gearbox-code 0.1.2 → 0.1.4

package/dist/cli.mjs

@@ -1,5 +1,4 @@
-#!/usr/bin/env bun
-// @bun
+#!/usr/bin/env node
 import { createRequire } from "node:module";
 var __create = Object.create;
 var __getProtoOf = Object.getPrototypeOf;
@@ -61639,6 +61638,23 @@ var require_src5 = __commonJS((exports) => {
 });
 
 // src/accounts/store.ts
+var exports_store = {};
+__export(exports_store, {
+  setSecret: () => setSecret,
+  setDefaultAccount: () => setDefaultAccount,
+  secretRefs: () => secretRefs,
+  saveAccounts: () => saveAccounts,
+  removeAccount: () => removeAccount,
+  putAccount: () => putAccount,
+  markUsed: () => markUsed,
+  loadAccounts: () => loadAccounts,
+  listAccounts: () => listAccounts,
+  getSecret: () => getSecret,
+  getAccount: () => getAccount,
+  deleteSecret: () => deleteSecret,
+  defaultAccount: () => defaultAccount,
+  accountsForProvider: () => accountsForProvider
+});
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
 import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2, existsSync as existsSync2 } from "node:fs";
 import { join as join3 } from "node:path";
@@ -61819,6 +61835,12 @@ var SERVICE = "gearbox", home2 = () => process.env.GEARBOX_HOME || join3(homedir
 var init_store = () => {};
 
 // src/accounts/catalog.ts
+var exports_catalog = {};
+__export(exports_catalog, {
+  detectProviderByKey: () => detectProviderByKey,
+  catalogProvider: () => catalogProvider,
+  CATALOG: () => CATALOG
+});
 function catalogProvider(id) {
   return BY_ID.get(id);
 }
@@ -64032,6 +64054,221 @@ var init_resolve = __esm(() => {
   init_catalog();
 });
 
+// src/accounts/detect.ts
+var exports_detect = {};
+__export(exports_detect, {
+  importableEnvCreds: () => importableEnvCreds,
+  importableCloudCreds: () => importableCloudCreds,
+  importEnvCred: () => importEnvCred,
+  importCloudCred: () => importCloudCred,
+  detectEnvCreds: () => detectEnvCreds,
+  detectCloudCreds: () => detectCloudCreds
+});
+import { readFileSync as readFileSync11, existsSync as existsSync6 } from "node:fs";
+import { join as join9 } from "node:path";
+import { homedir as homedir7 } from "node:os";
+function detectEnvCreds() {
+  const out = [];
+  for (const p of CATALOG) {
+    if (p.authKind !== "api-key" && p.authKind !== "openai-compat")
+      continue;
+    for (const ev of p.envVars) {
+      const v = process.env[ev];
+      if (v) {
+        out.push({ provider: p.id, label: p.label, envVar: ev, value: v });
+        break;
+      }
+    }
+  }
+  return out;
+}
+async function importEnvCred(c) {
+  const id = `${c.provider}-env`;
+  const ref = `${id}:api-key`;
+  await setSecret(ref, c.value);
+  const cat = CATALOG.find((p) => p.id === c.provider);
+  const account = {
+    id,
+    label: `${c.label} (from ${c.envVar})`,
+    provider: c.provider,
+    exec: "in-loop",
+    auth: cat.authKind === "openai-compat" ? { kind: "openai-compat", ref } : { kind: "api-key", ref },
+    baseUrl: cat.baseUrl,
+    enabled: true,
+    addedAt: Date.now()
+  };
+  putAccount(account);
+  return account;
+}
+function importableEnvCreds() {
+  return detectEnvCreds().filter((c) => !getAccount(`${c.provider}-env`));
+}
+function awsIni(file5, profile = "default") {
+  if (!existsSync6(file5))
+    return {};
+  const out = {};
+  let cur = "";
+  for (const raw of readFileSync11(file5, "utf8").split(`
+`)) {
+    const line = raw.trim();
+    if (line.startsWith("["))
+      cur = line.slice(1, -1).replace(/^profile\s+/, "");
+    else if (cur === profile && line.includes("=")) {
+      const i2 = line.indexOf("=");
+      out[line.slice(0, i2).trim().toLowerCase()] = line.slice(i2 + 1).trim();
+    }
+  }
+  return out;
+}
+function detectCloudCreds() {
+  const out = [];
+  const home5 = homedir7();
+  const creds = awsIni(join9(home5, ".aws", "credentials"));
+  const conf = awsIni(join9(home5, ".aws", "config"));
+  const akid = process.env.AWS_ACCESS_KEY_ID ?? creds.aws_access_key_id;
+  const secret = process.env.AWS_SECRET_ACCESS_KEY ?? creds.aws_secret_access_key;
+  const region = process.env.AWS_REGION ?? process.env.AWS_DEFAULT_REGION ?? conf.region;
+  if (akid && secret) {
+    out.push({
+      provider: "bedrock",
+      label: "Amazon Bedrock",
+      source: process.env.AWS_ACCESS_KEY_ID ? "env" : "~/.aws/credentials",
+      aws: { accessKeyId: akid, secretAccessKey: secret, sessionToken: process.env.AWS_SESSION_TOKEN ?? creds.aws_session_token, region: region ?? "us-east-1" }
+    });
+  }
+  if (process.env.AZURE_API_KEY && process.env.AZURE_RESOURCE_NAME) {
+    out.push({ provider: "azure", label: "Azure OpenAI", source: "env", azure: { resourceName: process.env.AZURE_RESOURCE_NAME, apiKey: process.env.AZURE_API_KEY } });
+  }
+  if (process.env.GOOGLE_VERTEX_PROJECT) {
+    out.push({ provider: "vertex", label: "Google Vertex AI", source: "env", vertex: { project: process.env.GOOGLE_VERTEX_PROJECT, location: process.env.GOOGLE_VERTEX_LOCATION ?? "us-central1" } });
+  }
+  return out;
+}
+async function importCloudCred(c) {
+  const id = `${c.provider}-import`;
+  let auth;
+  if (c.aws) {
+    await setSecret(`${id}:akid`, c.aws.accessKeyId);
+    await setSecret(`${id}:secret`, c.aws.secretAccessKey);
+    if (c.aws.sessionToken)
+      await setSecret(`${id}:token`, c.aws.sessionToken);
+    auth = { kind: "aws", accessKeyIdRef: `${id}:akid`, secretKeyRef: `${id}:secret`, sessionTokenRef: c.aws.sessionToken ? `${id}:token` : undefined, region: c.aws.region };
+  } else if (c.azure) {
+    await setSecret(`${id}:api-key`, c.azure.apiKey);
+    auth = { kind: "azure", resourceName: c.azure.resourceName, ref: `${id}:api-key` };
+  } else {
+    auth = { kind: "vertex", project: c.vertex.project, location: c.vertex.location, adc: true };
+  }
+  const account = { id, label: `${c.label} (from ${c.source})`, provider: c.provider, exec: "in-loop", auth, enabled: true, addedAt: Date.now() };
+  putAccount(account);
+  return account;
+}
+function importableCloudCreds() {
+  return detectCloudCreds().filter((c) => !getAccount(`${c.provider}-import`));
+}
+var init_detect = __esm(() => {
+  init_catalog();
+  init_store();
+});
+
+// src/accounts/onboarding.ts
+function normalizeProviderId(input) {
+  const key = input.trim().toLowerCase().replace(/[_\s]+/g, "-");
+  return ALIASES[key] ?? key;
+}
+function apiKeyProviders() {
+  return CATALOG.filter((p) => (p.authKind === "api-key" || p.authKind === "openai-compat") && p.group !== "local" && (p.authKind !== "openai-compat" || Boolean(p.baseUrl)));
+}
+function featuredApiKeyProviders() {
+  const providers = apiKeyProviders();
+  const byId = new Map(providers.map((p) => [p.id, p]));
+  const first = FEATURED.map((id) => byId.get(id)).filter((p) => Boolean(p));
+  const rest2 = providers.filter((p) => !FEATURED.includes(p.id)).sort((a, b) => a.label.localeCompare(b.label));
+  return [...first, ...rest2];
+}
+function needsOnboarding(state) {
+  return state.configured.length === 0;
+}
+function onboardingSummary(state) {
+  if (!needsOnboarding(state))
+    return "ready";
+  const lines = [
+    "setup required",
+    "  Add any common provider API key:",
+    ...featuredApiKeyProviders().slice(0, 10).map((p) => `  /account add ${p.id} <api-key>`.padEnd(38) + `${p.label}`)
+  ];
+  const more = featuredApiKeyProviders().length - 10;
+  if (more > 0)
+    lines.push(`  /onboard providers                    show ${more} more providers`);
+  if (state.importable.length || state.cloudImportable.length)
+    lines.push("", "  /account import                       import detected env/cloud credentials");
+  lines.push("  /account add azure <endpoint> <api-key>  Azure OpenAI / Foundry");
+  if (state.hasClaudeCli)
+    lines.push("  /account add claude                   use Claude subscription CLI");
+  if (state.hasCodexCli)
+    lines.push("  /account add codex                    use ChatGPT subscription CLI");
+  lines.push("", "Paste-detect works for known key prefixes: /account add <api-key>");
+  return lines.join(`
+`);
+}
+var ALIASES, FEATURED;
+var init_onboarding = __esm(() => {
+  init_catalog();
+  ALIASES = {
+    anthropic: "anthropic",
+    claude: "anthropic",
+    openai: "openai",
+    gpt: "openai",
+    google: "google",
+    gemini: "google",
+    deepseek: "deepseek",
+    grok: "xai",
+    xai: "xai",
+    "x-ai": "xai",
+    mistral: "mistral",
+    groq: "groq",
+    together: "together",
+    fireworks: "fireworks",
+    deepinfra: "deepinfra",
+    cerebras: "cerebras",
+    perplexity: "perplexity",
+    baseten: "baseten",
+    moonshot: "moonshot",
+    kimi: "moonshot",
+    zai: "zai",
+    zhipu: "zai",
+    nebius: "nebius",
+    hyperbolic: "hyperbolic",
+    sambanova: "sambanova",
+    novita: "novita",
+    openrouter: "openrouter",
+    requesty: "requesty",
+    portkey: "portkey",
+    litellm: "litellm",
+    "vercel-gateway": "vercel-gateway",
+    vercel: "vercel-gateway",
+    "ai-gateway": "vercel-gateway",
+    azure: "azure",
+    "azure-foundry": "azure-foundry",
+    foundry: "azure-foundry"
+  };
+  FEATURED = [
+    "anthropic",
+    "openai",
+    "google",
+    "deepseek",
+    "openrouter",
+    "xai",
+    "mistral",
+    "groq",
+    "together",
+    "fireworks",
+    "perplexity",
+    "cerebras",
+    "requesty"
+  ];
+});
+
 // src/agent/cli-backend.ts
 function newState() {
   return { text: "", usage: { inputTokens: 0, outputTokens: 0 }, rates: new Map, toolNames: new Map };
@@ -64267,354 +64504,33 @@ var init_cli_backend = __esm(() => {
   CONFIG_DIR_VAR = { claude: "CLAUDE_CONFIG_DIR", codex: "CODEX_HOME" };
 });
 
-// node_modules/react/jsx-dev-runtime.js
-var require_jsx_dev_runtime2 = __commonJS((exports, module) => {
-  var react_jsx_dev_runtime_development = __toESM(require_react_jsx_dev_runtime_development());
-  if (false) {} else {
-    module.exports = react_jsx_dev_runtime_development;
-  }
-});
-
-// src/accounts/store.ts
-var exports_store = {};
-__export(exports_store, {
-  setSecret: () => setSecret2,
-  setDefaultAccount: () => setDefaultAccount2,
-  secretRefs: () => secretRefs2,
-  saveAccounts: () => saveAccounts2,
-  removeAccount: () => removeAccount2,
-  putAccount: () => putAccount2,
-  markUsed: () => markUsed2,
-  loadAccounts: () => loadAccounts3,
-  listAccounts: () => listAccounts2,
-  getSecret: () => getSecret2,
-  getAccount: () => getAccount2,
-  deleteSecret: () => deleteSecret2,
-  defaultAccount: () => defaultAccount2,
-  accountsForProvider: () => accountsForProvider2
-});
-import { createCipheriv as createCipheriv2, createDecipheriv as createDecipheriv2, randomBytes as randomBytes2 } from "node:crypto";
-import { readFileSync as readFileSync15, writeFileSync as writeFileSync9, mkdirSync as mkdirSync10, existsSync as existsSync8 } from "node:fs";
-import { join as join13 } from "node:path";
-import { homedir as homedir11 } from "node:os";
-async function setSecret2(ref, value) {
-  if (typeof Bun !== "undefined" && mode2() !== "file") {
-    try {
-      await Bun.secrets.set({ service: SERVICE2, name: ref, value });
-      return;
-    } catch (e2) {
-      if (mode2() === "keychain")
-        throw e2;
-    }
-  }
-  fileSet2(ref, value);
-}
-async function getSecret2(ref) {
-  if (typeof Bun !== "undefined" && mode2() !== "file") {
-    try {
-      const v = await Bun.secrets.get({ service: SERVICE2, name: ref });
-      if (v != null)
-        return v;
-    } catch {
-      if (mode2() === "keychain")
-        return null;
-    }
-  }
-  return fileGet2(ref);
-}
-async function deleteSecret2(ref) {
-  if (typeof Bun !== "undefined" && mode2() !== "file") {
-    try {
-      await Bun.secrets.delete({ service: SERVICE2, name: ref });
-    } catch {}
-  }
-  fileDelete2(ref);
-}
-function masterKey2() {
-  ensure3();
-  if (existsSync8(keyFile2()))
