@crouton-kit/crouter 0.3.67 → 0.3.70

package/dist/clients/attach/auth-pickers.d.ts

@@ -1,5 +1,17 @@
 import type { TUI } from '@earendil-works/pi-tui';
 import type { Picker, PickerControls } from './pickers.js';
+/** A compact auth summary for a provider — used by non-picker surfaces (e.g.
+ *  the `crtr sys setup` login tab) to show which providers are already
+ *  configured without mounting the full selector. */
+export interface ProviderAuthSummary {
+    id: string;
+    name: string;
+    configured: boolean;
+}
+/** Summarize which providers have a stored credential in `agentDir`'s auth.json.
+ *  Mirrors the OAuth selector's provider list; `configured` is true when the
+ *  provider has an explicit stored credential (OAuth token or API key). */
+export declare function summarizeProviderAuth(agentDir: string): ProviderAuthSummary[];
 /** `/login` — show the provider selector, then run pi's native login flow in
  *  the viewer. On success, notifies the broker to reload auth via reload_auth.
  *  Returns a Picker (OAuthSelectorComponent as the overlay). */

package/dist/clients/attach/auth-pickers.js

@@ -47,6 +47,17 @@ function buildProviderList(authStorage, registry) {
     }
     return providers;
 }
+/** Summarize which providers have a stored credential in `agentDir`'s auth.json.
+ *  Mirrors the OAuth selector's provider list; `configured` is true when the
+ *  provider has an explicit stored credential (OAuth token or API key). */
+export function summarizeProviderAuth(agentDir) {
+    const { authStorage, registry } = buildLocalAuth(agentDir);
+    return buildProviderList(authStorage, registry).map((p) => ({
+        id: p.id,
+        name: p.name,
+        configured: authStorage.get(p.id) !== undefined,
+    }));
+}
 /** Open the browser with a URL (best-effort; platform-specific). */
 function openBrowser(url) {
     const cmd = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open';

package/dist/clients/attach/pickers.js

@@ -141,6 +141,8 @@ export function buildSettingsPicker(data, send, close, notify) {
         onClearOnShrinkChange: out,
         onShowTerminalProgressChange: out,
         onWarningsChange: out,
+        onShowCacheMissNoticesChange: out,
+        onOutputPadChange: out,
     };
     const component = new SettingsSelectorComponent(data.settings, callbacks);
     return { component, focus: component.getSettingsList() };

package/dist/clients/attach/slash-commands.js

@@ -62,6 +62,7 @@ const THINKING_LEVELS = new Set(Object.keys({
     medium: true,
     high: true,
     xhigh: true,
+    max: true,
 }));
 const BUILTIN_NAMES = new Set(BUILTIN_SLASH_COMMANDS.map((c) => c.name));
 /** Builtin slash commands safe to run against a REMOTE attach (`--canvas`) —

package/dist/commands/capture.d.ts

@@ -0,0 +1,2 @@
+import type { BranchDef } from '../core/command.js';
+export declare function registerCapture(): BranchDef;

package/dist/commands/capture.js

@@ -0,0 +1,28 @@
+// `crtr capture` — transparent passthrough to the external Capture CLI
+// (`@crouton-kit/capture`, bin `capture`). Capture stays a separately
+// published, open-source package: crouter takes no build-time dependency on
+// it and does not mirror its command tree. Every argument after `capture` is
+// forwarded verbatim (see the `passthrough` field on BranchDef in
+// core/command.ts) — including `crtr capture -h`, which shows CAPTURE's own
+// help, not crtr's. crtr's only framing of this command lives in the
+// rootEntry below (surfaced at `crtr -h`); there is no separate crtr-level
+// help body to keep in sync with capture's schema.
+import { defineBranch } from '../core/command.js';
+const INSTALL_HINT = 'Install the Capture CLI: npm install -g @crouton-kit/capture';
+export function registerCapture() {
+    return defineBranch({
+        name: 'capture',
+        passthrough: { bin: 'capture', installHint: INSTALL_HINT },
+        rootEntry: {
+            concept: 'browser automation for agents via the external Capture CLI (CDP screenshots, HAR, a11y, JS-exec, and site libs)',
+            desc: 'forwards verbatim to the external `capture` binary',
+            useWhen: 'you need headless browser automation — screenshot or inspect a page, record a HAR, or run JS in a real browser to reach a site\'s backend (e.g. Reddit/X via the bundled libs). `crtr capture <args>` forwards every argument verbatim to the external `capture` CLI, including `-h` — run `crtr capture -h` for capture\'s own command schema. Requires `capture` on PATH (npm install -g @crouton-kit/capture).',
+        },
+        help: {
+            name: 'capture',
+            summary: 'transparent alias for the external `capture` CLI — every argument forwards verbatim',
+            model: 'This branch owns no schema of its own: it execs `capture` with whatever args follow, inherits stdio, and propagates its exit code. Run `crtr capture -h` for capture\'s real command tree.',
+        },
+        children: [],
+    });
+}

