@mrciphersmith/keryx 0.3.128 → 0.3.130

package/dist/cli.js

@@ -23370,7 +23370,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@mrciphersmith/keryx",
-    version: "0.3.128",
+    version: "0.3.130",
     description: "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
     private: false,
     publishConfig: {
@@ -160929,7 +160929,7 @@ var init_help_groups = __esm(() => {
       group: "Connect a model provider",
       summary: "Category -> model routing table (list, set, unset, trust), the model-profile catalogue (profile list, profile set), and real measured task cost (stats)."
     },
-    { kind: "slash", name: "/connect", group: "Connect a model provider", summary: "Switch provider; row buttons test/disconnect it." },
+    { kind: "slash", name: "/connect", group: "Connect a model provider", summary: "Providers dialog: switch, test or disconnect a connected provider, or add one (Connected / Add provider tabs)." },
     {
       kind: "slash",
       name: "/routing",
@@ -160948,12 +160948,6 @@ var init_help_groups = __esm(() => {
       group: "Connect a model provider",
       summary: "Select a connected web search provider."
     },
-    {
-      kind: "slash",
-      name: "/provider",
-      group: "Connect a model provider",
-      summary: "Switch provider \u2014 /provider <name>, or no arg to re-select."
-    },
     {
       kind: "cli",
       name: "external",
@@ -163885,6 +163879,9 @@ function mountTab(state, input, tabId) {
   unmountActiveTab(state);
   state.active = tabId;
   paintTabs(state);
+  if (input.footerFor !== undefined) {
+    paintFooter(state, input.footerFor(tabId) ?? input.footer);
+  }
   const availWidth = resolveModalAvailableWidth(state.chrome);
   const size = resolveModalPanelSize(availWidth, state.chrome.renderer.height, input.contentRows);
   const panelWidth = Math.min(availWidth, size.width);
@@ -166962,7 +166959,7 @@ var init_command_gateway = __esm(() => {
     { name: "status", kind: "text", description: "Show the session: model, mode, queue, usage" },
     { name: "doctor", kind: "text", description: "Run the health checks" },
     { name: "model", kind: "picker", description: "Pick another model with buttons" },
-    { name: "connect", kind: "picker", description: "Switch to a connected provider with buttons" },
+    { name: "connect", kind: "picker", description: "Switch to a connected provider with buttons; also add a provider (device login only) and test it" },
     { name: "resume", kind: "picker", description: "Return to an earlier session with buttons" },
     { name: "sessions", kind: "builtin", description: "List recent sessions" },
     { name: "history", kind: "builtin", description: "Post the last messages of this session here: /history [N], 1 to 20" },
@@ -166993,7 +166990,6 @@ var init_command_gateway = __esm(() => {
     exit: "it would close the shell",
     quit: "it would close the shell",
     channels: "it manages the Telegram connection itself",
-    provider: "it asks for provider keys and addresses, which are never typed into a chat",
     "search-provider": "it asks for provider keys, which are never typed into a chat",
     "search-connect": "it changes where searches are sent",
     "remote-control": "turning remote control off would archive this topic, and its panel is local",
@@ -167472,11 +167468,18 @@ Now: ${current.label}` : ""}`;
       return "failed";
     }
     const providers = await host.listProviders();
+    const canAdd = host.listAddableProviders !== undefined;
     if (providers.length === 0) {
+      if (canAdd) {
+        return await this.pickAddableProvider(fromId);
+      }
       await this.ctx.reply("No provider is connected yet. Connecting one needs a key, which is never typed into a chat; use the shell.").catch(() => false);
       return "failed";
     }
     const options = providers.map((provider) => ({ id: provider.id, label: provider.current === true ? `* ${provider.label}` : provider.label }));
+    if (canAdd) {
+      options.push({ id: ADD_PROVIDER_ID, label: "Add provider" });
+    }
     const chosen = await this.pick("connect", "Connected providers. Pick one to switch to:", options, fromId);
     if (chosen === "refused") {
       return "failed";
@@ -167485,8 +167488,92 @@ Now: ${current.label}` : ""}`;
       this.ctx.record("/connect not answered in time; nothing changed");
       return "failed";
     }
+    if (chosen.id === ADD_PROVIDER_ID) {
+      return await this.pickAddableProvider(fromId);
+    }
     return await this.pickModel(chosen.id, fromId);
   }
+  async pickAddableProvider(fromId) {
+    const host = this.ctx.host;
+    if (host.listAddableProviders === undefined) {
+      await this.ctx.reply("/connect is not available from this shell.").catch(() => false);
+      return "failed";
+    }
+    const addable = await host.listAddableProviders();
+    if (addable.length === 0) {
+      await this.ctx.reply("There are no providers to add from this shell.").catch(() => false);
+      return "failed";
+    }
+    const options = addable.map((provider) => ({ id: provider.id, label: provider.connected ? `${provider.label} (connected)` : provider.label }));
+    const chosen = await this.pick("connect", "Add provider. Pick one to test or connect:", options, fromId);
+    if (chosen === "refused") {
+      return "failed";
+    }
+    if (chosen === undefined) {
+      this.ctx.record("/connect not answered in time; nothing changed");
+      return "failed";
+    }
+    const provider = addable.find((entry) => entry.id === chosen.id);
+    if (provider === undefined) {
+      return "failed";
+    }
+    const action = await this.ask("connect", this.ctx.compose(`${provider.label}: test the stored credential, or connect it?`), [["Test", "Connect"]], fromId);
+    if (action === "refused") {
+      return "failed";
+    }
+    if (action === undefined) {
+      this.ctx.record("/connect not answered in time; nothing changed");
+      return "failed";
+    }
+    return action === 0 ? await this.testAddable(provider) : await this.connectAddable(provider);
+  }
+  async testAddable(provider) {
+    const host = this.ctx.host;
+    if (host.testProvider === undefined) {
+      await this.ctx.reply("Testing a provider is not available from this shell.").catch(() => false);
+      return "failed";
+    }
+    const outcome = await host.testProvider(provider.id);
+    this.ctx.record(`/connect test ${provider.id}: ${outcome.ok ? "ok" : "failed"}`);
+    await this.ctx.reply(this.ctx.compose(`${provider.label}: ${outcome.message}`)).catch(() => false);
+    return outcome.ok ? "done" : "failed";
+  }
+  async connectAddable(provider) {
+    const host = this.ctx.host;
+    if (provider.connected) {
+      this.ctx.record(`/connect ${provider.id}: already connected`);
+      await this.ctx.reply(this.ctx.compose(`${provider.label} is already connected. Use Test, or reconnect in the shell (/connect).`)).catch(() => false);
+      return "failed";
+    }
+    if (!provider.deviceLogin) {
+      this.ctx.record(`/connect ${provider.id}: needs a key, entered in the shell`);
+      await this.ctx.reply(this.ctx.compose(`${provider.label} needs a key. The key is entered in the shell with /connect (Add provider tab), never in this chat.`)).catch(() => false);
+      return "failed";
+    }
+    if (host.connectWithDeviceLogin === undefined) {
+      await this.ctx.reply("Connecting a provider is not available from this shell.").catch(() => false);
+      return "failed";
+    }
+    const busy = this.busyReason("/connect", "connect");
+    if (busy !== undefined) {
+      this.ctx.record(`/connect not run: ${busy}`);
+      await this.ctx.reply(`/connect was not run: ${busy}.`).catch(() => false);
+      return "failed";
+    }
+    this.ctx.record(`/connect ${provider.id}: device login started`);
+    const notify = async (text) => {
+      await this.ctx.reply(this.ctx.compose(text)).catch(() => false);
+    };
+    let outcome;
+    try {
+      outcome = await host.connectWithDeviceLogin(provider.id, notify);
+    } catch {
+      outcome = { ok: false, message: "Device login failed. The details are in the shell." };
+    }
+    this.ctx.record(`/connect ${provider.id}: device login ${outcome.ok ? "done" : "failed"}`);
+    await this.ctx.reply(this.ctx.compose(`${provider.label}: ${outcome.message}`)).catch(() => false);
+    return outcome.ok ? "done" : "failed";
+  }
   async pickSession(fromId, end) {
     const host = this.ctx.host;
     if (host.listSessions === undefined || host.resumeSession === undefined) {
@@ -167535,7 +167622,7 @@ ${lines.join(`
 `)}`)).catch(() => false);
   }
 }
-var DEFAULT_ROUTER_LIMITS, PICKER_PAGE_SIZE = 7, LABEL_CHARS = 56, SESSION_COMMANDS;
+var DEFAULT_ROUTER_LIMITS, PICKER_PAGE_SIZE = 7, LABEL_CHARS = 56, ADD_PROVIDER_ID = "::add-provider", SESSION_COMMANDS;
 var init_command_router = __esm(() => {
   init_command_gateway();
   init_history2();
@@ -167916,6 +168003,9 @@ class RemoteBridge {
         ...this.host.busyRefusal !== undefined ? { busyRefusal: (line) => this.host.busyRefusal(line) } : {},
         ...this.host.listModels !== undefined ? { listModels: (id) => this.host.listModels(id) } : {},
         ...this.host.listProviders !== undefined ? { listProviders: () => this.host.listProviders() } : {},
+        ...this.host.listAddableProviders !== undefined ? { listAddableProviders: () => this.host.listAddableProviders() } : {},
+        ...this.host.testProvider !== undefined ? { testProvider: (id) => this.host.testProvider(id) } : {},
+        ...this.host.connectWithDeviceLogin !== undefined ? { connectWithDeviceLogin: (id, notify) => this.host.connectWithDeviceLogin(id, notify) } : {},
         ...this.host.switchModel !== undefined ? { switchModel: (model, provider) => this.host.switchModel(model, provider) } : {},
         ...this.host.listSessions !== undefined ? { listSessions: () => this.host.listSessions() } : {},
         ...this.host.resumeSession !== undefined ? { resumeSession: (id) => this.host.resumeSession(id) } : {}
@@ -168800,6 +168890,9 @@ function stepConnectNavAction(selected, direction) {
   const nextIdx = direction === "left" ? idx > 0 ? idx - 1 : count - 1 : idx < count - 1 ? idx + 1 : 0;
   return CONNECT_NAV_ACTIONS[nextIdx];
 }
+function stepAddNavAction(selected, _direction) {
+  return selected === "connect" ? "test" : "connect";
+}
 var QUEUE_NAV_ACTIONS, CONNECT_NAV_ACTIONS;
 var init_queue_nav = __esm(() => {
   QUEUE_NAV_ACTIONS = ["force", "edit", "delete"];
@@ -170449,6 +170542,9 @@ function describeUnavailableCommand(line, mode) {
   return `${command.name} is only available in ${where} \u2014 this is ${mode} mode. ` + `Type /help for the commands available here.
