@sayknow-cli/coding-agent 0.6.5 → 0.6.7

package/dist/types/setup/model-onboarding-guidance.d.ts

@@ -1,5 +1,6 @@
 export declare const MODEL_ONBOARDING_API_PROVIDER_COMMAND = "/provider add --compat <openai|anthropic> --provider <id> --base-url <url> --api-key-env <ENV> --model <model>";
-export declare const MODEL_ONBOARDING_PROVIDER_PRESET_COMMAND = "/provider add --preset <minimax|minimax-cn|glm>";
+/** Built from the bundled preset catalog, so a new preset shows up here without editing copy. */
+export declare const MODEL_ONBOARDING_PROVIDER_PRESET_COMMAND: string;
 export declare const MODEL_ONBOARDING_SETUP_COMMAND = "skc setup provider";
 export declare const MODEL_ONBOARDING_OAUTH_COMMAND = "/provider login [provider-id] or /login [provider-id]";
 /**
@@ -7,8 +8,14 @@ export declare const MODEL_ONBOARDING_OAUTH_COMMAND = "/provider login [provider
  * user learns it exists is from the surfaces where they go to add credentials.
  */
 export declare const MODEL_ONBOARDING_TYPESAFE_COMMAND = "/provider typesafe";
+/** Where the models tried after a blocked one are shown and edited. */
+export declare const MODEL_ONBOARDING_FALLBACK_COMMAND = "/fallback";
 export declare function formatModelOnboardingGuidance(): string;
 export declare function formatModelOnboardingInlineHint(): string;
 export declare function formatNoModelOnboardingError(): string;
+/**
+ * Missing credentials for the provider the session tried to call. The fix for that
+ * provider comes first; the ways to add a different provider follow as alternatives.
+ */
 export declare function formatNoCredentialOnboardingError(providerId: string): string;
 export declare function formatNoModelsAvailableFallback(): string;

package/dist/types/setup/provider-onboarding.d.ts

@@ -46,6 +46,8 @@ export declare function normalizeProviderId(providerId: string): string;
 export declare function parseProviderCompatibility(value: string): ProviderCompatibility;
 export declare function findProviderPreset(value: string | undefined): ProviderPreset | undefined;
 export declare function formatProviderPresetList(): string;
+/** `minimax|minimax-cn|…` — the preset ids for a `--preset <…>` usage line, in catalog order. */
+export declare function formatProviderPresetChoices(): string;
 export declare function parseModelList(values: readonly string[]): string[];
 export declare function redactSecret(secret: string): string;
 export declare function validateModelApi(modelApi: Readonly<Record<string, string>> | undefined, models: readonly string[], presetId: string): void;

package/dist/types/tools/debug.d.ts

@@ -8,6 +8,7 @@ import type { OutputMeta } from "./output-meta";
 declare const debugSchema: z.ZodObject<{
     action: z.ZodEnum<{
         output: "output";
+        sessions: "sessions";
         pause: "pause";
         scopes: "scopes";
         variables: "variables";
@@ -34,7 +35,6 @@ declare const debugSchema: z.ZodObject<{
         loaded_sources: "loaded_sources";
         custom_request: "custom_request";
         terminate: "terminate";
-        sessions: "sessions";
     }>;
     program: z.ZodOptional<z.ZodString>;
     args: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -131,6 +131,7 @@ export declare class DebugTool implements AgentTool<typeof debugSchema, DebugToo
     readonly parameters: z.ZodObject<{
         action: z.ZodEnum<{
             output: "output";
+            sessions: "sessions";
             pause: "pause";
             scopes: "scopes";
             variables: "variables";
@@ -157,7 +158,6 @@ export declare class DebugTool implements AgentTool<typeof debugSchema, DebugToo
             loaded_sources: "loaded_sources";
             custom_request: "custom_request";
             terminate: "terminate";
-            sessions: "sessions";
         }>;
         program: z.ZodOptional<z.ZodString>;
         args: z.ZodOptional<z.ZodArray<z.ZodString>>;

package/dist/types/tools/index.d.ts

@@ -44,6 +44,7 @@ export * from "./gh";
 export * from "./image-gen";
 export * from "./irc";
 export * from "./job";
+export * from "./locate";
 export * from "./monitor";
 export * from "./read";
 export * from "./recipe";