package/dist/commands/node.js

@@ -137,7 +137,7 @@ const nodeNew = defineLeaf({
             { kind: 'flag', name: 'root', type: 'bool', required: false, constraint: 'Spawn an INDEPENDENT root instead of a managed child: no parent (top-level on the canvas), NO subscription back to you (you are NOT woken by it), resident lifecycle. It records spawned_by=you for provenance and is brought forefront so it can be driven directly. Use for a node you hand off and do not manage (e.g. a sub-orchestrator a human will discuss with). Mutually exclusive with --worktree.' },
             { kind: 'flag', name: 'worktree', type: 'bool', required: false, constraint: 'Use when the child will COMMIT to the repo while you or other agents may also be editing it — the worktree isolates its work so nothing collides; skip it for read-only work or when the child is the sole writer. Creates a crouter-managed git worktree for the spawned child, keyed by the child node id, at `~/.crouter/canvas/worktrees/<node-id>/` on branch `crtr/<node-id>` based on local `main`; the child\'s cwd is pinned there, and it lands the work serially onto local main later with `crtr node worktree close`. Mutually exclusive with --root.' },
             { kind: 'flag', name: 'fork-from', type: 'string', required: false, constraint: 'FORK the new node from an existing pi conversation instead of starting it fresh: pass a node id (forks from that node\'s session), an absolute session `.jsonl` path, or a partial pi session uuid. pi copies that whole history into a NEW session for the child (the source is untouched), then the prompt is delivered as the next message — i.e. the child wakes up as a continuation of that conversation. Use to branch exploratory work off a node that already built up the context you need, instead of re-deriving it. One-shot at birth: the fork resumes its own session thereafter.' },
-            { kind: 'flag', name: 'model', type: 'string', required: false, constraint: 'Override the model the node runs on: exact `provider/id` (e.g. openai-codex/gpt-5.5), a `provider/tier` (anthropic|openai + ultra|strong|medium|light, e.g. openai/ultra — pin a specific model family, useful for spawning cross-family children), a bare capability TIER (ultra|strong|medium|light), or a family alias (opus|sonnet|haiku). Must resolve to a concrete model OFFLINE — unlike `node config --model`, no live broker exists yet at spawn to free-text substring-search a registry. Omit to use the kind\'s persona default (advisor=ultra, explore=light, most other builtins=strong). The override is durable — it survives revives and polymorphs (promote/demote).' },
+            { kind: 'flag', name: 'model', type: 'string', required: false, constraint: 'Override the model the node runs on: a `provider/tier` (anthropic|openai + ultra|strong|medium|light, e.g. openai/ultra — pin a specific model family, useful for spawning cross-family children), a bare capability TIER (ultra|strong|medium|light), a family alias (opus|sonnet|haiku), or an exact `provider/id` for a concrete model. Must resolve to a concrete model OFFLINE — unlike `node config --model`, no live broker exists yet at spawn to free-text substring-search a registry. Omit to use the kind\'s persona default (advisor=ultra, explore=light, most other builtins=strong). The override is durable — it survives revives and polymorphs (promote/demote).' },
             { kind: 'flag', name: 'profile', type: 'string', required: false, constraint: 'Select the profile this node runs under — an exact profile id or a unique manifest name (see the <profiles> list below, or `crtr profile list`). Omit to INHERIT the calling node\'s current profile (which may be none, e.g. a historical null-profile parent). A shell/no-spawner root with no profile coverage instead runs the startup selector and can persist the stable root profile. --root does NOT reset this — it only means top-level, still inherits/uses the selected profile unless this overrides it.' },
             { kind: 'flag', name: 'situational-context', type: 'string', required: false, constraint: 'Hidden ambient context — current situation (e.g. which applet/page spawned this), NOT the visible prompt. Appended as a `<situational-context>` sibling block in the injected bearings, never as visible chat. Preserved unchanged into a deferred --at/--every/--when node_birth recipe.' },
             { kind: 'flag', name: 'output-schema', type: 'string', required: false, constraint: 'Path to a JSON Schema file, or inline JSON beginning with `{`. The spawned node gets a `submit` tool shaped by this schema, must call it to finish, and the submitted JSON is written to the final report and context/result.json. Rejected with trigger flags in this version.' },
@@ -188,7 +188,7 @@ const nodeNew = defineLeaf({
                 throw new InputError({ error: 'empty_spec', message: 'a model spec is required', field: 'model', next: 'Pass a `provider/id`, a `provider/tier` (e.g. openai/ultra), a tier (ultra|strong|medium|light), or a family alias (opus|sonnet|haiku).' });
             }
             if (!normalizeModel(modelSpec).includes('/')) {
-                throw new InputError({ error: 'unresolvable_model', message: `'${modelSpec}' does not resolve to a concrete model`, field: 'model', next: 'Pass an exact `provider/id` (e.g. openai-codex/gpt-5.5), a `provider/tier` (e.g. openai/ultra), a tier (ultra|strong|medium|light), or a family alias (opus|sonnet|haiku) — a live-broker substring search (like `node config --model`) is not available at spawn.' });
+                throw new InputError({ error: 'unresolvable_model', message: `'${modelSpec}' does not resolve to a concrete model`, field: 'model', next: 'Pass a `provider/tier` (e.g. openai/ultra), a tier (ultra|strong|medium|light), a family alias (opus|sonnet|haiku), or an exact `provider/id` — a live-broker substring search (like `node config --model`) is not available at spawn.' });
             }
         }
         const model = modelSpec;
@@ -869,7 +869,7 @@ const nodeConfig = defineLeaf({
             else {
                 const normalized = normalizeModel(modelSpec);
                 if (!normalized.includes('/')) {
-                    throw new InputError({ error: 'unresolvable_dormant', message: `'${modelSpec}' does not resolve to a concrete model for a dormant node`, field: 'model', next: 'Pass an exact `provider/id` (e.g. openai-codex/gpt-5.5) or a tier/alias — the live registry search is only available while the node\'s broker is up.' });
+                    throw new InputError({ error: 'unresolvable_dormant', message: `'${modelSpec}' does not resolve to a concrete model for a dormant node`, field: 'model', next: 'Pass a `provider/tier` (e.g. openai/ultra) or a tier/alias — the live registry search is only available while the node\'s broker is up.' });
                 }
                 persistDormantModel(nodeId, normalized);
                 resolved = normalized;