 `;
 }
+function removedCommandHint(line) {
+  return REMOVED_COMMAND_HINTS[commandToken(line)];
+}
 function renderCommandHelp(mode, only, maxColumns) {
   const allow = only === undefined ? undefined : new Set(only);
   const options = commandsForMode(mode).filter((c) => allow === undefined || allow.has(c.name));
@@ -170478,7 +170574,7 @@ function wrapWords2(line, budget) {
   out.push(cur);
   return out;
 }
-var CHAT_ONLY, AGENT_ONLY, BOTH, AGENT_SLASH_COMMANDS, DELEGATE_USAGE = "/delegate <agent> <task>  (e.g. `/delegate claude <task>`; agents: claude, codex, agy, see `keryx agents external list`; not enabled yet? `/external-agents on`)", DEMOTE_USAGE = "/demote <task_id>  (the task_id shell_exec returned)", MIN_HELP_WRAP_COLUMNS = 10;
+var CHAT_ONLY, AGENT_ONLY, BOTH, AGENT_SLASH_COMMANDS, DELEGATE_USAGE = "/delegate <agent> <task>  (e.g. `/delegate claude <task>`; agents: claude, codex, agy, see `keryx agents external list`; not enabled yet? `/external-agents on`)", DEMOTE_USAGE = "/demote <task_id>  (the task_id shell_exec returned)", REMOVED_COMMAND_HINTS, MIN_HELP_WRAP_COLUMNS = 10;
 var init_agent_commands = __esm(() => {
   init_registry2();
   CHAT_ONLY = ["chat"];
@@ -170502,11 +170598,11 @@ var init_agent_commands = __esm(() => {
     },
     {
       name: "/connect",
-      description: "Switch provider / API key",
+      description: "Providers \u2014 switch, test or disconnect a connected one, or add a new one",
       modes: BOTH,
       modeDescriptions: {
-        agent: "Connect to an already configured provider (interactive picker)",
-        chat: "Switch to a connected provider (picker when available)"
+        agent: "Providers dialog: Connected (switch, Test, Disconnect) and Add provider (key or login)",
+        chat: "Providers picker: switch to a connected provider or add one (picker when available)"
       }
     },
     {
@@ -170519,14 +170615,6 @@ var init_agent_commands = __esm(() => {
       description: "Select a connected web search provider",
       modes: AGENT_ONLY
     },
-    {
-      name: "/provider",
-      description: "Switch provider \u2014 /provider <name>, or no arg to re-select",
-      modes: BOTH,
-      modeDescriptions: {
-        agent: "Add or configure a provider (interactive picker)"
-      }
-    },
     {
       name: "/think",
       description: "Expand the last reasoning block \u2014 /think [auto|expand|hide|collapse]",
@@ -170842,6 +170930,9 @@ var init_agent_commands = __esm(() => {
       modeDescriptions: { agent: "Leave agent mode (/quit works too)" }
     }
   ];
+  REMOVED_COMMAND_HINTS = {
+    "/provider": "/provider was merged into /connect \u2014 run /connect (Connected and Add provider tabs)."
+  };
 });
 
 // src/tui/busy-dispatch.ts
@@ -182874,6 +182965,129 @@ var init_routing_inspector = __esm(() => {
   ];
 });
 
+// src/tui/remote-provider-hooks.ts
+function remoteFailureText(failure) {
+  switch (failure.kind) {
+    case "rejected":
+      return `rejected the credential (HTTP ${Number.isInteger(failure.status) ? failure.status : "error"})`;
+    case "http":
+      return `could not list models (HTTP ${Number.isInteger(failure.status) ? failure.status : "error"})`;
+    case "unreachable":
+      return "could not be reached";
+    case "empty":
+      return "reports no models";
+  }
+}
+async function testProviderForRemote(providerId, deps) {
+  const outcome = await deps.probe(providerId);
+  switch (outcome.kind) {
+    case "unknown":
+      return { ok: false, message: "unknown provider, cannot test" };
+    case "no-credential":
+      return { ok: false, message: NO_CREDENTIAL_TEXT };
+    case "live":
+      return { ok: true, message: `ok \u2014 ${outcome.modelCount} model(s)` };
+    case "failed":
+      return { ok: false, message: remoteFailureText(outcome.failure) };
+  }
+}
+function createRemoteDeviceLogin(deps = {}) {
+  const login = deps.login ?? loginDeviceCode;
+  const applyEnv = deps.applyEnv ?? applyOAuthAccessToEnv;
+  const allows = deps.allows ?? ((id) => catalogAllows(id, "device-code"));
+  const timeoutMs = deps.timeoutMs ?? REMOTE_DEVICE_LOGIN_LIMIT_MS;
+  let current;
+  let stoppedByCaller = false;
+  return {
+    get running() {
+      return current !== undefined;
+    },
+    abort() {
+      if (current !== undefined) {
+        stoppedByCaller = true;
+        current.abort();
+      }
+    },
+    async connect(providerId, notify) {
+      if (!allows(providerId)) {
+        return { ok: false, message: "this provider has no device login; its key is entered in the shell with /connect" };
+      }
+      if (current !== undefined) {
+        return { ok: false, message: "a device login is already running" };
+      }
+      const controller = new AbortController;
+      current = controller;
+      stoppedByCaller = false;
+      let timedOut = false;
+      const timer = setTimeout(() => {
+        timedOut = true;
+        controller.abort();
+      }, timeoutMs);
+      const endedEarly = () => ({ ok: false, message: timedOut ? LOGIN_TIMED_OUT_TEXT : stoppedByCaller ? LOGIN_ABORTED_TEXT : LOGIN_FAILED_TEXT });
+      try {
+        const result = await login({
+          provider: providerId,
+          fetch: (input, init) => (deps.fetch ?? globalThis.fetch)(input, init),
+          signal: controller.signal,
+          ...deps.configDir !== undefined ? { dir: deps.configDir } : {},
+          onChallenge: (challenge) => {
+            notify(`Open ${challenge.verificationUri} and enter the code ${challenge.userCode}`).catch(() => {
+              return;
+            });
+          }
+        });
+        if (!result.ok) {
+          return endedEarly();
+        }
+        if (controller.signal.aborted) {
+          return { ok: false, message: LOGIN_NOT_APPLIED_TEXT };
+        }
+        if (deps.isBusy?.() === true) {
+          return { ok: false, message: "signed in, but main is busy, so the login was not applied to this session; run /connect in the shell when it is idle" };
+        }
+        applyEnv(deps.configDir);
+        deps.onConnected?.(providerId);
+        return { ok: true, message: "connected. The session and model are unchanged." };
+      } catch {
+        return endedEarly();
+      } finally {
+        clearTimeout(timer);
+        current = undefined;
+      }
+    }
+  };
+}
+function createConnectedProvidersCache(load, options = {}) {
+  const ttlMs = options.ttlMs ?? 15000;
+  const now = options.now ?? Date.now;
+  let entry;
+  return {
+    get() {
+      if (entry !== undefined && now() - entry.at < ttlMs) {
+        return entry.value;
+      }
+      const value = load();
+      const mine = { at: now(), value };
+      entry = mine;
+      value.catch(() => {
+        if (entry === mine)
+          entry = undefined;
+      });
+      return value;
+    },
+    invalidate() {
+      entry = undefined;
+    }
+  };
+}
+var NO_CREDENTIAL_TEXT = "no credential, Connect first", REMOTE_DEVICE_LOGIN_LIMIT_MS, LOGIN_FAILED_TEXT = "Device login failed. Try /connect in the shell.", LOGIN_NOT_APPLIED_TEXT = "Signed in, but not applied to this session; run /connect again or restart.", LOGIN_TIMED_OUT_TEXT = "Device login timed out; nothing was saved.", LOGIN_ABORTED_TEXT = "Device login was stopped; nothing was saved.";
+var init_remote_provider_hooks = __esm(() => {
+  init_catalog3();
+  init_grants();
+  init_login();
+  REMOTE_DEVICE_LOGIN_LIMIT_MS = 10 * 60000;
+});
+
 // src/tui/ci-triage-inspector.ts
 function isCiTriageCommand(line) {
   const token = line.trim().split(/\s+/)[0] ?? "";
@@ -190124,7 +190338,7 @@ async function runGameModelTurn(game, state, opts) {
     return { move: undefined, error: `model error: ${turn.error.message}`, stats };
   }
   if (!turn.credentialAvailable && opts.providerFactory === undefined) {
-    return { move: undefined, error: "no model credential \u2014 configure a provider first (/provider)", stats };
+    return { move: undefined, error: "no model credential \u2014 configure a provider first (/connect)", stats };
   }
   return { move: game.parseMove(turn.text, state), error: undefined, stats };
 }
@@ -197075,7 +197289,7 @@ async function promptCustomProviderWizard(otui, target) {
   while (true) {
     const nameStep = await promptCustomFieldStep(otui, target, {
       title: "Provider name",
-      note: "unique id used in /provider (letters, digits, - _)"
+      note: "unique id used in /connect (letters, digits, - _)"
     });
     if (nameStep.kind === "back") {
       return;
@@ -197656,6 +197870,146 @@ function openStepSurface(otui, target, opts) {
     }
   };
 }
+function tabDigit(key) {
+  const digit = key.sequence.length === 1 ? key.sequence : key.name;
+  return digit.length === 1 && digit >= "1" && digit <= "9" ? Number(digit) : undefined;
+}
+function openTabbedSurface(otui, target, opts) {
+  const r = stepRenderer(target);
+  if (isModalChrome(target)) {
+    let closedByStep = false;
+    const tabIds = opts.tabs.map((tab) => tab.id);
+    const handle = openModal(otui, target, {
+      title: opts.title,
+      tabs: opts.tabs,
+      initialTab: opts.initialTab,
+      footer: opts.footerFor(opts.initialTab),
+      footerFor: opts.footerFor,
+      contentRows: opts.contentRows,
+      renderTab: (tabId, tabBody, ctx) => {
+        opts.renderTab(tabId, tabBody, ctx);
+      },
+      onArrowKeys: opts.onArrowKeys,
+      claimKey: (key) => {
+        if (key.name !== "tab" || handle === undefined)
+          return false;
+        const at = tabIds.indexOf(handle.activeTab());
+        const next = tabIds[(at + 1) % tabIds.length];
+        if (next !== undefined)
+          handle.setTab(next);
+        return true;
