@quickchatai/quickreview 0.0.0-stage → 1.2.0

package/dist/extensions/login-route.js

@@ -0,0 +1,180 @@
+// login-route — a pi that has no usable model login says so, and opens pi's
+// own /login; a pi whose model names one OpenAI provider while the person
+// logged in with the other runs the same model on the login that exists.
+//
+// Loaded by every CLI pi Quickreview starts for a person: the onboarding
+// wizard (registered by extensions/onboarding.ts, which opens the login for
+// the person), the companion, a takeover and a debug round (the env shim
+// extensions/cli/login-route.ts, which prefills it). An SDK session needs none
+// of this: PiHost routes its model the same way (packages/pi-plugin/src/engine/pisdk.ts).
+//
+// Three behaviours, each on pi's own API:
+//   - Model route. On session_start and before every prompt (the `input`
+//     event, which pi runs before it checks the model's credential), a model
+//     whose provider has no credential is switched to its OpenAI twin when the
+//     twin has one and serves the same id (packages/pi-plugin/src/modelroute.ts).
+//     The provider the spec names always wins when its login exists, so an
+//     install that works today is untouched. pi.setModel does not persist the
+//     switch to settings.
+//   - Login hint. When no usable model is left, a widget says exactly what to
+//     do, and pi's input line holds `/login`, so one Enter opens pi's login.
+//     The widget clears once a model is selected (`model_select`).
+//   - Open (the wizard only). pi runs `/login` only from its editor's submit
+//     (an extension cannot call the command), and the one public way to reach
+//     that submit is an editor component: pi wires its own submit handler
+//     onto every editor an extension installs. So the login is opened by
+//     installing a stock CustomEditor for an instant, submitting `/login`
+//     through the handler pi gave it, and restoring the editor that was there.
+//     When that wiring is not found, the prefilled `/login` is the fallback.
+import { CustomEditor, } from "@earendil-works/pi-coding-agent";
+import { routeProvider, twinProvider } from "@quickchatai/pi-quickreview/src/modelroute.js";
+/** The widget key the hint is shown under. */
+export const LOGIN_WIDGET = "qcr-login";
+/** The command the hint prefills and the wizard submits: pi's own login,
+ * with every provider it offers. */
+export const LOGIN_COMMAND = "/login";
+/** What the person reads above the input line while no model is usable:
+ * which logins work and how to reach them in pi's menu (pi 1.4.0's labels),
+ * then how to (re)open the menu. `opened` says whether the menu is on screen. */
+export function loginHintLines(opened) {
+    return [
+        "Quickreview needs a model login before it can do anything. Any OpenAI login works:",
+        '  - "Sign in with an account", then "OpenAI" (Sign in with ChatGPT) or "OpenAI Codex (legacy)";',
+        '  - "Sign in with an API key", then type openai, pick "OpenAI" and paste your key (sk-...).',
+        opened
+            ? `pi's login menu is open below. Closed it? Type ${LOGIN_COMMAND} and press Enter.`
+            : `Press Enter to open pi's login menu (${LOGIN_COMMAND} is on the input line).`,
+    ];
+}
+/** The config the env describes: QCR_LOGIN_OPEN=submit, else prefill. */
+export function loginRouteConfigFromEnv(env) {
+    return { open: env.QCR_LOGIN_OPEN === "submit" ? "submit" : "prefill" };
+}
+function hasCredential(registry, provider) {
+    try {
+        return registry.getProviderAuthStatus(provider).configured;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Keep the session's model on a login that exists: the model as it is when its
+ * provider has a credential, else its OpenAI twin when that has one.
+ *
+ * VERIFY-ON-PIN (pi 1.4.0): ModelRegistry.getProviderAuthStatus(p).configured
+ * covers a stored login, a stored or runtime key and an environment key, and
+ * the extension pi.setModel returns false (switching nothing) for a provider
+ * without a credential.
