsReconcile(first.stdout, first.stderr)) return syncOutcome("git/pull", first);
+        // Since 2.27, `git pull` with no strategy configured is a hard fatal on a
+        // diverged branch — so the one command a refused push tells you to run
+        // could not run at all. Answer that one question, once, by merging: it is
+        // what `git pull` did before 2.27 and what IDEA's "Update Project" does
+        // by default, and it is the recoverable answer, because a merge that stops
+        // on conflicts lands in the Changes list where this plugin can finish or
+        // abort it. Every other failure is reported as it came.
+        const retry = await runGit(["pull", "--no-rebase", ...target], { cwd: repo.root, timeoutMs: COMMAND_TIMEOUT_MS });
+        return syncOutcome("git/pull", retry);
+      });
+    }
+
+    /**
+     * Leave an unfinished merge/rebase/cherry-pick, or move it along.
+     *
+     * This exists because the plugin's own Pull can stop on conflicts: without
+     * it, the plugin could put a repository into a state it had no way to leave
+     * — resolving every conflict by hand, and even then needing a terminal to
+     * continue a rebase.
+     */
+    case "git/sequencer": {
+      const operation = String(payload.operation ?? "");
+      const action = String(payload.action ?? "");
+      if (!SEQUENCER.has(operation)) return { ok: false, message: `Unknown operation: ${operation || "(none)"}` };
+      if (action !== "abort" && action !== "continue") {
+        return { ok: false, message: `Unknown action: ${action || "(none)"}` };
+      }
+      // A merge is finished by committing it, which the commit button already
+      // does; only the sequencer commands have a `--continue` of their own.
+      if (action === "continue" && operation === "merge") {
+        return { ok: false, message: "A merge is finished by committing it." };
+      }
+      return withRepo(async (repo) => {
+        // `--continue` will open an editor for the commit message. There is no
+        // terminal here and stdin is closed, so Git could only fail; setting the
+        // editor to `true` accepts the message the operation already recorded,
+        // which is what pressing Continue means.
+        const prefix = action === "continue" ? ["-c", "core.editor=true"] : [];
+        const result = await runGit([...prefix, operation, `--${action}`], { cwd: repo.root });
+        return {
+          ok: result.ok,
+          stdout: result.stdout,
+          message: result.ok ? undefined : result.message,
+          detail: gitDetail(result.stdout, result.stderr),
+        };
+      });
+    }
+
+    case "git/stash": {
+      const action = String(payload.action ?? "push");
+      return withRepo(async (repo) => {
+        let args;
+        if (action === "push") {
+          args = ["stash", "push", "--include-untracked", "--message", String(payload.message ?? "").trim() || "IDEA Git stash"];
+        } else if (action === "pop" || action === "apply") {
+          const ref = String(payload.ref ?? "").trim();
+          // Only `stash@{n}` may reach Git: anything else is either an option
+          // (`--help`) or a revision that names the wrong object. Empty means
+          // the top stash, which is what `git stash pop` does with no ref.
+          if (ref && !/^stash@\{\d+\}$/.test(ref)) return { ok: false, message: "Invalid stash ref." };
+          args = ["stash", action, ...(ref ? [ref] : [])];
+        } else if (action === "drop") {
+          const ref = String(payload.ref ?? "").trim();
+          if (ref && !/^stash@\{\d+\}$/.test(ref)) return { ok: false, message: "Invalid stash ref." };
+          args = ["stash", "drop", ...(ref ? [ref] : [])];
+        } else {
+          return { ok: false, message: `Unknown stash action: ${action}` };
+        }
+        const result = await runGit(args, { cwd: repo.root });
+        return { ok: result.ok, stdout: result.stdout, message: result.ok ? undefined : result.message };
+      });
+    }
+
+    // -- misc ---------------------------------------------------------------
+    // -- commit message drafting ---------------------------------------------
+    case "git/models": {
+      const listing = await listModels();
+      if (!listing.ok) return listing;
+      return { ok: true, models: listing.models, preferred: (await readPrefs()).ui?.commitModelKey ?? "" };
+    }
+
+     case "git/commit-message":
+       return withRepoAt(payload, (repo) => draftCommitMessage(repo, payload));
+
+    // -- commit-level actions (Log) ------------------------------------------
+    case "git/cherry-pick":
+    case "git/revert": {
+      const hash = String(payload.hash ?? "");
+      if (!/^[0-9a-f]{4,64}$/i.test(hash)) return { ok: false, message: "Invalid commit hash." };
+      return withRepo(async (repo) => {
+        const verb = channel === "git/cherry-pick" ? "cherry-pick" : "revert";
+        const result = await runGit([verb, "--no-edit", hash], { cwd: repo.root });
+        return {
+          ok: result.ok,
+          stdout: result.stdout,
+          stderr: result.stderr,
+          message: result.ok ? undefined : result.message,
+        };
+      });
+    }
+
+    // TODO: `reset --hard`/`--keep` discards worktree content with no backup and
+    // no server-side confirmation; removing the modes needs a UI/UX decision
+    // (confirm dialog, reflog note), so behaviour stays as-is.
+    case "git/reset": {
+      const hash = String(payload.hash ?? "");
+      if (!/^[0-9a-f]{4,64}$/i.test(hash)) return { ok: false, message: "Invalid commit hash." };
+      const mode = ["soft", "mixed", "hard", "keep"].includes(payload.mode) ? payload.mode : "mixed";
+      return withRepo(async (repo) => {
+        const result = await runGit(["reset", `--${mode}`, hash], { cwd: repo.root });
+        return { ok: result.ok, stdout: result.stdout, stderr: result.stderr, message: result.ok ? undefined : result.message };
+      });
+    }
+
+    case "git/tag": {
+      const name = String(payload.name ?? "").trim();
+      const hash = String(payload.hash ?? "").trim();
+      if (!name || /[\s~^:?*\[\\]/.test(name) || name.startsWith("-")) {
+        return { ok: false, message: "Invalid tag name." };
+      }
+      if (hash && !/^[0-9a-f]{4,64}$/i.test(hash)) return { ok: false, message: "Invalid commit hash." };
+      return withRepo(async (repo) => {
+        const result = await runGit(["tag", name, ...(hash ? [hash] : [])], { cwd: repo.root });
+        return { ok: result.ok, message: result.ok ? undefined : result.message };
+      });
+    }
+
+    /** `--name-status` gives the Changed Files pane its list, one line per file. */
+    case "git/commit-files": {
+      const hash = String(payload.hash ?? "");
+      if (!/^[0-9a-f]{4,64}$/i.test(hash)) return { ok: false, message: "Invalid commit hash." };
+      return withRepo(async (repo) => {
+        const result = await runGit(
+          ["show", "--no-color", "--name-status", "--format=", "--no-renames", hash],
+          { cwd: repo.root },
+        );
+        const files = result.stdout
+          .split("\n")
+          .filter((line) => line.trim())
+          .map((line) => {
+            const parts = line.split("\t");
+            return { status: (parts[0] ?? "M").charAt(0), path: parts.slice(1).join("\t") };
+          })
+          .filter((entry) => entry.path);
+        return { ok: result.ok, files, message: result.ok ? undefined : result.message };
+      });
+    }
+
+    /** Rewording is only safe for the tip, which is what the UI offers. */
+    case "git/amend-message": {
+      const message = String(payload.message ?? "").trim();
+      if (!message) return { ok: false, message: "Commit message is empty." };
+      return withRepo(async (repo) => {
+        const result = await runGit(["commit", "--amend", "-F", "-"], { cwd: repo.root, input: message });
+        return { ok: result.ok, message: result.ok ? undefined : result.message };
+      });
+    }
+
+    // -- preferences --------------------------------------------------------
+    case "git/prefs":
+      return { ok: true, prefs: await readPrefs() };
+
+    case "git/prefs-set": {
+      const current = await readPrefs();
+      const uiPatch = payload?.ui && typeof payload.ui === "object" ? payload.ui : {};
+      return { ok: true, prefs: await writePrefs({ messages: current.messages, ui: { ...current.ui, ...uiPatch } }) };
+    }
+
+    case "git/message-used":
+      return { ok: true, prefs: await writePrefs(rememberMessage(await readPrefs(), payload?.message)) };
+
+    // -- console ------------------------------------------------------------
+    case "git/console":
+      return { ok: true, entries: consoleLog() };
+
+    case "git/console-clear":
+      clearConsoleLog();
+      return { ok: true };
+
+    case "git/relative-time":
+      return { ok: true, now: Date.now() };
+
+    default:
+      return { ok: false, message: `Unsupported channel: ${channel}` };
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Lifecycle
+// ---------------------------------------------------------------------------
+
+const OPEN_COMMAND = "pi-idea-git.open";
+const REFRESH_COMMAND = "pi-idea-git.refresh";
+
+/**
+ * The workspace listener is rebuilt on every load and released on unload.
+ *
+ * This host's `pi.events.on` returns nothing (its only `return` is the early
+ * guard for a non-function handler), so the unsubscribe handle cannot be relied
+ * on — `pi.events.off(event, handler)` is the pairing that actually exists, and
+ * it needs the handler reference kept here. A host that does hand back a
+ * function is honoured too, since that removes the need for `off`.
+ */
+let workspaceListenerOff = null;
+let workspaceListenerHandler = null;
+
+function detachWorkspaceListener() {
+  const off = workspaceListenerOff;
+  const handler = workspaceListenerHandler;
+  workspaceListenerOff = null;
+  workspaceListenerHandler = null;
+  try {
+    if (typeof off === "function") off();
+    else if (handler) pi.events?.off?.("workspace:changed", handler);
+  } catch {
+    // The host already tore the listener down.
+  }
+}
+
+/**
+ * Idempotent: a second `onLoad` without an intervening `onUnload` must not stack
+ * a duplicate handler — one is detached before the next is installed.
+ */
+function bindWorkspaceListener() {
+  detachWorkspaceListener();
+  try {
+    const handler = () => {
+      refreshWorkspace().catch(() => {});
+    };
+    const off = pi.events?.on?.("workspace:changed", handler);
+    workspaceListenerHandler = handler;
+    workspaceListenerOff = typeof off === "function" ? off : null;
+  } catch {
+    // Older host without plugin-process events: readRepo still refreshes.
+  }
+}
+
+async function onLoad() {
+  // The host re-broadcasts workspace switches to plugin processes; tracking them
+  // keeps `workspacePath()` honest for any path that does not go through
+  // `readRepo()` (which refreshes on its own).
+  bindWorkspaceListener();
+
+
+  await pi.commands.register({
+    id: OPEN_COMMAND,
+    title: "IDEA Git: Open as separate window",
+    keywords: ["git", "idea", "commit", "diff", "stage"],
+    run: async () => {
+      await pi.ui.openPanel({ title: "IDEA Git" });
+    },
+  });
+
+  await pi.commands.register({
+    id: REFRESH_COMMAND,
+    title: "IDEA Git: Refresh repository",
+    keywords: ["git", "refresh"],
+    run: async () => {
+      await refreshWorkspace();
+      const repo = await readRepo();
+      // A nested repository is named by where it sits: `mod` alone would not
+      // say which one was picked when the workspace holds several.
+      const label = repo.ok && repo.rel && repo.rel !== "." ? repo.rel : repo.name;
+      await pi.ui.showToast(
+        repo.ok ? `Git repository: ${label}` : repo.message,
+        repo.ok ? "info" : "error",
+      );
+    },
+  });
+}
+
+async function onUnload() {
+  selectedRoot = null;
+  detachWorkspaceListener();
+
+  gitBinaryCache = undefined;
+  try {
+    await pi.commands.unregister(OPEN_COMMAND);
+  } catch {
+    // The host already tore the commands down.
+  }
+  try {
+    await pi.commands.unregister(REFRESH_COMMAND);
+  } catch {
+    // Same.
+  }
+}
+
+module.exports = { onLoad, onUnload, onPanelInvoke, refreshWorkspace };
diff --git a/plugins/io.github.liushunqiu.pi-idea-git/manifest.json b/plugins/io.github.liushunqiu.pi-idea-git/manifest.json
new file mode 100644
index 0000000..3178033
--- /dev/null
+++ b/plugins/io.github.liushunqiu.pi-idea-git/manifest.json
@@ -0,0 +1,106 @@
+{
+  "schemaVersion": 1,
+  "id": "io.github.liushunqiu.pi-idea-git",
+  "name": "IDEA Git",
+  "version": "0.3.0",
+  "description": "An IntelliJ-IDEA-style Git tool window for PI-Desktop: staged/unstaged change lists, hunk-level stage & revert, commit, branch switcher, graph log and stashes. IDEA Git 风格的 Git 工具窗口：暂存/未暂存分组、按代码块暂存与还原、提交、分支切换、图形化日志与储藏。",
+  "author": "liushunqiu",
+  "homepage": "https://github.com/liushunqiu/pi-idea-git",
+  "repository": "https://github.com/liushunqiu/pi-idea-git",
+  "i18n": {
+    "en": {
+      "name": "IDEA Git",
+      "description": "An IntelliJ-IDEA-style Git tool window for PI-Desktop: staged/unstaged change lists, hunk-level stage & revert, commit, branch switcher, graph log and stashes.",
+      "safetyNotes": "Reads workspace files through the host fs APIs (Open File / Reveal only); discarding an untracked file deletes it (with a confirmation dialog) — every other write goes through Git commands. Commit-message generation calls the host model with your own model setup and quota (host rate limit 8/min); the plugin holds no API keys, makes no network requests, no telemetry. HTTPS credentials come from your own Git credential helper; keys that live only in ssh-agent do not work — use an HTTPS remote or a keychain-backed key."
+    },
+    "zh-CN": {
+      "name": "IDEA Git",
+      "description": "PI-Desktop 的 IDEA 风格 Git 工具窗口：暂存/未暂存分组、按代码块暂存与还原、提交、分支切换、图形化日志与储藏。",
+      "safetyNotes": "只读工作区文件（Open File / Reveal 走宿主 fs 接口）；丢弃未跟踪文件时会直接删除该文件（操作前有确认框），其余写操作一律走 Git 命令。生成提交信息调用宿主模型，用的是你自己的模型配置与额度（宿主限流 8 次/分），插件不持有任何 API Key，不发起网络请求，无遥测。HTTPS 凭据走你自己的 Git 凭据助手；只活在 ssh-agent 里的密钥用不了，请用 HTTPS 远端或钥匙串密钥。"
+    }
+  },
+  "categories": [
+    "developer-tools",
+    "productivity"
+  ],
+  "changelog": "Release 0.3.0: Git operations parity (Branches panel with HEAD/Tags/Remotes/Stashes groups and slash-folder collapsing; branch merge/rebase/rename/upstream/delete; commit copy/compare; toolbar user/date/path server-side filters, Go to HEAD, Fetch+Pull shortcuts); git/log server-side author/since/until/search/paths filters plus git/tags, git/remotes, git/merge, git/rebase and more; remote checkout creates a tracking branch (IDEA behavior); commit-message drafting follows the checked/staged scope.",
+  "safetyNotes": "只读工作区文件（Open File / Reveal 走宿主 fs 接口）；丢弃未跟踪文件时会直接删除该文件（操作前有确认框），其余写操作一律走 Git 命令。生成提交信息调用宿主模型，用的是你自己的模型配置与额度（宿主限流 8 次/分），插件不持有任何 API Key，不发起网络请求，无遥测。HTTPS 凭据走你自己的 Git 凭据助手；只活在 ssh-agent 里的密钥用不了，请用 HTTPS 远端或钥匙串密钥。",
+  "main": "main.js",
+  "ui": {
+    "panel": "renderer/index.html",
+    "title": {
+      "en": "IDEA Git",
+      "zh-CN": "IDEA Git"
+    }
+  },
+  "contributes": {
+    "views": [
+      {
+        "id": "commit",
+        "title": {
+          "en": "Commit",
+          "zh-CN": "提交"
+        },
+        "icon": "list-checks",
+        "entry": "views/commit.html",
+        "order": 33
+      },
+      {
+        "id": "git",
+        "title": {
+          "en": "Git",
+          "zh-CN": "Git"
+        },
+        "icon": "branch",
+        "entry": "views/git.html",
+        "order": 35
+      }
+    ],
+    "commands": [
+      {
+        "id": "pi-idea-git.open",
+        "title": "IDEA Git: Open as a separate window",
+        "keywords": [
+          "git",
+          "idea",
+          "commit",
+          "diff",
+          "stage"
+        ]
+      },
+      {
+        "id": "pi-idea-git.refresh",
+        "title": "IDEA Git: Refresh repository",
+        "keywords": [
+          "git",
+          "refresh",
+          "reload"
+        ]
+      }
+    ]
+  },
+  "permissions": [
+    "ui.panel",
+    "ui.view",
+    "clipboard.write",
+    "fs.read",
+    "models.list",
+    "agent.complete"
+  ],
+  "fs": {
+    "read": {
+      "root": "workspace",
+      "scope": [
+        "**"
+      ]
+    }
+  },
+  "engines": {
+    "piDesktop": ">=0.8.0"
+  },
+  "activationEvents": [
+    "onStartup",
+    "onCommand:pi-idea-git.open",
+    "onCommand:pi-idea-git.refresh"
+  ]
+}
diff --git a/plugins/io.github.liushunqiu.pi-idea-git/renderer/index.html b/plugins/io.github.liushunqiu.pi-idea-git/renderer/index.html
new file mode 100644
index 0000000..36a22d5
--- /dev/null
+++ b/plugins/io.github.liushunqiu.pi-idea-git/renderer/index.html
@@ -0,0 +1,7752 @@
+<!-- GENERATED by tools/build.mjs — do not edit; edit src/* -->
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <!--
+      PI-Desktop owns exactly a transparent 46px drag band and a minimal three-button
+      window-control capsule. This panel uses pi-plugin-chrome=v3: the page can
+      paint through the 46px band, while host-generated holes keep controls
+      clickable and empty space draggable. Fixed or sticky panel surfaces use
+      var(--pi-plugin-titlebar-height, 46px).
+    -->
+    <meta name="pi-plugin-chrome" content="v3" />
+    <title>IDEA Git</title>
+    <style>
+/* ---- src/theme.css ---- */
+/*
+ * IntelliJ IDEA palette and component styles.
+ *
+ * Colour provenance matters here, so the values are grouped by how solid the
+ * evidence is:
+ *
+ *  - One deliberate deviation: JetBrains documents the light-theme deleted row
+ *    as a neutral grey (#D7D6D6). Next to the green insertion it reads as
+ *    "faded" rather than "removed", so a soft red is used instead. The other
+ *    diff colours are the published ones.
+ *  - Diff line backgrounds, the word-level fragment colour, the pane divider,
+ *    the editor gutter change bars and the file-status colours are the values
+ *    JetBrains prints in its own documentation/colour tables. They are used
+ *    verbatim, light and dark.
+ *  - Everything else is UI chrome (tool window background, borders, selection,
+ *    toolbar) where JetBrains publishes no numbers. Those follow the look of
+ *    IntelliJ Light and Darcula respectively rather than pretending to be
+ *    pixel-exact.
+ */
+
+:root {
+  color-scheme: light dark;
+
+  /* ---- IntelliJ Light ---- */
+  --bg: #ffffff;
+  --chrome-bg: #f7f8fa;
+  --panel-bg: #ffffff;
+  --panel-alt: #f2f4f7;
+  --border: #d1d5da;
+  --border-soft: #ebecf0;
+  --fg: #1f2328;
+  --fg-secondary: #5a5d63;
+  --fg-muted: #8c8c8c;
+  --selection: #d4e2ff;
+  --selection-fg: #1f2328;
+  --selection-inactive: #e8eaed;
+  --hover: #edf1f7;
+  --focus-ring: #2e5c99;
+
+  --button-bg: #ffffff;
+  --button-border: #c4c8cd;
+  --button-hover: #f0f3f7;
+  --button-primary-bg: #3871e0;
+  --button-primary-fg: #ffffff;
+  --button-primary-hover: #2f63c9;
+
+  --input-bg: #ffffff;
+  --input-border: #c4c8cd;
+
+  --diff-inserted: #c6e4c1;
+  --diff-modified: #e9eff9;
+  --diff-deleted: #f7d2d2;
+  --diff-fragment: #c6d7f0;
+  --diff-divider: #ebecf0;
+
+  --gutter-modified: #c3d6e8;
+  --gutter-added: #c9dec1;
+  --gutter-deleted: #d99b9b;
+  --gutter-whitespace: #eddcbc;
+
+  --status-added: #0a7700;
+  --status-modified: #0032a0;
+  --status-deleted: #616161;
+  --status-merged: #7503dc;
+  --status-conflict: #ff0000;
+  --status-ignored: #727238;
+  --status-renamed: #007c7c;
+  --status-unversioned: #993300;
+
+  --graph-head: #f0c000;
+  --graph-local: #00a000;
+  --graph-remote: #9b4fc9;
+  --graph-tag: #999999;
+
+  --toolbar-h: 32px;
+  --row-h: 22px;
+  --radius: 4px;
+  --ui-font: -apple-system, BlinkMacSystemFont, "Segoe UI", "Helvetica Neue", sans-serif;
+  --mono-font: ui-monospace, "SF Mono", Menlo, Consolas, "Liberation Mono", monospace;
+  --ui-size: 12px;
+  --mono-size: 12px;
+}
+
+:root[data-theme="dark"] {
+  color-scheme: dark;
+
+  /* ---- Darcula ---- */
+  --bg: #3c3f41;
+  --chrome-bg: #3c3f41;
+  --panel-bg: #313335;
+  --panel-alt: #2b2d2f;
+  --border: #555555;
+  --border-soft: #323438;
+  --fg: #bbbbbb;
+  --fg-secondary: #a9b1ba;
+  --fg-muted: #808080;
+  --selection: #2f65ca;
+  --selection-fg: #ffffff;
+  --selection-inactive: #46484a;
+  --hover: #4a4d4f;
+  --focus-ring: #7aa2f7;
+
+  --button-bg: #4c5052;
+  --button-border: #5f6164;
+  --button-hover: #5a5f62;
+  --button-primary-bg: #365880;
+  --button-primary-fg: #dce6f2;
+  --button-primary-hover: #3f6a9a;
+
+  --input-bg: #45494a;
+  --input-border: #5f6164;
+
+  --diff-inserted: #2b4034;
+  --diff-modified: #28323d;
+  --diff-deleted: #452a2e;
+  --diff-fragment: #3e546e;
+  /* Hue-matched fragments: a blue patch over a dark red row turns to mud. */
+  --diff-fragment-deleted: #6d353b;
+  --diff-fragment-inserted: #3d6249;
+  --diff-divider: #323438;
+
+  --gutter-modified: #374752;
+  --gutter-added: #4a7a5c;
+  --gutter-deleted: #a04c52;
+  --gutter-whitespace: #4c4638;
+
+  --status-added: #629755;
+  --status-modified: #6897bb;
+  --status-deleted: #6c6c6c;
+  --status-merged: #9876aa;
+  --status-conflict: #d5756c;
+  --status-ignored: #848504;
+  --status-renamed: #4b9e9e;
+  --status-unversioned: #c07840;
+}
+
+* {
+  box-sizing: border-box;
+}
+
+html,
+body {
+  height: 100%;
+  margin: 0;
+  overflow: hidden;
+}
+
+body {
+  font: var(--ui-size) / 1.45 var(--ui-font);
+  background: var(--chrome-bg);
+  color: var(--fg);
+  -webkit-font-smoothing: antialiased;
+}
+
+/* The host owns a transparent drag band. It is 46px in a detached panel and
+   0 in a docked view, and the host publishes the value either way. */
+.app {
+  display: flex;
+  flex-direction: column;
+  height: 100%;
+  padding-top: var(--pi-plugin-titlebar-height, 0px);
+  background: var(--chrome-bg);
+}
+
+/* ---------------------------------------------------------------- toolbars */
+
+.toolbar {
+  display: flex;
+  flex: 0 0 auto;
+  align-items: center;
+  gap: 2px;
+  min-height: var(--toolbar-h);
+  padding: 3px 4px;
+  border-bottom: 1px solid var(--border-soft);
+}
+
+.toolbar-spacer {
+  flex: 1 1 auto;
+}
+
+.toolbar-separator {
+  width: 1px;
+  height: 16px;
+  margin: 0 4px;
+  background: var(--border);
+}
+
+/* --------------------------------------------------------------- controls */
+
+button,
+.tbtn {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 5px;
+  min-height: 22px;
+  padding: 2px 8px;
+  border: 1px solid transparent;
+  border-radius: var(--radius);
+  background: transparent;
+  color: var(--fg);
+  cursor: pointer;
+  font: inherit;
+  line-height: 1.3;
+  white-space: nowrap;
+}
+
+button:hover:not(:disabled),
+.tbtn:hover:not(:disabled) {
+  background: var(--hover);
+}
+
+button:focus-visible,
+.tbtn:focus-visible,
+input:focus-visible,
+textarea:focus-visible,
+select:focus-visible {
+  outline: 2px solid var(--focus-ring);
+  outline-offset: -1px;
+}
+
+button:disabled {
+  color: var(--fg-muted);
+  cursor: default;
+}
+
+button.bordered {
+  border-color: var(--button-border);
+  background: var(--button-bg);
+}
+
+button.bordered:hover:not(:disabled) {
+  background: var(--button-hover);
+}
+
+button.primary {
+  border-color: var(--button-primary-bg);
+  background: var(--button-primary-bg);
+  color: var(--button-primary-fg);
+  font-weight: 600;
+}
+
+button.primary:hover:not(:disabled) {
+  background: var(--button-primary-hover);
+}
+
+button.primary:disabled {
+  border-color: var(--button-border);
+  background: var(--button-bg);
+  color: var(--fg-muted);
+}
+
+button.icon {
+  min-width: 24px;
+  padding: 2px 5px;
+}
+
+button.icon svg {
+  display: block;
+}
+
+.split-button {
+  display: inline-flex;
+}
+
+.split-button > button:first-child {
+  border-top-right-radius: 0;
+  border-bottom-right-radius: 0;
+}
+
+.split-button > button:last-child {
+  border-top-left-radius: 0;
+  border-bottom-left-radius: 0;
+  border-left-width: 0;
+  min-width: 18px;
+  padding: 2px 3px;
+}
+
+label.check {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  cursor: pointer;
+  user-select: none;
+  white-space: nowrap;
+}
+
+input[type="checkbox"] {
+  width: 13px;
+  height: 13px;
+  margin: 0;
+  accent-color: var(--button-primary-bg);
+  cursor: pointer;
+}
+
+input[type="text"],
+input[type="search"],
+textarea,
+select {
+  border: 1px solid var(--input-border);
+  border-radius: var(--radius);
+  background: var(--input-bg);
+  color: var(--fg);
+  font: inherit;
+  padding: 3px 6px;
+}
+
+textarea {
+  resize: none;
+  font-family: var(--ui-font);
+}
+
+.search-field {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  min-height: 22px;
+  padding: 0 6px;
+  border: 1px solid var(--input-border);
+  border-radius: var(--radius);
+  background: var(--input-bg);
+}
+
+.search-field input {
+  border: 0;
+  padding: 2px 0;
+  background: transparent;
+  min-width: 90px;
+}
+
+.search-field input:focus {
+  outline: none;
+}
+
+/* ------------------------------------------------------------------- tabs */
+
+.tabs {
+  display: flex;
+  flex: 0 0 auto;
+  align-items: stretch;
+  gap: 1px;
+  padding: 0 4px;
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+  overflow-x: auto;
+}
+
+.tabs button {
+  border-radius: 0;
+  border-bottom: 2px solid transparent;
+  padding: 5px 10px;
+  color: var(--fg-secondary);
+}
+
+.tabs button[aria-selected="true"] {
+  border-bottom-color: var(--button-primary-bg);
+  color: var(--fg);
+  font-weight: 600;
+}
+
+/* ---------------------------------------------------------------- surfaces */
+
+.surface {
+  display: flex;
+  flex: 1 1 auto;
+  min-height: 0;
+  background: var(--panel-bg);
+}
+
+.column {
+  display: flex;
+  flex-direction: column;
+  min-width: 0;
+  min-height: 0;
+}
+
+.row {
+  display: flex;
+  min-width: 0;
+  min-height: 0;
+}
+
+.scroll {
+  overflow: auto;
+  min-height: 0;
+}
+
+.pane {
+  position: relative;
+  min-width: 0;
+  min-height: 0;
+}
+
+.pane-header {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  padding: 5px 8px;
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+  color: var(--fg-secondary);
+  font-size: 11px;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+}
+
+.pane-header .toolbar-spacer {
+  flex: 1 1 auto;
+}
+
+.divider-v {
+  flex: 0 0 auto;
+  width: 1px;
+  background: var(--border-soft);
+}
+
+.divider-v.draggable {
+  width: 5px;
+  margin: 0 -2px;
+  z-index: 3;
+  background: transparent;
+  cursor: col-resize;
+}
+
+.divider-v.draggable:hover,
+.divider-v.draggable.active {
+  background: var(--button-primary-bg);
+}
+
+.divider-h {
+  flex: 0 0 auto;
+  height: 1px;
+  background: var(--border-soft);
+}
+
+.empty-state {
+  display: flex;
+  flex: 1 1 auto;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  gap: 8px;
+  padding: 24px;
+  color: var(--fg-muted);
+  text-align: center;
+}
+
+.empty-state .headline {
+  color: var(--fg-secondary);
+  font-size: 13px;
+  font-weight: 600;
+}
+
+.empty-state code {
+  font-family: var(--mono-font);
+  font-size: 11px;
+}
+
+/* ------------------------------------------------------------------- lists */
+
+.list {
+  padding: 2px 0;
+}
+
+.group-header {
+  display: flex;
+  position: sticky;
+  top: 0;
+  z-index: 1;
+  align-items: center;
+  gap: 5px;
+  height: var(--row-h);
+  padding: 0 6px;
+  background: var(--chrome-bg);
+  cursor: pointer;
+  user-select: none;
+  font-weight: 600;
+}
+
+.group-header:hover {
+  background: var(--hover);
+}
+
+.group-header .count {
+  color: var(--fg-muted);
+  font-weight: 400;
+}
+
+.disclosure {
+  display: inline-flex;
+  width: 10px;
+  justify-content: center;
+  color: var(--fg-secondary);
+  transform-origin: center;
+  transition: transform 120ms ease;
+}
+
+.disclosure[data-open="true"] {
+  transform: rotate(90deg);
+}
+
+.tree-row {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  height: var(--row-h);
+  padding: 0 6px 0 2px;
+  cursor: default;
+  user-select: none;
+  white-space: nowrap;
+}
+
+.tree-row:hover {
+  background: var(--hover);
+}
+
+/* Selected text uses --selection-fg so light (#d4e2ff bg) stays dark and readable. */
+.tree-row[aria-selected="true"] {
+  background: var(--selection);
+  color: var(--selection-fg);
+}
+
+.tree-row[aria-selected="true"] .meta,
+.tree-row[aria-selected="true"] .path,
+.tree-row[aria-selected="true"] .badge {
+  color: color-mix(in oklab, var(--selection-fg) 82%, transparent);
+}
+
+.tree-row .indent {
+  display: inline-block;
+  flex: 0 0 auto;
+}
+
+.tree-row .name {
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.tree-row .path {
+  color: var(--fg-secondary);
+  font-size: 11px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.tree-row .meta {
+  margin-left: auto;
+  padding-left: 8px;
+  color: var(--fg-muted);
+  font-size: 11px;
+}
+
+.tree-row .grow {
+  flex: 1 1 auto;
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.status-cell {
+  display: inline-block;
+  flex: 0 0 auto;
+  width: 12px;
+  font-family: var(--mono-font);
+  font-size: 11px;
+  font-weight: 700;
+  text-align: center;
+}
+
+.badge {
+  flex: 0 0 auto;
+  padding: 0 5px;
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  color: var(--fg-secondary);
+  font-size: 10px;
+  line-height: 15px;
+}
+
+.badge.head {
+  border-color: var(--graph-head);
+  color: var(--graph-head);
+}
+
+.badge.local {
+  border-color: var(--graph-local);
+  color: var(--graph-local);
+}
+
+.badge.remote {
+  border-color: var(--graph-remote);
+  color: var(--graph-remote);
+}
+
+.badge.tag {
+  border-color: var(--graph-tag);
+  color: var(--fg-secondary);
+}
+
+.tiny-button {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 16px;
+  height: 16px;
+  padding: 0;
+  border-radius: 3px;
+  color: var(--fg-secondary);
+  font-size: 13px;
+  line-height: 1;
+}
+
+.tiny-button:hover {
+  background: color-mix(in oklab, var(--fg) 14%, transparent);
+}
+/* ------------------------------------------------------------- tree rows --- */
+
+/* A folder row keeps the file rows' rhythm but reads as structure: its name is
+   darker than a file's, and its icon says which of the two it is without the
+   user parsing the indentation. */
+.tree-row.dir-row {
+  font-weight: 600;
+}
+
+.tree-row.dir-row .name {
+  color: var(--fg);
+}
+
+.tree-row.dir-row .count {
+  color: var(--fg-muted);
+  font-size: 11px;
+  font-weight: 400;
+}
+/* IDEA-style repository row: like a folder row, plus the per-repo color
+   square and a branch pill. Files nested below it render one level deeper. */
+.tree-row.repo-row {
+  font-weight: 600;
+  cursor: pointer;
+}
+.tree-row.repo-row .name {
+  color: var(--fg);
+}
+.tree-row.repo-row .repo-color {
+  flex: 0 0 auto;
+  width: 10px;
+  height: 10px;
+  border-radius: 3px;
+}
+
+.tree-row.dir-row .meta {
+  margin-left: 6px;
+  padding-left: 0;
+}
+
+.tree-row .row-icon {
+  display: inline-flex;
+  flex: 0 0 auto;
+  align-items: center;
+  color: var(--fg-secondary);
+}
+
+/* The folder's own disclosure sits between its checkbox and its icon, so the
+   arrow lines up with the one on a group header rather than with the checkbox
+   column. */
+.tree-row.dir-row .disclosure {
+  margin: 0 -2px;
+}
+
+/* Narrow work panels are the normal case here, and the folder count is the
+   first thing that can go without losing meaning. */
+@media (max-width: 420px) {
+  .tree-row.dir-row .meta {
+    display: none;
+  }
+}
+
+/* -------------------------------------------------------------------- diff */
+
+.diff {
+  flex: 1 1 auto;
+  overflow: auto;
+  min-height: 0;
+  background: var(--panel-bg);
+}
+
+.diff-file-header {
+  display: flex;
+  position: sticky;
+  top: 0;
+  z-index: 2;
+  align-items: center;
+  gap: 6px;
+  height: 24px;
+  padding: 0 8px;
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--panel-alt);
+  color: var(--fg-secondary);
+  font-size: 11px;
+}
+
+.diff-hunk-header {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  padding: 1px 6px;
+  border-top: 1px solid var(--border-soft);
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+  color: var(--fg-secondary);
+  font-family: var(--mono-font);
+  font-size: 11px;
+}
+
+.diff-hunk-header.folded {
+  background: var(--panel-alt);
+}
+
+.diff-hunk-note {
+  color: var(--fg-muted);
+}
+
+.diff-hunk-actions {
+  display: flex;
+  gap: 3px;
+  margin-left: auto;
+  opacity: 0;
+}
+
+.diff-hunk-header:hover .diff-hunk-actions,
+.diff-hunk-header:focus-within .diff-hunk-actions {
+  opacity: 1;
+}
+
+.diff-hunk-actions button {
+  min-height: 17px;
+  padding: 0 6px;
+  border-color: var(--button-border);
+  background: var(--button-bg);
+  font-family: var(--ui-font);
+  font-size: 11px;
+}
+
+.diff-line {
+  display: flex;
+  min-height: 17px;
+  font-family: var(--mono-font);
+  font-size: var(--mono-size);
+  line-height: 17px;
+  white-space: pre;
+}
+
+.diff-line .gutter-mark {
+  flex: 0 0 auto;
+  width: 4px;
+}
+
+.diff-line .sign {
+  flex: 0 0 auto;
+  width: 12px;
+  text-align: center;
+  color: color-mix(in oklab, var(--fg) 55%, transparent);
+  user-select: none;
+}
+
+.diff-line .text {
+  flex: 1 1 auto;
+  padding-right: 8px;
+  min-width: 0;
+}
+
+.diff-line.inserted {
+  background: var(--diff-inserted);
+}
+
+.diff-line.deleted {
+  background: var(--diff-deleted);
+}
+
+.diff-line.modified {
+  background: var(--diff-modified);
+}
+
+.diff-line.context .text {
+  color: var(--fg);
+}
+
+/* Word-level highlight inside a changed line. The hue follows the row it sits
+   on when a theme provides one: a blue patch over a red row reads as mud, which
+   is exactly what the dark palette suffered from. */
+.diff-line .fragment {
+  border-radius: 2px;
+  background: var(--diff-fragment);
+}
+
+.diff-line.deleted .fragment {
+  background: var(--diff-fragment-deleted, var(--diff-fragment));
+}
+
+.diff-line.inserted .fragment {
+  background: var(--diff-fragment-inserted, var(--diff-fragment));
+}
+
+.diff-line .fragment.strong {
+  background: color-mix(in oklab, var(--diff-fragment) 60%, var(--button-primary-bg));
+}
+
+.whitespace-mark {
+  color: color-mix(in oklab, var(--fg) 45%, transparent);
+}
+
+.diff-collapsed {
+  padding: 0 8px 0 16px;
+  border-top: 1px solid var(--border-soft);
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--panel-alt);
+  color: var(--fg-muted);
+  font-family: var(--mono-font);
+  font-size: 11px;
+  line-height: 18px;
+  cursor: pointer;
+}
+
+.diff-collapsed:hover {
+  color: var(--fg-secondary);
+}
+
+/* Side-by-side rendering of the very same hunks. */
+/*
+ * Side by side keeps each panel at half the viewport but never wraps: a
+ * wrapped line breaks the row-by-row alignment that makes the two panels worth
+ * comparing. When the content is wider than the panel the whole grid grows and
+ * the diff scrolls horizontally as one, so both sides stay on the same offset.
+ */
+.diff-sbs {
+  display: grid;
+  grid-template-columns: minmax(50%, max-content) 2px minmax(50%, max-content);
+  align-items: start;
+  width: max-content;
+  min-width: 100%;
+}
+
+.diff-sbs .side {
+  min-width: 0;
+  overflow: hidden;
+}
+
+.diff-sbs .spacer {
+  background: var(--diff-divider);
+}
+
+.diff-sbs .diff-line .text {
+  white-space: pre;
+}
+
+.diff-sbs .filler {
+  background: var(--panel-alt);
+}
+
+/* --------------------------------------------------------------- messages */
+
+.banner {
+  display: flex;
+  align-items: flex-start;
+  gap: 8px;
+  margin: 8px;
+  padding: 8px 10px;
+  border: 1px solid var(--border);
+  border-left-width: 3px;
+  border-radius: var(--radius);
+  background: var(--panel-alt);
+}
+
+.banner.error {
+  border-left-color: var(--status-conflict);
+}
+
+.banner.info {
+  border-left-color: var(--button-primary-bg);
+}
+
+.banner .banner-text {
+  min-width: 0;
+}
+
+.banner .banner-detail {
+  margin-top: 4px;
+  color: var(--fg-secondary);
+  font-family: var(--mono-font);
+  font-size: 11px;
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
+/* ------------------------------------------------------- commit message area */
+
+.commit-area {
+  flex: 0 0 auto;
+  display: flex;
+  flex-direction: column;
+  gap: 5px;
+  padding: 6px 8px 8px;
+  border-top: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+}
+
+.commit-message-row {
+  display: flex;
+  align-items: stretch;
+  gap: 6px;
+}
+
+.commit-message-row textarea {
+  flex: 1 1 auto;
+  min-height: 62px;
+  font-size: 13px;
+  line-height: 1.5;
+}
+
+.commit-history {
+  display: flex;
+  flex: 0 0 auto;
+  align-items: flex-start;
+}
+
+.commit-actions {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+}
+
+.commit-actions .spacer {
+  flex: 1 1 auto;
+}
+
+.commit-summary {
+  color: var(--fg-secondary);
+  font-size: 11px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.commit-summary.warn {
+  color: var(--status-unversioned);
+}
+
+/* ------------------------------------------------------------------ popups */
+
+.popup {
+  position: fixed;
+  z-index: 40;
+  min-width: 180px;
+  max-width: min(520px, 92vw);
+  max-height: 60vh;
+  overflow: auto;
+  border: 1px solid var(--border);
+  border-radius: 6px;
+  background: var(--panel-bg);
+  box-shadow: 0 8px 28px rgba(0, 0, 0, 0.32);
+  padding: 4px;
+}
+
+.popup .popup-title {
+  padding: 4px 8px;
+  color: var(--fg-muted);
+  font-size: 10px;
+  font-weight: 600;
+  letter-spacing: 0.04em;
+  text-transform: uppercase;
+}
+
+.popup button {
+  display: flex;
+  width: 100%;
+  justify-content: flex-start;
+  gap: 7px;
+  padding: 4px 8px;
+  border-radius: 3px;
+  text-align: left;
+}
+
+.popup button .shortcut {
+  margin-left: auto;
+  padding-left: 16px;
+  color: var(--fg-muted);
+  font-size: 11px;
+}
+
+.popup button[data-checked="true"]::before {
+  content: "✓";
+  width: 10px;
+}
+
+.popup button:not([data-checked])::before {
+  content: "";
+  width: 10px;
+}
+
+.popup .popup-separator {
+  height: 1px;
+  margin: 4px 2px;
+  background: var(--border-soft);
+}
+
+.popup input[type="text"] {
+  width: 100%;
+  margin: 3px 0;
+}
+
+/* ------------------------------------------------------------------- graph */
+
+.log-row {
+  display: grid;
+  grid-template-columns: var(--graph-width, 84px) minmax(0, 1fr);
+  align-items: stretch;
+  min-height: 34px;
+  border-bottom: 1px solid color-mix(in oklab, var(--border-soft) 55%, transparent);
+  cursor: default;
+  user-select: none;
+}
+
+.log-row:hover {
+  background: var(--hover);
+}
+
+/* Same --selection-fg contract as .tree-row above: white on light blue is unreadable. */
+.log-row[aria-selected="true"] {
+  background: var(--selection);
+  color: var(--selection-fg);
+}
+
+.log-row[aria-selected="true"] .log-author,
+.log-row[aria-selected="true"] .log-hash,
+.log-row[aria-selected="true"] .log-date {
+  color: color-mix(in oklab, var(--selection-fg) 78%, transparent);
+}
+
+.log-row.mine .log-subject {
+  font-weight: 700;
+}
+
+.log-row.current-branch {
+  background: color-mix(in oklab, var(--button-primary-bg) 10%, transparent);
+}
+
+.log-row.current-branch[aria-selected="true"] {
+  background: var(--selection);
+}
+
+.log-graph {
+  overflow: hidden;
+}
+
+.log-body {
+  display: flex;
+  flex-direction: column;
+  justify-content: center;
+  gap: 1px;
+  padding: 3px 8px 3px 0;
+  min-width: 0;
+}
+
+.log-subject {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.log-meta-line {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  color: var(--fg-secondary);
+  font-size: 11px;
+  overflow: hidden;
+}
+
+.log-author,
+.log-date,
+.log-hash {
+  color: var(--fg-muted);
+  white-space: nowrap;
+}
+
+.log-hash {
+  font-family: var(--mono-font);
+}
+
+.commit-details {
+  padding: 8px 10px;
+  color: var(--fg-secondary);
+  font-size: 11px;
+}
+
+.commit-details dl {
+  display: grid;
+  grid-template-columns: max-content minmax(0, 1fr);
+  gap: 3px 10px;
+  margin: 0;
+}
+
+.commit-details dt {
+  color: var(--fg-muted);
+}
+
+.commit-details dd {
+  margin: 0;
+  overflow-wrap: anywhere;
+  color: var(--fg);
+}
+
+.commit-details .message-body {
+  margin-top: 8px;
+  white-space: pre-wrap;
+  color: var(--fg);
+  font-family: var(--mono-font);
+  font-size: 11px;
+}
+
+/* ----------------------------------------------------------------- console */
+
+.console {
+  flex: 1 1 auto;
+  overflow: auto;
+  min-height: 0;
+  padding: 6px 8px;
+  background: var(--panel-bg);
+  font-family: var(--mono-font);
+  font-size: 11px;
+  line-height: 1.55;
+}
+
+.console-entry {
+  margin-bottom: 10px;
+}
+
+.console-cmd {
+  color: var(--status-modified);
+  font-weight: 700;
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
+.console-out {
+  margin: 2px 0 0;
+  white-space: pre-wrap;
+  word-break: break-word;
+  color: var(--fg);
+}
+
+.console-out.failure {
+  color: var(--status-conflict);
+}
+
+.console-time {
+  color: var(--fg-muted);
+}
+
+/* ------------------------------------------------------------------- toast */
+
+.toast-layer {
+  position: fixed;
+  right: 12px;
+  /* Top-right, not bottom-right: the bottom-right is the commit area (message
+     box + buttons) in the Commit view, so a success toast landed exactly on
+     the controls the user reaches for next. Top-right only covers read-only
+     list content while it is visible. The progress pill sits top-centre, so
+     the two never overlap — see the busy-feedback agent note. */
+  top: 12px;
+  z-index: 60;
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  pointer-events: none;
+}
+
+.toast {
+  max-width: 340px;
+  padding: 7px 10px;
+  border: 1px solid var(--border);
+  border-left-width: 3px;
+  border-radius: 5px;
+  background: var(--panel-bg);
+  box-shadow: 0 6px 20px rgba(0, 0, 0, 0.3);
+  animation: toast-in 140ms ease-out;
+}
+
+/* Git's own output is multi-line, and collapsing it into one paragraph is how
+   "CONFLICT (content): Merge conflict in f.txt" ends up reading as part of a
+   sentence. */
+.toast {
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
+/* An error toast that has more of Git's output behind it: the toast itself is
+   the target, and this is the label that says so. */
+.toast.clickable {
+  pointer-events: auto;
+}
+
+.toast-link {
+  display: block;
+  margin-top: 6px;
+  padding: 0;
+  border: 0;
+  background: none;
+  color: var(--button-primary-bg);
+  font: inherit;
+  text-decoration: underline;
+  cursor: pointer;
+}
+
+.toast.clickable .toast-link:hover {
+  color: var(--fg);
+}
+
+/* The full output behind a "Show details" link. `.banner-detail` is scoped to
+   the conflict banner, so a dialog outside one had no styling at all — and a
+   4000-character block with no bound would run past the bottom of the window. */
+.dialog-detail {
+  margin-top: 8px;
+  max-height: 45vh;
+  overflow: auto;
+  padding: 6px 8px;
+  border: 1px solid var(--border);
+  border-radius: 4px;
+  background: var(--input-bg);
+  color: var(--fg-secondary);
+  font-family: var(--mono-font);
+  font-size: 11px;
+  line-height: 1.45;
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
+.toast.error {
+  border-left-color: var(--status-conflict);
+}
+
+.toast.info {
+  border-left-color: var(--button-primary-bg);
+}
+
+@keyframes toast-in {
+  from {
+    opacity: 0;
+    transform: translateY(6px);
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  * {
+    animation-duration: 0.01ms !important;
+    transition-duration: 0.01ms !important;
+  }
+}
+
+/* ------------------------------------------------------------ diff overlay */
+
+/*
+ * A commit's diff has no editor tab to live in, so it takes over the tool
+ * window. It has to look like a deliberate surface rather than an unstyled
+ * page: a header that names the file, a hairline under it, and the diff
+ * inset on the panel background.
+ */
+.diff-overlay {
+  position: absolute;
+  inset: 0;
+  z-index: 30;
+  display: flex;
+  flex-direction: column;
+  background: var(--panel-bg);
+}
+
+.diff-overlay-header {
+  gap: 6px;
+  padding: 5px 6px;
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+}
+
+.diff-overlay-title {
+  font-weight: 600;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.diff-overlay-path {
+  color: var(--fg-muted);
+  font-size: 11px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.diff-overlay > .diff {
+  padding-bottom: 12px;
+}
+
+/* The file header is the overlay's own headline; keep it flush, not sticky
+   over the scrolling content it duplicates. */
+.diff-overlay .diff-file-header {
+  position: static;
+  height: 26px;
+  background: var(--panel-alt);
+  font-size: 11px;
+}
+
+.diff-overlay .diff-hunk-header {
+  font-size: 11px;
+}
+
+/* Two number columns in unified view (old | new), one per side otherwise. */
+.diff-line .num {
+  flex: 0 0 auto;
+  width: 30px;
+  padding-right: 6px;
+  color: var(--fg-muted);
+  text-align: right;
+  user-select: none;
+}
+
+.diff-sbs .diff-line .num {
+  width: 34px;
+}
+/* ------------------------------------------------- busy & progress ---- */
+/* Long Git operations (push / fetch / pull / commit / checkout) must never */
+/* look ignored while the process runs: every trigger shows a spinner where */
+/* it was clicked, plus a floating pill so menu actions have feedback too. */
+.spinner {
+  flex: 0 0 auto;
+  width: 12px;
+  height: 12px;
+  border-radius: 50%;
+  border: 1.5px solid currentColor;
+  border-top-color: transparent;
+  opacity: 0.85;
+  animation: pig-spin 0.7s linear infinite;
+}
+.spinner.large {
+  width: 14px;
+  height: 14px;
+  border-width: 2px;
+}
+@keyframes pig-spin {
+  to { transform: rotate(360deg); }
+}
+/* An icon button that is running something: keep its size so the toolbar */
+/* does not jump, spin the mark in place. */
+button.icon.busy {
+  color: var(--fg-secondary);
+  cursor: wait;
+}
+button.icon.busy svg {
+  display: none;
+}
+button.icon.busy .spinner {
+  display: block;
+  margin: 2px;
+}
+/* Text buttons keep their width while busy so the dialog footer stays put. */
+button.busy {
+  cursor: wait;
+}
+button.busy .spinner {
+  margin-right: 6px;
+  vertical-align: -1px;
+}
+/* One floating pill for actions with no button to spin in (branch-menu */
+/* fetch / pull / push / checkout, stash pop): top-centre, above popups, */
+/* below modal dialogs. */
+.task-pill-layer {
+  position: fixed;
+  top: 10px;
+  left: 50%;
+  transform: translateX(-50%);
+  z-index: 70;
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  align-items: center;
+  pointer-events: none;
+}
+.task-pill {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  max-width: min(420px, 90vw);
+  padding: 6px 12px;
+  border: 1px solid var(--border);
+  border-radius: 999px;
+  background: var(--panel-bg);
+  box-shadow: 0 6px 20px rgba(0, 0, 0, 0.28);
+  color: var(--fg-secondary);
+  font-size: 12px;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  animation: task-pill-in 160ms ease-out;
+}
+.task-pill.done {
+  color: var(--status-added);
+}
+.task-pill.failed {
+  color: var(--status-conflict);
+}
+@keyframes task-pill-in {
+  from { opacity: 0; transform: translateY(-6px); }
+}
+/* Push dialog: thin progress track under the subtitle plus a per-row state. */
+.push-progress {
+  height: 3px;
+  margin-top: 8px;
+  border-radius: 2px;
+  background: var(--border-soft);
+  overflow: hidden;
+}
+.push-progress-fill {
+  height: 100%;
+  width: 0;
+  border-radius: 2px;
+  background: var(--button-primary-bg);
+  transition: width 180ms ease-out;
+}
+.push-row.is-active {
+  border-color: var(--button-primary-bg);
+  background: var(--diff-modified);
+}
+.push-row .row-status {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  font-size: 11px;
+}
+.push-row .row-status.pushing {
+  color: var(--fg-secondary);
+}
+.push-row .row-status.ok {
+  color: var(--status-added);
+}
+.push-row .row-status.error {
+  color: var(--status-conflict);
+}
+/* A slow reload reads as loading, not frozen: dim the list a touch. */
+.is-refreshing .scroll.list,
+.is-refreshing .commits-pane {
+  opacity: 0.65;
+  transition: opacity 120ms ease-out;
+}
+
+/* ---- src/layout.css ---- */
+/*
+ * Layout on top of the palette: scrollbars, resizers, the Log tab's pane grid
+ * and the affordances that only exist once the panel gets narrow.
+ */
+
+::-webkit-scrollbar {
+  width: 10px;
+  height: 10px;
+}
+
+::-webkit-scrollbar-track {
+  background: transparent;
+}
+
+::-webkit-scrollbar-thumb {
+  border: 2px solid transparent;
+  border-radius: 6px;
+  background: color-mix(in oklab, var(--fg) 22%, transparent);
+  background-clip: content-box;
+}
+
+::-webkit-scrollbar-thumb:hover {
+  background: color-mix(in oklab, var(--fg) 38%, transparent);
+  background-clip: content-box;
+}
+
+::-webkit-scrollbar-corner {
+  background: transparent;
+}
+
+/* ------------------------------------------------------------------- panes */
+
+/* A vertical splitter that is only visible while hovered or dragged, so the
+   surface keeps IDEA's flat look at rest. */
+.splitter-y {
+  flex: 0 0 auto;
+  height: 5px;
+  margin: -2px 0;
+  z-index: 4;
+  background: transparent;
+  cursor: row-resize;
+}
+
+.splitter-y:hover,
+.splitter-y.active {
+  background: var(--button-primary-bg);
+}
+
+.log-panes {
+  display: flex;
+  flex: 1 1 auto;
+  min-height: 0;
+}
+
+.log-panes > .branches-pane {
+  flex: 0 0 auto;
+  width: var(--branches-width, 168px);
+}
+
+.log-panes > .commits-pane {
+  display: flex;
+  flex: 1 1 auto;
+  flex-direction: column;
+  min-width: 0;
+  min-height: 0;
+}
+
+.log-detail {
+  display: flex;
+  flex: 0 0 auto;
+  flex-direction: column;
+  min-height: 0;
+  height: var(--detail-height, 46%);
+}
+
+.log-detail > .changed-files {
+  flex: 1 1 auto;
+  min-height: 0;
+  overflow: auto;
+}
+
+.log-detail > .details-pane {
+  flex: 0 0 auto;
+  max-height: 45%;
+  overflow: auto;
+  border-top: 1px solid var(--border-soft);
+}
+
+/* Keep the commit list readable when the pane is narrow: the meta line wraps
+   away before the subject does. */
+@media (max-width: 560px) {
+  /* Wrap the author/date/hash line instead of clipping it. */
+  .log-meta-line {
+    flex-wrap: wrap;
+    gap: 4px 8px;
+  }
+
+  /* Shrink the branches pane rather than dropping it: IDEA always shows it,
+     and the Graph Options menu can still hide it on demand. */
+  .log-panes > .branches-pane {
+    width: 128px;
+  }
+}
+
+.commit-view {
+  display: flex;
+  flex: 1 1 auto;
+  min-height: 0;
+}
+
+.commit-changes {
+  display: flex;
+  flex: 0 0 auto;
+  flex-direction: column;
+  width: var(--changes-width, 45%);
+  min-width: 140px;
+  min-height: 0;
+}
+
+.commit-diff {
+  display: flex;
+  flex: 1 1 auto;
+  flex-direction: column;
+  min-width: 0;
+  min-height: 0;
+}
+
+/* Narrow work panels read better stacked than side by side. */
+@media (max-width: 480px) {
+  .commit-view {
+    flex-direction: column;
+  }
+
+  .commit-changes {
+    width: auto;
+    max-height: 45%;
+  }
+
+  .commit-view > .divider-v {
+    display: none;
+  }
+}
+
+/* The changes pane's own search box: wide enough to type a path fragment, and
+   it gives the room back to the tree as soon as the pane narrows. */
+.pane-header .search-field {
+  flex: 0 1 150px;
+  min-width: 0;
+}
+
+.pane-header .search-field input.changes-filter {
+  width: 100%;
+  min-width: 0;
+}
+
+@media (max-width: 520px) {
+  /* Keep the gear, drop the field: filtering is a convenience, the view options
+     are not. */
+  .pane-header .search-field {
+    display: none;
+  }
+}
+
+.branch-chip {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  max-width: 220px;
+  padding: 2px 6px;
+  border: 1px solid transparent;
+  border-radius: var(--radius);
+  cursor: pointer;
+  user-select: none;
+}
+
+.branch-chip:hover {
+  border-color: var(--button-border);
+  background: var(--button-bg);
+}
+
+.branch-chip .name {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  font-weight: 600;
+}
+
+.branch-chip .tracking {
+  display: inline-flex;
+  align-items: center;
+  gap: 3px;
+  color: var(--fg-muted);
+  font-size: 11px;
+  white-space: nowrap;
+}
+
+.ahead {
+  color: var(--status-added);
+}
+
+.behind {
+  color: var(--status-modified);
+}
+
+:root[data-theme="dark"] .behind {
+  color: var(--status-modified);
+}
+
+.hidden {
+  display: none !important;
+}
+
+.muted {
+  color: var(--fg-muted);
+}
+
+.mono {
+  font-family: var(--mono-font);
+}
+
+.nowrap {
+  white-space: nowrap;
+}
+
+.grow {
+  flex: 1 1 auto;
+  min-width: 0;
+}
+
+/*
+ * The commit-actions row carries the checkboxes, the summary, the generate
+ * control, the branch, and the commit buttons. On a narrow work panel that is
+ * more than fits, and the generate button is the one whose meaning survives
+ * losing its label — the sparkles and the tooltip still say it.
+ */
+@media (max-width: 560px) {
+  .gen-label {
+    display: none;
+  }
+}
+
+    </style>
+  </head>
+  <body>
+    <div id="app" class="app"></div>
+    <script>
+window.__PI_IDEA_GIT_SURFACE__ = "both";
+    </script>
+    <script>
+(function () {
+"use strict";
+/* ================= src/common.js ================= */
+/**
+ * Shared runtime for both tool windows: host bridge access, the IDEA wording
+ * (English原文 + 中文), icons, popups and the small layout primitives.
+ *
+ * Everything hangs off one namespace because the pages are built by
+ * concatenating files into a single classic script — see tools/build.mjs.
+ */
+(function (PIG) {
+  "use strict";
+
+  const bridge = window.pluginBridge;
+
+  // ---------------------------------------------------------------- i18n ---
+  // IDEA's own wording is the source of truth for labels, so the English
+  // strings double as the documented feature names.
+  const STRINGS = {
+    en: {
+      commit: "Commit",
+      commitAndPush: "Commit and Push",
+      commitMessage: "Commit Message",
+      commitHistory: "Commit message history",
+      amend: "Amend",
+      signOff: "Sign-off commit",
+      runHooks: "Run Git hooks",
+      changes: "Changes",
+      staged: "Staged",
+      unstaged: "Unstaged",
+      unversioned: "Unversioned Files",
+      conflicts: "Merge Conflicts",
+      noChanges: "No changes",
+      refresh: "Refresh",
+      fetch: "Fetch",
+      pull: "Pull",
+      push: "Push",
+      update: "Update Project",
+      rollback: "Rollback",
+      showDiff: "Show Diff",
+      jumpToSource: "Jump to Source",
+      stage: "Add",
+      stageFile: "Add to index",
+      unstageFile: "Remove from index",
+      stageHunk: "Stage Hunk",
+      unstageHunk: "Unstage Hunk",
+      discardHunk: "Discard Hunk",
+      includeIntoCommit: "Include into commit",
+      discard: "Discard Changes",
+      git: "Git",
+      log: "Log",
+      console: "Console",
+      branches: "Branches",
+      localBranches: "Local branches",
+      remoteBranches: "Remote branches",
+      tags: "Tags",
+      changedFiles: "Changed Files",
+      commitDetails: "Commit Details",
+      graphOptions: "Graph Options",
+      byCommitDate: "By commit date",
+      topologically: "Topologically",
+      showFirstParent: "Show First Parent",
+      noMerges: "No Merges",
+      showGraph: "Show Graph",
+      search: "Search",
+      filterByBranch: "Branch",
+      filterByUser: "User",
+      filterByPaths: "Paths",
+      allBranches: "All Branches",
+      author: "Author",
+      date: "Date",
+      hash: "Hash",
+      subject: "Subject",
+      message: "Message",
+      all: "All",
+      checkoutRevision: "Checkout Revision",
+      newBranchFromHere: "New Branch from Here",
+      newTag: "New Tag",
+      cherryPick: "Cherry-Pick",
+      revert: "Revert",
+      resetToHere: "Reset Current Branch to Here",
+      editCommitMessage: "Edit Commit Message",
+      copyRevisionNumber: "Copy Revision Number",
+      copyMessage: "Copy Message",
+      compareWithLocal: "Compare with Local",
+      compareWithHead: "Compare with HEAD",
+      showRepository: "Show Repository",
+      soft: "Soft",
+      mixed: "Mixed",
+      hard: "Hard",
+      reset: "Reset",
+      newBranch: "New Branch",
+      checkout: "Checkout",
+      mergeIntoCurrent: "Merge into Current",
+      merge: "Merge",
+      rebase: "Rebase",
+      rebaseOnto: "Rebase Current onto Selected",
+      deleteBranch: "Delete",
+      renameBranch: "Rename",
+      setUpstream: "Set Upstream",
+      unsetUpstream: "Unset Upstream",
+      copyBranchName: "Copy Branch Name",
+      pushTag: "Push Tag",
+      deleteTag: "Delete Tag",
+      showStash: "Show Stash",
+      goToHead: "Go to HEAD",
+      mineOnly: "Mine only",
+      recentUsers: "Recent committers",
+      filterUserPlaceholder: "Name or email, Enter to filter…",
+      anyTime: "Any time",
+      lastDay: "Last 24 hours",
+      lastWeek: "Last week",
+      lastMonth: "Last month",
+      prune: "Prune",
+      stashes: "Stashes",
+      remotes: "Remotes",
+      mergeTitle: "Merge into the current branch?",
+      rebaseTitle: "Rebase the current branch?",
+      deleteBranchTitle: "Delete this branch?",
+      renameTitle: "Rename branch",
+      setUpstreamTitle: "Set upstream",
+      deleteTagTitle: "Delete this tag?",
+      mergeConflicts: "The merge stopped on conflicts — resolve them in the Changes list, then commit to finish.",
+      rebaseConflicts: "The rebase stopped on conflicts — resolve them in the Changes list, then continue.",
+      stash: "Stash",
+      stashChanges: "Stash Changes",
+      unstash: "Unstash",
+      dropStash: "Drop",
+      applyStash: "Apply Stash",
+      stashMessage: "Stash message",
+      unified: "Unified viewer",
+      sideBySide: "Side-by-side viewer",
+      collapseUnchanged: "Collapse Unchanged Fragments",
+      ignoreDifferences: "Ignore Differences",
+      ignoreNone: "None",
+      ignoreTrim: "Trim whitespaces",
+      ignoreWhitespace: "Ignore whitespaces",
+      ignoreWhitespaceAndEmpty: "Ignore whitespaces and empty lines",
+      showWhitespaces: "Show Whitespaces",
+      showLineNumbers: "Show Line Numbers",
+      previousDifference: "Previous Difference",
+      nextDifference: "Next Difference",
+      whiteSpaceOnly: "whitespace only",
+      binaryDiff: "Binary file — no textual diff",
+      noDiff: "No differences",
+      clearAll: "Clear All",
+      notARepository: "Not a Git repository",
+      noWorkspace: "No workspace is open",
+      gitMissing: "Git executable not found",
+      pickFile: "Select a file to see its diff",
+      files: "files",
+      selected: "selected",
+      nothingStaged: "Nothing is staged",
+      inProgress: "Merge or rebase in progress",
+      copy: "Copy",
+      copied: "Copied",
+      cancel: "Cancel",
+      ok: "OK",
+      close: "Close",
+      showDetails: "Show Details",
+      viewOptions: "View Options",
+      branchLabel: "Branch",
+      head: "HEAD",
+      uncommitted: "uncommitted changes",
+      loading: "Loading…",
+      conflictNotice: "Resolve conflicts before committing",
+      unversionedNotice: "Unversioned files must be added before they can be committed",
+      allChanges: "All Changes",
+      flat: "Flat",
+      groupByDirectory: "Group by Directory",
+      openFile: "Open File",
+      revealInFileManager: "Reveal in File Manager",
+      stageAllChanges: "Add All to Index",
+      unstageAllChanges: "Remove All from Index",
+      noCommits: "No commits yet",
+      filesChanged: "files changed",
+      outgoing: "outgoing commits",
+      incoming: "incoming commits",
+      diff: "Diff",
+      submodule: "submodule",
+      authSsh: "Your Git has no credential the plugin can use for this remote. It runs your own git, so configure the remote the same way your terminal does: use an HTTPS URL, or make the key work without ssh-agent (the host does not pass SSH_AUTH_SOCK, so agent-held keys cannot be unlocked). On macOS, `UseKeychain yes` in ~/.ssh/config is enough.",
+      authCredentials: "No stored credential for this remote, and there is no terminal here to type one. Push once from a terminal to let your credential helper store it, then retry.",
+      generateMessage: "Generate Commit Message",
+      generating: "Generating…",
+      generateOptions: "Model and options",
+      modelLabel: "Model",
+      commitLanguage: "Message language",
+      langAuto: "Match repository history",
+      langChinese: "Simplified Chinese",
+      langEnglish: "English",
+      noModel: "No AI provider is ready to use. Add one, or sign one in, under Settings → AI providers.",
+      modelPermission: "The plugin has not been granted access to your models yet, so it cannot list them. Reload it: Extensions → ··· → Load local plugin, and approve the new permissions.",
+      modelPermissionShort: "Cannot list your models — reload to grant access",
+      rateLimited: "Too many generations in a row (the host allows 8 per minute). Wait a moment and try again.",
+      nothingToDescribe: "Nothing to describe: stage a change, or select a file in the Changes list first.",
+      draftTimeout: "The model did not answer in time.",
+      replaceDraft: "Replace your draft?",
+      replaceDraftBody: "Generating a message overwrites what you have already typed.",
+      replace: "Replace",
+      draftedStaged: "Commit message drafted from checked (staged) changes",
+      draftedFile: "Commit message drafted from {{file}}",
+      submoduleBadge: "submodule",
+      submoduleInside: "This change is inside the submodule {{path}}. The parent repository can only record which commit the submodule points at, so it cannot be committed from here. Switch to the submodule in the repository list (top left), commit there, then come back and stage it here.",
+      submoduleStagedHint: "Staged the submodule's commit. Its own uncommitted changes stay inside it and still show as unstaged.",
+      repository: "Repository",
+      switchRepository: "Switch repository",
+      repositoryList: "Repositories",
+      nestedRepoBadge: "nested repository",
+      nestedRepoHint: "A Git repository that lives inside this one without being a submodule: the parent stores none of its files.",
+      appShortcutHint: "The command palette belongs to the app: click back into the main window first, or press Alt+Space for the plugin launcher.",
+      dropStashConfirm: "Drop this stash?",
+      noMatchingChanges: "No changes match the filter",
+      filterChanges: "Filter changes",
+      compactMiddleDirs: "Compact Middle Directories",
+      collapseAll: "Collapse All",
+      includeFolder: "Include this folder into commit",
+      unincludeFolder: "Exclude this folder from commit",
+      repositoryHint: "Open a folder that is inside a Git repository.",
+      remoteAhead: "The remote branch has commits you do not have. Fetch, then Pull, and push again — or, if the local history is the one to keep, use Force Push from the branch menu.",
+      pushRejected: "The server refused the push — the branch is probably protected, or a hook rejected it.",
+      pullDiverged: "Local and remote have diverged. Merge or rebase, then push.",
+      // Not "then commit": a pull that rebases (the user's own `pull.rebase`)
+      // stops on conflicts too, and there the finish is Continue. The status
+      // line above the commit button knows which one it is; this only has to
+      // send the user there.
+      pullConflicts: "The pull stopped on conflicts — resolve them in the Changes list, then finish it there.",
+      mergeInProgress: "Merging — resolve the conflicts, then commit to finish.",
+      rebaseInProgress: "Rebasing — resolve the conflicts, then continue.",
+      cherryPickInProgress: "Cherry-picking — resolve the conflicts, then continue.",
+      revertInProgress: "Reverting — resolve the conflicts, then continue.",
+      abortOperation: "Abort",
+      continueOperation: "Continue",
+      forcePush: "Force Push (with lease)",
+      forcePushTitle: "Overwrite the remote branch?",
+      forcePushBody: "This rewrites {{branch}} on {{remote}}: commits that are there and not here are dropped. The lease means it only runs while the remote is still where this window last saw it, so a push from someone else is refused instead of erased.",
+      gitOutput: "Git output",
+      showDetail: "Show details",
+       commitSummary: "{{staged}} of {{total}} file{{s}} will be committed",
+       generateScope: "{{action}} · {{lang}} (uses checked/staged changes)",
+       collapsedLines: "⋮ {{count}} unchanged line{{s}}",
+       copyPath: "Copy Path",
+       switchToRepo: "Switch to this repository",
+       submoduleGroup: "{{rel}} ({{kind}} · {{branch}})",
+       commitMultipleRepos: "Commit {{count}} repositories with the same message",
+       submoduleCommitted: "{{rel}} committed",
+       siblingRepoBadge: "sibling repository",
+       siblingRepoHint: "A repository that sits next to the current one in the same folder, not inside it.",
+       pushDialogTitle: "Push",
+       pushDialogSubtitle: "Push each repository's commits to its own remote.",
+       pushAll: "Push All",
+       pushSelected: "Push Selected",
+      pushing: "Pushing…",
+      committing: "Committing…",
+      committingAndPushing: "Committing and pushing…",
+      fetching: "Fetching…",
+      pulling: "Pulling…",
+      checkingOut: "Checking out…",
+      stashing: "Stashing…",
+      unstashing: "Restoring stash…",
+      pushingRepo: "Pushing {{done}} of {{total}}…",
+       pushed: "Pushed",
+       pushedRepos: "Pushed {{count}} repositories",
+       pushPartial: "Pushed {{ok}} of {{total}} repositories",
+       pushNoUpstream: "no upstream",
+       pushNoRemote: "no remote to push to",
+       pushUpToDate: "up to date",
+       pushNothingToPush: "Nothing to push: every repository is up to date.",
+       pushDialogHint: "Only the checked repositories are pushed. A failure in one does not stop the others.",
+       pushRowPushed: "{{branch}} → {{remote}}/{{branch}}",
+       relativeJustNow: "just now",
+      relativeMinutesAgo: "{{count}} minute{{s}} ago",
+      relativeHoursAgo: "{{count}} hour{{s}} ago",
+      relativeDaysAgo: "{{count}} day{{s}} ago",
+    },
+    "zh-CN": {
+      commit: "提交",
+      commitAndPush: "提交并推送",
+      commitMessage: "提交信息",
+      commitHistory: "提交信息历史",
+      amend: "修正上一次提交",
+      signOff: "签名",
+      runHooks: "运行 Git 钩子",
+      changes: "变更",
+      staged: "已暂存",
+      unstaged: "未暂存",
+      unversioned: "未纳入版本控制的文件",
+      conflicts: "合并冲突",
+      noChanges: "没有变更",
+      refresh: "刷新",
+      fetch: "抓取",
+      pull: "拉取",
+      push: "推送",
+      update: "更新项目",
+      rollback: "回滚",
+      showDiff: "显示差异",
+      jumpToSource: "跳到源文件",
+      stage: "添加到索引",
+      stageFile: "添加到索引",
+      unstageFile: "从索引中移除",
+      stageHunk: "暂存该代码块",
+      unstageHunk: "取消暂存该代码块",
+      discardHunk: "丢弃该代码块",
+      includeIntoCommit: "纳入本次提交",
+      discard: "丢弃更改",
+      git: "Git",
+      log: "日志",
+      console: "控制台",
+      branches: "分支",
+      localBranches: "本地分支",
+      remoteBranches: "远程分支",
+      tags: "标签",
+      changedFiles: "变更的文件",
+      commitDetails: "提交详情",
+      graphOptions: "提交图选项",
+      byCommitDate: "按提交时间",
+      topologically: "按拓扑顺序",
+      showFirstParent: "仅第一条父提交",
+      noMerges: "隐藏合并提交",
+      showGraph: "显示提交图",
+      search: "搜索",
+      filterByBranch: "分支",
+      filterByUser: "提交者",
+      filterByPaths: "路径",
+      allBranches: "所有分支",
+      author: "作者",
+      date: "日期",
+      hash: "哈希",
+      subject: "说明",
+      message: "信息",
+      all: "全部",
+      checkoutRevision: "检出该修订",
+      newBranchFromHere: "从此处新建分支",
+      newTag: "新建标签",
+      cherryPick: "拣选",
+      revert: "反转提交",
+      resetToHere: "将当前分支重置到此处",
+      editCommitMessage: "修改提交信息",
+      copyRevisionNumber: "复制修订号",
+      copyMessage: "复制提交信息",
+      compareWithLocal: "与本地比较",
+      compareWithHead: "与 HEAD 比较",
+      showRepository: "显示仓库",
+      soft: "Soft",
+      mixed: "Mixed",
+      hard: "Hard",
+      reset: "重置",
+      newBranch: "新建分支",
+      checkout: "检出",
+      mergeIntoCurrent: "合并到当前分支",
+      merge: "合并",
+      rebase: "变基",
+      rebaseOnto: "将当前分支变基到此分支",
+      deleteBranch: "删除",
+      renameBranch: "重命名",
+      setUpstream: "设置上游分支",
+      unsetUpstream: "取消上游关联",
+      copyBranchName: "复制分支名",
+      pushTag: "推送标签",
+      deleteTag: "删除标签",
+      showStash: "查看储藏",
+      goToHead: "回到 HEAD",
+      mineOnly: "只看我的",
+      recentUsers: "最近提交者",
+      filterUserPlaceholder: "输入姓名或邮箱，回车过滤…",
+      anyTime: "全部时间",
+      lastDay: "最近 24 小时",
+      lastWeek: "最近一周",
+      lastMonth: "最近一月",
+      prune: "清理已删除的远端分支",
+      stashes: "储藏",
+      remotes: "远端",
+      mergeTitle: "合并到当前分支？",
+      rebaseTitle: "把当前分支变基到所选分支？",
+      deleteBranchTitle: "删除该分支？",
+      renameTitle: "重命名分支",
+      setUpstreamTitle: "设置上游分支",
+      deleteTagTitle: "删除该标签？",
+      mergeConflicts: "合并因冲突停下 — 请在变更列表里解决冲突，然后提交完成。",
+      rebaseConflicts: "变基因冲突停下 — 请在变更列表里解决冲突，然后点「继续」。",
+      stash: "储藏",
+      stashChanges: "储藏更改",
+      unstash: "取消储藏",
+      dropStash: "删除储藏",
+      applyStash: "应用储藏",
+      stashMessage: "储藏说明",
+      unified: "单栏视图",
+      sideBySide: "并排视图",
+      collapseUnchanged: "折叠未修改的片段",
+      ignoreDifferences: "忽略差异",
+      ignoreNone: "不忽略",
+      ignoreTrim: "忽略行尾空白",
+      ignoreWhitespace: "忽略空白",
+      ignoreWhitespaceAndEmpty: "忽略空白与空行",
+      showWhitespaces: "显示空白字符",
+      showLineNumbers: "显示行号",
+      previousDifference: "上一处差异",
+      nextDifference: "下一处差异",
+      whiteSpaceOnly: "仅空白差异",
+      binaryDiff: "二进制文件，无文本差异",
+      noDiff: "没有差异",
+      clearAll: "全部清空",
+      notARepository: "不是 Git 仓库",
+      noWorkspace: "没有打开的工作区",
+      gitMissing: "找不到 git 可执行文件",
+      pickFile: "选择一个文件查看差异",
+      files: "个文件",
+      selected: "已选择",
+      nothingStaged: "暂存区为空",
+      inProgress: "正在进行合并或变基",
+      copy: "复制",
+      copied: "已复制",
+      cancel: "取消",
+      ok: "确定",
+      close: "关闭",
+      showDetails: "显示详情",
+      viewOptions: "视图选项",
+      branchLabel: "分支",
+      head: "HEAD",
+      uncommitted: "未提交的更改",
+      loading: "加载中…",
+      conflictNotice: "请先解决冲突再提交",
+      unversionedNotice: "未纳入版本控制的文件需要先添加到索引",
+      allChanges: "全部更改",
+      flat: "平铺",
+      groupByDirectory: "按目录分组",
+      openFile: "打开文件",
+      revealInFileManager: "在文件管理器中显示",
+      stageAllChanges: "全部添加到索引",
+      unstageAllChanges: "全部从索引中移除",
+      noCommits: "暂无提交",
+      filesChanged: "个文件有变更",
+      outgoing: "待推送的提交",
+      incoming: "待拉取的提交",
+      submodule: "子模块",
+      authSsh: "插件用的就是你自己的 git，但这个远端没有它可用的凭据。请按你终端里的方式配好远端：改用 HTTPS 地址，或让密钥不依赖 ssh-agent（宿主不传递 SSH_AUTH_SOCK，所以放在 agent 里的密钥解不开）。macOS 上在 ~/.ssh/config 里加 `UseKeychain yes` 即可。",
+      authCredentials: "这个远端没有已保存的凭据，而这里没有终端可以输入密码。请在终端里手动 push 一次，让凭据助手把它存下来，然后再重试。",
+      generateMessage: "生成提交信息",
+      generating: "生成中…",
+      generateOptions: "模型与选项",
+      modelLabel: "模型",
+      commitLanguage: "提交信息语言",
+      langAuto: "跟随仓库历史",
+      langChinese: "简体中文",
+      langEnglish: "英文",
+      noModel: "没有可用的 AI 服务：请先在「设置 → AI 服务」中添加或登录一个。",
+      modelPermission: "插件还没有拿到读取模型的权限，因此列不出模型。请重新加载：扩展页 → 右上角 ··· → 「加载本地插件」，并同意新增的权限。",
+      modelPermissionShort: "无法列出模型 — 需重新加载以授权",
+      rateLimited: "连续生成次数过多（宿主限制每分钟 8 次）。请稍等片刻再试。",
+      nothingToDescribe: "没有可描述的内容：请先暂存改动，或在变更列表里选中一个文件。",
+      draftTimeout: "模型未在规定时间内返回。",
+      replaceDraft: "替换当前草稿？",
+      replaceDraftBody: "生成会覆盖你已经输入的内容。",
+      replace: "替换",
+      draftedStaged: "已生成提交信息（来源：已勾选/已暂存内容）",
+      draftedFile: "已生成提交信息（来源：{{file}}）",
+      submoduleBadge: "子模块",
+      submoduleInside: "这个改动在子模块 {{path}} 内部。父仓库只能记录子模块指向哪个提交，无法从这里把它提交掉。请在左上角的仓库列表里切换到该子模块，在里面提交，再回到这里暂存。",
+      submoduleStagedHint: "已暂存子模块指向的提交。子模块内部未提交的改动仍然留在里面，所以它依旧显示为未暂存。",
+      repository: "仓库",
+      switchRepository: "切换仓库",
+      repositoryList: "仓库列表",
+      nestedRepoBadge: "嵌套仓库",
+      nestedRepoHint: "这个 Git 仓库位于当前仓库内部，但不是子模块：父仓库不保存它的任何文件。",
+      appShortcutHint: "命令面板由宿主提供，需先点回主窗口；或在视图内按 Alt+Space 打开插件启动器。",
+      diff: "差异",
+      dropStashConfirm: "删除该储藏？",
+      noMatchingChanges: "没有匹配的变更",
+      filterChanges: "筛选变更",
+      includeFolder: "把该文件夹纳入本次提交",
+      unincludeFolder: "把该文件夹排除出本次提交",
+      compactMiddleDirs: "折叠中间目录",
+      collapseAll: "全部折叠",
+      repositoryHint: "请打开一个位于 Git 仓库内的文件夹。",
+      remoteAhead: "远端分支上有你还没有的提交。请先 Fetch，再 Pull，然后重新推送；若要以本地历史为准，用分支菜单里的「强制推送」。",
+      pushRejected: "服务端拒绝了这次推送 — 分支可能受保护，或被钩子拦下。",
+      pullDiverged: "本地与远端已分叉：请先合并或变基，再推送。",
+      pullConflicts: "拉取因冲突停下 — 请在变更列表里解决冲突，然后在那里收尾。",
+      mergeInProgress: "合并进行中 — 解决冲突后提交即可完成",
+      rebaseInProgress: "变基进行中 — 解决冲突后点「继续」",
+      cherryPickInProgress: "拣选进行中 — 解决冲突后点「继续」",
+      revertInProgress: "还原进行中 — 解决冲突后点「继续」",
+      abortOperation: "中止",
+      continueOperation: "继续",
+      forcePush: "强制推送（with lease）",
+      forcePushTitle: "覆盖远端分支？",
+      forcePushBody: "这会把 {{remote}} 上的 {{branch}} 重写为本地提交：只存在于远端的提交将被丢弃。lease 的含义是只有远端仍停在本窗口上次看到的位置时才执行，因此他人的推送会被拒绝，而不是被覆盖。",
+      gitOutput: "Git 输出",
+      showDetail: "查看详情",
+       commitSummary: "将提交 {{staged}} / {{total}} 个文件",
+       generateScope: "{{action}} · {{lang}}（基于已勾选/已暂存内容）",
+       collapsedLines: "⋮ {{count}} 行未修改",
+       copyPath: "复制路径",
+      switchToRepo: "切换到该仓库",
+      submoduleGroup: "{{rel}}（{{kind}} · {{branch}}）",
+      commitMultipleRepos: "将用同一提交信息提交 {{count}} 个仓库",
+      submoduleCommitted: "{{rel}} 已提交",
+      siblingRepoBadge: "平级仓库",
+      siblingRepoHint: "与当前仓库在同一文件夹下的仓库，不是它的子目录。",
+      pushDialogTitle: "推送",
+      pushDialogSubtitle: "把每个仓库的提交推送到它自己的远端。",
+      pushAll: "全部推送",
+      pushSelected: "推送所选",
+      pushing: "推送中…",
+      committing: "提交中…",
+      committingAndPushing: "提交并推送中…",
+      fetching: "抓取中…",
+      pulling: "拉取中…",
+      checkingOut: "检出中…",
+      stashing: "储藏中…",
+      unstashing: "正在恢复储藏…",
+      pushingRepo: "正在推送 {{done}} / {{total}}…",
+      pushed: "已推送",
+      pushedRepos: "已推送 {{count}} 个仓库",
+      pushPartial: "已推送 {{ok}} / {{total}} 个仓库",
+      pushNoUpstream: "无上游分支",
+      pushNoRemote: "没有可推送的远端",
+      pushUpToDate: "已是最新",
+      pushNothingToPush: "没有可推送的内容：所有仓库都是最新的。",
+      pushDialogHint: "只推送勾选的仓库，其中一个失败不会阻止其他仓库。",
+      pushRowPushed: "{{branch}} → {{remote}}/{{branch}}",
+      relativeJustNow: "刚刚",
+      relativeMinutesAgo: "{{count}} 分钟前",
+      relativeHoursAgo: "{{count}} 小时前",
+      relativeDaysAgo: "{{count}} 天前",
+    },
+  };
+
+  const state = { locale: "en", theme: "dark" };
+
+  function resolveLocale(raw) {
+    const value = String(raw ?? "").replace("_", "-").toLowerCase();
+    if (value.startsWith("zh")) return "zh-CN";
+    return "en";
+  }
+
+  state.locale = resolveLocale(navigator.language);
+
+  /** Look up IDEA's wording for the active locale, falling back to English. */
+  function t(key) {
+    const table = STRINGS[state.locale] ?? STRINGS.en;
+    return table[key] ?? STRINGS.en[key] ?? key;
+  }
+
+  /**
+   * Same lookup, with `{{name}}` placeholders filled in. Whole sentences belong
+   * in one key: gluing a translation together from fragments is how you get
+   * grammar that reads like a machine wrote it.
+   */
+  function tf(key, vars) {
+    return t(key).replace(/\{\{(\w+)\}\}/g, (match, name) => (
+      vars && vars[name] !== undefined ? String(vars[name]) : match
+    ));
+  }
+
+  // -------------------------------------------------------------- bridge ---
+  /** Every host call goes through here so a failure is data, never a throw. */
+  async function invoke(channel, payload) {
+    if (!bridge?.invoke) {
+      // Dev-only path (outside PI-Desktop): reuse an existing host-state key
+      // rather than a hardcoded English fallback so user copy stays in t().
+      return { ok: false, message: t("noWorkspace") };
+    }
+    try {
+      const result = await bridge.invoke(channel, payload ?? {});
+      if (!result || typeof result !== "object") {
+        // Keep the channel for diagnosis; the prefix is an existing key.
+        return { ok: false, message: `${t("gitOutput")}: ${channel}` };
+      }
+      return result;
+    } catch (error) {
+      return { ok: false, message: String(error?.message ?? error) };
+    }
+  }
+
+  async function copyText(text) {
+    const result = await invoke("clipboard.writeText", { text: String(text ?? "") });
+    // Reuse the existing action key; the error level already says it failed.
+    toast(result.ok ? t("copied") : result.message ?? t("copy"), result.ok ? "info" : "error");
+  }
+
+  // --------------------------------------------------------------- dom ----
+  // No `html:` branch: innerHTML with user content is an XSS sink. Build with
+  // `text` and element children instead; only static templates may use
+  // innerHTML at their own call site, never through h(). Zero `html:` callers.
+  function h(tag, props, children) {
+    const node = document.createElement(tag);
+    if (props) {
+      for (const [key, value] of Object.entries(props)) {
+        if (value === undefined || value === null || value === false) continue;
+        if (key === "class") node.className = value;
+        else if (key === "text") node.textContent = value;
+        else if (key === "style" && typeof value === "object") Object.assign(node.style, value);
+        else if (key === "dataset") Object.assign(node.dataset, value);
+        else if (key.startsWith("on") && typeof value === "function") {
+          node.addEventListener(key.slice(2).toLowerCase(), value);
+        } else if (value === true) node.setAttribute(key, "");
+        else node.setAttribute(key, String(value));
+      }
+    }
+    for (const child of children ?? []) {
+      if (child === null || child === undefined || child === false) continue;
+      node.append(typeof child === "string" || typeof child === "number" ? String(child) : child);
+    }
+    return node;
+  }
+
+  function clear(node) {
+    while (node.firstChild) node.removeChild(node.firstChild);
+    return node;
+  }
+
+  const SVG_NS = "http://www.w3.org/2000/svg";
+
+  // Icons are built from primitives rather than opaque path blobs so they stay
+  // editable; each entry is a list of [tagName, attributes] children.
+  const ICONS = {
+    refresh: [["path", { d: "M12.6 8.4a4.6 4.6 0 1 1-1.4-3.4" }], ["path", { d: "M12.6 3.4v2.6h-2.6" }]],
+    fetch: [["path", { d: "M8 2.6v7.4" }], ["path", { d: "M5 7.2 8 10.2l3-3" }], ["path", { d: "M3 13.2h10" }]],
+    push: [["path", { d: "M8 13.4V6" }], ["path", { d: "M5 8.8 8 5.8l3 3" }], ["path", { d: "M3 2.8h10" }]],
+    commit: [["circle", { cx: 8, cy: 8, r: 3.1 }], ["path", { d: "M1.6 8h3.3M11.1 8h3.3" }]],
+    branch: [["circle", { cx: 4, cy: 3.6, r: 1.6 }], ["circle", { cx: 4, cy: 12.4, r: 1.6 }], ["circle", { cx: 12, cy: 6.6, r: 1.6 }], ["path", { d: "M4 5.2v5.6" }], ["path", { d: "M4 8.4h4a3.4 3.4 0 0 0 3.4-3.4v-.2" }]],
+    rollback: [["path", { d: "M3.4 8.4a4.6 4.6 0 1 0 1.4-3.4" }], ["path", { d: "M3.4 3.4v2.6H6" }]],
+    diff: [["rect", { x: 2, y: 2, width: 7.5, height: 12, rx: 1 }], ["path", { d: "M11 5.5h2.2A.8.8 0 0 1 14 6.3v6.4a.8.8 0 0 1-.8.8H11" }]],
+    plus: [["path", { d: "M8 3.4v9.2M3.4 8h9.2" }]],
+    minus: [["path", { d: "M3.4 8h9.2" }]],
+    close: [["path", { d: "M4 4l8 8M12 4l-8 8" }]],
+    check: [["path", { d: "M3.2 8.6l3.2 3.2 6.4-8" }]],
+    gear: [["circle", { cx: 8, cy: 8, r: 2.2 }], ["path", { d: "M8 1.8v2M8 12.2v2M1.8 8h2M12.2 8h2M3.6 3.6l1.4 1.4M11 11l1.4 1.4M12.4 3.6 11 5M5 11l-1.4 1.4" }]],
+    search: [["circle", { cx: 7, cy: 7, r: 4.2 }], ["path", { d: "M10.2 10.2 14 14" }]],
+    clock: [["circle", { cx: 8, cy: 8, r: 5.6 }], ["path", { d: "M8 4.6V8l2.6 1.8" }]],
+    copy: [["rect", { x: 5.4, y: 5.4, width: 8.2, height: 8.2, rx: 1.2 }], ["path", { d: "M10.6 5.4V3.6a1.2 1.2 0 0 0-1.2-1.2H3.6a1.2 1.2 0 0 0-1.2 1.2v5.8a1.2 1.2 0 0 0 1.2 1.2h1.8" }]],
+    trash: [["path", { d: "M3 4.4h10" }], ["path", { d: "M6.4 4.4V3.2h3.2v1.2" }], ["path", { d: "M4.4 4.4l.6 8.4h6l.6-8.4" }]],
+    folder: [["path", { d: "M2 4.4A1.4 1.4 0 0 1 3.4 3h2.4l1.4 1.8h5.4A1.4 1.4 0 0 1 14 6.2v5.4A1.4 1.4 0 0 1 12.6 13H3.4A1.4 1.4 0 0 1 2 11.6z" }]],
+    file: [["path", { d: "M4 2h5l3 3v9H4z" }], ["path", { d: "M9 2v3h3" }]],
+    list: [["path", { d: "M2.6 4h1.6M2.6 8h1.6M2.6 12h1.6" }], ["path", { d: "M7 4h6.4M7 8h6.4M7 12h6.4" }]],
+    tag: [["path", { d: "M2.6 7.4 7.4 2.6h5.2a1 1 0 0 1 1 1v5.2l-4.8 4.8a1 1 0 0 1-1.4 0l-4.8-4.8a1 1 0 0 1 0-1.4z" }], ["circle", { cx: 10.6, cy: 5.4, r: 1 }]],
+    external: [["path", { d: "M6.6 3.4H3.4v9.2h9.2V9.4" }], ["path", { d: "M9.4 2.6h4v4" }], ["path", { d: "M13.4 2.6 7.8 8.2" }]],
+    columns: [["rect", { x: 2, y: 3, width: 12, height: 10, rx: 1 }], ["path", { d: "M8 3v10" }]],
+    collapse: [["path", { d: "M4 6.4 8 2.6l4 3.8" }], ["path", { d: "M4 9.6 8 13.4l4-3.8" }]],
+    eye: [["path", { d: "M1.8 8S4.2 4 8 4s6.2 4 6.2 4-2.4 4-6.2 4-6.2-4-6.2-4z" }], ["circle", { cx: 8, cy: 8, r: 1.7 }]],
+    more: [["circle", { cx: 8, cy: 3.4, r: 1.1 }], ["circle", { cx: 8, cy: 8, r: 1.1 }], ["circle", { cx: 8, cy: 12.6, r: 1.1 }]],
+    chevronRight: [["path", { d: "M6.4 3.6 10.8 8l-4.4 4.4" }]],
+    chevronDown: [["path", { d: "M3.6 6.4 8 10.8l4.4-4.4" }]],
+    arrowUp: [["path", { d: "M8 13V3.6" }], ["path", { d: "M4.8 6.8 8 3.6l3.2 3.2" }]],
+    arrowDown: [["path", { d: "M8 3v9.4" }], ["path", { d: "M4.8 9.2 8 12.4l3.2-3.2" }]],
+    warning: [["path", { d: "M8 2.4 14.4 13.6H1.6z" }], ["path", { d: "M8 6.2v3.4" }], ["circle", { cx: 8, cy: 11.6, r: 0.7 }]],
+    // Two sparkles: the conventional mark for "let the model draft this".
+    sparkles: [["path", { d: "M6.4 2.2 7.7 5.5l3.3 1.3-3.3 1.3L6.4 11.4 5.1 8.1 1.8 6.8l3.3-1.3z" }], ["path", { d: "M12.2 9.6l.6 1.6 1.6.6-1.6.6-.6 1.6-.6-1.6-1.6-.6 1.6-.6z" }]],
+  };
+
+  function icon(name, size) {
+    const parts = ICONS[name] ?? ICONS.file;
+    const svg = document.createElementNS(SVG_NS, "svg");
+    const dimension = size ?? 16;
+    svg.setAttribute("viewBox", "0 0 16 16");
+    svg.setAttribute("width", String(dimension));
+    svg.setAttribute("height", String(dimension));
+    svg.setAttribute("fill", "none");
+    svg.setAttribute("stroke", "currentColor");
+    svg.setAttribute("stroke-width", "1.35");
+    svg.setAttribute("stroke-linecap", "round");
+    svg.setAttribute("stroke-linejoin", "round");
+    svg.setAttribute("aria-hidden", "true");
+    for (const [tag, attributes] of parts) {
+      const child = document.createElementNS(SVG_NS, tag);
+      for (const [key, value] of Object.entries(attributes)) child.setAttribute(key, String(value));
+      svg.append(child);
+    }
+    return svg;
+  }
+
+  /** A toolbar button with a tooltip, the IDEA affordance used everywhere. */
+  function iconButton(name, title, onClick, options) {
+    const button = h("button", {
+      class: options?.class ?? "icon",
+      type: "button",
+      title: options?.shortcut ? `${title} (${options.shortcut})` : title,
+      "aria-label": title,
+      disabled: options?.disabled,
+      onclick: onClick,
+    }, [icon(name, options?.size)]);
+    return button;
+  }
+
+  function textButton(label, title, onClick, options) {
+    return h("button", {
+      class: options?.class ?? "bordered",
+      type: "button",
+      title: title ?? label,
+      disabled: options?.disabled,
+      onclick: onClick,
+    }, [label]);
+  }
+
+  // ----------------------------------------------------------- shortcuts ---
+  /**
+   * Keyboard support has to live in the page.
+   *
+   * The host runs the app's own shortcuts from the *main window's* renderer
+   * (`window.addEventListener("keydown", …)`), and a plugin view is a separate
+   * `WebContentsView` with its own webContents — so keys pressed while a view
+   * has focus never reach the host's handler. Anything a button advertises,
+   * therefore, has to be bound here. `format()` exists so a tooltip is derived
+   * from the binding and can never advertise a key that does nothing.
+   */
+  const IS_MAC = /mac/i.test(navigator.userAgent);
+
+  function shortcutKey(event) {
+    const key = String(event.key ?? "");
+    return key.length === 1 ? key.toLowerCase() : key;
+  }
+
+  function matchesShortcut(spec, event) {
+    if (shortcutKey(event) !== shortcutKey({ key: spec.key })) return false;
+    const primary = IS_MAC ? event.metaKey : event.ctrlKey;
+    const secondary = IS_MAC ? event.ctrlKey : event.metaKey;
+    if (spec.mod) {
+      if (!primary || secondary) return false;
+    } else if (spec.ctrl) {
+      if (!event.ctrlKey) return false;
+    } else if (spec.meta) {
+      if (!event.metaKey) return false;
+    } else if (primary || secondary) {
+      return false;
+    }
+    if (Boolean(spec.alt) !== event.altKey) return false;
+    if (Boolean(spec.shift) !== event.shiftKey) return false;
+    return true;
+  }
+
+  /** "⌘R" on macOS, "Ctrl+R" elsewhere — the same string the tooltip gets. */
+  function formatShortcut(spec) {
+    const parts = [];
+    if (spec.mod) parts.push(IS_MAC ? "⌘" : "Ctrl");
+    if (spec.ctrl) parts.push(IS_MAC ? "⌃" : "Ctrl");
+    if (spec.meta) parts.push(IS_MAC ? "⌘" : "Meta");
+    if (spec.alt) parts.push(IS_MAC ? "⌥" : "Alt");
+    if (spec.shift) parts.push(IS_MAC ? "⇧" : "Shift");
+    const key = spec.key.length === 1 ? spec.key.toUpperCase() : spec.key;
+    return IS_MAC && parts.length && parts[0].length === 1 ? parts.join("") + key : [...parts, key].join("+");
+  }
+
+  /**
+   * The app's own accelerators are delivered to the *main window's* renderer, so
+   * a focused plugin view never receives them — `⌘⇧P` (command palette) simply
+   * does nothing here. Silence is the worst possible answer: it reads as a
+   * broken key. Catching it and explaining where to go costs one binding and
+   * turns a dead key into directions.
+   */
+  function appShortcutHintBinding() {
+    return {
+      spec: { key: "p", mod: true, shift: true },
+      run: () => toast(t("appShortcutHint"), "info"),
+    };
+  }
+
+  /**
+   * Bind shortcuts for one surface. `bindings` is `[{ spec, run }]`; the first
+   * match wins, and the event is consumed so it cannot double-fire.
+   *
+   * Typing must win over shortcuts: while focus is in an input/textarea/select
+   * or contenteditable, non-Escape bindings are skipped so Ctrl+R etc. stay
+   * text. Escape-class bindings still run so a menu or dialog can always close.
+   */
+  function bindShortcuts(bindings) {
+    const handler = (event) => {
+      if (event.defaultPrevented) return;
+      const inField = Boolean(event.target?.closest?.("input, textarea, select, [contenteditable]"));
+      for (const binding of bindings) {
+        if (!matchesShortcut(binding.spec, event)) continue;
+        const specKey = String(binding.spec?.key ?? "").toLowerCase();
+        const isEscape = specKey === "escape" || specKey === "esc";
+        if (inField && !isEscape) continue;
+        event.preventDefault();
+        event.stopPropagation();
+        binding.run();
+        return;
+      }
+    };
+    window.addEventListener("keydown", handler);
+    return () => window.removeEventListener("keydown", handler);
+  }
+
+  // -------------------------------------------------------------- toasts ---
+  let toastLayer = null;
+
+  /**
+   * A transient message. Returns the node so a caller can add to it — the sync
+   * errors append a link to the full Git output.
+   *
+   * Long messages are the norm now (Git's own words, then a remedy), and error
+   * toasts have to be read before they can be acted on, so they get longer.
+   */
+  function toast(message, level) {
+    const text = String(message ?? "").trim();
+    if (!text) return null;
+    if (!toastLayer) {
+      toastLayer = h("div", { class: "toast-layer" });
+      document.body.append(toastLayer);
+    }
+    const important = level === "error";
+    const node = h("div", { class: `toast ${important ? "error" : "info"}`, role: "status" }, [text]);
+    toastLayer.append(node);
+    window.setTimeout(() => node.remove(), important ? 12_000 : 3600);
+    return node;
+  }
+
+  // -------------------------------------------------- busy & progress ----
+  // Long Git operations must never look ignored while the process runs.
+  // Two complementary affordances: the clicked button spins in place
+  // (setButtonBusy), and menu actions with no button to spin get a floating
+  // pill (taskPill / runWithPill). Both are shared so the two tool windows
+  // cannot disagree about what "working" looks like.
+  // Note: 远端操作忙碌反馈的完整取舍见 .agents/notes/implemented/architecture/2026-09-12-remote-action-busy-feedback.md
+  /** A CSS-only spinner; `large` marks primary text buttons. */
+  function spinner(large) {
+    return h("span", { class: large ? "spinner large" : "spinner", "aria-hidden": "true" });
+  }
+
+  // Original children of busy buttons, so the label (and icon) can be
+  // restored exactly rather than rebuilt from a string.
+  const busyOriginals = new WeakMap();
+
+  /**
+   * Spin a button in place. `busyText` null keeps icon-only buttons compact
+   * (spinner alone); text buttons show spinner + text. Always restores the
+   * exact original children via withBusy's finally — never call setButtonBusy
+   * without pairing busy(true)/busy(false).
+   */
+  function setButtonBusy(button, busy, busyText) {
+    if (!button) return;
+    if (busy) {
+      if (button.classList.contains("busy")) return;
+      busyOriginals.set(button, [...button.childNodes]);
+      button.classList.add("busy");
+      button.disabled = true;
+      clear(button);
+      button.append(spinner(busyText ? true : false));
+      if (busyText) button.append(h("span", { text: busyText }));
+    } else {
+      if (!button.classList.contains("busy")) return;
+      button.classList.remove("busy");
+      button.disabled = false;
+      clear(button);
+      for (const node of busyOriginals.get(button) ?? []) button.append(node);
+      busyOriginals.delete(button);
+    }
+  }
+
+  /**
+   * Run `task` with `button` spinning; the button is restored even when the
+   * task throws, and the task's value passes through untouched.
+   */
+  async function withBusy(button, busyText, task) {
+    setButtonBusy(button, true, busyText);
+    try {
+      return await task();
+    } finally {
+      setButtonBusy(button, false);
+    }
+  }
+
+  let taskPillLayer = null;
+
+  /**
+   * A floating "working…" pill for actions with no button to spin in (branch
+   * menu fetch / pull / push / checkout …). Returns `{ update, done }`:
+   * `done(ok)` flashes the outcome briefly, then removes the pill.
+   */
+  function taskPill(label) {
+    if (!taskPillLayer) {
+      taskPillLayer = h("div", { class: "task-pill-layer", "aria-live": "polite" });
+      document.body.append(taskPillLayer);
+    }
+    const labelNode = h("span", { text: String(label ?? "") });
+    const node = h("div", { class: "task-pill", role: "status" }, [spinner(false), labelNode]);
+    taskPillLayer.append(node);
+    let settled = false;
+    return {
+      node,
+      update(next) { labelNode.textContent = String(next ?? ""); },
+      done(ok) {
+        if (settled) return;
+        settled = true;
+        node.classList.add(ok === false ? "failed" : "done");
+        window.setTimeout(() => node.remove(), ok === false ? 2400 : 1200);
+      },
+    };
+  }
+
+  /**
+   * Run `task` behind a pill. The pill always resolves (success flashes and
+   * goes, failure lingers briefly); the task's value passes through.
+   */
+  async function runWithPill(label, task) {
+    const pill = taskPill(label);
+    try {
+      const result = await task();
+      pill.done(result?.ok !== false);
+      return result;
+    } catch (error) {
+      pill.done(false);
+      throw error;
+    }
+  }
+
+  // -------------------------------------------------------------- popups ---
+  let openPopup = null;
+
+  function closePopup() {
+    if (!openPopup) return;
+    openPopup.remove();
+    openPopup = null;
+    document.removeEventListener("pointerdown", onPopupPointerDown, true);
+    document.removeEventListener("keydown", onPopupKeyDown, true);
+  }
+
+  function onPopupPointerDown(event) {
+    if (openPopup && !openPopup.contains(event.target)) closePopup();
+  }
+
+  function onPopupKeyDown(event) {
+    if (event.key === "Escape") {
+      event.stopPropagation();
+      closePopup();
+    }
+  }
+
+  /**
+   * Floating menu anchored to a control. `items` accepts
+   * `{ label, shortcut, checked, disabled, onSelect }` entries as well as
+   * `{ type: "label" | "separator" | "custom", ... }`.
+   */
+  function popup(anchor, items, options) {
+    closePopup();
+    // A missing anchor means the caller read `event.currentTarget` after an
+    // await, where it is null. Complain loudly instead of appending a menu that
+    // would never be tracked — and therefore never removed.
+    if (!anchor || typeof anchor.getBoundingClientRect !== "function") {
+      throw new Error("popup() needs a live anchor element; capture it before any await");
+    }
+    const menu = h("div", { class: "popup", role: "menu" });
+    for (const item of items ?? []) {
+      if (!item) continue;
+      if (item.type === "separator") {
+        menu.append(h("div", { class: "popup-separator" }));
+        continue;
+      }
+      if (item.type === "label") {
+        menu.append(h("div", { class: "popup-title", text: item.label }));
+        continue;
+      }
+      if (item.type === "custom") {
+        menu.append(item.node);
+        continue;
+      }
+      menu.append(
+        h("button", {
+          type: "button",
+          role: "menuitem",
+          title: item.title ?? item.label,
+          disabled: item.disabled,
+          "data-checked": item.checked ? "true" : undefined,
+          onclick: () => {
+            closePopup();
+            item.onSelect?.();
+          },
+        }, [h("span", { text: item.label }), item.shortcut ? h("span", { class: "shortcut", text: item.shortcut }) : null]),
+      );
+    }
+    document.body.append(menu);
+    openPopup = menu;
+    const rect = anchor.getBoundingClientRect();
+    const width = menu.offsetWidth;
+    const height = menu.offsetHeight;
+    const left = Math.max(6, Math.min(rect.left, window.innerWidth - width - 6));
+    const wantBelow = rect.bottom + 4;
+    const top = wantBelow + height > window.innerHeight - 6
+      ? Math.max(6, rect.top - height - 4)
+      : wantBelow;
+    menu.style.left = `${left}px`;
+    menu.style.top = `${top}px`;
+    if (options?.focus !== false) {
+      const first = menu.querySelector("button:not([disabled]), input");
+      first?.focus();
+    }
+    document.addEventListener("pointerdown", onPopupPointerDown, true);
+    document.addEventListener("keydown", onPopupKeyDown, true);
+    return menu;
+  }
+
+  // -------------------------------------------------------- repositories ---
+  /**
+   * The repository selector — IDEA's "Root" dropdown — for the left of a tool
+   * window's toolbar.
+   *
+   * Submodules, and repositories that merely live inside another repository,
+   * are separate Git repositories rather than folders. Every command is scoped
+   * to a working directory, so a change inside a submodule cannot be staged,
+   * diffed or committed from the parent: the parent can only record *which
+   * commit* the submodule points at. Picking one here is what makes it
+   * reachable at all.
+   *
+   * A single-repository project has nothing to choose between, so the chip
+   * hides itself and the toolbar keeps the shape it has always had.
+   */
+  function mountRepoSelector(container, ctx) {
+    const chip = h("button", { class: "branch-chip repo-chip", type: "button" });
+    container.append(chip);
+    let repos = [];
+
+    /** Where the repository sits, relative to the workspace's own repository. */
+    function repositoryLabel(entry) {
+      if (!entry) return t("repository");
+      return entry.rel === "." ? entry.name : entry.rel;
+    }
+
+    function kindText(entry) {
+      if (entry.kind === "submodule") return t("submoduleBadge");
+      if (entry.kind === "sibling") return t("siblingRepoBadge");
+      return t("nestedRepoBadge");
+    }
+
+    function kindHint(entry) {
+      if (entry.kind === "submodule") return t("submoduleBadge");
+      if (entry.kind === "sibling") return t("siblingRepoHint");
+      return t("nestedRepoHint");
+    }
+
+    function paint() {
+      PIG.clear(chip);
+      chip.style.display = repos.length > 1 ? "" : "none";
+      if (repos.length < 2) return;
+      const current = repos.find((entry) => entry.active) ?? repos[0];
+      chip.append(icon("folder", 13));
+      chip.append(h("span", { class: "name", text: repositoryLabel(current) }));
+      if (current.kind !== "root") {
+        chip.append(h("span", { class: "badge", text: kindText(current) }));
+      }
+      chip.title = `${t("switchRepository")} — ${current.root}`;
+    }
+
+    async function openMenu() {
+      // Re-read on open, not only on refresh: a submodule can be added or
+      // deinitialised in between, and a menu listing a repository that is no
+      // longer there is worse than one extra Git call.
+      const result = await invoke("git/repos");
+      if (result?.ok) {
+        repos = result.repos ?? [];
+        paint();
+      }
+      popup(chip, [
+        { type: "label", label: t("repositoryList") },
+        ...repos.map((entry) => ({
+          label: repositoryLabel(entry),
+          title: entry.kind === "root"
+            ? entry.root
+            : `${entry.root} — ${kindHint(entry)}`,
+          checked: entry.active,
+          onSelect: async () => {
+            if (entry.active) return;
+            const switched = await invoke("git/select-repo", { root: entry.root });
+            if (!switched?.ok) {
+              toast(errorText(switched), "error");
+              return;
+            }
+            // The chip does not wait for the view's reload to say where the tool
+            // window points now: the answer to the switch is enough, and the
+            // view's own state is the view's business.
