@spinabot/brigade 0.1.2 → 1.0.1

package/dist/ui/onboarding.js

@@ -12,16 +12,19 @@
  * Uses Pi-TUI components — same components the chat UI uses, so the visual
  * language is consistent across the app.
  */
-import * as path from "node:path";
-import { getEnvApiKey, getModels } from "@mariozechner/pi-ai";
+import { getModels } from "@mariozechner/pi-ai";
 import { CancellableLoader, Input, SelectList, Text } from "@mariozechner/pi-tui";
-import { loadBrigadeConfig, writeBrigadeConfig } from "../core/brigade-config.js";
-import { BRIGADE_DIR, saveConfig } from "../core/config.js";
+import { upsertApiKeyProfile, upsertApiKeyRefProfile } from "../auth/profiles.js";
+import { DEFAULT_AGENT_ID, resolveAuthProfilesPath, resolveModelsPath } from "../config/paths.js";
+import { saveConfig } from "../core/config.js";
 import { discoverOllamaModels, writeOllamaToModelsJson } from "../integrations/ollama.js";
-import { findProvider, PROVIDERS } from "../providers/catalog.js";
+import { findProvider, PROVIDERS, readProviderEnvKey, resolveProviderEnvVarSource, } from "../providers/catalog.js";
 import { validateApiKeyOnline } from "../providers/validate-key.js";
 import { renderBrandHeader } from "./brand.js";
 import { brand, selectListTheme } from "./theme.js";
+import { pickStorageMode } from "./onboard-storage-mode.js";
+import { SearchableSelectList } from "./searchable-select.js";
+import { listOpenRouterModels } from "../integrations/provider-discovery.js";
 /* ────────────────────────────── public API ────────────────────────────── */
 /**
  * Resolve the model list for a provider. Pi's static `getModels()` only knows
@@ -31,28 +34,85 @@ import { brand, selectListTheme } from "./theme.js";
  * the dynamic registry — that way both code paths produce the same `Model<any>[]`
  * shape that the picker expects.
  */
-function getProviderModels(modelRegistry, providerId) {
+async function getProviderModels(modelRegistry, providerId) {
+    const staticModels = (() => {
+        try {
+            const fromCatalog = getModels(providerId);
+            if (fromCatalog && fromCatalog.length > 0)
+                return fromCatalog;
+        }
+        catch {
+            /* unknown provider — fall through */
+        }
+        return modelRegistry.getAll().filter((m) => m.provider === providerId);
+    })();
+    // Live-merge OpenRouter's CURRENT catalog so models newer than Pi's bundled
+    // snapshot (e.g. the latest Opus/GPT/Gemini) show up in the picker. Best-
+    // effort, cached, short timeout — on ANY failure we keep the static list so
+    // offline onboarding still works. Static/catalogued entries win (richer
+    // metadata); live-only ids are appended.
+    if (providerId !== "openrouter")
+        return staticModels;
     try {
-        const fromCatalog = getModels(providerId);
-        if (fromCatalog && fromCatalog.length > 0)
-            return fromCatalog;
+        const live = await listOpenRouterModels();
+        if (live.length === 0)
+            return staticModels;
+        const seen = new Set(staticModels.map((m) => m.id));
+        const merged = [...staticModels];
+        for (const lm of live) {
+            if (!seen.has(lm.id))
+                merged.push(lm);
+        }
+        return merged;
     }
     catch {
-        /* unknown provider — fall through */
+        return staticModels;
     }
-    return modelRegistry.getAll().filter((m) => m.provider === providerId);
 }
 export async function runOnboarding(tui, authStorage, modelRegistry, opts = {}) {
     // Tiny step state machine so each step can resolve to "ok" or "back".
     // Esc on provider picker exits onboarding entirely; Esc on later steps
     // just rewinds to the previous step. This is what makes invalid keys
     // recoverable instead of a one-shot abort.
+    //
+    // No "auto-select from env" shortcut. Even when EXACTLY ONE provider
+    // has an env key set, the user goes through the picker → `ensureApiKey`
+    // → "Use existing X?" Yes/No prompt (with default = Yes). Skipping
+    // silently to "we picked for you" was explicitly rejected because it
+    // removes the explicit choice the user expects.
+    // Step 0 — storage mode. Throws "onboarding-cancelled" if the user Escs
+    // the mode picker (we treat that as bail-out, same as Esc on provider).
+    // The storage-mode UI handles its own retry loop for the convex URL probe
+    // and throws a special "storage-mode-revert-to-filesystem" when the user
+    // Escs the convex sub-flow — we catch and default to filesystem so the
+    // rest of the wizard always sees a settled choice.
+    let storage;
+    if (opts.storage) {
+        // Caller already picked the mode AND booted the matching runtime context
+        // (the onboard command hoists Step 0 so convex writes seal into the
+        // backend). Don't re-run the picker or we'd prompt twice and risk a
+        // second, conflicting mode pick.
+        storage = opts.storage;
+    }
+    else {
+        try {
+            storage = await pickStorageMode(tui);
+        }
+        catch (err) {
+            if (err.message === "storage-mode-revert-to-filesystem") {
+                storage = { mode: "filesystem" };
+            }
+            else {
+                throw err; // "onboarding-cancelled" propagates to caller
+            }
+        }
+    }
     let step = "provider";
     let provider = "";
     let modelId = "";
     while (true) {
         if (step === "provider") {
-            renderScreen(tui, "Step 1 of 3 · Pick a provider");
+            renderScreen(tui, "Step 1 of 5 · Pick a provider");
             provider = await pickProvider(tui); // throws "onboarding-cancelled" on Esc
             step = "key";
             continue;
@@ -71,7 +131,10 @@ export async function runOnboarding(tui, authStorage, modelRegistry, opts = {})
                 step = "model";
                 continue;
             }
-            const result = await ensureApiKey(tui, authStorage, provider, { noEnvDetect: opts.noEnvDetect });
+            const result = await ensureApiKey(tui, authStorage, provider, {
+                noEnvDetect: opts.noEnvDetect,
+                secretInputMode: opts.secretInputMode,
+            });
             if (result === "back") {
                 step = "provider";
                 continue;
@@ -81,7 +144,7 @@ export async function runOnboarding(tui, authStorage, modelRegistry, opts = {})
             continue;
         }
         // step === "model"
-        renderScreen(tui, "Step 3 of 3 · Default model");
+        renderScreen(tui, "Step 3 of 5 · Default model");
         const result = await pickModel(tui, modelRegistry, provider);
         if (result === "back") {
             step = "provider"; // go all the way back so they can change provider too
@@ -90,12 +153,29 @@ export async function runOnboarding(tui, authStorage, modelRegistry, opts = {})
         modelId = result.modelId;
         break;
     }
+    // No agent-naming step. The wizard ends at provider+auth+model — the
+    // agent's identity is left for the agent itself to discover via
+    // BOOTSTRAP.md on first turn. Workspace scaffolding still happens at
+    // agent boot via `buildAgent → seedDefaultPrompts`.