-    return Buffer.from(readFileSync15(keyFile2(), "utf8").trim(), "base64");
-  const k = randomBytes2(32);
-  writeFileSync9(keyFile2(), k.toString("base64"), { mode: 384 });
-  return k;
-}
-function encrypt2(plain) {
-  const iv = randomBytes2(12);
-  const c = createCipheriv2("aes-256-gcm", masterKey2(), iv);
-  const data = Buffer.concat([c.update(plain, "utf8"), c.final()]);
-  return [iv.toString("base64"), c.getAuthTag().toString("base64"), data.toString("base64")].join(".");
-}
-function decrypt2(blob) {
-  try {
-    const [iv, tag2, data] = blob.split(".").map((x2) => Buffer.from(x2, "base64"));
-    const d = createDecipheriv2("aes-256-gcm", masterKey2(), iv);
-    d.setAuthTag(tag2);
-    return Buffer.concat([d.update(data), d.final()]).toString("utf8");
-  } catch {
-    return null;
-  }
-}
-function readEnc2() {
-  try {
-    return JSON.parse(readFileSync15(encFile2(), "utf8"));
-  } catch {
-    return {};
-  }
-}
-function writeEnc2(m2) {
-  ensure3();
-  writeFileSync9(encFile2(), JSON.stringify(m2), { mode: 384 });
-}
-function fileSet2(ref, v) {
-  const m2 = readEnc2();
-  m2[ref] = encrypt2(v);
-  writeEnc2(m2);
-}
-function fileGet2(ref) {
-  const blob = readEnc2()[ref];
-  return blob ? decrypt2(blob) : null;
-}
-function fileDelete2(ref) {
-  const m2 = readEnc2();
-  delete m2[ref];
-  writeEnc2(m2);
-}
-function loadAccounts3() {
-  try {
-    const f3 = JSON.parse(readFileSync15(accountsFile2(), "utf8"));
-    if (f3 && Array.isArray(f3.accounts))
-      return { version: 1, defaults: {}, ...f3 };
-  } catch {}
-  return { version: 1, accounts: [], defaults: {} };
-}
-function saveAccounts2(f3) {
-  try {
-    ensure3();
-    writeFileSync9(accountsFile2(), JSON.stringify(f3, null, 2), { mode: 384 });
-  } catch {}
-}
-function listAccounts2() {
-  return loadAccounts3().accounts;
-}
-function accountsForProvider2(provider) {
-  return listAccounts2().filter((a) => a.provider === provider && a.enabled);
-}
-function getAccount2(id) {
-  return listAccounts2().find((a) => a.id === id);
-}
-function putAccount2(account) {
-  const f3 = loadAccounts3();
-  const i2 = f3.accounts.findIndex((a) => a.id === account.id);
-  if (i2 >= 0)
-    f3.accounts[i2] = account;
-  else
-    f3.accounts.push(account);
-  if (!f3.defaults[account.provider])
-    f3.defaults[account.provider] = account.id;
-  saveAccounts2(f3);
-}
-async function removeAccount2(id) {
-  const f3 = loadAccounts3();
-  const acc = f3.accounts.find((a) => a.id === id);
-  f3.accounts = f3.accounts.filter((a) => a.id !== id);
-  for (const [p, aid] of Object.entries(f3.defaults)) {
-    if (aid === id) {
-      const next = f3.accounts.find((a) => a.provider === p);
-      if (next)
-        f3.defaults[p] = next.id;
-      else
-        delete f3.defaults[p];
-    }
-  }
-  saveAccounts2(f3);
-  if (acc)
-    for (const ref of secretRefs2(acc))
-      await deleteSecret2(ref);
-}
-function setDefaultAccount2(provider, id) {
-  const f3 = loadAccounts3();
-  if (!f3.accounts.some((a) => a.id === id && a.provider === provider))
-    return;
-  f3.defaults[provider] = id;
-  saveAccounts2(f3);
-}
-function defaultAccount2(provider) {
-  const f3 = loadAccounts3();
-  const id = f3.defaults[provider];
-  const byDefault = id ? f3.accounts.find((a) => a.id === id && a.enabled) : undefined;
-  return byDefault ?? f3.accounts.find((a) => a.provider === provider && a.enabled);
-}
-function markUsed2(id) {
-  const f3 = loadAccounts3();
-  const a = f3.accounts.find((x2) => x2.id === id);
-  if (a) {
-    a.lastUsedAt = Date.now();
-    saveAccounts2(f3);
-  }
-}
-function secretRefs2(a) {
-  const refs = [];
-  const auth = a.auth;
-  if (auth.kind === "api-key" || auth.kind === "azure" || auth.kind === "openai-compat")
-    refs.push(auth.ref);
-  if (auth.kind === "aws") {
-    refs.push(auth.accessKeyIdRef, auth.secretKeyRef);
-    if (auth.sessionTokenRef)
-      refs.push(auth.sessionTokenRef);
-  }
-  if (auth.kind === "vertex" && auth.serviceAccountRef)
-    refs.push(auth.serviceAccountRef);
-  return refs;
-}
-var SERVICE2 = "gearbox", home5 = () => process.env.GEARBOX_HOME || join13(homedir11(), ".gearbox"), ensure3 = () => mkdirSync10(home5(), { recursive: true }), mode2 = () => {
-  const m2 = process.env.GEARBOX_SECRET_STORE;
-  return m2 === "file" || m2 === "keychain" ? m2 : "auto";
-}, encFile2 = () => join13(home5(), "credentials.enc"), keyFile2 = () => join13(home5(), ".enckey"), accountsFile2 = () => join13(home5(), "accounts.json");
-var init_store2 = () => {};
-
-// src/accounts/detect.ts
-var exports_detect = {};
-__export(exports_detect, {
-  importableEnvCreds: () => importableEnvCreds2,
-  importableCloudCreds: () => importableCloudCreds2,
-  importEnvCred: () => importEnvCred2,
-  importCloudCred: () => importCloudCred2,
-  detectEnvCreds: () => detectEnvCreds2,
-  detectCloudCreds: () => detectCloudCreds2
-});
-import { readFileSync as readFileSync16, existsSync as existsSync9 } from "node:fs";
-import { join as join14 } from "node:path";
-import { homedir as homedir12 } from "node:os";
-function detectEnvCreds2() {
-  const out = [];
-  for (const p of CATALOG) {
-    if (p.authKind !== "api-key" && p.authKind !== "openai-compat")
-      continue;
-    for (const ev of p.envVars) {
-      const v = process.env[ev];
-      if (v) {
-        out.push({ provider: p.id, label: p.label, envVar: ev, value: v });
-        break;
-      }
-    }
-  }
-  return out;
-}
-async function importEnvCred2(c) {
-  const id = `${c.provider}-env`;
-  const ref = `${id}:api-key`;
-  await setSecret(ref, c.value);
-  const cat = CATALOG.find((p) => p.id === c.provider);
-  const account = {
-    id,
-    label: `${c.label} (from ${c.envVar})`,
-    provider: c.provider,
-    exec: "in-loop",
-    auth: cat.authKind === "openai-compat" ? { kind: "openai-compat", ref } : { kind: "api-key", ref },
-    baseUrl: cat.baseUrl,
-    enabled: true,
-    addedAt: Date.now()
-  };
-  putAccount(account);
-  return account;
-}
-function importableEnvCreds2() {
-  return detectEnvCreds2().filter((c) => !getAccount(`${c.provider}-env`));
-}
-function awsIni2(file6, profile = "default") {
-  if (!existsSync9(file6))
-    return {};
-  const out = {};
-  let cur = "";
-  for (const raw of readFileSync16(file6, "utf8").split(`
-`)) {
-    const line = raw.trim();
-    if (line.startsWith("["))
-      cur = line.slice(1, -1).replace(/^profile\s+/, "");
-    else if (cur === profile && line.includes("=")) {
-      const i2 = line.indexOf("=");
-      out[line.slice(0, i2).trim().toLowerCase()] = line.slice(i2 + 1).trim();
-    }
-  }
-  return out;
-}
-function detectCloudCreds2() {
-  const out = [];
-  const home6 = homedir12();
-  const creds = awsIni2(join14(home6, ".aws", "credentials"));
-  const conf = awsIni2(join14(home6, ".aws", "config"));
-  const akid = process.env.AWS_ACCESS_KEY_ID ?? creds.aws_access_key_id;
-  const secret = process.env.AWS_SECRET_ACCESS_KEY ?? creds.aws_secret_access_key;
-  const region = process.env.AWS_REGION ?? process.env.AWS_DEFAULT_REGION ?? conf.region;
-  if (akid && secret) {
-    out.push({
-      provider: "bedrock",
-      label: "Amazon Bedrock",
-      source: process.env.AWS_ACCESS_KEY_ID ? "env" : "~/.aws/credentials",
-      aws: { accessKeyId: akid, secretAccessKey: secret, sessionToken: process.env.AWS_SESSION_TOKEN ?? creds.aws_session_token, region: region ?? "us-east-1" }
-    });
-  }
-  if (process.env.AZURE_API_KEY && process.env.AZURE_RESOURCE_NAME) {
-    out.push({ provider: "azure", label: "Azure OpenAI", source: "env", azure: { resourceName: process.env.AZURE_RESOURCE_NAME, apiKey: process.env.AZURE_API_KEY } });
-  }
-  if (process.env.GOOGLE_VERTEX_PROJECT) {
-    out.push({ provider: "vertex", label: "Google Vertex AI", source: "env", vertex: { project: process.env.GOOGLE_VERTEX_PROJECT, location: process.env.GOOGLE_VERTEX_LOCATION ?? "us-central1" } });
-  }
-  return out;
-}
-async function importCloudCred2(c) {
-  const id = `${c.provider}-import`;
-  let auth;
-  if (c.aws) {
-    await setSecret(`${id}:akid`, c.aws.accessKeyId);
-    await setSecret(`${id}:secret`, c.aws.secretAccessKey);
-    if (c.aws.sessionToken)
-      await setSecret(`${id}:token`, c.aws.sessionToken);
-    auth = { kind: "aws", accessKeyIdRef: `${id}:akid`, secretKeyRef: `${id}:secret`, sessionTokenRef: c.aws.sessionToken ? `${id}:token` : undefined, region: c.aws.region };
-  } else if (c.azure) {
-    await setSecret(`${id}:api-key`, c.azure.apiKey);
-    auth = { kind: "azure", resourceName: c.azure.resourceName, ref: `${id}:api-key` };
-  } else {
-    auth = { kind: "vertex", project: c.vertex.project, location: c.vertex.location, adc: true };
-  }
-  const account = { id, label: `${c.label} (from ${c.source})`, provider: c.provider, exec: "in-loop", auth, enabled: true, addedAt: Date.now() };
-  putAccount(account);
-  return account;
-}
-function importableCloudCreds2() {
-  return detectCloudCreds2().filter((c) => !getAccount(`${c.provider}-import`));
-}
-var init_detect = __esm(() => {
-  init_catalog();
-  init_store();
-});
-
 // src/accounts/onboard.ts
 var exports_onboard = {};
 __export(exports_onboard, {
-  testAccount: () => testAccount2,
-  cliLoginArgs: () => cliLoginArgs2,
-  cliAuthStatus: () => cliAuthStatus2,
+  testAccount: () => testAccount,
+  cliLoginArgs: () => cliLoginArgs,
+  cliAuthStatus: () => cliAuthStatus,
   addableProviders: () => addableProviders,
-  addCliAccount: () => addCliAccount2,
-  addByPastedKey: () => addByPastedKey2,
-  addAzureFoundryAccount: () => addAzureFoundryAccount2,
-  addAzureAccount: () => addAzureAccount2,
-  addApiKeyAccount: () => addApiKeyAccount2
-});
-import { mkdirSync as mkdirSync11 } from "node:fs";
-import { join as join15 } from "node:path";
-import { homedir as homedir13 } from "node:os";
-async function addApiKeyAccount2(provider, key, opts = {}) {
+  addCliAccount: () => addCliAccount,
+  addByPastedKey: () => addByPastedKey,
+  addAzureFoundryAccount: () => addAzureFoundryAccount,
+  addAzureAccount: () => addAzureAccount,
+  addApiKeyAccount: () => addApiKeyAccount
+});
+import { mkdirSync as mkdirSync7 } from "node:fs";
+import { join as join10 } from "node:path";
+import { homedir as homedir8 } from "node:os";
+async function addApiKeyAccount(provider, key, opts = {}) {
+  provider = normalizeProviderId(provider);
   const cat = catalogProvider(provider);
   if (!cat)
-    return { ok: false, message: `unknown provider "${provider}" — see /accounts catalog` };
+    return { ok: false, message: `unknown provider "${provider}" — use /onboard providers` };
   if (cat.group === "cli")
     return { ok: false, message: `${cat.label} is a subscription account — use /login ${provider} (P3), not a key` };
   if (cat.authKind !== "api-key" && cat.authKind !== "openai-compat") {
     return { ok: false, message: `${cat.label} needs ${cat.authKind} credentials — use the guided add (P2)` };
   }
-  const id = opts.id ?? `${provider}-${shortId2()}`;
+  const id = opts.id ?? `${provider}-${shortId()}`;
   const ref = `${id}:api-key`;
   await setSecret(ref, key.trim());
   const account = {
@@ -64630,7 +64546,7 @@ async function addApiKeyAccount2(provider, key, opts = {}) {
   putAccount(account);
   return { ok: true, account, message: `added ${account.label} (${id})` };
 }
-function azureResourceName2(input) {
+function azureResourceName(input) {
   const s2 = input.trim();
   try {
     const host = new URL(s2).hostname;
@@ -64639,7 +64555,7 @@ function azureResourceName2(input) {
     return s2;
   }
 }
-function azureFoundryBaseUrl2(endpoint) {
+function azureFoundryBaseUrl(endpoint) {
   const trimmed = endpoint.trim().replace(/\/+$/, "");
   if (/\/openai\/v1$/i.test(trimmed))
     return trimmed;