package/dist/commands/profile/new.js

@@ -1,9 +1,10 @@
 import { defineLeaf } from '../../core/command.js';
-import { createProfile, profileRoot } from '../../core/profiles/manifest.js';
+import { usage } from '../../core/errors.js';
+import { createProfile, ensureRootProfile, profileRoot } from '../../core/profiles/manifest.js';
 export const newLeaf = defineLeaf({
     name: 'new',
     description: 'create a new profile',
-    whenToUse: 'you are establishing a new agent identity — a stable id, a display name, and its own memory store. Pass at most one initial project directory here (the parser has no repeatable-flag support); use `profile project add` afterward for every additional one.',
+    whenToUse: 'you are establishing a new agent identity — a stable id, a display name, and its own memory store. Pass at most one initial project directory here (the parser has no repeatable-flag support); use `profile project add` afterward for every additional one. Use `--root` (no name) to provision the canonical stable root profile — the default identity a home falls back to — idempotently, without spawning a node.',
     help: {
         name: 'profile new',
         summary: 'create a profile: `<profiles-root>/<slug>-<id>/` with a manifest + its own `memory/` store',
@@ -12,8 +13,15 @@ export const newLeaf = defineLeaf({
                 kind: 'flag',
                 name: 'name',
                 type: 'string',
-                required: true,
-                constraint: 'Display name for the profile. Also slugified into the stable profile id — the id never changes on later rename.',
+                required: false,
+                constraint: 'Display name for the profile. Also slugified into the stable profile id — the id never changes on later rename. Required unless `--root` is given; mutually exclusive with `--root`.',
+            },
+            {
+                kind: 'flag',
+                name: 'root',
+                type: 'bool',
+                required: false,
+                constraint: 'Provision the canonical stable root profile (fixed id `root-00000000`, name `root`) — the fallback default identity for a home — instead of a fresh named one. Idempotent: re-running returns the existing root. Node-free (no `node new --root` needed). Mutually exclusive with `--name`/`--project`.',
             },
             {
                 kind: 'flag',
@@ -32,11 +40,28 @@ export const newLeaf = defineLeaf({
             { name: 'follow_up', type: 'string', required: true, constraint: 'Concrete next commands.' },
         ],
         outputKind: 'object',
-        effects: ['Creates `<profile-dir>/profile.json` and `<profile-dir>/memory/`.'],
+        effects: ['Creates `<profile-dir>/profile.json` and `<profile-dir>/memory/` (the fixed root dir when `--root`).'],
     },
     run: async (input) => {
         const name = input['name'];
         const project = input['project'];
+        const root = input['root'] === true;
+        if (root) {
+            if (name !== undefined || project !== undefined) {
+                throw usage('`--root` provisions the canonical stable root profile and takes no `--name`/`--project`.');
+            }
+            const { profileId, manifest } = ensureRootProfile();
+            return {
+                profile_id: profileId,
+                name: manifest.name,
+                path: profileRoot(profileId),
+                projects: manifest.projects,
+                created_at: manifest.created_at,
+                follow_up: `Root profile ensured. Spawn nodes under it with \`--profile ${profileId}\`, or widen its purview with \`crtr profile project add ${profileId} --dir <path>\`.`,
+            };
+        }
+        if (name === undefined)
+            throw usage('provide `--name <name>` to create a profile, or `--root` to provision the stable root profile.');
         const { profileId, manifest } = createProfile(name, project !== undefined ? [project] : []);
         return {
             profile_id: profileId,

