@kaelio/ktx 0.8.0 → 0.10.0

package/dist/setup-demo-tour.js

@@ -191,6 +191,7 @@ async function runDemoContextReplay(io, stdin) {
         frame: 0,
         startedAt: Date.now(),
         totalElapsedMs: 0,
+        starCount: null,
     };
     const allTargets = [...allPrimary, ...allContext];
     const timeline = buildDemoReplayTimeline();

package/dist/setup-embeddings.js

@@ -138,8 +138,8 @@ async function chooseCredentialRef(backend, args, io, deps) {
     const choice = await prompts.select({
         message: `How should KTX find your ${embeddingBackendDisplayName(backend)} embedding API key?`,
         options: [
-            { value: 'env', label: `Use ${defaultEnv} from the environment` },
             { value: 'paste', label: 'Paste a key and save it as a local secret file' },
+            { value: 'env', label: `Use ${defaultEnv} from the environment` },
             { value: 'back', label: 'Back' },
         ],
     });

package/dist/setup-models.d.ts

@@ -1,5 +1,5 @@
 import { type KtxProjectLlmConfig } from './context/project/config.js';
-import type { KtxLlmConfig } from './llm/types.js';
+import { type KtxLlmConfig } from './llm/types.js';
 import { type KtxLlmHealthCheckResult } from './llm/model-health.js';
 import { type KtxCliSpinner } from './clack.js';
 import type { KtxCliIo } from './cli-runtime.js';
@@ -10,7 +10,6 @@ export interface KtxSetupModelArgs {
     llmBackend?: KtxSetupLlmBackend;
     anthropicApiKeyEnv?: string;
     anthropicApiKeyFile?: string;
-    llmModel?: string;
     vertexProject?: string;
     vertexLocation?: string;
     forcePrompt?: boolean;
@@ -33,13 +32,7 @@ export type KtxSetupModelResult = {
     status: 'failed';
     projectDir: string;
 };
-/** @internal */
-export interface AnthropicModelChoice {
-    id: string;
-    label: string;
-    recommended: boolean;
-}
-export type KtxSetupLlmBackend = 'anthropic' | 'vertex' | 'claude-code';
+export type KtxSetupLlmBackend = 'anthropic' | 'vertex' | 'claude-code' | 'codex';
 /** @internal */
 export interface KtxSetupModelPromptAdapter {
     select(options: {
@@ -62,9 +55,7 @@ export interface KtxSetupModelPromptAdapter {
 }
 export interface KtxSetupModelDeps {
     env?: NodeJS.ProcessEnv;
-    fetch?: typeof fetch;
     prompts?: KtxSetupModelPromptAdapter;
-    listModels?: (apiKey: string) => Promise<AnthropicModelChoice[]>;
     healthCheck?: (config: KtxLlmConfig) => Promise<KtxLlmHealthCheckResult>;
     claudeCodeAuthProbe?: (input: {
         projectDir: string;
@@ -76,18 +67,23 @@ export interface KtxSetupModelDeps {
         ok: false;
         message: string;
     }>;
+    codexAuthProbe?: (input: {
+        projectDir: string;
+        model: string;
+    }) => Promise<{
+        ok: true;
+    } | {
+        ok: false;
+        message: string;
+    }>;
     readGcloudProject?: () => Promise<string | undefined>;
     listGcloudProjects?: () => Promise<GcloudProjectChoice[]>;
     spinner?: () => KtxCliSpinner;
 }
-/** @internal */
-export declare const BUNDLED_ANTHROPIC_MODELS: AnthropicModelChoice[];
 interface GcloudProjectChoice {
     projectId: string;
     name?: string;
 }
-/** @internal */
-export declare function fetchAnthropicModels(apiKey: string, fetchFn?: typeof fetch): Promise<AnthropicModelChoice[]>;
 export declare function isKtxSetupLlmConfigReady(config: KtxProjectLlmConfig): boolean;
 export declare function runKtxSetupAnthropicModelStep(args: KtxSetupModelArgs, io: KtxCliIo, deps?: KtxSetupModelDeps): Promise<KtxSetupModelResult>;
 export {};

package/dist/setup-models.js

@@ -3,10 +3,14 @@ import { writeFile } from 'node:fs/promises';
 import { promisify } from 'node:util';
 import { resolveLocalKtxLlmConfig } from './context/llm/local-config.js';
 import { runClaudeCodeAuthProbe } from './context/llm/claude-code-runtime.js';
+import { formatCodexIsolationWarning } from './context/llm/codex-isolation.js';
+import { runCodexAuthProbe } from './context/llm/codex-runtime.js';
