mercury-agent 0.5.12 → 0.5.13

package/README.md

@@ -154,8 +154,26 @@ Each space is a user-defined memory boundary with its own workspace and pi sessi
 | **Permissions** | Role-based access control | [docs/permissions.md](docs/permissions.md) |
 | **Media** | Images, documents, voice notes | [docs/media/overview.md](docs/media/overview.md) |
 | **KB Distillation** | Extract lasting knowledge from chats | [docs/kb-distillation.md](docs/kb-distillation.md) |
+| **Dashboard** | Web UI for managing spaces, tasks, permissions, extensions | [docs/dashboard.md](docs/dashboard.md) |
 | **Extensions** | TypeScript plugins for CLIs, skills, jobs, hooks | [docs/extensions.md](docs/extensions.md) |
-| **DM Auto-Space** | Auto-create isolated spaces per customer DM | [docs/rate-limiting.md](docs/rate-limiting.md) |
+| **DM Auto-Space** | Auto-create isolated spaces per user DM | [docs/rate-limiting.md](docs/rate-limiting.md) |
+
+### Default capabilities vs. extensions
+
+Out of the box, Mercury is a capable chat assistant with conversation context, scheduled tasks, role-based permissions, multi-space management, message recall, and sub-agent delegation. It does **not** include web search, web browsing, a knowledge vault, voice, or third-party service integrations — those are added via extensions.
+
+Install extensions from the dashboard (**Features** page), the CLI, or during setup with a profile:
+
+```bash
+# From the CLI
+mercury add web-browser         # Web browsing & search (uses Brave Search, no API key needed)
+mercury add napkin              # Obsidian-style knowledge vault
+
+# Or pick a profile that bundles what you need
+mercury setup --profile research
+```
+
+Run `mercury extensions list` or visit the dashboard's Features page to see what's available.
 
 ---
 
@@ -404,7 +422,7 @@ Supported OAuth providers: Anthropic, GitHub Copilot, Google Gemini CLI, Antigra
 
 ### DM Auto-Space
 
-Auto-create isolated spaces for each customer who DMs your bot. Each customer gets their own space with persistent context, configurable permissions, and rate limits.
+Auto-create isolated spaces for each user who DMs your bot. Each user gets their own space with persistent context, configurable permissions, and rate limits.
 
 ```yaml
 # mercury.yaml
@@ -413,7 +431,7 @@ dm_auto_space:
   admin_ids:                                    # platform IDs — auto-link to "main" space
     - "24417056866472"                          # WhatsApp LID, Telegram user ID, etc.
   default_system_prompt: "You are a helpful assistant."
-  default_member_permissions: "prompt,prefs.get"  # restrict customers to chat only
+  default_member_permissions: "prompt,prefs.get"  # restrict users to chat only
 
 runtime:
   rate_limit_daily_member: 20                   # global daily cap for members (0 = unlimited)
@@ -449,6 +467,7 @@ mrctl config set trigger_patterns "@Bot,Bot"
 - [Container lifecycle](docs/container-lifecycle.md)
 - [Graceful shutdown](docs/graceful-shutdown.md)
 - [Rate limiting](docs/rate-limiting.md)
+- [Dashboard](docs/dashboard.md)
 - [Extensions](docs/extensions.md)
 
 ---

package/docs/authoring-profiles.md

@@ -13,8 +13,8 @@ only on this contract.
 ## 1. Profile manifest — `mercury-profile.yaml`
 
 ```yaml
-name: barber-appointments            # lowercase-kebab; required
-description: Appointment booking for a barber shop
+name: room-booking                   # lowercase-kebab; required
+description: Meeting room booking assistant
 version: 0.1.0
 
 agents_md: ./AGENTS.md               # optional; copied to the global AGENTS.md
@@ -26,8 +26,8 @@ capabilities:
 
 # Extensions this profile ships (copied into .mercury/extensions).
 extensions:
-  - name: barber
-    source: ./extensions/barber
+  - name: rooms
+    source: ./extensions/rooms
 
 # EXHAUSTIVE member permission set while active. When present it REPLACES the
 # default member permissions — nothing is merged in — so raw capabilities stay
@@ -35,18 +35,18 @@ extensions:
 member_permissions:
   - prompt
   - prefs.get
-  - barber                           # the profile's own capability, NOT gws
+  - rooms                           # the profile's own capability, NOT gws
 