@@ -64647,32 +64563,32 @@ function azureFoundryBaseUrl2(endpoint) {
     return `${trimmed}/v1`;
   return `${trimmed}/openai/v1`;
 }
-async function addAzureFoundryAccount2(endpoint, key, opts = {}) {
+async function addAzureFoundryAccount(endpoint, key, opts = {}) {
   if (!/^https?:\/\//i.test(endpoint) || !key.trim())
     return { ok: false, message: "usage: /account add azure <foundry-endpoint> <api-key>" };
   const host = new URL(endpoint).hostname;
-  const slug4 = host.split(".")[0]?.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || shortId2();
-  const id = opts.id ?? `azure-foundry-${slug4}`;
+  const slug3 = host.split(".")[0]?.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || shortId();
+  const id = opts.id ?? `azure-foundry-${slug3}`;
   const ref = `${id}:api-key`;
   await setSecret(ref, key.trim());
   const account = {
     id,
-    label: opts.label ?? `Azure Foundry (${slug4})`,
+    label: opts.label ?? `Azure Foundry (${slug3})`,
     provider: "azure-foundry",
     exec: "in-loop",
     auth: { kind: "openai-compat", ref },
-    baseUrl: azureFoundryBaseUrl2(endpoint),
+    baseUrl: azureFoundryBaseUrl(endpoint),
     enabled: true,
     addedAt: Date.now()
   };
   putAccount(account);
   return { ok: true, account, message: `added ${account.label} (${id})` };
 }
-async function addAzureAccount2(resourceOrEndpoint, key, opts = {}) {
-  const resourceName = azureResourceName2(resourceOrEndpoint);
+async function addAzureAccount(resourceOrEndpoint, key, opts = {}) {
+  const resourceName = azureResourceName(resourceOrEndpoint);
   if (!resourceName || !key.trim())
     return { ok: false, message: "usage: /account add azure <resource-or-endpoint> <api-key> [api-version]" };
-  const id = opts.id ?? `azure-${resourceName.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || shortId2()}`;
+  const id = opts.id ?? `azure-${resourceName.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || shortId()}`;
   const ref = `${id}:api-key`;
   await setSecret(ref, key.trim());
   const account = {
@@ -64687,24 +64603,24 @@ async function addAzureAccount2(resourceOrEndpoint, key, opts = {}) {
   putAccount(account);
   return { ok: true, account, message: `added ${account.label} (${id})` };
 }
-function cliProfileDir2(id) {
-  const home6 = process.env.GEARBOX_HOME || join15(homedir13(), ".gearbox");
-  return join15(home6, "cli", id);
+function cliProfileDir(id) {
+  const home5 = process.env.GEARBOX_HOME || join10(homedir8(), ".gearbox");
+  return join10(home5, "cli", id);
 }
-function addCliAccount2(provider, name31) {
+function addCliAccount(provider, name31) {
   const cat = catalogProvider(provider);
   if (!cat || cat.group !== "cli" || !cat.binary)
     return { ok: false, message: `"${provider}" is not a CLI subscription provider` };
   if (!which(cat.binary))
     return { ok: false, message: `the ${cat.binary} binary isn't on your PATH — install it first` };
-  const slug4 = name31 ? name31.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") : "";
-  const id = slug4 ? `${provider}-${slug4}` : provider;
-  const profile = slug4 ? cliProfileDir2(id) : undefined;
+  const slug3 = name31 ? name31.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") : "";
+  const id = slug3 ? `${provider}-${slug3}` : provider;
+  const profile = slug3 ? cliProfileDir(id) : undefined;
   if (profile)
-    mkdirSync11(profile, { recursive: true });
+    mkdirSync7(profile, { recursive: true });
   const account = {
     id,
-    label: slug4 ? `${cat.label.replace(/ \(.*\)$/, "")} (${name31.trim()})` : cat.label,
+    label: slug3 ? `${cat.label.replace(/ \(.*\)$/, "")} (${name31.trim()})` : cat.label,
     provider,
     exec: "cli",
     auth: { kind: "cli", binary: cat.binary, loginProfile: profile },
@@ -64715,7 +64631,7 @@ function addCliAccount2(provider, name31) {
   putAccount(account);
   return { ok: true, account, message: `${account.label} ready — runs via the ${cat.binary} CLI${profile ? " (separate login)" : ""}` };
 }
-async function cliAuthStatus2(binary, profile) {
+async function cliAuthStatus(binary, profile) {
   const env3 = subscriptionEnv(binary, profile);
   const readBoth = async (cmd, timeoutMs = 5000) => {
     const p = spawnProc(cmd, { stdin: "ignore", stdout: "pipe", stderr: "pipe", env: env3 });
@@ -64768,16 +64684,16 @@ ${e2}`.trim(), timedOut };
     return { loggedIn: false };
   }
 }
-function cliLoginArgs2(binary) {
+function cliLoginArgs(binary) {
   return binary === "codex" ? ["login"] : ["auth", "login"];
 }
-async function addByPastedKey2(key) {
+async function addByPastedKey(key) {
   const provider = detectProviderByKey(key);
   if (!provider)
     return { ok: false, message: "couldn't identify the provider from that key — use /accounts add <provider> <key>" };
-  return addApiKeyAccount2(provider, key);
+  return addApiKeyAccount(provider, key);
 }
-async function testAccount2(a) {
+async function testAccount(a) {
   const creds = await resolveCreds(a);
   if (!creds.apiKey && a.auth.kind !== "cli")
     return { ok: false, message: "no key stored" };
@@ -64788,17 +64704,17 @@ async function testAccount2(a) {
         headers: { "x-api-key": creds.apiKey ?? "", "anthropic-version": "2023-06-01", "content-type": "application/json" },
         body: JSON.stringify({ model: "claude-haiku-4-5", messages: [{ role: "user", content: "hi" }] })
       });
-      return r3.ok ? { ok: true, message: "credential works" } : { ok: false, message: await errMessage2(r3) };
+      return r3.ok ? { ok: true, message: "credential works" } : { ok: false, message: await errMessage(r3) };
     }
     if (a.provider === "google") {
       const r3 = await fetch(`https://generativelanguage.googleapis.com/v1beta/models?key=${creds.apiKey ?? ""}`);
-      return r3.ok ? { ok: true, message: "credential works" } : { ok: false, message: await errMessage2(r3) };
+      return r3.ok ? { ok: true, message: "credential works" } : { ok: false, message: await errMessage(r3) };
     }
     const base2 = creds.baseURL ?? "https://api.openai.com/v1";
     const r2 = await fetch(`${base2.replace(/\/$/, "")}/models`, {
       headers: { Authorization: `Bearer ${creds.apiKey ?? ""}`, ...creds.headers ?? {} }
     });
-    return r2.ok ? { ok: true, message: "credential works" } : { ok: false, message: await errMessage2(r2) };
+    return r2.ok ? { ok: true, message: "credential works" } : { ok: false, message: await errMessage(r2) };
   } catch (e2) {
     return { ok: false, message: e2?.message ?? "request failed" };
   }
@@ -64806,7 +64722,7 @@ async function testAccount2(a) {
 function addableProviders() {
   return CATALOG.filter((p) => p.authKind === "api-key" || p.authKind === "openai-compat").map((p) => ({ id: p.id, label: p.label, group: p.group }));
 }
-async function errMessage2(r2) {
+async function errMessage(r2) {
   try {
     const j = await r2.json();
     const m2 = j?.error?.message ?? j?.message ?? j?.error;
@@ -64815,73 +64731,18 @@ async function errMessage2(r2) {
   } catch {}
   return `HTTP ${r2.status}`;
 }
-function shortId2() {
+function shortId() {
   return Date.now().toString(36).slice(-4) + Math.floor(Math.random() * 1296).toString(36).padStart(2, "0");
 }
 var init_onboard = __esm(() => {
   init_store();
   init_catalog();
+  init_onboarding();
   init_resolve();
   init_cli_backend();
   init_proc();
 });
 
-// src/accounts/catalog.ts
-var exports_catalog = {};
-__export(exports_catalog, {
-  detectProviderByKey: () => detectProviderByKey2,
-  catalogProvider: () => catalogProvider2,
-  CATALOG: () => CATALOG2
-});
-function catalogProvider2(id) {
-  return BY_ID3.get(id);
-}
-function detectProviderByKey2(key) {
-  const k = key.trim();
-  const ranked = CATALOG2.flatMap((p) => (p.keyPrefix ?? []).map((pre) => ({ id: p.id, pre }))).sort((a, b) => b.pre.length - a.pre.length);
-  return ranked.find(({ pre }) => k.startsWith(pre))?.id;
-}
-var CATALOG2, BY_ID3;
-var init_catalog2 = __esm(() => {
-  CATALOG2 = [
-    { id: "anthropic", label: "Anthropic", group: "native", exec: "in-loop", authKind: "api-key", envVars: ["ANTHROPIC_API_KEY"], keyPrefix: ["sk-ant-"], signupUrl: "https://console.anthropic.com/settings/keys", defaultModels: ["claude-sonnet-4-6", "claude-haiku-4-5", "claude-opus-4-8"] },
-    { id: "openai", label: "OpenAI", group: "native", exec: "in-loop", authKind: "api-key", envVars: ["OPENAI_API_KEY"], keyPrefix: ["sk-proj-", "sk-"], signupUrl: "https://platform.openai.com/api-keys", defaultModels: ["gpt-5.5", "gpt-5.5-pro", "gpt-5.5-mini"] },
-    { id: "google", label: "Google Gemini", group: "native", exec: "in-loop", authKind: "api-key", envVars: ["GOOGLE_GENERATIVE_AI_API_KEY", "GEMINI_API_KEY"], keyPrefix: ["AIza"], signupUrl: "https://aistudio.google.com/apikey", defaultModels: ["gemini-3.5-flash", "gemini-3.1-pro-preview", "gemini-3.1-flash-lite"] },
-    { id: "deepseek", label: "DeepSeek", group: "native", exec: "in-loop", authKind: "api-key", envVars: ["DEEPSEEK_API_KEY"], baseUrl: "https://api.deepseek.com/v1", signupUrl: "https://platform.deepseek.com/api_keys", defaultModels: ["deepseek-v4-pro", "deepseek-v4-flash"] },
-    { id: "xai", label: "xAI (Grok)", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["XAI_API_KEY"], keyPrefix: ["xai-"], baseUrl: "https://api.x.ai/v1", signupUrl: "https://console.x.ai", defaultModels: ["grok-4.3", "grok-4.1-fast"] },
-    { id: "mistral", label: "Mistral", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["MISTRAL_API_KEY"], baseUrl: "https://api.mistral.ai/v1", signupUrl: "https://console.mistral.ai/api-keys", defaultModels: ["mistral-large-latest", "codestral-latest"] },
-    { id: "groq", label: "Groq", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["GROQ_API_KEY"], keyPrefix: ["gsk_"], baseUrl: "https://api.groq.com/openai/v1", signupUrl: "https://console.groq.com/keys", defaultModels: ["llama-3.3-70b-versatile", "moonshotai/kimi-k2-instruct"] },
-    { id: "together", label: "Together AI", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["TOGETHER_API_KEY"], baseUrl: "https://api.together.xyz/v1", signupUrl: "https://api.together.ai/settings/api-keys", defaultModels: ["deepseek-ai/DeepSeek-V3", "Qwen/Qwen2.5-Coder-32B-Instruct"] },
-    { id: "fireworks", label: "Fireworks", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["FIREWORKS_API_KEY"], keyPrefix: ["fw_"], baseUrl: "https://api.fireworks.ai/inference/v1", signupUrl: "https://fireworks.ai/account/api-keys", defaultModels: ["accounts/fireworks/models/deepseek-v3"] },
-    { id: "deepinfra", label: "DeepInfra", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["DEEPINFRA_API_KEY"], baseUrl: "https://api.deepinfra.com/v1/openai", signupUrl: "https://deepinfra.com/dash/api_keys" },
-    { id: "cerebras", label: "Cerebras", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["CEREBRAS_API_KEY"], keyPrefix: ["csk-"], baseUrl: "https://api.cerebras.ai/v1", signupUrl: "https://cloud.cerebras.ai", defaultModels: ["qwen-3-coder-480b", "llama-3.3-70b"] },
-    { id: "perplexity", label: "Perplexity", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["PERPLEXITY_API_KEY"], keyPrefix: ["pplx-"], baseUrl: "https://api.perplexity.ai", signupUrl: "https://www.perplexity.ai/settings/api", defaultModels: ["sonar-pro", "sonar-reasoning-pro"] },
-    { id: "baseten", label: "Baseten", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["BASETEN_API_KEY"], baseUrl: "https://inference.baseten.co/v1", signupUrl: "https://app.baseten.co/settings/api_keys" },
-    { id: "moonshot", label: "Moonshot (Kimi)", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["MOONSHOT_API_KEY"], baseUrl: "https://api.moonshot.ai/v1", signupUrl: "https://platform.moonshot.ai/console/api-keys", defaultModels: ["kimi-k2-0905-preview"] },