package/dist/types/tools/locate-core.d.ts

@@ -0,0 +1,97 @@
+import type { DecisionRequest, DecisionResult } from "../decisions/types";
+/**
+ * Find where behaviour lives by asking Jev, the way `jevgrep` does, but inside SKC and
+ * without shipping source bodies: a folder is judged from its path and the names of the
+ * files in it; a file is judged from its path and its declaration lines (signatures),
+ * never its function bodies or comments.
+ *
+ * The walk narrows before it widens: large folders are split and only the subfolders Jev
+ * rates plausible are entered, so a question about the broker never uploads the TUI.
+ */
+export interface LocateParams {
+    query: string;
+    /** Absolute search root. */
+    root: string;
+    /** Most files to return. */
+    limit: number;
+}
+export interface LocateDeps {
+    /** Source files under the root, relative, `/`-separated. */
+    listFiles(root: string, signal?: AbortSignal): Promise<string[]>;
+    /** Declaration lines of one file (`{ line, text }`), empty when none can be extracted. */
+    outline(absolutePath: string, signal?: AbortSignal): Promise<OutlineLine[]>;
+    /** One Jev request. Null means the request failed or no key is configured. */
+    decide(request: DecisionRequest): Promise<DecisionResult | null>;
+    /**
+     * Full text of a file for the local keyword score. Read and scored on this machine only;
+     * nothing from it is sent. Undefined when a file cannot or should not be read.
+     */
+    readText?(absolutePath: string): Promise<string | undefined>;
+    signal?: AbortSignal;
+}
+export interface OutlineLine {
+    line: number;
+    text: string;
+}
+export interface LocatedFile {
+    path: string;
+    score: number;
+    outline: OutlineLine[];
+    /** Below {@link FILE_BAR}: a lead worth a glance, not a confident match. */
+    weak?: boolean;
+}
+export interface LocateResult {
+    files: LocatedFile[];
+    /** Best-scoring files when none cleared the bar, so the caller still has leads. */
+    weakLeads: LocatedFile[];
+    foldersJudged: number;
+    filesJudged: number;
+    requests: number;
+    failedRequests: number;
+    /** Files considered at all after the folder walk (before any cap). */
+    candidates: number;
+    truncated: boolean;
+    durationMs: number;
+}
+/** A folder with at most this many files underneath is not split further; its files are judged directly. */
+export declare const LEAF_FOLDER_FILES = 40;
+export declare const FILE_BAR = 0.5;
+/** Files between this and {@link FILE_BAR} fill the remaining slots, marked weak. */
+export declare const WEAK_FILE_BAR = 0.3;
+/** Hard ceilings so one question can never turn into an unbounded bill. */
+export declare const MAX_REQUESTS = 100;
+/** Query terms for lexical hints: lowercase words of 4+ letters, cut to a 5-letter stem. */
+export declare function queryTerms(query: string): string[];
+/** How many query terms appear in `text`, with camelCase and snake_case identifiers split into words. */
+export declare function termHits(text: string, terms: readonly string[]): number;
+export declare function locateCode(params: LocateParams, deps: LocateDeps): Promise<LocateResult>;
+/**
+ * Declaration lines from a structural summary whose bodies and comments were all elided
+ * (`minBodyLines: 1`, `minCommentLines: 1`), plus the member lines of elided class-like
+ * bodies taken from `sourceLines`: the summariser folds a whole class body, so its methods
+ * would otherwise vanish. Only lines at the body's own member indentation are taken;
+ * method bodies sit deeper and never come along. Initialisers are cut, so values do not
+ * leave the machine. Over {@link MAX_OUTLINE_LINES}, top-level declarations and methods
+ * are kept before fields, so a long run of type members never hides what follows.
+ */
+export declare function outlineFromSegments(segments: ReadonlyArray<{
+    kind: string;
+    startLine: number;
+    endLine?: number;
+    text?: string | null;
+}>, sourceLines?: readonly string[]): OutlineLine[];
+/**
+ * 1-based numbers of lines that belong to a multi-line comment or string: `/* … *\/`
+ * blocks (including `/**` and Rust's `/*!`), Python triple-quoted docstrings and strings,
+ * and multi-line template literals. A declaration line that opens a string value
+ * (`x = """`) is not masked itself — its initialiser is cut later — but the lines after
+ * it are.
+ */
+export declare function maskedLines(lines: readonly string[]): Set<number>;
+/**
+ * Fallback outline for a file the structural parser rejects (1-2% of TypeScript files,
+ * often large central ones). Keeps top-level declarations and members one indent level
+ * in, under the same rules as {@link outlineFromSegments}: no comments, imports, bodies,
+ * or initialiser values.
+ */
+export declare function outlineFromSource(sourceLines: readonly string[]): OutlineLine[];

