@spacebar_ai/moldclaw-core 2026.3.41 → 2026.3.44

package/dist/setup.finalize-adiRfo0U.js

@@ -0,0 +1,522 @@
+import "./redact-fatrROh9.js";
+import "./errors-DOJWZqNo.js";
+import "./unhandled-rejections-CTvNvnT0.js";
+import "./logger-BFfIIIKH.js";
+import "./paths-D6AgsMTU.js";
+import "./tmp-moldclaw-dir-DWF-d8qD.js";
+import "./theme-BSXzMzAA.js";
+import "./globals-DESrFYmC.js";
+import { r as restoreTerminalState } from "./runtime-_tQz41uA.js";
+import "./ansi-BPhP6LBZ.js";
+import "./subsystem-CPmDTJ2P.js";
+import "./boolean-B6zcAynR.js";
+import "./env-D42cffog.js";
+import "./warning-filter-B1UOeM0G.js";
+import { h as pathExists, y as resolveUserPath } from "./utils-C7ykRPCQ.js";
+import "./links-BcahUP5U.js";
+import "./setup-binary-CcAv8NXz.js";
+import "./auth-profiles-smABVXzp.js";
+import "./model-selection-bBBxfXdb.js";
+import "./agent-scope-lZlwP1At.js";
+import "./boundary-file-read-tPYh_8fH.js";
+import "./logger-BGzLUitz.js";
+import "./exec-CvEtXqTZ.js";
+import { r as DEFAULT_BOOTSTRAP_FILENAME } from "./workspace-DJ_S272u.js";
+import "./io-BaBxjB1v.js";
+import "./host-env-security-DQ2i_W12.js";
+import "./safe-text-Cnulee_z.js";
+import "./version-T8nMYUnU.js";
+import "./env-substitution-68cyvF5h.js";
+import "./config-state-h5jUoHya.js";
+import "./network-mode-BtWXzwYn.js";
+import "./registry-C1pRrsQl.js";
+import "./manifest-registry-CS_p1OBQ.js";
+import "./ip-C4YAIpr4.js";
+import "./zod-schema.core-DvwgNmpd.js";
+import "./config-CwBv71QC.js";
+import "./audit-fs-CMb-YUHX.js";
+import "./resolve-PSlwZjg3.js";
+import "./provider-web-search-CcUC9ktE.js";
+import "./text-runtime-Cfq-Uyx0.js";
+import "./workspace-dirs-CGeIPpGN.js";
+import "./config-BwkGZjD5.js";
+import { n as resolveCliName } from "./cli-name-Bq08c3PW.js";
+import { t as formatCliCommand } from "./command-format-C_z0Ru-7.js";
+import "./tailnet-fFTz5Twr.js";
+import "./net-K181nxTH.js";
+import "./credentials-D-5Pb-aZ.js";
+import "./routes-CcJNnwTF.js";
+import "./frontmatter-Cgg0ICvh.js";
+import "./env-overrides-DBQl3LRc.js";
+import "./path-alias-guards-BtSO7sk7.js";
+import "./skills-DE_MXFSN.js";
+import "./ports-Ca74cFb2.js";
+import "./ports-lsof-CoiADo0p.js";
+import "./ssh-tunnel-DsY-9yao.js";
+import "./image-ops-Ck_D_vpe.js";
+import "./fs-safe-CRXFoBmh.js";
+import "./mime-DGFQe4XX.js";
+import "./server-middleware-Djfoa1s0.js";
+import "./message-channel-DFE4FuE_.js";
+import "./resolve-route-DdX-HBVt.js";
+import "./internal-hooks-83AcmxP3.js";
+import "./lazy-runtime-BoGB4usD.js";
+import "./config-schema-BNU4GQh_.js";
+import "./method-scopes-B2ZKSsxQ.js";
+import "./session-cost-usage-DWgQk6XT.js";
+import "./paths-ApLcu1Uu.js";
+import "./routing-DQ-fpTaA.js";
+import "./send-B1pX9_Oc.js";
+import "./node-resolve-BYC2FbO2.js";
+import "./provider-stream-Chz_EFw3.js";
+import "./identity-file-Diub2a0t.js";
+import "./provider-models-xnyxy6mO.js";
+import "./secret-file-p1IhQzwJ.js";
+import "./logging-Dy7UYzIN.js";
+import "./runtime-env-BlEtPF6b.js";
+import "./registry-BFMbkmgR.js";
+import "./provider-onboard-B9ionepI.js";