package/dist/commands/sys/setup-core.js

@@ -270,6 +270,8 @@ export function renderSetupStaticInstructions(state) {
     return [
         instructions.headline,
         '',
+        'Provider login: open the wizard in a TTY and use the Login tab (same flow as /login) to authenticate a model provider.',
+        '',
         'Packages:',
         ...instructions.packageLines,
         '',

package/dist/commands/sys/setup.js

@@ -1,7 +1,8 @@
 import { defineLeaf } from '../../core/command.js';
 import { getMarkdownTheme, getSelectListTheme, getSettingsListTheme } from '@earendil-works/pi-coding-agent';
 import { TUI, ProcessTerminal, Input, matchesKey, truncateToWidth, visibleWidth } from '@earendil-works/pi-tui';
-import { applyTheme } from '../../clients/attach/config-load.js';
+import { applyTheme, defaultAgentDir } from '../../clients/attach/config-load.js';
+import { buildLoginPicker, summarizeProviderAuth } from '../../clients/attach/auth-pickers.js';
 const ANSI_GREEN = (s) => `\x1b[32m${s}\x1b[39m`;
 const ANSI_YELLOW = (s) => `\x1b[33m${s}\x1b[39m`;
 const theme = {
@@ -103,6 +104,10 @@ class SetupWizard {
     exaInput = new Input();
     selectedPackageIds = new Set();
     selectedSystemTools = new Set();
+    authSummary;
+    reloadAuthSummary;
+    notice;
+    onOpenLogin;
     activeTab = 0;
     pluginIndex = 0;
     systemIndex = 0;
@@ -113,10 +118,12 @@ class SetupWizard {
     _focused = false;
     onSubmit;
     onCancel;
-    constructor(manifest, installedPackageIds, systemTools) {
+    constructor(manifest, installedPackageIds, systemTools, authSummary, reloadAuthSummary) {
         this.manifest = manifest;
         this.installedPackageIds = installedPackageIds;
         this.systemTools = systemTools;
+        this.authSummary = authSummary;
+        this.reloadAuthSummary = reloadAuthSummary;
         for (const entry of this.manifest)
             this.selectedPackageIds.add(entry.id);
         for (const tool of this.systemTools) {
@@ -130,7 +137,7 @@ class SetupWizard {
     }
     set focused(value) {
         this._focused = value;
-        this.exaInput.focused = value && this.activeTab === 2 && !this.confirming;
+        this.exaInput.focused = value && this.activeTab === 3 && !this.confirming;
     }
     get focused() {
         return this._focused;
@@ -139,13 +146,23 @@ class SetupWizard {
         this.cachedWidth = undefined;
         this.cachedLines = undefined;
     }
+    /** Show a one-line notice on the login tab (login success/failure feedback). */
+    setNotice(message) {
+        this.notice = message;
+        this.invalidate();
+    }
+    /** Recompute provider auth status after a login flow closes. */
+    refreshAuth() {
+        this.authSummary = this.reloadAuthSummary();
+        this.invalidate();
+    }
     setTab(next) {
         this.activeTab = next;
-        this.exaInput.focused = this.focused && next === 2 && !this.confirming;
+        this.exaInput.focused = this.focused && next === 3 && !this.confirming;
         this.invalidate();
     }
     moveTab(delta) {
-        const next = ((this.activeTab + delta + 3) % 3);
+        const next = ((this.activeTab + delta + 4) % 4);
         this.setTab(next);
     }
     cancel() {
@@ -263,6 +280,13 @@ class SetupWizard {
         if (this.handleGlobalTabSwitch(data))
             return;
         if (this.activeTab === 0) {
+            if (matchesKey(data, 'enter')) {
+                this.onOpenLogin?.();
+                return;
+            }
+            return;
+        }
+        if (this.activeTab === 1) {
             if (matchesKey(data, 'j') || matchesKey(data, 'down')) {
                 this.movePlugin(1);
                 return;
@@ -285,7 +309,7 @@ class SetupWizard {
             }
             return;
         }
-        if (this.activeTab === 1) {
+        if (this.activeTab === 2) {
             if (matchesKey(data, 'j') || matchesKey(data, 'down')) {
                 this.moveSystem(1);
                 return;
@@ -307,7 +331,7 @@ class SetupWizard {
         this.exaInput.handleInput(data);
     }
     renderHeader(width) {
-        const tabs = ['Plugins', 'System deps', 'Exa key'];
+        const tabs = ['Login', 'Plugins', 'System deps', 'Exa key'];
         const tabLine = tabs
             .map((label, index) => tabPill(`${index + 1}. ${label}`, index === this.activeTab))
             .join(theme.fg('dim', '  ·  '));
@@ -321,12 +345,39 @@ class SetupWizard {
         const line = this.confirming
             ? 'y/enter confirm · n/esc go back · q cancel'
             : this.activeTab === 0
-                ? 'j/k or ↑/↓ move · space toggle · ? details · enter/Tab advance · ←/→ switch tabs · q cancel'
+                ? 'enter log in · Tab/→ next · q cancel'
                 : this.activeTab === 1
-                    ? 'j/k or ↑/↓ move · space toggle · enter/Tab advance · ←/→ switch tabs · q cancel'
-                    : 'type EXA_API_KEY · enter finish · Tab/Shift-Tab or ←/→ switch tabs · q cancel';
+                    ? 'j/k or ↑/↓ move · space toggle · ? details · enter/Tab advance · ←/→ switch tabs · q cancel'
+                    : this.activeTab === 2
+                        ? 'j/k or ↑/↓ move · space toggle · enter/Tab advance · ←/→ switch tabs · q cancel'
+                        : 'type EXA_API_KEY · enter finish · Tab/Shift-Tab or ←/→ switch tabs · q cancel';
         return [truncateToWidth(theme.fg('dim', line), width)];
     }
+    renderLogin(width) {
+        const out = [];
+        out.push(truncateToWidth(`${theme.fg('accent', theme.bold('Login'))}${theme.fg('dim', '  optional · same providers as /login')}`, width));
+        for (const line of wrapText('Log in to a model provider so crtr can run turns. With no provider configured, nodes fail to start when you first use the app.', Math.max(1, width))) {
+            out.push(truncateToWidth(theme.fg('muted', line), width));
+        }
+        out.push('');
+        const configured = this.authSummary.filter((p) => p.configured);
