@namzu/cli 26.0.1 → 26.2.0

package/CHANGELOG.md

@@ -1,5 +1,131 @@
 # @namzu/cli
 
+## 26.2.0
+
+### Minor Changes
+
+- ca56e24: The provider picker lists every provider you can set up, not only the ones it
+  detected on this machine.
+
+  The gap was reported from a session where it cost something: the saved provider
+  was OpenRouter, the picker drew the four providers discovery had found, and
+  OpenRouter was not among them — so there was no row to select and therefore no
+  way to type the key that was already in hand. A list assembled from `detected`
+  cannot name a provider `detected` does not mention, whatever the operator is
+  holding.
+
+  Detected rows are untouched: same order, same numbering, same source column
+  (`Claude session · this device`), same place at the top, and the header's count
+  still counts exactly what it counted before. Below them, under `Not detected —
+enter a credential to use these:`, come every provider this build can construct
+  that takes a typed credential — `anthropic`, `google`, `openai`, `deepseek`,
+  `openrouter`, `zen`, `zen-go` — each marked with the environment variable that
+  sets it up (`needs OPENROUTER_API_KEY`), because that variable is both what
+  makes the provider work now and what keeps it working after a restart.
+
+  Enter on one of those rows opens the paste field for that provider, and `k`
+  follows the highlighted row instead of a fixed choice in the registry. Where the
+  row takes no typed credential — a local server, or a provider that signs in —
+  `k` still falls back to the provider the picker was opened for, which is the
+  saved one whose key is missing, so the route the notice above the list
+  advertises is unchanged. A typed credential is still held for the session and
+  written nowhere; nothing about how a credential is resolved at run time changed,
+  and no config key was added.
+
+  **What moves, and why it is not a patch.** The footer now names a provider only
+  when `k` reaches past the highlighted row to the one the picker was opened for.
+  With the cursor on the row the key will act on, the line reads `k enter a
+credential`; the label returns as `k enter a credential for <provider>` exactly
+  when the two differ. That is shorter than the sentence it replaces — long enough
+  to wrap and lose its tail on a 100-column terminal — but it is a change to a
+  line a script or a reader may have matched, which is why this is `minor` rather
+  than `patch`. Two smaller consequences, both stated because they are visible:
+  the list is longer, so a machine with seven of these rows draws a taller screen,
+  and the digit shortcut still reaches the first nine rows only (a tenth needs two
+  keystrokes, and two keystrokes cannot be told from two presses without a timer),
+  which the screen now says out loud when the list passes nine.
+
+  Five registry entries are deliberately not offered there, because a row that
+  leads nowhere is worse than an absent one. `bedrock` needs an AWS credential
+  chain rather than one string; `http` is an endpoint whose base URL is half the
+  credential; `lmstudio` has no driver in this build; `ollama` needs a running
+  server, which is how discovery finds it; and `codex` is a device-code sign-in
+  this screen already offers with `l`, so it is not set up two ways.
+  `provider-list.test.ts` asserts that omission list by name, so flipping a
+  registry flag turns it red rather than quietly adding or dropping a row.
+
+  One defect was found in this screen while building it and is fixed here: the
+  cursor is an index into whichever list the screen is drawing, and the sign-in
+  screen draws three rows while the provider list draws more. With a saved
+  preference naming `openai` and a Codex device session detected, `/login` opened
+  with `openai` resolved against the provider list — row four — and read against
+  the sign-in list, so no row was highlighted and Enter did nothing at all.
+
+## 26.1.0
+
+### Minor Changes
+
+- 9b920fd: The model picker marks a zero-priced model `(free)`, and its search finds the
+  word.
+
+  OpenRouter's public catalogue serves 445 models and 25 of them are priced at
+  zero for both input and output. The picker listed all 445 and could not tell
+  you which: the listing it built dropped the price the driver had already
+  parsed. A row now carries `(free)` when its listing reported `0` for both
+  prices, and `free` in the search box returns those rows — including the ones
+  whose ID and display name never spell the word, which is how
+  `google/lyria-3-pro-preview` becomes findable at all. Nothing is reordered or
+  hidden: the provider's order is the screen's order, and the marker only adds
+  words to a row that was already there.
+
+  **This changes what the search matches**, and that is why it is not a patch.
+  The filter is documented as matching a row's ID and display name; it now also
+  matches the note beside the row. Everything that matched before still matches
+  identically — the same words, the same order, the same rows returned by
+  identity — but a query can return more than it did. Typing `default` finds the
+  row marked `(namzu default)`, and `free` finds every row marked `(free)`,
+  where before both matched only rows whose ID or name happened to contain the
+  word. Nothing needs to be done about it unless you drive this screen from a
+  script that assumed a query's result set; if you do, the new matches are
+  additive, so a result you were using is still in it.