 # Optional env the profile needs (host-side credentials for capabilities).
 env:
-  - key: MERCURY_BARBER_BUSINESS_HOURS
-    description: "Business hours"
+  - key: MERCURY_ROOMS_OFFICE_HOURS
+    description: "Office hours"
     default: "09:00-18:00"
 
 # Project-wide agent persona, injected into every container's system prompt.
 system_prompt: |
-  You are a barber shop assistant. Help each customer book, view, and cancel
-  ONLY their own appointments. Never reveal other customers' schedules.
+  You are a meeting room booking assistant. Help each user book, view, and
+  cancel ONLY their own reservations. Never reveal other users' bookings.
 
 defaults:
   trigger_patterns: always
@@ -59,7 +59,7 @@ capabilities, copies extensions/AGENTS.md, and persists activation to
 ## 2. The capability broker (where the business logic runs)
 
 A profile's privileged work runs **on the host**, so credentials never enter the
-customer-controlled agent container. The profile's extension registers a
+user-controlled agent container. The profile's extension registers a
 handler; the agent invokes it through a thin CLI.
 
 ### Register a handler (in the extension's `index.ts`)
@@ -72,18 +72,18 @@ const setup: ExtensionSetupFn = (mercury) => {
   mercury.permission({ defaultRoles: [] });
 
   // Host-side credentials for the wrapped capability (never sent to the container).
-  mercury.env({ from: "MERCURY_BARBER_GOOGLE_CREDENTIALS" });
+  mercury.env({ from: "MERCURY_ROOMS_GOOGLE_CREDENTIALS" });
 
-  mercury.capability("barber", async (req, ctx) => {
+  mercury.capability("rooms", async (req, ctx) => {
     // req.callerId is the TOKEN-DERIVED, unspoofable caller — safe for ownership.
     switch (req.action) {
       case "availability":
-        return { data: await listOpenSlots(req.body, ctx) };
+        return { data: await listOpenRooms(req.body, ctx) };
       case "book":
-        return { data: await book(req.callerId, req.body, ctx) };
+        return { data: await bookRoom(req.callerId, req.body, ctx) };
       case "cancel":
         return { data: await cancelOwn(req.callerId, req.body, ctx) };
-      case "my-appointments":
+      case "my-bookings":
         return { data: await listOwn(req.callerId, ctx) };
       default:
         return { status: 400, data: { error: `unknown action: ${req.action}` } };
@@ -125,21 +125,21 @@ interface CapabilityResult {
 Inside the container the agent runs:
 
 ```
-mrctl capability barber book '{"slot":"2026-07-02T15:00"}'
+mrctl capability rooms book '{"room":"A3","slot":"2026-07-02T15:00"}'
 ```
 
-→ `POST /api/capability/barber/book`. Document these commands for the agent in
+→ `POST /api/capability/rooms/book`. Document these commands for the agent in
 the extension's `SKILL.md` or the profile's `AGENTS.md`.
 
 ## 3. Permission & security model (non-negotiable)
 
 - **`member_permissions` is exhaustive.** List every permission a member may
-  hold, including the capability name (e.g. `barber`). Anything not listed —
+  hold, including the capability name (e.g. `rooms`). Anything not listed —
   including raw capabilities like `gws` — is unavailable to members.
 - **Authorization = permission named after the capability.** The broker route
   requires the caller to hold the `<name>` permission; the same grant gates both
-  the `mrctl capability <name> …` CLI and the route. Keep capability name ==
-  permission name == the entry in `member_permissions`.
+  the `mrctl capability <name> …` CLI and the route. Keep capability name =
+  permission name = the entry in `member_permissions`.
 - **Credentials stay on the host.** Put capability credentials in host env
   (`mercury.env`) / `mercury.store` and use them only inside the handler. Never
   expose a raw capability CLI (e.g. `gws`) to members — its secret would be
@@ -147,17 +147,17 @@ the extension's `SKILL.md` or the profile's `AGENTS.md`.
 - **Enforce ownership with `req.callerId`.** It is token-derived and cannot be
   spoofed by the container. Never trust an id passed in `req.body`.
 - **`callerId === "system"`** for scheduled/system runs — handle it explicitly
-  (e.g. skip per-customer ownership).
+  (e.g. skip per-user ownership).
 