package/dist/types/tools/locate.d.ts

@@ -0,0 +1,38 @@
+import type { AgentTool, AgentToolResult } from "@sayknow-cli/agent-core";
+import * as z from "zod/v4";
+import type { ToolSession } from ".";
+import { type LocateResult } from "./locate-core";
+declare const locateSchema: z.ZodObject<{
+    query: z.ZodString;
+    path: z.ZodOptional<z.ZodString>;
+    limit: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type LocateParams = z.infer<typeof locateSchema>;
+export interface LocateToolDetails {
+    result: Omit<LocateResult, "files" | "weakLeads"> & {
+        files: string[];
+    };
+}
+export declare class LocateTool implements AgentTool<typeof locateSchema, LocateToolDetails> {
+    private readonly session;
+    readonly name = "locate";
+    readonly label = "Locate";
+    readonly summary = "Find code by describing what it does (Jev relevance judgement)";
+    readonly description: string;
+    readonly parameters: z.ZodObject<{
+        query: z.ZodString;
+        path: z.ZodOptional<z.ZodString>;
+        limit: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>;
+    readonly strict = true;
+    /**
+     * Offered only when it can work: a TypeSafe key is stored and `locate.enabled` is on.
+     * Without the hosted model every judgement would fall to an uncalibrated LLM, one
+     * request per folder batch, which costs more than the search saves.
+     */
+    static createIf(session: ToolSession): LocateTool | null;
+    constructor(session: ToolSession);
+    execute(_toolCallId: string, params: LocateParams, signal?: AbortSignal): Promise<AgentToolResult<LocateToolDetails>>;
+}
+export declare function formatLocateResult(query: string, root: string, cwd: string, result: LocateResult): string;
+export {};

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@sayknow-cli/coding-agent",
-	"version": "0.6.5",
+	"version": "0.6.7",
 	"description": "Sayknow-CLI CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://sayknow-cli.com",
 	"author": "jaybeyond",
@@ -54,12 +54,12 @@
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@babel/parser": "^7.29.3",
 		"@mozilla/readability": "^0.6.0",
-		"@sayknow-cli/stats": "0.6.5",
-		"@sayknow-cli/agent-core": "0.6.5",
-		"@sayknow-cli/ai": "0.6.5",
-		"@sayknow-cli/natives": "0.6.5",
-		"@sayknow-cli/tui": "0.6.5",
-		"@sayknow-cli/utils": "0.6.5",
+		"@sayknow-cli/stats": "0.6.7",
+		"@sayknow-cli/agent-core": "0.6.7",
+		"@sayknow-cli/ai": "0.6.7",
+		"@sayknow-cli/natives": "0.6.7",
+		"@sayknow-cli/tui": "0.6.7",
+		"@sayknow-cli/utils": "0.6.7",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",

