@north-light/crouter 0.3.182 → 0.3.183

package/dist/clients/inbox/review/keys.js

@@ -1,12 +1,5 @@
 import { Key, decodeKittyPrintable, matchesKey, parseKey } from '@earendil-works/pi-tui';
-/** pi-tui parses legacy ESC+lowercase as Alt+letter, but does not normalize
- * the shifted uppercase form. Convert that complete two-byte form to the
- * equivalent CSI-u key so all semantic matching stays in pi-tui. */
-function normalizeLegacyShiftedMeta(data) {
-    if (data.length !== 2 || data[0] !== '\x1b' || !/[A-Z]/.test(data[1]))
-        return data;
-    return `\x1b[${data.charCodeAt(1)};4u`;
-}
+import { normalizeShiftedMeta } from '../../../core/keybindings/index.js';
 /** Return text that compose mode inserts. Semantic textual commands deliberately
  * retain their payload so compose can preserve the old branch order. */
 export function reviewKeyText(key) {
@@ -30,7 +23,7 @@ export function reviewKeyText(key) {
 /** Match one complete pi-tui input chunk. pi-tui owns ESC/meta disambiguation;
  * this function has neither terminal state nor a fallback raw-sequence parser. */
 export function matchReviewKey(data) {
-    const normalized = normalizeLegacyShiftedMeta(data);
+    const normalized = normalizeShiftedMeta(data);
     // Compose-only chords precede their unmodified forms. The surface applies
     // these only while composing, preserving the terminal-review mode ladder.
     if (matchesKey(normalized, Key.ctrl('j')) || matchesKey(normalized, Key.alt('enter')))

package/dist/clients/inbox/tui/keys.js

@@ -1,4 +1,5 @@
 import { decodeKittyPrintable, matchesKey, parseKey } from '@earendil-works/pi-tui';
+import { normalizeShiftedMeta } from '../../../core/keybindings/index.js';
 function emptyKey() {
     return {
         upArrow: false,
@@ -30,14 +31,6 @@ function withFlag(...flags) {
 function isPlainText(data) {
     return data.length > 0 && !data.includes('\x1b') && data.charCodeAt(0) >= 0x20;
 }
-/** pi-tui parses legacy ESC+lowercase as Alt+letter, but does not normalize
- * the shifted uppercase form. Convert that complete two-byte form to the
- * equivalent CSI-u key so all semantic matching stays in pi-tui. */
-function normalizeLegacyShiftedMeta(data) {
-    if (data.length !== 2 || data[0] !== '\x1b' || !/[A-Z]/.test(data[1]))
-        return data;
-    return `\x1b[${data.charCodeAt(1)};4u`;
-}
 const BRACKETED_PASTE_START = '\x1b[200~';
 const BRACKETED_PASTE_END = '\x1b[201~';
 function bracketedPaste(data) {
@@ -49,7 +42,7 @@ export function decodeInboxKey(data) {
     const pasted = bracketedPaste(data);
     if (pasted !== undefined)
         return { input: pasted, key: emptyKey() };
-    const normalized = normalizeLegacyShiftedMeta(data);
+    const normalized = normalizeShiftedMeta(data);
     const parsed = parseKey(normalized);
     if (matchesKey(normalized, 'up'))
         return { input: '', key: withFlag('upArrow') };

package/dist/commands/cron.js

@@ -131,7 +131,7 @@ const addLeaf = defineLeaf({
         name: 'cron add',
         summary: 'arm a scheduled command',
         params: [
-            { kind: 'stdin', name: 'command', required: true, constraint: "Arbitrary bash the daemon runs at each fire. Pipe it from a single-quoted heredoc (`<<'EOF'`) to preserve literal bytes. Runs via `bash -c` in this cwd with $CRTR_CRON_ID, $CRTR_CRON_NAME, and $CRTR_RUN_ID in the env ($CRTR_ANCHOR too when anchored). The scheduler does not interpret it as a node action; a bash predicate can decide whether this fire acts, not arm a native predicate trigger." },
+            { kind: 'stdin', name: 'command', required: true, constraint: "Arbitrary bash the daemon runs at each fire. Pipe it from a single-quoted heredoc (`<<'EOF'`) to preserve literal bytes. Runs via `bash -c` in this cwd with $CRTR_CRON_ID, $CRTR_CRON_NAME, and $CRTR_RUN_ID in the env ($CRTR_ANCHOR too when anchored). The scheduler does not interpret it as a node action; a bash predicate can decide whether this fire acts, not arm a native predicate trigger. A run that must branch on canvas state should call `crtr --json <cmd>` and read the leaf's declared outputs, rather than parsing the prose output." },
             { kind: 'flag', name: 'name', type: 'string', required: true, constraint: 'Agent-legible label — how the cron shows in `cron list`.' },
             { kind: 'flag', name: 'at', type: 'string', required: false, constraint: 'One-shot: run the stored bash once at <when> — a duration ("90s","1h30m"), a zoned ISO ("2026-06-07T09:00:00Z"), or a bare ISO ("2026-06-07T09:00", interpreted in --tz else host zone). Exactly one of --at / --every is required. The row is deleted after its run unless the run\'s disposition pauses it.' },
             { kind: 'flag', name: 'every', type: 'string', required: false, constraint: 'Recurring: run the stored bash at each cadence — a fixed interval ("6h" — first fire one interval from now), a 5-field cron ("0 9 * * *"), or an @alias ("@daily"). Each fire is another bash run. Minimum cadence 60s. Exactly one of --at / --every is required. For a gated cron (a command that exits 75 while ineligible), pick a LONG cadence: each natural slot is only the backstop re-check, and the daemon poke supplies the latency — "6h" plus poke beats "15m" polling on both latency and cost.' },