+
+  It is not a `major` because no exported symbol, CLI flag, config key, default
+  or wire shape moved. `ModelListing`'s `ok` arm gained two optional fields —
+  optional deliberately, since `ModelInfo` requires both prices and a required
+  price is one a driver has to invent — and the picker is a screen, not an API.
+
+  One thing to know before you trust the badge. The note reports what the
+  provider's own listing said about its own catalogue, and a driver that reports
+  zero for every model it lists gets a list marked free wholesale. Four drivers
+  in this repository do exactly that today (`anthropic`'s live path, `openai`,
+  `codex`, `deepseek`); the fix is to make the price optional in `ModelInfo` and
+  have those drivers omit it, the way `9d6c482c` did for `contextWindow`, and
+  that is an SDK change with its own bump rather than part of this one.
+
+### Patch Changes
+
+- e83dfe5: The model picker marks a row `(free)` only when the provider reported both rates as zero, and says nothing about a model whose rate nobody published.
+
+  Both halves are the fix. Reading `0` as free is right, and it is now readable: `ModelInfo`'s two price fields are optional, so a driver with no rate omits them rather than writing the zero that made every paid model on four provider menus look free.
+
+  The catalogue block under `agent_models` prints a price fact: the rates when the driver published them, `Free` when it reported zero, and `Price unknown` when it published nothing. `Price unknown` is the rendering that did not exist — had absence been given the obvious one it would have printed `$0.00`, which is the same sentence as `Free` to a reader.
+
+  The `(free)` marker also survives a narrow terminal. `Picker` rebuilds a row's notes from a fixed vocabulary under 70 columns and drops any word missing from it, so `(free)` had to be added there or it would have been silently discarded on exactly the screens where the row is hardest to read.
+
+- Updated dependencies [e83dfe5]
+- Updated dependencies [e83dfe5]
+- Updated dependencies [e83dfe5]
+- Updated dependencies [e5411cc]
+- Updated dependencies [9661d16]
+  - @namzu/ollama@2.2.4
+  - @namzu/sdk@43.0.0
+  - @namzu/anthropic@6.0.0
+  - @namzu/openai@4.0.0
+  - @namzu/deepseek@2.0.0
+  - @namzu/google@1.0.0
+  - @namzu/openrouter@3.0.0
+  - @namzu/computer-use@1.4.3
+
 ## 26.0.1
 
 ### Patch Changes

package/README.md

@@ -159,7 +159,11 @@ labelled `Use existing`, while new credentials are labelled `Sign in to`. An
 expired or signed-out owner session is not offered as reusable.
 API keys remain optional alternatives through environment variables or the
 session-only credential picker, and detecting one does not hide the subscription
-sign-in action.
+sign-in action. That picker lists every provider this build can construct that
+accepts a typed credential, not only the ones found on the machine: the rest are
+listed below the detected rows under `Not detected — enter a credential to use
+these:`, each marked with the variable that sets it up (`needs
+OPENROUTER_API_KEY`), and selecting one opens the paste field for that provider.
 
 Zen and Zen Go appear as separate providers in `/model` (press
 `p` to change providers). Zen works without an account key or an OpenCode

package/dist/tui/Picker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Picker.d.ts","sourceRoot":"","sources":["../../src/tui/Picker.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,EAEN,KAAK,gBAAgB,EAErB,KAAK,UAAU,EAEf,KAAK,sBAAsB,EAG3B,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,KAAK,YAAY,EAA0B,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAoBxF,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAA;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,GAAG,wBAAwB,CAAA;IACxE,iFAAiF;IACjF,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,eAAe,GAAG,QAAQ,CAAA;IAC/D,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,MAAM,EAAE,WAAW,KAAK,IAAI,CAAA;IACjG,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAA;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CACzB,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,gBAAgB,EACrB,MAAM,CAAC,EAAE,WAAW,KAChB,OAAO,CAAC,YAAY,CAAC,CAAA;IAC1B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CACvB,UAAU,EAAE,gBAAgB,EAC5B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,WAAW,KACf,IAAI,CAAA;IACT;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAClB,QAAQ,EAAE,sBAAsB,EAChC,MAAM,EAAE,WAAW,KACf,OAAO,CAAC,gBAAgB,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAA;IACtD,6EAA6E;IAC7E,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,GAAG,UAAU,CAAC,CAAA;IAChG;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,gBAAgB,CAAA;IACzC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IACxC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAyDD,wBAAgB,MAAM,CAAC,EACtB,QAAQ,EACR,eAAe,EACf,aAAoC,EACpC,YAAY,EACZ,WAAyB,EACzB,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,cAAuC,EACvC,YAAY,EACZ,OAAO,EACP,eAAe,EACf,MAAyB,EACzB,WAAW,EACX,MAAM,GACN,EAAE,WAAW,2CA00Bb"}