package/scripts/generate-sdk-operation-inventory.ts

@@ -38,6 +38,8 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 		"local session-discovery metadata command; no SDK operation counterpart or runtime/retention authority",
 	"slash_command:unstar":
 		"local session-discovery metadata command; no SDK operation counterpart or runtime/retention authority",
+	"slash_command:fallback":
+		"local fallback-chain configuration (fallback.models / fallback.auto settings); no SDK operation counterpart, and SDK clients observe switches via model_fallback_switched",
 	"slash_command:import-session":
 		"local transcript-file import into a new session; ACP is explicitly disabled and no SDK operation reads caller-selected host paths",
 	"agent_session:constructor": "internal accessor/plumbing, not a user-facing control seam",
@@ -193,6 +195,8 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 		"internal profile and fallback-chain state, not a user-facing SDK control seam",
 	"agent_session:setConfiguredModelChain":
 		"internal profile and fallback-chain state, not a user-facing SDK control seam",
+	"agent_session:getDefaultFallbackChain":
+		"internal profile and fallback-chain state, not a user-facing SDK control seam",
 	"agent_session:setDefaultFallbackRuntimeModel":
 		"internal fallback runtime bookkeeping, not a user-facing SDK control seam",
 	"agent_session:seedDefaultFallbackResolution":

package/src/cli/setup-cli.ts

@@ -33,8 +33,10 @@ import {
 import { buildHostPluginSetup, formatHostPluginSetup, type HostPluginKind } from "../setup/host-plugin-setup";
 import {
 	addApiCompatibleProvider,
+	formatProviderPresetChoices,
 	formatProviderPresetList,
 	formatProviderSetupResult,
+	PROVIDER_PRESETS,
 	parseProviderCompatibility,
 } from "../setup/provider-onboarding";
 
@@ -119,7 +121,7 @@ function rejectProviderFlagsOutsideProvider(component: SetupComponent, flags: Se
 	console.error(chalk.red("Provider setup flags require the explicit `provider` component."));
 	console.error(
 		chalk.dim(
-			`Run: ${APP_NAME} setup provider --preset <minimax|glm> or ${APP_NAME} setup provider --compat <openai|anthropic> --provider <id> --base-url <url> --api-key-env <ENV> --model <id>`,
+			`Run: ${APP_NAME} setup provider --preset <${formatProviderPresetChoices()}> or ${APP_NAME} setup provider --compat <openai|anthropic> --provider <id> --base-url <url> --api-key-env <ENV> --model <id>`,
 		),
 	);
 	process.exit(1);
@@ -761,8 +763,9 @@ ${chalk.bold("Components:")}
 
 
 ${chalk.bold("Provider example:")}
-  ${APP_NAME} setup provider --preset minimax
-  ${APP_NAME} setup provider --preset glm
+${PROVIDER_PRESETS.slice(0, 2)
+	.map(preset => `  ${APP_NAME} setup provider --preset ${preset.id}`)
+	.join("\n")}
   MY_PROVIDER_KEY=sk-... ${APP_NAME} setup provider --compat openai --provider my-oai --base-url https://api.example.com/v1 --api-key-env MY_PROVIDER_KEY --model gpt-example
 
 ${chalk.bold("Hermes example:")}
@@ -775,7 +778,7 @@ ${chalk.bold("Options:")}
   -c, --check       Check if dependencies are installed without installing
   -f, --force       Overwrite existing default workflow skill files
   --json            Output status as JSON
-  --preset          Provider preset: minimax, minimax-cn, or glm (aliases include minimax-code and zai)
+  --preset          Provider preset: ${PROVIDER_PRESETS.map(preset => preset.id).join(", ")} (aliases: ${PROVIDER_PRESETS.flatMap(preset => preset.aliases).join(", ")})
   --compat          Provider compatibility: openai or anthropic
   --provider        Provider id to add to models.yml
   --base-url        Provider API base URL

package/src/commands/sdk.ts

@@ -18,6 +18,7 @@ import {
 	writeSessionLifecycleFailure,
 	writeSessionLifecycleReady,
 } from "../sdk/broker/lifecycle";
+import { exitIfSourceGone, startSessionHostGuard } from "../sdk/broker/process-guard";
 import { processIncarnation } from "../sdk/broker/process-incarnation";
 import { type CreateLifecycleAgentSessionResult, createLifecycleAgentSession } from "../sdk/lifecycle-session";
 import { listManagedSessionCandidates, resolveManagedSessionScope } from "../sdk/session-directory";
@@ -505,6 +506,7 @@ export async function runSessionHost(
 	}
 	process.once("SIGTERM", stop);
 	process.once("SIGINT", stop);
+	startSessionHostGuard({ markerPath, pid: process.pid, effectMarker, incarnation, cwd, onLost: stop });
 	await new Promise<void>(() => {});
 }
 