package/dist/commands/memory/delete.js

@@ -47,7 +47,7 @@ export const deleteLeaf = defineLeaf({
         const scopeArg = input['scope'];
         let doc;
         try {
-            doc = resolveMemoryDoc(nameRaw, scopeArg !== undefined ? { scope: scopeArg } : {});
+            doc = resolveMemoryDoc(nameRaw, { includeDescendants: true, ...(scopeArg !== undefined ? { scope: scopeArg } : {}) });
         }
         catch (e) {
             if (e instanceof CrtrError && e.code === 'not_found') {

package/dist/commands/memory/find.js

@@ -34,7 +34,7 @@ function candidates(kindFilter, scopeFilter) {
         units.push(u);
     };
     const units = [];
-    for (const doc of listAllMemoryDocs(scopeFilter)) {
+    for (const doc of listAllMemoryDocs(scopeFilter, false, true)) {
         const sub = parseSubstrateDoc(doc);
         if (sub === null)
             continue;

package/dist/commands/memory/lint.js

@@ -17,6 +17,7 @@ import { isDocKind, normalizeDocName, resolveDocName, RUNGS } from '../../core/s
 import { displayName } from '../../core/substrate/ceiling.js';
 import { docLinkNames } from '../../core/memory/doc-link-grammar.js';
 import { listAllMemoryDocs } from '../../core/memory-resolver.js';
+import { descendantStoreRoots } from '../../core/nested-stores.js';
 const VALID_RUNGS = [...RUNGS];
 const RUNG_FIELDS = ['system-prompt-visibility', 'file-read-visibility'];
 /** Rung-scaled body-length caps, measured in WORDS (frontmatter excluded).
@@ -157,7 +158,7 @@ export function lintSubstrateSchema(fm) {
     // Every authored file-read surface needs an explicit event boundary. Runtime
     // parsing stays tolerant so one bad doc cannot break an agent's context.
     if (fm['file-read-visibility'] !== 'none' && appliesToGlobs === undefined) {
-        return `missing applies-to: file-read-visibility is \`${fm['file-read-visibility']}\`, so this memory must declare when it surfaces. Use \`applies-to: "."\` for context loaded when cwd or a selected profile mounts this project store, use a non-empty file glob (or YAML list) for context loaded only after a matching file is read, or set \`file-read-visibility: none\` when this memory has no file-context route. File globs match the read file's absolute path, basename, or path relative to the memory's owning project root. \`read-when\` matches file metadata but does not replace the required workspace/file boundary. Run \`crtr memory write -h\` before changing routing frontmatter.`;
+        return `missing applies-to: file-read-visibility is \`${fm['file-read-visibility']}\`, so this memory must declare when it surfaces. Use \`applies-to: "."\` for context loaded when cwd or a selected profile mounts this project store and on any file read beneath the store's owning dir, use a non-empty file glob (or YAML list) for context loaded only after a matching file is read, or set \`file-read-visibility: none\` when this memory has no file-context route. File globs match the read file's absolute path, basename, or path relative to the memory's owning project root. \`read-when\` matches file metadata but does not replace the required workspace/file boundary. Run \`crtr memory write -h\` before changing routing frontmatter.`;
     }
     // A dead on-read trigger: an explicit applies-to/read-when with nothing to
     // surface (file-read-visibility none) can never fire — flag it loudly rather
@@ -256,7 +257,7 @@ export const lintLeaf = defineLeaf({
         // Exact canonical names in the current resolvable corpus. INDEX docs also
         // expose their folded bare-directory name (`taste`, not `taste/INDEX`).
         const corpusNames = new Set();
-        for (const doc of listAllMemoryDocs(undefined, true)) {
+        for (const doc of listAllMemoryDocs(undefined, true, true)) {
             const canonical = displayName(doc.name);
             if (canonical !== '')
                 corpusNames.add(canonical);