+        if (configured.length > 0) {
+            out.push(truncateToWidth(theme.fg('success', `✓ Configured: ${configured.map((p) => p.name).join(', ')}`), width));
+        }
+        else {
+            out.push(truncateToWidth(theme.fg('warning', 'No provider configured yet.'), width));
+        }
+        out.push('');
+        out.push(...framed([
+            theme.fg('accent', theme.bold('Press Enter to open the provider picker')),
+            theme.fg('dim', 'Pick a provider, then complete its OAuth or API-key login.'),
+        ], width));
+        if (this.notice !== undefined) {
+            out.push('');
+            out.push(truncateToWidth(theme.fg('success', this.notice), width));
+        }
+        return out;
+    }
     renderPlugins(width) {
         const out = [];
         out.push(truncateToWidth(`${theme.fg('accent', theme.bold('Plugins'))}${theme.fg('dim', '  default ON')}`, width));
@@ -413,7 +464,15 @@ class SetupWizard {
         const lines = [
             ...this.renderHeader(width),
             '',
-            ...(this.confirming ? this.renderConfirm(width) : this.activeTab === 0 ? this.renderPlugins(width) : this.activeTab === 1 ? this.renderSystems(width) : this.renderExa(width)),
+            ...(this.confirming
+                ? this.renderConfirm(width)
+                : this.activeTab === 0
+                    ? this.renderLogin(width)
+                    : this.activeTab === 1
+                        ? this.renderPlugins(width)
+                        : this.activeTab === 2
+                            ? this.renderSystems(width)
+                            : this.renderExa(width)),
             '',
             ...this.renderFooter(width),
         ];
@@ -422,6 +481,52 @@ class SetupWizard {
         return this.cachedLines;
     }
 }
+const LOGIN_OVERLAY_OPTIONS = { anchor: 'center', width: '80%', maxHeight: '85%' };
+/** Mount pi's real `/login` provider picker + login dialog as a centered overlay
+ *  over the setup wizard, driving the SAME OAuth/API-key flow the in-app /login
+ *  uses (`buildLoginPicker`). Credentials write to `agentDir`'s auth.json; on
+ *  close, focus returns to the wizard and its auth summary refreshes. */
+function openLoginOverlay(tui, wizard, agentDir) {
+    let handle;
+    let current;
+    let done = false;
+    const disposeCurrent = () => {
+        const disposable = current?.component;
+        try {
+            disposable?.dispose?.();
+        }
+        catch {
+            /* ignore dispose errors during teardown */
+        }
+    };
+    const mount = (p) => {
+        handle = tui.showOverlay(p.component, LOGIN_OVERLAY_OPTIONS);
+        tui.setFocus(p.focus);
+    };
+    const unmount = () => handle?.hide();
+    const replace = (component, focus) => {
+        if (done)
+            return;
+        disposeCurrent();
+        unmount();
+        current = { component, focus };
+        mount(current);
+        tui.requestRender();
+    };
+    const close = () => {
+        if (done)
+            return;
+        done = true;
+        disposeCurrent();
+        unmount();
+        wizard.refreshAuth();
+        tui.setFocus(wizard);
+        tui.requestRender();
+    };
+    current = buildLoginPicker(tui, agentDir, () => wizard.refreshAuth(), (msg) => wizard.setNotice(msg), { close, replace });
+    mount(current);
+    tui.requestRender();
+}
 async function runSetup() {
     const state = buildSetupInitialState();
     if (!process.stdout.isTTY) {
@@ -429,9 +534,19 @@ async function runSetup() {
         return;
     }
     applyTheme({ cwd: process.cwd() });
+    const agentDir = defaultAgentDir();
+    const loadAuthSummary = () => {
+        try {
+            return summarizeProviderAuth(agentDir);
+        }
+        catch {
+            return [];
+        }
+    };
     const terminal = new ProcessTerminal();
     const tui = new TUI(terminal, true);
-    const wizard = new SetupWizard(state.manifest, state.installedPackageIds, state.systemTools);
+    const wizard = new SetupWizard(state.manifest, state.installedPackageIds, state.systemTools, loadAuthSummary(), loadAuthSummary);
+    wizard.onOpenLogin = () => openLoginOverlay(tui, wizard, agentDir);
     tui.addChild(wizard);
     tui.setFocus(wizard);
     await new Promise((resolve, reject) => {
@@ -496,16 +611,17 @@ async function runSetup() {
 }
 export const sysSetupLeaf = defineLeaf({
     name: 'setup',
-    description: 'install the bundled pi plugins, system deps, and Exa key setup',
-    whenToUse: 'you want to bootstrap this machine for crtr in one pass: install the vendored pi plugins, confirm tmux and nvim, and save your Exa API key.',
+    description: 'log in to a model provider, install the bundled pi plugins, system deps, and Exa key setup',
+    whenToUse: 'you want to bootstrap this machine for crtr in one pass: log in to a model provider (same flow as /login), install the vendored pi plugins, confirm tmux and nvim, and save your Exa API key.',
     help: {
         name: 'sys setup',
-        summary: 'open the multi-tab setup wizard for bundled pi plugins, system deps, and Exa key',
+        summary: 'open the multi-tab setup wizard for provider login, bundled pi plugins, system deps, and Exa key',
         inputNote: 'No input parameters.',
         output: [],
         outputKind: 'object',
         effects: [
-            'Opens a pi-tui wizard that collects companion package installs, system dependency installs, and an Exa API key.',
+            'Opens a pi-tui wizard whose first tab logs in to a model provider (pi\'s real OAuth/API-key flow, same as in-app /login) so a fresh install has credentials before running any node.',
+            'Collects companion package installs, system dependency installs, and an Exa API key across the remaining tabs.',
             'Runs the bundled pi CLI to install the selected companion packages, writes EXA_API_KEY to ~/.crouter/exa.key when provided, and prints a summary.',
         ],
     },