+import { DEFAULT_CODEX_MODEL } from './context/llm/codex-models.js';
 import { resolveKtxConfigReference } from './context/core/config-reference.js';
 import { serializeKtxProjectConfig } from './context/project/config.js';
 import { loadKtxProject } from './context/project/project.js';
 import { markKtxSetupStateStepComplete } from './context/project/setup-config.js';
+import { KTX_MODEL_ROLES } from './llm/types.js';
 import { runKtxLlmHealthCheck } from './llm/model-health.js';
 import { formatClaudeCodePromptCachingWarning, ignoredClaudeCodePromptCachingFields, } from './claude-code-prompt-caching.js';
 import { createClackSpinner } from './clack.js';
@@ -17,57 +21,46 @@ const ESC = String.fromCharCode(0x1b);
 function yellow(text) {
     return `${ESC}[33m${text}${ESC}[39m`;
 }
-/** @internal */
-export const BUNDLED_ANTHROPIC_MODELS = [
-    { id: 'claude-sonnet-4-6', label: 'Claude Sonnet 4.6', recommended: true },
-    { id: 'claude-opus-4-6', label: 'Claude Opus 4.6', recommended: false },
-    { id: 'claude-haiku-4-5', label: 'Claude Haiku 4.5', recommended: false },
-];
-const VERTEX_ANTHROPIC_MODELS = [
-    { id: 'claude-opus-4-7', label: 'Claude Opus 4.7', recommended: false },
-    { id: 'claude-sonnet-4-6', label: 'Claude Sonnet 4.6', recommended: false },
-    { id: 'claude-opus-4-6', label: 'Claude Opus 4.6', recommended: false },
-    { id: 'claude-opus-4-5', label: 'Claude Opus 4.5', recommended: false },
-    { id: 'claude-haiku-4-5', label: 'Claude Haiku 4.5', recommended: false },
-    { id: 'claude-sonnet-4-5', label: 'Claude Sonnet 4.5', recommended: false },
-    { id: 'claude-opus-4-1', label: 'Claude Opus 4.1', recommended: false },
-];
-const CLAUDE_CODE_MODELS = [
-    { id: 'sonnet', label: 'Claude Sonnet', recommended: true },
-    { id: 'opus', label: 'Claude Opus', recommended: false },
-    { id: 'haiku', label: 'Claude Haiku', recommended: false },
-];
-const HIDDEN_ANTHROPIC_MODEL_PATTERNS = [
-    /^claude-sonnet-4$/i,
-    /^claude-opus-4$/i,
-    /^Claude Sonnet 4$/i,
-    /^Claude Opus 4$/i,
-];
 const ANTHROPIC_CREDENTIAL_PROMPT_CONTEXT = 'KTX uses the key to verify Anthropic model access now and to run ingest agents that turn schemas, SQL, ' +
     'BI metadata, and docs into semantic-layer sources and wiki context. ktx.yaml stores an env: or file: ' +
     'reference, not the raw key.';
-const ANTHROPIC_MODEL_PROMPT_CONTEXT = 'KTX uses this as the default model for ingest agents that turn schemas, SQL, BI metadata, and docs ' +
-    'into semantic-layer sources and wiki context.';
 const VERTEX_PROJECT_PROMPT_CONTEXT = 'KTX stores the selected Google Cloud project ID in ktx.yaml and uses Application Default Credentials for ' +
     'access. Project visibility depends on the signed-in Google account and organization permissions.';
 const DEFAULT_VERTEX_LOCATION = 'us-east5';
-const execFileAsync = promisify(execFile);
-class AnthropicModelDiscoveryError extends Error {
-    reason;
-    status;
-    constructor(message, reason, status) {
-        super(message);
-        this.reason = reason;
-        this.status = status;
-        this.name = 'AnthropicModelDiscoveryError';
-    }
-}
-function isAnthropicModelAuthenticationError(error) {
-    return error instanceof AnthropicModelDiscoveryError && error.reason === 'authentication';
-}
-function isSelectableAnthropicModel(model) {
-    return !HIDDEN_ANTHROPIC_MODEL_PATTERNS.some((pattern) => pattern.test(model.id) || pattern.test(model.label));
+const ANTHROPIC_PRESET = {
+    default: 'claude-sonnet-4-6',
+    triage: 'claude-haiku-4-5',
+    candidateExtraction: 'claude-sonnet-4-6',
+    curator: 'claude-opus-4-7',
+    reconcile: 'claude-opus-4-7',
+    repair: 'claude-haiku-4-5',
+};
+const CLAUDE_CODE_PRESET = {
+    default: 'sonnet',
+    triage: 'haiku',
+    candidateExtraction: 'sonnet',
+    curator: 'opus',
+    reconcile: 'opus',
+    repair: 'haiku',
+};
+const CODEX_PRESET = {
+    default: DEFAULT_CODEX_MODEL,
+    triage: DEFAULT_CODEX_MODEL,
+    candidateExtraction: DEFAULT_CODEX_MODEL,