@@ -559,6 +561,7 @@ export default class Sdk extends Command {
 				const policy = (await Settings.loadForScope({ cwd, agentDir })).get("session.directoryMigration");
 				return policy === "disabled" ? "disabled" : "copy-retain";
 			},
+			beforePublicationTick: () => exitIfSourceGone(),
 		});
 		await broker.start();
 		if (!broker.ownsDiscovery) return;

package/src/commands/setup.ts

@@ -4,6 +4,7 @@
 import { Args, Command, Flags } from "@sayknow-cli/utils/cli";
 import { runSetupCommand, type SetupCommandArgs, type SetupComponent } from "../cli/setup-cli";
 import { initTheme } from "../modes/theme/theme";
+import { PROVIDER_PRESETS } from "../setup/provider-onboarding";
 
 const COMPONENTS: SetupComponent[] = [
 	"claude",
@@ -52,7 +53,9 @@ export default class Setup extends Command {
 		"skc-command": Flags.string({ description: "Command used to start `skc mcp-serve coordinator`" }),
 		target: Flags.string({ description: "Hermes config file target for config-only install" }),
 		"profile-dir": Flags.string({ description: "Hermes profile directory for full setup install" }),
-		preset: Flags.string({ description: "Provider preset: minimax, minimax-cn, or glm" }),
+		preset: Flags.string({
+			description: `Provider preset: ${PROVIDER_PRESETS.map(preset => preset.id).join(", ")}`,
+		}),
 		compat: Flags.string({ description: "Provider compatibility: openai or anthropic" }),
 		provider: Flags.string({ description: "Provider id to add to models.yml" }),
 		"base-url": Flags.string({ description: "Provider API base URL" }),

package/src/config/keybindings.ts

@@ -43,6 +43,7 @@ interface AppKeybindings {
 	"app.session.tree": true;
 	"app.session.fork": true;
 	"app.session.resume": true;
+	"app.session.continue": true;
 	"app.session.observe": true;
 	"app.session.dashboard": true;
 	"app.jobs.open": true;
@@ -189,6 +190,12 @@ export const KEYBINDINGS = {
 		defaultKeys: "alt+r",
 		description: "Resume session",
 	},
+	// A Control chord on purpose: macOS terminals often turn Option into composed text,
+	// and continuing the last session is the one launch action that must always work.
+	"app.session.continue": {
+		defaultKeys: "ctrl+q",
+		description: "Continue the most recent session",
+	},
 	"app.session.observe": {
 		defaultKeys: "ctrl+s",
 		description: "Observe subagent sessions",

package/src/config/settings-schema.ts

@@ -1223,8 +1223,39 @@ export const SETTINGS_SCHEMA = {
 		type: "number",
 		default: 3,
 		validate: (value: number) => Number.isInteger(value) && value > 0,
+		ui: {
+			tab: "model",
+			label: "Fallback Attempts per Model",
+			description:
+				"Tries on each model in the fallback chain (including the first) before moving to the next one. Missing credentials skip a model immediately.",
+			options: [
+				{ value: "1", label: "1 try" },
+				{ value: "2", label: "2 tries" },
+				{ value: "3", label: "3 tries" },
+				{ value: "5", label: "5 tries" },
+			],
+		},
+	},
+
+	/**
+	 * When the default model is blocked, keep going on another logged-in provider
+	 * after the configured chain and `fallback.models` run out. The extra entries
+	 * are computed per session and never written into the configured chain.
+	 */
+	"fallback.auto": {
+		type: "boolean",
+		default: true,
+		ui: {
+			tab: "model",
+			label: "Automatic Model Fallback",
+			description:
+				"When the default model is blocked (no login, quota, auth or server errors), continue on a model from another logged-in provider. /fallback shows the chain.",
+		},
 	},
 
+	/** Models to try, in order, after the default chain. Edited with `/fallback`. */
+	"fallback.models": { type: "array", default: EMPTY_STRING_ARRAY },
+
 	// Retries
 	"retry.enabled": { type: "boolean", default: true },
 