-    { id: "zai", label: "Z.ai (GLM)", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["ZAI_API_KEY", "ZHIPU_API_KEY"], baseUrl: "https://api.z.ai/api/paas/v4", signupUrl: "https://z.ai/manage-apikey/apikey-list", defaultModels: ["glm-4.6", "glm-4.5-air"] },
-    { id: "nebius", label: "Nebius AI Studio", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["NEBIUS_API_KEY"], baseUrl: "https://api.studio.nebius.com/v1", signupUrl: "https://studio.nebius.com" },
-    { id: "hyperbolic", label: "Hyperbolic", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["HYPERBOLIC_API_KEY"], baseUrl: "https://api.hyperbolic.xyz/v1", signupUrl: "https://app.hyperbolic.xyz/settings" },
-    { id: "sambanova", label: "SambaNova", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["SAMBANOVA_API_KEY"], baseUrl: "https://api.sambanova.ai/v1", signupUrl: "https://cloud.sambanova.ai/apis" },
-    { id: "novita", label: "Novita", group: "openai-compat", exec: "in-loop", authKind: "openai-compat", envVars: ["NOVITA_API_KEY"], baseUrl: "https://api.novita.ai/v3/openai", signupUrl: "https://novita.ai/settings/key-management" },
-    { id: "openrouter", label: "OpenRouter", group: "gateway", exec: "in-loop", authKind: "openai-compat", envVars: ["OPENROUTER_API_KEY"], keyPrefix: ["sk-or-"], baseUrl: "https://openrouter.ai/api/v1", signupUrl: "https://openrouter.ai/keys", notes: "Hundreds of models via one key. extraHeaders HTTP-Referer/X-Title recommended." },
-    { id: "vercel-gateway", label: "Vercel AI Gateway", group: "gateway", exec: "in-loop", authKind: "openai-compat", envVars: ["AI_GATEWAY_API_KEY"], baseUrl: "https://ai-gateway.vercel.sh/v1", signupUrl: "https://vercel.com/docs/ai-gateway", notes: "Spend + credit telemetry; feeds the future ACCOUNT pillar." },
-    { id: "requesty", label: "Requesty", group: "gateway", exec: "in-loop", authKind: "openai-compat", envVars: ["REQUESTY_API_KEY"], baseUrl: "https://router.requesty.ai/v1", signupUrl: "https://app.requesty.ai" },
-    { id: "portkey", label: "Portkey", group: "gateway", exec: "in-loop", authKind: "openai-compat", envVars: ["PORTKEY_API_KEY"], baseUrl: "https://api.portkey.ai/v1", signupUrl: "https://app.portkey.ai", notes: "Config-driven routing via x-portkey-* headers." },
-    { id: "litellm", label: "LiteLLM proxy", group: "gateway", exec: "in-loop", authKind: "openai-compat", envVars: ["LITELLM_API_KEY"], signupUrl: "https://docs.litellm.ai/docs/simple_proxy", notes: "Self-hosted; set baseUrl to your proxy." },
-    { id: "azure-foundry", label: "Azure AI Foundry", group: "gateway", exec: "in-loop", authKind: "openai-compat", envVars: ["AZURE_AI_FOUNDRY_API_KEY", "AZURE_AI_INFERENCE_API_KEY"], signupUrl: "https://ai.azure.com", defaultModels: ["gpt-5.5", "gpt-5.5-mini", "gpt-4.1", "o4-mini"], notes: "OpenAI-compatible Foundry endpoint. Use baseUrl ending in /openai/v1." },
-    { id: "bedrock", label: "Amazon Bedrock", group: "cloud", exec: "in-loop", authKind: "aws", envVars: ["AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_REGION", "AWS_PROFILE"], keyPrefix: ["AKIA", "ASIA"], signupUrl: "https://console.aws.amazon.com/bedrock", defaultModels: ["anthropic.claude-sonnet-4-20250514-v1:0"], notes: "Needs @ai-sdk/amazon-bedrock (P2)." },
-    { id: "vertex", label: "Google Vertex AI", group: "cloud", exec: "in-loop", authKind: "vertex", envVars: ["GOOGLE_VERTEX_PROJECT", "GOOGLE_VERTEX_LOCATION", "GOOGLE_APPLICATION_CREDENTIALS"], signupUrl: "https://console.cloud.google.com/vertex-ai", defaultModels: ["gemini-3.1-pro-preview"], notes: "ADC or a service-account JSON." },
-    { id: "azure", label: "Azure OpenAI", group: "cloud", exec: "in-loop", authKind: "azure", envVars: ["AZURE_API_KEY", "AZURE_RESOURCE_NAME"], signupUrl: "https://oai.azure.com", notes: "Needs @ai-sdk/azure (P2); resourceName + deployment." },
-    { id: "ollama", label: "Ollama (local)", group: "local", exec: "in-loop", authKind: "openai-compat", envVars: [], baseUrl: "http://localhost:11434/v1", signupUrl: "https://ollama.com", defaultModels: ["qwen2.5-coder:7b", "llama3.3"], notes: "No key; runs on your machine." },
-    { id: "lmstudio", label: "LM Studio (local)", group: "local", exec: "in-loop", authKind: "openai-compat", envVars: [], baseUrl: "http://localhost:1234/v1", signupUrl: "https://lmstudio.ai" },
-    { id: "vllm", label: "vLLM (local/self-host)", group: "local", exec: "in-loop", authKind: "openai-compat", envVars: [], baseUrl: "http://localhost:8000/v1", signupUrl: "https://docs.vllm.ai" },
-    { id: "llamacpp", label: "llama.cpp (local)", group: "local", exec: "in-loop", authKind: "openai-compat", envVars: [], baseUrl: "http://localhost:8080/v1", signupUrl: "https://github.com/ggml-org/llama.cpp" },
-    { id: "claude-cli", label: "Claude (Pro/Max via claude CLI)", group: "cli", exec: "cli", authKind: "cli", envVars: [], binary: "claude", signupUrl: "https://claude.com/product/claude-code", defaultModels: ["claude-opus-4-8", "claude-sonnet-4-6"], notes: "Wraps the official binary (like Conductor). Runs its own tools/permissions. ToS-clean: no token is read." },
-    { id: "codex-cli", label: "ChatGPT (Plus/Pro via codex CLI)", group: "cli", exec: "cli", authKind: "cli", envVars: [], binary: "codex", signupUrl: "https://developers.openai.com/codex/cli", defaultModels: ["gpt-5.5", "gpt-5.4", "gpt-5.4-mini"], notes: "Wraps the official binary. Runs its own tools/permissions. ToS-clean." }
-  ];
-  BY_ID3 = new Map(CATALOG2.map((p) => [p.id, p]));
-});
-
 // node_modules/ink/build/render.js
 import { Stream } from "node:stream";
 import process12 from "node:process";
@@ -70406,12 +70267,13 @@ var import_react20 = __toESM(require_react(), 1);
 // node_modules/ink/build/hooks/use-focus-manager.js
 var import_react21 = __toESM(require_react(), 1);
 // src/cli.tsx
-import { execFileSync as execFileSync4 } from "child_process";
-import { resolve as resolve11 } from "path";
-import { existsSync as existsSync10 } from "fs";
+import { execFileSync as execFileSync4 } from "node:child_process";
+import { resolve as resolve11 } from "node:path";
+import { existsSync as existsSync8 } from "node:fs";
 
 // src/ui/App.tsx
 var import_react26 = __toESM(require_react(), 1);
+
 // src/ui/theme.ts
 var color = {
   accent: "#7DD3FC",
@@ -118658,6 +118520,7 @@ var COMMANDS = [
   { name: "/context", usage: "/context", desc: "see what's loaded and how many tokens it uses", group: "chat" },
   { name: "/memory", usage: "/memory [note]", desc: "show or add facts to remember (or start a line with #)", group: "chat" },
   { name: "/account", usage: "/account", desc: "list accounts; /account <number> to switch, /account add to add one", group: "accounts" },
+  { name: "/onboard", usage: "/onboard", desc: "first-run setup; provider list and import/add commands", group: "accounts" },
   { name: "/cost", usage: "/cost", desc: "see what you've spent per account", group: "accounts" },
   { name: "/copy", usage: "/copy", desc: "copy the last reply to the clipboard", group: "output" },
   { name: "/export", usage: "/export [file]", desc: "save the conversation to a file", group: "output" },
@@ -119403,6 +119266,9 @@ function detectImageMode() {
   return "blocks";
 }
 var resolved = null;
+function setImageMode(m2) {
+  resolved = m2;
+}
 function getImageMode() {
   return resolved ?? detectImageMode();
 }
@@ -119413,6 +119279,30 @@ function idColor(id) {
   const bytes = [id >> 16 & 255, id >> 8 & 255, id & 255];
   return "#" + bytes.map((x2) => x2.toString(16).padStart(2, "0")).join("");
 }
+function transmitOne(id, b64, cols, rows) {
+  const ESC2 = "\x1B";
+  const CHUNK = 4096;
+  if (b64.length <= CHUNK) {
+    return `${ESC2}_Ga=T,U=1,i=${id},c=${cols},r=${rows},f=100,q=2;${b64}${ESC2}\\`;
+  }
+  let out = "";
+  for (let i2 = 0;i2 < b64.length; i2 += CHUNK) {
+    const chunk2 = b64.slice(i2, i2 + CHUNK);
+    const more = i2 + CHUNK < b64.length ? 1 : 0;
+    out += i2 === 0 ? `${ESC2}_Ga=T,U=1,i=${id},c=${cols},r=${rows},f=100,q=2,m=${more};${chunk2}${ESC2}\\` : `${ESC2}_Gm=${more};${chunk2}${ESC2}\\`;
+  }
+  return out;
+}
+function transmitAll() {
+  let out = "";
+  for (const variant of VARIANTS) {
+    for (const size2 of SIZES) {
+      const data = GHOSTS[variant][size2];
+      out += transmitOne(imageId(variant, size2), GHOST_PNG[variant], data[0]?.length ?? 0, data.length);
+    }
+  }
+  return out;
+}
 function placeholderRows(cols, rows) {
   const lines = [];
   for (let r2 = 0;r2 < rows; r2++) {
@@ -121297,6 +121187,9 @@ function listSessions() {
     return [];
   }
 }
+function latestSession() {
+  return listSessions()[0] ?? null;
+}
 var histFile = () => join4(dir(), "history.json");
 function loadHistory() {
   try {
@@ -133323,335 +133216,10 @@ function friendlyToolPhase(name31) {
 // src/ui/App.tsx
 init_resolve();
 init_store();
-
-// src/accounts/detect.ts
-init_catalog();
-init_store();
-import { readFileSync as readFileSync11, existsSync as existsSync6 } from "node:fs";
-import { join as join9 } from "node:path";
-import { homedir as homedir7 } from "node:os";
-function detectEnvCreds() {
-  const out = [];
-  for (const p of CATALOG) {
-    if (p.authKind !== "api-key" && p.authKind !== "openai-compat")
-      continue;
-    for (const ev of p.envVars) {
-      const v = process.env[ev];
-      if (v) {
-        out.push({ provider: p.id, label: p.label, envVar: ev, value: v });
-        break;
-      }
-    }
-  }
-  return out;
-}
-async function importEnvCred(c) {
-  const id = `${c.provider}-env`;
-  const ref = `${id}:api-key`;
-  await setSecret(ref, c.value);
-  const cat = CATALOG.find((p) => p.id === c.provider);
-  const account = {
-    id,
-    label: `${c.label} (from ${c.envVar})`,
-    provider: c.provider,
-    exec: "in-loop",
-    auth: cat.authKind === "openai-compat" ? { kind: "openai-compat", ref } : { kind: "api-key", ref },
-    baseUrl: cat.baseUrl,
-    enabled: true,
-    addedAt: Date.now()
-  };
-  putAccount(account);
-  return account;
-}
-function importableEnvCreds() {
-  return detectEnvCreds().filter((c) => !getAccount(`${c.provider}-env`));
-}
-function awsIni(file5, profile = "default") {
-  if (!existsSync6(file5))
-    return {};
-  const out = {};
-  let cur = "";
-  for (const raw of readFileSync11(file5, "utf8").split(`
-`)) {
-    const line = raw.trim();
-    if (line.startsWith("["))
-      cur = line.slice(1, -1).replace(/^profile\s+/, "");
-    else if (cur === profile && line.includes("=")) {
-      const i2 = line.indexOf("=");
-      out[line.slice(0, i2).trim().toLowerCase()] = line.slice(i2 + 1).trim();
-    }
-  }
-  return out;
-}
-function detectCloudCreds() {
-  const out = [];
-  const home5 = homedir7();
-  const creds = awsIni(join9(home5, ".aws", "credentials"));
-  const conf = awsIni(join9(home5, ".aws", "config"));
-  const akid = process.env.AWS_ACCESS_KEY_ID ?? creds.aws_access_key_id;
-  const secret = process.env.AWS_SECRET_ACCESS_KEY ?? creds.aws_secret_access_key;
-  const region = process.env.AWS_REGION ?? process.env.AWS_DEFAULT_REGION ?? conf.region;
-  if (akid && secret) {
-    out.push({
-      provider: "bedrock",
-      label: "Amazon Bedrock",
-      source: process.env.AWS_ACCESS_KEY_ID ? "env" : "~/.aws/credentials",
-      aws: { accessKeyId: akid, secretAccessKey: secret, sessionToken: process.env.AWS_SESSION_TOKEN ?? creds.aws_session_token, region: region ?? "us-east-1" }
-    });
-  }
-  if (process.env.AZURE_API_KEY && process.env.AZURE_RESOURCE_NAME) {
-    out.push({ provider: "azure", label: "Azure OpenAI", source: "env", azure: { resourceName: process.env.AZURE_RESOURCE_NAME, apiKey: process.env.AZURE_API_KEY } });
-  }
-  if (process.env.GOOGLE_VERTEX_PROJECT) {
-    out.push({ provider: "vertex", label: "Google Vertex AI", source: "env", vertex: { project: process.env.GOOGLE_VERTEX_PROJECT, location: process.env.GOOGLE_VERTEX_LOCATION ?? "us-central1" } });