+import "./model-definitions-Cyyzm6Kr.js";
+import "./usage-Czgwvg0h.js";
+import "./device-identity-IG5DngWM.js";
+import "./auth-Ch3Rchm4.js";
+import "./subscription-DaA1urx-.js";
+import "./diagnostic-DTPopFvh.js";
+import "./message-hook-mappers-CeiHXgSQ.js";
+import "./json-store--7cBPxTG.js";
+import "./call-gdDAt07d.js";
+import "./multimodal-BJBBn_4F.js";
+import "./memory-search-tTD5o_rU.js";
+import "./query-expansion-D_Mm5Hhi.js";
+import "./search-manager-BS5Db0A6.js";
+import "./core-BwKq3krw.js";
+import "./issue-format-B0SI57Es.js";
+import "./logging-CdisccbY.js";
+import "./note-dOl5kPAy.js";
+import "./state-paths-DsMoTg25.js";
+import "./config-value-DT3-5958.js";
+import "./command-secret-targets-BFF4x_RB.js";
+import "./brave-w4Fo8WZ3.js";
+import "./provider-usage-kxemdMp2.js";
+import "./perplexity-CXwMDD3u.js";
+import "./restart-stale-pids-CPF1_61W.js";
+import "./delivery-queue-BOf5wYIc.js";
+import "./pairing-token-bu1e6z6X.js";
+import "./accounts-J2OhhhQi.js";
+import "./process-runtime-D27SftX_.js";
+import "./audit-CpfSjvyo.js";
+import "./cli-runtime-DTCHPjCi.js";
+import "./cli-utils-BCuSS4l6.js";
+import "./help-format-BFzPm_8V.js";
+import "./progress-Cwq59vgZ.js";
+import "./gateway-runtime-CBm3CCoA.js";
+import "./daemon-install-plan.shared-so6KadNd.js";
+import "./runtime-paths-BfFqPvDh.js";
+import "./runtime-guard-BpWoE02v.js";
+import { n as buildGatewayInstallPlan, r as gatewayInstallErrorHint, t as resolveGatewayInstallToken } from "./gateway-install-token-1PwJvrBY.js";
+import { n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-BR9EstPe.js";
+import "./control-ui-shared-Dm5Dh0Lo.js";
+import { b as waitForGatewayReachable, d as openUrl, g as resolveControlUiLinks, i as detectBrowserOpenSupport, o as formatControlUiSshHint, p as probeGatewayReachable } from "./onboard-helpers-DiSRTpZC.js";
+import "./runtime-parse--SHudmXO.js";
+import "./launchd-DTK8FAln.js";
+import { n as resolveGatewayService, t as describeGatewayServiceRestart } from "./service-D-iBQb7Y.js";
+import { i as isSystemdUserServiceAvailable } from "./systemd-C3JL-Eyf.js";
+import { r as installCompletion } from "./completion-cli-pVda2OFb.js";
+import "./register.subclis-B_4KCgTd.js";
+import "./command-registry-ktiJNAJd.js";
+import "./program-context-kNIw3fSf.js";
+import "./heartbeat-summary-Dct2lqJj.js";
+import { r as healthCommand } from "./health-C9DYGyRe.js";
+import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-C1YDYi82.js";
+import { t as resolveSetupSecretInputString } from "./setup.secret-input-BaplsS1Y.js";
+import { t as formatHealthCheckFailure } from "./health-format-BN81wqbV.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-D3GeVcFP.js";
+import { t as runTui } from "./tui-wV7R1Tlc.js";
+import path from "node:path";
+import os from "node:os";
+import fs from "node:fs/promises";
+//#region src/wizard/setup.completion.ts
+async function resolveProfileHint(shell) {
+	const home = process.env.HOME || os.homedir();
+	if (shell === "zsh") return "~/.zshrc";