+            repos = repos.map((candidate) => ({
+              ...candidate,
+              active: candidate.root === switched.root,
+            }));
+            paint();
+            ctx.onSwitch?.(switched);
+          },
+        })),
+      ]);
+    }
+
+    chip.addEventListener("click", () => {
+      openMenu().catch((error) => toast(String(error?.message ?? error), "error"));
+    });
+
+    return {
+      /** Take the list from a `git/repos` answer. */
+      update(result) {
+        repos = result?.ok ? (result.repos ?? []) : [];
+        paint();
+      },
+    };
+  }
+
+  // ------------------------------------------------------------- dialogs ---
+  /** A small modal in the IDEA shape: message, then actions. */
+  function dialog({ title, message, detail, confirmLabel, cancelLabel, danger, input }) {
+    return new Promise((resolve) => {
+      const field = input
+        ? h("input", { type: "text", value: input.value ?? "", placeholder: input.placeholder ?? "" })
+        : null;
+      const backdrop = h("div", {
+        style: {
+          position: "fixed",
+          inset: "0",
+          zIndex: "80",
+          display: "flex",
+          alignItems: "center",
+          justifyContent: "center",
+          background: "color-mix(in oklab, #000 38%, transparent)",
+        },
+      });
+      const close = (value) => {
+        backdrop.remove();
+        document.removeEventListener("keydown", onKey, true);
+        resolve(value);
+      };
+      const onKey = (event) => {
+        if (event.key === "Escape") {
+          event.stopPropagation();
+          close(null);
+        } else if (event.key === "Enter" && field) {
+          event.stopPropagation();
+          close(field.value);
+        }
+      };
+      const confirm = h("button", {
+        class: danger ? "primary" : "primary",
+        type: "button",
+        style: danger ? { background: "var(--status-conflict)", borderColor: "var(--status-conflict)" } : undefined,
+        onclick: () => close(field ? field.value : true),
+      }, [confirmLabel ?? t("ok")]);
+      const panel = h("div", {
+        class: "popup",
+        role: "dialog",
+        "aria-modal": "true",
+        style: { position: "relative", minWidth: "280px", maxWidth: "420px", padding: "14px", boxShadow: "0 16px 48px rgba(0,0,0,.4)" },
+      }, [
+        h("div", { style: { fontWeight: "600", marginBottom: "6px" }, text: title ?? "" }),
+        message ? h("div", { text: message }) : null,
+        detail ? h("div", { class: "dialog-detail", text: detail }) : null,
+        field,
+        h("div", { style: { display: "flex", justifyContent: "flex-end", gap: "8px", marginTop: "14px" } }, [
+          // `cancelLabel: null` means "nothing to cancel" — a read-only dialog
+          // (the full Git output) has one button, not two.
+          cancelLabel === null
+            ? null
+            : h("button", { class: "bordered", type: "button", onclick: () => close(null) }, [cancelLabel ?? t("cancel")]),
+          confirm,
+        ]),
+      ]);
+      backdrop.append(panel);
+      backdrop.addEventListener("pointerdown", (event) => {
+        if (event.target === backdrop) close(null);
+      });
+      document.body.append(backdrop);
+      document.addEventListener("keydown", onKey, true);
+      (field ?? confirm).focus();
+      if (field) field.select();
+    });
+  }
+  // Note: 多仓 Push 对话框与两视图共用——按仓列出分支去向与 ahead，逐仓推送、单仓失败不挡其他仓；Commit and Push 复用同一逐仓推送 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+  /**
+   * IDEA-style Push dialog: one row per repository (branch → remote,
+   * ahead/behind, checkbox, per-row result). Pushes the checked rows one by
+   * one via `git/push` with `repoRoot`, so no repository switch is needed.
+   * Resolves with the per-repo outcomes (or null when closed without pushing).
+   */
+  async function openPushDialog(options = {}) {
+    const loading = await invoke("git/push-statuses");
+    if (!loading?.ok) {
+      toast(errorText(loading), "error");
+      return null;
+    }
+    const repos = (loading.repos ?? []).slice();
+    if (!repos.length) {
+      toast(t("notARepository"), "error");
+      return null;
+    }
+    return new Promise((resolve) => {
+      const checked = new Map();
+      const outcomes = new Map();
+      for (const entry of repos) {
+        // Default to pushing what can be pushed; repos with no remote stay
+        // unchecked but visible, so the reason is seen, not hidden.
+        checked.set(entry.root, Boolean(entry.pushTarget));
+      }
+      const backdrop = h("div", {
+        style: {
+          position: "fixed",
+          inset: "0",
+          zIndex: "80",
+          display: "flex",
+          alignItems: "center",
+          justifyContent: "center",
+          background: "color-mix(in oklab, #000 38%, transparent)",
+        },
+      });
+      const rowsHost = h("div", { class: "push-rows", style: { display: "flex", flexDirection: "column", gap: "6px", maxHeight: "320px", overflow: "auto", margin: "10px 0" } });
+      const hint = h("div", { class: "muted", style: { fontSize: "11px" }, text: t("pushDialogHint") });
+      const pushButton = h("button", { class: "primary", type: "button" }, [t("pushAll")]);
+      const closeButton = h("button", { class: "bordered", type: "button" }, [t("close")]);
+      const progressFill = h("div", { class: "push-progress-fill" });
+      const progressTrack = h("div", { class: "push-progress", style: { display: "none" } }, [progressFill]);
+      // Which row is on the wire right now, and how far through the batch it
+      // is — the row pulses while its push runs, the track fills per repo.
+      let activeRoot = null;
+      let doneCount = 0;
+      let totalCount = 0;
+      function paintProgress() {
+        progressTrack.style.display = pushing && totalCount > 1 ? "" : "none";
+        progressFill.style.width = totalCount ? `${Math.round((doneCount / totalCount) * 100)}%` : "0";
+        const label = pushButton.querySelector("span:last-child");
+        if (pushing && label) label.textContent = tf("pushingRepo", { done: Math.min(doneCount + 1, totalCount), total: totalCount });
+      }
+      let pushing = false;
+      let pushedAny = false;
+      const close = (value) => {
+        backdrop.remove();
+        document.removeEventListener("keydown", onKey, true);
+        resolve(value);
+      };
+      const onKey = (event) => {
+        if (event.key === "Escape") {
+          event.stopPropagation();
+          if (!pushing) close(pushedAny ? [...outcomes.values()] : null);
+        }
+      };
+      function branchText(entry) {
+        const head = entry.branch?.head ?? "";
+        if (!head) return entry.branch?.detached ? `detached @ ${String(entry.branch?.oid ?? "").slice(0, 8)}` : "";
+        if (entry.pushTarget) return tf("pushRowPushed", { branch: head, remote: entry.pushTarget.remote });
+        if (!entry.branch?.upstream) return `${head} · ${t("pushNoUpstream")}`;
+        return `${head} → ${entry.branch.upstream}`;
+      }
+      function countsText(entry) {
+        const ahead = entry.branch?.ahead ?? 0;
+        const behind = entry.branch?.behind ?? 0;
+        if (!ahead && !behind) return t("pushUpToDate");
+        const parts = [];
+        if (ahead) parts.push(`↑${ahead}`);
+        if (behind) parts.push(`↓${behind}`);
+        return parts.join(" ");
+      }
+      function paintRows() {
+        clear(rowsHost);
+        for (const entry of repos) {
+          const outcome = outcomes.get(entry.root);
+          const box = h("input", { type: "checkbox" });
+          box.checked = checked.get(entry.root) === true;
+          box.disabled = pushing || !entry.pushTarget;
+          box.addEventListener("change", () => { checked.set(entry.root, box.checked); });
+          const label = entry.rel === "." ? entry.name : entry.rel;
+          const kind = entry.kind === "submodule" ? t("submoduleBadge") : entry.kind === "sibling" ? t("siblingRepoBadge") : entry.kind === "root" ? "" : t("nestedRepoBadge");
+          const active = pushing && activeRoot === entry.root && outcome === null;
+          const status = active
+            ? h("div", { class: "row-status pushing" }, [spinner(false), h("span", { text: t("pushing") })])
+            : outcome
+              ? outcome.ok
+                ? h("div", { class: "row-status ok" }, [icon("check", 12), h("span", { text: t("pushed") })])
+                : h("div", { class: "row-status error", text: errorText(outcome) })
+              : null;
+          const row = h("div", { class: `push-row${active ? " is-active" : ""}`, style: { display: "flex", gap: "8px", alignItems: "flex-start", padding: "6px 8px", border: "1px solid var(--border)", borderRadius: "6px" } }, [
+            box,
+            h("div", { style: { flex: "1 1 auto", minWidth: "0" } }, [
+              h("div", { style: { display: "flex", gap: "6px", alignItems: "center" } }, [
+                h("span", { style: { fontWeight: "600" }, text: label }),
+                kind ? h("span", { class: "badge", text: kind }) : null,
+                h("span", { class: "muted", style: { fontSize: "11px" }, text: countsText(entry) }),
+              ]),
+              h("div", { class: "muted", style: { fontSize: "11px" }, text: branchText(entry) }),
+              entry.pushError && !entry.pushTarget ? h("div", { style: { fontSize: "11px", color: "var(--status-conflict)" }, text: entry.pushError }) : null,
+              status,
+            ]),
+          ]);
+          rowsHost.append(row);
+        }
+      }
+      pushButton.onclick = async () => {
+        if (pushing) return;
+        const targets = repos.filter((entry) => checked.get(entry.root) && entry.pushTarget);
+        if (!targets.length) {
+          toast(t("pushNothingToPush"), "info");
+          return;
+        }
+        pushing = true;
+        closeButton.disabled = true;
+        activeRoot = null;
+        doneCount = 0;
+        totalCount = targets.length;
+        // Single-repo pushes read better as a plain "Pushing…"; the per-row
+        // spinner already says which repo, and a 0%-of-1 bar adds nothing.
+        setButtonBusy(pushButton, true, totalCount > 1 ? tf("pushingRepo", { done: 1, total: totalCount }) : t("pushing"));
+        paintProgress();
+        paintRows();
+        for (const entry of targets) {
+          activeRoot = entry.root;
+          outcomes.set(entry.root, null);
+          paintProgress();
+          paintRows();
+          const payload = { repoRoot: entry.root };
+          if (!entry.branch?.upstream) payload.setUpstream = true;
+          let result = null;
+          try {
+            result = await invoke("git/push", payload);
+          } catch (error) {
+            result = { ok: false, message: String(error?.message ?? error) };
+          }
+          outcomes.set(entry.root, { ...result, rel: entry.rel, root: entry.root });
+          if (result?.ok) {
+            pushedAny = true;
+            try { await refreshTrackingRefs(result); } catch { /* keep pushing */ }
+          }
+          doneCount += 1;
+          paintProgress();
+          paintRows();
+        }
+        activeRoot = null;
+        pushing = false;
+        setButtonBusy(pushButton, false);
+        closeButton.disabled = false;
+        paintProgress();
+        paintRows();
+        try { await options.onPushed?.([...outcomes.values()]); } catch { /* view refreshes anyway */ }
+      };
+      closeButton.onclick = () => { if (!pushing) close(pushedAny ? [...outcomes.values()] : null); };
+      const panel = h("div", {
+        class: "popup",
+        role: "dialog",
+        "aria-modal": "true",
+        style: { position: "relative", minWidth: "340px", maxWidth: "520px", width: "min(520px, 92vw)", padding: "14px", boxShadow: "0 16px 48px rgba(0,0,0,.4)" },
+      }, [
+        h("div", { style: { fontWeight: "600", marginBottom: "2px" }, text: t("pushDialogTitle") }),
+        h("div", { class: "muted", style: { fontSize: "11px" }, text: t("pushDialogSubtitle") }),
+        progressTrack,
+        rowsHost,
+        hint,
+        h("div", { style: { display: "flex", justifyContent: "flex-end", gap: "8px", marginTop: "14px" } }, [
+          closeButton,
+          pushButton,
+        ]),
+      ]);
+      backdrop.append(panel);
+      backdrop.addEventListener("pointerdown", (event) => {
+        if (event.target === backdrop && !pushing) close(pushedAny ? [...outcomes.values()] : null);
+      });
+      document.body.append(backdrop);
+      document.addEventListener("keydown", onKey, true);
+      paintRows();
+      pushButton.focus();
+    });
+  }
+  /** Push several repos with the same options shape as the dialog rows. */
+  async function pushRepos(targets) {
+    const outcomes = [];
+    for (const target of targets ?? []) {
+      const payload = {};
+      if (target.root) payload.repoRoot = target.root;
+      if (target.setUpstream) payload.setUpstream = true;
+      let result = null;
+      try {
+        result = await invoke("git/push", payload);
+      } catch (error) {
+        result = { ok: false, message: String(error?.message ?? error) };
+      }
+      outcomes.push({ ...result, rel: target.rk ?? target.rel ?? "", root: target.root ?? null });
+      if (result?.ok) {
+        try { await refreshTrackingRefs(result); } catch { /* keep pushing */ }
+      }
+    }
+    return outcomes;
+  }
+
+  /**
+   * The message to show for a failed call: Git's own output plus, when the
+   * engine recognised the failure, a line saying what to do about it.
+   *
+   * The recognised ones are the failures a user cannot guess their way out of:
+   * credentials, and the two ways a push or a pull comes back refused. The
+   * engine returns a code and never prose, so the wording lives here, in the
+   * language the rest of the window is in.
+   */
+  function errorText(result) {
+    const message = String(result?.message ?? "").trim();
+    const remedy = remedyText(result);
+    // Reuse an existing key; the caller already prefixes the action name.
+    if (!remedy) return message || t("gitOutput");
+    return message ? `${message}\n\n${remedy}` : remedy;
+  }
+
+  /** The classified remedy for a failed call, or "" when there is nothing to add. */
+  function remedyText(result) {
+    if (result?.authHint === "ssh") return t("authSsh");
+    if (result?.authHint === "credentials") return t("authCredentials");
+    if (result?.pushHint === "remote-ahead") return t("remoteAhead");
+    if (result?.pushHint === "remote-rejected") return t("pushRejected");
+    if (result?.pullHint === "diverged") return t("pullDiverged");
+    if (result?.pullHint === "conflicts") return t("pullConflicts");
+    return "";
+  }
+
+  /**
+   * Report a fetch/pull/push.
+   *
+   * Two things made this its own function rather than a `toast` at each call
+   * site. A successful push prints nothing on stdout — Git's summary goes to
+   * stderr — so "show stdout if there is any" made pushing succeed silently.
+   * And a refused push produces six lines of Git in a 340px toast, which is why
+   * the error toast now carries a link to the whole of Git's output.
+   */
+  function reportSync(result, action) {
+    if (result?.ok) {
+      const line = String(result.stdout ?? "").split("\n").map((value) => value.trim()).find(Boolean);
+      toast(line ? `${action}: ${line}` : action, "info");
+      return true;
+    }
+    const node = toast(`${action}: ${errorText(result)}`, "error");
+    if (node && result?.detail) {
+      node.classList.add("clickable");
+      node.append(h("button", {
+        class: "toast-link",
+        type: "button",
+        onclick: () => dialog({
+          title: t("gitOutput"),
+          detail: result.detail,
+          confirmLabel: t("close"),
+          cancelLabel: null,
+        }),
+      }, [t("showDetail")]));
+    }
+    return false;
+  }
+
+  /**
+   * A refused push means the remote moved on, so the ↑/↓ chip is stale by
+   * definition: it is counting against a remote-tracking ref that predates the
+   * refusal. Fetch before the view redraws, or the chip keeps claiming "1
+   * outgoing, 0 incoming" right after Git said the opposite.
+   *
+   * A fetch that fails here is deliberately not reported: the refusal the user
+   * has to act on is already on screen, and a second message about the refresh
+   * would be noise on top of it. The consequence is only that the chip stays
+   * stale, which is where it started.
+   */
+  async function refreshTrackingRefs(result) {
+    if (result?.pushHint !== "remote-ahead") return result;
+    // `invoke` resolves with `{ok:false}` rather than throwing, so there is
+    // nothing to catch — the result is read and dropped on purpose.
+    await invoke("git/fetch");
+    return result;
+  }
+
+
+  // ------------------------------------------------------------ splitter ---
+  /**
+   * Drag handle for a two-pane layout. `apply(delta)` receives the pointer
+   * delta in pixels so each caller decides what it resizes.
+   */
+  function bindSplitter(handle, apply, options) {
+    let start = 0;
+    let active = false;
+    const onMove = (event) => {
+      if (!active) return;
+      const position = options?.vertical ? event.clientY : event.clientX;
+      apply(position - start);
+    };
+    const onUp = () => {
+      if (!active) return;
+      active = false;
+      handle.classList.remove("active");
+      window.removeEventListener("pointermove", onMove);
+      window.removeEventListener("pointerup", onUp);
+      document.body.style.userSelect = "";
+    };
+    handle.addEventListener("pointerdown", (event) => {
+      event.preventDefault();
+      active = true;
+      start = options?.vertical ? event.clientY : event.clientX;
+      handle.classList.add("active");
+      document.body.style.userSelect = "none";
+      window.addEventListener("pointermove", onMove);
+      window.addEventListener("pointerup", onUp);
+    });
+  }
+
+  // ---------------------------------------------------------- formatting ---
+  const MINUTE = 60_000;
+  const HOUR = 60 * MINUTE;
+  const DAY = 24 * HOUR;
+
+  function relativeTime(timestamp, now) {
+    if (!Number.isFinite(timestamp) || timestamp <= 0) return "";
+    const reference = Number.isFinite(now) ? now : Date.now();
+    const delta = reference - timestamp;
+    // Whole sentences live in STRINGS (see tf): no locale ternary here, and
+    // the English plural suffix travels as `s` so zh templates simply ignore it.
+    if (delta < 45 * 1000) return t("relativeJustNow");
+    if (delta < HOUR) {
+      const minutes = Math.max(1, Math.round(delta / MINUTE));
+      return tf("relativeMinutesAgo", { count: minutes, s: minutes === 1 ? "" : "s" });
+    }
+    if (delta < DAY) {
+      const hours = Math.round(delta / HOUR);
+      return tf("relativeHoursAgo", { count: hours, s: hours === 1 ? "" : "s" });
+    }
+    if (delta < 30 * DAY) {
+      const days = Math.round(delta / DAY);
+      return tf("relativeDaysAgo", { count: days, s: days === 1 ? "" : "s" });
+    }
+    return formatDate(timestamp);
+  }
+
+  function formatDate(timestamp) {
+    if (!Number.isFinite(timestamp) || timestamp <= 0) return "";
+    const date = new Date(timestamp);
+    const pad = (value) => String(value).padStart(2, "0");
+    return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())}`;
+  }
+
+  function formatDateTime(timestamp) {
+    if (!Number.isFinite(timestamp) || timestamp <= 0) return "";
+    const date = new Date(timestamp);
+    const pad = (value) => String(value).padStart(2, "0");
+    return `${formatDate(timestamp)} ${pad(date.getHours())}:${pad(date.getMinutes())}:${pad(date.getSeconds())}`;
+  }
+
+  function formatClock(timestamp) {
+    const date = new Date(timestamp);
+    const pad = (value) => String(value).padStart(2, "0");
+    return `${pad(date.getHours())}:${pad(date.getMinutes())}:${pad(date.getSeconds())}`;
+  }
+
+  /** Split a repo-relative path into a readable directory and base name. */
+  function splitPath(filePath) {
+    const normalised = String(filePath ?? "").replace(/\\/g, "/");
+    const index = normalised.lastIndexOf("/");
+    if (index < 0) return { name: normalised, directory: "" };
+    return { name: normalised.slice(index + 1), directory: normalised.slice(0, index) };
+  }
+
+  function shellQuote(value) {
+    const text = String(value ?? "");
+    return /^[A-Za-z0-9._\-/]+$/.test(text) ? text : `'${text.replace(/'/g, "'\\''")}'`;
+  }
+
+  // ----------------------------------------------------------- appearance ---
+  // Follow the app's own colour mode. Snapping to the OS palette instead made
+  // the panel flash whenever the app and the OS disagreed.
+  function applyAppearance(appearance) {
+    if (typeof appearance?.locale === "string") state.locale = resolveLocale(appearance.locale);
+    const base = appearance?.base;
+    const resolved = base === "light" || base === "dark"
+      ? base
+      : window.matchMedia("(prefers-color-scheme: light)").matches ? "light" : "dark";
+    state.theme = resolved;
+    document.documentElement.dataset.theme = resolved;
+    window.dispatchEvent(new CustomEvent("pig:appearance", { detail: { theme: resolved, locale: state.locale } }));
+  }
+
+  function watchAppearance() {
+    bridge?.on?.("appearance:changed", applyAppearance);
+    invoke("app.getAppearance").then(applyAppearance).catch(() => applyAppearance(null));
+  }
+
+  /**
+   * The host announces project switches on `workspace:changed`. A view that
+   * ignored it would keep showing the previous project's repository — which is
+   * exactly the bug this exists to prevent.
+   *
+   * TODO: workspace-stale window refactor is out of scope — a stale-window flag
+   * with explicit loading state would beat this coalesce timer, but it touches
+   * every refresh path, so it stays a timer for now.
+   */
+  function watchWorkspace(handler) {
+    // `workspace:changed` can arrive in bursts (the host announces a project
+    // switch as it settles), and each run costs a multi-process git refresh.
+    // Run at most once per window, so the cost tracks elapsed time rather than
+    // event count. The first event of a quiet period runs immediately — a switch
+    // must not wait out a debounce while the view is still interactive — and a
+    // burst collapses into a single catch-up run that renders the final state.
+    const COALESCE_MS = 120;
+    let lastRunAt = 0;
+    let timer = null;
+    const fire = () => {
+      lastRunAt = Date.now();
+      try {
+        handler();
+      } catch {
+        // A failed reload must not take the view down with it.
+      }
+    };
+    bridge?.on?.("workspace:changed", () => {
+      if (timer !== null) return; // a catch-up run is already pending
+      const since = Date.now() - lastRunAt;
+      if (since >= COALESCE_MS) {
+        fire();
+        return;
+      }
+      timer = window.setTimeout(() => {
+        timer = null;
+        fire();
+      }, COALESCE_MS - since);
+    });
+  }
+
+  // ---------------------------------------------------------------- store ---
+  /** Minimal observable so views can re-render on change without a framework. */
+  function createStore(initial) {
+    let value = initial;
+    const listeners = new Set();
+    return {
+      get: () => value,
+      set(next) {
+        value = typeof next === "function" ? next(value) : next;
+        for (const listener of [...listeners]) listener(value);
+      },
+      subscribe(listener) {
+        listeners.add(listener);
+        return () => listeners.delete(listener);
+      },
+    };
+  }
+
+  Object.assign(PIG, {
+    state,
+    t,
+    tf,
+    invoke,
+    copyText,
+    h,
+    clear,
+    icon,
+    iconButton,
+    textButton,
+    toast,
+    popup,
+    closePopup,
+    dialog,
+    openPushDialog,
+    pushRepos,
+    bindSplitter,
+    relativeTime,
+    formatDate,
+    formatDateTime,
+    formatClock,
+    splitPath,
+    shellQuote,
+    applyAppearance,
+    watchAppearance,
+    watchWorkspace,
+    createStore,
+    isMac: IS_MAC,
+    formatShortcut,
+    bindShortcuts,
+    errorText,
+    remedyText,
+    reportSync,
+    refreshTrackingRefs,
+    appShortcutHintBinding,
+    spinner,
+    setButtonBusy,
+    withBusy,
+    taskPill,
+    runWithPill,
+    // Shared by both tool windows, so the two cannot disagree about which
+    // repository they are showing — the same reason the branch chip is shared.
+    repoSelector: { mount: mountRepoSelector },
+  });
+})(window.PIG || (window.PIG = {}));
+
+/* ================= src/diff.js ================= */
+/**
+ * Unified-diff parsing and rendering in the IDEA shape.
+ *
+ * Two rules drive the design:
+ *
+ *  1. The raw diff lines are kept verbatim. A hunk is staged by handing those
+ *     exact lines back to `git apply`, so anything that rewrote them (re-quoting,
+ *     re-wrapping, re-ordering) would break stage/unstage/discard.
+ *  2. Parsing produces the model once; the unified and side-by-side renderers
+ *     are two views of that same model, which is why switching modes never
+ *     changes what a hunk contains.
+ */
+(function (PIG) {
+  "use strict";
+
+  const { h, t, tf } = PIG;
+
+  const HUNK_HEADER = /^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@ ?(.*)$/;
+
+  /** Context lines kept around a change when unchanged fragments collapse. */
+  const CONTEXT_LINES = 3;
+  /** A context run longer than this collapses; shorter stays fully visible. */
+  const COLLAPSE_THRESHOLD = CONTEXT_LINES * 2 + 1;
+
+  const WORDS = /[\w\u4e00-\u9fff]/;
+
+  /** Split a diff into file sections, each holding its header and its hunks. */
+  function parse(text) {
+    const files = [];
+    let file = null;
+    let hunk = null;
+
+    const lines = String(text ?? "").split("\n");
+    // A trailing newline would otherwise add a phantom empty body line.
+    if (lines.length && lines[lines.length - 1] === "") lines.pop();
+
+    for (const line of lines) {
+      if (line.startsWith("diff --git ")) {
+        file = { header: [line], hunks: [] };
+        files.push(file);
+        hunk = null;
+        continue;
+      }
+      if (!file) continue;
+      if (line.startsWith("@@")) {
+        hunk = { header: line, lines: [], meta: matchHunkHeader(line), oldLine: 0, newLine: 0 };
+        file.hunks.push(hunk);
+        continue;
+      }
+      if (hunk) {
+        const marker = line.charAt(0);
+        const type = marker === "+" ? "insert"
+          : marker === "-" ? "delete"
+            : marker === "\\" ? "meta"
+              : "context";
+        hunk.lines.push({ raw: line, type, text: line.length ? line.slice(1) : "" });
+      } else {
+        file.header.push(line);
+      }
+    }
+
+    annotate(files);
+    return { files };
+  }
+
+  function matchHunkHeader(line) {
+    const match = HUNK_HEADER.exec(line);
+    if (!match) return null;
+    return {
+      oldStart: Number(match[1]),
+      oldCount: match[2] === undefined ? 1 : Number(match[2]),
+      newStart: Number(match[3]),
+      newCount: match[4] === undefined ? 1 : Number(match[4]),
+      section: match[5] ?? "",
+    };
+  }
+
+  /** Attach 1-based old/new line numbers and whitespace-only change flags. */
+  function annotate(files) {
+    for (const file of files) {
+      for (const hunk of file.hunks) {
+        const meta = hunk.meta ?? { oldStart: 1, newStart: 1 };
+        let oldLine = meta.oldStart;
+        let newLine = meta.newStart;
+        for (const line of hunk.lines) {
+          if (line.type === "insert") {
+            line.newNumber = newLine++;
+          } else if (line.type === "delete") {
+            line.oldNumber = oldLine++;
+          } else if (line.type === "context") {
+            line.oldNumber = oldLine++;
+            line.newNumber = newLine++;
+          }
+        }
+        markWhitespaceOnly(hunk);
+        markSubmodule(hunk);
+        pairChanges(hunk);
+      }
+    }
+  }
+
+  /**
+   * A delete run followed by an insert run is one "change": pair them so the
+   * renderer can highlight the differing middle of each line, and so a pair
+   * that differs only in whitespace can be labelled as such.
+   */
+  function pairChanges(hunk) {
+    const lines = hunk.lines;
+    let index = 0;
+    while (index < lines.length) {
+      if (lines[index].type !== "delete") {
+        index += 1;
+        continue;
+      }
+      const deletes = [];
+      while (index < lines.length && lines[index].type === "delete") deletes.push(lines[index++]);
+      const inserts = [];
+      while (index < lines.length && lines[index].type === "insert") inserts.push(lines[index++]);
+      const pairs = Math.min(deletes.length, inserts.length);
+      for (let offset = 0; offset < pairs; offset += 1) {
+        const left = deletes[offset];
+        const right = inserts[offset];
+        const edges = commonEdges(left.text, right.text);
+        left.paired = right;
+        right.paired = left;
+        left.fragment = fragmentRange(left.text, edges);
+        right.fragment = fragmentRange(right.text, edges);
+      }
+    }
+  }
+
+  function markWhitespaceOnly(hunk) {
+    const deletes = hunk.lines.filter((line) => line.type === "delete");
+    const inserts = hunk.lines.filter((line) => line.type === "insert");
+    if (!deletes.length || deletes.length !== inserts.length) return;
+    const normalise = (value) => value.replace(/\s+/g, " ").trim();
+    const same = deletes.every((line, index) => normalise(line.text) === normalise(inserts[index].text));
+    if (same) hunk.whitespaceOnly = true;
+  }
+
+/**
+ * A submodule change is two bare object names ("Subproject commit <sha>").
+ * Git renders it as an ordinary two-line diff, which reads as noise; naming it
+ * as a submodule update makes those same two lines meaningful.
+ */
+const SUBMODULE_LINE = /^Subproject commit ([0-9a-f]{7,40})$/i;
+
+function markSubmodule(hunk) {
+  const changed = hunk.lines.filter((line) => line.type === "insert" || line.type === "delete");
+  if (!changed.length) return;
+  const found = changed.map((line) => SUBMODULE_LINE.exec(line.text)?.[1] ?? null);
+  if (found.some((sha) => !sha)) return;
+  const from = hunk.lines
+    .filter((line) => line.type === "delete")
+    .map((line) => SUBMODULE_LINE.exec(line.text)[1])[0] ?? null;
+  const to = hunk.lines
+    .filter((line) => line.type === "insert")
+    .map((line) => SUBMODULE_LINE.exec(line.text)[1])[0] ?? null;
+  hunk.submodule = { from, to };
+}
+
+  function commonEdges(left, right) {
+    const max = Math.min(left.length, right.length);
+    let prefix = 0;
+    while (prefix < max && left[prefix] === right[prefix]) prefix += 1;
+    let suffix = 0;
+    while (suffix < max - prefix && left[left.length - 1 - suffix] === right[right.length - 1 - suffix]) {
+      suffix += 1;
+    }
+    return { prefix, suffix };
+  }
+
+  /**
+   * Turn the differing middle into a range, widened to word boundaries so the
+   * highlight covers a whole token instead of splitting one — IDEA's
+   * "Highlighting Differences: Words" behaviour.
+   */
+  function fragmentRange(text, edges) {
+    let start = edges.prefix;
+    let end = text.length - edges.suffix;
+    if (end <= start) return null;
+    while (start > 0 && WORDS.test(text[start - 1]) && WORDS.test(text[start])) start -= 1;
+    while (end < text.length && WORDS.test(text[end - 1]) && WORDS.test(text[end])) end += 1;
+    if (end <= start) return null;
+    return { start, end };
+  }
+
+  // ------------------------------------------------------------- patches ---
+
+  /** Rebuild the exact patch text Git must receive for the given hunks. */
+  function patchFor(file, hunks) {
+    const chosen = hunks && hunks.length ? hunks : file.hunks;
+    const body = [];
+    for (const hunk of chosen) {
+      body.push(hunk.header);
+      for (const line of hunk.lines) body.push(line.raw);
+    }
+    return [...file.header, ...body].join("\n") + "\n";
+  }
+
+  // ----------------------------------------------------------- rendering ---
+
+  /** Collapse long context runs into a clickable "n unchanged lines" row. */
+  function collapseRuns(hunk) {
+    const output = [];
+    let index = 0;
+    while (index < hunk.lines.length) {
+      const line = hunk.lines[index];
+      if (line.type !== "context") {
+        output.push({ kind: "line", line });
+        index += 1;
+        continue;
+      }
+      const run = [];
+      while (index < hunk.lines.length && hunk.lines[index].type === "context") {
+        run.push(hunk.lines[index++]);
+      }
+      if (run.length <= COLLAPSE_THRESHOLD) {
+        for (const item of run) output.push({ kind: "line", line: item });
+        continue;
+      }
+      for (const item of run.slice(0, CONTEXT_LINES)) output.push({ kind: "line", line: item });
+      output.push({ kind: "collapsed", lines: run.slice(CONTEXT_LINES, run.length - CONTEXT_LINES) });
+      for (const item of run.slice(run.length - CONTEXT_LINES)) output.push({ kind: "line", line: item });
+    }
+    return output;
+  }
+
+  function sideBySideRows(hunk) {
+    const rows = [];
+    const lines = hunk.lines;
+    let index = 0;
+    while (index < lines.length) {
+      const line = lines[index];
+      if (line.type === "delete") {
+        const deletes = [];
+        while (index < lines.length && lines[index].type === "delete") deletes.push(lines[index++]);
+        const inserts = [];
+        while (index < lines.length && lines[index].type === "insert") inserts.push(lines[index++]);
+        const count = Math.max(deletes.length, inserts.length);
+        for (let offset = 0; offset < count; offset += 1) {
+          rows.push({ left: deletes[offset] ?? null, right: inserts[offset] ?? null });
+        }
+        continue;
+      }
+      if (line.type === "insert") {
+        rows.push({ left: null, right: line });
+        index += 1;
+        continue;
+      }
+      rows.push({ left: line, right: line });
+      index += 1;
+    }
+    return rows;
+  }
+
+  function renderText(text, options) {
+    const fragment = options?.fragment;
+    if (!options?.showWhitespaces && !fragment) return document.createTextNode(text);
+
+    const holder = document.createDocumentFragment();
+
+    // Without whitespace markers the fragment highlight needs at most three
+    // nodes. Building one node per character here was what made a large diff
+    // expensive: every changed line turned into thousands of text nodes, and
+    // the whole diff is rebuilt from scratch on each render.
+    if (!options?.showWhitespaces) {
+      const rawStart = Number(fragment.start);
+      const rawEnd = Number(fragment.end);
+      const start = Math.max(0, Math.min(Number.isFinite(rawStart) ? rawStart : 0, text.length));
+      const end = Math.max(start, Math.min(Number.isFinite(rawEnd) ? rawEnd : text.length, text.length));
+      if (start > 0) holder.append(document.createTextNode(text.slice(0, start)));
+      if (end > start) holder.append(h("span", { class: "fragment", text: text.slice(start, end) }));
+      if (end < text.length) holder.append(document.createTextNode(text.slice(end)));
+      return holder;
+    }
+
+    for (let index = 0; index < text.length; index += 1) {
+      const character = text[index];
+      if (character === " ") {
+        holder.append(h("span", { class: "whitespace-mark", text: "·" }));
+        continue;
+      }
+      if (character === "\t") {
+        holder.append(h("span", { class: "whitespace-mark", text: "→" }));
+        continue;
+      }
+      if (fragment && index === fragment.start) {
+        holder.append(h("span", {
+          class: "fragment",
+          text: text.slice(fragment.start, fragment.end),
+        }));
+        index = fragment.end - 1;
+        continue;
+      }
+      holder.append(document.createTextNode(character));
+    }
+    return holder;
+  }
+
+  const SIGN = { insert: "+", delete: "-", context: " ", meta: "\\" };
+  const ROW_CLASS = { insert: "inserted", delete: "deleted", context: "context", meta: "context" };
+
+  function lineRow(line, options, side) {
+    const gutter = h("span", { class: "gutter-mark" });
+    if (line.type === "insert") gutter.style.background = "var(--gutter-added)";
+    else if (line.type === "delete") gutter.style.background = "var(--gutter-deleted)";
+    else if (line.fragment) gutter.style.background = "var(--gutter-modified)";
+
+    // Unified view carries both numbers, IDEA-style: a deleted line has no new
+    // number and an inserted one has no old number, so without the second
+    // column half of every change would show a blank gutter.
+    const children = [gutter];
+    if (options.showLineNumbers) {
+      if (side === "unified") {
+        children.push(numberCell(line.oldNumber));
+        children.push(numberCell(line.newNumber));
+      } else {
+        children.push(numberCell(side === "left" ? line.oldNumber : line.newNumber));
+      }
+    }
+    children.push(h("span", { class: "sign", text: SIGN[line.type] ?? " " }));
+    // Paired lines only highlight the side being shown in side-by-side mode;
+    // in unified mode both halves of a change carry their own fragment.
+    const fragment = line.type === "context" || line.type === "meta" ? null : line.fragment;
+    children.push(h("span", { class: "text" }, [renderText(line.text, { ...options, fragment })]));
+    return h("div", { class: `diff-line ${ROW_CLASS[line.type] ?? "context"}` }, children);
+  }
+
+  function numberCell(value) {
+    return h("span", {
+      class: "num",
+      text: value === undefined || value === null ? "" : String(value),
+    });
+  }
+
+  function fillerRow(options) {
+    const children = [h("span", { class: "gutter-mark" })];
+    if (options.showLineNumbers) children.push(numberCell(null));
+    children.push(h("span", { class: "sign" }));
+    children.push(h("span", { class: "text" }));
+    return h("div", { class: "diff-line context filler" }, children);
+  }
+  function hunkHeaderRow(file, hunk, options) {
+    const children = [];
+    const checkbox = options.hunkCheckbox?.(hunk, file);
+    if (checkbox) {
+      const input = h("input", {
+        type: "checkbox",
+        title: t("includeIntoCommit"),
+        checked: checkbox.checked,
+        onchange: (event) => checkbox.onChange(event.target.checked),
+      });
+      children.push(input);
+    }
+    const meta = hunk.meta;
+    children.push(h("span", {
+      text: meta
+        ? `@@ -${meta.oldStart}${meta.oldCount === 1 ? "" : `,${meta.oldCount}`} +${meta.newStart}${meta.newCount === 1 ? "" : `,${meta.newCount}`} @@`
+        : hunk.header,
+    }));
+    if (meta?.section) children.push(h("span", { class: "diff-hunk-note", text: meta.section }));
+    if (hunk.whitespaceOnly) children.push(h("span", { class: "diff-hunk-note", text: `· ${t("whiteSpaceOnly")}` }));
+    if (hunk.submodule) {
+      const short = (sha) => (sha ? sha.slice(0, 7) : "—");
+      children.push(h("span", {
+        class: "diff-hunk-note",
+        text: `· ${t("submodule")} ${short(hunk.submodule.from)} → ${short(hunk.submodule.to)}`,
+      }));
+    }
+
+    const actions = h(options.stageable === false ? "span" : "span", { class: "diff-hunk-actions" });
+    for (const action of options.hunkActions ?? []) {
+      actions.append(h("button", {
+        type: "button",
+        title: action.title,
+        onclick: () => action.onSelect(hunk, file),
+      }, [action.label]));
+    }
+    if (actions.childNodes.length) children.push(actions);
+
+    return h("div", { class: "diff-hunk-header" }, children);
+  }
+
+  function collapsedRow(lines, options) {
+    // Whole sentence per locale via tf; `s` feeds the English plural only.
+    const node = h("div", {
+      class: "diff-collapsed",
+      title: t("collapseUnchanged"),
+      text: tf("collapsedLines", { count: lines.length, s: lines.length === 1 ? "" : "s" }),
+    });
+    node.addEventListener("click", () => {
+      const replacement = document.createDocumentFragment();
+      for (const line of lines) replacement.append(lineRow(line, options, options.side ?? "unified"));
+      node.replaceWith(replacement);
+    });
+    return node;
+  }
+
+  /**
+   * Render a diff into `container`.
+   *
+   * TODO: large-diff virtualization is out of scope — rendering stays
+   * non-virtualized; a windowed renderer would be a wide change, so huge
+   * patches still render in full here.
+   *
+   * options:
+   *   unified          boolean — side-by-side when false
+   *   showWhitespaces, showLineNumbers
+   *   stageable        boolean — false while a whitespace-ignoring view is active
+   *   hunkCheckbox     (hunk, file) => { checked, onChange }
+   *   hunkActions      [{ label, title, onSelect(hunk, file) }]
+   *   emptyMessage
+   */
+  function render(container, options) {
+    PIG.clear(container);
+    const text = options.text ?? "";
+    const parsed = parse(text);
+
+    if (!text.trim() || !parsed.files.length) {
+      container.append(h("div", { class: "empty-state" }, [
+        h("div", { class: "headline", text: options.emptyMessage ?? t("noDiff") }),
+      ]));
+      return { files: [] };
+    }
+
+    if (/^Binary files |^GIT binary patch/m.test(text)) {
+      container.append(h("div", { class: "empty-state" }, [
+        h("div", { class: "headline", text: t("binaryDiff") }),
+      ]));
+      return { files: parsed.files };
+    }
+
+    const single = parsed.files.length === 1;
+
+    for (const file of parsed.files) {
+      const { name, directory } = PIG.splitPath(displayPath(file));
+      // A lone file normally needs no header because the caller already names
+      // it; a diff viewer that is the whole surface must always say what it is
+      // showing, so it opts in.
+      if (options.showFileHeader ?? !single) {
+        container.append(h("div", { class: "diff-file-header" }, [
+          h("span", { class: "name", text: name }),
+          directory ? h("span", { class: "path", text: directory }) : null,
+        ]));
+      }
+      for (const hunk of file.hunks) {
+        container.append(hunkHeaderRow(file, hunk, options));
+        if (options.unified === false) {
+          const grid = h("div", { class: "diff-sbs" });
+          const left = h("div", { class: "side" });
+          const right = h("div", { class: "side" });
+          for (const row of sideBySideRows(hunk)) {
+            left.append(row.left ? lineRow(row.left, options, "left") : fillerRow({ ...options, side: "left" }));
+            right.append(row.right ? lineRow(row.right, options, "right") : fillerRow({ ...options, side: "right" }));
+          }
+          grid.append(left, h("div", { class: "spacer" }), right);
+          container.append(grid);
+          continue;
+        }
+        for (const entry of collapseRuns(hunk)) {
+          if (entry.kind === "collapsed") {
+            container.append(collapsedRow(entry.lines, options));
+            continue;
+          }
+          container.append(lineRow(entry.line, options, "unified"));
+        }
+      }
+    }
+    return { files: parsed.files };
+  }
+
+  /** Prefer the `+++` side of the header, falling back to the diff line. */
+  function displayPath(file) {
+    for (const line of file.header) {
+      if (line.startsWith("+++ ")) {
+        const value = line.slice(4).split("\t")[0].trim();
+        if (value && value !== "/dev/null") return value.replace(/^[ab]\//, "");
+      }
+    }
+    for (const line of file.header) {
+      if (line.startsWith("--- ")) {
+        const value = line.slice(4).split("\t")[0].trim();
+        if (value && value !== "/dev/null") return value.replace(/^[ab]\//, "");
+      }
+    }
+    const first = file.header[0] ?? "";
+    const match = /^diff --git a\/(.+) b\/(.+)$/.exec(first);
+    return match ? match[2] : first;
+  }
+
+  Object.assign(PIG, {
+    diff: { parse, render, patchFor, displayPath, sideBySideRows, CONTEXT_LINES },
+  });
+})(window.PIG || (window.PIG = {}));
+
+/* ================= src/commit-view.js ================= */
+/**
+ * The Commit tool window — IDEA's `Alt+0` surface.
+ *
+ * Shape, following the official layout: a changes area on top (Staged /
+ * Unstaged / Unversioned Files with a checkbox per file), the diff of the
+ * selected file below it, and the commit controls pinned to the bottom
+ * (Commit Message, Amend, Commit, Commit and Push).
+ *
+ * The checkbox semantics are IDEA's own: a checkbox means "include in this
+ * commit". With a real Git index behind it, checking a worktree change stages
+ * it and unchecking a staged change unstages it, which is why partial commits
+ * work exactly as they do in the IDE.
+ */
+(function (PIG) {
+  "use strict";
+
+  const { h, t, invoke, icon, iconButton, toast, popup, dialog, splitPath } = PIG;
+
+  /**
+   * IDEA's commit shortcuts, in the form this surface can honour. The tooltip is
+   * rendered from the same spec that is bound, so the two cannot drift apart.
+   */
+  const KEYS = {
+    refresh: { key: "r", mod: true },
+    refreshAlt: { key: "F5", ctrl: true },
+    stage: { key: "a", mod: true, alt: true },
+    rollback: { key: "z", mod: true, alt: true },
+    showDiff: { key: "d", mod: true },
+    commitMessage: { key: "k", mod: true },
+  };
+
+  function tip(key, spec) {
+    return `${t(key)} (${PIG.formatShortcut(spec)})`;
+  }
+
+  const GROUPS = [
+    { id: "conflicted", label: "conflicts", status: "U" },
+    { id: "staged", label: "staged", status: "A" },
+    { id: "unstaged", label: "unstaged", status: "M" },
+    { id: "untracked", label: "unversioned", status: "?" },
+  ];
+
+  /**
+   * The banner line for an unfinished operation, by the name the engine reports.
+   * Only these four can be in progress: they are the ones `git/sequencer` accepts.
+   */
+  const OPERATION_KEYS = {
+    merge: "mergeInProgress",
+    rebase: "rebaseInProgress",
+    "cherry-pick": "cherryPickInProgress",
+    revert: "revertInProgress",
+  };
+
+  const STATUS_VARS = {
+    A: "added", M: "modified", D: "deleted", R: "renamed", C: "renamed",
+    T: "modified", "?": "unversioned", U: "conflict", "!": "ignored",
+  };
+
+  /**
+   * Which language a drafted message is written in. A standing choice rather
+   * than something the model infers: an English history used to mean English
+   * drafts, however Chinese the person reading them was.
+   */
+  const LANGUAGES = [
+    { value: "auto", label: "langAuto" },
+    { value: "zh", label: "langChinese" },
+    { value: "en", label: "langEnglish" },
+  ];
+
+  function languageLabel(value) {
+    const option = LANGUAGES.find((row) => row.value === (value ?? "auto")) ?? LANGUAGES[0];
+    return t(option.label);
+  }
+  function statusColor(code) {
+    const key = STATUS_VARS[String(code ?? "").charAt(0)] ?? "modified";
+    return `var(--status-${key})`;
+  }
+
+  /**
+   * Git reports paths relative to the repository root, while the host's `fs`
+   * channels are scoped to the workspace and resolve relative to it. When the
+   * two roots differ the path has to be re-based, and when the file falls
+   * outside the workspace the action simply is not offered.
+   */
+  function workspaceRelative(filePath, repo) {
+    if (!filePath) return null;
+    // The engine already worked out where the repository sits inside the
+    // workspace, as real paths — the two roots can name the same directory with
+    // and without a symlinked prefix (`/private/var` against `/var` on macOS),
+    // and comparing those two strings here would decide the file is outside the
+    // workspace.
+    const prefix = repo?.repo?.workspacePrefix;
+    if (typeof prefix === "string") {
+      return prefix === "." ? filePath : `${prefix}/${filePath}`;
+    }
+    const root = String(repo?.repo?.root ?? "").replace(/[/\\]+$/, "");
+    const workspace = String(repo?.repo?.workspace ?? "").replace(/[/\\]+$/, "");
+    if (!root || !workspace || root === workspace) return filePath || null;
+    if (root.startsWith(`${workspace}/`) || root.startsWith(`${workspace}\\`)) {
+      return `${root.slice(workspace.length + 1)}/${filePath}`;
+    }
+    if (workspace.startsWith(`${root}/`) || workspace.startsWith(`${root}\\`)) {
+      const inner = workspace.slice(root.length + 1);
+      if (filePath === inner) return null;
+      if (!filePath.startsWith(`${inner}/`)) return null;
+      return filePath.slice(inner.length + 1);
+    }
+    return null;
+  }
+
+  // --------------------------------------------------------- change tree ---
+  /**
+   * The change lists arrive flat and repository-relative — the file name, with
+   * its directory demoted to a grey tail the column is usually too narrow to
+   * show. Rebuilding those paths as a tree is what answers "which folder does
+   * this belong to" without the user having to read a path at all.
+   *
+   * The tree is per change list (Staged / Unstaged / Unversioned) rather than
+   * across all of them: one file can sit in two lists at once, and a folder's
+   * checkbox could not then mean one thing.
+   */
+  function buildChangeTree(files) {
+    const root = { name: "", path: "", dirs: new Map(), files: [], total: 0 };
+    for (const file of files ?? []) {
+      const parts = String(file.path ?? "").replace(/\\/g, "/").split("/").filter(Boolean);
+      const name = parts.pop();
+      if (!name) continue;
+      let node = root;
+      let prefix = "";
+      for (const part of parts) {
+        prefix = prefix ? `${prefix}/${part}` : part;
+        let child = node.dirs.get(part);
+        if (!child) {
+          child = { name: part, path: prefix, dirs: new Map(), files: [], total: 0 };
+          node.dirs.set(part, child);
+        }
+        node = child;
+      }
+      node.files.push(file);
+    }
+    annotate(root);
+    return root;
+  }
+
+  /** File totals per subtree, so a folder row can say how much it covers. */
+  function annotate(node) {
+    let total = node.files.length;
+    for (const child of node.dirs.values()) total += annotate(child);
+    node.total = total;
+    return total;
+  }
+
+  /** Every file below a directory, its own first. Drives the cascade. */
+  function filesUnder(node, out = []) {
+    for (const file of node.files) out.push(file);
+    for (const child of node.dirs.values()) filesUnder(child, out);
+    return out;
+  }
+
+  /** Directories before files, both in IDEA's case-insensitive natural order. */
+  function treeEntries(node) {
+    const dirs = [...node.dirs.values()]
+      .sort((a, b) => a.name.localeCompare(b.name, undefined, { sensitivity: "base", numeric: true }))
+      .map((dir) => ({ kind: "dir", dir }));
+    const files = [...node.files]
+      .sort((a, b) => splitPath(a.path).name.localeCompare(splitPath(b.path).name, undefined, { sensitivity: "base", numeric: true }))
+      .map((file) => ({ kind: "file", file }));
+    return [...dirs, ...files];
+  }
+
+  /**
+   * IDEA's "Compact Middle Directories": a chain of folders whose parents hold
+   * nothing else is drawn as one row, `src/main/java` instead of three.
+   */
+  function compactDir(dir, enabled) {
+    let node = dir;
+    let label = dir.name;
+    while (enabled && node.files.length === 0 && node.dirs.size === 1) {
+      [node] = node.dirs.values();
+      label += `/${node.name}`;
+    }
+    return { label, node };
+  }
+
+  // ------------------------------------------------------------ branches ---
+  /**
+   * The branch widget IDEA puts in the status bar: current branch, ahead and
+   * behind counts, and a popup with the branch actions. Shared by both tool
+   * windows so the two never disagree about the repository.
+   */
+  function mountBranchWidget(container, ctx) {
+    const chip = h("button", { class: "branch-chip", type: "button" });
+    container.append(chip);
+    let repo = null;
+
+    function paint() {
+      PIG.clear(chip);
+      chip.append(icon("branch", 13));
+      const branch = repo?.branch;
+      // With no repository there is no branch to name, and "HEAD" would be a
+      // lie. Say nothing and let the empty state explain.
+      if (!repo) {
+        chip.append(h("span", { class: "name muted", text: "—" }));
+        chip.title = t("notARepository");
+        return;
+      }
+      const name = branch?.head ?? (branch?.detached ? `detached @ ${String(branch?.oid ?? "").slice(0, 8)}` : t("head"));
+      chip.append(h("span", { class: "name", text: name }));
+      if (branch?.ahead || branch?.behind) {
+        const tracking = h("span", { class: "tracking" });
+        if (branch.ahead) {
+          tracking.append(h("span", { class: "ahead", title: `${branch.ahead} outgoing` }, [`↑${branch.ahead}`]));
+        }
+        if (branch.behind) {
+          tracking.append(h("span", { class: "behind", title: `${branch.behind} incoming` }, [`↓${branch.behind}`]));
+        }
+        chip.append(tracking);
+      }
+      chip.title = branch?.upstream
+        ? `${name} → ${branch.upstream}`
+        : `${name} — no upstream`;
+    }
+
+    async function openMenu() {
+      const result = await invoke("git/branches");
+      const branches = result.branches ?? [];
+      const locals = branches.filter((branch) => !branch.remote);
+      const remotes = branches.filter((branch) => branch.remote);
+      const branch = repo?.branch;
+
+      const items = [
+        { type: "label", label: t("localBranches") },
+        ...locals.map((entry) => ({
+          label: entry.current ? `${entry.name}  ●` : entry.name,
+          title: entry.subject,
+          onSelect: async () => {
+            if (entry.current) return;
+            const checkedOut = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name: entry.name }));
+            report(checkedOut, `${t("checkout")}: ${entry.name}`);
+            ctx.onChanged?.();
+          },
+        })),
+      ];
+      if (remotes.length) {
+        items.push({ type: "separator" });
+        items.push({ type: "label", label: t("remoteBranches") });
+        for (const entry of remotes.slice(0, 40)) {
+          items.push({
+            label: entry.name,
+            title: entry.subject,
+            onSelect: async () => {
+              const checkedOut = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name: entry.name, startPoint: entry.name, track: true }));
+              report(checkedOut, `${t("checkout")}: ${entry.name}`);
+              ctx.onChanged?.();
+            },
+          });
+        }
+      }
+      items.push({ type: "separator" });
+      items.push({
+        label: t("newBranch"),
+        onSelect: async () => {
+          const name = await dialog({
+            title: t("newBranch"),
+            message: t("newBranch"),
+            input: { value: "", placeholder: "feature/…" },
+            confirmLabel: t("newBranch"),
+          });
+          if (!name) return;
+          const created = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name, create: true }));
+          report(created, `${t("newBranch")}: ${name}`);
+          ctx.onChanged?.();
+        },
+      });
+      // Note: 与 Git 视图同套分支操作的子集——提交视图的弹层没有右键位置，合并/变基/删除先用二级弹层选分支，改名/upstream 直接作用于当前分支 — 见 .agents/notes/implemented/feature/2026-09-14-git-operations-parity.md
+      items.push({
+        label: `${t("mergeIntoCurrent")}…`,
+        disabled: !locals.length,
+        onSelect: () => pickBranch(t("mergeIntoCurrent"), async (entry) => {
+          const confirmed = await dialog({
+            title: t("mergeTitle"),
+            message: `${entry.name} → ${branch?.head ?? t("head")}`,
+            confirmLabel: t("merge"),
+          });
+          if (!confirmed) return;
+          const result = await PIG.runWithPill(t("merge"), () => invoke("git/merge", { ref: entry.name }));
+          reportMergeRebase(result, t("merge"), entry.name, t("mergeConflicts"));
+          ctx.onChanged?.();
+        }),
+      });
+      items.push({
+        label: `${t("rebaseOnto")}…`,
+        disabled: !locals.length,
+        onSelect: () => pickBranch(t("rebaseOnto"), async (entry) => {
+          const confirmed = await dialog({
+            title: t("rebaseTitle"),
+            message: `${branch?.head ?? t("head")} → ${entry.name}`,
+            confirmLabel: t("rebase"),
+            danger: true,
+          });
+          if (!confirmed) return;
+          const result = await PIG.runWithPill(t("rebase"), () => invoke("git/rebase", { ref: entry.name }));
+          reportMergeRebase(result, t("rebase"), entry.name, t("rebaseConflicts"));
+          ctx.onChanged?.();
+        }),
+      });
+      items.push({
+        label: t("renameBranch"),
+        disabled: !branch?.head,
+        onSelect: async () => {
+          const name = await dialog({
+            title: t("renameTitle"),
+            message: branch?.head ?? "",
+            input: { value: branch?.head ?? "" },
+            confirmLabel: t("renameBranch"),
+          });
+          if (!name || name === branch?.head) return;
+          report(await invoke("git/branch-rename", { old: branch.head, new: name }), `${t("renameBranch")}: ${name}`);
+          ctx.onChanged?.();
+        },
+      });
+      items.push({
+        label: t("setUpstream"),
+        disabled: !branch?.head,
+        onSelect: async () => {
+          const upstream = await dialog({
+            title: t("setUpstreamTitle"),
+            message: branch?.head ?? "",
+            input: { value: branch?.upstream ?? "" },
+            confirmLabel: t("setUpstream"),
+          });
+          if (!upstream) return;
+          report(await invoke("git/branch-upstream", { name: branch.head, upstream }), `${t("setUpstream")}: ${upstream}`);
+          ctx.onChanged?.();
+        },
+      });
+      if (branch?.upstream) {
+        items.push({
+          label: t("unsetUpstream"),
+          onSelect: async () => {
+            report(await invoke("git/branch-upstream", { name: branch.head, unset: true }), t("unsetUpstream"));
+            ctx.onChanged?.();
+          },
+        });
+      }
+      items.push({
+        label: `${t("deleteBranch")}…`,
+        disabled: locals.filter((entry) => !entry.current).length === 0,
+        onSelect: () => pickBranch(t("deleteBranch"), async (entry) => {
+          const confirmed = await dialog({
+            title: t("deleteBranchTitle"),
+            message: entry.name,
+            confirmLabel: t("deleteBranch"),
+            danger: true,
+          });
+          if (!confirmed) return;
+          let result = await invoke("git/branch-delete", { name: entry.name });
+          if (!result.ok && /not fully merged/i.test(String(result.message ?? ""))) {
+            const force = await dialog({
+              title: t("deleteBranchTitle"),
+              message: result.message,
+              confirmLabel: t("deleteBranch"),
+              danger: true,
+            });
+            if (force) result = await invoke("git/branch-delete", { name: entry.name, force: true });
+          }
+          report(result, `${t("deleteBranch")}: ${entry.name}`);
+          ctx.onChanged?.();
+        }, true),
+      });
+      function pickBranch(title, run, excludeCurrent) {
+        popup(chip, [
+          { type: "label", label: title },
+          ...locals
+            .filter((entry) => !excludeCurrent || !entry.current)
+            .map((entry) => ({
+              label: entry.current ? `${entry.name}  ●` : entry.name,
+              title: entry.subject,
+              disabled: !excludeCurrent && entry.current,
+              onSelect: () => run(entry),
+            })),
+        ]);
+      }
+      function reportMergeRebase(result, action, name, conflictsHint) {
+        if (result?.ok) {
+          report(result, `${action}: ${name}`);
+          return;
+        }
+        const text = String(result?.message ?? "");
+        const conflicted = /CONFLICT|could not apply|Automatic merge failed|fix conflicts/i.test(
+          `${result?.stdout ?? ""}\n${result?.stderr ?? ""}\n${text}`,
+        );
+        toast(`${action}: ${text}${conflicted ? `\n\n${conflictsHint}` : ""}`, "error");
+      }
+      items.push({ type: "separator" });
+      items.push({
+        label: t("fetch"),
+        onSelect: async () => {
+          report(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch")), t("fetch"));
+          ctx.onChanged?.();
+        },
+      });
+      items.push({
+        label: t("pull"),
+        onSelect: async () => {
+          const result = await PIG.runWithPill(t("pulling"), () => invoke("git/pull"));
+          report(result, t("pull"));
+          ctx.onChanged?.();
+        },
+      });
+      items.push({
+        label: t("push"),
+        onSelect: async () => {
+          // No remote/branch: the engine pushes where the branch actually
+          // tracks. Sending `origin` plus the local name pushed a new branch to
+          // `origin` for anything tracking elsewhere, while the ↑/↓ chip kept
+          // counting against the real upstream.
+          const result = await PIG.runWithPill(t("pushing"), () => invoke("git/push", { setUpstream: !branch?.upstream }));
+          report(result, t("push"));
+          // A refusal means the remote moved on, so the chip is stale exactly
+          // when it matters most.
+          await PIG.refreshTrackingRefs(result);
+          ctx.onChanged?.();
+        },
+      });
+      items.push({
+        label: t("forcePush"),
+        // A lease needs a baseline to compare against, so it is only offered
+        // once the branch has an upstream at all.
+        disabled: !branch?.upstream,
+        onSelect: async () => {
+          const confirmed = await dialog({
+            title: t("forcePushTitle"),
+            message: PIG.tf("forcePushBody", {
+              // The remote and the branch it holds: `{{branch}}` is the local
+              // name, because "origin/feature/x on origin" says it twice.
+              branch: branch?.head ?? "",
+              remote: String(branch?.upstream ?? "").split("/")[0],
+            }),
+            confirmLabel: t("forcePush"),
+            danger: true,
+          });
+          if (confirmed === null) return;
+          const result = await PIG.runWithPill(t("pushing"), () => invoke("git/push", { forceWithLease: true }));
+          report(result, t("forcePush"));
+          await PIG.refreshTrackingRefs(result);
+          ctx.onChanged?.();
+        },
+      });
+      items.push({ type: "separator" });
+      items.push({
+        label: t("stashChanges"),
+        disabled: !repo || (!repo.staged.length && !repo.unstaged.length && !repo.untracked.length),
+        onSelect: async () => {
+          const message = await dialog({
+            title: t("stashChanges"),
+            message: t("stashMessage"),
+            input: { value: "" },
+            confirmLabel: t("stash"),
+          });
+          if (message === null) return;
+          report(await PIG.runWithPill(t("stashing"), () => invoke("git/stash", { action: "push", message })), t("stash"));
+          ctx.onChanged?.();
+        },
+      });
+      const stashes = repo?.stashes ?? [];
+      if (stashes.length) {
+        items.push({ type: "label", label: t("stash") });
+        for (const stash of stashes.slice(0, 10)) {
+          items.push({
+            label: `${stash.ref}  ${stash.subject ?? ""}`.trim(),
+            onSelect: () => popup(chip, [
+              { type: "label", label: `${stash.ref}  ${stash.subject ?? ""}`.trim() },
+              {
+                label: t("applyStash"),
+                onSelect: async () => {
+                  report(await PIG.runWithPill(t("unstashing"), () => invoke("git/stash", { action: "apply", ref: stash.ref })), `${t("applyStash")}: ${stash.ref}`);
+                  ctx.onChanged?.();
+                },
+              },
+              {
+                label: t("unstash"),
+                onSelect: async () => {
+                  report(await PIG.runWithPill(t("unstashing"), () => invoke("git/stash", { action: "pop", ref: stash.ref })), t("unstash"));
+                  ctx.onChanged?.();
+                },
+              },
+              { type: "separator" },
+              {
+                label: t("dropStash"),
+                onSelect: async () => {
+                  const confirmed = await dialog({
+                    title: t("dropStashConfirm"),
+                    message: `${stash.ref}  ${stash.subject ?? ""}`.trim(),
+                    confirmLabel: t("dropStash"),
+                    danger: true,
+                  });
+                  if (!confirmed) return;
+                  report(await invoke("git/stash", { action: "drop", ref: stash.ref }), `${t("dropStash")}: ${stash.ref}`);
+                  ctx.onChanged?.();
+                },
+              },
+            ]),
+          });
+        }
+      }
+      popup(chip, items);
+    }
+
+    chip.addEventListener("click", openMenu);
+
+    async function loadRepo() {
+      const result = await invoke("git/repo");
+      if (result.ok) {
+        repo = result;
+        paint();
+      }
+    }
+
+    return {
+      update(nextRepo) {
+        repo = nextRepo;
+        paint();
+      },
+      refresh: loadRepo,
+    };
+  }
+
+  /**
+   * The one report path for both tool windows. `PIG.reportSync` keeps the
+   * boolean contract this file has always used at its call sites, so a caller
+   * can still write `if (report(...)) await refresh()`.
+   */
+  function report(result, action) {
+    return PIG.reportSync(result, action);
+  }
+
+  function firstLine(value) {
+    return String(value ?? "").split("\n").map((line) => line.trim()).find(Boolean) ?? "";
+  }
+
+  // ---------------------------------------------------------- commit view ---
+  function mount(root, options) {
+     const state = {
+       repo: null,
+       error: null,
+       busy: false,
+      // What the toolbar is waiting on (null | "refresh" | "fetch" | "push"):
+      // the active button spins, the others are disabled, double clicks land
+      // on the guard instead of spawning a second process.
+      syncing: null,
+      // What the commit button is waiting on (null | "commit" | "commit-push").
+      busyKind: null,
+       selection: null,
+       diff: null,
+       diffUnified: true,
+       showWhitespaces: false,
+       showLineNumbers: false,
+       ignoreWhitespace: false,
+       message: "",
+       amend: false,
+       signoff: false,
+       messages: [],
+       // Both keyed by group, because collapsing `src/` in Unversioned must not
+       // collapse it in Unstaged too.
+       collapsed: new Set(),
+       filter: "",
+       // IDEA's view options for the changes tree, persisted with the rest.
+       groupByDirectory: true,
+       compactDirs: true,
+       changesWidth: 45,
+       generating: false,
+       commitModelKey: "",
+       // Empty means `auto`; the plugin resolves it against the repository.
+       commitLang: "",
+      // Aggregated submodule statuses (IDEA-like): each entry is
+      // `{ rel, root, name, kind, status }` where `status` is a `readStatus`
+      // result for that submodule. The parent's `git status` only prints one
+      // gitlink line per submodule, so without this the files changed inside
+      // `backend` are invisible while the selector points at the parent.
+      // In sibling mode the same slots hold the other sibling repos.
+      submodules: [],
+      subLoading: false,
+      // Last `git/repos` answer: decides whether the toolbar Push opens the
+      // multi-repo dialog instead of pushing the current repo directly.
+      allRepos: [],
+     };
+
+    // The repository chip comes first, as it does in IDEA: which repository —
+    // and only then which branch of it.
+    const repoHolder = h("div", { style: { display: "contents" } });
+    const branchHolder = h("div", { style: { display: "contents" } });
+    const toolbar = h("div", { class: "toolbar" });
+    const changesList = h("div", { class: "scroll list" });
+    const diffHost = h("div", { class: "diff" });
+    const diffHeader = h("div", { class: "pane-header" });
+    const messageInput = h("textarea", {
+      placeholder: t("commitMessage"),
+      spellcheck: "false",
+      oninput: (event) => { state.message = event.target.value; paintCommit(); },
+    });
+    const amendBox = h("input", { type: "checkbox", onchange: (event) => { state.amend = event.target.checked; paintCommit(); } });
+    const signoffBox = h("input", { type: "checkbox", onchange: (event) => { state.signoff = event.target.checked; } });
+    const summary = h("span", { class: "commit-summary" });
+    const commitButton = h("button", { class: "primary", type: "button", text: t("commit"), onclick: () => commit(false) });
+    // A bordered (not primary) menu half keeps the split button readable while
+    // the Commit half is disabled for a missing message.
+    const commitMenuButton = h("button", { class: "bordered icon", type: "button", "aria-label": t("commitAndPush"), title: t("commitAndPush"), onclick: openCommitMenu }, [icon("chevronDown", 13)]);
+    // Drafting a message takes a round trip, so the control reports its own
+    // state rather than leaving the click looking ignored.
+    const generateButton = h("button", {
+      class: "bordered",
+      type: "button",
+      onclick: () => { generate().catch(() => {}); },
+    }, [icon("sparkles", 13), h("span", { class: "gen-label", text: t("generateMessage") })]);
+    const generateMenuButton = h("button", {
+      class: "bordered icon",
+      type: "button",
+      "aria-label": t("generateOptions"),
+      // The element is captured here on purpose: `event.currentTarget` is dead
+      // by the time the model list has been fetched.
+      onclick: (event) => { openGenerateMenu(event.currentTarget).catch(() => {}); },
+    }, [icon("chevronDown", 12)]);
+    const generateGroup = h("div", { class: "split-button" }, [generateButton, generateMenuButton]);
+
+    const changesHeader = h("div", { class: "pane-header" });
+
+    const changesWidth = h("div", { class: "commit-changes column" });
+    const diffColumn = h("div", { class: "commit-diff column" });
+    const divider = h("div", { class: "divider-v draggable", title: "" });
+
+    /**
+     * The repository this window is showing, as the repository list names it:
+     * "." is the workspace's own, anything else sits inside it.
+     */
+    function repositoryLabel() {
+      const entry = state.repo?.repo;
+      if (!entry) return "";
+      return entry.rel && entry.rel !== "." ? entry.rel : entry.name;
+    }
+     /**
+      * Aggregated-view contexts: the current repo is ".", each dirty submodule
+      * is its `rel` (e.g. "backend"). A context carries the absolute root helm
+      * actions at, plus the repo object `workspaceRelative` needs for open/reveal.
+      */
+     function rootCtx() {
+       return {
+         rk: ".",
+         root: state.repo?.repo?.root ?? null,
+         label: repositoryLabel(),
+         repoObj: state.repo ?? null,
+         status: state.repo ?? null,
+         kind: "root",
+         branch: state.repo?.branch ?? null,
+       };
+     }
+     function subCtx(entry) {
+       return {
+         rk: entry.rel,
+         root: entry.root,
+         label: entry.rel,
+         repoObj: { repo: entry.status?.repo ?? { root: entry.root } },
+         status: entry.status,
+         kind: entry.kind ?? "submodule",
+         branch: entry.status?.branch ?? null,
+       };
+     }
+     function allCtxs() {
+       const out = [];
+       if (state.repo) out.push(rootCtx());
+       for (const entry of state.submodules ?? []) out.push(subCtx(entry));
+       return out;
+     }
+     function branchNameOf(branch) {
+       if (!branch) return "";
+       if (branch.head) return branch.head;
+       if (branch.detached) return `detached @ ${String(branch.oid ?? "").slice(0, 8)}`;
+       return "";
+     }
+     function countsOf(status) {
+       if (!status) return { staged: 0, unstaged: 0, untracked: 0, conflicted: 0 };
+       return {
+         staged: status.staged?.length ?? 0,
+         unstaged: status.unstaged?.length ?? 0,
+         untracked: status.untracked?.length ?? 0,
+         conflicted: status.conflicted?.length ?? 0,
+       };
+     }
+     function totalCounts() {
+       const total = { staged: 0, unstaged: 0, untracked: 0, conflicted: 0 };
+       for (const ctx of allCtxs()) {
+         const counts = countsOf(ctx.status);
+         total.staged += counts.staged;
+         total.unstaged += counts.unstaged;
+         total.untracked += counts.untracked;
+         total.conflicted += counts.conflicted;
+       }
+       return total;
+     }
+     /** Repos with staged files, submodules first so the parent pointer lands last. */
+     function stagedTargets() {
+       const targets = [];
+       for (const entry of state.submodules ?? []) {
+         if ((entry.status?.staged?.length ?? 0) > 0) targets.push(subCtx(entry));
+       }
+       if ((state.repo?.staged?.length ?? 0) > 0) targets.push(rootCtx());
+       return targets;
+     }
+     async function switchToSubmodule(root) {
+       const switched = await invoke("git/select-repo", { root });
+       if (!switched?.ok) {
+         toast(PIG.errorText(switched), "error");
+         return;
+       }
+       forgoRepositoryState();
+       paintAll();
+       loadRepositories().then(() => refresh()).catch(() => {});
+     }
+
+    let branchWidget = null;
+    let repoWidget = null;
+
+    // --------------------------------------------------------- rendering --
+    function paintToolbar() {
+      PIG.clear(toolbar);
+      toolbar.append(repoHolder);
+      toolbar.append(branchHolder);
+      toolbar.append(h("div", { class: "toolbar-separator" }));
+      // A sync button that is running spins in place; its siblings go
+      // disabled so a double click cannot spawn a second process.
+      const syncing = state.syncing ?? null;
+      const syncDisabled = Boolean(syncing || state.busy);
+      const syncButton = (name, title, kind, onClick) => {
+        const button = iconButton(name, title, onClick, { disabled: syncDisabled });
+        if (syncing === kind) {
+          button.classList.add("busy");
+          button.append(PIG.spinner(false));
+        }
+        return button;
+      };
+      toolbar.append(syncButton("refresh", tip("refresh", KEYS.refresh), "refresh", async () => {
+        if (state.syncing || state.busy) return;
+        state.syncing = "refresh";
+        paintToolbar();
+        try {
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("fetch", t("fetch"), "fetch", async () => {
+        if (state.syncing || state.busy) return;
+        state.syncing = "fetch";
+        paintToolbar();
+        try {
+          const result = await invoke("git/fetch");
+          if (report(result, t("fetch"))) await refresh();
+          else paintToolbar();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("push", t("push"), "push", async () => {
+        if (state.syncing || state.busy) return;
+        // Note: 多仓走 Push 对话框（逐仓列出去向与结果），单仓保持直推 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+        const multi = (state.allRepos?.length ?? 0) > 1 || (state.submodules?.length ?? 0) > 0;
+        if (multi) {
+          await PIG.openPushDialog({ onPushed: async () => { await refresh(); } });
+          await refresh();
+          return;
+        }
+        // The engine resolves the target from the branch's own upstream; see
+        // the push item in the branch menu.
+        state.syncing = "push";
+        paintToolbar();
+        try {
+          const result = await invoke("git/push", { setUpstream: !state.repo?.branch?.upstream });
+          report(result, t("push"));
+          await PIG.refreshTrackingRefs(result);
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(h("div", { class: "toolbar-separator" }));
+      toolbar.append(iconButton("plus", tip("stageFile", KEYS.stage), () => stageSelected(true), { disabled: syncDisabled || !canStageSelected() }));
+      toolbar.append(iconButton("minus", t("unstageFile"), () => stageSelected(false), { disabled: syncDisabled || !canUnstageSelected() }));
+      toolbar.append(iconButton("rollback", tip("rollback", KEYS.rollback), rollbackSelected, { disabled: syncDisabled || !state.selection }));
+      toolbar.append(h("div", { class: "toolbar-spacer" }));
+      toolbar.append(
+        h("span", {
+          style: { fontSize: "11px", color: "var(--fg-muted)" },
+          // A nested repository is named by where it sits; its bare basename
+          // would not say which one this window is showing.
+          text: repositoryLabel(),
+        }),
+      );
+    }
+
+     function paintChangesHeader() {
+       PIG.clear(changesHeader);
+       const counts = totalCounts();
+       const total = counts.staged + counts.unstaged + counts.untracked + counts.conflicted;
+       changesHeader.append(h("span", { text: t("changes") }));
+       changesHeader.append(h("span", { class: "muted", text: total ? `${total}` : "" }));
+       if (state.subLoading) changesHeader.append(h("span", { class: "muted", text: "…" }));
+      changesHeader.append(h("div", { class: "toolbar-spacer" }));
+      // IDEA puts this search in the changes pane's own title bar: typing is how
+      // you find one file among seventy-four, and the tree below narrows to the
+      // matches while keeping their folders.
+      const field = h("input", {
+        type: "search",
+        class: "changes-filter",
+        value: state.filter,
+        placeholder: t("filterChanges"),
+        title: t("filterChanges"),
+        oninput: (event) => { state.filter = event.target.value; paintChanges(); },
+        onkeydown: (event) => {
+          if (event.key !== "Escape" || !state.filter) return;
+          event.stopPropagation();
+          state.filter = "";
+          paintChanges();
+        },
+      });
+      changesHeader.append(h("span", { class: "search-field" }, [icon("search", 12), field]));
+      changesHeader.append(iconButton("gear", t("viewOptions"), (event) => {
+        popup(event.currentTarget, [
+          { type: "label", label: t("viewOptions") },
+          { label: t("groupByDirectory"), checked: state.groupByDirectory, onSelect: () => setViewOption("groupByDirectory", !state.groupByDirectory) },
+          // Only meaningful inside a folder tree.
+          { label: t("compactMiddleDirs"), checked: state.compactDirs, disabled: !state.groupByDirectory, onSelect: () => setViewOption("compactDirs", !state.compactDirs) },
+          { type: "separator" },
+          { label: t("collapseAll"), onSelect: () => { collapseAll(); } },
+          { type: "separator" },
+          { label: t("stageAllChanges"), onSelect: () => setAllInclusion(true) },
+          { label: t("unstageAllChanges"), onSelect: () => setAllInclusion(false) },
+        ]);
+      }, { size: 13 }));
+    }
+
+    function setViewOption(key, value) {
+      state[key] = value;
+      savePrefs();
+      paintChanges();
+    }
+
+    /** Collapse every group, repository and folder — IDEA's "Collapse All". */
+    function collapseAll() {
+      for (const group of GROUPS) state.collapsed.add(`group:${group.id}`);
+      for (const ctx of allCtxs()) {
+        for (const group of GROUPS) state.collapsed.add(`repo:${group.id}:${ctx.rk}`);
+      }
+      for (const ctx of allCtxs()) {
+        for (const group of GROUPS) {
+          for (const file of ctx.status?.[group.id] ?? []) {
+            const parts = file.path.split("/");
+            parts.pop();
+            let prefix = "";
+            for (const part of parts) {
+              prefix = prefix ? `${prefix}/${part}` : part;
+              state.collapsed.add(dirKey(ctx.rk, group.id, prefix));
+            }
+          }
+        }
+      }
+      paintChanges();
+    }
+
+     /**
+      * Stage (or unstage) every visible file across the current repo and all
+      * aggregated submodules. This fills the view-options menu entries that
+      * previously called a function that did not exist.
+      */
+     async function setAllInclusion(target) {
+       const jobs = [];
+       const filter = state.filter.trim().toLowerCase();
+       for (const ctx of allCtxs()) {
+         const want = target ? "staged" : "worktree";
+         const paths = [];
+         for (const group of GROUPS) {
+           if (group.id === "conflicted") continue;
+           for (const file of ctx.status?.[group.id] ?? []) {
+             if (filter && !file.path.toLowerCase().includes(filter)) continue;
+             const stateName = group.id === "staged" ? "staged" : "worktree";
+             if (stateName === want) continue;
+             paths.push(file.path);
+           }
+         }
+         if (!paths.length) continue;
+         const payload = { paths };
+         if (ctx.root) payload.repoRoot = ctx.root;
+         jobs.push(invoke(target ? "git/stage" : "git/unstage", payload));
+       }
+       if (!jobs.length) return;
+       const results = await Promise.all(jobs);
+       const failed = results.find((result) => !result?.ok);
+       if (failed) toast(PIG.errorText(failed), "error");
+       await refresh();
+     }
+
+    /**
+     * One checkbox for a set of files. Folder rows pass every file beneath them,
+     * which is the cascade: one click includes or excludes a whole subtree.
+     *
+     * Deliberately binary — no tri-state dash. A dash would mean "partially
+     * selected", and that state cannot exist here: a row's group *is* its staged
+     * state (Staged ⇔ in the index), so checking any file moves it to the other
+     * group rather than leaving a half-checked folder behind. Drawing a dash
+     * anyway would be a claim the user could not reconcile with the list. A file
+     * that genuinely is half in the index (`MM`: staged, with further unstaged
+     * changes) says so with a badge on its own row.
+     */
+    function rowCheckbox({ checked, title, onToggle }) {
+      const box = h("input", { type: "checkbox", title, onclick: (event) => event.stopPropagation() });
+      box.checked = checked;
+      box.addEventListener("change", async (event) => {
+        const next = event.target.checked;
+        event.target.disabled = true;
+        try {
+          await onToggle(next);
+        } finally {
+          event.target.disabled = false;
+        }
+      });
+      return box;
+    }
+
+    /**
+     * The checkbox is IDEA's "include into commit", which with a real index
+     * behind it means: selected = staged. Reaching `target` therefore means
+     * staging what is not in the commit yet and unstaging what is in it and
+     * should not be — and leaving alone whatever already matches, because a
+     * no-op `git add` still costs a process.
+     */
+     function applyInclusion(files, target, ctx) {
+       const want = target ? "staged" : "worktree";
+       const paths = files.filter((file) => file.state !== want).map((file) => file.path);
+       if (!paths.length) return Promise.resolve();
+       const payload = { paths };
+       if (ctx?.root) payload.repoRoot = ctx.root;
+       return invoke(target ? "git/stage" : "git/unstage", payload).then(async (result) => {
+         if (!result.ok) {
+           toast(PIG.errorText(result), "error");
+           await refresh();
+           return;
+         }
+         // A folder can hold a submodule. Staging one records the commit it
+         // points at and anything dirty inside it stays dirty, so the row comes
+         // back unselected even though the call succeeded. Say which of the two
+         // happened rather than letting the checkbox look broken.
+         // (Submodule inner files render as their own section now, so this
+         // branch only fires for the parent's own gitlink row.)
+         const stuck = target && (!ctx || ctx.rk === ".") ? files.filter((file) => file.insideSubmodule) : [];
+         await refresh();
+         if (!stuck.length) return;
+         const staged = (state.repo?.staged ?? []).map((entry) => entry.path);
+         if (stuck.some((file) => staged.includes(file.path))) toast(t("submoduleStagedHint"), "info");
+         else toast(PIG.tf("submoduleInside", { path: stuck[0].path }), "error");
+       });
+     }
+
+     function isSelected(rk, group, filePath) {
+       const sel = state.selection;
+       return Boolean(sel) && sel.rk === rk && sel.g === group && sel.p === filePath;
+     }
+     function fileRow(group, file, depth, fullPath, ctx) {
+       const rk = ctx?.rk ?? ".";
+       const selected = isSelected(rk, group, file.path);
+       const { name } = splitPath(file.path);
+
+       return h("div", {
+         class: "tree-row",
+         role: "option",
+         tabindex: "0",
+         "aria-selected": selected ? "true" : "false",
+         title: ctx && ctx.rk !== "." ? `${ctx.rk}/${file.path}` : file.path,
+         onclick: () => select({ rk, g: group, p: file.path, root: ctx?.root ?? null }),
+         oncontextmenu: (event) => {
+           event.preventDefault();
+           select({ rk, g: group, p: file.path, root: ctx?.root ?? null });
+           fileContextMenu(event.currentTarget, group, file, ctx);
+         },
+       }, [
+         h("span", { class: "indent", style: { width: `${depth * 12}px` } }),
+         rowCheckbox({
+           checked: group === "staged",
+           title: t("includeIntoCommit"),
+           onToggle: (next) => applyInclusion([{ ...file, state: group === "staged" ? "staged" : "worktree" }], next, ctx),
+         }),
+         // Same slots as a folder row — disclosure, icon — so the two line up and
+         // the status letter sits where a folder's arrow is. Without it every
+         // file name would start to the left of the folder it lives in.
+         h("span", { class: "indent", style: { width: "10px" } }),
+         h("span", { class: "status-cell", style: { color: statusColor(file.status) }, text: file.status }),
+         // The directory is the tree now. Repeating it as a grey tail answered
+         // "which folder" worse than the hierarchy does, and the narrow column
+         // clipped it anyway.
+         h("span", { class: "name", style: { color: statusColor(file.status) }, text: name }),
+         // No "partly staged" badge. A file with an index change *and* a further
+         // worktree change already says so the only way Git says it: the same
+         // path is listed here and in the other group, each row carrying its own
+         // status letter. Naming that state separately would invent a concept
+         // the user cannot see in `git status` or in any other Git client.
+         // Inside the tree the folders already answered "where is this", so only
+         // the Flat view repeats the path — and there it is essential, because
+         // nothing else identifies the file. The column is narrow, so the tail
+         // ellipsises and the tooltip keeps the whole path readable.
+         fullPath && file.path !== name
+           ? h("span", { class: "path", title: fullPath, text: fullPath })
+           : null,
+         // A submodule deserves a visible mark: its checkbox means something
+         // different from every other row's.
+         file.submodule
+           ? h("span", { class: "badge", text: t("submoduleBadge"), title: submoduleTooltip(file) })
+           : null,
+       ]);
+     }
+
+
+    /** Why a submodule row behaves differently, in the user's language. */
+    function submoduleTooltip(file) {
+      if (file.insideSubmodule) return PIG.tf("submoduleInside", { path: file.path });
+      return t("submoduleStagedHint");
+    }
+
+    /**
+     * A folder row: a disclosure arrow, the folder, a count, and a checkbox
+     * that reaches every file below it, nested folders included. Checking it
+     * stages the whole subtree; unchecking it unstages the whole subtree. That
+     * cascade is the interaction a flat list cannot offer.
+     *
+     * The checkbox stays binary, and its meaning is "everything under here is in
+     * the commit": ticked in Staged, cleared in Unstaged. A file that is only
+     * half in the index (`MM`) is flagged by the folder carrying a "partly
+     * staged" badge rather than by a dash on the box — a dash would read as
+     * "some of this folder is selected", which is a state this list cannot
+     * represent, because a row's group *is* its staged state.
+     */
+     function dirKey(rk, group, dirPath) {
+       return `dir:${rk}:${group}:${dirPath}`;
+     }
+     function dirRow(group, dir, depth, label, ctx) {
+       const rk = ctx?.rk ?? ".";
+       const files = filesUnder(dir);
+       const total = files.length;
+       const key = dirKey(rk, group, dir.path);
+       const open = !state.collapsed.has(key);
+       const action = group === "staged" ? t("unincludeFolder") : t("includeFolder");
+       return h("div", {
+         class: "tree-row dir-row",
+         role: "treeitem",
+         "aria-expanded": open ? "true" : "false",
+         title: ctx && ctx.rk !== "." ? `${ctx.rk}/${dir.path}` : dir.path,
+         onclick: () => {
+           if (state.collapsed.has(key)) state.collapsed.delete(key);
+           else state.collapsed.add(key);
+           paintChanges();
+         },
+       }, [
+         h("span", { class: "indent", style: { width: `${depth * 12}px` } }),
+         rowCheckbox({
+           checked: group === "staged",
+           title: action,
+           onToggle: (next) => applyInclusion(files, next, ctx),
+         }),
+         h("span", { class: "disclosure", "data-open": open ? "true" : "false" }, [icon("chevronRight", 11)]),
+         h("span", { class: "row-icon" }, [icon("folder", 13)]),
+         h("span", { class: "name", text: label }),
+         h("span", { class: "count", text: `${total}` }),
+       ]);
+     }
+
+
+     /** Depth-first render of one change list. Returns the rows, so the caller
+         can append them in one pass. */
+     function treeRows(group, node, depth, ctx) {
+       const rows = [];
+       const rk = ctx?.rk ?? ".";
+       for (const entry of treeEntries(node)) {
+         if (entry.kind === "file") {
+           rows.push(fileRow(group, entry.file, depth, null, ctx));
+           continue;
+         }
+         // A compacted row stands for a chain of folders, so it is the deepest
+         // node in that chain that owns the expanded state and the children.
+         const { label, node: target } = compactDir(entry.dir, state.compactDirs);
+         rows.push(dirRow(group, target, depth, label, ctx));
+         if (state.collapsed.has(dirKey(rk, group, target.path))) continue;
+         rows.push(...treeRows(group, target, depth + 1, ctx));
+       }
+       return rows;
+     }
+
+     /**
+      * The same change list without its folders: IDEA's Flat view. Files are
+      * listed by full repository path, which is the whole point of leaving the
+      * tree — nothing is identified by position any more.
+      */
+    function flatRows(group, files, ctx, depth) {
+      return [...files]
+        .sort((a, b) => a.path.localeCompare(b.path, undefined, { sensitivity: "base", numeric: true }))
+        .map((file) => fileRow(group, file, depth ?? 0, ctx && ctx.rk !== "." ? `${ctx.rk}/${file.path}` : file.path, ctx));
+    }
+
+    /**
+     * IDEA's colored square per repository. Colors are dealt from the sorted
+     * repo list with linear probing, so every visible repo gets a distinct
+     * square while a repo keeps its color as long as the repo set is unchanged
+     * (a plain hash collides too often with 5 repos on 8 colors).
+     */
+    const REPO_COLORS = ["#e5534b", "#3fb950", "#ab7df8", "#39c5cf", "#d29922", "#f778ba", "#4a86c8", "#d1743a"];
+
+    function repoColorMap(ctxs) {
+      const sorted = [...ctxs].sort((a, b) => a.label.localeCompare(b.label, undefined, { sensitivity: "base", numeric: true }));
+      const used = new Set();
+      const map = new Map();
+      for (const ctx of sorted) {
+        let hash = 0;
+        for (const char of String(ctx.rk ?? "")) hash = (hash * 31 + char.charCodeAt(0)) | 0;
+        let index = Math.abs(hash) % REPO_COLORS.length;
+        while (used.has(index)) index = (index + 1) % REPO_COLORS.length;
+        used.add(index);
+        map.set(ctx.rk, REPO_COLORS[index]);
+      }
+      return map;
+    }
+    function filesForGroup(ctx, statusObj, group, filter) {
+      const all = (statusObj?.[group.id] ?? []).map((file) => ({
+        ...file,
+        // Being in the commit is the same question as being in the index, so
+        // the group a row came from is what its checkbox math reads.
+        state: group.id === "staged" ? "staged" : "worktree",
+      }));
+      const matches = (file) => {
+        if (!filter) return true;
+        if (file.path.toLowerCase().includes(filter)) return true;
+        // Typing the submodule name narrows to its files, like IDEA.
+        if (ctx.rk !== "." && `${ctx.rk}/${file.path}`.toLowerCase().includes(filter)) return true;
+        return false;
+      };
+      return { all, visible: all.filter(matches) };
+    }
+
+    function countText(all, visible) {
+      // While filtering, say both numbers: the tree below can only ever
+      // account for the matches, and a lone count would look wrong.
+      return visible.length === all.length ? `${all.length}` : `${visible.length}/${all.length}`;
+    }
+
+    /**
+     * One batched stage/unstage across several repos (a group header's
+     * checkbox): one git call per repo, a single refresh, then the same
+     * submodule-pointer hint the single-repo path shows.
+     */
+    function applyInclusionForRepos(pairs, target) {
+      const jobs = [];
+      let rootFiles = [];
+      for (const { visible, ctx } of pairs) {
+        const want = target ? "staged" : "worktree";
+        const paths = visible.filter((file) => file.state !== want).map((file) => file.path);
+        if (!paths.length) continue;
+        if (!ctx || ctx.rk === ".") rootFiles = rootFiles.concat(visible);
+        const payload = { paths };
+        if (ctx?.root) payload.repoRoot = ctx.root;
+        jobs.push(invoke(target ? "git/stage" : "git/unstage", payload));
+      }
+      if (!jobs.length) return Promise.resolve();
+      return Promise.all(jobs).then(async (results) => {
+        const failed = results.find((result) => !result?.ok);
+        if (failed) {
+          toast(PIG.errorText(failed), "error");
+          await refresh();
+          return;
+        }
+        await refresh();
+        if (!target || !rootFiles.length) return;
+        const stuck = rootFiles.filter((file) => file.insideSubmodule);
+        if (!stuck.length) return;
+        const staged = (state.repo?.staged ?? []).map((entry) => entry.path);
+        if (stuck.some((file) => staged.includes(file.path))) toast(t("submoduleStagedHint"), "info");
+        else toast(PIG.tf("submoduleInside", { path: stuck[0].path }), "error");
+      });
+    }
+
+    /**
+     * IDEA's repository row: disclosure, cascade checkbox, color square, name,
+     * "N files", branch pill. Clicking expands; right-click switches to that
+     * repository (the top-left selector does the same).
+     */
+    function repoRow(group, ctx, all, visible, color) {
+      const rkey = `repo:${group.id}:${ctx.rk}`;
+      const open = !state.collapsed.has(rkey);
+      const branch = branchNameOf(ctx.branch);
+      return h("div", {
+        class: "tree-row repo-row",
+        role: "treeitem",
+        "aria-expanded": open ? "true" : "false",
+        title: ctx.rk === "." ? (ctx.repoObj?.repo?.root ?? ctx.label) : ctx.root,
+        onclick: () => {
+          if (state.collapsed.has(rkey)) state.collapsed.delete(rkey);
+          else state.collapsed.add(rkey);
+          paintChanges();
+        },
+        oncontextmenu: (event) => {
+          event.preventDefault();
+          repoContextMenu(event.currentTarget, ctx);
+        },
+      }, [
+        h("span", { class: "disclosure", "data-open": open ? "true" : "false" }, [icon("chevronRight", 11)]),
+        group.id === "conflicted"
+          ? h("span", { class: "indent", style: { width: "13px" } })
+          : rowCheckbox({
+            checked: group.id === "staged",
+            title: group.id === "staged" ? t("unstageAllChanges") : t("stageAllChanges"),
+            onToggle: (next) => applyInclusion(visible, next, ctx),
+          }),
+        h("span", { class: "repo-color", style: { background: color ?? "#888888" } }),
+        h("span", { class: "name", text: ctx.label }),
+        h("span", { class: "muted", text: `${countText(all, visible)} ${t("files")}` }),
+        branch ? h("span", { class: "badge", text: branch, title: branch }) : null,
+      ]);
+    }
+
+    function repoContextMenu(anchor, ctx) {
+      if (!ctx || ctx.rk === ".") return;
+      popup(anchor, [
+        {
+          label: t("switchToRepo"),
+          title: ctx.root ?? ctx.rk,
+          onSelect: () => { switchToSubmodule(ctx.root).catch(() => {}); },
+        },
+      ]);
+    }
+
+    /**
+     * IDEA's ordering: each change list groups by repository — the current one
+     * sorts among the submodules by name, like haeco-mes-parent between
+     * frontend and prototype-design. A single-repo project renders exactly as
+     * before, with no repository rows.
+     */
+    function paintChanges() {
+      PIG.clear(changesList);
+      if (!state.repo) {
+        changesList.append(h("div", { class: "empty-state" }, [
+          h("div", { class: "headline", text: state.error ? t("notARepository") : t("loading") }),
+          state.error ? h("code", { text: state.error }) : null,
+          state.error ? h("div", { class: "muted", text: t("repositoryHint") }) : null,
+        ]));
+        return;
+      }
+
+      const filter = state.filter.trim().toLowerCase();
+      const multi = (state.submodules ?? []).length > 0;
+      const colorMap = multi ? repoColorMap(allCtxs()) : new Map();
+      let groups = 0;
+
+      for (const group of GROUPS) {
+        const buckets = [];
+        const rctx = rootCtx();
+        const rootLists = filesForGroup(rctx, state.repo, group, filter);
+        if (rootLists.visible.length) buckets.push({ ctx: rctx, ...rootLists });
+        for (const entry of state.submodules ?? []) {
+          const ctx = subCtx(entry);
+          const lists = filesForGroup(ctx, entry.status, group, filter);
+          if (lists.visible.length) buckets.push({ ctx, ...lists });
+        }
+        if (!buckets.length) continue;
+        groups += 1;
+
+        const gkey = `group:${group.id}`;
+        const open = !state.collapsed.has(gkey);
+        const allTotal = buckets.reduce((total, bucket) => total + bucket.all.length, 0);
+        const visTotal = buckets.reduce((total, bucket) => total + bucket.visible.length, 0);
+        const header = h("div", {
+          class: "group-header",
+          onclick: () => {
+            if (state.collapsed.has(gkey)) state.collapsed.delete(gkey);
+            else state.collapsed.add(gkey);
+            paintChanges();
+          },
+        }, [
+          h("span", { class: "disclosure", "data-open": open ? "true" : "false" }, [icon("chevronRight", 11)]),
+          h("span", { text: t(group.label) }),
+          h("span", {
+            class: "count",
+            text: visTotal === allTotal ? `${allTotal}` : `${visTotal}/${allTotal}`,
+          }),
+        ]);
+
+        // Conflicts are not something to include or exclude — they have to be
+        // resolved first — so that group gets no checkbox at all.
+        if (group.id !== "conflicted") {
+          header.append(h("div", { class: "toolbar-spacer" }));
+          header.append(rowCheckbox({
+            checked: group.id === "staged",
+            title: group.id === "staged" ? t("unstageAllChanges") : t("stageAllChanges"),
+            onToggle: (next) => applyInclusionForRepos(buckets, next),
+          }));
+        }
+        changesList.append(header);
+        if (!open) continue;
+
+        if (!multi) {
+          const only = buckets[0];
+          if (!state.groupByDirectory) {
+            for (const row of flatRows(group.id, only.visible, only.ctx, 0)) changesList.append(row);
+          } else {
+            for (const row of treeRows(group.id, buildChangeTree(only.visible), 0, only.ctx)) changesList.append(row);
+          }
+          continue;
+        }
+
+        buckets.sort((a, b) => a.ctx.label.localeCompare(b.ctx.label, undefined, { sensitivity: "base", numeric: true }));
+        for (const bucket of buckets) {
+          changesList.append(repoRow(group, bucket.ctx, bucket.all, bucket.visible, colorMap.get(bucket.ctx.rk)));
+          if (state.collapsed.has(`repo:${group.id}:${bucket.ctx.rk}`)) continue;
+          if (!state.groupByDirectory) {
+            for (const row of flatRows(group.id, bucket.visible, bucket.ctx, 1)) changesList.append(row);
+          } else {
+            for (const row of treeRows(group.id, buildChangeTree(bucket.visible), 1, bucket.ctx)) changesList.append(row);
+          }
+        }
+      }
+
+      if (!groups) {
+        const noFilter = !state.filter.trim();
+        changesList.append(h("div", { class: "empty-state" }, [
+          h("div", { class: "headline", text: noFilter ? t("noChanges") : t("noMatchingChanges") }),
+        ]));
+      }
+    }
+
+     function paintDiffHeader() {
+       PIG.clear(diffHeader);
+       if (!state.selection || !state.diff) {
+         diffHeader.append(h("span", { class: "muted", text: t("pickFile") }));
+         return;
+       }
+       const sel = state.selection;
+       const { name, directory } = splitPath(sel.p);
+       if (sel.rk && sel.rk !== ".") diffHeader.append(h("span", { class: "muted", text: sel.rk }));
+       diffHeader.append(h("span", { text: name }));
+      diffHeader.append(h("div", { class: "toolbar-spacer" }));
+      diffHeader.append(iconButton("columns", t("sideBySide") + " / " + t("unified"), () => {
+        state.diffUnified = !state.diffUnified;
+        paintDiff();
+        savePrefs();
+      }, { size: 13, class: "icon" }));
+      diffHeader.append(iconButton("eye", t("showWhitespaces"), () => {
+        state.showWhitespaces = !state.showWhitespaces;
+        paintDiff();
+      }, { size: 13 }));
+      diffHeader.append(iconButton("gear", t("ignoreDifferences"), (event) => {
+        popup(event.currentTarget, [
+          { type: "label", label: t("ignoreDifferences") },
+          { label: t("ignoreNone"), checked: !state.ignoreWhitespace, onSelect: () => setIgnoreWhitespace(false) },
+          { label: t("ignoreWhitespace"), checked: state.ignoreWhitespace, onSelect: () => setIgnoreWhitespace(true) },
+          { type: "separator" },
+          { label: t("showLineNumbers"), checked: state.showLineNumbers, onSelect: () => { state.showLineNumbers = !state.showLineNumbers; paintDiff(); } },
+        ]);
+      }, { size: 13 }));
+    }
+
+     function hunkActionsFor(selection) {
+       const group = selection?.g ?? "";
+       const isIndex = group === "staged";
+      if (isIndex) {
+        return [{
+          label: t("unstageHunk"),
+          title: t("unstageHunk"),
+          onSelect: async (hunk) => {
+             const patch = PIG.diff.patchFor({ header: currentHeader(), hunks: [hunk] }, [hunk]);
+             report(
+               await invoke("git/apply-patch", { action: "unstage", patch, root: state.diff?.root, repoRoot: state.diff?.root }),
+              t("unstageHunk"),
+            );
+            await refresh();
+          },
+        }];
+      }
+      return [
+        {
+          label: t("stageHunk"),
+          title: t("stageHunk"),
+          onSelect: async (hunk) => {
+             const patch = PIG.diff.patchFor({ header: currentHeader(), hunks: [hunk] }, [hunk]);
+             report(
+               await invoke("git/apply-patch", { action: "stage", patch, root: state.diff?.root, repoRoot: state.diff?.root }),
+              t("stageHunk"),
+            );
+            await refresh();
+          },
+        },
+        {
+          label: t("discardHunk"),
+          title: t("discardHunk"),
+          onSelect: async (hunk) => {
+            const confirmed = await dialog({
+              title: t("discardHunk"),
+              message: t("discard"),
+              danger: true,
+              confirmLabel: t("discard"),
+            });
+            if (!confirmed) return;
+             const patch = PIG.diff.patchFor({ header: currentHeader(), hunks: [hunk] }, [hunk]);
+             report(
+               await invoke("git/apply-patch", { action: "discard", patch, root: state.diff?.root, repoRoot: state.diff?.root }),
+              t("discardHunk"),
+            );
+            await refresh();
+          },
+        },
+      ];
+    }
+
+    function currentHeader() {
+      return state.diff?.parsed?.files?.[0]?.header ?? ["diff --git a/x b/x"];
+    }
+
+     function paintDiff() {
+       paintDiffHeader();
+       const group = state.selection ? state.selection.g : null;
+       const stageable = group !== "untracked" && !state.ignoreWhitespace;
+       const result = PIG.diff.render(diffHost, {
+         text: state.diff?.text ?? "",
+         unified: state.diffUnified,
+         showWhitespaces: state.showWhitespaces,
+         showLineNumbers: state.showLineNumbers,
+         stageable,
+         hunkActions: state.selection ? hunkActionsFor(state.selection) : [],
+         hunkCheckbox: state.selection && group !== "untracked" && !state.ignoreWhitespace
+           ? (hunk) => ({
+             checked: group === "staged",
+             onChange: async (checked) => {
+               const isIndex = group === "staged";
+               if (checked === isIndex) return;
+               const patch = PIG.diff.patchFor({ header: currentHeader(), hunks: [hunk] }, [hunk]);
+               report(
+                 await invoke("git/apply-patch", {
+                   action: checked ? "stage" : "unstage",
+                   patch,
+                   root: state.diff?.root,
+                   repoRoot: state.diff?.root,
+                 }),
+                 t("includeIntoCommit"),
+               );
+               await refresh();
+             },
+           })
+           : null,
+        emptyMessage: state.diff?.binary ? t("binaryDiff") : t("noDiff"),
+      });
+      // `state.diff` is null while nothing is selected, so the parsed model is
+      // only stored back when there really is a diff to attach it to.
+      if (state.diff) state.diff.parsed = result;
+    }
+
+    /**
+     * The commit area's status line. A conflicted repository is the one state
+     * this line has to do more than describe: an unresolved merge/rebase/cherry
+     * pick can only be left by finishing it or by aborting, and the plugin's own
+     * Pull can produce one, so the escape has to be here and not in a terminal.
+     */
+    function paintCommit() {
+      // While a commit (or its follow-up push) runs, the button itself is the
+      // progress: spinner plus phase, so a slow hook or a slow push never
+      // looks like the click was lost.
+      PIG.clear(commitButton);
+      if (state.busy) {
+        commitButton.classList.add("busy");
+        commitButton.append(PIG.spinner(true));
+        commitButton.append(h("span", { text: t(state.busyKind === "commit-push" ? "committingAndPushing" : "committing") }));
+      } else {
+        commitButton.classList.remove("busy");
+        commitButton.append(t("commit"));
+      }
+      commitButton.disabled = state.busy || (!state.message.trim() && !state.amend);
+      commitMenuButton.disabled = state.busy;
+       const totals = totalCounts();
+       const staged = totals.staged;
+       const total = totals.staged + totals.unstaged + totals.untracked + totals.conflicted;
+       const conflicts = totals.conflicted;
+       const operation = state.repo?.operation ?? null;
+       PIG.clear(summary);
+       if (operation) {
+         summary.className = "commit-summary warn";
+         summary.append(h("span", { text: t(`${OPERATION_KEYS[operation] ?? "conflictNotice"}`) }));
+         // A merge is finished by committing, so it has no "continue"; the
+         // sequencer operations do.
+         if (operation !== "merge") {
+           summary.append(operationButton(t("continueOperation"), operation, "continue"));
+         }
+         summary.append(operationButton(t("abortOperation"), operation, "abort"));
+       } else if (conflicts) {
+         summary.className = "commit-summary warn";
+         summary.append(t("conflictNotice"));
+       } else if (!staged && !state.amend) {
+         summary.className = "commit-summary warn";
+         summary.append(t("nothingStaged"));
+       } else {
+         summary.className = "commit-summary";
+         // Whole sentence per locale via tf; `s` feeds the English plural only.
+         summary.append(PIG.tf("commitSummary", { staged, total, s: total === 1 ? "" : "s" }));
+         const targets = stagedTargets();
+         if (targets.length > 1) {
+           summary.append(h("span", { class: "muted", text: ` · ${PIG.tf("commitMultipleRepos", { count: targets.length })}` }));
+         }
+       }
+     }
+
+    function operationButton(label, operation, action) {
+      return h("button", {
+        class: "bordered",
+        type: "button",
+        style: { marginLeft: "8px" },
+        text: label,
+        onclick: async (event) => {
+          // A continue can run a real merge behind it; spin the clicked button
+          // itself so the wait has an owner. (The button may be rebuilt by the
+          // refresh below — restoring a detached node is a harmless no-op.)
+          await PIG.withBusy(event.currentTarget, label, async () => {
+            const result = await invoke("git/sequencer", { operation, action });
+            report(result, label);
+            await refresh();
+          });
+        },
+      });
+    }
+
+    /**
+     * One failing pane must never blank the others — that is exactly how the
+     * missing `state.diff` guard used to take the branch widget down with it.
+     */
+    let reportedFailure = false;
+    function paintGenerate() {
+      const busy = state.generating;
+      generateButton.disabled = busy;
+      generateMenuButton.disabled = busy;
+      generateButton.classList.toggle("busy", busy);
+      PIG.clear(generateButton);
+      generateButton.append(busy ? PIG.spinner(false) : icon("sparkles", 13));
+      generateButton.append(h("span", { class: "gen-label", text: busy ? t("generating") : t("generateMessage") }));
+      generateButton.title = PIG.tf("generateScope", { action: t("generateMessage"), lang: languageLabel() });
+    }
+
+    /**
+     * Which change the draft should describe: everything checked (staged) —
+     * the same set Commit is about to commit — or, when nothing is staged,
+     * the file the user picked. Reported back afterwards so the scope is
+     * never a guess.
+     *
+     * Checked means staged here: ticking a row stages it, unticking unstages
+     * it, so `stagedTargets()` is exactly "what is checked". Selection (the
+     * highlight that drives the diff pane) used to win over that set, and the
+     * auto-select on refresh meant the staged branch was nearly unreachable —
+     * the draft then described one file while Commit took all of them.
+     */
+     function draftTarget() {
+       const targets = stagedTargets();
+       if (targets.length) return { kind: "staged", targets };
+       if (state.selection) {
+         const sel = state.selection;
+         return { kind: "file", path: sel.p, mode: sel.g === "staged" ? "index" : "worktree", group: sel.g, repoRoot: sel.root ?? null };
+       }
+       return null;
+     }
+
+    /**
+     * Say what actually went wrong. A permission that was never granted is not
+     * the same as having no provider configured, and telling the user to add
+     * one they already have sends them the wrong way.
+     */
+    function draftError(result) {
+      const code = String(result?.code ?? "");
+      if (code === "PERMISSION_DENIED") return t("modelPermission");
+      if (code === "NO_MODEL") return t("noModel");
+      if (code === "RATE_LIMITED") return t("rateLimited");
+      if (code === "EMPTY_DIFF" || code === "NO_DIFF") return t("nothingToDescribe");
+      if (code === "TIMEOUT") return t("draftTimeout");
+      return PIG.errorText(result);
+    }
+
+    // Note: 界面语言只有视图知道（插件进程拿不到），所以 locale 随每次请求传；语言是 chevron 菜单里的显式选择而不是推断，auto 的历史回退靠引擎返回 null 而不是 "en" — 见 .agents/notes/implemented/architecture/2026-09-11-commit-message-prompt.md
+    // Note: 生成范围=勾选（stagedTargets）而非选中 — 见 .agents/notes/implemented/bug-fix/2026-09-14-commit-message-checked-scope.md
+    async function generate() {
+      if (state.generating) return;
+      const target = draftTarget();
+      // Staged (checked) wins: it is what Commit will commit. A single staged
+      // repo reuses the legacy contract (empty payload for the current repo,
+      // repoRoot for a submodule) so style comes from the repo being described.
+      // Several staged repos send their roots; the engine aggregates their
+      // index diffs into one prompt and drafts a single message for all of them.
+      let payload = {};
+      if (target?.kind === "staged") {
+        const roots = (target.targets ?? []).map((entry) => entry.root).filter(Boolean);
+        if (roots.length > 1) {
+          payload = { stagedRoots: roots };
+        } else if (roots.length === 1 && roots[0] !== (state.repo?.repo?.root ?? null)) {
+          payload = { repoRoot: roots[0] };
+        }
+      } else if (target?.kind === "file") {
+        payload = { path: target.path, mode: target.mode, ...(target.repoRoot ? { repoRoot: target.repoRoot } : {}) };
+      }
+      if (state.commitModelKey) payload.modelKey = state.commitModelKey;
+      // The plugin process has no idea which language this window speaks, so it
+      // travels with the request: `commitLang` is the user's standing choice,
+      // `locale` the fallback for a repository with no history to follow.
+      payload.lang = state.commitLang;
+      payload.locale = PIG.state.locale;
+
+      // Never silently discard something the user typed.
+      if (state.message.trim()) {
+        const replace = await dialog({
+          title: t("replaceDraft"),
+          message: t("replaceDraftBody"),
+          confirmLabel: t("replace"),
+        });
+        if (!replace) return;
+      }
+
+      state.generating = true;
+      paintGenerate();
+      const result = await invoke("git/commit-message", payload);
+      state.generating = false;
+      paintGenerate();
+
+      if (!result.ok) {
+        toast(draftError(result), "error");
+        return;
+      }
+      state.message = result.text;
+      messageInput.value = result.text;
+      paintCommit();
+      messageInput.focus();
+      const scope = result.scope ?? {};
+      if (scope.kind === "file") {
+        toast(PIG.tf("draftedFile", { file: scope.path }), "info");
+      } else {
+        let note = PIG.tf("draftedStaged");
+        const repos = Number(scope.repos ?? 0) || (target?.targets?.length ?? 0);
+        if (repos > 1) note += ` · ${PIG.tf("commitMultipleRepos", { count: repos })}`;
+        toast(note, "info");
+      }
+    }
+
+    async function openGenerateMenu(anchor) {
+      const result = await invoke("git/models");
+      const models = Array.isArray(result.models) ? result.models : [];
+      const selected = state.commitModelKey || models[0]?.key || "";
+      const items = [
+        { label: t("generateMessage"), onSelect: () => { generate().catch(() => {}); } },
+        { type: "separator" },
+        { type: "label", label: t("modelLabel") },
+      ];
+      if (!models.length) {
+        // A menu row needs a label, not a paragraph; the full explanation is a
+        // toast away, and the host's own wording stays in the tooltip.