+      },
+      ownsKeys: opts.ownsKeys,
+      onClose: () => {
+        if (!closedByStep)
+          opts.onEscape();
+      }
+    });
+    if (handle !== undefined) {
+      const opened = handle;
+      return {
+        modal: true,
+        activeTab: () => opened.activeTab(),
+        setTab: (id) => opened.setTab(id),
+        close: () => {
+          if (closedByStep)
+            return;
+          closedByStep = true;
+          opened.close({ restoreFocus: false });
+        }
+      };
+    }
+  }
+  const theme = () => getTheme();
+  const box = overlayBox(otui, r, opts.id);
+  r.root.add(box);
+  box.add(new otui.TextRenderable(r, { id: `${opts.id}-title`, content: otui.t`${boldChunk(otui, opts.title)} ${dimChunk(otui, "(esc close)")}` }));
+  const strip = new otui.BoxRenderable(r, { id: `${opts.id}-tabs`, width: "100%", height: 1, flexShrink: 0, flexDirection: "row" });
+  const body = new otui.BoxRenderable(r, { id: `${opts.id}-body`, width: "100%", flexGrow: 1, minHeight: 0, flexDirection: "column" });
+  const footer = new otui.TextRenderable(r, { id: `${opts.id}-footer`, content: "", flexShrink: 0 });
+  box.add(strip);
+  box.add(body);
+  box.add(footer);
+  let active = opts.initialTab;
+  let closed = false;
+  const paintStrip = () => {
+    clearTranscriptChildren(strip);
+    for (const [index, tab] of opts.tabs.entries()) {
+      const isActive = tab.id === active;
+      const label = isActive ? `[${tab.label}]` : ` ${tab.label} `;
+      const prefix = index === 0 ? "" : " ";
+      strip.add(new otui.TextRenderable(r, {
+        id: `${opts.id}-tab-${tab.id}`,
+        content: isActive ? otui.t`${prefix}${boldChunk(otui, label)}` : otui.t`${prefix}${dimChunk(otui, label)}`,
+        fg: isActive ? theme().focus : theme().muted,
+        onMouseDown: () => {
+          if (!closed && tab.id !== active)
+            mount(tab.id);
+        }
+      }));
+    }
+  };
+  function mount(tabId) {
+    clearTranscriptChildren(body);
+    active = tabId;
+    paintStrip();
+    footer.content = otui.t`${dimChunk(otui, formatModalFooter(opts.footerFor(tabId)))}`;
+    opts.renderTab(tabId, body, { width: Math.max(20, r.width - 4), height: Math.max(4, r.height - 6) });
+  }
+  const cycle = () => {
+    const at = opts.tabs.findIndex((tab) => tab.id === active);
+    const next = opts.tabs[(at + 1) % opts.tabs.length];
+    if (next !== undefined)
+      mount(next.id);
+  };
+  const close = () => {
+    if (closed)
+      return;
+    closed = true;
+    unsub();
+    r.root.remove(box);
+  };
+  const stop = (key) => {
+    key.preventDefault();
+    key.stopPropagation();
+  };
+  const unsub = onKeypress4(r, (key) => {
+    if (closed || opts.ownsKeys())
+      return;
+    if (key.name === "escape" || key.name === "x" || key.sequence === "x") {
+      close();
+      opts.onEscape();
+      stop(key);
+      return;
+    }
+    if ((key.name === "left" || key.name === "right") && opts.onArrowKeys(key, key.name)) {
+      stop(key);
+      return;
+    }
+    if (key.name === "tab") {
+      cycle();
+      stop(key);
+      return;
+    }
+    const jump = tabDigit(key);
+    const to = jump === undefined ? undefined : opts.tabs[jump - 1];
+    if (to !== undefined) {
+      if (to.id !== active)
+        mount(to.id);
+      stop(key);
+    }
+  });
+  mount(opts.initialTab);
+  return {
+    modal: false,
+    activeTab: () => active,
+    setTab: (id) => {
+      if (!closed && id !== active && opts.tabs.some((tab) => tab.id === id))
+        mount(id);
+    },
+    close
+  };
+}
 function selectStepFooter(escLabel) {
   return [
     { key: "\u2191/\u2193", label: "select" },
@@ -198218,102 +198572,151 @@ function pickProviderStep(otui, target, detected) {
     });
   });
 }
-function pickConnectedProviderStep(otui, target, detected, opts) {
+function clipText(text, max) {
+  if (max <= 1)
+    return "";
+  return text.length <= max ? text : `${text.slice(0, max - 1)}\u2026`;
+}
+async function probeProviderConnection(name, deps) {
+  const provider = connectionProviderByName(name, deps.configDir);
+  if (provider === undefined)
+    return { kind: "unknown" };
+  const env = deps.env ?? process.env;
+  if (deps.requireCredential && (provider.requiresApiKey ?? true) && classifyProviderConnection(name, env, deps.configDir).kind === "no-credential") {
+    return { kind: "no-credential" };
+  }
+  deps.onStart?.();
+  let profileSummary;
+  const result = await testProviderConnection(provider, deps.fetch ?? globalThis.fetch, env, {
+    ...deps.configDir !== undefined ? { dir: deps.configDir } : {},
+    onSummary: (s) => {
+      profileSummary = s;
+    }
+  });
+  if (result.source === "live") {
+    return { kind: "live", modelCount: result.models.length, ...profileSummary !== undefined ? { profileSummary } : {} };
+  }
+  return { kind: "failed", failure: result.failure ?? { kind: "empty" } };
+}
+function pickProvidersTabbedStep(otui, target, opts) {
   const r = stepRenderer(target);
   return new Promise((resolve) => {
-    let rows = [...detected];
-    let selectedIndex = 0;
-    let selectedAction = "label";
+    const connected = opts.connected;
+    const addRows = () => [...opts.all, CUSTOM_ADD_ENTRY];
+    const rowsOf = (tabId) => tabId === "connected" ? connected : addRows();
+    const isConnected = (name) => connected.some((d) => d.name === name);
+    let tab = connected.length === 0 ? "add" : opts.initialTab;
+    const selected = { connected: 0, add: 0 };
+    const windowStart = { connected: 0, add: 0 };
+    let connectAction = "label";
+    let addAction = "connect";
     let pendingDisconnect;
     let resolved = false;
-    let rowBlocks = [];
+    let notice = opts.notice;
+    let nextNotice;
+    let rendered = false;
+    let bodyBox;
+    let addHint;
+    const addHintContent = (total) => otui.t`${dimChunk(otui, `Connect saves a key or login \xB7 Test checks it   ${total === 0 ? 0 : selected.add + 1}/${total}`)}`;
+    let bodyWidth = 70;
+    let bodyHeight = 15;
+    const statuses = new Map;
+    let blocks = [];
     const labelOf = (d) => d.label ?? d.name;
     const catalogCache = loadProviderCatalogCache(opts.configDir);
     const noteOf = (d) => {
       const base = d.note ?? `${d.models.length} model(s)`;
       const entry = catalogCache?.providers[d.name];
-      if (entry === undefined)
-        return base;
-      const balanceNote = entry.balance !== undefined ? ` \xB7 ${formatBalance(entry.balance)}` : "";
-      return `${base} \xB7 ${describeCatalogStatus(entry.status)}${balanceNote} \xB7 ${formatCatalogAge(entry.fetchedAt)}`;
-    };
-    const unsubEscapeGuard = onKeypress4(r, (key) => {
-      if (resolved || key.name !== "escape" || pendingDisconnect === undefined)
-        return;
-      clearPending();
-      applyHighlight();
-      key.preventDefault();
-      key.stopPropagation();
-    });
-    const surface = openStepSurface(otui, target, {
-      id: "connect-picker",
-      title: "Connected providers",
-      tab: "Providers",
-      hint: "(\u2191/\u2193 row \xB7 \u2190/\u2192 Label/Test/Disconnect \xB7 Enter \xB7 Esc to cancel)",
-      footer: [
-        { key: "\u2191/\u2193", label: "row" },
-        { key: "\u2190/\u2192", label: "Label/Test/Disconnect" },
-        { key: "Enter", label: "select/run" },
-        { key: "esc", label: "cancel" }
-      ],
-      contentRows: selectBoxHeight(Math.max(rows.length, 1), true),
-      onEscape: () => finish(undefined)
-    });
-    const body = surface.body;
-    function finish(value) {
-      if (resolved)
-        return;
-      resolved = true;
-      unsubEscapeGuard();
-      unsub();
-      surface.close();
-      resolve(value);
+      const full = entry === undefined ? base : `${base} \xB7 ${describeCatalogStatus(entry.status)}${entry.balance !== undefined ? ` \xB7 ${formatBalance(entry.balance)}` : ""} \xB7 ${formatCatalogAge(entry.fetchedAt)}`;
+      return clipText(full, bodyWidth - 24 - labelOf(d).length);
+    };
+    const addNoteOf = (d) => {
+      if (d.name === CUSTOM_PROVIDER_ADD_ID)
+        return "OpenAI-compatible \xB7 name, URL, key, models";
+      const room = bodyWidth - 24 - labelOf(d).length - (isConnected(d.name) ? 13 : 0);
+      return clipText(d.note ?? `${d.models.length} model(s)`, room);
+    };
+    const statusKey = (tabId, name) => `${tabId}:${name}`;
+    function setStatus(tabId, name, content) {
+      statuses.set(statusKey(tabId, name), content);
+      const block = blocks.find((b) => b.tab === tabId && b.name === name);
+      if (block !== undefined)
+        block.status.content = content;
+    }
+    function labelContent(block, d) {
+      const active = block.index === selected[block.tab];
+      if (block.tab === "connected") {
+        const head = active && connectAction === "label" ? boldChunk(otui, labelOf(d)) : labelOf(d);
+        return otui.t`${head}  ${dimChunk(otui, noteOf(d))}`;
+      }
+      const head = active ? boldChunk(otui, labelOf(d)) : labelOf(d);
+      const mark = isConnected(d.name) ? roleChunk(otui, "ok", "  \u2713 connected") : "";
+      return otui.t`${head}${mark}  ${dimChunk(otui, addNoteOf(d))}`;
     }
     function clearPending() {
       if (pendingDisconnect === undefined)
         return;
-      const armed = rowBlocks.find((b) => b.name === pendingDisconnect);
+      const armed = pendingDisconnect;
       pendingDisconnect = undefined;
-      if (armed !== undefined)
-        armed.status.content = "";
+      setStatus("connected", armed, "");
     }
     function applyHighlight() {
-      for (let i = 0;i < rowBlocks.length; i++) {
-        const block = rowBlocks[i];