+	if (shell === "bash") return await pathExists(path.join(home, ".bashrc")) ? "~/.bashrc" : "~/.bash_profile";
+	if (shell === "fish") return "~/.config/fish/config.fish";
+	return "$PROFILE";
+}
+function formatReloadHint(shell, profileHint) {
+	if (shell === "powershell") return "Restart your shell (or reload your PowerShell profile).";
+	return `Restart your shell or run: source ${profileHint}`;
+}
+async function setupWizardShellCompletion(params) {
+	const deps = {
+		resolveCliName,
+		checkShellCompletionStatus,
+		ensureCompletionCacheExists,
+		installCompletion,
+		...params.deps
+	};
+	const cliName = deps.resolveCliName();
+	const completionStatus = await deps.checkShellCompletionStatus(cliName);
+	if (completionStatus.usesSlowPattern) {
+		if (await deps.ensureCompletionCacheExists(cliName)) await deps.installCompletion(completionStatus.shell, true, cliName);
+		return;
+	}
+	if (completionStatus.profileInstalled && !completionStatus.cacheExists) {
+		await deps.ensureCompletionCacheExists(cliName);
+		return;
+	}
+	if (!completionStatus.profileInstalled) {
+		if (!(params.flow === "quickstart" ? true : await params.prompter.confirm({
+			message: `Enable ${completionStatus.shell} shell completion for ${cliName}?`,
+			initialValue: true
+		}))) return;
+		if (!await deps.ensureCompletionCacheExists(cliName)) {
+			await params.prompter.note(`Failed to generate completion cache. Run \`${cliName} completion --install\` later.`, "Shell completion");
+			return;
+		}
+		await deps.installCompletion(completionStatus.shell, true, cliName);
+		const profileHint = await resolveProfileHint(completionStatus.shell);
+		await params.prompter.note(`Shell completion installed. ${formatReloadHint(completionStatus.shell, profileHint)}`, "Shell completion");
+	}
+}
+//#endregion
+//#region src/wizard/setup.finalize.ts
+async function finalizeSetupWizard(options) {
+	const { flow, opts, baseConfig, nextConfig, settings, prompter, runtime } = options;
+	const withWizardProgress = async (label, options, work) => {
+		const progress = prompter.progress(label);
+		try {
+			return await work(progress);
+		} finally {
+			progress.stop(typeof options.doneMessage === "function" ? options.doneMessage() : options.doneMessage);
+		}
+	};
+	const systemdAvailable = process.platform === "linux" ? await isSystemdUserServiceAvailable() : true;
+	if (process.platform === "linux" && !systemdAvailable) await prompter.note("Systemd user services are unavailable. Skipping lingering checks and service install.", "Systemd");
+	if (process.platform === "linux" && systemdAvailable) {
+		const { ensureSystemdUserLingerInteractive } = await import("./systemd-linger-Bhr8jd1U.js");
+		await ensureSystemdUserLingerInteractive({
+			runtime,
+			prompter: {
+				confirm: prompter.confirm,
+				note: prompter.note
+			},
+			reason: "Linux installs use a systemd user service by default. Without lingering, systemd stops the user session on logout/idle and kills the Gateway.",
+			requireConfirm: false
+		});
+	}
+	const explicitInstallDaemon = typeof opts.installDaemon === "boolean" ? opts.installDaemon : void 0;