@@ -280,6 +281,30 @@ export const lintLeaf = defineLeaf({
                     lintDir(pluginMemoryDir(plugin));
             }
         }
+        // Nested descendant stores: same schema gate, plus a boot-rung warning —
+        // the boot catalog deliberately never includes nested stores, so a
+        // system-prompt-visibility above `none` there is an inert rung.
+        for (const root of descendantStoreRoots(projectScopeRoots())) {
+            const dir = join(root, 'memory');
+            lintDir(dir);
+            if (!pathExists(dir))
+                continue;
+            for (const file of walkFiles(dir, (n) => n.endsWith('.md'), (d) => d.startsWith('.'))) {
+                if (basename(file) === 'MEMORY.md')
+                    continue;
+                let fm;
+                try {
+                    fm = parseFrontmatterGeneric(readText(file)).data;
+                }
+                catch {
+                    continue; // invalid YAML is already a finding from lintDir
+                }
+                const sys = fm?.['system-prompt-visibility'];
+                if (sys !== undefined && sys !== 'none') {
+                    warnings.push(`${file}: nested-store docs never ride the boot catalog, so this \`system-prompt-visibility\` rung is inert — set \`none\``);
+                }
+            }
+        }
         for (const scope of ['user', 'builtin']) {
             lintDir(scopeMemoryDir(scope));
             for (const plugin of listInstalledPlugins(scope)) {
@@ -363,7 +388,7 @@ export const lintLeaf = defineLeaf({
                 checked,
                 findings: findings.map((f) => ({ path: f.path, error: f.error })),
                 warnings,
-                next: 'Fix each doc (quote YAML values containing `: `; use a valid kind/rung/gate; route every non-`none` file-read rung with `applies-to: "."` for workspace-open context or a non-empty file glob for matching reads; otherwise use file-read-visibility `none`; retarget or drop dangling [[links]]; split an over-length body into [[linked]] `none`-visibility reference docs); make every profile-managed project root INDEX match the front-door contract; then re-run `crtr memory lint`.',
+                next: 'Fix each doc (quote YAML values containing `: `; use a valid kind/rung/gate; route every non-`none` file-read rung with `applies-to: "."` for workspace-open context plus reads beneath the store\'s owning dir, or a non-empty file glob for matching reads; otherwise use file-read-visibility `none`; retarget or drop dangling [[links]]; split an over-length body into [[linked]] `none`-visibility reference docs); make every profile-managed project root INDEX match the front-door contract; then re-run `crtr memory lint`.',
             });
         }
         return {

package/dist/commands/memory/list.js

@@ -4,7 +4,7 @@ import { parseSubstrateDoc } from '../../core/substrate/schema.js';
 import { isIndexName, indexDirOf } from '../../core/substrate/ceiling.js';
 import { paginate } from '../../core/pagination.js';
 import { MEMORY_KINDS, MEMORY_SCOPES, scopeRank } from './shared.js';
-export function listMemoryDocs(kindFilter, scopeFilter, quiet = false, docs = listAllMemoryDocs(scopeFilter, quiet)) {
+export function listMemoryDocs(kindFilter, scopeFilter, quiet = false, docs = listAllMemoryDocs(scopeFilter, quiet, true)) {
     const seen = new Set(); // "scope/name" → first wins
     const items = [];
     const addItem = (item) => {

package/dist/commands/memory/origin.js

@@ -37,7 +37,7 @@ export const originLeaf = defineLeaf({
         const nameRaw = input['name'];
         let doc;
         try {
-            doc = resolveMemoryDoc(nameRaw);
+            doc = resolveMemoryDoc(nameRaw, { includeDescendants: true });
         }
         catch (e) {
             if (!(e instanceof CrtrError && e.code === 'not_found'))