+ */
+export async function routeSessionModel(pi, ctx) {
+    const model = ctx.model;
+    if (!model)
+        return "none";
+    const registry = ctx.modelRegistry;
+    if (hasCredential(registry, model.provider))
+        return "usable";
+    if (twinProvider(model.provider) === undefined)
+        return "unusable";
+    const provider = routeProvider(model.provider, model.id, {
+        hasCredential: (p) => hasCredential(registry, p),
+        hasModel: (p, id) => registry.find(p, id) !== undefined,
+    });
+    if (provider === model.provider)
+        return "unusable";
+    const twin = registry.find(provider, model.id);
+    if (twin && (await pi.setModel(twin)))
+        return "switched";
+    return "unusable";
+}
+/** Does this pi need a login: no usable model, and none pi could pick? */
+export function needsLogin(outcome, registry) {
+    if (outcome === "usable" || outcome === "switched")
+        return false;
+    if (outcome === "unusable")
+        return true;
+    try {
+        return registry.getAvailable().length === 0;
+    }
+    catch {
+        return true;
+    }
+}
+/**
+ * Submit `text` through pi's own editor submit, as if typed and Entered. pi
+ * runs its built-in commands (`/login` among them) only from that handler, and
+ * hands it to every editor component an extension installs: so a stock editor
+ * is installed, its handler taken, and the previous editor (pi's default, or
+ * another extension's) restored before anything renders. Returns false, having
+ * submitted nothing, when pi did not wire a handler.
+ *
+ * VERIFY-ON-PIN (pi 1.4.0, interactive-mode.js setCustomEditorComponent):
+ * `newEditor.onSubmit = this.defaultEditor.onSubmit` runs synchronously inside
+ * setEditorComponent, and setEditorComponent(undefined) restores the default
+ * editor with its text.
+ */
+export function submitThroughEditor(ui, text, makeEditor = (tui, theme, keybindings) => new CustomEditor(tui, theme, keybindings)) {
+    let made;
+    const previous = ui.getEditorComponent();
+    try {
+        ui.setEditorComponent((tui, theme, keybindings) => {
+            const editor = makeEditor(tui, theme, keybindings);
+            made = editor;
+            return editor;
+        });
+    }
+    catch {
+        made = undefined;
+    }
+    const submit = made?.onSubmit;
+    ui.setEditorComponent(previous);
+    if (typeof submit !== "function")
+        return false;
+    void Promise.resolve()
+        .then(() => submit(text))
+        .catch(() => undefined);
+    return true;
+}
+/** Show the hint and open (or prefill) pi's login. Returns how it was opened. */
+export function openLogin(ui, open) {
+    if (open === "submit" && submitThroughEditor(ui, LOGIN_COMMAND)) {
+        ui.setWidget(LOGIN_WIDGET, loginHintLines(true), { placement: "aboveEditor" });
+        return "submitted";
+    }
+    ui.setWidget(LOGIN_WIDGET, loginHintLines(false), { placement: "aboveEditor" });
+    ui.setEditorText(LOGIN_COMMAND);
+    return "prefilled";
+}
+/** Register the model route and the login hint on `pi`. Exported so a host that
+ * builds its own onboarding extension (over `toolDefinitions`) gets the same
+ * first-run login as `qcr onboard`. */
+export function registerLoginRoute(pi, config) {
+    if (typeof pi.on !== "function")
+        return;
+    let shown = false;
+    pi.on("session_start", async (_event, ctx) => {
+        const outcome = await routeSessionModel(pi, ctx);
+        if (!ctx.hasUI || !needsLogin(outcome, ctx.modelRegistry))
+            return;
+        shown = true;
+        openLogin(ctx.ui, config.open);
+    });
+    // pi checks the model's credential after this event, so a login made inside
+    // the session (its default model stays the spec's provider) is routed here.
