Add & reauthenticate
Use isolated authentication flows without turning global logout into the account-registration mechanism.
Activate manually
Every account switch is an explicit user action with validation and rollback.
Edit metadata
Display name, category, note, visual identity, order, and favorites; authenticated e-mail stays read-only.
Local vault
Credential material stays on the PC and is protected at rest.
Diagnostics
Understand Desktop/CLI/runtime state without dumping tokens into logs.
Usage context
Usage windows can inform the user but never trigger automatic rotation.