package/dist/core/__tests__/full/broker-pane-resolution.test.js

@@ -33,7 +33,7 @@
 import { test, before, after } from 'node:test';
 import assert from 'node:assert/strict';
 import { spawnSync } from 'node:child_process';
-import { createHarness, hasTmux } from '../helpers/harness.js';
+import { createHarness, hasTmux, TMUX_TIMEOUT_MS } from '../helpers/harness.js';
 import { closeDb } from '../../canvas/db.js';
 import { getFocusByNode, listFocuses } from '../../canvas/focuses.js';
 import { nodeInPane } from '../../../commands/node.js';
@@ -50,13 +50,16 @@ after(async () => {
 });
 /** Split a throwaway pane in the harness session; return its %id. */
 function makePane() {
-    const r = spawnSync('tmux', ['split-window', '-d', '-t', h.session, '-P', '-F', '#{pane_id}', 'sleep 100000'], { encoding: 'utf8' });
+    const r = spawnSync('tmux', ['split-window', '-d', '-t', h.session, '-P', '-F', '#{pane_id}', 'sleep 100000'], { encoding: 'utf8', timeout: TMUX_TIMEOUT_MS });
     const pane = (r.stdout ?? '').trim();
     assert.ok(pane.startsWith('%'), `expected a %pane_id, got "${pane}" (stderr: ${r.stderr})`);
     return pane;
 }
 function tagPane(pane, value) {
-    spawnSync('tmux', ['set-option', '-p', '-t', pane, '@crtr_node', value], { stdio: 'ignore' });
+    spawnSync('tmux', ['set-option', '-p', '-t', pane, '@crtr_node', value], {
+        stdio: 'ignore',
+        timeout: TMUX_TIMEOUT_MS,
+    });
 }
 /** Parse `crtr`'s human-list stdout (`- key: value` lines) into a map. */
 function parseList(stdout) {
@@ -70,13 +73,13 @@ function parseList(stdout) {
 }
 /** Read a pane's `@crtr_node` option ('' when unset / pane gone). */
 function paneTag(pane) {
-    const r = spawnSync('tmux', ['show-options', '-p', '-v', '-t', pane, '@crtr_node'], { encoding: 'utf8' });
+    const r = spawnSync('tmux', ['show-options', '-p', '-v', '-t', pane, '@crtr_node'], { encoding: 'utf8', timeout: TMUX_TIMEOUT_MS });
     return (r.stdout ?? '').trim();
 }
 /** Every pane in the harness session whose `@crtr_node` tag names `id` — the live
  *  on-screen viewer panes for that node. A correct dedup keeps this at exactly 1. */
 function taggedViewerPanes(session, id) {
-    const r = spawnSync('tmux', ['list-panes', '-s', '-t', session, '-F', '#{pane_id} #{@crtr_node}'], { encoding: 'utf8' });
+    const r = spawnSync('tmux', ['list-panes', '-s', '-t', session, '-F', '#{pane_id} #{@crtr_node}'], { encoding: 'utf8', timeout: TMUX_TIMEOUT_MS });
     return (r.stdout ?? '')
         .split('\n')
         .map((l) => l.trim())
@@ -112,7 +115,7 @@ test('Gap 1 — nodeInPane resolves a broker node from its tagged viewer pane (u
     closeDb();
     assert.equal(nodeInPane(viewer), broker, 'tagged viewer pane → resolves the broker (the fix)');
     // A stale tag pointing at a DONE node is ignored (must be live: active/idle).
-    spawnSync('tmux', ['kill-pane', '-t', viewer], { stdio: 'ignore' });
+    spawnSync('tmux', ['kill-pane', '-t', viewer], { stdio: 'ignore', timeout: TMUX_TIMEOUT_MS });
 });
 test('Gap 2 — recycle preserves the broker host: finalizes the node, boots a fresh BROKER root', async (t) => {
     if (!hasTmux())