-        if (block === undefined)
+      if (tab === "add" && addHint !== undefined)
+        addHint.content = addHintContent(rowsOf("add").length);
+      for (const block of blocks) {
+        const d = rowsOf(block.tab)[block.index];
+        if (d === undefined)
           continue;
-        const active = i === selectedIndex;
+        const active = block.index === selected[block.tab];
         block.outer.backgroundColor = active ? getTheme().highlight : undefined;
-        block.labelText.content = active && selectedAction === "label" ? otui.t`${boldChunk(otui, `${labelOf(rows[i])}`)}  ${dimChunk(otui, noteOf(rows[i]))}` : otui.t`${labelOf(rows[i])}  ${dimChunk(otui, noteOf(rows[i]))}`;
-        block.test.setActive(active && selectedAction === "test");
-        block.disconnect.setActive(active && selectedAction === "disconnect");
+        block.labelText.content = labelContent(block, d);
+        if (block.tab === "connected") {
+          block.first.setActive(active && connectAction === "test");
+          block.second?.setActive(active && connectAction === "disconnect");
+        } else {
+          block.first.setActive(active && (addAction === "connect" || block.second === undefined));
+          block.second?.setActive(active && addAction === "test");
+        }
       }
     }
-    async function runTest(name) {
-      const block = rowBlocks.find((b) => b.name === name);
-      const provider = connectionProviderByName(name, opts.configDir);
-      if (block === undefined)
+    function finish(value) {
+      if (resolved)
         return;
-      if (provider === undefined) {
-        block.status.content = otui.t`${roleChunk(otui, "error", "\u2717")} unknown provider \u2014 cannot test`;
+      resolved = true;
+      unsub();
+      surface?.close();
+      resolve(value);
+    }
+    async function runTest(tabId, name) {
+      const d = rowsOf(tabId).find((row) => row.name === name);
+      if (d === undefined)
         return;
-      }
-      block.status.content = otui.t`${dimChunk(otui, "testing\u2026")}`;
-      let profileSummary;
-      const result = await testProviderConnection(provider, opts.fetch ?? globalThis.fetch, opts.env ?? process.env, {
-        ...opts.configDir !== undefined ? { dir: opts.configDir } : {},
-        onSummary: (s) => {
-          profileSummary = s;
-        }
+      const outcome = await probeProviderConnection(name, {
+        ...opts.fetch !== undefined ? { fetch: opts.fetch } : {},
+        ...opts.env !== undefined ? { env: opts.env } : {},
+        ...opts.configDir !== undefined ? { configDir: opts.configDir } : {},
+        requireCredential: tabId === "add",
+        onStart: () => setStatus(tabId, name, otui.t`${dimChunk(otui, "testing\u2026")}`)
       });
-      const current = rowBlocks.find((b) => b.name === name);
-      if (current === undefined || resolved)
+      if (resolved)
         return;
-      current.status.content = result.source === "live" ? otui.t`${roleChunk(otui, "ok", "\u2713")} ok \u2014 ${String(result.models.length)} model(s)${formatProfileSummarySuffix(profileSummary)}` : otui.t`${roleChunk(otui, "error", "\u2717")} ${modelsFailureLine(labelOf(rows.find((d) => d.name === name) ?? { name, models: [] }), result.failure ?? { kind: "empty" })}`;
+      switch (outcome.kind) {
+        case "unknown":
+          setStatus(tabId, name, otui.t`${roleChunk(otui, "error", "\u2717")} unknown provider \u2014 cannot test`);
+          return;
+        case "no-credential":
+          setStatus(tabId, name, otui.t`${roleChunk(otui, "attention", "\xB7")} ${NO_CREDENTIAL_TEXT}`);
+          return;
+        case "live":
+          setStatus(tabId, name, otui.t`${roleChunk(otui, "ok", "\u2713")} ok \u2014 ${String(outcome.modelCount)} model(s)${formatProfileSummarySuffix(outcome.profileSummary)}`);
+          return;
+        case "failed":
+          setStatus(tabId, name, otui.t`${roleChunk(otui, "error", "\u2717")} ${modelsFailureLine(labelOf(d), outcome.failure)}`);
+          return;
+      }
     }
     function armOrConfirmDisconnect(name) {
-      const block = rowBlocks.find((b) => b.name === name);
-      if (block === undefined)
+      if (!blocks.some((b) => b.tab === "connected" && b.name === name))
         return;
       if (pendingDisconnect !== name) {
         clearPending();
@@ -198321,157 +198724,510 @@ function pickConnectedProviderStep(otui, target, detected, opts) {
         const env = opts.env ?? process.env;
         const classification = classifyProviderConnection(name, env, opts.configDir);
         const warning = sharedCredentialWarning(classification.sharedWith, classification.envKey);
-        const label = labelOf(rows.find((d) => d.name === name) ?? { name, models: [] });
-        block.status.content = warning === undefined ? otui.t`${roleChunk(otui, "attention", "?")} disconnect '${label}'? ${dimChunk(otui, "click/Enter Disconnect again to confirm, Esc to cancel")}` : otui.t`${roleChunk(otui, "attention", "?")} disconnect '${label}'? ${roleChunk(otui, "attention", `Note: ${warning}.`)} ${dimChunk(otui, "click/Enter Disconnect again to confirm, Esc to cancel")}`;
+        const label = labelOf(connected.find((d) => d.name === name) ?? { name, models: [] });
+        setStatus("connected", name, warning === undefined ? otui.t`${roleChunk(otui, "attention", "?")} disconnect '${label}'? ${dimChunk(otui, "click/Enter Disconnect again to confirm, Esc to cancel")}` : otui.t`${roleChunk(otui, "attention", "?")} disconnect '${label}'? ${roleChunk(otui, "attention", `Note: ${warning}.`)} ${dimChunk(otui, "click/Enter Disconnect again to confirm, Esc to cancel")}`);
         return;
       }
       pendingDisconnect = undefined;
       const result = disconnectProvider(name, opts.env ?? process.env, opts.configDir);
       if (!result.ok) {
-        block.status.content = otui.t`${roleChunk(otui, "error", "\u2717")} not removed \u2014 ${result.reason ?? "unknown reason"}`;
+        setStatus("connected", name, otui.t`${roleChunk(otui, "error", "\u2717")} not removed \u2014 ${result.reason ?? "unknown reason"}`);
         return;
       }
       opts.onDisconnected?.(name, result.sharedWith);
-      rows = rows.filter((d) => d.name !== name);
+      const at = connected.findIndex((d) => d.name === name);
+      if (at >= 0)
+        connected.splice(at, 1);
+      statuses.delete(statusKey("connected", name));
+      if (connected.length === 0) {
+        switchTab("add", { tone: "info", text: "No providers connected. Add one below." });
+        return;
+      }
       paint();
     }
-    function paint() {
-      for (const block of rowBlocks) {
-        try {
-          body.remove(block.outer);
-        } catch {}
+    function switchTab(id, withNotice) {
+      if (tab === id)
+        return;
+      nextNotice = withNotice;
+      surface?.setTab(id);
+    }
+    function moveSelection(direction) {
+      const total = rowsOf(tab).length;
+      selected[tab] = stepQueueNavIndex(selected[tab], total, direction);
+      if (addCustomRowSelected())
+        addAction = "connect";
+      const start = windowStart[tab];
+      if (selected[tab] < start || selected[tab] >= start + capacityRows())
+        paint();
+      else
+        applyHighlight();
+    }
+    function addCustomRowSelected() {
+      return tab === "add" && rowsOf("add")[selected.add]?.name === CUSTOM_PROVIDER_ADD_ID;
+    }
+    function capacityRows() {
+      return Math.max(1, Math.floor((bodyHeight - 2 - (notice === undefined ? 0 : 1)) / 2));
+    }
+    function runAddSelection(d) {
+      if (d.name === CUSTOM_PROVIDER_ADD_ID) {
+        finish({ kind: "custom" });
+        return;
       }
-      rowBlocks = [];
-      if (rows.length === 0) {
-        finish(undefined);
+      finish({ kind: "connect", provider: d });
+    }
+    function paint() {
+      if (bodyBox === undefined)
         return;
+      const body = bodyBox;
+      clearTranscriptChildren(body);
+      blocks = [];
+      const rows = rowsOf(tab);
+      selected[tab] = clampQueueNavIndex(selected[tab], rows.length);
+      const header = new otui.BoxRenderable(r, { id: `prov-${tab}-header`, width: "100%", flexDirection: "row", flexShrink: 0 });
+      if (tab === "connected") {
+        const addButton = smallActionButton(otui, r, "Add provider", "cp-add-provider", getTheme().focus, () => {
+          clearPending();
+          switchTab("add");
+        });
+        addButton.box.marginLeft = 0;
+        header.add(addButton.box);
+        header.add(new otui.TextRenderable(r, { id: "cp-count", marginLeft: 1, content: otui.t`${dimChunk(otui, `${connected.length} connected`)}` }));
+      } else {
+        addHint = new otui.TextRenderable(r, { id: "ap-hint", content: addHintContent(rows.length) });
+        header.add(addHint);
+      }
+      body.add(header);
+      if (notice !== undefined) {
+        const icon = notice.tone === "ok" ? roleChunk(otui, "ok", "\u2713") : notice.tone === "error" ? roleChunk(otui, "error", "\u2717") : dimChunk(otui, "\xB7");
+        body.add(new otui.TextRenderable(r, { id: "prov-notice", content: otui.t`${icon} ${notice.text}`, flexShrink: 0 }));
       }
-      selectedIndex = clampQueueNavIndex(selectedIndex, rows.length);
-      for (let i = 0;i < rows.length; i++) {
+      if (rows.length === 0) {
+        body.add(new otui.TextRenderable(r, { id: "cp-empty", content: otui.t`${dimChunk(otui, "Nothing connected yet. Press a, or open Add provider.")}` }));
+        return;
+      }
+      const cap = capacityRows();
+      let start = windowStart[tab];
+      if (selected[tab] < start)
+        start = selected[tab];
+      else if (selected[tab] >= start + cap)