+{"version":3,"file":"Picker.d.ts","sourceRoot":"","sources":["../../src/tui/Picker.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,EAEN,KAAK,gBAAgB,EAErB,KAAK,UAAU,EAEf,KAAK,sBAAsB,EAG3B,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,KAAK,YAAY,EAA0B,gBAAgB,EAAE,MAAM,YAAY,CAAA;AA2BxF,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAA;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,GAAG,wBAAwB,CAAA;IACxE,iFAAiF;IACjF,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,eAAe,GAAG,QAAQ,CAAA;IAC/D,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,MAAM,EAAE,WAAW,KAAK,IAAI,CAAA;IACjG,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAA;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CACzB,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,gBAAgB,EACrB,MAAM,CAAC,EAAE,WAAW,KAChB,OAAO,CAAC,YAAY,CAAC,CAAA;IAC1B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CACvB,UAAU,EAAE,gBAAgB,EAC5B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,WAAW,KACf,IAAI,CAAA;IACT;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAClB,QAAQ,EAAE,sBAAsB,EAChC,MAAM,EAAE,WAAW,KACf,OAAO,CAAC,gBAAgB,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAA;IACtD,6EAA6E;IAC7E,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,GAAG,UAAU,CAAC,CAAA;IAChG;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,gBAAgB,CAAA;IACzC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IACxC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAyED,wBAAgB,MAAM,CAAC,EACtB,QAAQ,EACR,eAAe,EACf,aAAoC,EACpC,YAAY,EACZ,WAAyB,EACzB,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,cAAuC,EACvC,YAAY,EACZ,OAAO,EACP,eAAe,EACf,MAAyB,EACzB,WAAW,EACX,MAAM,GACN,EAAE,WAAW,2CA44Bb"}

package/dist/tui/Picker.js

@@ -15,15 +15,12 @@ import { describeProviderModels, verifyCredential } from './agent.js';
 import { classifyCredential, describeDisposition, keyLooksUsable, maskKey, sessionCredential, } from './credential-entry.js';
 import { modelStep } from './model-choices.js';
 import { filterModelChoices } from './model-search.js';
+import { credentialNeed, initialProviderRow, providerListRows, rowProviderId, } from './provider-list.js';
 import { moveSelection, selectionWindow } from './selection-window.js';
 import { choiceDisplayWidth, eraseLastChoiceGrapheme, truncateChoiceText, } from './terminal-choice-text.js';
 import { terminalDisplayText } from './terminal-display.js';
 import { theme } from './theme.js';
 import { useSelectionIndex } from './use-selection-index.js';
-/** Providers that take a typed credential. Local servers do not. */
-function keyCapableProviders() {
-    return ALL_PROVIDER_IDS.map((id) => PROVIDER_REGISTRY[id]).filter((e) => e.acceptsTypedCredential);
-}
 function subscriptionProviders() {
     return ALL_PROVIDER_IDS.map((id) => PROVIDER_REGISTRY[id]).filter((entry) => entry.subscriptionLogin !== undefined);
 }
@@ -51,17 +48,36 @@ function signInChoiceIndex(choices, provider) {
 /**
  * The provider `k` opens entry for.
  *
- * The saved one when this picker is open because its credential is missing;
- * otherwise the first key-capable provider, which is what the empty screen has
- * always done. Returns null when nothing here takes a typed credential.
+ * The highlighted row whenever it takes a typed credential — whichever row that
+ * is, detected or not. This screen used to answer the question from the
+ * registry instead: the saved provider if the picker was open because of one,
+ * and otherwise the first key-capable entry, which is a provider the operator
+ * may not have been looking at. A list you can move through is a list the key
+ * beside it has to follow.
+ *
+ * The rows that do not take one — a local server, a provider whose credential
+ * arrives by sign-in — fall through to the saved provider this picker was
+ * opened for: that route is why the notice above says `k`, and it must keep
+ * working when the cursor happens to sit on a row that cannot use it.
+ *
+ * Returns null when there is nothing here to enter a credential for, which the
+ * caller says out loud rather than presenting a field that leads nowhere.