 ## 4. Suggested profile repo layout
 
 ```
 <profile-repo>/
-  barber/                      # one folder per profile
+  room-booking/                  # one folder per profile
     mercury-profile.yaml
     AGENTS.md
     extensions/
-      barber/
+      rooms/
         index.ts               # registers permission + capability
         package.json
 ```
@@ -168,7 +168,7 @@ Depend on this repo (`mercury-agent`) for the types
 
 ## 5. Local test loop
 
-1. `mercury setup --profile ./barber`
+1. `mercury setup --profile ./room-booking`
 2. `mercury service install` (builds the derived image with the extension CLI)
 3. DM the bot as a non-admin number; confirm you can `book`/`cancel` only your
-   own appointments and cannot reach `gws`/Gmail.
+   own reservations and cannot reach `gws`/Gmail.

package/docs/dashboard.md

@@ -0,0 +1,81 @@
+# Dashboard
+
+Mercury ships with a web dashboard at `http://localhost:8787/dashboard` (or whichever port `MERCURY_PORT` is set to). It gives you a real-time view of your instance and lets you manage spaces, conversations, tasks, permissions, extensions, and API keys — all without touching the CLI.
+
+## Access & Authentication
+
+When `MERCURY_API_SECRET` is set (auto-generated by `mercury setup`), the dashboard requires authentication. Open the login URL printed at startup or navigate to:
+
+```
+http://localhost:8787/dashboard/login?token=<your-api-secret>
+```
+
+This sets a session cookie so subsequent visits go straight through. If no secret is configured, the dashboard is open.
+
+## Pages
+
+### Overview
+
+System-at-a-glance: adapter connection status (WhatsApp, Slack, Discord, Telegram), active container runs, recent activity across spaces, upcoming scheduled tasks, space count, queue depth, uptime, and the configured model chain. Extension-provided widgets also appear here.
+
+### Spaces
+
+Lists all memory spaces with platform badges, conversation count, message count, and last-active time. Click a space to open its detail page.
+
+**Space detail** is the most feature-rich page. From here you can:
+
+| Section | What you can do |
+|---------|-----------------|
+| **Conversations** | View linked conversations, unlink them |
+| **Roles** | Promote members to admin, demote admins |
+| **Mutes** | Mute/unmute users with optional duration and reason |
+| **Triggers & Ambient** | Set `trigger.match` (mention/prefix/always), patterns, case sensitivity, media-in-groups, and ambient mode |
+| **Context** | Choose context mode (clear/context), window size, reply-chain depth |
+| **Rate limits** | Set burst-per-minute and daily caps for members and admins |
+| **Voice** | Configure per-space STT (transcription preset or custom model) and TTS (on-demand vs auto) |
+| **Preferences** | Add/edit/delete arbitrary key-value preferences |
+| **Recent messages** | View the last 50 messages with role coloring and token usage |
+
+### Conversations
+
+All discovered platform conversations across every adapter. Shows platform, title, kind (group/DM), linked space, and last seen. You can link unlinked conversations to a space or unlink existing ones — the same operation as `mercury link` from the CLI.
+
+### Tasks
+
+All scheduled tasks (cron and one-shot). For each task you can see the cron expression, timezone, prompt, next run time, and whether it runs silently or posts to chat. Actions: **run now**, **pause**, **resume**, **delete**. Filterable by space.
+
+### Permissions
+
+Cross-space view of every role assignment. Shows platform, space, user (with display name), and role. You can promote or demote users directly.
+
+### Logs
+
+Aggregated recent messages across all spaces, displayed as a log stream with timestamps, level, source platform, and message preview. Filterable by log level.
+
+### Usage
+
+Token usage statistics: aggregate totals (input tokens, output tokens, estimated cost, run count) and a per-space breakdown table.
+
+### API Keys
+
+Manage API keys for supported model providers (Anthropic, OpenAI, Google Gemini, Groq, Mistral, OpenRouter). Shows current status (SET / NOT SET). Saving or clearing a key writes to `.env` and triggers a restart.
+
+### Features
+
+Extension management through the UI. Shows installed extensions with their capabilities (CLI / skill / widget) and a remove button. Lists available catalog extensions with a one-click install button. Installing or removing an extension triggers a container image rebuild and restart.
+
+## Real-time Updates
+
+The dashboard uses Server-Sent Events (SSE) for live updates:
+
+- **Health banner** — shows healthy / degraded / critical status with uptime
+- **Active runs badge** — pulses when agent containers are running
+- **Connection indicator** — shows live / reconnecting / disconnected state
+
+## Keyboard Shortcuts
+
+| Key | Action |
+|-----|--------|
+| `1`–`8` | Switch between tabs |
+| `/` | Focus the search input |
+| `?` | Show shortcut help |

package/docs/web-search.md

@@ -1,33 +1,34 @@
-# Web Search
+# Web Search & Browsing
 
-Web search is **extension-based** in Mercury.
+Web search is **extension-based** in Mercury. The base agent does not include a browser — install the `web-browser` extension to add search and browsing capabilities.
 