+    curator: DEFAULT_CODEX_MODEL,
+    reconcile: DEFAULT_CODEX_MODEL,
+    repair: DEFAULT_CODEX_MODEL,
+};
+const MODEL_PRESETS = {
+    anthropic: ANTHROPIC_PRESET,
+    vertex: ANTHROPIC_PRESET,
+    'claude-code': CLAUDE_CODE_PRESET,
+    codex: CODEX_PRESET,
+};
+function presetForBackend(backend) {
+    return MODEL_PRESETS[backend];
 }
+const execFileAsync = promisify(execFile);
 function createPromptAdapter() {
     return createKtxSetupPromptAdapter({ selectCancelValue: 'back' });
 }
@@ -106,35 +99,6 @@ async function defaultListGcloudProjects() {
     })
         .filter((project) => Boolean(project));
 }
-/** @internal */
-export async function fetchAnthropicModels(apiKey, fetchFn = fetch) {
-    const response = await fetchFn('https://api.anthropic.com/v1/models?limit=1000', {
-        headers: {
-            'anthropic-version': '2023-06-01',
-            'x-api-key': apiKey,
-        },
-    });
-    if (!response.ok) {
-        if (response.status === 401 || response.status === 403) {
-            throw new AnthropicModelDiscoveryError(`Anthropic model discovery failed with HTTP ${response.status}`, 'authentication', response.status);
-        }
-        throw new AnthropicModelDiscoveryError(`Anthropic model discovery failed with HTTP ${response.status}`, 'http', response.status);
-    }
-    const body = (await response.json());
-    const models = (body.data ?? [])
-        .map((item) => ({
-        id: typeof item.id === 'string' ? item.id : '',
-        label: typeof item.display_name === 'string' ? item.display_name : typeof item.id === 'string' ? item.id : '',
-        recommended: false,
-    }))
-        .filter((item) => item.id.startsWith('claude-'))
-        .filter(isSelectableAnthropicModel);
-    if (models.length === 0) {
-        throw new AnthropicModelDiscoveryError('Anthropic model discovery returned no Claude models', 'empty-response');
-    }
-    const recommendedIndex = models.findIndex((item) => item.id.includes('sonnet'));
-    return models.map((item, index) => ({ ...item, recommended: index === Math.max(recommendedIndex, 0) }));
-}
 export function isKtxSetupLlmConfigReady(config) {
     let resolved;
     try {
@@ -149,16 +113,26 @@ export function isKtxSetupLlmConfigReady(config) {
     if (resolved.backend === 'vertex') {
         return typeof resolved.vertex?.location === 'string' && resolved.vertex.location.trim().length > 0;
     }
-    return resolved.backend === 'anthropic' || resolved.backend === 'gateway' || resolved.backend === 'claude-code';
+    return (resolved.backend === 'anthropic' ||
+        resolved.backend === 'gateway' ||
+        resolved.backend === 'claude-code' ||
+        resolved.backend === 'codex');
 }
 function hasUsableConfiguredLlm(config) {
     return isKtxSetupLlmConfigReady(config.llm);
 }
-function buildProjectLlmConfig(existing, provider, model) {
+function buildProjectLlmConfig(existing, provider, models) {
     if (provider.backend === 'claude-code') {
         return {
             provider: { backend: 'claude-code' },
-            models: { ...existing.models, default: model },
+            models,
+            promptCaching: existing.promptCaching,
+        };
+    }
+    if (provider.backend === 'codex') {
+        return {
+            provider: { backend: 'codex' },
+            models,
             promptCaching: existing.promptCaching,
         };
     }
@@ -168,7 +142,7 @@ function buildProjectLlmConfig(existing, provider, model) {
                 backend: 'vertex',
                 vertex: provider.vertex,
             },
-            models: { ...existing.models, default: model },
+            models,
             promptCaching: { ...(existing.promptCaching ?? {}), enabled: true, vertexFallbackTo5m: true },
         };
     }
@@ -177,7 +151,7 @@ function buildProjectLlmConfig(existing, provider, model) {
             backend: 'anthropic',
             anthropic: { api_key: provider.credentialRef },
         },