+	let installDaemon;
+	if (explicitInstallDaemon !== void 0) installDaemon = explicitInstallDaemon;
+	else if (process.platform === "linux" && !systemdAvailable) installDaemon = false;
+	else if (flow === "quickstart") installDaemon = true;
+	else installDaemon = await prompter.confirm({
+		message: "Install Gateway service (recommended)",
+		initialValue: true
+	});
+	if (process.platform === "linux" && !systemdAvailable && installDaemon) {
+		await prompter.note("Systemd user services are unavailable; skipping service install. Use your container supervisor or `docker compose up -d`.", "Gateway service");
+		installDaemon = false;
+	}
+	if (installDaemon) {
+		const daemonRuntime = flow === "quickstart" ? DEFAULT_GATEWAY_DAEMON_RUNTIME : await prompter.select({
+			message: "Gateway service runtime",
+			options: GATEWAY_DAEMON_RUNTIME_OPTIONS,
+			initialValue: opts.daemonRuntime ?? "node"
+		});
+		if (flow === "quickstart") await prompter.note("QuickStart uses Node for the Gateway service (stable + supported).", "Gateway service runtime");
+		const service = resolveGatewayService();
+		const loaded = await service.isLoaded({ env: process.env });
+		let restartWasScheduled = false;
+		if (loaded) {
+			const action = await prompter.select({
+				message: "Gateway service already installed",
+				options: [
+					{
+						value: "restart",
+						label: "Restart"
+					},
+					{
+						value: "reinstall",
+						label: "Reinstall"
+					},
+					{
+						value: "skip",
+						label: "Skip"
+					}
+				]
+			});
+			if (action === "restart") {
+				let restartDoneMessage = "Gateway service restarted.";
+				await withWizardProgress("Gateway service", { doneMessage: () => restartDoneMessage }, async (progress) => {
+					progress.update("Restarting Gateway service…");
+					const restartStatus = describeGatewayServiceRestart("Gateway", await service.restart({
+						env: process.env,
+						stdout: process.stdout
+					}));
+					restartDoneMessage = restartStatus.progressMessage;
+					restartWasScheduled = restartStatus.scheduled;
+				});
+			} else if (action === "reinstall") await withWizardProgress("Gateway service", { doneMessage: "Gateway service uninstalled." }, async (progress) => {
+				progress.update("Uninstalling Gateway service…");
+				await service.uninstall({
+					env: process.env,
+					stdout: process.stdout
+				});
+			});
+		}
+		if (!loaded || !restartWasScheduled && loaded && !await service.isLoaded({ env: process.env })) {
+			const progress = prompter.progress("Gateway service");
+			let installError = null;
+			try {
+				progress.update("Preparing Gateway service…");
+				const tokenResolution = await resolveGatewayInstallToken({
+					config: nextConfig,
+					env: process.env
+				});
+				for (const warning of tokenResolution.warnings) await prompter.note(warning, "Gateway service");
+				if (tokenResolution.unavailableReason) installError = [
+					"Gateway install blocked:",
+					tokenResolution.unavailableReason,
+					"Fix gateway auth config/token input and rerun setup."