+        items.push({
+          label: result.code === "PERMISSION_DENIED" ? t("modelPermissionShort") : t("noModel"),
+          disabled: true,
+          title: result.code === "PERMISSION_DENIED"
+            ? `${t("modelPermission")}\n\n${result.message ?? ""}`.trim()
+            : (result.message ?? ""),
+          onSelect: result.code === "PERMISSION_DENIED"
+            ? () => toast(t("modelPermission"), "error")
+            : undefined,
+        });
+      } else {
+        for (const model of models.slice(0, 30)) {
+          items.push({
+            label: model.label ?? model.key,
+            title: model.key,
+            checked: model.key === selected,
+            onSelect: () => {
+              state.commitModelKey = model.key;
+              savePrefs();
+              toast(`${t("modelLabel")}: ${model.label ?? model.key}`, "info");
+            },
+          });
+        }
+      }
+
+      // The language is a choice, not a guess — the reason this menu exists is
+      // that the model used to answer an English repository in English however
+      // Chinese the user was. `auto` follows the history, which is what the
+      // prompt was always trying to do, and falls back to the interface.
+      items.push(
+        { type: "separator" },
+        { type: "label", label: t("commitLanguage") },
+      );
+      for (const option of LANGUAGES) {
+        items.push({
+          label: t(option.label),
+          checked: state.commitLang === option.value,
+          onSelect: () => {
+            state.commitLang = option.value;
+            savePrefs();
+            paintGenerate();
+          },
+        });
+      }
+      popup(anchor, items);
+    }
+
+    function paintAll() {
+      for (const step of [paintToolbar, paintChangesHeader, paintChanges, paintDiff, paintCommit, paintGenerate]) {
+        try {
+          step();
+        } catch (error) {
+          if (!reportedFailure) {
+            reportedFailure = true;
+            toast(`IDEA Git: ${error?.message ?? error}`, "error");
+          }
+        }
+      }
+      try {
+        branchWidget?.update(state.repo);
+      } catch {
+        // The chip is decoration; never let it break the refresh.
+      }
+    }
+
+    // ----------------------------------------------------------- actions --
+     // ----------------------------------------------------------- actions --
+     // `selection` is `{ rk, g, p, root }`: the repo key ("." for the current
+     // repo, else the submodule rel), the group, the repo-relative path, and
+     // the absolute repo root file actions run in.
+     function select(sel) {
+       state.selection = sel ? { rk: sel.rk ?? ".", g: sel.g, p: sel.p, root: sel.root ?? null } : null;
+       loadDiff().catch((error) => toast(String(error?.message ?? error), "error"));
+       paintChanges();
+     }
+
+     function canStageSelected() {
+       return Boolean(state.selection && state.selection.g !== "staged");
+     }
+
+     function canUnstageSelected() {
+       return Boolean(state.selection && state.selection.g === "staged");
+     }
+
+     function selectedPath() {
+       return state.selection ? state.selection.p : null;
+     }
+
+     function selectionPayload(extra) {
+       return { ...(extra ?? {}), ...(state.selection?.root ? { repoRoot: state.selection.root } : {}) };
+     }
+
+     async function stageSelected(staging) {
+       const path = selectedPath();
+       if (!path) return;
+       report(await invoke(staging ? "git/stage" : "git/unstage", selectionPayload({ paths: [path] })), staging ? t("stageFile") : t("unstageFile"));
+       await refresh();
+     }
+
+     async function rollbackSelected() {
+       const path = selectedPath();
+       if (!path) return;
+       const confirmed = await dialog({
+         title: t("rollback"),
+         message: `${t("rollback")} ${path}?`,
+         detail: t("discard"),
+         danger: true,
+         confirmLabel: t("rollback"),
+       });
+       if (!confirmed) return;
+       report(await invoke("git/discard", selectionPayload({ paths: [path] })), t("rollback"));
+       await refresh();
+     }
+
+     function ctxRepoForMenu(ctx) {
+       if (ctx?.repoObj) return ctx.repoObj;
+       return state.repo;
+     }
+
+     function fileContextMenu(anchor, group, file, ctx) {
+       const rk = ctx?.rk ?? ".";
+       const root = ctx?.root ?? null;
+       const at = (extra) => ({ ...(extra ?? {}), ...(root ? { repoRoot: root } : {}) });
+       const items = [
+         { label: t("showDiff"), onSelect: () => select({ rk, g: group, p: file.path, root }) },
+         { type: "separator" },
+       ];
+       if (group === "staged") {
+         items.push({ label: t("unstageFile"), onSelect: () => stageFile(group, file, false, ctx) });
+       } else {
+         items.push({ label: t("stageFile"), onSelect: () => stageFile(group, file, true, ctx) });
+       }
+       items.push({
+         label: t("rollback"),
+         disabled: group === "staged",
+         onSelect: async () => {
+           const confirmed = await dialog({
+             title: t("rollback"),
+             message: `${t("rollback")} ${file.path}?`,
+             danger: true,
+             confirmLabel: t("rollback"),
+           });
+           if (!confirmed) return;
+           report(await invoke("git/discard", at({ paths: [file.path] })), t("rollback"));
+           await refresh();
+         },
+       });
+       const relative = workspaceRelative(file.path, ctxRepoForMenu(ctx));
+       items.push({ type: "separator" });
+       items.push({
+         label: t("openFile"),
+         disabled: !relative,
+         title: relative ? file.path : `${t("openFile")} — ${file.path}`,
+         onSelect: () => invoke("fs.openDefault", { path: relative }),
+       });
+       items.push({
+         label: t("revealInFileManager"),
+         disabled: !relative,
+         onSelect: () => invoke("fs.reveal", { path: relative }),
+       });
+       // The file itself has no hash to copy; offer HEAD like the Log view does
+       // (git-view copyRevisionNumber), and fall back to the path with an honest
+       // label when there is no commit yet. No `t("copy") + t("hash")` splicing.
+       {
+         const headHash = (ctx?.status?.branch?.oid ?? state.repo?.branch?.oid) ?? null;
+         if (headHash) items.push({ label: t("copyRevisionNumber"), onSelect: () => PIG.copyText(headHash) });
+         else items.push({ label: t("copyPath"), onSelect: () => PIG.copyText(file.path) });
+       }
+       popup(anchor, items);
+     }
+
+     async function stageFile(group, file, staging, ctx) {
+       const payload = { paths: [file.path] };
+       const root = ctx?.root ?? state.selection?.root ?? null;
+       if (root) payload.repoRoot = root;
+       report(await invoke(staging ? "git/stage" : "git/unstage", payload), staging ? t("stageFile") : t("unstageFile"));
+       await refresh();
+     }
+
+     async function loadDiff() {
+       if (!state.selection) {
+         state.diff = null;
+         paintDiff();
+         return;
+       }
+       const sel = state.selection;
+       const mode = sel.g === "staged" ? "index" : "worktree";
+       const result = await invoke("git/diff", {
+         path: sel.p,
+         mode,
+         ignoreWhitespace: state.ignoreWhitespace,
+         ...(sel.root ? { repoRoot: sel.root } : {}),
+       });
+       if (!result.ok) {
+         state.diff = { text: "", error: result.message };
+         paintDiff();
+         diffHost.append(h("div", { class: "banner error" }, [
+           h("div", { class: "banner-text" }, [
+             h("div", { text: result.message ?? t("diff") }),
+           ]),
+         ]));
+         return;
+       }
+       state.diff = result;
+       paintDiff();
+     }
+
+    function setIgnoreWhitespace(enabled) {
+      state.ignoreWhitespace = enabled;
+      savePrefs();
+      loadDiff().catch(() => {});
+    }
+
+    function openCommitMenu(event) {
+      popup(event.currentTarget, [
+        { label: t("commit"), onSelect: () => commit(false) },
+        { label: t("commitAndPush"), onSelect: () => commit(true) },
+        { type: "separator" },
+        { label: t("amend"), checked: state.amend, onSelect: () => { state.amend = !state.amend; amendBox.checked = state.amend; paintCommit(); } },
+        { label: t("signOff"), checked: state.signoff, onSelect: () => { state.signoff = !state.signoff; signoffBox.checked = state.signoff; } },
+        { type: "separator" },
+        {
+          label: t("rollback"),
+          onSelect: async () => {
+            const paths = (state.repo?.staged ?? []).map((file) => file.path);
+            if (!paths.length) return;
+            const confirmed = await dialog({
+              title: t("rollback"),
+              message: `${t("unstageFile")}?`,
+              confirmLabel: t("rollback"),
+            });
+            if (!confirmed) return;
+            report(await invoke("git/unstage", { paths }), t("unstageFile"));
+            await refresh();
+          },
+        },
+      ]);
+    }
+
+     async function commit(withPush) {
+       if (state.busy || state.syncing) return;
+       const message = state.message.trim();
+       if (!message && !state.amend) {
+         toast(t("commitMessage"), "error");
+         messageInput.focus();
+         return;
+       }
+       // IDEA commits every repository with the same message: submodules first
+       // (their new HEADs become the parent's gitlink updates), the current
+       // repo last. A parent-only `git commit` can never include the 15 files
+       // changed inside `backend` — it only records which commit `backend`
+       // points at.
+       const targets = stagedTargets();
+       if (!state.amend && !targets.length) {
+         toast(t("nothingStaged"), "error");
+         return;
+       }
+       if (!targets.length) targets.push(rootCtx());
+      state.busy = true;
+      state.busyKind = "commit";
+      paintCommit();
+      paintToolbar();
+       let failed = null;
+       let lastResult = null;
+       for (const target of targets) {
+         const payload = { message, amend: state.amend, signoff: state.signoff };
+         if (target.root) payload.repoRoot = target.root;
+         const result = await invoke("git/commit", payload);
+         if (!result.ok) {
+           failed = { target, result };
+           break;
+         }
+         lastResult = { target, result };
+       }
+      if (failed) {
+        state.busy = false;
+        state.busyKind = null;
+        toast(`${failed.target.rk === "." ? "" : `${failed.target.rk}: `}${PIG.errorText(failed.result)}`, "error");
+        paintCommit();
+        paintToolbar();
+        await refresh();
+        return;
+      }
+       if (message) {
+         const remembered = await invoke("git/message-used", { message });
+         state.messages = remembered.prefs?.messages ?? state.messages;
+       }
+       state.message = "";
+       messageInput.value = "";
+       state.amend = false;
+       amendBox.checked = false;
+       if (targets.length > 1) toast(PIG.tf("commitMultipleRepos", { count: targets.length }), "info");
+       else toast(firstLine(lastResult?.result?.stdout) || t("commit"), "info");
+
+      if (withPush) {
+        state.busyKind = "commit-push";
+        paintCommit();
+        // Note: 聚合提交的 Push 把刚才提交的 N 个仓逐个推出去（子模块先、父仓后），单仓失败点名且不挡后续 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+        const pushTargets = targets.map((target) => ({
+          rk: target.rk,
+          root: target.root,
+          setUpstream: !target.branch?.upstream,
+        }));
+        const outcomes = await PIG.pushRepos(pushTargets);
+        const okCount = outcomes.filter((o) => o?.ok).length;
+        for (const outcome of outcomes) {
+          if (!outcome?.ok) {
+            toast(`${outcome.rel && outcome.rel !== "." ? `${outcome.rel}: ` : ""}${PIG.errorText(outcome)}`, "error");
+          }
+        }
+        if (okCount === outcomes.length && outcomes.length > 1) toast(PIG.tf("pushedRepos", { count: okCount }), "info");
+        else if (okCount !== outcomes.length && outcomes.length > 1) toast(PIG.tf("pushPartial", { ok: okCount, total: outcomes.length }), outcomes.length && okCount ? "info" : "error");
+        else if (outcomes.length === 1) report(outcomes[0], t("push"));
+      }
+      state.busy = false;
+      state.busyKind = null;
+      await refresh();
+     }
+
+    function openMessageHistory(event) {
+      if (!state.messages.length) {
+        toast(t("commitHistory"), "info");
+        return;
+      }
+      popup(event.currentTarget, [
+        { type: "label", label: t("commitHistory") },
+        ...state.messages.slice(0, 20).map((message) => ({
+          label: firstLine(message).slice(0, 90),
+          title: message,
+          onSelect: () => {
+            state.message = message;
+            messageInput.value = message;
+            paintCommit();
+            messageInput.focus();
+          },
+        })),
+        { type: "separator" },
+        {
+          label: t("clearAll"),
+          onSelect: async () => {
+            await invoke("git/prefs-set", { ui: { messagesCleared: Date.now() } });
+            state.messages = [];
+          },
+        },
+      ]);
+    }
+
+    // ------------------------------------------------------------- wiring --
+    function savePrefs() {
+      invoke("git/prefs-set", {
+        ui: {
+          commitUnified: state.diffUnified,
+          showWhitespaces: state.showWhitespaces,
+          showLineNumbers: state.showLineNumbers,
+          commitLang: state.commitLang,
+          commitModelKey: state.commitModelKey,
+          groupByDirectory: state.groupByDirectory,
+          compactDirs: state.compactDirs,
+        },
+      }).catch(() => {});
+    }
+
+    // -------------------------------------------------------------- shell --
+    changesWidth.append(changesHeader, changesList);
+    diffColumn.append(diffHeader, diffHost);
+    root.append(toolbar);
+    root.append(h("div", { class: "commit-view" }, [changesWidth, divider, diffColumn]));
+    root.append(h("div", { class: "commit-area" }, [
+      h("div", { class: "commit-message-row" }, [
+        messageInput,
+        h("div", { class: "commit-history" }, [
+          iconButton("clock", t("commitHistory"), openMessageHistory, { size: 15 }),
+        ]),
+      ]),
+      h("div", { class: "commit-actions" }, [
+        h("label", { class: "check" }, [amendBox, t("amend")]),
+        h("label", { class: "check" }, [signoffBox, t("signOff")]),
+        summary,
+        generateGroup,
+        h("span", { class: "spacer" }),
+        h("span", { class: "commit-summary", style: { maxWidth: "40%" }, id: "commit-branch" }),
+        h("div", { class: "split-button" }, [commitButton, commitMenuButton]),
+      ]),
+    ]));
+
+    branchWidget = mountBranchWidget(branchHolder, { onChanged: () => refresh() });
+    /**
+     * Switching repository is a view-wide change, so it drops what the leaving
+     * repository owned *before* the reload starts rather than after it ends: a
+     * hunk button left in the diff pane stays clickable for the length of a
+     * refresh, and a hunk action is a real edit — `discard` writes to the
+     * worktree — so it would land in whichever repository is current by then.
+     */
+    repoWidget = PIG.repoSelector.mount(repoHolder, {
+      onSwitch: () => {
+        forgoRepositoryState();
+        paintAll();
+        refresh().catch(() => {});
+      },
+    });
+
+    PIG.bindSplitter(divider, (delta) => {
+      const total = root.clientWidth || 1;
+      state.changesWidth = Math.max(18, Math.min(75, state.changesWidth + (delta / total) * 100));
+      changesWidth.style.width = `${state.changesWidth}%`;
+    });
+
+    // ------------------------------------------------------------- refresh --
+    /**
+     * Which repository the loaded state belongs to, so a switch can be told
+     * apart from an ordinary refresh: a selection, a filter and a rendered diff
+     * are all repository-relative, and carrying them across would show — and
+     * stage — the wrong file. `undefined` means nothing has been loaded yet.
+     */
+    let loadedRepo;
+
+     /** Drop everything that describes one repository, and only that one. */
+     function forgoRepositoryState() {
+       state.selection = null;
+       state.diff = null;
+       state.filter = "";
+       state.submodules = [];
+       state.subLoading = false;
+       // A commit draft belongs to the repository it was typed against: carrying
+       // the message/amend/signoff across would commit one repo's text in another.
+       state.message = "";
+       state.amend = false;
+       state.signoff = false;
+       messageInput.value = "";
+       amendBox.checked = false;
+       signoffBox.checked = false;
+     }
+    // Overlapping refreshes share one dimming counter so the list stays
+    // dimmed until the last one settles, instead of flashing mid-flight.
+    let refreshDepth = 0;
+    function setRefreshing(on) {
+      refreshDepth = Math.max(0, refreshDepth + (on ? 1 : -1));
+      root.classList.toggle("is-refreshing", refreshDepth > 0);
+    }
+     async function refresh() {
+       setRefreshing(true);
+       try {
+         return await refreshInner();
+       } finally {
+         setRefreshing(false);
+       }
+     }
+     async function refreshInner() {
+       const result = await invoke("git/repo");
+       if (!result.ok) {
+         state.repo = null;
+         state.error = result.message ?? t("notARepository");
+         // Nothing is loaded, so nothing repository-relative may stay on screen
+         // — and the next repository to load must not be mistaken for the same
+         // one continuing.
+         forgoRepositoryState();
+         loadedRepo = undefined;
+         paintAll();
+         return state.repo ?? {};
+       }
+       const repoRoot = result.repo?.root ?? null;
+       if (loadedRepo !== undefined && repoRoot !== loadedRepo) forgoRepositoryState();
+       loadedRepo = repoRoot;
+       state.repo = result;
+       state.error = null;
+       // Drop a selection whose file left the change lists (root or submodule).
+       if (state.selection) {
+         const sel = state.selection;
+         const list = sel.rk === "." || !sel.rk
+           ? (result[sel.g] ?? [])
+           : ((state.submodules ?? []).find((entry) => entry.rel === sel.rk)?.status?.[sel.g] ?? []);
+         if (!list.some((file) => file.path === sel.p)) state.selection = null;
+       }
+       // IDEA-like aggregation: the parent only prints one gitlink line per
+       // submodule, so fetch dirty submodules' own statuses for the inline
+       // sections. Paint first (fast), then fill the sections in.
+       paintAll();
+      const hasSubmodule = result.siblingMode === true
+        || [...(result.staged ?? []), ...(result.unstaged ?? [])].some((file) => file?.submodule)
+        // An embedded (non-submodule) repo shows as one untracked dir entry;
+        // Git never descends into it, so its inner changes need the same fetch.
+        || (result.untracked ?? []).some((file) => String(file?.path ?? "").endsWith("/"));
+      if (hasSubmodule) {
+        state.subLoading = true;
+         paintChangesHeader();
+         try {
+           const subs = await invoke("git/submodule-statuses");
+           state.submodules = subs?.ok ? (subs.submodules ?? []) : [];
+         } catch {
+           state.submodules = [];
+         }
+         state.subLoading = false;
+       } else {
+         state.submodules = [];
+         state.subLoading = false;
+       }
+       if (!state.selection) {
+         const firstRoot = ["conflicted", "unstaged", "staged", "untracked"]
+           .flatMap((group) => (result[group] ?? []).map((file) => ({ rk: ".", g: group, p: file.path, root: result.repo?.root ?? null })))[0];
+         state.selection = firstRoot ?? null;
+         if (!state.selection) {
+           for (const entry of state.submodules ?? []) {
+             const hit = ["conflicted", "unstaged", "staged", "untracked"]
+               .flatMap((group) => (entry.status?.[group] ?? []).map((file) => ({ rk: entry.rel, g: group, p: file.path, root: entry.root })))[0];
+             if (hit) {
+               state.selection = hit;
+               break;
+             }
+           }
+         }
+       }
+       paintAll();
+       await loadDiff();
+       return result;
+     }
+     async function loadPrefs() {
+       const result = await invoke("git/prefs");
+       if (!result.ok) return;
+      state.messages = result.prefs?.messages ?? [];
+      const ui = result.prefs?.ui ?? {};
+      if (typeof ui.commitUnified === "boolean") state.diffUnified = ui.commitUnified;
+      if (typeof ui.showWhitespaces === "boolean") state.showWhitespaces = ui.showWhitespaces;
+      if (typeof ui.showLineNumbers === "boolean") state.showLineNumbers = ui.showLineNumbers;
+      if (typeof ui.commitLang === "string") state.commitLang = ui.commitLang;
+      if (typeof ui.commitModelKey === "string") state.commitModelKey = ui.commitModelKey;
+      if (typeof ui.groupByDirectory === "boolean") state.groupByDirectory = ui.groupByDirectory;
+      if (typeof ui.compactDirs === "boolean") state.compactDirs = ui.compactDirs;
+    }
+
+    /**
+     * The repository list, read when it can actually have changed — mounting,
+     * a project switch, and opening the chip's menu (which re-reads its own) —
+     * rather than on every refresh. Finding the nested repositories walks the
+     * tree, and a refresh happens after every stage, commit and branch action.
+     */
+    async function loadRepositories() {
+      const result = await invoke("git/repos");
+      state.allRepos = result?.ok ? (result.repos ?? []) : [];
+      repoWidget.update(result);
+    }
+
+    (async () => {
+      try {
+        await loadPrefs();
+        await loadRepositories();
+        await refresh();
+      } catch (error) {
+        // Without this the view would fail silently on first paint.
+        toast(`IDEA Git: ${error?.message ?? error}`, "error");
+      }
+    })();
+
+    window.addEventListener("pig:appearance", () => paintAll());
+    PIG.watchWorkspace(() => {
+      // A project switch invalidates the list as much as the repository.
+      loadRepositories().then(() => refresh()).catch(() => {});
+    });
+
+    PIG.bindShortcuts([
+      { spec: KEYS.refresh, run: () => { refresh().catch(() => {}); } },
+      { spec: KEYS.refreshAlt, run: () => { refresh().catch(() => {}); } },
+      { spec: KEYS.stage, run: () => { if (canStageSelected()) stageSelected(true); } },
+      { spec: KEYS.rollback, run: () => { if (state.selection) rollbackSelected(); } },
+      { spec: KEYS.showDiff, run: () => { loadDiff().catch(() => {}); } },
+      { spec: KEYS.commitMessage, run: () => messageInput.focus() },
+      // The app's own accelerators cannot reach this webContents; say so.
+      PIG.appShortcutHintBinding(),
+    ]);
+
+    return { refresh, focusMessage: () => messageInput.focus() };
+  }
+
+  PIG.branchWidget = { mount: mountBranchWidget };
+  PIG.commitView = { mount };
+  PIG.statusColor = statusColor;
+})(window.PIG || (window.PIG = {}));
+
+/* ================= src/git-view.js ================= */
+/**
+ * The Git tool window — IDEA's `Alt+9` surface, holding the Log and Console
+ * tabs. The Log keeps IDEA's panes: branches on the left, commits in the
+ * centre, and the changed files plus commit details below the list.
+ *
+ * IDEA opens a commit's diff in the editor. There is no editor here, so the
+ * diff opens in an overlay inside the tool window instead — the same content,
+ * the same wording, one click away.
+ */
+(function (PIG) {
+  "use strict";
+
+  const { h, t, invoke, icon, iconButton, toast, popup, dialog } = PIG;
+
+  /**
+   * IDEA's Log shortcuts, in the form this surface can honour. The tooltip is
+   * rendered from the same spec that is bound, so the two cannot drift apart.
+   */
+  const KEYS = {
+    refresh: { key: "r", mod: true },
+    refreshAlt: { key: "F5", ctrl: true },
+    find: { key: "f", mod: true },
+    showDiff: { key: "d", mod: true },
+  };
+
+  function tip(key, spec) {
+    return `${t(key)} (${PIG.formatShortcut(spec)})`;
+  }
+
+  const ROW_HEIGHT = 34;
+  const LANE_WIDTH = 14;
+  // TODO: LANE_COLORS theming is out of scope — these fixed hues stay as-is;
+  // moving them into theme.css variables would touch every graph painter.
+  const LANE_COLORS = ["#4a86c8", "#3fb28a", "#c9a227", "#b06bc0", "#d1743a", "#6aa84f", "#c05555", "#5f7fd4"];
+  const SVG_NS = "http://www.w3.org/2000/svg";
+
+  function svg(tag, attributes) {
+    const node = document.createElementNS(SVG_NS, tag);
+    for (const [key, value] of Object.entries(attributes)) node.setAttribute(key, String(value));
+    return node;
+  }
+
+  /**
+   * Assign each commit a lane. A commit takes the lane already reserved for it
+   * (the one a child pushed down), otherwise a free lane; its first parent
+   * inherits the lane and extra parents take their own.
+   */
+  function assignLanes(commits) {
+    const lanes = [];
+    const rows = [];
+    for (const commit of commits) {
+      const before = lanes.slice();
+      let lane = lanes.indexOf(commit.hash);
+      if (lane < 0) {
+        lane = lanes.indexOf(null);
+        if (lane < 0) {
+          lane = lanes.length;
+          lanes.push(null);
+        }
+      }
+      lanes[lane] = null;
+      const parents = commit.parents ?? [];
+      if (parents.length) {
+        lanes[lane] = parents[0];
+        for (let index = 1; index < parents.length; index += 1) {
+          if (lanes.includes(parents[index])) continue;
+          const free = lanes.indexOf(null);
+          if (free < 0) lanes.push(parents[index]);
+          else lanes[free] = parents[index];
+        }
+      }
+      while (lanes.length && lanes[lanes.length - 1] === null) lanes.pop();
+      rows.push({ commit, lane, before, after: lanes.slice() });
+    }
+    const laneCount = rows.reduce(
+      (max, row) => Math.max(max, row.before.length, row.after.length, row.lane + 1),
+      1,
+    );
+    const rowByHash = new Map();
+    rows.forEach((row, index) => rowByHash.set(row.commit.hash, { index, lane: row.lane }));
+    return { rows, rowByHash, width: Math.max(56, laneCount * LANE_WIDTH + 14) };
+  }
+
+  /** IDEA colours the tip by what the commit *is*, not by lane. */
+  function dotColor(commit, lane) {
+    const refs = commit.refs ?? [];
+    if (refs.some((ref) => ref.head)) return "var(--graph-head)";
+    if (refs.some((ref) => ref.kind === "branch")) return "var(--graph-local)";
+    if (refs.some((ref) => ref.kind === "remote")) return "var(--graph-remote)";
+    if (refs.some((ref) => ref.kind === "tag")) return "var(--graph-tag)";
+    return LANE_COLORS[lane % LANE_COLORS.length];
+  }
+
+  function graphNode(row, layout) {
+    const { rowByHash } = layout;
+    const group = svg("svg", { width: layout.width, height: ROW_HEIGHT, class: "log-graph-svg" });
+    const x = (lane) => 10 + lane * LANE_WIDTH;
+    const midY = ROW_HEIGHT / 2;
+
+    const laneIndices = new Set([row.lane]);
+    row.before.forEach((value, index) => { if (value) laneIndices.add(index); });
+    row.after.forEach((value, index) => { if (value) laneIndices.add(index); });
+
+    for (const lane of laneIndices) {
+      const arrives = Boolean(row.before[lane]);
+      const continues = Boolean(row.after[lane]);
+      if (!arrives && !continues) continue;
+      const top = arrives ? 0 : midY;
+      const bottom = continues ? ROW_HEIGHT : midY;
+      if (bottom <= top) continue;
+      group.append(svg("line", {
+        x1: x(lane), y1: top, x2: x(lane), y2: bottom,
+        stroke: LANE_COLORS[lane % LANE_COLORS.length], "stroke-width": 1.6,
+      }));
+    }
+
+    for (const parent of row.commit.parents ?? []) {
+      const target = rowByHash.get(parent);
+      if (!target) continue;
+      if (target.lane === row.lane) {
+        group.append(svg("line", {
+          x1: x(row.lane), y1: midY, x2: x(row.lane), y2: ROW_HEIGHT,
+          stroke: LANE_COLORS[row.lane % LANE_COLORS.length], "stroke-width": 1.6,
+        }));
+        continue;
+      }
+      group.append(svg("path", {
+        d: `M ${x(row.lane)} ${midY} C ${x(row.lane)} ${midY + 9}, ${x(target.lane)} ${ROW_HEIGHT - 9}, ${x(target.lane)} ${ROW_HEIGHT}`,
+        fill: "none",
+        stroke: LANE_COLORS[target.lane % LANE_COLORS.length],
+        "stroke-width": 1.6,
+      }));
+    }
+
+    group.append(svg("circle", {
+      cx: x(row.lane), cy: midY, r: 3.6,
+      fill: dotColor(row.commit, row.lane),
+      stroke: "var(--panel-bg)", "stroke-width": 1.2,
+    }));
+    return group;
+  }
+
+  function refBadges(commit) {
+    return (commit.refs ?? []).map((ref) => {
+      const kind = ref.head ? "head" : ref.kind === "tag" ? "tag" : ref.kind === "remote" ? "remote" : "local";
+      return h("span", { class: `badge ${kind}`, text: ref.name, title: ref.name });
+    });
+  }
+
+  /**
+   * Only one diff overlay may be open at a time. Every `openDiffOverlay` call
+   * used to append another `position: absolute; inset: 0` layer to <body>, and
+   * each layer carried a full diff worth of DOM — so the cost of opening the
+   * next one grew with the number already left open, which is the shape a
+   * steadily climbing renderer CPU takes.
+   */
+  let activeDiffOverlay = null;
+
+  /** Diff overlay: the stand-in for IDEA's "diff opens in the editor". */
+  /**
+   * A commit's diff, in IDEA's shape: a header naming the file, the view
+   * controls, then the diff itself. It replaces the tool window's content
+   * because there is no editor tab to open it into.
+   */
+  function openDiffOverlay(title, text, repo) {
+    // Disposing the previous overlay also drops its keydown listener; leaving
+    // it behind would leak one document-level handler per opened diff.
+    if (activeDiffOverlay) activeDiffOverlay();
+
+    const view = { unified: true, showWhitespaces: false, showLineNumbers: true };
+    const body = h("div", { class: "diff" });
+    const header = h("div", { class: "toolbar diff-overlay-header" });
+    const overlay = h("div", { class: "diff-overlay", role: "dialog", "aria-label": title });
+
+    const close = () => {
+      if (activeDiffOverlay === close) activeDiffOverlay = null;
+      overlay.remove();
+      document.removeEventListener("keydown", onKey, true);
+    };
+    const onKey = (event) => {
+      if (event.key === "Escape") {
+        event.stopPropagation();
+        close();
+      }
+    };
+
+    function paintDiff() {
+      PIG.diff.render(body, {
+        text,
+        unified: view.unified,
+        showWhitespaces: view.showWhitespaces,
+        showLineNumbers: view.showLineNumbers,
+        showFileHeader: true,
+        // A committed change is not something to stage or discard.
+        stageable: false,
+        hunkActions: [],
+      });
+    }
+
+    function paintHeader() {
+      PIG.clear(header);
+      const { name, directory } = PIG.splitPath(title);
+      header.append(icon("file", 14));
+      header.append(h("span", { class: "diff-overlay-title", text: name }));
+      if (directory) header.append(h("span", { class: "diff-overlay-path", text: directory }));
+      header.append(h("div", { class: "toolbar-spacer" }));
+      header.append(iconButton("columns", t("sideBySide") + " / " + t("unified"), () => {
+        view.unified = !view.unified;
+        paintDiff();
+      }, { size: 14 }));
+      header.append(iconButton("eye", t("showWhitespaces"), () => {
+        view.showWhitespaces = !view.showWhitespaces;
+        paintDiff();
+      }, { size: 14 }));
+      header.append(iconButton("list", t("showLineNumbers"), () => {
+        view.showLineNumbers = !view.showLineNumbers;
+        paintDiff();
+      }, { size: 14 }));
+      header.append(iconButton("close", `${t("close")} (Esc)`, close, { size: 14 }));
+    }
+
+    overlay.append(header, body);
+    document.body.append(overlay);
+    paintHeader();
+    paintDiff();
+    document.addEventListener("keydown", onKey, true);
+    activeDiffOverlay = close;
+  }
+
+  function mountLog(root) {
+    const state = {
+      repo: null,
+      commits: [],
+      error: null,
+      repoPath: null,
+      branches: [],
+      tags: [],
+      remotes: [],
+      stashes: [],
+      selection: null,
+      changedFiles: [],
+      details: null,
+      search: "",
+      branchFilter: "",
+      pathFilter: "",
+      userFilter: "",
+      sinceFilter: "",
+      collapsed: Object.create(null),
+      showGraph: true,
+      firstParent: false,
+      noMerges: false,
+      topo: false,
+      showBranches: true,
+      showDetails: true,
+      detailHeight: 46,
+      // What the toolbar is waiting on (null | "refresh" | "push" | "fetch" | "pull"): the active
+      // button spins, the others go disabled.
+      syncing: null,
+    };
+    // Path-filter reloads are debounced: each keystroke is cheap locally but a
+    // `git log` process is not.
+    let pathTimer = null;
+
+    const toolbar = h("div", { class: "toolbar" });
+    let searchButton = null;
+    // The repository chip first, then the branch: which repository, and only
+    // then which branch of it.
+    const repoHolder = h("div", { style: { display: "contents" } });
+    /**
+     * A switch drops what the leaving repository owned *before* the reload
+     * starts: the commit list and its context menus stay live during a refresh,
+     * and they name revisions of a repository the window has already left.
+     */
+    const repoWidget = PIG.repoSelector.mount(repoHolder, {
+      onSwitch: () => {
+        forgoRepositoryState();
+        paintList();
+        paintDetail();
+        refresh().catch(() => {});
+      },
+    });
+    const branchHolder = h("div", { style: { display: "contents" } });
+    const branchWidget = PIG.branchWidget.mount(branchHolder, { onChanged: () => refresh() });
+    const listHost = h("div", { class: "scroll", style: { flex: "1 1 auto" } });
+    const branchesHost = h("div", { class: "scroll" });
+    const branchesPane = h("div", { class: "pane branches-pane column" });
+    const changedHost = h("div", { class: "scroll list changed-files" });
+    const detailsHost = h("div", { class: "commit-details details-pane" });
+    const detailPane = h("div", { class: "log-detail" });
+    const commitsPane = h("div", { class: "commits-pane" });
+    const splitter = h("div", { class: "splitter-y" });
+    const panes = h("div", { class: "log-panes" });
+
+    /** 按钮文案："" → 全部，"me" → 只看我的，具名 → 名字本身。 */
+    function userFilterLabel() {
+      if (state.userFilter === "me") return t("mineOnly");
+      return state.userFilter || t("all");
+    }
+
+    function userFilterButton() {
+      const button = PIG.textButton(
+        `${t("filterByUser")}: ${userFilterLabel()}`,
+        state.userFilter && state.userFilter !== "me"
+          ? `${t("filterByUser")}: ${state.userFilter}`
+          : t("filterByUser"),
+        (event) => openUserFilterMenu(event.currentTarget),
+        { class: "bordered user-filter" },
+      );
+      // 选中的名字可能很长：截断保住工具栏，其余分支/日期按钮不动。
+      button.style.maxWidth = "240px";
+      button.style.overflow = "hidden";
+      button.style.textOverflow = "ellipsis";
+      button.style.whiteSpace = "nowrap";
+      return button;
+    }
+
+    /**
+     * 切过滤先重画工具栏再拉日志：按钮文案本身就是选中态的反馈，
+     * 只调 loadLog 的话文案会停在旧值直到下次整刷（分支/日期按钮同病，
+     * 但那是既有行为不在本次范围）。
+     */
+    function applyUserFilter(value) {
+      state.userFilter = value;
+      paintToolbar();
+      loadLog();
+    }
+
+
+    /**
+     * IDEA 式的提交者菜单：全部 / 只看我的 / 最近提交者（带提交数）/ 手输。
+     * 名单来自 `git/authors`（近 2000 条提交聚合，取前 20）；手输按名字或
+     * 邮箱走服务端 `--author` 过滤，回车即用，名单之外的人也能滤。
+     */
+    async function openUserFilterMenu(anchor) {
+      let authors = [];
+      try {
+        const result = await invoke("git/authors", { limit: 20 });
+        if (result?.ok) authors = result.authors ?? [];
+      } catch {
+        authors = [];
+      }
+      // 工具栏每次刷新都会重建按钮，await 期间按钮可能已被替换——按标记类
+      // 找回活的按钮，找不到才放弃（下次点击自然有活锚点）。
+      const live = anchor?.isConnected ? anchor : toolbar.querySelector(".user-filter");
+      if (!live) return;
+      const listed = authors.filter((entry) => entry?.name);
+      const items = [
+        { type: "label", label: t("filterByUser") },
+        { label: t("all"), checked: !state.userFilter, onSelect: () => applyUserFilter("") },
+        {
+          label: t("mineOnly"),
+          title: state.repo?.user ? `${t("mineOnly")} — ${state.repo.user}` : t("mineOnly"),
+          checked: state.userFilter === "me",
+          onSelect: () => applyUserFilter("me"),
+        },
+      ];
+      if (listed.length || (state.userFilter && state.userFilter !== "me")) {
+        items.push({ type: "separator" }, { type: "label", label: t("recentUsers") });
+        // 当前手输值不在名单里时单独给一行带勾，避免“选了却看不见选中态”。
+        if (state.userFilter && state.userFilter !== "me" && !listed.some((entry) => entry.name === state.userFilter)) {
+          items.push({ label: state.userFilter, checked: true, onSelect: () => applyUserFilter(state.userFilter) });
+        }
+        for (const entry of listed) {
+          items.push({
+            label: entry.name,
+            shortcut: entry.count > 1 ? `${entry.count}` : undefined,
+            title: entry.email ? `${entry.name} <${entry.email}>` : entry.name,
+            checked: state.userFilter === entry.name,
+            onSelect: () => applyUserFilter(entry.name),
+          });
+        }
+      }
+      const field = h("input", {
+        type: "text",
+        value: state.userFilter && state.userFilter !== "me" ? state.userFilter : "",
+        placeholder: t("filterUserPlaceholder"),
+      });
+      field.addEventListener("keydown", (keyEvent) => {
+        if (keyEvent.key !== "Enter") return;
+        PIG.closePopup();
+        applyUserFilter(field.value.trim());
+      });
+      items.push({ type: "separator" }, { type: "custom", node: field });
+      try {
+        popup(live, items, { focus: true });
+      } catch {
+        // 解析与打开之间工具栏又重建了：这次放弃，下次点击即是活锚点。
+      }
+    }
+
+    function paintToolbar() {
+      PIG.clear(toolbar);
+      toolbar.append(repoHolder);
+      toolbar.append(branchHolder);
+      toolbar.append(h("div", { class: "toolbar-separator" }));
+      const syncDisabled = Boolean(state.syncing);
+      const syncButton = (name, title, kind, onClick) => {
+        const button = iconButton(name, title, onClick, { disabled: syncDisabled });
+        if (state.syncing === kind) {
+          button.classList.add("busy");
+          button.append(PIG.spinner(false));
+        }
+        return button;
+      };
+      toolbar.append(syncButton("refresh", tip("refresh", KEYS.refresh), "refresh", async () => {
+        if (state.syncing) return;
+        state.syncing = "refresh";
+        paintToolbar();
+        try {
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("push", t("push"), "push", async () => {
+        if (state.syncing) return;
+        // Note: Git 视图的 Push 同样走多仓对话框，单仓时对话框内只有一行 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+        state.syncing = "push";
+        paintToolbar();
+        try {
+          await PIG.openPushDialog({ onPushed: async () => { await refresh(); } });
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("fetch", t("fetch"), "fetch", async () => {
+        if (state.syncing) return;
+        state.syncing = "fetch";
+        paintToolbar();
+        try {
+          PIG.reportSync(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch")), t("fetch"));
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("arrowDown", t("pull"), "pull", async () => {
+        if (state.syncing) return;
+        state.syncing = "pull";
+        paintToolbar();
+        try {
+          const result = await PIG.runWithPill(t("pulling"), () => invoke("git/pull"));
+          PIG.reportSync(result, t("pull"));
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(iconButton("arrowUp", t("goToHead"), (event) => {
+        const head = state.repo?.branch?.oid;
+        if (!head) return;
+        select(head).then(() => {
+          const node = listHost.querySelector(".log-row.current-branch");
+          node?.scrollIntoView({ block: "center" });
+          node?.focus();
+        }).catch(() => {});
+      }));
+      // Held in a variable so the Find shortcut can open the same popup.
+      searchButton = iconButton("search", tip("search", KEYS.find), (event) => {
+        const field = h("input", { type: "text", value: state.search, placeholder: t("search") });
+        field.addEventListener("input", () => { state.search = field.value; paintList(); });
+        popup(event.currentTarget, [{ type: "custom", node: field }], { focus: true });
+      });
+      toolbar.append(searchButton);
+      toolbar.append(iconButton("branch", state.branchFilter || t("allBranches"), (event) => {
+        popup(event.currentTarget, [
+          { type: "label", label: t("filterByBranch") },
+          { label: t("allBranches"), checked: !state.branchFilter, onSelect: () => { state.branchFilter = ""; loadLog(); } },
+          ...state.branches.filter((branch) => !branch.remote).map((branch) => ({
+            label: branch.name,
+            checked: state.branchFilter === branch.name,
+            onSelect: () => { state.branchFilter = branch.name; loadLog(); },
+          })),
+        ]);
+      }));
+      // Note: 提交者过滤抄 IDEA 的三段式——全部 / 只看我的 / 最近提交者名单 + 手输（名字或邮箱回车即滤），"me" 按仓库自身 user.name 解析所以跟仓走，具名作者是仓相关的、切仓时丢掉 — 见 .agents/notes/implemented/feature/2026-09-14-git-log-user-filter.md
+      toolbar.append(userFilterButton());
+      toolbar.append(PIG.textButton(
+        `${t("date")}: ${state.sinceFilter === "day" ? t("lastDay") : state.sinceFilter === "week" ? t("lastWeek") : state.sinceFilter === "month" ? t("lastMonth") : t("anyTime")}`,
+        t("date"),
+        (event) => {
+          popup(event.currentTarget, [
+            { type: "label", label: t("date") },
+            { label: t("anyTime"), checked: !state.sinceFilter, onSelect: () => { state.sinceFilter = ""; loadLog(); } },
+            { label: t("lastDay"), checked: state.sinceFilter === "day", onSelect: () => { state.sinceFilter = "day"; loadLog(); } },
+            { label: t("lastWeek"), checked: state.sinceFilter === "week", onSelect: () => { state.sinceFilter = "week"; loadLog(); } },
+            { label: t("lastMonth"), checked: state.sinceFilter === "month", onSelect: () => { state.sinceFilter = "month"; loadLog(); } },
+          ]);
+        },
+      ));
+      toolbar.append(iconButton("file", state.pathFilter || t("filterByPaths"), (event) => {
+        const field = h("input", { type: "text", value: state.pathFilter, placeholder: "src/…" });
+        field.addEventListener("input", () => {
+          state.pathFilter = field.value;
+          if (pathTimer !== null) window.clearTimeout(pathTimer);
+          // Note: 路径过滤走服务端 `git log -- <path>` 而非本地隐藏行——本地过滤会把有路径的提交也藏掉，且与分支/用户过滤语义不一致 — 见 .agents/notes/implemented/feature/2026-09-14-git-operations-parity.md
+          pathTimer = window.setTimeout(() => { pathTimer = null; loadLog(); }, 450);
+        });
+        field.addEventListener("keydown", (keyEvent) => {
+          if (keyEvent.key === "Enter") {
+            if (pathTimer !== null) { window.clearTimeout(pathTimer); pathTimer = null; }
+            loadLog();
+          }
+        });
+        popup(event.currentTarget, [
+          { type: "label", label: t("filterByPaths") },
+          { type: "custom", node: field },
+        ], { focus: true });
+      }));
+      toolbar.append(iconButton("gear", t("graphOptions"), (event) => {
+        popup(event.currentTarget, [
+          { type: "label", label: t("graphOptions") },
+          { label: t("byCommitDate"), checked: !state.topo, onSelect: () => { state.topo = false; loadLog(); } },
+          { label: t("topologically"), checked: state.topo, onSelect: () => { state.topo = true; loadLog(); } },
+          { type: "separator" },
+          { label: t("showFirstParent"), checked: state.firstParent, onSelect: () => { state.firstParent = !state.firstParent; loadLog(); } },
+          { label: t("noMerges"), checked: state.noMerges, onSelect: () => { state.noMerges = !state.noMerges; loadLog(); } },
+          { type: "separator" },
+          { label: t("showGraph"), checked: state.showGraph, onSelect: () => { state.showGraph = !state.showGraph; paintList(); } },
+          { label: t("branches"), checked: state.showBranches, onSelect: () => { state.showBranches = !state.showBranches; paintPanes(); } },
+          { label: t("showDetails"), checked: state.showDetails, onSelect: () => { state.showDetails = !state.showDetails; paintPanes(); } },
+        ]);
+      }));
+      toolbar.append(h("div", { class: "toolbar-spacer" }));
+      toolbar.append(h("div", { class: "toolbar-spacer" }));
+      // Name whichever folder is open: the repository root when there is one,
+      // otherwise the workspace, so the empty state has something to point at.
+      const folder = state.repo?.repo?.name
+        ?? (state.repoPath ? state.repoPath.split(/[/\\]/).filter(Boolean).at(-1) : "");
+      toolbar.append(h("span", {
+        style: { fontSize: "11px", color: "var(--fg-muted)" },
+        title: state.repoPath ?? "",
+        text: folder ?? "",
+      }));
+    }
+
+    function visibleCommits() {
+      const search = state.search.trim().toLowerCase();
+      return state.commits.filter((commit) => {
+        if (search && !`${commit.subject} ${commit.short} ${commit.author}`.toLowerCase().includes(search)) return false;
+        return true;
+      });
+    }
+
+    function paintList() {
+      PIG.clear(listHost);
+      // A workspace that is not a repository (or a missing git binary) has to
+      // say so: an empty list reads as "this tool is broken" instead of
+      // "there is nothing here to show".
+      if (state.error) {
+        listHost.append(h("div", { class: "empty-state" }, [
+          h("div", { class: "headline", text: t("notARepository") }),
+          h("code", { text: state.repoPath ?? "" }),
+          h("div", { class: "muted", text: t("repositoryHint") }),
+        ]));
+        return;
+      }
+      const commits = visibleCommits();
+      if (!commits.length) {
+        listHost.append(h("div", { class: "empty-state" }, [
+          h("div", { class: "headline", text: t("noCommits") }),
+        ]));
+        return;
+      }
+      const layout = assignLanes(commits);
+      const headOid = state.repo?.branch?.oid;
+      const me = state.repo?.user;
+
+      layout.rows.forEach((row, index) => {
+        const commit = row.commit;
+        const isHead = Boolean(headOid) && commit.hash === headOid;
+        const selected = state.selection === commit.hash;
+        const node = h("div", {
+          class: `log-row${isHead ? " current-branch" : ""}${me && commit.author === me ? " mine" : ""}`,
+          role: "option",
+          tabindex: "0",
+          "aria-selected": selected ? "true" : "false",
+          style: { "--graph-width": state.showGraph ? `${layout.width}px` : "6px" },
+          onclick: () => select(commit.hash),
+          oncontextmenu: (event) => {
+            event.preventDefault();
+            select(commit.hash);
+            commitContextMenu(event.currentTarget, commit);
+          },
+        }, [
+          state.showGraph ? h("div", { class: "log-graph" }, [graphNode(row, layout)]) : h("div"),
+          h("div", { class: "log-body" }, [
+            h("div", { class: "log-subject", title: commit.subject, text: commit.subject }),
+            h("div", { class: "log-meta-line" }, [
+              ...refBadges(commit),
+              h("span", { class: "log-author", text: commit.author }),
+              h("span", { class: "log-date", text: PIG.relativeTime(commit.timestamp) }),
+              h("span", { class: "log-hash", text: commit.short }),
+            ]),
+          ]),
+        ]);
+
+        node.addEventListener("keydown", (event) => {
+          const move = (target) => {
+            const next = layout.rows[target];
+            if (!next) return;
+            select(next.commit.hash);
+            listHost.children[target]?.focus();
+          };
+          if (event.key === "Enter" || event.key === " ") {
+            event.preventDefault();
+            select(commit.hash);
+          }
+          if (event.key === "ArrowDown") { event.preventDefault(); move(index + 1); }
+          if (event.key === "ArrowUp") { event.preventDefault(); move(index - 1); }
+        });
+        listHost.append(node);
+      });
+    }
+
+    function paintBranches() {
+      PIG.clear(branchesHost);
+      if (!state.showBranches) return;
+      paintHeadRow();
+      paintBranchGroup(t("localBranches"), state.branches.filter((branch) => !branch.remote), "local");
+      paintBranchGroup(t("remoteBranches"), state.branches.filter((branch) => branch.remote), "remote");
+      paintTagGroup();
+      paintRemoteGroup();
+      paintStashGroup();
+    }
+
+    /** IDEA pins HEAD above Local — the revision the window is standing on. */
+    function paintHeadRow() {
+      const branch = state.repo?.branch;
+      if (!branch) return;
+      const name = branch.head ?? (branch.detached ? `detached @ ${String(branch.oid ?? "").slice(0, 8)}` : t("head"));
+      branchesHost.append(h("div", {
+        class: "tree-row",
+        tabindex: "0",
+        title: `${t("head")}: ${name}`,
+        onclick: () => {
+          if (branch.oid) select(branch.oid).catch(() => {});
+        },
+        oncontextmenu: (event) => {
+          event.preventDefault();
+          const head = state.commits.find((commit) => commit.hash === branch.oid);
+          if (head) commitContextMenu(event.currentTarget, head);
+        },
+      }, [
+        h("span", { class: "status-cell", style: { color: "var(--graph-head)" }, text: "◆" }),
+        h("span", { class: "name", text: `HEAD (${name})` }),
+      ]));
+    }
+
+    /** IDEA folds `feature/*` into one expandable node — same here, per group. */
+    function folderOf(remote, name) {
+      const parts = String(name).split("/");
+      if (parts.length < 2) return "";
+      return remote ? parts[0] : parts.slice(0, -1).join("/");
+    }
+
+    function leafOf(remote, name) {
+      const parts = String(name).split("/");
+      if (parts.length < 2) return name;
+      return remote ? parts.slice(1).join("/") : parts[parts.length - 1];
+    }
+
+    function paintBranchGroup(label, items, key) {
+      if (!items.length) return;
+      branchesHost.append(h("div", { class: "group-header" }, [
+        h("span", { text: label }),
+        h("span", { class: "count", text: `${items.length}` }),
+      ]));
+      const folders = new Map();
+      const loose = [];
+      for (const branch of items) {
+        const folder = folderOf(branch.remote, branch.name);
+        if (folder) {
+          if (!folders.has(folder)) folders.set(folder, []);
+          folders.get(folder).push(branch);
+        } else {
+          loose.push(branch);
+        }
+      }
+      for (const folder of [...folders.keys()].sort((a, b) => a.localeCompare(b))) {
+        const id = `${key}:${folder}`;
+        const collapsed = Boolean(state.collapsed[id]);
+        const rows = folders.get(folder);
+        const header = h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: folder,
+          onclick: () => { state.collapsed[id] = !state.collapsed[id]; paintBranches(); },
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          icon(collapsed ? "chevronRight" : "chevronDown", 12),
+          icon("folder", 13),
+          h("span", { class: "name", text: folder }),
+          h("span", { class: "count", text: `${rows.length}` }),
+        ]);
+        header.addEventListener("keydown", (event) => {
+          if (event.key === "Enter" || event.key === " ") {
+            event.preventDefault();
+            state.collapsed[id] = !state.collapsed[id];
+            paintBranches();
+          }
+        });
+        branchesHost.append(header);
+        if (collapsed) continue;
+        for (const branch of rows) branchesHost.append(branchRow(branch, leafOf(branch.remote, branch.name), 24));
+      }
+      for (const branch of loose) branchesHost.append(branchRow(branch, branch.name, 8));
+    }
+
+    function branchRow(branch, leaf, indent) {
+      const row = h("div", {
+        class: "tree-row",
+        tabindex: "0",
+        title: `${branch.name}${branch.upstream ? ` → ${branch.upstream}` : ""}${branch.subject ? `\n${branch.subject}` : ""}`,
+        onclick: () => checkout(branch),
+        oncontextmenu: (event) => {
+          event.preventDefault();
+          popup(event.currentTarget, branchActions(branch));
+        },
+      }, [
+        h("span", { class: "indent", style: { width: `${indent}px` } }),
+        branch.current
+          ? h("span", { class: "status-cell", style: { color: "var(--graph-head)" }, text: "●" })
+          : h("span", { class: "indent", style: { width: "12px" } }),
+        h("span", { class: "name", text: leaf, title: branch.name }),
+      ]);
+      row.addEventListener("keydown", (event) => {
+        if (event.key === "Enter" || event.key === " ") {
+          event.preventDefault();
+          checkout(branch);
+        }
+      });
+      return row;
+    }
+
+    function paintTagGroup() {
+      if (!state.tags.length) return;
+      branchesHost.append(h("div", { class: "group-header" }, [
+        h("span", { text: t("tags") }),
+        h("span", { class: "count", text: `${state.tags.length}` }),
+      ]));
+      for (const tag of state.tags) {
+        const active = state.branchFilter === tag.name;
+        const row = h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: `${tag.name}${tag.subject ? `\n${tag.subject}` : ""}`,
+          onclick: () => {
+            state.branchFilter = active ? "" : tag.name;
+            loadLog();
+          },
+          oncontextmenu: (event) => {
+            event.preventDefault();
+            popup(event.currentTarget, tagActions(tag));
+          },
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          active
+            ? h("span", { class: "status-cell", style: { color: "var(--graph-head)" }, text: "●" })
+            : icon("tag", 12),
+          h("span", { class: "name", text: tag.name }),
+          tag.short ? h("span", { class: "path", text: tag.short }) : null,
+        ]);
+        branchesHost.append(row);
+      }
+    }
+
+    function paintRemoteGroup() {
+      if (!state.remotes.length) return;
+      branchesHost.append(h("div", { class: "group-header" }, [
+        h("span", { text: t("remotes") }),
+        h("span", { class: "count", text: `${state.remotes.length}` }),
+      ]));
+      for (const remote of state.remotes) {
+        const url = remote.fetch ?? remote.push ?? "";
+        const row = h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: url || remote.name,
+          onclick: (event) => popup(event.currentTarget, remoteActions(remote)),
+          oncontextmenu: (event) => {
+            event.preventDefault();
+            popup(event.currentTarget, remoteActions(remote));
+          },
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          icon("branch", 12),
+          h("span", { class: "name", text: remote.name }),
+          url ? h("span", { class: "path", text: url }) : null,
+        ]);
+        branchesHost.append(row);
+      }
+    }
+
+    function paintStashGroup() {
+      if (!state.stashes.length) return;
+      branchesHost.append(h("div", { class: "group-header" }, [
+        h("span", { text: t("stashes") }),
+        h("span", { class: "count", text: `${state.stashes.length}` }),
+      ]));
+      for (const stash of state.stashes) {
+        const row = h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: `${stash.ref}${stash.subject ? `\n${stash.subject}` : ""}`,
+          onclick: () => showStashDiff(stash),
+          oncontextmenu: (event) => {
+            event.preventDefault();
+            popup(event.currentTarget, stashActions(stash));
+          },
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          h("span", { class: "status-cell", text: "≡" }),
+          h("span", { class: "name", text: stash.subject || stash.ref }),
+          h("span", { class: "path", text: PIG.relativeTime(stash.timestamp) }),
+        ]);
+        branchesHost.append(row);
+      }
+    }
+
+    async function showStashDiff(stash) {
+      const result = await invoke("git/stash-show", { ref: stash.ref });
+      if (!result.ok) {
+        toast(PIG.errorText(result), "error");
+        return;
+      }
+      if (!String(result.text ?? "").trim()) {
+        toast(t("noDiff"), "info");
+        return;
+      }
+      openDiffOverlay(`${stash.ref} ${stash.subject ?? ""}`.trim(), result.text);
+    }
+
+    function tagActions(tag) {
+      return [
+        {
+          label: t("newBranchFromHere"),
+          onSelect: async () => {
+            const name = await dialog({
+              title: t("newBranchFromHere"),
+              message: `${t("newBranch")} @ ${tag.name}`,
+              input: { value: "" },
+              confirmLabel: t("newBranch"),
+            });
+            if (!name) return;
+            const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name, create: true, startPoint: tag.name }));
+            toast(result.ok ? `${t("newBranch")}: ${name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("pushTag"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("pushing"), () => invoke("git/tag-push", { name: tag.name }));
+            PIG.reportSync(result, t("pushTag"));
+            await refresh();
+          },
+        },
+        { label: t("copy"), onSelect: () => PIG.copyText(tag.name) },
+        { type: "separator" },
+        {
+          label: t("deleteTag"),
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("deleteTagTitle"),
+              message: tag.name,
+              confirmLabel: t("deleteTag"),
+              danger: true,
+            });
+            if (!confirmed) return;
+            const result = await invoke("git/tag-delete", { name: tag.name });
+            toast(result.ok ? `${t("deleteTag")}: ${tag.name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+      ];
+    }
+
+    function remoteActions(remote) {
+      return [
+        {
+          label: t("fetch"),
+          onSelect: async () => {
+            PIG.reportSync(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch", { remote: remote.name })), t("fetch"));
+            await refresh();
+          },
+        },
+        {
+          label: `${t("fetch")} (${t("prune")})`,
+          onSelect: async () => {
+            PIG.reportSync(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch", { remote: remote.name, prune: true })), t("fetch"));
+            await refresh();
+          },
+        },
+        { label: t("copy"), onSelect: () => PIG.copyText(remote.fetch ?? remote.push ?? remote.name) },
+      ];
+    }
+
+    function stashActions(stash) {
+      return [
+        { label: t("showStash"), onSelect: () => showStashDiff(stash) },
+        {
+          label: t("applyStash"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("unstashing"), () => invoke("git/stash", { action: "apply", ref: stash.ref }));
+            toast(result.ok ? `${t("applyStash")}: ${stash.ref}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("unstash"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("unstashing"), () => invoke("git/stash", { action: "pop", ref: stash.ref }));
+            toast(result.ok ? `${t("unstash")}: ${stash.ref}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        { type: "separator" },
+        {
+          label: t("dropStash"),
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("dropStashConfirm"),
+              message: `${stash.ref}  ${stash.subject ?? ""}`.trim(),
+              confirmLabel: t("dropStash"),
+              danger: true,
+            });
+            if (!confirmed) return;
+            const result = await invoke("git/stash", { action: "drop", ref: stash.ref });
+            toast(result.ok ? `${t("dropStash")}: ${stash.ref}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+      ];
+    }
+
+    async function checkout(branch) {
+      if (branch.current) return;
+      const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name: branch.name, startPoint: branch.remote ? branch.name : undefined, track: branch.remote ? true : undefined }));
+      toast(result.ok ? `${t("checkout")}: ${branch.name}` : result.message, result.ok ? "info" : "error");
+      await refresh();
+    }
+
+    function branchActions(branch) {
+      // Note: 死文案接活——mergeIntoCurrent/rebaseOnto/deleteBranch 的 key 早就存在但零引用，本次把菜单真正挂上去 — 见 .agents/notes/implemented/feature/2026-09-14-git-operations-parity.md
+      const items = [
+        { label: t("checkout"), disabled: branch.current, onSelect: () => checkout(branch) },
+        {
+          label: t("newBranchFromHere"),
+          onSelect: async () => {
+            const name = await dialog({
+              title: t("newBranchFromHere"),
+              message: `${t("newBranch")} @ ${branch.name}`,
+              input: { value: "" },
+              confirmLabel: t("newBranch"),
+            });
+            if (!name) return;
+            const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name, create: true, startPoint: branch.name }));
+            toast(result.ok ? `${t("newBranch")}: ${name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        { type: "separator" },
+        {
+          label: t("mergeIntoCurrent"),
+          disabled: branch.current,
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("mergeTitle"),
+              message: `${branch.name} → ${state.repo?.branch?.head ?? t("head")}`,
+              confirmLabel: t("merge"),
+            });
+            if (!confirmed) return;
+            const result = await PIG.runWithPill(t("merge"), () => invoke("git/merge", { ref: branch.name }));
+            if (result.ok) {
+              toast(`${t("merge")}: ${branch.name}`, "info");
+            } else {
+              const text = String(result.message ?? "");
+              const conflicted = /CONFLICT|Automatic merge failed|fix conflicts/i.test(`${result.stdout ?? ""}\n${result.stderr ?? ""}\n${text}`);
+              toast(`${t("merge")}: ${text}${conflicted ? `\n\n${t("mergeConflicts")}` : ""}`, "error");
+            }
+            await refresh();
+          },
+        },
+        {
+          label: t("rebaseOnto"),
+          disabled: branch.current,
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("rebaseTitle"),
+              message: `${state.repo?.branch?.head ?? t("head")} → ${branch.name}`,
+              confirmLabel: t("rebase"),
+              danger: true,
+            });
+            if (!confirmed) return;
+            const result = await PIG.runWithPill(t("rebase"), () => invoke("git/rebase", { ref: branch.name }));
+            if (result.ok) {
+              toast(`${t("rebase")}: ${branch.name}`, "info");
+            } else {
+              const text = String(result.message ?? "");
+              const conflicted = /CONFLICT|could not apply|fix conflicts/i.test(`${result.stdout ?? ""}\n${result.stderr ?? ""}\n${text}`);
+              toast(`${t("rebase")}: ${text}${conflicted ? `\n\n${t("rebaseConflicts")}` : ""}`, "error");
+            }
+            await refresh();
+          },
+        },
+        { type: "separator" },
+      ];
+      if (!branch.remote) {
+        items.push(
+          {
+            label: t("renameBranch"),
+            onSelect: async () => {
+              const name = await dialog({
+                title: t("renameTitle"),
+                message: branch.name,
+                input: { value: branch.name },
+                confirmLabel: t("renameBranch"),
+              });
+              if (!name || name === branch.name) return;
+              const result = await invoke("git/branch-rename", { old: branch.name, new: name });
+              toast(result.ok ? `${t("renameBranch")}: ${name}` : result.message, result.ok ? "info" : "error");
+              await refresh();
+            },
+          },
+          {
+            label: t("setUpstream"),
+            onSelect: async () => {
+              const upstream = await dialog({
+                title: t("setUpstreamTitle"),
+                message: branch.name,
+                input: { value: branch.upstream ?? "" },
+                confirmLabel: t("setUpstream"),
+              });
+              if (!upstream) return;
+              const result = await invoke("git/branch-upstream", { name: branch.name, upstream });
+              toast(result.ok ? `${t("setUpstream")}: ${upstream}` : result.message, result.ok ? "info" : "error");
+              await refresh();
+            },
+          },
+        );
+        if (branch.upstream) {
+          items.push({
+            label: t("unsetUpstream"),
+            onSelect: async () => {
+              const result = await invoke("git/branch-upstream", { name: branch.name, unset: true });
+              toast(result.ok ? t("unsetUpstream") : result.message, result.ok ? "info" : "error");
+              await refresh();
+            },
+          });
+        }
+      }
+      items.push(
+        {
+          label: t("deleteBranch"),
+          disabled: branch.current,
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("deleteBranchTitle"),
+              message: branch.remote ? `${branch.name} (${t("remoteBranches")})` : branch.name,
+              confirmLabel: t("deleteBranch"),
+              danger: true,
+            });
+            if (!confirmed) return;
+            const payload = branch.remote
+              ? { name: branch.name, remote: branch.name.split("/")[0] }
+              : { name: branch.name };
+            let result = await invoke("git/branch-delete", payload);
+            if (!result.ok && /not fully merged/i.test(String(result.message ?? ""))) {
+              const force = await dialog({
+                title: t("deleteBranchTitle"),
+                message: result.message,
+                confirmLabel: t("deleteBranch"),
+                danger: true,
+              });
+              if (force) result = await invoke("git/branch-delete", { ...payload, force: true });
+            }
+            toast(result.ok ? `${t("deleteBranch")}: ${branch.name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        { label: t("copyBranchName"), onSelect: () => PIG.copyText(branch.name) },
+        { type: "separator" },
+        {
+          label: t("push"),
+          onSelect: async () => {
+            // No remote/branch: this menu belongs to the Log, where the item is
+            // about the checked-out branch. The engine pushes where that branch
+            // tracks instead of assuming `origin`.
+            const result = await PIG.runWithPill(t("pushing"), () => invoke("git/push", { setUpstream: !state.repo?.branch?.upstream }));
+            PIG.reportSync(result, t("push"));
+            await PIG.refreshTrackingRefs(result);
+            await refresh();
+          },
+        },
+        {
+          label: t("fetch"),
+          onSelect: async () => {
+            PIG.reportSync(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch")), t("fetch"));
+            await refresh();
+          },
+        },
+      );
+      return items;
+    }
+
+    function paintDetail() {
+      PIG.clear(changedHost);
+      PIG.clear(detailsHost);
+      if (!state.selection) {
+        changedHost.append(h("div", { class: "empty-state" }, [h("div", { class: "headline", text: t("changedFiles") })]));
+        return;
+      }
+      for (const file of state.changedFiles) {
+        const { name, directory } = PIG.splitPath(file.path);
+        changedHost.append(h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: file.path,
+          onclick: () => openCommitDiff(file.path),
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          h("span", { class: "status-cell", style: { color: PIG.statusColor(file.status) }, text: file.status }),
+          h("span", { class: "name", text: name }),
+          directory ? h("span", { class: "path", text: directory }) : null,
+        ]));
+      }
+      const details = state.details;
+      if (!details) return;
+      detailsHost.append(h("dl", null, [
+        h("dt", { text: t("hash") }), h("dd", { class: "mono", text: details.hash ?? "" }),
+        h("dt", { text: t("author") }), h("dd", { text: details.author ? `${details.author} <${details.email ?? ""}>` : "" }),
+        h("dt", { text: t("date") }), h("dd", { text: PIG.formatDateTime(details.timestamp) }),
+        h("dt", { text: t("subject") }), h("dd", { text: details.subject ?? "" }),
+      ]));
+      if (details.body) detailsHost.append(h("div", { class: "message-body", text: details.body }));
+    }
+
+    function paintPanes() {
+      branchesPane.classList.toggle("hidden", !state.showBranches);
+      detailPane.classList.toggle("hidden", !state.showDetails);
+      splitter.classList.toggle("hidden", !state.showDetails);
+    }
+
+    function paintAll() {
+      paintToolbar();
+      paintBranches();
+      paintList();
+      paintDetail();
+      paintPanes();
+    }
+
+    async function openCommitDiff(path) {
+      if (!state.selection) return;
+      const result = await invoke("git/commit-diff", { hash: state.selection });
+      if (!result.ok) {
+        toast(PIG.errorText(result), "error");
+        return;
+      }
+      const parsed = PIG.diff.parse(result.text);
+      if (path) {
+        const single = parsed.files.find((entry) => PIG.diff.displayPath(entry) === path);
+        // Fall back to the whole commit if the path is not in the patch.
+        if (single) {
+          openDiffOverlay(path, PIG.diff.patchFor(single, single.hunks));
+          return;
+        }
+      }
+      // No file picked: show the commit in full. Rendering only the first file
+      // would quietly hide the rest of a multi-file commit.
+      const summary = `${result.meta?.short ?? ""}`
+        + (parsed.files.length > 1 ? ` · ${parsed.files.length} ${t("files")}` : "");
+      openDiffOverlay(summary.trim() || t("showDiff"), result.text);
+    }
+
+    function commitContextMenu(anchor, commit) {
+      const isHead = Boolean(state.repo?.branch?.oid) && commit.hash === state.repo.branch.oid;
+      popup(anchor, [
+        { label: t("showDiff"), onSelect: () => openCommitDiff(null) },
+        { label: t("copyRevisionNumber"), onSelect: () => PIG.copyText(commit.hash) },
+        {
+          label: t("copyMessage"),
+          onSelect: () => {
+            const body = state.selection === commit.hash && state.details?.hash === commit.hash
+              ? String(state.details.body ?? "").trim()
+              : "";
+            PIG.copyText(body ? `${commit.subject}\n\n${body}` : commit.subject);
+          },
+        },
+        {
+          label: t("compareWithHead"),
+          onSelect: async () => {
+            const result = await invoke("git/compare", { a: "HEAD", b: commit.hash });
+            if (!result.ok) {
+              toast(PIG.errorText(result), "error");
+              return;
+            }
+            if (!String(result.text ?? "").trim()) {
+              toast(t("noDiff"), "info");
+              return;
+            }
+            openDiffOverlay(`${t("compareWithHead")}: HEAD ↔ ${commit.short}`, result.text);
+          },
+        },
+        { type: "separator" },
+        {
+          label: t("checkoutRevision"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name: commit.hash }));
+            toast(result.ok ? `${t("checkoutRevision")}: ${commit.short}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("newBranchFromHere"),
+          onSelect: async () => {
+            const name = await dialog({
+              title: t("newBranchFromHere"),
+              message: `${t("newBranch")} @ ${commit.short}`,
+              input: { value: "" },
+              confirmLabel: t("newBranch"),
+            });
+            if (!name) return;
+            const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name, create: true, startPoint: commit.hash }));
+            toast(result.ok ? `${t("newBranch")}: ${name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("newTag"),
+          onSelect: async () => {
+            const name = await dialog({
+              title: t("newTag"),
+              message: `${t("newTag")} @ ${commit.short}`,
+              input: { value: "" },
+              confirmLabel: t("newTag"),
+            });
+            if (!name) return;
+            const result = await invoke("git/tag", { name, hash: commit.hash });
+            toast(result.ok ? `${t("newTag")}: ${name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        { type: "separator" },
+        {
+          label: t("cherryPick"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("cherryPick"), () => invoke("git/cherry-pick", { hash: commit.hash }));
+            toast(result.ok ? `${t("cherryPick")}: ${commit.short}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("revert"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("revert"), () => invoke("git/revert", { hash: commit.hash }));
+            toast(result.ok ? `${t("revert")}: ${commit.short}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("resetToHere"),
+          onSelect: async () => {
+            const mode = await dialog({
+              title: t("resetToHere"),
+              message: `${t("reset")} --mode ${commit.short}`,
+              detail: `${t("soft")} | ${t("mixed")} | ${t("hard")}`,
+              input: { value: "mixed" },
+              confirmLabel: t("reset"),
+              danger: true,
+            });
+            if (!mode) return;
+            const result = await PIG.runWithPill(t("reset"), () => invoke("git/reset", { hash: commit.hash, mode: String(mode).trim().toLowerCase() }));
+            toast(result.ok ? `${t("reset")} --${mode} ${commit.short}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("editCommitMessage"),
+          disabled: !isHead,
+          title: isHead ? t("editCommitMessage") : `${t("editCommitMessage")} — ${t("head")} only`,
+          onSelect: async () => {
+            const message = await dialog({
+              title: t("editCommitMessage"),
+              message: commit.subject,
+              input: { value: commit.subject },
+              confirmLabel: t("ok"),
+            });
+            if (!message) return;
+            const result = await invoke("git/amend-message", { message });
+            toast(result.ok ? t("editCommitMessage") : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+      ]);
+    }
+
+    async function select(hash) {
+      state.selection = hash;
+      paintList();
+      const [files, details] = await Promise.all([
+        invoke("git/commit-files", { hash }),
+        invoke("git/commit-diff", { hash }),
+      ]);
+      state.changedFiles = files.files ?? [];
+      state.details = details.meta ?? null;
+      paintDetail();
+    }
+
+    async function loadLog() {
+      const since = state.sinceFilter === "day" ? "1 day ago"
+        : state.sinceFilter === "week" ? "1 week ago"
+        : state.sinceFilter === "month" ? "1 month ago"
+        : undefined;
+      // Note: 具名作者直传服务端 `--author`（名字或邮箱都可），与 "me" 解析后的 user.name 走同一条路 — 见 main.js readLog
+      const author = state.userFilter === "me"
+        ? (state.repo?.user ?? undefined)
+        : (state.userFilter.trim() ? state.userFilter.trim() : undefined);
+      const paths = state.pathFilter.trim() ? [state.pathFilter.trim()] : undefined;
+      const result = await invoke("git/log", {
+        limit: 200,
+        branch: state.branchFilter || undefined,
+        firstParent: state.firstParent,
+        noMerges: state.noMerges,
+        topo: state.topo,
+        author,
+        since,
+        paths,
+      });
+      state.commits = result.commits ?? [];
+      if (state.selection && !state.commits.some((commit) => commit.hash === state.selection)) {
+        state.selection = null;
+        state.changedFiles = [];
+        state.details = null;
+      }
+      paintList();
+      paintDetail();
+      if (!state.selection && state.commits.length) await select(state.commits[0].hash);
+    }
+
+    async function loadRefs() {
+      const [branches, tags, remotes, stashes] = await Promise.all([
+        invoke("git/branches"),
+        invoke("git/tags"),
+        invoke("git/remotes"),
+        invoke("git/stashes"),
+      ]);
+      state.branches = branches.branches ?? [];
+      state.tags = tags.tags ?? [];
+      state.remotes = remotes.remotes ?? [];
+      state.stashes = stashes.stashes ?? [];
+      paintBranches();
+    }
+    /**
+
+     * Which repository the loaded state belongs to. A commit selection, the
+     * branch and path filters and the changed-file list are all
+     * repository-relative, so a switch has to clear them rather than let them
+     * keep describing the previous repository's history. `undefined` means
+     * nothing has been loaded yet.
+     */
+    let loadedRepo;
+
+    /** Drop everything that describes one repository, and only that one. */
+    function forgoRepositoryState() {
+      state.selection = null;
+      state.changedFiles = [];
+      state.details = null;
+      state.commits = [];
+      state.search = "";
+      state.branchFilter = "";
+      state.pathFilter = "";
+      // A named author belongs to the repository just left; "me" re-resolves
+      // against the new repository's own config, so only the named one is dropped.
+      if (state.userFilter && state.userFilter !== "me") state.userFilter = "";
+      state.tags = [];
+      state.remotes = [];
+      state.stashes = [];
+      // A commit diff belongs to the commit it came from, and its actions name a
+      // revision the new repository may not even have.
+      activeDiffOverlay?.();
+    }
+
+    // Same dim-while-reloading contract as the Commit view: overlapping
+    // refreshes share one counter so the list stays dimmed until the last one
+    // settles instead of flashing mid-flight.
+    let refreshDepth = 0;
+    function setRefreshing(on) {
+      refreshDepth = Math.max(0, refreshDepth + (on ? 1 : -1));
+      root.classList.toggle("is-refreshing", refreshDepth > 0);
+    }
+    async function refresh() {
+      setRefreshing(true);
+      try {
+        return await refreshInner();
+      } finally {
+        setRefreshing(false);
+      }
+    }
+    async function refreshInner() {
+      const repo = await invoke("git/repo");
+      const repoRoot = repo.ok ? (repo.repo?.root ?? null) : null;
+      if (loadedRepo !== undefined && repoRoot !== loadedRepo) forgoRepositoryState();
+      loadedRepo = repoRoot;
+      state.repo = repo.ok ? repo : null;
+      state.error = repo.ok ? null : (repo.message ?? t("notARepository"));
+      state.repoPath = repo.ok ? null : await currentFolder();
+      await Promise.all([loadRefs(), loadLog()]);
+      branchWidget.update(state.repo);
+      paintToolbar();
+    }
+
+    /** The folder to name in the "not a repository" message. */
+    async function currentFolder() {
+      const workspace = await invoke("workspace.get");
+      return workspace?.path ?? null;
+    }
+
+    branchesPane.append(
+      h("div", { class: "pane-header" }, [h("span", { text: t("branches") })]),
+      branchesHost,
+    );
+    detailPane.append(
+      h("div", { class: "pane-header" }, [
+        h("span", { text: t("changedFiles") }),
+        h("div", { class: "toolbar-spacer" }),
+        iconButton("diff", tip("showDiff", KEYS.showDiff), () => openCommitDiff(null), { size: 13 }),
+      ]),
+      changedHost,
+      h("div", { class: "pane-header", style: { borderTop: "1px solid var(--border-soft)" } }, [
+        h("span", { text: t("commitDetails") }),
+      ]),
+      detailsHost,
+    );
+    commitsPane.append(listHost, splitter, detailPane);
+    panes.append(branchesPane, h("div", { class: "divider-v" }), commitsPane);
+    root.append(toolbar, panes);
+
+    PIG.bindSplitter(splitter, (delta) => {
+      const total = commitsPane.clientHeight || 1;
+      state.detailHeight = Math.max(18, Math.min(80, state.detailHeight - (delta / total) * 100));
+      detailPane.style.height = `${state.detailHeight}%`;
+    }, { vertical: true });
+
+    PIG.bindShortcuts([
+      { spec: KEYS.refresh, run: () => { refresh().catch(() => {}); } },
+      { spec: KEYS.refreshAlt, run: () => { refresh().catch(() => {}); } },
+      { spec: KEYS.showDiff, run: () => { if (state.selection) openCommitDiff(null); } },
+      { spec: KEYS.find, run: () => { searchButton.click(); } },
+      // The app's own accelerators cannot reach this webContents; say so.
+      PIG.appShortcutHintBinding(),
+    ]);
+
+    /**
+     * The repository list, read when it can actually have changed — mounting, a
+     * project switch, and opening the chip's menu, which re-reads its own —
+     * rather than on every refresh. Building it walks the tree, and the Log
+     * refreshes after every branch action.
+     */
+    async function loadRepositories() {
+      repoWidget.update(await invoke("git/repos"));
+    }
+
+    PIG.watchWorkspace(() => {
+      loadRepositories().then(() => refresh()).catch(() => {});
+    });
+    loadRepositories()
+      .then(() => refresh())
+      .catch((error) => toast(String(error?.message ?? error), "error"));
+
+    return { refresh, selectCommit: select, openCommitDiff };
+  }
+
+  function mountConsole(root) {
+    const state = { entries: [] };
+    const toolbar = h("div", { class: "toolbar" });
+    const host = h("div", { class: "console" });
+
+    function paint() {
+      PIG.clear(toolbar);
+      toolbar.append(iconButton("refresh", tip("refresh", KEYS.refresh), () => refresh()));
+      toolbar.append(h("button", {
+        class: "bordered",
+        type: "button",
+        text: t("clearAll"),
+        onclick: async () => {
+          await invoke("git/console-clear");
+          state.entries = [];
+          paint();
+        },
+      }));
+      toolbar.append(h("div", { class: "toolbar-spacer" }));
+      toolbar.append(h("span", { class: "muted", style: { fontSize: "11px" }, text: `${state.entries.length}` }));
+
+      PIG.clear(host);
+      if (!state.entries.length) {
+        host.append(h("div", { class: "empty-state" }, [h("div", { class: "headline", text: t("console") })]));
+        return;
+      }
+      for (const entry of state.entries) {
+        const node = h("div", { class: "console-entry" }, [
+          h("div", { class: "console-cmd" }, [
+            h("span", { class: "console-time", text: `[${PIG.formatClock(entry.ts)}] ` }),
+            `$ ${entry.command}`,
+          ]),
+        ]);
+        if (entry.stdout?.trim()) node.append(h("pre", { class: "console-out", text: entry.stdout.trimEnd() }));
+        if (entry.stderr?.trim()) node.append(h("pre", { class: "console-out failure", text: entry.stderr.trimEnd() }));
+        if (!entry.ok && entry.message) node.append(h("pre", { class: "console-out failure", text: entry.message }));
+        host.append(node);
+      }
+      host.scrollTop = host.scrollHeight;
+    }
+
+    async function refresh() {
+      const result = await invoke("git/console");
+      state.entries = result.entries ?? [];
+      paint();
+    }
+
+    root.append(toolbar, host);
+    refresh().catch(() => {});
+    return { refresh };
+  }
+
+  /** Tabs over Log and Console, which is exactly IDEA's Git tool window. */
+  function mountGitWindow(root) {
+    const tabs = h("div", { class: "tabs" });
+    const logSurface = h("div", { class: "column grow" });
+    const consoleSurface = h("div", { class: "column grow hidden" });
+
+    const logView = mountLog(logSurface);
+    const consoleView = mountConsole(consoleSurface);
+
+    let active = "log";
+    function paintTabs() {
+      PIG.clear(tabs);
+      for (const tab of [{ id: "log", label: t("log") }, { id: "console", label: t("console") }]) {
+        tabs.append(h("button", {
+          type: "button",
+          role: "tab",
+          "aria-selected": active === tab.id ? "true" : "false",
+          text: tab.label,
+          onclick: () => {
+            active = tab.id;
+            logSurface.classList.toggle("hidden", active !== "log");
+            consoleSurface.classList.toggle("hidden", active !== "console");
+            paintTabs();
+            if (active === "console") consoleView.refresh();
+          },
+        }));
+      }
+    }
+    paintTabs();
+
+    root.append(tabs, logSurface, consoleSurface);
+    window.addEventListener("pig:appearance", paintTabs);
+    return { refresh: () => { logView.refresh(); if (active === "console") consoleView.refresh(); } };
+  }
+
+  /** The detached panel hosts both tool windows behind one tab bar. */
+  function mountBoth(root) {
+    const tabs = h("div", { class: "tabs" });
+    const commitSurface = h("div", { class: "column grow" });
+    const gitSurface = h("div", { class: "column grow hidden" });
+    let active = "commit";
+
+    PIG.commitView.mount(commitSurface);
+    mountGitWindow(gitSurface);
+
+    function paintTabs() {
+      PIG.clear(tabs);
+      // The Git tab holds the Log *and* Console, so labelling it "Log" would
+      // collide with the tab inside it.
+      for (const tab of [{ id: "commit", label: t("commit") }, { id: "git", label: t("git") }]) {
+        tabs.append(h("button", {
+          type: "button",
+          role: "tab",
+          "aria-selected": active === tab.id ? "true" : "false",
+          text: tab.label,
+          onclick: () => {
+            active = tab.id;
+            commitSurface.classList.toggle("hidden", active !== "commit");
+            gitSurface.classList.toggle("hidden", active !== "git");
+            paintTabs();
+          },
+        }));
+      }
+    }
+    paintTabs();
+    root.append(tabs, commitSurface, gitSurface);
+    window.addEventListener("pig:appearance", paintTabs);
+  }
+
+  function boot() {
+    const root = document.getElementById("app");
+    if (!root) return;
+    PIG.watchAppearance();
+    const surface = window.__PI_IDEA_GIT_SURFACE__ ?? "commit";
+    if (surface === "git") {
+      mountGitWindow(root);
+      return;
+    }
+    if (surface === "commit") {
+      PIG.commitView.mount(root);
+      return;
+    }
+    mountBoth(root);
+  }
+
+  PIG.gitView = { mount: mountGitWindow, mountLog, mountConsole, assignLanes, openDiffOverlay };
+
+  if (document.readyState === "loading") {
+    document.addEventListener("DOMContentLoaded", boot, { once: true });
+  } else {
+    boot();
+  }
+})(window.PIG || (window.PIG = {}));
+
+})();
+    </script>
+  </body>
+</html>
diff --git a/plugins/io.github.liushunqiu.pi-idea-git/views/commit.html b/plugins/io.github.liushunqiu.pi-idea-git/views/commit.html
new file mode 100644
index 0000000..fe43c0f
--- /dev/null
+++ b/plugins/io.github.liushunqiu.pi-idea-git/views/commit.html
@@ -0,0 +1,7752 @@
+<!-- GENERATED by tools/build.mjs — do not edit; edit src/* -->
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <!--
+      PI-Desktop owns exactly a transparent 46px drag band and a minimal three-button
+      window-control capsule. This panel uses pi-plugin-chrome=v3: the page can
+      paint through the 46px band, while host-generated holes keep controls
+      clickable and empty space draggable. Fixed or sticky panel surfaces use
+      var(--pi-plugin-titlebar-height, 46px).
+    -->
+    <meta name="pi-plugin-chrome" content="v3" />
+    <title>Commit</title>
+    <style>
+/* ---- src/theme.css ---- */
+/*
+ * IntelliJ IDEA palette and component styles.
+ *
+ * Colour provenance matters here, so the values are grouped by how solid the
+ * evidence is:
+ *
+ *  - One deliberate deviation: JetBrains documents the light-theme deleted row
+ *    as a neutral grey (#D7D6D6). Next to the green insertion it reads as
+ *    "faded" rather than "removed", so a soft red is used instead. The other
+ *    diff colours are the published ones.
+ *  - Diff line backgrounds, the word-level fragment colour, the pane divider,
+ *    the editor gutter change bars and the file-status colours are the values
+ *    JetBrains prints in its own documentation/colour tables. They are used
+ *    verbatim, light and dark.
+ *  - Everything else is UI chrome (tool window background, borders, selection,
+ *    toolbar) where JetBrains publishes no numbers. Those follow the look of
+ *    IntelliJ Light and Darcula respectively rather than pretending to be
+ *    pixel-exact.
+ */
+
+:root {
+  color-scheme: light dark;
+
+  /* ---- IntelliJ Light ---- */
+  --bg: #ffffff;
+  --chrome-bg: #f7f8fa;
+  --panel-bg: #ffffff;
+  --panel-alt: #f2f4f7;
+  --border: #d1d5da;
+  --border-soft: #ebecf0;
+  --fg: #1f2328;
+  --fg-secondary: #5a5d63;
+  --fg-muted: #8c8c8c;
+  --selection: #d4e2ff;
+  --selection-fg: #1f2328;
+  --selection-inactive: #e8eaed;
+  --hover: #edf1f7;
+  --focus-ring: #2e5c99;
+
+  --button-bg: #ffffff;
+  --button-border: #c4c8cd;
+  --button-hover: #f0f3f7;
+  --button-primary-bg: #3871e0;
+  --button-primary-fg: #ffffff;
+  --button-primary-hover: #2f63c9;
+
+  --input-bg: #ffffff;
+  --input-border: #c4c8cd;
+
+  --diff-inserted: #c6e4c1;
+  --diff-modified: #e9eff9;
+  --diff-deleted: #f7d2d2;
+  --diff-fragment: #c6d7f0;
+  --diff-divider: #ebecf0;
+
+  --gutter-modified: #c3d6e8;
+  --gutter-added: #c9dec1;
+  --gutter-deleted: #d99b9b;
+  --gutter-whitespace: #eddcbc;
+
+  --status-added: #0a7700;
+  --status-modified: #0032a0;
+  --status-deleted: #616161;
+  --status-merged: #7503dc;
+  --status-conflict: #ff0000;
+  --status-ignored: #727238;
+  --status-renamed: #007c7c;
+  --status-unversioned: #993300;
+
+  --graph-head: #f0c000;
+  --graph-local: #00a000;
+  --graph-remote: #9b4fc9;
+  --graph-tag: #999999;
+
+  --toolbar-h: 32px;
+  --row-h: 22px;
+  --radius: 4px;
+  --ui-font: -apple-system, BlinkMacSystemFont, "Segoe UI", "Helvetica Neue", sans-serif;
+  --mono-font: ui-monospace, "SF Mono", Menlo, Consolas, "Liberation Mono", monospace;
+  --ui-size: 12px;
+  --mono-size: 12px;
+}
+
+:root[data-theme="dark"] {
+  color-scheme: dark;
+
+  /* ---- Darcula ---- */
+  --bg: #3c3f41;
+  --chrome-bg: #3c3f41;
+  --panel-bg: #313335;
+  --panel-alt: #2b2d2f;
+  --border: #555555;
+  --border-soft: #323438;
+  --fg: #bbbbbb;
+  --fg-secondary: #a9b1ba;
+  --fg-muted: #808080;
+  --selection: #2f65ca;
+  --selection-fg: #ffffff;
+  --selection-inactive: #46484a;
+  --hover: #4a4d4f;
+  --focus-ring: #7aa2f7;
+
+  --button-bg: #4c5052;
+  --button-border: #5f6164;
+  --button-hover: #5a5f62;
+  --button-primary-bg: #365880;
+  --button-primary-fg: #dce6f2;
+  --button-primary-hover: #3f6a9a;
+
+  --input-bg: #45494a;
+  --input-border: #5f6164;
+
+  --diff-inserted: #2b4034;
+  --diff-modified: #28323d;
+  --diff-deleted: #452a2e;
+  --diff-fragment: #3e546e;
+  /* Hue-matched fragments: a blue patch over a dark red row turns to mud. */
+  --diff-fragment-deleted: #6d353b;
+  --diff-fragment-inserted: #3d6249;
+  --diff-divider: #323438;
+
+  --gutter-modified: #374752;
+  --gutter-added: #4a7a5c;
+  --gutter-deleted: #a04c52;
+  --gutter-whitespace: #4c4638;
+
+  --status-added: #629755;
+  --status-modified: #6897bb;
+  --status-deleted: #6c6c6c;
+  --status-merged: #9876aa;
+  --status-conflict: #d5756c;
+  --status-ignored: #848504;
+  --status-renamed: #4b9e9e;
+  --status-unversioned: #c07840;
+}
+
+* {
+  box-sizing: border-box;
+}
+
+html,
+body {
+  height: 100%;
+  margin: 0;
+  overflow: hidden;
+}
+
+body {
+  font: var(--ui-size) / 1.45 var(--ui-font);
+  background: var(--chrome-bg);
+  color: var(--fg);
+  -webkit-font-smoothing: antialiased;
+}
+
+/* The host owns a transparent drag band. It is 46px in a detached panel and
+   0 in a docked view, and the host publishes the value either way. */
+.app {
+  display: flex;
+  flex-direction: column;
+  height: 100%;
+  padding-top: var(--pi-plugin-titlebar-height, 0px);
+  background: var(--chrome-bg);
+}
+
+/* ---------------------------------------------------------------- toolbars */
+
+.toolbar {
+  display: flex;
+  flex: 0 0 auto;
+  align-items: center;
+  gap: 2px;
+  min-height: var(--toolbar-h);
+  padding: 3px 4px;
+  border-bottom: 1px solid var(--border-soft);
+}
+
+.toolbar-spacer {
+  flex: 1 1 auto;
+}
+
+.toolbar-separator {
+  width: 1px;
+  height: 16px;
+  margin: 0 4px;
+  background: var(--border);
+}
+
+/* --------------------------------------------------------------- controls */
+
+button,
+.tbtn {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 5px;
+  min-height: 22px;
+  padding: 2px 8px;
+  border: 1px solid transparent;
+  border-radius: var(--radius);
+  background: transparent;
+  color: var(--fg);
+  cursor: pointer;
+  font: inherit;
+  line-height: 1.3;
+  white-space: nowrap;
+}
+
+button:hover:not(:disabled),
+.tbtn:hover:not(:disabled) {
+  background: var(--hover);
+}
+
+button:focus-visible,
+.tbtn:focus-visible,
+input:focus-visible,
+textarea:focus-visible,
+select:focus-visible {
+  outline: 2px solid var(--focus-ring);
+  outline-offset: -1px;
+}
+
+button:disabled {
+  color: var(--fg-muted);
+  cursor: default;
+}
+
+button.bordered {
+  border-color: var(--button-border);
+  background: var(--button-bg);
+}
+
+button.bordered:hover:not(:disabled) {
+  background: var(--button-hover);
+}
+
+button.primary {
+  border-color: var(--button-primary-bg);
+  background: var(--button-primary-bg);
+  color: var(--button-primary-fg);
+  font-weight: 600;
+}
+
+button.primary:hover:not(:disabled) {
+  background: var(--button-primary-hover);
+}
+
+button.primary:disabled {
+  border-color: var(--button-border);
+  background: var(--button-bg);
+  color: var(--fg-muted);
+}
+
+button.icon {
+  min-width: 24px;
+  padding: 2px 5px;
+}
+
+button.icon svg {
+  display: block;
+}
+
+.split-button {
+  display: inline-flex;
+}
+
+.split-button > button:first-child {
+  border-top-right-radius: 0;
+  border-bottom-right-radius: 0;
+}
+
+.split-button > button:last-child {
+  border-top-left-radius: 0;
+  border-bottom-left-radius: 0;
+  border-left-width: 0;
+  min-width: 18px;
+  padding: 2px 3px;
+}
+
+label.check {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  cursor: pointer;
+  user-select: none;
+  white-space: nowrap;
+}
+
+input[type="checkbox"] {
+  width: 13px;
+  height: 13px;
+  margin: 0;
+  accent-color: var(--button-primary-bg);
+  cursor: pointer;
+}
+
+input[type="text"],
+input[type="search"],
+textarea,
+select {
+  border: 1px solid var(--input-border);
+  border-radius: var(--radius);
+  background: var(--input-bg);
+  color: var(--fg);
+  font: inherit;
+  padding: 3px 6px;
+}
+
+textarea {
+  resize: none;
+  font-family: var(--ui-font);
+}
+
+.search-field {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  min-height: 22px;
+  padding: 0 6px;
+  border: 1px solid var(--input-border);
+  border-radius: var(--radius);
+  background: var(--input-bg);
+}
+
+.search-field input {
+  border: 0;
+  padding: 2px 0;
+  background: transparent;
+  min-width: 90px;
+}
+
+.search-field input:focus {
+  outline: none;
+}
+
+/* ------------------------------------------------------------------- tabs */
+
+.tabs {
+  display: flex;
+  flex: 0 0 auto;
+  align-items: stretch;
+  gap: 1px;
+  padding: 0 4px;
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+  overflow-x: auto;
+}
+
+.tabs button {
+  border-radius: 0;
+  border-bottom: 2px solid transparent;
+  padding: 5px 10px;
+  color: var(--fg-secondary);
+}
+
+.tabs button[aria-selected="true"] {
+  border-bottom-color: var(--button-primary-bg);
+  color: var(--fg);
+  font-weight: 600;
+}
+
+/* ---------------------------------------------------------------- surfaces */
+
+.surface {
+  display: flex;
+  flex: 1 1 auto;
+  min-height: 0;
+  background: var(--panel-bg);
+}
+
+.column {
+  display: flex;
+  flex-direction: column;
+  min-width: 0;
+  min-height: 0;
+}
+
+.row {
+  display: flex;
+  min-width: 0;
+  min-height: 0;
+}
+
+.scroll {
+  overflow: auto;
+  min-height: 0;
+}
+
+.pane {
+  position: relative;
+  min-width: 0;
+  min-height: 0;
+}
+
+.pane-header {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  padding: 5px 8px;
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+  color: var(--fg-secondary);
+  font-size: 11px;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+}
+
+.pane-header .toolbar-spacer {
+  flex: 1 1 auto;
+}
+
+.divider-v {
+  flex: 0 0 auto;
+  width: 1px;
+  background: var(--border-soft);
+}
+
+.divider-v.draggable {
+  width: 5px;
+  margin: 0 -2px;
+  z-index: 3;
+  background: transparent;
+  cursor: col-resize;
+}
+
+.divider-v.draggable:hover,
+.divider-v.draggable.active {
+  background: var(--button-primary-bg);
+}
+
+.divider-h {
+  flex: 0 0 auto;
+  height: 1px;
+  background: var(--border-soft);
+}
+
+.empty-state {
+  display: flex;
+  flex: 1 1 auto;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  gap: 8px;
+  padding: 24px;
+  color: var(--fg-muted);
+  text-align: center;
+}
+
+.empty-state .headline {
+  color: var(--fg-secondary);
+  font-size: 13px;
+  font-weight: 600;
+}
+
+.empty-state code {
+  font-family: var(--mono-font);
+  font-size: 11px;
+}
+
+/* ------------------------------------------------------------------- lists */
+
+.list {
+  padding: 2px 0;
+}
+
+.group-header {
+  display: flex;
+  position: sticky;
+  top: 0;
+  z-index: 1;
+  align-items: center;
+  gap: 5px;
+  height: var(--row-h);
+  padding: 0 6px;
+  background: var(--chrome-bg);
+  cursor: pointer;
+  user-select: none;
+  font-weight: 600;
+}
+
+.group-header:hover {
+  background: var(--hover);
+}
+
+.group-header .count {
+  color: var(--fg-muted);
+  font-weight: 400;
+}
+
+.disclosure {
+  display: inline-flex;
+  width: 10px;
+  justify-content: center;
+  color: var(--fg-secondary);
+  transform-origin: center;
+  transition: transform 120ms ease;
+}
+
+.disclosure[data-open="true"] {
+  transform: rotate(90deg);
+}
+
+.tree-row {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  height: var(--row-h);
+  padding: 0 6px 0 2px;
+  cursor: default;
+  user-select: none;
+  white-space: nowrap;
+}
+
+.tree-row:hover {
+  background: var(--hover);
+}
+
+/* Selected text uses --selection-fg so light (#d4e2ff bg) stays dark and readable. */
+.tree-row[aria-selected="true"] {
+  background: var(--selection);
+  color: var(--selection-fg);
+}
+
+.tree-row[aria-selected="true"] .meta,
+.tree-row[aria-selected="true"] .path,
+.tree-row[aria-selected="true"] .badge {
+  color: color-mix(in oklab, var(--selection-fg) 82%, transparent);
+}
+
+.tree-row .indent {
+  display: inline-block;
+  flex: 0 0 auto;
+}
+
+.tree-row .name {
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.tree-row .path {
+  color: var(--fg-secondary);
+  font-size: 11px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.tree-row .meta {
+  margin-left: auto;
+  padding-left: 8px;
+  color: var(--fg-muted);
+  font-size: 11px;
+}
+
+.tree-row .grow {
+  flex: 1 1 auto;
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.status-cell {
+  display: inline-block;
+  flex: 0 0 auto;
+  width: 12px;
+  font-family: var(--mono-font);
+  font-size: 11px;
+  font-weight: 700;
+  text-align: center;
+}
+
+.badge {
+  flex: 0 0 auto;
+  padding: 0 5px;
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  color: var(--fg-secondary);
+  font-size: 10px;
+  line-height: 15px;
+}
+
+.badge.head {
+  border-color: var(--graph-head);
+  color: var(--graph-head);
+}
+
+.badge.local {
+  border-color: var(--graph-local);
+  color: var(--graph-local);
+}
+
+.badge.remote {
+  border-color: var(--graph-remote);
+  color: var(--graph-remote);
+}
+
+.badge.tag {
+  border-color: var(--graph-tag);
+  color: var(--fg-secondary);
+}
+
+.tiny-button {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 16px;
+  height: 16px;
+  padding: 0;
+  border-radius: 3px;
+  color: var(--fg-secondary);
+  font-size: 13px;
+  line-height: 1;
+}
+
+.tiny-button:hover {
+  background: color-mix(in oklab, var(--fg) 14%, transparent);
+}
+/* ------------------------------------------------------------- tree rows --- */
+
+/* A folder row keeps the file rows' rhythm but reads as structure: its name is
+   darker than a file's, and its icon says which of the two it is without the
+   user parsing the indentation. */
+.tree-row.dir-row {
+  font-weight: 600;
+}
+
+.tree-row.dir-row .name {
+  color: var(--fg);
+}
+
+.tree-row.dir-row .count {
+  color: var(--fg-muted);
+  font-size: 11px;
+  font-weight: 400;
+}
+/* IDEA-style repository row: like a folder row, plus the per-repo color
+   square and a branch pill. Files nested below it render one level deeper. */
+.tree-row.repo-row {
+  font-weight: 600;
+  cursor: pointer;
+}
+.tree-row.repo-row .name {
+  color: var(--fg);
+}
+.tree-row.repo-row .repo-color {
+  flex: 0 0 auto;
+  width: 10px;
+  height: 10px;
+  border-radius: 3px;
+}
+
+.tree-row.dir-row .meta {
+  margin-left: 6px;
+  padding-left: 0;
+}
+
+.tree-row .row-icon {
+  display: inline-flex;
+  flex: 0 0 auto;
+  align-items: center;
+  color: var(--fg-secondary);
+}
+
+/* The folder's own disclosure sits between its checkbox and its icon, so the
+   arrow lines up with the one on a group header rather than with the checkbox
+   column. */
+.tree-row.dir-row .disclosure {
+  margin: 0 -2px;
+}
+
+/* Narrow work panels are the normal case here, and the folder count is the
+   first thing that can go without losing meaning. */
+@media (max-width: 420px) {
+  .tree-row.dir-row .meta {
+    display: none;
+  }
+}
+
+/* -------------------------------------------------------------------- diff */
+
+.diff {
+  flex: 1 1 auto;
+  overflow: auto;
+  min-height: 0;
+  background: var(--panel-bg);
+}
+
+.diff-file-header {
+  display: flex;
+  position: sticky;
+  top: 0;
+  z-index: 2;
+  align-items: center;
+  gap: 6px;
+  height: 24px;
+  padding: 0 8px;
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--panel-alt);
+  color: var(--fg-secondary);
+  font-size: 11px;
+}
+
+.diff-hunk-header {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  padding: 1px 6px;
+  border-top: 1px solid var(--border-soft);
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+  color: var(--fg-secondary);
+  font-family: var(--mono-font);
+  font-size: 11px;
+}
+
+.diff-hunk-header.folded {
+  background: var(--panel-alt);
+}
+
+.diff-hunk-note {
+  color: var(--fg-muted);
+}
+
+.diff-hunk-actions {
+  display: flex;
+  gap: 3px;
+  margin-left: auto;
+  opacity: 0;
+}
+
+.diff-hunk-header:hover .diff-hunk-actions,
+.diff-hunk-header:focus-within .diff-hunk-actions {
+  opacity: 1;
+}
+
+.diff-hunk-actions button {
+  min-height: 17px;
+  padding: 0 6px;
+  border-color: var(--button-border);
+  background: var(--button-bg);
+  font-family: var(--ui-font);
+  font-size: 11px;
+}
+
+.diff-line {
+  display: flex;
+  min-height: 17px;
+  font-family: var(--mono-font);
+  font-size: var(--mono-size);
+  line-height: 17px;
+  white-space: pre;
+}
+
+.diff-line .gutter-mark {
+  flex: 0 0 auto;
+  width: 4px;
+}
+
+.diff-line .sign {
+  flex: 0 0 auto;
+  width: 12px;
+  text-align: center;
+  color: color-mix(in oklab, var(--fg) 55%, transparent);
+  user-select: none;
+}
+
+.diff-line .text {
+  flex: 1 1 auto;
+  padding-right: 8px;
+  min-width: 0;
+}
+
+.diff-line.inserted {
+  background: var(--diff-inserted);
+}
+
+.diff-line.deleted {
+  background: var(--diff-deleted);
+}
+
+.diff-line.modified {
+  background: var(--diff-modified);
+}
+
+.diff-line.context .text {
+  color: var(--fg);
+}
+
+/* Word-level highlight inside a changed line. The hue follows the row it sits
+   on when a theme provides one: a blue patch over a red row reads as mud, which
+   is exactly what the dark palette suffered from. */
+.diff-line .fragment {
+  border-radius: 2px;
+  background: var(--diff-fragment);
+}
+
+.diff-line.deleted .fragment {
+  background: var(--diff-fragment-deleted, var(--diff-fragment));
+}
+
+.diff-line.inserted .fragment {
+  background: var(--diff-fragment-inserted, var(--diff-fragment));
+}
+
+.diff-line .fragment.strong {
+  background: color-mix(in oklab, var(--diff-fragment) 60%, var(--button-primary-bg));
+}
+
+.whitespace-mark {
+  color: color-mix(in oklab, var(--fg) 45%, transparent);
+}
+
+.diff-collapsed {
+  padding: 0 8px 0 16px;
+  border-top: 1px solid var(--border-soft);
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--panel-alt);
+  color: var(--fg-muted);
+  font-family: var(--mono-font);
+  font-size: 11px;
+  line-height: 18px;
+  cursor: pointer;
+}
+
+.diff-collapsed:hover {
+  color: var(--fg-secondary);
+}
+
+/* Side-by-side rendering of the very same hunks. */
+/*
+ * Side by side keeps each panel at half the viewport but never wraps: a
+ * wrapped line breaks the row-by-row alignment that makes the two panels worth
+ * comparing. When the content is wider than the panel the whole grid grows and
+ * the diff scrolls horizontally as one, so both sides stay on the same offset.
+ */
+.diff-sbs {
+  display: grid;
+  grid-template-columns: minmax(50%, max-content) 2px minmax(50%, max-content);
+  align-items: start;
+  width: max-content;
+  min-width: 100%;
+}
+
+.diff-sbs .side {
+  min-width: 0;
+  overflow: hidden;
+}
+
+.diff-sbs .spacer {
+  background: var(--diff-divider);
+}
+
+.diff-sbs .diff-line .text {
+  white-space: pre;
+}
+
+.diff-sbs .filler {
+  background: var(--panel-alt);
+}
+
+/* --------------------------------------------------------------- messages */
+
+.banner {
+  display: flex;
+  align-items: flex-start;
+  gap: 8px;
+  margin: 8px;
+  padding: 8px 10px;
+  border: 1px solid var(--border);
+  border-left-width: 3px;
+  border-radius: var(--radius);
+  background: var(--panel-alt);
+}
+
+.banner.error {
+  border-left-color: var(--status-conflict);
+}
+
+.banner.info {
+  border-left-color: var(--button-primary-bg);
+}
+
+.banner .banner-text {
+  min-width: 0;
+}
+
+.banner .banner-detail {
+  margin-top: 4px;
+  color: var(--fg-secondary);
+  font-family: var(--mono-font);
+  font-size: 11px;
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
+/* ------------------------------------------------------- commit message area */
+
+.commit-area {
+  flex: 0 0 auto;
+  display: flex;
+  flex-direction: column;
+  gap: 5px;
+  padding: 6px 8px 8px;
+  border-top: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+}
+
+.commit-message-row {
+  display: flex;
+  align-items: stretch;
+  gap: 6px;
+}
+
+.commit-message-row textarea {
+  flex: 1 1 auto;
+  min-height: 62px;
+  font-size: 13px;
+  line-height: 1.5;
+}
+
+.commit-history {
+  display: flex;
+  flex: 0 0 auto;
+  align-items: flex-start;
+}
+
+.commit-actions {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+}
+
+.commit-actions .spacer {
+  flex: 1 1 auto;
+}
+
+.commit-summary {
+  color: var(--fg-secondary);
+  font-size: 11px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.commit-summary.warn {
+  color: var(--status-unversioned);
+}
+
+/* ------------------------------------------------------------------ popups */
+
+.popup {
+  position: fixed;
+  z-index: 40;
+  min-width: 180px;
+  max-width: min(520px, 92vw);
+  max-height: 60vh;
+  overflow: auto;
+  border: 1px solid var(--border);
+  border-radius: 6px;
+  background: var(--panel-bg);
+  box-shadow: 0 8px 28px rgba(0, 0, 0, 0.32);
+  padding: 4px;
+}
+
+.popup .popup-title {
+  padding: 4px 8px;
+  color: var(--fg-muted);
+  font-size: 10px;
+  font-weight: 600;
+  letter-spacing: 0.04em;
+  text-transform: uppercase;
+}
+
+.popup button {
+  display: flex;
+  width: 100%;
+  justify-content: flex-start;
+  gap: 7px;
+  padding: 4px 8px;
+  border-radius: 3px;
+  text-align: left;
+}
+
+.popup button .shortcut {
+  margin-left: auto;
+  padding-left: 16px;
+  color: var(--fg-muted);
+  font-size: 11px;
+}
+
+.popup button[data-checked="true"]::before {
+  content: "✓";
+  width: 10px;
+}
+
+.popup button:not([data-checked])::before {
+  content: "";
+  width: 10px;
+}
+
+.popup .popup-separator {
+  height: 1px;
+  margin: 4px 2px;
+  background: var(--border-soft);
+}
+
+.popup input[type="text"] {
+  width: 100%;
+  margin: 3px 0;
+}
+
+/* ------------------------------------------------------------------- graph */
+
+.log-row {
+  display: grid;
+  grid-template-columns: var(--graph-width, 84px) minmax(0, 1fr);
+  align-items: stretch;
+  min-height: 34px;
+  border-bottom: 1px solid color-mix(in oklab, var(--border-soft) 55%, transparent);
+  cursor: default;
+  user-select: none;
+}
+
+.log-row:hover {
+  background: var(--hover);
+}
+
+/* Same --selection-fg contract as .tree-row above: white on light blue is unreadable. */
+.log-row[aria-selected="true"] {
+  background: var(--selection);
+  color: var(--selection-fg);
+}
+
+.log-row[aria-selected="true"] .log-author,
+.log-row[aria-selected="true"] .log-hash,
+.log-row[aria-selected="true"] .log-date {
+  color: color-mix(in oklab, var(--selection-fg) 78%, transparent);
+}
+
+.log-row.mine .log-subject {
+  font-weight: 700;
+}
+
+.log-row.current-branch {
+  background: color-mix(in oklab, var(--button-primary-bg) 10%, transparent);
+}
+
+.log-row.current-branch[aria-selected="true"] {
+  background: var(--selection);
+}
+
+.log-graph {
+  overflow: hidden;
+}
+
+.log-body {
+  display: flex;
+  flex-direction: column;
+  justify-content: center;
+  gap: 1px;
+  padding: 3px 8px 3px 0;
+  min-width: 0;
+}
+
+.log-subject {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.log-meta-line {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  color: var(--fg-secondary);
+  font-size: 11px;
+  overflow: hidden;
+}
+
+.log-author,
+.log-date,
+.log-hash {
+  color: var(--fg-muted);
+  white-space: nowrap;
+}
+
+.log-hash {
+  font-family: var(--mono-font);
+}
+
+.commit-details {
+  padding: 8px 10px;
+  color: var(--fg-secondary);
+  font-size: 11px;
+}
+
+.commit-details dl {
+  display: grid;
+  grid-template-columns: max-content minmax(0, 1fr);
+  gap: 3px 10px;
+  margin: 0;
+}
+
+.commit-details dt {
+  color: var(--fg-muted);
+}
+
+.commit-details dd {
+  margin: 0;
+  overflow-wrap: anywhere;
+  color: var(--fg);
+}
+
+.commit-details .message-body {
+  margin-top: 8px;
+  white-space: pre-wrap;
+  color: var(--fg);
+  font-family: var(--mono-font);
+  font-size: 11px;
+}
+
+/* ----------------------------------------------------------------- console */
+
+.console {
+  flex: 1 1 auto;
+  overflow: auto;
+  min-height: 0;
+  padding: 6px 8px;
+  background: var(--panel-bg);
+  font-family: var(--mono-font);
+  font-size: 11px;
+  line-height: 1.55;
+}
+
+.console-entry {
+  margin-bottom: 10px;
+}
+
+.console-cmd {
+  color: var(--status-modified);
+  font-weight: 700;
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
+.console-out {
+  margin: 2px 0 0;
+  white-space: pre-wrap;
+  word-break: break-word;
+  color: var(--fg);
+}
+
+.console-out.failure {
+  color: var(--status-conflict);
+}
+
+.console-time {
+  color: var(--fg-muted);
+}
+
+/* ------------------------------------------------------------------- toast */
+
+.toast-layer {
+  position: fixed;
+  right: 12px;
+  /* Top-right, not bottom-right: the bottom-right is the commit area (message
+     box + buttons) in the Commit view, so a success toast landed exactly on
+     the controls the user reaches for next. Top-right only covers read-only
+     list content while it is visible. The progress pill sits top-centre, so
+     the two never overlap — see the busy-feedback agent note. */
+  top: 12px;
+  z-index: 60;
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  pointer-events: none;
+}
+
+.toast {
+  max-width: 340px;
+  padding: 7px 10px;
+  border: 1px solid var(--border);
+  border-left-width: 3px;
+  border-radius: 5px;
+  background: var(--panel-bg);
+  box-shadow: 0 6px 20px rgba(0, 0, 0, 0.3);
+  animation: toast-in 140ms ease-out;
+}
+
+/* Git's own output is multi-line, and collapsing it into one paragraph is how
+   "CONFLICT (content): Merge conflict in f.txt" ends up reading as part of a
+   sentence. */
+.toast {
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
+/* An error toast that has more of Git's output behind it: the toast itself is
+   the target, and this is the label that says so. */
+.toast.clickable {
+  pointer-events: auto;
+}
+
+.toast-link {
+  display: block;
+  margin-top: 6px;
+  padding: 0;
+  border: 0;
+  background: none;
+  color: var(--button-primary-bg);
+  font: inherit;
+  text-decoration: underline;
+  cursor: pointer;
+}
+
+.toast.clickable .toast-link:hover {
+  color: var(--fg);
+}
+
+/* The full output behind a "Show details" link. `.banner-detail` is scoped to
+   the conflict banner, so a dialog outside one had no styling at all — and a
+   4000-character block with no bound would run past the bottom of the window. */
+.dialog-detail {
+  margin-top: 8px;
+  max-height: 45vh;
+  overflow: auto;
+  padding: 6px 8px;
+  border: 1px solid var(--border);
+  border-radius: 4px;
+  background: var(--input-bg);
+  color: var(--fg-secondary);
+  font-family: var(--mono-font);
+  font-size: 11px;
+  line-height: 1.45;
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
+.toast.error {
+  border-left-color: var(--status-conflict);
+}
+
+.toast.info {
+  border-left-color: var(--button-primary-bg);
+}
+
+@keyframes toast-in {
+  from {
+    opacity: 0;
+    transform: translateY(6px);
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  * {
+    animation-duration: 0.01ms !important;
+    transition-duration: 0.01ms !important;
+  }
+}
+
+/* ------------------------------------------------------------ diff overlay */
+
+/*
+ * A commit's diff has no editor tab to live in, so it takes over the tool
+ * window. It has to look like a deliberate surface rather than an unstyled
+ * page: a header that names the file, a hairline under it, and the diff
+ * inset on the panel background.
