@pellux/goodvibes-tui 0.19.0 → 0.19.3

package/CHANGELOG.md

@@ -4,14 +4,78 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [0.19.3] - 2026-04-18
+
+### Fixed
+- Extracted CLI flag parsing (`--provider`, `--model`) from `src/main.ts` and `src/daemon/cli.ts` into a shared `src/cli-flags.ts` module. `src/main.ts` now passes the 800-line architecture-check gate that was tripped in 0.19.1 and 0.19.2 (CI failures on both prior releases).
+
+### Changed
+- No user-visible behavior change. Pure structural refactor.
+
+### Note
+- `v0.19.1` and `v0.19.2` GitHub releases have 0 binary assets due to the architecture-check CI failure. Consumers should upgrade to `0.19.3` for access to the binaries + consistent release state.
+
+---
+
+## [0.19.2] — 2026-04-18
+
+### Fixed
+- Daemon test: `channel account APIs expose surface auth and secret posture` — corrected
+  `GET /api/providers` assertions from legacy `providerId` field to current `id` field
+  (SDK 0.21.x provider-routes.ts renamed the field). The subscription-oauth auth routes
+  assertion was dropped from the list endpoint (it only exists on per-provider snapshots).
+- Model picker now correctly surfaces `configuredVia='secrets'` tier as `[key]` badge
+  (previously all secrets-manager-keyed providers were collapsed to `[env]`). Secrets are
+  pre-resolved async before the picker renders; `secretsManager` is now threaded from
+  `RuntimeServices` through `wireShellUiOpeners`.
+
+---
+
+## [0.19.1] — 2026-04-17
+
+### Changed
+- Upgraded `@pellux/goodvibes-sdk` from 0.21.1 to 0.21.6 — includes secrets-tier
+  `configuredVia` discriminator, HTTP `/api/providers` + `/api/providers/current` (GET/PATCH),
+  reactive `model.changed` SSE event, `BUILTIN_LABEL_MAP` brand-accurate provider labels,
+  and clean unconfigured-provider errors instead of silent 401 pass-through.
+
+### Added
+- `--provider <id>` and `--model <registryKey>` CLI flags for daemon startup
+  (`goodvibes-daemon`) and TUI shell startup (`goodvibes`). Both override
+  `~/.goodvibes/tui/settings.json` provider/model values for the session.
+  If `--model provider:modelId` format is used, `--provider` is inferred automatically.
+- TUI model picker now populates `configuredVia` per provider and renders it as
+  a badge (`[env]`, `[sub]`, `[anon]`) in the provider-browse view, derived from
+  env-var presence and active OAuth subscription sessions.
+
+### Fixed
+- **Venice-picking diagnosis**: the silent 401 Venice fallback was caused by the
+  pre-0.21.2 SDK passing unconfigured-provider requests through to the upstream API
+  unchanged. As of 0.21.2 (included in 0.21.6), `createCompanionProviderAdapter` now
+  checks `provider.isConfigured()` before `provider.chat()` and yields a structured
+  error immediately. The in-registry fallback to first-selectable-model (which may
+  resolve to venice on some installs) only triggers when `getCurrentModel()` cannot
+  find the stored `currentModelId` in the model registry — typically an old daemon
+  instance with stale config. Restarting the daemon after a settings.json change
+  resolves this; the `--model` CLI flag eliminates the need to edit settings.json
+  manually. ConfigManager reactivity (live disk-change → registry update) is out of
+  scope: the PATCH `/api/providers/current` route is the correct live-switch path
+  (calls `setCurrentModel()` + `configManager.set()` atomically).
+
+
 ## [0.19.0] — 2026-04-18
 
 ### Changed
 - Upgraded `@pellux/goodvibes-sdk` from 0.19.6 to 0.21.1 (soak-period release).
-  TUI adaptation required: regenerated `docs/foundation-artifacts/operator-contract.json`
-  to match the updated `buildOperatorContract()` output in the new SDK version.
-  `peer-contract.json`, `knowledge-graphql.graphql`, and `knowledge-store.sql` were
-  unchanged by this SDK bump.
+  TUI adaptations required:
+  1. `docs/foundation-artifacts/operator-contract.json` — regenerated to match
+     updated `buildOperatorContract()` output (`peer-contract.json`, knowledge
+     artifacts unchanged).
+  2. `scripts/perf-check.ts` — `platform/runtime/perf/index` barrel removed;
+     `createPerfMonitor()` factory removed; migrated to `new PerfMonitor()` with
+     imports split to `perf/monitor` and `perf/reporter` sub-paths.
+  3. `scripts/eval-gate.ts` — `platform/runtime/eval/index` barrel removed;
+     imports split to `eval/baseline`, `eval/format`, and `eval/scorecard`.
 