-  }
-  return out;
-}
-async function importCloudCred(c) {
-  const id = `${c.provider}-import`;
-  let auth;
-  if (c.aws) {
-    await setSecret(`${id}:akid`, c.aws.accessKeyId);
-    await setSecret(`${id}:secret`, c.aws.secretAccessKey);
-    if (c.aws.sessionToken)
-      await setSecret(`${id}:token`, c.aws.sessionToken);
-    auth = { kind: "aws", accessKeyIdRef: `${id}:akid`, secretKeyRef: `${id}:secret`, sessionTokenRef: c.aws.sessionToken ? `${id}:token` : undefined, region: c.aws.region };
-  } else if (c.azure) {
-    await setSecret(`${id}:api-key`, c.azure.apiKey);
-    auth = { kind: "azure", resourceName: c.azure.resourceName, ref: `${id}:api-key` };
-  } else {
-    auth = { kind: "vertex", project: c.vertex.project, location: c.vertex.location, adc: true };
-  }
-  const account = { id, label: `${c.label} (from ${c.source})`, provider: c.provider, exec: "in-loop", auth, enabled: true, addedAt: Date.now() };
-  putAccount(account);
-  return account;
-}
-function importableCloudCreds() {
-  return detectCloudCreds().filter((c) => !getAccount(`${c.provider}-import`));
-}
-
-// src/accounts/onboard.ts
-init_store();
-init_catalog();
-init_resolve();
-init_cli_backend();
-init_proc();
-import { mkdirSync as mkdirSync7 } from "node:fs";
-import { join as join10 } from "node:path";
-import { homedir as homedir8 } from "node:os";
-async function addApiKeyAccount(provider, key, opts = {}) {
-  const cat = catalogProvider(provider);
-  if (!cat)
-    return { ok: false, message: `unknown provider "${provider}" — see /accounts catalog` };
-  if (cat.group === "cli")
-    return { ok: false, message: `${cat.label} is a subscription account — use /login ${provider} (P3), not a key` };
-  if (cat.authKind !== "api-key" && cat.authKind !== "openai-compat") {
-    return { ok: false, message: `${cat.label} needs ${cat.authKind} credentials — use the guided add (P2)` };
-  }
-  const id = opts.id ?? `${provider}-${shortId()}`;
-  const ref = `${id}:api-key`;
-  await setSecret(ref, key.trim());
-  const account = {
-    id,
-    label: opts.label ?? cat.label,
-    provider,
-    exec: "in-loop",
-    auth: cat.authKind === "openai-compat" ? { kind: "openai-compat", ref } : { kind: "api-key", ref },
-    baseUrl: cat.baseUrl,
-    enabled: true,
-    addedAt: Date.now()
-  };
-  putAccount(account);
-  return { ok: true, account, message: `added ${account.label} (${id})` };
-}
-function azureResourceName(input) {
-  const s2 = input.trim();
-  try {
-    const host = new URL(s2).hostname;
-    return host.split(".")[0] || s2;
-  } catch {
-    return s2;
-  }
-}
-function azureFoundryBaseUrl(endpoint) {
-  const trimmed = endpoint.trim().replace(/\/+$/, "");
-  if (/\/openai\/v1$/i.test(trimmed))
-    return trimmed;
-  if (/\/openai$/i.test(trimmed))
-    return `${trimmed}/v1`;
-  return `${trimmed}/openai/v1`;
-}
-async function addAzureFoundryAccount(endpoint, key, opts = {}) {
-  if (!/^https?:\/\//i.test(endpoint) || !key.trim())
-    return { ok: false, message: "usage: /account add azure <foundry-endpoint> <api-key>" };
-  const host = new URL(endpoint).hostname;
-  const slug3 = host.split(".")[0]?.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || shortId();
-  const id = opts.id ?? `azure-foundry-${slug3}`;
-  const ref = `${id}:api-key`;
-  await setSecret(ref, key.trim());
-  const account = {
-    id,
-    label: opts.label ?? `Azure Foundry (${slug3})`,
-    provider: "azure-foundry",
-    exec: "in-loop",
-    auth: { kind: "openai-compat", ref },
-    baseUrl: azureFoundryBaseUrl(endpoint),
-    enabled: true,
-    addedAt: Date.now()
-  };
-  putAccount(account);
-  return { ok: true, account, message: `added ${account.label} (${id})` };
-}
-async function addAzureAccount(resourceOrEndpoint, key, opts = {}) {
-  const resourceName = azureResourceName(resourceOrEndpoint);
-  if (!resourceName || !key.trim())
-    return { ok: false, message: "usage: /account add azure <resource-or-endpoint> <api-key> [api-version]" };
-  const id = opts.id ?? `azure-${resourceName.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || shortId()}`;
-  const ref = `${id}:api-key`;
-  await setSecret(ref, key.trim());
-  const account = {
-    id,
-    label: opts.label ?? `Azure (${resourceName})`,
-    provider: "azure",
-    exec: "in-loop",
-    auth: { kind: "azure", resourceName, ref, apiVersion: opts.apiVersion },
-    enabled: true,
-    addedAt: Date.now()
-  };
-  putAccount(account);
-  return { ok: true, account, message: `added ${account.label} (${id})` };
-}
-function cliProfileDir(id) {
-  const home5 = process.env.GEARBOX_HOME || join10(homedir8(), ".gearbox");
-  return join10(home5, "cli", id);
-}
-function addCliAccount(provider, name31) {
-  const cat = catalogProvider(provider);
-  if (!cat || cat.group !== "cli" || !cat.binary)
-    return { ok: false, message: `"${provider}" is not a CLI subscription provider` };
-  if (!which(cat.binary))
-    return { ok: false, message: `the ${cat.binary} binary isn't on your PATH — install it first` };
-  const slug3 = name31 ? name31.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") : "";
-  const id = slug3 ? `${provider}-${slug3}` : provider;
-  const profile = slug3 ? cliProfileDir(id) : undefined;
-  if (profile)
-    mkdirSync7(profile, { recursive: true });
-  const account = {
-    id,
-    label: slug3 ? `${cat.label.replace(/ \(.*\)$/, "")} (${name31.trim()})` : cat.label,
-    provider,
-    exec: "cli",
-    auth: { kind: "cli", binary: cat.binary, loginProfile: profile },
-    models: cat.defaultModels,
-    enabled: true,
-    addedAt: Date.now()
-  };
-  putAccount(account);
-  return { ok: true, account, message: `${account.label} ready — runs via the ${cat.binary} CLI${profile ? " (separate login)" : ""}` };
-}
-async function cliAuthStatus(binary, profile) {
-  const env3 = subscriptionEnv(binary, profile);
-  const readBoth = async (cmd, timeoutMs = 5000) => {
-    const p = spawnProc(cmd, { stdin: "ignore", stdout: "pipe", stderr: "pipe", env: env3 });
-    let timedOut = false;
-    const timer = setTimeout(() => {
-      timedOut = true;
-      try {
-        p.kill();
-      } catch {}
-    }, timeoutMs);
-    try {
-      const [o, e2] = await Promise.all([readStream(p.stdout), readStream(p.stderr)]);
-      await p.exited.catch(() => {});
-      return { out: `${o}
-${e2}`.trim(), timedOut };
-    } finally {
-      clearTimeout(timer);
-    }
-  };
-  try {
-    if (binary === "codex") {
-      const { out: out2, timedOut: timedOut2 } = await readBoth(["codex", "login", "status"]);
-      if (timedOut2)
-        return { loggedIn: false, detail: "`codex login status` timed out" };
-      const loggedIn = /logged in|signed in|account:|email|using chatgpt/i.test(out2) && !/not logged in|not signed in/i.test(out2);
-      const email3 = out2.match(/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/i)?.[0]?.toLowerCase();
-      const detail = loggedIn ? out2.split(`
-`).map((l) => l.trim()).find((l) => /@|plan|chatgpt/i.test(l))?.slice(0, 80) || "ChatGPT" : undefined;
-      return { loggedIn, detail, identity: email3 ? `codex:${email3}` : undefined, identityLabel: email3 };
-    }
-    const { out, timedOut } = await readBoth(["claude", "auth", "status"]);
-    if (timedOut)
-      return { loggedIn: false, detail: "`claude auth status` timed out" };
-    const m2 = out.match(/\{[^{}]*"loggedIn"[\s\S]*?\}/);
-    try {
-      const j = JSON.parse(m2 ? m2[0] : out);
-      const parts = [];
-      if (j.email)
-        parts.push(j.email);
-      if (j.subscriptionType)
-        parts.push(`Claude ${String(j.subscriptionType).replace(/^\w/, (c) => c.toUpperCase())}`);
-      else if (j.authMethod && j.authMethod !== "claude.ai")
-        parts.push(`auth: ${j.authMethod}`);
-      const email3 = typeof j.email === "string" ? j.email.toLowerCase() : undefined;
-      return { loggedIn: !!j.loggedIn, detail: parts.join(" · ") || undefined, identity: email3 ? `claude:${email3}` : undefined, identityLabel: email3 };
-    } catch {
-      return { loggedIn: /"loggedIn"\s*:\s*true/.test(out) };
-    }
-  } catch {
-    return { loggedIn: false };
-  }
-}
-function cliLoginArgs(binary) {
-  return binary === "codex" ? ["login"] : ["auth", "login"];
-}
-async function addByPastedKey(key) {
-  const provider = detectProviderByKey(key);
-  if (!provider)
-    return { ok: false, message: "couldn't identify the provider from that key — use /accounts add <provider> <key>" };
-  return addApiKeyAccount(provider, key);
-}
-async function testAccount(a) {
-  const creds = await resolveCreds(a);
-  if (!creds.apiKey && a.auth.kind !== "cli")
-    return { ok: false, message: "no key stored" };
-  try {
-    if (a.provider === "anthropic") {
-      const r3 = await fetch("https://api.anthropic.com/v1/messages/count_tokens", {
-        method: "POST",
-        headers: { "x-api-key": creds.apiKey ?? "", "anthropic-version": "2023-06-01", "content-type": "application/json" },
-        body: JSON.stringify({ model: "claude-haiku-4-5", messages: [{ role: "user", content: "hi" }] })
-      });
-      return r3.ok ? { ok: true, message: "credential works" } : { ok: false, message: await errMessage(r3) };
-    }
-    if (a.provider === "google") {
-      const r3 = await fetch(`https://generativelanguage.googleapis.com/v1beta/models?key=${creds.apiKey ?? ""}`);
-      return r3.ok ? { ok: true, message: "credential works" } : { ok: false, message: await errMessage(r3) };
-    }
-    const base2 = creds.baseURL ?? "https://api.openai.com/v1";
-    const r2 = await fetch(`${base2.replace(/\/$/, "")}/models`, {
-      headers: { Authorization: `Bearer ${creds.apiKey ?? ""}`, ...creds.headers ?? {} }
-    });
-    return r2.ok ? { ok: true, message: "credential works" } : { ok: false, message: await errMessage(r2) };
-  } catch (e2) {
-    return { ok: false, message: e2?.message ?? "request failed" };
-  }
-}
-async function errMessage(r2) {
-  try {
-    const j = await r2.json();
-    const m2 = j?.error?.message ?? j?.message ?? j?.error;
-    if (typeof m2 === "string" && m2)
-      return `${m2} (HTTP ${r2.status})`;
-  } catch {}
-  return `HTTP ${r2.status}`;
-}
-function shortId() {
-  return Date.now().toString(36).slice(-4) + Math.floor(Math.random() * 1296).toString(36).padStart(2, "0");
-}
-
-// src/ui/App.tsx
+init_detect();
+init_onboard();
 init_catalog();
+init_onboarding();
 init_cli_backend();
 
 // src/accounts/balance.ts
@@ -133764,72 +133332,6 @@ ${summary}` },
   return { messages, summarizedTurns: old.length, before: before2, after: after2 };
 }
 
-// src/agent/mock.ts
-var sleep = (ms) => new Promise((r2) => setTimeout(r2, ms));
-async function stream(text2, onEvent, chunk2 = 3, delay3 = 8) {
-  for (let i2 = 0;i2 < text2.length; i2 += chunk2) {
-    onEvent({ type: "text", text: text2.slice(i2, i2 + chunk2) });
-    await sleep(delay3);
-  }
-}
-async function streamWrite(id, path, content, onEvent, stop) {
-  onEvent({ type: "tool-start", id, name: "write_file", arg: "" });
-  onEvent({ type: "tool-stream", id, arg: path });
-  for (let i2 = 0;i2 < content.length; i2 += 8) {
-    if (stop())
-      return;
-    onEvent({ type: "tool-stream", id, delta: content.slice(i2, i2 + 8) });
-    await sleep(16);
-  }
-  const diff2 = content.replace(/\n$/, "").split(`
-`).map((text2) => ({ sign: "+", text: text2 }));
-  onEvent({ type: "tool-end", id, ok: true, summary: `wrote ${path} (+${diff2.length} −0)`, diff: diff2 });
-}
-async function runTaskMock(opts) {
-  const { prompt, messages, onEvent, signal } = opts;
-  const stop = () => signal?.aborted === true;
-  await stream(`Sure — let me take a look around first.