-        models: { ...existing.models, default: model },
+        models,
         promptCaching: { ...(existing.promptCaching ?? {}), enabled: true },
     };
 }
@@ -276,8 +250,8 @@ async function chooseCredentialRef(args, io, deps) {
         const choice = await prompts.select({
             message: `How should KTX find your Anthropic API key?\n\n${ANTHROPIC_CREDENTIAL_PROMPT_CONTEXT}`,
             options: [
-                { value: 'env', label: 'Use ANTHROPIC_API_KEY from the environment' },
                 { value: 'paste', label: 'Paste a key and save it as a local secret file' },
+                { value: 'env', label: 'Use ANTHROPIC_API_KEY from the environment' },
                 { value: 'back', label: 'Back' },
             ],
         });
@@ -316,14 +290,11 @@ function requestedBackend(args) {
     if (args.vertexProject || args.vertexLocation) {
         return 'vertex';
     }
-    if (args.anthropicApiKeyEnv || args.anthropicApiKeyFile || args.llmModel) {
+    if (args.anthropicApiKeyEnv || args.anthropicApiKeyFile) {
         return 'anthropic';
     }
     return undefined;
 }
-function requestedModel(args) {
-    return args.llmModel;
-}
 async function chooseBackend(args, io, deps) {
     const explicit = requestedBackend(args);
     if (explicit) {
@@ -340,6 +311,7 @@ async function chooseBackend(args, io, deps) {
         message: 'Which LLM provider should KTX use?',
         options: [
             { value: 'claude-code', label: 'Claude subscription (Pro/Max)' },
+            { value: 'codex', label: 'Codex subscription' },
             { value: 'anthropic', label: 'Anthropic API key' },
             { value: 'vertex', label: 'Google Vertex AI for Anthropic Claude' },
             { value: 'back', label: 'Back' },
@@ -350,7 +322,7 @@ async function chooseBackend(args, io, deps) {
     }
     return {
         status: 'ready',
-        backend: choice === 'vertex' || choice === 'claude-code' ? choice : 'anthropic',
+        backend: choice === 'vertex' || choice === 'claude-code' || choice === 'codex' ? choice : 'anthropic',
         prompted: true,
     };
 }
@@ -541,141 +513,11 @@ async function chooseVertexConfig(args, io, deps) {
         },
     };
 }
-async function chooseModel(args, credentialValue, io, deps) {
-    const providedModel = requestedModel(args);
-    if (providedModel) {
-        return { status: 'ready', model: providedModel };
-    }
-    if (args.inputMode === 'disabled') {
-        io.stderr.write('Missing LLM model: pass --llm-model.\n');
-        return { status: 'missing-input' };
-    }
-    let models;
-    try {
-        models = deps.listModels
-            ? await deps.listModels(credentialValue)
-            : await fetchAnthropicModels(credentialValue, deps.fetch);
-    }
-    catch (error) {
-        if (isAnthropicModelAuthenticationError(error)) {
-            const statusSuffix = error.status ? ` (HTTP ${error.status})` : '';
-            io.stderr.write(`Anthropic API key is invalid or unauthorized${statusSuffix}. Check the key and try again.\n`);
-            return { status: 'invalid-credential' };
-        }
-        io.stderr.write('Could not fetch live Anthropic models. Showing bundled defaults. Setup will still test the selected model before saving it.\n');
-        models = BUNDLED_ANTHROPIC_MODELS;
-    }
-    const selectableModels = models.filter(isSelectableAnthropicModel);
-    const prompts = deps.prompts ?? createPromptAdapter();
-    const modelOptions = [
-        ...selectableModels.map((model) => ({
-            value: model.id,
-            label: model.label || model.id,
-            ...(model.recommended ? { hint: 'recommended' } : {}),
-        })),
-        { value: 'manual', label: 'Enter a model ID manually' },
-        { value: 'back', label: 'Back' },
-    ];
-    const choice = await prompts.autocomplete({
-        message: `Which Anthropic model should KTX use?\n\n${ANTHROPIC_MODEL_PROMPT_CONTEXT}`,
-        placeholder: 'Type to search models',
-        options: modelOptions,