+ */
+.diff-overlay {
+  position: absolute;
+  inset: 0;
+  z-index: 30;
+  display: flex;
+  flex-direction: column;
+  background: var(--panel-bg);
+}
+
+.diff-overlay-header {
+  gap: 6px;
+  padding: 5px 6px;
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+}
+
+.diff-overlay-title {
+  font-weight: 600;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.diff-overlay-path {
+  color: var(--fg-muted);
+  font-size: 11px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.diff-overlay > .diff {
+  padding-bottom: 12px;
+}
+
+/* The file header is the overlay's own headline; keep it flush, not sticky
+   over the scrolling content it duplicates. */
+.diff-overlay .diff-file-header {
+  position: static;
+  height: 26px;
+  background: var(--panel-alt);
+  font-size: 11px;
+}
+
+.diff-overlay .diff-hunk-header {
+  font-size: 11px;
+}
+
+/* Two number columns in unified view (old | new), one per side otherwise. */
+.diff-line .num {
+  flex: 0 0 auto;
+  width: 30px;
+  padding-right: 6px;
+  color: var(--fg-muted);
+  text-align: right;
+  user-select: none;
+}
+
+.diff-sbs .diff-line .num {
+  width: 34px;
+}
+/* ------------------------------------------------- busy & progress ---- */
+/* Long Git operations (push / fetch / pull / commit / checkout) must never */
+/* look ignored while the process runs: every trigger shows a spinner where */
+/* it was clicked, plus a floating pill so menu actions have feedback too. */
+.spinner {
+  flex: 0 0 auto;
+  width: 12px;
+  height: 12px;
+  border-radius: 50%;
+  border: 1.5px solid currentColor;
+  border-top-color: transparent;
+  opacity: 0.85;
+  animation: pig-spin 0.7s linear infinite;
+}
+.spinner.large {
+  width: 14px;
+  height: 14px;
+  border-width: 2px;
+}
+@keyframes pig-spin {
+  to { transform: rotate(360deg); }
+}
+/* An icon button that is running something: keep its size so the toolbar */
+/* does not jump, spin the mark in place. */
+button.icon.busy {
+  color: var(--fg-secondary);
+  cursor: wait;
+}
+button.icon.busy svg {
+  display: none;
+}
+button.icon.busy .spinner {
+  display: block;
+  margin: 2px;
+}
+/* Text buttons keep their width while busy so the dialog footer stays put. */
+button.busy {
+  cursor: wait;
+}
+button.busy .spinner {
+  margin-right: 6px;
+  vertical-align: -1px;
+}
+/* One floating pill for actions with no button to spin in (branch-menu */
+/* fetch / pull / push / checkout, stash pop): top-centre, above popups, */
+/* below modal dialogs. */
+.task-pill-layer {
+  position: fixed;
+  top: 10px;
+  left: 50%;
+  transform: translateX(-50%);
+  z-index: 70;
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  align-items: center;
+  pointer-events: none;
+}
+.task-pill {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  max-width: min(420px, 90vw);
+  padding: 6px 12px;
+  border: 1px solid var(--border);
+  border-radius: 999px;
+  background: var(--panel-bg);
+  box-shadow: 0 6px 20px rgba(0, 0, 0, 0.28);
+  color: var(--fg-secondary);
+  font-size: 12px;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  animation: task-pill-in 160ms ease-out;
+}
+.task-pill.done {
+  color: var(--status-added);
+}
+.task-pill.failed {
+  color: var(--status-conflict);
+}
+@keyframes task-pill-in {
+  from { opacity: 0; transform: translateY(-6px); }
+}
+/* Push dialog: thin progress track under the subtitle plus a per-row state. */
+.push-progress {
+  height: 3px;
+  margin-top: 8px;
+  border-radius: 2px;
+  background: var(--border-soft);
+  overflow: hidden;
+}
+.push-progress-fill {
+  height: 100%;
+  width: 0;
+  border-radius: 2px;
+  background: var(--button-primary-bg);
+  transition: width 180ms ease-out;
+}
+.push-row.is-active {
+  border-color: var(--button-primary-bg);
+  background: var(--diff-modified);
+}
+.push-row .row-status {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  font-size: 11px;
+}
+.push-row .row-status.pushing {
+  color: var(--fg-secondary);
+}
+.push-row .row-status.ok {
+  color: var(--status-added);
+}
+.push-row .row-status.error {
+  color: var(--status-conflict);
+}
+/* A slow reload reads as loading, not frozen: dim the list a touch. */
+.is-refreshing .scroll.list,
+.is-refreshing .commits-pane {
+  opacity: 0.65;
+  transition: opacity 120ms ease-out;
+}
+
+/* ---- src/layout.css ---- */
+/*
+ * Layout on top of the palette: scrollbars, resizers, the Log tab's pane grid
+ * and the affordances that only exist once the panel gets narrow.
+ */
+
+::-webkit-scrollbar {
+  width: 10px;
+  height: 10px;
+}
+
+::-webkit-scrollbar-track {
+  background: transparent;
+}
+
+::-webkit-scrollbar-thumb {
+  border: 2px solid transparent;
+  border-radius: 6px;
+  background: color-mix(in oklab, var(--fg) 22%, transparent);
+  background-clip: content-box;
+}
+
+::-webkit-scrollbar-thumb:hover {
+  background: color-mix(in oklab, var(--fg) 38%, transparent);
+  background-clip: content-box;
+}
+
+::-webkit-scrollbar-corner {
+  background: transparent;
+}
+
+/* ------------------------------------------------------------------- panes */
+
+/* A vertical splitter that is only visible while hovered or dragged, so the
+   surface keeps IDEA's flat look at rest. */
+.splitter-y {
+  flex: 0 0 auto;
+  height: 5px;
+  margin: -2px 0;
+  z-index: 4;
+  background: transparent;
+  cursor: row-resize;
+}
+
+.splitter-y:hover,
+.splitter-y.active {
+  background: var(--button-primary-bg);
+}
+
+.log-panes {
+  display: flex;
+  flex: 1 1 auto;
+  min-height: 0;
+}
+
+.log-panes > .branches-pane {
+  flex: 0 0 auto;
+  width: var(--branches-width, 168px);
+}
+
+.log-panes > .commits-pane {
+  display: flex;
+  flex: 1 1 auto;
+  flex-direction: column;
+  min-width: 0;
+  min-height: 0;
+}
+
+.log-detail {
+  display: flex;
+  flex: 0 0 auto;
+  flex-direction: column;
+  min-height: 0;
+  height: var(--detail-height, 46%);
+}
+
+.log-detail > .changed-files {
+  flex: 1 1 auto;
+  min-height: 0;
+  overflow: auto;
+}
+
+.log-detail > .details-pane {
+  flex: 0 0 auto;
+  max-height: 45%;
+  overflow: auto;
+  border-top: 1px solid var(--border-soft);
+}
+
+/* Keep the commit list readable when the pane is narrow: the meta line wraps
+   away before the subject does. */
+@media (max-width: 560px) {
+  /* Wrap the author/date/hash line instead of clipping it. */
+  .log-meta-line {
+    flex-wrap: wrap;
+    gap: 4px 8px;
+  }
+
+  /* Shrink the branches pane rather than dropping it: IDEA always shows it,
+     and the Graph Options menu can still hide it on demand. */
+  .log-panes > .branches-pane {
+    width: 128px;
+  }
+}
+
+.commit-view {
+  display: flex;
+  flex: 1 1 auto;
+  min-height: 0;
+}
+
+.commit-changes {
+  display: flex;
+  flex: 0 0 auto;
+  flex-direction: column;
+  width: var(--changes-width, 45%);
+  min-width: 140px;
+  min-height: 0;
+}
+
+.commit-diff {
+  display: flex;
+  flex: 1 1 auto;
+  flex-direction: column;
+  min-width: 0;
+  min-height: 0;
+}
+
+/* Narrow work panels read better stacked than side by side. */
+@media (max-width: 480px) {
+  .commit-view {
+    flex-direction: column;
+  }
+
+  .commit-changes {
+    width: auto;
+    max-height: 45%;
+  }
+
+  .commit-view > .divider-v {
+    display: none;
+  }
+}
+
+/* The changes pane's own search box: wide enough to type a path fragment, and
+   it gives the room back to the tree as soon as the pane narrows. */
+.pane-header .search-field {
+  flex: 0 1 150px;
+  min-width: 0;
+}
+
+.pane-header .search-field input.changes-filter {
+  width: 100%;
+  min-width: 0;
+}
+
+@media (max-width: 520px) {
+  /* Keep the gear, drop the field: filtering is a convenience, the view options
+     are not. */
+  .pane-header .search-field {
+    display: none;
+  }
+}
+
+.branch-chip {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  max-width: 220px;
+  padding: 2px 6px;
+  border: 1px solid transparent;
+  border-radius: var(--radius);
+  cursor: pointer;
+  user-select: none;
+}
+
+.branch-chip:hover {
+  border-color: var(--button-border);
+  background: var(--button-bg);
+}
+
+.branch-chip .name {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  font-weight: 600;
+}
+
+.branch-chip .tracking {
+  display: inline-flex;
+  align-items: center;
+  gap: 3px;
+  color: var(--fg-muted);
+  font-size: 11px;
+  white-space: nowrap;
+}
+
+.ahead {
+  color: var(--status-added);
+}
+
+.behind {
+  color: var(--status-modified);
+}
+
+:root[data-theme="dark"] .behind {
+  color: var(--status-modified);
+}
+
+.hidden {
+  display: none !important;
+}
+
+.muted {
+  color: var(--fg-muted);
+}
+
+.mono {
+  font-family: var(--mono-font);
+}
+
+.nowrap {
+  white-space: nowrap;
+}
+
+.grow {
+  flex: 1 1 auto;
+  min-width: 0;
+}
+
+/*
+ * The commit-actions row carries the checkboxes, the summary, the generate
+ * control, the branch, and the commit buttons. On a narrow work panel that is
+ * more than fits, and the generate button is the one whose meaning survives
+ * losing its label — the sparkles and the tooltip still say it.
+ */
+@media (max-width: 560px) {
+  .gen-label {
+    display: none;
+  }
+}
+
+    </style>
+  </head>
+  <body>
+    <div id="app" class="app"></div>
+    <script>
+window.__PI_IDEA_GIT_SURFACE__ = "commit";
+    </script>
+    <script>
+(function () {
+"use strict";
+/* ================= src/common.js ================= */
+/**
+ * Shared runtime for both tool windows: host bridge access, the IDEA wording
+ * (English原文 + 中文), icons, popups and the small layout primitives.
+ *
+ * Everything hangs off one namespace because the pages are built by
+ * concatenating files into a single classic script — see tools/build.mjs.
+ */
+(function (PIG) {
+  "use strict";
+
+  const bridge = window.pluginBridge;
+
+  // ---------------------------------------------------------------- i18n ---
+  // IDEA's own wording is the source of truth for labels, so the English
+  // strings double as the documented feature names.
+  const STRINGS = {
+    en: {
+      commit: "Commit",
+      commitAndPush: "Commit and Push",
+      commitMessage: "Commit Message",
+      commitHistory: "Commit message history",
+      amend: "Amend",
+      signOff: "Sign-off commit",
+      runHooks: "Run Git hooks",
+      changes: "Changes",
+      staged: "Staged",
+      unstaged: "Unstaged",
+      unversioned: "Unversioned Files",
+      conflicts: "Merge Conflicts",
+      noChanges: "No changes",
+      refresh: "Refresh",
+      fetch: "Fetch",
+      pull: "Pull",
+      push: "Push",
+      update: "Update Project",
+      rollback: "Rollback",
+      showDiff: "Show Diff",
+      jumpToSource: "Jump to Source",
+      stage: "Add",
+      stageFile: "Add to index",
+      unstageFile: "Remove from index",
+      stageHunk: "Stage Hunk",
+      unstageHunk: "Unstage Hunk",
+      discardHunk: "Discard Hunk",
+      includeIntoCommit: "Include into commit",
+      discard: "Discard Changes",
+      git: "Git",
+      log: "Log",
+      console: "Console",
+      branches: "Branches",
+      localBranches: "Local branches",
+      remoteBranches: "Remote branches",
+      tags: "Tags",
+      changedFiles: "Changed Files",
+      commitDetails: "Commit Details",
+      graphOptions: "Graph Options",
+      byCommitDate: "By commit date",
+      topologically: "Topologically",
+      showFirstParent: "Show First Parent",
+      noMerges: "No Merges",
+      showGraph: "Show Graph",
+      search: "Search",
+      filterByBranch: "Branch",
+      filterByUser: "User",
+      filterByPaths: "Paths",
+      allBranches: "All Branches",
+      author: "Author",
+      date: "Date",
+      hash: "Hash",
+      subject: "Subject",
+      message: "Message",
+      all: "All",
+      checkoutRevision: "Checkout Revision",
+      newBranchFromHere: "New Branch from Here",
+      newTag: "New Tag",
+      cherryPick: "Cherry-Pick",
+      revert: "Revert",
+      resetToHere: "Reset Current Branch to Here",
+      editCommitMessage: "Edit Commit Message",
+      copyRevisionNumber: "Copy Revision Number",
+      copyMessage: "Copy Message",
+      compareWithLocal: "Compare with Local",
+      compareWithHead: "Compare with HEAD",
+      showRepository: "Show Repository",
+      soft: "Soft",
+      mixed: "Mixed",
+      hard: "Hard",
+      reset: "Reset",
+      newBranch: "New Branch",
+      checkout: "Checkout",
+      mergeIntoCurrent: "Merge into Current",
+      merge: "Merge",
+      rebase: "Rebase",
+      rebaseOnto: "Rebase Current onto Selected",
+      deleteBranch: "Delete",
+      renameBranch: "Rename",
+      setUpstream: "Set Upstream",
+      unsetUpstream: "Unset Upstream",
+      copyBranchName: "Copy Branch Name",
+      pushTag: "Push Tag",
+      deleteTag: "Delete Tag",
+      showStash: "Show Stash",
+      goToHead: "Go to HEAD",
+      mineOnly: "Mine only",
+      recentUsers: "Recent committers",
+      filterUserPlaceholder: "Name or email, Enter to filter…",
+      anyTime: "Any time",
+      lastDay: "Last 24 hours",
+      lastWeek: "Last week",
+      lastMonth: "Last month",
+      prune: "Prune",
+      stashes: "Stashes",
+      remotes: "Remotes",
+      mergeTitle: "Merge into the current branch?",
+      rebaseTitle: "Rebase the current branch?",
+      deleteBranchTitle: "Delete this branch?",
+      renameTitle: "Rename branch",
+      setUpstreamTitle: "Set upstream",
+      deleteTagTitle: "Delete this tag?",
+      mergeConflicts: "The merge stopped on conflicts — resolve them in the Changes list, then commit to finish.",
+      rebaseConflicts: "The rebase stopped on conflicts — resolve them in the Changes list, then continue.",
+      stash: "Stash",
+      stashChanges: "Stash Changes",
+      unstash: "Unstash",
+      dropStash: "Drop",
+      applyStash: "Apply Stash",
+      stashMessage: "Stash message",
+      unified: "Unified viewer",
+      sideBySide: "Side-by-side viewer",
+      collapseUnchanged: "Collapse Unchanged Fragments",
+      ignoreDifferences: "Ignore Differences",
+      ignoreNone: "None",
+      ignoreTrim: "Trim whitespaces",
+      ignoreWhitespace: "Ignore whitespaces",
+      ignoreWhitespaceAndEmpty: "Ignore whitespaces and empty lines",
+      showWhitespaces: "Show Whitespaces",
+      showLineNumbers: "Show Line Numbers",
+      previousDifference: "Previous Difference",
+      nextDifference: "Next Difference",
+      whiteSpaceOnly: "whitespace only",
+      binaryDiff: "Binary file — no textual diff",
+      noDiff: "No differences",
+      clearAll: "Clear All",
+      notARepository: "Not a Git repository",
+      noWorkspace: "No workspace is open",
+      gitMissing: "Git executable not found",
+      pickFile: "Select a file to see its diff",
+      files: "files",
+      selected: "selected",
+      nothingStaged: "Nothing is staged",
+      inProgress: "Merge or rebase in progress",
+      copy: "Copy",
+      copied: "Copied",
+      cancel: "Cancel",
+      ok: "OK",
+      close: "Close",
+      showDetails: "Show Details",
+      viewOptions: "View Options",
+      branchLabel: "Branch",
+      head: "HEAD",
+      uncommitted: "uncommitted changes",
+      loading: "Loading…",
+      conflictNotice: "Resolve conflicts before committing",
+      unversionedNotice: "Unversioned files must be added before they can be committed",
+      allChanges: "All Changes",
+      flat: "Flat",
+      groupByDirectory: "Group by Directory",
+      openFile: "Open File",
+      revealInFileManager: "Reveal in File Manager",
+      stageAllChanges: "Add All to Index",
+      unstageAllChanges: "Remove All from Index",
+      noCommits: "No commits yet",
+      filesChanged: "files changed",
+      outgoing: "outgoing commits",
+      incoming: "incoming commits",
+      diff: "Diff",
+      submodule: "submodule",
+      authSsh: "Your Git has no credential the plugin can use for this remote. It runs your own git, so configure the remote the same way your terminal does: use an HTTPS URL, or make the key work without ssh-agent (the host does not pass SSH_AUTH_SOCK, so agent-held keys cannot be unlocked). On macOS, `UseKeychain yes` in ~/.ssh/config is enough.",
+      authCredentials: "No stored credential for this remote, and there is no terminal here to type one. Push once from a terminal to let your credential helper store it, then retry.",
+      generateMessage: "Generate Commit Message",
+      generating: "Generating…",
+      generateOptions: "Model and options",
+      modelLabel: "Model",
+      commitLanguage: "Message language",
+      langAuto: "Match repository history",
+      langChinese: "Simplified Chinese",
+      langEnglish: "English",
+      noModel: "No AI provider is ready to use. Add one, or sign one in, under Settings → AI providers.",
+      modelPermission: "The plugin has not been granted access to your models yet, so it cannot list them. Reload it: Extensions → ··· → Load local plugin, and approve the new permissions.",
+      modelPermissionShort: "Cannot list your models — reload to grant access",
+      rateLimited: "Too many generations in a row (the host allows 8 per minute). Wait a moment and try again.",
+      nothingToDescribe: "Nothing to describe: stage a change, or select a file in the Changes list first.",
+      draftTimeout: "The model did not answer in time.",
+      replaceDraft: "Replace your draft?",
+      replaceDraftBody: "Generating a message overwrites what you have already typed.",
+      replace: "Replace",
+      draftedStaged: "Commit message drafted from checked (staged) changes",
+      draftedFile: "Commit message drafted from {{file}}",
+      submoduleBadge: "submodule",
+      submoduleInside: "This change is inside the submodule {{path}}. The parent repository can only record which commit the submodule points at, so it cannot be committed from here. Switch to the submodule in the repository list (top left), commit there, then come back and stage it here.",
+      submoduleStagedHint: "Staged the submodule's commit. Its own uncommitted changes stay inside it and still show as unstaged.",
+      repository: "Repository",
+      switchRepository: "Switch repository",
+      repositoryList: "Repositories",
+      nestedRepoBadge: "nested repository",
+      nestedRepoHint: "A Git repository that lives inside this one without being a submodule: the parent stores none of its files.",
+      appShortcutHint: "The command palette belongs to the app: click back into the main window first, or press Alt+Space for the plugin launcher.",
+      dropStashConfirm: "Drop this stash?",
+      noMatchingChanges: "No changes match the filter",
+      filterChanges: "Filter changes",
+      compactMiddleDirs: "Compact Middle Directories",
+      collapseAll: "Collapse All",
+      includeFolder: "Include this folder into commit",
+      unincludeFolder: "Exclude this folder from commit",
+      repositoryHint: "Open a folder that is inside a Git repository.",
+      remoteAhead: "The remote branch has commits you do not have. Fetch, then Pull, and push again — or, if the local history is the one to keep, use Force Push from the branch menu.",
+      pushRejected: "The server refused the push — the branch is probably protected, or a hook rejected it.",
+      pullDiverged: "Local and remote have diverged. Merge or rebase, then push.",
+      // Not "then commit": a pull that rebases (the user's own `pull.rebase`)
+      // stops on conflicts too, and there the finish is Continue. The status
+      // line above the commit button knows which one it is; this only has to
+      // send the user there.
+      pullConflicts: "The pull stopped on conflicts — resolve them in the Changes list, then finish it there.",
+      mergeInProgress: "Merging — resolve the conflicts, then commit to finish.",
+      rebaseInProgress: "Rebasing — resolve the conflicts, then continue.",
+      cherryPickInProgress: "Cherry-picking — resolve the conflicts, then continue.",
+      revertInProgress: "Reverting — resolve the conflicts, then continue.",
+      abortOperation: "Abort",
+      continueOperation: "Continue",
+      forcePush: "Force Push (with lease)",
+      forcePushTitle: "Overwrite the remote branch?",
+      forcePushBody: "This rewrites {{branch}} on {{remote}}: commits that are there and not here are dropped. The lease means it only runs while the remote is still where this window last saw it, so a push from someone else is refused instead of erased.",
+      gitOutput: "Git output",
+      showDetail: "Show details",
+       commitSummary: "{{staged}} of {{total}} file{{s}} will be committed",
+       generateScope: "{{action}} · {{lang}} (uses checked/staged changes)",
+       collapsedLines: "⋮ {{count}} unchanged line{{s}}",
+       copyPath: "Copy Path",
+       switchToRepo: "Switch to this repository",
+       submoduleGroup: "{{rel}} ({{kind}} · {{branch}})",
+       commitMultipleRepos: "Commit {{count}} repositories with the same message",
+       submoduleCommitted: "{{rel}} committed",
+       siblingRepoBadge: "sibling repository",
+       siblingRepoHint: "A repository that sits next to the current one in the same folder, not inside it.",
+       pushDialogTitle: "Push",
+       pushDialogSubtitle: "Push each repository's commits to its own remote.",
+       pushAll: "Push All",
+       pushSelected: "Push Selected",
+      pushing: "Pushing…",
+      committing: "Committing…",
+      committingAndPushing: "Committing and pushing…",
+      fetching: "Fetching…",
+      pulling: "Pulling…",
+      checkingOut: "Checking out…",
+      stashing: "Stashing…",
+      unstashing: "Restoring stash…",
+      pushingRepo: "Pushing {{done}} of {{total}}…",
+       pushed: "Pushed",
+       pushedRepos: "Pushed {{count}} repositories",
+       pushPartial: "Pushed {{ok}} of {{total}} repositories",
+       pushNoUpstream: "no upstream",
+       pushNoRemote: "no remote to push to",
+       pushUpToDate: "up to date",
+       pushNothingToPush: "Nothing to push: every repository is up to date.",
+       pushDialogHint: "Only the checked repositories are pushed. A failure in one does not stop the others.",
+       pushRowPushed: "{{branch}} → {{remote}}/{{branch}}",
+       relativeJustNow: "just now",
+      relativeMinutesAgo: "{{count}} minute{{s}} ago",
+      relativeHoursAgo: "{{count}} hour{{s}} ago",
+      relativeDaysAgo: "{{count}} day{{s}} ago",
+    },
+    "zh-CN": {
+      commit: "提交",
+      commitAndPush: "提交并推送",
+      commitMessage: "提交信息",
+      commitHistory: "提交信息历史",
+      amend: "修正上一次提交",
+      signOff: "签名",
+      runHooks: "运行 Git 钩子",
+      changes: "变更",
+      staged: "已暂存",
+      unstaged: "未暂存",
+      unversioned: "未纳入版本控制的文件",
+      conflicts: "合并冲突",
+      noChanges: "没有变更",
+      refresh: "刷新",
+      fetch: "抓取",
+      pull: "拉取",
+      push: "推送",
+      update: "更新项目",
+      rollback: "回滚",
+      showDiff: "显示差异",
+      jumpToSource: "跳到源文件",
+      stage: "添加到索引",
+      stageFile: "添加到索引",
+      unstageFile: "从索引中移除",
+      stageHunk: "暂存该代码块",
+      unstageHunk: "取消暂存该代码块",
+      discardHunk: "丢弃该代码块",
+      includeIntoCommit: "纳入本次提交",
+      discard: "丢弃更改",
+      git: "Git",
+      log: "日志",
+      console: "控制台",
+      branches: "分支",
+      localBranches: "本地分支",
+      remoteBranches: "远程分支",
+      tags: "标签",
+      changedFiles: "变更的文件",
+      commitDetails: "提交详情",
+      graphOptions: "提交图选项",
+      byCommitDate: "按提交时间",
+      topologically: "按拓扑顺序",
+      showFirstParent: "仅第一条父提交",
+      noMerges: "隐藏合并提交",
+      showGraph: "显示提交图",
+      search: "搜索",
+      filterByBranch: "分支",
+      filterByUser: "提交者",
+      filterByPaths: "路径",
+      allBranches: "所有分支",
+      author: "作者",
+      date: "日期",
+      hash: "哈希",
+      subject: "说明",
+      message: "信息",
+      all: "全部",
+      checkoutRevision: "检出该修订",
+      newBranchFromHere: "从此处新建分支",
+      newTag: "新建标签",
+      cherryPick: "拣选",
+      revert: "反转提交",
+      resetToHere: "将当前分支重置到此处",
+      editCommitMessage: "修改提交信息",
+      copyRevisionNumber: "复制修订号",
+      copyMessage: "复制提交信息",
+      compareWithLocal: "与本地比较",
+      compareWithHead: "与 HEAD 比较",
+      showRepository: "显示仓库",
+      soft: "Soft",
+      mixed: "Mixed",
+      hard: "Hard",
+      reset: "重置",
+      newBranch: "新建分支",
+      checkout: "检出",
+      mergeIntoCurrent: "合并到当前分支",
+      merge: "合并",
+      rebase: "变基",
+      rebaseOnto: "将当前分支变基到此分支",
+      deleteBranch: "删除",
+      renameBranch: "重命名",
+      setUpstream: "设置上游分支",
+      unsetUpstream: "取消上游关联",
+      copyBranchName: "复制分支名",
+      pushTag: "推送标签",
+      deleteTag: "删除标签",
+      showStash: "查看储藏",
+      goToHead: "回到 HEAD",
+      mineOnly: "只看我的",
+      recentUsers: "最近提交者",
+      filterUserPlaceholder: "输入姓名或邮箱，回车过滤…",
+      anyTime: "全部时间",
+      lastDay: "最近 24 小时",
+      lastWeek: "最近一周",
+      lastMonth: "最近一月",
+      prune: "清理已删除的远端分支",
+      stashes: "储藏",
+      remotes: "远端",
+      mergeTitle: "合并到当前分支？",
+      rebaseTitle: "把当前分支变基到所选分支？",
+      deleteBranchTitle: "删除该分支？",
+      renameTitle: "重命名分支",
+      setUpstreamTitle: "设置上游分支",
+      deleteTagTitle: "删除该标签？",
+      mergeConflicts: "合并因冲突停下 — 请在变更列表里解决冲突，然后提交完成。",
+      rebaseConflicts: "变基因冲突停下 — 请在变更列表里解决冲突，然后点「继续」。",
+      stash: "储藏",
+      stashChanges: "储藏更改",
+      unstash: "取消储藏",
+      dropStash: "删除储藏",
+      applyStash: "应用储藏",
+      stashMessage: "储藏说明",
+      unified: "单栏视图",
+      sideBySide: "并排视图",
+      collapseUnchanged: "折叠未修改的片段",
+      ignoreDifferences: "忽略差异",
+      ignoreNone: "不忽略",
+      ignoreTrim: "忽略行尾空白",
+      ignoreWhitespace: "忽略空白",
+      ignoreWhitespaceAndEmpty: "忽略空白与空行",
+      showWhitespaces: "显示空白字符",
+      showLineNumbers: "显示行号",
+      previousDifference: "上一处差异",
+      nextDifference: "下一处差异",
+      whiteSpaceOnly: "仅空白差异",
+      binaryDiff: "二进制文件，无文本差异",
+      noDiff: "没有差异",
+      clearAll: "全部清空",
+      notARepository: "不是 Git 仓库",
+      noWorkspace: "没有打开的工作区",
+      gitMissing: "找不到 git 可执行文件",
+      pickFile: "选择一个文件查看差异",
+      files: "个文件",
+      selected: "已选择",
+      nothingStaged: "暂存区为空",
+      inProgress: "正在进行合并或变基",
+      copy: "复制",
+      copied: "已复制",
+      cancel: "取消",
+      ok: "确定",
+      close: "关闭",
+      showDetails: "显示详情",
+      viewOptions: "视图选项",
+      branchLabel: "分支",
+      head: "HEAD",
+      uncommitted: "未提交的更改",
+      loading: "加载中…",
+      conflictNotice: "请先解决冲突再提交",
+      unversionedNotice: "未纳入版本控制的文件需要先添加到索引",
+      allChanges: "全部更改",
+      flat: "平铺",
+      groupByDirectory: "按目录分组",
+      openFile: "打开文件",
+      revealInFileManager: "在文件管理器中显示",
+      stageAllChanges: "全部添加到索引",
+      unstageAllChanges: "全部从索引中移除",
+      noCommits: "暂无提交",
+      filesChanged: "个文件有变更",
+      outgoing: "待推送的提交",
+      incoming: "待拉取的提交",
+      submodule: "子模块",
+      authSsh: "插件用的就是你自己的 git，但这个远端没有它可用的凭据。请按你终端里的方式配好远端：改用 HTTPS 地址，或让密钥不依赖 ssh-agent（宿主不传递 SSH_AUTH_SOCK，所以放在 agent 里的密钥解不开）。macOS 上在 ~/.ssh/config 里加 `UseKeychain yes` 即可。",
+      authCredentials: "这个远端没有已保存的凭据，而这里没有终端可以输入密码。请在终端里手动 push 一次，让凭据助手把它存下来，然后再重试。",
+      generateMessage: "生成提交信息",
+      generating: "生成中…",
+      generateOptions: "模型与选项",
+      modelLabel: "模型",
+      commitLanguage: "提交信息语言",
+      langAuto: "跟随仓库历史",
+      langChinese: "简体中文",
+      langEnglish: "英文",
+      noModel: "没有可用的 AI 服务：请先在「设置 → AI 服务」中添加或登录一个。",
+      modelPermission: "插件还没有拿到读取模型的权限，因此列不出模型。请重新加载：扩展页 → 右上角 ··· → 「加载本地插件」，并同意新增的权限。",
+      modelPermissionShort: "无法列出模型 — 需重新加载以授权",
+      rateLimited: "连续生成次数过多（宿主限制每分钟 8 次）。请稍等片刻再试。",
+      nothingToDescribe: "没有可描述的内容：请先暂存改动，或在变更列表里选中一个文件。",
+      draftTimeout: "模型未在规定时间内返回。",
+      replaceDraft: "替换当前草稿？",
+      replaceDraftBody: "生成会覆盖你已经输入的内容。",
+      replace: "替换",
+      draftedStaged: "已生成提交信息（来源：已勾选/已暂存内容）",
+      draftedFile: "已生成提交信息（来源：{{file}}）",
+      submoduleBadge: "子模块",
+      submoduleInside: "这个改动在子模块 {{path}} 内部。父仓库只能记录子模块指向哪个提交，无法从这里把它提交掉。请在左上角的仓库列表里切换到该子模块，在里面提交，再回到这里暂存。",
+      submoduleStagedHint: "已暂存子模块指向的提交。子模块内部未提交的改动仍然留在里面，所以它依旧显示为未暂存。",
+      repository: "仓库",
+      switchRepository: "切换仓库",
+      repositoryList: "仓库列表",
+      nestedRepoBadge: "嵌套仓库",
+      nestedRepoHint: "这个 Git 仓库位于当前仓库内部，但不是子模块：父仓库不保存它的任何文件。",
+      appShortcutHint: "命令面板由宿主提供，需先点回主窗口；或在视图内按 Alt+Space 打开插件启动器。",
+      diff: "差异",
+      dropStashConfirm: "删除该储藏？",
+      noMatchingChanges: "没有匹配的变更",
+      filterChanges: "筛选变更",
+      includeFolder: "把该文件夹纳入本次提交",
+      unincludeFolder: "把该文件夹排除出本次提交",
+      compactMiddleDirs: "折叠中间目录",
+      collapseAll: "全部折叠",
+      repositoryHint: "请打开一个位于 Git 仓库内的文件夹。",
+      remoteAhead: "远端分支上有你还没有的提交。请先 Fetch，再 Pull，然后重新推送；若要以本地历史为准，用分支菜单里的「强制推送」。",
+      pushRejected: "服务端拒绝了这次推送 — 分支可能受保护，或被钩子拦下。",
+      pullDiverged: "本地与远端已分叉：请先合并或变基，再推送。",
+      pullConflicts: "拉取因冲突停下 — 请在变更列表里解决冲突，然后在那里收尾。",
+      mergeInProgress: "合并进行中 — 解决冲突后提交即可完成",
+      rebaseInProgress: "变基进行中 — 解决冲突后点「继续」",
+      cherryPickInProgress: "拣选进行中 — 解决冲突后点「继续」",
+      revertInProgress: "还原进行中 — 解决冲突后点「继续」",
+      abortOperation: "中止",
+      continueOperation: "继续",
+      forcePush: "强制推送（with lease）",
+      forcePushTitle: "覆盖远端分支？",
+      forcePushBody: "这会把 {{remote}} 上的 {{branch}} 重写为本地提交：只存在于远端的提交将被丢弃。lease 的含义是只有远端仍停在本窗口上次看到的位置时才执行，因此他人的推送会被拒绝，而不是被覆盖。",
+      gitOutput: "Git 输出",
+      showDetail: "查看详情",
+       commitSummary: "将提交 {{staged}} / {{total}} 个文件",
+       generateScope: "{{action}} · {{lang}}（基于已勾选/已暂存内容）",
+       collapsedLines: "⋮ {{count}} 行未修改",
+       copyPath: "复制路径",
+      switchToRepo: "切换到该仓库",
+      submoduleGroup: "{{rel}}（{{kind}} · {{branch}}）",
+      commitMultipleRepos: "将用同一提交信息提交 {{count}} 个仓库",
+      submoduleCommitted: "{{rel}} 已提交",
+      siblingRepoBadge: "平级仓库",
+      siblingRepoHint: "与当前仓库在同一文件夹下的仓库，不是它的子目录。",
+      pushDialogTitle: "推送",
+      pushDialogSubtitle: "把每个仓库的提交推送到它自己的远端。",
+      pushAll: "全部推送",
+      pushSelected: "推送所选",
+      pushing: "推送中…",
+      committing: "提交中…",
+      committingAndPushing: "提交并推送中…",
+      fetching: "抓取中…",
+      pulling: "拉取中…",
+      checkingOut: "检出中…",
+      stashing: "储藏中…",
+      unstashing: "正在恢复储藏…",
+      pushingRepo: "正在推送 {{done}} / {{total}}…",
+      pushed: "已推送",
+      pushedRepos: "已推送 {{count}} 个仓库",
+      pushPartial: "已推送 {{ok}} / {{total}} 个仓库",
+      pushNoUpstream: "无上游分支",
+      pushNoRemote: "没有可推送的远端",
+      pushUpToDate: "已是最新",
+      pushNothingToPush: "没有可推送的内容：所有仓库都是最新的。",
+      pushDialogHint: "只推送勾选的仓库，其中一个失败不会阻止其他仓库。",
+      pushRowPushed: "{{branch}} → {{remote}}/{{branch}}",
+      relativeJustNow: "刚刚",
+      relativeMinutesAgo: "{{count}} 分钟前",
+      relativeHoursAgo: "{{count}} 小时前",
+      relativeDaysAgo: "{{count}} 天前",
+    },
+  };
+
+  const state = { locale: "en", theme: "dark" };
+
+  function resolveLocale(raw) {
+    const value = String(raw ?? "").replace("_", "-").toLowerCase();
+    if (value.startsWith("zh")) return "zh-CN";
+    return "en";
+  }
+
+  state.locale = resolveLocale(navigator.language);
+
+  /** Look up IDEA's wording for the active locale, falling back to English. */
+  function t(key) {
+    const table = STRINGS[state.locale] ?? STRINGS.en;
+    return table[key] ?? STRINGS.en[key] ?? key;
+  }
+
+  /**
+   * Same lookup, with `{{name}}` placeholders filled in. Whole sentences belong
+   * in one key: gluing a translation together from fragments is how you get
+   * grammar that reads like a machine wrote it.
+   */
+  function tf(key, vars) {
+    return t(key).replace(/\{\{(\w+)\}\}/g, (match, name) => (
+      vars && vars[name] !== undefined ? String(vars[name]) : match
+    ));
+  }
+
+  // -------------------------------------------------------------- bridge ---
+  /** Every host call goes through here so a failure is data, never a throw. */
+  async function invoke(channel, payload) {
+    if (!bridge?.invoke) {
+      // Dev-only path (outside PI-Desktop): reuse an existing host-state key
+      // rather than a hardcoded English fallback so user copy stays in t().
+      return { ok: false, message: t("noWorkspace") };
+    }
+    try {
+      const result = await bridge.invoke(channel, payload ?? {});
+      if (!result || typeof result !== "object") {
+        // Keep the channel for diagnosis; the prefix is an existing key.
+        return { ok: false, message: `${t("gitOutput")}: ${channel}` };
+      }
+      return result;
+    } catch (error) {
+      return { ok: false, message: String(error?.message ?? error) };
+    }
+  }
+
+  async function copyText(text) {
+    const result = await invoke("clipboard.writeText", { text: String(text ?? "") });
+    // Reuse the existing action key; the error level already says it failed.
+    toast(result.ok ? t("copied") : result.message ?? t("copy"), result.ok ? "info" : "error");
+  }
+
+  // --------------------------------------------------------------- dom ----
+  // No `html:` branch: innerHTML with user content is an XSS sink. Build with
+  // `text` and element children instead; only static templates may use
+  // innerHTML at their own call site, never through h(). Zero `html:` callers.
+  function h(tag, props, children) {
+    const node = document.createElement(tag);
+    if (props) {
+      for (const [key, value] of Object.entries(props)) {
+        if (value === undefined || value === null || value === false) continue;
+        if (key === "class") node.className = value;
+        else if (key === "text") node.textContent = value;
+        else if (key === "style" && typeof value === "object") Object.assign(node.style, value);
+        else if (key === "dataset") Object.assign(node.dataset, value);
+        else if (key.startsWith("on") && typeof value === "function") {
+          node.addEventListener(key.slice(2).toLowerCase(), value);
+        } else if (value === true) node.setAttribute(key, "");
+        else node.setAttribute(key, String(value));
+      }
+    }
+    for (const child of children ?? []) {
+      if (child === null || child === undefined || child === false) continue;
+      node.append(typeof child === "string" || typeof child === "number" ? String(child) : child);
+    }
+    return node;
+  }
+
+  function clear(node) {
+    while (node.firstChild) node.removeChild(node.firstChild);
+    return node;
+  }
+
+  const SVG_NS = "http://www.w3.org/2000/svg";
+
+  // Icons are built from primitives rather than opaque path blobs so they stay
+  // editable; each entry is a list of [tagName, attributes] children.
+  const ICONS = {
+    refresh: [["path", { d: "M12.6 8.4a4.6 4.6 0 1 1-1.4-3.4" }], ["path", { d: "M12.6 3.4v2.6h-2.6" }]],
+    fetch: [["path", { d: "M8 2.6v7.4" }], ["path", { d: "M5 7.2 8 10.2l3-3" }], ["path", { d: "M3 13.2h10" }]],
+    push: [["path", { d: "M8 13.4V6" }], ["path", { d: "M5 8.8 8 5.8l3 3" }], ["path", { d: "M3 2.8h10" }]],
+    commit: [["circle", { cx: 8, cy: 8, r: 3.1 }], ["path", { d: "M1.6 8h3.3M11.1 8h3.3" }]],
+    branch: [["circle", { cx: 4, cy: 3.6, r: 1.6 }], ["circle", { cx: 4, cy: 12.4, r: 1.6 }], ["circle", { cx: 12, cy: 6.6, r: 1.6 }], ["path", { d: "M4 5.2v5.6" }], ["path", { d: "M4 8.4h4a3.4 3.4 0 0 0 3.4-3.4v-.2" }]],
+    rollback: [["path", { d: "M3.4 8.4a4.6 4.6 0 1 0 1.4-3.4" }], ["path", { d: "M3.4 3.4v2.6H6" }]],
+    diff: [["rect", { x: 2, y: 2, width: 7.5, height: 12, rx: 1 }], ["path", { d: "M11 5.5h2.2A.8.8 0 0 1 14 6.3v6.4a.8.8 0 0 1-.8.8H11" }]],
+    plus: [["path", { d: "M8 3.4v9.2M3.4 8h9.2" }]],
+    minus: [["path", { d: "M3.4 8h9.2" }]],
+    close: [["path", { d: "M4 4l8 8M12 4l-8 8" }]],
+    check: [["path", { d: "M3.2 8.6l3.2 3.2 6.4-8" }]],
+    gear: [["circle", { cx: 8, cy: 8, r: 2.2 }], ["path", { d: "M8 1.8v2M8 12.2v2M1.8 8h2M12.2 8h2M3.6 3.6l1.4 1.4M11 11l1.4 1.4M12.4 3.6 11 5M5 11l-1.4 1.4" }]],
+    search: [["circle", { cx: 7, cy: 7, r: 4.2 }], ["path", { d: "M10.2 10.2 14 14" }]],
+    clock: [["circle", { cx: 8, cy: 8, r: 5.6 }], ["path", { d: "M8 4.6V8l2.6 1.8" }]],
+    copy: [["rect", { x: 5.4, y: 5.4, width: 8.2, height: 8.2, rx: 1.2 }], ["path", { d: "M10.6 5.4V3.6a1.2 1.2 0 0 0-1.2-1.2H3.6a1.2 1.2 0 0 0-1.2 1.2v5.8a1.2 1.2 0 0 0 1.2 1.2h1.8" }]],
+    trash: [["path", { d: "M3 4.4h10" }], ["path", { d: "M6.4 4.4V3.2h3.2v1.2" }], ["path", { d: "M4.4 4.4l.6 8.4h6l.6-8.4" }]],
+    folder: [["path", { d: "M2 4.4A1.4 1.4 0 0 1 3.4 3h2.4l1.4 1.8h5.4A1.4 1.4 0 0 1 14 6.2v5.4A1.4 1.4 0 0 1 12.6 13H3.4A1.4 1.4 0 0 1 2 11.6z" }]],
+    file: [["path", { d: "M4 2h5l3 3v9H4z" }], ["path", { d: "M9 2v3h3" }]],
+    list: [["path", { d: "M2.6 4h1.6M2.6 8h1.6M2.6 12h1.6" }], ["path", { d: "M7 4h6.4M7 8h6.4M7 12h6.4" }]],
+    tag: [["path", { d: "M2.6 7.4 7.4 2.6h5.2a1 1 0 0 1 1 1v5.2l-4.8 4.8a1 1 0 0 1-1.4 0l-4.8-4.8a1 1 0 0 1 0-1.4z" }], ["circle", { cx: 10.6, cy: 5.4, r: 1 }]],
+    external: [["path", { d: "M6.6 3.4H3.4v9.2h9.2V9.4" }], ["path", { d: "M9.4 2.6h4v4" }], ["path", { d: "M13.4 2.6 7.8 8.2" }]],
+    columns: [["rect", { x: 2, y: 3, width: 12, height: 10, rx: 1 }], ["path", { d: "M8 3v10" }]],
+    collapse: [["path", { d: "M4 6.4 8 2.6l4 3.8" }], ["path", { d: "M4 9.6 8 13.4l4-3.8" }]],
+    eye: [["path", { d: "M1.8 8S4.2 4 8 4s6.2 4 6.2 4-2.4 4-6.2 4-6.2-4-6.2-4z" }], ["circle", { cx: 8, cy: 8, r: 1.7 }]],
+    more: [["circle", { cx: 8, cy: 3.4, r: 1.1 }], ["circle", { cx: 8, cy: 8, r: 1.1 }], ["circle", { cx: 8, cy: 12.6, r: 1.1 }]],
+    chevronRight: [["path", { d: "M6.4 3.6 10.8 8l-4.4 4.4" }]],
+    chevronDown: [["path", { d: "M3.6 6.4 8 10.8l4.4-4.4" }]],
+    arrowUp: [["path", { d: "M8 13V3.6" }], ["path", { d: "M4.8 6.8 8 3.6l3.2 3.2" }]],
+    arrowDown: [["path", { d: "M8 3v9.4" }], ["path", { d: "M4.8 9.2 8 12.4l3.2-3.2" }]],
+    warning: [["path", { d: "M8 2.4 14.4 13.6H1.6z" }], ["path", { d: "M8 6.2v3.4" }], ["circle", { cx: 8, cy: 11.6, r: 0.7 }]],
+    // Two sparkles: the conventional mark for "let the model draft this".
+    sparkles: [["path", { d: "M6.4 2.2 7.7 5.5l3.3 1.3-3.3 1.3L6.4 11.4 5.1 8.1 1.8 6.8l3.3-1.3z" }], ["path", { d: "M12.2 9.6l.6 1.6 1.6.6-1.6.6-.6 1.6-.6-1.6-1.6-.6 1.6-.6z" }]],
+  };
+
+  function icon(name, size) {
+    const parts = ICONS[name] ?? ICONS.file;
+    const svg = document.createElementNS(SVG_NS, "svg");
+    const dimension = size ?? 16;
+    svg.setAttribute("viewBox", "0 0 16 16");
+    svg.setAttribute("width", String(dimension));
+    svg.setAttribute("height", String(dimension));
+    svg.setAttribute("fill", "none");
+    svg.setAttribute("stroke", "currentColor");
+    svg.setAttribute("stroke-width", "1.35");
+    svg.setAttribute("stroke-linecap", "round");
+    svg.setAttribute("stroke-linejoin", "round");
+    svg.setAttribute("aria-hidden", "true");
+    for (const [tag, attributes] of parts) {
+      const child = document.createElementNS(SVG_NS, tag);
+      for (const [key, value] of Object.entries(attributes)) child.setAttribute(key, String(value));
+      svg.append(child);
+    }
+    return svg;
+  }
+
+  /** A toolbar button with a tooltip, the IDEA affordance used everywhere. */
+  function iconButton(name, title, onClick, options) {
+    const button = h("button", {
+      class: options?.class ?? "icon",
+      type: "button",
+      title: options?.shortcut ? `${title} (${options.shortcut})` : title,
+      "aria-label": title,
+      disabled: options?.disabled,
+      onclick: onClick,
+    }, [icon(name, options?.size)]);
+    return button;
+  }
+
+  function textButton(label, title, onClick, options) {
+    return h("button", {
+      class: options?.class ?? "bordered",
+      type: "button",
+      title: title ?? label,
+      disabled: options?.disabled,
+      onclick: onClick,
+    }, [label]);
+  }
+
+  // ----------------------------------------------------------- shortcuts ---
+  /**
+   * Keyboard support has to live in the page.
+   *
+   * The host runs the app's own shortcuts from the *main window's* renderer
+   * (`window.addEventListener("keydown", …)`), and a plugin view is a separate
+   * `WebContentsView` with its own webContents — so keys pressed while a view
+   * has focus never reach the host's handler. Anything a button advertises,
+   * therefore, has to be bound here. `format()` exists so a tooltip is derived
+   * from the binding and can never advertise a key that does nothing.
+   */
+  const IS_MAC = /mac/i.test(navigator.userAgent);
+
+  function shortcutKey(event) {
+    const key = String(event.key ?? "");
+    return key.length === 1 ? key.toLowerCase() : key;
+  }
+
+  function matchesShortcut(spec, event) {
+    if (shortcutKey(event) !== shortcutKey({ key: spec.key })) return false;
+    const primary = IS_MAC ? event.metaKey : event.ctrlKey;
+    const secondary = IS_MAC ? event.ctrlKey : event.metaKey;
+    if (spec.mod) {
+      if (!primary || secondary) return false;
+    } else if (spec.ctrl) {
+      if (!event.ctrlKey) return false;
+    } else if (spec.meta) {
+      if (!event.metaKey) return false;
+    } else if (primary || secondary) {
+      return false;
+    }
+    if (Boolean(spec.alt) !== event.altKey) return false;
+    if (Boolean(spec.shift) !== event.shiftKey) return false;
+    return true;
+  }
+
+  /** "⌘R" on macOS, "Ctrl+R" elsewhere — the same string the tooltip gets. */
+  function formatShortcut(spec) {
+    const parts = [];
+    if (spec.mod) parts.push(IS_MAC ? "⌘" : "Ctrl");
+    if (spec.ctrl) parts.push(IS_MAC ? "⌃" : "Ctrl");
+    if (spec.meta) parts.push(IS_MAC ? "⌘" : "Meta");
+    if (spec.alt) parts.push(IS_MAC ? "⌥" : "Alt");
+    if (spec.shift) parts.push(IS_MAC ? "⇧" : "Shift");
+    const key = spec.key.length === 1 ? spec.key.toUpperCase() : spec.key;
+    return IS_MAC && parts.length && parts[0].length === 1 ? parts.join("") + key : [...parts, key].join("+");
+  }
+
+  /**
+   * The app's own accelerators are delivered to the *main window's* renderer, so
+   * a focused plugin view never receives them — `⌘⇧P` (command palette) simply
+   * does nothing here. Silence is the worst possible answer: it reads as a
+   * broken key. Catching it and explaining where to go costs one binding and
+   * turns a dead key into directions.
+   */
+  function appShortcutHintBinding() {
+    return {
+      spec: { key: "p", mod: true, shift: true },
+      run: () => toast(t("appShortcutHint"), "info"),
+    };
+  }
+
+  /**
+   * Bind shortcuts for one surface. `bindings` is `[{ spec, run }]`; the first
+   * match wins, and the event is consumed so it cannot double-fire.
+   *
+   * Typing must win over shortcuts: while focus is in an input/textarea/select
+   * or contenteditable, non-Escape bindings are skipped so Ctrl+R etc. stay
+   * text. Escape-class bindings still run so a menu or dialog can always close.
+   */
+  function bindShortcuts(bindings) {
+    const handler = (event) => {
+      if (event.defaultPrevented) return;
+      const inField = Boolean(event.target?.closest?.("input, textarea, select, [contenteditable]"));
+      for (const binding of bindings) {
+        if (!matchesShortcut(binding.spec, event)) continue;
+        const specKey = String(binding.spec?.key ?? "").toLowerCase();
+        const isEscape = specKey === "escape" || specKey === "esc";
+        if (inField && !isEscape) continue;
+        event.preventDefault();
+        event.stopPropagation();
+        binding.run();
+        return;
+      }
+    };
+    window.addEventListener("keydown", handler);
+    return () => window.removeEventListener("keydown", handler);
+  }
+
+  // -------------------------------------------------------------- toasts ---
+  let toastLayer = null;
+
+  /**
+   * A transient message. Returns the node so a caller can add to it — the sync
+   * errors append a link to the full Git output.
+   *
+   * Long messages are the norm now (Git's own words, then a remedy), and error
+   * toasts have to be read before they can be acted on, so they get longer.
+   */
+  function toast(message, level) {
+    const text = String(message ?? "").trim();
+    if (!text) return null;
+    if (!toastLayer) {
+      toastLayer = h("div", { class: "toast-layer" });
+      document.body.append(toastLayer);
+    }
+    const important = level === "error";
+    const node = h("div", { class: `toast ${important ? "error" : "info"}`, role: "status" }, [text]);
+    toastLayer.append(node);
+    window.setTimeout(() => node.remove(), important ? 12_000 : 3600);
+    return node;
+  }
+
+  // -------------------------------------------------- busy & progress ----
+  // Long Git operations must never look ignored while the process runs.
+  // Two complementary affordances: the clicked button spins in place
+  // (setButtonBusy), and menu actions with no button to spin get a floating
+  // pill (taskPill / runWithPill). Both are shared so the two tool windows
+  // cannot disagree about what "working" looks like.
+  // Note: 远端操作忙碌反馈的完整取舍见 .agents/notes/implemented/architecture/2026-09-12-remote-action-busy-feedback.md
+  /** A CSS-only spinner; `large` marks primary text buttons. */
+  function spinner(large) {
+    return h("span", { class: large ? "spinner large" : "spinner", "aria-hidden": "true" });
+  }
+
+  // Original children of busy buttons, so the label (and icon) can be
+  // restored exactly rather than rebuilt from a string.
+  const busyOriginals = new WeakMap();
+
+  /**
+   * Spin a button in place. `busyText` null keeps icon-only buttons compact
+   * (spinner alone); text buttons show spinner + text. Always restores the
+   * exact original children via withBusy's finally — never call setButtonBusy
+   * without pairing busy(true)/busy(false).
+   */
+  function setButtonBusy(button, busy, busyText) {
+    if (!button) return;
+    if (busy) {
+      if (button.classList.contains("busy")) return;
+      busyOriginals.set(button, [...button.childNodes]);
+      button.classList.add("busy");
+      button.disabled = true;
+      clear(button);
+      button.append(spinner(busyText ? true : false));
+      if (busyText) button.append(h("span", { text: busyText }));
+    } else {
+      if (!button.classList.contains("busy")) return;
+      button.classList.remove("busy");
+      button.disabled = false;
+      clear(button);
+      for (const node of busyOriginals.get(button) ?? []) button.append(node);
+      busyOriginals.delete(button);
+    }
+  }
+
+  /**
+   * Run `task` with `button` spinning; the button is restored even when the
+   * task throws, and the task's value passes through untouched.
+   */
+  async function withBusy(button, busyText, task) {
+    setButtonBusy(button, true, busyText);
+    try {
+      return await task();
+    } finally {
+      setButtonBusy(button, false);
+    }
+  }
+
+  let taskPillLayer = null;
+
+  /**
+   * A floating "working…" pill for actions with no button to spin in (branch
+   * menu fetch / pull / push / checkout …). Returns `{ update, done }`:
+   * `done(ok)` flashes the outcome briefly, then removes the pill.
+   */
+  function taskPill(label) {
+    if (!taskPillLayer) {
+      taskPillLayer = h("div", { class: "task-pill-layer", "aria-live": "polite" });
+      document.body.append(taskPillLayer);
+    }
+    const labelNode = h("span", { text: String(label ?? "") });
+    const node = h("div", { class: "task-pill", role: "status" }, [spinner(false), labelNode]);
+    taskPillLayer.append(node);
+    let settled = false;
+    return {
+      node,
+      update(next) { labelNode.textContent = String(next ?? ""); },
+      done(ok) {
+        if (settled) return;
+        settled = true;
+        node.classList.add(ok === false ? "failed" : "done");
+        window.setTimeout(() => node.remove(), ok === false ? 2400 : 1200);
+      },
+    };
+  }
+
+  /**
+   * Run `task` behind a pill. The pill always resolves (success flashes and
+   * goes, failure lingers briefly); the task's value passes through.
+   */
+  async function runWithPill(label, task) {
+    const pill = taskPill(label);
+    try {
+      const result = await task();
+      pill.done(result?.ok !== false);
+      return result;
+    } catch (error) {
+      pill.done(false);
+      throw error;
+    }
+  }
+
+  // -------------------------------------------------------------- popups ---
+  let openPopup = null;
+
+  function closePopup() {
+    if (!openPopup) return;
+    openPopup.remove();
+    openPopup = null;
+    document.removeEventListener("pointerdown", onPopupPointerDown, true);
+    document.removeEventListener("keydown", onPopupKeyDown, true);
+  }
+
+  function onPopupPointerDown(event) {
+    if (openPopup && !openPopup.contains(event.target)) closePopup();
+  }
+
+  function onPopupKeyDown(event) {
+    if (event.key === "Escape") {
+      event.stopPropagation();
+      closePopup();
+    }
+  }
+
+  /**
+   * Floating menu anchored to a control. `items` accepts
+   * `{ label, shortcut, checked, disabled, onSelect }` entries as well as
+   * `{ type: "label" | "separator" | "custom", ... }`.
+   */
+  function popup(anchor, items, options) {
+    closePopup();
+    // A missing anchor means the caller read `event.currentTarget` after an
+    // await, where it is null. Complain loudly instead of appending a menu that
+    // would never be tracked — and therefore never removed.
+    if (!anchor || typeof anchor.getBoundingClientRect !== "function") {
+      throw new Error("popup() needs a live anchor element; capture it before any await");
+    }
+    const menu = h("div", { class: "popup", role: "menu" });
+    for (const item of items ?? []) {
+      if (!item) continue;
+      if (item.type === "separator") {
+        menu.append(h("div", { class: "popup-separator" }));
+        continue;
+      }
+      if (item.type === "label") {
+        menu.append(h("div", { class: "popup-title", text: item.label }));
+        continue;
+      }
+      if (item.type === "custom") {
+        menu.append(item.node);
+        continue;
+      }
+      menu.append(
+        h("button", {
+          type: "button",
+          role: "menuitem",
+          title: item.title ?? item.label,
+          disabled: item.disabled,
+          "data-checked": item.checked ? "true" : undefined,
+          onclick: () => {
+            closePopup();
+            item.onSelect?.();
+          },
+        }, [h("span", { text: item.label }), item.shortcut ? h("span", { class: "shortcut", text: item.shortcut }) : null]),
+      );
+    }
+    document.body.append(menu);
+    openPopup = menu;
+    const rect = anchor.getBoundingClientRect();
+    const width = menu.offsetWidth;
+    const height = menu.offsetHeight;
+    const left = Math.max(6, Math.min(rect.left, window.innerWidth - width - 6));
+    const wantBelow = rect.bottom + 4;
+    const top = wantBelow + height > window.innerHeight - 6
+      ? Math.max(6, rect.top - height - 4)
+      : wantBelow;
+    menu.style.left = `${left}px`;
+    menu.style.top = `${top}px`;
+    if (options?.focus !== false) {
+      const first = menu.querySelector("button:not([disabled]), input");
+      first?.focus();
+    }
+    document.addEventListener("pointerdown", onPopupPointerDown, true);
+    document.addEventListener("keydown", onPopupKeyDown, true);
+    return menu;
+  }
+
+  // -------------------------------------------------------- repositories ---
+  /**
+   * The repository selector — IDEA's "Root" dropdown — for the left of a tool
+   * window's toolbar.
+   *
+   * Submodules, and repositories that merely live inside another repository,
+   * are separate Git repositories rather than folders. Every command is scoped
+   * to a working directory, so a change inside a submodule cannot be staged,
+   * diffed or committed from the parent: the parent can only record *which
+   * commit* the submodule points at. Picking one here is what makes it
+   * reachable at all.
+   *
+   * A single-repository project has nothing to choose between, so the chip
+   * hides itself and the toolbar keeps the shape it has always had.
+   */
+  function mountRepoSelector(container, ctx) {
+    const chip = h("button", { class: "branch-chip repo-chip", type: "button" });
+    container.append(chip);
+    let repos = [];
+
+    /** Where the repository sits, relative to the workspace's own repository. */
+    function repositoryLabel(entry) {
+      if (!entry) return t("repository");
+      return entry.rel === "." ? entry.name : entry.rel;
+    }
+
+    function kindText(entry) {
+      if (entry.kind === "submodule") return t("submoduleBadge");
+      if (entry.kind === "sibling") return t("siblingRepoBadge");
+      return t("nestedRepoBadge");
+    }
+
+    function kindHint(entry) {
+      if (entry.kind === "submodule") return t("submoduleBadge");
+      if (entry.kind === "sibling") return t("siblingRepoHint");
+      return t("nestedRepoHint");
+    }
+
+    function paint() {
+      PIG.clear(chip);
+      chip.style.display = repos.length > 1 ? "" : "none";
+      if (repos.length < 2) return;
+      const current = repos.find((entry) => entry.active) ?? repos[0];
+      chip.append(icon("folder", 13));
+      chip.append(h("span", { class: "name", text: repositoryLabel(current) }));
+      if (current.kind !== "root") {
+        chip.append(h("span", { class: "badge", text: kindText(current) }));
+      }
+      chip.title = `${t("switchRepository")} — ${current.root}`;
+    }
+
+    async function openMenu() {
+      // Re-read on open, not only on refresh: a submodule can be added or
+      // deinitialised in between, and a menu listing a repository that is no
+      // longer there is worse than one extra Git call.
+      const result = await invoke("git/repos");
+      if (result?.ok) {
+        repos = result.repos ?? [];
+        paint();
+      }
+      popup(chip, [
+        { type: "label", label: t("repositoryList") },
+        ...repos.map((entry) => ({
+          label: repositoryLabel(entry),
+          title: entry.kind === "root"
+            ? entry.root
+            : `${entry.root} — ${kindHint(entry)}`,
+          checked: entry.active,
+          onSelect: async () => {
+            if (entry.active) return;
+            const switched = await invoke("git/select-repo", { root: entry.root });
+            if (!switched?.ok) {
+              toast(errorText(switched), "error");
+              return;
+            }
+            // The chip does not wait for the view's reload to say where the tool
+            // window points now: the answer to the switch is enough, and the
+            // view's own state is the view's business.
+            repos = repos.map((candidate) => ({
+              ...candidate,
+              active: candidate.root === switched.root,
+            }));
+            paint();
+            ctx.onSwitch?.(switched);
+          },
+        })),
+      ]);
+    }
+
+    chip.addEventListener("click", () => {
+      openMenu().catch((error) => toast(String(error?.message ?? error), "error"));
+    });
+
+    return {
+      /** Take the list from a `git/repos` answer. */
+      update(result) {
+        repos = result?.ok ? (result.repos ?? []) : [];
+        paint();
+      },
+    };
+  }
+
+  // ------------------------------------------------------------- dialogs ---
+  /** A small modal in the IDEA shape: message, then actions. */
+  function dialog({ title, message, detail, confirmLabel, cancelLabel, danger, input }) {
+    return new Promise((resolve) => {
+      const field = input
+        ? h("input", { type: "text", value: input.value ?? "", placeholder: input.placeholder ?? "" })
+        : null;
+      const backdrop = h("div", {
+        style: {
+          position: "fixed",
+          inset: "0",
+          zIndex: "80",
+          display: "flex",
+          alignItems: "center",
+          justifyContent: "center",
+          background: "color-mix(in oklab, #000 38%, transparent)",
+        },
+      });
+      const close = (value) => {
+        backdrop.remove();
+        document.removeEventListener("keydown", onKey, true);
+        resolve(value);
+      };
+      const onKey = (event) => {
+        if (event.key === "Escape") {
+          event.stopPropagation();
+          close(null);
+        } else if (event.key === "Enter" && field) {
+          event.stopPropagation();
+          close(field.value);
+        }
+      };
+      const confirm = h("button", {
+        class: danger ? "primary" : "primary",
+        type: "button",
+        style: danger ? { background: "var(--status-conflict)", borderColor: "var(--status-conflict)" } : undefined,
+        onclick: () => close(field ? field.value : true),
+      }, [confirmLabel ?? t("ok")]);
+      const panel = h("div", {
+        class: "popup",
+        role: "dialog",
+        "aria-modal": "true",
+        style: { position: "relative", minWidth: "280px", maxWidth: "420px", padding: "14px", boxShadow: "0 16px 48px rgba(0,0,0,.4)" },
+      }, [
+        h("div", { style: { fontWeight: "600", marginBottom: "6px" }, text: title ?? "" }),
+        message ? h("div", { text: message }) : null,
+        detail ? h("div", { class: "dialog-detail", text: detail }) : null,
+        field,
+        h("div", { style: { display: "flex", justifyContent: "flex-end", gap: "8px", marginTop: "14px" } }, [
+          // `cancelLabel: null` means "nothing to cancel" — a read-only dialog
+          // (the full Git output) has one button, not two.
+          cancelLabel === null
+            ? null
+            : h("button", { class: "bordered", type: "button", onclick: () => close(null) }, [cancelLabel ?? t("cancel")]),
+          confirm,
+        ]),
+      ]);
+      backdrop.append(panel);
+      backdrop.addEventListener("pointerdown", (event) => {
+        if (event.target === backdrop) close(null);
+      });
+      document.body.append(backdrop);
+      document.addEventListener("keydown", onKey, true);
+      (field ?? confirm).focus();
+      if (field) field.select();
+    });
+  }
+  // Note: 多仓 Push 对话框与两视图共用——按仓列出分支去向与 ahead，逐仓推送、单仓失败不挡其他仓；Commit and Push 复用同一逐仓推送 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+  /**
+   * IDEA-style Push dialog: one row per repository (branch → remote,
+   * ahead/behind, checkbox, per-row result). Pushes the checked rows one by
+   * one via `git/push` with `repoRoot`, so no repository switch is needed.
+   * Resolves with the per-repo outcomes (or null when closed without pushing).
+   */
+  async function openPushDialog(options = {}) {
+    const loading = await invoke("git/push-statuses");
+    if (!loading?.ok) {
+      toast(errorText(loading), "error");
+      return null;
+    }
+    const repos = (loading.repos ?? []).slice();
+    if (!repos.length) {
+      toast(t("notARepository"), "error");
+      return null;
+    }
+    return new Promise((resolve) => {
+      const checked = new Map();
+      const outcomes = new Map();
+      for (const entry of repos) {
+        // Default to pushing what can be pushed; repos with no remote stay
+        // unchecked but visible, so the reason is seen, not hidden.
+        checked.set(entry.root, Boolean(entry.pushTarget));
+      }
+      const backdrop = h("div", {
+        style: {
+          position: "fixed",
+          inset: "0",
+          zIndex: "80",
+          display: "flex",
+          alignItems: "center",
+          justifyContent: "center",
+          background: "color-mix(in oklab, #000 38%, transparent)",
+        },
+      });
+      const rowsHost = h("div", { class: "push-rows", style: { display: "flex", flexDirection: "column", gap: "6px", maxHeight: "320px", overflow: "auto", margin: "10px 0" } });
+      const hint = h("div", { class: "muted", style: { fontSize: "11px" }, text: t("pushDialogHint") });
+      const pushButton = h("button", { class: "primary", type: "button" }, [t("pushAll")]);
+      const closeButton = h("button", { class: "bordered", type: "button" }, [t("close")]);
+      const progressFill = h("div", { class: "push-progress-fill" });
+      const progressTrack = h("div", { class: "push-progress", style: { display: "none" } }, [progressFill]);
+      // Which row is on the wire right now, and how far through the batch it
+      // is — the row pulses while its push runs, the track fills per repo.
+      let activeRoot = null;
+      let doneCount = 0;
+      let totalCount = 0;
+      function paintProgress() {
+        progressTrack.style.display = pushing && totalCount > 1 ? "" : "none";
+        progressFill.style.width = totalCount ? `${Math.round((doneCount / totalCount) * 100)}%` : "0";
+        const label = pushButton.querySelector("span:last-child");
+        if (pushing && label) label.textContent = tf("pushingRepo", { done: Math.min(doneCount + 1, totalCount), total: totalCount });
+      }
+      let pushing = false;
+      let pushedAny = false;
+      const close = (value) => {
+        backdrop.remove();
+        document.removeEventListener("keydown", onKey, true);
+        resolve(value);
+      };
+      const onKey = (event) => {
+        if (event.key === "Escape") {
+          event.stopPropagation();
+          if (!pushing) close(pushedAny ? [...outcomes.values()] : null);
+        }
+      };
+      function branchText(entry) {
+        const head = entry.branch?.head ?? "";
+        if (!head) return entry.branch?.detached ? `detached @ ${String(entry.branch?.oid ?? "").slice(0, 8)}` : "";
+        if (entry.pushTarget) return tf("pushRowPushed", { branch: head, remote: entry.pushTarget.remote });
+        if (!entry.branch?.upstream) return `${head} · ${t("pushNoUpstream")}`;
+        return `${head} → ${entry.branch.upstream}`;
+      }
+      function countsText(entry) {
+        const ahead = entry.branch?.ahead ?? 0;
+        const behind = entry.branch?.behind ?? 0;
+        if (!ahead && !behind) return t("pushUpToDate");
+        const parts = [];
+        if (ahead) parts.push(`↑${ahead}`);
+        if (behind) parts.push(`↓${behind}`);
+        return parts.join(" ");
+      }
+      function paintRows() {
+        clear(rowsHost);
+        for (const entry of repos) {
+          const outcome = outcomes.get(entry.root);
+          const box = h("input", { type: "checkbox" });
+          box.checked = checked.get(entry.root) === true;
+          box.disabled = pushing || !entry.pushTarget;
+          box.addEventListener("change", () => { checked.set(entry.root, box.checked); });
+          const label = entry.rel === "." ? entry.name : entry.rel;
+          const kind = entry.kind === "submodule" ? t("submoduleBadge") : entry.kind === "sibling" ? t("siblingRepoBadge") : entry.kind === "root" ? "" : t("nestedRepoBadge");
+          const active = pushing && activeRoot === entry.root && outcome === null;
+          const status = active
+            ? h("div", { class: "row-status pushing" }, [spinner(false), h("span", { text: t("pushing") })])
+            : outcome
+              ? outcome.ok
+                ? h("div", { class: "row-status ok" }, [icon("check", 12), h("span", { text: t("pushed") })])
+                : h("div", { class: "row-status error", text: errorText(outcome) })
+              : null;
+          const row = h("div", { class: `push-row${active ? " is-active" : ""}`, style: { display: "flex", gap: "8px", alignItems: "flex-start", padding: "6px 8px", border: "1px solid var(--border)", borderRadius: "6px" } }, [
+            box,
+            h("div", { style: { flex: "1 1 auto", minWidth: "0" } }, [
+              h("div", { style: { display: "flex", gap: "6px", alignItems: "center" } }, [
+                h("span", { style: { fontWeight: "600" }, text: label }),
+                kind ? h("span", { class: "badge", text: kind }) : null,
+                h("span", { class: "muted", style: { fontSize: "11px" }, text: countsText(entry) }),
+              ]),
+              h("div", { class: "muted", style: { fontSize: "11px" }, text: branchText(entry) }),
+              entry.pushError && !entry.pushTarget ? h("div", { style: { fontSize: "11px", color: "var(--status-conflict)" }, text: entry.pushError }) : null,
+              status,
+            ]),
+          ]);
+          rowsHost.append(row);
+        }
+      }
+      pushButton.onclick = async () => {
+        if (pushing) return;
+        const targets = repos.filter((entry) => checked.get(entry.root) && entry.pushTarget);
+        if (!targets.length) {
+          toast(t("pushNothingToPush"), "info");
+          return;
+        }
+        pushing = true;
+        closeButton.disabled = true;
+        activeRoot = null;
+        doneCount = 0;
+        totalCount = targets.length;
+        // Single-repo pushes read better as a plain "Pushing…"; the per-row
+        // spinner already says which repo, and a 0%-of-1 bar adds nothing.
+        setButtonBusy(pushButton, true, totalCount > 1 ? tf("pushingRepo", { done: 1, total: totalCount }) : t("pushing"));
+        paintProgress();
+        paintRows();
+        for (const entry of targets) {
+          activeRoot = entry.root;
+          outcomes.set(entry.root, null);
+          paintProgress();
+          paintRows();
+          const payload = { repoRoot: entry.root };
+          if (!entry.branch?.upstream) payload.setUpstream = true;
+          let result = null;
+          try {
+            result = await invoke("git/push", payload);
+          } catch (error) {
+            result = { ok: false, message: String(error?.message ?? error) };
+          }
+          outcomes.set(entry.root, { ...result, rel: entry.rel, root: entry.root });
+          if (result?.ok) {
+            pushedAny = true;
+            try { await refreshTrackingRefs(result); } catch { /* keep pushing */ }
+          }
+          doneCount += 1;
+          paintProgress();
+          paintRows();
+        }
+        activeRoot = null;
+        pushing = false;
+        setButtonBusy(pushButton, false);
+        closeButton.disabled = false;
+        paintProgress();
+        paintRows();
+        try { await options.onPushed?.([...outcomes.values()]); } catch { /* view refreshes anyway */ }
+      };
+      closeButton.onclick = () => { if (!pushing) close(pushedAny ? [...outcomes.values()] : null); };
+      const panel = h("div", {
+        class: "popup",
+        role: "dialog",
+        "aria-modal": "true",
+        style: { position: "relative", minWidth: "340px", maxWidth: "520px", width: "min(520px, 92vw)", padding: "14px", boxShadow: "0 16px 48px rgba(0,0,0,.4)" },
+      }, [
+        h("div", { style: { fontWeight: "600", marginBottom: "2px" }, text: t("pushDialogTitle") }),
+        h("div", { class: "muted", style: { fontSize: "11px" }, text: t("pushDialogSubtitle") }),
+        progressTrack,
+        rowsHost,
+        hint,
+        h("div", { style: { display: "flex", justifyContent: "flex-end", gap: "8px", marginTop: "14px" } }, [
+          closeButton,
+          pushButton,
+        ]),
+      ]);
+      backdrop.append(panel);
+      backdrop.addEventListener("pointerdown", (event) => {
+        if (event.target === backdrop && !pushing) close(pushedAny ? [...outcomes.values()] : null);
+      });
+      document.body.append(backdrop);
+      document.addEventListener("keydown", onKey, true);
+      paintRows();
+      pushButton.focus();
+    });
+  }
+  /** Push several repos with the same options shape as the dialog rows. */
+  async function pushRepos(targets) {
+    const outcomes = [];
+    for (const target of targets ?? []) {
+      const payload = {};
+      if (target.root) payload.repoRoot = target.root;
+      if (target.setUpstream) payload.setUpstream = true;
+      let result = null;
+      try {
+        result = await invoke("git/push", payload);
+      } catch (error) {
+        result = { ok: false, message: String(error?.message ?? error) };
+      }
+      outcomes.push({ ...result, rel: target.rk ?? target.rel ?? "", root: target.root ?? null });
+      if (result?.ok) {
+        try { await refreshTrackingRefs(result); } catch { /* keep pushing */ }
+      }
+    }
+    return outcomes;
+  }
+
+  /**
+   * The message to show for a failed call: Git's own output plus, when the
+   * engine recognised the failure, a line saying what to do about it.
+   *
+   * The recognised ones are the failures a user cannot guess their way out of:
+   * credentials, and the two ways a push or a pull comes back refused. The
+   * engine returns a code and never prose, so the wording lives here, in the
+   * language the rest of the window is in.
+   */
+  function errorText(result) {
+    const message = String(result?.message ?? "").trim();
+    const remedy = remedyText(result);
+    // Reuse an existing key; the caller already prefixes the action name.
+    if (!remedy) return message || t("gitOutput");
+    return message ? `${message}\n\n${remedy}` : remedy;
+  }
+
+  /** The classified remedy for a failed call, or "" when there is nothing to add. */
+  function remedyText(result) {
+    if (result?.authHint === "ssh") return t("authSsh");
+    if (result?.authHint === "credentials") return t("authCredentials");
+    if (result?.pushHint === "remote-ahead") return t("remoteAhead");
+    if (result?.pushHint === "remote-rejected") return t("pushRejected");
+    if (result?.pullHint === "diverged") return t("pullDiverged");
+    if (result?.pullHint === "conflicts") return t("pullConflicts");
+    return "";
+  }
+
+  /**
+   * Report a fetch/pull/push.
+   *
+   * Two things made this its own function rather than a `toast` at each call
+   * site. A successful push prints nothing on stdout — Git's summary goes to
+   * stderr — so "show stdout if there is any" made pushing succeed silently.
+   * And a refused push produces six lines of Git in a 340px toast, which is why
+   * the error toast now carries a link to the whole of Git's output.
+   */
+  function reportSync(result, action) {
+    if (result?.ok) {
+      const line = String(result.stdout ?? "").split("\n").map((value) => value.trim()).find(Boolean);
+      toast(line ? `${action}: ${line}` : action, "info");
+      return true;
+    }
+    const node = toast(`${action}: ${errorText(result)}`, "error");
+    if (node && result?.detail) {
+      node.classList.add("clickable");
+      node.append(h("button", {
+        class: "toast-link",
+        type: "button",
+        onclick: () => dialog({
+          title: t("gitOutput"),
+          detail: result.detail,
+          confirmLabel: t("close"),
+          cancelLabel: null,
+        }),
+      }, [t("showDetail")]));
+    }
+    return false;
+  }
+
+  /**
+   * A refused push means the remote moved on, so the ↑/↓ chip is stale by
+   * definition: it is counting against a remote-tracking ref that predates the
+   * refusal. Fetch before the view redraws, or the chip keeps claiming "1
+   * outgoing, 0 incoming" right after Git said the opposite.
+   *
+   * A fetch that fails here is deliberately not reported: the refusal the user
+   * has to act on is already on screen, and a second message about the refresh
+   * would be noise on top of it. The consequence is only that the chip stays
+   * stale, which is where it started.
+   */
+  async function refreshTrackingRefs(result) {
+    if (result?.pushHint !== "remote-ahead") return result;
+    // `invoke` resolves with `{ok:false}` rather than throwing, so there is
+    // nothing to catch — the result is read and dropped on purpose.
+    await invoke("git/fetch");
+    return result;
+  }
+
+
+  // ------------------------------------------------------------ splitter ---
+  /**
+   * Drag handle for a two-pane layout. `apply(delta)` receives the pointer
+   * delta in pixels so each caller decides what it resizes.
+   */
+  function bindSplitter(handle, apply, options) {
+    let start = 0;
+    let active = false;
+    const onMove = (event) => {
+      if (!active) return;
+      const position = options?.vertical ? event.clientY : event.clientX;
+      apply(position - start);
+    };
+    const onUp = () => {
+      if (!active) return;
+      active = false;
+      handle.classList.remove("active");
+      window.removeEventListener("pointermove", onMove);
+      window.removeEventListener("pointerup", onUp);
+      document.body.style.userSelect = "";
+    };
+    handle.addEventListener("pointerdown", (event) => {
+      event.preventDefault();
+      active = true;
+      start = options?.vertical ? event.clientY : event.clientX;
+      handle.classList.add("active");
+      document.body.style.userSelect = "none";
+      window.addEventListener("pointermove", onMove);
+      window.addEventListener("pointerup", onUp);
+    });
+  }
+
+  // ---------------------------------------------------------- formatting ---
+  const MINUTE = 60_000;
+  const HOUR = 60 * MINUTE;
+  const DAY = 24 * HOUR;
+
+  function relativeTime(timestamp, now) {
+    if (!Number.isFinite(timestamp) || timestamp <= 0) return "";
+    const reference = Number.isFinite(now) ? now : Date.now();
+    const delta = reference - timestamp;
+    // Whole sentences live in STRINGS (see tf): no locale ternary here, and
+    // the English plural suffix travels as `s` so zh templates simply ignore it.
+    if (delta < 45 * 1000) return t("relativeJustNow");
+    if (delta < HOUR) {
+      const minutes = Math.max(1, Math.round(delta / MINUTE));
+      return tf("relativeMinutesAgo", { count: minutes, s: minutes === 1 ? "" : "s" });
+    }
+    if (delta < DAY) {
+      const hours = Math.round(delta / HOUR);
+      return tf("relativeHoursAgo", { count: hours, s: hours === 1 ? "" : "s" });
+    }
+    if (delta < 30 * DAY) {
+      const days = Math.round(delta / DAY);
+      return tf("relativeDaysAgo", { count: days, s: days === 1 ? "" : "s" });
+    }
+    return formatDate(timestamp);
+  }
+
+  function formatDate(timestamp) {
+    if (!Number.isFinite(timestamp) || timestamp <= 0) return "";
+    const date = new Date(timestamp);
+    const pad = (value) => String(value).padStart(2, "0");
+    return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())}`;
+  }
+
+  function formatDateTime(timestamp) {
+    if (!Number.isFinite(timestamp) || timestamp <= 0) return "";
+    const date = new Date(timestamp);
+    const pad = (value) => String(value).padStart(2, "0");
+    return `${formatDate(timestamp)} ${pad(date.getHours())}:${pad(date.getMinutes())}:${pad(date.getSeconds())}`;
+  }
+
+  function formatClock(timestamp) {
+    const date = new Date(timestamp);
+    const pad = (value) => String(value).padStart(2, "0");
+    return `${pad(date.getHours())}:${pad(date.getMinutes())}:${pad(date.getSeconds())}`;
+  }
+
+  /** Split a repo-relative path into a readable directory and base name. */
+  function splitPath(filePath) {
+    const normalised = String(filePath ?? "").replace(/\\/g, "/");
+    const index = normalised.lastIndexOf("/");
+    if (index < 0) return { name: normalised, directory: "" };
+    return { name: normalised.slice(index + 1), directory: normalised.slice(0, index) };
+  }
+
+  function shellQuote(value) {
+    const text = String(value ?? "");
+    return /^[A-Za-z0-9._\-/]+$/.test(text) ? text : `'${text.replace(/'/g, "'\\''")}'`;
+  }
+
+  // ----------------------------------------------------------- appearance ---
+  // Follow the app's own colour mode. Snapping to the OS palette instead made
+  // the panel flash whenever the app and the OS disagreed.
+  function applyAppearance(appearance) {
+    if (typeof appearance?.locale === "string") state.locale = resolveLocale(appearance.locale);
+    const base = appearance?.base;
+    const resolved = base === "light" || base === "dark"
+      ? base
+      : window.matchMedia("(prefers-color-scheme: light)").matches ? "light" : "dark";
+    state.theme = resolved;
+    document.documentElement.dataset.theme = resolved;
+    window.dispatchEvent(new CustomEvent("pig:appearance", { detail: { theme: resolved, locale: state.locale } }));
+  }
+
+  function watchAppearance() {
+    bridge?.on?.("appearance:changed", applyAppearance);
+    invoke("app.getAppearance").then(applyAppearance).catch(() => applyAppearance(null));
+  }
+
+  /**
+   * The host announces project switches on `workspace:changed`. A view that
+   * ignored it would keep showing the previous project's repository — which is
+   * exactly the bug this exists to prevent.
+   *
+   * TODO: workspace-stale window refactor is out of scope — a stale-window flag
+   * with explicit loading state would beat this coalesce timer, but it touches
+   * every refresh path, so it stays a timer for now.
+   */
+  function watchWorkspace(handler) {
+    // `workspace:changed` can arrive in bursts (the host announces a project
+    // switch as it settles), and each run costs a multi-process git refresh.
+    // Run at most once per window, so the cost tracks elapsed time rather than
+    // event count. The first event of a quiet period runs immediately — a switch
+    // must not wait out a debounce while the view is still interactive — and a
+    // burst collapses into a single catch-up run that renders the final state.
+    const COALESCE_MS = 120;
+    let lastRunAt = 0;
+    let timer = null;
+    const fire = () => {
+      lastRunAt = Date.now();
+      try {
+        handler();
+      } catch {
+        // A failed reload must not take the view down with it.
+      }
+    };
+    bridge?.on?.("workspace:changed", () => {
+      if (timer !== null) return; // a catch-up run is already pending
+      const since = Date.now() - lastRunAt;
+      if (since >= COALESCE_MS) {
+        fire();
+        return;
+      }
+      timer = window.setTimeout(() => {
+        timer = null;
+        fire();
+      }, COALESCE_MS - since);
+    });
+  }
+
+  // ---------------------------------------------------------------- store ---
+  /** Minimal observable so views can re-render on change without a framework. */
+  function createStore(initial) {
+    let value = initial;
+    const listeners = new Set();
+    return {
+      get: () => value,
+      set(next) {
+        value = typeof next === "function" ? next(value) : next;
+        for (const listener of [...listeners]) listener(value);
+      },
+      subscribe(listener) {
+        listeners.add(listener);
+        return () => listeners.delete(listener);
+      },
+    };
+  }
+
+  Object.assign(PIG, {
+    state,
+    t,
+    tf,
+    invoke,
+    copyText,
+    h,
+    clear,
+    icon,
+    iconButton,
+    textButton,
+    toast,
+    popup,
+    closePopup,
+    dialog,
+    openPushDialog,
+    pushRepos,
+    bindSplitter,
+    relativeTime,
+    formatDate,
+    formatDateTime,
+    formatClock,
+    splitPath,
+    shellQuote,
+    applyAppearance,
+    watchAppearance,
+    watchWorkspace,
+    createStore,
+    isMac: IS_MAC,
+    formatShortcut,
+    bindShortcuts,
+    errorText,
+    remedyText,
+    reportSync,
+    refreshTrackingRefs,
+    appShortcutHintBinding,
+    spinner,
+    setButtonBusy,
+    withBusy,
+    taskPill,
+    runWithPill,
+    // Shared by both tool windows, so the two cannot disagree about which
+    // repository they are showing — the same reason the branch chip is shared.
+    repoSelector: { mount: mountRepoSelector },
+  });
+})(window.PIG || (window.PIG = {}));
+
+/* ================= src/diff.js ================= */
+/**
+ * Unified-diff parsing and rendering in the IDEA shape.
+ *
+ * Two rules drive the design:
+ *
+ *  1. The raw diff lines are kept verbatim. A hunk is staged by handing those
+ *     exact lines back to `git apply`, so anything that rewrote them (re-quoting,
+ *     re-wrapping, re-ordering) would break stage/unstage/discard.
+ *  2. Parsing produces the model once; the unified and side-by-side renderers
+ *     are two views of that same model, which is why switching modes never
+ *     changes what a hunk contains.
+ */
+(function (PIG) {
+  "use strict";
+
+  const { h, t, tf } = PIG;
+
+  const HUNK_HEADER = /^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@ ?(.*)$/;
+
+  /** Context lines kept around a change when unchanged fragments collapse. */
+  const CONTEXT_LINES = 3;
+  /** A context run longer than this collapses; shorter stays fully visible. */
+  const COLLAPSE_THRESHOLD = CONTEXT_LINES * 2 + 1;
+
+  const WORDS = /[\w\u4e00-\u9fff]/;
+
+  /** Split a diff into file sections, each holding its header and its hunks. */
+  function parse(text) {
+    const files = [];
+    let file = null;
+    let hunk = null;
+
+    const lines = String(text ?? "").split("\n");
+    // A trailing newline would otherwise add a phantom empty body line.
+    if (lines.length && lines[lines.length - 1] === "") lines.pop();
+
+    for (const line of lines) {
+      if (line.startsWith("diff --git ")) {
+        file = { header: [line], hunks: [] };
+        files.push(file);
+        hunk = null;
+        continue;
+      }
+      if (!file) continue;
+      if (line.startsWith("@@")) {
+        hunk = { header: line, lines: [], meta: matchHunkHeader(line), oldLine: 0, newLine: 0 };
+        file.hunks.push(hunk);
+        continue;
+      }
+      if (hunk) {
+        const marker = line.charAt(0);
+        const type = marker === "+" ? "insert"
+          : marker === "-" ? "delete"
+            : marker === "\\" ? "meta"
+              : "context";
+        hunk.lines.push({ raw: line, type, text: line.length ? line.slice(1) : "" });
+      } else {
+        file.header.push(line);
+      }
+    }
+
+    annotate(files);
+    return { files };
+  }
+
+  function matchHunkHeader(line) {
+    const match = HUNK_HEADER.exec(line);
+    if (!match) return null;
+    return {
+      oldStart: Number(match[1]),
+      oldCount: match[2] === undefined ? 1 : Number(match[2]),
+      newStart: Number(match[3]),
+      newCount: match[4] === undefined ? 1 : Number(match[4]),
+      section: match[5] ?? "",
+    };
+  }
+
+  /** Attach 1-based old/new line numbers and whitespace-only change flags. */
+  function annotate(files) {
+    for (const file of files) {
+      for (const hunk of file.hunks) {
+        const meta = hunk.meta ?? { oldStart: 1, newStart: 1 };
+        let oldLine = meta.oldStart;
+        let newLine = meta.newStart;
+        for (const line of hunk.lines) {
+          if (line.type === "insert") {
+            line.newNumber = newLine++;
+          } else if (line.type === "delete") {
+            line.oldNumber = oldLine++;
+          } else if (line.type === "context") {
+            line.oldNumber = oldLine++;
+            line.newNumber = newLine++;
+          }
+        }
+        markWhitespaceOnly(hunk);
+        markSubmodule(hunk);
+        pairChanges(hunk);
+      }
+    }
+  }
+
+  /**
+   * A delete run followed by an insert run is one "change": pair them so the
+   * renderer can highlight the differing middle of each line, and so a pair
+   * that differs only in whitespace can be labelled as such.
+   */
+  function pairChanges(hunk) {
+    const lines = hunk.lines;
+    let index = 0;
+    while (index < lines.length) {
+      if (lines[index].type !== "delete") {
+        index += 1;
+        continue;
+      }
+      const deletes = [];
+      while (index < lines.length && lines[index].type === "delete") deletes.push(lines[index++]);
+      const inserts = [];
+      while (index < lines.length && lines[index].type === "insert") inserts.push(lines[index++]);
+      const pairs = Math.min(deletes.length, inserts.length);
+      for (let offset = 0; offset < pairs; offset += 1) {
+        const left = deletes[offset];
+        const right = inserts[offset];
+        const edges = commonEdges(left.text, right.text);
+        left.paired = right;
+        right.paired = left;
+        left.fragment = fragmentRange(left.text, edges);
+        right.fragment = fragmentRange(right.text, edges);
+      }
+    }
+  }
+
+  function markWhitespaceOnly(hunk) {
+    const deletes = hunk.lines.filter((line) => line.type === "delete");
+    const inserts = hunk.lines.filter((line) => line.type === "insert");
+    if (!deletes.length || deletes.length !== inserts.length) return;
+    const normalise = (value) => value.replace(/\s+/g, " ").trim();
+    const same = deletes.every((line, index) => normalise(line.text) === normalise(inserts[index].text));
+    if (same) hunk.whitespaceOnly = true;
+  }
+
+/**
+ * A submodule change is two bare object names ("Subproject commit <sha>").
+ * Git renders it as an ordinary two-line diff, which reads as noise; naming it
+ * as a submodule update makes those same two lines meaningful.
+ */
+const SUBMODULE_LINE = /^Subproject commit ([0-9a-f]{7,40})$/i;
+
+function markSubmodule(hunk) {
+  const changed = hunk.lines.filter((line) => line.type === "insert" || line.type === "delete");
+  if (!changed.length) return;
+  const found = changed.map((line) => SUBMODULE_LINE.exec(line.text)?.[1] ?? null);
+  if (found.some((sha) => !sha)) return;
+  const from = hunk.lines
+    .filter((line) => line.type === "delete")
+    .map((line) => SUBMODULE_LINE.exec(line.text)[1])[0] ?? null;
+  const to = hunk.lines
+    .filter((line) => line.type === "insert")
+    .map((line) => SUBMODULE_LINE.exec(line.text)[1])[0] ?? null;
+  hunk.submodule = { from, to };
+}
+
+  function commonEdges(left, right) {
+    const max = Math.min(left.length, right.length);
+    let prefix = 0;
+    while (prefix < max && left[prefix] === right[prefix]) prefix += 1;
+    let suffix = 0;
+    while (suffix < max - prefix && left[left.length - 1 - suffix] === right[right.length - 1 - suffix]) {
+      suffix += 1;
+    }
+    return { prefix, suffix };
+  }
+
+  /**
+   * Turn the differing middle into a range, widened to word boundaries so the
+   * highlight covers a whole token instead of splitting one — IDEA's
+   * "Highlighting Differences: Words" behaviour.
+   */
+  function fragmentRange(text, edges) {
+    let start = edges.prefix;
+    let end = text.length - edges.suffix;
+    if (end <= start) return null;
+    while (start > 0 && WORDS.test(text[start - 1]) && WORDS.test(text[start])) start -= 1;
+    while (end < text.length && WORDS.test(text[end - 1]) && WORDS.test(text[end])) end += 1;
+    if (end <= start) return null;
+    return { start, end };
+  }
+
+  // ------------------------------------------------------------- patches ---
+
+  /** Rebuild the exact patch text Git must receive for the given hunks. */
+  function patchFor(file, hunks) {
+    const chosen = hunks && hunks.length ? hunks : file.hunks;
+    const body = [];
+    for (const hunk of chosen) {
+      body.push(hunk.header);
+      for (const line of hunk.lines) body.push(line.raw);
+    }
+    return [...file.header, ...body].join("\n") + "\n";
+  }
+
+  // ----------------------------------------------------------- rendering ---
+
+  /** Collapse long context runs into a clickable "n unchanged lines" row. */
+  function collapseRuns(hunk) {
+    const output = [];
+    let index = 0;
+    while (index < hunk.lines.length) {
+      const line = hunk.lines[index];
+      if (line.type !== "context") {
+        output.push({ kind: "line", line });
+        index += 1;
+        continue;
+      }
+      const run = [];
+      while (index < hunk.lines.length && hunk.lines[index].type === "context") {
+        run.push(hunk.lines[index++]);
+      }
+      if (run.length <= COLLAPSE_THRESHOLD) {
+        for (const item of run) output.push({ kind: "line", line: item });
+        continue;
+      }
+      for (const item of run.slice(0, CONTEXT_LINES)) output.push({ kind: "line", line: item });
+      output.push({ kind: "collapsed", lines: run.slice(CONTEXT_LINES, run.length - CONTEXT_LINES) });
+      for (const item of run.slice(run.length - CONTEXT_LINES)) output.push({ kind: "line", line: item });
+    }
+    return output;
+  }
+
+  function sideBySideRows(hunk) {
+    const rows = [];
+    const lines = hunk.lines;
+    let index = 0;
+    while (index < lines.length) {
+      const line = lines[index];
+      if (line.type === "delete") {
+        const deletes = [];
+        while (index < lines.length && lines[index].type === "delete") deletes.push(lines[index++]);
+        const inserts = [];
+        while (index < lines.length && lines[index].type === "insert") inserts.push(lines[index++]);
+        const count = Math.max(deletes.length, inserts.length);
+        for (let offset = 0; offset < count; offset += 1) {
+          rows.push({ left: deletes[offset] ?? null, right: inserts[offset] ?? null });
+        }
+        continue;
+      }
+      if (line.type === "insert") {
+        rows.push({ left: null, right: line });
+        index += 1;
+        continue;
+      }
+      rows.push({ left: line, right: line });
+      index += 1;
+    }
+    return rows;
+  }
+
+  function renderText(text, options) {
+    const fragment = options?.fragment;
+    if (!options?.showWhitespaces && !fragment) return document.createTextNode(text);
+
+    const holder = document.createDocumentFragment();
+
+    // Without whitespace markers the fragment highlight needs at most three
+    // nodes. Building one node per character here was what made a large diff
+    // expensive: every changed line turned into thousands of text nodes, and
+    // the whole diff is rebuilt from scratch on each render.
+    if (!options?.showWhitespaces) {
+      const rawStart = Number(fragment.start);
+      const rawEnd = Number(fragment.end);
+      const start = Math.max(0, Math.min(Number.isFinite(rawStart) ? rawStart : 0, text.length));
+      const end = Math.max(start, Math.min(Number.isFinite(rawEnd) ? rawEnd : text.length, text.length));
+      if (start > 0) holder.append(document.createTextNode(text.slice(0, start)));
+      if (end > start) holder.append(h("span", { class: "fragment", text: text.slice(start, end) }));
+      if (end < text.length) holder.append(document.createTextNode(text.slice(end)));
+      return holder;
+    }
+
+    for (let index = 0; index < text.length; index += 1) {
+      const character = text[index];
+      if (character === " ") {
+        holder.append(h("span", { class: "whitespace-mark", text: "·" }));
+        continue;
+      }
+      if (character === "\t") {
+        holder.append(h("span", { class: "whitespace-mark", text: "→" }));
+        continue;
+      }
+      if (fragment && index === fragment.start) {
+        holder.append(h("span", {
+          class: "fragment",
+          text: text.slice(fragment.start, fragment.end),
+        }));
+        index = fragment.end - 1;
+        continue;
+      }
+      holder.append(document.createTextNode(character));
+    }
+    return holder;
+  }
+
+  const SIGN = { insert: "+", delete: "-", context: " ", meta: "\\" };
+  const ROW_CLASS = { insert: "inserted", delete: "deleted", context: "context", meta: "context" };
+
+  function lineRow(line, options, side) {
+    const gutter = h("span", { class: "gutter-mark" });
+    if (line.type === "insert") gutter.style.background = "var(--gutter-added)";
+    else if (line.type === "delete") gutter.style.background = "var(--gutter-deleted)";
+    else if (line.fragment) gutter.style.background = "var(--gutter-modified)";
+
+    // Unified view carries both numbers, IDEA-style: a deleted line has no new
+    // number and an inserted one has no old number, so without the second
+    // column half of every change would show a blank gutter.
+    const children = [gutter];
+    if (options.showLineNumbers) {
+      if (side === "unified") {
+        children.push(numberCell(line.oldNumber));
+        children.push(numberCell(line.newNumber));
+      } else {
+        children.push(numberCell(side === "left" ? line.oldNumber : line.newNumber));
+      }
+    }
+    children.push(h("span", { class: "sign", text: SIGN[line.type] ?? " " }));
+    // Paired lines only highlight the side being shown in side-by-side mode;
+    // in unified mode both halves of a change carry their own fragment.
+    const fragment = line.type === "context" || line.type === "meta" ? null : line.fragment;
+    children.push(h("span", { class: "text" }, [renderText(line.text, { ...options, fragment })]));
+    return h("div", { class: `diff-line ${ROW_CLASS[line.type] ?? "context"}` }, children);
+  }
+
+  function numberCell(value) {
+    return h("span", {
+      class: "num",
+      text: value === undefined || value === null ? "" : String(value),
+    });
+  }
+
+  function fillerRow(options) {
+    const children = [h("span", { class: "gutter-mark" })];
+    if (options.showLineNumbers) children.push(numberCell(null));
+    children.push(h("span", { class: "sign" }));
+    children.push(h("span", { class: "text" }));
+    return h("div", { class: "diff-line context filler" }, children);
+  }
+  function hunkHeaderRow(file, hunk, options) {
+    const children = [];
+    const checkbox = options.hunkCheckbox?.(hunk, file);
+    if (checkbox) {
+      const input = h("input", {
+        type: "checkbox",
+        title: t("includeIntoCommit"),
+        checked: checkbox.checked,
+        onchange: (event) => checkbox.onChange(event.target.checked),
+      });
+      children.push(input);
+    }
+    const meta = hunk.meta;
+    children.push(h("span", {
+      text: meta
+        ? `@@ -${meta.oldStart}${meta.oldCount === 1 ? "" : `,${meta.oldCount}`} +${meta.newStart}${meta.newCount === 1 ? "" : `,${meta.newCount}`} @@`
+        : hunk.header,
+    }));
+    if (meta?.section) children.push(h("span", { class: "diff-hunk-note", text: meta.section }));
+    if (hunk.whitespaceOnly) children.push(h("span", { class: "diff-hunk-note", text: `· ${t("whiteSpaceOnly")}` }));
+    if (hunk.submodule) {
+      const short = (sha) => (sha ? sha.slice(0, 7) : "—");
+      children.push(h("span", {
+        class: "diff-hunk-note",
+        text: `· ${t("submodule")} ${short(hunk.submodule.from)} → ${short(hunk.submodule.to)}`,
+      }));
+    }
+
+    const actions = h(options.stageable === false ? "span" : "span", { class: "diff-hunk-actions" });
+    for (const action of options.hunkActions ?? []) {
+      actions.append(h("button", {
+        type: "button",
+        title: action.title,
+        onclick: () => action.onSelect(hunk, file),
+      }, [action.label]));
+    }
+    if (actions.childNodes.length) children.push(actions);
+
+    return h("div", { class: "diff-hunk-header" }, children);
+  }
+
+  function collapsedRow(lines, options) {
+    // Whole sentence per locale via tf; `s` feeds the English plural only.
+    const node = h("div", {
+      class: "diff-collapsed",
+      title: t("collapseUnchanged"),
+      text: tf("collapsedLines", { count: lines.length, s: lines.length === 1 ? "" : "s" }),
+    });
+    node.addEventListener("click", () => {
+      const replacement = document.createDocumentFragment();
+      for (const line of lines) replacement.append(lineRow(line, options, options.side ?? "unified"));
+      node.replaceWith(replacement);
+    });
+    return node;
+  }
+
+  /**
+   * Render a diff into `container`.
+   *
+   * TODO: large-diff virtualization is out of scope — rendering stays
+   * non-virtualized; a windowed renderer would be a wide change, so huge
+   * patches still render in full here.
+   *
+   * options:
+   *   unified          boolean — side-by-side when false
+   *   showWhitespaces, showLineNumbers
+   *   stageable        boolean — false while a whitespace-ignoring view is active
+   *   hunkCheckbox     (hunk, file) => { checked, onChange }
+   *   hunkActions      [{ label, title, onSelect(hunk, file) }]
+   *   emptyMessage
+   */
+  function render(container, options) {
+    PIG.clear(container);
+    const text = options.text ?? "";
+    const parsed = parse(text);
+
+    if (!text.trim() || !parsed.files.length) {
+      container.append(h("div", { class: "empty-state" }, [
+        h("div", { class: "headline", text: options.emptyMessage ?? t("noDiff") }),
+      ]));
+      return { files: [] };
+    }
+
+    if (/^Binary files |^GIT binary patch/m.test(text)) {
+      container.append(h("div", { class: "empty-state" }, [
+        h("div", { class: "headline", text: t("binaryDiff") }),
+      ]));
+      return { files: parsed.files };
+    }
+
+    const single = parsed.files.length === 1;
+
+    for (const file of parsed.files) {
+      const { name, directory } = PIG.splitPath(displayPath(file));
+      // A lone file normally needs no header because the caller already names
+      // it; a diff viewer that is the whole surface must always say what it is
+      // showing, so it opts in.
+      if (options.showFileHeader ?? !single) {
+        container.append(h("div", { class: "diff-file-header" }, [
+          h("span", { class: "name", text: name }),
+          directory ? h("span", { class: "path", text: directory }) : null,
+        ]));
+      }
+      for (const hunk of file.hunks) {
+        container.append(hunkHeaderRow(file, hunk, options));
+        if (options.unified === false) {
+          const grid = h("div", { class: "diff-sbs" });
+          const left = h("div", { class: "side" });
+          const right = h("div", { class: "side" });
+          for (const row of sideBySideRows(hunk)) {
+            left.append(row.left ? lineRow(row.left, options, "left") : fillerRow({ ...options, side: "left" }));
+            right.append(row.right ? lineRow(row.right, options, "right") : fillerRow({ ...options, side: "right" }));
+          }
+          grid.append(left, h("div", { class: "spacer" }), right);
+          container.append(grid);
+          continue;
+        }
+        for (const entry of collapseRuns(hunk)) {
+          if (entry.kind === "collapsed") {
+            container.append(collapsedRow(entry.lines, options));
+            continue;
+          }
+          container.append(lineRow(entry.line, options, "unified"));
+        }
+      }
+    }
+    return { files: parsed.files };
+  }
+
+  /** Prefer the `+++` side of the header, falling back to the diff line. */
+  function displayPath(file) {
+    for (const line of file.header) {
+      if (line.startsWith("+++ ")) {
+        const value = line.slice(4).split("\t")[0].trim();
+        if (value && value !== "/dev/null") return value.replace(/^[ab]\//, "");
+      }
+    }
+    for (const line of file.header) {
+      if (line.startsWith("--- ")) {
+        const value = line.slice(4).split("\t")[0].trim();
+        if (value && value !== "/dev/null") return value.replace(/^[ab]\//, "");
+      }
+    }
+    const first = file.header[0] ?? "";
+    const match = /^diff --git a\/(.+) b\/(.+)$/.exec(first);
+    return match ? match[2] : first;
+  }
+
+  Object.assign(PIG, {
+    diff: { parse, render, patchFor, displayPath, sideBySideRows, CONTEXT_LINES },
+  });
+})(window.PIG || (window.PIG = {}));
+
+/* ================= src/commit-view.js ================= */
+/**
+ * The Commit tool window — IDEA's `Alt+0` surface.
+ *
+ * Shape, following the official layout: a changes area on top (Staged /
+ * Unstaged / Unversioned Files with a checkbox per file), the diff of the
+ * selected file below it, and the commit controls pinned to the bottom
+ * (Commit Message, Amend, Commit, Commit and Push).
+ *
+ * The checkbox semantics are IDEA's own: a checkbox means "include in this
+ * commit". With a real Git index behind it, checking a worktree change stages
+ * it and unchecking a staged change unstages it, which is why partial commits
+ * work exactly as they do in the IDE.
+ */
+(function (PIG) {
+  "use strict";
+
+  const { h, t, invoke, icon, iconButton, toast, popup, dialog, splitPath } = PIG;
+
+  /**
+   * IDEA's commit shortcuts, in the form this surface can honour. The tooltip is
+   * rendered from the same spec that is bound, so the two cannot drift apart.
+   */
+  const KEYS = {
+    refresh: { key: "r", mod: true },
+    refreshAlt: { key: "F5", ctrl: true },
+    stage: { key: "a", mod: true, alt: true },
+    rollback: { key: "z", mod: true, alt: true },
+    showDiff: { key: "d", mod: true },
+    commitMessage: { key: "k", mod: true },
+  };
+
+  function tip(key, spec) {
+    return `${t(key)} (${PIG.formatShortcut(spec)})`;
+  }
+
+  const GROUPS = [
+    { id: "conflicted", label: "conflicts", status: "U" },
+    { id: "staged", label: "staged", status: "A" },
+    { id: "unstaged", label: "unstaged", status: "M" },
+    { id: "untracked", label: "unversioned", status: "?" },
+  ];
+
+  /**
+   * The banner line for an unfinished operation, by the name the engine reports.