package/dist/commands/memory/read.js

@@ -42,7 +42,7 @@ function indexRoutes(doc) {
     const canonicalName = `${dir}/INDEX`;
     let corpus;
     try {
-        corpus = listAllMemoryDocs(undefined, true);
+        corpus = listAllMemoryDocs(undefined, true, true);
     }
     catch {
         return [];
@@ -83,7 +83,7 @@ function indexRoutes(doc) {
     for (const linkName of docLinkNames(doc.body)) {
         let linked;
         try {
-            linked = resolveMemoryDoc(linkName);
+            linked = resolveMemoryDoc(linkName, { includeDescendants: true });
         }
         catch {
             continue; // dangling link — lint's finding, not read's
@@ -142,7 +142,7 @@ export const readLeaf = defineLeaf({
         // under <pluginName>/), so this resolves every name.
         let doc;
         try {
-            doc = resolveMemoryDoc(nameRaw, { kind: kindFilter });
+            doc = resolveMemoryDoc(nameRaw, { kind: kindFilter, includeDescendants: true });
         }
         catch (e) {
             if (!(e instanceof CrtrError && e.code === 'not_found'))
@@ -169,7 +169,7 @@ export const readLeaf = defineLeaf({
                     // `resolveMemoryDoc` permits leaf-name fallback for interactive reads;
                     // a stored graph edge does not. Compare the resolved canonical name
                     // so an old shorthand never masquerades as a first-class doc link.
-                    return displayName(resolveMemoryDoc(linkName).name) === linkName;
+                    return displayName(resolveMemoryDoc(linkName, { includeDescendants: true }).name) === linkName;
                 }
                 catch {
                     return false;

package/dist/commands/memory/write.js

@@ -35,7 +35,7 @@ export const writeLeaf = defineLeaf({
             { kind: 'flag', name: 'system-prompt-visibility', type: 'enum', choices: [...VISIBILITY_RUNGS], required: false, constraint: 'Rung controlling how much of this document auto-loads into the system prompt / CLI help. Required when creating — there is no kind default; pick a rung explicitly.' },
             { kind: 'flag', name: 'file-read-visibility', type: 'enum', choices: [...VISIBILITY_RUNGS], required: false, constraint: 'Rung controlling how much surfaces through file context. Required when creating — there is no kind default. Every value except none also requires at least one applies-to route in the resulting document.' },
             { kind: 'flag', name: 'gate', type: 'string', required: false, constraint: 'Frontmatter gate — YAML/JSON object predicate over node config using the same field/matcher vocabulary described in the guide.' },
-            { kind: 'flag', name: 'applies-to', type: 'string', required: false, repeatable: true, constraint: 'One explicit file-context route per occurrence. In a project store, `.` fires when cwd/profile mounts that workspace during first-message assembly. Any other value is a glob matched after an actual file read against the absolute path, basename, and path relative to the owning project root. There is no positional fallback from where the memory file lives. Required whenever file-read-visibility is not none.' },
+            { kind: 'flag', name: 'applies-to', type: 'string', required: false, repeatable: true, constraint: 'One explicit file-context route per occurrence. In a project store, `.` fires when cwd/profile mounts that workspace during first-message assembly AND on any file read beneath the store\u2019s owning dir. Any other value is a glob matched after an actual file read against the absolute path, basename, and path relative to the owning project root. There is no positional fallback from where the memory file lives. Required whenever file-read-visibility is not none.' },
             { kind: 'flag', name: 'read-when', type: 'string', required: false, constraint: 'Frontmatter read-when — YAML/JSON object predicate over a read file’s own frontmatter using the same field/matcher vocabulary described in the guide.' },
             { kind: 'flag', name: 'slash', type: 'bool', required: false, default: false, constraint: 'Presence flags this doc invocable as a pi slash command (`/<name>`, `/` in a nested name rendered as `:`) — the doc body becomes the command’s injected prompt. Default false: most docs are consulted, not invoked.' },
             { kind: 'flag', name: 'rationale', type: 'string', required: false, constraint: 'Frontmatter rationale — the observed agent failure that made this doc necessary. Maintainer-facing only: never ships in any delivered surface (boot render, on-read injection, `memory read` content), visible only via `memory read --frontmatter`. Omitting this flag on an update PRESERVES an existing rationale unchanged.' },

package/dist/commands/sys/settings-shell.d.ts

@@ -9,7 +9,6 @@ export declare class SettingsShell implements Component, Focusable {
     private readonly models;
     private readonly keybindings;
     private readonly brokerLimits;
-    private readonly keys;
     private readonly destinations;
     private index;
     /** The rail owns the arrow keys until you step into a panel. */
@@ -18,7 +17,6 @@ export declare class SettingsShell implements Component, Focusable {
     private cachedWidth;
     private cachedHeight;
     private cachedLines;
-    private keySaveInFlight;
     onCancel?: () => void;
     constructor(tui: TUI, agentDir: string, runtime: ModelRuntime, registry: ModelRegistry, bindings: BindingResolution<BindingId>, rawKeybindings: unknown, terminalRows: () => number, rawTmuxPassthrough?: unknown);
     set focused(value: boolean);
@@ -42,7 +40,6 @@ export declare class SettingsShell implements Component, Focusable {
     /** Typing a letter on the rail jumps to the destination it starts. */
     private jumpToInitial;
     private routeToPanel;
-    private saveExaKey;
     private close;
     dispose(): void;
     private renderRail;