+				].join(" ");
+				else {
+					const { programArguments, workingDirectory, environment } = await buildGatewayInstallPlan({
+						env: process.env,
+						port: settings.port,
+						runtime: daemonRuntime,
+						warn: (message, title) => prompter.note(message, title),
+						config: nextConfig
+					});
+					progress.update("Installing Gateway service…");
+					await service.install({
+						env: process.env,
+						stdout: process.stdout,
+						programArguments,
+						workingDirectory,
+						environment
+					});
+				}
+			} catch (err) {
+				installError = err instanceof Error ? err.message : String(err);
+			} finally {
+				progress.stop(installError ? "Gateway service install failed." : "Gateway service installed.");
+			}
+			if (installError) {
+				await prompter.note(`Gateway service install failed: ${installError}`, "Gateway");
+				await prompter.note(gatewayInstallErrorHint(), "Gateway");
+			}
+		}
+	}
+	if (!opts.skipHealth) {
+		await waitForGatewayReachable({
+			url: resolveControlUiLinks({
+				bind: nextConfig.gateway?.bind ?? "loopback",
+				port: settings.port,
+				customBindHost: nextConfig.gateway?.customBindHost,
+				basePath: void 0
+			}).wsUrl,
+			token: settings.gatewayToken,
+			deadlineMs: 15e3
+		});
+		try {
+			await healthCommand({
+				json: false,
+				timeoutMs: 1e4
+			}, runtime);
+		} catch (err) {
+			runtime.error(formatHealthCheckFailure(err));
+			await prompter.note([
+				"Docs:",
+				"https://docs.moldclaw.ai/gateway/health",
+				"https://docs.moldclaw.ai/gateway/troubleshooting"
+			].join("\n"), "Health check help");
+		}
+	}
+	const controlUiEnabled = nextConfig.gateway?.controlUi?.enabled ?? baseConfig.gateway?.controlUi?.enabled ?? true;
+	if (!opts.skipUi && controlUiEnabled) {
+		const controlUiAssets = await ensureControlUiAssetsBuilt(runtime);
+		if (!controlUiAssets.ok && controlUiAssets.message) runtime.error(controlUiAssets.message);
+	}
+	await prompter.note([
+		"Add nodes for extra features:",
+		"- macOS app (system + notifications)",
+		"- iOS app (camera/canvas)",
+		"- Android app (camera/canvas)"
+	].join("\n"), "Optional apps");
+	const controlUiBasePath = nextConfig.gateway?.controlUi?.basePath ?? baseConfig.gateway?.controlUi?.basePath;
+	const links = resolveControlUiLinks({
+		bind: settings.bind,
+		port: settings.port,
+		customBindHost: settings.customBindHost,
+		basePath: controlUiBasePath
+	});
+	const authedUrl = settings.authMode === "token" && settings.gatewayToken ? `${links.httpUrl}#token=${encodeURIComponent(settings.gatewayToken)}` : links.httpUrl;
+	let resolvedGatewayPassword = "";
+	if (settings.authMode === "password") try {
+		resolvedGatewayPassword = await resolveSetupSecretInputString({
+			config: nextConfig,
+			value: nextConfig.gateway?.auth?.password,
+			path: "gateway.auth.password",
+			env: process.env
+		}) ?? "";
+	} catch (error) {
+		await prompter.note(["Could not resolve gateway.auth.password SecretRef for setup auth.", error instanceof Error ? error.message : String(error)].join("\n"), "Gateway auth");
+	}
+	const gatewayProbe = await probeGatewayReachable({
+		url: links.wsUrl,
+		token: settings.authMode === "token" ? settings.gatewayToken : void 0,
+		password: settings.authMode === "password" ? resolvedGatewayPassword : ""
+	});
+	const gatewayStatusLine = gatewayProbe.ok ? "Gateway: reachable" : `Gateway: not detected${gatewayProbe.detail ? ` (${gatewayProbe.detail})` : ""}`;
+	const bootstrapPath = path.join(resolveUserPath(options.workspaceDir), DEFAULT_BOOTSTRAP_FILENAME);
+	const hasBootstrap = await fs.access(bootstrapPath).then(() => true).catch(() => false);
+	await prompter.note([
+		`Web UI: ${links.httpUrl}`,
+		settings.authMode === "token" && settings.gatewayToken ? `Web UI (with token): ${authedUrl}` : void 0,
+		`Gateway WS: ${links.wsUrl}`,
+		gatewayStatusLine,
+		"Docs: https://docs.moldclaw.ai/web/control-ui"
+	].filter(Boolean).join("\n"), "Control UI");
+	let controlUiOpened = false;
+	let controlUiOpenHint;
+	let hatchChoice = null;
+	let launchedTui = false;
+	if (!opts.skipUi && gatewayProbe.ok) {
+		if (hasBootstrap) await prompter.note([
+			"This is the defining action that makes your agent you.",
+			"Please take your time.",
+			"The more you tell it, the better the experience will be.",
+			"We will send: \"Wake up, my friend!\""
+		].join("\n"), "Start TUI (best option!)");
+		await prompter.note([
+			"Gateway token: shared auth for the Gateway + Control UI.",
+			"Stored in: ~/.moldclaw/moldclaw.json (gateway.auth.token) or MOLDCLAW_GATEWAY_TOKEN.",
+			`View token: ${formatCliCommand("moldclaw config get gateway.auth.token")}`,
+			`Generate token: ${formatCliCommand("moldclaw doctor --generate-gateway-token")}`,
+			"Web UI keeps dashboard URL tokens in memory for the current tab and strips them from the URL after load.",
+			`Open the dashboard anytime: ${formatCliCommand("moldclaw dashboard --no-open")}`,
+			"If prompted: paste the token into Control UI settings (or use the tokenized dashboard URL)."