 ### Added
 - Wave B panel migration: migrated 5 panels (knowledge, marketplace, memory,

package/README.md

@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-0.19.0-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-0.19.3-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 A terminal-native AI coding, operations, automation, knowledge, and integration console with a typed runtime, omnichannel surfaces, structured memory/knowledge, and a raw ANSI renderer.
 

package/docs/foundation-artifacts/operator-contract.json

@@ -3,7 +3,7 @@
   "product": {
     "id": "goodvibes",
     "surface": "operator",
-    "version": "0.21.1"
+    "version": "0.21.6"
   },
   "auth": {
     "modes": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "0.19.0",
+  "version": "0.19.3",
   "description": "Terminal-native GoodVibes product for coding, operations, automation, knowledge, channels, and daemon-backed control-plane workflows.",
   "type": "module",
   "main": "src/main.ts",
@@ -89,7 +89,7 @@
     "@anthropic-ai/vertex-sdk": "^0.16.0",
     "@ast-grep/napi": "^0.42.0",
     "@aws/bedrock-token-generator": "^1.1.0",
-    "@pellux/goodvibes-sdk": "0.21.1",
+    "@pellux/goodvibes-sdk": "0.21.6",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
     "graphql": "^16.13.2",

package/src/cli-flags.ts

@@ -0,0 +1,48 @@
+// ---------------------------------------------------------------------------
+// Shared CLI flag parsing for TUI shell and daemon entrypoints.
+// ---------------------------------------------------------------------------
+
+export type CliFlags = {
+  readonly provider: string | undefined;
+  readonly model: string | undefined;
+};
+
+/**
+ * Parse `--provider` / `--model` / `--help` flags from an argv slice.
+ *
+ * @param argv   - argv array (pass `process.argv.slice(2)`)
+ * @param binary - binary name shown in the --help usage line (e.g. "goodvibes" or "goodvibes-daemon")
+ */
+export function parseCliFlags(argv: readonly string[], binary = 'goodvibes'): CliFlags {
+  let provider: string | undefined;
+  let model: string | undefined;
+
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (arg === '--help' || arg === '-h') {
+      // eslint-disable-next-line no-console
+      console.log([
+        `Usage: ${binary} [options]`,
+        '',
+        'Options:',
+        '  --provider <id>          Override the provider from settings.json at startup',
+        '  --model <registryKey>    Override the model from settings.json at startup',
+        '                           Format: provider:modelId (e.g. inception:mercury-2)',
+        '                           If provider:modelId format is used, --provider is inferred',
+        '  --help, -h               Show this help message',
+      ].join('\n'));
+      process.exit(0);
+    }
+    if (arg === '--provider' && argv[i + 1] !== undefined) {
+      provider = argv[++i];
+    } else if (arg === '--model' && argv[i + 1] !== undefined) {
+      model = argv[++i];
+      // Infer provider from registryKey format (provider:modelId) if --provider not given
+      if (typeof model === 'string' && model.includes(':') && provider === undefined) {
+        provider = model.split(':')[0];
+      }
+    }
+  }
+
+  return { provider, model };
+}

package/src/daemon/cli.ts

@@ -17,11 +17,14 @@ import {
 } from '@pellux/goodvibes-sdk/platform/pairing/index';
 import { generateQrMatrix, renderQrToString } from '@pellux/goodvibes-sdk/platform/pairing/qr-generator';
 
+import { parseCliFlags } from '../cli-flags.ts';
 type DaemonCliOwnership = {
   readonly workingDirectory: string;
   readonly homeDirectory: string;
 };
 