+    pi.on("input", async (_event, ctx) => {
+        await routeSessionModel(pi, ctx);
+        return { action: "continue" };
+    });
+    pi.on("model_select", (_event, ctx) => {
+        if (!shown || !ctx.hasUI)
+            return;
+        shown = false;
+        ctx.ui.setWidget(LOGIN_WIDGET, undefined);
+    });
+}
+/** The factory, for a pi that loads the route by path (its shim) or a host
+ * that composes factories. */
+export function createLoginRoute(config) {
+    return (pi) => registerLoginRoute(pi, config);
+}
+//# sourceMappingURL=login-route.js.map

package/dist/extensions/login-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-route.js","sourceRoot":"","sources":["../../extensions/login-route.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,0EAA0E;AAC1E,yEAAyE;AACzE,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,yEAAyE;AACzE,+EAA+E;AAC/E,0FAA0F;AAC1F,EAAE;AACF,0CAA0C;AAC1C,yEAAyE;AACzE,6EAA6E;AAC7E,+EAA+E;AAC/E,kFAAkF;AAClF,2EAA2E;AAC3E,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAC9E,6EAA6E;AAC7E,mEAAmE;AACnE,6EAA6E;AAC7E,8EAA8E;AAC9E,0EAA0E;AAC1E,yEAAyE;AACzE,0EAA0E;AAC1E,+EAA+E;AAC/E,6EAA6E;AAC7E,OAAO,EACL,YAAY,GAKb,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,+CAA+C,CAAC;AAE5F,8CAA8C;AAC9C,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC;AAExC;oCACoC;AACpC,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC;AAEtC;;iFAEiF;AACjF,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,OAAO;QACL,oFAAoF;QACpF,iGAAiG;QACjG,6FAA6F;QAC7F,MAAM;YACJ,CAAC,CAAC,kDAAkD,aAAa,mBAAmB;YACpF,CAAC,CAAC,wCAAwC,aAAa,yBAAyB;KACnF,CAAC;AACJ,CAAC;AAWD,yEAAyE;AACzE,MAAM,UAAU,uBAAuB,CAAC,GAAsB;IAC5D,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAC1E,CAAC;AAkBD,SAAS,aAAa,CAAC,QAAkB,EAAE,QAAgB;IACzD,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAkC,EAClC,GAA+D;IAE/D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC;IACnC,IAAI,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7D,IAAI,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAClE,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE;QACvD,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,SAAS;KACxD,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAAE,OAAO,UAAU,CAAC;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/C,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IACzD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CAAC,OAA0B,EAAE,QAAkB;IACvE,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAKD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAY,EACZ,IAAY,EACZ,aAAyB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC;IAE/F,IAAI,IAAuD,CAAC;IAC5D,MAAM,QAAQ,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YACnD,IAAI,GAAG,MAAM,CAAC;YACd,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,EAAE,QAAQ,CAAC;IAC9B,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAC/C,KAAK,OAAO,CAAC,OAAO,EAAE;SACnB,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;SACxB,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAID,iFAAiF;AACjF,MAAM,UAAU,SAAS,CAAC,EAAU,EAAE,IAAe;IACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,mBAAmB,CAAC,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;QAChE,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/E,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;IAChF,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IAChC,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;uCAEuC;AACvC,MAAM,UAAU,kBAAkB,CAAC,EAAgB,EAAE,MAAwB;IAC3E,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,UAAU;QAAE,OAAO;IACxC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC;YAAE,OAAO;QAClE,KAAK,GAAG,IAAI,CAAC;QACb,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IACH,4EAA4E;IAC5E,4EAA4E;IAC5E,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QACnC,MAAM,iBAAiB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QACpC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO;QACjC,KAAK,GAAG,KAAK,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;8BAC8B;AAC9B,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC"}

package/dist/extensions/muted-theme.js

@@ -0,0 +1,12 @@
+export const MUTED_THEME = "muted";
+export function createMutedTheme() {
+    return (pi) => {