package/dist/commands/sys/settings-shell.js

@@ -5,11 +5,10 @@
 import { matchesKey, truncateToWidth, visibleWidth, } from "@earendil-works/pi-tui";
 import { configPath } from "../../core/config.js";
 import { formatGesture, matchesPiTuiInput, } from "../../core/keybindings/index.js";
-import { reconcileInboxFrontDoor, resolveExaKeyPath, writeExaKey, } from "./setup-core.js";
+import { reconcileInboxFrontDoor } from "./setup-core.js";
 import { runSetupSettingsProcess } from "./setup-settings-runner.js";
 import { BrokerLimitsPanel } from "./panels/broker-limits-panel.js";
 import { KeybindingsPanel } from "./panels/keybindings-panel.js";
-import { KeysPanel } from "./panels/keys-panel.js";
 import { ModelsPanel } from "./panels/models-panel.js";
 import { PAGE_CHROME_ROWS, columns, padAnsi, pageFrame, theme, } from "./panels/panel.js";
 import { PrefsPanel } from "./panels/prefs-panel.js";
@@ -27,7 +26,6 @@ export class SettingsShell {
     models;
     keybindings;
     brokerLimits;
-    keys;
     destinations;
     index = 0;
     /** The rail owns the arrow keys until you step into a panel. */
@@ -36,7 +34,6 @@ export class SettingsShell {
     cachedWidth;
     cachedHeight;
     cachedLines;
-    keySaveInFlight = false;
     onCancel;
     constructor(tui, agentDir, runtime, registry, bindings, rawKeybindings, terminalRows, rawTmuxPassthrough = undefined) {
         this.tui = tui;
@@ -49,9 +46,6 @@ export class SettingsShell {
         this.models.onChange = invalidate;
         this.keybindings = new KeybindingsPanel(bindings, rawKeybindings, rawTmuxPassthrough, terminalRows, invalidate);
         this.brokerLimits = new BrokerLimitsPanel(invalidate);
-        this.keys = new KeysPanel();
-        this.keys.onSubmit = () => this.saveExaKey();
-        this.keys.onCancel = () => this.enterRail();
         const prefs = (group, title, subtitle) => new PrefsPanel(group, title, subtitle, invalidate);
         this.destinations = [
             {
@@ -96,7 +90,6 @@ export class SettingsShell {
                 label: "Updates",
                 panel: prefs("updates", "Updates", "How crouter checks for and applies new releases."),
             },
-            { id: "keys", group: "Integrations", label: "API keys", panel: this.keys },
         ];
     }
     // --- focus and navigation -------------------------------------------------
@@ -117,7 +110,6 @@ export class SettingsShell {
     }
     syncFocus() {
         const live = this._focused && !this.railFocused;
-        this.keys.focused = live && this.current.id === "keys";
         this.keybindings.focused = live && this.current.id === "keybindings";
         this.brokerLimits.focused = live && this.current.id === "broker-limits";
     }
@@ -167,14 +159,6 @@ export class SettingsShell {
                 // Threshold fields take digits; a remapped destination gesture must
                 // never swallow a number the user is typing into a limit.
                 return /^\d+$/.test(data);
-            case "keys":
-                // The key field takes text and cursor movement; step gestures still
-                // reach the shell so the field is never a trap.
-                return ((data.length === 1 && data.charCodeAt(0) >= 32) ||
-                    matchesKey(data, "left") ||
-                    matchesKey(data, "right") ||
-                    matchesKey(data, "up") ||
-                    matchesKey(data, "down"));
             default:
                 return false;
         }
@@ -253,31 +237,12 @@ export class SettingsShell {
         if (this.current.panel.handleInput(data, match))
             this.invalidate();
     }
-    saveExaKey() {
-        if (this.keySaveInFlight)
-            return;
-        const key = this.keys.value;
-        if (key === "") {
-            this.keys.setNotice("Paste an Exa key before saving.");
-            this.invalidate();
-            return;
-        }
-        this.keySaveInFlight = true;
-        this.keys.setNotice("Saving Exa key…");
-        this.invalidate();
-        void writeExaKey(resolveExaKeyPath(), key).then(() => this.keys.setNotice("Saved Exa key.", true), (error) => this.keys.setNotice(`Could not save Exa key: ${error instanceof Error ? error.message : String(error)}`)).finally(() => {
-            this.keySaveInFlight = false;
-            this.invalidate();
-            this.tui.requestRender();
-        });
-    }
     close() {
         this.onCancel?.();
     }
     dispose() {
         this.providers.dispose();
         this.models.dispose();
-        this.keys.focused = false;
         this.keybindings.focused = false;
         this.brokerLimits.focused = false;
     }
@@ -340,8 +305,6 @@ export class SettingsShell {
                 return this.keybindings.footerHint();
             case "broker-limits":
                 return `${move} field \u00b7 type a value \u00b7 ${this.label("crtr.setup.advance")} save`;
-            case "keys":
-                return `paste the key \u00b7 ${this.label("crtr.setup.advance")} save`;
             default:
                 return `${move} row \u00b7 ${this.label("crtr.setup.toggle")} or ${this.label("crtr.setup.cell-previous")}/${this.label("crtr.setup.cell-next")} change value`;
         }

