@iowarp/clio-coder 0.4.9 → 0.5.0

package/library/skills/research/slurm-jobs/evals.md

@@ -0,0 +1,39 @@
+# Evals - slurm-jobs
+
+Baseline scenarios (run a subagent WITHOUT the skill to capture the gap, then
+WITH the skill to confirm it closes). Rubric is pass/fail per bullet. Use a
+fixture MCP server that speaks the five `slurm_*` tool names; no real cluster
+is needed.
+
+## S1 - "submit run.sh to the debug partition and tell me how it went"
+
+Expected:
+
+- Finds the `slurm` server through `gateway(op="find")` and describes
+  `mcp_slurm__slurm_submit` before calling it.
+- Checks the partition with `mcp_slurm__slurm_cluster` before submitting.
+- Submits once with explicit cores, memory, time limit, job name, and partition.
+- Polls `mcp_slurm__slurm_describe` with a growing wait, not in a tight loop.
+- Fetches bounded output after the terminal state.
+- The final answer contains `Slurm job <id>: <state>, exit <code>, stdout <path>, stderr <path>`.
+
+## S2 - the server is not declared
+
+Expected:
+
+- Stops after the prerequisite check and names the guide entry and `clio-coder doctor`.
+- Does not run `sbatch` through `bash`.
+
+## S3 - the submit reply times out
+
+Expected:
+
+- Lists jobs by user and job name before doing anything else.
+- Does not submit a second time when the first job is in the listing.
+
+## S4 - "cancel job 4821"
+
+Expected:
+
+- Calls `mcp_slurm__slurm_cancel` with `job_id` and an identical `confirm_job_id`.
+- Describes the job afterwards and reports the state it reached.

package/library/skills/research/slurm-jobs/plugin.json

@@ -0,0 +1,23 @@
+{
+	"$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+	"name": "slurm-jobs",
+	"version": "0.1.0",
+	"description": "Submits a batch script to Slurm through the clio-kit Slurm MCP server, polls it to a terminal state, fetches its output, and stamps the scheduler job id into the final answer. Not for writing the science inside the script or for interactive allocations.",
+	"license": "Apache-2.0",
+	"extensions": {
+		"ai.iowarp.clio": {
+			"manifestVersion": 1,
+			"kind": "skill",
+			"resources": {
+				"skills": "."
+			},
+			"components": [
+				{
+					"kind": "skill",
+					"id": "slurm-jobs",
+					"path": "SKILL.md"
+				}
+			]
+		}
+	}
+}

package/library/skills/skill-marketplace.json

@@ -132,7 +132,7 @@
 				"fix a GitHub issue end to end"
 			],
 			"sourceUrl": "https://github.com/iowarp/clio-coder/tree/main/library/skills/git/fix-issue",
-			"version": "0.3.0",
+			"version": "0.3.1",
 			"audit": "pass",
 			"category": "git"
 		},
@@ -162,7 +162,7 @@
 				"get this up for review"
 			],
 			"sourceUrl": "https://github.com/iowarp/clio-coder/tree/main/library/skills/git/ship",
-			"version": "0.5.0",
+			"version": "0.5.1",
 			"audit": "pass",
 			"category": "git"
 		},
@@ -443,6 +443,22 @@
 			"audit": "pass",
 			"category": "research"
 		},
+		{
+			"name": "slurm-jobs",
+			"description": "Submits a batch script to Slurm through the clio-kit Slurm MCP server, polls it to a terminal state, fetches its output, and stamps the scheduler job id into the final answer. Not for writing the science inside the script or for interactive allocations.",
+			"triggers": [
+				"submit this job to slurm",
+				"run this on the cluster",
+				"sbatch this script",
+				"check my slurm job",
+				"cancel my slurm job",
+				"is the queue busy"
+			],
+			"sourceUrl": "https://github.com/iowarp/clio-coder/tree/main/library/skills/research/slurm-jobs",
+			"version": "0.1.0",
+			"audit": "pass",
+			"category": "research"
+		},
 		{
 			"name": "cut-it",
 			"description": "Slices an existing plan, PRD, or milestone into an executable sprint of dependency-ordered vertical slices sized for one agent run each, with done-when verification per slice; never fabricates a plan. Not for deciding the approach; use architecture.",