+// CLI flag parsing delegated to shared module — see src/cli-flags.ts
+
 type DaemonCliTokens = {
   readonly daemonToken: string | undefined;
   readonly httpToken: string | undefined;
@@ -72,6 +75,17 @@ async function main(): Promise<void> {
   const { workingDirectory: workingDir, homeDirectory } = resolveDaemonCliOwnership();
   const config = new ConfigManager({ workingDir, homeDir: homeDirectory, surfaceRoot: 'tui' });
   new GlobalNetworkTransportInstaller().install(config);
+
+  // Apply CLI flags — override settings.json before the provider registry is constructed
+  const cliFlags = parseCliFlags(process.argv.slice(2), 'goodvibes-daemon');
+  if (cliFlags.provider !== undefined) {
+    config.set('provider.provider', cliFlags.provider);
+    logger.info('daemon: --provider flag applied', { provider: cliFlags.provider });
+  }
+  if (cliFlags.model !== undefined) {
+    config.set('provider.model', cliFlags.model);
+    logger.info('daemon: --model flag applied', { model: cliFlags.model });
+  }
   const runtimeBus = new RuntimeEventBus();
   const runtimeStore = createRuntimeStore();
   const runtimeServices = createRuntimeServices({

package/src/input/model-picker.ts

@@ -99,6 +99,8 @@ export interface PickerItem {
   isFree?: boolean;
   /** True when this provider item has a configured API key. */
   isConfigured?: boolean;
+  /** How the provider is configured — shown as a badge in provider mode. */
+  configuredVia?: 'env' | 'secrets' | 'subscription' | 'anonymous';
 }
 
 /** Provider IDs treated as "Popular" in the provider picker. */
@@ -166,6 +168,8 @@ export class ModelPickerModal {
   public availableOnly = true;
   /** Set of provider names that have a configured key (used for availableOnly filter). */
   public configuredProviders: Set<string> = new Set();
+  /** How each provider is configured — drives badge display in provider mode. */
+  public configuredViaMap: Map<string, 'env' | 'secrets' | 'subscription' | 'anonymous'> = new Map();
   /** IDs of pinned/favorite models — shown at top of list. */
   public pinnedIds: Set<string> = new Set();
   /** IDs of recently used models — shown after pinned, before the rest. */
@@ -612,13 +616,13 @@ export class ModelPickerModal {
       if (filteredPopular.length > 0) {
         providerItems.push({ id: '__header__popular', label: 'Popular', isGroupHeader: true });
         for (const p of filteredPopular) {
-          providerItems.push({ id: p, label: p, isConfigured: this.configuredProviders.has(p) });
+          providerItems.push({ id: p, label: p, isConfigured: this.configuredProviders.has(p), configuredVia: this.configuredViaMap.get(p) });
         }
       }
       if (filteredAll.length > 0) {
         providerItems.push({ id: '__header__all', label: 'All Providers', isGroupHeader: true });
         for (const p of filteredAll) {
-          providerItems.push({ id: p, label: p, isConfigured: this.configuredProviders.has(p) });
+          providerItems.push({ id: p, label: p, isConfigured: this.configuredProviders.has(p), configuredVia: this.configuredViaMap.get(p) });
         }
       }
 

package/src/main.ts

@@ -1,6 +1,4 @@
 #!/usr/bin/env bun
-// Main shell entrypoint. Composition-heavy startup remains here, with
-// lower-level session/bootstrap/input helpers extracted into focused modules.
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { Compositor } from './renderer/compositor.ts';
@@ -54,7 +52,7 @@ import { deriveComposerState } from './core/composer-state.ts';
 import { buildPersistedSessionContext, formatReturnContextForDisplay, getReturnContextMode, maybeAssistReturnContextSummary } from '@pellux/goodvibes-sdk/platform/runtime/session-return-context';
 import { GlobalNetworkTransportInstaller } from '@pellux/goodvibes-sdk/platform/runtime/network/index';
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils/error-display';
-
+import { parseCliFlags } from './cli-flags.ts';
 
 const ALT_SCREEN_ENTER = '\x1b[?1049h';
 const ALT_SCREEN_EXIT  = '\x1b[?1049l';
@@ -95,10 +93,16 @@ async function main() {
   });
   new GlobalNetworkTransportInstaller().install(configManager);
 