package/dist/commands/sys/settings.js

@@ -8,7 +8,7 @@ import { defineLeaf } from '../../core/command.js';
 import { BROKER_LIMIT_OVERRIDE_PRECEDENCE } from './setup.js';
 export const sysSettingsLeaf = defineLeaf({
     name: 'settings',
-    description: 'open the settings page — providers, models, keybindings, display, panes, broker limits, updates, API keys',
+    description: 'open the settings page — providers, models, keybindings, display, panes, broker limits, updates',
     whenToUse: 'a human wants to change crouter configuration interactively. Agents should use sys config get/set, which is scriptable; sys setup installs a fresh machine.',
     help: {
         name: 'sys settings',
@@ -17,10 +17,9 @@ export const sysSettingsLeaf = defineLeaf({
         output: [],
         outputKind: 'object',
         effects: [
-            'Opens a pi-tui page whose left rail groups ongoing configuration: Intelligence (providers, models), Interface (keybindings, display), Workspace (panes, broker limits, updates), and Integrations (API keys).',
+            'Opens a pi-tui page whose left rail groups ongoing configuration: Intelligence (providers, models), Interface (keybindings, display), and Workspace (panes, broker limits, updates).',
             'Preference, model-ladder and keybinding edits save to the user config as you make them; saved keybinding changes also refresh crouter-owned tmux bindings without overwriting occupied user keys.',
             `Broker warning and automatic-revive hard-cap values save under user config brokerThresholds; crtrd reads them on its next supervision tick. ${BROKER_LIMIT_OVERRIDE_PRECEDENCE}`,
-            'Saving a replacement Exa key writes it directly to ~/.crouter/exa.key. Machine installs and bootstrap remain under sys setup.',
             'Requires a TTY. Without one it prints a pointer to sys config and exits.',
         ],
     },

package/dist/commands/sys/setup-core.d.ts

@@ -2,7 +2,7 @@ import { type BindingId, type BindingResolution, type KeybindingDiagnostic, type
 export declare const OFFICIAL_MARKETPLACE_NAME = "crouter-official-marketplace";
 export declare const OFFICIAL_MARKETPLACE_URL = "https://github.com/crouton-labs/crouter-official-marketplace.git";
 export declare const OFFICIAL_MARKETPLACE_REF = "main";
-export type SetupPackageId = 'official-marketplace' | 'crtr-extensions' | 'oauth-adapter' | 'capture-plugin';
+export type SetupPackageId = 'official-marketplace' | 'crtr-extensions' | 'oauth-adapter' | 'capture-plugin' | 'search-plugin';
 /** `nerd-font` is not a command on PATH like the other two — it is an installed
  *  font face, detected by fontconfig/font-directory scan. The viewer renders
  *  every tool and command icon with Nerd Font codepoints, so without it a fresh
@@ -36,20 +36,15 @@ export interface SetupSubmission {
     packages: SetupPackageManifestEntry[];
     installedPackageIds: Set<SetupPackageId>;
     systemDeps: SetupSystemInstallPlan[];
-    exaKey: string;
-    exaKeyPath: string;
 }
 export interface SetupExecutionSummary {
     installed: string[];
     skipped: string[];
-    exaKeyWritten: boolean;
-    exaKeyPath: string;
 }
 export interface SetupInitialState {
     manifest: SetupPackageManifestEntry[];
     installedPackageIds: Set<SetupPackageId>;
     systemPlans: SetupSystemInstallPlan[];
-    exaKeyPath: string;
 }
 export interface KeybindingEditResult {
     readonly ok: boolean;
@@ -96,15 +91,6 @@ export declare function detectCommandOnPath(command: string): boolean;
 export declare function detectPackageManager(platform?: NodeJS.Platform, commandExists?: (command: string) => boolean): PackageManager;
 export declare function buildSystemInstallPlan(tool: SetupTool, packageManager: PackageManager, commandExists?: (command: string) => boolean): SetupSystemInstallPlan;
 export declare function resolveSettingsPath(homeDir?: string): string;
-export declare function resolveExaKeyPath(homeDir?: string): string;
-/** Where an already-present API key is resolved from — env var wins over the
- *  key file, matching the runtime resolver in search/exa.ts. */
-export type ApiKeySource = 'env' | 'file';
-export interface ApiKeyPresence {
-    present: boolean;
-    source?: ApiKeySource;
-}
-export declare function detectExaKey(homeDir?: string): ApiKeyPresence;
 export declare function buildSetupInitialState(opts?: {
     manifest?: SetupPackageManifestEntry[];
     settingsPath?: string;
@@ -112,8 +98,7 @@ export declare function buildSetupInitialState(opts?: {
     packageManager?: PackageManager;
     commandExists?: (command: string) => boolean;
 }): SetupInitialState;
-export declare function renderSetupStaticInstructions(state: Pick<SetupInitialState, 'manifest' | 'installedPackageIds' | 'systemPlans' | 'exaKeyPath'>): string;
-export declare function writeExaKey(exaKeyPath: string, exaKey: string): Promise<void>;
+export declare function renderSetupStaticInstructions(state: SetupInitialState): string;
 /** Refresh crouter-owned tmux bindings. Setup must never fail because tmux is unavailable. */
 export declare function reconcileInboxFrontDoor(): Promise<void>;
 export declare function formatSetupExecutionSummary(summary: SetupExecutionSummary): string;