-Mercury core does not ship a built-in browser/search CLI. Instead, install a web automation extension (for example, `pinchtab`) and let the agent use that tool directly.
+## Quick Start
 
----
-
-## Recommended Setup
+```bash
+mercury add web-browser
+```
 
-Use the real example extension at:
+Or install from the dashboard's **Features** page (one click).
 
-- `examples/extensions/pinchtab/`
+No API key is required. The extension uses [pinchtab](https://www.npmjs.com/package/pinchtab) to control a local headless Chromium and navigates to the public [Brave Search](https://search.brave.com) website — the same way a human would.
 
-It demonstrates:
+## What It Provides
 
-- installing browser tooling in the derived image
-- `before_container` hook for runtime env injection
-- system-prompt guidance for consistent search behavior
+The `web-browser` extension installs pinchtab and Playwright/Chromium into the agent container. The agent can:
 
----
+- **Search the web** — navigate to Brave Search, read results
+- **Browse any URL** — open pages, follow links
+- **Extract text** — pull readable content from any page
+- **Take snapshots** — capture the accessibility tree for structured interaction
+- **Fill forms** — click elements, type into fields
+- **Authenticated sessions** — log into sites using injected cookies/localStorage (configured via `MERCURY_BROWSER_SESSIONS`)
 
 ## Typical Flow
 
-1. Start browser automation tool (`pinchtab`)
-2. Navigate to search engine URL (e.g. Brave Search)
-3. Extract text/snapshot content
-4. Summarize and cite key findings
-
-Example command pattern used by agents (see `examples/extensions/pinchtab/` for `pinchtab_ensure` — wait until the bridge listens on `:9867` before calling the CLI; otherwise you get `connection refused`):
+1. Start the browser daemon (`pinchtab_ensure`)
+2. Navigate to a search URL or any page
+3. Extract text or snapshot content
+4. Summarize and cite findings
 
 ```bash
 pinchtab_ensure || exit 1
@@ -36,27 +37,19 @@ sleep 3
 pinchtab text
 ```
 
----
-
 ## Why Extension-Based
 
-- keeps Mercury core lean
-- lets each deployment pick its own browser/search stack
-- allows per-space RBAC for web tooling (`pinchtab` permission)
-- avoids locking users into one provider/tool
-
----
+- Keeps Mercury core lean
+- Lets each deployment pick its own browser/search stack
+- Allows per-space RBAC for web tooling (`pinchtab` permission)
+- Avoids locking users into one provider/tool
 
 ## Security & RBAC
 
-Extension CLIs are called directly in bash, with RBAC enforced by Mercury's in-container permission guard.
-
-If a caller lacks permission for a web extension CLI, execution is blocked.
-
----
+Extension CLIs are called directly in bash, with RBAC enforced by Mercury's in-container permission guard. If a caller lacks the `pinchtab` permission, execution is blocked.
 
 ## Related Docs
 
-- [extensions.md](./extensions.md)
-- [pipeline.md](./pipeline.md)
-- [container-lifecycle.md](./container-lifecycle.md)
+- [Extensions](./extensions.md)
+- [Pipeline](./pipeline.md)
+- [Container lifecycle](./container-lifecycle.md)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mercury-agent",
-  "version": "0.5.12",
+  "version": "0.5.13",
   "description": "Personal AI assistant for chat platforms (WhatsApp, Slack, Discord, Telegram)",
   "license": "MIT",
   "author": "Avishai Tsabari",

package/resources/templates/mercury.example.yaml

@@ -80,8 +80,8 @@
 #   enabled: false
 #   admin_ids:                              # auto-link to "main" space
 #     - "972501234567"
-#   default_system_prompt: ""                   # seeded into auto-created customer spaces
-#   default_member_permissions: "prompt,prefs.get"  # restrict customers to chat only
+#   default_system_prompt: ""                   # seeded into auto-created user spaces
+#   default_member_permissions: "prompt,prefs.get"  # restrict users to chat only
 