     await saveConfig({ defaultProvider: provider, defaultModelId: modelId });
+    // Step 4 of 5 — web-search backend. Same Pi-TUI components, same brand
+    // header. Re-runnable via `brigade onboard web`.
+    try {
+        const { runWebSetupStep } = await import("../cli/flows/web-setup.js");
+        await runWebSetupStep(tui, {
+            stepLabel: "Step 4 of 5 · Web search",
+            secretInputMode: opts.secretInputMode,
+        });
+    }
+    catch {
+        // Don't gate onboarding success on web-setup tripping — the user
+        // can always run `brigade onboard web` later.
+    }
     renderScreen(tui, ""); // brand-only frame for the "Ready." moment
     renderDone(tui, provider, modelId);
     await delay(900);
     clear(tui);
-    return { provider, modelId };
+    return { provider, modelId, storage };
 }
 /* ────────────────────────── screen scaffolding ────────────────────────── */
 /** Wipe everything, render the chunky brand header, then a sub-header line. */
@@ -120,7 +200,10 @@ async function pickProvider(tui) {
     const detected = [];
     const undetected = [];
     for (const p of PROVIDERS) {
-        const hasEnvKey = !!getEnvApiKey(p.id);
+        // `readProviderEnvKey` checks `envVar` AND any `envVarFallbacks` —
+        // Anthropic users with `ANTHROPIC_OAUTH_TOKEN` set get the detected
+        // badge alongside the standard `ANTHROPIC_API_KEY` path.
+        const hasEnvKey = !!readProviderEnvKey(p);
         const noAuth = p.noAuth === true;
         const item = {
             value: p.id,
@@ -161,59 +244,55 @@ export async function ensureApiKey(tui, authStorage, providerId, opts = {}) {
     const provider = findProvider(providerId);
     if (!provider)
         throw new Error(`Unknown provider: ${providerId}`);
-    // Already configured? (env var OR previously stored)
-    // CRITICAL: an env var being PRESENT doesn't mean it WORKS — stale leftover
-    // values (from old experiments, exported by .bashrc, etc.) silently auto-
-    // completed onboarding and let users reach chat with a dead key. We now
-    // always run the online validation. Stored credentials get the fast accept
-    // only if they previously passed validation when first saved (which is
-    // always — see the typed-key path below — so saved keys are trustworthy
-    // enough to skip the re-check).
+    // Already configured? (saved on disk OR set in shell env)
     //
-    // `noEnvDetect` short-circuits the entire env-detection path: when true we
-    // pretend no credential exists, regardless of what `authStorage` returns
-    // from a shell env fallback. The typed-key prompt fires immediately. This
-    // is the enterprise / CI escape hatch — operators who want TYPED-only auth
-    // can flip the flag and Brigade never silently consults `$env:OPENROUTER_API_KEY`
-    // or its peers.
-    const existing = opts.noEnvDetect ? "" : await authStorage.getApiKey(providerId);
-    if (existing) {
-        const fromEnv = !!getEnvApiKey(providerId);
-        if (!fromEnv) {
-            // Saved credential — passed validation when first stored. Fast accept.
-            renderScreen(tui, `Step 2 of 3 · ${provider.name}`);
-            tui.addChild(new Text(`  ${brand.amber("✓")} ${provider.name} is already connected (using ${brand.white("your saved credentials")}).`, 0, 0));
-            tui.requestRender();
-            await delay(600);
-            return "ok";
-        }
-        // Env-supplied key: ALWAYS confirm with the user before adopting it.
-        // Just because OPENROUTER_API_KEY (etc.) is exported in the user's
-        // shell does NOT mean they want this onboarding session to consume it.
-        // Auto-accepting silently led to the "I never typed a key, why is it
-        // already connected?" footgun. Default to No (defensive opt-in) so
-        // pressing Enter falls through to the typed-key prompt.
-        //
-        // Wording rationale: "shell environment" is portable across PowerShell,
-        // bash, zsh, fish, cmd, etc. The previous "(env, sk-…)" label was too
-        // cryptic — "env" could be read as brigade.json::env OR shell env, and
-        // users who had just run `Remove-Item -Recurse ~/.brigade` (or the bash
-        // equivalent) couldn't tell where the credential was coming from. Be
-        // explicit so they immediately know the key originated from THEIR shell,
-        // not from a stale brigade.json.
+    // Two sources, checked in order:
+    //   1. `authStorage.getApiKey(providerId)` — Pi's stored credentials
+    //      (~/.brigade/auth.json). Saved keys passed validation when first
+    //      written, so we can fast-accept without re-pinging the provider.
+    //   2. `readProviderEnvKey(provider)` — Brigade's shell-env reader. Honors
+    //      the primary `envVar` PLUS `envVarFallbacks` (e.g. ANTHROPIC_OAUTH_TOKEN
+    //      as a fallback for ANTHROPIC_API_KEY). Pi's `authStorage.getApiKey`
+    //      does NOT consult shell env, so this fallback is what makes the
+    //      env-confirmation flow below actually fire — without it, a user
+    //      with `OPENROUTER_API_KEY` exported sees the paste-key prompt
+    //      instead of "Use existing OPENROUTER_API_KEY?". `process.env`
+    //      is read directly at key-entry time (post-provider-selection).
+    //
+    // CRITICAL: an env var being PRESENT doesn't mean it WORKS — stale
+    // leftover values silently auto-completed onboarding before, letting
+    // users reach chat with a dead key. The confirm-then-validate path
+    // below catches that.