package/dist/commands/sys/setup-core.js

@@ -1,6 +1,4 @@
 import { spawnSync } from 'node:child_process';
-import { chmod, mkdir, writeFile } from 'node:fs/promises';
-import { readFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { basename, dirname, join, resolve } from 'node:path';
 import { isDeepStrictEqual } from 'node:util';
@@ -193,18 +191,25 @@ const PACKAGE_COPY = {
         shortDescription: 'crtr plugin mounting `crtr capture` — browser automation and UI measurement over CDP.',
         longDescription: 'Installs the `capture` plugin from the official crtr marketplace. It mounts `crtr capture` as a transparent passthrough to the external Capture CLI (`npm install -g @crouton-kit/capture`) for CDP screenshots, rendered-geometry measurement, HAR, accessibility trees, and JS execution against a live page. Uncheck it on a machine where agents never drive a browser — the command then costs nothing in their root prompt.',
     },
+    'search-plugin': {
+        name: 'search',
+        shortDescription: 'crtr plugin mounting `crtr search` — public-web discovery, grounded answers, and content extraction.',
+        longDescription: 'Installs the `search` plugin from the official crtr marketplace. It mounts `crtr search` and calls Exa directly, resolving its own API key from EXA_API_KEY or ~/.crouter/exa.key — crouter never handles that credential. Uncheck it on a machine whose agents get web search from somewhere else, such as a Northlight home where the platform serves `crtr search` from its own plugin.',
+    },
 };
 const PACKAGE_SOURCES = {
     'official-marketplace': { kind: 'marketplace-source', source: OFFICIAL_MARKETPLACE_URL },
     'crtr-extensions': { kind: 'local-path', source: builtinPiPackageDir('pi-crtr-extensions') },
     'oauth-adapter': { kind: 'npm', source: 'npm:pi-claude-oauth-adapter@0.1.2' },
     'capture-plugin': { kind: 'marketplace-plugin', source: 'crouter-official-marketplace/capture' },
+    'search-plugin': { kind: 'marketplace-plugin', source: 'crouter-official-marketplace/search' },
 };
 const LOCAL_PACKAGE_NAME_ALIASES = {
     'official-marketplace': [],
     'crtr-extensions': ['pi-crtr-extensions'],
     'oauth-adapter': [],
     'capture-plugin': [],
+    'search-plugin': [],
 };
 export function buildSetupManifest(resolveBuiltinPackageDir = builtinPiPackageDir) {
     // Order matters at execution: the marketplace source registers before the
@@ -214,6 +219,7 @@ export function buildSetupManifest(resolveBuiltinPackageDir = builtinPiPackageDi
         'crtr-extensions',
         'oauth-adapter',
         'capture-plugin',
+        'search-plugin',
     ].map((id) => {
         const copy = PACKAGE_COPY[id];
         const source = PACKAGE_SOURCES[id].kind === 'local-path'
@@ -394,22 +400,6 @@ export function buildSystemInstallPlan(tool, packageManager, commandExists = det
 export function resolveSettingsPath(homeDir = homedir()) {
     return join(homeDir, '.pi', 'agent', 'settings.json');
 }
-export function resolveExaKeyPath(homeDir = homedir()) {
-    return join(homeDir, '.crouter', 'exa.key');
-}
-function detectApiKey(envVar, keyPath) {
-    if ((process.env[envVar] ?? '').trim() !== '')
-        return { present: true, source: 'env' };
-    try {
-        if (readFileSync(keyPath, 'utf8').trim() !== '')
-            return { present: true, source: 'file' };
-    }
-    catch { /* absent/unreadable → not present */ }
-    return { present: false };
-}
-export function detectExaKey(homeDir = homedir()) {
-    return detectApiKey('EXA_API_KEY', resolveExaKeyPath(homeDir));
-}
 export function buildSetupInitialState(opts = {}) {
     const homeDir = opts.homeDir ?? homedir();
     const settingsPath = opts.settingsPath ?? resolveSettingsPath(homeDir);
@@ -421,7 +411,7 @@ export function buildSetupInitialState(opts = {}) {
     const commandExists = opts.commandExists ?? detectCommandOnPath;
