refactor(web): move usage provider controls to settings

[juliusmarminge]

The Limits page mixes subscription usage with hub configuration. Move Add hub and Remove into a separate Usage providers section under Settings → Providers, keeping the Usage page focused on limits.

The section uses the existing selected-device and permission handling. Configured hubs remain manageable even when disabled or when all their accounts are deduplicated. The add dialog and confirmed, per-entry removal keep the same server settings API. Settings search finds the section by CLIProxyAPI, CLI proxy hub, and management key. Usage no longer shows a separate hub-name heading on web or mobile; its accounts keep their inline CLI Proxy labels.

Verification

• 70 focused tests pass across settings search, provider environment selection/access, and shared usage limits.
• Web and mobile typechecks and targeted formatting pass. Targeted lint passes with the existing set-state-in-effect warning in ProviderSettingsPanel, reproduced against the base revision. The heading-removal files lint without warnings.
• In an isolated app with a local fake hub: canceling Add clears its fields; canceling Remove preserves the hub; confirming Remove persists after reload and removes the accounts from Limits; adding from Settings restores them.
• A read-only UI fixture keeps the hub visible with no Add or Remove controls. Existing environment access tests pass. No real hub credentials or subscriptions were changed.
• Web verified in the collaborative browser at desktop and 390px-wide sizes; the settings section and Add dialog fit without horizontal overflow. Desktop uses the same components; its shell was not separately exercised. The matching mobile heading removal was verified in an iPhone simulator with a local fake hub. Existing titled settings sections retain their headings. No wire-contract or provider-adapter changes.

Before and after

The Usage captures use synthetic accounts, a fixed clock, and the same 1280 × 800 viewport and scroll position. The original before image is reused from the just-merged implementation, whose Usage component and shared filtering are identical to this branch's starting point b34ff8f and current base 07891e9. The heading-removal pair was captured from the actual previous PR revision 89f558e9e and the corrected implementation with identical fixtures. Captures are unaltered frames from the collaborative browser; temporary fixtures are not committed.

Before: management controls on Usage

Before correction: the leftover hub heading

After: Usage shows limits without the hub heading

New location: Settings → Providers → Usage providers

Readiness

Ready for review at 0ac85c1b90cbfdbfd6cf1f4a44f391d1e5b74e57, against base 07891e9569c88457516b44c08c820471762969e8. All 20 applicable checks passed. Bugbot and all Macroscope checks completed successfully, Macroscope approved this head, and there are no unresolved review threads or active change requests. The fresh whole-PR audit found no blockers. The worktree is clean.

Expected skipped jobs: Mobile Native Static Analysis reports no native changes. EAS, hosted web, and desktop preview jobs need their opt-in labels; desktop preview cleanup only runs on closure or label removal. PR size label-definition sync excludes pull-request events, and [code]smith is an opt-in autofix service. CodeRabbit reports a successful status with automatic reviews disabled. No checks were disabled or bypassed.

Leave this PR unmerged for Julius; no auto-merge or merge queue is enabled.

Prepared with Codex in T3 Code.

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	13.8 KiB	13.5 KiB	−235 B (−1.7%)	15.1 KiB	✅
Codex	Thread snapshot wire	7.0 KiB	7.0 KiB	−1 B (−0.0%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.7 KiB	6.5 KiB	−234 B (−3.4%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	58.5 KiB	57.0 KiB	−1.5 KiB (−2.6%)	66.4 KiB	✅
Codex	Live turn messages	10	8	−2 (−20.0%)	21	✅
Claude	Total thread wire	13.5 KiB	13.5 KiB	−2 B (−0.0%)	15.1 KiB	✅
Claude	Thread snapshot wire	7.0 KiB	7.0 KiB	+1 B (+0.0%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.5 KiB	6.5 KiB	−3 B (−0.0%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	57.8 KiB	57.8 KiB	0 B (0.0%)	66.4 KiB	✅
Claude	Live turn messages	8	8	0 (0.0%)	21	✅

Baseline: 07891e9 · PR result: 0ac85c1 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 113.8 KiB
• Claude decoded thread snapshot: 114.5 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[macroscopeapp]

Approvability

Verdict: Approved at 0ac85c1

Macroscope's review found this PR approvable — This is a contained UI refactor that relocates existing usage-provider management into Provider settings while preserving the existing settings patching, permissions, confirmation, and Limits rendering behavior. Mobile presentation, search metadata, and documentation are updated to match, with no schema, default, infrastructure, or static-analysis changes.

^{You can add or adjust custom eligibility rules. Learn more.}

Dismissing prior approval to re-evaluate 0ac85c1