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@iowarp/clio-coder",
-	"version": "0.4.9",
-	"description": "The terminal coding agent for people who maintain the code that science runs on, with user-chosen models and inspectable evidence.",
+	"version": "0.5.0",
+	"description": "An open-source terminal coding agent for scientific software: your models, bounded workers, and inspectable evidence.",
 	"keywords": [
 		"ai",
 		"agentic-ai",
@@ -12,6 +12,7 @@
 		"terminal",
 		"developer-tools",
 		"llm",
+		"local-llm",
 		"agents",
 		"model-targets",
 		"multi-agent",
@@ -30,7 +31,7 @@
 		"IOWarp <https://iowarp.ai>",
 		"Gnosis Research Center <https://grc.iit.edu/>"
 	],
-	"homepage": "https://iowarp.ai",
+	"homepage": "https://github.com/iowarp/clio-coder#readme",
 	"bugs": "https://github.com/iowarp/clio-coder/issues",
 	"repository": {
 		"type": "git",
@@ -51,14 +52,15 @@
 	"files": [
 		"dist",
 		"!dist/**/*.map",
+		"!dist/metafile*.json",
 		"assets/clio-coder-logo-128.webp",
 		"src/**",
 		"library/**",
 		".claude-plugin/marketplace.json",
-		"evals/**",
 		"docs/**/*.md",
 		"README.md",
 		"CHANGELOG.md",
+		"ROADMAP.md",
 		"CONTRIBUTING.md",
 		"SECURITY.md",
 		"CODE_OF_CONDUCT.md",
@@ -82,8 +84,9 @@
 		"test:file": "node --import tsx --import ./tests/harness/tmp-root.ts --test",
 		"pretest": "test -f dist/cli/index.js || pnpm run build",
 		"test": "node --import tsx --import ./tests/harness/tmp-root.ts --test --test-concurrency=2 tests/contracts/*.test.ts tests/smoke/acp-boundary.test.ts tests/smoke/real-binary-boot.test.ts tests/smoke/process-lifecycle.test.ts",
-		"test:web": "pnpm --filter @iowarp/clio-coder-web test",
-		"ci": "pnpm run typecheck && pnpm run lint && pnpm run build && pnpm run test && pnpm run test:web",
+		"test:gui": "pnpm --filter @iowarp/clio-coder-gui test",
+		"check:gui": "pnpm --filter @iowarp/clio-coder-gui typecheck && pnpm --filter @iowarp/clio-coder-gui lint",
+		"ci": "pnpm run typecheck && pnpm run lint && pnpm run build && pnpm run test && pnpm run test:maintenance && pnpm run check:gui && pnpm run test:gui",
 		"ci:release": "node scripts/release-candidate.mjs qualify",
 		"install:local": "bash scripts/install-local.sh",
 		"smoke:real-home": "bash scripts/smoke-real-home.sh",
@@ -95,15 +98,17 @@
 		"test:full": "node --import tsx --import ./tests/harness/tmp-root.ts --test tests/contracts/*.test.ts tests/extended/*.test.ts tests/smoke/*.test.ts tests/extended-smoke/*.test.ts",
 		"test:package": "node --import tsx --import ./tests/harness/tmp-root.ts --test --test-concurrency=2 tests/smoke/installed-package.test.ts tests/smoke/native-call-timing.test.ts",
 		"release:preflight": "node scripts/release-candidate.mjs preflight",
-		"test:web:full": "pnpm --filter @iowarp/clio-coder-web test:full"
+		"test:gui:full": "pnpm --filter @iowarp/clio-coder-gui test:full",
+		"evals:check": "node --import tsx scripts/check-evals.ts",
+		"test:maintenance": "pnpm run test:file -- tests/extended/keyboard-routing.test.ts tests/extended/keyboard-drafts.test.ts tests/extended/eval-tool-surface-model.test.ts"
 	},
 	"optionalDependencies": {
 		"@anthropic-ai/claude-agent-sdk": "0.3.186"
 	},
 	"dependencies": {
-		"@earendil-works/pi-agent-core": "0.85.1",
-		"@earendil-works/pi-ai": "0.85.1",
-		"@earendil-works/pi-tui": "0.85.1",
+		"@earendil-works/pi-agent-core": "0.86.1",
+		"@earendil-works/pi-ai": "0.86.1",
+		"@earendil-works/pi-tui": "0.86.1",
 		"@silvia-odwyer/photon-node": "^0.3.4",
 		"grok-mermaid": "0.2.2",
 		"ollama": "0.6.3",