@@ -1443,6 +1474,16 @@ export const SETTINGS_SCHEMA = {
 			],
 		},
 	},
+	"startup.welcomeMouse": {
+		type: "boolean",
+		default: true,
+		ui: {
+			tab: "interaction",
+			label: "Clickable Launch Card",
+			description:
+				"Until the first prompt, capture the mouse so a recent session on the launch card opens with one click. Terminal text selection needs Shift held meanwhile. Off: open sessions with ↓ and Enter.",
+		},
+	},
 	"startup.skipLogoAnimation": {
 		type: "boolean",
 		default: false,
@@ -3107,6 +3148,22 @@ export const SETTINGS_SCHEMA = {
 		},
 	},
 
+	/**
+	 * The `locate` tool: find code by describing what it does, judged by Jev. Offered only
+	 * when a TypeSafe key is stored. Sends folder paths, file names and declaration lines
+	 * (never bodies or comments) to TypeSafe.
+	 */
+	"locate.enabled": {
+		type: "boolean",
+		default: true,
+		ui: {
+			tab: "tools",
+			label: "Locate (Jev code search)",
+			description:
+				"Offer the locate tool when a TypeSafe key is stored. It sends folder paths, file names and declaration lines (no function bodies or comments) to TypeSafe to judge relevance.",
+		},
+	},
+
 	"tools.essentialOverride": {
 		type: "array",
 		default: [] as string[],
@@ -3492,6 +3549,31 @@ export const SETTINGS_SCHEMA = {
 	// Providers
 	// ────────────────────────────────────────────────────────────────────────
 
+	// Multi-account order. `SKC_CREDENTIAL_RANKING_MODE` overrides it per machine.
+	"auth.credentialRankingMode": {
+		type: "enum",
+		values: ["balanced", "earliest-reset"] as const,
+		default: "balanced",
+		ui: {
+			tab: "providers",
+			label: "Multi-Account Order",
+			description:
+				"Which logged-in account of a provider a new session uses. A blocked or exhausted account is always skipped for the next one.",
+			options: [
+				{
+					value: "balanced",
+					label: "Balanced",
+					description: "Least-used account first; spreads load and keeps headroom on every account",
+				},
+				{
+					value: "earliest-reset",
+					label: "Earliest reset",
+					description: "Account whose usage window resets soonest first, so quota is not lost at reset",
+				},
+			],
+		},
+	},
+
 	// Secret handling
 	"secrets.enabled": {
 		type: "boolean",

package/src/decisions/typesafe-backend.ts

@@ -119,7 +119,7 @@ export function createTypeSafeDecisionBackend(deps: TypeSafeBackendDeps): Decisi
 		name: "typesafe",
 		async decide(request: DecisionRequest): Promise<DecisionResult | null> {
 			validateQuestions(request.questions);
-			const apiKey = await deps.registry.getApiKeyForProvider(TYPESAFE_PROVIDER, deps.sessionId);
+			let apiKey = await deps.registry.getApiKeyForProvider(TYPESAFE_PROVIDER, deps.sessionId);
 			// No key means the user never added TypeSafe. That is not an error — the next
 			// backend (their logged-in model) handles it.
 			if (!apiKey) return null;
@@ -132,13 +132,26 @@ export function createTypeSafeDecisionBackend(deps: TypeSafeBackendDeps): Decisi
 			request.signal?.addEventListener("abort", abortOnCaller, { once: true });
 			const timer = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
 			const started = Date.now();
-			try {
-				const response = await doFetch(`${baseUrl}/v1/systemone`, {
+			const send = (key: string) =>
+				doFetch(`${baseUrl}/v1/systemone`, {
 					method: "POST",
-					headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
+					headers: { Authorization: `Bearer ${key}`, "Content-Type": "application/json" },
 					body: JSON.stringify({ state: request.state, model, questions: toWireQuestions(request.questions) }),
 					signal: controller.signal,
 				});
+			try {
+				let response = await send(apiKey);
+				if (response.status === 401 || response.status === 403) {
+					// A session reads the credential store once, at startup. A key replaced from
+					// another session (or `skc setup typesafe`) stays invisible here, so every
+					// request kept sending the revoked key. Reload once; retry only if it changed.
+					const refreshed = await reloadedKey(deps, apiKey);
+					if (refreshed && !controller.signal.aborted) {
+						await response.body?.cancel().catch(() => {});
+						apiKey = refreshed;
+						response = await send(apiKey);
+					}
+				}
 				if (!response.ok) {
 					logger.debug("decisions/typesafe: request failed", {
 						status: response.status,
@@ -169,3 +182,24 @@ export function createTypeSafeDecisionBackend(deps: TypeSafeBackendDeps): Decisi
 		},
 	};
 }
+
+/**
+ * Re-read stored credentials and return the TypeSafe key if it differs from the one
+ * that was just rejected. Undefined when nothing changed (the key really is bad) or the
+ * store cannot be reloaded, so a genuinely revoked key costs one extra read, not a retry.
+ */
+async function reloadedKey(deps: TypeSafeBackendDeps, rejected: string): Promise<string | undefined> {
+	const storage = (deps.registry as { authStorage?: { reload?: () => Promise<void> } }).authStorage;
+	if (typeof storage?.reload !== "function") return undefined;
+	try {
+		await storage.reload();
+		const current = await deps.registry.getApiKeyForProvider(TYPESAFE_PROVIDER, deps.sessionId);
+		if (current && current !== rejected) {
+			logger.debug("decisions/typesafe: picked up a key replaced since this session started");
+			return current;
+		}
+	} catch (error) {
+		logger.debug("decisions/typesafe: credential reload failed", { error: String(error) });
+	}
+	return undefined;
+}