+        start = selected[tab] - cap + 1;
+      start = Math.max(0, Math.min(start, Math.max(0, rows.length - cap)));
+      windowStart[tab] = start;
+      const prefix = tab === "connected" ? "cp" : "ap";
+      for (let i = start;i < Math.min(rows.length, start + cap); i++) {
         const d = rows[i];
-        const outer = new otui.BoxRenderable(r, { id: `cp-${d.name}`, width: "100%", flexDirection: "column" });
-        const row = new otui.BoxRenderable(r, { id: `cp-${d.name}-row`, width: "100%", flexDirection: "row" });
-        const labelText = new otui.TextRenderable(r, {
-          id: `cp-${d.name}-label-t`,
-          content: otui.t`${labelOf(d)}  ${dimChunk(otui, noteOf(d))}`
-        });
+        const isCustom = d.name === CUSTOM_PROVIDER_ADD_ID;
+        const outer = new otui.BoxRenderable(r, { id: `${prefix}-${d.name}`, width: "100%", flexDirection: "column", flexShrink: 0 });
+        const row = new otui.BoxRenderable(r, { id: `${prefix}-${d.name}-row`, width: "100%", flexDirection: "row" });
+        const base = { tab, index: i, name: d.name };
+        const labelText = new otui.TextRenderable(r, { id: `${prefix}-${d.name}-label-t`, content: labelContent(base, d) });
         const label = new otui.BoxRenderable(r, {
-          id: `cp-${d.name}-label`,
+          id: `${prefix}-${d.name}-label`,
           flexGrow: 1,
           minWidth: 0,
           onMouseDown: (event) => {
             event.stopPropagation();
             clearPending();
-            selectedIndex = i;
-            selectedAction = "label";
-            finish(d);
+            selected[tab] = i;
+            if (tab === "connected") {
+              connectAction = "label";
+              finish({ kind: "pick", provider: d });
+              return;
+            }
+            if (isCustom)
+              addAction = "connect";
+            applyHighlight();
           }
         });
         label.add(labelText);
         row.add(label);
-        const test = smallActionButton(otui, r, "Test", `cp-test-${d.name}`, getTheme().focus, () => {
-          clearPending();
-          selectedIndex = i;
-          selectedAction = "test";
-          applyHighlight();
-          runTest(d.name);
-        });
-        const disconnect = smallActionButton(otui, r, "Disconnect", `cp-disc-${d.name}`, getTheme().error, () => {
-          selectedIndex = i;
-          selectedAction = "disconnect";
-          applyHighlight();
-          armOrConfirmDisconnect(d.name);
-        });
-        row.add(test.box);
-        row.add(disconnect.box);
+        let first;
+        let second;
+        if (tab === "connected") {
+          first = smallActionButton(otui, r, "Test", `cp-test-${d.name}`, getTheme().focus, () => {
+            clearPending();
+            selected.connected = i;
+            connectAction = "test";
+            applyHighlight();
+            runTest("connected", d.name);
+          });
+          second = smallActionButton(otui, r, "Disconnect", `cp-disc-${d.name}`, getTheme().error, () => {
+            selected.connected = i;
+            connectAction = "disconnect";
+            applyHighlight();
+            armOrConfirmDisconnect(d.name);
+          });
+        } else {
+          first = smallActionButton(otui, r, "Connect", `ap-connect-${d.name}`, getTheme().focus, () => {
+            selected.add = i;
+            addAction = "connect";
+            runAddSelection(d);
+          });
+          if (!isCustom) {
+            second = smallActionButton(otui, r, "Test", `ap-test-${d.name}`, getTheme().focus, () => {
+              selected.add = i;
+              addAction = "test";
+              applyHighlight();
+              runTest("add", d.name);
+            });
+          }
+        }
+        row.add(first.box);
+        if (second !== undefined)
+          row.add(second.box);
         outer.add(row);
-        const status = new otui.TextRenderable(r, { id: `cp-${d.name}-status`, content: "", marginLeft: 1 });
+        const status = new otui.TextRenderable(r, { id: `${prefix}-${d.name}-status`, content: statuses.get(statusKey(tab, d.name)) ?? "", marginLeft: 1 });
         outer.add(status);
         body.add(outer);
-        rowBlocks.push({ name: d.name, outer, label, labelText, status, test, disconnect });
+        blocks.push({ tab, index: i, name: d.name, outer, labelText, status, first, ...second !== undefined ? { second } : {} });
       }
       applyHighlight();
     }
-    const unsub = onKeypress4(r, (key) => {
-      if (resolved)
-        return;
-      if (key.name === "up") {
-        clearPending();
-        selectedIndex = stepQueueNavIndex(selectedIndex, rows.length, "up");
+    function renderTab(tabId, body, ctx) {
+      const id = tabId === "add" ? "add" : "connected";
+      if (rendered && id !== tab)
+        notice = nextNotice;
+      nextNotice = undefined;
+      rendered = true;
+      if (pendingDisconnect !== undefined) {
+        const armed = pendingDisconnect;
+        pendingDisconnect = undefined;
+        statuses.set(statusKey("connected", armed), "");
+      }
+      tab = id;
+      bodyBox = body;
+      bodyWidth = ctx.width;
+      bodyHeight = ctx.height;
+      if (opts.focusName !== undefined && !focusApplied.has(id)) {
+        focusApplied.add(id);
+        const at = rowsOf(id).findIndex((d) => d.name === opts.focusName);
+        if (at >= 0)
+          selected[id] = at;
+      }
+      paint();
+    }
+    const focusApplied = new Set;
+    const rowCount = Math.max(connected.length, opts.all.length + 1);
+    const surface = openTabbedSurface(otui, target, {
+      id: "providers",
+      title: "Providers",
+      tabs: PROVIDERS_TABS,
+      initialTab: tab,
+      footerFor: (tabId) => PROVIDERS_FOOTERS[tabId === "add" ? "add" : "connected"],
+      contentRows: Math.min(24, rowCount * 2 + 3),
+      renderTab,
+      ownsKeys: () => pendingDisconnect !== undefined,
+      onArrowKeys: (key, direction) => {
+        if (resolved)
+          return false;
+        if (tab === "connected")
+          connectAction = stepConnectNavAction(connectAction, direction);
+        else if (!addCustomRowSelected())
+          addAction = stepAddNavAction(addAction, direction);
         applyHighlight();
         key.preventDefault();
         key.stopPropagation();
+        return true;
+      },
+      onEscape: () => finish({ kind: "close" })
+    });
+    const unsub = onKeypress4(r, (key) => {
+      if (resolved)
         return;
-      }
-      if (key.name === "down") {
+      if (key.name === "escape") {
+        if (pendingDisconnect === undefined)
+          return;
         clearPending();
-        selectedIndex = stepQueueNavIndex(selectedIndex, rows.length, "down");
         applyHighlight();
         key.preventDefault();
         key.stopPropagation();
         return;
       }
-      if (key.name === "left") {
+      if (key.name === "up" || key.name === "down") {
         clearPending();
-        selectedAction = stepConnectNavAction(selectedAction, "left");
-        applyHighlight();
+        moveSelection(key.name);
         key.preventDefault();
         key.stopPropagation();
         return;
       }
-      if (key.name === "right") {
+      if (key.name === "left" || key.name === "right") {
         clearPending();
-        selectedAction = stepConnectNavAction(selectedAction, "right");
+        if (tab === "connected")
+          connectAction = stepConnectNavAction(connectAction, key.name);
+        else if (!addCustomRowSelected())
+          addAction = stepAddNavAction(addAction, key.name);
         applyHighlight();
         key.preventDefault();
         key.stopPropagation();
         return;
       }
       if (key.name === "return" || key.name === "linefeed" || key.name === "kpenter") {
-        const row = rows[selectedIndex];
+        const row = rowsOf(tab)[selected[tab]];
         if (row === undefined)
           return;
-        if (selectedAction === "label") {
-          clearPending();
-          finish(row);
-        } else if (selectedAction === "test") {
-          clearPending();
-          runTest(row.name);
+        if (tab === "connected") {
+          if (connectAction === "label") {
+            clearPending();
+            finish({ kind: "pick", provider: row });
+          } else if (connectAction === "test") {
+            clearPending();
+            runTest("connected", row.name);
+          } else {
+            armOrConfirmDisconnect(row.name);
+          }
+        } else if (addAction === "test" && row.name !== CUSTOM_PROVIDER_ADD_ID) {
+          runTest("add", row.name);
         } else {
-          armOrConfirmDisconnect(row.name);
+          runAddSelection(row);
         }
         key.preventDefault();
         key.stopPropagation();
+        return;
+      }
+      if (tab === "connected" && key.sequence === "a" && !key.ctrl && !key.meta) {
+        clearPending();
+        switchTab("add");
+        key.preventDefault();
+        key.stopPropagation();
       }
     });
-    paint();
   });
 }
+async function runProviderConnectSequence(otui, target, prov, deps, setup, requireKey = false) {
+  const lockDiscoveredHost = ["github-copilot", "openai", "openai-codex"].includes(prov.name);
+  let selectedBaseUrl = !setup || prov.baseUrl === undefined || lockDiscoveredHost ? prov.baseUrl : await promptBaseUrlStep(otui, target, prov.label ?? prov.name, prov.baseUrl);
+  if (setup && !lockDiscoveredHost && prov.baseUrl !== undefined && selectedBaseUrl === undefined) {
+    return { kind: "back" };
+  }
+  if (setup && !lockDiscoveredHost && selectedBaseUrl !== undefined) {