+    //
+    // `noEnvDetect` short-circuits the env path entirely: when true we
+    // pretend no credential exists. This is the enterprise / CI escape
+    // hatch — operators wanting TYPED-only auth flip the flag and Brigade
+    // never silently consults `$env:OPENROUTER_API_KEY` or its peers.
+    // Env-key detection — read process.env directly, prompt to confirm
+    // whenever found, fall through to typed-paste on No or no-env.
+    //
+    // CRITICAL: env-confirm fires WHENEVER a shell env var is present, even
+    // if a saved profile from a previous onboard already exists. The user
+    // gets to re-affirm the env value (default Yes) or switch to a freshly
+    // typed key. Skipping the prompt when "already saved" was explicitly
+    // rejected because it removes that choice.
+    //
+    // `noEnvDetect` short-circuits env entirely (CI / typed-only operators).
+    const envKey = opts.noEnvDetect ? undefined : readProviderEnvKey(provider);
+    if (envKey) {
+        // Env-supplied key: confirm with the user before adopting it. The
+        // canonical form is `Use existing OPENROUTER_API_KEY (env:
+        // OPENROUTER_API_KEY, sk-o…52b5)?`. Single line, default = Yes.
+        // No explanatory paragraphs.
         const envVar = provider.envVar ?? "the env var";
-        renderScreen(tui, `Step 2 of 3 · ${provider.name}`);
-        tui.addChild(new Text(brand.dim(`  Brigade detected this key in your shell environment.`), 0, 0));
-        tui.addChild(new Text(brand.dim(`  Picking "Yes" persists it to ~/.brigade/brigade.json (so it survives shell restarts and machine moves).`), 0, 0));
-        tui.addChild(new Text("", 0, 0));
-        tui.addChild(new Text(`  ${brand.amber("?")} Use ${envVar} from your shell environment (${formatApiKeyPreview(existing)})?`, 0, 0));
-        tui.addChild(new Text(brand.dim(`  Pick "No" to paste a different ${provider.name} key instead.`), 0, 0));
+        renderScreen(tui, `Step 2 of 5 · ${provider.name}`);
+        tui.addChild(new Text(`  ${brand.amber("?")} Use existing ${envVar} (env: ${envVar}, ${formatApiKeyPreview(envKey)})?`, 0, 0));
         tui.addChild(new Text("", 0, 0));
         const confirmList = new SelectList([
-            { value: "no", label: "No, let me paste a different key" },
-            { value: "yes", label: "Yes, use the shell-env value" },
-        ], 2, selectListTheme, { minPrimaryColumnWidth: 36, maxPrimaryColumnWidth: 48 });
-        confirmList.setSelectedIndex(0); // defensive: default = No
+            { value: "yes", label: "Yes" },
+            { value: "no", label: "No" },
+        ], 2, selectListTheme, { minPrimaryColumnWidth: 6, maxPrimaryColumnWidth: 8 });
+        confirmList.setSelectedIndex(0); // default Yes
         tui.addChild(confirmList);
         tui.setFocus(confirmList);
         tui.requestRender();
@@ -234,7 +313,7 @@ export async function ensureApiKey(tui, authStorage, providerId, opts = {}) {
             // and let them paste their own. The typed-key loop below treats
             // `lastError === null` as a clean first iteration, so no stale
             // error text leaks in.
-            renderScreen(tui, `Step 2 of 3 · Connect ${provider.name}`);
+            renderScreen(tui, `Step 2 of 5 · ${provider.name}`);
             // Fall through to typed-key loop without `lastError` set.
             // (Variable declared just below the env block.)
             return await promptTypedKey(tui, authStorage, provider, providerId, null);
@@ -244,17 +323,57 @@ export async function ensureApiKey(tui, authStorage, providerId, opts = {}) {
         const envLoader = new CancellableLoader(tui, (s) => brand.amber(s), (s) => brand.dim(s), `Verifying ${provider.name}…`);
         tui.addChild(envLoader);
         tui.requestRender();
-        const envCheck = await validateApiKeyOnline(providerId, existing);
+        const envCheck = await validateApiKeyOnline(providerId, envKey);
         tui.removeChild(envLoader);
         if (envCheck.ok) {
-            // State-isolation contract: everything Brigade needs lives under
-            // `~/.brigade/`. The env var that fed us this key is owned by the
-            // user's shell, so without persisting it here, `rm -rf ~/.brigade`
-            // would NOT actually wipe auth — the key would sneak back in via
-            // env detection on the next boot. Mirror it into brigade.json::env
-            // so the file is the canonical home for the credential.
-            await persistEnvKeyToBrigadeConfig(provider, existing);
-            tui.addChild(new Text(`  ${brand.amber("✓")} ${provider.name} is already connected (using ${brand.white("your environment")}).`, 0, 0));
+            // Two persistence shapes, switched by `secretInputMode`. Both
+            // write to `~/.brigade/agents/<id>/agent/auth-profiles.json`
+            // under the same `profileId(provider)`; the shape on disk
+            // differs:
+            //
+            //   PLAINTEXT (default):
+            //     { type: "api_key", provider, key: "sk-or-v1-abc…" }
+            //
+            //   REF:
+            //     { type: "api_key", provider,
+            //       keyRef: { source: "env", provider: "default", id: "<MATCHED_VAR>" } }
+            //
+            // Critical for ref mode: the `id` MUST be the env var that
+            // actually held the value (could be `provider.envVar` OR a
+            // `provider.envVarFallbacks[i]` like `ANTHROPIC_OAUTH_TOKEN`).
+            // Pinning to `provider.envVar` blindly would leave the agent unable
+            // to resolve the key at runtime when a fallback satisfied the read.
+            //
+            // In-process seeding (so the wizard can immediately use the key):
+            //   - PLAINTEXT: `authStorage.set` writes Pi's in-memory store AND
+            //     ~/.brigade/auth.json. Fine — it's the same literal value
+            //     auth-profiles.json holds.
+            //   - REF: `authStorage.set` would persist the LITERAL value to
+            //     ~/.brigade/auth.json, defeating ref mode (literal would land
+            //     in TWO files on disk). Skip it; rely on `process.env` already
+            //     holding the value (it's where we read it from). The runtime
+            //     reads via `loadBrigadeAuthStorage` → `resolveProfileKey` →
+            //     `process.env[keyRef.id]` (auth-bridge.ts:101-117).