-    });
-    if (choice === 'back') {
-        return { status: 'back' };
-    }
-    if (choice === 'manual') {
-        const manual = await prompts.text({
-            message: withTextInputNavigation('Anthropic model ID'),
-            placeholder: selectableModels.find((model) => model.recommended)?.id ?? selectableModels[0]?.id,
-        });
-        if (manual === undefined) {
-            return { status: 'back' };
-        }
-        return manual.trim() ? { status: 'ready', model: manual.trim() } : { status: 'missing-input' };
-    }
-    return { status: 'ready', model: choice };
-}
-async function chooseVertexModel(args, io, deps) {
-    const providedModel = requestedModel(args);
-    if (providedModel) {
-        return { status: 'ready', model: providedModel };
-    }
-    if (args.inputMode === 'disabled') {
-        io.stderr.write('Missing LLM model: pass --llm-model.\n');
-        return { status: 'missing-input' };
-    }
-    const selectableModels = VERTEX_ANTHROPIC_MODELS.filter(isSelectableAnthropicModel);
-    const prompts = deps.prompts ?? createPromptAdapter();
-    const choice = await prompts.autocomplete({
-        message: `Which Anthropic model should KTX use?\n\n${ANTHROPIC_MODEL_PROMPT_CONTEXT}`,
-        placeholder: 'Type to search models',
-        options: [
-            ...selectableModels.map((model) => ({
-                value: model.id,
-                label: model.label || model.id,
-                ...(model.recommended ? { hint: 'recommended' } : {}),
-            })),
-            { value: 'manual', label: 'Enter a model ID manually' },
-            { value: 'back', label: 'Back' },
-        ],
-    });
-    if (choice === 'back') {
-        return { status: 'back' };
-    }
-    if (choice === 'manual') {
-        const manual = await prompts.text({
-            message: withTextInputNavigation('Anthropic model ID'),
-            placeholder: selectableModels.find((model) => model.recommended)?.id ?? selectableModels[0]?.id,
-        });
-        if (manual === undefined) {
-            return { status: 'back' };
-        }
-        return manual.trim() ? { status: 'ready', model: manual.trim() } : { status: 'missing-input' };
-    }
-    return { status: 'ready', model: choice };
-}
-async function chooseClaudeCodeModel(args, deps) {
-    const providedModel = requestedModel(args);
-    if (providedModel) {
-        return { status: 'ready', model: providedModel };
-    }
-    if (args.inputMode === 'disabled') {
-        return { status: 'ready', model: 'sonnet' };
-    }
-    const prompts = deps.prompts ?? createPromptAdapter();
-    const choice = await prompts.select({
-        message: `Which Claude Code model should KTX use?\n\n${ANTHROPIC_MODEL_PROMPT_CONTEXT}`,
-        options: [
-            ...CLAUDE_CODE_MODELS.map((model) => ({
-                value: model.id,
-                label: model.label,
-                ...(model.recommended ? { hint: 'recommended' } : {}),
-            })),
-            { value: 'manual', label: 'Enter a Claude Code model ID manually' },
-            { value: 'back', label: 'Back' },
-        ],
-    });
-    if (choice === 'back') {
-        return { status: 'back' };
-    }
-    if (choice === 'manual') {
-        const manual = await prompts.text({
-            message: withTextInputNavigation('Claude Code model ID'),
-            placeholder: CLAUDE_CODE_MODELS.find((model) => model.recommended)?.id ?? CLAUDE_CODE_MODELS[0]?.id,
-        });
-        if (manual === undefined) {
-            return { status: 'back' };
-        }
-        return manual.trim() ? { status: 'ready', model: manual.trim() } : { status: 'missing-input' };
-    }
-    return { status: 'ready', model: choice };
-}
-async function persistLlmConfig(projectDir, provider, model) {
+async function persistLlmConfig(projectDir, provider, models) {
     const project = await loadKtxProject({ projectDir });
     const config = {
         ...project.config,