  */
-function keyEntryTarget(keyEntryFor) {
+function keyEntryTarget(row, keyEntryFor) {
+    if (row?.kind === 'unconfigured')
+        return row.entry;
+    if (row?.kind === 'detected' && row.detected.entry.acceptsTypedCredential)
+        return row.detected.entry;
     if (keyEntryFor) {
         const entry = PROVIDER_REGISTRY[keyEntryFor];
         if (entry?.acceptsTypedCredential)
             return entry;
     }
-    return keyCapableProviders()[0] ?? null;
+    return null;
+}
+/** Name a row the way its own line does, for a sentence about it. */
+function rowLabel(row) {
+    return row.kind === 'detected' ? row.detected.entry.label : row.entry.label;
 }
 export function Picker({ detected, currentProvider, selectionKind = 'provider-and-model', currentModel, initialView = 'providers', onSubmit, onCancel, onSetup, describeModels = describeProviderModels, onCredential, onLogin, onLoginComplete, verify = verifyCredential, keyEntryFor, notice, }) {
     /**
@@ -96,10 +112,32 @@ export function Picker({ detected, currentProvider, selectionKind = 'provider-an
             operationRef.current = null;
     }, []);
     useEffect(() => invalidateOperation, [invalidateOperation]);
-    const initialIndex = (currentProvider !== null && currentProvider !== undefined
-        ? detected.findIndex((d) => d.entry.id === currentProvider)
-        : 0) || 0;
-    const { selection: cursor, selectionRef: cursorRef, setSelection: setCursor, } = useSelectionIndex(Math.max(0, initialIndex));
+    // The list this screen draws: what was detected, then every provider this
+    // build could construct if the operator supplied a credential.
+    //
+    // `detected` is still the discovery result and is still what the header
+    // counts, what the sign-in screen offers and what a submitted choice is
+    // built from. This is the screen, not the machine.
+    //
+    // The signed-in-subscription screen takes the detected rows alone: it asks
+    // which already-usable session to use, and a row that needs a key first
+    // makes that sentence false.
+    const rows = providerListRows(detected, selectionKind !== 'signed-in-subscription');
+    // Whether `k` is offered at all, read once so the hint below and the key
+    // handler cannot disagree about it. The handler adds the phase guards,
+    // because it runs on every screen this picker draws and this expression is
+    // computed only for the list.
+    const keyEntryOffered = onCredential !== undefined && selectionKind !== 'signed-in-subscription';
+    // The cursor is an index into whichever list the screen is drawing, and the
+    // sign-in screen draws `subscriptionChoices` while the provider list draws
+    // these rows, which is longer by however many providers can be set up from
+    // here. An index resolved against one and read against the other selects
+    // nothing at all, which is how `/login` came up with no row highlighted and
+    // an Enter that did nothing on the machine below: a saved preference naming
+    // a saved provider resolved to its row in the provider list, which is past the end
+    // of a three-row sign-in list.
+    const initialSelection = initialView === 'subscriptions' ? 0 : initialProviderRow(rows, currentProvider, keyEntryFor);
+    const { selection: cursor, selectionRef: cursorRef, setSelection: setCursor, } = useSelectionIndex(initialSelection);
     const [errorHint, setErrorHint] = useState(null);
     // The ref makes a pasted query followed immediately by Enter use the new
     // filtered list, even before React has drawn another frame. Null keeps the
@@ -307,19 +345,22 @@ export function Picker({ detected, currentProvider, selectionKind = 'provider-an
             }
             return;
         }
-        // `k` opens credential entry. Two screens offer it, for two reasons.
+        // `k` opens credential entry for the highlighted row — see
+        // `keyEntryTarget` for which provider that resolves to when the row takes
+        // no typed credential. The empty screen has always offered it (there,
+        // entering a credential is the only thing that can happen), and the
+        // populated one used to offer it only when `keyEntryFor` was set: someone
+        // with a working credential was not the person this was for. True then,
+        // and false for the operator this screen was opened for, who has a saved
+        // provider with no credential and a local server that happens to be
+        // running — they arrived at a list that named every provider except a way
+        // to fix the one they chose. The letter does not collide with anything:
+        // navigation is arrows and digits, and the model step owns its own keys.
         //
-        // The empty one always has: with nothing detected, entering a credential
-        // is the only thing that can happen here.
-        //
-        // The POPULATED one offers it when `keyEntryFor` is set, which was the
-        // gap. The old rule was "empty screen only", reasoned as "someone with a
-        // working credential is not the person this is for" — true then, and false
-        // for the person this change routes here, who has a saved provider with no
-        // credential and a local server that happens to be running. They arrived
-        // at a list that named every provider except a way to fix the one they
-        // chose. The letter does not collide with anything: navigation is arrows
-        // and digits.