+        pi.on("session_start", (_event, ctx) => {
+            const ui = ctx?.ui;
+            const result = ui?.setTheme?.(MUTED_THEME);
+            if (result && !result.success)
+                console.error(`[muted-theme] ${result.error ?? "could not select theme"}`);
+        });
+    };
+}
+//# sourceMappingURL=muted-theme.js.map

package/dist/extensions/muted-theme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"muted-theme.js","sourceRoot":"","sources":["../../extensions/muted-theme.ts"],"names":[],"mappings":"AAUA,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AAEnC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,EAAgB,EAAQ,EAAE;QAChC,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;YACrC,MAAM,EAAE,GAAG,GAAG,EAAE,EACoE,CAAC;YACrF,MAAM,MAAM,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC;YAC3C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC3B,OAAO,CAAC,KAAK,CAAC,iBAAiB,MAAM,CAAC,KAAK,IAAI,wBAAwB,EAAE,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/extensions/onboarding.js

@@ -0,0 +1,198 @@
+// onboarding — the wizard's tool belt. Loaded ONLY by `qcr onboard`
+// (per spawn, `-e`, alongside --no-extensions — no ambient extension rides the
+// onboarding session), never registered globally. pi jiti-loads this TS source
+// on the HOST, so it imports the OnboardingEngine source directly and runs it
+// in-process: pi talks, these deterministic tools act, and the LLM never
+// freestyles a shell command (the built-in belt is read-only by argv).
+//
+// One tool per registered engine step (onboard_<id>), plus:
+//   - onboard_status: reconcile + checklist listing (resume re-verifies every
+//     claimed-done step against reality — the file is never trusted alone);
+//   - finish_and_exit: re-runs the FULL verification; anything red comes back
+//     as the tool result (no exit, ever, while red); all green marks the
+//     checklist complete, writes the companion's first-run marker
+//     (state/companion/first-run.json), and triggers pi's deferred shutdown —
+//     the `qcr onboard` process then opens the TUI.
+//
+// Convention notes (same shape as companion-guard/tui-view): degrade, never
+// wedge — a pi without registerTool registers nothing and says so; a missing
+// ctx.shutdown falls back to telling the operator to /exit.
+import { execFile } from "node:child_process";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { registerQcrTool, textResult as text, } from "@quickchatai/pi-quickreview/extensions/pi-tool.js";
+import { OnboardingEngine, } from "../src/onboard/engine.js";
+import { defaultSteps } from "../src/onboard/steps/index.js";
+import { openStepMemoryForward } from "../src/onboard/stepforward.js";
+import { locateConfig } from "../src/install.js";
+import { registerLoginRoute } from "./login-route.js";
+import { ONBOARD_FINISH_TOOL, ONBOARD_STATUS_TOOL, onboardStepToolName, } from "../src/onboard/toolnames.js";
+const NO_PARAMS = { type: "object", properties: {} };
+// ---- real adapters ----------------------------------------------------------
+/** The one real adapter assembly. Steps see the host only through this. */
+export function realAdapters(root) {
+    return {
+        fetch: (input, init) => fetch(input, init),
+        runner: {
+            run: (cmd, args) => new Promise((resolvePromise) => {
+                execFile(cmd, args, { timeout: 60_000 }, (err, stdout, stderr) => {
+                    const code = err === null ? 0 : typeof err.code === "number" ? err.code : 1;
+                    resolvePromise({
+                        code,
+                        stdout: String(stdout),
+                        stderr: err && !stderr ? String(err.message) : String(stderr),
+                    });
+                });
+            }),
+        },
+        clock: () => new Date(),
+        host: {
+            nodeVersion: process.version,
+            uid: typeof process.getuid === "function" ? process.getuid() : null,
+            inContainer: existsSync("/.dockerenv"),
+        },
+        // The install locator decides which config.toml the wizard edits —
+        // $QCR_CONFIG, else the install's config home (never the checkout's).