-  // ── Bootstrap all runtime subsystems ─────────────────────────────────────
-  // bootstrapRuntime initializes all subsystems in dependency order and returns
-  // a fully-wired BootstrapContext. main.ts owns terminal setup, the render loop,
-  // stdin input, and signal handlers — everything else is in bootstrap.
+  // Apply CLI flags — override settings.json before the provider registry is constructed
+  const cliFlags = parseCliFlags(process.argv.slice(2), 'goodvibes');
+  if (cliFlags.provider !== undefined) {
+    configManager.set('provider.provider', cliFlags.provider);
+  }
+  if (cliFlags.model !== undefined) {
+    configManager.set('provider.model', cliFlags.model);
+  }
+
+  // ── Bootstrap runtime subsystems via bootstrapRuntime.
   const ctx: BootstrapContext = await bootstrapRuntime(stdout, {
     configManager,
     workingDir: bootstrapWorkingDir,
@@ -128,7 +132,7 @@ async function main() {
   } = ctx;
   const workingDir = ctx.services.workingDirectory;
   const homeDirectory = ctx.services.homeDirectory;
-  const { approvalBroker, agentManager, modeManager, processManager, providerRegistry } = ctx.services;
+  const { approvalBroker, agentManager, modeManager, processManager, providerRegistry, secretsManager, subscriptionManager } = ctx.services;
   conversation.setSessionMemoryStore(ctx.services.sessionMemoryStore);
   conversation.setSessionLineageTracker(ctx.services.sessionLineageTracker);
   orchestrator.setCoreServices({
@@ -381,9 +385,6 @@ async function main() {
     });
 
   // ── InputHandler — created here so getViewportHeight can reference it ──────
-  // orchestratorRefs.getViewportHeight and .scrollToEnd are patched immediately after.
-
-  // ── InputHandler ────────────────────────────────────────────────────────
   const input: InputHandler = new InputHandler(
     () => render(),
     selection,
@@ -450,7 +451,6 @@ async function main() {
     toolCount,
   };
 
-  // Sessions start fresh — use /session resume to load a previous session
 
   // --- Render function ---
   const render = () => {
@@ -462,7 +462,6 @@ async function main() {
     const sessionSnapshot = uiServices.readModels.session.getSnapshot();
     const agentSnapshot = uiServices.readModels.agents.getSnapshot();
 
-
     // Build header and footer FIRST so we know the exact viewport height
     const headerLines = UIFactory.createHeader(width, currentModel.id, currentModel.provider, conversation.title || undefined, lastGitInfoRef.value);
     const managerAgents = agentManager.list().filter(
@@ -683,7 +682,8 @@ async function main() {
     runtime,
     featureFlags: ctx.featureFlags,
     mcpRegistry: ctx.services.mcpRegistry,
-    subscriptionManager: ctx.services.subscriptionManager,
+    subscriptionManager,
+    secretsManager,
     serviceRegistry: ctx.services.serviceRegistry,
     getConfiguredProviderIds: ctx._getConfiguredProviderIds,
     getPinned: ctx._getPinned,
@@ -691,6 +691,7 @@ async function main() {
   });
 
   // --- Streaming speed + tool preview wiring ---
+  const refreshGit = () => gitStatusProvider.refresh().then((info) => { lastGitInfoRef.value = info; render(); }).catch(() => { /* non-fatal */ });
   // Refresh git status after each turn completes or after tool results arrive
   unsubs.push(uiServices.events.turns.on('TURN_COMPLETED', () => {
     // Auto-save after every LLM turn so kills don't lose the session
@@ -707,22 +708,13 @@ async function main() {
       );
       hookDispatcher.fire({ path: 'Lifecycle:session:save' as HookEventPath, phase: 'Lifecycle' as HookPhase, category: 'session' as HookCategory, specific: 'save', sessionId: runtime.sessionId, timestamp: Date.now(), payload: { sessionId: runtime.sessionId } }).catch((err: unknown) => logger.debug('hook fire error', { error: summarizeError(err) }));
     } catch (e) { logger.debug('auto-save on turn:complete failed', { error: summarizeError(e) }); }
-    gitStatusProvider.refresh().then((info) => {
-      lastGitInfoRef.value = info;
-      render();
-    }).catch(() => { /* non-fatal */ });
+    refreshGit();
   }));
   unsubs.push(uiServices.events.tools.on('TOOL_SUCCEEDED', () => {
-    gitStatusProvider.refresh().then((info) => {
-      lastGitInfoRef.value = info;
-      render();
-    }).catch(() => { /* non-fatal */ });
+    refreshGit();
   }));
   unsubs.push(uiServices.events.tools.on('TOOL_FAILED', () => {
-    gitStatusProvider.refresh().then((info) => {
-      lastGitInfoRef.value = info;
-      render();
-    }).catch(() => { /* non-fatal */ });
+    refreshGit();
   }));
 