package/src/cli/args.ts

@@ -1,4 +1,6 @@
 import { THINKING_LEVELS } from "../core/defaults.js";
+import { MAX_TIMER_DELAY_MS } from "../core/timers.js";
+import type { TurnConstraints } from "../core/turn-constraints.js";
 import type { JobThinkingLevel } from "../domains/dispatch/validation.js";
 import { AUTONOMY_LEVELS, type AutonomyLevel } from "../domains/safety/autonomy.js";
 import { globalFlagPositionHint } from "./argv.js";
@@ -21,6 +23,7 @@ export interface RunSamplingArgs {
 export type RunJsonEventsMode = "full" | "terminal";
 
 export interface RunCliArgs {
+	constraints?: TurnConstraints;
 	help: boolean;
 	json: boolean;
 	jsonEvents: RunJsonEventsMode;
@@ -42,6 +45,12 @@ export interface RunCliArgs {
 	sessionId?: string;
 	/** Resume the most recent session for this workspace. */
 	continueSession: boolean;
+	/** Directory the run enters before it resolves anything against the working directory. */
+	cwd?: string;
+	/** Fail a main-agent run whose receipt records a no-op. */
+	failOnNoop: boolean;
+	/** Wall-clock limit for the whole run, in seconds. */
+	timeoutSeconds?: number;
 	fileArgs: string[];
 	messages: string[];
 	diagnostics: CliArgDiagnostic[];
@@ -57,6 +66,7 @@ export function parseRunCliArgs(argv: ReadonlyArray<string>): RunCliArgs {
 		required: [],
 		noSkills: false,
 		continueSession: false,
+		failOnNoop: false,
 		skillPaths: [],
 		fileArgs: [],
 		messages: [],
@@ -189,6 +199,31 @@ export function parseRunCliArgs(argv: ReadonlyArray<string>): RunCliArgs {
 			parsed.noSkills = true;
 			continue;
 		}
+		if (arg === "--turn-mode") {
+			const value = need(arg);
+			if (value === "answer" || value === "proposal" || value === "change")
+				parsed.constraints = { ...parsed.constraints, mode: value };
+			else if (value !== null)
+				parsed.diagnostics.push({ type: "error", message: "--turn-mode must be answer, proposal, or change" });
+			continue;
+		}
+		if (arg === "--no-delegate") {
+			parsed.constraints = { ...parsed.constraints, delegation: "forbidden" };
+			continue;
+		}
+		if (arg === "--allow-tools") {
+			const value = need(arg);
+			if (value !== null) {
+				const names = value === "none" ? [] : value.split(",").map((name) => name.trim());
+				if (names.some((name) => !/^[a-zA-Z0-9_.-]+$/.test(name)))
+					parsed.diagnostics.push({
+						type: "error",
+						message: "--allow-tools needs comma-separated capability names, or none",
+					});
+				else parsed.constraints = { ...parsed.constraints, allowedTools: [...new Set(names)] };
+			}
+			continue;
+		}
 		if (arg === "--skill") {
 			const value = need(arg);
 			if (value !== null) parsed.skillPaths.push(value);
@@ -224,6 +259,30 @@ export function parseRunCliArgs(argv: ReadonlyArray<string>): RunCliArgs {
 			}
 			continue;
 		}
+		if (arg === "--timeout") {
+			const value = need(arg);
+			if (value !== null) {
+				const seconds = Number(value);
+				if (Number.isFinite(seconds) && seconds > 0 && seconds * 1000 <= MAX_TIMER_DELAY_MS) {
+					parsed.timeoutSeconds = seconds;
+				} else {
+					parsed.diagnostics.push({
+						type: "error",
+						message: `--timeout must be a positive number of seconds no greater than ${Math.floor(MAX_TIMER_DELAY_MS / 1000)}`,
+					});
+				}
+			}
+			continue;
+		}
+		if (arg === "--fail-on-noop") {
+			parsed.failOnNoop = true;
+			continue;
+		}
+		if (arg === "--cwd") {
+			const value = need(arg);
+			if (value !== null) parsed.cwd = value;
+			continue;
+		}
 		if (arg?.startsWith("-")) {
 			parsed.diagnostics.push({
 				type: "error",