+        paths: { stateDir: join(root, "state"), configPath: locateConfig().path },
+        log: (line) => console.error(line),
+        memoryForward: (req) => openStepMemoryForward(req),
+    };
+}
+export function buildEngine(root) {
+    return new OnboardingEngine(defaultSteps(), realAdapters(root));
+}
+// ---- rendering --------------------------------------------------------------
+export function renderChecks(checks) {
+    return checks.map((c) => `${c.ok ? "✓" : "✗"} ${c.name} — ${c.detail}`).join("\n");
+}
+export function renderStatus(lines, reconciled) {
+    const rows = lines.map((l) => {
+        const mark = l.status === "done"
+            ? "[done]"
+            : l.status === "disabled"
+                ? "[skipped]"
+                : l.optional
+                    ? "[after setup]"
+                    : "[ ]";
+        return `${mark} ${l.id} — ${l.title}${l.note ? ` (${l.note})` : ""}`;
+    });
+    const demoted = reconciled.demoted.map((d) => `re-verification demoted ${d.id}: ${d.failures.join("; ")}`);
+    return [
+        "Onboarding checklist (claimed-done steps were just re-verified against reality):",
+        ...rows,
+        ...demoted,
+    ].join("\n");
+}
+// ---- tool belt --------------------------------------------------------------
+/**
+ * Build the tool definitions over an engine. `shutdown` is injected so tests
+ * assert the finish tool's refusal/exit behaviour without a pi; activate wires
+ * the real ctx probe.
+ */
+export function toolDefinitions(engine, shutdown) {
+    const stepTools = engine.stepDefs().map((step) => ({
+        name: onboardStepToolName(step.id),
+        label: step.title,
+        description: `${step.explain} Deterministic: runs the "${step.id}" onboarding step's real checks and returns one ✓/✗ line per check. ` +
+            "Safe to re-run; a failed run leaves the step pending.",
+        promptSnippet: `Run the ${step.id} onboarding step`,
+        // A step that needs the operator's answer declares its own schema; the
+        // params land on the step as ctx.input (the ingress choice is one).
+        // Everything else takes no input at all.
+        parameters: step.parameters ?? NO_PARAMS,
+        execute: async (_id, params) => {
+            const result = await engine.runStep(step.id, params ?? {});
+            if (result.ok)
+                return text(`Step "${step.id}" completed and recorded.\n${renderChecks(result.checks)}`);
+            // A refusal (a disabled or unknown step) runs no checks: its reason is
+            // the engine's failures, and there are no red checks to fix.
+            if (result.checks.length === 0)
+                return text(`Step "${step.id}" REFUSED — ${result.failures.join("; ") || "no reason given"}.`);
+            return text(`Step "${step.id}" FAILED — fix the red checks and run it again.\n${renderChecks(result.checks)}`);
+        },
+    }));
+    const status = {
+        name: ONBOARD_STATUS_TOOL,
+        label: "Onboarding status",
+        description: "The checklist: every step in order with its status. Re-verifies each claimed-done step against reality first " +
+            "(the state file is never trusted alone), so call this at the start of every session and after anything changes outside the tools.",
+        promptSnippet: "Read and re-verify the onboarding checklist",
+        parameters: NO_PARAMS,
+        execute: async () => {
+            const reconciled = await engine.reconcile();
+            return text(renderStatus(engine.list(), reconciled));
+        },
+    };
+    const finish = {
+        name: ONBOARD_FINISH_TOOL,
+        label: "Finish onboarding",
+        description: "Re-run EVERY verification. While anything is red this refuses and returns the failures — it never exits on red. " +
+            "When all green it marks onboarding complete, writes the companion first-run marker, and shuts this session down; " +
+            "the wizard process then opens the TUI.",
+        promptSnippet: "Verify everything and, only when green, finish onboarding",
+        parameters: NO_PARAMS,
+        execute: async (_id, _params, _signal, _onUpdate, ctx) => {
+            const result = await engine.finish();
+            if (!result.ok) {
+                const red = result.results
+                    .filter((r) => !r.ok && !r.optional)
+                    .map((r) => `✗ ${r.id}: ${r.failures.join("; ") || "not verified"}`);
+                return text(`Not finished — these verifications are red:\n${red.join("\n")}\n` +
+                    "Fix them (or run the step tools again), then call finish_and_exit once more.");
+            }
+            // Green: shut down AFTER this result is returned. The 250ms defer is
+            // belt-and-braces so the model sees the confirmation first.