+        // Two phases are guarded out. The model step types into search, so `k`
+        // there is a character and not a shortcut. The sign-in screen numbers its
+        // own choices, so the cursor indexes those rather than these rows, and a
+        // key read through it would name a provider nobody chose.
         // `l` starts a Namzu-owned subscription sign-in from the general provider
         // screen as well as the empty one. The already-signed-in choice deliberately
         // omits it: external auth exists there, and a newly stored credential would
@@ -344,24 +385,27 @@ export function Picker({ detected, currentProvider, selectionKind = 'provider-an
             onSetup();
             return;
         }
-        if (modelPhase === null &&
-            (detected.length === 0 || keyEntryFor) &&
-            onCredential &&
+        const highlighted = rows[cursorRef.current];
+        if (!loginPhase &&
+            modelPhase === null &&
+            keyEntryOffered &&
             (input === 'k' || input === 'K')) {
-            const target = keyEntryTarget(keyEntryFor);
+            const target = keyEntryTarget(highlighted, keyEntryFor);
             if (target) {
                 invalidateOperation();
                 setKeyEntry({ entry: target, value: '', status: 'typing' });
             }
             else {
-                setErrorHint('No provider here takes a typed credential.');
+                setErrorHint(highlighted
+                    ? `${rowLabel(highlighted)} does not take a typed credential — choose a provider that does.`
+                    : 'No provider here takes a typed credential.');
             }
             return;
         }
         if (modelPhase &&
             (key.leftArrow || (modelQueryRef.current === null && (input === 'p' || input === 'P')))) {
             invalidateOperation();
-            setCursor(Math.max(0, detected.findIndex((provider) => provider.entry.id === modelPhase.provider.entry.id)));
+            setCursor(Math.max(0, rows.findIndex((row) => rowProviderId(row) === modelPhase.provider.entry.id)));
             setModelPhase(null);
             return;
         }
@@ -380,7 +424,7 @@ export function Picker({ detected, currentProvider, selectionKind = 'provider-an
                     onCancel();
                     return;
                 }
-                setCursor(Math.max(0, detected.findIndex((provider) => provider.entry.id === modelPhase.provider.entry.id)));
+                setCursor(Math.max(0, rows.findIndex((row) => rowProviderId(row) === modelPhase.provider.entry.id)));
                 setModelPhase(null);
                 return;
             }
@@ -510,23 +554,38 @@ export function Picker({ detected, currentProvider, selectionKind = 'provider-an
             return;
         }
         if (key.home || key.end || key.pageUp || key.pageDown) {
-            setCursor((current) => moveSelection(current, detected.length, key.home ? 'first' : key.end ? 'last' : key.pageUp ? 'previous-page' : 'next-page'));
+            setCursor((current) => moveSelection(current, rows.length, key.home ? 'first' : key.end ? 'last' : key.pageUp ? 'previous-page' : 'next-page'));
             return;
         }
         if (key.upArrow) {
-            setCursor((current) => moveSelection(current, detected.length, 'previous'));
+            setCursor((current) => moveSelection(current, rows.length, 'previous'));
             return;
         }
         if (key.downArrow) {
-            setCursor((current) => moveSelection(current, detected.length, 'next'));
+            setCursor((current) => moveSelection(current, rows.length, 'next'));
             return;
         }
         if (key.return) {
-            const current = detected[cursorRef.current];
-            if (!current) {
+            const row = rows[cursorRef.current];
+            if (!row) {
                 setErrorHint('No provider available.');
                 return;
             }
+            // A row with no credential has no session to open and no catalogue to
+            // ask: accepting it would submit a provider this machine holds nothing
+            // for. Enter takes the operator to the field instead, which is the same
+            // thing `k` does on this row and the only thing that can move it
+            // forward.
+            if (row.kind === 'unconfigured') {
+                if (!onCredential) {
+                    setErrorHint(`No credential can be entered for ${row.entry.label} on this screen.`);
+                    return;
+                }
+                invalidateOperation();
+                setKeyEntry({ entry: row.entry, value: '', status: 'typing' });
+                return;
+            }
+            const current = row.detected;
             // Detected, and still not choosable. The row stays visible on purpose
             // — see the list below — so this is the only place that can decline
             // it, and declining with the reason is the point: accepting would
@@ -547,9 +606,14 @@ export function Picker({ detected, currentProvider, selectionKind = 'provider-an
             openModels(current);
             return;
         }
-        // Numeric quick-select.
+        // Numeric quick-select, one keystroke per row and therefore the first nine.