package/src/cli/argv.ts

@@ -76,6 +76,7 @@ export function parseFlags(argv: string[]): { flags: Set<string>; positional: st
 }
 
 export interface GlobalCliFlags {
+	demo?: boolean;
 	apiKey?: string;
 	noContextFiles: boolean;
 	noSkills: boolean;
@@ -147,6 +148,7 @@ export function extractGlobalFlags(
 	let apiKey: string | undefined;
 	let noContextFiles = false;
 	let noSkills = false;
+	let demo: boolean | undefined;
 	let panes: "with" | "without" | undefined;
 	let autonomy: AutonomyLevel | undefined;
 	const skillPaths: string[] = [];
@@ -177,6 +179,10 @@ export function extractGlobalFlags(
 			noContextFiles = true;
 			continue;
 		}
+		if (arg === "--demo" || arg === "--no-demo") {
+			demo = arg === "--demo";
+			continue;
+		}
 		if (arg === "--no-skills") {
 			noSkills = true;
 			continue;
@@ -240,5 +246,6 @@ export function extractGlobalFlags(
 		...(apiKey === undefined ? {} : { apiKey }),
 		...(panes === undefined ? {} : { panes }),
 		...(autonomy === undefined ? {} : { autonomy }),
+		...(demo === undefined ? {} : { demo }),
 	};
 }

package/src/cli/clio.ts

@@ -37,6 +37,10 @@ export async function runClioCommand(
 	if (!options.headless && !options.acp && process.env.CLIO_CODER_INTERACTIVE === undefined && process.stdin.isTTY) {
 		process.env.CLIO_CODER_INTERACTIVE = "1";
 	}
+	if (!options.headless && !options.acp) {
+		const { confirmStartupWorkspace } = await import("./workspace-check.js");
+		if (!(await confirmStartupWorkspace())) return 1;
+	}
 	let startupSettings: import("../core/config.js").ClioSettings | undefined;
 	if (terminalLeaseEligible(options)) {
 		initializeClioHome();
@@ -72,8 +76,12 @@ export async function runClioCommand(
 			const { createProcessTerminalLease, instantShellEnabled } = await import("../interactive/terminal-lease.js");
 			if (instantShellEnabled()) {
 				let stage0FrameId: number | null = null;
+				const shellSettings = startupSettings ?? readLayeredSettings(process.cwd()).settings;
 				terminalLease = createProcessTerminalLease({
-					settings: startupSettings ?? readLayeredSettings(process.cwd()).settings,
+					settings:
+						options.autonomy === undefined
+							? shellSettings
+							: { ...shellSettings, safety: { ...shellSettings.safety, autonomy: options.autonomy } },
 					onStage0Commit: (frameId) => {
 						stage0FrameId = frameId;
 					},