+   * Only these four can be in progress: they are the ones `git/sequencer` accepts.
+   */
+  const OPERATION_KEYS = {
+    merge: "mergeInProgress",
+    rebase: "rebaseInProgress",
+    "cherry-pick": "cherryPickInProgress",
+    revert: "revertInProgress",
+  };
+
+  const STATUS_VARS = {
+    A: "added", M: "modified", D: "deleted", R: "renamed", C: "renamed",
+    T: "modified", "?": "unversioned", U: "conflict", "!": "ignored",
+  };
+
+  /**
+   * Which language a drafted message is written in. A standing choice rather
+   * than something the model infers: an English history used to mean English
+   * drafts, however Chinese the person reading them was.
+   */
+  const LANGUAGES = [
+    { value: "auto", label: "langAuto" },
+    { value: "zh", label: "langChinese" },
+    { value: "en", label: "langEnglish" },
+  ];
+
+  function languageLabel(value) {
+    const option = LANGUAGES.find((row) => row.value === (value ?? "auto")) ?? LANGUAGES[0];
+    return t(option.label);
+  }
+  function statusColor(code) {
+    const key = STATUS_VARS[String(code ?? "").charAt(0)] ?? "modified";
+    return `var(--status-${key})`;
+  }
+
+  /**
+   * Git reports paths relative to the repository root, while the host's `fs`
+   * channels are scoped to the workspace and resolve relative to it. When the
+   * two roots differ the path has to be re-based, and when the file falls
+   * outside the workspace the action simply is not offered.
+   */
+  function workspaceRelative(filePath, repo) {
+    if (!filePath) return null;
+    // The engine already worked out where the repository sits inside the
+    // workspace, as real paths — the two roots can name the same directory with
+    // and without a symlinked prefix (`/private/var` against `/var` on macOS),
+    // and comparing those two strings here would decide the file is outside the
+    // workspace.
+    const prefix = repo?.repo?.workspacePrefix;
+    if (typeof prefix === "string") {
+      return prefix === "." ? filePath : `${prefix}/${filePath}`;
+    }
+    const root = String(repo?.repo?.root ?? "").replace(/[/\\]+$/, "");
+    const workspace = String(repo?.repo?.workspace ?? "").replace(/[/\\]+$/, "");
+    if (!root || !workspace || root === workspace) return filePath || null;
+    if (root.startsWith(`${workspace}/`) || root.startsWith(`${workspace}\\`)) {
+      return `${root.slice(workspace.length + 1)}/${filePath}`;
+    }
+    if (workspace.startsWith(`${root}/`) || workspace.startsWith(`${root}\\`)) {
+      const inner = workspace.slice(root.length + 1);
+      if (filePath === inner) return null;
+      if (!filePath.startsWith(`${inner}/`)) return null;
+      return filePath.slice(inner.length + 1);
+    }
+    return null;
+  }
+
+  // --------------------------------------------------------- change tree ---
+  /**
+   * The change lists arrive flat and repository-relative — the file name, with
+   * its directory demoted to a grey tail the column is usually too narrow to
+   * show. Rebuilding those paths as a tree is what answers "which folder does
+   * this belong to" without the user having to read a path at all.
+   *
+   * The tree is per change list (Staged / Unstaged / Unversioned) rather than
+   * across all of them: one file can sit in two lists at once, and a folder's
+   * checkbox could not then mean one thing.
+   */
+  function buildChangeTree(files) {
+    const root = { name: "", path: "", dirs: new Map(), files: [], total: 0 };
+    for (const file of files ?? []) {
+      const parts = String(file.path ?? "").replace(/\\/g, "/").split("/").filter(Boolean);
+      const name = parts.pop();
+      if (!name) continue;
+      let node = root;
+      let prefix = "";
+      for (const part of parts) {
+        prefix = prefix ? `${prefix}/${part}` : part;
+        let child = node.dirs.get(part);
+        if (!child) {
+          child = { name: part, path: prefix, dirs: new Map(), files: [], total: 0 };
+          node.dirs.set(part, child);
+        }
+        node = child;
+      }
+      node.files.push(file);
+    }
+    annotate(root);
+    return root;
+  }
+
+  /** File totals per subtree, so a folder row can say how much it covers. */
+  function annotate(node) {
+    let total = node.files.length;
+    for (const child of node.dirs.values()) total += annotate(child);
+    node.total = total;
+    return total;
+  }
+
+  /** Every file below a directory, its own first. Drives the cascade. */
+  function filesUnder(node, out = []) {
+    for (const file of node.files) out.push(file);
+    for (const child of node.dirs.values()) filesUnder(child, out);
+    return out;
+  }
+
+  /** Directories before files, both in IDEA's case-insensitive natural order. */
+  function treeEntries(node) {
+    const dirs = [...node.dirs.values()]
+      .sort((a, b) => a.name.localeCompare(b.name, undefined, { sensitivity: "base", numeric: true }))
+      .map((dir) => ({ kind: "dir", dir }));
+    const files = [...node.files]
+      .sort((a, b) => splitPath(a.path).name.localeCompare(splitPath(b.path).name, undefined, { sensitivity: "base", numeric: true }))
+      .map((file) => ({ kind: "file", file }));
+    return [...dirs, ...files];
+  }
+
+  /**
+   * IDEA's "Compact Middle Directories": a chain of folders whose parents hold
+   * nothing else is drawn as one row, `src/main/java` instead of three.
+   */
+  function compactDir(dir, enabled) {
+    let node = dir;
+    let label = dir.name;
+    while (enabled && node.files.length === 0 && node.dirs.size === 1) {
+      [node] = node.dirs.values();
+      label += `/${node.name}`;
+    }
+    return { label, node };
+  }
+
+  // ------------------------------------------------------------ branches ---
+  /**
+   * The branch widget IDEA puts in the status bar: current branch, ahead and
+   * behind counts, and a popup with the branch actions. Shared by both tool
+   * windows so the two never disagree about the repository.
+   */
+  function mountBranchWidget(container, ctx) {
+    const chip = h("button", { class: "branch-chip", type: "button" });
+    container.append(chip);
+    let repo = null;
+
+    function paint() {
+      PIG.clear(chip);
+      chip.append(icon("branch", 13));
+      const branch = repo?.branch;
+      // With no repository there is no branch to name, and "HEAD" would be a
+      // lie. Say nothing and let the empty state explain.
+      if (!repo) {
+        chip.append(h("span", { class: "name muted", text: "—" }));
+        chip.title = t("notARepository");
+        return;
+      }
+      const name = branch?.head ?? (branch?.detached ? `detached @ ${String(branch?.oid ?? "").slice(0, 8)}` : t("head"));
+      chip.append(h("span", { class: "name", text: name }));
+      if (branch?.ahead || branch?.behind) {
+        const tracking = h("span", { class: "tracking" });
+        if (branch.ahead) {
+          tracking.append(h("span", { class: "ahead", title: `${branch.ahead} outgoing` }, [`↑${branch.ahead}`]));
+        }
+        if (branch.behind) {
+          tracking.append(h("span", { class: "behind", title: `${branch.behind} incoming` }, [`↓${branch.behind}`]));
+        }
+        chip.append(tracking);
+      }
+      chip.title = branch?.upstream
+        ? `${name} → ${branch.upstream}`
+        : `${name} — no upstream`;
+    }
+
+    async function openMenu() {
+      const result = await invoke("git/branches");
+      const branches = result.branches ?? [];
+      const locals = branches.filter((branch) => !branch.remote);
+      const remotes = branches.filter((branch) => branch.remote);
+      const branch = repo?.branch;
+
+      const items = [
+        { type: "label", label: t("localBranches") },
+        ...locals.map((entry) => ({
+          label: entry.current ? `${entry.name}  ●` : entry.name,
+          title: entry.subject,
+          onSelect: async () => {
+            if (entry.current) return;
+            const checkedOut = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name: entry.name }));
+            report(checkedOut, `${t("checkout")}: ${entry.name}`);
+            ctx.onChanged?.();
+          },
+        })),
+      ];
+      if (remotes.length) {
+        items.push({ type: "separator" });
+        items.push({ type: "label", label: t("remoteBranches") });
+        for (const entry of remotes.slice(0, 40)) {
+          items.push({
+            label: entry.name,
+            title: entry.subject,
+            onSelect: async () => {
+              const checkedOut = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name: entry.name, startPoint: entry.name, track: true }));
+              report(checkedOut, `${t("checkout")}: ${entry.name}`);
+              ctx.onChanged?.();
+            },
+          });
+        }
+      }
+      items.push({ type: "separator" });
+      items.push({
+        label: t("newBranch"),
+        onSelect: async () => {
+          const name = await dialog({
+            title: t("newBranch"),
+            message: t("newBranch"),
+            input: { value: "", placeholder: "feature/…" },
+            confirmLabel: t("newBranch"),
+          });
+          if (!name) return;
+          const created = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name, create: true }));
+          report(created, `${t("newBranch")}: ${name}`);
+          ctx.onChanged?.();
+        },
+      });
+      // Note: 与 Git 视图同套分支操作的子集——提交视图的弹层没有右键位置，合并/变基/删除先用二级弹层选分支，改名/upstream 直接作用于当前分支 — 见 .agents/notes/implemented/feature/2026-09-14-git-operations-parity.md
+      items.push({
+        label: `${t("mergeIntoCurrent")}…`,
+        disabled: !locals.length,
+        onSelect: () => pickBranch(t("mergeIntoCurrent"), async (entry) => {
+          const confirmed = await dialog({
+            title: t("mergeTitle"),
+            message: `${entry.name} → ${branch?.head ?? t("head")}`,
+            confirmLabel: t("merge"),
+          });
+          if (!confirmed) return;
+          const result = await PIG.runWithPill(t("merge"), () => invoke("git/merge", { ref: entry.name }));
+          reportMergeRebase(result, t("merge"), entry.name, t("mergeConflicts"));
+          ctx.onChanged?.();
+        }),
+      });
+      items.push({
+        label: `${t("rebaseOnto")}…`,
+        disabled: !locals.length,
+        onSelect: () => pickBranch(t("rebaseOnto"), async (entry) => {
+          const confirmed = await dialog({
+            title: t("rebaseTitle"),
+            message: `${branch?.head ?? t("head")} → ${entry.name}`,
+            confirmLabel: t("rebase"),
+            danger: true,
+          });
+          if (!confirmed) return;
+          const result = await PIG.runWithPill(t("rebase"), () => invoke("git/rebase", { ref: entry.name }));
+          reportMergeRebase(result, t("rebase"), entry.name, t("rebaseConflicts"));
+          ctx.onChanged?.();
+        }),
+      });
+      items.push({
+        label: t("renameBranch"),
+        disabled: !branch?.head,
+        onSelect: async () => {
+          const name = await dialog({
+            title: t("renameTitle"),
+            message: branch?.head ?? "",
+            input: { value: branch?.head ?? "" },
+            confirmLabel: t("renameBranch"),
+          });
+          if (!name || name === branch?.head) return;
+          report(await invoke("git/branch-rename", { old: branch.head, new: name }), `${t("renameBranch")}: ${name}`);
+          ctx.onChanged?.();
+        },
+      });
+      items.push({
+        label: t("setUpstream"),
+        disabled: !branch?.head,
+        onSelect: async () => {
+          const upstream = await dialog({
+            title: t("setUpstreamTitle"),
+            message: branch?.head ?? "",
+            input: { value: branch?.upstream ?? "" },
+            confirmLabel: t("setUpstream"),
+          });
+          if (!upstream) return;
+          report(await invoke("git/branch-upstream", { name: branch.head, upstream }), `${t("setUpstream")}: ${upstream}`);
+          ctx.onChanged?.();
+        },
+      });
+      if (branch?.upstream) {
+        items.push({
+          label: t("unsetUpstream"),
+          onSelect: async () => {
+            report(await invoke("git/branch-upstream", { name: branch.head, unset: true }), t("unsetUpstream"));
+            ctx.onChanged?.();
+          },
+        });
+      }
+      items.push({
+        label: `${t("deleteBranch")}…`,
+        disabled: locals.filter((entry) => !entry.current).length === 0,
+        onSelect: () => pickBranch(t("deleteBranch"), async (entry) => {
+          const confirmed = await dialog({
+            title: t("deleteBranchTitle"),
+            message: entry.name,
+            confirmLabel: t("deleteBranch"),
+            danger: true,
+          });
+          if (!confirmed) return;
+          let result = await invoke("git/branch-delete", { name: entry.name });
+          if (!result.ok && /not fully merged/i.test(String(result.message ?? ""))) {
+            const force = await dialog({
+              title: t("deleteBranchTitle"),
+              message: result.message,
+              confirmLabel: t("deleteBranch"),
+              danger: true,
+            });
+            if (force) result = await invoke("git/branch-delete", { name: entry.name, force: true });
+          }
+          report(result, `${t("deleteBranch")}: ${entry.name}`);
+          ctx.onChanged?.();
+        }, true),
+      });
+      function pickBranch(title, run, excludeCurrent) {
+        popup(chip, [
+          { type: "label", label: title },
+          ...locals
+            .filter((entry) => !excludeCurrent || !entry.current)
+            .map((entry) => ({
+              label: entry.current ? `${entry.name}  ●` : entry.name,
+              title: entry.subject,
+              disabled: !excludeCurrent && entry.current,
+              onSelect: () => run(entry),
+            })),
+        ]);
+      }
+      function reportMergeRebase(result, action, name, conflictsHint) {
+        if (result?.ok) {
+          report(result, `${action}: ${name}`);
+          return;
+        }
+        const text = String(result?.message ?? "");
+        const conflicted = /CONFLICT|could not apply|Automatic merge failed|fix conflicts/i.test(
+          `${result?.stdout ?? ""}\n${result?.stderr ?? ""}\n${text}`,
+        );
+        toast(`${action}: ${text}${conflicted ? `\n\n${conflictsHint}` : ""}`, "error");
+      }
+      items.push({ type: "separator" });
+      items.push({
+        label: t("fetch"),
+        onSelect: async () => {
+          report(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch")), t("fetch"));
+          ctx.onChanged?.();
+        },
+      });
+      items.push({
+        label: t("pull"),
+        onSelect: async () => {
+          const result = await PIG.runWithPill(t("pulling"), () => invoke("git/pull"));
+          report(result, t("pull"));
+          ctx.onChanged?.();
+        },
+      });
+      items.push({
+        label: t("push"),
+        onSelect: async () => {
+          // No remote/branch: the engine pushes where the branch actually
+          // tracks. Sending `origin` plus the local name pushed a new branch to
+          // `origin` for anything tracking elsewhere, while the ↑/↓ chip kept
+          // counting against the real upstream.
+          const result = await PIG.runWithPill(t("pushing"), () => invoke("git/push", { setUpstream: !branch?.upstream }));
+          report(result, t("push"));
+          // A refusal means the remote moved on, so the chip is stale exactly
+          // when it matters most.
+          await PIG.refreshTrackingRefs(result);
+          ctx.onChanged?.();
+        },
+      });
+      items.push({
+        label: t("forcePush"),
+        // A lease needs a baseline to compare against, so it is only offered
+        // once the branch has an upstream at all.
+        disabled: !branch?.upstream,
+        onSelect: async () => {
+          const confirmed = await dialog({
+            title: t("forcePushTitle"),
+            message: PIG.tf("forcePushBody", {
+              // The remote and the branch it holds: `{{branch}}` is the local
+              // name, because "origin/feature/x on origin" says it twice.
+              branch: branch?.head ?? "",
+              remote: String(branch?.upstream ?? "").split("/")[0],
+            }),
+            confirmLabel: t("forcePush"),
+            danger: true,
+          });
+          if (confirmed === null) return;
+          const result = await PIG.runWithPill(t("pushing"), () => invoke("git/push", { forceWithLease: true }));
+          report(result, t("forcePush"));
+          await PIG.refreshTrackingRefs(result);
+          ctx.onChanged?.();
+        },
+      });
+      items.push({ type: "separator" });
+      items.push({
+        label: t("stashChanges"),
+        disabled: !repo || (!repo.staged.length && !repo.unstaged.length && !repo.untracked.length),
+        onSelect: async () => {
+          const message = await dialog({
+            title: t("stashChanges"),
+            message: t("stashMessage"),
+            input: { value: "" },
+            confirmLabel: t("stash"),
+          });
+          if (message === null) return;
+          report(await PIG.runWithPill(t("stashing"), () => invoke("git/stash", { action: "push", message })), t("stash"));
+          ctx.onChanged?.();
+        },
+      });
+      const stashes = repo?.stashes ?? [];
+      if (stashes.length) {
+        items.push({ type: "label", label: t("stash") });
+        for (const stash of stashes.slice(0, 10)) {
+          items.push({
+            label: `${stash.ref}  ${stash.subject ?? ""}`.trim(),
+            onSelect: () => popup(chip, [
+              { type: "label", label: `${stash.ref}  ${stash.subject ?? ""}`.trim() },
+              {
+                label: t("applyStash"),
+                onSelect: async () => {
+                  report(await PIG.runWithPill(t("unstashing"), () => invoke("git/stash", { action: "apply", ref: stash.ref })), `${t("applyStash")}: ${stash.ref}`);
+                  ctx.onChanged?.();
+                },
+              },
+              {
+                label: t("unstash"),
+                onSelect: async () => {
+                  report(await PIG.runWithPill(t("unstashing"), () => invoke("git/stash", { action: "pop", ref: stash.ref })), t("unstash"));
+                  ctx.onChanged?.();
+                },
+              },
+              { type: "separator" },
+              {
+                label: t("dropStash"),
+                onSelect: async () => {
+                  const confirmed = await dialog({
+                    title: t("dropStashConfirm"),
+                    message: `${stash.ref}  ${stash.subject ?? ""}`.trim(),
+                    confirmLabel: t("dropStash"),
+                    danger: true,
+                  });
+                  if (!confirmed) return;
+                  report(await invoke("git/stash", { action: "drop", ref: stash.ref }), `${t("dropStash")}: ${stash.ref}`);
+                  ctx.onChanged?.();
+                },
+              },
+            ]),
+          });
+        }
+      }
+      popup(chip, items);
+    }
+
+    chip.addEventListener("click", openMenu);
+
+    async function loadRepo() {
+      const result = await invoke("git/repo");
+      if (result.ok) {
+        repo = result;
+        paint();
+      }
+    }
+
+    return {
+      update(nextRepo) {
+        repo = nextRepo;
+        paint();
+      },
+      refresh: loadRepo,
+    };
+  }
+
+  /**
+   * The one report path for both tool windows. `PIG.reportSync` keeps the
+   * boolean contract this file has always used at its call sites, so a caller
+   * can still write `if (report(...)) await refresh()`.
+   */
+  function report(result, action) {
+    return PIG.reportSync(result, action);
+  }
+
+  function firstLine(value) {
+    return String(value ?? "").split("\n").map((line) => line.trim()).find(Boolean) ?? "";
+  }
+
+  // ---------------------------------------------------------- commit view ---
+  function mount(root, options) {
+     const state = {
+       repo: null,
+       error: null,
+       busy: false,
+      // What the toolbar is waiting on (null | "refresh" | "fetch" | "push"):
+      // the active button spins, the others are disabled, double clicks land
+      // on the guard instead of spawning a second process.
+      syncing: null,
+      // What the commit button is waiting on (null | "commit" | "commit-push").
+      busyKind: null,
+       selection: null,
+       diff: null,
+       diffUnified: true,
+       showWhitespaces: false,
+       showLineNumbers: false,
+       ignoreWhitespace: false,
+       message: "",
+       amend: false,
+       signoff: false,
+       messages: [],
+       // Both keyed by group, because collapsing `src/` in Unversioned must not
+       // collapse it in Unstaged too.
+       collapsed: new Set(),
+       filter: "",
+       // IDEA's view options for the changes tree, persisted with the rest.
+       groupByDirectory: true,
+       compactDirs: true,
+       changesWidth: 45,
+       generating: false,
+       commitModelKey: "",
+       // Empty means `auto`; the plugin resolves it against the repository.
+       commitLang: "",
+      // Aggregated submodule statuses (IDEA-like): each entry is
+      // `{ rel, root, name, kind, status }` where `status` is a `readStatus`
+      // result for that submodule. The parent's `git status` only prints one
+      // gitlink line per submodule, so without this the files changed inside
+      // `backend` are invisible while the selector points at the parent.
+      // In sibling mode the same slots hold the other sibling repos.
+      submodules: [],
+      subLoading: false,
+      // Last `git/repos` answer: decides whether the toolbar Push opens the
+      // multi-repo dialog instead of pushing the current repo directly.
+      allRepos: [],
+     };
+
+    // The repository chip comes first, as it does in IDEA: which repository —
+    // and only then which branch of it.
+    const repoHolder = h("div", { style: { display: "contents" } });
+    const branchHolder = h("div", { style: { display: "contents" } });
+    const toolbar = h("div", { class: "toolbar" });
+    const changesList = h("div", { class: "scroll list" });
+    const diffHost = h("div", { class: "diff" });
+    const diffHeader = h("div", { class: "pane-header" });
+    const messageInput = h("textarea", {
+      placeholder: t("commitMessage"),
+      spellcheck: "false",
+      oninput: (event) => { state.message = event.target.value; paintCommit(); },
+    });
+    const amendBox = h("input", { type: "checkbox", onchange: (event) => { state.amend = event.target.checked; paintCommit(); } });
+    const signoffBox = h("input", { type: "checkbox", onchange: (event) => { state.signoff = event.target.checked; } });
+    const summary = h("span", { class: "commit-summary" });
+    const commitButton = h("button", { class: "primary", type: "button", text: t("commit"), onclick: () => commit(false) });
+    // A bordered (not primary) menu half keeps the split button readable while
+    // the Commit half is disabled for a missing message.
+    const commitMenuButton = h("button", { class: "bordered icon", type: "button", "aria-label": t("commitAndPush"), title: t("commitAndPush"), onclick: openCommitMenu }, [icon("chevronDown", 13)]);
+    // Drafting a message takes a round trip, so the control reports its own
+    // state rather than leaving the click looking ignored.
+    const generateButton = h("button", {
+      class: "bordered",
+      type: "button",
+      onclick: () => { generate().catch(() => {}); },
+    }, [icon("sparkles", 13), h("span", { class: "gen-label", text: t("generateMessage") })]);
+    const generateMenuButton = h("button", {
+      class: "bordered icon",
+      type: "button",
+      "aria-label": t("generateOptions"),
+      // The element is captured here on purpose: `event.currentTarget` is dead
+      // by the time the model list has been fetched.
+      onclick: (event) => { openGenerateMenu(event.currentTarget).catch(() => {}); },
+    }, [icon("chevronDown", 12)]);
+    const generateGroup = h("div", { class: "split-button" }, [generateButton, generateMenuButton]);
+
+    const changesHeader = h("div", { class: "pane-header" });
+
+    const changesWidth = h("div", { class: "commit-changes column" });
+    const diffColumn = h("div", { class: "commit-diff column" });
+    const divider = h("div", { class: "divider-v draggable", title: "" });
+
+    /**
+     * The repository this window is showing, as the repository list names it:
+     * "." is the workspace's own, anything else sits inside it.
+     */
+    function repositoryLabel() {
+      const entry = state.repo?.repo;
+      if (!entry) return "";
+      return entry.rel && entry.rel !== "." ? entry.rel : entry.name;
+    }
+     /**
+      * Aggregated-view contexts: the current repo is ".", each dirty submodule
+      * is its `rel` (e.g. "backend"). A context carries the absolute root helm
+      * actions at, plus the repo object `workspaceRelative` needs for open/reveal.
+      */
+     function rootCtx() {
+       return {
+         rk: ".",
+         root: state.repo?.repo?.root ?? null,
+         label: repositoryLabel(),
+         repoObj: state.repo ?? null,
+         status: state.repo ?? null,
+         kind: "root",
+         branch: state.repo?.branch ?? null,
+       };
+     }
+     function subCtx(entry) {
+       return {
+         rk: entry.rel,
+         root: entry.root,
+         label: entry.rel,
+         repoObj: { repo: entry.status?.repo ?? { root: entry.root } },
+         status: entry.status,
+         kind: entry.kind ?? "submodule",
+         branch: entry.status?.branch ?? null,
+       };
+     }
+     function allCtxs() {
+       const out = [];
+       if (state.repo) out.push(rootCtx());
+       for (const entry of state.submodules ?? []) out.push(subCtx(entry));
+       return out;
+     }
+     function branchNameOf(branch) {
+       if (!branch) return "";
+       if (branch.head) return branch.head;
+       if (branch.detached) return `detached @ ${String(branch.oid ?? "").slice(0, 8)}`;
+       return "";
+     }
+     function countsOf(status) {
+       if (!status) return { staged: 0, unstaged: 0, untracked: 0, conflicted: 0 };
+       return {
+         staged: status.staged?.length ?? 0,
+         unstaged: status.unstaged?.length ?? 0,
+         untracked: status.untracked?.length ?? 0,
+         conflicted: status.conflicted?.length ?? 0,
+       };
+     }
+     function totalCounts() {
+       const total = { staged: 0, unstaged: 0, untracked: 0, conflicted: 0 };
+       for (const ctx of allCtxs()) {
+         const counts = countsOf(ctx.status);
+         total.staged += counts.staged;
+         total.unstaged += counts.unstaged;
+         total.untracked += counts.untracked;
+         total.conflicted += counts.conflicted;
+       }
+       return total;
+     }
+     /** Repos with staged files, submodules first so the parent pointer lands last. */
+     function stagedTargets() {
+       const targets = [];
+       for (const entry of state.submodules ?? []) {
+         if ((entry.status?.staged?.length ?? 0) > 0) targets.push(subCtx(entry));
+       }
+       if ((state.repo?.staged?.length ?? 0) > 0) targets.push(rootCtx());
+       return targets;
+     }
+     async function switchToSubmodule(root) {
+       const switched = await invoke("git/select-repo", { root });
+       if (!switched?.ok) {
+         toast(PIG.errorText(switched), "error");
+         return;
+       }
+       forgoRepositoryState();
+       paintAll();
+       loadRepositories().then(() => refresh()).catch(() => {});
+     }
+
+    let branchWidget = null;
+    let repoWidget = null;
+
+    // --------------------------------------------------------- rendering --
+    function paintToolbar() {
+      PIG.clear(toolbar);
+      toolbar.append(repoHolder);
+      toolbar.append(branchHolder);
+      toolbar.append(h("div", { class: "toolbar-separator" }));
+      // A sync button that is running spins in place; its siblings go
+      // disabled so a double click cannot spawn a second process.
+      const syncing = state.syncing ?? null;
+      const syncDisabled = Boolean(syncing || state.busy);
+      const syncButton = (name, title, kind, onClick) => {
+        const button = iconButton(name, title, onClick, { disabled: syncDisabled });
+        if (syncing === kind) {
+          button.classList.add("busy");
+          button.append(PIG.spinner(false));
+        }
+        return button;
+      };
+      toolbar.append(syncButton("refresh", tip("refresh", KEYS.refresh), "refresh", async () => {
+        if (state.syncing || state.busy) return;
+        state.syncing = "refresh";
+        paintToolbar();
+        try {
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("fetch", t("fetch"), "fetch", async () => {
+        if (state.syncing || state.busy) return;
+        state.syncing = "fetch";
+        paintToolbar();
+        try {
+          const result = await invoke("git/fetch");
+          if (report(result, t("fetch"))) await refresh();
+          else paintToolbar();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("push", t("push"), "push", async () => {
+        if (state.syncing || state.busy) return;
+        // Note: 多仓走 Push 对话框（逐仓列出去向与结果），单仓保持直推 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+        const multi = (state.allRepos?.length ?? 0) > 1 || (state.submodules?.length ?? 0) > 0;
+        if (multi) {
+          await PIG.openPushDialog({ onPushed: async () => { await refresh(); } });
+          await refresh();
+          return;
+        }
+        // The engine resolves the target from the branch's own upstream; see
+        // the push item in the branch menu.
+        state.syncing = "push";
+        paintToolbar();
+        try {
+          const result = await invoke("git/push", { setUpstream: !state.repo?.branch?.upstream });
+          report(result, t("push"));
+          await PIG.refreshTrackingRefs(result);
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(h("div", { class: "toolbar-separator" }));
+      toolbar.append(iconButton("plus", tip("stageFile", KEYS.stage), () => stageSelected(true), { disabled: syncDisabled || !canStageSelected() }));
+      toolbar.append(iconButton("minus", t("unstageFile"), () => stageSelected(false), { disabled: syncDisabled || !canUnstageSelected() }));
+      toolbar.append(iconButton("rollback", tip("rollback", KEYS.rollback), rollbackSelected, { disabled: syncDisabled || !state.selection }));
+      toolbar.append(h("div", { class: "toolbar-spacer" }));
+      toolbar.append(
+        h("span", {
+          style: { fontSize: "11px", color: "var(--fg-muted)" },
+          // A nested repository is named by where it sits; its bare basename
+          // would not say which one this window is showing.
+          text: repositoryLabel(),
+        }),
+      );
+    }
+
+     function paintChangesHeader() {
+       PIG.clear(changesHeader);
+       const counts = totalCounts();
+       const total = counts.staged + counts.unstaged + counts.untracked + counts.conflicted;
+       changesHeader.append(h("span", { text: t("changes") }));
+       changesHeader.append(h("span", { class: "muted", text: total ? `${total}` : "" }));
+       if (state.subLoading) changesHeader.append(h("span", { class: "muted", text: "…" }));
+      changesHeader.append(h("div", { class: "toolbar-spacer" }));
+      // IDEA puts this search in the changes pane's own title bar: typing is how
+      // you find one file among seventy-four, and the tree below narrows to the
+      // matches while keeping their folders.
+      const field = h("input", {
+        type: "search",
+        class: "changes-filter",
+        value: state.filter,
+        placeholder: t("filterChanges"),
+        title: t("filterChanges"),
+        oninput: (event) => { state.filter = event.target.value; paintChanges(); },
+        onkeydown: (event) => {
+          if (event.key !== "Escape" || !state.filter) return;
+          event.stopPropagation();
+          state.filter = "";
+          paintChanges();
+        },
+      });
+      changesHeader.append(h("span", { class: "search-field" }, [icon("search", 12), field]));
+      changesHeader.append(iconButton("gear", t("viewOptions"), (event) => {
+        popup(event.currentTarget, [
+          { type: "label", label: t("viewOptions") },
+          { label: t("groupByDirectory"), checked: state.groupByDirectory, onSelect: () => setViewOption("groupByDirectory", !state.groupByDirectory) },
+          // Only meaningful inside a folder tree.
+          { label: t("compactMiddleDirs"), checked: state.compactDirs, disabled: !state.groupByDirectory, onSelect: () => setViewOption("compactDirs", !state.compactDirs) },
+          { type: "separator" },
+          { label: t("collapseAll"), onSelect: () => { collapseAll(); } },
+          { type: "separator" },
+          { label: t("stageAllChanges"), onSelect: () => setAllInclusion(true) },
+          { label: t("unstageAllChanges"), onSelect: () => setAllInclusion(false) },
+        ]);
+      }, { size: 13 }));
+    }
+
+    function setViewOption(key, value) {
+      state[key] = value;
+      savePrefs();
+      paintChanges();
+    }
+
+    /** Collapse every group, repository and folder — IDEA's "Collapse All". */
+    function collapseAll() {
+      for (const group of GROUPS) state.collapsed.add(`group:${group.id}`);
+      for (const ctx of allCtxs()) {
+        for (const group of GROUPS) state.collapsed.add(`repo:${group.id}:${ctx.rk}`);
+      }
+      for (const ctx of allCtxs()) {
+        for (const group of GROUPS) {
+          for (const file of ctx.status?.[group.id] ?? []) {
+            const parts = file.path.split("/");
+            parts.pop();
+            let prefix = "";
+            for (const part of parts) {
+              prefix = prefix ? `${prefix}/${part}` : part;
+              state.collapsed.add(dirKey(ctx.rk, group.id, prefix));
+            }
+          }
+        }
+      }
+      paintChanges();
+    }
+
+     /**
+      * Stage (or unstage) every visible file across the current repo and all
+      * aggregated submodules. This fills the view-options menu entries that
+      * previously called a function that did not exist.
+      */
+     async function setAllInclusion(target) {
+       const jobs = [];
+       const filter = state.filter.trim().toLowerCase();
+       for (const ctx of allCtxs()) {
+         const want = target ? "staged" : "worktree";
+         const paths = [];
+         for (const group of GROUPS) {
+           if (group.id === "conflicted") continue;
+           for (const file of ctx.status?.[group.id] ?? []) {
+             if (filter && !file.path.toLowerCase().includes(filter)) continue;
+             const stateName = group.id === "staged" ? "staged" : "worktree";
+             if (stateName === want) continue;
+             paths.push(file.path);
+           }
+         }
+         if (!paths.length) continue;
+         const payload = { paths };
+         if (ctx.root) payload.repoRoot = ctx.root;
+         jobs.push(invoke(target ? "git/stage" : "git/unstage", payload));
+       }
+       if (!jobs.length) return;
+       const results = await Promise.all(jobs);
+       const failed = results.find((result) => !result?.ok);
+       if (failed) toast(PIG.errorText(failed), "error");
+       await refresh();
+     }
+
+    /**
+     * One checkbox for a set of files. Folder rows pass every file beneath them,
+     * which is the cascade: one click includes or excludes a whole subtree.
+     *
+     * Deliberately binary — no tri-state dash. A dash would mean "partially
+     * selected", and that state cannot exist here: a row's group *is* its staged
+     * state (Staged ⇔ in the index), so checking any file moves it to the other
+     * group rather than leaving a half-checked folder behind. Drawing a dash
+     * anyway would be a claim the user could not reconcile with the list. A file
+     * that genuinely is half in the index (`MM`: staged, with further unstaged
+     * changes) says so with a badge on its own row.
+     */
+    function rowCheckbox({ checked, title, onToggle }) {
+      const box = h("input", { type: "checkbox", title, onclick: (event) => event.stopPropagation() });
+      box.checked = checked;
+      box.addEventListener("change", async (event) => {
+        const next = event.target.checked;
+        event.target.disabled = true;
+        try {
+          await onToggle(next);
+        } finally {
+          event.target.disabled = false;
+        }
+      });
+      return box;
+    }
+
+    /**
+     * The checkbox is IDEA's "include into commit", which with a real index
+     * behind it means: selected = staged. Reaching `target` therefore means
+     * staging what is not in the commit yet and unstaging what is in it and
+     * should not be — and leaving alone whatever already matches, because a
+     * no-op `git add` still costs a process.
+     */
+     function applyInclusion(files, target, ctx) {
+       const want = target ? "staged" : "worktree";
+       const paths = files.filter((file) => file.state !== want).map((file) => file.path);
+       if (!paths.length) return Promise.resolve();
+       const payload = { paths };
+       if (ctx?.root) payload.repoRoot = ctx.root;
+       return invoke(target ? "git/stage" : "git/unstage", payload).then(async (result) => {
+         if (!result.ok) {
+           toast(PIG.errorText(result), "error");
+           await refresh();
+           return;
+         }
+         // A folder can hold a submodule. Staging one records the commit it
+         // points at and anything dirty inside it stays dirty, so the row comes
+         // back unselected even though the call succeeded. Say which of the two
+         // happened rather than letting the checkbox look broken.
+         // (Submodule inner files render as their own section now, so this
+         // branch only fires for the parent's own gitlink row.)
+         const stuck = target && (!ctx || ctx.rk === ".") ? files.filter((file) => file.insideSubmodule) : [];
+         await refresh();
+         if (!stuck.length) return;
+         const staged = (state.repo?.staged ?? []).map((entry) => entry.path);
+         if (stuck.some((file) => staged.includes(file.path))) toast(t("submoduleStagedHint"), "info");
+         else toast(PIG.tf("submoduleInside", { path: stuck[0].path }), "error");
+       });
+     }
+
+     function isSelected(rk, group, filePath) {
+       const sel = state.selection;
+       return Boolean(sel) && sel.rk === rk && sel.g === group && sel.p === filePath;
+     }
+     function fileRow(group, file, depth, fullPath, ctx) {
+       const rk = ctx?.rk ?? ".";
+       const selected = isSelected(rk, group, file.path);
+       const { name } = splitPath(file.path);
+
+       return h("div", {
+         class: "tree-row",
+         role: "option",
+         tabindex: "0",
+         "aria-selected": selected ? "true" : "false",
+         title: ctx && ctx.rk !== "." ? `${ctx.rk}/${file.path}` : file.path,
+         onclick: () => select({ rk, g: group, p: file.path, root: ctx?.root ?? null }),
+         oncontextmenu: (event) => {
+           event.preventDefault();
+           select({ rk, g: group, p: file.path, root: ctx?.root ?? null });
+           fileContextMenu(event.currentTarget, group, file, ctx);
+         },
+       }, [
+         h("span", { class: "indent", style: { width: `${depth * 12}px` } }),
+         rowCheckbox({
+           checked: group === "staged",
+           title: t("includeIntoCommit"),
+           onToggle: (next) => applyInclusion([{ ...file, state: group === "staged" ? "staged" : "worktree" }], next, ctx),
+         }),
+         // Same slots as a folder row — disclosure, icon — so the two line up and
+         // the status letter sits where a folder's arrow is. Without it every
+         // file name would start to the left of the folder it lives in.
+         h("span", { class: "indent", style: { width: "10px" } }),
+         h("span", { class: "status-cell", style: { color: statusColor(file.status) }, text: file.status }),
+         // The directory is the tree now. Repeating it as a grey tail answered
+         // "which folder" worse than the hierarchy does, and the narrow column
+         // clipped it anyway.
+         h("span", { class: "name", style: { color: statusColor(file.status) }, text: name }),
+         // No "partly staged" badge. A file with an index change *and* a further
+         // worktree change already says so the only way Git says it: the same
+         // path is listed here and in the other group, each row carrying its own
+         // status letter. Naming that state separately would invent a concept
+         // the user cannot see in `git status` or in any other Git client.
+         // Inside the tree the folders already answered "where is this", so only
+         // the Flat view repeats the path — and there it is essential, because
+         // nothing else identifies the file. The column is narrow, so the tail
+         // ellipsises and the tooltip keeps the whole path readable.
+         fullPath && file.path !== name
+           ? h("span", { class: "path", title: fullPath, text: fullPath })
+           : null,
+         // A submodule deserves a visible mark: its checkbox means something
+         // different from every other row's.
+         file.submodule
+           ? h("span", { class: "badge", text: t("submoduleBadge"), title: submoduleTooltip(file) })
+           : null,
+       ]);
+     }
+
+
+    /** Why a submodule row behaves differently, in the user's language. */
+    function submoduleTooltip(file) {
+      if (file.insideSubmodule) return PIG.tf("submoduleInside", { path: file.path });
+      return t("submoduleStagedHint");
+    }
+
+    /**
+     * A folder row: a disclosure arrow, the folder, a count, and a checkbox
+     * that reaches every file below it, nested folders included. Checking it
+     * stages the whole subtree; unchecking it unstages the whole subtree. That
+     * cascade is the interaction a flat list cannot offer.
+     *
+     * The checkbox stays binary, and its meaning is "everything under here is in
+     * the commit": ticked in Staged, cleared in Unstaged. A file that is only
+     * half in the index (`MM`) is flagged by the folder carrying a "partly
+     * staged" badge rather than by a dash on the box — a dash would read as
+     * "some of this folder is selected", which is a state this list cannot
+     * represent, because a row's group *is* its staged state.
+     */
+     function dirKey(rk, group, dirPath) {
+       return `dir:${rk}:${group}:${dirPath}`;
+     }
+     function dirRow(group, dir, depth, label, ctx) {
+       const rk = ctx?.rk ?? ".";
+       const files = filesUnder(dir);
+       const total = files.length;
+       const key = dirKey(rk, group, dir.path);
+       const open = !state.collapsed.has(key);
+       const action = group === "staged" ? t("unincludeFolder") : t("includeFolder");
+       return h("div", {
+         class: "tree-row dir-row",
+         role: "treeitem",
+         "aria-expanded": open ? "true" : "false",
+         title: ctx && ctx.rk !== "." ? `${ctx.rk}/${dir.path}` : dir.path,
+         onclick: () => {
+           if (state.collapsed.has(key)) state.collapsed.delete(key);
+           else state.collapsed.add(key);
+           paintChanges();
+         },
+       }, [
+         h("span", { class: "indent", style: { width: `${depth * 12}px` } }),
+         rowCheckbox({
+           checked: group === "staged",
+           title: action,
+           onToggle: (next) => applyInclusion(files, next, ctx),
+         }),
+         h("span", { class: "disclosure", "data-open": open ? "true" : "false" }, [icon("chevronRight", 11)]),
+         h("span", { class: "row-icon" }, [icon("folder", 13)]),
+         h("span", { class: "name", text: label }),
+         h("span", { class: "count", text: `${total}` }),
+       ]);
+     }
+
+
+     /** Depth-first render of one change list. Returns the rows, so the caller
+         can append them in one pass. */
+     function treeRows(group, node, depth, ctx) {
+       const rows = [];
+       const rk = ctx?.rk ?? ".";
+       for (const entry of treeEntries(node)) {
+         if (entry.kind === "file") {
+           rows.push(fileRow(group, entry.file, depth, null, ctx));
+           continue;
+         }
+         // A compacted row stands for a chain of folders, so it is the deepest
+         // node in that chain that owns the expanded state and the children.
+         const { label, node: target } = compactDir(entry.dir, state.compactDirs);
+         rows.push(dirRow(group, target, depth, label, ctx));
+         if (state.collapsed.has(dirKey(rk, group, target.path))) continue;
+         rows.push(...treeRows(group, target, depth + 1, ctx));
+       }
+       return rows;
+     }
+
+     /**
+      * The same change list without its folders: IDEA's Flat view. Files are
+      * listed by full repository path, which is the whole point of leaving the
+      * tree — nothing is identified by position any more.
+      */
+    function flatRows(group, files, ctx, depth) {
+      return [...files]
+        .sort((a, b) => a.path.localeCompare(b.path, undefined, { sensitivity: "base", numeric: true }))
+        .map((file) => fileRow(group, file, depth ?? 0, ctx && ctx.rk !== "." ? `${ctx.rk}/${file.path}` : file.path, ctx));
+    }
+
+    /**
+     * IDEA's colored square per repository. Colors are dealt from the sorted
+     * repo list with linear probing, so every visible repo gets a distinct
+     * square while a repo keeps its color as long as the repo set is unchanged
+     * (a plain hash collides too often with 5 repos on 8 colors).
+     */
+    const REPO_COLORS = ["#e5534b", "#3fb950", "#ab7df8", "#39c5cf", "#d29922", "#f778ba", "#4a86c8", "#d1743a"];
+
+    function repoColorMap(ctxs) {
+      const sorted = [...ctxs].sort((a, b) => a.label.localeCompare(b.label, undefined, { sensitivity: "base", numeric: true }));
+      const used = new Set();
+      const map = new Map();
+      for (const ctx of sorted) {
+        let hash = 0;
+        for (const char of String(ctx.rk ?? "")) hash = (hash * 31 + char.charCodeAt(0)) | 0;
+        let index = Math.abs(hash) % REPO_COLORS.length;
+        while (used.has(index)) index = (index + 1) % REPO_COLORS.length;
+        used.add(index);
+        map.set(ctx.rk, REPO_COLORS[index]);
+      }
+      return map;
+    }
+    function filesForGroup(ctx, statusObj, group, filter) {
+      const all = (statusObj?.[group.id] ?? []).map((file) => ({
+        ...file,
+        // Being in the commit is the same question as being in the index, so
+        // the group a row came from is what its checkbox math reads.
+        state: group.id === "staged" ? "staged" : "worktree",
+      }));
+      const matches = (file) => {
+        if (!filter) return true;
+        if (file.path.toLowerCase().includes(filter)) return true;
+        // Typing the submodule name narrows to its files, like IDEA.
+        if (ctx.rk !== "." && `${ctx.rk}/${file.path}`.toLowerCase().includes(filter)) return true;
+        return false;
+      };
+      return { all, visible: all.filter(matches) };
+    }
+
+    function countText(all, visible) {
+      // While filtering, say both numbers: the tree below can only ever
+      // account for the matches, and a lone count would look wrong.
+      return visible.length === all.length ? `${all.length}` : `${visible.length}/${all.length}`;
+    }
+
+    /**
+     * One batched stage/unstage across several repos (a group header's
+     * checkbox): one git call per repo, a single refresh, then the same
+     * submodule-pointer hint the single-repo path shows.
+     */
+    function applyInclusionForRepos(pairs, target) {
+      const jobs = [];
+      let rootFiles = [];
+      for (const { visible, ctx } of pairs) {
+        const want = target ? "staged" : "worktree";
+        const paths = visible.filter((file) => file.state !== want).map((file) => file.path);
+        if (!paths.length) continue;
+        if (!ctx || ctx.rk === ".") rootFiles = rootFiles.concat(visible);
+        const payload = { paths };
+        if (ctx?.root) payload.repoRoot = ctx.root;
+        jobs.push(invoke(target ? "git/stage" : "git/unstage", payload));
+      }
+      if (!jobs.length) return Promise.resolve();
+      return Promise.all(jobs).then(async (results) => {
+        const failed = results.find((result) => !result?.ok);
+        if (failed) {
+          toast(PIG.errorText(failed), "error");
+          await refresh();
+          return;
+        }
+        await refresh();
+        if (!target || !rootFiles.length) return;
+        const stuck = rootFiles.filter((file) => file.insideSubmodule);
+        if (!stuck.length) return;
+        const staged = (state.repo?.staged ?? []).map((entry) => entry.path);
+        if (stuck.some((file) => staged.includes(file.path))) toast(t("submoduleStagedHint"), "info");
+        else toast(PIG.tf("submoduleInside", { path: stuck[0].path }), "error");
+      });
+    }
+
+    /**
+     * IDEA's repository row: disclosure, cascade checkbox, color square, name,
+     * "N files", branch pill. Clicking expands; right-click switches to that
+     * repository (the top-left selector does the same).
+     */
+    function repoRow(group, ctx, all, visible, color) {
+      const rkey = `repo:${group.id}:${ctx.rk}`;
+      const open = !state.collapsed.has(rkey);
+      const branch = branchNameOf(ctx.branch);
+      return h("div", {
+        class: "tree-row repo-row",
+        role: "treeitem",
+        "aria-expanded": open ? "true" : "false",
+        title: ctx.rk === "." ? (ctx.repoObj?.repo?.root ?? ctx.label) : ctx.root,
+        onclick: () => {
+          if (state.collapsed.has(rkey)) state.collapsed.delete(rkey);
+          else state.collapsed.add(rkey);
+          paintChanges();
+        },
+        oncontextmenu: (event) => {
+          event.preventDefault();
+          repoContextMenu(event.currentTarget, ctx);
+        },
+      }, [
+        h("span", { class: "disclosure", "data-open": open ? "true" : "false" }, [icon("chevronRight", 11)]),
+        group.id === "conflicted"
+          ? h("span", { class: "indent", style: { width: "13px" } })
+          : rowCheckbox({
+            checked: group.id === "staged",
+            title: group.id === "staged" ? t("unstageAllChanges") : t("stageAllChanges"),
+            onToggle: (next) => applyInclusion(visible, next, ctx),
+          }),
+        h("span", { class: "repo-color", style: { background: color ?? "#888888" } }),
+        h("span", { class: "name", text: ctx.label }),
+        h("span", { class: "muted", text: `${countText(all, visible)} ${t("files")}` }),
+        branch ? h("span", { class: "badge", text: branch, title: branch }) : null,
+      ]);
+    }
+
+    function repoContextMenu(anchor, ctx) {
+      if (!ctx || ctx.rk === ".") return;
+      popup(anchor, [
+        {
+          label: t("switchToRepo"),
+          title: ctx.root ?? ctx.rk,
+          onSelect: () => { switchToSubmodule(ctx.root).catch(() => {}); },
+        },
+      ]);
+    }
+
+    /**
+     * IDEA's ordering: each change list groups by repository — the current one
+     * sorts among the submodules by name, like haeco-mes-parent between
+     * frontend and prototype-design. A single-repo project renders exactly as
+     * before, with no repository rows.
+     */
+    function paintChanges() {
+      PIG.clear(changesList);
+      if (!state.repo) {
+        changesList.append(h("div", { class: "empty-state" }, [
+          h("div", { class: "headline", text: state.error ? t("notARepository") : t("loading") }),
+          state.error ? h("code", { text: state.error }) : null,
+          state.error ? h("div", { class: "muted", text: t("repositoryHint") }) : null,
+        ]));
+        return;
+      }
+
+      const filter = state.filter.trim().toLowerCase();
+      const multi = (state.submodules ?? []).length > 0;
+      const colorMap = multi ? repoColorMap(allCtxs()) : new Map();
+      let groups = 0;
+
+      for (const group of GROUPS) {
+        const buckets = [];
+        const rctx = rootCtx();
+        const rootLists = filesForGroup(rctx, state.repo, group, filter);
+        if (rootLists.visible.length) buckets.push({ ctx: rctx, ...rootLists });
+        for (const entry of state.submodules ?? []) {
+          const ctx = subCtx(entry);
+          const lists = filesForGroup(ctx, entry.status, group, filter);
+          if (lists.visible.length) buckets.push({ ctx, ...lists });
+        }
+        if (!buckets.length) continue;
+        groups += 1;
+
+        const gkey = `group:${group.id}`;
+        const open = !state.collapsed.has(gkey);
+        const allTotal = buckets.reduce((total, bucket) => total + bucket.all.length, 0);
+        const visTotal = buckets.reduce((total, bucket) => total + bucket.visible.length, 0);
+        const header = h("div", {
+          class: "group-header",
+          onclick: () => {
+            if (state.collapsed.has(gkey)) state.collapsed.delete(gkey);
+            else state.collapsed.add(gkey);
+            paintChanges();
+          },
+        }, [
+          h("span", { class: "disclosure", "data-open": open ? "true" : "false" }, [icon("chevronRight", 11)]),
+          h("span", { text: t(group.label) }),
+          h("span", {
+            class: "count",
+            text: visTotal === allTotal ? `${allTotal}` : `${visTotal}/${allTotal}`,
+          }),
+        ]);
+
+        // Conflicts are not something to include or exclude — they have to be
+        // resolved first — so that group gets no checkbox at all.
+        if (group.id !== "conflicted") {
+          header.append(h("div", { class: "toolbar-spacer" }));
+          header.append(rowCheckbox({
+            checked: group.id === "staged",
+            title: group.id === "staged" ? t("unstageAllChanges") : t("stageAllChanges"),
+            onToggle: (next) => applyInclusionForRepos(buckets, next),
+          }));
+        }
+        changesList.append(header);
+        if (!open) continue;
+
+        if (!multi) {
+          const only = buckets[0];
+          if (!state.groupByDirectory) {
+            for (const row of flatRows(group.id, only.visible, only.ctx, 0)) changesList.append(row);
+          } else {
+            for (const row of treeRows(group.id, buildChangeTree(only.visible), 0, only.ctx)) changesList.append(row);
+          }
+          continue;
+        }
+
+        buckets.sort((a, b) => a.ctx.label.localeCompare(b.ctx.label, undefined, { sensitivity: "base", numeric: true }));
+        for (const bucket of buckets) {
+          changesList.append(repoRow(group, bucket.ctx, bucket.all, bucket.visible, colorMap.get(bucket.ctx.rk)));
+          if (state.collapsed.has(`repo:${group.id}:${bucket.ctx.rk}`)) continue;
+          if (!state.groupByDirectory) {
+            for (const row of flatRows(group.id, bucket.visible, bucket.ctx, 1)) changesList.append(row);
+          } else {
+            for (const row of treeRows(group.id, buildChangeTree(bucket.visible), 1, bucket.ctx)) changesList.append(row);
+          }
+        }
+      }
+
+      if (!groups) {
+        const noFilter = !state.filter.trim();
+        changesList.append(h("div", { class: "empty-state" }, [
+          h("div", { class: "headline", text: noFilter ? t("noChanges") : t("noMatchingChanges") }),
+        ]));
+      }
+    }
+
+     function paintDiffHeader() {
+       PIG.clear(diffHeader);
+       if (!state.selection || !state.diff) {
+         diffHeader.append(h("span", { class: "muted", text: t("pickFile") }));
+         return;
+       }
+       const sel = state.selection;
+       const { name, directory } = splitPath(sel.p);
+       if (sel.rk && sel.rk !== ".") diffHeader.append(h("span", { class: "muted", text: sel.rk }));
+       diffHeader.append(h("span", { text: name }));
+      diffHeader.append(h("div", { class: "toolbar-spacer" }));
+      diffHeader.append(iconButton("columns", t("sideBySide") + " / " + t("unified"), () => {
+        state.diffUnified = !state.diffUnified;
+        paintDiff();
+        savePrefs();
+      }, { size: 13, class: "icon" }));
+      diffHeader.append(iconButton("eye", t("showWhitespaces"), () => {
+        state.showWhitespaces = !state.showWhitespaces;
+        paintDiff();
+      }, { size: 13 }));
+      diffHeader.append(iconButton("gear", t("ignoreDifferences"), (event) => {
+        popup(event.currentTarget, [
+          { type: "label", label: t("ignoreDifferences") },
+          { label: t("ignoreNone"), checked: !state.ignoreWhitespace, onSelect: () => setIgnoreWhitespace(false) },
+          { label: t("ignoreWhitespace"), checked: state.ignoreWhitespace, onSelect: () => setIgnoreWhitespace(true) },
+          { type: "separator" },
+          { label: t("showLineNumbers"), checked: state.showLineNumbers, onSelect: () => { state.showLineNumbers = !state.showLineNumbers; paintDiff(); } },
+        ]);
+      }, { size: 13 }));
+    }
+
+     function hunkActionsFor(selection) {
+       const group = selection?.g ?? "";
+       const isIndex = group === "staged";
+      if (isIndex) {
+        return [{
+          label: t("unstageHunk"),
+          title: t("unstageHunk"),
+          onSelect: async (hunk) => {
+             const patch = PIG.diff.patchFor({ header: currentHeader(), hunks: [hunk] }, [hunk]);
+             report(
+               await invoke("git/apply-patch", { action: "unstage", patch, root: state.diff?.root, repoRoot: state.diff?.root }),
+              t("unstageHunk"),
+            );
+            await refresh();
+          },
+        }];
+      }
+      return [
+        {
+          label: t("stageHunk"),
+          title: t("stageHunk"),
+          onSelect: async (hunk) => {
+             const patch = PIG.diff.patchFor({ header: currentHeader(), hunks: [hunk] }, [hunk]);
+             report(
+               await invoke("git/apply-patch", { action: "stage", patch, root: state.diff?.root, repoRoot: state.diff?.root }),
+              t("stageHunk"),
+            );
+            await refresh();
+          },
+        },
+        {
+          label: t("discardHunk"),
+          title: t("discardHunk"),
+          onSelect: async (hunk) => {
+            const confirmed = await dialog({
+              title: t("discardHunk"),
+              message: t("discard"),
+              danger: true,
+              confirmLabel: t("discard"),
+            });
+            if (!confirmed) return;
+             const patch = PIG.diff.patchFor({ header: currentHeader(), hunks: [hunk] }, [hunk]);
+             report(
+               await invoke("git/apply-patch", { action: "discard", patch, root: state.diff?.root, repoRoot: state.diff?.root }),
+              t("discardHunk"),
+            );
+            await refresh();
+          },
+        },
+      ];
+    }
+
+    function currentHeader() {
+      return state.diff?.parsed?.files?.[0]?.header ?? ["diff --git a/x b/x"];
+    }
+
+     function paintDiff() {
+       paintDiffHeader();
+       const group = state.selection ? state.selection.g : null;
+       const stageable = group !== "untracked" && !state.ignoreWhitespace;
+       const result = PIG.diff.render(diffHost, {
+         text: state.diff?.text ?? "",
+         unified: state.diffUnified,
+         showWhitespaces: state.showWhitespaces,
+         showLineNumbers: state.showLineNumbers,
+         stageable,
+         hunkActions: state.selection ? hunkActionsFor(state.selection) : [],
+         hunkCheckbox: state.selection && group !== "untracked" && !state.ignoreWhitespace
+           ? (hunk) => ({
+             checked: group === "staged",
+             onChange: async (checked) => {
+               const isIndex = group === "staged";
+               if (checked === isIndex) return;
+               const patch = PIG.diff.patchFor({ header: currentHeader(), hunks: [hunk] }, [hunk]);
+               report(
+                 await invoke("git/apply-patch", {
+                   action: checked ? "stage" : "unstage",
+                   patch,
+                   root: state.diff?.root,
+                   repoRoot: state.diff?.root,
+                 }),
+                 t("includeIntoCommit"),
+               );
+               await refresh();
+             },
+           })
+           : null,
+        emptyMessage: state.diff?.binary ? t("binaryDiff") : t("noDiff"),
+      });
+      // `state.diff` is null while nothing is selected, so the parsed model is
+      // only stored back when there really is a diff to attach it to.
+      if (state.diff) state.diff.parsed = result;
+    }
+
+    /**
+     * The commit area's status line. A conflicted repository is the one state
+     * this line has to do more than describe: an unresolved merge/rebase/cherry
+     * pick can only be left by finishing it or by aborting, and the plugin's own
+     * Pull can produce one, so the escape has to be here and not in a terminal.
+     */
+    function paintCommit() {
+      // While a commit (or its follow-up push) runs, the button itself is the
+      // progress: spinner plus phase, so a slow hook or a slow push never
+      // looks like the click was lost.
+      PIG.clear(commitButton);
+      if (state.busy) {
+        commitButton.classList.add("busy");
+        commitButton.append(PIG.spinner(true));
+        commitButton.append(h("span", { text: t(state.busyKind === "commit-push" ? "committingAndPushing" : "committing") }));
+      } else {
+        commitButton.classList.remove("busy");
+        commitButton.append(t("commit"));
+      }
+      commitButton.disabled = state.busy || (!state.message.trim() && !state.amend);
+      commitMenuButton.disabled = state.busy;
+       const totals = totalCounts();
+       const staged = totals.staged;
+       const total = totals.staged + totals.unstaged + totals.untracked + totals.conflicted;
+       const conflicts = totals.conflicted;
+       const operation = state.repo?.operation ?? null;
+       PIG.clear(summary);
+       if (operation) {
+         summary.className = "commit-summary warn";
+         summary.append(h("span", { text: t(`${OPERATION_KEYS[operation] ?? "conflictNotice"}`) }));
+         // A merge is finished by committing, so it has no "continue"; the
+         // sequencer operations do.
+         if (operation !== "merge") {
+           summary.append(operationButton(t("continueOperation"), operation, "continue"));
+         }
+         summary.append(operationButton(t("abortOperation"), operation, "abort"));
+       } else if (conflicts) {
+         summary.className = "commit-summary warn";
+         summary.append(t("conflictNotice"));
+       } else if (!staged && !state.amend) {
+         summary.className = "commit-summary warn";
+         summary.append(t("nothingStaged"));
+       } else {
+         summary.className = "commit-summary";
+         // Whole sentence per locale via tf; `s` feeds the English plural only.
+         summary.append(PIG.tf("commitSummary", { staged, total, s: total === 1 ? "" : "s" }));
+         const targets = stagedTargets();
+         if (targets.length > 1) {
+           summary.append(h("span", { class: "muted", text: ` · ${PIG.tf("commitMultipleRepos", { count: targets.length })}` }));
+         }
+       }
+     }
+
+    function operationButton(label, operation, action) {
+      return h("button", {
+        class: "bordered",
+        type: "button",
+        style: { marginLeft: "8px" },
+        text: label,
+        onclick: async (event) => {
+          // A continue can run a real merge behind it; spin the clicked button
+          // itself so the wait has an owner. (The button may be rebuilt by the
+          // refresh below — restoring a detached node is a harmless no-op.)
+          await PIG.withBusy(event.currentTarget, label, async () => {
+            const result = await invoke("git/sequencer", { operation, action });
+            report(result, label);
+            await refresh();
+          });
+        },
+      });
+    }
+
+    /**
+     * One failing pane must never blank the others — that is exactly how the
+     * missing `state.diff` guard used to take the branch widget down with it.
+     */
+    let reportedFailure = false;
+    function paintGenerate() {
+      const busy = state.generating;
+      generateButton.disabled = busy;
+      generateMenuButton.disabled = busy;
+      generateButton.classList.toggle("busy", busy);
+      PIG.clear(generateButton);
+      generateButton.append(busy ? PIG.spinner(false) : icon("sparkles", 13));
+      generateButton.append(h("span", { class: "gen-label", text: busy ? t("generating") : t("generateMessage") }));
+      generateButton.title = PIG.tf("generateScope", { action: t("generateMessage"), lang: languageLabel() });
+    }
+
+    /**
+     * Which change the draft should describe: everything checked (staged) —
+     * the same set Commit is about to commit — or, when nothing is staged,
+     * the file the user picked. Reported back afterwards so the scope is
+     * never a guess.
+     *
+     * Checked means staged here: ticking a row stages it, unticking unstages
+     * it, so `stagedTargets()` is exactly "what is checked". Selection (the
+     * highlight that drives the diff pane) used to win over that set, and the
+     * auto-select on refresh meant the staged branch was nearly unreachable —
+     * the draft then described one file while Commit took all of them.
+     */
+     function draftTarget() {
+       const targets = stagedTargets();
+       if (targets.length) return { kind: "staged", targets };
+       if (state.selection) {
+         const sel = state.selection;
+         return { kind: "file", path: sel.p, mode: sel.g === "staged" ? "index" : "worktree", group: sel.g, repoRoot: sel.root ?? null };
+       }
+       return null;
+     }
+
+    /**
+     * Say what actually went wrong. A permission that was never granted is not
+     * the same as having no provider configured, and telling the user to add
+     * one they already have sends them the wrong way.
+     */
+    function draftError(result) {
+      const code = String(result?.code ?? "");
+      if (code === "PERMISSION_DENIED") return t("modelPermission");
+      if (code === "NO_MODEL") return t("noModel");
+      if (code === "RATE_LIMITED") return t("rateLimited");
+      if (code === "EMPTY_DIFF" || code === "NO_DIFF") return t("nothingToDescribe");
+      if (code === "TIMEOUT") return t("draftTimeout");
+      return PIG.errorText(result);
+    }
+
+    // Note: 界面语言只有视图知道（插件进程拿不到），所以 locale 随每次请求传；语言是 chevron 菜单里的显式选择而不是推断，auto 的历史回退靠引擎返回 null 而不是 "en" — 见 .agents/notes/implemented/architecture/2026-09-11-commit-message-prompt.md
+    // Note: 生成范围=勾选（stagedTargets）而非选中 — 见 .agents/notes/implemented/bug-fix/2026-09-14-commit-message-checked-scope.md
+    async function generate() {
+      if (state.generating) return;
+      const target = draftTarget();
+      // Staged (checked) wins: it is what Commit will commit. A single staged
+      // repo reuses the legacy contract (empty payload for the current repo,
+      // repoRoot for a submodule) so style comes from the repo being described.
+      // Several staged repos send their roots; the engine aggregates their
+      // index diffs into one prompt and drafts a single message for all of them.
+      let payload = {};
+      if (target?.kind === "staged") {
+        const roots = (target.targets ?? []).map((entry) => entry.root).filter(Boolean);
+        if (roots.length > 1) {
+          payload = { stagedRoots: roots };
+        } else if (roots.length === 1 && roots[0] !== (state.repo?.repo?.root ?? null)) {
+          payload = { repoRoot: roots[0] };
+        }
+      } else if (target?.kind === "file") {
+        payload = { path: target.path, mode: target.mode, ...(target.repoRoot ? { repoRoot: target.repoRoot } : {}) };
+      }
+      if (state.commitModelKey) payload.modelKey = state.commitModelKey;
+      // The plugin process has no idea which language this window speaks, so it
+      // travels with the request: `commitLang` is the user's standing choice,
+      // `locale` the fallback for a repository with no history to follow.
+      payload.lang = state.commitLang;
+      payload.locale = PIG.state.locale;
+
+      // Never silently discard something the user typed.
+      if (state.message.trim()) {
+        const replace = await dialog({
+          title: t("replaceDraft"),
+          message: t("replaceDraftBody"),
+          confirmLabel: t("replace"),
+        });
+        if (!replace) return;
+      }
+
+      state.generating = true;
+      paintGenerate();
+      const result = await invoke("git/commit-message", payload);
+      state.generating = false;
+      paintGenerate();
+
+      if (!result.ok) {
+        toast(draftError(result), "error");
+        return;
+      }
+      state.message = result.text;
+      messageInput.value = result.text;
+      paintCommit();
+      messageInput.focus();
+      const scope = result.scope ?? {};
+      if (scope.kind === "file") {
+        toast(PIG.tf("draftedFile", { file: scope.path }), "info");
+      } else {
+        let note = PIG.tf("draftedStaged");
+        const repos = Number(scope.repos ?? 0) || (target?.targets?.length ?? 0);
+        if (repos > 1) note += ` · ${PIG.tf("commitMultipleRepos", { count: repos })}`;
+        toast(note, "info");
+      }
+    }
+
+    async function openGenerateMenu(anchor) {
+      const result = await invoke("git/models");
+      const models = Array.isArray(result.models) ? result.models : [];
+      const selected = state.commitModelKey || models[0]?.key || "";
+      const items = [
+        { label: t("generateMessage"), onSelect: () => { generate().catch(() => {}); } },
+        { type: "separator" },
+        { type: "label", label: t("modelLabel") },
+      ];
+      if (!models.length) {
+        // A menu row needs a label, not a paragraph; the full explanation is a
+        // toast away, and the host's own wording stays in the tooltip.
+        items.push({
+          label: result.code === "PERMISSION_DENIED" ? t("modelPermissionShort") : t("noModel"),
+          disabled: true,
+          title: result.code === "PERMISSION_DENIED"
+            ? `${t("modelPermission")}\n\n${result.message ?? ""}`.trim()
+            : (result.message ?? ""),
+          onSelect: result.code === "PERMISSION_DENIED"
+            ? () => toast(t("modelPermission"), "error")
+            : undefined,
+        });
+      } else {
+        for (const model of models.slice(0, 30)) {
+          items.push({
+            label: model.label ?? model.key,
+            title: model.key,
+            checked: model.key === selected,
+            onSelect: () => {
+              state.commitModelKey = model.key;
+              savePrefs();
+              toast(`${t("modelLabel")}: ${model.label ?? model.key}`, "info");
+            },
+          });
+        }
+      }
+
+      // The language is a choice, not a guess — the reason this menu exists is
+      // that the model used to answer an English repository in English however
+      // Chinese the user was. `auto` follows the history, which is what the
+      // prompt was always trying to do, and falls back to the interface.
+      items.push(
+        { type: "separator" },
+        { type: "label", label: t("commitLanguage") },
+      );
+      for (const option of LANGUAGES) {
+        items.push({
+          label: t(option.label),
+          checked: state.commitLang === option.value,
+          onSelect: () => {
+            state.commitLang = option.value;
+            savePrefs();
+            paintGenerate();
+          },
+        });
+      }
+      popup(anchor, items);
+    }
+
+    function paintAll() {
+      for (const step of [paintToolbar, paintChangesHeader, paintChanges, paintDiff, paintCommit, paintGenerate]) {
+        try {
+          step();
+        } catch (error) {
+          if (!reportedFailure) {
+            reportedFailure = true;
+            toast(`IDEA Git: ${error?.message ?? error}`, "error");
+          }
+        }
+      }
+      try {
+        branchWidget?.update(state.repo);
+      } catch {
+        // The chip is decoration; never let it break the refresh.
+      }
+    }
+
+    // ----------------------------------------------------------- actions --
+     // ----------------------------------------------------------- actions --
+     // `selection` is `{ rk, g, p, root }`: the repo key ("." for the current
+     // repo, else the submodule rel), the group, the repo-relative path, and
+     // the absolute repo root file actions run in.
+     function select(sel) {
+       state.selection = sel ? { rk: sel.rk ?? ".", g: sel.g, p: sel.p, root: sel.root ?? null } : null;
+       loadDiff().catch((error) => toast(String(error?.message ?? error), "error"));
+       paintChanges();
+     }
+
+     function canStageSelected() {
+       return Boolean(state.selection && state.selection.g !== "staged");
+     }
+
+     function canUnstageSelected() {
+       return Boolean(state.selection && state.selection.g === "staged");
+     }
+
+     function selectedPath() {
+       return state.selection ? state.selection.p : null;
+     }
+
+     function selectionPayload(extra) {
+       return { ...(extra ?? {}), ...(state.selection?.root ? { repoRoot: state.selection.root } : {}) };
+     }
+
+     async function stageSelected(staging) {
+       const path = selectedPath();
+       if (!path) return;
+       report(await invoke(staging ? "git/stage" : "git/unstage", selectionPayload({ paths: [path] })), staging ? t("stageFile") : t("unstageFile"));
+       await refresh();
+     }
+
+     async function rollbackSelected() {
+       const path = selectedPath();
+       if (!path) return;
+       const confirmed = await dialog({
+         title: t("rollback"),
+         message: `${t("rollback")} ${path}?`,
+         detail: t("discard"),
+         danger: true,
+         confirmLabel: t("rollback"),
+       });
+       if (!confirmed) return;
+       report(await invoke("git/discard", selectionPayload({ paths: [path] })), t("rollback"));
+       await refresh();
+     }
+
+     function ctxRepoForMenu(ctx) {
+       if (ctx?.repoObj) return ctx.repoObj;
+       return state.repo;
+     }
+
+     function fileContextMenu(anchor, group, file, ctx) {
+       const rk = ctx?.rk ?? ".";
+       const root = ctx?.root ?? null;
+       const at = (extra) => ({ ...(extra ?? {}), ...(root ? { repoRoot: root } : {}) });
+       const items = [
+         { label: t("showDiff"), onSelect: () => select({ rk, g: group, p: file.path, root }) },
+         { type: "separator" },
+       ];
+       if (group === "staged") {
+         items.push({ label: t("unstageFile"), onSelect: () => stageFile(group, file, false, ctx) });
+       } else {
+         items.push({ label: t("stageFile"), onSelect: () => stageFile(group, file, true, ctx) });
+       }
+       items.push({
+         label: t("rollback"),
+         disabled: group === "staged",
+         onSelect: async () => {
+           const confirmed = await dialog({
+             title: t("rollback"),
+             message: `${t("rollback")} ${file.path}?`,
+             danger: true,
+             confirmLabel: t("rollback"),
+           });
+           if (!confirmed) return;
+           report(await invoke("git/discard", at({ paths: [file.path] })), t("rollback"));
+           await refresh();
+         },
+       });
+       const relative = workspaceRelative(file.path, ctxRepoForMenu(ctx));
+       items.push({ type: "separator" });
+       items.push({
+         label: t("openFile"),
+         disabled: !relative,
+         title: relative ? file.path : `${t("openFile")} — ${file.path}`,
+         onSelect: () => invoke("fs.openDefault", { path: relative }),
+       });
+       items.push({
+         label: t("revealInFileManager"),
+         disabled: !relative,
+         onSelect: () => invoke("fs.reveal", { path: relative }),
+       });
+       // The file itself has no hash to copy; offer HEAD like the Log view does
+       // (git-view copyRevisionNumber), and fall back to the path with an honest
+       // label when there is no commit yet. No `t("copy") + t("hash")` splicing.
+       {
+         const headHash = (ctx?.status?.branch?.oid ?? state.repo?.branch?.oid) ?? null;
+         if (headHash) items.push({ label: t("copyRevisionNumber"), onSelect: () => PIG.copyText(headHash) });
+         else items.push({ label: t("copyPath"), onSelect: () => PIG.copyText(file.path) });
+       }
+       popup(anchor, items);
+     }
+
+     async function stageFile(group, file, staging, ctx) {
+       const payload = { paths: [file.path] };
+       const root = ctx?.root ?? state.selection?.root ?? null;
+       if (root) payload.repoRoot = root;
+       report(await invoke(staging ? "git/stage" : "git/unstage", payload), staging ? t("stageFile") : t("unstageFile"));
+       await refresh();
+     }
+
+     async function loadDiff() {
+       if (!state.selection) {
+         state.diff = null;
+         paintDiff();
+         return;
+       }
+       const sel = state.selection;
+       const mode = sel.g === "staged" ? "index" : "worktree";
+       const result = await invoke("git/diff", {
+         path: sel.p,
+         mode,
+         ignoreWhitespace: state.ignoreWhitespace,
+         ...(sel.root ? { repoRoot: sel.root } : {}),
+       });
+       if (!result.ok) {
+         state.diff = { text: "", error: result.message };
+         paintDiff();
+         diffHost.append(h("div", { class: "banner error" }, [
+           h("div", { class: "banner-text" }, [
+             h("div", { text: result.message ?? t("diff") }),
+           ]),
+         ]));
+         return;
+       }
+       state.diff = result;
+       paintDiff();
+     }
+
+    function setIgnoreWhitespace(enabled) {
+      state.ignoreWhitespace = enabled;
+      savePrefs();
+      loadDiff().catch(() => {});
+    }
+
+    function openCommitMenu(event) {
+      popup(event.currentTarget, [
+        { label: t("commit"), onSelect: () => commit(false) },
+        { label: t("commitAndPush"), onSelect: () => commit(true) },
+        { type: "separator" },
+        { label: t("amend"), checked: state.amend, onSelect: () => { state.amend = !state.amend; amendBox.checked = state.amend; paintCommit(); } },
+        { label: t("signOff"), checked: state.signoff, onSelect: () => { state.signoff = !state.signoff; signoffBox.checked = state.signoff; } },
+        { type: "separator" },
+        {
+          label: t("rollback"),
+          onSelect: async () => {
+            const paths = (state.repo?.staged ?? []).map((file) => file.path);
+            if (!paths.length) return;
+            const confirmed = await dialog({
+              title: t("rollback"),
+              message: `${t("unstageFile")}?`,
+              confirmLabel: t("rollback"),
+            });
+            if (!confirmed) return;
+            report(await invoke("git/unstage", { paths }), t("unstageFile"));
+            await refresh();
+          },
+        },
+      ]);
+    }
+
+     async function commit(withPush) {
+       if (state.busy || state.syncing) return;
+       const message = state.message.trim();
+       if (!message && !state.amend) {
+         toast(t("commitMessage"), "error");
+         messageInput.focus();
+         return;
+       }
+       // IDEA commits every repository with the same message: submodules first
+       // (their new HEADs become the parent's gitlink updates), the current
+       // repo last. A parent-only `git commit` can never include the 15 files
+       // changed inside `backend` — it only records which commit `backend`
+       // points at.
+       const targets = stagedTargets();
+       if (!state.amend && !targets.length) {
+         toast(t("nothingStaged"), "error");
+         return;
+       }
+       if (!targets.length) targets.push(rootCtx());
+      state.busy = true;
+      state.busyKind = "commit";
+      paintCommit();
+      paintToolbar();
+       let failed = null;
+       let lastResult = null;
+       for (const target of targets) {
+         const payload = { message, amend: state.amend, signoff: state.signoff };
+         if (target.root) payload.repoRoot = target.root;
+         const result = await invoke("git/commit", payload);
+         if (!result.ok) {
+           failed = { target, result };
+           break;
+         }
+         lastResult = { target, result };
+       }
+      if (failed) {
+        state.busy = false;
+        state.busyKind = null;
+        toast(`${failed.target.rk === "." ? "" : `${failed.target.rk}: `}${PIG.errorText(failed.result)}`, "error");
+        paintCommit();
+        paintToolbar();
+        await refresh();
+        return;
+      }
+       if (message) {
+         const remembered = await invoke("git/message-used", { message });
+         state.messages = remembered.prefs?.messages ?? state.messages;
+       }
+       state.message = "";
+       messageInput.value = "";
+       state.amend = false;
+       amendBox.checked = false;
+       if (targets.length > 1) toast(PIG.tf("commitMultipleRepos", { count: targets.length }), "info");
+       else toast(firstLine(lastResult?.result?.stdout) || t("commit"), "info");
+
+      if (withPush) {
+        state.busyKind = "commit-push";
+        paintCommit();
+        // Note: 聚合提交的 Push 把刚才提交的 N 个仓逐个推出去（子模块先、父仓后），单仓失败点名且不挡后续 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+        const pushTargets = targets.map((target) => ({
+          rk: target.rk,
+          root: target.root,
+          setUpstream: !target.branch?.upstream,
+        }));
+        const outcomes = await PIG.pushRepos(pushTargets);
+        const okCount = outcomes.filter((o) => o?.ok).length;
+        for (const outcome of outcomes) {
+          if (!outcome?.ok) {
+            toast(`${outcome.rel && outcome.rel !== "." ? `${outcome.rel}: ` : ""}${PIG.errorText(outcome)}`, "error");
+          }
+        }
+        if (okCount === outcomes.length && outcomes.length > 1) toast(PIG.tf("pushedRepos", { count: okCount }), "info");
+        else if (okCount !== outcomes.length && outcomes.length > 1) toast(PIG.tf("pushPartial", { ok: okCount, total: outcomes.length }), outcomes.length && okCount ? "info" : "error");
+        else if (outcomes.length === 1) report(outcomes[0], t("push"));
+      }
+      state.busy = false;
+      state.busyKind = null;
+      await refresh();
+     }
+
+    function openMessageHistory(event) {
+      if (!state.messages.length) {
+        toast(t("commitHistory"), "info");
+        return;
+      }
+      popup(event.currentTarget, [
+        { type: "label", label: t("commitHistory") },
+        ...state.messages.slice(0, 20).map((message) => ({
+          label: firstLine(message).slice(0, 90),
+          title: message,
+          onSelect: () => {
+            state.message = message;
+            messageInput.value = message;
+            paintCommit();
+            messageInput.focus();
+          },
+        })),
+        { type: "separator" },
+        {
+          label: t("clearAll"),
+          onSelect: async () => {
+            await invoke("git/prefs-set", { ui: { messagesCleared: Date.now() } });
+            state.messages = [];
+          },
+        },
+      ]);
+    }
+
+    // ------------------------------------------------------------- wiring --
+    function savePrefs() {
+      invoke("git/prefs-set", {
+        ui: {
+          commitUnified: state.diffUnified,
+          showWhitespaces: state.showWhitespaces,
+          showLineNumbers: state.showLineNumbers,
+          commitLang: state.commitLang,
+          commitModelKey: state.commitModelKey,
+          groupByDirectory: state.groupByDirectory,
+          compactDirs: state.compactDirs,
+        },
+      }).catch(() => {});
+    }
+
+    // -------------------------------------------------------------- shell --
+    changesWidth.append(changesHeader, changesList);
+    diffColumn.append(diffHeader, diffHost);
+    root.append(toolbar);
+    root.append(h("div", { class: "commit-view" }, [changesWidth, divider, diffColumn]));
+    root.append(h("div", { class: "commit-area" }, [
+      h("div", { class: "commit-message-row" }, [
+        messageInput,
+        h("div", { class: "commit-history" }, [
+          iconButton("clock", t("commitHistory"), openMessageHistory, { size: 15 }),
+        ]),
+      ]),
+      h("div", { class: "commit-actions" }, [
+        h("label", { class: "check" }, [amendBox, t("amend")]),
+        h("label", { class: "check" }, [signoffBox, t("signOff")]),
+        summary,
+        generateGroup,
+        h("span", { class: "spacer" }),
+        h("span", { class: "commit-summary", style: { maxWidth: "40%" }, id: "commit-branch" }),
+        h("div", { class: "split-button" }, [commitButton, commitMenuButton]),
+      ]),
+    ]));
+
+    branchWidget = mountBranchWidget(branchHolder, { onChanged: () => refresh() });
+    /**
+     * Switching repository is a view-wide change, so it drops what the leaving
+     * repository owned *before* the reload starts rather than after it ends: a
+     * hunk button left in the diff pane stays clickable for the length of a
+     * refresh, and a hunk action is a real edit — `discard` writes to the
+     * worktree — so it would land in whichever repository is current by then.
+     */
+    repoWidget = PIG.repoSelector.mount(repoHolder, {
+      onSwitch: () => {
+        forgoRepositoryState();
+        paintAll();
+        refresh().catch(() => {});
+      },
+    });
+
+    PIG.bindSplitter(divider, (delta) => {
+      const total = root.clientWidth || 1;
+      state.changesWidth = Math.max(18, Math.min(75, state.changesWidth + (delta / total) * 100));
+      changesWidth.style.width = `${state.changesWidth}%`;
+    });
+
+    // ------------------------------------------------------------- refresh --
+    /**
+     * Which repository the loaded state belongs to, so a switch can be told
+     * apart from an ordinary refresh: a selection, a filter and a rendered diff
+     * are all repository-relative, and carrying them across would show — and
+     * stage — the wrong file. `undefined` means nothing has been loaded yet.
+     */
+    let loadedRepo;
+
+     /** Drop everything that describes one repository, and only that one. */
+     function forgoRepositoryState() {
+       state.selection = null;
+       state.diff = null;
+       state.filter = "";
+       state.submodules = [];
+       state.subLoading = false;
+       // A commit draft belongs to the repository it was typed against: carrying
+       // the message/amend/signoff across would commit one repo's text in another.
+       state.message = "";
+       state.amend = false;
+       state.signoff = false;
+       messageInput.value = "";
+       amendBox.checked = false;
+       signoffBox.checked = false;
+     }
+    // Overlapping refreshes share one dimming counter so the list stays
+    // dimmed until the last one settles, instead of flashing mid-flight.
+    let refreshDepth = 0;
+    function setRefreshing(on) {
+      refreshDepth = Math.max(0, refreshDepth + (on ? 1 : -1));
+      root.classList.toggle("is-refreshing", refreshDepth > 0);
+    }
+     async function refresh() {
+       setRefreshing(true);
+       try {
+         return await refreshInner();
+       } finally {
+         setRefreshing(false);
+       }
+     }
+     async function refreshInner() {
+       const result = await invoke("git/repo");
+       if (!result.ok) {
+         state.repo = null;
+         state.error = result.message ?? t("notARepository");
+         // Nothing is loaded, so nothing repository-relative may stay on screen
+         // — and the next repository to load must not be mistaken for the same
+         // one continuing.
+         forgoRepositoryState();
+         loadedRepo = undefined;
+         paintAll();
+         return state.repo ?? {};
+       }
+       const repoRoot = result.repo?.root ?? null;
+       if (loadedRepo !== undefined && repoRoot !== loadedRepo) forgoRepositoryState();
+       loadedRepo = repoRoot;
+       state.repo = result;
+       state.error = null;
+       // Drop a selection whose file left the change lists (root or submodule).
+       if (state.selection) {
+         const sel = state.selection;
+         const list = sel.rk === "." || !sel.rk
+           ? (result[sel.g] ?? [])
+           : ((state.submodules ?? []).find((entry) => entry.rel === sel.rk)?.status?.[sel.g] ?? []);
+         if (!list.some((file) => file.path === sel.p)) state.selection = null;
+       }
+       // IDEA-like aggregation: the parent only prints one gitlink line per
+       // submodule, so fetch dirty submodules' own statuses for the inline
+       // sections. Paint first (fast), then fill the sections in.
+       paintAll();
+      const hasSubmodule = result.siblingMode === true
+        || [...(result.staged ?? []), ...(result.unstaged ?? [])].some((file) => file?.submodule)
+        // An embedded (non-submodule) repo shows as one untracked dir entry;
+        // Git never descends into it, so its inner changes need the same fetch.
+        || (result.untracked ?? []).some((file) => String(file?.path ?? "").endsWith("/"));
+      if (hasSubmodule) {
+        state.subLoading = true;
+         paintChangesHeader();
+         try {
+           const subs = await invoke("git/submodule-statuses");
+           state.submodules = subs?.ok ? (subs.submodules ?? []) : [];
+         } catch {
+           state.submodules = [];
+         }
+         state.subLoading = false;
+       } else {
+         state.submodules = [];
+         state.subLoading = false;
+       }
+       if (!state.selection) {
+         const firstRoot = ["conflicted", "unstaged", "staged", "untracked"]
+           .flatMap((group) => (result[group] ?? []).map((file) => ({ rk: ".", g: group, p: file.path, root: result.repo?.root ?? null })))[0];
+         state.selection = firstRoot ?? null;
+         if (!state.selection) {
+           for (const entry of state.submodules ?? []) {
+             const hit = ["conflicted", "unstaged", "staged", "untracked"]
+               .flatMap((group) => (entry.status?.[group] ?? []).map((file) => ({ rk: entry.rel, g: group, p: file.path, root: entry.root })))[0];
+             if (hit) {
+               state.selection = hit;
+               break;
+             }
+           }
+         }
+       }
+       paintAll();
+       await loadDiff();
+       return result;
+     }
+     async function loadPrefs() {
+       const result = await invoke("git/prefs");
+       if (!result.ok) return;
+      state.messages = result.prefs?.messages ?? [];
+      const ui = result.prefs?.ui ?? {};
+      if (typeof ui.commitUnified === "boolean") state.diffUnified = ui.commitUnified;
+      if (typeof ui.showWhitespaces === "boolean") state.showWhitespaces = ui.showWhitespaces;
+      if (typeof ui.showLineNumbers === "boolean") state.showLineNumbers = ui.showLineNumbers;
+      if (typeof ui.commitLang === "string") state.commitLang = ui.commitLang;
+      if (typeof ui.commitModelKey === "string") state.commitModelKey = ui.commitModelKey;
+      if (typeof ui.groupByDirectory === "boolean") state.groupByDirectory = ui.groupByDirectory;
+      if (typeof ui.compactDirs === "boolean") state.compactDirs = ui.compactDirs;
+    }
+
+    /**
+     * The repository list, read when it can actually have changed — mounting,
+     * a project switch, and opening the chip's menu (which re-reads its own) —
+     * rather than on every refresh. Finding the nested repositories walks the
+     * tree, and a refresh happens after every stage, commit and branch action.
+     */
+    async function loadRepositories() {
+      const result = await invoke("git/repos");
+      state.allRepos = result?.ok ? (result.repos ?? []) : [];
+      repoWidget.update(result);
+    }
+
+    (async () => {
+      try {
+        await loadPrefs();
+        await loadRepositories();
+        await refresh();
+      } catch (error) {
+        // Without this the view would fail silently on first paint.
+        toast(`IDEA Git: ${error?.message ?? error}`, "error");
+      }
+    })();
+
+    window.addEventListener("pig:appearance", () => paintAll());
+    PIG.watchWorkspace(() => {
+      // A project switch invalidates the list as much as the repository.
+      loadRepositories().then(() => refresh()).catch(() => {});
+    });
+
+    PIG.bindShortcuts([
+      { spec: KEYS.refresh, run: () => { refresh().catch(() => {}); } },
+      { spec: KEYS.refreshAlt, run: () => { refresh().catch(() => {}); } },
+      { spec: KEYS.stage, run: () => { if (canStageSelected()) stageSelected(true); } },
+      { spec: KEYS.rollback, run: () => { if (state.selection) rollbackSelected(); } },
+      { spec: KEYS.showDiff, run: () => { loadDiff().catch(() => {}); } },
+      { spec: KEYS.commitMessage, run: () => messageInput.focus() },
+      // The app's own accelerators cannot reach this webContents; say so.
+      PIG.appShortcutHintBinding(),
+    ]);
+
+    return { refresh, focusMessage: () => messageInput.focus() };
+  }
+
+  PIG.branchWidget = { mount: mountBranchWidget };
+  PIG.commitView = { mount };
+  PIG.statusColor = statusColor;
+})(window.PIG || (window.PIG = {}));
+
+/* ================= src/git-view.js ================= */
+/**
+ * The Git tool window — IDEA's `Alt+9` surface, holding the Log and Console
+ * tabs. The Log keeps IDEA's panes: branches on the left, commits in the
+ * centre, and the changed files plus commit details below the list.
+ *
+ * IDEA opens a commit's diff in the editor. There is no editor here, so the
+ * diff opens in an overlay inside the tool window instead — the same content,
+ * the same wording, one click away.
+ */
+(function (PIG) {
+  "use strict";
+
+  const { h, t, invoke, icon, iconButton, toast, popup, dialog } = PIG;
+
+  /**
+   * IDEA's Log shortcuts, in the form this surface can honour. The tooltip is
+   * rendered from the same spec that is bound, so the two cannot drift apart.
+   */
+  const KEYS = {
+    refresh: { key: "r", mod: true },
+    refreshAlt: { key: "F5", ctrl: true },
+    find: { key: "f", mod: true },
+    showDiff: { key: "d", mod: true },
+  };
+
+  function tip(key, spec) {
+    return `${t(key)} (${PIG.formatShortcut(spec)})`;
+  }
+
+  const ROW_HEIGHT = 34;
+  const LANE_WIDTH = 14;
+  // TODO: LANE_COLORS theming is out of scope — these fixed hues stay as-is;
+  // moving them into theme.css variables would touch every graph painter.
+  const LANE_COLORS = ["#4a86c8", "#3fb28a", "#c9a227", "#b06bc0", "#d1743a", "#6aa84f", "#c05555", "#5f7fd4"];
+  const SVG_NS = "http://www.w3.org/2000/svg";
+
+  function svg(tag, attributes) {
+    const node = document.createElementNS(SVG_NS, tag);
+    for (const [key, value] of Object.entries(attributes)) node.setAttribute(key, String(value));
+    return node;
+  }
+
+  /**
+   * Assign each commit a lane. A commit takes the lane already reserved for it
+   * (the one a child pushed down), otherwise a free lane; its first parent
+   * inherits the lane and extra parents take their own.
+   */
+  function assignLanes(commits) {
+    const lanes = [];
+    const rows = [];
+    for (const commit of commits) {
+      const before = lanes.slice();
+      let lane = lanes.indexOf(commit.hash);
+      if (lane < 0) {
+        lane = lanes.indexOf(null);
+        if (lane < 0) {
+          lane = lanes.length;
+          lanes.push(null);
+        }
+      }
+      lanes[lane] = null;
+      const parents = commit.parents ?? [];
+      if (parents.length) {
+        lanes[lane] = parents[0];
+        for (let index = 1; index < parents.length; index += 1) {
+          if (lanes.includes(parents[index])) continue;
+          const free = lanes.indexOf(null);
+          if (free < 0) lanes.push(parents[index]);
+          else lanes[free] = parents[index];
+        }
+      }
+      while (lanes.length && lanes[lanes.length - 1] === null) lanes.pop();
+      rows.push({ commit, lane, before, after: lanes.slice() });
+    }
+    const laneCount = rows.reduce(
+      (max, row) => Math.max(max, row.before.length, row.after.length, row.lane + 1),
+      1,
+    );
+    const rowByHash = new Map();
+    rows.forEach((row, index) => rowByHash.set(row.commit.hash, { index, lane: row.lane }));
+    return { rows, rowByHash, width: Math.max(56, laneCount * LANE_WIDTH + 14) };
+  }
+
+  /** IDEA colours the tip by what the commit *is*, not by lane. */
+  function dotColor(commit, lane) {
+    const refs = commit.refs ?? [];
+    if (refs.some((ref) => ref.head)) return "var(--graph-head)";
+    if (refs.some((ref) => ref.kind === "branch")) return "var(--graph-local)";
+    if (refs.some((ref) => ref.kind === "remote")) return "var(--graph-remote)";
+    if (refs.some((ref) => ref.kind === "tag")) return "var(--graph-tag)";
+    return LANE_COLORS[lane % LANE_COLORS.length];
+  }
+
+  function graphNode(row, layout) {
+    const { rowByHash } = layout;
+    const group = svg("svg", { width: layout.width, height: ROW_HEIGHT, class: "log-graph-svg" });
+    const x = (lane) => 10 + lane * LANE_WIDTH;
+    const midY = ROW_HEIGHT / 2;
+
+    const laneIndices = new Set([row.lane]);
+    row.before.forEach((value, index) => { if (value) laneIndices.add(index); });
+    row.after.forEach((value, index) => { if (value) laneIndices.add(index); });
+
+    for (const lane of laneIndices) {
+      const arrives = Boolean(row.before[lane]);
+      const continues = Boolean(row.after[lane]);
+      if (!arrives && !continues) continue;
+      const top = arrives ? 0 : midY;
+      const bottom = continues ? ROW_HEIGHT : midY;
+      if (bottom <= top) continue;
+      group.append(svg("line", {
+        x1: x(lane), y1: top, x2: x(lane), y2: bottom,
+        stroke: LANE_COLORS[lane % LANE_COLORS.length], "stroke-width": 1.6,
+      }));
+    }
+
+    for (const parent of row.commit.parents ?? []) {
+      const target = rowByHash.get(parent);
+      if (!target) continue;
+      if (target.lane === row.lane) {
+        group.append(svg("line", {
+          x1: x(row.lane), y1: midY, x2: x(row.lane), y2: ROW_HEIGHT,
+          stroke: LANE_COLORS[row.lane % LANE_COLORS.length], "stroke-width": 1.6,
+        }));
+        continue;
+      }
+      group.append(svg("path", {
+        d: `M ${x(row.lane)} ${midY} C ${x(row.lane)} ${midY + 9}, ${x(target.lane)} ${ROW_HEIGHT - 9}, ${x(target.lane)} ${ROW_HEIGHT}`,
+        fill: "none",
+        stroke: LANE_COLORS[target.lane % LANE_COLORS.length],
+        "stroke-width": 1.6,
+      }));
+    }
+
+    group.append(svg("circle", {
+      cx: x(row.lane), cy: midY, r: 3.6,
+      fill: dotColor(row.commit, row.lane),
+      stroke: "var(--panel-bg)", "stroke-width": 1.2,
+    }));
+    return group;
+  }
+
+  function refBadges(commit) {
+    return (commit.refs ?? []).map((ref) => {
+      const kind = ref.head ? "head" : ref.kind === "tag" ? "tag" : ref.kind === "remote" ? "remote" : "local";
+      return h("span", { class: `badge ${kind}`, text: ref.name, title: ref.name });
+    });
+  }
+
+  /**
+   * Only one diff overlay may be open at a time. Every `openDiffOverlay` call
+   * used to append another `position: absolute; inset: 0` layer to <body>, and
+   * each layer carried a full diff worth of DOM — so the cost of opening the
+   * next one grew with the number already left open, which is the shape a
+   * steadily climbing renderer CPU takes.
+   */
+  let activeDiffOverlay = null;
+
+  /** Diff overlay: the stand-in for IDEA's "diff opens in the editor". */
+  /**
+   * A commit's diff, in IDEA's shape: a header naming the file, the view
+   * controls, then the diff itself. It replaces the tool window's content
+   * because there is no editor tab to open it into.
+   */
+  function openDiffOverlay(title, text, repo) {
+    // Disposing the previous overlay also drops its keydown listener; leaving
+    // it behind would leak one document-level handler per opened diff.
+    if (activeDiffOverlay) activeDiffOverlay();
+
+    const view = { unified: true, showWhitespaces: false, showLineNumbers: true };
+    const body = h("div", { class: "diff" });
+    const header = h("div", { class: "toolbar diff-overlay-header" });
+    const overlay = h("div", { class: "diff-overlay", role: "dialog", "aria-label": title });
+
+    const close = () => {
+      if (activeDiffOverlay === close) activeDiffOverlay = null;
+      overlay.remove();
+      document.removeEventListener("keydown", onKey, true);
+    };
+    const onKey = (event) => {
+      if (event.key === "Escape") {
+        event.stopPropagation();
+        close();
+      }
+    };
+
+    function paintDiff() {
+      PIG.diff.render(body, {
+        text,
+        unified: view.unified,
+        showWhitespaces: view.showWhitespaces,
+        showLineNumbers: view.showLineNumbers,
+        showFileHeader: true,
+        // A committed change is not something to stage or discard.
+        stageable: false,
+        hunkActions: [],
+      });
+    }
+
+    function paintHeader() {
+      PIG.clear(header);
+      const { name, directory } = PIG.splitPath(title);
+      header.append(icon("file", 14));
+      header.append(h("span", { class: "diff-overlay-title", text: name }));
+      if (directory) header.append(h("span", { class: "diff-overlay-path", text: directory }));
+      header.append(h("div", { class: "toolbar-spacer" }));
+      header.append(iconButton("columns", t("sideBySide") + " / " + t("unified"), () => {
+        view.unified = !view.unified;
+        paintDiff();
+      }, { size: 14 }));
+      header.append(iconButton("eye", t("showWhitespaces"), () => {
+        view.showWhitespaces = !view.showWhitespaces;
+        paintDiff();
+      }, { size: 14 }));
+      header.append(iconButton("list", t("showLineNumbers"), () => {
+        view.showLineNumbers = !view.showLineNumbers;
+        paintDiff();
+      }, { size: 14 }));
+      header.append(iconButton("close", `${t("close")} (Esc)`, close, { size: 14 }));
+    }
+
+    overlay.append(header, body);
+    document.body.append(overlay);
+    paintHeader();
+    paintDiff();
+    document.addEventListener("keydown", onKey, true);
+    activeDiffOverlay = close;
+  }
+
+  function mountLog(root) {
+    const state = {
+      repo: null,
+      commits: [],
+      error: null,
+      repoPath: null,
+      branches: [],
+      tags: [],
+      remotes: [],
+      stashes: [],
+      selection: null,
+      changedFiles: [],
+      details: null,
+      search: "",
+      branchFilter: "",
+      pathFilter: "",
+      userFilter: "",
+      sinceFilter: "",
+      collapsed: Object.create(null),
+      showGraph: true,
+      firstParent: false,
+      noMerges: false,
+      topo: false,
+      showBranches: true,
+      showDetails: true,
+      detailHeight: 46,
+      // What the toolbar is waiting on (null | "refresh" | "push" | "fetch" | "pull"): the active
+      // button spins, the others go disabled.
+      syncing: null,
+    };
+    // Path-filter reloads are debounced: each keystroke is cheap locally but a
+    // `git log` process is not.
+    let pathTimer = null;
+
+    const toolbar = h("div", { class: "toolbar" });
+    let searchButton = null;
+    // The repository chip first, then the branch: which repository, and only
+    // then which branch of it.
+    const repoHolder = h("div", { style: { display: "contents" } });
+    /**
+     * A switch drops what the leaving repository owned *before* the reload
+     * starts: the commit list and its context menus stay live during a refresh,
+     * and they name revisions of a repository the window has already left.
+     */
+    const repoWidget = PIG.repoSelector.mount(repoHolder, {
+      onSwitch: () => {
+        forgoRepositoryState();
+        paintList();
+        paintDetail();
+        refresh().catch(() => {});
+      },
+    });
+    const branchHolder = h("div", { style: { display: "contents" } });
+    const branchWidget = PIG.branchWidget.mount(branchHolder, { onChanged: () => refresh() });
+    const listHost = h("div", { class: "scroll", style: { flex: "1 1 auto" } });
+    const branchesHost = h("div", { class: "scroll" });
+    const branchesPane = h("div", { class: "pane branches-pane column" });
+    const changedHost = h("div", { class: "scroll list changed-files" });
+    const detailsHost = h("div", { class: "commit-details details-pane" });
+    const detailPane = h("div", { class: "log-detail" });
+    const commitsPane = h("div", { class: "commits-pane" });
+    const splitter = h("div", { class: "splitter-y" });
+    const panes = h("div", { class: "log-panes" });
+
+    /** 按钮文案："" → 全部，"me" → 只看我的，具名 → 名字本身。 */
+    function userFilterLabel() {
+      if (state.userFilter === "me") return t("mineOnly");
+      return state.userFilter || t("all");
+    }
+
+    function userFilterButton() {
+      const button = PIG.textButton(
+        `${t("filterByUser")}: ${userFilterLabel()}`,
+        state.userFilter && state.userFilter !== "me"
+          ? `${t("filterByUser")}: ${state.userFilter}`
+          : t("filterByUser"),
+        (event) => openUserFilterMenu(event.currentTarget),
+        { class: "bordered user-filter" },
+      );
+      // 选中的名字可能很长：截断保住工具栏，其余分支/日期按钮不动。
+      button.style.maxWidth = "240px";
+      button.style.overflow = "hidden";
+      button.style.textOverflow = "ellipsis";
+      button.style.whiteSpace = "nowrap";
+      return button;
+    }
+
+    /**
+     * 切过滤先重画工具栏再拉日志：按钮文案本身就是选中态的反馈，
+     * 只调 loadLog 的话文案会停在旧值直到下次整刷（分支/日期按钮同病，
+     * 但那是既有行为不在本次范围）。
+     */
+    function applyUserFilter(value) {
+      state.userFilter = value;
+      paintToolbar();
+      loadLog();
+    }
+
+
+    /**
+     * IDEA 式的提交者菜单：全部 / 只看我的 / 最近提交者（带提交数）/ 手输。
+     * 名单来自 `git/authors`（近 2000 条提交聚合，取前 20）；手输按名字或
+     * 邮箱走服务端 `--author` 过滤，回车即用，名单之外的人也能滤。
+     */
+    async function openUserFilterMenu(anchor) {
+      let authors = [];
+      try {
+        const result = await invoke("git/authors", { limit: 20 });
+        if (result?.ok) authors = result.authors ?? [];
+      } catch {
+        authors = [];
+      }
+      // 工具栏每次刷新都会重建按钮，await 期间按钮可能已被替换——按标记类
+      // 找回活的按钮，找不到才放弃（下次点击自然有活锚点）。
+      const live = anchor?.isConnected ? anchor : toolbar.querySelector(".user-filter");
+      if (!live) return;
+      const listed = authors.filter((entry) => entry?.name);
+      const items = [
+        { type: "label", label: t("filterByUser") },
+        { label: t("all"), checked: !state.userFilter, onSelect: () => applyUserFilter("") },
+        {
+          label: t("mineOnly"),
+          title: state.repo?.user ? `${t("mineOnly")} — ${state.repo.user}` : t("mineOnly"),
+          checked: state.userFilter === "me",
+          onSelect: () => applyUserFilter("me"),
+        },
+      ];
+      if (listed.length || (state.userFilter && state.userFilter !== "me")) {
+        items.push({ type: "separator" }, { type: "label", label: t("recentUsers") });
+        // 当前手输值不在名单里时单独给一行带勾，避免“选了却看不见选中态”。
+        if (state.userFilter && state.userFilter !== "me" && !listed.some((entry) => entry.name === state.userFilter)) {
+          items.push({ label: state.userFilter, checked: true, onSelect: () => applyUserFilter(state.userFilter) });
+        }
+        for (const entry of listed) {
+          items.push({
+            label: entry.name,
+            shortcut: entry.count > 1 ? `${entry.count}` : undefined,
+            title: entry.email ? `${entry.name} <${entry.email}>` : entry.name,
+            checked: state.userFilter === entry.name,
+            onSelect: () => applyUserFilter(entry.name),
+          });
+        }
+      }
+      const field = h("input", {
+        type: "text",
+        value: state.userFilter && state.userFilter !== "me" ? state.userFilter : "",
+        placeholder: t("filterUserPlaceholder"),
+      });
+      field.addEventListener("keydown", (keyEvent) => {
+        if (keyEvent.key !== "Enter") return;
+        PIG.closePopup();
+        applyUserFilter(field.value.trim());
+      });
+      items.push({ type: "separator" }, { type: "custom", node: field });
+      try {
+        popup(live, items, { focus: true });
+      } catch {
+        // 解析与打开之间工具栏又重建了：这次放弃，下次点击即是活锚点。
+      }
+    }
+
+    function paintToolbar() {
+      PIG.clear(toolbar);
+      toolbar.append(repoHolder);
+      toolbar.append(branchHolder);
+      toolbar.append(h("div", { class: "toolbar-separator" }));
+      const syncDisabled = Boolean(state.syncing);
+      const syncButton = (name, title, kind, onClick) => {
+        const button = iconButton(name, title, onClick, { disabled: syncDisabled });
+        if (state.syncing === kind) {
+          button.classList.add("busy");
+          button.append(PIG.spinner(false));
+        }
+        return button;
+      };
+      toolbar.append(syncButton("refresh", tip("refresh", KEYS.refresh), "refresh", async () => {
+        if (state.syncing) return;
+        state.syncing = "refresh";
+        paintToolbar();
+        try {
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("push", t("push"), "push", async () => {
+        if (state.syncing) return;
+        // Note: Git 视图的 Push 同样走多仓对话框，单仓时对话框内只有一行 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+        state.syncing = "push";
+        paintToolbar();
+        try {
+          await PIG.openPushDialog({ onPushed: async () => { await refresh(); } });
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("fetch", t("fetch"), "fetch", async () => {
+        if (state.syncing) return;
+        state.syncing = "fetch";
+        paintToolbar();
+        try {
+          PIG.reportSync(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch")), t("fetch"));
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("arrowDown", t("pull"), "pull", async () => {
+        if (state.syncing) return;
+        state.syncing = "pull";
+        paintToolbar();
+        try {
+          const result = await PIG.runWithPill(t("pulling"), () => invoke("git/pull"));
+          PIG.reportSync(result, t("pull"));
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(iconButton("arrowUp", t("goToHead"), (event) => {
+        const head = state.repo?.branch?.oid;
+        if (!head) return;
+        select(head).then(() => {
+          const node = listHost.querySelector(".log-row.current-branch");
+          node?.scrollIntoView({ block: "center" });
+          node?.focus();
+        }).catch(() => {});
+      }));
+      // Held in a variable so the Find shortcut can open the same popup.
+      searchButton = iconButton("search", tip("search", KEYS.find), (event) => {
+        const field = h("input", { type: "text", value: state.search, placeholder: t("search") });
+        field.addEventListener("input", () => { state.search = field.value; paintList(); });
+        popup(event.currentTarget, [{ type: "custom", node: field }], { focus: true });
+      });
+      toolbar.append(searchButton);
+      toolbar.append(iconButton("branch", state.branchFilter || t("allBranches"), (event) => {
+        popup(event.currentTarget, [
+          { type: "label", label: t("filterByBranch") },
+          { label: t("allBranches"), checked: !state.branchFilter, onSelect: () => { state.branchFilter = ""; loadLog(); } },
+          ...state.branches.filter((branch) => !branch.remote).map((branch) => ({
+            label: branch.name,
+            checked: state.branchFilter === branch.name,
+            onSelect: () => { state.branchFilter = branch.name; loadLog(); },
+          })),
+        ]);
+      }));
+      // Note: 提交者过滤抄 IDEA 的三段式——全部 / 只看我的 / 最近提交者名单 + 手输（名字或邮箱回车即滤），"me" 按仓库自身 user.name 解析所以跟仓走，具名作者是仓相关的、切仓时丢掉 — 见 .agents/notes/implemented/feature/2026-09-14-git-log-user-filter.md
+      toolbar.append(userFilterButton());
+      toolbar.append(PIG.textButton(
+        `${t("date")}: ${state.sinceFilter === "day" ? t("lastDay") : state.sinceFilter === "week" ? t("lastWeek") : state.sinceFilter === "month" ? t("lastMonth") : t("anyTime")}`,
+        t("date"),
+        (event) => {
+          popup(event.currentTarget, [
+            { type: "label", label: t("date") },
+            { label: t("anyTime"), checked: !state.sinceFilter, onSelect: () => { state.sinceFilter = ""; loadLog(); } },
+            { label: t("lastDay"), checked: state.sinceFilter === "day", onSelect: () => { state.sinceFilter = "day"; loadLog(); } },
+            { label: t("lastWeek"), checked: state.sinceFilter === "week", onSelect: () => { state.sinceFilter = "week"; loadLog(); } },
+            { label: t("lastMonth"), checked: state.sinceFilter === "month", onSelect: () => { state.sinceFilter = "month"; loadLog(); } },
+          ]);
+        },
+      ));
+      toolbar.append(iconButton("file", state.pathFilter || t("filterByPaths"), (event) => {
+        const field = h("input", { type: "text", value: state.pathFilter, placeholder: "src/…" });
+        field.addEventListener("input", () => {
+          state.pathFilter = field.value;
+          if (pathTimer !== null) window.clearTimeout(pathTimer);
+          // Note: 路径过滤走服务端 `git log -- <path>` 而非本地隐藏行——本地过滤会把有路径的提交也藏掉，且与分支/用户过滤语义不一致 — 见 .agents/notes/implemented/feature/2026-09-14-git-operations-parity.md
+          pathTimer = window.setTimeout(() => { pathTimer = null; loadLog(); }, 450);
+        });
+        field.addEventListener("keydown", (keyEvent) => {
+          if (keyEvent.key === "Enter") {
+            if (pathTimer !== null) { window.clearTimeout(pathTimer); pathTimer = null; }
+            loadLog();
+          }
+        });
+        popup(event.currentTarget, [
+          { type: "label", label: t("filterByPaths") },
+          { type: "custom", node: field },
+        ], { focus: true });
+      }));
+      toolbar.append(iconButton("gear", t("graphOptions"), (event) => {
+        popup(event.currentTarget, [
+          { type: "label", label: t("graphOptions") },
+          { label: t("byCommitDate"), checked: !state.topo, onSelect: () => { state.topo = false; loadLog(); } },
+          { label: t("topologically"), checked: state.topo, onSelect: () => { state.topo = true; loadLog(); } },
+          { type: "separator" },
+          { label: t("showFirstParent"), checked: state.firstParent, onSelect: () => { state.firstParent = !state.firstParent; loadLog(); } },
+          { label: t("noMerges"), checked: state.noMerges, onSelect: () => { state.noMerges = !state.noMerges; loadLog(); } },
+          { type: "separator" },
+          { label: t("showGraph"), checked: state.showGraph, onSelect: () => { state.showGraph = !state.showGraph; paintList(); } },
+          { label: t("branches"), checked: state.showBranches, onSelect: () => { state.showBranches = !state.showBranches; paintPanes(); } },
+          { label: t("showDetails"), checked: state.showDetails, onSelect: () => { state.showDetails = !state.showDetails; paintPanes(); } },
+        ]);
+      }));
+      toolbar.append(h("div", { class: "toolbar-spacer" }));
+      toolbar.append(h("div", { class: "toolbar-spacer" }));
+      // Name whichever folder is open: the repository root when there is one,
+      // otherwise the workspace, so the empty state has something to point at.