+    saveProviderBaseUrl(prov.name, selectedBaseUrl, deps.configDir);
+  }
+  let selectedProvider = selectedBaseUrl === undefined ? prov : { ...prov, baseUrl: selectedBaseUrl };
+  const envKey = prov.envKey;
+  const label = prov.label ?? prov.name;
+  const collectCredential = async (notice) => {
+    if (!setup || envKey === undefined && !catalogAllows(prov.name, "device-code")) {
+      return "ok";
+    }
+    if (notice === undefined) {
+      const existingKey = envKey === undefined ? undefined : (deps.env ?? process.env)[envKey] ?? loadShellConfig(deps.configDir).apiKeys?.[envKey];
+      const hasOauth = prov.name !== "openai" && oauthAccessToken(prov.name, deps.configDir) !== undefined;
+      if (existingKey !== undefined && existingKey.length > 0 || hasOauth) {
+        return "ok";
+      }
+    }
+    const offered = [];
+    if (catalogAllows(prov.name, "device-code"))
+      offered.push("device-code");
+    if (catalogMethods(prov.name).includes("api-key"))
+      offered.push("api-key");
+    let method = offered.length === 1 ? offered[0] : undefined;
+    if (offered.length > 1) {
+      method = await pickAuthMethodStep(otui, target, label, offered);
+      if (method === undefined) {
+        return "back";
+      }
+    }
+    if (method === "device-code") {
+      if (!await runDeviceLoginInTui(otui, target, prov.name, deps.configDir, deps.fetch)) {
+        return "back";
+      }
+      const saved = loadShellConfig(deps.configDir).baseUrls?.[prov.name];
+      if (typeof saved === "string" && saved.length > 0) {
+        selectedBaseUrl = saved;
+        selectedProvider = { ...prov, baseUrl: saved };
+      }
+      return "ok";
+    }
+    if (envKey === undefined)
+      return "back";
+    const kr = await promptApiKeyStep(otui, target, {
+      label: prov.name === "openai" ? "OpenAI" : label,
+      envKey,
+      ...notice === undefined ? {} : { notice }
+    });
+    if (kr.kind === "back") {
+      return "back";
+    }
+    if (kr.kind === "key") {
+      process.env[envKey] = kr.value;
+      noteSavedCredentialEnv([envKey]);
+      saveApiKey(envKey, kr.value, deps.configDir);
+    }
+    if (kr.kind === "skip" && requireKey && (connectionProviderByName(prov.name, deps.configDir)?.requiresApiKey ?? true) && classifyProviderConnection(prov.name, deps.env ?? process.env, deps.configDir).kind === "no-credential") {
+      return "no-key";
+    }
+    return "ok";
+  };
+  const firstCredential = await collectCredential();
+  if (firstCredential === "back") {
+    return { kind: "back" };
+  }
+  if (firstCredential === "no-key") {
+    return { kind: "back", notice: NO_KEY_ENTERED_TEXT };
+  }
+  const modelDeps = {
+    ...deps.fetch === undefined ? {} : { fetch: deps.fetch },
+    ...deps.env === undefined ? {} : { env: deps.env },
+    ...deps.configDir === undefined ? {} : { configDir: deps.configDir }
+  };
+  let models = await modelsForPicker(selectedProvider, modelDeps);
+  if (models.failure?.kind === "rejected") {
+    const retried = await collectCredential(modelsFailureLine(label, models.failure));
+    if (retried === "back") {
+      return { kind: "back" };
+    }
+    if (retried === "no-key") {
+      return { kind: "back", notice: NO_KEY_ENTERED_TEXT };
+    }
+    models = await modelsForPicker(selectedProvider, modelDeps);
+  }
+  if (setup && !lockDiscoveredHost && selectedProvider.baseUrl !== undefined && endpointMayBeAtFault(models.failure)) {
+    const corrected = await promptBaseUrlStep(otui, target, label, selectedProvider.baseUrl, modelsFailureLine(label, models.failure));
+    if (corrected === undefined) {
+      return { kind: "back" };
+    }
+    if (corrected !== selectedProvider.baseUrl) {
+      saveProviderBaseUrl(prov.name, corrected, deps.configDir);
+      selectedBaseUrl = corrected;
+      selectedProvider = { ...prov, baseUrl: corrected };
+      models = await modelsForPicker(selectedProvider, modelDeps);
+    }
+  }
+  return { kind: "ready", provider: selectedProvider, baseUrl: selectedBaseUrl, models, label };
+}
+function saveCustomProviderFromWizard(created, configDir) {
+  saveCustomCompatProvider({
+    name: created.name,
+    label: created.name,
+    baseUrl: created.baseUrl,
+    ...created.apiKey !== undefined ? { apiKey: created.apiKey } : {},
+    models: created.models,
+    requiresApiKey: false,
+    ...created.temperature !== undefined ? { temperature: created.temperature } : {},
+    ...created.maxOutputTokens !== undefined ? { maxOutputTokens: created.maxOutputTokens } : {},
+    ...created.timeoutMs !== undefined ? { timeoutMs: created.timeoutMs } : {}
+  }, configDir);
+  return { name: created.name, models: created.models, baseUrl: created.baseUrl, label: created.name, note: "custom" };
+}
+function upsertProvider(list, entry) {
+  const at = list.findIndex((d) => d.name === entry.name);
+  if (at >= 0)
+    list[at] = entry;
+  else
+    list.push(entry);
+}
+async function pickModelForProvider(otui, target, ready, providerName) {
+  const model = await pickModelInTui(otui, target, ready.models.models, modelPickerNotice(ready.label, ready.models), {
+    escLabel: "back"
+  });
+  if (model === undefined)
+    return;
+  return ready.baseUrl === undefined ? { provider: providerName, model } : { provider: providerName, model, baseUrl: ready.baseUrl };
+}
+async function runProvidersModal(otui, target, detected, options) {
+  const deps = {
+    ...options.fetch !== undefined ? { fetch: options.fetch } : {},
+    ...options.env !== undefined ? { env: options.env } : {},
+    ...options.configDir !== undefined ? { configDir: options.configDir } : {}
+  };
+  const all = [...detected];
+  const connected = await filterConnectedDetectedProviders(detected, deps);
+  let tab = connected.length > 0 ? "connected" : "add";
+  let notice;
+  let focusName;
+  while (true) {
+    const action = await pickProvidersTabbedStep(otui, target, {
+      connected,
+      all,
+      initialTab: tab,
+      ...notice !== undefined ? { notice } : {},
+      ...focusName !== undefined ? { focusName } : {},
+      ...deps,
+      ...options.onDisconnected !== undefined ? { onDisconnected: options.onDisconnected } : {}
+    });
+    notice = undefined;
+    focusName = undefined;
+    if (action.kind === "close")
+      return;
+    try {
+      if (action.kind === "pick") {
+        const ready = await runProviderConnectSequence(otui, target, action.provider, deps, false);
+        if (ready.kind === "ready") {
+          const selection = await pickModelForProvider(otui, target, ready, action.provider.name);
+          if (selection !== undefined)
+            return selection;
+        }
+        tab = "connected";
+        focusName = action.provider.name;
+        continue;
+      }
+      if (action.kind === "connect") {
+        const result = await runProviderConnectSequence(otui, target, action.provider, deps, true, true);
+        focusName = action.provider.name;
+        if (result.kind === "back") {
+          tab = "add";
+          if (result.notice !== undefined)
+            notice = { tone: "error", text: `${action.provider.label ?? action.provider.name}: ${result.notice}` };
+          continue;
+        }
+        if (result.models.failure === undefined && result.models.models.length > 0) {
+          upsertProvider(connected, { ...result.provider, models: result.models.models });
+          options.onConnected?.(action.provider.name);
+          tab = "connected";
+          notice = { tone: "ok", text: `${result.label} connected \u2014 ${result.models.models.length} model(s)` };
+        } else {
+          tab = "add";
+          notice = {
+            tone: "error",
+            text: result.models.failure !== undefined ? modelsFailureLine(result.label, result.models.failure) : `${result.label}: no models returned`
+          };
+        }
+        continue;
+      }
+      tab = "add";
+      const created = await promptCustomProviderWizard(otui, target);
+      if (created === undefined)
+        continue;
+      const entry = saveCustomProviderFromWizard(created, options.configDir);
+      upsertProvider(all, entry);
+      focusName = entry.name;
+      const probed = await modelsForPicker(entry, deps);
+      if (probed.failure === undefined && probed.models.length > 0) {
+        upsertProvider(connected, { ...entry, models: probed.models });
+        options.onConnected?.(entry.name);
+        tab = "connected";
+        notice = { tone: "ok", text: `${entry.label ?? entry.name} connected \u2014 ${probed.models.length} model(s)` };
+      } else {
+        notice = {
+          tone: "error",
+          text: probed.failure !== undefined ? modelsFailureLine(entry.label ?? entry.name, probed.failure) : `${entry.label ?? entry.name}: no models returned`
+        };
+      }
+    } catch (error) {
+      tab = action.kind === "pick" ? "connected" : "add";
+      notice = { tone: "error", text: `could not finish (${error instanceof Error ? error.name : "unexpected error"}) \u2014 try again` };
+    }
+  }
+}
 function selectProviderModelInTui(otui, rOrChrome, detected, options = {}) {
+  if (options.onlyConnected) {
+    return runProvidersModal(otui, rOrChrome, detected, options);
+  }
   return new Promise((resolve) => {
     if (detected.length === 0) {
       resolve(undefined);
       return;
     }
-    const candidatesPromise = options.onlyConnected ? filterConnectedDetectedProviders(detected, {
-      ...options.fetch !== undefined ? { fetch: options.fetch } : {},
-      ...options.env !== undefined ? { env: options.env } : {},
-      ...options.configDir !== undefined ? { configDir: options.configDir } : {}
-    }) : Promise.resolve(detected);