package/src/i18n/messages/de.settings.ts

@@ -235,6 +235,31 @@ export const deSettings: Record<string, string> = {
 	"set:task.serviceTier:o:claude-only:l": "Priorität (nur Claude)",
 	"set:task.serviceTier:o:claude-only:d":
 		"Anthropic-Schnellmodus bei direkten Claude-Anfragen; sonst ignoriert (inkl. Bedrock/Vertex)",
+	"set:fallback.maxAttempts:l": "Fallback-Versuche pro Modell",
+	"set:fallback.maxAttempts:d":
+		"Versuche je Modell der Fallback-Kette (einschließlich des ersten), bevor das nächste drankommt. Modelle ohne Anmeldedaten werden sofort übersprungen.",
+	"set:fallback.maxAttempts:o:1:l": "1 Versuch",
+	"set:fallback.maxAttempts:o:2:l": "2 Versuche",
+	"set:fallback.maxAttempts:o:3:l": "3 Versuche",
+	"set:fallback.maxAttempts:o:5:l": "5 Versuche",
+	"set:fallback.auto:l": "Automatischer Modell-Fallback",
+	"set:fallback.auto:d":
+		"Ist das Standardmodell blockiert (keine Anmeldung, Kontingent, Auth- oder Serverfehler), mit einem Modell eines anderen angemeldeten Anbieters weitermachen. /fallback zeigt die Kette.",
+	"set:auth.credentialRankingMode:l": "Reihenfolge mehrerer Konten",
+	"set:auth.credentialRankingMode:d":
+		"Welches angemeldete Konto eines Anbieters eine neue Sitzung verwendet. Ein blockiertes oder erschöpftes Konto übergibt immer an das nächste.",
+	"set:auth.credentialRankingMode:o:balanced:l": "Ausgewogen",
+	"set:auth.credentialRankingMode:o:balanced:d":
+		"Am wenigsten genutztes Konto zuerst; verteilt die Last und lässt jedem Konto Reserve",
+	"set:auth.credentialRankingMode:o:earliest-reset:l": "Früheste Zurücksetzung",
+	"set:auth.credentialRankingMode:o:earliest-reset:d":
+		"Konto, dessen Nutzungsfenster zuerst zurückgesetzt wird, zuerst, damit kein Kontingent verfällt",
+	"set:locate.enabled:l": "Locate (Jev-Codesuche)",
+	"set:locate.enabled:d":
+		"Bietet das locate-Werkzeug an, wenn ein TypeSafe-Schlüssel gespeichert ist. Zur Relevanzbewertung werden Ordnerpfade, Dateinamen und Deklarationszeilen (ohne Funktionsrümpfe und Kommentare) an TypeSafe gesendet.",
+	"set:startup.welcomeMouse:l": "Klickbare Startkarte",
+	"set:startup.welcomeMouse:d":
+		"Bis zum ersten Prompt die Maus übernehmen, damit eine letzte Sitzung auf der Startkarte mit einem Klick öffnet. Terminaltext währenddessen mit gedrückter Umschalttaste markieren. Aus: mit ↓ und Enter öffnen.",
 	"set:retry.maxRetries:l": "Wiederholungsversuche",
 	"set:retry.maxRetries:d": "Maximale Wiederholungsversuche bei API-Fehlern",
 	"set:retry.maxRetries:o:1:l": "1 Wiederholung",
@@ -773,6 +798,7 @@ export const deSettings: Record<string, string> = {
 	"set:searxng.endpoint:l": "SearXNG-Endpunkt",
 	"set:searxng.endpoint:d": "Basis-URL für selbst gehostete Suche",
 	"cmd:model:d": "Modell auswählen (öffnet Auswahloberfläche)",
+	"cmd:fallback:d": "Modelle anzeigen oder bearbeiten, die bei blockiertem Standardmodell versucht werden",
 	"cmd:fast:d": "Prioritäts-Service-Tier umschalten (OpenAI service_tier=priority, Anthropic speed=fast)",
 	"cmd:export:d": "Sitzung in HTML-Datei exportieren",
 	"cmd:dump:d": "Sitzungstranskript in die Zwischenablage kopieren",