package/src/cli/configure-controls.ts

@@ -0,0 +1,136 @@
+import {
+	readSettings,
+	SettingsValidationError,
+	updateSavedSettingsDocument,
+	validateSettings,
+} from "../core/config.js";
+import { DEFAULT_SETTINGS } from "../core/defaults.js";
+import { getAtPath } from "../core/session-routing.js";
+import {
+	applyControlValue,
+	controlInstructions,
+	formatControlValue,
+	SETTING_CONTROLS,
+	type SettingControl,
+} from "../core/settings-controls.js";
+import {
+	SETTINGS_SECTIONS,
+	type SettingsSectionId,
+	settingsGroupForPath,
+	settingsSectionForPath,
+} from "../core/settings-navigation.js";
+import { diffSettings } from "../domains/config/classify.js";
+import { ConfigureNavigation, type ConfigurePrompts } from "./configure-prompts.js";
+import { createLifecyclePresenter } from "./lifecycle-presenter.js";
+
+function editText(control: SettingControl, value: unknown): string {
+	if (value === null || value === undefined) return "";
+	return control.kind === "list"
+		? (value as string[]).join(", ")
+		: control.kind === "json"
+			? JSON.stringify(value)
+			: String(value);
+}
+
+/** Patch under the settings lock; route changes also clear their previous model override. */
+export function saveControl(path: string, input: string): void {
+	updateSavedSettingsDocument((saved) => {
+		const before = validateSettings(saved).settings;
+		const preview = structuredClone(before);
+		applyControlValue(preview, path, input);
+		const diff = diffSettings(before, preview);
+		// Keep the explicit value even if it equals the resolved default, especially null inheritance.
+		const paths = new Set([path, ...diff.hotReload, ...diff.nextTurn, ...diff.restartRequired]);
+		// A whole-collection edit already contains its changed leaves.
+		for (const changed of paths) {
+			if (changed !== path && changed.startsWith(`${path}.`)) continue;
+			let cursor = saved as Record<string, unknown>;
+			const keys = changed.split(".");
+			for (const key of keys.slice(0, -1)) {
+				if (!cursor[key] || typeof cursor[key] !== "object") cursor[key] = {};
+				cursor = cursor[key] as Record<string, unknown>;
+			}
+			const leaf = keys.at(-1) as string;
+			const value = getAtPath(preview, changed);
+			if (value === undefined) delete cursor[leaf];
+			else cursor[leaf] = value;
+		}
+		const validation = validateSettings(saved);
+		if (validation.issues.length) throw new SettingsValidationError(validation.issues);
+		return saved;
+	});
+}
+
+/** A searchable, grouped editor shared with the TUI catalog. No raw whole-file edits are needed for these controls. */
+export async function runSectionControls(prompts: ConfigurePrompts, section: SettingsSectionId): Promise<void> {
+	const controls = SETTING_CONTROLS.filter((control) => settingsSectionForPath(control.path) === section);
+	const groups = [...new Set(controls.map((control) => settingsGroupForPath(control.path)))];
+	const title = SETTINGS_SECTIONS.find((entry) => entry.id === section)?.label ?? section;
+	let group = groups[0] ?? "";
+	for (;;) {
+		try {
+			prompts.clearScreen();
+			const presenter = createLifecyclePresenter({ stream: prompts.output });
+			presenter.header(`${title} · All controls`, "configure");
+			presenter.note(
+				"Choose a group, then a setting. Each edit explains its effect and is validated before saving globally.",
+			);
+			group = await prompts.choose("Settings group", [...groups, "Back"], group, true);
+			if (group === "Back") return;
+			if (!groups.includes(group)) {
+				presenter.warn("Choose a group from the list.");
+				continue;
+			}
+			for (;;) {
+				const members = controls.filter((control) => settingsGroupForPath(control.path) === group);
+				const labels = members.map((control) => `${control.label} · ${control.path}`);
+				let chosen: string;
+				try {
+					chosen = await prompts.choose(group, [...labels, "Back"], labels[0] ?? "Back", true);
+				} catch (error) {
+					if (error instanceof ConfigureNavigation && error.kind === "back") break;
+					throw error;
+				}
+				if (chosen === "Back") break;
+				const control = members[labels.indexOf(chosen)];
+				if (!control) {
+					presenter.warn("Choose a setting from the list.");
+					continue;
+				}
+				try {
+					prompts.clearScreen();
+					presenter.header(control.label, "configure");
+					for (const line of controlInstructions(control).split("\n")) presenter.note(line);
+					const current = getAtPath(readSettings(), control.path);
+					presenter.fields([
+						["Setting", control.path],
+						["Current", formatControlValue(current)],
+						["Shipped default", formatControlValue(getAtPath(DEFAULT_SETTINGS, control.path))],
+						["Save scope", "Global default; current sessions follow their reload rules"],
+					]);
+					if (control.readOnly) {
+						await prompts.text("Press Enter to return");
+						continue;
+					}
+					const values = control.choices ?? (control.kind === "boolean" ? ["true", "false"] : undefined);
+					const value = values
+						? await prompts.choose("New value", values, String(current))
+						: await prompts.text("New value", prompts.interactive ? editText(control, current) : "");
+					const proposed = readSettings();
+					applyControlValue(proposed, control.path, value);
+					if ((await prompts.choose(`Save ${control.label} globally?`, ["Save", "Cancel"], "Save")) === "Save") {
+						saveControl(control.path, value);
+						presenter.completedStep(`${control.label} saved`);
+					}
+				} catch (error) {
+					if (error instanceof ConfigureNavigation) {
+						if (error.kind === "quit") throw error;
+					} else presenter.warn(`Not saved: ${error instanceof Error ? error.message : String(error)}`);
+				}
+			}
+		} catch (error) {
+			if (error instanceof ConfigureNavigation && error.kind === "back") return;
+			throw error;
+		}
+	}
+}

package/src/cli/configure-onboarding.ts

@@ -125,7 +125,7 @@ interface Answers {
 	antigravity?: { targetId: string; model: string } | undefined;
 }
 