+            // VERIFY-ON-PIN: ctx.shutdown's own idle-deferral (pi's ExtensionContext) may
+            // make the timer redundant — the onboarding smoke step is the evidence.
+            setTimeout(() => shutdown(ctx), 250);
+            return text(`Every step verified green — onboarding is complete (recorded ${result.completed_at}).\n` +
+                `${result.marker_written ? "First-run marker written for the companion greeting." : "First-run marker already present — left untouched."}\n` +
+                "This session now shuts down and the TUI opens: the board lists the repository's open pull requests — " +
+                "select one and press R to review it now (dry-run: nothing is posted).");
+        },
+    };
+    return [...stepTools, status, finish];
+}
+/** The root the env describes: QCR_ROOT, else `cwd`. */
+export function onboardingConfigFromEnv(env, cwd) {
+    return { root: env.QCR_ROOT ?? cwd };
+}
+/** The factory that registers the wizard's tools. The env shim is
+ * extensions/cli/onboarding.ts. */
+export function createOnboarding(config) {
+    return (pi) => registerOnboarding(pi, config);
+}
+/**
+ * The onboarding session's first-run login: when pi has no usable model
+ * login, pi's own /login menu opens with a widget that says which logins work
+ * (any OpenAI one), and an OpenAI model whose provider has no login runs on
+ * the twin login that exists (extensions/login-route.ts). `qcr onboard`
+ * registers it with the tools; a host that builds its own onboarding
+ * extension over `toolDefinitions` + `registerQcrTool` calls it too.
+ */
+export function registerOnboardingSession(pi) {
+    registerLoginRoute(pi, { open: "submit" });
+}
+function registerOnboarding(pi, config) {
+    registerOnboardingSession(pi);
+    if (typeof pi.registerTool !== "function") {
+        // Degrade loudly, never wedge: pi still starts, the guide can only talk.
+        console.error("onboarding: pi.registerTool unavailable — no wizard tools registered; this pi cannot run onboarding.");
+        return;
+    }
+    const engine = buildEngine(config.root);
+    const shutdown = (ctx) => {
+        const fn = ctx?.shutdown ?? pi.shutdown;
+        if (typeof fn === "function") {
+            // VERIFY-ON-PIN: deferred clean shutdown with exit code 0 (pi 1.4.0's
+            // ExtensionContext.shutdown). Bound to the named onboarding smoke step.
+            void fn.call(ctx ?? pi);
+        }
+        else {
+            console.error("onboarding: no shutdown API on this pi — type /exit to leave; the wizard will open the TUI.");
+        }
+    };
+    for (const def of toolDefinitions(engine, shutdown))
+        registerQcrTool(pi, def);
+}
+//# sourceMappingURL=onboarding.js.map

package/dist/extensions/onboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../extensions/onboarding.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,yEAAyE;AACzE,uEAAuE;AACvE,EAAE;AACF,4DAA4D;AAC5D,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,yEAAyE;AACzE,kEAAkE;AAClE,8EAA8E;AAC9E,oDAAoD;AACpD,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,4DAA4D;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAMjC,OAAO,EACL,eAAe,EACf,UAAU,IAAI,IAAI,GAEnB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,gBAAgB,GAKjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,6BAA6B,CAAC;AAErC,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAW,CAAC;AAE9D,gFAAgF;AAEhF,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO;QACL,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC;QAC1C,MAAM,EAAE;YACN,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CACjB,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;gBAC7B,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;oBAC/D,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC5E,cAAc,CAAC;wBACb,IAAI;wBACJ,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;wBACtB,