package/src/i18n/messages/de.ts

@@ -8,41 +8,18 @@ export const de: Partial<Record<MsgKey, string>> = {
 	"lang.zh": "中文 (简体)",
 	"lang.ja": "日本語",
 	"welcome.tagline": "Programmieren sollte sich wie Denken anfühlen.",
-	"welcome.workflows": "Workflows",
-	"welcome.wf.deepInterview": "Umfang · Interview → Spec",
-	"welcome.wf.ralplan": "Konsensplan",
-	"welcome.wf.ultragoal": "autonomer Build",
-	"welcome.wf.team": "parallele Agenten",
-	"welcome.flowKeys": "Flow-Tasten",
 	"welcome.commands": "Befehle",
-	"welcome.actions": "Aktionen",
-	"welcome.shell": "Shell",
-	"welcome.python": "Python",
 	"welcome.keymap": "Keymap",
 	"welcome.model": "Modell",
-	"welcome.reasoning": "Reasoning",
-	"welcome.projectPulse": "Projektpuls",
-	"welcome.noLsp": "Keine LSP-Server",
 	"welcome.sessionTrail": "Sitzungsverlauf",
 	"welcome.noSessions": "Keine gespeicherten Verläufe",
 	"welcome.allSessions": "{key} alle Sitzungen",
+	"welcome.continue": "{key} fortsetzen",
+	"welcome.pick": "{key} wählen",
+	"welcome.pickActive": "↑↓ bewegen · ⏎ öffnen · esc zurück",
+	"welcome.sessions": "Sitzungen",
 	"welcome.chooseModel": "Modell auswählen",
 	"welcome.modelHint": "ctrl+l zum Auswählen · / für Befehle",
-	"welcome.label.workspace": "Arbeitsbereich",
-	"welcome.label.branch": "Branch",
-	"welcome.label.commits": "Commits",
-	"welcome.label.model": "Modell",
-	"welcome.label.reasoning": "Reasoning",
-	"welcome.label.preset": "Preset",
-	"welcome.label.roles": "Rollen",
-	"welcome.label.tools": "Werkzeuge",
-	"welcome.noGit": "kein Git-Repository",
-	"welcome.rolesInherit": "Rollen folgen dem Standardmodell",
-	"welcome.skills": "Skills",
-	"welcome.rules": "Regeln",
-	"welcome.clean": "sauber",
-	"welcome.whatsNew": "Neu",
-	"welcome.readyPrompt": "Bereit für den nächsten Prompt",
 	"settings.tab.appearance": "Darstellung",
 	"settings.tab.model": "Modell",
 	"settings.tab.interaction": "Interaktion",