+            const mode = opts.secretInputMode ?? "plaintext";
+            const envSource = resolveProviderEnvVarSource(provider);
+            if (mode === "ref" && envSource) {
+                upsertApiKeyRefProfile(DEFAULT_AGENT_ID, {
+                    provider: providerId,
+                    keyRef: { source: "env", provider: "default", id: envSource.name },
+                });
+                // process.env already has it (we just read from it). Belt-and-
+                // suspenders: ensure it sticks for the in-process agent.
+                process.env[envSource.name] = envSource.value;
+            }
+            else {
+                upsertApiKeyProfile(DEFAULT_AGENT_ID, {
+                    provider: providerId,
+                    key: envKey,
+                });
+                authStorage.set(providerId, { type: "api_key", key: envKey });
+            }
+            const pinShape = mode === "ref" ? "your environment (kept as a reference)" : "your environment";
+            tui.addChild(new Text(`  ${brand.amber("✓")} ${provider.name} is already connected (using ${brand.white(pinShape)}).`, 0, 0));
             tui.requestRender();
             await delay(600);
             return "ok";
@@ -285,7 +404,7 @@ async function promptTypedKey(tui, authStorage, provider, providerId, seedError)
     // stale loader frames don't pile up vertically.
     let lastError = seedError;
     while (true) {
-        renderScreen(tui, `Step 2 of 3 · Connect ${provider.name}`);
+        renderScreen(tui, `Step 2 of 5 · ${provider.name}`);
         if (lastError) {
             tui.addChild(new Text(`  ${brand.error("✗")} ${brand.error(lastError)}`, 0, 0));
             tui.addChild(new Text(brand.dim("  Press Enter to try again, or Esc to choose a different provider."), 0, 0));
@@ -328,14 +447,19 @@ async function promptTypedKey(tui, authStorage, provider, providerId, seedError)
             continue;
         }
         // Step 3: only persist after both checks pass.
+        // Wizard owns ALL persistence (no post-wizard bridge mirror that
+        // could clobber a keyRef profile):
+        //   - upsertApiKeyProfile → ~/.brigade/agents/<id>/agent/auth-profiles.json
+        //     (the canonical credential store; `rm -rf ~/.brigade` wipes it)
+        //   - authStorage.set → Pi's in-memory store + ~/.brigade/auth.json
+        //     (so the wizard process can immediately use the key for the model
+        //     picker that runs next; on disk it's a redundant mirror of the
+        //     same literal value, fine for plaintext)
+        // Typed-paste is always plaintext — there's no env var to reference,
+        // the value originated in a TUI input box.
+        upsertApiKeyProfile(DEFAULT_AGENT_ID, { provider: providerId, key });
         authStorage.set(providerId, { type: "api_key", key });
         authStorage.reload();
-        // Mirror the credential into brigade.json::env so the unified
-        // super-config remains the canonical state-isolation boundary —
-        // `rm -rf ~/.brigade` reliably wipes everything, including any env
-        // fallback Pi might pick up on a future boot. No-op for providers
-        // that don't have a documented env var (custom OpenAI-compatible).
-        await persistEnvKeyToBrigadeConfig(provider, key);
         const successLine = onlineCheck.modelCount
             ? `${provider.name} connected · ${onlineCheck.modelCount} model${onlineCheck.modelCount === 1 ? "" : "s"} available`
             : `${provider.name} connected`;
@@ -398,7 +522,7 @@ function validateApiKey(providerId, key) {
 async function ensureLocalOllama(tui, modelRegistry, baseUrl) {
     let lastError = null;
     while (true) {
-        renderScreen(tui, "Step 2 of 3 · Connect Ollama");
+        renderScreen(tui, "Step 2 of 5 · Connect Ollama");
         if (lastError) {
             tui.addChild(new Text(`  ${brand.error("✗")} ${brand.error(lastError)}`, 0, 0));
             tui.addChild(new Text(brand.dim("  Press Enter to try again, or Esc to choose a different provider."), 0, 0));
@@ -435,7 +559,7 @@ async function ensureLocalOllama(tui, modelRegistry, baseUrl) {
             continue;
         }
         // Persist the provider entry so Pi sees the models from now on.
-        const modelsJsonPath = path.join(BRIGADE_DIR, "models.json");
+        const modelsJsonPath = resolveModelsPath(DEFAULT_AGENT_ID);
         try {
             await writeOllamaToModelsJson(modelsJsonPath, baseUrl, discovered);
             modelRegistry.refresh();
@@ -453,7 +577,7 @@ async function ensureLocalOllama(tui, modelRegistry, baseUrl) {
     }
 }
 async function pickModel(tui, modelRegistry, providerId) {
-    const models = getProviderModels(modelRegistry, providerId);
+    const models = await getProviderModels(modelRegistry, providerId);
     if (models.length === 0) {
         tui.addChild(new Text(brand.dim("  Type the model name you'd like to use, then press Enter. Esc to go back."), 0, 0));
         const input = new Input();
@@ -486,9 +610,17 @@ async function pickModel(tui, modelRegistry, providerId) {
             return ma.reasoning ? -1 : 1;
         return (mb.contextWindow ?? 0) - (ma.contextWindow ?? 0);
     });
-    const list = new SelectList(items, Math.min(items.length, 12), selectListTheme, {
+    // Searchable picker — providers like OpenRouter expose 270+ models, so a
+    // type-to-filter box on top of the list is the difference between usable
+    // and unusable. Fuzzy-matches across id + description (so "opus" finds
+    // claude-opus-*, "gpt mini" finds gpt-*-mini). Falls back to a plain
+    // scrollable list when the query is empty.
+    const list = new SearchableSelectList(items, 12, selectListTheme, {
         minPrimaryColumnWidth: 26,
         maxPrimaryColumnWidth: 38,
+        formatHeader: (q, matchCount, total) => brand.dim(q.length > 0
+            ? `  search: ${q}▌  (${matchCount}/${total} match${matchCount === 1 ? "" : "es"})`
+            : `  ${total} models · type to filter · ↑↓ move · Enter select · Esc back`),
     });
     tui.addChild(list);
     tui.setFocus(list);
@@ -552,34 +684,50 @@ export function formatApiKeyPreview(raw, opts = {}) {
  * env var (env-key path) — better to log and continue than abort the
  * onboarding the user has already invested time in.