+        // A tenth row would need two digits, and two digits cannot be told from
+        // two presses without a timer between them — a wait the screen would have
+        // to add to every `1` before it knew whether a `0` was coming. The list
+        // says so when it grows past nine rather than leaving the rest looking
+        // selectable and being unreachable.
         const n = Number.parseInt(input, 10);
-        if (Number.isFinite(n) && n >= 1 && n <= detected.length) {
+        if (Number.isFinite(n) && n >= 1 && n <= Math.min(rows.length, 9)) {
             setCursor(n - 1);
         }
     });
@@ -590,22 +654,34 @@ export function Picker({ detected, currentProvider, selectionKind = 'provider-an
                                 ? `Use existing ${choice.detected.entry.label} · ${describeSource(choice.detected)}`
                                 : `Sign in to ${choice.entry.label} · ${choice.entry.subscriptionLogin === 'device' ? 'device code' : 'browser'}`] }, `${choice.kind}-${choice.kind === 'existing' ? choice.detected.entry.id : choice.entry.id}`))) }), _jsxs(Box, { paddingTop: 1, flexDirection: "column", children: [_jsxs(Text, { color: theme.text.muted, children: ["\u2191\u2193 or 1-", choices.length, " navigate \u00B7 enter use \u00B7 esc back"] }), errorHint ? _jsx(Text, { color: theme.status.warn, children: errorHint }) : null] })] }));
     }
-    // Non-null exactly when `k` is live on the populated list — the same
-    // condition the key handler uses, read from one place so the hint and the
-    // keyboard cannot drift apart.
-    const entryTarget = keyEntryFor && onCredential ? keyEntryTarget(keyEntryFor) : null;
+    // Non-null exactly when `k` is live on this list and has somewhere to go —
+    // the same resolution the key handler performs, read from one place so the
+    // hint and the keyboard cannot drift apart. It follows the highlighted row,
+    // so the sentence changes as the cursor moves: a hint that kept naming the
+    // saved provider while `k` acted on another row would be the defect this
+    // screen's other messages are written to avoid.
+    const highlightedRow = rows[cursor];
+    const entryTarget = keyEntryOffered ? keyEntryTarget(highlightedRow, keyEntryFor) : null;
+    // The label is named only when `k` reaches past the highlighted row to the
+    // provider this screen was opened for. On the ordinary path the row under
+    // the cursor is the answer, and saying so again costs the line its tail: the
+    // footer is one row, and the sentence with a label in it wraps.
+    const namesAnotherRow = entryTarget !== null &&
+        (highlightedRow === undefined || rowProviderId(highlightedRow) !== entryTarget.id);
     if (detected.length === 0) {
         return (_jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: theme.status.warn, paddingX: 1, children: [noticeBox, _jsx(Text, { color: theme.status.warn, bold: true, children: "No providers detected" }), _jsxs(Box, { paddingTop: 1, flexDirection: "column", children: [_jsx(Text, { color: theme.text.primary, children: "namzu scans these sources, in order, for an LLM credential:" }), _jsxs(Text, { color: theme.text.muted, children: [' ', "\u00B7 existing", ' ', subscriptionProviders()
                                     .map((entry) => entry.label)
-                                    .join(' and '), ' ', "sessions on this device"] }), _jsxs(Text, { color: theme.text.muted, children: [' ', "\u00B7 subscriptions signed in to from namzu (~/.namzu/credentials.json)"] }), _jsxs(Text, { color: theme.text.muted, children: [' ', "\u00B7 env vars / API keys (optional alternatives: ANTHROPIC_API_KEY, OPENAI_API_KEY, \u2026)"] }), _jsxs(Text, { color: theme.text.muted, children: [' ', "\u00B7 local servers (Ollama localhost:11434, LM Studio localhost:1234)"] })] }), onLogin ? (_jsx(Box, { paddingTop: 1, children: _jsxs(Text, { color: theme.text.primary, children: ["Press ", _jsx(Text, { color: theme.accent.system, children: "l" }), " to sign in with a subscription \u2014 no API key, and namzu keeps it for next time."] }) })) : null, _jsx(Box, { paddingTop: 1, children: _jsxs(Text, { color: theme.text.primary, children: ["Or press ", _jsx(Text, { color: theme.accent.system, children: "k" }), " to paste a credential now and use it for this session."] }) }), _jsx(Box, { paddingTop: 1, children: _jsx(Text, { color: theme.text.secondary, children: "You can also set one of the env vars above (or start a local server) and restart." }) }), _jsx(Box, { paddingTop: 1, children: _jsxs(Text, { color: theme.text.muted, children: [onLogin ? 'l: sign in · ' : '', "k: enter a credential \u00B7 esc: exit picker"] }) })] }));