     (async () => {
-      const candidates = await candidatesPromise;
-      if (candidates.length === 0) {
-        resolve(undefined);
-        return;
-      }
-      const allCandidates = options.onlyConnected ? candidates : [...candidates, CUSTOM_ADD_ENTRY];
+      const allCandidates = [...detected, CUSTOM_ADD_ENTRY];
+      const deps = {
+        ...options.fetch !== undefined ? { fetch: options.fetch } : {},
+        ...options.env !== undefined ? { env: options.env } : {},
+        ...options.configDir !== undefined ? { configDir: options.configDir } : {}
+      };
       while (true) {
-        const prov = options.onlyConnected ? await pickConnectedProviderStep(otui, rOrChrome, allCandidates, {
-          ...options.fetch !== undefined ? { fetch: options.fetch } : {},
-          ...options.env !== undefined ? { env: options.env } : {},
-          ...options.configDir !== undefined ? { configDir: options.configDir } : {},
-          ...options.onDisconnected !== undefined ? { onDisconnected: options.onDisconnected } : {}
-        }) : await pickProviderStep(otui, rOrChrome, allCandidates);
+        const prov = await pickProviderStep(otui, rOrChrome, allCandidates);
         if (prov === undefined) {
           resolve(undefined);
           return;
@@ -198479,123 +199235,17 @@ function selectProviderModelInTui(otui, rOrChrome, detected, options = {}) {
         if (prov.name === CUSTOM_PROVIDER_ADD_ID) {
           const created = await promptCustomProviderWizard(otui, rOrChrome);
           if (created !== undefined) {
-            saveCustomCompatProvider({
-              name: created.name,
-              label: created.name,
-              baseUrl: created.baseUrl,
-              ...created.apiKey !== undefined ? { apiKey: created.apiKey } : {},
-              models: created.models,
-              requiresApiKey: false,
-              ...created.temperature !== undefined ? { temperature: created.temperature } : {},
-              ...created.maxOutputTokens !== undefined ? { maxOutputTokens: created.maxOutputTokens } : {},
-              ...created.timeoutMs !== undefined ? { timeoutMs: created.timeoutMs } : {}
-            });
-            allCandidates.push({
-              name: created.name,
-              models: created.models,
-              baseUrl: created.baseUrl,
-              label: created.name,
-              note: "custom"
-            });
+            allCandidates.push(saveCustomProviderFromWizard(created, options.configDir));
           }
           continue;
         }
-        const lockDiscoveredHost = ["github-copilot", "openai", "openai-codex"].includes(prov.name);
-        let selectedBaseUrl = options.onlyConnected || prov.baseUrl === undefined || lockDiscoveredHost ? prov.baseUrl : await promptBaseUrlStep(otui, rOrChrome, prov.label ?? prov.name, prov.baseUrl);
-        if (!options.onlyConnected && !lockDiscoveredHost && prov.baseUrl !== undefined && selectedBaseUrl === undefined) {
-          continue;
-        }
-        if (!options.onlyConnected && !lockDiscoveredHost && selectedBaseUrl !== undefined) {
-          saveProviderBaseUrl(prov.name, selectedBaseUrl, options.configDir);
-        }
-        let selectedProvider = selectedBaseUrl === undefined ? prov : { ...prov, baseUrl: selectedBaseUrl };
-        const envKey = prov.envKey;
-        const label = prov.label ?? prov.name;
-        const collectCredential = async (notice) => {
-          if (options.onlyConnected || envKey === undefined && !catalogAllows(prov.name, "device-code")) {
-            return "ok";
-          }
-          if (notice === undefined) {
-            const existingKey = envKey === undefined ? undefined : (options.env ?? process.env)[envKey] ?? loadShellConfig(options.configDir).apiKeys?.[envKey];
-            const hasOauth = prov.name !== "openai" && oauthAccessToken(prov.name, options.configDir) !== undefined;
-            if (existingKey !== undefined && existingKey.length > 0 || hasOauth) {
-              return "ok";
-            }
-          }
-          const offered = [];
-          if (catalogAllows(prov.name, "device-code"))
-            offered.push("device-code");
-          if (catalogMethods(prov.name).includes("api-key"))
-            offered.push("api-key");
-          let method = offered.length === 1 ? offered[0] : undefined;
-          if (offered.length > 1) {
-            method = await pickAuthMethodStep(otui, rOrChrome, label, offered);
-            if (method === undefined) {
-              return "back";
-            }
-          }
-          if (method === "device-code") {
-            if (!await runDeviceLoginInTui(otui, rOrChrome, prov.name, options.configDir, options.fetch)) {
-              return "back";
-            }
-            const saved = loadShellConfig(options.configDir).baseUrls?.[prov.name];
-            if (typeof saved === "string" && saved.length > 0) {
-              selectedBaseUrl = saved;
-              selectedProvider = { ...prov, baseUrl: saved };
-            }
-            return "ok";
-          }
-          if (envKey === undefined)
-            return "back";
-          const kr = await promptApiKeyStep(otui, rOrChrome, {
-            label: prov.name === "openai" ? "OpenAI" : label,
-            envKey,
-            ...notice === undefined ? {} : { notice }
-          });
-          if (kr.kind === "back") {
-            return "back";
-          }
-          if (kr.kind === "key") {
-            process.env[envKey] = kr.value;
-            noteSavedCredentialEnv([envKey]);
-            saveApiKey(envKey, kr.value, options.configDir);
-          }
-          return "ok";
-        };
-        if (await collectCredential() === "back") {
+        const ready = await runProviderConnectSequence(otui, rOrChrome, prov, deps, true);
+        if (ready.kind === "back")
           continue;
-        }
-        const modelDeps = {
-          ...options.fetch === undefined ? {} : { fetch: options.fetch },
-          ...options.env === undefined ? {} : { env: options.env },
-          ...options.configDir === undefined ? {} : { configDir: options.configDir }
-        };
-        let models = await modelsForPicker(selectedProvider, modelDeps);
-        if (models.failure?.kind === "rejected") {
-          if (await collectCredential(modelsFailureLine(label, models.failure)) === "back") {
-            continue;
-          }
-          models = await modelsForPicker(selectedProvider, modelDeps);
-        }
-        if (!options.onlyConnected && !lockDiscoveredHost && selectedProvider.baseUrl !== undefined && endpointMayBeAtFault(models.failure)) {
-          const corrected = await promptBaseUrlStep(otui, rOrChrome, label, selectedProvider.baseUrl, modelsFailureLine(label, models.failure));
-          if (corrected === undefined) {
-            continue;
-          }
-          if (corrected !== selectedProvider.baseUrl) {
-            saveProviderBaseUrl(prov.name, corrected, options.configDir);
-            selectedBaseUrl = corrected;
-            selectedProvider = { ...prov, baseUrl: corrected };
-            models = await modelsForPicker(selectedProvider, modelDeps);
-          }
-        }
-        const model = await pickModelInTui(otui, rOrChrome, models.models, modelPickerNotice(label, models), {
-          escLabel: "back"
-        });
-        if (model === undefined) {
+        const selection = await pickModelForProvider(otui, rOrChrome, ready, prov.name);
+        if (selection === undefined)
           continue;
-        }
-        resolve(selectedBaseUrl === undefined ? { provider: prov.name, model } : { provider: prov.name, model, baseUrl: selectedBaseUrl });
+        resolve(selection);
         return;
       }
     })();
@@ -198866,6 +199516,11 @@ async function launchTuiAgentShell(opts) {
   let liveAutoReview;
   let liveReviewsPanel;
   let remoteBridge;
+  let remoteDeviceLogin;
+  const connectedProviders = createConnectedProvidersCache(async () => {
+    const detected = opts.redetect !== undefined ? await opts.redetect() : opts.detected;
+    return { detected, connected: await filterConnectedDetectedProviders(detected, {}) };
+  });
   let liveRemotePanel;
   const operatorCards = new OperatorConfirmationLog;
   const operatorCardLines = () => confirmationLines(operatorCards.entries(), Date.now());
@@ -198909,6 +199564,7 @@ async function launchTuiAgentShell(opts) {
         liveReviewsPanel?.dispose();
         liveRemotePanel?.dispose();
         liveChannelsPanel?.dispose();
+        remoteDeviceLogin?.abort();
         remoteBridge?.disable();
         liveApprovals?.dispose();
         liveIntake?.dispose();
@@ -203184,28 +203840,28 @@ ${formatThemeList(getThemeId())}`);
           runDelegate(line);
           return;
         }
-        if (command.name === "/connect" || command.name === "/provider") {
+        if (command.name === "/connect") {
           detachSlashWork((async () => {
             const detected = opts.redetect !== undefined ? await opts.redetect() : opts.detected;
-            const ns = await chrome.withOverlay(() => command.name === "/connect" ? selectProviderModelInTui(otui, chrome, detected, {
+            const ns = await chrome.withOverlay(() => selectProviderModelInTui(otui, chrome, detected, {
               onlyConnected: true,
               env: process.env,
+              onConnected: () => connectedProviders.invalidate(),
               onDisconnected: (name, sharedWith) => {
+                connectedProviders.invalidate();
                 if (sharedWith.length > 0) {
                   io.onSystem?.(`\u25C7 ${name} disconnected \u2014 this also disconnected: ${sharedWith.join(", ")}.