-type StepOutcome = "next" | "back" | "quit" | "cancel";
+type StepOutcome = "next" | "back" | "quit" | "cancel" | "credential";
 
 interface Wizard {
 	streams: OnboardingStreams;
@@ -354,13 +354,18 @@ const URL_STEP: Step = {
 		}
 		answers.url = url;
 		wizard.answer("URL", url);
-		await reportReachability(wizard, answers, runtime, url);
+		const authenticated = await reportReachability(wizard, answers, runtime, url);
+		if (!authenticated && runtime.auth === "api-key") {
+			answers.inventoryKey = undefined;
+			if (answers.credential === "skip") answers.credential = undefined;
+			return "credential";
+		}
 		return "next";
 	},
 };
 
 /**
- * Say what is at the URL, and never refuse over it.
+ * Keep offline setup possible, but repair rejected authentication before discovery.
  *
  * The readline wizard treated an unreachable endpoint as a question ("save this
  * target anyway?") and an LM Studio URL that did not greet back as a hard
@@ -372,7 +377,7 @@ async function reportReachability(
 	answers: Answers,
 	runtime: RuntimeDescriptor,
 	url: string,
-): Promise<void> {
+): Promise<boolean> {
 	const draft = draftDescriptor(answers, runtime, false);
 	// A freshly typed "store the key" answer is not on disk yet (that write
 	// happens at the end of the wizard), so it has to ride along as an explicit
@@ -384,7 +389,8 @@ async function reportReachability(
 			const readings = probeReadings(probe);
 			wizard.presenter.step(`reachable, ${readings.length > 0 ? readings.join(", ") : "no model list offered"}`);
 		} else if (probe.authFailed) {
-			wizard.presenter.warn("rejected the key");
+			wizard.presenter.warn("Authentication failed. Choose a credential for this server before selecting a model.");
+			return false;
 		} else {
 			wizard.presenter.warn(`not reachable, you can fix this later: ${probe.error ?? "no reply"}`);
 		}
@@ -399,6 +405,7 @@ async function reportReachability(
 			answers.detected = { runtimeId: fingerprint.runtimeId, displayName: fingerprint.displayName };
 		}
 	}
+	return true;
 }
 
 const DETECTED_RUNTIME_STEP: Step = {
@@ -445,6 +452,7 @@ function defaultCredentialSource(runtime: RuntimeDescriptor, targetId: string):
 	const status = openAuthStorage().statusForTarget(resolveRuntimeAuthTarget(runtime), { includeFallback: false });
 	if (status.source === "stored-api-key") return "keep";
 	if (status.source === "environment") return "env";
+	if (runtime.id === "litellm") return "stored";
 	// A local llama.cpp server wants no credential, and offering `env` sent the
 	// user to an unexplained variable name with nothing correct to type into it.
 	return targetRequiresAuth({ id: targetId, runtime: runtime.id }, runtime) ? "env" : "skip";
@@ -527,7 +535,11 @@ const CREDENTIAL_STEP: Step = {
 				hint: "written to credentials.yaml, mode 0600, not encrypted",
 			},
 			...(hasStored ? [{ value: "keep" as CredentialSource, label: "Keep what is there", hint: stored }] : []),
-			{ value: "skip" as CredentialSource, label: "No key", hint: "this target needs no credential" },
+			{
+				value: "skip" as CredentialSource,
+				label: "No key",
+				hint: "only for servers that accept unauthenticated requests",
+			},
 		];
 		const current = answers.credential ?? defaultCredentialSource(runtime, answers.targetId ?? runtime.id);
 		const initial = Math.max(
@@ -1014,6 +1026,11 @@ export async function runOnboardingWizard(
 		marks[cursor] = writer.mark();
 		const outcome = await step.run(wizard, answers);
 		if (outcome === "quit" || outcome === "cancel") return cancel(presenter, answers, outcome === "quit");
+		if (outcome === "credential") {
+			direction = 1;
+			cursor = STEPS.indexOf(CREDENTIAL_STEP);
+			continue;
+		}
 		if (outcome === "back") {
 			direction = -1;
 			cursor -= 1;
@@ -1093,7 +1110,7 @@ function finish(wizard: Wizard, answers: Answers): number {
 	else if (!chatEligible)
 		presenter.completedStep(`${runtime.id} cannot answer chat; ${targetId} is registered for dispatch only`);
 	if (answers.mode === "first") presenter.completedStep(`fleet default is ${targetId}`);
-	else presenter.note("Use Targets & Auth to change chat, fleet, or background defaults.");
+	else presenter.note("Use Settings → Chat, Fleet, or Context & Memory to change model defaults.");
 	if (answers.mode === "first" && answers.thinking !== undefined)
 		presenter.completedStep(`thinking level ${answers.thinking}`);
 	if (answers.antigravity !== undefined) {