   unsubs.push(uiServices.events.turns.on('STREAM_START', () => {

package/src/renderer/model-picker-overlay.ts

@@ -294,12 +294,19 @@ export function renderModelPickerOverlay(
         const isSelected = selectableIdx === picker.selectedIndex;
         const indicator = isSelected ? `${OVERLAY_GLYPHS.selected} ` : '  ';
         const checkmark = item.isConfigured ? '✓ ' : '  ';
-        const labelW = contentW - 2 - 2; // indicator(2) + checkmark(2)
+        // configuredVia badge: right-aligned short label (env/sub/anon)
+        const viaBadge = item.configuredVia === 'env' ? ' [env]'
+          : item.configuredVia === 'secrets' ? ' [key]'
+          : item.configuredVia === 'subscription' ? ' [sub]'
+          : item.configuredVia === 'anonymous' ? ' [anon]'
+          : '';
+        const badgeW = viaBadge.length;
+        const labelW = contentW - 2 - 2 - badgeW; // indicator(2) + checkmark(2) + badge
         const labelStr = item.label.length > labelW
           ? item.label.slice(0, labelW - 3) + '...'
           : item.label.padEnd(labelW);
         const row = createOverlayContentLine(width, layout, borderFg, isSelected ? selectedBg : DEFAULT_OVERLAY_PALETTE.bodyBg);
-        const rowText = indicator + checkmark + labelStr;
+        const rowText = indicator + checkmark + labelStr + viaBadge;
         putRowText(row, layout.margin + 2, contentW, fitDisplay(truncateDisplay(rowText, contentW), contentW), isSelected ? titleFg : bodyFg, isSelected ? selectedBg : DEFAULT_OVERLAY_PALETTE.bodyBg, isSelected);
         lines.push(row);
       }

package/src/shell/ui-openers.ts

@@ -8,6 +8,7 @@ import type { MutableRuntimeState } from '@pellux/goodvibes-sdk/platform/runtime
 import type { FeatureFlagManager } from '@pellux/goodvibes-sdk/platform/runtime/feature-flags/index';
 import type { McpRegistry } from '@pellux/goodvibes-sdk/platform/mcp/registry';
 import type { SubscriptionManager } from '@pellux/goodvibes-sdk/platform/config/subscriptions';
+import type { SecretsManager } from '@pellux/goodvibes-sdk/platform/config/secrets';
 import type { ServiceInspectionQuery } from '../runtime/ui-service-queries.ts';
 
 type WireShellUiOpenersOptions = {
@@ -21,12 +22,57 @@ type WireShellUiOpenersOptions = {
   featureFlags: FeatureFlagManager;
   mcpRegistry: McpRegistry;
   subscriptionManager: SubscriptionManager;
+  secretsManager?: Pick<SecretsManager, 'get'>;
   serviceRegistry: Pick<ServiceInspectionQuery, 'getAll'>;
   getConfiguredProviderIds: () => string[];
   getPinned: () => Promise<string[]>;
   render: () => void;
 };
 
+/**
+ * Derive the configuredVia tier for a provider.
+ * Tier order mirrors SDK provider-routes.ts: env → secrets → subscription → undefined.
+ * The preResolvedSecretKeys set is pre-fetched async before the sync picker render cycle.
+ */
+function deriveConfiguredVia(
+  providerId: string,
+  configuredIds: Set<string>,
+  subscriptionManager: SubscriptionManager,
+  preResolvedSecretKeys?: ReadonlySet<string>,
+): 'env' | 'secrets' | 'subscription' | 'anonymous' | undefined {
+  if (!configuredIds.has(providerId)) return undefined;
+
+  // Tier 1: subscription check (most specific — subscription overrides env for this provider)
+  const subs = subscriptionManager.list();
+  if (subs.some((s) => s.provider === providerId)) return 'subscription';
+
+  // Tier 2: env-var present (process.env check; anonymous providers don't appear in configuredIds)
+  // We don't have BUILTIN_PROVIDER_ENV_KEYS here; if env was used the configuredIds path covers it.
+  // The presence in configuredIds and no subscription → either env or secrets.
+  // Tier 3: secrets-manager backed (pre-resolved async batch)
+  if (preResolvedSecretKeys && preResolvedSecretKeys.has(providerId)) return 'secrets';
+
+  return 'env';
+}
+
+/**
+ * Build a configuredViaMap for the given provider list.
+ * Pass preResolvedSecretKeys (from an async SecretsManager batch) to surface the 'secrets' tier.
+ */
+function buildConfiguredViaMap(
+  providers: string[],
+  configuredIds: Set<string>,
+  subscriptionManager: SubscriptionManager,
+  preResolvedSecretKeys?: ReadonlySet<string>,
+): Map<string, 'env' | 'secrets' | 'subscription' | 'anonymous'> {
+  const map = new Map<string, 'env' | 'secrets' | 'subscription' | 'anonymous'>();
+  for (const p of providers) {
+    const via = deriveConfiguredVia(p, configuredIds, subscriptionManager, preResolvedSecretKeys);
+    if (via !== undefined) map.set(p, via);
+  }
+  return map;
+}
+
 export function wireShellUiOpeners(options: WireShellUiOpenersOptions): void {
   const {
     commandContext,
@@ -39,30 +85,61 @@ export function wireShellUiOpeners(options: WireShellUiOpenersOptions): void {
     featureFlags,
     mcpRegistry,
     subscriptionManager,
+    secretsManager,
     serviceRegistry,
     getConfiguredProviderIds,
     getPinned,
     render,
   } = options;
 
