fix(web): stabilize the provider settings editor

[t3dotgg]

The provider editor changed height when users switched between Models and Configuration. The split layout also removed access to the provider account email.

This keeps the desktop editor at a stable, viewport-aware height and scrolls long provider content inside it. Configuration now shows the provider-reported account email behind the existing redacted, click-to-reveal control.

Screenshots

Before	After

Checks

• vp test run apps/web/src/components/settings/ProviderInstanceCard.test.ts apps/web/src/components/settings/ProviderSettingsPanel.environment.test.tsx
• vp run --filter @t3tools/web typecheck
• Targeted lint and formatting
• Chrome at 1536 x 768 and 400 x 786

Made with GPT-5.6 Sol in the Codex harness through T3 Code.

---

Note

Low Risk
UI-only layout and display of already-fetched auth email via an existing redaction component; verify large-screen scrolling at different viewport sizes.

Overview
Fixes the desktop provider settings editor jumping height when switching between Models and Configuration, and brings back the provider account email on Configuration.

On large screens, ProviderSettingsPanel pins the split layout to a viewport-aware height; the provider list and editor body scroll inside their panes instead of resizing the card. ProviderInstanceCard and ProviderModelsSection use a flex column layout so tab content fills the editor and scrolls (replacing the models list’s fixed max-h-40 on lg).

When liveProvider.auth.email is present, Configuration shows an Account email row via new ProviderAuthEmail, using the existing RedactedSensitiveText click-to-reveal control. A test asserts the label and toggle render without exposing the raw address in markup.

^{Reviewed by Cursor Bugbot for commit efc13b7. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Fix provider settings editor: add redacted account email and stabilize layout

• Adds ProviderAuthEmail component that renders the provider auth email as a redacted, toggleable RedactedSensitiveText with aria-label 'Toggle account email visibility', shown above the display name when non-empty.
• Reworks large-viewport layout across ProviderInstanceCard, ProviderModelsSection, and ProviderSettingsPanel to use flex columns with fixed headers/footers and internal scroll regions, removing fixed max-heights on large screens.
• Adds a test asserting the email is blurred and not present in static markup.
• Risk: layout class changes in ProviderInstanceCard.tsx, ProviderModelsSection.tsx, and ProviderSettingsPanel.tsx alter overflow/scroll behavior on large viewports; verify scrolling and height constraints render correctly.

^{Macroscope summarized efc13b7.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: e8ae3857-ef1e-4992-934a-a0035c96113d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	13.3 KiB	13.3 KiB	+8 B (+0.1%)	15.1 KiB	✅
Codex	Thread snapshot wire	6.9 KiB	6.9 KiB	+1 B (+0.0%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.4 KiB	6.4 KiB	+7 B (+0.1%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	55.6 KiB	55.6 KiB	0 B (0.0%)	66.4 KiB	✅
Codex	Live turn messages	11	11	0 (0.0%)	21	✅
Claude	Total thread wire	13.4 KiB	13.3 KiB	−3 B (−0.0%)	15.1 KiB	✅
Claude	Thread snapshot wire	6.9 KiB	6.9 KiB	−9 B (−0.1%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.5 KiB	6.5 KiB	+6 B (+0.1%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	56.4 KiB	56.4 KiB	0 B (0.0%)	66.4 KiB	✅
Claude	Live turn messages	11	11	0 (0.0%)	21	✅

Baseline: b0ae3f3 · PR result: efc13b7 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 109.4 KiB
• Claude decoded thread snapshot: 110.1 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[macroscopeapp]

One finding on the provider list restructure: wrapping the rows in a scroll container changes which row is :last-child, which drops the divider between the list and the footer row. Everything else in the diff (lg-gated flex/height plumbing, moved padding, redacted account email reuse of RedactedSensitiveText) looks consistent with the existing settings surfaces.

^{Posted via Macroscope — UI Consistency}

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — The PR contains localized provider-editor layout fixes, but it also adds a revealable display of provider authentication account email. Because this introduces handling of sensitive authentication-related data in the production UI, human review is warranted despite default redaction and targeted tests.

^{You can add or adjust custom eligibility rules. Learn more.}