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;qBAC9D,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;SACL;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QACvB,IAAI,EAAE;YACJ,WAAW,EAAE,OAAO,CAAC,OAAO;YAC5B,GAAG,EAAE,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;YACnE,WAAW,EAAE,UAAU,CAAC,aAAa,CAAC;SACvC;QACD,mEAAmE;QACnE,sEAAsE;QACtE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,IAAI,EAAE;QACzE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAClC,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,IAAI,gBAAgB,CAAC,YAAY,EAAE,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,YAAY,CAAC,MAA8B;IACzD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAAgC,EAChC,UAA2B;IAE3B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,IAAI,GACR,CAAC,CAAC,MAAM,KAAK,MAAM;YACjB,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU;gBACvB,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,eAAe;oBACjB,CAAC,CAAC,KAAK,CAAC;QAChB,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnE,CAAC;IACF,OAAO;QACL,kFAAkF;QAClF,GAAG,IAAI;QACP,GAAG,OAAO;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAwB,EACxB,QAAgE;IAEhE,MAAM,SAAS,GAAc,MAAM,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EACT,GAAG,IAAI,CAAC,OAAO,6BAA6B,IAAI,CAAC,EAAE,sEAAsE;YACzH,uDAAuD;QACzD,aAAa,EAAE,WAAW,IAAI,CAAC,EAAE,kBAAkB;QACnD,uEAAuE;QACvE,oEAAoE;QACpE,yCAAyC;QACzC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,SAAS;QACxC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,EAAE;gBACX,OAAO,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,8BAA8B,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3F,uEAAuE;YACvE,6DAA6D;YAC7D,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBAC5B,OAAO,IAAI,CACT,SAAS,IAAI,CAAC,EAAE,eAAe,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,GAAG,CAClF,CAAC;YACJ,OAAO,IAAI,CACT,SAAS,IAAI,CAAC,EAAE,oDAAoD,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAClG,CAAC;QACJ,CAAC;KACF,CAAC,CAAC,CAAC;IAEJ,MAAM,MAAM,GAAY;QACtB,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,+GAA+G;YAC/G,mIAAmI;QACrI,aAAa,EAAE,6CAA6C;QAC5D,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;IAEF,MAAM,MAAM,GAAY;QACtB,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,kHAAkH;YAClH,mHAAmH;YACnH,wCAAwC;QAC1C,aAAa,EAAE,2DAA2D;QAC1E,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;YACvD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO;qBACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;qBACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;gBACvE,OAAO,IAAI,CACT,gDAAgD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBAChE,8EAA8E,CACjF,CAAC;YACJ,CAAC;YACD,qEAAqE;YACrE,4DAA4D;YAC5D,8EAA8E;YAC9E,wEAAwE;YACxE,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YACrC,OAAO,IAAI,CACT,gEAAgE,MAAM,CAAC,YAAY,MAAM;gBACvF,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,sDAAsD,CAAC,CAAC,CAAC,oDAAoD,IAAI;gBAC5I,uGAAuG;gBACvG,uEAAuE,CAC1E,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO,CAAC,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AASD,wDAAwD;AACxD,MAAM,UAAU,uBAAuB,CAAC,GAAsB,EAAE,GAAW;IACzE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC;AACvC,CAAC;AAED;mCACmC;AACnC,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,EAAgB;IACxD,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,kBAAkB,CAAC,EAAgB,EAAE,MAAwB;IACpE,yBAAyB,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,OAAO,EAAE,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC1C,yEAAyE;QACzE,OAAO,CAAC,KAAK,CACX,sGAAsG,CACvG,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,CAAC,GAA4C,EAAQ,EAAE;QACtE,MAAM,EAAE,GAAG,GAAG,EAAE,QAAQ,IAAK,EAAgD,CAAC,QAAQ,CAAC;QACvF,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;YAC7B,sEAAsE;YACtE,wEAAwE;YACxE,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CACX,6FAA6F,CAC9F,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,eAAe,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAChF,CAAC"}