-`, onEvent);
-  if (stop())
-    return done(messages, onEvent);
-  onEvent({ type: "tool-start", id: "1", name: "list_dir", arg: "." });
-  await sleep(260);
-  if (stop())
-    return done(messages, onEvent);
-  onEvent({ type: "tool-end", id: "1", ok: true, summary: "src · package.json · README.md · 5 more" });
-  onEvent({ type: "tool-start", id: "2", name: "read_file", arg: "src/cli.tsx" });
-  await sleep(220);
-  if (stop())
-    return done(messages, onEvent);
-  onEvent({ type: "tool-end", id: "2", ok: true, summary: "renders the Ink app · 38 lines" });
-  await stream(`
-Here's a quick file — watch it stream in:
-`, onEvent);
-  if (stop())
-    return done(messages, onEvent);
-  const demoFile = `# hello.py — written live in demo mode
-
-def greet(name: str) -> str:
-    return f"Hello, {name}!"
-
-if __name__ == "__main__":
-    for who in ("world", "gearbox", "Boo"):
-        print(greet(who))
-`;
-  await streamWrite("3", "hello.py", demoFile, onEvent, stop);
-  if (stop())
-    return done(messages, onEvent);
-  await stream(`
-This is demo mode — no API key is set, so I'm not calling a real model. ` + `Set ANTHROPIC_API_KEY (or OPENAI / GOOGLE / DEEPSEEK) and I'll actually work on: "${prompt}".
-`, onEvent);
-  return done(messages, onEvent);
-}
-function done(messages, onEvent) {
-  const usage = { inputTokens: 0, outputTokens: 0 };
-  onEvent({ type: "done", usage });
-  return { messages, usage };
-}
-
 // src/ui/clipboard.ts
 init_proc();
 function osc52(text2) {
@@ -134184,11 +133686,11 @@ function ActivityRail({ items, width }) {
     ]
   }, undefined, true, undefined, this);
 }
-function App2({ selector: initialSelector, demo, runner, fullscreen = false, resumeId }) {
+function App2({ selector: initialSelector, runner, fullscreen = false, resumeId }) {
   const { exit } = use_app_default();
   const { stdin, isRawModeSupported, setRawMode } = use_stdin_default();
   const { columns, rows } = useTerminalSize();
-  const online = useOnline(20000, !demo);
+  const online = useOnline(20000, true);
   const width = columns;
   const splashSize = rows >= 24 && columns >= 42 ? "big" : rows >= 13 && columns >= 22 ? "mini" : "none";
   const [items, setItems] = import_react26.useState([]);
@@ -134267,10 +133769,6 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
     const t2 = setInterval(() => setElapsed(Math.floor((Date.now() - start) / 1000)), 500);
     return () => clearInterval(t2);
   }, [busy]);
-  import_react26.useEffect(() => {
-    if (firstRunRef.current)
-      updatePrefs({ onboarded: true });
-  }, []);
   import_react26.useEffect(() => {
     const proj = basename2(process.cwd());
     setTitle(busy ? `✳ ${proj} · working` : `${proj} · gearbox`);
@@ -134331,8 +133829,6 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
     setTimeout(pumpPerm, 0);
   };
   import_react26.useEffect(() => {
-    if (demo)
-      return;
     const acctId = loadPrefs().activeAccount;
     if (!acctId)
       return;
@@ -134344,7 +133840,7 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
         setActiveCliModelId(undefined);
       setActiveCli({ id: a.id, label: bin });
     }
-  }, [demo]);
+  }, []);
   import_react26.useEffect(() => {
     setPermissionHandler((req) => new Promise((resolve11) => {
       if (modeRef.current === "auto-accept" && (req.kind === "write" || req.kind === "edit")) {
@@ -134586,8 +134082,6 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
     };
   }, [stdin, fullscreen, rows, scrollBy, copyWithFeedback]);
   const persist = import_react26.useCallback(() => {
-    if (demo)
-      return;
     const s2 = sessionRef.current;
     if (!itemsRef.current.length)
       return;
@@ -134601,7 +134095,7 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
       items: itemsRef.current,
       turns: s2.turns
     });
-  }, [demo]);
+  }, []);
   const loadInto = (s2) => {
     idRef.current = s2.items.reduce((m2, i2) => Math.max(m2, i2.id), 0) + 1;
     setItems(s2.items);
@@ -134761,10 +134255,24 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
   const [lastPick, setLastPick] = import_react26.useState(null);
   const [activeCli, setActiveCli] = import_react26.useState(null);
   const [activeCliModel, setActiveCliModel] = import_react26.useState(null);
+  const onboardingState = {
+    configured: listAccounts(),
+    importable: importableEnvCreds(),
+    cloudImportable: importableCloudCreds().map((c) => ({ provider: c.provider, label: c.label, source: c.source })),
+    hasClaudeCli: Boolean(which("claude")),
+    hasCodexCli: Boolean(which("codex"))
+  };
+  const setupRequired = needsOnboarding(onboardingState);
+  import_react26.useEffect(() => {
+    if (!setupRequired && firstRunRef.current) {
+      firstRunRef.current = false;
+      updatePrefs({ onboarded: true });
+    }
+  }, [setupRequired]);
   const model = lastPick?.model ?? choice?.model ?? null;
-  const modelLabel = demo ? "demo · no key" : activeCli ? `${activeCli.label}${activeCliModel ? ` · ${activeCliModel}` : ""}` : model?.label ?? "none";
+  const modelLabel = setupRequired ? "setup required" : activeCli ? `${activeCli.label}${activeCliModel ? ` · ${activeCliModel}` : ""}` : model?.label ?? "none";
   const subscription = activeCli ? activeCli.label : null;
-  const routing = demo || activeCli ? null : lastPick?.reason ?? choice?.reason ?? null;
+  const routing = setupRequired || activeCli ? null : lastPick?.reason ?? choice?.reason ?? null;
   const ctxPct = !activeCli && model && lastInput > 0 ? Math.round(lastInput / model.contextWindow * 100) : null;
   const push = (it) => setItems((prev) => [...prev, it]);
   const pushPhase = (label, detail) => {
@@ -134835,8 +134343,6 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
     };
   };
   const defaultRunner = import_react26.useCallback(async ({ prompt, messages, onEvent, selector: sel, signal }) => {
-    if (demo)
-      return runTaskMock({ prompt, messages, onEvent, signal });
     const cli = activeCliRef.current;
     if (cli) {
       routedRef.current = null;
@@ -134869,10 +134375,8 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
     const produced = r2.messages.slice(ctx.length);
     const ledger = sanitizeToolPairs([...messages, { role: "user", content: prompt }, ...produced]);
     return { messages: ledger, usage: r2.usage };
-  }, [demo]);
+  }, []);
   const compactNow = import_react26.useCallback(async (keepRecent, signal) => {
-    if (demo)
-      return "compaction needs a model (no key in demo)";
     let model2;
     try {
       model2 = selectorRef.current.select({ prompt: "", kind: "summarize" }).model;
@@ -134886,7 +134390,7 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
     const saved = res.before - res.after;
     const savedStr = saved >= 1000 ? `${(saved / 1000).toFixed(1)}k` : String(Math.max(0, saved));
     return `compacted ${res.summarizedTurns} earlier turn${res.summarizedTurns > 1 ? "s" : ""} · ~${savedStr} tokens freed`;
-  }, [demo]);
+  }, []);
   const MODE_NOTE = {
     normal: "normal mode — I'll ask before writes, edits, and shell",
     "auto-accept": "auto-accept edits — file writes/edits apply without asking (shell still gated)",
@@ -135134,7 +134638,7 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
       recordUsage({ accountId: acctId, inputTokens: r2.usage.inputTokens, outputTokens: r2.usage.outputTokens, costUSD: cost, estimated: cm?.costUSD == null });
       if (cm?.rates?.length)
         recordRateLimits(acctId, cm.rates);
-      if (!demo && !ac.signal.aborted) {
+      if (!ac.signal.aborted) {
         try {
           const cm2 = selectorRef.current.select({ prompt: "", kind: "summarize" }).model;
           const budget = Math.max(8000, cm2.contextWindow - 32000);
@@ -135512,13 +135016,26 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
             }
           })();
           if (!m2) {
-            notice("no model available — set a key to see the working set");
+            notice(`no model available — add a provider first
+
+` + onboardingSummary(onboardingState));
             return;
           }
           const { sections } = buildContext({ history: msgRef.current, userText: lastPromptRef.current || "(your next message)", model: m2, plan: modeRef.current === "plan" });
           push({ kind: "context", id: idRef.current++, view: buildContextView(sections, m2.contextWindow, process.cwd()) });
           return;
         }
+        case "onboard": {
+          echo(text2);
+          if (arg.trim().toLowerCase() === "providers") {
+            const rows2 = featuredApiKeyProviders().map((p) => `  ${p.id.padEnd(18)} ${p.label.padEnd(24)} ${p.envVars[0] ?? ""}`.trimEnd());
+            notice(["providers you can add with /account add <provider> <api-key>", ...rows2, "", "Aliases work for common names, e.g. gemini -> google, grok -> xai, kimi -> moonshot."].join(`
+`));
+          } else {
+            notice(onboardingSummary(onboardingState));
+          }
+          return;
+        }
         case "accounts":
         case "account": {
           echo(text2);
@@ -135786,10 +135303,6 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
             notice("busy — try /compact once the current turn finishes");
             return;
           }
-          if (demo) {
-            notice("compaction needs a model (no key in demo)");
-            return;
-          }
           setBusy(true);
           setVerb("Compacting context");
           setMascotState("thinking");
@@ -135827,7 +135340,7 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
       notice(`/${name31} hit an error: ${(e2?.message ?? String(e2)).split(`
 `)[0]}`);
     }
-  }, [exit, runTurn]);
+  }, [exit, runTurn, onboardingState]);
   const submit = import_react26.useCallback((value) => {
     let text2 = value.trim();
     if (pasteStoreRef.current.size) {
@@ -135881,6 +135394,13 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
       handleCommand(text2);
       return;
     }
+    if (setupRequired) {
+      echo(text2);
+      notice(`set up a provider before sending a task
+
+` + onboardingSummary(onboardingState));
+      return;
+    }
     if (busyRef.current) {
       queueRef.current.push(text2);
       setQueued([...queueRef.current]);
@@ -135888,7 +135408,7 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
       return;
     }
     runTurn(text2);
-  }, [handleCommand, runTurn]);
+  }, [handleCommand, runTurn, setupRequired, onboardingState]);
   import_react26.useEffect(() => {
     if (busy || queueRef.current.length === 0)
       return;
@@ -136212,78 +135732,169 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
         skin: ghostSkin,
         size: splashSize
       }, undefined, false, undefined, this),
-      /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Box_default, {
+      setupRequired ? /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Box_default, {
         marginTop: 1,
+        flexDirection: "column",
+        alignItems: "center",
         children: [
           /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
-            color: color.dim,
-            children: "talk or type "
+            color: color.text,
+            children: "setup required"
           }, undefined, false, undefined, this),
+          onboardingState.importable.length || onboardingState.cloudImportable.length ? /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+            color: color.faint,
+            children: [
+              "detected credentials: ",
+              /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                color: color.accent,
+                children: "/account import"
+              }, undefined, false, undefined, this)
+            ]
+          }, undefined, true, undefined, this) : null,
           /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
             color: color.faint,
             children: [
-              glyph.bullet,
-              " "
+              "add any provider key: ",
+              /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                color: color.accent,
+                children: "/account add <provider> <api-key>"
+              }, undefined, false, undefined, this)
             ]
           }, undefined, true, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
-            color: color.accentDim,
-            children: "/"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
-            color: color.dim,
-            children: "commands "
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
-            color: color.accentDim,
-            children: "@"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
-            color: color.dim,
-            children: "files "
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
-            color: color.accentDim,
-            children: "!"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
-            color: color.dim,
-            children: "shell"
-          }, undefined, false, undefined, this)
-        ]
-      }, undefined, true, undefined, this),
-      firstRunRef.current ? /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Box_default, {
-        marginTop: 1,
-        flexDirection: "column",
-        alignItems: "center",
-        children: [
           /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
             color: color.faint,
             children: [
-              "new here? press ",
+              "paste-detect: ",
               /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
                 color: color.accent,
-                children: "?"