     const packageManager = opts.packageManager ?? detectPackageManager(process.platform, commandExists);
     const systemPlans = ['tmux', 'nvim', 'nerd-font'].map((tool) => buildSystemInstallPlan(tool, packageManager, commandExists));
-    return { manifest, installedPackageIds, systemPlans, exaKeyPath: resolveExaKeyPath(homeDir) };
+    return { manifest, installedPackageIds, systemPlans };
 }
 export function renderSetupStaticInstructions(state) {
     const packageLines = state.manifest.map((entry) => {
@@ -446,8 +436,6 @@ export function renderSetupStaticInstructions(state) {
         'System deps:',
         ...systemLines,
         '',
-        `- Exa key: write to ${state.exaKeyPath} or set EXA_API_KEY`,
-        '',
         `Inbox: the inbox-toggle key (${inboxShortcut() ?? 'disabled'}) is a crouter keybinding — view or rebind it in \`crtr sys settings\`; it is installed on the same tmux server as every other crouter binding.`,
         'Run `crtr sys setup` in a TTY to open the wizard.',
     ].join('\n') + '\n';
@@ -474,11 +462,6 @@ function ensureManagedRenderer() {
     ensureRenderer();
     return isRendererReady() ? 'provisioned' : 'unavailable';
 }
-export async function writeExaKey(exaKeyPath, exaKey) {
-    await mkdir(dirname(exaKeyPath), { recursive: true });
-    await writeFile(exaKeyPath, `${exaKey}\n`, 'utf8');
-    await chmod(exaKeyPath, 0o600).catch(() => undefined);
-}
 /** Refresh crouter-owned tmux bindings. Setup must never fail because tmux is unavailable. */
 export async function reconcileInboxFrontDoor() {
     try {
@@ -491,7 +474,6 @@ export function formatSetupExecutionSummary(summary) {
         'crtr sys setup complete',
         summary.installed.length > 0 ? `installed: ${summary.installed.join(', ')}` : 'installed: none',
         summary.skipped.length > 0 ? `skipped: ${summary.skipped.join(', ')}` : 'skipped: none',
-        summary.exaKeyWritten ? `exa key written: ${summary.exaKeyPath}` : 'exa key written: no',
     ].join('\n') + '\n';
 }
 /** Marketplace manifest entries already present in any scope — the marketplace
@@ -587,17 +569,11 @@ export async function executeSetupSubmission(submission) {
             skippedPackages.push('termrender renderer (unavailable — install uv)');
             break;
     }
-    const exaKeyWritten = submission.exaKey.trim() !== '';
-    if (exaKeyWritten) {
-        await writeExaKey(submission.exaKeyPath, submission.exaKey);
-    }
     // A fresh-machine run can install tmux after preflight reconciliation, so
     // refresh the front-door bindings once the setup transaction has completed.
     await reconcileInboxFrontDoor();
     return {
         installed: [...installedPackages, ...installedSystemDeps],
         skipped: [...skippedPackages, ...skippedSystemDeps],
-        exaKeyWritten,
-        exaKeyPath: submission.exaKeyPath,
     };
 }

package/dist/commands/sys/setup-wizard.d.ts

@@ -10,7 +10,6 @@ export declare class SetupWizard implements Component, Focusable {
     private readonly providers;
     private readonly plugins;
     private readonly dependencies;
-    private readonly keys;
     private step;
     private confirming;
     private cachedWidth;
@@ -24,7 +23,6 @@ export declare class SetupWizard implements Component, Focusable {
     set focused(value: boolean);
     get focused(): boolean;
     invalidate(): void;
-    private syncFocus;
     private matches;
     private label;
     /** Gestures safe to advertise while a text field owns the keyboard. */
@@ -40,7 +38,7 @@ export declare class SetupWizard implements Component, Focusable {
     private finalize;
     private currentPanel;
     handleInput(data: string): void;
-    /** `Providers › Plugins › Dependencies › Exa key`, active step lit, done
+    /** `Providers › Plugins › Dependencies`, active step lit, done
      *  steps checked — a first run should always show how much is left. */
     private renderTrail;
     private footer;