+                                    .join(' and '), ' ', "sessions on this device"] }), _jsxs(Text, { color: theme.text.muted, children: [' ', "\u00B7 subscriptions signed in to from namzu (~/.namzu/credentials.json)"] }), _jsxs(Text, { color: theme.text.muted, children: [' ', "\u00B7 env vars / API keys (optional alternatives: ANTHROPIC_API_KEY, OPENAI_API_KEY, \u2026)"] }), _jsxs(Text, { color: theme.text.muted, children: [' ', "\u00B7 local servers (Ollama localhost:11434, LM Studio localhost:1234)"] })] }), onLogin ? (_jsx(Box, { paddingTop: 1, children: _jsxs(Text, { color: theme.text.primary, children: ["Press ", _jsx(Text, { color: theme.accent.system, children: "l" }), " to sign in with a subscription \u2014 no API key, and namzu keeps it for next time."] }) })) : null, _jsx(Box, { paddingTop: 1, children: _jsxs(Text, { color: theme.text.primary, children: ["Or press ", _jsx(Text, { color: theme.accent.system, children: "k" }), " to paste a credential now and use it for this session."] }) }), _jsx(Box, { paddingTop: 1, children: _jsx(Text, { color: theme.text.secondary, children: "You can also set one of the env vars above (or start a local server) and restart." }) }), _jsx(ProviderSetupRows, { rows: rows, cursor: cursor, currentProvider: currentProvider }), _jsx(Box, { paddingTop: 1, children: _jsxs(Text, { color: theme.text.muted, children: [onLogin ? 'l: sign in · ' : '', "\u2191\u2193 or 1-9 navigate \u00B7 enter or k: enter a credential \u00B7 esc: exit picker"] }) })] }));
     }
     return (_jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: theme.border.focus, paddingX: 1, children: [noticeBox, _jsxs(Box, { flexDirection: "column", paddingBottom: 1, children: [_jsx(Text, { color: theme.accent.system, bold: true, children: selectionKind === 'signed-in-subscription'
                             ? 'Choose a signed-in subscription'
                             : 'Choose a provider' }), _jsx(Text, { color: theme.text.muted, children: selectionKind === 'signed-in-subscription'
                             ? `${detected.length} already usable · no API key required`
-                            : `${detected.length} detected · device sessions / Namzu sign-ins / optional keys / local probes` })] }), _jsx(Box, { flexDirection: "column", children: detected.map((d, i) => (_jsx(ProviderRow, { detected: d, index: i, selected: i === cursor, isCurrent: d.entry.id === currentProvider }, d.entry.id))) }), _jsxs(Box, { flexDirection: "column", paddingTop: 1, children: [_jsxs(Text, { color: theme.text.muted, children: ["\u2191\u2193 or 1-9 navigate \u00B7 enter ", selectionKind === 'signed-in-subscription' ? 'use' : 'accept', entryTarget ? ` · k enter a credential for ${entryTarget.label}` : '', onLogin && selectionKind !== 'signed-in-subscription'
+                            : `${detected.length} detected · device sessions / Namzu sign-ins / optional keys / local probes` })] }), _jsx(ProviderSetupRows, { rows: rows, cursor: cursor, currentProvider: currentProvider }), _jsxs(Box, { flexDirection: "column", paddingTop: 1, children: [_jsxs(Text, { color: theme.text.muted, children: ["\u2191\u2193 or 1-9 navigate \u00B7 enter ", selectionKind === 'signed-in-subscription' ? 'use' : 'accept', entryTarget
+                                ? ` · k enter a credential${namesAnotherRow ? ` for ${entryTarget.label}` : ''}`
+                                : '', onLogin && selectionKind !== 'signed-in-subscription'
                                 ? ' · l create a Namzu sign-in'
-                                : '', ' ', "\u00B7 esc cancel"] }), errorHint ? _jsx(Text, { color: theme.status.warn, children: errorHint }) : null] })] }));
+                                : '', ' ', "\u00B7 esc cancel"] }), rows.length > 9 ? (_jsx(Text, { color: theme.text.muted, children: "Rows past 9 are \u2191\u2193 only: two digits cannot be told from two presses." })) : null, errorHint ? _jsx(Text, { color: theme.status.warn, children: errorHint }) : null] })] }));
 }
 function ModelStepView({ providerLabel, otherProviders, step, query, currentModel, cursor, errorHint, returnToProviders, sessionOnly, }) {
     const terminal = useWindowSize();
@@ -628,6 +704,17 @@ function ModelStepView({ providerLabel, otherProviders, step, query, currentMode
                                         c.id === currentModel ? '(current)' : '',
                                         c.note?.includes('namzu default') ? '(default)' : '',
                                         c.note?.includes('image input') ? '(image)' : '',
+                                        // Rebuilt from a fixed vocabulary, so a word
+                                        // missing from it is DROPPED rather than
+                                        // shortened — and a `(free)` that vanishes on a
+                                        // narrow terminal is a marker the operator
+                                        // cannot rely on. Listed here for the same
+                                        // reason the other two are: the note is prose
+                                        // the model step built, and this branch has to
+                                        // know which of it still fits. `free` is read
+                                        // off `c.note` rather than off the prices,
+                                        // which the choice does not carry.