 `);
                 }
                 if (name === currentSel.provider) {
-                  io.onSystem?.(name === "openai-codex" ? `\u25C7 ${name} disconnected \u2014 it stays selected, but the next turn requires a new login. Use /provider to reconnect or /connect to switch.
+                  io.onSystem?.(name === "openai-codex" ? `\u25C7 ${name} disconnected \u2014 it stays selected, but the next turn requires a new login. Run /connect to log in again or to switch.
 ` : `\u25C7 ${name} disconnected \u2014 this session keeps its already-loaded credential until you /connect another provider or restart.
 `);
                 }
               }
-            }) : selectProviderModelInTui(otui, chrome, detected));
+            }));
             if (ns !== undefined) {
               await switchTo(ns);
-            } else if (command.name === "/connect") {
-              chrome.showToast("No connected providers found. Run /provider to configure one first.");
             }
             input.focus();
           })());
@@ -203215,7 +203871,8 @@ ${formatThemeList(getThemeId())}`);
         return;
       }
       if (line.startsWith("/")) {
-        io.onSystem?.(describeUnavailableCommand(line, "agent") ?? `Unknown command: ${line}
+        const removedHint = removedCommandHint(line);
+        io.onSystem?.(describeUnavailableCommand(line, "agent") ?? `Unknown command: ${line}${removedHint === undefined ? "" : `. ${removedHint}`}
 `);
         const help = renderCommandHelp("agent");
         addBlock({ kind: "output", fullText: help, summary: "Available commands", lineCount: help.trimEnd().split(`
@@ -203726,11 +204383,12 @@ Turn: ${chrome.isBusy() ? "running" : "idle"} \xB7 queue: ${turnLoop.queue.lengt
       }
       return await captureShellOutput(() => runLine(line, "operator", TG_SOURCE));
     };
+    const shellIsBusy = () => chrome.isBusy() || foregroundOperation.isActive || forceHandoff.isAwaitingSettlement || turnLoop.queue.length > 0 || leaseView()?.held() === true;
     remoteBridge = new RemoteBridge({
       host: {
         sessionId: () => liveSession.summary.id,
         project: () => sessionCwd,
-        isBusy: () => chrome.isBusy() || foregroundOperation.isActive || forceHandoff.isAwaitingSettlement || turnLoop.queue.length > 0 || leaseView()?.held() === true,
+        isBusy: shellIsBusy,
         turnRunning: () => chrome.isBusy() || foregroundOperation.isActive,
         sessionState: () => ({ queued: turnLoop.queue.length, mode: formatModeInForce(modeForTurn(true)) }),
         runLine: (text) => remoteQueue.runTelegramLine(text),
@@ -203746,6 +204404,7 @@ Turn: ${chrome.isBusy() ? "running" : "idle"} \xB7 queue: ${turnLoop.queue.lengt
           } catch {}
         },
         recordOff: () => {
+          remoteDeviceLogin?.abort();
           if (!sessionLease.canPersist())
             return;
           try {
@@ -203769,14 +204428,25 @@ Turn: ${chrome.isBusy() ? "running" : "idle"} \xB7 queue: ${turnLoop.queue.lengt
           return decision === "deferred" || decision === "not-a-command" ? BUSY_REASON : undefined;
         },
         listProviders: async () => {
-          const detected = opts.redetect !== undefined ? await opts.redetect() : opts.detected;
-          const connected = await filterConnectedDetectedProviders(detected, {});
+          const { connected } = await connectedProviders.get();
           return connected.map((prov) => ({
             id: prov.name,
             label: prov.label ?? prov.name,
             ...prov.name === currentSel.provider ? { current: true } : {}
           }));
         },
+        listAddableProviders: async () => {
+          const { detected, connected } = await connectedProviders.get();
+          const connectedNames = new Set(connected.map((prov) => prov.name));
+          return detected.filter((prov) => prov.name !== "fake").map((prov) => ({
+            id: prov.name,
+            label: prov.label ?? prov.name,
+            connected: connectedNames.has(prov.name),
+            deviceLogin: catalogAllows(prov.name, "device-code")
+          }));
+        },
+        testProvider: (providerId) => testProviderForRemote(providerId, { probe: (id) => probeProviderConnection(id, { requireCredential: true }) }),
+        connectWithDeviceLogin: (providerId, notify) => (remoteDeviceLogin ??= createRemoteDeviceLogin({ isBusy: shellIsBusy, onConnected: () => connectedProviders.invalidate() })).connect(providerId, notify),
         listModels: async (providerId) => {
           const detected = opts.redetect !== undefined ? await opts.redetect() : opts.detected;
           const name = providerId ?? currentSel.provider;
@@ -203876,7 +204546,7 @@ Turn: ${chrome.isBusy() ? "running" : "idle"} \xB7 queue: ${turnLoop.queue.lengt
 `);
   }
 }
-var SESSION_PREVIEW_MESSAGE_COUNT = 200, SIDE_WORKER_DENIED_TOOL_NAMES, CUSTOM_PROVIDER_ADD_ID = "__add_custom_provider__", CUSTOM_ADD_ENTRY, REASONING_PREVIEW_THROTTLE_MS = 100, OPENAI_CACHED_INPUT_DISCOUNT = 0.5, ANTHROPIC_CACHE_READ_MULTIPLIER = 0.1, ANTHROPIC_CACHE_WRITE_MULTIPLIER = 1.25, MODE_PICKER_DESCRIPTIONS;
+var SESSION_PREVIEW_MESSAGE_COUNT = 200, SIDE_WORKER_DENIED_TOOL_NAMES, CUSTOM_PROVIDER_ADD_ID = "__add_custom_provider__", CUSTOM_ADD_ENTRY, REASONING_PREVIEW_THROTTLE_MS = 100, OPENAI_CACHED_INPUT_DISCOUNT = 0.5, ANTHROPIC_CACHE_READ_MULTIPLIER = 0.1, ANTHROPIC_CACHE_WRITE_MULTIPLIER = 1.25, PROVIDERS_TABS, PROVIDERS_FOOTERS, NO_KEY_ENTERED_TEXT = "no key entered", MODE_PICKER_DESCRIPTIONS;
 var init_tui_shell = __esm(() => {
   init_shell_startup_trace();
   init_service5();
@@ -203925,6 +204595,7 @@ var init_tui_shell = __esm(() => {
   init_workspace_inspector();
   init_review_inspector();
   init_routing_inspector();
+  init_remote_provider_hooks();
   init_model_profile();
   init_task_cost();
   init_ci_triage_inspector();
@@ -204057,6 +204728,23 @@ var init_tui_shell = __esm(() => {
     label: "\uFF0B Add custom provider (OpenAI-compatible)",
     note: "name \xB7 URL \xB7 key \xB7 models \u2192 saved to llm-providers.json"
   };
+  PROVIDERS_TABS = [
+    { id: "connected", label: "Connected" },
+    { id: "add", label: "Add provider" }
+  ];
+  PROVIDERS_FOOTERS = {
+    connected: [
+      { key: "\u2191/\u2193", label: "row" },
+      { key: "\u2190/\u2192", label: "action" },
+      { key: "Enter", label: "run" },
+      { key: "a", label: "add" }
+    ],
+    add: [
+      { key: "\u2191/\u2193", label: "row" },
+      { key: "\u2190/\u2192", label: "Connect/Test" },
+      { key: "Enter", label: "run" }
+    ]
+  };
   MODE_PICKER_DESCRIPTIONS = {
     ask: "Every mutating action asks first (today's default)",
     trust: "Auto-approves safe actions; still asks for destructive/credential ones",
@@ -205494,28 +206182,6 @@ Kept the current session.
           await selectAndApply({ onlyProvider: providerName });
           continue;
         }
-        if (command === "/provider") {
-          if (argument.length > 0) {
-            if (argument === "openai-codex") {
-              if (deps.selectProviderModel === undefined) {
-                system("Interactive subscription selection is not available. Run `keryx auth login openai-codex` and select an authorized model.\n");
-              } else {
-                await selectAndApply({ onlyProvider: "openai-codex" });
-              }
-              continue;
-            }
-            providerName = argument;
-            provider = makeActive();
-            continue;
-          }
-          if (deps.selectProviderModel === undefined) {
-            system(`Interactive provider selection is not available in this session.
-`);
-            continue;
-          }
-          await selectAndApply({});
-          continue;
-        }
         if (command === "/connect") {
           if (deps.selectProviderModel === undefined) {
             system(CONNECT_GUIDANCE);
@@ -205529,7 +206195,7 @@ Kept the current session.
           system(wrongMode);
           continue;
         }
-        system(`Unknown command: ${command}. Type /help for commands.
+        system(`Unknown command: ${command}. ${removedCommandHint(command) ?? "Type /help for commands."}
 `);
         continue;
       }
@@ -207097,7 +207763,7 @@ ${formatThemeList(getThemeId())}`);
           const rows = buildSettingsRows(await loadSettingsSnapshot(sessionCwd, { permissionMode, plan: readOnly, reasoningOverride: reasoningSessionOverride }, configDir));
           agentIo.onSystem?.(formatSettingsTable(rows, { available: new Set(READLINE_AGENT_COMMANDS) }));
         } else {
-          agentIo.onSystem?.(describeUnavailableCommand(command, "agent") ?? `Unknown command: ${command}. Type /help.
+          agentIo.onSystem?.(describeUnavailableCommand(command, "agent") ?? `Unknown command: ${command}. ${removedCommandHint(command) ?? "Type /help."}
 `);
         }
         printPromptWithBusNotice();
@@ -208063,7 +208729,7 @@ var init_shell = __esm(() => {
     "  export ANTHROPIC_API_KEY=<key>",
     "",
     "keryx reads ANTHROPIC_API_KEY from the environment only \u2014 it never stores,",
-    "logs, or echoes the key. Then run /provider to pick the anthropic provider.",
+    "logs, or echoes the key. Then run /connect to pick the anthropic provider.",
     ""
   ].join(`
 `);