+		].join("\n"), "Token");
+		hatchChoice = await prompter.select({
+			message: "How do you want to hatch your bot?",
+			options: [
+				{
+					value: "tui",
+					label: "Hatch in TUI (recommended)"
+				},
+				{
+					value: "web",
+					label: "Open the Web UI"
+				},
+				{
+					value: "later",
+					label: "Do this later"
+				}
+			],
+			initialValue: "tui"
+		});
+		if (hatchChoice === "tui") {
+			restoreTerminalState("pre-setup tui", { resumeStdinIfPaused: true });
+			await runTui({
+				url: links.wsUrl,
+				token: settings.authMode === "token" ? settings.gatewayToken : void 0,
+				password: settings.authMode === "password" ? resolvedGatewayPassword : "",
+				deliver: false,
+				message: hasBootstrap ? "Wake up, my friend!" : void 0
+			});
+			launchedTui = true;
+		} else if (hatchChoice === "web") {
+			if ((await detectBrowserOpenSupport()).ok) {
+				controlUiOpened = await openUrl(authedUrl);
+				if (!controlUiOpened) controlUiOpenHint = formatControlUiSshHint({
+					port: settings.port,
+					basePath: controlUiBasePath,
+					token: settings.authMode === "token" ? settings.gatewayToken : void 0
+				});
+			} else controlUiOpenHint = formatControlUiSshHint({
+				port: settings.port,
+				basePath: controlUiBasePath,
+				token: settings.authMode === "token" ? settings.gatewayToken : void 0
+			});
+			await prompter.note([
+				`Dashboard link (with token): ${authedUrl}`,
+				controlUiOpened ? "Opened in your browser. Keep that tab to control moldClaw." : "Copy/paste this URL in a browser on this machine to control moldClaw.",
+				controlUiOpenHint
+			].filter(Boolean).join("\n"), "Dashboard ready");
+		} else await prompter.note(`When you're ready: ${formatCliCommand("moldclaw dashboard --no-open")}`, "Later");
+	} else if (opts.skipUi) await prompter.note("Skipping Control UI/TUI prompts.", "Control UI");
+	await prompter.note(["Back up your agent workspace.", "Docs: https://docs.moldclaw.ai/concepts/agent-workspace"].join("\n"), "Workspace backup");
+	await prompter.note("Running agents on your computer is risky — harden your setup: https://docs.moldclaw.ai/security", "Security");
+	await setupWizardShellCompletion({
+		flow,
+		prompter
+	});
+	if (!opts.skipUi && settings.authMode === "token" && Boolean(settings.gatewayToken) && hatchChoice === null) {
+		if ((await detectBrowserOpenSupport()).ok) {
+			controlUiOpened = await openUrl(authedUrl);
+			if (!controlUiOpened) controlUiOpenHint = formatControlUiSshHint({
+				port: settings.port,
+				basePath: controlUiBasePath,
+				token: settings.gatewayToken
+			});
+		} else controlUiOpenHint = formatControlUiSshHint({
+			port: settings.port,
+			basePath: controlUiBasePath,
+			token: settings.gatewayToken
+		});
+		await prompter.note([
+			`Dashboard link (with token): ${authedUrl}`,
+			controlUiOpened ? "Opened in your browser. Keep that tab to control moldClaw." : "Copy/paste this URL in a browser on this machine to control moldClaw.",