  */
-async function persistEnvKeyToBrigadeConfig(provider, key) {
-    const envVar = provider.envVar;
-    if (!envVar || envVar.length === 0)
-        return;
-    if (!key || key.length === 0)
-        return;
+/**
+ * Read auth-profiles.json synchronously and return the resolved API key for
+ * `providerId` if a profile exists, or "" otherwise.
+ *
+ * Mirrors `core/auth-bridge.ts:resolveProfileKey` so the wizard's
+ * fast-accept path treats keyRef profiles the same as plaintext ones —
+ * without this, ref-stored profiles look "missing" because Pi's authStorage
+ * (which reads ~/.brigade/auth.json) doesn't see them and the operator
+ * gets re-prompted on every onboard run.
+ *
+ * Sync read is fine here: the file is at most a few KB, the wizard has
+ * already opened a TUI session (so we're past hot-cold-start), and async
+ * would force the caller into a chain of awaits in tight UI logic.
+ */
+function readKeyRefFromProfilesFile(providerId) {
     try {
-        const cfg = await loadBrigadeConfig(BRIGADE_DIR);
-        const env = { ...(cfg.env ?? {}) };
-        // Skip a redundant write if the value is already pinned correctly —
-        // avoids a useless .bak rotation (and a useless fsync) when the user
-        // re-runs onboarding with an unchanged env-supplied credential.
-        if (env[envVar] === key) {
-            process.env[envVar] = key;
-            return;
+        const profilesPath = resolveAuthProfilesPath(DEFAULT_AGENT_ID);
+        const fsSync = require("node:fs");
+        if (!fsSync.existsSync(profilesPath))
+            return "";
+        const raw = fsSync.readFileSync(profilesPath, "utf8");
+        const parsed = JSON.parse(raw);
+        const profile = Object.values(parsed.profiles ?? {}).find((p) => p?.provider === providerId);
+        if (!profile)
+            return "";
+        // Plaintext wins if both shapes are somehow present (shouldn't happen).
+        if (typeof profile.key === "string" && profile.key.length > 0)
+            return profile.key;
+        const ref = profile.keyRef;
+        if (!ref)
+            return "";
+        if (typeof ref === "string") {
+            const m = /^\$\{([A-Z_][A-Z0-9_]*)\}$/.exec(ref);
+            if (m && m[1])
+                return process.env[m[1]] ?? "";
+            return "";
         }
-        env[envVar] = key;
-        await writeBrigadeConfig(BRIGADE_DIR, { ...cfg, env });
-        // Make the credential visible to the about-to-boot agent without a
-        // restart. brigade.json is now the canonical source; this just
-        // short-circuits "wait for the next process to load it."
-        process.env[envVar] = key;
+        if (ref.source === "env" && ref.id) {
+            return process.env[ref.id] ?? "";
+        }
+        return "";
     }
-    catch (err) {
-        // Surface to stderr but don't crash onboarding — the credential is
-        // already valid in the running process, so the user can keep chatting.
-        const msg = err instanceof Error ? err.message : String(err);
-        process.stderr.write(`brigade: warning: couldn't persist ${envVar} to brigade.json (${msg})\n`);
+    catch {
+        return "";
     }
 }
 function clear(tui) {

package/dist/ui/onboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../src/ui/onboarding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,EAAgB,SAAS,EAAkC,MAAM,qBAAqB,CAAC;AAE9F,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAmB,UAAU,EAAE,IAAI,EAAO,MAAM,sBAAsB,CAAC;AAExG,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAClG,OAAO,EAAe,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC1F,OAAO,EACN,YAAY,EACZ,SAAS,EACT,kBAAkB,EAClB,2BAA2B,GAE3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,eAAe,EAA0B,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAU7E,8EAA8E;AAE9E;;;;;;;GAOG;AACH,KAAK,UAAU,iBAAiB,CAAC,aAA4B,EAAE,UAAkB;IAChF,MAAM,YAAY,GAAsB,CAAC,GAAG,EAAE;QAC7C,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,SAAS,CAAC,UAA2B,CAAsB,CAAC;YAChF,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,WAAW,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACR,qCAAqC;QACtC,CAAC;QACD,OAAO,aAAa,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAsB,CAAC;IAC7F,CAAC,CAAC,EAAE,CAAC;IAEL,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,yCAAyC;IACzC,IAAI,UAAU,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IACrD,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;QACjC,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAA2B,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,YAAY,CAAC;IACrB,CAAC;AACF,CAAC;AA8CD,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,GAAQ,EACR,WAAwB,EACxB,aAA4B,EAC5B,OAA0B,EAAE;IAE5B,sEAAsE;IACtE,uEAAuE;IACvE,qEAAqE;IACrE,2CAA2C;IAC3C,EAAE;IACF,qEAAqE;IACrE,wEAAwE;IACxE,mEAAmE;IACnE,qEAAqE;IACrE,gDAAgD;IAEhD,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,mDAAmD;IACnD,IAAI,OAA0B,CAAC;IAC/B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,yEAAyE;QACzE,oEAAoE;QACpE,oEAAoE;QACpE,iCAAiC;QACjC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IACxB,CAAC;SAAM,CAAC;QACP,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAK,GAAa,CAAC,OAAO,KAAK,mCAAmC,EAAE,CAAC;gBACpE,OAAO,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACP,MAAM,GAAG,CAAC,CAAC,8CAA8C;YAC1D,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,IAAI,GAAiC,UAAU,CAAC;IACpD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,OAAO,IAAI,EAAE,CAAC;QACb,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACzB,YAAY,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;YACnD,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,uCAAuC;YAC3E,IAAI,GAAG,KAAK,CAAC;YACb,SAAS;QACV,CAAC;QAED,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACpB,mEAAmE;YACnE,gEAAgE;YAChE,mEAAmE;YACnE,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,YAAY,EAAE,KAAK,IAAI,YAAY,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACzD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,aAAa,EAAE,YAAY,CAAC,OAAO,IAAI,wBAAwB,CAAC,CAAC;gBAC7G,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACvB,IAAI,GAAG,UAAU,CAAC;oBAClB,SAAS;gBACV,CAAC;gBACD,IAAI,GAAG,OAAO,CAAC;gBACf,SAAS;YACV,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE;gBAC7D,