feat: right-click menus everywhere, workspace/session cost, long-term DB safety

Right-click menus: one portal shell (components/ContextMenu.tsx) for every
item with actions - sidebar/Recents/archived session rows (SessionMenu),
console tabs, pane headers, the Changes panel's files/tree/commits, the
workspace home, sessions outside a workspace (SessionRowMenu: Sessions
table, Dashboard, Activity, Workflow runs), prompt images, every Settings
list and every Claude Code/Codex config list (FileItemMenu). Buttons stay;
a delete keeps its button's confirm; the shell stops portal clicks from
reaching the card that opened it.

Status bar: Workspace $ and Session $ on the Workspace page, from
?lane= on GET /api/pricing/cost and the focused/replayed session's cost.

Database, no data dropped: synchronous=NORMAL, journal_size_limit 64 MB,
hourly PASSIVE checkpoint + PRAGMA optimize, idx_events_session_created
(replacing the redundant idx_events_session), watchdog reads
sessions.transcript_path, transcript parsed before the hook's write
transaction, GET /api/sessions/:id?events=0 for the web page (reloads only
on its own session, debounced), streamed export, transactional clear-data
and chunked cleanup, subagent import reads tool_use_ids once, runtime logs
rotated past 5 MB.

client/src/pages/GitCredentialsConfig.tsx

@@ -5,13 +5,15 @@
  * host, shared by everyone using this install. Lists them, replaces a token,
  * adds one, deletes one. A token is write-only here: the server never returns
  * one, so the form starts blank and the list shows only that one is saved.
- * The git bar's login form saves into the same store.
+ * The git bar's login form saves into the same store. A right-click on a row
+ * opens the same Replace / Remove (plus Copy host) as a menu.
  * @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
  */
 import { useCallback, useEffect, useState } from "react";
 import { useTranslation } from "react-i18next";
 import { Pencil, Plus, Trash2 } from "lucide-react";
 import { api, type GitCredential } from "../lib/api";
+import { ContextMenu, MenuItem, MenuSeparator, useContextMenu } from "../components/ContextMenu";
 
 const INPUT =
   "w-full rounded border border-border-light bg-surface-0 px-2 py-1 text-xs text-fg-primary placeholder:text-fg-muted focus:border-accent focus:outline-none";
@@ -21,6 +23,13 @@ export function GitCredentialsConfig() {
   const [items, setItems] = useState<GitCredential[]>([]);
   const [error, setError] = useState<string | null>(null);
   const [form, setForm] = useState<{ url: string; username: string; token: string } | null>(null);
+  const ctx = useContextMenu<GitCredential>();
+  // A menu item: close the menu, then act on the row it was opened on.
+  const pick = (fn: (c: GitCredential) => unknown) => () => {
+    const c = ctx.menu?.item;
+    ctx.close();
+    if (c) fn(c);
+  };
 
   const load = useCallback(async () => {
     try {
@@ -57,6 +66,9 @@ export function GitCredentialsConfig() {
     }
   };
 
+  const replace = (c: GitCredential) =>
+    setForm({ url: `${c.protocol}://${c.host}`, username: c.username, token: "" });
+
   const remove = async (c: GitCredential) => {
     if (!window.confirm(t("gitCreds.removeConfirm"))) return;
     try {
@@ -150,7 +162,11 @@ export function GitCredentialsConfig() {
           </thead>
           <tbody>
             {items.map((c) => (
-              <tr key={`${c.protocol}://${c.host}`} className="border-t border-border">
+              <tr
+                key={`${c.protocol}://${c.host}`}
+                onContextMenu={(e) => ctx.open(e, c)}
+                className="border-t border-border"
+              >
                 <td className="px-3 py-2 font-mono text-[11px] text-fg-primary">{c.host}</td>
                 <td className="px-3 py-2 text-fg-secondary">{c.username}</td>
                 <td className="px-3 py-2 text-fg-secondary">
@@ -162,13 +178,7 @@ export function GitCredentialsConfig() {
                       type="button"
                       aria-label={`${t("gitCreds.replace")} ${c.host}`}
                       title={t("gitCreds.replace")}
-                      onClick={() =>
-                        setForm({
-                          url: `${c.protocol}://${c.host}`,
-                          username: c.username,
-                          token: "",
-                        })
-                      }
+                      onClick={() => replace(c)}
                       className="rounded p-1 text-fg-muted transition-colors hover:bg-surface-3 hover:text-fg-primary"
                     >
                       <Pencil className="h-3.5 w-3.5" />
@@ -196,6 +206,18 @@ export function GitCredentialsConfig() {
           </tbody>
         </table>
       </div>
+      {ctx.menu && (
+        <ContextMenu x={ctx.menu.x} y={ctx.menu.y} onClose={ctx.close} testId="git-cred-menu">
+          <MenuItem onSelect={pick(replace)}>{t("gitCreds.replace")}</MenuItem>
+          <MenuItem onSelect={pick((c) => void navigator.clipboard.writeText(c.host))}>
+            {t("rowMenu.copyHost")}
+          </MenuItem>
+          <MenuSeparator />
+          <MenuItem danger onSelect={pick((c) => void remove(c))}>
+            {t("gitCreds.remove")}
+          </MenuItem>
+        </ContextMenu>
+      )}
     </div>
   );
 }