+  /**
+   * Pre-resolve which provider IDs have secrets-manager keys (async batch, SDK tier pattern).
+   * Returns a set of provider IDs (not env var names) that are secrets-backed.
+   * Falls back to empty set if secretsManager is not provided.
+   */
+  async function resolveSecretProviderIds(): Promise<ReadonlySet<string>> {
+    if (!secretsManager) return new Set<string>();
+    const configuredIds = new Set(getConfiguredProviderIds());
+    // For each configured provider, check if secretsManager has a key for it by provider ID.
+    // We use provider ID as the lookup key since we don't have BUILTIN_PROVIDER_ENV_KEYS here.
+    const results = await Promise.all(
+      [...configuredIds].map(async (providerId) => {
+        const val = await secretsManager.get(providerId).catch(() => null);
+        return val !== null ? providerId : null;
+      }),
+    );
+    return new Set(results.filter((v): v is string => v !== null));
+  }
+
   commandContext.openModelPicker = () => {
-    const models = providerRegistry.getSelectableModels();
-    input.modelPicker.configuredProviders = new Set(getConfiguredProviderIds());
-    void getPinned().then((pinned) => {
-      input.modelPicker.pinnedIds = new Set(pinned);
-    });
-    void input.modelPicker.loadRecentModels().catch(() => {}); // best-effort: prefetch for UI, failure is non-visible
-    input.modalOpened('modelPicker');
-    input.modelPicker.openAllModels(models, runtime.model);
-    render();
+    void (async () => {
+      const models = providerRegistry.getSelectableModels();
+      const configuredIds = new Set(getConfiguredProviderIds());
+      input.modelPicker.configuredProviders = configuredIds;
+      const providerIds = [...new Set(models.map((m) => m.provider))];
+      const secretProviderIds = await resolveSecretProviderIds();
+      input.modelPicker.configuredViaMap = buildConfiguredViaMap(providerIds, configuredIds, subscriptionManager, secretProviderIds);
+      void getPinned().then((pinned) => {
+        input.modelPicker.pinnedIds = new Set(pinned);
+      });
+      void input.modelPicker.loadRecentModels().catch(() => {}); // best-effort: prefetch for UI, failure is non-visible
+      input.modalOpened('modelPicker');
+      input.modelPicker.openAllModels(models, runtime.model);
+      render();
+    })();
   };
 
   commandContext.openProviderPicker = () => {
-    const providers = [...new Set(providerRegistry.listModels().map((model) => model.provider))];
-    input.modelPicker.configuredProviders = new Set(getConfiguredProviderIds());
-    input.modalOpened('modelPicker');
-    input.modelPicker.openProviders(providers, runtime.provider);
-    render();
+    void (async () => {
+      const providers = [...new Set(providerRegistry.listModels().map((model) => model.provider))];
+      const configuredIds = new Set(getConfiguredProviderIds());
+      input.modelPicker.configuredProviders = configuredIds;
+      const secretProviderIds = await resolveSecretProviderIds();
+      input.modelPicker.configuredViaMap = buildConfiguredViaMap(providers, configuredIds, subscriptionManager, secretProviderIds);
+      input.modalOpened('modelPicker');
+      input.modelPicker.openProviders(providers, runtime.provider);
+      render();
+    })();
   };
 
   commandContext.openSelection = (title, items, opts, callback) => {

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '0.19.0';
+let _version = '0.19.3';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8'));
   _version = pkg.version ?? _version;