+                                        c.note?.includes('free') ? '(free)' : '',
                                     ]
                                     : [
                                         c.note,
@@ -640,6 +727,44 @@ function ModelStepView({ providerLabel, otherProviders, step, query, currentMode
                             ? `↑↓ · enter apply · esc ${returnToProviders ? 'back' : 'cancel'}`
                             : `↑↓ · PgUp/PgDn · Home/End · enter apply · esc ${returnToProviders ? 'back' : 'cancel'}${query === null ? ' · digits select' : ' · Ctrl+U clears'}` }), errorHint ? _jsx(Text, { color: theme.status.warn, children: errorHint }) : null] })] }));
 }
+/**
+ * The list, in the two blocks it is built as.
+ *
+ * Detected first and untouched: same rows, same order, same numbering, same
+ * source column. The second block is appended below a heading rather than
+ * merged into the first, because merging is the one thing that would move a row
+ * the operator already knows the position of — and every row above this line is
+ * one they may already be using.
+ *
+ * The appended rows carry no blank line between them. They are a work list
+ * rather than a catalogue, and a machine with six of them would otherwise push
+ * the box past a 24-row terminal and scroll the top of it — the detected rows —
+ * out of sight.
+ */
+function ProviderSetupRows({ rows, cursor, currentProvider, }) {
+    // The two arms are contiguous by construction (`providerListRows` appends),
+    // so one boundary splits them and every row's number is its position in the
+    // whole list, whichever block it is drawn in.
+    const firstUnconfigured = rows.findIndex((row) => row.kind === 'unconfigured');
+    const detectedCount = firstUnconfigured === -1 ? rows.length : firstUnconfigured;
+    return (_jsxs(_Fragment, { children: [_jsx(Box, { flexDirection: "column", children: rows.slice(0, detectedCount).map((row, index) => row.kind === 'detected' ? (_jsx(ProviderRow, { detected: row.detected, index: index, selected: index === cursor, isCurrent: row.detected.entry.id === currentProvider }, row.detected.entry.id)) : null) }), firstUnconfigured === -1 ? null : (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsx(Text, { color: theme.text.muted, children: "Not detected \u2014 enter a credential to use these:" }), rows.slice(firstUnconfigured).map((row, offset) => row.kind === 'unconfigured' ? (_jsx(UnconfiguredProviderRow, { entry: row.entry, index: firstUnconfigured + offset, selected: firstUnconfigured + offset === cursor, isCurrent: row.entry.id === currentProvider }, row.entry.id)) : null)] }))] }));
+}
+/**
+ * A row for a provider nothing on this machine can serve yet.
+ *
+ * Deliberately a separate component from `ProviderRow` rather than one
+ * component with two modes: the detected row's shape is what operators read
+ * every day, and a shared body is a body where a change for the new rows moves
+ * the old ones. The columns line up because both pad the label to the same
+ * width; what differs is the third one, which says what is missing instead of
+ * where the credential came from.
+ */
+function UnconfiguredProviderRow({ entry, index, selected, isCurrent, }) {
+    const cursor = selected ? '›' : ' ';
+    const number = `${index + 1}.`;
+    const currentMark = isCurrent ? '  ← current' : '';
+    return (_jsxs(Box, { children: [_jsxs(Text, { color: selected ? theme.border.focus : theme.text.muted, children: [cursor, " "] }), _jsxs(Text, { color: theme.text.muted, children: [number, " "] }), _jsx(Text, { color: selected ? theme.border.focus : theme.text.primary, bold: selected, children: entry.label.padEnd(28) }), _jsx(Text, { color: theme.status.warn, children: credentialNeed(entry) }), isCurrent ? _jsx(Text, { color: theme.accent.system, children: currentMark }) : null] }));
+}
 function ProviderRow({ detected, index, selected, isCurrent, }) {
     const cursor = selected ? '›' : ' ';
     const number = `${index + 1}.`;