- absorb PR #19 by adding SUB2API mode for OAuth link generation and callback account creation
- keep dev-side Hotmail and Cloudflare sidepanel workflows while resolving sidepanel merge conflicts
- avoid duplicate SUB2API side effects by using explicit long single-response timeouts for step 1 and step 9 content-script execution
## Summary
- fix Step 5 field detection to prefer visible `input[name="age"]`
- stop treating hidden `input[name="birthday"]` as a birthday-mode signal
- preserve birthday-mode handling for visible birthday controls
## Problem
On some pages, a visible age input and a hidden birthday input coexist.
The previous logic treated the hidden `input[name="birthday"]` as evidence of birthday mode, which caused Step 5 to
fill birthday instead of age.
## Verification
- reproduced on a page where `input[name="age"]` is visible
- confirmed `input[name="birthday"]` exists but is hidden
- verified Step 5 now enters the age branch and fills the age input correctly
- Implemented a new content script for DuckDuckGo Email autofill functionality.
- Enhanced email polling scripts (mail-163.js, qq-mail.js, signup-page.js, vps-panel.js) to handle user flow interruptions.
- Updated utility functions to manage flow stopping and error handling.
- Introduced a stop button in the side panel for user control over ongoing processes.
- Improved UI elements and styles for better user experience, including new button states and messages.
- Adjusted the side panel to fetch DuckDuckGo email automatically and display it in the input field.
- Remove dead chatgpt.js (unused — all auth flows go through signup-page.js)
- Remove chatgpt.com from manifest content_scripts
- Fix resetState() to preserve vpsUrl and mailProvider on manual reset
- Add 30s timeout to all tabs.onUpdated listeners (prevent hanging)
- Fix misleading "All runs finished" log when loop breaks early
- Remove stale TODO comment in signup-page.js
- Add disabled styles for .btn-primary and .run-count-input
- Remove unused `indicator` variable in sidepanel.js
- Fix trailing comma in manifest.json
- tabRegistry preserved across resetState (like seenCodes/accounts)
- New reuseOrCreateTab() helper: navigates existing tab or creates new one
- All steps use reuseOrCreateTab: VPS panel, auth page, mail
- Mail tabs: only activate if alive, don't re-navigate (preserves session)
- Auth tab: reused between step 2→6→8, navigated to new URLs
- VPS tab: reused across runs, re-injected on navigation
- generatePassword(): 14 chars with uppercase, lowercase, digits, symbols
- Each run generates a unique password, stored in state.password
- accounts array: { email, password, createdAt } persisted across resets
- No more hardcoded password
- seenCodes also preserved across resets
QLHazyCoder