-        llm: buildProjectLlmConfig(project.config.llm, provider, model),
+        llm: buildProjectLlmConfig(project.config.llm, provider, models),
         scan: {
             ...project.config.scan,
             enrichment: {
@@ -696,6 +538,48 @@ function buildInteractiveRetryArgs(args, backend) {
         skipLlm: args.skipLlm,
     };
 }
+function distinctPresetModels(preset) {
+    const models = [];
+    const seen = new Set();
+    for (const role of KTX_MODEL_ROLES) {
+        const model = preset[role];
+        if (!seen.has(model)) {
+            seen.add(model);
+            models.push(model);
+        }
+    }
+    return models;
+}
+function rolesUsingModel(preset, model) {
+    return KTX_MODEL_ROLES.filter((role) => preset[role] === model);
+}
+function formatPresetFallbackWarning(roles, unavailableModel, anchorModel) {
+    return `LLM model ${unavailableModel} is unavailable for ${roles.join(', ')}; using ${anchorModel} for those roles.`;
+}
+async function validatePresetModels(preset, validateModel, io) {
+    const anchorModel = preset.default;
+    const degraded = { ...preset };
+    const models = distinctPresetModels(preset);
+    const anchorResult = await validateModel(anchorModel);
+    if (!anchorResult.ok) {
+        return { status: 'failed', message: anchorResult.message };
+    }
+    for (const model of models) {
+        if (model === anchorModel) {
+            continue;
+        }
+        const result = await validateModel(model);
+        if (result.ok) {
+            continue;
+        }
+        const affectedRoles = rolesUsingModel(degraded, model);
+        for (const role of affectedRoles) {
+            degraded[role] = anchorModel;
+        }
+        io.stderr.write(`${formatPresetFallbackWarning(affectedRoles, model, anchorModel)}\n`);
+    }
+    return { status: 'ready', models: degraded };
+}
 export async function runKtxSetupAnthropicModelStep(args, io, deps = {}) {
     if (args.skipLlm) {
         io.stdout.write('│  LLM setup skipped.\n');
@@ -707,7 +591,6 @@ export async function runKtxSetupAnthropicModelStep(args, io, deps = {}) {
         !args.llmBackend &&
         !args.anthropicApiKeyEnv &&
         !args.anthropicApiKeyFile &&
-        !args.llmModel &&
         !args.vertexProject &&
         !args.vertexLocation) {
         io.stdout.write(`│  LLM ready: yes (${project.config.llm.models.default})\n`);
@@ -732,55 +615,50 @@ export async function runKtxSetupAnthropicModelStep(args, io, deps = {}) {
             if (vertex.status !== 'ready') {
                 return { status: vertex.status, projectDir: args.projectDir };
             }
-            const model = await chooseVertexModel(backendArgs, io, deps);
-            if (model.status === 'back' && !backendArgs.vertexLocation) {
+            const preset = presetForBackend('vertex');
+            const validation = await validatePresetModels(preset, async (model) => runLlmHealthCheckWithProgress(buildVertexHealthConfig(vertex.values, model), 'Vertex AI', model, healthCheck, deps), io);
+            if (validation.status !== 'ready') {
+                io.stderr.write(`Vertex AI Anthropic model health check failed: ${formatVertexHealthFailure(validation.message, vertex.values)}\n`);
+                if (args.inputMode === 'disabled') {
+                    return { status: 'failed', projectDir: args.projectDir };
+                }
+                io.stderr.write('Choose a different Vertex AI project or location, or Back.\n');
                 attemptArgs = buildInteractiveRetryArgs(args, backendChoice.backend);
                 continue;
             }
-            if (model.status === 'invalid-credential') {
-                return { status: 'failed', projectDir: args.projectDir };
-            }
-            if (model.status !== 'ready') {
-                return { status: model.status, projectDir: args.projectDir };
-            }
-            const health = await runLlmHealthCheckWithProgress(buildVertexHealthConfig(vertex.values, model.model), 'Vertex AI', model.model, healthCheck, deps);