+      const folder = state.repo?.repo?.name
+        ?? (state.repoPath ? state.repoPath.split(/[/\\]/).filter(Boolean).at(-1) : "");
+      toolbar.append(h("span", {
+        style: { fontSize: "11px", color: "var(--fg-muted)" },
+        title: state.repoPath ?? "",
+        text: folder ?? "",
+      }));
+    }
+
+    function visibleCommits() {
+      const search = state.search.trim().toLowerCase();
+      return state.commits.filter((commit) => {
+        if (search && !`${commit.subject} ${commit.short} ${commit.author}`.toLowerCase().includes(search)) return false;
+        return true;
+      });
+    }
+
+    function paintList() {
+      PIG.clear(listHost);
+      // A workspace that is not a repository (or a missing git binary) has to
+      // say so: an empty list reads as "this tool is broken" instead of
+      // "there is nothing here to show".
+      if (state.error) {
+        listHost.append(h("div", { class: "empty-state" }, [
+          h("div", { class: "headline", text: t("notARepository") }),
+          h("code", { text: state.repoPath ?? "" }),
+          h("div", { class: "muted", text: t("repositoryHint") }),
+        ]));
+        return;
+      }
+      const commits = visibleCommits();
+      if (!commits.length) {
+        listHost.append(h("div", { class: "empty-state" }, [
+          h("div", { class: "headline", text: t("noCommits") }),
+        ]));
+        return;
+      }
+      const layout = assignLanes(commits);
+      const headOid = state.repo?.branch?.oid;
+      const me = state.repo?.user;
+
+      layout.rows.forEach((row, index) => {
+        const commit = row.commit;
+        const isHead = Boolean(headOid) && commit.hash === headOid;
+        const selected = state.selection === commit.hash;
+        const node = h("div", {
+          class: `log-row${isHead ? " current-branch" : ""}${me && commit.author === me ? " mine" : ""}`,
+          role: "option",
+          tabindex: "0",
+          "aria-selected": selected ? "true" : "false",
+          style: { "--graph-width": state.showGraph ? `${layout.width}px` : "6px" },
+          onclick: () => select(commit.hash),
+          oncontextmenu: (event) => {
+            event.preventDefault();
+            select(commit.hash);
+            commitContextMenu(event.currentTarget, commit);
+          },
+        }, [
+          state.showGraph ? h("div", { class: "log-graph" }, [graphNode(row, layout)]) : h("div"),
+          h("div", { class: "log-body" }, [
+            h("div", { class: "log-subject", title: commit.subject, text: commit.subject }),
+            h("div", { class: "log-meta-line" }, [
+              ...refBadges(commit),
+              h("span", { class: "log-author", text: commit.author }),
+              h("span", { class: "log-date", text: PIG.relativeTime(commit.timestamp) }),
+              h("span", { class: "log-hash", text: commit.short }),
+            ]),
+          ]),
+        ]);
+
+        node.addEventListener("keydown", (event) => {
+          const move = (target) => {
+            const next = layout.rows[target];
+            if (!next) return;
+            select(next.commit.hash);
+            listHost.children[target]?.focus();
+          };
+          if (event.key === "Enter" || event.key === " ") {
+            event.preventDefault();
+            select(commit.hash);
+          }
+          if (event.key === "ArrowDown") { event.preventDefault(); move(index + 1); }
+          if (event.key === "ArrowUp") { event.preventDefault(); move(index - 1); }
+        });
+        listHost.append(node);
+      });
+    }
+
+    function paintBranches() {
+      PIG.clear(branchesHost);
+      if (!state.showBranches) return;
+      paintHeadRow();
+      paintBranchGroup(t("localBranches"), state.branches.filter((branch) => !branch.remote), "local");
+      paintBranchGroup(t("remoteBranches"), state.branches.filter((branch) => branch.remote), "remote");
+      paintTagGroup();
+      paintRemoteGroup();
+      paintStashGroup();
+    }
+
+    /** IDEA pins HEAD above Local — the revision the window is standing on. */
+    function paintHeadRow() {
+      const branch = state.repo?.branch;
+      if (!branch) return;
+      const name = branch.head ?? (branch.detached ? `detached @ ${String(branch.oid ?? "").slice(0, 8)}` : t("head"));
+      branchesHost.append(h("div", {
+        class: "tree-row",
+        tabindex: "0",
+        title: `${t("head")}: ${name}`,
+        onclick: () => {
+          if (branch.oid) select(branch.oid).catch(() => {});
+        },
+        oncontextmenu: (event) => {
+          event.preventDefault();
+          const head = state.commits.find((commit) => commit.hash === branch.oid);
+          if (head) commitContextMenu(event.currentTarget, head);
+        },
+      }, [
+        h("span", { class: "status-cell", style: { color: "var(--graph-head)" }, text: "◆" }),
+        h("span", { class: "name", text: `HEAD (${name})` }),
+      ]));
+    }
+
+    /** IDEA folds `feature/*` into one expandable node — same here, per group. */
+    function folderOf(remote, name) {
+      const parts = String(name).split("/");
+      if (parts.length < 2) return "";
+      return remote ? parts[0] : parts.slice(0, -1).join("/");
+    }
+
+    function leafOf(remote, name) {
+      const parts = String(name).split("/");
+      if (parts.length < 2) return name;
+      return remote ? parts.slice(1).join("/") : parts[parts.length - 1];
+    }
+
+    function paintBranchGroup(label, items, key) {
+      if (!items.length) return;
+      branchesHost.append(h("div", { class: "group-header" }, [
+        h("span", { text: label }),
+        h("span", { class: "count", text: `${items.length}` }),
+      ]));
+      const folders = new Map();
+      const loose = [];
+      for (const branch of items) {
+        const folder = folderOf(branch.remote, branch.name);
+        if (folder) {
+          if (!folders.has(folder)) folders.set(folder, []);
+          folders.get(folder).push(branch);
+        } else {
+          loose.push(branch);
+        }
+      }
+      for (const folder of [...folders.keys()].sort((a, b) => a.localeCompare(b))) {
+        const id = `${key}:${folder}`;
+        const collapsed = Boolean(state.collapsed[id]);
+        const rows = folders.get(folder);
+        const header = h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: folder,
+          onclick: () => { state.collapsed[id] = !state.collapsed[id]; paintBranches(); },
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          icon(collapsed ? "chevronRight" : "chevronDown", 12),
+          icon("folder", 13),
+          h("span", { class: "name", text: folder }),
+          h("span", { class: "count", text: `${rows.length}` }),
+        ]);
+        header.addEventListener("keydown", (event) => {
+          if (event.key === "Enter" || event.key === " ") {
+            event.preventDefault();
+            state.collapsed[id] = !state.collapsed[id];
+            paintBranches();
+          }
+        });
+        branchesHost.append(header);
+        if (collapsed) continue;
+        for (const branch of rows) branchesHost.append(branchRow(branch, leafOf(branch.remote, branch.name), 24));
+      }
+      for (const branch of loose) branchesHost.append(branchRow(branch, branch.name, 8));
+    }
+
+    function branchRow(branch, leaf, indent) {
+      const row = h("div", {
+        class: "tree-row",
+        tabindex: "0",
+        title: `${branch.name}${branch.upstream ? ` → ${branch.upstream}` : ""}${branch.subject ? `\n${branch.subject}` : ""}`,
+        onclick: () => checkout(branch),
+        oncontextmenu: (event) => {
+          event.preventDefault();
+          popup(event.currentTarget, branchActions(branch));
+        },
+      }, [
+        h("span", { class: "indent", style: { width: `${indent}px` } }),
+        branch.current
+          ? h("span", { class: "status-cell", style: { color: "var(--graph-head)" }, text: "●" })
+          : h("span", { class: "indent", style: { width: "12px" } }),
+        h("span", { class: "name", text: leaf, title: branch.name }),
+      ]);
+      row.addEventListener("keydown", (event) => {
+        if (event.key === "Enter" || event.key === " ") {
+          event.preventDefault();
+          checkout(branch);
+        }
+      });
+      return row;
+    }
+
+    function paintTagGroup() {
+      if (!state.tags.length) return;
+      branchesHost.append(h("div", { class: "group-header" }, [
+        h("span", { text: t("tags") }),
+        h("span", { class: "count", text: `${state.tags.length}` }),
+      ]));
+      for (const tag of state.tags) {
+        const active = state.branchFilter === tag.name;
+        const row = h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: `${tag.name}${tag.subject ? `\n${tag.subject}` : ""}`,
+          onclick: () => {
+            state.branchFilter = active ? "" : tag.name;
+            loadLog();
+          },
+          oncontextmenu: (event) => {
+            event.preventDefault();
+            popup(event.currentTarget, tagActions(tag));
+          },
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          active
+            ? h("span", { class: "status-cell", style: { color: "var(--graph-head)" }, text: "●" })
+            : icon("tag", 12),
+          h("span", { class: "name", text: tag.name }),
+          tag.short ? h("span", { class: "path", text: tag.short }) : null,
+        ]);
+        branchesHost.append(row);
+      }
+    }
+
+    function paintRemoteGroup() {
+      if (!state.remotes.length) return;
+      branchesHost.append(h("div", { class: "group-header" }, [
+        h("span", { text: t("remotes") }),
+        h("span", { class: "count", text: `${state.remotes.length}` }),
+      ]));
+      for (const remote of state.remotes) {
+        const url = remote.fetch ?? remote.push ?? "";
+        const row = h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: url || remote.name,
+          onclick: (event) => popup(event.currentTarget, remoteActions(remote)),
+          oncontextmenu: (event) => {
+            event.preventDefault();
+            popup(event.currentTarget, remoteActions(remote));
+          },
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          icon("branch", 12),
+          h("span", { class: "name", text: remote.name }),
+          url ? h("span", { class: "path", text: url }) : null,
+        ]);
+        branchesHost.append(row);
+      }
+    }
+
+    function paintStashGroup() {
+      if (!state.stashes.length) return;
+      branchesHost.append(h("div", { class: "group-header" }, [
+        h("span", { text: t("stashes") }),
+        h("span", { class: "count", text: `${state.stashes.length}` }),
+      ]));
+      for (const stash of state.stashes) {
+        const row = h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: `${stash.ref}${stash.subject ? `\n${stash.subject}` : ""}`,
+          onclick: () => showStashDiff(stash),
+          oncontextmenu: (event) => {
+            event.preventDefault();
+            popup(event.currentTarget, stashActions(stash));
+          },
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          h("span", { class: "status-cell", text: "≡" }),
+          h("span", { class: "name", text: stash.subject || stash.ref }),
+          h("span", { class: "path", text: PIG.relativeTime(stash.timestamp) }),
+        ]);
+        branchesHost.append(row);
+      }
+    }
+
+    async function showStashDiff(stash) {
+      const result = await invoke("git/stash-show", { ref: stash.ref });
+      if (!result.ok) {
+        toast(PIG.errorText(result), "error");
+        return;
+      }
+      if (!String(result.text ?? "").trim()) {
+        toast(t("noDiff"), "info");
+        return;
+      }
+      openDiffOverlay(`${stash.ref} ${stash.subject ?? ""}`.trim(), result.text);
+    }
+
+    function tagActions(tag) {
+      return [
+        {
+          label: t("newBranchFromHere"),
+          onSelect: async () => {
+            const name = await dialog({
+              title: t("newBranchFromHere"),
+              message: `${t("newBranch")} @ ${tag.name}`,
+              input: { value: "" },
+              confirmLabel: t("newBranch"),
+            });
+            if (!name) return;
+            const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name, create: true, startPoint: tag.name }));
+            toast(result.ok ? `${t("newBranch")}: ${name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("pushTag"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("pushing"), () => invoke("git/tag-push", { name: tag.name }));
+            PIG.reportSync(result, t("pushTag"));
+            await refresh();
+          },
+        },
+        { label: t("copy"), onSelect: () => PIG.copyText(tag.name) },
+        { type: "separator" },
+        {
+          label: t("deleteTag"),
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("deleteTagTitle"),
+              message: tag.name,
+              confirmLabel: t("deleteTag"),
+              danger: true,
+            });
+            if (!confirmed) return;
+            const result = await invoke("git/tag-delete", { name: tag.name });
+            toast(result.ok ? `${t("deleteTag")}: ${tag.name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+      ];
+    }
+
+    function remoteActions(remote) {
+      return [
+        {
+          label: t("fetch"),
+          onSelect: async () => {
+            PIG.reportSync(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch", { remote: remote.name })), t("fetch"));
+            await refresh();
+          },
+        },
+        {
+          label: `${t("fetch")} (${t("prune")})`,
+          onSelect: async () => {
+            PIG.reportSync(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch", { remote: remote.name, prune: true })), t("fetch"));
+            await refresh();
+          },
+        },
+        { label: t("copy"), onSelect: () => PIG.copyText(remote.fetch ?? remote.push ?? remote.name) },
+      ];
+    }
+
+    function stashActions(stash) {
+      return [
+        { label: t("showStash"), onSelect: () => showStashDiff(stash) },
+        {
+          label: t("applyStash"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("unstashing"), () => invoke("git/stash", { action: "apply", ref: stash.ref }));
+            toast(result.ok ? `${t("applyStash")}: ${stash.ref}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("unstash"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("unstashing"), () => invoke("git/stash", { action: "pop", ref: stash.ref }));
+            toast(result.ok ? `${t("unstash")}: ${stash.ref}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        { type: "separator" },
+        {
+          label: t("dropStash"),
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("dropStashConfirm"),
+              message: `${stash.ref}  ${stash.subject ?? ""}`.trim(),
+              confirmLabel: t("dropStash"),
+              danger: true,
+            });
+            if (!confirmed) return;
+            const result = await invoke("git/stash", { action: "drop", ref: stash.ref });
+            toast(result.ok ? `${t("dropStash")}: ${stash.ref}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+      ];
+    }
+
+    async function checkout(branch) {
+      if (branch.current) return;
+      const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name: branch.name, startPoint: branch.remote ? branch.name : undefined, track: branch.remote ? true : undefined }));
+      toast(result.ok ? `${t("checkout")}: ${branch.name}` : result.message, result.ok ? "info" : "error");
+      await refresh();
+    }
+
+    function branchActions(branch) {
+      // Note: 死文案接活——mergeIntoCurrent/rebaseOnto/deleteBranch 的 key 早就存在但零引用，本次把菜单真正挂上去 — 见 .agents/notes/implemented/feature/2026-09-14-git-operations-parity.md
+      const items = [
+        { label: t("checkout"), disabled: branch.current, onSelect: () => checkout(branch) },
+        {
+          label: t("newBranchFromHere"),
+          onSelect: async () => {
+            const name = await dialog({
+              title: t("newBranchFromHere"),
+              message: `${t("newBranch")} @ ${branch.name}`,
+              input: { value: "" },
+              confirmLabel: t("newBranch"),
+            });
+            if (!name) return;
+            const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name, create: true, startPoint: branch.name }));
+            toast(result.ok ? `${t("newBranch")}: ${name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        { type: "separator" },
+        {
+          label: t("mergeIntoCurrent"),
+          disabled: branch.current,
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("mergeTitle"),
+              message: `${branch.name} → ${state.repo?.branch?.head ?? t("head")}`,
+              confirmLabel: t("merge"),
+            });
+            if (!confirmed) return;
+            const result = await PIG.runWithPill(t("merge"), () => invoke("git/merge", { ref: branch.name }));
+            if (result.ok) {
+              toast(`${t("merge")}: ${branch.name}`, "info");
+            } else {
+              const text = String(result.message ?? "");
+              const conflicted = /CONFLICT|Automatic merge failed|fix conflicts/i.test(`${result.stdout ?? ""}\n${result.stderr ?? ""}\n${text}`);
+              toast(`${t("merge")}: ${text}${conflicted ? `\n\n${t("mergeConflicts")}` : ""}`, "error");
+            }
+            await refresh();
+          },
+        },
+        {
+          label: t("rebaseOnto"),
+          disabled: branch.current,
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("rebaseTitle"),
+              message: `${state.repo?.branch?.head ?? t("head")} → ${branch.name}`,
+              confirmLabel: t("rebase"),
+              danger: true,
+            });
+            if (!confirmed) return;
+            const result = await PIG.runWithPill(t("rebase"), () => invoke("git/rebase", { ref: branch.name }));
+            if (result.ok) {
+              toast(`${t("rebase")}: ${branch.name}`, "info");
+            } else {
+              const text = String(result.message ?? "");
+              const conflicted = /CONFLICT|could not apply|fix conflicts/i.test(`${result.stdout ?? ""}\n${result.stderr ?? ""}\n${text}`);
+              toast(`${t("rebase")}: ${text}${conflicted ? `\n\n${t("rebaseConflicts")}` : ""}`, "error");
+            }
+            await refresh();
+          },
+        },
+        { type: "separator" },
+      ];
+      if (!branch.remote) {
+        items.push(
+          {
+            label: t("renameBranch"),
+            onSelect: async () => {
+              const name = await dialog({
+                title: t("renameTitle"),
+                message: branch.name,
+                input: { value: branch.name },
+                confirmLabel: t("renameBranch"),
+              });
+              if (!name || name === branch.name) return;
+              const result = await invoke("git/branch-rename", { old: branch.name, new: name });
+              toast(result.ok ? `${t("renameBranch")}: ${name}` : result.message, result.ok ? "info" : "error");
+              await refresh();
+            },
+          },
+          {
+            label: t("setUpstream"),
+            onSelect: async () => {
+              const upstream = await dialog({
+                title: t("setUpstreamTitle"),
+                message: branch.name,
+                input: { value: branch.upstream ?? "" },
+                confirmLabel: t("setUpstream"),
+              });
+              if (!upstream) return;
+              const result = await invoke("git/branch-upstream", { name: branch.name, upstream });
+              toast(result.ok ? `${t("setUpstream")}: ${upstream}` : result.message, result.ok ? "info" : "error");
+              await refresh();
+            },
+          },
+        );
+        if (branch.upstream) {
+          items.push({
+            label: t("unsetUpstream"),
+            onSelect: async () => {
+              const result = await invoke("git/branch-upstream", { name: branch.name, unset: true });
+              toast(result.ok ? t("unsetUpstream") : result.message, result.ok ? "info" : "error");
+              await refresh();
+            },
+          });
+        }
+      }
+      items.push(
+        {
+          label: t("deleteBranch"),
+          disabled: branch.current,
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("deleteBranchTitle"),
+              message: branch.remote ? `${branch.name} (${t("remoteBranches")})` : branch.name,
+              confirmLabel: t("deleteBranch"),
+              danger: true,
+            });
+            if (!confirmed) return;
+            const payload = branch.remote
+              ? { name: branch.name, remote: branch.name.split("/")[0] }
+              : { name: branch.name };
+            let result = await invoke("git/branch-delete", payload);
+            if (!result.ok && /not fully merged/i.test(String(result.message ?? ""))) {
+              const force = await dialog({
+                title: t("deleteBranchTitle"),
+                message: result.message,
+                confirmLabel: t("deleteBranch"),
+                danger: true,
+              });
+              if (force) result = await invoke("git/branch-delete", { ...payload, force: true });
+            }
+            toast(result.ok ? `${t("deleteBranch")}: ${branch.name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        { label: t("copyBranchName"), onSelect: () => PIG.copyText(branch.name) },
+        { type: "separator" },
+        {
+          label: t("push"),
+          onSelect: async () => {
+            // No remote/branch: this menu belongs to the Log, where the item is
+            // about the checked-out branch. The engine pushes where that branch
+            // tracks instead of assuming `origin`.
+            const result = await PIG.runWithPill(t("pushing"), () => invoke("git/push", { setUpstream: !state.repo?.branch?.upstream }));
+            PIG.reportSync(result, t("push"));
+            await PIG.refreshTrackingRefs(result);
+            await refresh();
+          },
+        },
+        {
+          label: t("fetch"),
+          onSelect: async () => {
+            PIG.reportSync(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch")), t("fetch"));
+            await refresh();
+          },
+        },
+      );
+      return items;
+    }
+
+    function paintDetail() {
+      PIG.clear(changedHost);
+      PIG.clear(detailsHost);
+      if (!state.selection) {
+        changedHost.append(h("div", { class: "empty-state" }, [h("div", { class: "headline", text: t("changedFiles") })]));
+        return;
+      }
+      for (const file of state.changedFiles) {
+        const { name, directory } = PIG.splitPath(file.path);
+        changedHost.append(h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: file.path,
+          onclick: () => openCommitDiff(file.path),
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          h("span", { class: "status-cell", style: { color: PIG.statusColor(file.status) }, text: file.status }),
+          h("span", { class: "name", text: name }),
+          directory ? h("span", { class: "path", text: directory }) : null,
+        ]));
+      }
+      const details = state.details;
+      if (!details) return;
+      detailsHost.append(h("dl", null, [
+        h("dt", { text: t("hash") }), h("dd", { class: "mono", text: details.hash ?? "" }),
+        h("dt", { text: t("author") }), h("dd", { text: details.author ? `${details.author} <${details.email ?? ""}>` : "" }),
+        h("dt", { text: t("date") }), h("dd", { text: PIG.formatDateTime(details.timestamp) }),
+        h("dt", { text: t("subject") }), h("dd", { text: details.subject ?? "" }),
+      ]));
+      if (details.body) detailsHost.append(h("div", { class: "message-body", text: details.body }));
+    }
+
+    function paintPanes() {
+      branchesPane.classList.toggle("hidden", !state.showBranches);
+      detailPane.classList.toggle("hidden", !state.showDetails);
+      splitter.classList.toggle("hidden", !state.showDetails);
+    }
+
+    function paintAll() {
+      paintToolbar();
+      paintBranches();
+      paintList();
+      paintDetail();
+      paintPanes();
+    }
+
+    async function openCommitDiff(path) {
+      if (!state.selection) return;
+      const result = await invoke("git/commit-diff", { hash: state.selection });
+      if (!result.ok) {
+        toast(PIG.errorText(result), "error");
+        return;
+      }
+      const parsed = PIG.diff.parse(result.text);
+      if (path) {
+        const single = parsed.files.find((entry) => PIG.diff.displayPath(entry) === path);
+        // Fall back to the whole commit if the path is not in the patch.
+        if (single) {
+          openDiffOverlay(path, PIG.diff.patchFor(single, single.hunks));
+          return;
+        }
+      }
+      // No file picked: show the commit in full. Rendering only the first file
+      // would quietly hide the rest of a multi-file commit.
+      const summary = `${result.meta?.short ?? ""}`
+        + (parsed.files.length > 1 ? ` · ${parsed.files.length} ${t("files")}` : "");
+      openDiffOverlay(summary.trim() || t("showDiff"), result.text);
+    }
+
+    function commitContextMenu(anchor, commit) {
+      const isHead = Boolean(state.repo?.branch?.oid) && commit.hash === state.repo.branch.oid;
+      popup(anchor, [
+        { label: t("showDiff"), onSelect: () => openCommitDiff(null) },
+        { label: t("copyRevisionNumber"), onSelect: () => PIG.copyText(commit.hash) },
+        {
+          label: t("copyMessage"),
+          onSelect: () => {
+            const body = state.selection === commit.hash && state.details?.hash === commit.hash
+              ? String(state.details.body ?? "").trim()
+              : "";
+            PIG.copyText(body ? `${commit.subject}\n\n${body}` : commit.subject);
+          },
+        },
+        {
+          label: t("compareWithHead"),
+          onSelect: async () => {
+            const result = await invoke("git/compare", { a: "HEAD", b: commit.hash });
+            if (!result.ok) {
+              toast(PIG.errorText(result), "error");
+              return;
+            }
+            if (!String(result.text ?? "").trim()) {
+              toast(t("noDiff"), "info");
+              return;
+            }
+            openDiffOverlay(`${t("compareWithHead")}: HEAD ↔ ${commit.short}`, result.text);
+          },
+        },
+        { type: "separator" },
+        {
+          label: t("checkoutRevision"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name: commit.hash }));
+            toast(result.ok ? `${t("checkoutRevision")}: ${commit.short}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("newBranchFromHere"),
+          onSelect: async () => {
+            const name = await dialog({
+              title: t("newBranchFromHere"),
+              message: `${t("newBranch")} @ ${commit.short}`,
+              input: { value: "" },
+              confirmLabel: t("newBranch"),
+            });
+            if (!name) return;
+            const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name, create: true, startPoint: commit.hash }));
+            toast(result.ok ? `${t("newBranch")}: ${name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("newTag"),
+          onSelect: async () => {
+            const name = await dialog({
+              title: t("newTag"),
+              message: `${t("newTag")} @ ${commit.short}`,
+              input: { value: "" },
+              confirmLabel: t("newTag"),
+            });
+            if (!name) return;
+            const result = await invoke("git/tag", { name, hash: commit.hash });
+            toast(result.ok ? `${t("newTag")}: ${name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        { type: "separator" },
+        {
+          label: t("cherryPick"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("cherryPick"), () => invoke("git/cherry-pick", { hash: commit.hash }));
+            toast(result.ok ? `${t("cherryPick")}: ${commit.short}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("revert"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("revert"), () => invoke("git/revert", { hash: commit.hash }));
+            toast(result.ok ? `${t("revert")}: ${commit.short}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("resetToHere"),
+          onSelect: async () => {
+            const mode = await dialog({
+              title: t("resetToHere"),
+              message: `${t("reset")} --mode ${commit.short}`,
+              detail: `${t("soft")} | ${t("mixed")} | ${t("hard")}`,
+              input: { value: "mixed" },
+              confirmLabel: t("reset"),
+              danger: true,
+            });
+            if (!mode) return;
+            const result = await PIG.runWithPill(t("reset"), () => invoke("git/reset", { hash: commit.hash, mode: String(mode).trim().toLowerCase() }));
+            toast(result.ok ? `${t("reset")} --${mode} ${commit.short}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("editCommitMessage"),
+          disabled: !isHead,
+          title: isHead ? t("editCommitMessage") : `${t("editCommitMessage")} — ${t("head")} only`,
+          onSelect: async () => {
+            const message = await dialog({
+              title: t("editCommitMessage"),
+              message: commit.subject,
+              input: { value: commit.subject },
+              confirmLabel: t("ok"),
+            });
+            if (!message) return;
+            const result = await invoke("git/amend-message", { message });
+            toast(result.ok ? t("editCommitMessage") : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+      ]);
+    }
+
+    async function select(hash) {
+      state.selection = hash;
+      paintList();
+      const [files, details] = await Promise.all([
+        invoke("git/commit-files", { hash }),
+        invoke("git/commit-diff", { hash }),
+      ]);
+      state.changedFiles = files.files ?? [];
+      state.details = details.meta ?? null;
+      paintDetail();
+    }
+
+    async function loadLog() {
+      const since = state.sinceFilter === "day" ? "1 day ago"
+        : state.sinceFilter === "week" ? "1 week ago"
+        : state.sinceFilter === "month" ? "1 month ago"
+        : undefined;
+      // Note: 具名作者直传服务端 `--author`（名字或邮箱都可），与 "me" 解析后的 user.name 走同一条路 — 见 main.js readLog
+      const author = state.userFilter === "me"
+        ? (state.repo?.user ?? undefined)
+        : (state.userFilter.trim() ? state.userFilter.trim() : undefined);
+      const paths = state.pathFilter.trim() ? [state.pathFilter.trim()] : undefined;
+      const result = await invoke("git/log", {
+        limit: 200,
+        branch: state.branchFilter || undefined,
+        firstParent: state.firstParent,
+        noMerges: state.noMerges,
+        topo: state.topo,
+        author,
+        since,
+        paths,
+      });
+      state.commits = result.commits ?? [];
+      if (state.selection && !state.commits.some((commit) => commit.hash === state.selection)) {
+        state.selection = null;
+        state.changedFiles = [];
+        state.details = null;
+      }
+      paintList();
+      paintDetail();
+      if (!state.selection && state.commits.length) await select(state.commits[0].hash);
+    }
+
+    async function loadRefs() {
+      const [branches, tags, remotes, stashes] = await Promise.all([
+        invoke("git/branches"),
+        invoke("git/tags"),
+        invoke("git/remotes"),
+        invoke("git/stashes"),
+      ]);
+      state.branches = branches.branches ?? [];
+      state.tags = tags.tags ?? [];
+      state.remotes = remotes.remotes ?? [];
+      state.stashes = stashes.stashes ?? [];
+      paintBranches();
+    }
+    /**
+
+     * Which repository the loaded state belongs to. A commit selection, the
+     * branch and path filters and the changed-file list are all
+     * repository-relative, so a switch has to clear them rather than let them
+     * keep describing the previous repository's history. `undefined` means
+     * nothing has been loaded yet.
+     */
+    let loadedRepo;
+
+    /** Drop everything that describes one repository, and only that one. */
+    function forgoRepositoryState() {
+      state.selection = null;
+      state.changedFiles = [];
+      state.details = null;
+      state.commits = [];
+      state.search = "";
+      state.branchFilter = "";
+      state.pathFilter = "";
+      // A named author belongs to the repository just left; "me" re-resolves
+      // against the new repository's own config, so only the named one is dropped.
+      if (state.userFilter && state.userFilter !== "me") state.userFilter = "";
+      state.tags = [];
+      state.remotes = [];
+      state.stashes = [];
+      // A commit diff belongs to the commit it came from, and its actions name a
+      // revision the new repository may not even have.
+      activeDiffOverlay?.();
+    }
+
+    // Same dim-while-reloading contract as the Commit view: overlapping
+    // refreshes share one counter so the list stays dimmed until the last one
+    // settles instead of flashing mid-flight.
+    let refreshDepth = 0;
+    function setRefreshing(on) {
+      refreshDepth = Math.max(0, refreshDepth + (on ? 1 : -1));
+      root.classList.toggle("is-refreshing", refreshDepth > 0);
+    }
+    async function refresh() {
+      setRefreshing(true);
+      try {
+        return await refreshInner();
+      } finally {
+        setRefreshing(false);
+      }
+    }
+    async function refreshInner() {
+      const repo = await invoke("git/repo");
+      const repoRoot = repo.ok ? (repo.repo?.root ?? null) : null;
+      if (loadedRepo !== undefined && repoRoot !== loadedRepo) forgoRepositoryState();
+      loadedRepo = repoRoot;
+      state.repo = repo.ok ? repo : null;
+      state.error = repo.ok ? null : (repo.message ?? t("notARepository"));
+      state.repoPath = repo.ok ? null : await currentFolder();
+      await Promise.all([loadRefs(), loadLog()]);
+      branchWidget.update(state.repo);
+      paintToolbar();
+    }
+
+    /** The folder to name in the "not a repository" message. */
+    async function currentFolder() {
+      const workspace = await invoke("workspace.get");
+      return workspace?.path ?? null;
+    }
+
+    branchesPane.append(
+      h("div", { class: "pane-header" }, [h("span", { text: t("branches") })]),
+      branchesHost,
+    );
+    detailPane.append(
+      h("div", { class: "pane-header" }, [
+        h("span", { text: t("changedFiles") }),
+        h("div", { class: "toolbar-spacer" }),
+        iconButton("diff", tip("showDiff", KEYS.showDiff), () => openCommitDiff(null), { size: 13 }),
+      ]),
+      changedHost,
+      h("div", { class: "pane-header", style: { borderTop: "1px solid var(--border-soft)" } }, [
+        h("span", { text: t("commitDetails") }),
+      ]),
+      detailsHost,
+    );
+    commitsPane.append(listHost, splitter, detailPane);
+    panes.append(branchesPane, h("div", { class: "divider-v" }), commitsPane);
+    root.append(toolbar, panes);
+
+    PIG.bindSplitter(splitter, (delta) => {
+      const total = commitsPane.clientHeight || 1;
+      state.detailHeight = Math.max(18, Math.min(80, state.detailHeight - (delta / total) * 100));
+      detailPane.style.height = `${state.detailHeight}%`;
+    }, { vertical: true });
+
+    PIG.bindShortcuts([
+      { spec: KEYS.refresh, run: () => { refresh().catch(() => {}); } },
+      { spec: KEYS.refreshAlt, run: () => { refresh().catch(() => {}); } },
+      { spec: KEYS.showDiff, run: () => { if (state.selection) openCommitDiff(null); } },
+      { spec: KEYS.find, run: () => { searchButton.click(); } },
+      // The app's own accelerators cannot reach this webContents; say so.
+      PIG.appShortcutHintBinding(),
+    ]);
+
+    /**
+     * The repository list, read when it can actually have changed — mounting, a
+     * project switch, and opening the chip's menu, which re-reads its own —
+     * rather than on every refresh. Building it walks the tree, and the Log
+     * refreshes after every branch action.
+     */
+    async function loadRepositories() {
+      repoWidget.update(await invoke("git/repos"));
+    }
+
+    PIG.watchWorkspace(() => {
+      loadRepositories().then(() => refresh()).catch(() => {});
+    });
+    loadRepositories()
+      .then(() => refresh())
+      .catch((error) => toast(String(error?.message ?? error), "error"));
+
+    return { refresh, selectCommit: select, openCommitDiff };
+  }
+
+  function mountConsole(root) {
+    const state = { entries: [] };
+    const toolbar = h("div", { class: "toolbar" });
+    const host = h("div", { class: "console" });
+
+    function paint() {
+      PIG.clear(toolbar);
+      toolbar.append(iconButton("refresh", tip("refresh", KEYS.refresh), () => refresh()));
+      toolbar.append(h("button", {
+        class: "bordered",
+        type: "button",
+        text: t("clearAll"),
+        onclick: async () => {
+          await invoke("git/console-clear");
+          state.entries = [];
+          paint();
+        },
+      }));
+      toolbar.append(h("div", { class: "toolbar-spacer" }));
+      toolbar.append(h("span", { class: "muted", style: { fontSize: "11px" }, text: `${state.entries.length}` }));
+
+      PIG.clear(host);
+      if (!state.entries.length) {
+        host.append(h("div", { class: "empty-state" }, [h("div", { class: "headline", text: t("console") })]));
+        return;
+      }
+      for (const entry of state.entries) {
+        const node = h("div", { class: "console-entry" }, [
+          h("div", { class: "console-cmd" }, [
+            h("span", { class: "console-time", text: `[${PIG.formatClock(entry.ts)}] ` }),
+            `$ ${entry.command}`,
+          ]),
+        ]);
+        if (entry.stdout?.trim()) node.append(h("pre", { class: "console-out", text: entry.stdout.trimEnd() }));
+        if (entry.stderr?.trim()) node.append(h("pre", { class: "console-out failure", text: entry.stderr.trimEnd() }));
+        if (!entry.ok && entry.message) node.append(h("pre", { class: "console-out failure", text: entry.message }));
+        host.append(node);
+      }
+      host.scrollTop = host.scrollHeight;
+    }
+
+    async function refresh() {
+      const result = await invoke("git/console");
+      state.entries = result.entries ?? [];
+      paint();
+    }
+
+    root.append(toolbar, host);
+    refresh().catch(() => {});
+    return { refresh };
+  }
+
+  /** Tabs over Log and Console, which is exactly IDEA's Git tool window. */
+  function mountGitWindow(root) {
+    const tabs = h("div", { class: "tabs" });
+    const logSurface = h("div", { class: "column grow" });
+    const consoleSurface = h("div", { class: "column grow hidden" });
+
+    const logView = mountLog(logSurface);
+    const consoleView = mountConsole(consoleSurface);
+
+    let active = "log";
+    function paintTabs() {
+      PIG.clear(tabs);
+      for (const tab of [{ id: "log", label: t("log") }, { id: "console", label: t("console") }]) {
+        tabs.append(h("button", {
+          type: "button",
+          role: "tab",
+          "aria-selected": active === tab.id ? "true" : "false",
+          text: tab.label,
+          onclick: () => {
+            active = tab.id;
+            logSurface.classList.toggle("hidden", active !== "log");
+            consoleSurface.classList.toggle("hidden", active !== "console");
+            paintTabs();
+            if (active === "console") consoleView.refresh();
+          },
+        }));
+      }
+    }
+    paintTabs();
+
+    root.append(tabs, logSurface, consoleSurface);
+    window.addEventListener("pig:appearance", paintTabs);
+    return { refresh: () => { logView.refresh(); if (active === "console") consoleView.refresh(); } };
+  }
+
+  /** The detached panel hosts both tool windows behind one tab bar. */
+  function mountBoth(root) {
+    const tabs = h("div", { class: "tabs" });
+    const commitSurface = h("div", { class: "column grow" });
+    const gitSurface = h("div", { class: "column grow hidden" });
+    let active = "commit";
+
+    PIG.commitView.mount(commitSurface);
+    mountGitWindow(gitSurface);
+
+    function paintTabs() {
+      PIG.clear(tabs);
+      // The Git tab holds the Log *and* Console, so labelling it "Log" would
+      // collide with the tab inside it.
+      for (const tab of [{ id: "commit", label: t("commit") }, { id: "git", label: t("git") }]) {
+        tabs.append(h("button", {
+          type: "button",
+          role: "tab",
+          "aria-selected": active === tab.id ? "true" : "false",
+          text: tab.label,
+          onclick: () => {
+            active = tab.id;
+            commitSurface.classList.toggle("hidden", active !== "commit");
+            gitSurface.classList.toggle("hidden", active !== "git");
+            paintTabs();
+          },
+        }));
+      }
+    }
+    paintTabs();
+    root.append(tabs, commitSurface, gitSurface);
+    window.addEventListener("pig:appearance", paintTabs);
+  }
+
+  function boot() {
+    const root = document.getElementById("app");
+    if (!root) return;
+    PIG.watchAppearance();
+    const surface = window.__PI_IDEA_GIT_SURFACE__ ?? "commit";
+    if (surface === "git") {
+      mountGitWindow(root);
+      return;
+    }
+    if (surface === "commit") {
+      PIG.commitView.mount(root);
+      return;
+    }
+    mountBoth(root);
+  }
+
+  PIG.gitView = { mount: mountGitWindow, mountLog, mountConsole, assignLanes, openDiffOverlay };
+
+  if (document.readyState === "loading") {
+    document.addEventListener("DOMContentLoaded", boot, { once: true });
+  } else {
+    boot();
+  }
+})(window.PIG || (window.PIG = {}));
+
+})();
+    </script>
+  </body>
+</html>
diff --git a/plugins/io.github.liushunqiu.pi-idea-git/views/git.html b/plugins/io.github.liushunqiu.pi-idea-git/views/git.html
new file mode 100644
index 0000000..88398d2
--- /dev/null
+++ b/plugins/io.github.liushunqiu.pi-idea-git/views/git.html
@@ -0,0 +1,7752 @@
+<!-- GENERATED by tools/build.mjs — do not edit; edit src/* -->
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <!--
+      PI-Desktop owns exactly a transparent 46px drag band and a minimal three-button
+      window-control capsule. This panel uses pi-plugin-chrome=v3: the page can
+      paint through the 46px band, while host-generated holes keep controls
+      clickable and empty space draggable. Fixed or sticky panel surfaces use
+      var(--pi-plugin-titlebar-height, 46px).
+    -->
+    <meta name="pi-plugin-chrome" content="v3" />
+    <title>Git</title>
+    <style>
+/* ---- src/theme.css ---- */
+/*
+ * IntelliJ IDEA palette and component styles.
+ *
+ * Colour provenance matters here, so the values are grouped by how solid the
+ * evidence is:
+ *
+ *  - One deliberate deviation: JetBrains documents the light-theme deleted row
+ *    as a neutral grey (#D7D6D6). Next to the green insertion it reads as
+ *    "faded" rather than "removed", so a soft red is used instead. The other
+ *    diff colours are the published ones.
+ *  - Diff line backgrounds, the word-level fragment colour, the pane divider,
+ *    the editor gutter change bars and the file-status colours are the values
+ *    JetBrains prints in its own documentation/colour tables. They are used
+ *    verbatim, light and dark.
+ *  - Everything else is UI chrome (tool window background, borders, selection,
+ *    toolbar) where JetBrains publishes no numbers. Those follow the look of
+ *    IntelliJ Light and Darcula respectively rather than pretending to be
+ *    pixel-exact.
+ */
+
+:root {
+  color-scheme: light dark;
+
+  /* ---- IntelliJ Light ---- */
+  --bg: #ffffff;
+  --chrome-bg: #f7f8fa;
+  --panel-bg: #ffffff;
+  --panel-alt: #f2f4f7;
+  --border: #d1d5da;
+  --border-soft: #ebecf0;
+  --fg: #1f2328;
+  --fg-secondary: #5a5d63;
+  --fg-muted: #8c8c8c;
+  --selection: #d4e2ff;
+  --selection-fg: #1f2328;
+  --selection-inactive: #e8eaed;
+  --hover: #edf1f7;
+  --focus-ring: #2e5c99;
+
+  --button-bg: #ffffff;
+  --button-border: #c4c8cd;
+  --button-hover: #f0f3f7;
+  --button-primary-bg: #3871e0;
+  --button-primary-fg: #ffffff;
+  --button-primary-hover: #2f63c9;
+
+  --input-bg: #ffffff;
+  --input-border: #c4c8cd;
+
+  --diff-inserted: #c6e4c1;
+  --diff-modified: #e9eff9;
+  --diff-deleted: #f7d2d2;
+  --diff-fragment: #c6d7f0;
+  --diff-divider: #ebecf0;
+
+  --gutter-modified: #c3d6e8;
+  --gutter-added: #c9dec1;
+  --gutter-deleted: #d99b9b;
+  --gutter-whitespace: #eddcbc;
+
+  --status-added: #0a7700;
+  --status-modified: #0032a0;
+  --status-deleted: #616161;
+  --status-merged: #7503dc;
+  --status-conflict: #ff0000;
+  --status-ignored: #727238;
+  --status-renamed: #007c7c;
+  --status-unversioned: #993300;
+
+  --graph-head: #f0c000;
+  --graph-local: #00a000;
+  --graph-remote: #9b4fc9;
+  --graph-tag: #999999;
+
+  --toolbar-h: 32px;
+  --row-h: 22px;
+  --radius: 4px;
+  --ui-font: -apple-system, BlinkMacSystemFont, "Segoe UI", "Helvetica Neue", sans-serif;
+  --mono-font: ui-monospace, "SF Mono", Menlo, Consolas, "Liberation Mono", monospace;
+  --ui-size: 12px;
+  --mono-size: 12px;
+}
+
+:root[data-theme="dark"] {
+  color-scheme: dark;
+
+  /* ---- Darcula ---- */
+  --bg: #3c3f41;
+  --chrome-bg: #3c3f41;
+  --panel-bg: #313335;
+  --panel-alt: #2b2d2f;
+  --border: #555555;
+  --border-soft: #323438;
+  --fg: #bbbbbb;
+  --fg-secondary: #a9b1ba;
+  --fg-muted: #808080;
+  --selection: #2f65ca;
+  --selection-fg: #ffffff;
+  --selection-inactive: #46484a;
+  --hover: #4a4d4f;
+  --focus-ring: #7aa2f7;
+
+  --button-bg: #4c5052;
+  --button-border: #5f6164;
+  --button-hover: #5a5f62;
+  --button-primary-bg: #365880;
+  --button-primary-fg: #dce6f2;
+  --button-primary-hover: #3f6a9a;
+
+  --input-bg: #45494a;
+  --input-border: #5f6164;
+
+  --diff-inserted: #2b4034;
+  --diff-modified: #28323d;
+  --diff-deleted: #452a2e;
+  --diff-fragment: #3e546e;
+  /* Hue-matched fragments: a blue patch over a dark red row turns to mud. */
+  --diff-fragment-deleted: #6d353b;
+  --diff-fragment-inserted: #3d6249;
+  --diff-divider: #323438;
+
+  --gutter-modified: #374752;
+  --gutter-added: #4a7a5c;
+  --gutter-deleted: #a04c52;
+  --gutter-whitespace: #4c4638;
+
+  --status-added: #629755;
+  --status-modified: #6897bb;
+  --status-deleted: #6c6c6c;
+  --status-merged: #9876aa;
+  --status-conflict: #d5756c;
+  --status-ignored: #848504;
+  --status-renamed: #4b9e9e;
+  --status-unversioned: #c07840;
+}
+
+* {
+  box-sizing: border-box;
+}
+
+html,
+body {
+  height: 100%;
+  margin: 0;
+  overflow: hidden;
+}
+
+body {
+  font: var(--ui-size) / 1.45 var(--ui-font);
+  background: var(--chrome-bg);
+  color: var(--fg);
+  -webkit-font-smoothing: antialiased;
+}
+
+/* The host owns a transparent drag band. It is 46px in a detached panel and
+   0 in a docked view, and the host publishes the value either way. */
+.app {
+  display: flex;
+  flex-direction: column;
+  height: 100%;
+  padding-top: var(--pi-plugin-titlebar-height, 0px);
+  background: var(--chrome-bg);
+}
+
+/* ---------------------------------------------------------------- toolbars */
+
+.toolbar {
+  display: flex;
+  flex: 0 0 auto;
+  align-items: center;
+  gap: 2px;
+  min-height: var(--toolbar-h);
+  padding: 3px 4px;
+  border-bottom: 1px solid var(--border-soft);
+}
+
+.toolbar-spacer {
+  flex: 1 1 auto;
+}
+
+.toolbar-separator {
+  width: 1px;
+  height: 16px;
+  margin: 0 4px;
+  background: var(--border);
+}
+
+/* --------------------------------------------------------------- controls */
+
+button,
+.tbtn {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 5px;
+  min-height: 22px;
+  padding: 2px 8px;
+  border: 1px solid transparent;
+  border-radius: var(--radius);
+  background: transparent;
+  color: var(--fg);
+  cursor: pointer;
+  font: inherit;
+  line-height: 1.3;
+  white-space: nowrap;
+}
+
+button:hover:not(:disabled),
+.tbtn:hover:not(:disabled) {
+  background: var(--hover);
+}
+
+button:focus-visible,
+.tbtn:focus-visible,
+input:focus-visible,
+textarea:focus-visible,
+select:focus-visible {
+  outline: 2px solid var(--focus-ring);
+  outline-offset: -1px;
+}
+
+button:disabled {
+  color: var(--fg-muted);
+  cursor: default;
+}
+
+button.bordered {
+  border-color: var(--button-border);
+  background: var(--button-bg);
+}
+
+button.bordered:hover:not(:disabled) {
+  background: var(--button-hover);
+}
+
+button.primary {
+  border-color: var(--button-primary-bg);
+  background: var(--button-primary-bg);
+  color: var(--button-primary-fg);
+  font-weight: 600;
+}
+
+button.primary:hover:not(:disabled) {
+  background: var(--button-primary-hover);
+}
+
+button.primary:disabled {
+  border-color: var(--button-border);
+  background: var(--button-bg);
+  color: var(--fg-muted);
+}
+
+button.icon {
+  min-width: 24px;
+  padding: 2px 5px;
+}
+
+button.icon svg {
+  display: block;
+}
+
+.split-button {
+  display: inline-flex;
+}
+
+.split-button > button:first-child {
+  border-top-right-radius: 0;
+  border-bottom-right-radius: 0;
+}
+
+.split-button > button:last-child {
+  border-top-left-radius: 0;
+  border-bottom-left-radius: 0;
+  border-left-width: 0;
+  min-width: 18px;
+  padding: 2px 3px;
+}
+
+label.check {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  cursor: pointer;
+  user-select: none;
+  white-space: nowrap;
+}
+
+input[type="checkbox"] {
+  width: 13px;
+  height: 13px;
+  margin: 0;
+  accent-color: var(--button-primary-bg);
+  cursor: pointer;
+}
+
+input[type="text"],
+input[type="search"],
+textarea,
+select {
+  border: 1px solid var(--input-border);
+  border-radius: var(--radius);
+  background: var(--input-bg);
+  color: var(--fg);
+  font: inherit;
+  padding: 3px 6px;
+}
+
+textarea {
+  resize: none;
+  font-family: var(--ui-font);
+}
+
+.search-field {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  min-height: 22px;
+  padding: 0 6px;
+  border: 1px solid var(--input-border);
+  border-radius: var(--radius);
+  background: var(--input-bg);
+}
+
+.search-field input {
+  border: 0;
+  padding: 2px 0;
+  background: transparent;
+  min-width: 90px;
+}
+
+.search-field input:focus {
+  outline: none;
+}
+
+/* ------------------------------------------------------------------- tabs */
+
+.tabs {
+  display: flex;
+  flex: 0 0 auto;
+  align-items: stretch;
+  gap: 1px;
+  padding: 0 4px;
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+  overflow-x: auto;
+}
+
+.tabs button {
+  border-radius: 0;
+  border-bottom: 2px solid transparent;
+  padding: 5px 10px;
+  color: var(--fg-secondary);
+}
+
+.tabs button[aria-selected="true"] {
+  border-bottom-color: var(--button-primary-bg);
+  color: var(--fg);
+  font-weight: 600;
+}
+
+/* ---------------------------------------------------------------- surfaces */
+
+.surface {
+  display: flex;
+  flex: 1 1 auto;
+  min-height: 0;
+  background: var(--panel-bg);
+}
+
+.column {
+  display: flex;
+  flex-direction: column;
+  min-width: 0;
+  min-height: 0;
+}
+
+.row {
+  display: flex;
+  min-width: 0;
+  min-height: 0;
+}
+
+.scroll {
+  overflow: auto;
+  min-height: 0;
+}
+
+.pane {
+  position: relative;
+  min-width: 0;
+  min-height: 0;
+}
+
+.pane-header {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  padding: 5px 8px;
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+  color: var(--fg-secondary);
+  font-size: 11px;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+}
+
+.pane-header .toolbar-spacer {
+  flex: 1 1 auto;
+}
+
+.divider-v {
+  flex: 0 0 auto;
+  width: 1px;
+  background: var(--border-soft);
+}
+
+.divider-v.draggable {
+  width: 5px;
+  margin: 0 -2px;
+  z-index: 3;
+  background: transparent;
+  cursor: col-resize;
+}
+
+.divider-v.draggable:hover,
+.divider-v.draggable.active {
+  background: var(--button-primary-bg);
+}
+
+.divider-h {
+  flex: 0 0 auto;
+  height: 1px;
+  background: var(--border-soft);
+}
+
+.empty-state {
+  display: flex;
+  flex: 1 1 auto;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  gap: 8px;
+  padding: 24px;
+  color: var(--fg-muted);
+  text-align: center;
+}
+
+.empty-state .headline {
+  color: var(--fg-secondary);
+  font-size: 13px;
+  font-weight: 600;
+}
+
+.empty-state code {
+  font-family: var(--mono-font);
+  font-size: 11px;
+}
+
+/* ------------------------------------------------------------------- lists */
+
+.list {
+  padding: 2px 0;
+}
+
+.group-header {
+  display: flex;
+  position: sticky;
+  top: 0;
+  z-index: 1;
+  align-items: center;
+  gap: 5px;
+  height: var(--row-h);
+  padding: 0 6px;
+  background: var(--chrome-bg);
+  cursor: pointer;
+  user-select: none;
+  font-weight: 600;
+}
+
+.group-header:hover {
+  background: var(--hover);
+}
+
+.group-header .count {
+  color: var(--fg-muted);
+  font-weight: 400;
+}
+
+.disclosure {
+  display: inline-flex;
+  width: 10px;
+  justify-content: center;
+  color: var(--fg-secondary);
+  transform-origin: center;
+  transition: transform 120ms ease;
+}
+
+.disclosure[data-open="true"] {
+  transform: rotate(90deg);
+}
+
+.tree-row {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  height: var(--row-h);
+  padding: 0 6px 0 2px;
+  cursor: default;
+  user-select: none;
+  white-space: nowrap;
+}
+
+.tree-row:hover {
+  background: var(--hover);
+}
+
+/* Selected text uses --selection-fg so light (#d4e2ff bg) stays dark and readable. */
+.tree-row[aria-selected="true"] {
+  background: var(--selection);
+  color: var(--selection-fg);
+}
+
+.tree-row[aria-selected="true"] .meta,
+.tree-row[aria-selected="true"] .path,
+.tree-row[aria-selected="true"] .badge {
+  color: color-mix(in oklab, var(--selection-fg) 82%, transparent);
+}
+
+.tree-row .indent {
+  display: inline-block;
+  flex: 0 0 auto;
+}
+
+.tree-row .name {
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.tree-row .path {
+  color: var(--fg-secondary);
+  font-size: 11px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.tree-row .meta {
+  margin-left: auto;
+  padding-left: 8px;
+  color: var(--fg-muted);
+  font-size: 11px;
+}
+
+.tree-row .grow {
+  flex: 1 1 auto;
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.status-cell {
+  display: inline-block;
+  flex: 0 0 auto;
+  width: 12px;
+  font-family: var(--mono-font);
+  font-size: 11px;
+  font-weight: 700;
+  text-align: center;
+}
+
+.badge {
+  flex: 0 0 auto;
+  padding: 0 5px;
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  color: var(--fg-secondary);
+  font-size: 10px;
+  line-height: 15px;
+}
+
+.badge.head {
+  border-color: var(--graph-head);
+  color: var(--graph-head);
+}
+
+.badge.local {
+  border-color: var(--graph-local);
+  color: var(--graph-local);
+}
+
+.badge.remote {
+  border-color: var(--graph-remote);
+  color: var(--graph-remote);
+}
+
+.badge.tag {
+  border-color: var(--graph-tag);
+  color: var(--fg-secondary);
+}
+
+.tiny-button {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 16px;
+  height: 16px;
+  padding: 0;
+  border-radius: 3px;
+  color: var(--fg-secondary);
+  font-size: 13px;
+  line-height: 1;
+}
+
+.tiny-button:hover {
+  background: color-mix(in oklab, var(--fg) 14%, transparent);
+}
+/* ------------------------------------------------------------- tree rows --- */
+
+/* A folder row keeps the file rows' rhythm but reads as structure: its name is
+   darker than a file's, and its icon says which of the two it is without the
+   user parsing the indentation. */
+.tree-row.dir-row {
+  font-weight: 600;
+}
+
+.tree-row.dir-row .name {
+  color: var(--fg);
+}
+
+.tree-row.dir-row .count {
+  color: var(--fg-muted);
+  font-size: 11px;
+  font-weight: 400;
+}
+/* IDEA-style repository row: like a folder row, plus the per-repo color
+   square and a branch pill. Files nested below it render one level deeper. */
+.tree-row.repo-row {
+  font-weight: 600;
+  cursor: pointer;
+}
+.tree-row.repo-row .name {
+  color: var(--fg);
+}
+.tree-row.repo-row .repo-color {
+  flex: 0 0 auto;
+  width: 10px;
+  height: 10px;
+  border-radius: 3px;
+}
+
+.tree-row.dir-row .meta {
+  margin-left: 6px;
+  padding-left: 0;
+}
+
+.tree-row .row-icon {
+  display: inline-flex;
+  flex: 0 0 auto;
+  align-items: center;
+  color: var(--fg-secondary);
+}
+
+/* The folder's own disclosure sits between its checkbox and its icon, so the
+   arrow lines up with the one on a group header rather than with the checkbox
+   column. */
+.tree-row.dir-row .disclosure {
+  margin: 0 -2px;
+}
+
+/* Narrow work panels are the normal case here, and the folder count is the
+   first thing that can go without losing meaning. */
+@media (max-width: 420px) {
+  .tree-row.dir-row .meta {
+    display: none;
+  }
+}
+
+/* -------------------------------------------------------------------- diff */
+
+.diff {
+  flex: 1 1 auto;
+  overflow: auto;
+  min-height: 0;
+  background: var(--panel-bg);
+}
+
+.diff-file-header {
+  display: flex;
+  position: sticky;
+  top: 0;
+  z-index: 2;
+  align-items: center;
+  gap: 6px;
+  height: 24px;
+  padding: 0 8px;
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--panel-alt);
+  color: var(--fg-secondary);
+  font-size: 11px;
+}
+
+.diff-hunk-header {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  padding: 1px 6px;
+  border-top: 1px solid var(--border-soft);
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+  color: var(--fg-secondary);
+  font-family: var(--mono-font);
+  font-size: 11px;
+}
+
+.diff-hunk-header.folded {
+  background: var(--panel-alt);
+}
+
+.diff-hunk-note {
+  color: var(--fg-muted);
+}
+
+.diff-hunk-actions {
+  display: flex;
+  gap: 3px;
+  margin-left: auto;
+  opacity: 0;
+}
+
+.diff-hunk-header:hover .diff-hunk-actions,
+.diff-hunk-header:focus-within .diff-hunk-actions {
+  opacity: 1;
+}
+
+.diff-hunk-actions button {
+  min-height: 17px;
+  padding: 0 6px;
+  border-color: var(--button-border);
+  background: var(--button-bg);
+  font-family: var(--ui-font);
+  font-size: 11px;
+}
+
+.diff-line {
+  display: flex;
+  min-height: 17px;
+  font-family: var(--mono-font);
+  font-size: var(--mono-size);
+  line-height: 17px;
+  white-space: pre;
+}
+
+.diff-line .gutter-mark {
+  flex: 0 0 auto;
+  width: 4px;
+}
+
+.diff-line .sign {
+  flex: 0 0 auto;
+  width: 12px;
+  text-align: center;
+  color: color-mix(in oklab, var(--fg) 55%, transparent);
+  user-select: none;
+}
+
+.diff-line .text {
+  flex: 1 1 auto;
+  padding-right: 8px;
+  min-width: 0;
+}
+
+.diff-line.inserted {
+  background: var(--diff-inserted);
+}
+
+.diff-line.deleted {
+  background: var(--diff-deleted);
+}
+
+.diff-line.modified {
+  background: var(--diff-modified);
+}
+
+.diff-line.context .text {
+  color: var(--fg);
+}
+
+/* Word-level highlight inside a changed line. The hue follows the row it sits
+   on when a theme provides one: a blue patch over a red row reads as mud, which
+   is exactly what the dark palette suffered from. */
+.diff-line .fragment {
+  border-radius: 2px;
+  background: var(--diff-fragment);
+}
+
+.diff-line.deleted .fragment {
+  background: var(--diff-fragment-deleted, var(--diff-fragment));
+}
+
+.diff-line.inserted .fragment {
+  background: var(--diff-fragment-inserted, var(--diff-fragment));
+}
+
+.diff-line .fragment.strong {
+  background: color-mix(in oklab, var(--diff-fragment) 60%, var(--button-primary-bg));
+}
+
+.whitespace-mark {
+  color: color-mix(in oklab, var(--fg) 45%, transparent);
+}
+
+.diff-collapsed {
+  padding: 0 8px 0 16px;
+  border-top: 1px solid var(--border-soft);
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--panel-alt);
+  color: var(--fg-muted);
+  font-family: var(--mono-font);
+  font-size: 11px;
+  line-height: 18px;
+  cursor: pointer;
+}
+
+.diff-collapsed:hover {
+  color: var(--fg-secondary);
+}
+
+/* Side-by-side rendering of the very same hunks. */
+/*
+ * Side by side keeps each panel at half the viewport but never wraps: a
+ * wrapped line breaks the row-by-row alignment that makes the two panels worth
+ * comparing. When the content is wider than the panel the whole grid grows and
+ * the diff scrolls horizontally as one, so both sides stay on the same offset.
+ */
+.diff-sbs {
+  display: grid;
+  grid-template-columns: minmax(50%, max-content) 2px minmax(50%, max-content);
+  align-items: start;
+  width: max-content;
+  min-width: 100%;
+}
+
+.diff-sbs .side {
+  min-width: 0;
+  overflow: hidden;
+}
+
+.diff-sbs .spacer {
+  background: var(--diff-divider);
+}
+
+.diff-sbs .diff-line .text {
+  white-space: pre;
+}
+
+.diff-sbs .filler {
+  background: var(--panel-alt);
+}
+
+/* --------------------------------------------------------------- messages */
+
+.banner {
+  display: flex;
+  align-items: flex-start;
+  gap: 8px;
+  margin: 8px;
+  padding: 8px 10px;
+  border: 1px solid var(--border);
+  border-left-width: 3px;
+  border-radius: var(--radius);
+  background: var(--panel-alt);
+}
+
+.banner.error {
+  border-left-color: var(--status-conflict);
+}
+
+.banner.info {
+  border-left-color: var(--button-primary-bg);
+}
+
+.banner .banner-text {
+  min-width: 0;
+}
+
+.banner .banner-detail {
+  margin-top: 4px;
+  color: var(--fg-secondary);
+  font-family: var(--mono-font);
+  font-size: 11px;
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
+/* ------------------------------------------------------- commit message area */
+
+.commit-area {
+  flex: 0 0 auto;
+  display: flex;
+  flex-direction: column;
+  gap: 5px;
+  padding: 6px 8px 8px;
+  border-top: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+}
+
+.commit-message-row {
+  display: flex;
+  align-items: stretch;
+  gap: 6px;
+}
+
+.commit-message-row textarea {
+  flex: 1 1 auto;
+  min-height: 62px;
+  font-size: 13px;
+  line-height: 1.5;
+}
+
+.commit-history {
+  display: flex;
+  flex: 0 0 auto;
+  align-items: flex-start;
+}
+
+.commit-actions {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+}
+
+.commit-actions .spacer {
+  flex: 1 1 auto;
+}
+
+.commit-summary {
+  color: var(--fg-secondary);
+  font-size: 11px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.commit-summary.warn {
+  color: var(--status-unversioned);
+}
+
+/* ------------------------------------------------------------------ popups */
+
+.popup {
+  position: fixed;
+  z-index: 40;
+  min-width: 180px;
+  max-width: min(520px, 92vw);
+  max-height: 60vh;
+  overflow: auto;
+  border: 1px solid var(--border);
+  border-radius: 6px;
+  background: var(--panel-bg);
+  box-shadow: 0 8px 28px rgba(0, 0, 0, 0.32);
+  padding: 4px;
+}
+
+.popup .popup-title {
+  padding: 4px 8px;
+  color: var(--fg-muted);
+  font-size: 10px;
+  font-weight: 600;
+  letter-spacing: 0.04em;
+  text-transform: uppercase;
+}
+
+.popup button {
+  display: flex;
+  width: 100%;
+  justify-content: flex-start;
+  gap: 7px;
+  padding: 4px 8px;
+  border-radius: 3px;
+  text-align: left;
+}
+
+.popup button .shortcut {
+  margin-left: auto;
+  padding-left: 16px;
+  color: var(--fg-muted);
+  font-size: 11px;
+}
+
+.popup button[data-checked="true"]::before {
+  content: "✓";
+  width: 10px;
+}
+
+.popup button:not([data-checked])::before {
+  content: "";
+  width: 10px;
+}
+
+.popup .popup-separator {
+  height: 1px;
+  margin: 4px 2px;
+  background: var(--border-soft);
+}
+
+.popup input[type="text"] {
+  width: 100%;
+  margin: 3px 0;
+}
+
+/* ------------------------------------------------------------------- graph */
+
+.log-row {
+  display: grid;
+  grid-template-columns: var(--graph-width, 84px) minmax(0, 1fr);
+  align-items: stretch;
+  min-height: 34px;
+  border-bottom: 1px solid color-mix(in oklab, var(--border-soft) 55%, transparent);
+  cursor: default;
+  user-select: none;
+}
+
+.log-row:hover {
+  background: var(--hover);
+}
+
+/* Same --selection-fg contract as .tree-row above: white on light blue is unreadable. */
+.log-row[aria-selected="true"] {
+  background: var(--selection);
+  color: var(--selection-fg);
+}
+
+.log-row[aria-selected="true"] .log-author,
+.log-row[aria-selected="true"] .log-hash,
+.log-row[aria-selected="true"] .log-date {
+  color: color-mix(in oklab, var(--selection-fg) 78%, transparent);
+}
+
+.log-row.mine .log-subject {
+  font-weight: 700;
+}
+
+.log-row.current-branch {
+  background: color-mix(in oklab, var(--button-primary-bg) 10%, transparent);
+}
+
+.log-row.current-branch[aria-selected="true"] {
+  background: var(--selection);
+}
+
+.log-graph {
+  overflow: hidden;
+}
+
+.log-body {
+  display: flex;
+  flex-direction: column;
+  justify-content: center;
+  gap: 1px;
+  padding: 3px 8px 3px 0;
+  min-width: 0;
+}
+
+.log-subject {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.log-meta-line {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  color: var(--fg-secondary);
+  font-size: 11px;
+  overflow: hidden;
+}
+
+.log-author,
+.log-date,
+.log-hash {
+  color: var(--fg-muted);
+  white-space: nowrap;
+}
+
+.log-hash {
+  font-family: var(--mono-font);
+}
+
+.commit-details {
+  padding: 8px 10px;
+  color: var(--fg-secondary);
+  font-size: 11px;
+}
+
+.commit-details dl {
+  display: grid;
+  grid-template-columns: max-content minmax(0, 1fr);
+  gap: 3px 10px;
+  margin: 0;
+}
+
+.commit-details dt {
+  color: var(--fg-muted);
+}
+
+.commit-details dd {
+  margin: 0;
+  overflow-wrap: anywhere;
+  color: var(--fg);
+}
+
+.commit-details .message-body {
+  margin-top: 8px;
+  white-space: pre-wrap;
+  color: var(--fg);
+  font-family: var(--mono-font);
+  font-size: 11px;
+}
+
+/* ----------------------------------------------------------------- console */
+
+.console {
+  flex: 1 1 auto;
+  overflow: auto;
+  min-height: 0;
+  padding: 6px 8px;
+  background: var(--panel-bg);
+  font-family: var(--mono-font);
+  font-size: 11px;
+  line-height: 1.55;
+}
+
+.console-entry {
+  margin-bottom: 10px;
+}
+
+.console-cmd {
+  color: var(--status-modified);
+  font-weight: 700;
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
+.console-out {
+  margin: 2px 0 0;
+  white-space: pre-wrap;
+  word-break: break-word;
+  color: var(--fg);
+}
+
+.console-out.failure {
+  color: var(--status-conflict);
+}
+
+.console-time {
+  color: var(--fg-muted);
+}
+
+/* ------------------------------------------------------------------- toast */
+
+.toast-layer {
+  position: fixed;
+  right: 12px;
+  /* Top-right, not bottom-right: the bottom-right is the commit area (message
+     box + buttons) in the Commit view, so a success toast landed exactly on
+     the controls the user reaches for next. Top-right only covers read-only
+     list content while it is visible. The progress pill sits top-centre, so
+     the two never overlap — see the busy-feedback agent note. */
+  top: 12px;
+  z-index: 60;
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  pointer-events: none;
+}
+
+.toast {
+  max-width: 340px;
+  padding: 7px 10px;
+  border: 1px solid var(--border);
+  border-left-width: 3px;
+  border-radius: 5px;
+  background: var(--panel-bg);
+  box-shadow: 0 6px 20px rgba(0, 0, 0, 0.3);
+  animation: toast-in 140ms ease-out;
+}
+
+/* Git's own output is multi-line, and collapsing it into one paragraph is how
+   "CONFLICT (content): Merge conflict in f.txt" ends up reading as part of a
+   sentence. */
+.toast {
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
+/* An error toast that has more of Git's output behind it: the toast itself is
+   the target, and this is the label that says so. */
+.toast.clickable {
+  pointer-events: auto;
+}
+
+.toast-link {
+  display: block;
+  margin-top: 6px;
+  padding: 0;
+  border: 0;
+  background: none;
+  color: var(--button-primary-bg);
+  font: inherit;
+  text-decoration: underline;
+  cursor: pointer;
+}
+
+.toast.clickable .toast-link:hover {
+  color: var(--fg);
+}
+
+/* The full output behind a "Show details" link. `.banner-detail` is scoped to
+   the conflict banner, so a dialog outside one had no styling at all — and a
+   4000-character block with no bound would run past the bottom of the window. */
+.dialog-detail {
+  margin-top: 8px;
+  max-height: 45vh;
+  overflow: auto;
+  padding: 6px 8px;
+  border: 1px solid var(--border);
+  border-radius: 4px;
+  background: var(--input-bg);
+  color: var(--fg-secondary);
+  font-family: var(--mono-font);
+  font-size: 11px;
+  line-height: 1.45;
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
+.toast.error {
+  border-left-color: var(--status-conflict);
+}
+
+.toast.info {
+  border-left-color: var(--button-primary-bg);
+}
+
+@keyframes toast-in {
+  from {
+    opacity: 0;
+    transform: translateY(6px);
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  * {
+    animation-duration: 0.01ms !important;
+    transition-duration: 0.01ms !important;
+  }
+}
+
+/* ------------------------------------------------------------ diff overlay */
+
+/*
+ * A commit's diff has no editor tab to live in, so it takes over the tool
+ * window. It has to look like a deliberate surface rather than an unstyled
+ * page: a header that names the file, a hairline under it, and the diff
+ * inset on the panel background.
+ */
+.diff-overlay {
+  position: absolute;
+  inset: 0;
+  z-index: 30;
+  display: flex;
+  flex-direction: column;
+  background: var(--panel-bg);
+}
+
+.diff-overlay-header {
+  gap: 6px;
+  padding: 5px 6px;
+  border-bottom: 1px solid var(--border-soft);
+  background: var(--chrome-bg);
+}
+
+.diff-overlay-title {
+  font-weight: 600;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.diff-overlay-path {
+  color: var(--fg-muted);
+  font-size: 11px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.diff-overlay > .diff {
+  padding-bottom: 12px;
+}
+
+/* The file header is the overlay's own headline; keep it flush, not sticky
+   over the scrolling content it duplicates. */
+.diff-overlay .diff-file-header {
+  position: static;
+  height: 26px;
+  background: var(--panel-alt);
+  font-size: 11px;
+}
+
+.diff-overlay .diff-hunk-header {
+  font-size: 11px;
+}
+
+/* Two number columns in unified view (old | new), one per side otherwise. */
+.diff-line .num {
+  flex: 0 0 auto;
+  width: 30px;
+  padding-right: 6px;
+  color: var(--fg-muted);
+  text-align: right;
+  user-select: none;
+}
+
+.diff-sbs .diff-line .num {
+  width: 34px;
+}
+/* ------------------------------------------------- busy & progress ---- */
+/* Long Git operations (push / fetch / pull / commit / checkout) must never */
+/* look ignored while the process runs: every trigger shows a spinner where */
+/* it was clicked, plus a floating pill so menu actions have feedback too. */
+.spinner {
+  flex: 0 0 auto;
+  width: 12px;
+  height: 12px;
+  border-radius: 50%;
+  border: 1.5px solid currentColor;
+  border-top-color: transparent;
+  opacity: 0.85;
+  animation: pig-spin 0.7s linear infinite;
+}
+.spinner.large {
+  width: 14px;
+  height: 14px;
+  border-width: 2px;
+}
+@keyframes pig-spin {
+  to { transform: rotate(360deg); }
+}
+/* An icon button that is running something: keep its size so the toolbar */
+/* does not jump, spin the mark in place. */
+button.icon.busy {
+  color: var(--fg-secondary);
+  cursor: wait;
+}
+button.icon.busy svg {
+  display: none;
+}
+button.icon.busy .spinner {
+  display: block;
+  margin: 2px;
+}
+/* Text buttons keep their width while busy so the dialog footer stays put. */
+button.busy {
+  cursor: wait;
+}
+button.busy .spinner {
+  margin-right: 6px;
+  vertical-align: -1px;
+}
+/* One floating pill for actions with no button to spin in (branch-menu */
+/* fetch / pull / push / checkout, stash pop): top-centre, above popups, */
+/* below modal dialogs. */
+.task-pill-layer {
+  position: fixed;
+  top: 10px;
+  left: 50%;
+  transform: translateX(-50%);
+  z-index: 70;
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  align-items: center;
+  pointer-events: none;
+}
+.task-pill {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  max-width: min(420px, 90vw);
+  padding: 6px 12px;
+  border: 1px solid var(--border);
+  border-radius: 999px;
+  background: var(--panel-bg);
+  box-shadow: 0 6px 20px rgba(0, 0, 0, 0.28);
+  color: var(--fg-secondary);
+  font-size: 12px;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  animation: task-pill-in 160ms ease-out;
+}
+.task-pill.done {
+  color: var(--status-added);
+}
+.task-pill.failed {
+  color: var(--status-conflict);
+}
+@keyframes task-pill-in {
+  from { opacity: 0; transform: translateY(-6px); }
+}
+/* Push dialog: thin progress track under the subtitle plus a per-row state. */
+.push-progress {
+  height: 3px;
+  margin-top: 8px;
+  border-radius: 2px;
+  background: var(--border-soft);
+  overflow: hidden;
+}
+.push-progress-fill {
+  height: 100%;
+  width: 0;
+  border-radius: 2px;
+  background: var(--button-primary-bg);
+  transition: width 180ms ease-out;
+}
+.push-row.is-active {
+  border-color: var(--button-primary-bg);
+  background: var(--diff-modified);
+}
+.push-row .row-status {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  font-size: 11px;
+}
+.push-row .row-status.pushing {
+  color: var(--fg-secondary);
+}
+.push-row .row-status.ok {
+  color: var(--status-added);
+}
+.push-row .row-status.error {
+  color: var(--status-conflict);
+}
+/* A slow reload reads as loading, not frozen: dim the list a touch. */
+.is-refreshing .scroll.list,
+.is-refreshing .commits-pane {
+  opacity: 0.65;
+  transition: opacity 120ms ease-out;
+}
+
+/* ---- src/layout.css ---- */
+/*
+ * Layout on top of the palette: scrollbars, resizers, the Log tab's pane grid
+ * and the affordances that only exist once the panel gets narrow.
+ */
+
+::-webkit-scrollbar {
+  width: 10px;
+  height: 10px;
+}
+
+::-webkit-scrollbar-track {
+  background: transparent;
+}
+
+::-webkit-scrollbar-thumb {
+  border: 2px solid transparent;
+  border-radius: 6px;
+  background: color-mix(in oklab, var(--fg) 22%, transparent);
+  background-clip: content-box;
+}
+
+::-webkit-scrollbar-thumb:hover {
+  background: color-mix(in oklab, var(--fg) 38%, transparent);
+  background-clip: content-box;
+}
+
+::-webkit-scrollbar-corner {
+  background: transparent;
+}
+
+/* ------------------------------------------------------------------- panes */
+
+/* A vertical splitter that is only visible while hovered or dragged, so the
+   surface keeps IDEA's flat look at rest. */
+.splitter-y {
+  flex: 0 0 auto;
+  height: 5px;
+  margin: -2px 0;
+  z-index: 4;
+  background: transparent;
+  cursor: row-resize;
+}
+
+.splitter-y:hover,
+.splitter-y.active {
+  background: var(--button-primary-bg);
+}
+
+.log-panes {
+  display: flex;
+  flex: 1 1 auto;
+  min-height: 0;
+}
+
+.log-panes > .branches-pane {
+  flex: 0 0 auto;
+  width: var(--branches-width, 168px);
+}
+
+.log-panes > .commits-pane {
+  display: flex;
+  flex: 1 1 auto;
+  flex-direction: column;
+  min-width: 0;
+  min-height: 0;
+}
+
+.log-detail {
+  display: flex;
+  flex: 0 0 auto;
+  flex-direction: column;
+  min-height: 0;
+  height: var(--detail-height, 46%);
+}
+
+.log-detail > .changed-files {
+  flex: 1 1 auto;
+  min-height: 0;
+  overflow: auto;
+}
+
+.log-detail > .details-pane {
+  flex: 0 0 auto;
+  max-height: 45%;
+  overflow: auto;
+  border-top: 1px solid var(--border-soft);
+}
+
+/* Keep the commit list readable when the pane is narrow: the meta line wraps
+   away before the subject does. */
+@media (max-width: 560px) {
+  /* Wrap the author/date/hash line instead of clipping it. */
+  .log-meta-line {
+    flex-wrap: wrap;
+    gap: 4px 8px;
+  }
+
+  /* Shrink the branches pane rather than dropping it: IDEA always shows it,
+     and the Graph Options menu can still hide it on demand. */
+  .log-panes > .branches-pane {
+    width: 128px;
+  }
+}
+
+.commit-view {
+  display: flex;
+  flex: 1 1 auto;
+  min-height: 0;
+}
+
+.commit-changes {
+  display: flex;
+  flex: 0 0 auto;
+  flex-direction: column;
+  width: var(--changes-width, 45%);
+  min-width: 140px;
+  min-height: 0;
+}
+
+.commit-diff {
+  display: flex;
+  flex: 1 1 auto;
+  flex-direction: column;
+  min-width: 0;
+  min-height: 0;
+}
+
+/* Narrow work panels read better stacked than side by side. */
+@media (max-width: 480px) {
+  .commit-view {
+    flex-direction: column;
+  }
+
+  .commit-changes {
+    width: auto;
+    max-height: 45%;
+  }
+
+  .commit-view > .divider-v {
+    display: none;
+  }
+}
+
+/* The changes pane's own search box: wide enough to type a path fragment, and
+   it gives the room back to the tree as soon as the pane narrows. */
+.pane-header .search-field {
+  flex: 0 1 150px;
+  min-width: 0;
+}
+
+.pane-header .search-field input.changes-filter {
+  width: 100%;
+  min-width: 0;
+}
+
+@media (max-width: 520px) {
+  /* Keep the gear, drop the field: filtering is a convenience, the view options
+     are not. */
+  .pane-header .search-field {
+    display: none;
+  }
+}
+
+.branch-chip {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  max-width: 220px;
+  padding: 2px 6px;
+  border: 1px solid transparent;
+  border-radius: var(--radius);
+  cursor: pointer;
+  user-select: none;
+}
+
+.branch-chip:hover {
+  border-color: var(--button-border);
+  background: var(--button-bg);
+}
+
+.branch-chip .name {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  font-weight: 600;
+}
+
+.branch-chip .tracking {
+  display: inline-flex;
+  align-items: center;
+  gap: 3px;
+  color: var(--fg-muted);
+  font-size: 11px;
+  white-space: nowrap;
+}
+
+.ahead {
+  color: var(--status-added);
+}
+
+.behind {
+  color: var(--status-modified);
+}
+
+:root[data-theme="dark"] .behind {
+  color: var(--status-modified);
+}
+
+.hidden {
+  display: none !important;
+}
+
+.muted {
+  color: var(--fg-muted);
+}
+
+.mono {
+  font-family: var(--mono-font);
+}
+
+.nowrap {
+  white-space: nowrap;
+}
+
+.grow {
+  flex: 1 1 auto;
+  min-width: 0;
+}
+
+/*
+ * The commit-actions row carries the checkboxes, the summary, the generate
+ * control, the branch, and the commit buttons. On a narrow work panel that is
+ * more than fits, and the generate button is the one whose meaning survives
+ * losing its label — the sparkles and the tooltip still say it.
+ */
+@media (max-width: 560px) {
+  .gen-label {
+    display: none;
+  }
+}
+
+    </style>
+  </head>
+  <body>
+    <div id="app" class="app"></div>
+    <script>
+window.__PI_IDEA_GIT_SURFACE__ = "git";
+    </script>
+    <script>
+(function () {
+"use strict";
+/* ================= src/common.js ================= */
+/**
+ * Shared runtime for both tool windows: host bridge access, the IDEA wording
+ * (English原文 + 中文), icons, popups and the small layout primitives.
+ *
+ * Everything hangs off one namespace because the pages are built by
+ * concatenating files into a single classic script — see tools/build.mjs.
+ */
+(function (PIG) {
+  "use strict";
+
+  const bridge = window.pluginBridge;
+
+  // ---------------------------------------------------------------- i18n ---
+  // IDEA's own wording is the source of truth for labels, so the English
+  // strings double as the documented feature names.
+  const STRINGS = {
+    en: {
+      commit: "Commit",
+      commitAndPush: "Commit and Push",
+      commitMessage: "Commit Message",
+      commitHistory: "Commit message history",
+      amend: "Amend",
+      signOff: "Sign-off commit",
+      runHooks: "Run Git hooks",
+      changes: "Changes",
+      staged: "Staged",
+      unstaged: "Unstaged",
+      unversioned: "Unversioned Files",
+      conflicts: "Merge Conflicts",
+      noChanges: "No changes",
+      refresh: "Refresh",
+      fetch: "Fetch",
+      pull: "Pull",
+      push: "Push",
+      update: "Update Project",
+      rollback: "Rollback",
+      showDiff: "Show Diff",
+      jumpToSource: "Jump to Source",
+      stage: "Add",
+      stageFile: "Add to index",
+      unstageFile: "Remove from index",
+      stageHunk: "Stage Hunk",
+      unstageHunk: "Unstage Hunk",
+      discardHunk: "Discard Hunk",
+      includeIntoCommit: "Include into commit",
+      discard: "Discard Changes",
+      git: "Git",
+      log: "Log",
+      console: "Console",
+      branches: "Branches",
+      localBranches: "Local branches",
+      remoteBranches: "Remote branches",
+      tags: "Tags",
+      changedFiles: "Changed Files",
+      commitDetails: "Commit Details",
+      graphOptions: "Graph Options",
+      byCommitDate: "By commit date",
+      topologically: "Topologically",
+      showFirstParent: "Show First Parent",
+      noMerges: "No Merges",
+      showGraph: "Show Graph",
+      search: "Search",
+      filterByBranch: "Branch",
+      filterByUser: "User",
+      filterByPaths: "Paths",
+      allBranches: "All Branches",
+      author: "Author",
+      date: "Date",
+      hash: "Hash",
+      subject: "Subject",
+      message: "Message",
+      all: "All",
+      checkoutRevision: "Checkout Revision",
+      newBranchFromHere: "New Branch from Here",
+      newTag: "New Tag",
+      cherryPick: "Cherry-Pick",
+      revert: "Revert",
+      resetToHere: "Reset Current Branch to Here",
+      editCommitMessage: "Edit Commit Message",
+      copyRevisionNumber: "Copy Revision Number",
+      copyMessage: "Copy Message",
+      compareWithLocal: "Compare with Local",
+      compareWithHead: "Compare with HEAD",
+      showRepository: "Show Repository",
+      soft: "Soft",
+      mixed: "Mixed",
+      hard: "Hard",
+      reset: "Reset",
+      newBranch: "New Branch",
+      checkout: "Checkout",
+      mergeIntoCurrent: "Merge into Current",
+      merge: "Merge",
+      rebase: "Rebase",
+      rebaseOnto: "Rebase Current onto Selected",
+      deleteBranch: "Delete",
+      renameBranch: "Rename",
+      setUpstream: "Set Upstream",
+      unsetUpstream: "Unset Upstream",
+      copyBranchName: "Copy Branch Name",
+      pushTag: "Push Tag",
+      deleteTag: "Delete Tag",
+      showStash: "Show Stash",
+      goToHead: "Go to HEAD",
+      mineOnly: "Mine only",
+      recentUsers: "Recent committers",
+      filterUserPlaceholder: "Name or email, Enter to filter…",
+      anyTime: "Any time",
+      lastDay: "Last 24 hours",
+      lastWeek: "Last week",
+      lastMonth: "Last month",
+      prune: "Prune",
+      stashes: "Stashes",
+      remotes: "Remotes",
+      mergeTitle: "Merge into the current branch?",
+      rebaseTitle: "Rebase the current branch?",
+      deleteBranchTitle: "Delete this branch?",
+      renameTitle: "Rename branch",
+      setUpstreamTitle: "Set upstream",
+      deleteTagTitle: "Delete this tag?",
+      mergeConflicts: "The merge stopped on conflicts — resolve them in the Changes list, then commit to finish.",
+      rebaseConflicts: "The rebase stopped on conflicts — resolve them in the Changes list, then continue.",
+      stash: "Stash",
+      stashChanges: "Stash Changes",
+      unstash: "Unstash",
+      dropStash: "Drop",
+      applyStash: "Apply Stash",
+      stashMessage: "Stash message",
+      unified: "Unified viewer",
+      sideBySide: "Side-by-side viewer",
+      collapseUnchanged: "Collapse Unchanged Fragments",
+      ignoreDifferences: "Ignore Differences",
+      ignoreNone: "None",
+      ignoreTrim: "Trim whitespaces",
+      ignoreWhitespace: "Ignore whitespaces",
+      ignoreWhitespaceAndEmpty: "Ignore whitespaces and empty lines",
+      showWhitespaces: "Show Whitespaces",
+      showLineNumbers: "Show Line Numbers",
+      previousDifference: "Previous Difference",
+      nextDifference: "Next Difference",
+      whiteSpaceOnly: "whitespace only",
+      binaryDiff: "Binary file — no textual diff",
+      noDiff: "No differences",
+      clearAll: "Clear All",
+      notARepository: "Not a Git repository",
+      noWorkspace: "No workspace is open",
+      gitMissing: "Git executable not found",
+      pickFile: "Select a file to see its diff",
+      files: "files",
+      selected: "selected",
+      nothingStaged: "Nothing is staged",
+      inProgress: "Merge or rebase in progress",
+      copy: "Copy",
+      copied: "Copied",
+      cancel: "Cancel",
+      ok: "OK",
+      close: "Close",
+      showDetails: "Show Details",
+      viewOptions: "View Options",
+      branchLabel: "Branch",
+      head: "HEAD",
+      uncommitted: "uncommitted changes",
+      loading: "Loading…",
+      conflictNotice: "Resolve conflicts before committing",
+      unversionedNotice: "Unversioned files must be added before they can be committed",
+      allChanges: "All Changes",
+      flat: "Flat",
+      groupByDirectory: "Group by Directory",
+      openFile: "Open File",
+      revealInFileManager: "Reveal in File Manager",
+      stageAllChanges: "Add All to Index",
+      unstageAllChanges: "Remove All from Index",
+      noCommits: "No commits yet",
+      filesChanged: "files changed",
+      outgoing: "outgoing commits",
+      incoming: "incoming commits",
+      diff: "Diff",
+      submodule: "submodule",
+      authSsh: "Your Git has no credential the plugin can use for this remote. It runs your own git, so configure the remote the same way your terminal does: use an HTTPS URL, or make the key work without ssh-agent (the host does not pass SSH_AUTH_SOCK, so agent-held keys cannot be unlocked). On macOS, `UseKeychain yes` in ~/.ssh/config is enough.",
+      authCredentials: "No stored credential for this remote, and there is no terminal here to type one. Push once from a terminal to let your credential helper store it, then retry.",
+      generateMessage: "Generate Commit Message",
+      generating: "Generating…",
+      generateOptions: "Model and options",
+      modelLabel: "Model",
+      commitLanguage: "Message language",
+      langAuto: "Match repository history",
+      langChinese: "Simplified Chinese",
+      langEnglish: "English",
+      noModel: "No AI provider is ready to use. Add one, or sign one in, under Settings → AI providers.",
+      modelPermission: "The plugin has not been granted access to your models yet, so it cannot list them. Reload it: Extensions → ··· → Load local plugin, and approve the new permissions.",
+      modelPermissionShort: "Cannot list your models — reload to grant access",
+      rateLimited: "Too many generations in a row (the host allows 8 per minute). Wait a moment and try again.",
+      nothingToDescribe: "Nothing to describe: stage a change, or select a file in the Changes list first.",
+      draftTimeout: "The model did not answer in time.",
+      replaceDraft: "Replace your draft?",
+      replaceDraftBody: "Generating a message overwrites what you have already typed.",
+      replace: "Replace",
+      draftedStaged: "Commit message drafted from checked (staged) changes",
+      draftedFile: "Commit message drafted from {{file}}",
+      submoduleBadge: "submodule",
+      submoduleInside: "This change is inside the submodule {{path}}. The parent repository can only record which commit the submodule points at, so it cannot be committed from here. Switch to the submodule in the repository list (top left), commit there, then come back and stage it here.",
+      submoduleStagedHint: "Staged the submodule's commit. Its own uncommitted changes stay inside it and still show as unstaged.",
+      repository: "Repository",
+      switchRepository: "Switch repository",
+      repositoryList: "Repositories",
+      nestedRepoBadge: "nested repository",
+      nestedRepoHint: "A Git repository that lives inside this one without being a submodule: the parent stores none of its files.",
+      appShortcutHint: "The command palette belongs to the app: click back into the main window first, or press Alt+Space for the plugin launcher.",
+      dropStashConfirm: "Drop this stash?",
+      noMatchingChanges: "No changes match the filter",
+      filterChanges: "Filter changes",
+      compactMiddleDirs: "Compact Middle Directories",
+      collapseAll: "Collapse All",
+      includeFolder: "Include this folder into commit",
+      unincludeFolder: "Exclude this folder from commit",
+      repositoryHint: "Open a folder that is inside a Git repository.",
+      remoteAhead: "The remote branch has commits you do not have. Fetch, then Pull, and push again — or, if the local history is the one to keep, use Force Push from the branch menu.",
+      pushRejected: "The server refused the push — the branch is probably protected, or a hook rejected it.",
+      pullDiverged: "Local and remote have diverged. Merge or rebase, then push.",
+      // Not "then commit": a pull that rebases (the user's own `pull.rebase`)
+      // stops on conflicts too, and there the finish is Continue. The status
+      // line above the commit button knows which one it is; this only has to
+      // send the user there.
+      pullConflicts: "The pull stopped on conflicts — resolve them in the Changes list, then finish it there.",
+      mergeInProgress: "Merging — resolve the conflicts, then commit to finish.",
+      rebaseInProgress: "Rebasing — resolve the conflicts, then continue.",
+      cherryPickInProgress: "Cherry-picking — resolve the conflicts, then continue.",
+      revertInProgress: "Reverting — resolve the conflicts, then continue.",
+      abortOperation: "Abort",
+      continueOperation: "Continue",
+      forcePush: "Force Push (with lease)",
+      forcePushTitle: "Overwrite the remote branch?",
+      forcePushBody: "This rewrites {{branch}} on {{remote}}: commits that are there and not here are dropped. The lease means it only runs while the remote is still where this window last saw it, so a push from someone else is refused instead of erased.",
+      gitOutput: "Git output",
+      showDetail: "Show details",
+       commitSummary: "{{staged}} of {{total}} file{{s}} will be committed",
+       generateScope: "{{action}} · {{lang}} (uses checked/staged changes)",
+       collapsedLines: "⋮ {{count}} unchanged line{{s}}",
+       copyPath: "Copy Path",
+       switchToRepo: "Switch to this repository",
+       submoduleGroup: "{{rel}} ({{kind}} · {{branch}})",
+       commitMultipleRepos: "Commit {{count}} repositories with the same message",
+       submoduleCommitted: "{{rel}} committed",
+       siblingRepoBadge: "sibling repository",
+       siblingRepoHint: "A repository that sits next to the current one in the same folder, not inside it.",
+       pushDialogTitle: "Push",
+       pushDialogSubtitle: "Push each repository's commits to its own remote.",
+       pushAll: "Push All",
+       pushSelected: "Push Selected",
+      pushing: "Pushing…",
+      committing: "Committing…",
+      committingAndPushing: "Committing and pushing…",
+      fetching: "Fetching…",
+      pulling: "Pulling…",
+      checkingOut: "Checking out…",
+      stashing: "Stashing…",
+      unstashing: "Restoring stash…",
+      pushingRepo: "Pushing {{done}} of {{total}}…",
+       pushed: "Pushed",
+       pushedRepos: "Pushed {{count}} repositories",
+       pushPartial: "Pushed {{ok}} of {{total}} repositories",
+       pushNoUpstream: "no upstream",
+       pushNoRemote: "no remote to push to",
+       pushUpToDate: "up to date",
+       pushNothingToPush: "Nothing to push: every repository is up to date.",
+       pushDialogHint: "Only the checked repositories are pushed. A failure in one does not stop the others.",
+       pushRowPushed: "{{branch}} → {{remote}}/{{branch}}",
+       relativeJustNow: "just now",
+      relativeMinutesAgo: "{{count}} minute{{s}} ago",
+      relativeHoursAgo: "{{count}} hour{{s}} ago",
+      relativeDaysAgo: "{{count}} day{{s}} ago",
+    },
+    "zh-CN": {
+      commit: "提交",
+      commitAndPush: "提交并推送",
+      commitMessage: "提交信息",
+      commitHistory: "提交信息历史",
+      amend: "修正上一次提交",
+      signOff: "签名",
+      runHooks: "运行 Git 钩子",
+      changes: "变更",
+      staged: "已暂存",
+      unstaged: "未暂存",
+      unversioned: "未纳入版本控制的文件",
+      conflicts: "合并冲突",
+      noChanges: "没有变更",
+      refresh: "刷新",
+      fetch: "抓取",
+      pull: "拉取",
+      push: "推送",
+      update: "更新项目",
+      rollback: "回滚",
+      showDiff: "显示差异",
+      jumpToSource: "跳到源文件",
+      stage: "添加到索引",
+      stageFile: "添加到索引",
+      unstageFile: "从索引中移除",
+      stageHunk: "暂存该代码块",
+      unstageHunk: "取消暂存该代码块",
+      discardHunk: "丢弃该代码块",
+      includeIntoCommit: "纳入本次提交",
+      discard: "丢弃更改",
+      git: "Git",
+      log: "日志",
+      console: "控制台",
+      branches: "分支",
+      localBranches: "本地分支",
+      remoteBranches: "远程分支",
+      tags: "标签",
+      changedFiles: "变更的文件",
+      commitDetails: "提交详情",
+      graphOptions: "提交图选项",
+      byCommitDate: "按提交时间",
+      topologically: "按拓扑顺序",
+      showFirstParent: "仅第一条父提交",
+      noMerges: "隐藏合并提交",
+      showGraph: "显示提交图",
+      search: "搜索",
+      filterByBranch: "分支",
+      filterByUser: "提交者",
+      filterByPaths: "路径",
+      allBranches: "所有分支",
+      author: "作者",
+      date: "日期",
+      hash: "哈希",
+      subject: "说明",
+      message: "信息",
+      all: "全部",
+      checkoutRevision: "检出该修订",
+      newBranchFromHere: "从此处新建分支",
+      newTag: "新建标签",
+      cherryPick: "拣选",
+      revert: "反转提交",
+      resetToHere: "将当前分支重置到此处",
+      editCommitMessage: "修改提交信息",
+      copyRevisionNumber: "复制修订号",
+      copyMessage: "复制提交信息",
+      compareWithLocal: "与本地比较",
+      compareWithHead: "与 HEAD 比较",
+      showRepository: "显示仓库",
+      soft: "Soft",
+      mixed: "Mixed",
+      hard: "Hard",
+      reset: "重置",
+      newBranch: "新建分支",
+      checkout: "检出",
+      mergeIntoCurrent: "合并到当前分支",
+      merge: "合并",
+      rebase: "变基",
+      rebaseOnto: "将当前分支变基到此分支",
+      deleteBranch: "删除",
+      renameBranch: "重命名",
+      setUpstream: "设置上游分支",
+      unsetUpstream: "取消上游关联",
+      copyBranchName: "复制分支名",
+      pushTag: "推送标签",
+      deleteTag: "删除标签",
+      showStash: "查看储藏",
+      goToHead: "回到 HEAD",
+      mineOnly: "只看我的",
+      recentUsers: "最近提交者",
+      filterUserPlaceholder: "输入姓名或邮箱，回车过滤…",
+      anyTime: "全部时间",
+      lastDay: "最近 24 小时",
+      lastWeek: "最近一周",
+      lastMonth: "最近一月",
+      prune: "清理已删除的远端分支",
+      stashes: "储藏",
+      remotes: "远端",
+      mergeTitle: "合并到当前分支？",
+      rebaseTitle: "把当前分支变基到所选分支？",
+      deleteBranchTitle: "删除该分支？",
+      renameTitle: "重命名分支",
+      setUpstreamTitle: "设置上游分支",
+      deleteTagTitle: "删除该标签？",
+      mergeConflicts: "合并因冲突停下 — 请在变更列表里解决冲突，然后提交完成。",
+      rebaseConflicts: "变基因冲突停下 — 请在变更列表里解决冲突，然后点「继续」。",
+      stash: "储藏",
+      stashChanges: "储藏更改",
+      unstash: "取消储藏",
+      dropStash: "删除储藏",
+      applyStash: "应用储藏",
+      stashMessage: "储藏说明",
+      unified: "单栏视图",
+      sideBySide: "并排视图",
+      collapseUnchanged: "折叠未修改的片段",
+      ignoreDifferences: "忽略差异",
+      ignoreNone: "不忽略",
+      ignoreTrim: "忽略行尾空白",
+      ignoreWhitespace: "忽略空白",
+      ignoreWhitespaceAndEmpty: "忽略空白与空行",
+      showWhitespaces: "显示空白字符",
+      showLineNumbers: "显示行号",
+      previousDifference: "上一处差异",
+      nextDifference: "下一处差异",
+      whiteSpaceOnly: "仅空白差异",
+      binaryDiff: "二进制文件，无文本差异",
+      noDiff: "没有差异",
+      clearAll: "全部清空",
+      notARepository: "不是 Git 仓库",
+      noWorkspace: "没有打开的工作区",
+      gitMissing: "找不到 git 可执行文件",
+      pickFile: "选择一个文件查看差异",
+      files: "个文件",
+      selected: "已选择",
+      nothingStaged: "暂存区为空",
+      inProgress: "正在进行合并或变基",
+      copy: "复制",
+      copied: "已复制",
+      cancel: "取消",
+      ok: "确定",
+      close: "关闭",
+      showDetails: "显示详情",
+      viewOptions: "视图选项",
+      branchLabel: "分支",
+      head: "HEAD",
+      uncommitted: "未提交的更改",
+      loading: "加载中…",
+      conflictNotice: "请先解决冲突再提交",
+      unversionedNotice: "未纳入版本控制的文件需要先添加到索引",
+      allChanges: "全部更改",
+      flat: "平铺",
+      groupByDirectory: "按目录分组",
+      openFile: "打开文件",
+      revealInFileManager: "在文件管理器中显示",
+      stageAllChanges: "全部添加到索引",
+      unstageAllChanges: "全部从索引中移除",
+      noCommits: "暂无提交",
+      filesChanged: "个文件有变更",
+      outgoing: "待推送的提交",
+      incoming: "待拉取的提交",
+      submodule: "子模块",
+      authSsh: "插件用的就是你自己的 git，但这个远端没有它可用的凭据。请按你终端里的方式配好远端：改用 HTTPS 地址，或让密钥不依赖 ssh-agent（宿主不传递 SSH_AUTH_SOCK，所以放在 agent 里的密钥解不开）。macOS 上在 ~/.ssh/config 里加 `UseKeychain yes` 即可。",
+      authCredentials: "这个远端没有已保存的凭据，而这里没有终端可以输入密码。请在终端里手动 push 一次，让凭据助手把它存下来，然后再重试。",
+      generateMessage: "生成提交信息",
+      generating: "生成中…",
+      generateOptions: "模型与选项",
+      modelLabel: "模型",
+      commitLanguage: "提交信息语言",
+      langAuto: "跟随仓库历史",
+      langChinese: "简体中文",
+      langEnglish: "英文",
+      noModel: "没有可用的 AI 服务：请先在「设置 → AI 服务」中添加或登录一个。",
+      modelPermission: "插件还没有拿到读取模型的权限，因此列不出模型。请重新加载：扩展页 → 右上角 ··· → 「加载本地插件」，并同意新增的权限。",
+      modelPermissionShort: "无法列出模型 — 需重新加载以授权",
+      rateLimited: "连续生成次数过多（宿主限制每分钟 8 次）。请稍等片刻再试。",
+      nothingToDescribe: "没有可描述的内容：请先暂存改动，或在变更列表里选中一个文件。",
+      draftTimeout: "模型未在规定时间内返回。",
+      replaceDraft: "替换当前草稿？",
+      replaceDraftBody: "生成会覆盖你已经输入的内容。",
+      replace: "替换",
+      draftedStaged: "已生成提交信息（来源：已勾选/已暂存内容）",
+      draftedFile: "已生成提交信息（来源：{{file}}）",
+      submoduleBadge: "子模块",
+      submoduleInside: "这个改动在子模块 {{path}} 内部。父仓库只能记录子模块指向哪个提交，无法从这里把它提交掉。请在左上角的仓库列表里切换到该子模块，在里面提交，再回到这里暂存。",
+      submoduleStagedHint: "已暂存子模块指向的提交。子模块内部未提交的改动仍然留在里面，所以它依旧显示为未暂存。",
+      repository: "仓库",
+      switchRepository: "切换仓库",
+      repositoryList: "仓库列表",
+      nestedRepoBadge: "嵌套仓库",
+      nestedRepoHint: "这个 Git 仓库位于当前仓库内部，但不是子模块：父仓库不保存它的任何文件。",
+      appShortcutHint: "命令面板由宿主提供，需先点回主窗口；或在视图内按 Alt+Space 打开插件启动器。",
+      diff: "差异",
+      dropStashConfirm: "删除该储藏？",
+      noMatchingChanges: "没有匹配的变更",
+      filterChanges: "筛选变更",
+      includeFolder: "把该文件夹纳入本次提交",
+      unincludeFolder: "把该文件夹排除出本次提交",
+      compactMiddleDirs: "折叠中间目录",
+      collapseAll: "全部折叠",
+      repositoryHint: "请打开一个位于 Git 仓库内的文件夹。",
+      remoteAhead: "远端分支上有你还没有的提交。请先 Fetch，再 Pull，然后重新推送；若要以本地历史为准，用分支菜单里的「强制推送」。",
+      pushRejected: "服务端拒绝了这次推送 — 分支可能受保护，或被钩子拦下。",
+      pullDiverged: "本地与远端已分叉：请先合并或变基，再推送。",
+      pullConflicts: "拉取因冲突停下 — 请在变更列表里解决冲突，然后在那里收尾。",
+      mergeInProgress: "合并进行中 — 解决冲突后提交即可完成",
+      rebaseInProgress: "变基进行中 — 解决冲突后点「继续」",
+      cherryPickInProgress: "拣选进行中 — 解决冲突后点「继续」",
+      revertInProgress: "还原进行中 — 解决冲突后点「继续」",
+      abortOperation: "中止",
+      continueOperation: "继续",
+      forcePush: "强制推送（with lease）",
+      forcePushTitle: "覆盖远端分支？",
+      forcePushBody: "这会把 {{remote}} 上的 {{branch}} 重写为本地提交：只存在于远端的提交将被丢弃。lease 的含义是只有远端仍停在本窗口上次看到的位置时才执行，因此他人的推送会被拒绝，而不是被覆盖。",
+      gitOutput: "Git 输出",
+      showDetail: "查看详情",
+       commitSummary: "将提交 {{staged}} / {{total}} 个文件",
+       generateScope: "{{action}} · {{lang}}（基于已勾选/已暂存内容）",
+       collapsedLines: "⋮ {{count}} 行未修改",
+       copyPath: "复制路径",
+      switchToRepo: "切换到该仓库",
+      submoduleGroup: "{{rel}}（{{kind}} · {{branch}}）",
+      commitMultipleRepos: "将用同一提交信息提交 {{count}} 个仓库",
+      submoduleCommitted: "{{rel}} 已提交",
+      siblingRepoBadge: "平级仓库",
+      siblingRepoHint: "与当前仓库在同一文件夹下的仓库，不是它的子目录。",
+      pushDialogTitle: "推送",
+      pushDialogSubtitle: "把每个仓库的提交推送到它自己的远端。",
+      pushAll: "全部推送",
+      pushSelected: "推送所选",
+      pushing: "推送中…",
+      committing: "提交中…",
+      committingAndPushing: "提交并推送中…",
+      fetching: "抓取中…",
+      pulling: "拉取中…",
+      checkingOut: "检出中…",
+      stashing: "储藏中…",
+      unstashing: "正在恢复储藏…",
+      pushingRepo: "正在推送 {{done}} / {{total}}…",
+      pushed: "已推送",
+      pushedRepos: "已推送 {{count}} 个仓库",
+      pushPartial: "已推送 {{ok}} / {{total}} 个仓库",
+      pushNoUpstream: "无上游分支",
+      pushNoRemote: "没有可推送的远端",
+      pushUpToDate: "已是最新",
+      pushNothingToPush: "没有可推送的内容：所有仓库都是最新的。",
+      pushDialogHint: "只推送勾选的仓库，其中一个失败不会阻止其他仓库。",
+      pushRowPushed: "{{branch}} → {{remote}}/{{branch}}",
+      relativeJustNow: "刚刚",
+      relativeMinutesAgo: "{{count}} 分钟前",
+      relativeHoursAgo: "{{count}} 小时前",
+      relativeDaysAgo: "{{count}} 天前",
+    },
+  };
+
+  const state = { locale: "en", theme: "dark" };
+
+  function resolveLocale(raw) {
+    const value = String(raw ?? "").replace("_", "-").toLowerCase();
+    if (value.startsWith("zh")) return "zh-CN";
+    return "en";
+  }
+
+  state.locale = resolveLocale(navigator.language);
+
+  /** Look up IDEA's wording for the active locale, falling back to English. */
+  function t(key) {
+    const table = STRINGS[state.locale] ?? STRINGS.en;
+    return table[key] ?? STRINGS.en[key] ?? key;
+  }
+
+  /**
+   * Same lookup, with `{{name}}` placeholders filled in. Whole sentences belong
+   * in one key: gluing a translation together from fragments is how you get
+   * grammar that reads like a machine wrote it.
+   */
+  function tf(key, vars) {
+    return t(key).replace(/\{\{(\w+)\}\}/g, (match, name) => (
+      vars && vars[name] !== undefined ? String(vars[name]) : match
+    ));
+  }
+
+  // -------------------------------------------------------------- bridge ---
+  /** Every host call goes through here so a failure is data, never a throw. */
+  async function invoke(channel, payload) {
+    if (!bridge?.invoke) {
+      // Dev-only path (outside PI-Desktop): reuse an existing host-state key
+      // rather than a hardcoded English fallback so user copy stays in t().
+      return { ok: false, message: t("noWorkspace") };
+    }
+    try {
+      const result = await bridge.invoke(channel, payload ?? {});
+      if (!result || typeof result !== "object") {
+        // Keep the channel for diagnosis; the prefix is an existing key.
+        return { ok: false, message: `${t("gitOutput")}: ${channel}` };
+      }
+      return result;
+    } catch (error) {
+      return { ok: false, message: String(error?.message ?? error) };
+    }
+  }
+
+  async function copyText(text) {
+    const result = await invoke("clipboard.writeText", { text: String(text ?? "") });
+    // Reuse the existing action key; the error level already says it failed.
+    toast(result.ok ? t("copied") : result.message ?? t("copy"), result.ok ? "info" : "error");
+  }
+
+  // --------------------------------------------------------------- dom ----
+  // No `html:` branch: innerHTML with user content is an XSS sink. Build with
+  // `text` and element children instead; only static templates may use
+  // innerHTML at their own call site, never through h(). Zero `html:` callers.
+  function h(tag, props, children) {
+    const node = document.createElement(tag);
+    if (props) {
+      for (const [key, value] of Object.entries(props)) {
+        if (value === undefined || value === null || value === false) continue;
+        if (key === "class") node.className = value;
+        else if (key === "text") node.textContent = value;
+        else if (key === "style" && typeof value === "object") Object.assign(node.style, value);
+        else if (key === "dataset") Object.assign(node.dataset, value);
+        else if (key.startsWith("on") && typeof value === "function") {
+          node.addEventListener(key.slice(2).toLowerCase(), value);
+        } else if (value === true) node.setAttribute(key, "");
+        else node.setAttribute(key, String(value));
+      }
+    }
+    for (const child of children ?? []) {
+      if (child === null || child === undefined || child === false) continue;
+      node.append(typeof child === "string" || typeof child === "number" ? String(child) : child);
+    }
+    return node;
+  }
+
+  function clear(node) {
+    while (node.firstChild) node.removeChild(node.firstChild);
+    return node;
+  }
+
+  const SVG_NS = "http://www.w3.org/2000/svg";
+
+  // Icons are built from primitives rather than opaque path blobs so they stay
+  // editable; each entry is a list of [tagName, attributes] children.