+                children: "/account add <api-key>"
               }, undefined, false, undefined, this),
-              " for shortcuts · ",
+              "  ·  list: ",
               /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
                 color: color.accent,
-                children: "shift+tab"
+                children: "/onboard providers"
+              }, undefined, false, undefined, this)
+            ]
+          }, undefined, true, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Box_default, {
+            marginTop: 1,
+            flexDirection: "column",
+            alignItems: "flex-start",
+            children: [
+              featuredApiKeyProviders().slice(0, 6).map((p) => /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                color: color.dim,
+                children: [
+                  "  ",
+                  /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                    color: color.accent,
+                    children: [
+                      "/account add ",
+                      p.id,
+                      " <api-key>"
+                    ]
+                  }, undefined, true, undefined, this),
+                  "  ",
+                  p.label
+                ]
+              }, p.id, true, undefined, this)),
+              /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                color: color.dim,
+                children: [
+                  "  ",
+                  /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                    color: color.accent,
+                    children: "/account add azure <endpoint> <api-key>"
+                  }, undefined, false, undefined, this),
+                  "  Azure OpenAI / Foundry"
+                ]
+              }, undefined, true, undefined, this)
+            ]
+          }, undefined, true, undefined, this),
+          onboardingState.hasClaudeCli || onboardingState.hasCodexCli ? /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+            color: color.faint,
+            children: [
+              onboardingState.hasClaudeCli ? "/account add claude" : "",
+              onboardingState.hasClaudeCli && onboardingState.hasCodexCli ? "  ·  " : "",
+              onboardingState.hasCodexCli ? "/account add codex" : ""
+            ]
+          }, undefined, true, undefined, this) : null
+        ]
+      }, undefined, true, undefined, this) : /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(jsx_dev_runtime12.Fragment, {
+        children: [
+          /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Box_default, {
+            marginTop: 1,
+            children: [
+              /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                color: color.dim,
+                children: "talk or type "
               }, undefined, false, undefined, this),
-              " cycles modes · ",
               /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
-                color: color.accent,
-                children: "⌃Y"
+                color: color.faint,
+                children: [
+                  glyph.bullet,
+                  " "
+                ]
+              }, undefined, true, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                color: color.accentDim,
+                children: "/"
               }, undefined, false, undefined, this),
-              " copies the last reply"
+              /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                color: color.dim,
+                children: "commands "
+              }, undefined, false, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                color: color.accentDim,
+                children: "@"
+              }, undefined, false, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                color: color.dim,
+                children: "files "
+              }, undefined, false, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                color: color.accentDim,
+                children: "!"
+              }, undefined, false, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                color: color.dim,
+                children: "shell"
+              }, undefined, false, undefined, this)
             ]
           }, undefined, true, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
-            color: color.faint,
-            children: demo ? "set ANTHROPIC_API_KEY (or another provider) to start — running in demo mode" : "/config inline on for terminal scrollback · /keys for shortcuts"
-          }, undefined, false, undefined, this)
+          firstRunRef.current ? /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Box_default, {
+            marginTop: 1,
+            flexDirection: "column",
+            alignItems: "center",
+            children: [
+              /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                color: color.faint,
+                children: [
+                  "new here? press ",
+                  /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                    color: color.accent,
+                    children: "?"
+                  }, undefined, false, undefined, this),
+                  " for shortcuts · ",
+                  /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                    color: color.accent,
+                    children: "shift+tab"
+                  }, undefined, false, undefined, this),
+                  " cycles modes · ",
+                  /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                    color: color.accent,
+                    children: "⌃Y"
+                  }, undefined, false, undefined, this),
+                  " copies the last reply"
+                ]
+              }, undefined, true, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Text, {
+                color: color.faint,
+                children: "/config inline on for terminal scrollback · /keys for shortcuts"
+              }, undefined, false, undefined, this)
+            ]
+          }, undefined, true, undefined, this) : null
         ]
-      }, undefined, true, undefined, this) : null
+      }, undefined, true, undefined, this)
     ]
   }, undefined, true, undefined, this);
   const paletteJsx = pickerRows.length || cmdMatches.length || fileMatches.length ? /* @__PURE__ */ jsx_dev_runtime12.jsxDEV(Box_default, {
@@ -136311,7 +135922,7 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
     value: edit2.value,
     cursor: edit2.cursor,
     selectionAnchor: edit2.selectionAnchor,
-    placeholder: mode2 === "plan" ? "describe what to plan…" : "ask anything",
+    placeholder: setupRequired ? "add a provider with /account add <provider> <api-key>" : mode2 === "plan" ? "describe what to plan…" : "ask anything",
     suggestion,
     busy,
     width,
@@ -136484,304 +136095,33 @@ function App2({ selector: initialSelector, demo, runner, fullscreen = false, res
   }, undefined, true, undefined, this);
 }
 
-// src/model/selector.ts
-class FixedSelector2 {
-  preferredId;
-  constructor(preferredId) {
-    this.preferredId = preferredId;
-  }
-  select(_task) {
-    const model = pickDefaultModel(this.preferredId);
-    if (!model) {
-      throw new Error("No model available. Set a key: ANTHROPIC_API_KEY / OPENAI_API_KEY / GOOGLE_GENERATIVE_AI_API_KEY / DEEPSEEK_API_KEY");
-    }
-    return { model, reason: "fixed default · routing not enabled yet" };
-  }
-}
-
-// src/model/router.ts
-var BAR2 = {
-  summarize: 0,
-  classify: 0,
-  search: 0.2,
-  chat: 0.3,
-  plan: 0.7,
-  code: 0.7
-};
-var MUTATION2 = /\b(fix|implement|refactor|edit|modif|debug|rewrite|replace|add|create|delete|remove|patch|migrat|rename)\b/;
-function classify2(prompt) {
-  const p = prompt.toLowerCase().trim();
-  if (!p)
-    return "code";
-  if (MUTATION2.test(p))
-    return "code";
-  if (/\b(summari[sz]e|tl;?dr|recap|condense|digest|gist)\b/.test(p))
-    return "summarize";
-  if (/\bclassif|\bcategori[sz]|\blabel this\b|\bsentiment\b/.test(p))
-    return "classify";
-  if (/^(find|search|locate|grep)\b|\bwhere is\b|\bwhich file\b/.test(p))
-    return "search";
-  return "code";
-}
-function qualityOf2(m2) {
-  const pr = profileFor(m2.id);
-  if (!pr)
-    return 0.5;
-  if (pr.quality.sweBenchVerified != null)
-    return pr.quality.sweBenchVerified;
-  if (pr.quality.intelligenceIndex != null)
-    return pr.quality.intelligenceIndex / 100;
-  return 0.5;
-}
-function costOf2(m2) {
-  const pr = profileFor(m2.id);
-  if (!pr)
-    return Number.POSITIVE_INFINITY;
-  return pr.cost.inUSDPerMtok + 0.2 * pr.cost.outUSDPerMtok;
-}
-function tpsOf2(m2) {
-  return profileFor(m2.id)?.latency?.tps ?? 0;
-}
-
-class RoutingSelector2 {
-  fallbackId;
-  constructor(fallbackId) {
-    this.fallbackId = fallbackId;
-  }
-  select(task) {
-    const kind = task.kind ?? classify2(task.prompt);
-    const bar = BAR2[kind];
-    const available = MODELS.filter((m2) => providerAvailable(m2.provider) && profileFor(m2.id));
-    if (available.length === 0) {
-      const m2 = pickDefaultModel(this.fallbackId);
-      if (!m2) {
-        throw new Error("No model available. Set a key: ANTHROPIC_API_KEY / OPENAI_API_KEY / GOOGLE_GENERATIVE_AI_API_KEY / DEEPSEEK_API_KEY");
-      }
-      return { model: m2, reason: "only model with a key" };
-    }
-    const need = (task.estTokens ?? 0) * 1.2;
-    const fits = need > 0 ? available.filter((m2) => m2.contextWindow >= need) : available;
-    const pool = fits.length ? fits : available;
-    const clears = pool.filter((m2) => qualityOf2(m2) >= bar);
-    const candidates = clears.length ? clears : pool;
-    const pref = preferenceFor(kind);
-    const preferredPool = pref?.modelId ? pool.find((m2) => m2.id === pref.modelId) : pref?.provider ? pool.find((m2) => m2.provider === pref.provider) : undefined;
-    const preferred = pref?.modelId ? candidates.find((m2) => m2.id === pref.modelId) : pref?.provider ? candidates.find((m2) => m2.provider === pref.provider) : undefined;
-    if (preferred && qualityOf2(preferred) >= bar) {
-      return { model: preferred, reason: `${kind} · remembered preference` };
-    }
-    candidates.sort((a, b) => costOf2(a) - costOf2(b) || tpsOf2(b) - tpsOf2(a) || qualityOf2(b) - qualityOf2(a));
-    const model = candidates[0];
-    const skipped = preferredPool && qualityOf2(preferredPool) < bar ? ` · ${preferredPool.label} skipped below quality bar` : "";
-    const reason = `${kind} · $${costOf2(model).toFixed(2)}/Mtok${skipped}`;
-    return { model, reason };
-  }
-}
-
-// src/config.ts
-var config3 = {
-  defaultModelId: process.env.GEARBOX_MODEL ?? "claude-sonnet-4-6",
-  maxSteps: Number(process.env.GEARBOX_MAX_STEPS ?? 24)
-};
-function anyProviderAvailable() {
-  return MODELS.some((m2) => providerAvailable(m2.provider));
-}
-
-// src/providers.ts
-init_store();
-init_catalog();
-var NATIVE2 = new Set(["anthropic", "openai", "google", "deepseek"]);
-var CURATED2 = [
-  { id: "claude-opus-4-8", provider: "anthropic", sdkId: "claude-opus-4-8", label: "opus-4.8", contextWindow: 1e6, cost: { inUSDPerMtok: 5, outUSDPerMtok: 25 }, reasoning: true, efforts: ["low", "medium", "high", "xhigh", "max"] },
-  { id: "claude-sonnet-4-6", provider: "anthropic", sdkId: "claude-sonnet-4-6", label: "sonnet-4.6", contextWindow: 1e6, cost: { inUSDPerMtok: 3, outUSDPerMtok: 15 }, reasoning: true, efforts: ["low", "medium", "high", "xhigh", "max"] },
-  { id: "claude-haiku-4-5", provider: "anthropic", sdkId: "claude-haiku-4-5", label: "haiku-4.5", contextWindow: 200000, cost: { inUSDPerMtok: 1, outUSDPerMtok: 5 } },
-  { id: "gpt-5.5", provider: "openai", sdkId: "gpt-5.5", label: "gpt-5.5", contextWindow: 400000, cost: { inUSDPerMtok: 2.5, outUSDPerMtok: 10 }, reasoning: true, efforts: ["none", "minimal", "low", "medium", "high", "xhigh"] },
-  { id: "gpt-5.5-pro", provider: "openai", sdkId: "gpt-5.5-pro", label: "gpt-5.5-pro", contextWindow: 400000, cost: { inUSDPerMtok: 15, outUSDPerMtok: 120 }, reasoning: true, efforts: ["none", "minimal", "low", "medium", "high", "xhigh"] },
-  { id: "gemini-3.1-pro-preview", provider: "google", sdkId: "gemini-3.1-pro-preview", label: "gemini-3.1-pro", contextWindow: 1e6, cost: { inUSDPerMtok: 2, outUSDPerMtok: 12 }, reasoning: true, efforts: ["minimal", "low", "medium", "high"] },
-  { id: "gemini-3.5-flash", provider: "google", sdkId: "gemini-3.5-flash", label: "gemini-3.5-flash", contextWindow: 1e6, cost: { inUSDPerMtok: 0.3, outUSDPerMtok: 2.5 }, reasoning: true, efforts: ["minimal", "low", "medium", "high"] },
-  { id: "deepseek-v4-pro", provider: "deepseek", sdkId: "deepseek-v4-pro", label: "deepseek-v4-pro", contextWindow: 128000, cost: { inUSDPerMtok: 0.4, outUSDPerMtok: 1.75 }, reasoning: true },