+			controlUiOpenHint
+		].filter(Boolean).join("\n"), "Dashboard ready");
+	}
+	const webSearchProvider = nextConfig.tools?.web?.search?.provider;
+	const webSearchEnabled = nextConfig.tools?.web?.search?.enabled;
+	if (webSearchProvider) {
+		const { SEARCH_PROVIDER_OPTIONS, resolveExistingKey, hasExistingKey, hasKeyInEnv } = await import("./onboard-search-BgA3jEMW.js");
+		const entry = SEARCH_PROVIDER_OPTIONS.find((e) => e.value === webSearchProvider);
+		const label = entry?.label ?? webSearchProvider;
+		const storedKey = resolveExistingKey(nextConfig, webSearchProvider);
+		const keyConfigured = hasExistingKey(nextConfig, webSearchProvider);
+		const envAvailable = entry ? hasKeyInEnv(entry) : false;
+		const hasKey = keyConfigured || envAvailable;
+		const keySource = storedKey ? "API key: stored in config." : keyConfigured ? "API key: configured via secret reference." : envAvailable ? `API key: provided via ${entry?.envKeys.join(" / ")} env var.` : void 0;
+		if (webSearchEnabled !== false && hasKey) await prompter.note([
+			"Web search is enabled, so your agent can look things up online when needed.",
+			"",
+			`Provider: ${label}`,
+			...keySource ? [keySource] : [],
+			"Docs: https://docs.moldclaw.ai/tools/web"
+		].join("\n"), "Web search");
+		else if (!hasKey) await prompter.note([
+			`Provider ${label} is selected but no API key was found.`,
+			"web_search will not work until a key is added.",
+			`  ${formatCliCommand("moldclaw configure --section web")}`,
+			"",
+			`Get your key at: ${entry?.signupUrl ?? "https://docs.moldclaw.ai/tools/web"}`,
+			"Docs: https://docs.moldclaw.ai/tools/web"
+		].join("\n"), "Web search");
+		else await prompter.note([
+			`Web search (${label}) is configured but disabled.`,
+			`Re-enable: ${formatCliCommand("moldclaw configure --section web")}`,
+			"",
+			"Docs: https://docs.moldclaw.ai/tools/web"
+		].join("\n"), "Web search");
+	} else {
+		const { SEARCH_PROVIDER_OPTIONS, hasExistingKey, hasKeyInEnv } = await import("./onboard-search-BgA3jEMW.js");
+		const legacyDetected = SEARCH_PROVIDER_OPTIONS.find((e) => hasExistingKey(nextConfig, e.value) || hasKeyInEnv(e));
+		if (legacyDetected) await prompter.note([`Web search is available via ${legacyDetected.label} (auto-detected).`, "Docs: https://docs.moldclaw.ai/tools/web"].join("\n"), "Web search");
+		else await prompter.note([
+			"Web search was skipped. You can enable it later:",
+			`  ${formatCliCommand("moldclaw configure --section web")}`,
+			"",
+			"Docs: https://docs.moldclaw.ai/tools/web"
+		].join("\n"), "Web search");
+	}
+	await prompter.note("What now: https://moldclaw.ai/showcase (\"What People Are Building\").", "What now");
+	await prompter.outro(controlUiOpened ? "Onboarding complete. Dashboard opened; keep that tab to control moldClaw." : "Onboarding complete. Use the dashboard link above to control moldClaw.");
+	return { launchedTui };
+}
+//#endregion
+export { finalizeSetupWizard };