+  const ICONS = {
+    refresh: [["path", { d: "M12.6 8.4a4.6 4.6 0 1 1-1.4-3.4" }], ["path", { d: "M12.6 3.4v2.6h-2.6" }]],
+    fetch: [["path", { d: "M8 2.6v7.4" }], ["path", { d: "M5 7.2 8 10.2l3-3" }], ["path", { d: "M3 13.2h10" }]],
+    push: [["path", { d: "M8 13.4V6" }], ["path", { d: "M5 8.8 8 5.8l3 3" }], ["path", { d: "M3 2.8h10" }]],
+    commit: [["circle", { cx: 8, cy: 8, r: 3.1 }], ["path", { d: "M1.6 8h3.3M11.1 8h3.3" }]],
+    branch: [["circle", { cx: 4, cy: 3.6, r: 1.6 }], ["circle", { cx: 4, cy: 12.4, r: 1.6 }], ["circle", { cx: 12, cy: 6.6, r: 1.6 }], ["path", { d: "M4 5.2v5.6" }], ["path", { d: "M4 8.4h4a3.4 3.4 0 0 0 3.4-3.4v-.2" }]],
+    rollback: [["path", { d: "M3.4 8.4a4.6 4.6 0 1 0 1.4-3.4" }], ["path", { d: "M3.4 3.4v2.6H6" }]],
+    diff: [["rect", { x: 2, y: 2, width: 7.5, height: 12, rx: 1 }], ["path", { d: "M11 5.5h2.2A.8.8 0 0 1 14 6.3v6.4a.8.8 0 0 1-.8.8H11" }]],
+    plus: [["path", { d: "M8 3.4v9.2M3.4 8h9.2" }]],
+    minus: [["path", { d: "M3.4 8h9.2" }]],
+    close: [["path", { d: "M4 4l8 8M12 4l-8 8" }]],
+    check: [["path", { d: "M3.2 8.6l3.2 3.2 6.4-8" }]],
+    gear: [["circle", { cx: 8, cy: 8, r: 2.2 }], ["path", { d: "M8 1.8v2M8 12.2v2M1.8 8h2M12.2 8h2M3.6 3.6l1.4 1.4M11 11l1.4 1.4M12.4 3.6 11 5M5 11l-1.4 1.4" }]],
+    search: [["circle", { cx: 7, cy: 7, r: 4.2 }], ["path", { d: "M10.2 10.2 14 14" }]],
+    clock: [["circle", { cx: 8, cy: 8, r: 5.6 }], ["path", { d: "M8 4.6V8l2.6 1.8" }]],
+    copy: [["rect", { x: 5.4, y: 5.4, width: 8.2, height: 8.2, rx: 1.2 }], ["path", { d: "M10.6 5.4V3.6a1.2 1.2 0 0 0-1.2-1.2H3.6a1.2 1.2 0 0 0-1.2 1.2v5.8a1.2 1.2 0 0 0 1.2 1.2h1.8" }]],
+    trash: [["path", { d: "M3 4.4h10" }], ["path", { d: "M6.4 4.4V3.2h3.2v1.2" }], ["path", { d: "M4.4 4.4l.6 8.4h6l.6-8.4" }]],
+    folder: [["path", { d: "M2 4.4A1.4 1.4 0 0 1 3.4 3h2.4l1.4 1.8h5.4A1.4 1.4 0 0 1 14 6.2v5.4A1.4 1.4 0 0 1 12.6 13H3.4A1.4 1.4 0 0 1 2 11.6z" }]],
+    file: [["path", { d: "M4 2h5l3 3v9H4z" }], ["path", { d: "M9 2v3h3" }]],
+    list: [["path", { d: "M2.6 4h1.6M2.6 8h1.6M2.6 12h1.6" }], ["path", { d: "M7 4h6.4M7 8h6.4M7 12h6.4" }]],
+    tag: [["path", { d: "M2.6 7.4 7.4 2.6h5.2a1 1 0 0 1 1 1v5.2l-4.8 4.8a1 1 0 0 1-1.4 0l-4.8-4.8a1 1 0 0 1 0-1.4z" }], ["circle", { cx: 10.6, cy: 5.4, r: 1 }]],
+    external: [["path", { d: "M6.6 3.4H3.4v9.2h9.2V9.4" }], ["path", { d: "M9.4 2.6h4v4" }], ["path", { d: "M13.4 2.6 7.8 8.2" }]],
+    columns: [["rect", { x: 2, y: 3, width: 12, height: 10, rx: 1 }], ["path", { d: "M8 3v10" }]],
+    collapse: [["path", { d: "M4 6.4 8 2.6l4 3.8" }], ["path", { d: "M4 9.6 8 13.4l4-3.8" }]],
+    eye: [["path", { d: "M1.8 8S4.2 4 8 4s6.2 4 6.2 4-2.4 4-6.2 4-6.2-4-6.2-4z" }], ["circle", { cx: 8, cy: 8, r: 1.7 }]],
+    more: [["circle", { cx: 8, cy: 3.4, r: 1.1 }], ["circle", { cx: 8, cy: 8, r: 1.1 }], ["circle", { cx: 8, cy: 12.6, r: 1.1 }]],
+    chevronRight: [["path", { d: "M6.4 3.6 10.8 8l-4.4 4.4" }]],
+    chevronDown: [["path", { d: "M3.6 6.4 8 10.8l4.4-4.4" }]],
+    arrowUp: [["path", { d: "M8 13V3.6" }], ["path", { d: "M4.8 6.8 8 3.6l3.2 3.2" }]],
+    arrowDown: [["path", { d: "M8 3v9.4" }], ["path", { d: "M4.8 9.2 8 12.4l3.2-3.2" }]],
+    warning: [["path", { d: "M8 2.4 14.4 13.6H1.6z" }], ["path", { d: "M8 6.2v3.4" }], ["circle", { cx: 8, cy: 11.6, r: 0.7 }]],
+    // Two sparkles: the conventional mark for "let the model draft this".
+    sparkles: [["path", { d: "M6.4 2.2 7.7 5.5l3.3 1.3-3.3 1.3L6.4 11.4 5.1 8.1 1.8 6.8l3.3-1.3z" }], ["path", { d: "M12.2 9.6l.6 1.6 1.6.6-1.6.6-.6 1.6-.6-1.6-1.6-.6 1.6-.6z" }]],
+  };
+
+  function icon(name, size) {
+    const parts = ICONS[name] ?? ICONS.file;
+    const svg = document.createElementNS(SVG_NS, "svg");
+    const dimension = size ?? 16;
+    svg.setAttribute("viewBox", "0 0 16 16");
+    svg.setAttribute("width", String(dimension));
+    svg.setAttribute("height", String(dimension));
+    svg.setAttribute("fill", "none");
+    svg.setAttribute("stroke", "currentColor");
+    svg.setAttribute("stroke-width", "1.35");
+    svg.setAttribute("stroke-linecap", "round");
+    svg.setAttribute("stroke-linejoin", "round");
+    svg.setAttribute("aria-hidden", "true");
+    for (const [tag, attributes] of parts) {
+      const child = document.createElementNS(SVG_NS, tag);
+      for (const [key, value] of Object.entries(attributes)) child.setAttribute(key, String(value));
+      svg.append(child);
+    }
+    return svg;
+  }
+
+  /** A toolbar button with a tooltip, the IDEA affordance used everywhere. */
+  function iconButton(name, title, onClick, options) {
+    const button = h("button", {
+      class: options?.class ?? "icon",
+      type: "button",
+      title: options?.shortcut ? `${title} (${options.shortcut})` : title,
+      "aria-label": title,
+      disabled: options?.disabled,
+      onclick: onClick,
+    }, [icon(name, options?.size)]);
+    return button;
+  }
+
+  function textButton(label, title, onClick, options) {
+    return h("button", {
+      class: options?.class ?? "bordered",
+      type: "button",
+      title: title ?? label,
+      disabled: options?.disabled,
+      onclick: onClick,
+    }, [label]);
+  }
+
+  // ----------------------------------------------------------- shortcuts ---
+  /**
+   * Keyboard support has to live in the page.
+   *
+   * The host runs the app's own shortcuts from the *main window's* renderer
+   * (`window.addEventListener("keydown", …)`), and a plugin view is a separate
+   * `WebContentsView` with its own webContents — so keys pressed while a view
+   * has focus never reach the host's handler. Anything a button advertises,
+   * therefore, has to be bound here. `format()` exists so a tooltip is derived
+   * from the binding and can never advertise a key that does nothing.
+   */
+  const IS_MAC = /mac/i.test(navigator.userAgent);
+
+  function shortcutKey(event) {
+    const key = String(event.key ?? "");
+    return key.length === 1 ? key.toLowerCase() : key;
+  }
+
+  function matchesShortcut(spec, event) {
+    if (shortcutKey(event) !== shortcutKey({ key: spec.key })) return false;
+    const primary = IS_MAC ? event.metaKey : event.ctrlKey;
+    const secondary = IS_MAC ? event.ctrlKey : event.metaKey;
+    if (spec.mod) {
+      if (!primary || secondary) return false;
+    } else if (spec.ctrl) {
+      if (!event.ctrlKey) return false;
+    } else if (spec.meta) {
+      if (!event.metaKey) return false;
+    } else if (primary || secondary) {
+      return false;
+    }
+    if (Boolean(spec.alt) !== event.altKey) return false;
+    if (Boolean(spec.shift) !== event.shiftKey) return false;
+    return true;
+  }
+
+  /** "⌘R" on macOS, "Ctrl+R" elsewhere — the same string the tooltip gets. */
+  function formatShortcut(spec) {
+    const parts = [];
+    if (spec.mod) parts.push(IS_MAC ? "⌘" : "Ctrl");
+    if (spec.ctrl) parts.push(IS_MAC ? "⌃" : "Ctrl");
+    if (spec.meta) parts.push(IS_MAC ? "⌘" : "Meta");
+    if (spec.alt) parts.push(IS_MAC ? "⌥" : "Alt");
+    if (spec.shift) parts.push(IS_MAC ? "⇧" : "Shift");
+    const key = spec.key.length === 1 ? spec.key.toUpperCase() : spec.key;
+    return IS_MAC && parts.length && parts[0].length === 1 ? parts.join("") + key : [...parts, key].join("+");
+  }
+
+  /**
+   * The app's own accelerators are delivered to the *main window's* renderer, so
+   * a focused plugin view never receives them — `⌘⇧P` (command palette) simply
+   * does nothing here. Silence is the worst possible answer: it reads as a
+   * broken key. Catching it and explaining where to go costs one binding and
+   * turns a dead key into directions.
+   */
+  function appShortcutHintBinding() {
+    return {
+      spec: { key: "p", mod: true, shift: true },
+      run: () => toast(t("appShortcutHint"), "info"),
+    };
+  }
+
+  /**
+   * Bind shortcuts for one surface. `bindings` is `[{ spec, run }]`; the first
+   * match wins, and the event is consumed so it cannot double-fire.
+   *
+   * Typing must win over shortcuts: while focus is in an input/textarea/select
+   * or contenteditable, non-Escape bindings are skipped so Ctrl+R etc. stay
+   * text. Escape-class bindings still run so a menu or dialog can always close.
+   */
+  function bindShortcuts(bindings) {
+    const handler = (event) => {
+      if (event.defaultPrevented) return;
+      const inField = Boolean(event.target?.closest?.("input, textarea, select, [contenteditable]"));
+      for (const binding of bindings) {
+        if (!matchesShortcut(binding.spec, event)) continue;
+        const specKey = String(binding.spec?.key ?? "").toLowerCase();
+        const isEscape = specKey === "escape" || specKey === "esc";
+        if (inField && !isEscape) continue;
+        event.preventDefault();
+        event.stopPropagation();
+        binding.run();
+        return;
+      }
+    };
+    window.addEventListener("keydown", handler);
+    return () => window.removeEventListener("keydown", handler);
+  }
+
+  // -------------------------------------------------------------- toasts ---
+  let toastLayer = null;
+
+  /**
+   * A transient message. Returns the node so a caller can add to it — the sync
+   * errors append a link to the full Git output.
+   *
+   * Long messages are the norm now (Git's own words, then a remedy), and error
+   * toasts have to be read before they can be acted on, so they get longer.
+   */
+  function toast(message, level) {
+    const text = String(message ?? "").trim();
+    if (!text) return null;
+    if (!toastLayer) {
+      toastLayer = h("div", { class: "toast-layer" });
+      document.body.append(toastLayer);
+    }
+    const important = level === "error";
+    const node = h("div", { class: `toast ${important ? "error" : "info"}`, role: "status" }, [text]);
+    toastLayer.append(node);
+    window.setTimeout(() => node.remove(), important ? 12_000 : 3600);
+    return node;
+  }
+
+  // -------------------------------------------------- busy & progress ----
+  // Long Git operations must never look ignored while the process runs.
+  // Two complementary affordances: the clicked button spins in place
+  // (setButtonBusy), and menu actions with no button to spin get a floating
+  // pill (taskPill / runWithPill). Both are shared so the two tool windows
+  // cannot disagree about what "working" looks like.
+  // Note: 远端操作忙碌反馈的完整取舍见 .agents/notes/implemented/architecture/2026-09-12-remote-action-busy-feedback.md
+  /** A CSS-only spinner; `large` marks primary text buttons. */
+  function spinner(large) {
+    return h("span", { class: large ? "spinner large" : "spinner", "aria-hidden": "true" });
+  }
+
+  // Original children of busy buttons, so the label (and icon) can be
+  // restored exactly rather than rebuilt from a string.
+  const busyOriginals = new WeakMap();
+
+  /**
+   * Spin a button in place. `busyText` null keeps icon-only buttons compact
+   * (spinner alone); text buttons show spinner + text. Always restores the
+   * exact original children via withBusy's finally — never call setButtonBusy
+   * without pairing busy(true)/busy(false).
+   */
+  function setButtonBusy(button, busy, busyText) {
+    if (!button) return;
+    if (busy) {
+      if (button.classList.contains("busy")) return;
+      busyOriginals.set(button, [...button.childNodes]);
+      button.classList.add("busy");
+      button.disabled = true;
+      clear(button);
+      button.append(spinner(busyText ? true : false));
+      if (busyText) button.append(h("span", { text: busyText }));
+    } else {
+      if (!button.classList.contains("busy")) return;
+      button.classList.remove("busy");
+      button.disabled = false;
+      clear(button);
+      for (const node of busyOriginals.get(button) ?? []) button.append(node);
+      busyOriginals.delete(button);
+    }
+  }
+
+  /**
+   * Run `task` with `button` spinning; the button is restored even when the
+   * task throws, and the task's value passes through untouched.
+   */
+  async function withBusy(button, busyText, task) {
+    setButtonBusy(button, true, busyText);
+    try {
+      return await task();
+    } finally {
+      setButtonBusy(button, false);
+    }
+  }
+
+  let taskPillLayer = null;
+
+  /**
+   * A floating "working…" pill for actions with no button to spin in (branch
+   * menu fetch / pull / push / checkout …). Returns `{ update, done }`:
+   * `done(ok)` flashes the outcome briefly, then removes the pill.
+   */
+  function taskPill(label) {
+    if (!taskPillLayer) {
+      taskPillLayer = h("div", { class: "task-pill-layer", "aria-live": "polite" });
+      document.body.append(taskPillLayer);
+    }
+    const labelNode = h("span", { text: String(label ?? "") });
+    const node = h("div", { class: "task-pill", role: "status" }, [spinner(false), labelNode]);
+    taskPillLayer.append(node);
+    let settled = false;
+    return {
+      node,
+      update(next) { labelNode.textContent = String(next ?? ""); },
+      done(ok) {
+        if (settled) return;
+        settled = true;
+        node.classList.add(ok === false ? "failed" : "done");
+        window.setTimeout(() => node.remove(), ok === false ? 2400 : 1200);
+      },
+    };
+  }
+
+  /**
+   * Run `task` behind a pill. The pill always resolves (success flashes and
+   * goes, failure lingers briefly); the task's value passes through.
+   */
+  async function runWithPill(label, task) {
+    const pill = taskPill(label);
+    try {
+      const result = await task();
+      pill.done(result?.ok !== false);
+      return result;
+    } catch (error) {
+      pill.done(false);
+      throw error;
+    }
+  }
+
+  // -------------------------------------------------------------- popups ---
+  let openPopup = null;
+
+  function closePopup() {
+    if (!openPopup) return;
+    openPopup.remove();
+    openPopup = null;
+    document.removeEventListener("pointerdown", onPopupPointerDown, true);
+    document.removeEventListener("keydown", onPopupKeyDown, true);
+  }
+
+  function onPopupPointerDown(event) {
+    if (openPopup && !openPopup.contains(event.target)) closePopup();
+  }
+
+  function onPopupKeyDown(event) {
+    if (event.key === "Escape") {
+      event.stopPropagation();
+      closePopup();
+    }
+  }
+
+  /**
+   * Floating menu anchored to a control. `items` accepts
+   * `{ label, shortcut, checked, disabled, onSelect }` entries as well as
+   * `{ type: "label" | "separator" | "custom", ... }`.
+   */
+  function popup(anchor, items, options) {
+    closePopup();
+    // A missing anchor means the caller read `event.currentTarget` after an
+    // await, where it is null. Complain loudly instead of appending a menu that
+    // would never be tracked — and therefore never removed.
+    if (!anchor || typeof anchor.getBoundingClientRect !== "function") {
+      throw new Error("popup() needs a live anchor element; capture it before any await");
+    }
+    const menu = h("div", { class: "popup", role: "menu" });
+    for (const item of items ?? []) {
+      if (!item) continue;
+      if (item.type === "separator") {
+        menu.append(h("div", { class: "popup-separator" }));
+        continue;
+      }
+      if (item.type === "label") {
+        menu.append(h("div", { class: "popup-title", text: item.label }));
+        continue;
+      }
+      if (item.type === "custom") {
+        menu.append(item.node);
+        continue;
+      }
+      menu.append(
+        h("button", {
+          type: "button",
+          role: "menuitem",
+          title: item.title ?? item.label,
+          disabled: item.disabled,
+          "data-checked": item.checked ? "true" : undefined,
+          onclick: () => {
+            closePopup();
+            item.onSelect?.();
+          },
+        }, [h("span", { text: item.label }), item.shortcut ? h("span", { class: "shortcut", text: item.shortcut }) : null]),
+      );
+    }
+    document.body.append(menu);
+    openPopup = menu;
+    const rect = anchor.getBoundingClientRect();
+    const width = menu.offsetWidth;
+    const height = menu.offsetHeight;
+    const left = Math.max(6, Math.min(rect.left, window.innerWidth - width - 6));
+    const wantBelow = rect.bottom + 4;
+    const top = wantBelow + height > window.innerHeight - 6
+      ? Math.max(6, rect.top - height - 4)
+      : wantBelow;
+    menu.style.left = `${left}px`;
+    menu.style.top = `${top}px`;
+    if (options?.focus !== false) {
+      const first = menu.querySelector("button:not([disabled]), input");
+      first?.focus();
+    }
+    document.addEventListener("pointerdown", onPopupPointerDown, true);
+    document.addEventListener("keydown", onPopupKeyDown, true);
+    return menu;
+  }
+
+  // -------------------------------------------------------- repositories ---
+  /**
+   * The repository selector — IDEA's "Root" dropdown — for the left of a tool
+   * window's toolbar.
+   *
+   * Submodules, and repositories that merely live inside another repository,
+   * are separate Git repositories rather than folders. Every command is scoped
+   * to a working directory, so a change inside a submodule cannot be staged,
+   * diffed or committed from the parent: the parent can only record *which
+   * commit* the submodule points at. Picking one here is what makes it
+   * reachable at all.
+   *
+   * A single-repository project has nothing to choose between, so the chip
+   * hides itself and the toolbar keeps the shape it has always had.
+   */
+  function mountRepoSelector(container, ctx) {
+    const chip = h("button", { class: "branch-chip repo-chip", type: "button" });
+    container.append(chip);
+    let repos = [];
+
+    /** Where the repository sits, relative to the workspace's own repository. */
+    function repositoryLabel(entry) {
+      if (!entry) return t("repository");
+      return entry.rel === "." ? entry.name : entry.rel;
+    }
+
+    function kindText(entry) {
+      if (entry.kind === "submodule") return t("submoduleBadge");
+      if (entry.kind === "sibling") return t("siblingRepoBadge");
+      return t("nestedRepoBadge");
+    }
+
+    function kindHint(entry) {
+      if (entry.kind === "submodule") return t("submoduleBadge");
+      if (entry.kind === "sibling") return t("siblingRepoHint");
+      return t("nestedRepoHint");
+    }
+
+    function paint() {
+      PIG.clear(chip);
+      chip.style.display = repos.length > 1 ? "" : "none";
+      if (repos.length < 2) return;
+      const current = repos.find((entry) => entry.active) ?? repos[0];
+      chip.append(icon("folder", 13));
+      chip.append(h("span", { class: "name", text: repositoryLabel(current) }));
+      if (current.kind !== "root") {
+        chip.append(h("span", { class: "badge", text: kindText(current) }));
+      }
+      chip.title = `${t("switchRepository")} — ${current.root}`;
+    }
+
+    async function openMenu() {
+      // Re-read on open, not only on refresh: a submodule can be added or
+      // deinitialised in between, and a menu listing a repository that is no
+      // longer there is worse than one extra Git call.
+      const result = await invoke("git/repos");
+      if (result?.ok) {
+        repos = result.repos ?? [];
+        paint();
+      }
+      popup(chip, [
+        { type: "label", label: t("repositoryList") },
+        ...repos.map((entry) => ({
+          label: repositoryLabel(entry),
+          title: entry.kind === "root"
+            ? entry.root
+            : `${entry.root} — ${kindHint(entry)}`,
+          checked: entry.active,
+          onSelect: async () => {
+            if (entry.active) return;
+            const switched = await invoke("git/select-repo", { root: entry.root });
+            if (!switched?.ok) {
+              toast(errorText(switched), "error");
+              return;
+            }
+            // The chip does not wait for the view's reload to say where the tool
+            // window points now: the answer to the switch is enough, and the
+            // view's own state is the view's business.
+            repos = repos.map((candidate) => ({
+              ...candidate,
+              active: candidate.root === switched.root,
+            }));
+            paint();
+            ctx.onSwitch?.(switched);
+          },
+        })),
+      ]);
+    }
+
+    chip.addEventListener("click", () => {
+      openMenu().catch((error) => toast(String(error?.message ?? error), "error"));
+    });
+
+    return {
+      /** Take the list from a `git/repos` answer. */
+      update(result) {
+        repos = result?.ok ? (result.repos ?? []) : [];
+        paint();
+      },
+    };
+  }
+
+  // ------------------------------------------------------------- dialogs ---
+  /** A small modal in the IDEA shape: message, then actions. */
+  function dialog({ title, message, detail, confirmLabel, cancelLabel, danger, input }) {
+    return new Promise((resolve) => {
+      const field = input
+        ? h("input", { type: "text", value: input.value ?? "", placeholder: input.placeholder ?? "" })
+        : null;
+      const backdrop = h("div", {
+        style: {
+          position: "fixed",
+          inset: "0",
+          zIndex: "80",
+          display: "flex",
+          alignItems: "center",
+          justifyContent: "center",
+          background: "color-mix(in oklab, #000 38%, transparent)",
+        },
+      });
+      const close = (value) => {
+        backdrop.remove();
+        document.removeEventListener("keydown", onKey, true);
+        resolve(value);
+      };
+      const onKey = (event) => {
+        if (event.key === "Escape") {
+          event.stopPropagation();
+          close(null);
+        } else if (event.key === "Enter" && field) {
+          event.stopPropagation();
+          close(field.value);
+        }
+      };
+      const confirm = h("button", {
+        class: danger ? "primary" : "primary",
+        type: "button",
+        style: danger ? { background: "var(--status-conflict)", borderColor: "var(--status-conflict)" } : undefined,
+        onclick: () => close(field ? field.value : true),
+      }, [confirmLabel ?? t("ok")]);
+      const panel = h("div", {
+        class: "popup",
+        role: "dialog",
+        "aria-modal": "true",
+        style: { position: "relative", minWidth: "280px", maxWidth: "420px", padding: "14px", boxShadow: "0 16px 48px rgba(0,0,0,.4)" },
+      }, [
+        h("div", { style: { fontWeight: "600", marginBottom: "6px" }, text: title ?? "" }),
+        message ? h("div", { text: message }) : null,
+        detail ? h("div", { class: "dialog-detail", text: detail }) : null,
+        field,
+        h("div", { style: { display: "flex", justifyContent: "flex-end", gap: "8px", marginTop: "14px" } }, [
+          // `cancelLabel: null` means "nothing to cancel" — a read-only dialog
+          // (the full Git output) has one button, not two.
+          cancelLabel === null
+            ? null
+            : h("button", { class: "bordered", type: "button", onclick: () => close(null) }, [cancelLabel ?? t("cancel")]),
+          confirm,
+        ]),
+      ]);
+      backdrop.append(panel);
+      backdrop.addEventListener("pointerdown", (event) => {
+        if (event.target === backdrop) close(null);
+      });
+      document.body.append(backdrop);
+      document.addEventListener("keydown", onKey, true);
+      (field ?? confirm).focus();
+      if (field) field.select();
+    });
+  }
+  // Note: 多仓 Push 对话框与两视图共用——按仓列出分支去向与 ahead，逐仓推送、单仓失败不挡其他仓；Commit and Push 复用同一逐仓推送 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+  /**
+   * IDEA-style Push dialog: one row per repository (branch → remote,
+   * ahead/behind, checkbox, per-row result). Pushes the checked rows one by
+   * one via `git/push` with `repoRoot`, so no repository switch is needed.
+   * Resolves with the per-repo outcomes (or null when closed without pushing).
+   */
+  async function openPushDialog(options = {}) {
+    const loading = await invoke("git/push-statuses");
+    if (!loading?.ok) {
+      toast(errorText(loading), "error");
+      return null;
+    }
+    const repos = (loading.repos ?? []).slice();
+    if (!repos.length) {
+      toast(t("notARepository"), "error");
+      return null;
+    }
+    return new Promise((resolve) => {
+      const checked = new Map();
+      const outcomes = new Map();
+      for (const entry of repos) {
+        // Default to pushing what can be pushed; repos with no remote stay
+        // unchecked but visible, so the reason is seen, not hidden.
+        checked.set(entry.root, Boolean(entry.pushTarget));
+      }
+      const backdrop = h("div", {
+        style: {
+          position: "fixed",
+          inset: "0",
+          zIndex: "80",
+          display: "flex",
+          alignItems: "center",
+          justifyContent: "center",
+          background: "color-mix(in oklab, #000 38%, transparent)",
+        },
+      });
+      const rowsHost = h("div", { class: "push-rows", style: { display: "flex", flexDirection: "column", gap: "6px", maxHeight: "320px", overflow: "auto", margin: "10px 0" } });
+      const hint = h("div", { class: "muted", style: { fontSize: "11px" }, text: t("pushDialogHint") });
+      const pushButton = h("button", { class: "primary", type: "button" }, [t("pushAll")]);
+      const closeButton = h("button", { class: "bordered", type: "button" }, [t("close")]);
+      const progressFill = h("div", { class: "push-progress-fill" });
+      const progressTrack = h("div", { class: "push-progress", style: { display: "none" } }, [progressFill]);
+      // Which row is on the wire right now, and how far through the batch it
+      // is — the row pulses while its push runs, the track fills per repo.
+      let activeRoot = null;
+      let doneCount = 0;
+      let totalCount = 0;
+      function paintProgress() {
+        progressTrack.style.display = pushing && totalCount > 1 ? "" : "none";
+        progressFill.style.width = totalCount ? `${Math.round((doneCount / totalCount) * 100)}%` : "0";
+        const label = pushButton.querySelector("span:last-child");
+        if (pushing && label) label.textContent = tf("pushingRepo", { done: Math.min(doneCount + 1, totalCount), total: totalCount });
+      }
+      let pushing = false;
+      let pushedAny = false;
+      const close = (value) => {
+        backdrop.remove();
+        document.removeEventListener("keydown", onKey, true);
+        resolve(value);
+      };
+      const onKey = (event) => {
+        if (event.key === "Escape") {
+          event.stopPropagation();
+          if (!pushing) close(pushedAny ? [...outcomes.values()] : null);
+        }
+      };
+      function branchText(entry) {
+        const head = entry.branch?.head ?? "";
+        if (!head) return entry.branch?.detached ? `detached @ ${String(entry.branch?.oid ?? "").slice(0, 8)}` : "";
+        if (entry.pushTarget) return tf("pushRowPushed", { branch: head, remote: entry.pushTarget.remote });
+        if (!entry.branch?.upstream) return `${head} · ${t("pushNoUpstream")}`;
+        return `${head} → ${entry.branch.upstream}`;
+      }
+      function countsText(entry) {
+        const ahead = entry.branch?.ahead ?? 0;
+        const behind = entry.branch?.behind ?? 0;
+        if (!ahead && !behind) return t("pushUpToDate");
+        const parts = [];
+        if (ahead) parts.push(`↑${ahead}`);
+        if (behind) parts.push(`↓${behind}`);
+        return parts.join(" ");
+      }
+      function paintRows() {
+        clear(rowsHost);
+        for (const entry of repos) {
+          const outcome = outcomes.get(entry.root);
+          const box = h("input", { type: "checkbox" });
+          box.checked = checked.get(entry.root) === true;
+          box.disabled = pushing || !entry.pushTarget;
+          box.addEventListener("change", () => { checked.set(entry.root, box.checked); });
+          const label = entry.rel === "." ? entry.name : entry.rel;
+          const kind = entry.kind === "submodule" ? t("submoduleBadge") : entry.kind === "sibling" ? t("siblingRepoBadge") : entry.kind === "root" ? "" : t("nestedRepoBadge");
+          const active = pushing && activeRoot === entry.root && outcome === null;
+          const status = active
+            ? h("div", { class: "row-status pushing" }, [spinner(false), h("span", { text: t("pushing") })])
+            : outcome
+              ? outcome.ok
+                ? h("div", { class: "row-status ok" }, [icon("check", 12), h("span", { text: t("pushed") })])
+                : h("div", { class: "row-status error", text: errorText(outcome) })
+              : null;
+          const row = h("div", { class: `push-row${active ? " is-active" : ""}`, style: { display: "flex", gap: "8px", alignItems: "flex-start", padding: "6px 8px", border: "1px solid var(--border)", borderRadius: "6px" } }, [
+            box,
+            h("div", { style: { flex: "1 1 auto", minWidth: "0" } }, [
+              h("div", { style: { display: "flex", gap: "6px", alignItems: "center" } }, [
+                h("span", { style: { fontWeight: "600" }, text: label }),
+                kind ? h("span", { class: "badge", text: kind }) : null,
+                h("span", { class: "muted", style: { fontSize: "11px" }, text: countsText(entry) }),
+              ]),
+              h("div", { class: "muted", style: { fontSize: "11px" }, text: branchText(entry) }),
+              entry.pushError && !entry.pushTarget ? h("div", { style: { fontSize: "11px", color: "var(--status-conflict)" }, text: entry.pushError }) : null,
+              status,
+            ]),
+          ]);
+          rowsHost.append(row);
+        }
+      }
+      pushButton.onclick = async () => {
+        if (pushing) return;
+        const targets = repos.filter((entry) => checked.get(entry.root) && entry.pushTarget);
+        if (!targets.length) {
+          toast(t("pushNothingToPush"), "info");
+          return;
+        }
+        pushing = true;
+        closeButton.disabled = true;
+        activeRoot = null;
+        doneCount = 0;
+        totalCount = targets.length;
+        // Single-repo pushes read better as a plain "Pushing…"; the per-row
+        // spinner already says which repo, and a 0%-of-1 bar adds nothing.
+        setButtonBusy(pushButton, true, totalCount > 1 ? tf("pushingRepo", { done: 1, total: totalCount }) : t("pushing"));
+        paintProgress();
+        paintRows();
+        for (const entry of targets) {
+          activeRoot = entry.root;
+          outcomes.set(entry.root, null);
+          paintProgress();
+          paintRows();
+          const payload = { repoRoot: entry.root };
+          if (!entry.branch?.upstream) payload.setUpstream = true;
+          let result = null;
+          try {
+            result = await invoke("git/push", payload);
+          } catch (error) {
+            result = { ok: false, message: String(error?.message ?? error) };
+          }
+          outcomes.set(entry.root, { ...result, rel: entry.rel, root: entry.root });
+          if (result?.ok) {
+            pushedAny = true;
+            try { await refreshTrackingRefs(result); } catch { /* keep pushing */ }
+          }
+          doneCount += 1;
+          paintProgress();
+          paintRows();
+        }
+        activeRoot = null;
+        pushing = false;
+        setButtonBusy(pushButton, false);
+        closeButton.disabled = false;
+        paintProgress();
+        paintRows();
+        try { await options.onPushed?.([...outcomes.values()]); } catch { /* view refreshes anyway */ }
+      };
+      closeButton.onclick = () => { if (!pushing) close(pushedAny ? [...outcomes.values()] : null); };
+      const panel = h("div", {
+        class: "popup",
+        role: "dialog",
+        "aria-modal": "true",
+        style: { position: "relative", minWidth: "340px", maxWidth: "520px", width: "min(520px, 92vw)", padding: "14px", boxShadow: "0 16px 48px rgba(0,0,0,.4)" },
+      }, [
+        h("div", { style: { fontWeight: "600", marginBottom: "2px" }, text: t("pushDialogTitle") }),
+        h("div", { class: "muted", style: { fontSize: "11px" }, text: t("pushDialogSubtitle") }),
+        progressTrack,
+        rowsHost,
+        hint,
+        h("div", { style: { display: "flex", justifyContent: "flex-end", gap: "8px", marginTop: "14px" } }, [
+          closeButton,
+          pushButton,
+        ]),
+      ]);
+      backdrop.append(panel);
+      backdrop.addEventListener("pointerdown", (event) => {
+        if (event.target === backdrop && !pushing) close(pushedAny ? [...outcomes.values()] : null);
+      });
+      document.body.append(backdrop);
+      document.addEventListener("keydown", onKey, true);
+      paintRows();
+      pushButton.focus();
+    });
+  }
+  /** Push several repos with the same options shape as the dialog rows. */
+  async function pushRepos(targets) {
+    const outcomes = [];
+    for (const target of targets ?? []) {
+      const payload = {};
+      if (target.root) payload.repoRoot = target.root;
+      if (target.setUpstream) payload.setUpstream = true;
+      let result = null;
+      try {
+        result = await invoke("git/push", payload);
+      } catch (error) {
+        result = { ok: false, message: String(error?.message ?? error) };
+      }
+      outcomes.push({ ...result, rel: target.rk ?? target.rel ?? "", root: target.root ?? null });
+      if (result?.ok) {
+        try { await refreshTrackingRefs(result); } catch { /* keep pushing */ }
+      }
+    }
+    return outcomes;
+  }
+
+  /**
+   * The message to show for a failed call: Git's own output plus, when the
+   * engine recognised the failure, a line saying what to do about it.
+   *
+   * The recognised ones are the failures a user cannot guess their way out of:
+   * credentials, and the two ways a push or a pull comes back refused. The
+   * engine returns a code and never prose, so the wording lives here, in the
+   * language the rest of the window is in.
+   */
+  function errorText(result) {
+    const message = String(result?.message ?? "").trim();
+    const remedy = remedyText(result);
+    // Reuse an existing key; the caller already prefixes the action name.
+    if (!remedy) return message || t("gitOutput");
+    return message ? `${message}\n\n${remedy}` : remedy;
+  }
+
+  /** The classified remedy for a failed call, or "" when there is nothing to add. */
+  function remedyText(result) {
+    if (result?.authHint === "ssh") return t("authSsh");
+    if (result?.authHint === "credentials") return t("authCredentials");
+    if (result?.pushHint === "remote-ahead") return t("remoteAhead");
+    if (result?.pushHint === "remote-rejected") return t("pushRejected");
+    if (result?.pullHint === "diverged") return t("pullDiverged");
+    if (result?.pullHint === "conflicts") return t("pullConflicts");
+    return "";
+  }
+
+  /**
+   * Report a fetch/pull/push.
+   *
+   * Two things made this its own function rather than a `toast` at each call
+   * site. A successful push prints nothing on stdout — Git's summary goes to
+   * stderr — so "show stdout if there is any" made pushing succeed silently.
+   * And a refused push produces six lines of Git in a 340px toast, which is why
+   * the error toast now carries a link to the whole of Git's output.
+   */
+  function reportSync(result, action) {
+    if (result?.ok) {
+      const line = String(result.stdout ?? "").split("\n").map((value) => value.trim()).find(Boolean);
+      toast(line ? `${action}: ${line}` : action, "info");
+      return true;
+    }
+    const node = toast(`${action}: ${errorText(result)}`, "error");
+    if (node && result?.detail) {
+      node.classList.add("clickable");
+      node.append(h("button", {
+        class: "toast-link",
+        type: "button",
+        onclick: () => dialog({
+          title: t("gitOutput"),
+          detail: result.detail,
+          confirmLabel: t("close"),
+          cancelLabel: null,
+        }),
+      }, [t("showDetail")]));
+    }
+    return false;
+  }
+
+  /**
+   * A refused push means the remote moved on, so the ↑/↓ chip is stale by
+   * definition: it is counting against a remote-tracking ref that predates the
+   * refusal. Fetch before the view redraws, or the chip keeps claiming "1
+   * outgoing, 0 incoming" right after Git said the opposite.
+   *
+   * A fetch that fails here is deliberately not reported: the refusal the user
+   * has to act on is already on screen, and a second message about the refresh
+   * would be noise on top of it. The consequence is only that the chip stays
+   * stale, which is where it started.
+   */
+  async function refreshTrackingRefs(result) {
+    if (result?.pushHint !== "remote-ahead") return result;
+    // `invoke` resolves with `{ok:false}` rather than throwing, so there is
+    // nothing to catch — the result is read and dropped on purpose.
+    await invoke("git/fetch");
+    return result;
+  }
+
+
+  // ------------------------------------------------------------ splitter ---
+  /**
+   * Drag handle for a two-pane layout. `apply(delta)` receives the pointer
+   * delta in pixels so each caller decides what it resizes.
+   */
+  function bindSplitter(handle, apply, options) {
+    let start = 0;
+    let active = false;
+    const onMove = (event) => {
+      if (!active) return;
+      const position = options?.vertical ? event.clientY : event.clientX;
+      apply(position - start);
+    };
+    const onUp = () => {
+      if (!active) return;
+      active = false;
+      handle.classList.remove("active");
+      window.removeEventListener("pointermove", onMove);
+      window.removeEventListener("pointerup", onUp);
+      document.body.style.userSelect = "";
+    };
+    handle.addEventListener("pointerdown", (event) => {
+      event.preventDefault();
+      active = true;
+      start = options?.vertical ? event.clientY : event.clientX;
+      handle.classList.add("active");
+      document.body.style.userSelect = "none";
+      window.addEventListener("pointermove", onMove);
+      window.addEventListener("pointerup", onUp);
+    });
+  }
+
+  // ---------------------------------------------------------- formatting ---
+  const MINUTE = 60_000;
+  const HOUR = 60 * MINUTE;
+  const DAY = 24 * HOUR;
+
+  function relativeTime(timestamp, now) {
+    if (!Number.isFinite(timestamp) || timestamp <= 0) return "";
+    const reference = Number.isFinite(now) ? now : Date.now();
+    const delta = reference - timestamp;
+    // Whole sentences live in STRINGS (see tf): no locale ternary here, and
+    // the English plural suffix travels as `s` so zh templates simply ignore it.
+    if (delta < 45 * 1000) return t("relativeJustNow");
+    if (delta < HOUR) {
+      const minutes = Math.max(1, Math.round(delta / MINUTE));
+      return tf("relativeMinutesAgo", { count: minutes, s: minutes === 1 ? "" : "s" });
+    }
+    if (delta < DAY) {
+      const hours = Math.round(delta / HOUR);
+      return tf("relativeHoursAgo", { count: hours, s: hours === 1 ? "" : "s" });
+    }
+    if (delta < 30 * DAY) {
+      const days = Math.round(delta / DAY);
+      return tf("relativeDaysAgo", { count: days, s: days === 1 ? "" : "s" });
+    }
+    return formatDate(timestamp);
+  }
+
+  function formatDate(timestamp) {
+    if (!Number.isFinite(timestamp) || timestamp <= 0) return "";
+    const date = new Date(timestamp);
+    const pad = (value) => String(value).padStart(2, "0");
+    return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())}`;
+  }
+
+  function formatDateTime(timestamp) {
+    if (!Number.isFinite(timestamp) || timestamp <= 0) return "";
+    const date = new Date(timestamp);
+    const pad = (value) => String(value).padStart(2, "0");
+    return `${formatDate(timestamp)} ${pad(date.getHours())}:${pad(date.getMinutes())}:${pad(date.getSeconds())}`;
+  }
+
+  function formatClock(timestamp) {
+    const date = new Date(timestamp);
+    const pad = (value) => String(value).padStart(2, "0");
+    return `${pad(date.getHours())}:${pad(date.getMinutes())}:${pad(date.getSeconds())}`;
+  }
+
+  /** Split a repo-relative path into a readable directory and base name. */
+  function splitPath(filePath) {
+    const normalised = String(filePath ?? "").replace(/\\/g, "/");
+    const index = normalised.lastIndexOf("/");
+    if (index < 0) return { name: normalised, directory: "" };
+    return { name: normalised.slice(index + 1), directory: normalised.slice(0, index) };
+  }
+
+  function shellQuote(value) {
+    const text = String(value ?? "");
+    return /^[A-Za-z0-9._\-/]+$/.test(text) ? text : `'${text.replace(/'/g, "'\\''")}'`;
+  }
+
+  // ----------------------------------------------------------- appearance ---
+  // Follow the app's own colour mode. Snapping to the OS palette instead made
+  // the panel flash whenever the app and the OS disagreed.
+  function applyAppearance(appearance) {
+    if (typeof appearance?.locale === "string") state.locale = resolveLocale(appearance.locale);
+    const base = appearance?.base;
+    const resolved = base === "light" || base === "dark"
+      ? base
+      : window.matchMedia("(prefers-color-scheme: light)").matches ? "light" : "dark";
+    state.theme = resolved;
+    document.documentElement.dataset.theme = resolved;
+    window.dispatchEvent(new CustomEvent("pig:appearance", { detail: { theme: resolved, locale: state.locale } }));
+  }
+
+  function watchAppearance() {
+    bridge?.on?.("appearance:changed", applyAppearance);
+    invoke("app.getAppearance").then(applyAppearance).catch(() => applyAppearance(null));
+  }
+
+  /**
+   * The host announces project switches on `workspace:changed`. A view that
+   * ignored it would keep showing the previous project's repository — which is
+   * exactly the bug this exists to prevent.
+   *
+   * TODO: workspace-stale window refactor is out of scope — a stale-window flag
+   * with explicit loading state would beat this coalesce timer, but it touches
+   * every refresh path, so it stays a timer for now.
+   */
+  function watchWorkspace(handler) {
+    // `workspace:changed` can arrive in bursts (the host announces a project
+    // switch as it settles), and each run costs a multi-process git refresh.
+    // Run at most once per window, so the cost tracks elapsed time rather than
+    // event count. The first event of a quiet period runs immediately — a switch
+    // must not wait out a debounce while the view is still interactive — and a
+    // burst collapses into a single catch-up run that renders the final state.
+    const COALESCE_MS = 120;
+    let lastRunAt = 0;
+    let timer = null;
+    const fire = () => {
+      lastRunAt = Date.now();
+      try {
+        handler();
+      } catch {
+        // A failed reload must not take the view down with it.
+      }
+    };
+    bridge?.on?.("workspace:changed", () => {
+      if (timer !== null) return; // a catch-up run is already pending
+      const since = Date.now() - lastRunAt;
+      if (since >= COALESCE_MS) {
+        fire();
+        return;
+      }
+      timer = window.setTimeout(() => {
+        timer = null;
+        fire();
+      }, COALESCE_MS - since);
+    });
+  }
+
+  // ---------------------------------------------------------------- store ---
+  /** Minimal observable so views can re-render on change without a framework. */
+  function createStore(initial) {
+    let value = initial;
+    const listeners = new Set();
+    return {
+      get: () => value,
+      set(next) {
+        value = typeof next === "function" ? next(value) : next;
+        for (const listener of [...listeners]) listener(value);
+      },
+      subscribe(listener) {
+        listeners.add(listener);
+        return () => listeners.delete(listener);
+      },
+    };
+  }
+
+  Object.assign(PIG, {
+    state,
+    t,
+    tf,
+    invoke,
+    copyText,
+    h,
+    clear,
+    icon,
+    iconButton,
+    textButton,
+    toast,
+    popup,
+    closePopup,
+    dialog,
+    openPushDialog,
+    pushRepos,
+    bindSplitter,
+    relativeTime,
+    formatDate,
+    formatDateTime,
+    formatClock,
+    splitPath,
+    shellQuote,
+    applyAppearance,
+    watchAppearance,
+    watchWorkspace,
+    createStore,
+    isMac: IS_MAC,
+    formatShortcut,
+    bindShortcuts,
+    errorText,
+    remedyText,
+    reportSync,
+    refreshTrackingRefs,
+    appShortcutHintBinding,
+    spinner,
+    setButtonBusy,
+    withBusy,
+    taskPill,
+    runWithPill,
+    // Shared by both tool windows, so the two cannot disagree about which
+    // repository they are showing — the same reason the branch chip is shared.
+    repoSelector: { mount: mountRepoSelector },
+  });
+})(window.PIG || (window.PIG = {}));
+
+/* ================= src/diff.js ================= */
+/**
+ * Unified-diff parsing and rendering in the IDEA shape.
+ *
+ * Two rules drive the design:
+ *
+ *  1. The raw diff lines are kept verbatim. A hunk is staged by handing those
+ *     exact lines back to `git apply`, so anything that rewrote them (re-quoting,
+ *     re-wrapping, re-ordering) would break stage/unstage/discard.
+ *  2. Parsing produces the model once; the unified and side-by-side renderers
+ *     are two views of that same model, which is why switching modes never
+ *     changes what a hunk contains.
+ */
+(function (PIG) {
+  "use strict";
+
+  const { h, t, tf } = PIG;
+
+  const HUNK_HEADER = /^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@ ?(.*)$/;
+
+  /** Context lines kept around a change when unchanged fragments collapse. */
+  const CONTEXT_LINES = 3;
+  /** A context run longer than this collapses; shorter stays fully visible. */
+  const COLLAPSE_THRESHOLD = CONTEXT_LINES * 2 + 1;
+
+  const WORDS = /[\w\u4e00-\u9fff]/;
+
+  /** Split a diff into file sections, each holding its header and its hunks. */
+  function parse(text) {
+    const files = [];
+    let file = null;
+    let hunk = null;
+
+    const lines = String(text ?? "").split("\n");
+    // A trailing newline would otherwise add a phantom empty body line.
+    if (lines.length && lines[lines.length - 1] === "") lines.pop();
+
+    for (const line of lines) {
+      if (line.startsWith("diff --git ")) {
+        file = { header: [line], hunks: [] };
+        files.push(file);
+        hunk = null;
+        continue;
+      }
+      if (!file) continue;
+      if (line.startsWith("@@")) {
+        hunk = { header: line, lines: [], meta: matchHunkHeader(line), oldLine: 0, newLine: 0 };
+        file.hunks.push(hunk);
+        continue;
+      }
+      if (hunk) {
+        const marker = line.charAt(0);
+        const type = marker === "+" ? "insert"
+          : marker === "-" ? "delete"
+            : marker === "\\" ? "meta"
+              : "context";
+        hunk.lines.push({ raw: line, type, text: line.length ? line.slice(1) : "" });
+      } else {
+        file.header.push(line);
+      }
+    }
+
+    annotate(files);
+    return { files };
+  }
+
+  function matchHunkHeader(line) {
+    const match = HUNK_HEADER.exec(line);
+    if (!match) return null;
+    return {
+      oldStart: Number(match[1]),
+      oldCount: match[2] === undefined ? 1 : Number(match[2]),
+      newStart: Number(match[3]),
+      newCount: match[4] === undefined ? 1 : Number(match[4]),
+      section: match[5] ?? "",
+    };
+  }
+
+  /** Attach 1-based old/new line numbers and whitespace-only change flags. */
+  function annotate(files) {
+    for (const file of files) {
+      for (const hunk of file.hunks) {
+        const meta = hunk.meta ?? { oldStart: 1, newStart: 1 };
+        let oldLine = meta.oldStart;
+        let newLine = meta.newStart;
+        for (const line of hunk.lines) {
+          if (line.type === "insert") {
+            line.newNumber = newLine++;
+          } else if (line.type === "delete") {
+            line.oldNumber = oldLine++;
+          } else if (line.type === "context") {
+            line.oldNumber = oldLine++;
+            line.newNumber = newLine++;
+          }
+        }
+        markWhitespaceOnly(hunk);
+        markSubmodule(hunk);
+        pairChanges(hunk);
+      }
+    }
+  }
+
+  /**
+   * A delete run followed by an insert run is one "change": pair them so the
+   * renderer can highlight the differing middle of each line, and so a pair
+   * that differs only in whitespace can be labelled as such.
+   */
+  function pairChanges(hunk) {
+    const lines = hunk.lines;
+    let index = 0;
+    while (index < lines.length) {
+      if (lines[index].type !== "delete") {
+        index += 1;
+        continue;
+      }
+      const deletes = [];
+      while (index < lines.length && lines[index].type === "delete") deletes.push(lines[index++]);
+      const inserts = [];
+      while (index < lines.length && lines[index].type === "insert") inserts.push(lines[index++]);
+      const pairs = Math.min(deletes.length, inserts.length);
+      for (let offset = 0; offset < pairs; offset += 1) {
+        const left = deletes[offset];
+        const right = inserts[offset];
+        const edges = commonEdges(left.text, right.text);
+        left.paired = right;
+        right.paired = left;
+        left.fragment = fragmentRange(left.text, edges);
+        right.fragment = fragmentRange(right.text, edges);
+      }
+    }
+  }
+
+  function markWhitespaceOnly(hunk) {
+    const deletes = hunk.lines.filter((line) => line.type === "delete");
+    const inserts = hunk.lines.filter((line) => line.type === "insert");
+    if (!deletes.length || deletes.length !== inserts.length) return;
+    const normalise = (value) => value.replace(/\s+/g, " ").trim();
+    const same = deletes.every((line, index) => normalise(line.text) === normalise(inserts[index].text));
+    if (same) hunk.whitespaceOnly = true;
+  }
+
+/**
+ * A submodule change is two bare object names ("Subproject commit <sha>").
+ * Git renders it as an ordinary two-line diff, which reads as noise; naming it
+ * as a submodule update makes those same two lines meaningful.
+ */
+const SUBMODULE_LINE = /^Subproject commit ([0-9a-f]{7,40})$/i;
+
+function markSubmodule(hunk) {
+  const changed = hunk.lines.filter((line) => line.type === "insert" || line.type === "delete");
+  if (!changed.length) return;
+  const found = changed.map((line) => SUBMODULE_LINE.exec(line.text)?.[1] ?? null);
+  if (found.some((sha) => !sha)) return;
+  const from = hunk.lines
+    .filter((line) => line.type === "delete")
+    .map((line) => SUBMODULE_LINE.exec(line.text)[1])[0] ?? null;
+  const to = hunk.lines
+    .filter((line) => line.type === "insert")
+    .map((line) => SUBMODULE_LINE.exec(line.text)[1])[0] ?? null;
+  hunk.submodule = { from, to };
+}
+
+  function commonEdges(left, right) {
+    const max = Math.min(left.length, right.length);
+    let prefix = 0;
+    while (prefix < max && left[prefix] === right[prefix]) prefix += 1;
+    let suffix = 0;
+    while (suffix < max - prefix && left[left.length - 1 - suffix] === right[right.length - 1 - suffix]) {
+      suffix += 1;
+    }
+    return { prefix, suffix };
+  }
+
+  /**
+   * Turn the differing middle into a range, widened to word boundaries so the
+   * highlight covers a whole token instead of splitting one — IDEA's
+   * "Highlighting Differences: Words" behaviour.
+   */
+  function fragmentRange(text, edges) {
+    let start = edges.prefix;
+    let end = text.length - edges.suffix;
+    if (end <= start) return null;
+    while (start > 0 && WORDS.test(text[start - 1]) && WORDS.test(text[start])) start -= 1;
+    while (end < text.length && WORDS.test(text[end - 1]) && WORDS.test(text[end])) end += 1;
+    if (end <= start) return null;
+    return { start, end };
+  }
+
+  // ------------------------------------------------------------- patches ---
+
+  /** Rebuild the exact patch text Git must receive for the given hunks. */
+  function patchFor(file, hunks) {
+    const chosen = hunks && hunks.length ? hunks : file.hunks;
+    const body = [];
+    for (const hunk of chosen) {
+      body.push(hunk.header);
+      for (const line of hunk.lines) body.push(line.raw);
+    }
+    return [...file.header, ...body].join("\n") + "\n";
+  }
+
+  // ----------------------------------------------------------- rendering ---
+
+  /** Collapse long context runs into a clickable "n unchanged lines" row. */
+  function collapseRuns(hunk) {
+    const output = [];
+    let index = 0;
+    while (index < hunk.lines.length) {
+      const line = hunk.lines[index];
+      if (line.type !== "context") {
+        output.push({ kind: "line", line });
+        index += 1;
+        continue;
+      }
+      const run = [];
+      while (index < hunk.lines.length && hunk.lines[index].type === "context") {
+        run.push(hunk.lines[index++]);
+      }
+      if (run.length <= COLLAPSE_THRESHOLD) {
+        for (const item of run) output.push({ kind: "line", line: item });
+        continue;
+      }
+      for (const item of run.slice(0, CONTEXT_LINES)) output.push({ kind: "line", line: item });
+      output.push({ kind: "collapsed", lines: run.slice(CONTEXT_LINES, run.length - CONTEXT_LINES) });
+      for (const item of run.slice(run.length - CONTEXT_LINES)) output.push({ kind: "line", line: item });
+    }
+    return output;
+  }
+
+  function sideBySideRows(hunk) {
+    const rows = [];
+    const lines = hunk.lines;
+    let index = 0;
+    while (index < lines.length) {
+      const line = lines[index];
+      if (line.type === "delete") {
+        const deletes = [];
+        while (index < lines.length && lines[index].type === "delete") deletes.push(lines[index++]);
+        const inserts = [];
+        while (index < lines.length && lines[index].type === "insert") inserts.push(lines[index++]);
+        const count = Math.max(deletes.length, inserts.length);
+        for (let offset = 0; offset < count; offset += 1) {
+          rows.push({ left: deletes[offset] ?? null, right: inserts[offset] ?? null });
+        }
+        continue;
+      }
+      if (line.type === "insert") {
+        rows.push({ left: null, right: line });
+        index += 1;
+        continue;
+      }
+      rows.push({ left: line, right: line });
+      index += 1;
+    }
+    return rows;
+  }
+
+  function renderText(text, options) {
+    const fragment = options?.fragment;
+    if (!options?.showWhitespaces && !fragment) return document.createTextNode(text);
+
+    const holder = document.createDocumentFragment();
+
+    // Without whitespace markers the fragment highlight needs at most three
+    // nodes. Building one node per character here was what made a large diff
+    // expensive: every changed line turned into thousands of text nodes, and
+    // the whole diff is rebuilt from scratch on each render.
+    if (!options?.showWhitespaces) {
+      const rawStart = Number(fragment.start);
+      const rawEnd = Number(fragment.end);
+      const start = Math.max(0, Math.min(Number.isFinite(rawStart) ? rawStart : 0, text.length));
+      const end = Math.max(start, Math.min(Number.isFinite(rawEnd) ? rawEnd : text.length, text.length));
+      if (start > 0) holder.append(document.createTextNode(text.slice(0, start)));
+      if (end > start) holder.append(h("span", { class: "fragment", text: text.slice(start, end) }));
+      if (end < text.length) holder.append(document.createTextNode(text.slice(end)));
+      return holder;
+    }
+
+    for (let index = 0; index < text.length; index += 1) {
+      const character = text[index];
+      if (character === " ") {
+        holder.append(h("span", { class: "whitespace-mark", text: "·" }));
+        continue;
+      }
+      if (character === "\t") {
+        holder.append(h("span", { class: "whitespace-mark", text: "→" }));
+        continue;
+      }
+      if (fragment && index === fragment.start) {
+        holder.append(h("span", {
+          class: "fragment",
+          text: text.slice(fragment.start, fragment.end),
+        }));
+        index = fragment.end - 1;
+        continue;
+      }
+      holder.append(document.createTextNode(character));
+    }
+    return holder;
+  }
+
+  const SIGN = { insert: "+", delete: "-", context: " ", meta: "\\" };
+  const ROW_CLASS = { insert: "inserted", delete: "deleted", context: "context", meta: "context" };
+
+  function lineRow(line, options, side) {
+    const gutter = h("span", { class: "gutter-mark" });
+    if (line.type === "insert") gutter.style.background = "var(--gutter-added)";
+    else if (line.type === "delete") gutter.style.background = "var(--gutter-deleted)";
+    else if (line.fragment) gutter.style.background = "var(--gutter-modified)";
+
+    // Unified view carries both numbers, IDEA-style: a deleted line has no new
+    // number and an inserted one has no old number, so without the second
+    // column half of every change would show a blank gutter.
+    const children = [gutter];
+    if (options.showLineNumbers) {
+      if (side === "unified") {
+        children.push(numberCell(line.oldNumber));
+        children.push(numberCell(line.newNumber));
+      } else {
+        children.push(numberCell(side === "left" ? line.oldNumber : line.newNumber));
+      }
+    }
+    children.push(h("span", { class: "sign", text: SIGN[line.type] ?? " " }));
+    // Paired lines only highlight the side being shown in side-by-side mode;
+    // in unified mode both halves of a change carry their own fragment.
+    const fragment = line.type === "context" || line.type === "meta" ? null : line.fragment;
+    children.push(h("span", { class: "text" }, [renderText(line.text, { ...options, fragment })]));
+    return h("div", { class: `diff-line ${ROW_CLASS[line.type] ?? "context"}` }, children);
+  }
+
+  function numberCell(value) {
+    return h("span", {
+      class: "num",
+      text: value === undefined || value === null ? "" : String(value),
+    });
+  }
+
+  function fillerRow(options) {
+    const children = [h("span", { class: "gutter-mark" })];
+    if (options.showLineNumbers) children.push(numberCell(null));
+    children.push(h("span", { class: "sign" }));
+    children.push(h("span", { class: "text" }));
+    return h("div", { class: "diff-line context filler" }, children);
+  }
+  function hunkHeaderRow(file, hunk, options) {
+    const children = [];
+    const checkbox = options.hunkCheckbox?.(hunk, file);
+    if (checkbox) {
+      const input = h("input", {
+        type: "checkbox",
+        title: t("includeIntoCommit"),
+        checked: checkbox.checked,
+        onchange: (event) => checkbox.onChange(event.target.checked),
+      });
+      children.push(input);
+    }
+    const meta = hunk.meta;
+    children.push(h("span", {
+      text: meta
+        ? `@@ -${meta.oldStart}${meta.oldCount === 1 ? "" : `,${meta.oldCount}`} +${meta.newStart}${meta.newCount === 1 ? "" : `,${meta.newCount}`} @@`
+        : hunk.header,
+    }));
+    if (meta?.section) children.push(h("span", { class: "diff-hunk-note", text: meta.section }));
+    if (hunk.whitespaceOnly) children.push(h("span", { class: "diff-hunk-note", text: `· ${t("whiteSpaceOnly")}` }));
+    if (hunk.submodule) {
+      const short = (sha) => (sha ? sha.slice(0, 7) : "—");
+      children.push(h("span", {
+        class: "diff-hunk-note",
+        text: `· ${t("submodule")} ${short(hunk.submodule.from)} → ${short(hunk.submodule.to)}`,
+      }));
+    }
+
+    const actions = h(options.stageable === false ? "span" : "span", { class: "diff-hunk-actions" });
+    for (const action of options.hunkActions ?? []) {
+      actions.append(h("button", {
+        type: "button",
+        title: action.title,
+        onclick: () => action.onSelect(hunk, file),
+      }, [action.label]));
+    }
+    if (actions.childNodes.length) children.push(actions);
+
+    return h("div", { class: "diff-hunk-header" }, children);
+  }
+
+  function collapsedRow(lines, options) {
+    // Whole sentence per locale via tf; `s` feeds the English plural only.
+    const node = h("div", {
+      class: "diff-collapsed",
+      title: t("collapseUnchanged"),
+      text: tf("collapsedLines", { count: lines.length, s: lines.length === 1 ? "" : "s" }),
+    });
+    node.addEventListener("click", () => {
+      const replacement = document.createDocumentFragment();
+      for (const line of lines) replacement.append(lineRow(line, options, options.side ?? "unified"));
+      node.replaceWith(replacement);
+    });
+    return node;
+  }
+
+  /**
+   * Render a diff into `container`.
+   *
+   * TODO: large-diff virtualization is out of scope — rendering stays
+   * non-virtualized; a windowed renderer would be a wide change, so huge
+   * patches still render in full here.
+   *
+   * options:
+   *   unified          boolean — side-by-side when false
+   *   showWhitespaces, showLineNumbers
+   *   stageable        boolean — false while a whitespace-ignoring view is active
+   *   hunkCheckbox     (hunk, file) => { checked, onChange }
+   *   hunkActions      [{ label, title, onSelect(hunk, file) }]
+   *   emptyMessage
+   */
+  function render(container, options) {
+    PIG.clear(container);
+    const text = options.text ?? "";
+    const parsed = parse(text);
+
+    if (!text.trim() || !parsed.files.length) {
+      container.append(h("div", { class: "empty-state" }, [
+        h("div", { class: "headline", text: options.emptyMessage ?? t("noDiff") }),
+      ]));
+      return { files: [] };
+    }
+
+    if (/^Binary files |^GIT binary patch/m.test(text)) {
+      container.append(h("div", { class: "empty-state" }, [
+        h("div", { class: "headline", text: t("binaryDiff") }),
+      ]));
+      return { files: parsed.files };
+    }
+
+    const single = parsed.files.length === 1;
+
+    for (const file of parsed.files) {
+      const { name, directory } = PIG.splitPath(displayPath(file));
+      // A lone file normally needs no header because the caller already names
+      // it; a diff viewer that is the whole surface must always say what it is
+      // showing, so it opts in.
+      if (options.showFileHeader ?? !single) {
+        container.append(h("div", { class: "diff-file-header" }, [
+          h("span", { class: "name", text: name }),
+          directory ? h("span", { class: "path", text: directory }) : null,
+        ]));
+      }
+      for (const hunk of file.hunks) {
+        container.append(hunkHeaderRow(file, hunk, options));
+        if (options.unified === false) {
+          const grid = h("div", { class: "diff-sbs" });
+          const left = h("div", { class: "side" });
+          const right = h("div", { class: "side" });
+          for (const row of sideBySideRows(hunk)) {
+            left.append(row.left ? lineRow(row.left, options, "left") : fillerRow({ ...options, side: "left" }));
+            right.append(row.right ? lineRow(row.right, options, "right") : fillerRow({ ...options, side: "right" }));
+          }
+          grid.append(left, h("div", { class: "spacer" }), right);
+          container.append(grid);
+          continue;
+        }
+        for (const entry of collapseRuns(hunk)) {
+          if (entry.kind === "collapsed") {
+            container.append(collapsedRow(entry.lines, options));
+            continue;
+          }
+          container.append(lineRow(entry.line, options, "unified"));
+        }
+      }
+    }
+    return { files: parsed.files };
+  }
+
+  /** Prefer the `+++` side of the header, falling back to the diff line. */
+  function displayPath(file) {
+    for (const line of file.header) {
+      if (line.startsWith("+++ ")) {
+        const value = line.slice(4).split("\t")[0].trim();
+        if (value && value !== "/dev/null") return value.replace(/^[ab]\//, "");
+      }
+    }
+    for (const line of file.header) {
+      if (line.startsWith("--- ")) {
+        const value = line.slice(4).split("\t")[0].trim();
+        if (value && value !== "/dev/null") return value.replace(/^[ab]\//, "");
+      }
+    }
+    const first = file.header[0] ?? "";
+    const match = /^diff --git a\/(.+) b\/(.+)$/.exec(first);
+    return match ? match[2] : first;
+  }
+
+  Object.assign(PIG, {
+    diff: { parse, render, patchFor, displayPath, sideBySideRows, CONTEXT_LINES },
+  });
+})(window.PIG || (window.PIG = {}));
+
+/* ================= src/commit-view.js ================= */
+/**
+ * The Commit tool window — IDEA's `Alt+0` surface.
+ *
+ * Shape, following the official layout: a changes area on top (Staged /
+ * Unstaged / Unversioned Files with a checkbox per file), the diff of the
+ * selected file below it, and the commit controls pinned to the bottom
+ * (Commit Message, Amend, Commit, Commit and Push).
+ *
+ * The checkbox semantics are IDEA's own: a checkbox means "include in this
+ * commit". With a real Git index behind it, checking a worktree change stages
+ * it and unchecking a staged change unstages it, which is why partial commits
+ * work exactly as they do in the IDE.
+ */
+(function (PIG) {
+  "use strict";
+
+  const { h, t, invoke, icon, iconButton, toast, popup, dialog, splitPath } = PIG;
+
+  /**
+   * IDEA's commit shortcuts, in the form this surface can honour. The tooltip is
+   * rendered from the same spec that is bound, so the two cannot drift apart.
+   */
+  const KEYS = {
+    refresh: { key: "r", mod: true },
+    refreshAlt: { key: "F5", ctrl: true },
+    stage: { key: "a", mod: true, alt: true },
+    rollback: { key: "z", mod: true, alt: true },
+    showDiff: { key: "d", mod: true },
+    commitMessage: { key: "k", mod: true },
+  };
+
+  function tip(key, spec) {
+    return `${t(key)} (${PIG.formatShortcut(spec)})`;
+  }
+
+  const GROUPS = [
+    { id: "conflicted", label: "conflicts", status: "U" },
+    { id: "staged", label: "staged", status: "A" },
+    { id: "unstaged", label: "unstaged", status: "M" },
+    { id: "untracked", label: "unversioned", status: "?" },
+  ];
+
+  /**
+   * The banner line for an unfinished operation, by the name the engine reports.
+   * Only these four can be in progress: they are the ones `git/sequencer` accepts.
+   */
+  const OPERATION_KEYS = {
+    merge: "mergeInProgress",
+    rebase: "rebaseInProgress",
+    "cherry-pick": "cherryPickInProgress",
+    revert: "revertInProgress",
+  };
+
+  const STATUS_VARS = {
+    A: "added", M: "modified", D: "deleted", R: "renamed", C: "renamed",
+    T: "modified", "?": "unversioned", U: "conflict", "!": "ignored",
+  };
+
+  /**
+   * Which language a drafted message is written in. A standing choice rather
+   * than something the model infers: an English history used to mean English
+   * drafts, however Chinese the person reading them was.
+   */
+  const LANGUAGES = [
+    { value: "auto", label: "langAuto" },
+    { value: "zh", label: "langChinese" },
+    { value: "en", label: "langEnglish" },
+  ];
+
+  function languageLabel(value) {
+    const option = LANGUAGES.find((row) => row.value === (value ?? "auto")) ?? LANGUAGES[0];
+    return t(option.label);
+  }
+  function statusColor(code) {
+    const key = STATUS_VARS[String(code ?? "").charAt(0)] ?? "modified";
+    return `var(--status-${key})`;
+  }
+
+  /**
+   * Git reports paths relative to the repository root, while the host's `fs`
+   * channels are scoped to the workspace and resolve relative to it. When the
+   * two roots differ the path has to be re-based, and when the file falls
+   * outside the workspace the action simply is not offered.
+   */
+  function workspaceRelative(filePath, repo) {
+    if (!filePath) return null;
+    // The engine already worked out where the repository sits inside the
+    // workspace, as real paths — the two roots can name the same directory with
+    // and without a symlinked prefix (`/private/var` against `/var` on macOS),
+    // and comparing those two strings here would decide the file is outside the
+    // workspace.
+    const prefix = repo?.repo?.workspacePrefix;
+    if (typeof prefix === "string") {
+      return prefix === "." ? filePath : `${prefix}/${filePath}`;
+    }
+    const root = String(repo?.repo?.root ?? "").replace(/[/\\]+$/, "");
+    const workspace = String(repo?.repo?.workspace ?? "").replace(/[/\\]+$/, "");
+    if (!root || !workspace || root === workspace) return filePath || null;
+    if (root.startsWith(`${workspace}/`) || root.startsWith(`${workspace}\\`)) {
+      return `${root.slice(workspace.length + 1)}/${filePath}`;
+    }
+    if (workspace.startsWith(`${root}/`) || workspace.startsWith(`${root}\\`)) {
+      const inner = workspace.slice(root.length + 1);
+      if (filePath === inner) return null;
+      if (!filePath.startsWith(`${inner}/`)) return null;
+      return filePath.slice(inner.length + 1);
+    }
+    return null;
+  }
+
+  // --------------------------------------------------------- change tree ---
+  /**
+   * The change lists arrive flat and repository-relative — the file name, with
+   * its directory demoted to a grey tail the column is usually too narrow to
+   * show. Rebuilding those paths as a tree is what answers "which folder does
+   * this belong to" without the user having to read a path at all.
+   *
+   * The tree is per change list (Staged / Unstaged / Unversioned) rather than
+   * across all of them: one file can sit in two lists at once, and a folder's
+   * checkbox could not then mean one thing.
+   */
+  function buildChangeTree(files) {
+    const root = { name: "", path: "", dirs: new Map(), files: [], total: 0 };
+    for (const file of files ?? []) {
+      const parts = String(file.path ?? "").replace(/\\/g, "/").split("/").filter(Boolean);
+      const name = parts.pop();
+      if (!name) continue;
+      let node = root;
+      let prefix = "";
+      for (const part of parts) {
+        prefix = prefix ? `${prefix}/${part}` : part;
+        let child = node.dirs.get(part);
+        if (!child) {
+          child = { name: part, path: prefix, dirs: new Map(), files: [], total: 0 };
+          node.dirs.set(part, child);
+        }
+        node = child;
+      }
+      node.files.push(file);
+    }
+    annotate(root);
+    return root;
+  }
+
+  /** File totals per subtree, so a folder row can say how much it covers. */
+  function annotate(node) {
+    let total = node.files.length;
+    for (const child of node.dirs.values()) total += annotate(child);
+    node.total = total;
+    return total;
+  }
+
+  /** Every file below a directory, its own first. Drives the cascade. */
+  function filesUnder(node, out = []) {
+    for (const file of node.files) out.push(file);
+    for (const child of node.dirs.values()) filesUnder(child, out);
+    return out;
+  }
+
+  /** Directories before files, both in IDEA's case-insensitive natural order. */
+  function treeEntries(node) {
+    const dirs = [...node.dirs.values()]
+      .sort((a, b) => a.name.localeCompare(b.name, undefined, { sensitivity: "base", numeric: true }))
+      .map((dir) => ({ kind: "dir", dir }));
+    const files = [...node.files]
+      .sort((a, b) => splitPath(a.path).name.localeCompare(splitPath(b.path).name, undefined, { sensitivity: "base", numeric: true }))
+      .map((file) => ({ kind: "file", file }));
+    return [...dirs, ...files];
+  }
+
+  /**
+   * IDEA's "Compact Middle Directories": a chain of folders whose parents hold
+   * nothing else is drawn as one row, `src/main/java` instead of three.
+   */
+  function compactDir(dir, enabled) {
+    let node = dir;
+    let label = dir.name;
+    while (enabled && node.files.length === 0 && node.dirs.size === 1) {
+      [node] = node.dirs.values();
+      label += `/${node.name}`;
+    }
+    return { label, node };
+  }
+
+  // ------------------------------------------------------------ branches ---
+  /**
+   * The branch widget IDEA puts in the status bar: current branch, ahead and
+   * behind counts, and a popup with the branch actions. Shared by both tool
+   * windows so the two never disagree about the repository.
+   */
+  function mountBranchWidget(container, ctx) {
+    const chip = h("button", { class: "branch-chip", type: "button" });
+    container.append(chip);
+    let repo = null;
+
+    function paint() {
+      PIG.clear(chip);
+      chip.append(icon("branch", 13));
+      const branch = repo?.branch;
+      // With no repository there is no branch to name, and "HEAD" would be a
+      // lie. Say nothing and let the empty state explain.
+      if (!repo) {
+        chip.append(h("span", { class: "name muted", text: "—" }));
+        chip.title = t("notARepository");
+        return;
+      }
+      const name = branch?.head ?? (branch?.detached ? `detached @ ${String(branch?.oid ?? "").slice(0, 8)}` : t("head"));
+      chip.append(h("span", { class: "name", text: name }));
+      if (branch?.ahead || branch?.behind) {
+        const tracking = h("span", { class: "tracking" });
+        if (branch.ahead) {
+          tracking.append(h("span", { class: "ahead", title: `${branch.ahead} outgoing` }, [`↑${branch.ahead}`]));
+        }
+        if (branch.behind) {
+          tracking.append(h("span", { class: "behind", title: `${branch.behind} incoming` }, [`↓${branch.behind}`]));
+        }
+        chip.append(tracking);
+      }
+      chip.title = branch?.upstream
+        ? `${name} → ${branch.upstream}`
+        : `${name} — no upstream`;
+    }
+
+    async function openMenu() {
+      const result = await invoke("git/branches");
+      const branches = result.branches ?? [];
+      const locals = branches.filter((branch) => !branch.remote);
+      const remotes = branches.filter((branch) => branch.remote);
+      const branch = repo?.branch;
+
+      const items = [
+        { type: "label", label: t("localBranches") },
+        ...locals.map((entry) => ({
+          label: entry.current ? `${entry.name}  ●` : entry.name,
+          title: entry.subject,
+          onSelect: async () => {
+            if (entry.current) return;
+            const checkedOut = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name: entry.name }));
+            report(checkedOut, `${t("checkout")}: ${entry.name}`);
+            ctx.onChanged?.();
+          },
+        })),
+      ];
+      if (remotes.length) {
+        items.push({ type: "separator" });
+        items.push({ type: "label", label: t("remoteBranches") });
+        for (const entry of remotes.slice(0, 40)) {
+          items.push({
+            label: entry.name,
+            title: entry.subject,
+            onSelect: async () => {
+              const checkedOut = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name: entry.name, startPoint: entry.name, track: true }));
+              report(checkedOut, `${t("checkout")}: ${entry.name}`);
+              ctx.onChanged?.();
+            },
+          });
+        }
+      }
+      items.push({ type: "separator" });
+      items.push({
+        label: t("newBranch"),
+        onSelect: async () => {
+          const name = await dialog({
+            title: t("newBranch"),
+            message: t("newBranch"),
+            input: { value: "", placeholder: "feature/…" },
+            confirmLabel: t("newBranch"),
+          });
+          if (!name) return;
+          const created = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name, create: true }));
+          report(created, `${t("newBranch")}: ${name}`);
+          ctx.onChanged?.();
+        },
+      });
+      // Note: 与 Git 视图同套分支操作的子集——提交视图的弹层没有右键位置，合并/变基/删除先用二级弹层选分支，改名/upstream 直接作用于当前分支 — 见 .agents/notes/implemented/feature/2026-09-14-git-operations-parity.md
+      items.push({
+        label: `${t("mergeIntoCurrent")}…`,
+        disabled: !locals.length,
+        onSelect: () => pickBranch(t("mergeIntoCurrent"), async (entry) => {
+          const confirmed = await dialog({
+            title: t("mergeTitle"),
+            message: `${entry.name} → ${branch?.head ?? t("head")}`,
+            confirmLabel: t("merge"),
+          });
+          if (!confirmed) return;
+          const result = await PIG.runWithPill(t("merge"), () => invoke("git/merge", { ref: entry.name }));
+          reportMergeRebase(result, t("merge"), entry.name, t("mergeConflicts"));
+          ctx.onChanged?.();
+        }),
+      });
+      items.push({
+        label: `${t("rebaseOnto")}…`,
+        disabled: !locals.length,
+        onSelect: () => pickBranch(t("rebaseOnto"), async (entry) => {
+          const confirmed = await dialog({
+            title: t("rebaseTitle"),
+            message: `${branch?.head ?? t("head")} → ${entry.name}`,
+            confirmLabel: t("rebase"),
+            danger: true,
+          });
+          if (!confirmed) return;
+          const result = await PIG.runWithPill(t("rebase"), () => invoke("git/rebase", { ref: entry.name }));
+          reportMergeRebase(result, t("rebase"), entry.name, t("rebaseConflicts"));
+          ctx.onChanged?.();
+        }),
+      });
+      items.push({
+        label: t("renameBranch"),
+        disabled: !branch?.head,
+        onSelect: async () => {
+          const name = await dialog({
+            title: t("renameTitle"),
+            message: branch?.head ?? "",
+            input: { value: branch?.head ?? "" },
+            confirmLabel: t("renameBranch"),
+          });
+          if (!name || name === branch?.head) return;
+          report(await invoke("git/branch-rename", { old: branch.head, new: name }), `${t("renameBranch")}: ${name}`);
+          ctx.onChanged?.();
+        },
+      });
+      items.push({
+        label: t("setUpstream"),
+        disabled: !branch?.head,
+        onSelect: async () => {
+          const upstream = await dialog({
+            title: t("setUpstreamTitle"),
+            message: branch?.head ?? "",
+            input: { value: branch?.upstream ?? "" },
+            confirmLabel: t("setUpstream"),
+          });
+          if (!upstream) return;
+          report(await invoke("git/branch-upstream", { name: branch.head, upstream }), `${t("setUpstream")}: ${upstream}`);
+          ctx.onChanged?.();
+        },
+      });
+      if (branch?.upstream) {
+        items.push({
+          label: t("unsetUpstream"),
+          onSelect: async () => {
+            report(await invoke("git/branch-upstream", { name: branch.head, unset: true }), t("unsetUpstream"));
+            ctx.onChanged?.();
+          },
+        });
+      }
+      items.push({
+        label: `${t("deleteBranch")}…`,
+        disabled: locals.filter((entry) => !entry.current).length === 0,
+        onSelect: () => pickBranch(t("deleteBranch"), async (entry) => {
+          const confirmed = await dialog({
+            title: t("deleteBranchTitle"),
+            message: entry.name,
+            confirmLabel: t("deleteBranch"),
+            danger: true,
+          });
+          if (!confirmed) return;
+          let result = await invoke("git/branch-delete", { name: entry.name });
+          if (!result.ok && /not fully merged/i.test(String(result.message ?? ""))) {
+            const force = await dialog({
+              title: t("deleteBranchTitle"),
+              message: result.message,
+              confirmLabel: t("deleteBranch"),
+              danger: true,
+            });
+            if (force) result = await invoke("git/branch-delete", { name: entry.name, force: true });
+          }
+          report(result, `${t("deleteBranch")}: ${entry.name}`);
+          ctx.onChanged?.();
+        }, true),
+      });
+      function pickBranch(title, run, excludeCurrent) {
+        popup(chip, [
+          { type: "label", label: title },
+          ...locals
+            .filter((entry) => !excludeCurrent || !entry.current)
+            .map((entry) => ({
+              label: entry.current ? `${entry.name}  ●` : entry.name,
+              title: entry.subject,
+              disabled: !excludeCurrent && entry.current,
+              onSelect: () => run(entry),
+            })),
+        ]);
+      }
+      function reportMergeRebase(result, action, name, conflictsHint) {
+        if (result?.ok) {
+          report(result, `${action}: ${name}`);
+          return;
+        }
+        const text = String(result?.message ?? "");
+        const conflicted = /CONFLICT|could not apply|Automatic merge failed|fix conflicts/i.test(
+          `${result?.stdout ?? ""}\n${result?.stderr ?? ""}\n${text}`,
+        );
+        toast(`${action}: ${text}${conflicted ? `\n\n${conflictsHint}` : ""}`, "error");
+      }
+      items.push({ type: "separator" });
+      items.push({
+        label: t("fetch"),
+        onSelect: async () => {
+          report(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch")), t("fetch"));
+          ctx.onChanged?.();
+        },
+      });
+      items.push({
+        label: t("pull"),
+        onSelect: async () => {
+          const result = await PIG.runWithPill(t("pulling"), () => invoke("git/pull"));
+          report(result, t("pull"));
+          ctx.onChanged?.();
+        },
+      });
+      items.push({
+        label: t("push"),
+        onSelect: async () => {
+          // No remote/branch: the engine pushes where the branch actually
+          // tracks. Sending `origin` plus the local name pushed a new branch to
+          // `origin` for anything tracking elsewhere, while the ↑/↓ chip kept
+          // counting against the real upstream.
+          const result = await PIG.runWithPill(t("pushing"), () => invoke("git/push", { setUpstream: !branch?.upstream }));
+          report(result, t("push"));
+          // A refusal means the remote moved on, so the chip is stale exactly
+          // when it matters most.
+          await PIG.refreshTrackingRefs(result);
+          ctx.onChanged?.();
+        },
+      });
+      items.push({
+        label: t("forcePush"),
+        // A lease needs a baseline to compare against, so it is only offered
+        // once the branch has an upstream at all.
+        disabled: !branch?.upstream,
+        onSelect: async () => {
+          const confirmed = await dialog({
+            title: t("forcePushTitle"),
+            message: PIG.tf("forcePushBody", {
+              // The remote and the branch it holds: `{{branch}}` is the local
+              // name, because "origin/feature/x on origin" says it twice.
+              branch: branch?.head ?? "",
+              remote: String(branch?.upstream ?? "").split("/")[0],
+            }),
+            confirmLabel: t("forcePush"),
+            danger: true,
+          });
+          if (confirmed === null) return;
+          const result = await PIG.runWithPill(t("pushing"), () => invoke("git/push", { forceWithLease: true }));
+          report(result, t("forcePush"));
+          await PIG.refreshTrackingRefs(result);
+          ctx.onChanged?.();
+        },
+      });
+      items.push({ type: "separator" });
+      items.push({
+        label: t("stashChanges"),
+        disabled: !repo || (!repo.staged.length && !repo.unstaged.length && !repo.untracked.length),
+        onSelect: async () => {
+          const message = await dialog({
+            title: t("stashChanges"),
+            message: t("stashMessage"),
+            input: { value: "" },
+            confirmLabel: t("stash"),
+          });
+          if (message === null) return;
+          report(await PIG.runWithPill(t("stashing"), () => invoke("git/stash", { action: "push", message })), t("stash"));
+          ctx.onChanged?.();
+        },
+      });
+      const stashes = repo?.stashes ?? [];
+      if (stashes.length) {
+        items.push({ type: "label", label: t("stash") });
+        for (const stash of stashes.slice(0, 10)) {
+          items.push({
+            label: `${stash.ref}  ${stash.subject ?? ""}`.trim(),
+            onSelect: () => popup(chip, [
+              { type: "label", label: `${stash.ref}  ${stash.subject ?? ""}`.trim() },
+              {
+                label: t("applyStash"),
+                onSelect: async () => {
+                  report(await PIG.runWithPill(t("unstashing"), () => invoke("git/stash", { action: "apply", ref: stash.ref })), `${t("applyStash")}: ${stash.ref}`);
+                  ctx.onChanged?.();
+                },
+              },
+              {
+                label: t("unstash"),
+                onSelect: async () => {
+                  report(await PIG.runWithPill(t("unstashing"), () => invoke("git/stash", { action: "pop", ref: stash.ref })), t("unstash"));
+                  ctx.onChanged?.();
+                },
+              },
+              { type: "separator" },
+              {
+                label: t("dropStash"),
+                onSelect: async () => {
+                  const confirmed = await dialog({
+                    title: t("dropStashConfirm"),
+                    message: `${stash.ref}  ${stash.subject ?? ""}`.trim(),
+                    confirmLabel: t("dropStash"),
+                    danger: true,
+                  });
+                  if (!confirmed) return;
+                  report(await invoke("git/stash", { action: "drop", ref: stash.ref }), `${t("dropStash")}: ${stash.ref}`);
+                  ctx.onChanged?.();
+                },
+              },
+            ]),
+          });
+        }
+      }
+      popup(chip, items);
+    }
+
+    chip.addEventListener("click", openMenu);
+
+    async function loadRepo() {
+      const result = await invoke("git/repo");
+      if (result.ok) {
+        repo = result;
+        paint();
+      }
+    }
+
+    return {
+      update(nextRepo) {
+        repo = nextRepo;
+        paint();
+      },
+      refresh: loadRepo,
+    };
+  }
+
+  /**
+   * The one report path for both tool windows. `PIG.reportSync` keeps the
+   * boolean contract this file has always used at its call sites, so a caller
+   * can still write `if (report(...)) await refresh()`.
+   */
+  function report(result, action) {
+    return PIG.reportSync(result, action);
+  }
+
+  function firstLine(value) {
+    return String(value ?? "").split("\n").map((line) => line.trim()).find(Boolean) ?? "";
+  }
+
+  // ---------------------------------------------------------- commit view ---
+  function mount(root, options) {
+     const state = {
+       repo: null,
+       error: null,
+       busy: false,
+      // What the toolbar is waiting on (null | "refresh" | "fetch" | "push"):
+      // the active button spins, the others are disabled, double clicks land
+      // on the guard instead of spawning a second process.
+      syncing: null,
+      // What the commit button is waiting on (null | "commit" | "commit-push").
+      busyKind: null,
+       selection: null,
+       diff: null,
+       diffUnified: true,
+       showWhitespaces: false,
+       showLineNumbers: false,
+       ignoreWhitespace: false,
+       message: "",
+       amend: false,
+       signoff: false,
+       messages: [],
+       // Both keyed by group, because collapsing `src/` in Unversioned must not
+       // collapse it in Unstaged too.
+       collapsed: new Set(),
+       filter: "",
+       // IDEA's view options for the changes tree, persisted with the rest.
+       groupByDirectory: true,
+       compactDirs: true,
+       changesWidth: 45,
+       generating: false,
+       commitModelKey: "",
+       // Empty means `auto`; the plugin resolves it against the repository.
+       commitLang: "",
+      // Aggregated submodule statuses (IDEA-like): each entry is
+      // `{ rel, root, name, kind, status }` where `status` is a `readStatus`
+      // result for that submodule. The parent's `git status` only prints one
+      // gitlink line per submodule, so without this the files changed inside
+      // `backend` are invisible while the selector points at the parent.
+      // In sibling mode the same slots hold the other sibling repos.
+      submodules: [],
+      subLoading: false,
+      // Last `git/repos` answer: decides whether the toolbar Push opens the
+      // multi-repo dialog instead of pushing the current repo directly.
+      allRepos: [],
+     };
+
+    // The repository chip comes first, as it does in IDEA: which repository —
+    // and only then which branch of it.
+    const repoHolder = h("div", { style: { display: "contents" } });
+    const branchHolder = h("div", { style: { display: "contents" } });
+    const toolbar = h("div", { class: "toolbar" });
+    const changesList = h("div", { class: "scroll list" });
+    const diffHost = h("div", { class: "diff" });
+    const diffHeader = h("div", { class: "pane-header" });
+    const messageInput = h("textarea", {
+      placeholder: t("commitMessage"),
+      spellcheck: "false",
+      oninput: (event) => { state.message = event.target.value; paintCommit(); },
+    });
+    const amendBox = h("input", { type: "checkbox", onchange: (event) => { state.amend = event.target.checked; paintCommit(); } });
+    const signoffBox = h("input", { type: "checkbox", onchange: (event) => { state.signoff = event.target.checked; } });
+    const summary = h("span", { class: "commit-summary" });
+    const commitButton = h("button", { class: "primary", type: "button", text: t("commit"), onclick: () => commit(false) });
+    // A bordered (not primary) menu half keeps the split button readable while
+    // the Commit half is disabled for a missing message.
+    const commitMenuButton = h("button", { class: "bordered icon", type: "button", "aria-label": t("commitAndPush"), title: t("commitAndPush"), onclick: openCommitMenu }, [icon("chevronDown", 13)]);
+    // Drafting a message takes a round trip, so the control reports its own
+    // state rather than leaving the click looking ignored.
+    const generateButton = h("button", {
+      class: "bordered",
+      type: "button",
+      onclick: () => { generate().catch(() => {}); },
+    }, [icon("sparkles", 13), h("span", { class: "gen-label", text: t("generateMessage") })]);
+    const generateMenuButton = h("button", {
+      class: "bordered icon",
+      type: "button",
+      "aria-label": t("generateOptions"),
+      // The element is captured here on purpose: `event.currentTarget` is dead
+      // by the time the model list has been fetched.
+      onclick: (event) => { openGenerateMenu(event.currentTarget).catch(() => {}); },
+    }, [icon("chevronDown", 12)]);
+    const generateGroup = h("div", { class: "split-button" }, [generateButton, generateMenuButton]);
+
+    const changesHeader = h("div", { class: "pane-header" });
+
+    const changesWidth = h("div", { class: "commit-changes column" });
+    const diffColumn = h("div", { class: "commit-diff column" });
+    const divider = h("div", { class: "divider-v draggable", title: "" });
+
+    /**
+     * The repository this window is showing, as the repository list names it:
+     * "." is the workspace's own, anything else sits inside it.
+     */
+    function repositoryLabel() {
+      const entry = state.repo?.repo;
+      if (!entry) return "";
+      return entry.rel && entry.rel !== "." ? entry.rel : entry.name;
+    }
+     /**
+      * Aggregated-view contexts: the current repo is ".", each dirty submodule
+      * is its `rel` (e.g. "backend"). A context carries the absolute root helm
+      * actions at, plus the repo object `workspaceRelative` needs for open/reveal.
+      */
+     function rootCtx() {
+       return {
+         rk: ".",
+         root: state.repo?.repo?.root ?? null,
+         label: repositoryLabel(),
+         repoObj: state.repo ?? null,
+         status: state.repo ?? null,
+         kind: "root",
+         branch: state.repo?.branch ?? null,
+       };
+     }
+     function subCtx(entry) {
+       return {
+         rk: entry.rel,
+         root: entry.root,
+         label: entry.rel,
+         repoObj: { repo: entry.status?.repo ?? { root: entry.root } },
+         status: entry.status,
+         kind: entry.kind ?? "submodule",
+         branch: entry.status?.branch ?? null,
+       };
+     }
+     function allCtxs() {
+       const out = [];
+       if (state.repo) out.push(rootCtx());
+       for (const entry of state.submodules ?? []) out.push(subCtx(entry));
+       return out;
+     }
+     function branchNameOf(branch) {
+       if (!branch) return "";
+       if (branch.head) return branch.head;
+       if (branch.detached) return `detached @ ${String(branch.oid ?? "").slice(0, 8)}`;
+       return "";
+     }
+     function countsOf(status) {
+       if (!status) return { staged: 0, unstaged: 0, untracked: 0, conflicted: 0 };
+       return {
+         staged: status.staged?.length ?? 0,
+         unstaged: status.unstaged?.length ?? 0,
+         untracked: status.untracked?.length ?? 0,
+         conflicted: status.conflicted?.length ?? 0,
+       };
+     }
+     function totalCounts() {
+       const total = { staged: 0, unstaged: 0, untracked: 0, conflicted: 0 };
+       for (const ctx of allCtxs()) {
+         const counts = countsOf(ctx.status);
+         total.staged += counts.staged;
+         total.unstaged += counts.unstaged;
+         total.untracked += counts.untracked;
+         total.conflicted += counts.conflicted;
+       }
+       return total;
+     }
+     /** Repos with staged files, submodules first so the parent pointer lands last. */
+     function stagedTargets() {
+       const targets = [];
+       for (const entry of state.submodules ?? []) {
+         if ((entry.status?.staged?.length ?? 0) > 0) targets.push(subCtx(entry));
+       }
+       if ((state.repo?.staged?.length ?? 0) > 0) targets.push(rootCtx());
+       return targets;
+     }
+     async function switchToSubmodule(root) {
+       const switched = await invoke("git/select-repo", { root });
+       if (!switched?.ok) {
+         toast(PIG.errorText(switched), "error");
+         return;
+       }
+       forgoRepositoryState();
+       paintAll();
+       loadRepositories().then(() => refresh()).catch(() => {});
+     }
+
+    let branchWidget = null;
+    let repoWidget = null;
+
+    // --------------------------------------------------------- rendering --
+    function paintToolbar() {
+      PIG.clear(toolbar);
+      toolbar.append(repoHolder);
+      toolbar.append(branchHolder);
+      toolbar.append(h("div", { class: "toolbar-separator" }));
+      // A sync button that is running spins in place; its siblings go
+      // disabled so a double click cannot spawn a second process.
+      const syncing = state.syncing ?? null;
+      const syncDisabled = Boolean(syncing || state.busy);
+      const syncButton = (name, title, kind, onClick) => {
+        const button = iconButton(name, title, onClick, { disabled: syncDisabled });
+        if (syncing === kind) {
+          button.classList.add("busy");
+          button.append(PIG.spinner(false));
+        }
+        return button;
+      };
+      toolbar.append(syncButton("refresh", tip("refresh", KEYS.refresh), "refresh", async () => {
+        if (state.syncing || state.busy) return;
+        state.syncing = "refresh";
+        paintToolbar();
+        try {
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("fetch", t("fetch"), "fetch", async () => {
+        if (state.syncing || state.busy) return;
+        state.syncing = "fetch";
+        paintToolbar();
+        try {
+          const result = await invoke("git/fetch");
+          if (report(result, t("fetch"))) await refresh();
+          else paintToolbar();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("push", t("push"), "push", async () => {
+        if (state.syncing || state.busy) return;
+        // Note: 多仓走 Push 对话框（逐仓列出去向与结果），单仓保持直推 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+        const multi = (state.allRepos?.length ?? 0) > 1 || (state.submodules?.length ?? 0) > 0;
+        if (multi) {
+          await PIG.openPushDialog({ onPushed: async () => { await refresh(); } });
+          await refresh();
+          return;
+        }
+        // The engine resolves the target from the branch's own upstream; see
+        // the push item in the branch menu.
+        state.syncing = "push";
+        paintToolbar();
+        try {
+          const result = await invoke("git/push", { setUpstream: !state.repo?.branch?.upstream });
+          report(result, t("push"));
+          await PIG.refreshTrackingRefs(result);
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(h("div", { class: "toolbar-separator" }));
+      toolbar.append(iconButton("plus", tip("stageFile", KEYS.stage), () => stageSelected(true), { disabled: syncDisabled || !canStageSelected() }));
+      toolbar.append(iconButton("minus", t("unstageFile"), () => stageSelected(false), { disabled: syncDisabled || !canUnstageSelected() }));
+      toolbar.append(iconButton("rollback", tip("rollback", KEYS.rollback), rollbackSelected, { disabled: syncDisabled || !state.selection }));
+      toolbar.append(h("div", { class: "toolbar-spacer" }));
+      toolbar.append(
+        h("span", {
+          style: { fontSize: "11px", color: "var(--fg-muted)" },
+          // A nested repository is named by where it sits; its bare basename
+          // would not say which one this window is showing.
+          text: repositoryLabel(),
+        }),
+      );
+    }
+
+     function paintChangesHeader() {
+       PIG.clear(changesHeader);
+       const counts = totalCounts();
+       const total = counts.staged + counts.unstaged + counts.untracked + counts.conflicted;
+       changesHeader.append(h("span", { text: t("changes") }));
+       changesHeader.append(h("span", { class: "muted", text: total ? `${total}` : "" }));
+       if (state.subLoading) changesHeader.append(h("span", { class: "muted", text: "…" }));
+      changesHeader.append(h("div", { class: "toolbar-spacer" }));
+      // IDEA puts this search in the changes pane's own title bar: typing is how
+      // you find one file among seventy-four, and the tree below narrows to the
+      // matches while keeping their folders.
+      const field = h("input", {
+        type: "search",
+        class: "changes-filter",
+        value: state.filter,
+        placeholder: t("filterChanges"),
+        title: t("filterChanges"),
+        oninput: (event) => { state.filter = event.target.value; paintChanges(); },
+        onkeydown: (event) => {
+          if (event.key !== "Escape" || !state.filter) return;
+          event.stopPropagation();
+          state.filter = "";
+          paintChanges();
+        },
+      });
+      changesHeader.append(h("span", { class: "search-field" }, [icon("search", 12), field]));
+      changesHeader.append(iconButton("gear", t("viewOptions"), (event) => {
+        popup(event.currentTarget, [
+          { type: "label", label: t("viewOptions") },
+          { label: t("groupByDirectory"), checked: state.groupByDirectory, onSelect: () => setViewOption("groupByDirectory", !state.groupByDirectory) },
+          // Only meaningful inside a folder tree.
+          { label: t("compactMiddleDirs"), checked: state.compactDirs, disabled: !state.groupByDirectory, onSelect: () => setViewOption("compactDirs", !state.compactDirs) },
+          { type: "separator" },
+          { label: t("collapseAll"), onSelect: () => { collapseAll(); } },
+          { type: "separator" },
+          { label: t("stageAllChanges"), onSelect: () => setAllInclusion(true) },
+          { label: t("unstageAllChanges"), onSelect: () => setAllInclusion(false) },
+        ]);
+      }, { size: 13 }));
+    }
+
+    function setViewOption(key, value) {
+      state[key] = value;
+      savePrefs();
+      paintChanges();
+    }
+
+    /** Collapse every group, repository and folder — IDEA's "Collapse All". */
+    function collapseAll() {
+      for (const group of GROUPS) state.collapsed.add(`group:${group.id}`);
+      for (const ctx of allCtxs()) {
+        for (const group of GROUPS) state.collapsed.add(`repo:${group.id}:${ctx.rk}`);
+      }
+      for (const ctx of allCtxs()) {
+        for (const group of GROUPS) {
+          for (const file of ctx.status?.[group.id] ?? []) {
+            const parts = file.path.split("/");
+            parts.pop();
+            let prefix = "";
+            for (const part of parts) {
+              prefix = prefix ? `${prefix}/${part}` : part;
+              state.collapsed.add(dirKey(ctx.rk, group.id, prefix));
+            }
+          }
+        }
+      }
+      paintChanges();
+    }
+
+     /**
+      * Stage (or unstage) every visible file across the current repo and all
+      * aggregated submodules. This fills the view-options menu entries that
+      * previously called a function that did not exist.
+      */
+     async function setAllInclusion(target) {
+       const jobs = [];
+       const filter = state.filter.trim().toLowerCase();
+       for (const ctx of allCtxs()) {
+         const want = target ? "staged" : "worktree";
+         const paths = [];
+         for (const group of GROUPS) {
+           if (group.id === "conflicted") continue;
+           for (const file of ctx.status?.[group.id] ?? []) {
+             if (filter && !file.path.toLowerCase().includes(filter)) continue;
+             const stateName = group.id === "staged" ? "staged" : "worktree";
+             if (stateName === want) continue;
+             paths.push(file.path);
+           }
+         }
+         if (!paths.length) continue;
+         const payload = { paths };
+         if (ctx.root) payload.repoRoot = ctx.root;
+         jobs.push(invoke(target ? "git/stage" : "git/unstage", payload));
+       }
+       if (!jobs.length) return;
+       const results = await Promise.all(jobs);
+       const failed = results.find((result) => !result?.ok);
+       if (failed) toast(PIG.errorText(failed), "error");
+       await refresh();
+     }
+
+    /**
+     * One checkbox for a set of files. Folder rows pass every file beneath them,
+     * which is the cascade: one click includes or excludes a whole subtree.
+     *
+     * Deliberately binary — no tri-state dash. A dash would mean "partially
+     * selected", and that state cannot exist here: a row's group *is* its staged
+     * state (Staged ⇔ in the index), so checking any file moves it to the other
+     * group rather than leaving a half-checked folder behind. Drawing a dash
+     * anyway would be a claim the user could not reconcile with the list. A file
+     * that genuinely is half in the index (`MM`: staged, with further unstaged
+     * changes) says so with a badge on its own row.
+     */
+    function rowCheckbox({ checked, title, onToggle }) {
+      const box = h("input", { type: "checkbox", title, onclick: (event) => event.stopPropagation() });
+      box.checked = checked;
+      box.addEventListener("change", async (event) => {
+        const next = event.target.checked;
+        event.target.disabled = true;
+        try {
+          await onToggle(next);
+        } finally {
+          event.target.disabled = false;
+        }
+      });
+      return box;
+    }
+
+    /**
+     * The checkbox is IDEA's "include into commit", which with a real index
+     * behind it means: selected = staged. Reaching `target` therefore means
+     * staging what is not in the commit yet and unstaging what is in it and
+     * should not be — and leaving alone whatever already matches, because a
+     * no-op `git add` still costs a process.
+     */
+     function applyInclusion(files, target, ctx) {
+       const want = target ? "staged" : "worktree";
+       const paths = files.filter((file) => file.state !== want).map((file) => file.path);
+       if (!paths.length) return Promise.resolve();
+       const payload = { paths };
+       if (ctx?.root) payload.repoRoot = ctx.root;
+       return invoke(target ? "git/stage" : "git/unstage", payload).then(async (result) => {
+         if (!result.ok) {
+           toast(PIG.errorText(result), "error");
+           await refresh();
+           return;
+         }
+         // A folder can hold a submodule. Staging one records the commit it
+         // points at and anything dirty inside it stays dirty, so the row comes
+         // back unselected even though the call succeeded. Say which of the two
+         // happened rather than letting the checkbox look broken.
+         // (Submodule inner files render as their own section now, so this
+         // branch only fires for the parent's own gitlink row.)
+         const stuck = target && (!ctx || ctx.rk === ".") ? files.filter((file) => file.insideSubmodule) : [];
+         await refresh();
+         if (!stuck.length) return;
+         const staged = (state.repo?.staged ?? []).map((entry) => entry.path);
+         if (stuck.some((file) => staged.includes(file.path))) toast(t("submoduleStagedHint"), "info");
+         else toast(PIG.tf("submoduleInside", { path: stuck[0].path }), "error");
+       });
+     }
+
+     function isSelected(rk, group, filePath) {
+       const sel = state.selection;
+       return Boolean(sel) && sel.rk === rk && sel.g === group && sel.p === filePath;
+     }
+     function fileRow(group, file, depth, fullPath, ctx) {
+       const rk = ctx?.rk ?? ".";
+       const selected = isSelected(rk, group, file.path);
+       const { name } = splitPath(file.path);
+
+       return h("div", {
+         class: "tree-row",
+         role: "option",
+         tabindex: "0",
+         "aria-selected": selected ? "true" : "false",
+         title: ctx && ctx.rk !== "." ? `${ctx.rk}/${file.path}` : file.path,
+         onclick: () => select({ rk, g: group, p: file.path, root: ctx?.root ?? null }),
+         oncontextmenu: (event) => {
+           event.preventDefault();
+           select({ rk, g: group, p: file.path, root: ctx?.root ?? null });
+           fileContextMenu(event.currentTarget, group, file, ctx);
+         },
+       }, [
+         h("span", { class: "indent", style: { width: `${depth * 12}px` } }),
+         rowCheckbox({
+           checked: group === "staged",
+           title: t("includeIntoCommit"),
+           onToggle: (next) => applyInclusion([{ ...file, state: group === "staged" ? "staged" : "worktree" }], next, ctx),
+         }),
+         // Same slots as a folder row — disclosure, icon — so the two line up and
+         // the status letter sits where a folder's arrow is. Without it every
+         // file name would start to the left of the folder it lives in.
+         h("span", { class: "indent", style: { width: "10px" } }),
+         h("span", { class: "status-cell", style: { color: statusColor(file.status) }, text: file.status }),
+         // The directory is the tree now. Repeating it as a grey tail answered
+         // "which folder" worse than the hierarchy does, and the narrow column
+         // clipped it anyway.
+         h("span", { class: "name", style: { color: statusColor(file.status) }, text: name }),
+         // No "partly staged" badge. A file with an index change *and* a further
+         // worktree change already says so the only way Git says it: the same
+         // path is listed here and in the other group, each row carrying its own
+         // status letter. Naming that state separately would invent a concept
+         // the user cannot see in `git status` or in any other Git client.
+         // Inside the tree the folders already answered "where is this", so only
+         // the Flat view repeats the path — and there it is essential, because
+         // nothing else identifies the file. The column is narrow, so the tail
+         // ellipsises and the tooltip keeps the whole path readable.
+         fullPath && file.path !== name
+           ? h("span", { class: "path", title: fullPath, text: fullPath })
+           : null,
+         // A submodule deserves a visible mark: its checkbox means something
+         // different from every other row's.
+         file.submodule
+           ? h("span", { class: "badge", text: t("submoduleBadge"), title: submoduleTooltip(file) })
+           : null,
+       ]);
+     }
+
+
+    /** Why a submodule row behaves differently, in the user's language. */
+    function submoduleTooltip(file) {
+      if (file.insideSubmodule) return PIG.tf("submoduleInside", { path: file.path });
+      return t("submoduleStagedHint");
+    }
+
+    /**
+     * A folder row: a disclosure arrow, the folder, a count, and a checkbox
+     * that reaches every file below it, nested folders included. Checking it
+     * stages the whole subtree; unchecking it unstages the whole subtree. That
+     * cascade is the interaction a flat list cannot offer.
+     *
+     * The checkbox stays binary, and its meaning is "everything under here is in
+     * the commit": ticked in Staged, cleared in Unstaged. A file that is only
+     * half in the index (`MM`) is flagged by the folder carrying a "partly
+     * staged" badge rather than by a dash on the box — a dash would read as
+     * "some of this folder is selected", which is a state this list cannot
+     * represent, because a row's group *is* its staged state.
+     */
+     function dirKey(rk, group, dirPath) {
+       return `dir:${rk}:${group}:${dirPath}`;
+     }
+     function dirRow(group, dir, depth, label, ctx) {
+       const rk = ctx?.rk ?? ".";
+       const files = filesUnder(dir);
+       const total = files.length;
+       const key = dirKey(rk, group, dir.path);
+       const open = !state.collapsed.has(key);
+       const action = group === "staged" ? t("unincludeFolder") : t("includeFolder");
+       return h("div", {
+         class: "tree-row dir-row",
+         role: "treeitem",
+         "aria-expanded": open ? "true" : "false",
+         title: ctx && ctx.rk !== "." ? `${ctx.rk}/${dir.path}` : dir.path,
+         onclick: () => {
+           if (state.collapsed.has(key)) state.collapsed.delete(key);
+           else state.collapsed.add(key);
+           paintChanges();
+         },
+       }, [
+         h("span", { class: "indent", style: { width: `${depth * 12}px` } }),
+         rowCheckbox({
+           checked: group === "staged",
+           title: action,
+           onToggle: (next) => applyInclusion(files, next, ctx),
+         }),
+         h("span", { class: "disclosure", "data-open": open ? "true" : "false" }, [icon("chevronRight", 11)]),
+         h("span", { class: "row-icon" }, [icon("folder", 13)]),
+         h("span", { class: "name", text: label }),
+         h("span", { class: "count", text: `${total}` }),
+       ]);
+     }
+
+
+     /** Depth-first render of one change list. Returns the rows, so the caller
+         can append them in one pass. */
+     function treeRows(group, node, depth, ctx) {
+       const rows = [];
+       const rk = ctx?.rk ?? ".";
+       for (const entry of treeEntries(node)) {
+         if (entry.kind === "file") {
+           rows.push(fileRow(group, entry.file, depth, null, ctx));
+           continue;
+         }
+         // A compacted row stands for a chain of folders, so it is the deepest
+         // node in that chain that owns the expanded state and the children.
+         const { label, node: target } = compactDir(entry.dir, state.compactDirs);
+         rows.push(dirRow(group, target, depth, label, ctx));
+         if (state.collapsed.has(dirKey(rk, group, target.path))) continue;
+         rows.push(...treeRows(group, target, depth + 1, ctx));
+       }
+       return rows;
+     }
+
+     /**
+      * The same change list without its folders: IDEA's Flat view. Files are
+      * listed by full repository path, which is the whole point of leaving the
+      * tree — nothing is identified by position any more.
+      */
+    function flatRows(group, files, ctx, depth) {
+      return [...files]
+        .sort((a, b) => a.path.localeCompare(b.path, undefined, { sensitivity: "base", numeric: true }))
+        .map((file) => fileRow(group, file, depth ?? 0, ctx && ctx.rk !== "." ? `${ctx.rk}/${file.path}` : file.path, ctx));
+    }
+
+    /**
+     * IDEA's colored square per repository. Colors are dealt from the sorted
+     * repo list with linear probing, so every visible repo gets a distinct
+     * square while a repo keeps its color as long as the repo set is unchanged
+     * (a plain hash collides too often with 5 repos on 8 colors).
+     */
+    const REPO_COLORS = ["#e5534b", "#3fb950", "#ab7df8", "#39c5cf", "#d29922", "#f778ba", "#4a86c8", "#d1743a"];
+
+    function repoColorMap(ctxs) {
+      const sorted = [...ctxs].sort((a, b) => a.label.localeCompare(b.label, undefined, { sensitivity: "base", numeric: true }));
+      const used = new Set();
+      const map = new Map();
+      for (const ctx of sorted) {
+        let hash = 0;
+        for (const char of String(ctx.rk ?? "")) hash = (hash * 31 + char.charCodeAt(0)) | 0;
+        let index = Math.abs(hash) % REPO_COLORS.length;
+        while (used.has(index)) index = (index + 1) % REPO_COLORS.length;
+        used.add(index);
+        map.set(ctx.rk, REPO_COLORS[index]);
+      }
+      return map;
+    }
+    function filesForGroup(ctx, statusObj, group, filter) {
+      const all = (statusObj?.[group.id] ?? []).map((file) => ({
+        ...file,
+        // Being in the commit is the same question as being in the index, so
+        // the group a row came from is what its checkbox math reads.