-  { id: "deepseek-v4-flash", provider: "deepseek", sdkId: "deepseek-v4-flash", label: "deepseek-v4-flash", contextWindow: 128000, cost: { inUSDPerMtok: 0.27, outUSDPerMtok: 1.1 } }
-];
-function generatedModels2() {
-  const out = [];
-  for (const p of CATALOG) {
-    if (p.group === "cli")
-      continue;
-    for (const m2 of p.defaultModels ?? []) {
-      if (CURATED2.some((c) => c.provider === p.id && c.sdkId === m2))
-        continue;
-      out.push({ id: `${p.id}/${m2}`, provider: p.id, sdkId: m2, label: m2.length > 24 ? m2.slice(0, 24) : m2, contextWindow: 128000 });
-    }
-  }
-  return out;
-}
-var MODELS2 = [...CURATED2, ...generatedModels2()];
-
-// src/ui/image.ts
-var SIZES2 = ["big", "mini", "micro"];
-var VARIANTS2 = Object.keys(GHOST_PNG);
-var DIACRITICS2 = [
-  773,
-  781,
-  782,
-  784,
-  786,
-  829,
-  830,
-  831,
-  838,
-  842,
-  843,
-  844,
-  848,
-  849,
-  850,
-  855,
-  859,
-  867,
-  868,
-  869,
-  870,
-  871,
-  872,
-  873,
-  874,
-  875,
-  876,
-  877,
-  878,
-  879,
-  1155,
-  1156,
-  1157,
-  1158,
-  1159,
-  1426,
-  1427,
-  1428,
-  1429,
-  1431,
-  1432,
-  1433,
-  1436,
-  1437,
-  1438,
-  1439,
-  1440,
-  1441,
-  1448,
-  1449
-].map((c) => String.fromCodePoint(c));
-function detectImageMode2() {
-  const force = process.env.GEARBOX_GHOST;
-  if (force === "kitty" || force === "iterm")
-    return force;
-  return "blocks";
-}
-var resolved2 = null;
-function setImageMode(m2) {
-  resolved2 = m2;
-}
-function imageId2(variant, size2) {
-  return VARIANTS2.indexOf(variant) * SIZES2.length + SIZES2.indexOf(size2) + 1;
-}
-function transmitOne(id, b64, cols, rows) {
-  const ESC2 = "\x1B";
-  const CHUNK = 4096;
-  if (b64.length <= CHUNK) {
-    return `${ESC2}_Ga=T,U=1,i=${id},c=${cols},r=${rows},f=100,q=2;${b64}${ESC2}\\`;
-  }
-  let out = "";
-  for (let i2 = 0;i2 < b64.length; i2 += CHUNK) {
-    const chunk2 = b64.slice(i2, i2 + CHUNK);
-    const more = i2 + CHUNK < b64.length ? 1 : 0;
-    out += i2 === 0 ? `${ESC2}_Ga=T,U=1,i=${id},c=${cols},r=${rows},f=100,q=2,m=${more};${chunk2}${ESC2}\\` : `${ESC2}_Gm=${more};${chunk2}${ESC2}\\`;
-  }
-  return out;
-}
-function transmitAll() {
-  let out = "";
-  for (const variant of VARIANTS2) {
-    for (const size2 of SIZES2) {
-      const data = GHOSTS[variant][size2];
-      out += transmitOne(imageId2(variant, size2), GHOST_PNG[variant], data[0]?.length ?? 0, data.length);
-    }
-  }
-  return out;
-}
-
-// src/ui/prefs.ts
-import { homedir as homedir9 } from "node:os";
-import { join as join11, dirname as dirname3 } from "node:path";
-import { readFileSync as readFileSync13, writeFileSync as writeFileSync7, mkdirSync as mkdirSync8 } from "node:fs";
-function file5() {
-  const dir2 = process.env.GEARBOX_HOME || join11(homedir9(), ".gearbox");
-  return join11(dir2, "prefs.json");
-}
-function loadPrefs2() {
-  try {
-    return JSON.parse(readFileSync13(file5(), "utf8"));
-  } catch {
-    return {};
-  }
-}
-
-// src/permission.ts
-var granted2 = new Set;
-var yolo2 = false;
-function setYolo2(on) {
-  yolo2 = on;
-}
-
-// src/session.ts
-import { mkdirSync as mkdirSync9, readFileSync as readFileSync14, writeFileSync as writeFileSync8, readdirSync as readdirSync4 } from "node:fs";
-import { join as join12 } from "node:path";
-import { homedir as homedir10 } from "node:os";
-var root2 = () => join12(process.env.GEARBOX_HOME || join12(homedir10(), ".gearbox"), "sessions");
-var slug3 = () => process.cwd().replace(/[^a-zA-Z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "root";
-var dir2 = () => join12(root2(), slug3());
-function listSessions2() {
-  try {
-    return readdirSync4(dir2()).filter((f3) => f3.endsWith(".json") && f3 !== "history.json").map((f3) => {
-      try {
-        return JSON.parse(readFileSync14(join12(dir2(), f3), "utf8"));
-      } catch {
-        return null;
-      }
-    }).filter((s2) => s2 !== null && Array.isArray(s2.items)).sort((a, b) => b.updatedAt - a.updatedAt);
-  } catch {
-    return [];
-  }
-}
-function latestSession() {
-  return listSessions2()[0] ?? null;
-}
-
 // src/cli.tsx
-var jsx_dev_runtime13 = __toESM(require_jsx_dev_runtime2(), 1);
+var jsx_dev_runtime13 = __toESM(require_jsx_dev_runtime(), 1);
+process.env.LANG = process.env.LANG || "en_US.UTF-8";
+process.env.LC_ALL = process.env.LC_ALL || "en_US.UTF-8";
 var VERSION16 = "0.1.0";
 var args = process.argv.slice(2);
 if (args[0] === "upgrade" || args[0] === "update") {
-  const root3 = resolve11(import.meta.dir, "..");
-  if (!existsSync10(resolve11(root3, ".git"))) {
+  const root2 = resolve11(import.meta.dir, "..");
+  if (!existsSync8(resolve11(root2, ".git"))) {
     console.log("This build can't self-update (not a git checkout).");
     console.log("Update by pulling the repo and reinstalling:  git pull && bun install");
     process.exit(0);
   }
   try {
-    console.log("\u2192 Pulling latest\u2026");
-    console.log(execFileSync4("git", ["-C", root3, "pull", "--ff-only"], { encoding: "utf8" }).trim());
-    console.log("\u2192 Installing dependencies\u2026");
-    execFileSync4("bun", ["install"], { cwd: root3, stdio: "inherit" });
-    console.log("\u2713 Gearbox is up to date. Restart any running session to use the new version.");
+    console.log("→ Pulling latest…");
+    console.log(execFileSync4("git", ["-C", root2, "pull", "--ff-only"], { encoding: "utf8" }).trim());
+    console.log("→ Installing dependencies…");
+    execFileSync4("bun", ["install"], { cwd: root2, stdio: "inherit" });
+    console.log("✓ Gearbox is up to date. Restart any running session to use the new version.");
   } catch (e2) {
     console.log("Upgrade failed: " + (e2?.message ?? String(e2)));
-    console.log(`Try manually:  cd ${root3} && git pull && bun install`);
+    console.log(`Try manually:  cd ${root2} && git pull && bun install`);
   }
   process.exit(0);
 }
 if (args.includes("--help") || args.includes("-h")) {
-  console.log(`gearbox ${VERSION16} \u2014 multi-provider coding agent for the terminal
+  console.log(`gearbox ${VERSION16} — multi-provider coding agent for the terminal
 
 Usage:
   gearbox                 start in the current directory (it becomes the workspace)
@@ -136798,10 +136138,12 @@ Options:
   -v, --version       print version
   -h, --help          this help
 
-Set at least one provider key first (each user uses their own):
-  ANTHROPIC_API_KEY \xB7 OPENAI_API_KEY \xB7 GOOGLE_GENERATIVE_AI_API_KEY \xB7 DEEPSEEK_API_KEY
+Set up at least one provider first:
+  gearbox auth add <api-key>
+  gearbox auth add <provider> <api-key>
+  gearbox auth import
 
-Models: ${MODELS2.map((m2) => m2.label).join(", ")}
+Models: ${MODELS.map((m2) => m2.label).join(", ")}
 In-app: / for commands, @ for files, !cmd for shell, shift+tab for plan mode.`);
   process.exit(0);
 }
@@ -136810,43 +136152,43 @@ if (args.includes("--version") || args.includes("-v")) {
   process.exit(0);
 }
 if (args[0] === "auth") {
-  const { listAccounts: listAccounts3, loadAccounts: loadAccounts4, removeAccount: removeAccount3 } = await Promise.resolve().then(() => (init_store2(), exports_store));
-  const { importableEnvCreds: importableEnvCreds3, importEnvCred: importEnvCred3, importableCloudCreds: importableCloudCreds3, importCloudCred: importCloudCred3 } = await Promise.resolve().then(() => (init_detect(), exports_detect));
-  const { addApiKeyAccount: addApiKeyAccount3, addByPastedKey: addByPastedKey3, testAccount: testAccount3, addableProviders: addableProviders2 } = await Promise.resolve().then(() => (init_onboard(), exports_onboard));
-  const { detectProviderByKey: detectProviderByKey3 } = await Promise.resolve().then(() => (init_catalog2(), exports_catalog));
+  const { listAccounts: listAccounts2, loadAccounts: loadAccounts3, removeAccount: removeAccount2 } = await Promise.resolve().then(() => (init_store(), exports_store));
+  const { importableEnvCreds: importableEnvCreds2, importEnvCred: importEnvCred2, importableCloudCreds: importableCloudCreds2, importCloudCred: importCloudCred2 } = await Promise.resolve().then(() => (init_detect(), exports_detect));
+  const { addApiKeyAccount: addApiKeyAccount2, addByPastedKey: addByPastedKey2, testAccount: testAccount2, addableProviders: addableProviders2 } = await Promise.resolve().then(() => (init_onboard(), exports_onboard));
+  const { detectProviderByKey: detectProviderByKey2 } = await Promise.resolve().then(() => (init_catalog(), exports_catalog));
   const sub = args[1];
   const rest2 = args.slice(2);
   if (sub === "list" || !sub) {
-    const f3 = loadAccounts4();
+    const f3 = loadAccounts3();
     if (!f3.accounts.length)
       console.log("No accounts yet. Add one:  gearbox auth add <key>   (or)   gearbox auth import");
     for (const a of f3.accounts)
-      console.log(`${f3.defaults[a.provider] === a.id ? "*" : " "} ${a.id.padEnd(22)} ${a.label}${a.exec === "cli" ? " \xB7 cli" : ""}`);
-    const imp = importableEnvCreds3();
+      console.log(`${f3.defaults[a.provider] === a.id ? "*" : " "} ${a.id.padEnd(22)} ${a.label}${a.exec === "cli" ? " · cli" : ""}`);
+    const imp = importableEnvCreds2();
     if (imp.length)
       console.log(`
 Importable from your env (gearbox auth import): ${imp.map((c) => c.envVar).join(", ")}`);
   } else if (sub === "import") {
-    const keys2 = importableEnvCreds3();
-    const cloud = importableCloudCreds3();
+    const keys2 = importableEnvCreds2();
+    const cloud = importableCloudCreds2();
     for (const c of keys2)
-      await importEnvCred3(c);
+      await importEnvCred2(c);
     for (const c of cloud)
-      await importCloudCred3(c);
+      await importCloudCred2(c);
     const names = [...keys2.map((c) => c.provider), ...cloud.map((c) => c.provider)];
     console.log(names.length ? `Imported ${names.length}: ${names.join(", ")}` : "Nothing to import.");
   } else if (sub === "add") {
-    const res = rest2[0] && !rest2[1] && detectProviderByKey3(rest2[0]) ? await addByPastedKey3(rest2[0]) : rest2[0] && rest2[1] ? await addApiKeyAccount3(rest2[0], rest2[1]) : { ok: false, message: "usage: gearbox auth add <key>   |   gearbox auth add <provider> <key>" };
+    const res = rest2[0] && !rest2[1] && detectProviderByKey2(rest2[0]) ? await addByPastedKey2(rest2[0]) : rest2[0] && rest2[1] ? await addApiKeyAccount2(rest2[0], rest2[1]) : { ok: false, message: "usage: gearbox auth add <key>   |   gearbox auth add <provider> <key>" };
     console.log(res.message);
     if (res.ok && res.account) {
-      const t2 = await testAccount3(res.account);
-      console.log(t2.ok ? "  test: \u2713 " + t2.message : "  test: \u2717 " + t2.message + " (stored anyway)");
+      const t2 = await testAccount2(res.account);
+      console.log(t2.ok ? "  test: ✓ " + t2.message : "  test: ✗ " + t2.message + " (stored anyway)");
     }
   } else if (sub === "test" && rest2[0]) {
-    const a = listAccounts3().find((x2) => x2.id === rest2[0]);
-    console.log(a ? `${rest2[0]}: ${(await testAccount3(a)).message}` : `no account ${rest2[0]}`);
+    const a = listAccounts2().find((x2) => x2.id === rest2[0]);
+    console.log(a ? `${rest2[0]}: ${(await testAccount2(a)).message}` : `no account ${rest2[0]}`);
   } else if (sub === "rm" && rest2[0]) {
-    await removeAccount3(rest2[0]);
+    await removeAccount2(rest2[0]);
     console.log(`removed ${rest2[0]}`);
   } else if (sub === "providers") {
     for (const p of addableProviders2())
@@ -136858,17 +136200,16 @@ Importable from your env (gearbox auth import): ${imp.map((c) => c.envVar).join(
 }
 var mi = args.indexOf("--model");
 var preferred = mi >= 0 ? args[mi + 1] : undefined;
-var demo = !anyProviderAvailable();
-var pinned = preferred ?? loadPrefs2().pinnedModel;
-var selector = pinned ? new FixedSelector2(pinned) : new RoutingSelector2;
+var pinned = preferred ?? loadPrefs().pinnedModel;
+var selector = pinned ? new FixedSelector(pinned) : new RoutingSelector;
 if (args.includes("--yolo"))
-  setYolo2(true);
+  setYolo(true);
 var resumeId = args.includes("--continue") || args.includes("-c") ? latestSession()?.id ?? undefined : undefined;
-var imageMode = detectImageMode2();
+var imageMode = detectImageMode();
 setImageMode(imageMode);
 if (process.stdout.isTTY && imageMode === "kitty")
   process.stdout.write(transmitAll());
-var uiPrefs = loadPrefs2();
+var uiPrefs = loadPrefs();
 var explicitInline = args.includes("--inline") || process.env.GEARBOX_INLINE === "1" || process.env.GEARBOX_FULLSCREEN === "0";
 var explicitFullscreen = args.includes("--fullscreen") || process.env.GEARBOX_FULLSCREEN === "1";
 var wantsInline = explicitInline || !explicitFullscreen && uiPrefs.fullscreen === false;
@@ -136892,7 +136233,6 @@ if (mouse)
   process.stdout.write("\x1B[?1000h\x1B[?1002h\x1B[?1006h");
 var app = render_default(/* @__PURE__ */ jsx_dev_runtime13.jsxDEV(App2, {
   selector,
-  demo,
   fullscreen,
   resumeId
 }, undefined, false, undefined, this), { exitOnCtrlC: false });