-            if (health.ok) {
-                await persistLlmConfig(args.projectDir, { backend: 'vertex', vertex: vertex.refs }, model.model);
-                io.stdout.write(`│  LLM ready: yes (${model.model})\n`);
-                return { status: 'ready', projectDir: args.projectDir };
-            }
-            io.stderr.write(`Vertex AI Anthropic model health check failed: ${formatVertexHealthFailure(health.message, vertex.values)}\n`);
-            if (args.inputMode === 'disabled') {
-                return { status: 'failed', projectDir: args.projectDir };
-            }
-            io.stderr.write('Choose a different Vertex AI project, location, or model, or Back.\n');
-            attemptArgs = buildInteractiveRetryArgs(args, backendChoice.backend);
-            continue;
+            await persistLlmConfig(args.projectDir, { backend: 'vertex', vertex: vertex.refs }, validation.models);
+            io.stdout.write(`│  LLM ready: yes (${validation.models.default})\n`);
+            return { status: 'ready', projectDir: args.projectDir };
         }
         if (backendChoice.backend === 'claude-code') {
-            const model = await chooseClaudeCodeModel(backendArgs, deps);
-            if (model.status === 'back' && backendChoice.prompted) {
-                attemptArgs = buildInteractiveRetryArgs(args);
-                continue;
-            }
-            if (model.status === 'invalid-credential') {
-                return { status: 'failed', projectDir: args.projectDir };
-            }
-            if (model.status !== 'ready') {
-                return { status: model.status, projectDir: args.projectDir };
-            }
+            const preset = presetForBackend('claude-code');
             const probe = deps.claudeCodeAuthProbe ?? runClaudeCodeAuthProbe;
-            const health = await probe({ projectDir: args.projectDir, model: model.model, env: deps.env ?? process.env });
-            if (!health.ok) {
-                io.stderr.write(`${health.message}\n`);
+            const validation = await validatePresetModels(preset, async (model) => probe({ projectDir: args.projectDir, model, env: deps.env ?? process.env }), io);
+            if (validation.status !== 'ready') {
+                io.stderr.write(`${validation.message}\n`);
                 return { status: 'failed', projectDir: args.projectDir };
             }
-            const warning = formatClaudeCodePromptCachingWarning(ignoredClaudeCodePromptCachingFields(buildProjectLlmConfig(project.config.llm, { backend: 'claude-code' }, model.model)));
+            const warning = formatClaudeCodePromptCachingWarning(ignoredClaudeCodePromptCachingFields(buildProjectLlmConfig(project.config.llm, { backend: 'claude-code' }, validation.models)));
             if (warning) {
                 io.stderr.write(`${warning}\n`);
             }
-            await persistLlmConfig(args.projectDir, { backend: 'claude-code' }, model.model);
-            io.stdout.write(`│  LLM ready: yes (${model.model})\n`);
+            await persistLlmConfig(args.projectDir, { backend: 'claude-code' }, validation.models);
+            io.stdout.write(`│  LLM ready: yes (${validation.models.default})\n`);
+            return { status: 'ready', projectDir: args.projectDir };
+        }
+        if (backendChoice.backend === 'codex') {
+            const preset = presetForBackend('codex');
+            const probe = deps.codexAuthProbe ?? runCodexAuthProbe;
+            const validation = await validatePresetModels(preset, async (model) => probe({ projectDir: args.projectDir, model }), io);
+            if (validation.status !== 'ready') {
+                io.stderr.write(`${validation.message}\n`);
+                return { status: 'failed', projectDir: args.projectDir };
+            }
+            // Prefix the clack gutter so the warning sits inside the setup frame
+            // instead of breaking out of it; kept on stderr for scripted runs.
