US - 01 —As a user, I want to manage my account on the desktop app so that I can control my accounts attached to my email, my connected devices, and decide where my identity is stored.

Full prototype options

User deletes all accounts

User imports and exports identity

Acceptance criteria

Account settings is accessible from the avatar dropdown via "Manage accounts
The left bar shows all accounts under "Your accounts" with avatar, name and the ability to switch between them
"Create account" option is always available at the bottom of the accounts list
Tapping the ••• next to an account shows a contextual menu with "Export identity" and "Delete account"
Identity storage is pinned independently at the top of the left bar showing the current email.
"Import identity" is available at the bottom of the left bar
"See my profile" button is available on the Connected devices and Notifications tabs and links to the user's public profile page
Connected devices tab shows all devices linked to the identity with the current device labelled "This device" — other devices have a Remove button
Notifications tab shows a single toggle: "Get notified about mentions and replies across all Hypermedia sites" → We remove the activity notification by now until we have a defined strategy. This means we remove the Subscription module at the end of the documents .
Identity Key Storage Mode shows a Local/Remote toggle — current mode is highlighted
When Local is selected the subcopy reads "Your identity lives on this device only"
Passkey row shows "Manage passkey" button which will bring user to the bros
Email address row shows the current email with a "Manage email" button
Switching from Remote to Local triggers a confirmation modal
Confirmation modal title: "Are you sure you want to switch your identity to local?" with warning in red: "Remember you won't be able to use your identity on other devices." Buttons: Cancel and Switch to local
After switching to local a toast appears: "Your account has been switched to local"
Delete account triggers a confirmation modal: "Are you sure you want to delete your account?" with warning: "You will lose your identity and the access to all the activity created by this account." Buttons: Cancel and Delete account
After deleting an account the app switches to the next available account and a toast appears: "Your account has been deleted"

Basic Flow

User clicks avatar → "Manage accounts"
Account settings opens — Connected devices tab shown by default
User can switch accounts from the sidebar
User taps "Identity storage" at the top of the sidebar
Identity storage page shows current mode (Local/Remote), passkey and email
User clicks Local toggle → confirmation modal appears
User confirms → toast shown, mode switches to Local
User goes back to Connected devices → removes a device by clicking Remove
User goes to Notifications → toggles mentions and replies on or off
User clicks "See my profile" → public profile page opens

Edge Cases

⚠️ User tries to delete their only account → confirmation modal warns this cannot be undone. After deletion app shows empty state with "Create account" option
⚠️ User switches to Local while on another device → that other device loses access. No automatic warning is shown on the other device — behaviour TBD with dev
⚠️ User tries to remove "This device" from Connected devices → Remove button is not available for the current device
⚠️ User removes all accounts → Empty state is shown "You don’t have any active account"
⚠️ User imports an identity that already exists → system detects duplicate and prompts the user
⚠️ User switches to Local but has no backup → no explicit warning currently shown. Worth adding a prompt here — TBD
⚠️ Notification toggle is turned off → user stops receiving email notifications immediately across all sites