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;aACrC,CAAC,CAAC;YACH,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvB,IAAI,GAAG,UAAU,CAAC;gBAClB,SAAS;YACV,CAAC;YACD,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,gDAAgD;YACzE,IAAI,GAAG,OAAO,CAAC;YACf,SAAS;QACV,CAAC;QAED,mBAAmB;QACnB,YAAY,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACvB,IAAI,GAAG,UAAU,CAAC,CAAC,sDAAsD;YACzE,SAAS;QACV,CAAC;QACD,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,MAAM;IACP,CAAC;IAED,qEAAqE;IACrE,gEAAgE;IAChE,qEAAqE;IACrE,oDAAoD;IACpD,MAAM,UAAU,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;IAEzE,uEAAuE;IACvE,iDAAiD;IACjD,IAAI,CAAC;QACJ,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QACtE,MAAM,eAAe,CAAC,GAAG,EAAE;YAC1B,SAAS,EAAE,0BAA0B;YACrC,eAAe,EAAE,IAAI,CAAC,eAAe;SACrC,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,iEAAiE;QACjE,8CAA8C;IAC/C,CAAC;IAED,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,2CAA2C;IAClE,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACjB,KAAK,CAAC,GAAG,CAAC,CAAC;IAEX,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC;AAED,8EAA8E;AAE9E,+EAA+E;AAC/E,SAAS,YAAY,CAAC,GAAQ,EAAE,SAAiB;IAChD,KAAK,CAAC,GAAG,CAAC,CAAC;IACX,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,SAAS,EAAE,CAAC;QACf,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/D,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjC,GAAG,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC;AACF,CAAC;AAED,8EAA8E;AAE9E,KAAK,UAAU,YAAY,CAAC,GAAQ;IACnC,qEAAqE;IACrE,oEAAoE;IACpE,wEAAwE;IACxE,wEAAwE;IACxE,6DAA6D;IAC7D,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,MAAM,UAAU,GAAiB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC3B,mEAAmE;QACnE,oEAAoE;QACpE,yDAAyD;QACzD,MAAM,SAAS,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC;QACjC,MAAM,IAAI,GAAe;YACxB,KAAK,EAAE,CAAC,CAAC,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,IAAI;YACb,WAAW,EACV,SAAS;gBACR,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,eAAe,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE;gBACxD,CAAC,CAAC,MAAM;oBACP,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,qBAAqB;oBACvC,CAAC,CAAC,CAAC,CAAC,WAAW;SAClB,CAAC;QACF,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,UAAU,CAAC,CAAC;IAE3C,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE;QAC9E,qBAAqB,EAAE,EAAE;QACzB,qBAAqB,EAAE,EAAE;KACzB,CAAC,CAAC;IACH,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnB,GAAG,CAAC,aAAa,EAAE,CAAC;IAEpB,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAChE,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,KAAK,CAAC;AACrB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,GAAQ,EACR,WAAwB,EACxB,UAAkB,EAClB,OAAyE,EAAE;IAE3E,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;IAElE,0DAA0D;IAC1D,EAAE;IACF,iCAAiC;IACjC,qEAAqE;IACrE,uEAAuE;IACvE,uEAAuE;IACvE,2EAA2E;IAC3E,+EAA+E;IAC/E,0EAA0E;IAC1E,sEAAsE;IACtE,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,EAAE;IACF,mEAAmE;IACnE,qEAAqE;IACrE,mEAAmE;IACnE,sBAAsB;IACtB,EAAE;IACF,mEAAmE;IACnE,mEAAmE;IACnE,sEAAsE;IACtE,kEAAkE;IAClE,mEAAmE;IACnE,+DAA+D;IAC/D,EAAE;IACF,wEAAwE;IACxE,sEAAsE;IACtE,uEAAuE;IACvE,qEAAqE;IACrE,2CAA2C;IAC3C,EAAE;IACF,yEAAyE;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC3E,IAAI,MAAM,EAAE,CAAC;QACZ,kEAAkE;QAClE,2DAA2D;QAC3D,gEAAgE;QAChE,6BAA6B;QAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,aAAa,CAAC;QAChD,YAAY,CAAC,GAAG,EAAE,iBAAiB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,GAAG,CAAC,QAAQ,CACX,IAAI,IAAI,CACP,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,MAAM,UAAU,MAAM,KAAK,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAChG,CAAC,EACD,CAAC,CACD,CACD,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjC,MAAM,WAAW,GAAG,IAAI,UAAU,CACjC;YACC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE;YAC9B,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;SAC5B,EACD,CAAC,EACD,eAAe,EACf,EAAE,qBAAqB,EAAE,CAAC,EAAE,qBAAqB,EAAE,CAAC,EAAE,CACtD,CAAC;QACF,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;QAC/C,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC1B,GAAG,CAAC,aAAa,EAAE,CAAC;QAEpB,IAAI,aAA2B,CAAC;QAChC,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAChE,WAAW,CAAC,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC/C,WAAW,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC;YACH,aAAa,GAAG,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,MAAM,CAAC;QACf,CAAC;QACD,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAE7B,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC5B,gEAAgE;YAChE,gEAAgE;YAChE,+DAA+D;YAC/D,uBAAuB;YACvB,YAAY,CAAC,GAAG,EAAE,iBAAiB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YACpD,0DAA0D;YAC1D,gDAAgD;YAChD,OAAO,MAAM,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAC3E,CAAC;QAED,uEAAuE;QACvE,GAAG,CAAC,QAAQ,CACX,IAAI,IAAI,CACP,KAAK,KAAK,CAAC,GAAG,CAAC,aAAa,MAAM,SAAS,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,EAC9D,CAAC,EACD,CAAC,CACD,CACD,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,iBAAiB,CACtC,GAAG,EACH,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EACrB,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EACnB,aAAa,QAAQ,CAAC,IAAI,GAAG,CAC7B,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxB,GAAG,CAAC,aAAa,EAAE,CAAC;QAEpB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChE,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAE3B,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,8DAA8D;YAC9D,6DAA6D;YAC7D,0DAA0D;YAC1D,WAAW;YACX,EAAE;YACF,yBAAyB;YACzB,0DAA0D;YAC1D,EAAE;YACF,SAAS;YACT,mCAAmC;YACnC,8EAA8E;YAC9E,EAAE;YACF,2DAA2D;YAC3D,2DAA2D;YAC3D,+DAA+D;YAC/D,oEAAoE;YACpE,oEAAoE;YACpE,EAAE;YACF,kEAAkE;YAClE,mEAAmE;YACnE,+DAA+D;YAC/D,gCAAgC;YAChC,gEAAgE;YAChE,mEAAmE;YACnE,oEAAoE;YACpE,kEAAkE;YAClE,iEAAiE;YACjE,yDAAyD;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,IAAI,WAAW,CAAC;YACjD,MAAM,SAAS,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,IAAI,KAAK,KAAK,IAAI,SAAS,EAAE,CAAC;gBACjC,sBAAsB,CAAC,gBAAgB,EAAE;oBACxC,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,CAAC,IAAI,EAAE;iBAClE,CAAC,CAAC;gBACH,+DAA+D;gBAC/D,yDAAyD;gBACzD,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACP,mBAAmB,CAAC,gBAAgB,EAAE;oBACrC,QAAQ,EAAE,UAAU;oBACpB,GAAG,EAAE,MAAM;iBACX,CAAC,CAAC;gBACH,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAChG,GAAG,CAAC,QAAQ,CACX,IAAI,IAAI,CACP,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,gCAAgC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAC/F,CAAC,EACD,CAAC,CACD,CACD,CAAC;YACF,GAAG,CAAC,aAAa,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,uEAAuE;QACvE,qEAAqE;QACrE,sEAAsE;QACtE,aAAa;QACb,MAAM,WAAW,GAAG,OAAO,QAAQ,CAAC,MAAM,IAAI,SAAS,QAAQ,QAAQ,CAAC,IAAI,kBAAkB,QAAQ,CAAC,MAAM,EAAE,CAAC;QAChH,OAAO,MAAM,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,MAAM,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,cAAc,CAC5B,GAAQ,EACR,WAAwB,EACxB,QAAsB,EACtB,UAAkB,EAClB,SAAwB;IAExB,0EAA0E;IAC1E,gDAAgD;IAChD,IAAI,SAAS,GAAkB,SAAS,CAAC;IAEzC,OAAO,IAAI,EAAE,CAAC;QACb,YAAY,CAAC,GAAG,EAAE,iBAAiB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAEpD,IAAI,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAChF,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oEAAoE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9G,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAED,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,gBAAgB,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,wDAAwD,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnH,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,wCAAwC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClF,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpB,GAAG,CAAC,aAAa,EAAE,CAAC;QAEpB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACJ,GAAG,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACnD,KAAK,CAAC,QAAQ,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC1D,KAAK,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,MAAM,CAAC,CAAC,uDAAuD;QACvE,CAAC;QAED,iEAAiE;QACjE,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACpB,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;YAC9B,SAAS;QACV,CAAC;QAED,6EAA6E;QAC7E,yEAAyE;QACzE,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,iBAAiB,CACnC,GAAG,EACH,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EACrB,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EACnB,kBAAkB,QAAQ,CAAC,IAAI,GAAG,CAClC,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrB,GAAG,CAAC,aAAa,EAAE,CAAC;QAEpB,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAChE,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAExB,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACrB,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC;YAC/B,SAAS;QACV,CAAC;QAED,+CAA+C;QAC/C,iEAAiE;QACjE,mCAAmC;QACnC,4EAA4E;QAC5E,qEAAqE;QACrE,oEAAoE;QACpE,uEAAuE;QACvE,oEAAoE;QACpE,8CAA8C;QAC9C,qEAAqE;QACrE,2CAA2C;QAC3C,mBAAmB,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACrE,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,WAAW,CAAC,MAAM,EAAE,CAAC;QAErB,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU;YACzC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,gBAAgB,WAAW,CAAC,UAAU,SAAS,WAAW,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY;YACpH,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,YAAY,CAAC;QAChC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,GAAG,CAAC,aAAa,EAAE,CAAC;QACpB,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,UAAkB,EAAE,GAAW;IACtD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACnE,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,GAAG,CAAC,MAAM,0CAA0C,EAAE,CAAC;IACvI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mEAAmE,EAAE,CAAC;IAEtH,4FAA4F;IAC5F,oFAAoF;IACpF,iGAAiG;IACjG,8BAA8B;IAC9B,MAAM,WAAW,GAA2B;QAC3C,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,MAAM,EAAE,sDAAsD;QACtE,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,QAAQ;QACpB,GAAG,EAAE,MAAM;QACX,QAAQ,EAAE,KAAK,EAAE,8CAA8C;KAC/D,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,IAAI,UAAU,CAAC;IAClE,IAAI,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,4BAA4B,YAAY,SAAS,YAAY,qBAAqB,QAAQ,8CAA8C;SAChJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,iBAAiB,CAC/B,GAAQ,EACR,aAA4B,EAC5B,OAAe;IAEf,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,OAAO,IAAI,EAAE,CAAC;QACb,YAAY,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;QAElD,IAAI,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAChF,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oEAAoE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9G,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAED,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,6DAA6D,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5F,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gEAAgE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1G,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oCAAoC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE9E,oEAAoE;QACpE,MAAM,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC;QAC5B,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtB,GAAG,CAAC,aAAa,EAAE,CAAC;QAEpB,IAAI,CAAC;YACJ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,OAAO,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;gBACnC,OAAO,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,MAAM,CAAC;QACf,CAAC;QAED,yCAAyC;QACzC,MAAM,MAAM,GAAG,IAAI,iBAAiB,CACnC,GAAG,EACH,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EACrB,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EACnB,kBAAkB,CAClB,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrB,GAAG,CAAC,aAAa,EAAE,CAAC;QAEpB,IAAI,UAAU,CAAC;QACf,IAAI,CAAC;YACJ,UAAU,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACxB,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,SAAS;QACV,CAAC;QAED,gEAAgE;QAChE,MAAM,cAAc,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;QAC3D,IAAI,CAAC;YACJ,MAAM,uBAAuB,CAAC,cAAc,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YACnE,aAAa,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACxB,SAAS,GAAG,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChG,SAAS;QACV,CAAC;QAED,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzK,GAAG,CAAC,aAAa,EAAE,CAAC;QACpB,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAQ,EAAE,aAA4B,EAAE,UAAkB;IAClF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAElE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,4EAA4E,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtH,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpB,GAAG,CAAC,aAAa,EAAE,CAAC;QACpB,IAAI,CAAC;YACJ,MAAM,EAAE,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACxD,KAAK,CAAC,QAAQ,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC1D,KAAK,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,MAAM,CAAC;QACf,CAAC;IACF,CAAC;IAED,MAAM,KAAK,GAAiB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,KAAK,EAAE,CAAC,CAAC,EAAE;QACX,KAAK,EAAE,CAAC,CAAC,EAAE;QACX,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;KAC7B,CAAC,CAAC,CAAC;IAEJ,gFAAgF;IAChF,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACnB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,EAAE,CAAC,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS;YAAE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,EAAE,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,qEAAqE;IACrE,2CAA2C;IAC3C,MAAM,IAAI,GAAG,IAAI,oBAAoB,CAAC,KAAK,EAAE,EAAE,EAAE,eAAe,EAAE;QACjE,qBAAqB,EAAE,EAAE;QACzB,qBAAqB,EAAE,EAAE;QACzB,YAAY,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CACtC,KAAK,CAAC,GAAG,CACR,CAAC,CAAC,MAAM,GAAG,CAAC;YACX,CAAC,CAAC,aAAa,CAAC,OAAO,UAAU,IAAI,KAAK,SAAS,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG;YAClF,CAAC,CAAC,KAAK,KAAK,8DAA8D,CAC3E;KACF,CAAC,CAAC;IACH,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnB,GAAG,CAAC,aAAa,EAAE,CAAC;IAEpB,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChE,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,MAAM,CAAC;IACf,CAAC;AACF,CAAC;AAED,SAAS,UAAU,CAAC,GAAQ,EAAE,QAAgB,EAAE,OAAe;IAC9D,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,IAAI,QAAQ,CAAC;IACnD,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClH,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,GAAG,CAAC,aAAa,EAAE,CAAC;AACrB,CAAC;AAED,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,OAAyC,EAAE;IAC3F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IAC3D,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;;GAaG;AACH,SAAS,0BAA0B,CAAC,UAAkB;IACrD,IAAI,CAAC;QACJ,MAAM,YAAY,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAA6B,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAS5B,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CACxD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,UAAU,CACjC,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,wEAAwE;QACxE,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC;QAClF,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC;QACX,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC;QACD,OAAO,EAAE,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;AACF,CAAC;AAED,SAAS,KAAK,CAAC,GAAQ;IACtB,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QAAE,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC9D,GAAG,CAAC,aAAa,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,aAAa,CAAC,CAAa;IACnC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9E,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/ui/searchable-select.d.ts

@@ -0,0 +1,48 @@
+/**
+ * `SearchableSelectList` — a Pi-TUI `SelectList` with a live type-to-filter
+ * search box on top. Drop-in for `SelectList`: same `SelectItem[]` +
+ * `onSelect`/`onCancel` contract, so callers swap one for the other and call
+ * `tui.setFocus(list)` as usual.
+ *
+ * Why not Pi's built-in `SelectList.setFilter`? It prefix-matches on the
+ * item's `value` only (`value.startsWith(query)`), so typing "opus" would NOT
+ * match "claude-opus-4-7", and it doesn't filter as you type. This wraps
+ * `SelectList` and drives Pi's own `fuzzyFilter` (all query tokens must appear
+ * in order across label+value+description) — so "opus" finds the Claude Opus
+ * row and "gpt mini" finds gpt-*-mini. Essential once a provider (OpenRouter)
+ * exposes 270+ models.
+ *
+ * Keys: ↑/↓ + Enter delegate to the inner SelectList; Esc/Ctrl+C cancels;
+ * Backspace edits the query; any printable character appends to the query and
+ * re-filters. The TUI re-renders after each `handleInput`, so mutating state
+ * here is enough (no explicit requestRender needed — same as SelectList).
+ */
+import { type Component, type SelectItem, type SelectListLayoutOptions, type SelectListTheme } from "@mariozechner/pi-tui";
+export interface SearchableSelectOptions extends SelectListLayoutOptions {
+    /**
+     * Format the search header line. Receives the live query AND the current
+     * match count / total so the header can show "(4/272)" that updates as you
+     * type. Style it here (e.g. dim).
+     */
+    formatHeader?: (query: string, matchCount: number, total: number) => string;
+}
+export declare class SearchableSelectList implements Component {
+    private readonly allItems;
+    private readonly maxVisible;
+    private readonly theme;
+    private readonly options;
+    private query;
+    private inner;
+    /** Number of items currently matching the query (live; = total when empty). */
+    private matchCount;
+    onSelect?: (item: SelectItem) => void;
+    onCancel?: () => void;
+    constructor(allItems: SelectItem[], maxVisible: number, theme: SelectListTheme, options?: SearchableSelectOptions);
+    private buildInner;
+    private applyFilter;
+    render(width: number): string[];
+    handleInput(keyData: string): void;
+    invalidate(): void;
+    getSelectedItem(): SelectItem | null;
+}
+//# sourceMappingURL=searchable-select.d.ts.map

package/dist/ui/searchable-select.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"searchable-select.d.ts","sourceRoot":"","sources":["../../src/ui/searchable-select.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAMN,KAAK,SAAS,EAEd,KAAK,UAAU,EACf,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,uBAAwB,SAAQ,uBAAuB;IACvE;;;;OAIG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CAC5E;AAED,qBAAa,oBAAqB,YAAW,SAAS;IASpD,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAXzB,OAAO,CAAC,KAAK,CAAM;IACnB,OAAO,CAAC,KAAK,CAAa;IAC1B,+EAA+E;IAC/E,OAAO,CAAC,UAAU,CAAS;IAC3B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;gBAGJ,QAAQ,EAAE,UAAU,EAAE,EACtB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,eAAe,EACtB,OAAO,GAAE,uBAA4B;IAMvD,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,WAAW;IAWnB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE;IAU/B,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAqClC,UAAU,IAAI,IAAI;IAIlB,eAAe,IAAI,UAAU,GAAG,IAAI;CAGpC"}