+            io.stderr.write(`│  ${formatCodexIsolationWarning()}\n`);
+            await persistLlmConfig(args.projectDir, { backend: 'codex' }, validation.models);
+            io.stdout.write(`│  LLM ready: yes (codex, ${validation.models.default})\n`);
             return { status: 'ready', projectDir: args.projectDir };
         }
         const credential = await chooseCredentialRef(backendArgs, io, deps);
@@ -791,8 +669,10 @@ export async function runKtxSetupAnthropicModelStep(args, io, deps = {}) {
         if (credential.status !== 'ready') {
             return { status: credential.status, projectDir: args.projectDir };
         }
-        const model = await chooseModel(backendArgs, credential.value, io, deps);
-        if (model.status === 'invalid-credential') {
+        const preset = presetForBackend('anthropic');
+        const validation = await validatePresetModels(preset, async (model) => runLlmHealthCheckWithProgress(buildAnthropicHealthConfig(credential.value, model), 'Anthropic API', model, healthCheck, deps), io);
+        if (validation.status !== 'ready') {
+            io.stderr.write(`Anthropic model health check failed: ${validation.message}\n`);
             if (args.inputMode === 'disabled') {
                 return { status: 'failed', projectDir: args.projectDir };
             }
@@ -800,24 +680,8 @@ export async function runKtxSetupAnthropicModelStep(args, io, deps = {}) {
             attemptArgs = buildInteractiveRetryArgs(args, backendChoice.backend);
             continue;
         }
-        if (model.status === 'back' && !backendArgs.anthropicApiKeyEnv && !backendArgs.anthropicApiKeyFile) {
-            attemptArgs = buildInteractiveRetryArgs(args, backendChoice.backend);
-            continue;
-        }
-        if (model.status !== 'ready') {
-            return { status: model.status, projectDir: args.projectDir };
-        }
-        const health = await runLlmHealthCheckWithProgress(buildAnthropicHealthConfig(credential.value, model.model), 'Anthropic API', model.model, healthCheck, deps);
-        if (health.ok) {
-            await persistLlmConfig(args.projectDir, { backend: 'anthropic', credentialRef: credential.ref }, model.model);
-            io.stdout.write(`│  LLM ready: yes (${model.model})\n`);
-            return { status: 'ready', projectDir: args.projectDir };
-        }
-        io.stderr.write(`Anthropic model health check failed: ${health.message}\n`);
-        if (args.inputMode === 'disabled') {
-            return { status: 'failed', projectDir: args.projectDir };
-        }
-        io.stderr.write('Choose a different credential source or model, or Back.\n');
-        attemptArgs = buildInteractiveRetryArgs(args, backendChoice.backend);
+        await persistLlmConfig(args.projectDir, { backend: 'anthropic', credentialRef: credential.ref }, validation.models);
+        io.stdout.write(`│  LLM ready: yes (${validation.models.default})\n`);
+        return { status: 'ready', projectDir: args.projectDir };
     }
 }

package/dist/setup-prompts.js

@@ -1,5 +1,6 @@
-import { autocomplete, autocompleteMultiselect, cancel, confirm, intro, isCancel, log, multiselect, note, password, select, text, } from '@clack/prompts';
+import { autocomplete, autocompleteMultiselect, cancel, confirm, intro, isCancel, log, multiselect, note, select, text, } from '@clack/prompts';
 import { withMenuOptionsSpacing, withTextInputNavigation } from './prompt-navigation.js';
+import { revealPassword } from './reveal-password-prompt.js';
 import { withSetupInterruptConfirmation } from './setup-interrupt.js';
 const DEFAULT_SETUP_CANCEL_MESSAGE = 'Setup cancelled.';
 export function createKtxSetupPromptAdapter(options) {
@@ -89,7 +90,7 @@ export function createKtxSetupPromptAdapter(options) {
             return isCancel(value) ? undefined : String(value);
         },
         async password(promptOptions) {
-            const value = await withSetupInterruptConfirmation(() => password({ ...promptOptions, message: withTextInputNavigation(promptOptions.message) }));
+            const value = await withSetupInterruptConfirmation(() => revealPassword({ ...promptOptions, message: withTextInputNavigation(promptOptions.message) }));
             return isCancel(value) ? undefined : String(value);
         },
         cancel(message) {