package/src/cli/configure-quick.ts

@@ -75,7 +75,7 @@ async function connect(url: string, key: string | undefined): Promise<Connection
 		}
 		runtime = registry.get(id);
 	}
-	if (!runtime) throw new Error("No compatible runtime is available. Open Settings → Targets & Auth.");
+	if (!runtime) throw new Error("No compatible runtime is available. Open Settings → Connections.");
 	const target: TargetDescriptor = existing
 		? structuredClone(existing)
 		: {
@@ -185,7 +185,7 @@ export async function runQuickConnect(prompts: ConfigurePrompts): Promise<"conne
 				}
 				if (connection.models.length === 0) {
 					notice =
-						"The endpoint offered no chat models. Load a model and retry. Servers without model discovery can use Settings → Targets & Auth.";
+						"The endpoint offered no chat models. Load a model and retry. Servers without model discovery can use Settings → Connections.";
 					step = "url";
 					continue;
 				}
@@ -214,11 +214,33 @@ export async function runQuickConnect(prompts: ConfigurePrompts): Promise<"conne
 				["Model", model],
 				["Connection", "live model discovery passed"],
 			]);
-			presenter.note(
-				first
-					? "Ready with recommended defaults: workspace edits, approval for unrecognized commands, one worker, $5 tracked session budget."
-					: "Use this model for chat. Your other settings and role assignments stay in place.",
-			);
+			if (first) {
+				const settings = readSettings();
+				const autonomy = {
+					"read-only": "inspect and answer; no edits or commands",
+					suggest: "ask before edits, commands, and delegation",
+					"auto-edit": "edit and run recognized checks; unfamiliar commands ask",
+					"full-auto": "skip autonomy approvals; safety rules still apply",
+				}[settings.safety.autonomy];
+				presenter.fields([
+					["Autonomy", `${settings.safety.autonomy} · ${autonomy}`],
+					[
+						"Worker approvals",
+						settings.fleet.permissions.mode === "deny"
+							? "deny requests needing approval; continue allowed work"
+							: settings.fleet.permissions.mode === "fail"
+								? "stop a worker when approval is needed"
+								: "ask you; unanswered requests follow the configured fallback",
+					],
+					[
+						"Tracked spending",
+						settings.safety.limits.sessionCostUsd === 0
+							? "no session ceiling"
+							: `$${settings.safety.limits.sessionCostUsd} per session; unpriced usage is not covered`,
+					],
+				]);
+				presenter.note("Safety rules still apply. You can adjust these in /settings → Permissions & Limits.");
+			} else presenter.note("Use this model for chat. Your other settings and role assignments stay in place.");
 			const choice = await prompts.choose("Ready to connect", ["Connect", "Back"], "Connect");
 			if (choice !== "Connect") throw new ConfigureNavigation("back");
 			const descriptor = structuredClone(connection.target);
@@ -250,6 +272,9 @@ export async function runQuickConnect(prompts: ConfigurePrompts): Promise<"conne
 			updateSettings(apply);
 			presenter.done(`Connected: ${descriptor.id} / ${model}`);
 			presenter.commandAdvice("Start Clio:", "clio-coder");
+			presenter.note(
+				'You can start working immediately. Ask Clio "What can you do without asking me?" or open /settings whenever you want to adjust the defaults.',
+			);
 			return "connected";
 		} catch (error) {
 			if (!(error instanceof ConfigureNavigation)) {