package/dist/core/__tests__/full/cascade-close.test.js

@@ -54,10 +54,13 @@ import assert from 'node:assert/strict';
 import { spawnSync } from 'node:child_process';
 import { mkdirSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { createHarness, hasTmux } from '../helpers/harness.js';
+import { createHarness, hasTmux, TMUX_TIMEOUT_MS } from '../helpers/harness.js';
 import { isPidAlive } from '../../canvas/pid.js';
 function sessionExists(session) {
-    return spawnSync('tmux', ['has-session', '-t', session], { stdio: 'ignore' }).status === 0;
+    return (spawnSync('tmux', ['has-session', '-t', session], {
+        stdio: 'ignore',
+        timeout: TMUX_TIMEOUT_MS,
+    }).status === 0);
 }
 function seedAssistantSession(sessionFile) {
     mkdirSync(join(sessionFile, '..'), { recursive: true });

package/dist/core/__tests__/full/dead-pane-regression.test.js

@@ -27,12 +27,12 @@
 import { test } from 'node:test';
 import assert from 'node:assert/strict';
 import { spawnSync } from 'node:child_process';
-import { hasTmux } from '../helpers/harness.js';
+import { hasTmux, TMUX_TIMEOUT_MS } from '../helpers/harness.js';
 import { spawnAndDetach } from '../../spawn.js';
 const SKIP = !hasTmux();
 // --- LOCAL tmux drivers (keyed on a raw %pane id, not a canvas node) --------
 function tmux(args) {
-    const r = spawnSync('tmux', args, { encoding: 'utf8' });
+    const r = spawnSync('tmux', args, { encoding: 'utf8', timeout: TMUX_TIMEOUT_MS });
     return { code: r.status ?? -1, out: (r.stdout ?? '').trim(), err: (r.stderr ?? '').trim() };
 }
 /** Every pane in the session (across windows) with its dead flag. */
@@ -146,6 +146,9 @@ test('dead-pane regression: spawnAndDetach into a remain-on-exit-ON window is DE
             else
                 process.env['TMUX'] = origTmux;
         }
-        assert.equal(spawnSync('tmux', ['has-session', '-t', session], { stdio: 'ignore' }).status === 0, false, 'isolated session killed — no stray');
+        assert.equal(spawnSync('tmux', ['has-session', '-t', session], {
+            stdio: 'ignore',
+            timeout: TMUX_TIMEOUT_MS,
+        }).status === 0, false, 'isolated session killed — no stray');
     }
 });