+        state: group.id === "staged" ? "staged" : "worktree",
+      }));
+      const matches = (file) => {
+        if (!filter) return true;
+        if (file.path.toLowerCase().includes(filter)) return true;
+        // Typing the submodule name narrows to its files, like IDEA.
+        if (ctx.rk !== "." && `${ctx.rk}/${file.path}`.toLowerCase().includes(filter)) return true;
+        return false;
+      };
+      return { all, visible: all.filter(matches) };
+    }
+
+    function countText(all, visible) {
+      // While filtering, say both numbers: the tree below can only ever
+      // account for the matches, and a lone count would look wrong.
+      return visible.length === all.length ? `${all.length}` : `${visible.length}/${all.length}`;
+    }
+
+    /**
+     * One batched stage/unstage across several repos (a group header's
+     * checkbox): one git call per repo, a single refresh, then the same
+     * submodule-pointer hint the single-repo path shows.
+     */
+    function applyInclusionForRepos(pairs, target) {
+      const jobs = [];
+      let rootFiles = [];
+      for (const { visible, ctx } of pairs) {
+        const want = target ? "staged" : "worktree";
+        const paths = visible.filter((file) => file.state !== want).map((file) => file.path);
+        if (!paths.length) continue;
+        if (!ctx || ctx.rk === ".") rootFiles = rootFiles.concat(visible);
+        const payload = { paths };
+        if (ctx?.root) payload.repoRoot = ctx.root;
+        jobs.push(invoke(target ? "git/stage" : "git/unstage", payload));
+      }
+      if (!jobs.length) return Promise.resolve();
+      return Promise.all(jobs).then(async (results) => {
+        const failed = results.find((result) => !result?.ok);
+        if (failed) {
+          toast(PIG.errorText(failed), "error");
+          await refresh();
+          return;
+        }
+        await refresh();
+        if (!target || !rootFiles.length) return;
+        const stuck = rootFiles.filter((file) => file.insideSubmodule);
+        if (!stuck.length) return;
+        const staged = (state.repo?.staged ?? []).map((entry) => entry.path);
+        if (stuck.some((file) => staged.includes(file.path))) toast(t("submoduleStagedHint"), "info");
+        else toast(PIG.tf("submoduleInside", { path: stuck[0].path }), "error");
+      });
+    }
+
+    /**
+     * IDEA's repository row: disclosure, cascade checkbox, color square, name,
+     * "N files", branch pill. Clicking expands; right-click switches to that
+     * repository (the top-left selector does the same).
+     */
+    function repoRow(group, ctx, all, visible, color) {
+      const rkey = `repo:${group.id}:${ctx.rk}`;
+      const open = !state.collapsed.has(rkey);
+      const branch = branchNameOf(ctx.branch);
+      return h("div", {
+        class: "tree-row repo-row",
+        role: "treeitem",
+        "aria-expanded": open ? "true" : "false",
+        title: ctx.rk === "." ? (ctx.repoObj?.repo?.root ?? ctx.label) : ctx.root,
+        onclick: () => {
+          if (state.collapsed.has(rkey)) state.collapsed.delete(rkey);
+          else state.collapsed.add(rkey);
+          paintChanges();
+        },
+        oncontextmenu: (event) => {
+          event.preventDefault();
+          repoContextMenu(event.currentTarget, ctx);
+        },
+      }, [
+        h("span", { class: "disclosure", "data-open": open ? "true" : "false" }, [icon("chevronRight", 11)]),
+        group.id === "conflicted"
+          ? h("span", { class: "indent", style: { width: "13px" } })
+          : rowCheckbox({
+            checked: group.id === "staged",
+            title: group.id === "staged" ? t("unstageAllChanges") : t("stageAllChanges"),
+            onToggle: (next) => applyInclusion(visible, next, ctx),
+          }),
+        h("span", { class: "repo-color", style: { background: color ?? "#888888" } }),
+        h("span", { class: "name", text: ctx.label }),
+        h("span", { class: "muted", text: `${countText(all, visible)} ${t("files")}` }),
+        branch ? h("span", { class: "badge", text: branch, title: branch }) : null,
+      ]);
+    }
+
+    function repoContextMenu(anchor, ctx) {
+      if (!ctx || ctx.rk === ".") return;
+      popup(anchor, [
+        {
+          label: t("switchToRepo"),
+          title: ctx.root ?? ctx.rk,
+          onSelect: () => { switchToSubmodule(ctx.root).catch(() => {}); },
+        },
+      ]);
+    }
+
+    /**
+     * IDEA's ordering: each change list groups by repository — the current one
+     * sorts among the submodules by name, like haeco-mes-parent between
+     * frontend and prototype-design. A single-repo project renders exactly as
+     * before, with no repository rows.
+     */
+    function paintChanges() {
+      PIG.clear(changesList);
+      if (!state.repo) {
+        changesList.append(h("div", { class: "empty-state" }, [
+          h("div", { class: "headline", text: state.error ? t("notARepository") : t("loading") }),
+          state.error ? h("code", { text: state.error }) : null,
+          state.error ? h("div", { class: "muted", text: t("repositoryHint") }) : null,
+        ]));
+        return;
+      }
+
+      const filter = state.filter.trim().toLowerCase();
+      const multi = (state.submodules ?? []).length > 0;
+      const colorMap = multi ? repoColorMap(allCtxs()) : new Map();
+      let groups = 0;
+
+      for (const group of GROUPS) {
+        const buckets = [];
+        const rctx = rootCtx();
+        const rootLists = filesForGroup(rctx, state.repo, group, filter);
+        if (rootLists.visible.length) buckets.push({ ctx: rctx, ...rootLists });
+        for (const entry of state.submodules ?? []) {
+          const ctx = subCtx(entry);
+          const lists = filesForGroup(ctx, entry.status, group, filter);
+          if (lists.visible.length) buckets.push({ ctx, ...lists });
+        }
+        if (!buckets.length) continue;
+        groups += 1;
+
+        const gkey = `group:${group.id}`;
+        const open = !state.collapsed.has(gkey);
+        const allTotal = buckets.reduce((total, bucket) => total + bucket.all.length, 0);
+        const visTotal = buckets.reduce((total, bucket) => total + bucket.visible.length, 0);
+        const header = h("div", {
+          class: "group-header",
+          onclick: () => {
+            if (state.collapsed.has(gkey)) state.collapsed.delete(gkey);
+            else state.collapsed.add(gkey);
+            paintChanges();
+          },
+        }, [
+          h("span", { class: "disclosure", "data-open": open ? "true" : "false" }, [icon("chevronRight", 11)]),
+          h("span", { text: t(group.label) }),
+          h("span", {
+            class: "count",
+            text: visTotal === allTotal ? `${allTotal}` : `${visTotal}/${allTotal}`,
+          }),
+        ]);
+
+        // Conflicts are not something to include or exclude — they have to be
+        // resolved first — so that group gets no checkbox at all.
+        if (group.id !== "conflicted") {
+          header.append(h("div", { class: "toolbar-spacer" }));
+          header.append(rowCheckbox({
+            checked: group.id === "staged",
+            title: group.id === "staged" ? t("unstageAllChanges") : t("stageAllChanges"),
+            onToggle: (next) => applyInclusionForRepos(buckets, next),
+          }));
+        }
+        changesList.append(header);
+        if (!open) continue;
+
+        if (!multi) {
+          const only = buckets[0];
+          if (!state.groupByDirectory) {
+            for (const row of flatRows(group.id, only.visible, only.ctx, 0)) changesList.append(row);
+          } else {
+            for (const row of treeRows(group.id, buildChangeTree(only.visible), 0, only.ctx)) changesList.append(row);
+          }
+          continue;
+        }
+
+        buckets.sort((a, b) => a.ctx.label.localeCompare(b.ctx.label, undefined, { sensitivity: "base", numeric: true }));
+        for (const bucket of buckets) {
+          changesList.append(repoRow(group, bucket.ctx, bucket.all, bucket.visible, colorMap.get(bucket.ctx.rk)));
+          if (state.collapsed.has(`repo:${group.id}:${bucket.ctx.rk}`)) continue;
+          if (!state.groupByDirectory) {
+            for (const row of flatRows(group.id, bucket.visible, bucket.ctx, 1)) changesList.append(row);
+          } else {
+            for (const row of treeRows(group.id, buildChangeTree(bucket.visible), 1, bucket.ctx)) changesList.append(row);
+          }
+        }
+      }
+
+      if (!groups) {
+        const noFilter = !state.filter.trim();
+        changesList.append(h("div", { class: "empty-state" }, [
+          h("div", { class: "headline", text: noFilter ? t("noChanges") : t("noMatchingChanges") }),
+        ]));
+      }
+    }
+
+     function paintDiffHeader() {
+       PIG.clear(diffHeader);
+       if (!state.selection || !state.diff) {
+         diffHeader.append(h("span", { class: "muted", text: t("pickFile") }));
+         return;
+       }
+       const sel = state.selection;
+       const { name, directory } = splitPath(sel.p);
+       if (sel.rk && sel.rk !== ".") diffHeader.append(h("span", { class: "muted", text: sel.rk }));
+       diffHeader.append(h("span", { text: name }));
+      diffHeader.append(h("div", { class: "toolbar-spacer" }));
+      diffHeader.append(iconButton("columns", t("sideBySide") + " / " + t("unified"), () => {
+        state.diffUnified = !state.diffUnified;
+        paintDiff();
+        savePrefs();
+      }, { size: 13, class: "icon" }));
+      diffHeader.append(iconButton("eye", t("showWhitespaces"), () => {
+        state.showWhitespaces = !state.showWhitespaces;
+        paintDiff();
+      }, { size: 13 }));
+      diffHeader.append(iconButton("gear", t("ignoreDifferences"), (event) => {
+        popup(event.currentTarget, [
+          { type: "label", label: t("ignoreDifferences") },
+          { label: t("ignoreNone"), checked: !state.ignoreWhitespace, onSelect: () => setIgnoreWhitespace(false) },
+          { label: t("ignoreWhitespace"), checked: state.ignoreWhitespace, onSelect: () => setIgnoreWhitespace(true) },
+          { type: "separator" },
+          { label: t("showLineNumbers"), checked: state.showLineNumbers, onSelect: () => { state.showLineNumbers = !state.showLineNumbers; paintDiff(); } },
+        ]);
+      }, { size: 13 }));
+    }
+
+     function hunkActionsFor(selection) {
+       const group = selection?.g ?? "";
+       const isIndex = group === "staged";
+      if (isIndex) {
+        return [{
+          label: t("unstageHunk"),
+          title: t("unstageHunk"),
+          onSelect: async (hunk) => {
+             const patch = PIG.diff.patchFor({ header: currentHeader(), hunks: [hunk] }, [hunk]);
+             report(
+               await invoke("git/apply-patch", { action: "unstage", patch, root: state.diff?.root, repoRoot: state.diff?.root }),
+              t("unstageHunk"),
+            );
+            await refresh();
+          },
+        }];
+      }
+      return [
+        {
+          label: t("stageHunk"),
+          title: t("stageHunk"),
+          onSelect: async (hunk) => {
+             const patch = PIG.diff.patchFor({ header: currentHeader(), hunks: [hunk] }, [hunk]);
+             report(
+               await invoke("git/apply-patch", { action: "stage", patch, root: state.diff?.root, repoRoot: state.diff?.root }),
+              t("stageHunk"),
+            );
+            await refresh();
+          },
+        },
+        {
+          label: t("discardHunk"),
+          title: t("discardHunk"),
+          onSelect: async (hunk) => {
+            const confirmed = await dialog({
+              title: t("discardHunk"),
+              message: t("discard"),
+              danger: true,
+              confirmLabel: t("discard"),
+            });
+            if (!confirmed) return;
+             const patch = PIG.diff.patchFor({ header: currentHeader(), hunks: [hunk] }, [hunk]);
+             report(
+               await invoke("git/apply-patch", { action: "discard", patch, root: state.diff?.root, repoRoot: state.diff?.root }),
+              t("discardHunk"),
+            );
+            await refresh();
+          },
+        },
+      ];
+    }
+
+    function currentHeader() {
+      return state.diff?.parsed?.files?.[0]?.header ?? ["diff --git a/x b/x"];
+    }
+
+     function paintDiff() {
+       paintDiffHeader();
+       const group = state.selection ? state.selection.g : null;
+       const stageable = group !== "untracked" && !state.ignoreWhitespace;
+       const result = PIG.diff.render(diffHost, {
+         text: state.diff?.text ?? "",
+         unified: state.diffUnified,
+         showWhitespaces: state.showWhitespaces,
+         showLineNumbers: state.showLineNumbers,
+         stageable,
+         hunkActions: state.selection ? hunkActionsFor(state.selection) : [],
+         hunkCheckbox: state.selection && group !== "untracked" && !state.ignoreWhitespace
+           ? (hunk) => ({
+             checked: group === "staged",
+             onChange: async (checked) => {
+               const isIndex = group === "staged";
+               if (checked === isIndex) return;
+               const patch = PIG.diff.patchFor({ header: currentHeader(), hunks: [hunk] }, [hunk]);
+               report(
+                 await invoke("git/apply-patch", {
+                   action: checked ? "stage" : "unstage",
+                   patch,
+                   root: state.diff?.root,
+                   repoRoot: state.diff?.root,
+                 }),
+                 t("includeIntoCommit"),
+               );
+               await refresh();
+             },
+           })
+           : null,
+        emptyMessage: state.diff?.binary ? t("binaryDiff") : t("noDiff"),
+      });
+      // `state.diff` is null while nothing is selected, so the parsed model is
+      // only stored back when there really is a diff to attach it to.
+      if (state.diff) state.diff.parsed = result;
+    }
+
+    /**
+     * The commit area's status line. A conflicted repository is the one state
+     * this line has to do more than describe: an unresolved merge/rebase/cherry
+     * pick can only be left by finishing it or by aborting, and the plugin's own
+     * Pull can produce one, so the escape has to be here and not in a terminal.
+     */
+    function paintCommit() {
+      // While a commit (or its follow-up push) runs, the button itself is the
+      // progress: spinner plus phase, so a slow hook or a slow push never
+      // looks like the click was lost.
+      PIG.clear(commitButton);
+      if (state.busy) {
+        commitButton.classList.add("busy");
+        commitButton.append(PIG.spinner(true));
+        commitButton.append(h("span", { text: t(state.busyKind === "commit-push" ? "committingAndPushing" : "committing") }));
+      } else {
+        commitButton.classList.remove("busy");
+        commitButton.append(t("commit"));
+      }
+      commitButton.disabled = state.busy || (!state.message.trim() && !state.amend);
+      commitMenuButton.disabled = state.busy;
+       const totals = totalCounts();
+       const staged = totals.staged;
+       const total = totals.staged + totals.unstaged + totals.untracked + totals.conflicted;
+       const conflicts = totals.conflicted;
+       const operation = state.repo?.operation ?? null;
+       PIG.clear(summary);
+       if (operation) {
+         summary.className = "commit-summary warn";
+         summary.append(h("span", { text: t(`${OPERATION_KEYS[operation] ?? "conflictNotice"}`) }));
+         // A merge is finished by committing, so it has no "continue"; the
+         // sequencer operations do.
+         if (operation !== "merge") {
+           summary.append(operationButton(t("continueOperation"), operation, "continue"));
+         }
+         summary.append(operationButton(t("abortOperation"), operation, "abort"));
+       } else if (conflicts) {
+         summary.className = "commit-summary warn";
+         summary.append(t("conflictNotice"));
+       } else if (!staged && !state.amend) {
+         summary.className = "commit-summary warn";
+         summary.append(t("nothingStaged"));
+       } else {
+         summary.className = "commit-summary";
+         // Whole sentence per locale via tf; `s` feeds the English plural only.
+         summary.append(PIG.tf("commitSummary", { staged, total, s: total === 1 ? "" : "s" }));
+         const targets = stagedTargets();
+         if (targets.length > 1) {
+           summary.append(h("span", { class: "muted", text: ` · ${PIG.tf("commitMultipleRepos", { count: targets.length })}` }));
+         }
+       }
+     }
+
+    function operationButton(label, operation, action) {
+      return h("button", {
+        class: "bordered",
+        type: "button",
+        style: { marginLeft: "8px" },
+        text: label,
+        onclick: async (event) => {
+          // A continue can run a real merge behind it; spin the clicked button
+          // itself so the wait has an owner. (The button may be rebuilt by the
+          // refresh below — restoring a detached node is a harmless no-op.)
+          await PIG.withBusy(event.currentTarget, label, async () => {
+            const result = await invoke("git/sequencer", { operation, action });
+            report(result, label);
+            await refresh();
+          });
+        },
+      });
+    }
+
+    /**
+     * One failing pane must never blank the others — that is exactly how the
+     * missing `state.diff` guard used to take the branch widget down with it.
+     */
+    let reportedFailure = false;
+    function paintGenerate() {
+      const busy = state.generating;
+      generateButton.disabled = busy;
+      generateMenuButton.disabled = busy;
+      generateButton.classList.toggle("busy", busy);
+      PIG.clear(generateButton);
+      generateButton.append(busy ? PIG.spinner(false) : icon("sparkles", 13));
+      generateButton.append(h("span", { class: "gen-label", text: busy ? t("generating") : t("generateMessage") }));
+      generateButton.title = PIG.tf("generateScope", { action: t("generateMessage"), lang: languageLabel() });
+    }
+
+    /**
+     * Which change the draft should describe: everything checked (staged) —
+     * the same set Commit is about to commit — or, when nothing is staged,
+     * the file the user picked. Reported back afterwards so the scope is
+     * never a guess.
+     *
+     * Checked means staged here: ticking a row stages it, unticking unstages
+     * it, so `stagedTargets()` is exactly "what is checked". Selection (the
+     * highlight that drives the diff pane) used to win over that set, and the
+     * auto-select on refresh meant the staged branch was nearly unreachable —
+     * the draft then described one file while Commit took all of them.
+     */
+     function draftTarget() {
+       const targets = stagedTargets();
+       if (targets.length) return { kind: "staged", targets };
+       if (state.selection) {
+         const sel = state.selection;
+         return { kind: "file", path: sel.p, mode: sel.g === "staged" ? "index" : "worktree", group: sel.g, repoRoot: sel.root ?? null };
+       }
+       return null;
+     }
+
+    /**
+     * Say what actually went wrong. A permission that was never granted is not
+     * the same as having no provider configured, and telling the user to add
+     * one they already have sends them the wrong way.
+     */
+    function draftError(result) {
+      const code = String(result?.code ?? "");
+      if (code === "PERMISSION_DENIED") return t("modelPermission");
+      if (code === "NO_MODEL") return t("noModel");
+      if (code === "RATE_LIMITED") return t("rateLimited");
+      if (code === "EMPTY_DIFF" || code === "NO_DIFF") return t("nothingToDescribe");
+      if (code === "TIMEOUT") return t("draftTimeout");
+      return PIG.errorText(result);
+    }
+
+    // Note: 界面语言只有视图知道（插件进程拿不到），所以 locale 随每次请求传；语言是 chevron 菜单里的显式选择而不是推断，auto 的历史回退靠引擎返回 null 而不是 "en" — 见 .agents/notes/implemented/architecture/2026-09-11-commit-message-prompt.md
+    // Note: 生成范围=勾选（stagedTargets）而非选中 — 见 .agents/notes/implemented/bug-fix/2026-09-14-commit-message-checked-scope.md
+    async function generate() {
+      if (state.generating) return;
+      const target = draftTarget();
+      // Staged (checked) wins: it is what Commit will commit. A single staged
+      // repo reuses the legacy contract (empty payload for the current repo,
+      // repoRoot for a submodule) so style comes from the repo being described.
+      // Several staged repos send their roots; the engine aggregates their
+      // index diffs into one prompt and drafts a single message for all of them.
+      let payload = {};
+      if (target?.kind === "staged") {
+        const roots = (target.targets ?? []).map((entry) => entry.root).filter(Boolean);
+        if (roots.length > 1) {
+          payload = { stagedRoots: roots };
+        } else if (roots.length === 1 && roots[0] !== (state.repo?.repo?.root ?? null)) {
+          payload = { repoRoot: roots[0] };
+        }
+      } else if (target?.kind === "file") {
+        payload = { path: target.path, mode: target.mode, ...(target.repoRoot ? { repoRoot: target.repoRoot } : {}) };
+      }
+      if (state.commitModelKey) payload.modelKey = state.commitModelKey;
+      // The plugin process has no idea which language this window speaks, so it
+      // travels with the request: `commitLang` is the user's standing choice,
+      // `locale` the fallback for a repository with no history to follow.
+      payload.lang = state.commitLang;
+      payload.locale = PIG.state.locale;
+
+      // Never silently discard something the user typed.
+      if (state.message.trim()) {
+        const replace = await dialog({
+          title: t("replaceDraft"),
+          message: t("replaceDraftBody"),
+          confirmLabel: t("replace"),
+        });
+        if (!replace) return;
+      }
+
+      state.generating = true;
+      paintGenerate();
+      const result = await invoke("git/commit-message", payload);
+      state.generating = false;
+      paintGenerate();
+
+      if (!result.ok) {
+        toast(draftError(result), "error");
+        return;
+      }
+      state.message = result.text;
+      messageInput.value = result.text;
+      paintCommit();
+      messageInput.focus();
+      const scope = result.scope ?? {};
+      if (scope.kind === "file") {
+        toast(PIG.tf("draftedFile", { file: scope.path }), "info");
+      } else {
+        let note = PIG.tf("draftedStaged");
+        const repos = Number(scope.repos ?? 0) || (target?.targets?.length ?? 0);
+        if (repos > 1) note += ` · ${PIG.tf("commitMultipleRepos", { count: repos })}`;
+        toast(note, "info");
+      }
+    }
+
+    async function openGenerateMenu(anchor) {
+      const result = await invoke("git/models");
+      const models = Array.isArray(result.models) ? result.models : [];
+      const selected = state.commitModelKey || models[0]?.key || "";
+      const items = [
+        { label: t("generateMessage"), onSelect: () => { generate().catch(() => {}); } },
+        { type: "separator" },
+        { type: "label", label: t("modelLabel") },
+      ];
+      if (!models.length) {
+        // A menu row needs a label, not a paragraph; the full explanation is a
+        // toast away, and the host's own wording stays in the tooltip.
+        items.push({
+          label: result.code === "PERMISSION_DENIED" ? t("modelPermissionShort") : t("noModel"),
+          disabled: true,
+          title: result.code === "PERMISSION_DENIED"
+            ? `${t("modelPermission")}\n\n${result.message ?? ""}`.trim()
+            : (result.message ?? ""),
+          onSelect: result.code === "PERMISSION_DENIED"
+            ? () => toast(t("modelPermission"), "error")
+            : undefined,
+        });
+      } else {
+        for (const model of models.slice(0, 30)) {
+          items.push({
+            label: model.label ?? model.key,
+            title: model.key,
+            checked: model.key === selected,
+            onSelect: () => {
+              state.commitModelKey = model.key;
+              savePrefs();
+              toast(`${t("modelLabel")}: ${model.label ?? model.key}`, "info");
+            },
+          });
+        }
+      }
+
+      // The language is a choice, not a guess — the reason this menu exists is
+      // that the model used to answer an English repository in English however
+      // Chinese the user was. `auto` follows the history, which is what the
+      // prompt was always trying to do, and falls back to the interface.
+      items.push(
+        { type: "separator" },
+        { type: "label", label: t("commitLanguage") },
+      );
+      for (const option of LANGUAGES) {
+        items.push({
+          label: t(option.label),
+          checked: state.commitLang === option.value,
+          onSelect: () => {
+            state.commitLang = option.value;
+            savePrefs();
+            paintGenerate();
+          },
+        });
+      }
+      popup(anchor, items);
+    }
+
+    function paintAll() {
+      for (const step of [paintToolbar, paintChangesHeader, paintChanges, paintDiff, paintCommit, paintGenerate]) {
+        try {
+          step();
+        } catch (error) {
+          if (!reportedFailure) {
+            reportedFailure = true;
+            toast(`IDEA Git: ${error?.message ?? error}`, "error");
+          }
+        }
+      }
+      try {
+        branchWidget?.update(state.repo);
+      } catch {
+        // The chip is decoration; never let it break the refresh.
+      }
+    }
+
+    // ----------------------------------------------------------- actions --
+     // ----------------------------------------------------------- actions --
+     // `selection` is `{ rk, g, p, root }`: the repo key ("." for the current
+     // repo, else the submodule rel), the group, the repo-relative path, and
+     // the absolute repo root file actions run in.
+     function select(sel) {
+       state.selection = sel ? { rk: sel.rk ?? ".", g: sel.g, p: sel.p, root: sel.root ?? null } : null;
+       loadDiff().catch((error) => toast(String(error?.message ?? error), "error"));
+       paintChanges();
+     }
+
+     function canStageSelected() {
+       return Boolean(state.selection && state.selection.g !== "staged");
+     }
+
+     function canUnstageSelected() {
+       return Boolean(state.selection && state.selection.g === "staged");
+     }
+
+     function selectedPath() {
+       return state.selection ? state.selection.p : null;
+     }
+
+     function selectionPayload(extra) {
+       return { ...(extra ?? {}), ...(state.selection?.root ? { repoRoot: state.selection.root } : {}) };
+     }
+
+     async function stageSelected(staging) {
+       const path = selectedPath();
+       if (!path) return;
+       report(await invoke(staging ? "git/stage" : "git/unstage", selectionPayload({ paths: [path] })), staging ? t("stageFile") : t("unstageFile"));
+       await refresh();
+     }
+
+     async function rollbackSelected() {
+       const path = selectedPath();
+       if (!path) return;
+       const confirmed = await dialog({
+         title: t("rollback"),
+         message: `${t("rollback")} ${path}?`,
+         detail: t("discard"),
+         danger: true,
+         confirmLabel: t("rollback"),
+       });
+       if (!confirmed) return;
+       report(await invoke("git/discard", selectionPayload({ paths: [path] })), t("rollback"));
+       await refresh();
+     }
+
+     function ctxRepoForMenu(ctx) {
+       if (ctx?.repoObj) return ctx.repoObj;
+       return state.repo;
+     }
+
+     function fileContextMenu(anchor, group, file, ctx) {
+       const rk = ctx?.rk ?? ".";
+       const root = ctx?.root ?? null;
+       const at = (extra) => ({ ...(extra ?? {}), ...(root ? { repoRoot: root } : {}) });
+       const items = [
+         { label: t("showDiff"), onSelect: () => select({ rk, g: group, p: file.path, root }) },
+         { type: "separator" },
+       ];
+       if (group === "staged") {
+         items.push({ label: t("unstageFile"), onSelect: () => stageFile(group, file, false, ctx) });
+       } else {
+         items.push({ label: t("stageFile"), onSelect: () => stageFile(group, file, true, ctx) });
+       }
+       items.push({
+         label: t("rollback"),
+         disabled: group === "staged",
+         onSelect: async () => {
+           const confirmed = await dialog({
+             title: t("rollback"),
+             message: `${t("rollback")} ${file.path}?`,
+             danger: true,
+             confirmLabel: t("rollback"),
+           });
+           if (!confirmed) return;
+           report(await invoke("git/discard", at({ paths: [file.path] })), t("rollback"));
+           await refresh();
+         },
+       });
+       const relative = workspaceRelative(file.path, ctxRepoForMenu(ctx));
+       items.push({ type: "separator" });
+       items.push({
+         label: t("openFile"),
+         disabled: !relative,
+         title: relative ? file.path : `${t("openFile")} — ${file.path}`,
+         onSelect: () => invoke("fs.openDefault", { path: relative }),
+       });
+       items.push({
+         label: t("revealInFileManager"),
+         disabled: !relative,
+         onSelect: () => invoke("fs.reveal", { path: relative }),
+       });
+       // The file itself has no hash to copy; offer HEAD like the Log view does
+       // (git-view copyRevisionNumber), and fall back to the path with an honest
+       // label when there is no commit yet. No `t("copy") + t("hash")` splicing.
+       {
+         const headHash = (ctx?.status?.branch?.oid ?? state.repo?.branch?.oid) ?? null;
+         if (headHash) items.push({ label: t("copyRevisionNumber"), onSelect: () => PIG.copyText(headHash) });
+         else items.push({ label: t("copyPath"), onSelect: () => PIG.copyText(file.path) });
+       }
+       popup(anchor, items);
+     }
+
+     async function stageFile(group, file, staging, ctx) {
+       const payload = { paths: [file.path] };
+       const root = ctx?.root ?? state.selection?.root ?? null;
+       if (root) payload.repoRoot = root;
+       report(await invoke(staging ? "git/stage" : "git/unstage", payload), staging ? t("stageFile") : t("unstageFile"));
+       await refresh();
+     }
+
+     async function loadDiff() {
+       if (!state.selection) {
+         state.diff = null;
+         paintDiff();
+         return;
+       }
+       const sel = state.selection;
+       const mode = sel.g === "staged" ? "index" : "worktree";
+       const result = await invoke("git/diff", {
+         path: sel.p,
+         mode,
+         ignoreWhitespace: state.ignoreWhitespace,
+         ...(sel.root ? { repoRoot: sel.root } : {}),
+       });
+       if (!result.ok) {
+         state.diff = { text: "", error: result.message };
+         paintDiff();
+         diffHost.append(h("div", { class: "banner error" }, [
+           h("div", { class: "banner-text" }, [
+             h("div", { text: result.message ?? t("diff") }),
+           ]),
+         ]));
+         return;
+       }
+       state.diff = result;
+       paintDiff();
+     }
+
+    function setIgnoreWhitespace(enabled) {
+      state.ignoreWhitespace = enabled;
+      savePrefs();
+      loadDiff().catch(() => {});
+    }
+
+    function openCommitMenu(event) {
+      popup(event.currentTarget, [
+        { label: t("commit"), onSelect: () => commit(false) },
+        { label: t("commitAndPush"), onSelect: () => commit(true) },
+        { type: "separator" },
+        { label: t("amend"), checked: state.amend, onSelect: () => { state.amend = !state.amend; amendBox.checked = state.amend; paintCommit(); } },
+        { label: t("signOff"), checked: state.signoff, onSelect: () => { state.signoff = !state.signoff; signoffBox.checked = state.signoff; } },
+        { type: "separator" },
+        {
+          label: t("rollback"),
+          onSelect: async () => {
+            const paths = (state.repo?.staged ?? []).map((file) => file.path);
+            if (!paths.length) return;
+            const confirmed = await dialog({
+              title: t("rollback"),
+              message: `${t("unstageFile")}?`,
+              confirmLabel: t("rollback"),
+            });
+            if (!confirmed) return;
+            report(await invoke("git/unstage", { paths }), t("unstageFile"));
+            await refresh();
+          },
+        },
+      ]);
+    }
+
+     async function commit(withPush) {
+       if (state.busy || state.syncing) return;
+       const message = state.message.trim();
+       if (!message && !state.amend) {
+         toast(t("commitMessage"), "error");
+         messageInput.focus();
+         return;
+       }
+       // IDEA commits every repository with the same message: submodules first
+       // (their new HEADs become the parent's gitlink updates), the current
+       // repo last. A parent-only `git commit` can never include the 15 files
+       // changed inside `backend` — it only records which commit `backend`
+       // points at.
+       const targets = stagedTargets();
+       if (!state.amend && !targets.length) {
+         toast(t("nothingStaged"), "error");
+         return;
+       }
+       if (!targets.length) targets.push(rootCtx());
+      state.busy = true;
+      state.busyKind = "commit";
+      paintCommit();
+      paintToolbar();
+       let failed = null;
+       let lastResult = null;
+       for (const target of targets) {
+         const payload = { message, amend: state.amend, signoff: state.signoff };
+         if (target.root) payload.repoRoot = target.root;
+         const result = await invoke("git/commit", payload);
+         if (!result.ok) {
+           failed = { target, result };
+           break;
+         }
+         lastResult = { target, result };
+       }
+      if (failed) {
+        state.busy = false;
+        state.busyKind = null;
+        toast(`${failed.target.rk === "." ? "" : `${failed.target.rk}: `}${PIG.errorText(failed.result)}`, "error");
+        paintCommit();
+        paintToolbar();
+        await refresh();
+        return;
+      }
+       if (message) {
+         const remembered = await invoke("git/message-used", { message });
+         state.messages = remembered.prefs?.messages ?? state.messages;
+       }
+       state.message = "";
+       messageInput.value = "";
+       state.amend = false;
+       amendBox.checked = false;
+       if (targets.length > 1) toast(PIG.tf("commitMultipleRepos", { count: targets.length }), "info");
+       else toast(firstLine(lastResult?.result?.stdout) || t("commit"), "info");
+
+      if (withPush) {
+        state.busyKind = "commit-push";
+        paintCommit();
+        // Note: 聚合提交的 Push 把刚才提交的 N 个仓逐个推出去（子模块先、父仓后），单仓失败点名且不挡后续 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+        const pushTargets = targets.map((target) => ({
+          rk: target.rk,
+          root: target.root,
+          setUpstream: !target.branch?.upstream,
+        }));
+        const outcomes = await PIG.pushRepos(pushTargets);
+        const okCount = outcomes.filter((o) => o?.ok).length;
+        for (const outcome of outcomes) {
+          if (!outcome?.ok) {
+            toast(`${outcome.rel && outcome.rel !== "." ? `${outcome.rel}: ` : ""}${PIG.errorText(outcome)}`, "error");
+          }
+        }
+        if (okCount === outcomes.length && outcomes.length > 1) toast(PIG.tf("pushedRepos", { count: okCount }), "info");
+        else if (okCount !== outcomes.length && outcomes.length > 1) toast(PIG.tf("pushPartial", { ok: okCount, total: outcomes.length }), outcomes.length && okCount ? "info" : "error");
+        else if (outcomes.length === 1) report(outcomes[0], t("push"));
+      }
+      state.busy = false;
+      state.busyKind = null;
+      await refresh();
+     }
+
+    function openMessageHistory(event) {
+      if (!state.messages.length) {
+        toast(t("commitHistory"), "info");
+        return;
+      }
+      popup(event.currentTarget, [
+        { type: "label", label: t("commitHistory") },
+        ...state.messages.slice(0, 20).map((message) => ({
+          label: firstLine(message).slice(0, 90),
+          title: message,
+          onSelect: () => {
+            state.message = message;
+            messageInput.value = message;
+            paintCommit();
+            messageInput.focus();
+          },
+        })),
+        { type: "separator" },
+        {
+          label: t("clearAll"),
+          onSelect: async () => {
+            await invoke("git/prefs-set", { ui: { messagesCleared: Date.now() } });
+            state.messages = [];
+          },
+        },
+      ]);
+    }
+
+    // ------------------------------------------------------------- wiring --
+    function savePrefs() {
+      invoke("git/prefs-set", {
+        ui: {
+          commitUnified: state.diffUnified,
+          showWhitespaces: state.showWhitespaces,
+          showLineNumbers: state.showLineNumbers,
+          commitLang: state.commitLang,
+          commitModelKey: state.commitModelKey,
+          groupByDirectory: state.groupByDirectory,
+          compactDirs: state.compactDirs,
+        },
+      }).catch(() => {});
+    }
+
+    // -------------------------------------------------------------- shell --
+    changesWidth.append(changesHeader, changesList);
+    diffColumn.append(diffHeader, diffHost);
+    root.append(toolbar);
+    root.append(h("div", { class: "commit-view" }, [changesWidth, divider, diffColumn]));
+    root.append(h("div", { class: "commit-area" }, [
+      h("div", { class: "commit-message-row" }, [
+        messageInput,
+        h("div", { class: "commit-history" }, [
+          iconButton("clock", t("commitHistory"), openMessageHistory, { size: 15 }),
+        ]),
+      ]),
+      h("div", { class: "commit-actions" }, [
+        h("label", { class: "check" }, [amendBox, t("amend")]),
+        h("label", { class: "check" }, [signoffBox, t("signOff")]),
+        summary,
+        generateGroup,
+        h("span", { class: "spacer" }),
+        h("span", { class: "commit-summary", style: { maxWidth: "40%" }, id: "commit-branch" }),
+        h("div", { class: "split-button" }, [commitButton, commitMenuButton]),
+      ]),
+    ]));
+
+    branchWidget = mountBranchWidget(branchHolder, { onChanged: () => refresh() });
+    /**
+     * Switching repository is a view-wide change, so it drops what the leaving
+     * repository owned *before* the reload starts rather than after it ends: a
+     * hunk button left in the diff pane stays clickable for the length of a
+     * refresh, and a hunk action is a real edit — `discard` writes to the
+     * worktree — so it would land in whichever repository is current by then.
+     */
+    repoWidget = PIG.repoSelector.mount(repoHolder, {
+      onSwitch: () => {
+        forgoRepositoryState();
+        paintAll();
+        refresh().catch(() => {});
+      },
+    });
+
+    PIG.bindSplitter(divider, (delta) => {
+      const total = root.clientWidth || 1;
+      state.changesWidth = Math.max(18, Math.min(75, state.changesWidth + (delta / total) * 100));
+      changesWidth.style.width = `${state.changesWidth}%`;
+    });
+
+    // ------------------------------------------------------------- refresh --
+    /**
+     * Which repository the loaded state belongs to, so a switch can be told
+     * apart from an ordinary refresh: a selection, a filter and a rendered diff
+     * are all repository-relative, and carrying them across would show — and
+     * stage — the wrong file. `undefined` means nothing has been loaded yet.
+     */
+    let loadedRepo;
+
+     /** Drop everything that describes one repository, and only that one. */
+     function forgoRepositoryState() {
+       state.selection = null;
+       state.diff = null;
+       state.filter = "";
+       state.submodules = [];
+       state.subLoading = false;
+       // A commit draft belongs to the repository it was typed against: carrying
+       // the message/amend/signoff across would commit one repo's text in another.
+       state.message = "";
+       state.amend = false;
+       state.signoff = false;
+       messageInput.value = "";
+       amendBox.checked = false;
+       signoffBox.checked = false;
+     }
+    // Overlapping refreshes share one dimming counter so the list stays
+    // dimmed until the last one settles, instead of flashing mid-flight.
+    let refreshDepth = 0;
+    function setRefreshing(on) {
+      refreshDepth = Math.max(0, refreshDepth + (on ? 1 : -1));
+      root.classList.toggle("is-refreshing", refreshDepth > 0);
+    }
+     async function refresh() {
+       setRefreshing(true);
+       try {
+         return await refreshInner();
+       } finally {
+         setRefreshing(false);
+       }
+     }
+     async function refreshInner() {
+       const result = await invoke("git/repo");
+       if (!result.ok) {
+         state.repo = null;
+         state.error = result.message ?? t("notARepository");
+         // Nothing is loaded, so nothing repository-relative may stay on screen
+         // — and the next repository to load must not be mistaken for the same
+         // one continuing.
+         forgoRepositoryState();
+         loadedRepo = undefined;
+         paintAll();
+         return state.repo ?? {};
+       }
+       const repoRoot = result.repo?.root ?? null;
+       if (loadedRepo !== undefined && repoRoot !== loadedRepo) forgoRepositoryState();
+       loadedRepo = repoRoot;
+       state.repo = result;
+       state.error = null;
+       // Drop a selection whose file left the change lists (root or submodule).
+       if (state.selection) {
+         const sel = state.selection;
+         const list = sel.rk === "." || !sel.rk
+           ? (result[sel.g] ?? [])
+           : ((state.submodules ?? []).find((entry) => entry.rel === sel.rk)?.status?.[sel.g] ?? []);
+         if (!list.some((file) => file.path === sel.p)) state.selection = null;
+       }
+       // IDEA-like aggregation: the parent only prints one gitlink line per
+       // submodule, so fetch dirty submodules' own statuses for the inline
+       // sections. Paint first (fast), then fill the sections in.
+       paintAll();
+      const hasSubmodule = result.siblingMode === true
+        || [...(result.staged ?? []), ...(result.unstaged ?? [])].some((file) => file?.submodule)
+        // An embedded (non-submodule) repo shows as one untracked dir entry;
+        // Git never descends into it, so its inner changes need the same fetch.
+        || (result.untracked ?? []).some((file) => String(file?.path ?? "").endsWith("/"));
+      if (hasSubmodule) {
+        state.subLoading = true;
+         paintChangesHeader();
+         try {
+           const subs = await invoke("git/submodule-statuses");
+           state.submodules = subs?.ok ? (subs.submodules ?? []) : [];
+         } catch {
+           state.submodules = [];
+         }
+         state.subLoading = false;
+       } else {
+         state.submodules = [];
+         state.subLoading = false;
+       }
+       if (!state.selection) {
+         const firstRoot = ["conflicted", "unstaged", "staged", "untracked"]
+           .flatMap((group) => (result[group] ?? []).map((file) => ({ rk: ".", g: group, p: file.path, root: result.repo?.root ?? null })))[0];
+         state.selection = firstRoot ?? null;
+         if (!state.selection) {
+           for (const entry of state.submodules ?? []) {
+             const hit = ["conflicted", "unstaged", "staged", "untracked"]
+               .flatMap((group) => (entry.status?.[group] ?? []).map((file) => ({ rk: entry.rel, g: group, p: file.path, root: entry.root })))[0];
+             if (hit) {
+               state.selection = hit;
+               break;
+             }
+           }
+         }
+       }
+       paintAll();
+       await loadDiff();
+       return result;
+     }
+     async function loadPrefs() {
+       const result = await invoke("git/prefs");
+       if (!result.ok) return;
+      state.messages = result.prefs?.messages ?? [];
+      const ui = result.prefs?.ui ?? {};
+      if (typeof ui.commitUnified === "boolean") state.diffUnified = ui.commitUnified;
+      if (typeof ui.showWhitespaces === "boolean") state.showWhitespaces = ui.showWhitespaces;
+      if (typeof ui.showLineNumbers === "boolean") state.showLineNumbers = ui.showLineNumbers;
+      if (typeof ui.commitLang === "string") state.commitLang = ui.commitLang;
+      if (typeof ui.commitModelKey === "string") state.commitModelKey = ui.commitModelKey;
+      if (typeof ui.groupByDirectory === "boolean") state.groupByDirectory = ui.groupByDirectory;
+      if (typeof ui.compactDirs === "boolean") state.compactDirs = ui.compactDirs;
+    }
+
+    /**
+     * The repository list, read when it can actually have changed — mounting,
+     * a project switch, and opening the chip's menu (which re-reads its own) —
+     * rather than on every refresh. Finding the nested repositories walks the
+     * tree, and a refresh happens after every stage, commit and branch action.
+     */
+    async function loadRepositories() {
+      const result = await invoke("git/repos");
+      state.allRepos = result?.ok ? (result.repos ?? []) : [];
+      repoWidget.update(result);
+    }
+
+    (async () => {
+      try {
+        await loadPrefs();
+        await loadRepositories();
+        await refresh();
+      } catch (error) {
+        // Without this the view would fail silently on first paint.
+        toast(`IDEA Git: ${error?.message ?? error}`, "error");
+      }
+    })();
+
+    window.addEventListener("pig:appearance", () => paintAll());
+    PIG.watchWorkspace(() => {
+      // A project switch invalidates the list as much as the repository.
+      loadRepositories().then(() => refresh()).catch(() => {});
+    });
+
+    PIG.bindShortcuts([
+      { spec: KEYS.refresh, run: () => { refresh().catch(() => {}); } },
+      { spec: KEYS.refreshAlt, run: () => { refresh().catch(() => {}); } },
+      { spec: KEYS.stage, run: () => { if (canStageSelected()) stageSelected(true); } },
+      { spec: KEYS.rollback, run: () => { if (state.selection) rollbackSelected(); } },
+      { spec: KEYS.showDiff, run: () => { loadDiff().catch(() => {}); } },
+      { spec: KEYS.commitMessage, run: () => messageInput.focus() },
+      // The app's own accelerators cannot reach this webContents; say so.
+      PIG.appShortcutHintBinding(),
+    ]);
+
+    return { refresh, focusMessage: () => messageInput.focus() };
+  }
+
+  PIG.branchWidget = { mount: mountBranchWidget };
+  PIG.commitView = { mount };
+  PIG.statusColor = statusColor;
+})(window.PIG || (window.PIG = {}));
+
+/* ================= src/git-view.js ================= */
+/**
+ * The Git tool window — IDEA's `Alt+9` surface, holding the Log and Console
+ * tabs. The Log keeps IDEA's panes: branches on the left, commits in the
+ * centre, and the changed files plus commit details below the list.
+ *
+ * IDEA opens a commit's diff in the editor. There is no editor here, so the
+ * diff opens in an overlay inside the tool window instead — the same content,
+ * the same wording, one click away.
+ */
+(function (PIG) {
+  "use strict";
+
+  const { h, t, invoke, icon, iconButton, toast, popup, dialog } = PIG;
+
+  /**
+   * IDEA's Log shortcuts, in the form this surface can honour. The tooltip is
+   * rendered from the same spec that is bound, so the two cannot drift apart.
+   */
+  const KEYS = {
+    refresh: { key: "r", mod: true },
+    refreshAlt: { key: "F5", ctrl: true },
+    find: { key: "f", mod: true },
+    showDiff: { key: "d", mod: true },
+  };
+
+  function tip(key, spec) {
+    return `${t(key)} (${PIG.formatShortcut(spec)})`;
+  }
+
+  const ROW_HEIGHT = 34;
+  const LANE_WIDTH = 14;
+  // TODO: LANE_COLORS theming is out of scope — these fixed hues stay as-is;
+  // moving them into theme.css variables would touch every graph painter.
+  const LANE_COLORS = ["#4a86c8", "#3fb28a", "#c9a227", "#b06bc0", "#d1743a", "#6aa84f", "#c05555", "#5f7fd4"];
+  const SVG_NS = "http://www.w3.org/2000/svg";
+
+  function svg(tag, attributes) {
+    const node = document.createElementNS(SVG_NS, tag);
+    for (const [key, value] of Object.entries(attributes)) node.setAttribute(key, String(value));
+    return node;
+  }
+
+  /**
+   * Assign each commit a lane. A commit takes the lane already reserved for it
+   * (the one a child pushed down), otherwise a free lane; its first parent
+   * inherits the lane and extra parents take their own.
+   */
+  function assignLanes(commits) {
+    const lanes = [];
+    const rows = [];
+    for (const commit of commits) {
+      const before = lanes.slice();
+      let lane = lanes.indexOf(commit.hash);
+      if (lane < 0) {
+        lane = lanes.indexOf(null);
+        if (lane < 0) {
+          lane = lanes.length;
+          lanes.push(null);
+        }
+      }
+      lanes[lane] = null;
+      const parents = commit.parents ?? [];
+      if (parents.length) {
+        lanes[lane] = parents[0];
+        for (let index = 1; index < parents.length; index += 1) {
+          if (lanes.includes(parents[index])) continue;
+          const free = lanes.indexOf(null);
+          if (free < 0) lanes.push(parents[index]);
+          else lanes[free] = parents[index];
+        }
+      }
+      while (lanes.length && lanes[lanes.length - 1] === null) lanes.pop();
+      rows.push({ commit, lane, before, after: lanes.slice() });
+    }
+    const laneCount = rows.reduce(
+      (max, row) => Math.max(max, row.before.length, row.after.length, row.lane + 1),
+      1,
+    );
+    const rowByHash = new Map();
+    rows.forEach((row, index) => rowByHash.set(row.commit.hash, { index, lane: row.lane }));
+    return { rows, rowByHash, width: Math.max(56, laneCount * LANE_WIDTH + 14) };
+  }
+
+  /** IDEA colours the tip by what the commit *is*, not by lane. */
+  function dotColor(commit, lane) {
+    const refs = commit.refs ?? [];
+    if (refs.some((ref) => ref.head)) return "var(--graph-head)";
+    if (refs.some((ref) => ref.kind === "branch")) return "var(--graph-local)";
+    if (refs.some((ref) => ref.kind === "remote")) return "var(--graph-remote)";
+    if (refs.some((ref) => ref.kind === "tag")) return "var(--graph-tag)";
+    return LANE_COLORS[lane % LANE_COLORS.length];
+  }
+
+  function graphNode(row, layout) {
+    const { rowByHash } = layout;
+    const group = svg("svg", { width: layout.width, height: ROW_HEIGHT, class: "log-graph-svg" });
+    const x = (lane) => 10 + lane * LANE_WIDTH;
+    const midY = ROW_HEIGHT / 2;
+
+    const laneIndices = new Set([row.lane]);
+    row.before.forEach((value, index) => { if (value) laneIndices.add(index); });
+    row.after.forEach((value, index) => { if (value) laneIndices.add(index); });
+
+    for (const lane of laneIndices) {
+      const arrives = Boolean(row.before[lane]);
+      const continues = Boolean(row.after[lane]);
+      if (!arrives && !continues) continue;
+      const top = arrives ? 0 : midY;
+      const bottom = continues ? ROW_HEIGHT : midY;
+      if (bottom <= top) continue;
+      group.append(svg("line", {
+        x1: x(lane), y1: top, x2: x(lane), y2: bottom,
+        stroke: LANE_COLORS[lane % LANE_COLORS.length], "stroke-width": 1.6,
+      }));
+    }
+
+    for (const parent of row.commit.parents ?? []) {
+      const target = rowByHash.get(parent);
+      if (!target) continue;
+      if (target.lane === row.lane) {
+        group.append(svg("line", {
+          x1: x(row.lane), y1: midY, x2: x(row.lane), y2: ROW_HEIGHT,
+          stroke: LANE_COLORS[row.lane % LANE_COLORS.length], "stroke-width": 1.6,
+        }));
+        continue;
+      }
+      group.append(svg("path", {
+        d: `M ${x(row.lane)} ${midY} C ${x(row.lane)} ${midY + 9}, ${x(target.lane)} ${ROW_HEIGHT - 9}, ${x(target.lane)} ${ROW_HEIGHT}`,
+        fill: "none",
+        stroke: LANE_COLORS[target.lane % LANE_COLORS.length],
+        "stroke-width": 1.6,
+      }));
+    }
+
+    group.append(svg("circle", {
+      cx: x(row.lane), cy: midY, r: 3.6,
+      fill: dotColor(row.commit, row.lane),
+      stroke: "var(--panel-bg)", "stroke-width": 1.2,
+    }));
+    return group;
+  }
+
+  function refBadges(commit) {
+    return (commit.refs ?? []).map((ref) => {
+      const kind = ref.head ? "head" : ref.kind === "tag" ? "tag" : ref.kind === "remote" ? "remote" : "local";
+      return h("span", { class: `badge ${kind}`, text: ref.name, title: ref.name });
+    });
+  }
+
+  /**
+   * Only one diff overlay may be open at a time. Every `openDiffOverlay` call
+   * used to append another `position: absolute; inset: 0` layer to <body>, and
+   * each layer carried a full diff worth of DOM — so the cost of opening the
+   * next one grew with the number already left open, which is the shape a
+   * steadily climbing renderer CPU takes.
+   */
+  let activeDiffOverlay = null;
+
+  /** Diff overlay: the stand-in for IDEA's "diff opens in the editor". */
+  /**
+   * A commit's diff, in IDEA's shape: a header naming the file, the view
+   * controls, then the diff itself. It replaces the tool window's content
+   * because there is no editor tab to open it into.
+   */
+  function openDiffOverlay(title, text, repo) {
+    // Disposing the previous overlay also drops its keydown listener; leaving
+    // it behind would leak one document-level handler per opened diff.
+    if (activeDiffOverlay) activeDiffOverlay();
+
+    const view = { unified: true, showWhitespaces: false, showLineNumbers: true };
+    const body = h("div", { class: "diff" });
+    const header = h("div", { class: "toolbar diff-overlay-header" });
+    const overlay = h("div", { class: "diff-overlay", role: "dialog", "aria-label": title });
+
+    const close = () => {
+      if (activeDiffOverlay === close) activeDiffOverlay = null;
+      overlay.remove();
+      document.removeEventListener("keydown", onKey, true);
+    };
+    const onKey = (event) => {
+      if (event.key === "Escape") {
+        event.stopPropagation();
+        close();
+      }
+    };
+
+    function paintDiff() {
+      PIG.diff.render(body, {
+        text,
+        unified: view.unified,
+        showWhitespaces: view.showWhitespaces,
+        showLineNumbers: view.showLineNumbers,
+        showFileHeader: true,
+        // A committed change is not something to stage or discard.
+        stageable: false,
+        hunkActions: [],
+      });
+    }
+
+    function paintHeader() {
+      PIG.clear(header);
+      const { name, directory } = PIG.splitPath(title);
+      header.append(icon("file", 14));
+      header.append(h("span", { class: "diff-overlay-title", text: name }));
+      if (directory) header.append(h("span", { class: "diff-overlay-path", text: directory }));
+      header.append(h("div", { class: "toolbar-spacer" }));
+      header.append(iconButton("columns", t("sideBySide") + " / " + t("unified"), () => {
+        view.unified = !view.unified;
+        paintDiff();
+      }, { size: 14 }));
+      header.append(iconButton("eye", t("showWhitespaces"), () => {
+        view.showWhitespaces = !view.showWhitespaces;
+        paintDiff();
+      }, { size: 14 }));
+      header.append(iconButton("list", t("showLineNumbers"), () => {
+        view.showLineNumbers = !view.showLineNumbers;
+        paintDiff();
+      }, { size: 14 }));
+      header.append(iconButton("close", `${t("close")} (Esc)`, close, { size: 14 }));
+    }
+
+    overlay.append(header, body);
+    document.body.append(overlay);
+    paintHeader();
+    paintDiff();
+    document.addEventListener("keydown", onKey, true);
+    activeDiffOverlay = close;
+  }
+
+  function mountLog(root) {
+    const state = {
+      repo: null,
+      commits: [],
+      error: null,
+      repoPath: null,
+      branches: [],
+      tags: [],
+      remotes: [],
+      stashes: [],
+      selection: null,
+      changedFiles: [],
+      details: null,
+      search: "",
+      branchFilter: "",
+      pathFilter: "",
+      userFilter: "",
+      sinceFilter: "",
+      collapsed: Object.create(null),
+      showGraph: true,
+      firstParent: false,
+      noMerges: false,
+      topo: false,
+      showBranches: true,
+      showDetails: true,
+      detailHeight: 46,
+      // What the toolbar is waiting on (null | "refresh" | "push" | "fetch" | "pull"): the active
+      // button spins, the others go disabled.
+      syncing: null,
+    };
+    // Path-filter reloads are debounced: each keystroke is cheap locally but a
+    // `git log` process is not.
+    let pathTimer = null;
+
+    const toolbar = h("div", { class: "toolbar" });
+    let searchButton = null;
+    // The repository chip first, then the branch: which repository, and only
+    // then which branch of it.
+    const repoHolder = h("div", { style: { display: "contents" } });
+    /**
+     * A switch drops what the leaving repository owned *before* the reload
+     * starts: the commit list and its context menus stay live during a refresh,
+     * and they name revisions of a repository the window has already left.
+     */
+    const repoWidget = PIG.repoSelector.mount(repoHolder, {
+      onSwitch: () => {
+        forgoRepositoryState();
+        paintList();
+        paintDetail();
+        refresh().catch(() => {});
+      },
+    });
+    const branchHolder = h("div", { style: { display: "contents" } });
+    const branchWidget = PIG.branchWidget.mount(branchHolder, { onChanged: () => refresh() });
+    const listHost = h("div", { class: "scroll", style: { flex: "1 1 auto" } });
+    const branchesHost = h("div", { class: "scroll" });
+    const branchesPane = h("div", { class: "pane branches-pane column" });
+    const changedHost = h("div", { class: "scroll list changed-files" });
+    const detailsHost = h("div", { class: "commit-details details-pane" });
+    const detailPane = h("div", { class: "log-detail" });
+    const commitsPane = h("div", { class: "commits-pane" });
+    const splitter = h("div", { class: "splitter-y" });
+    const panes = h("div", { class: "log-panes" });
+
+    /** 按钮文案："" → 全部，"me" → 只看我的，具名 → 名字本身。 */
+    function userFilterLabel() {
+      if (state.userFilter === "me") return t("mineOnly");
+      return state.userFilter || t("all");
+    }
+
+    function userFilterButton() {
+      const button = PIG.textButton(
+        `${t("filterByUser")}: ${userFilterLabel()}`,
+        state.userFilter && state.userFilter !== "me"
+          ? `${t("filterByUser")}: ${state.userFilter}`
+          : t("filterByUser"),
+        (event) => openUserFilterMenu(event.currentTarget),
+        { class: "bordered user-filter" },
+      );
+      // 选中的名字可能很长：截断保住工具栏，其余分支/日期按钮不动。
+      button.style.maxWidth = "240px";
+      button.style.overflow = "hidden";
+      button.style.textOverflow = "ellipsis";
+      button.style.whiteSpace = "nowrap";
+      return button;
+    }
+
+    /**
+     * 切过滤先重画工具栏再拉日志：按钮文案本身就是选中态的反馈，
+     * 只调 loadLog 的话文案会停在旧值直到下次整刷（分支/日期按钮同病，
+     * 但那是既有行为不在本次范围）。
+     */
+    function applyUserFilter(value) {
+      state.userFilter = value;
+      paintToolbar();
+      loadLog();
+    }
+
+
+    /**
+     * IDEA 式的提交者菜单：全部 / 只看我的 / 最近提交者（带提交数）/ 手输。
+     * 名单来自 `git/authors`（近 2000 条提交聚合，取前 20）；手输按名字或
+     * 邮箱走服务端 `--author` 过滤，回车即用，名单之外的人也能滤。
+     */
+    async function openUserFilterMenu(anchor) {
+      let authors = [];
+      try {
+        const result = await invoke("git/authors", { limit: 20 });
+        if (result?.ok) authors = result.authors ?? [];
+      } catch {
+        authors = [];
+      }
+      // 工具栏每次刷新都会重建按钮，await 期间按钮可能已被替换——按标记类
+      // 找回活的按钮，找不到才放弃（下次点击自然有活锚点）。
+      const live = anchor?.isConnected ? anchor : toolbar.querySelector(".user-filter");
+      if (!live) return;
+      const listed = authors.filter((entry) => entry?.name);
+      const items = [
+        { type: "label", label: t("filterByUser") },
+        { label: t("all"), checked: !state.userFilter, onSelect: () => applyUserFilter("") },
+        {
+          label: t("mineOnly"),
+          title: state.repo?.user ? `${t("mineOnly")} — ${state.repo.user}` : t("mineOnly"),
+          checked: state.userFilter === "me",
+          onSelect: () => applyUserFilter("me"),
+        },
+      ];
+      if (listed.length || (state.userFilter && state.userFilter !== "me")) {
+        items.push({ type: "separator" }, { type: "label", label: t("recentUsers") });
+        // 当前手输值不在名单里时单独给一行带勾，避免“选了却看不见选中态”。
+        if (state.userFilter && state.userFilter !== "me" && !listed.some((entry) => entry.name === state.userFilter)) {
+          items.push({ label: state.userFilter, checked: true, onSelect: () => applyUserFilter(state.userFilter) });
+        }
+        for (const entry of listed) {
+          items.push({
+            label: entry.name,
+            shortcut: entry.count > 1 ? `${entry.count}` : undefined,
+            title: entry.email ? `${entry.name} <${entry.email}>` : entry.name,
+            checked: state.userFilter === entry.name,
+            onSelect: () => applyUserFilter(entry.name),
+          });
+        }
+      }
+      const field = h("input", {
+        type: "text",
+        value: state.userFilter && state.userFilter !== "me" ? state.userFilter : "",
+        placeholder: t("filterUserPlaceholder"),
+      });
+      field.addEventListener("keydown", (keyEvent) => {
+        if (keyEvent.key !== "Enter") return;
+        PIG.closePopup();
+        applyUserFilter(field.value.trim());
+      });
+      items.push({ type: "separator" }, { type: "custom", node: field });
+      try {
+        popup(live, items, { focus: true });
+      } catch {
+        // 解析与打开之间工具栏又重建了：这次放弃，下次点击即是活锚点。
+      }
+    }
+
+    function paintToolbar() {
+      PIG.clear(toolbar);
+      toolbar.append(repoHolder);
+      toolbar.append(branchHolder);
+      toolbar.append(h("div", { class: "toolbar-separator" }));
+      const syncDisabled = Boolean(state.syncing);
+      const syncButton = (name, title, kind, onClick) => {
+        const button = iconButton(name, title, onClick, { disabled: syncDisabled });
+        if (state.syncing === kind) {
+          button.classList.add("busy");
+          button.append(PIG.spinner(false));
+        }
+        return button;
+      };
+      toolbar.append(syncButton("refresh", tip("refresh", KEYS.refresh), "refresh", async () => {
+        if (state.syncing) return;
+        state.syncing = "refresh";
+        paintToolbar();
+        try {
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("push", t("push"), "push", async () => {
+        if (state.syncing) return;
+        // Note: Git 视图的 Push 同样走多仓对话框，单仓时对话框内只有一行 — 见 .agents/notes/implemented/architecture/2026-09-12-multi-repo-push.md
+        state.syncing = "push";
+        paintToolbar();
+        try {
+          await PIG.openPushDialog({ onPushed: async () => { await refresh(); } });
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("fetch", t("fetch"), "fetch", async () => {
+        if (state.syncing) return;
+        state.syncing = "fetch";
+        paintToolbar();
+        try {
+          PIG.reportSync(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch")), t("fetch"));
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(syncButton("arrowDown", t("pull"), "pull", async () => {
+        if (state.syncing) return;
+        state.syncing = "pull";
+        paintToolbar();
+        try {
+          const result = await PIG.runWithPill(t("pulling"), () => invoke("git/pull"));
+          PIG.reportSync(result, t("pull"));
+          await refresh();
+        } finally {
+          state.syncing = null;
+          paintToolbar();
+        }
+      }));
+      toolbar.append(iconButton("arrowUp", t("goToHead"), (event) => {
+        const head = state.repo?.branch?.oid;
+        if (!head) return;
+        select(head).then(() => {
+          const node = listHost.querySelector(".log-row.current-branch");
+          node?.scrollIntoView({ block: "center" });
+          node?.focus();
+        }).catch(() => {});
+      }));
+      // Held in a variable so the Find shortcut can open the same popup.
+      searchButton = iconButton("search", tip("search", KEYS.find), (event) => {
+        const field = h("input", { type: "text", value: state.search, placeholder: t("search") });
+        field.addEventListener("input", () => { state.search = field.value; paintList(); });
+        popup(event.currentTarget, [{ type: "custom", node: field }], { focus: true });
+      });
+      toolbar.append(searchButton);
+      toolbar.append(iconButton("branch", state.branchFilter || t("allBranches"), (event) => {
+        popup(event.currentTarget, [
+          { type: "label", label: t("filterByBranch") },
+          { label: t("allBranches"), checked: !state.branchFilter, onSelect: () => { state.branchFilter = ""; loadLog(); } },
+          ...state.branches.filter((branch) => !branch.remote).map((branch) => ({
+            label: branch.name,
+            checked: state.branchFilter === branch.name,
+            onSelect: () => { state.branchFilter = branch.name; loadLog(); },
+          })),
+        ]);
+      }));
+      // Note: 提交者过滤抄 IDEA 的三段式——全部 / 只看我的 / 最近提交者名单 + 手输（名字或邮箱回车即滤），"me" 按仓库自身 user.name 解析所以跟仓走，具名作者是仓相关的、切仓时丢掉 — 见 .agents/notes/implemented/feature/2026-09-14-git-log-user-filter.md
+      toolbar.append(userFilterButton());
+      toolbar.append(PIG.textButton(
+        `${t("date")}: ${state.sinceFilter === "day" ? t("lastDay") : state.sinceFilter === "week" ? t("lastWeek") : state.sinceFilter === "month" ? t("lastMonth") : t("anyTime")}`,
+        t("date"),
+        (event) => {
+          popup(event.currentTarget, [
+            { type: "label", label: t("date") },
+            { label: t("anyTime"), checked: !state.sinceFilter, onSelect: () => { state.sinceFilter = ""; loadLog(); } },
+            { label: t("lastDay"), checked: state.sinceFilter === "day", onSelect: () => { state.sinceFilter = "day"; loadLog(); } },
+            { label: t("lastWeek"), checked: state.sinceFilter === "week", onSelect: () => { state.sinceFilter = "week"; loadLog(); } },
+            { label: t("lastMonth"), checked: state.sinceFilter === "month", onSelect: () => { state.sinceFilter = "month"; loadLog(); } },
+          ]);
+        },
+      ));
+      toolbar.append(iconButton("file", state.pathFilter || t("filterByPaths"), (event) => {
+        const field = h("input", { type: "text", value: state.pathFilter, placeholder: "src/…" });
+        field.addEventListener("input", () => {
+          state.pathFilter = field.value;
+          if (pathTimer !== null) window.clearTimeout(pathTimer);
+          // Note: 路径过滤走服务端 `git log -- <path>` 而非本地隐藏行——本地过滤会把有路径的提交也藏掉，且与分支/用户过滤语义不一致 — 见 .agents/notes/implemented/feature/2026-09-14-git-operations-parity.md
+          pathTimer = window.setTimeout(() => { pathTimer = null; loadLog(); }, 450);
+        });
+        field.addEventListener("keydown", (keyEvent) => {
+          if (keyEvent.key === "Enter") {
+            if (pathTimer !== null) { window.clearTimeout(pathTimer); pathTimer = null; }
+            loadLog();
+          }
+        });
+        popup(event.currentTarget, [
+          { type: "label", label: t("filterByPaths") },
+          { type: "custom", node: field },
+        ], { focus: true });
+      }));
+      toolbar.append(iconButton("gear", t("graphOptions"), (event) => {
+        popup(event.currentTarget, [
+          { type: "label", label: t("graphOptions") },
+          { label: t("byCommitDate"), checked: !state.topo, onSelect: () => { state.topo = false; loadLog(); } },
+          { label: t("topologically"), checked: state.topo, onSelect: () => { state.topo = true; loadLog(); } },
+          { type: "separator" },
+          { label: t("showFirstParent"), checked: state.firstParent, onSelect: () => { state.firstParent = !state.firstParent; loadLog(); } },
+          { label: t("noMerges"), checked: state.noMerges, onSelect: () => { state.noMerges = !state.noMerges; loadLog(); } },
+          { type: "separator" },
+          { label: t("showGraph"), checked: state.showGraph, onSelect: () => { state.showGraph = !state.showGraph; paintList(); } },
+          { label: t("branches"), checked: state.showBranches, onSelect: () => { state.showBranches = !state.showBranches; paintPanes(); } },
+          { label: t("showDetails"), checked: state.showDetails, onSelect: () => { state.showDetails = !state.showDetails; paintPanes(); } },
+        ]);
+      }));
+      toolbar.append(h("div", { class: "toolbar-spacer" }));
+      toolbar.append(h("div", { class: "toolbar-spacer" }));
+      // Name whichever folder is open: the repository root when there is one,
+      // otherwise the workspace, so the empty state has something to point at.
+      const folder = state.repo?.repo?.name
+        ?? (state.repoPath ? state.repoPath.split(/[/\\]/).filter(Boolean).at(-1) : "");
+      toolbar.append(h("span", {
+        style: { fontSize: "11px", color: "var(--fg-muted)" },
+        title: state.repoPath ?? "",
+        text: folder ?? "",
+      }));
+    }
+
+    function visibleCommits() {
+      const search = state.search.trim().toLowerCase();
+      return state.commits.filter((commit) => {
+        if (search && !`${commit.subject} ${commit.short} ${commit.author}`.toLowerCase().includes(search)) return false;
+        return true;
+      });
+    }
+
+    function paintList() {
+      PIG.clear(listHost);
+      // A workspace that is not a repository (or a missing git binary) has to
+      // say so: an empty list reads as "this tool is broken" instead of
+      // "there is nothing here to show".
+      if (state.error) {
+        listHost.append(h("div", { class: "empty-state" }, [
+          h("div", { class: "headline", text: t("notARepository") }),
+          h("code", { text: state.repoPath ?? "" }),
+          h("div", { class: "muted", text: t("repositoryHint") }),
+        ]));
+        return;
+      }
+      const commits = visibleCommits();
+      if (!commits.length) {
+        listHost.append(h("div", { class: "empty-state" }, [
+          h("div", { class: "headline", text: t("noCommits") }),
+        ]));
+        return;
+      }
+      const layout = assignLanes(commits);
+      const headOid = state.repo?.branch?.oid;
+      const me = state.repo?.user;
+
+      layout.rows.forEach((row, index) => {
+        const commit = row.commit;
+        const isHead = Boolean(headOid) && commit.hash === headOid;
+        const selected = state.selection === commit.hash;
+        const node = h("div", {
+          class: `log-row${isHead ? " current-branch" : ""}${me && commit.author === me ? " mine" : ""}`,
+          role: "option",
+          tabindex: "0",
+          "aria-selected": selected ? "true" : "false",
+          style: { "--graph-width": state.showGraph ? `${layout.width}px` : "6px" },
+          onclick: () => select(commit.hash),
+          oncontextmenu: (event) => {
+            event.preventDefault();
+            select(commit.hash);
+            commitContextMenu(event.currentTarget, commit);
+          },
+        }, [
+          state.showGraph ? h("div", { class: "log-graph" }, [graphNode(row, layout)]) : h("div"),
+          h("div", { class: "log-body" }, [
+            h("div", { class: "log-subject", title: commit.subject, text: commit.subject }),
+            h("div", { class: "log-meta-line" }, [
+              ...refBadges(commit),
+              h("span", { class: "log-author", text: commit.author }),
+              h("span", { class: "log-date", text: PIG.relativeTime(commit.timestamp) }),
+              h("span", { class: "log-hash", text: commit.short }),
+            ]),
+          ]),
+        ]);
+
+        node.addEventListener("keydown", (event) => {
+          const move = (target) => {
+            const next = layout.rows[target];
+            if (!next) return;
+            select(next.commit.hash);
+            listHost.children[target]?.focus();
+          };
+          if (event.key === "Enter" || event.key === " ") {
+            event.preventDefault();
+            select(commit.hash);
+          }
+          if (event.key === "ArrowDown") { event.preventDefault(); move(index + 1); }
+          if (event.key === "ArrowUp") { event.preventDefault(); move(index - 1); }
+        });
+        listHost.append(node);
+      });
+    }
+
+    function paintBranches() {
+      PIG.clear(branchesHost);
+      if (!state.showBranches) return;
+      paintHeadRow();
+      paintBranchGroup(t("localBranches"), state.branches.filter((branch) => !branch.remote), "local");
+      paintBranchGroup(t("remoteBranches"), state.branches.filter((branch) => branch.remote), "remote");
+      paintTagGroup();
+      paintRemoteGroup();
+      paintStashGroup();
+    }
+
+    /** IDEA pins HEAD above Local — the revision the window is standing on. */
+    function paintHeadRow() {
+      const branch = state.repo?.branch;
+      if (!branch) return;
+      const name = branch.head ?? (branch.detached ? `detached @ ${String(branch.oid ?? "").slice(0, 8)}` : t("head"));
+      branchesHost.append(h("div", {
+        class: "tree-row",
+        tabindex: "0",
+        title: `${t("head")}: ${name}`,
+        onclick: () => {
+          if (branch.oid) select(branch.oid).catch(() => {});
+        },
+        oncontextmenu: (event) => {
+          event.preventDefault();
+          const head = state.commits.find((commit) => commit.hash === branch.oid);
+          if (head) commitContextMenu(event.currentTarget, head);
+        },
+      }, [
+        h("span", { class: "status-cell", style: { color: "var(--graph-head)" }, text: "◆" }),
+        h("span", { class: "name", text: `HEAD (${name})` }),
+      ]));
+    }
+
+    /** IDEA folds `feature/*` into one expandable node — same here, per group. */
+    function folderOf(remote, name) {
+      const parts = String(name).split("/");
+      if (parts.length < 2) return "";
+      return remote ? parts[0] : parts.slice(0, -1).join("/");
+    }
+
+    function leafOf(remote, name) {
+      const parts = String(name).split("/");
+      if (parts.length < 2) return name;
+      return remote ? parts.slice(1).join("/") : parts[parts.length - 1];
+    }
+
+    function paintBranchGroup(label, items, key) {
+      if (!items.length) return;
+      branchesHost.append(h("div", { class: "group-header" }, [
+        h("span", { text: label }),
+        h("span", { class: "count", text: `${items.length}` }),
+      ]));
+      const folders = new Map();
+      const loose = [];
+      for (const branch of items) {
+        const folder = folderOf(branch.remote, branch.name);
+        if (folder) {
+          if (!folders.has(folder)) folders.set(folder, []);
+          folders.get(folder).push(branch);
+        } else {
+          loose.push(branch);
+        }
+      }
+      for (const folder of [...folders.keys()].sort((a, b) => a.localeCompare(b))) {
+        const id = `${key}:${folder}`;
+        const collapsed = Boolean(state.collapsed[id]);
+        const rows = folders.get(folder);
+        const header = h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: folder,
+          onclick: () => { state.collapsed[id] = !state.collapsed[id]; paintBranches(); },
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          icon(collapsed ? "chevronRight" : "chevronDown", 12),
+          icon("folder", 13),
+          h("span", { class: "name", text: folder }),
+          h("span", { class: "count", text: `${rows.length}` }),
+        ]);
+        header.addEventListener("keydown", (event) => {
+          if (event.key === "Enter" || event.key === " ") {
+            event.preventDefault();
+            state.collapsed[id] = !state.collapsed[id];
+            paintBranches();
+          }
+        });
+        branchesHost.append(header);
+        if (collapsed) continue;
+        for (const branch of rows) branchesHost.append(branchRow(branch, leafOf(branch.remote, branch.name), 24));
+      }
+      for (const branch of loose) branchesHost.append(branchRow(branch, branch.name, 8));
+    }
+
+    function branchRow(branch, leaf, indent) {
+      const row = h("div", {
+        class: "tree-row",
+        tabindex: "0",
+        title: `${branch.name}${branch.upstream ? ` → ${branch.upstream}` : ""}${branch.subject ? `\n${branch.subject}` : ""}`,
+        onclick: () => checkout(branch),
+        oncontextmenu: (event) => {
+          event.preventDefault();
+          popup(event.currentTarget, branchActions(branch));
+        },
+      }, [
+        h("span", { class: "indent", style: { width: `${indent}px` } }),
+        branch.current
+          ? h("span", { class: "status-cell", style: { color: "var(--graph-head)" }, text: "●" })
+          : h("span", { class: "indent", style: { width: "12px" } }),
+        h("span", { class: "name", text: leaf, title: branch.name }),
+      ]);
+      row.addEventListener("keydown", (event) => {
+        if (event.key === "Enter" || event.key === " ") {
+          event.preventDefault();
+          checkout(branch);
+        }
+      });
+      return row;
+    }
+
+    function paintTagGroup() {
+      if (!state.tags.length) return;
+      branchesHost.append(h("div", { class: "group-header" }, [
+        h("span", { text: t("tags") }),
+        h("span", { class: "count", text: `${state.tags.length}` }),
+      ]));
+      for (const tag of state.tags) {
+        const active = state.branchFilter === tag.name;
+        const row = h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: `${tag.name}${tag.subject ? `\n${tag.subject}` : ""}`,
+          onclick: () => {
+            state.branchFilter = active ? "" : tag.name;
+            loadLog();
+          },
+          oncontextmenu: (event) => {
+            event.preventDefault();
+            popup(event.currentTarget, tagActions(tag));
+          },
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          active
+            ? h("span", { class: "status-cell", style: { color: "var(--graph-head)" }, text: "●" })
+            : icon("tag", 12),
+          h("span", { class: "name", text: tag.name }),
+          tag.short ? h("span", { class: "path", text: tag.short }) : null,
+        ]);
+        branchesHost.append(row);
+      }
+    }
+
+    function paintRemoteGroup() {
+      if (!state.remotes.length) return;
+      branchesHost.append(h("div", { class: "group-header" }, [
+        h("span", { text: t("remotes") }),
+        h("span", { class: "count", text: `${state.remotes.length}` }),
+      ]));
+      for (const remote of state.remotes) {
+        const url = remote.fetch ?? remote.push ?? "";
+        const row = h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: url || remote.name,
+          onclick: (event) => popup(event.currentTarget, remoteActions(remote)),
+          oncontextmenu: (event) => {
+            event.preventDefault();
+            popup(event.currentTarget, remoteActions(remote));
+          },
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          icon("branch", 12),
+          h("span", { class: "name", text: remote.name }),
+          url ? h("span", { class: "path", text: url }) : null,
+        ]);
+        branchesHost.append(row);
+      }
+    }
+
+    function paintStashGroup() {
+      if (!state.stashes.length) return;
+      branchesHost.append(h("div", { class: "group-header" }, [
+        h("span", { text: t("stashes") }),
+        h("span", { class: "count", text: `${state.stashes.length}` }),
+      ]));
+      for (const stash of state.stashes) {
+        const row = h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: `${stash.ref}${stash.subject ? `\n${stash.subject}` : ""}`,
+          onclick: () => showStashDiff(stash),
+          oncontextmenu: (event) => {
+            event.preventDefault();
+            popup(event.currentTarget, stashActions(stash));
+          },
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          h("span", { class: "status-cell", text: "≡" }),
+          h("span", { class: "name", text: stash.subject || stash.ref }),
+          h("span", { class: "path", text: PIG.relativeTime(stash.timestamp) }),
+        ]);
+        branchesHost.append(row);
+      }
+    }
+
+    async function showStashDiff(stash) {
+      const result = await invoke("git/stash-show", { ref: stash.ref });
+      if (!result.ok) {
+        toast(PIG.errorText(result), "error");
+        return;
+      }
+      if (!String(result.text ?? "").trim()) {
+        toast(t("noDiff"), "info");
+        return;
+      }
+      openDiffOverlay(`${stash.ref} ${stash.subject ?? ""}`.trim(), result.text);
+    }
+
+    function tagActions(tag) {
+      return [
+        {
+          label: t("newBranchFromHere"),
+          onSelect: async () => {
+            const name = await dialog({
+              title: t("newBranchFromHere"),
+              message: `${t("newBranch")} @ ${tag.name}`,
+              input: { value: "" },
+              confirmLabel: t("newBranch"),
+            });
+            if (!name) return;
+            const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name, create: true, startPoint: tag.name }));
+            toast(result.ok ? `${t("newBranch")}: ${name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("pushTag"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("pushing"), () => invoke("git/tag-push", { name: tag.name }));
+            PIG.reportSync(result, t("pushTag"));
+            await refresh();
+          },
+        },
+        { label: t("copy"), onSelect: () => PIG.copyText(tag.name) },
+        { type: "separator" },
+        {
+          label: t("deleteTag"),
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("deleteTagTitle"),
+              message: tag.name,
+              confirmLabel: t("deleteTag"),
+              danger: true,
+            });
+            if (!confirmed) return;
+            const result = await invoke("git/tag-delete", { name: tag.name });
+            toast(result.ok ? `${t("deleteTag")}: ${tag.name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+      ];
+    }
+
+    function remoteActions(remote) {
+      return [
+        {
+          label: t("fetch"),
+          onSelect: async () => {
+            PIG.reportSync(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch", { remote: remote.name })), t("fetch"));
+            await refresh();
+          },
+        },
+        {
+          label: `${t("fetch")} (${t("prune")})`,
+          onSelect: async () => {
+            PIG.reportSync(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch", { remote: remote.name, prune: true })), t("fetch"));
+            await refresh();
+          },
+        },
+        { label: t("copy"), onSelect: () => PIG.copyText(remote.fetch ?? remote.push ?? remote.name) },
+      ];
+    }
+
+    function stashActions(stash) {
+      return [
+        { label: t("showStash"), onSelect: () => showStashDiff(stash) },
+        {
+          label: t("applyStash"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("unstashing"), () => invoke("git/stash", { action: "apply", ref: stash.ref }));
+            toast(result.ok ? `${t("applyStash")}: ${stash.ref}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("unstash"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("unstashing"), () => invoke("git/stash", { action: "pop", ref: stash.ref }));
+            toast(result.ok ? `${t("unstash")}: ${stash.ref}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        { type: "separator" },
+        {
+          label: t("dropStash"),
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("dropStashConfirm"),
+              message: `${stash.ref}  ${stash.subject ?? ""}`.trim(),
+              confirmLabel: t("dropStash"),
+              danger: true,
+            });
+            if (!confirmed) return;
+            const result = await invoke("git/stash", { action: "drop", ref: stash.ref });
+            toast(result.ok ? `${t("dropStash")}: ${stash.ref}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+      ];
+    }
+
+    async function checkout(branch) {
+      if (branch.current) return;
+      const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name: branch.name, startPoint: branch.remote ? branch.name : undefined, track: branch.remote ? true : undefined }));
+      toast(result.ok ? `${t("checkout")}: ${branch.name}` : result.message, result.ok ? "info" : "error");
+      await refresh();
+    }
+
+    function branchActions(branch) {
+      // Note: 死文案接活——mergeIntoCurrent/rebaseOnto/deleteBranch 的 key 早就存在但零引用，本次把菜单真正挂上去 — 见 .agents/notes/implemented/feature/2026-09-14-git-operations-parity.md
+      const items = [
+        { label: t("checkout"), disabled: branch.current, onSelect: () => checkout(branch) },
+        {
+          label: t("newBranchFromHere"),
+          onSelect: async () => {
+            const name = await dialog({
+              title: t("newBranchFromHere"),
+              message: `${t("newBranch")} @ ${branch.name}`,
+              input: { value: "" },
+              confirmLabel: t("newBranch"),
+            });
+            if (!name) return;
+            const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name, create: true, startPoint: branch.name }));
+            toast(result.ok ? `${t("newBranch")}: ${name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        { type: "separator" },
+        {
+          label: t("mergeIntoCurrent"),
+          disabled: branch.current,
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("mergeTitle"),
+              message: `${branch.name} → ${state.repo?.branch?.head ?? t("head")}`,
+              confirmLabel: t("merge"),
+            });
+            if (!confirmed) return;
+            const result = await PIG.runWithPill(t("merge"), () => invoke("git/merge", { ref: branch.name }));
+            if (result.ok) {
+              toast(`${t("merge")}: ${branch.name}`, "info");
+            } else {
+              const text = String(result.message ?? "");
+              const conflicted = /CONFLICT|Automatic merge failed|fix conflicts/i.test(`${result.stdout ?? ""}\n${result.stderr ?? ""}\n${text}`);
+              toast(`${t("merge")}: ${text}${conflicted ? `\n\n${t("mergeConflicts")}` : ""}`, "error");
+            }
+            await refresh();
+          },
+        },
+        {
+          label: t("rebaseOnto"),
+          disabled: branch.current,
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("rebaseTitle"),
+              message: `${state.repo?.branch?.head ?? t("head")} → ${branch.name}`,
+              confirmLabel: t("rebase"),
+              danger: true,
+            });
+            if (!confirmed) return;
+            const result = await PIG.runWithPill(t("rebase"), () => invoke("git/rebase", { ref: branch.name }));
+            if (result.ok) {
+              toast(`${t("rebase")}: ${branch.name}`, "info");
+            } else {
+              const text = String(result.message ?? "");
+              const conflicted = /CONFLICT|could not apply|fix conflicts/i.test(`${result.stdout ?? ""}\n${result.stderr ?? ""}\n${text}`);
+              toast(`${t("rebase")}: ${text}${conflicted ? `\n\n${t("rebaseConflicts")}` : ""}`, "error");
+            }
+            await refresh();
+          },
+        },
+        { type: "separator" },
+      ];
+      if (!branch.remote) {
+        items.push(
+          {
+            label: t("renameBranch"),
+            onSelect: async () => {
+              const name = await dialog({
+                title: t("renameTitle"),
+                message: branch.name,
+                input: { value: branch.name },
+                confirmLabel: t("renameBranch"),
+              });
+              if (!name || name === branch.name) return;
+              const result = await invoke("git/branch-rename", { old: branch.name, new: name });
+              toast(result.ok ? `${t("renameBranch")}: ${name}` : result.message, result.ok ? "info" : "error");
+              await refresh();
+            },
+          },
+          {
+            label: t("setUpstream"),
+            onSelect: async () => {
+              const upstream = await dialog({
+                title: t("setUpstreamTitle"),
+                message: branch.name,
+                input: { value: branch.upstream ?? "" },
+                confirmLabel: t("setUpstream"),
+              });
+              if (!upstream) return;
+              const result = await invoke("git/branch-upstream", { name: branch.name, upstream });
+              toast(result.ok ? `${t("setUpstream")}: ${upstream}` : result.message, result.ok ? "info" : "error");
+              await refresh();
+            },
+          },
+        );
+        if (branch.upstream) {
+          items.push({
+            label: t("unsetUpstream"),
+            onSelect: async () => {
+              const result = await invoke("git/branch-upstream", { name: branch.name, unset: true });
+              toast(result.ok ? t("unsetUpstream") : result.message, result.ok ? "info" : "error");
+              await refresh();
+            },
+          });
+        }
+      }
+      items.push(
+        {
+          label: t("deleteBranch"),
+          disabled: branch.current,
+          onSelect: async () => {
+            const confirmed = await dialog({
+              title: t("deleteBranchTitle"),
+              message: branch.remote ? `${branch.name} (${t("remoteBranches")})` : branch.name,
+              confirmLabel: t("deleteBranch"),
+              danger: true,
+            });
+            if (!confirmed) return;
+            const payload = branch.remote
+              ? { name: branch.name, remote: branch.name.split("/")[0] }
+              : { name: branch.name };
+            let result = await invoke("git/branch-delete", payload);
+            if (!result.ok && /not fully merged/i.test(String(result.message ?? ""))) {
+              const force = await dialog({
+                title: t("deleteBranchTitle"),
+                message: result.message,
+                confirmLabel: t("deleteBranch"),
+                danger: true,
+              });
+              if (force) result = await invoke("git/branch-delete", { ...payload, force: true });
+            }
+            toast(result.ok ? `${t("deleteBranch")}: ${branch.name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        { label: t("copyBranchName"), onSelect: () => PIG.copyText(branch.name) },
+        { type: "separator" },
+        {
+          label: t("push"),
+          onSelect: async () => {
+            // No remote/branch: this menu belongs to the Log, where the item is
+            // about the checked-out branch. The engine pushes where that branch
+            // tracks instead of assuming `origin`.
+            const result = await PIG.runWithPill(t("pushing"), () => invoke("git/push", { setUpstream: !state.repo?.branch?.upstream }));
+            PIG.reportSync(result, t("push"));
+            await PIG.refreshTrackingRefs(result);
+            await refresh();
+          },
+        },
+        {
+          label: t("fetch"),
+          onSelect: async () => {
+            PIG.reportSync(await PIG.runWithPill(t("fetching"), () => invoke("git/fetch")), t("fetch"));
+            await refresh();
+          },
+        },
+      );
+      return items;
+    }
+
+    function paintDetail() {
+      PIG.clear(changedHost);
+      PIG.clear(detailsHost);
+      if (!state.selection) {
+        changedHost.append(h("div", { class: "empty-state" }, [h("div", { class: "headline", text: t("changedFiles") })]));
+        return;
+      }
+      for (const file of state.changedFiles) {
+        const { name, directory } = PIG.splitPath(file.path);
+        changedHost.append(h("div", {
+          class: "tree-row",
+          tabindex: "0",
+          title: file.path,
+          onclick: () => openCommitDiff(file.path),
+        }, [
+          h("span", { class: "indent", style: { width: "8px" } }),
+          h("span", { class: "status-cell", style: { color: PIG.statusColor(file.status) }, text: file.status }),
+          h("span", { class: "name", text: name }),
+          directory ? h("span", { class: "path", text: directory }) : null,
+        ]));
+      }
+      const details = state.details;
+      if (!details) return;
+      detailsHost.append(h("dl", null, [
+        h("dt", { text: t("hash") }), h("dd", { class: "mono", text: details.hash ?? "" }),
+        h("dt", { text: t("author") }), h("dd", { text: details.author ? `${details.author} <${details.email ?? ""}>` : "" }),
+        h("dt", { text: t("date") }), h("dd", { text: PIG.formatDateTime(details.timestamp) }),
+        h("dt", { text: t("subject") }), h("dd", { text: details.subject ?? "" }),
+      ]));
+      if (details.body) detailsHost.append(h("div", { class: "message-body", text: details.body }));
+    }
+
+    function paintPanes() {
+      branchesPane.classList.toggle("hidden", !state.showBranches);
+      detailPane.classList.toggle("hidden", !state.showDetails);
+      splitter.classList.toggle("hidden", !state.showDetails);
+    }
+
+    function paintAll() {
+      paintToolbar();
+      paintBranches();
+      paintList();
+      paintDetail();
+      paintPanes();
+    }
+
+    async function openCommitDiff(path) {
+      if (!state.selection) return;
+      const result = await invoke("git/commit-diff", { hash: state.selection });
+      if (!result.ok) {
+        toast(PIG.errorText(result), "error");
+        return;
+      }
+      const parsed = PIG.diff.parse(result.text);
+      if (path) {
+        const single = parsed.files.find((entry) => PIG.diff.displayPath(entry) === path);
+        // Fall back to the whole commit if the path is not in the patch.
+        if (single) {
+          openDiffOverlay(path, PIG.diff.patchFor(single, single.hunks));
+          return;
+        }
+      }
+      // No file picked: show the commit in full. Rendering only the first file
+      // would quietly hide the rest of a multi-file commit.
+      const summary = `${result.meta?.short ?? ""}`
+        + (parsed.files.length > 1 ? ` · ${parsed.files.length} ${t("files")}` : "");
+      openDiffOverlay(summary.trim() || t("showDiff"), result.text);
+    }
+
+    function commitContextMenu(anchor, commit) {
+      const isHead = Boolean(state.repo?.branch?.oid) && commit.hash === state.repo.branch.oid;
+      popup(anchor, [
+        { label: t("showDiff"), onSelect: () => openCommitDiff(null) },
+        { label: t("copyRevisionNumber"), onSelect: () => PIG.copyText(commit.hash) },
+        {
+          label: t("copyMessage"),
+          onSelect: () => {
+            const body = state.selection === commit.hash && state.details?.hash === commit.hash
+              ? String(state.details.body ?? "").trim()
+              : "";
+            PIG.copyText(body ? `${commit.subject}\n\n${body}` : commit.subject);
+          },
+        },
+        {
+          label: t("compareWithHead"),
+          onSelect: async () => {
+            const result = await invoke("git/compare", { a: "HEAD", b: commit.hash });
+            if (!result.ok) {
+              toast(PIG.errorText(result), "error");
+              return;
+            }
+            if (!String(result.text ?? "").trim()) {
+              toast(t("noDiff"), "info");
+              return;
+            }
+            openDiffOverlay(`${t("compareWithHead")}: HEAD ↔ ${commit.short}`, result.text);
+          },
+        },
+        { type: "separator" },
+        {
+          label: t("checkoutRevision"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name: commit.hash }));
+            toast(result.ok ? `${t("checkoutRevision")}: ${commit.short}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("newBranchFromHere"),
+          onSelect: async () => {
+            const name = await dialog({
+              title: t("newBranchFromHere"),
+              message: `${t("newBranch")} @ ${commit.short}`,
+              input: { value: "" },
+              confirmLabel: t("newBranch"),
+            });
+            if (!name) return;
+            const result = await PIG.runWithPill(t("checkingOut"), () => invoke("git/checkout", { name, create: true, startPoint: commit.hash }));
+            toast(result.ok ? `${t("newBranch")}: ${name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("newTag"),
+          onSelect: async () => {
+            const name = await dialog({
+              title: t("newTag"),
+              message: `${t("newTag")} @ ${commit.short}`,
+              input: { value: "" },
+              confirmLabel: t("newTag"),
+            });
+            if (!name) return;
+            const result = await invoke("git/tag", { name, hash: commit.hash });
+            toast(result.ok ? `${t("newTag")}: ${name}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        { type: "separator" },
+        {
+          label: t("cherryPick"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("cherryPick"), () => invoke("git/cherry-pick", { hash: commit.hash }));
+            toast(result.ok ? `${t("cherryPick")}: ${commit.short}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("revert"),
+          onSelect: async () => {
+            const result = await PIG.runWithPill(t("revert"), () => invoke("git/revert", { hash: commit.hash }));
+            toast(result.ok ? `${t("revert")}: ${commit.short}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("resetToHere"),
+          onSelect: async () => {
+            const mode = await dialog({
+              title: t("resetToHere"),
+              message: `${t("reset")} --mode ${commit.short}`,
+              detail: `${t("soft")} | ${t("mixed")} | ${t("hard")}`,
+              input: { value: "mixed" },
+              confirmLabel: t("reset"),
+              danger: true,
+            });
+            if (!mode) return;
+            const result = await PIG.runWithPill(t("reset"), () => invoke("git/reset", { hash: commit.hash, mode: String(mode).trim().toLowerCase() }));
+            toast(result.ok ? `${t("reset")} --${mode} ${commit.short}` : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+        {
+          label: t("editCommitMessage"),
+          disabled: !isHead,
+          title: isHead ? t("editCommitMessage") : `${t("editCommitMessage")} — ${t("head")} only`,
+          onSelect: async () => {
+            const message = await dialog({
+              title: t("editCommitMessage"),
+              message: commit.subject,
+              input: { value: commit.subject },
+              confirmLabel: t("ok"),
+            });
+            if (!message) return;
+            const result = await invoke("git/amend-message", { message });
+            toast(result.ok ? t("editCommitMessage") : result.message, result.ok ? "info" : "error");
+            await refresh();
+          },
+        },
+      ]);
+    }
+
+    async function select(hash) {
+      state.selection = hash;
+      paintList();
+      const [files, details] = await Promise.all([
+        invoke("git/commit-files", { hash }),
+        invoke("git/commit-diff", { hash }),
+      ]);
+      state.changedFiles = files.files ?? [];
+      state.details = details.meta ?? null;
+      paintDetail();
+    }
+
+    async function loadLog() {
+      const since = state.sinceFilter === "day" ? "1 day ago"
+        : state.sinceFilter === "week" ? "1 week ago"
+        : state.sinceFilter === "month" ? "1 month ago"
+        : undefined;
+      // Note: 具名作者直传服务端 `--author`（名字或邮箱都可），与 "me" 解析后的 user.name 走同一条路 — 见 main.js readLog
+      const author = state.userFilter === "me"
+        ? (state.repo?.user ?? undefined)
+        : (state.userFilter.trim() ? state.userFilter.trim() : undefined);
+      const paths = state.pathFilter.trim() ? [state.pathFilter.trim()] : undefined;
+      const result = await invoke("git/log", {
+        limit: 200,
+        branch: state.branchFilter || undefined,
+        firstParent: state.firstParent,
+        noMerges: state.noMerges,
+        topo: state.topo,
+        author,
+        since,
+        paths,
+      });
+      state.commits = result.commits ?? [];
+      if (state.selection && !state.commits.some((commit) => commit.hash === state.selection)) {
+        state.selection = null;
+        state.changedFiles = [];
+        state.details = null;
+      }
+      paintList();
+      paintDetail();
+      if (!state.selection && state.commits.length) await select(state.commits[0].hash);
+    }
+
+    async function loadRefs() {
+      const [branches, tags, remotes, stashes] = await Promise.all([
+        invoke("git/branches"),
+        invoke("git/tags"),
+        invoke("git/remotes"),
+        invoke("git/stashes"),
+      ]);
+      state.branches = branches.branches ?? [];
+      state.tags = tags.tags ?? [];
+      state.remotes = remotes.remotes ?? [];
+      state.stashes = stashes.stashes ?? [];
+      paintBranches();
+    }
+    /**
+
+     * Which repository the loaded state belongs to. A commit selection, the
+     * branch and path filters and the changed-file list are all
+     * repository-relative, so a switch has to clear them rather than let them
+     * keep describing the previous repository's history. `undefined` means
+     * nothing has been loaded yet.
+     */
+    let loadedRepo;
+
+    /** Drop everything that describes one repository, and only that one. */
+    function forgoRepositoryState() {
+      state.selection = null;
+      state.changedFiles = [];
+      state.details = null;
+      state.commits = [];
+      state.search = "";
+      state.branchFilter = "";
+      state.pathFilter = "";
+      // A named author belongs to the repository just left; "me" re-resolves
+      // against the new repository's own config, so only the named one is dropped.
+      if (state.userFilter && state.userFilter !== "me") state.userFilter = "";
+      state.tags = [];
+      state.remotes = [];
+      state.stashes = [];
+      // A commit diff belongs to the commit it came from, and its actions name a
+      // revision the new repository may not even have.
+      activeDiffOverlay?.();
+    }
+
+    // Same dim-while-reloading contract as the Commit view: overlapping
+    // refreshes share one counter so the list stays dimmed until the last one
+    // settles instead of flashing mid-flight.
+    let refreshDepth = 0;
+    function setRefreshing(on) {
+      refreshDepth = Math.max(0, refreshDepth + (on ? 1 : -1));
+      root.classList.toggle("is-refreshing", refreshDepth > 0);
+    }
+    async function refresh() {
+      setRefreshing(true);
+      try {
+        return await refreshInner();
+      } finally {
+        setRefreshing(false);
+      }
+    }
+    async function refreshInner() {
+      const repo = await invoke("git/repo");
+      const repoRoot = repo.ok ? (repo.repo?.root ?? null) : null;
+      if (loadedRepo !== undefined && repoRoot !== loadedRepo) forgoRepositoryState();
+      loadedRepo = repoRoot;
+      state.repo = repo.ok ? repo : null;
+      state.error = repo.ok ? null : (repo.message ?? t("notARepository"));
+      state.repoPath = repo.ok ? null : await currentFolder();
+      await Promise.all([loadRefs(), loadLog()]);
+      branchWidget.update(state.repo);
+      paintToolbar();
+    }
+
+    /** The folder to name in the "not a repository" message. */
+    async function currentFolder() {
+      const workspace = await invoke("workspace.get");
+      return workspace?.path ?? null;
+    }
+
+    branchesPane.append(
+      h("div", { class: "pane-header" }, [h("span", { text: t("branches") })]),
+      branchesHost,
+    );
+    detailPane.append(
+      h("div", { class: "pane-header" }, [
+        h("span", { text: t("changedFiles") }),
+        h("div", { class: "toolbar-spacer" }),
+        iconButton("diff", tip("showDiff", KEYS.showDiff), () => openCommitDiff(null), { size: 13 }),
+      ]),
+      changedHost,
+      h("div", { class: "pane-header", style: { borderTop: "1px solid var(--border-soft)" } }, [
+        h("span", { text: t("commitDetails") }),
+      ]),
+      detailsHost,
+    );
+    commitsPane.append(listHost, splitter, detailPane);
+    panes.append(branchesPane, h("div", { class: "divider-v" }), commitsPane);
+    root.append(toolbar, panes);
+
+    PIG.bindSplitter(splitter, (delta) => {
+      const total = commitsPane.clientHeight || 1;
+      state.detailHeight = Math.max(18, Math.min(80, state.detailHeight - (delta / total) * 100));
+      detailPane.style.height = `${state.detailHeight}%`;
+    }, { vertical: true });
+
+    PIG.bindShortcuts([
+      { spec: KEYS.refresh, run: () => { refresh().catch(() => {}); } },
+      { spec: KEYS.refreshAlt, run: () => { refresh().catch(() => {}); } },
+      { spec: KEYS.showDiff, run: () => { if (state.selection) openCommitDiff(null); } },
+      { spec: KEYS.find, run: () => { searchButton.click(); } },
+      // The app's own accelerators cannot reach this webContents; say so.
+      PIG.appShortcutHintBinding(),
+    ]);
+
+    /**
+     * The repository list, read when it can actually have changed — mounting, a
+     * project switch, and opening the chip's menu, which re-reads its own —
+     * rather than on every refresh. Building it walks the tree, and the Log
+     * refreshes after every branch action.
+     */
+    async function loadRepositories() {
+      repoWidget.update(await invoke("git/repos"));
+    }
+
+    PIG.watchWorkspace(() => {
+      loadRepositories().then(() => refresh()).catch(() => {});
+    });
+    loadRepositories()
+      .then(() => refresh())
+      .catch((error) => toast(String(error?.message ?? error), "error"));
+
+    return { refresh, selectCommit: select, openCommitDiff };
+  }
+
+  function mountConsole(root) {
+    const state = { entries: [] };
+    const toolbar = h("div", { class: "toolbar" });
+    const host = h("div", { class: "console" });
+
+    function paint() {
+      PIG.clear(toolbar);
+      toolbar.append(iconButton("refresh", tip("refresh", KEYS.refresh), () => refresh()));
+      toolbar.append(h("button", {
+        class: "bordered",
+        type: "button",
+        text: t("clearAll"),
+        onclick: async () => {
+          await invoke("git/console-clear");
+          state.entries = [];
+          paint();
+        },
+      }));
+      toolbar.append(h("div", { class: "toolbar-spacer" }));
+      toolbar.append(h("span", { class: "muted", style: { fontSize: "11px" }, text: `${state.entries.length}` }));
+
+      PIG.clear(host);
+      if (!state.entries.length) {
+        host.append(h("div", { class: "empty-state" }, [h("div", { class: "headline", text: t("console") })]));
+        return;
+      }
+      for (const entry of state.entries) {
+        const node = h("div", { class: "console-entry" }, [
+          h("div", { class: "console-cmd" }, [
+            h("span", { class: "console-time", text: `[${PIG.formatClock(entry.ts)}] ` }),
+            `$ ${entry.command}`,
+          ]),
+        ]);
+        if (entry.stdout?.trim()) node.append(h("pre", { class: "console-out", text: entry.stdout.trimEnd() }));
+        if (entry.stderr?.trim()) node.append(h("pre", { class: "console-out failure", text: entry.stderr.trimEnd() }));
+        if (!entry.ok && entry.message) node.append(h("pre", { class: "console-out failure", text: entry.message }));
+        host.append(node);
+      }
+      host.scrollTop = host.scrollHeight;
+    }
+
+    async function refresh() {
+      const result = await invoke("git/console");
+      state.entries = result.entries ?? [];
+      paint();
+    }
+
+    root.append(toolbar, host);
+    refresh().catch(() => {});
+    return { refresh };
+  }
+
+  /** Tabs over Log and Console, which is exactly IDEA's Git tool window. */
+  function mountGitWindow(root) {
+    const tabs = h("div", { class: "tabs" });
+    const logSurface = h("div", { class: "column grow" });
+    const consoleSurface = h("div", { class: "column grow hidden" });
+
+    const logView = mountLog(logSurface);
+    const consoleView = mountConsole(consoleSurface);
+
+    let active = "log";
+    function paintTabs() {
+      PIG.clear(tabs);
+      for (const tab of [{ id: "log", label: t("log") }, { id: "console", label: t("console") }]) {
+        tabs.append(h("button", {
+          type: "button",
+          role: "tab",
+          "aria-selected": active === tab.id ? "true" : "false",
+          text: tab.label,
+          onclick: () => {
+            active = tab.id;
+            logSurface.classList.toggle("hidden", active !== "log");
+            consoleSurface.classList.toggle("hidden", active !== "console");
+            paintTabs();
+            if (active === "console") consoleView.refresh();
+          },
+        }));
+      }
+    }
+    paintTabs();
+
+    root.append(tabs, logSurface, consoleSurface);
+    window.addEventListener("pig:appearance", paintTabs);
+    return { refresh: () => { logView.refresh(); if (active === "console") consoleView.refresh(); } };
+  }
+
+  /** The detached panel hosts both tool windows behind one tab bar. */
+  function mountBoth(root) {
+    const tabs = h("div", { class: "tabs" });
+    const commitSurface = h("div", { class: "column grow" });
+    const gitSurface = h("div", { class: "column grow hidden" });
+    let active = "commit";
+
+    PIG.commitView.mount(commitSurface);
+    mountGitWindow(gitSurface);
+
+    function paintTabs() {
+      PIG.clear(tabs);
+      // The Git tab holds the Log *and* Console, so labelling it "Log" would
+      // collide with the tab inside it.
+      for (const tab of [{ id: "commit", label: t("commit") }, { id: "git", label: t("git") }]) {
+        tabs.append(h("button", {
+          type: "button",
+          role: "tab",
+          "aria-selected": active === tab.id ? "true" : "false",
+          text: tab.label,
+          onclick: () => {
+            active = tab.id;
+            commitSurface.classList.toggle("hidden", active !== "commit");
+            gitSurface.classList.toggle("hidden", active !== "git");
+            paintTabs();
+          },
+        }));
+      }
+    }
+    paintTabs();
+    root.append(tabs, commitSurface, gitSurface);
+    window.addEventListener("pig:appearance", paintTabs);
+  }
+
+  function boot() {
+    const root = document.getElementById("app");
+    if (!root) return;
+    PIG.watchAppearance();
+    const surface = window.__PI_IDEA_GIT_SURFACE__ ?? "commit";
+    if (surface === "git") {
+      mountGitWindow(root);
+      return;
+    }
+    if (surface === "commit") {
+      PIG.commitView.mount(root);
+      return;
+    }
+    mountBoth(root);
+  }
+
+  PIG.gitView = { mount: mountGitWindow, mountLog, mountConsole, assignLanes, openDiffOverlay };
+
+  if (document.readyState === "loading") {
+    document.addEventListener("DOMContentLoaded", boot, { once: true });
+  } else {
+    boot();
+  }
+})(window.PIG || (window.PIG = {}));
+
+})();
+    </script>
+  </body>
+</html>
diff --git a/tests/panel-chrome.test.mjs b/tests/panel-chrome.test.mjs
index 92921ad..95380e3 100644
--- a/tests/panel-chrome.test.mjs
+++ b/tests/panel-chrome.test.mjs
@@ -45,7 +45,7 @@ test("every panel plugin documents the host-owned 46px chrome contract", () => {
     );
   }
 
-  assert.equal(panelPlugins.length, 18, "the official marketplace should cover all panel plugins");
+  assert.equal(panelPlugins.length, 19, "the official marketplace should cover all panel plugins");
 });
 
 test("super domain keeps its v3 surface full-bleed and interactive", () => {
diff --git a/tests/pi-idea-git.test.mjs b/tests/pi-idea-git.test.mjs
new file mode 100644
index 0000000..19e7d38
--- /dev/null
+++ b/tests/pi-idea-git.test.mjs
@@ -0,0 +1,69 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { createRequire } from "node:module";
+import { fileURLToPath } from "node:url";
+
+const here = dirname(fileURLToPath(import.meta.url));
+const root = join(here, "..");
+const pluginRoot = join(root, "plugins/io.github.liushunqiu.pi-idea-git");
+const require = createRequire(import.meta.url);
+
+const manifest = JSON.parse(
+  readFileSync(join(pluginRoot, "manifest.json"), "utf8"),
+);
+const mainSource = readFileSync(join(pluginRoot, "main.js"), "utf8");
+const commitHtml = readFileSync(
+  join(pluginRoot, "views/commit.html"),
+  "utf8",
+);
+const gitHtml = readFileSync(join(pluginRoot, "views/git.html"), "utf8");
+
+test("manifest declares the expected identity, permissions and contributions", () => {
+  assert.equal(manifest.schemaVersion, 1);
+  assert.equal(manifest.id, "io.github.liushunqiu.pi-idea-git");
+  assert.equal(manifest.version, "0.3.0");
+  assert.match(manifest.engines.piDesktop, /^>=/);
+  assert.deepEqual(manifest.permissions, [
+    "ui.panel",
+    "ui.view",
+    "clipboard.write",
+    "fs.read",
+    "models.list",
+    "agent.complete",
+  ]);
+  assert.equal(typeof manifest.i18n.en.name, "string");
+  assert.equal(typeof manifest.i18n["zh-CN"].name, "string");
+  assert.ok(manifest.i18n.en.safetyNotes.length > 0);
+  assert.ok(manifest.i18n["zh-CN"].safetyNotes.length > 0);
+  assert.equal(typeof manifest.ui.title.en, "string");
+  assert.equal(typeof manifest.ui.title["zh-CN"], "string");
+  assert.deepEqual(
+    manifest.contributes.views.map((v) => v.id),
+    ["commit", "git"],
+  );
+  assert.deepEqual(
+    manifest.contributes.commands.map((c) => c.id),
+    ["pi-idea-git.open", "pi-idea-git.refresh"],
+  );
+});
+
+test("main entry exposes the plugin lifecycle and panel invoke", () => {
+  const main = require(join(pluginRoot, "main.js"));
+  assert.equal(typeof main.onLoad, "function");
+  assert.equal(typeof main.onUnload, "function");
+  assert.equal(typeof main.onPanelInvoke, "function");
+});
+
+test("git executes via spawn with argument arrays and no shell", () => {
+  assert.match(mainSource, /spawn\(binary, args,/);
+  assert.doesNotMatch(mainSource, /shell\s*:\s*true/);
+});
+
+test("work-panel views are self-contained pages", () => {
+  assert.ok(commitHtml.includes("<!doctype html>") || commitHtml.includes("<!DOCTYPE html>"));
+  assert.ok(gitHtml.includes("<!doctype html>") || gitHtml.includes("<!DOCTYPE html>"));
+  assert.ok(commitHtml.length > 100_000);
+  assert.ok(gitHtml.length > 100_000);
+});