package/dist/core/__tests__/full/detach-focus.test.js

@@ -26,18 +26,23 @@ import assert from 'node:assert/strict';
 import { spawnSync } from 'node:child_process';
 import { mkdirSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { createHarness, hasTmux } from '../helpers/harness.js';
+import { createHarness, hasTmux, TMUX_TIMEOUT_MS } from '../helpers/harness.js';
 import { getNode } from '../../canvas/canvas.js';
 import { getFocusByNode, getFocusByPane, listFocuses } from '../../canvas/focuses.js';
 import { closeDb } from '../../canvas/db.js';
 import { isPidAlive } from '../../canvas/pid.js';
 const SKIP = !hasTmux() ? 'tmux unavailable' : false;
 function sessionExists(session) {
-    return spawnSync('tmux', ['has-session', '-t', session], { stdio: 'ignore' }).status === 0;
+    return (spawnSync('tmux', ['has-session', '-t', session], {
+        stdio: 'ignore',
+        timeout: TMUX_TIMEOUT_MS,
+    }).status === 0);
 }
 function paneExistsReal(pane) {
-    return ((spawnSync('tmux', ['display-message', '-p', '-t', pane, '#{pane_id}'], { encoding: 'utf8' }).stdout ?? '').trim() ===
-        pane);
+    return ((spawnSync('tmux', ['display-message', '-p', '-t', pane, '#{pane_id}'], {
+        encoding: 'utf8',
+        timeout: TMUX_TIMEOUT_MS,
+    }).stdout ?? '').trim() === pane);
 }
 // Split a throwaway pane in the harness session; return its %id. The caller pane
 // `node focus` opens the viewer beside (a09b71f: spawn no longer auto-opens one).
@@ -49,7 +54,7 @@ function seedAssistantSession(sessionFile) {
     writeFileSync(sessionFile, JSON.stringify({ type: 'message', message: { role: 'assistant', content: [{ type: 'text', text: 'hi' }] } }) + '\n');
 }
 function makePane(session) {
-    const r = spawnSync('tmux', ['split-window', '-d', '-t', session, '-P', '-F', '#{pane_id}', 'sleep 100000'], { encoding: 'utf8' });
+    const r = spawnSync('tmux', ['split-window', '-d', '-t', session, '-P', '-F', '#{pane_id}', 'sleep 100000'], { encoding: 'utf8', timeout: TMUX_TIMEOUT_MS });
     const pane = (r.stdout ?? '').trim();
     assert.ok(pane.startsWith('%'), `expected a %pane_id, got "${pane}" (stderr: ${r.stderr})`);
     return pane;

package/dist/core/__tests__/full/human-new-window-regression.test.js

@@ -21,11 +21,11 @@
 import { test } from 'node:test';
 import assert from 'node:assert/strict';
 import { spawnSync } from 'node:child_process';
-import { hasTmux } from '../helpers/harness.js';
+import { hasTmux, TMUX_TIMEOUT_MS } from '../helpers/harness.js';
 import { spawnAndDetach } from '../../spawn.js';
 const SKIP = !hasTmux();
 function tmux(args) {
-    const r = spawnSync('tmux', args, { encoding: 'utf8' });
+    const r = spawnSync('tmux', args, { encoding: 'utf8', timeout: TMUX_TIMEOUT_MS });
     return { code: r.status ?? -1, out: (r.stdout ?? '').trim(), err: (r.stderr ?? '').trim() };
 }
 /** window id of a pane (across the server). '' on error. */
@@ -96,6 +96,9 @@ test('human-new-window regression: spawnAndDetach new-window into a watched-pane
             else
                 process.env['TMUX'] = origTmux;
         }
-        assert.equal(spawnSync('tmux', ['has-session', '-t', session], { stdio: 'ignore' }).status === 0, false, 'isolated session killed — no stray');
+        assert.equal(spawnSync('tmux', ['has-session', '-t', session], {
+            stdio: 'ignore',
+            timeout: TMUX_TIMEOUT_MS,
+        }).status === 0, false, 'isolated session killed — no stray');
     }
 });

package/dist/core/__tests__/full/review-render-pane-regression.test.js

@@ -32,12 +32,12 @@ import { tmpdir } from 'node:os';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { createRequire } from 'node:module';
-import { hasTmux } from '../helpers/harness.js';
+import { hasTmux, TMUX_TIMEOUT_MS } from '../helpers/harness.js';
 const CROUTER = join(dirname(fileURLToPath(import.meta.url)), '..', '..', '..', '..');
 const CLI_SRC = join(CROUTER, 'src', 'cli.ts');
 const TSX_ESM = createRequire(import.meta.url).resolve('tsx/esm');
 function tmux(args) {
-    const r = spawnSync('tmux', args, { encoding: 'utf8' });
+    const r = spawnSync('tmux', args, { encoding: 'utf8', timeout: TMUX_TIMEOUT_MS });
     return { code: r.status ?? -1, out: (r.stdout ?? '').trim(), err: (r.stderr ?? '').trim() };
 }
 function sessionPanes(session) {

package/dist/core/__tests__/helpers/harness.d.ts

@@ -1,5 +1,6 @@
 import type { NodeMeta, NodeStatus, Mode, Lifecycle, ExitIntent } from '../../canvas/types.js';
 import type { InboxEntry } from '../../feed/inbox.js';
+export declare const TMUX_TIMEOUT_MS = 10000;
 /** True when a usable tmux is on PATH — tests gate on this and SKIP otherwise. */
 export declare function hasTmux(): boolean;
 export interface WaitOpts {