 # ─── Applicative profile ────────────────────────────────────────────────────
 # A profile wraps raw capabilities with deterministic business logic and scopes
@@ -92,7 +92,7 @@
 # credentials never enter the agent container.
 #
 # Env-only override of the active profile name (informational):
-#   MERCURY_PROFILE=barber-appointments
+#   MERCURY_PROFILE=room-booking
 #
 # Host-only signing key for per-turn caller tokens (auto-generated if unset;
 # only set when the API and container-runner run in separate processes):

package/src/core/routes/capability.ts

@@ -41,7 +41,7 @@ capability.post("/:name/:action", async (c) => {
   });
 
   // Authorization reuses the permission whose name equals the capability, so a
-  // single grant (e.g. "barber" in member_permissions) gates both the CLI and
+  // single grant (e.g. "rooms" in member_permissions) gates both the CLI and
   // this route.
   const denied = checkPerm(c, name);
   if (denied) return denied;

package/src/core/routes/dashboard.ts

@@ -1,5 +1,6 @@
 import { existsSync } from "node:fs";
 import path from "node:path";
+import { getModels, type KnownProvider } from "@earendil-works/pi-ai";
 import { Hono } from "hono";
 import { html, raw } from "hono/html";
 import { streamSSE } from "hono/streaming";
@@ -115,42 +116,140 @@ export function createDashboardRoutes(ctx: DashboardContext) {
     label: string;
     envVar: string;
     placeholder: string;
+    defaultModel: string;
   }[] = [
     {
       id: "anthropic",
       label: "Anthropic",
       envVar: "MERCURY_ANTHROPIC_API_KEY",
       placeholder: "sk-ant-...",
+      defaultModel: "claude-sonnet-4-6",
     },
     {
       id: "openai",
       label: "OpenAI",
       envVar: "MERCURY_OPENAI_API_KEY",
       placeholder: "sk-...",
+      defaultModel: "gpt-4o",
     },
     {
       id: "google",
       label: "Google Gemini",
       envVar: "MERCURY_GEMINI_API_KEY",
       placeholder: "AIza...",
+      defaultModel: "gemini-2.5-flash",
+    },
+    {
+      id: "deepseek",
+      label: "DeepSeek",
+      envVar: "MERCURY_DEEPSEEK_API_KEY",
+      placeholder: "sk-...",
+      defaultModel: "deepseek-v4-flash",
     },
     {
       id: "groq",
       label: "Groq",
       envVar: "MERCURY_GROQ_API_KEY",
       placeholder: "gsk_...",
+      defaultModel: "llama-3.3-70b-versatile",
     },
     {
       id: "mistral",
       label: "Mistral",
       envVar: "MERCURY_MISTRAL_API_KEY",
       placeholder: "...",
+      defaultModel: "mistral-large-latest",
     },
     {
       id: "openrouter",
       label: "OpenRouter",
       envVar: "MERCURY_OPENROUTER_API_KEY",
       placeholder: "sk-or-...",
+      defaultModel: "meta-llama/llama-3.3-70b-instruct",
+    },
+    {
+      id: "xai",
+      label: "xAI (Grok)",
+      envVar: "MERCURY_XAI_API_KEY",
+      placeholder: "xai-...",
+      defaultModel: "grok-2-latest",
+    },
+    {
+      id: "cerebras",
+      label: "Cerebras",
+      envVar: "MERCURY_CEREBRAS_API_KEY",
+      placeholder: "csk-...",
+      defaultModel: "llama3.1-8b",
+    },
+    {
+      id: "google-vertex",
+      label: "Google Vertex AI",
+      envVar: "MERCURY_GOOGLE_CLOUD_API_KEY",
+      placeholder: "AIza...",
+      defaultModel: "gemini-2.0-flash",
+    },
+    {
+      id: "amazon-bedrock",
+      label: "Amazon Bedrock",
+      envVar: "MERCURY_AWS_BEARER_TOKEN_BEDROCK",
+      placeholder: "...",
+      defaultModel: "amazon.nova-lite-v1:0",
+    },
+    {
+      id: "huggingface",
+      label: "HuggingFace",
+      envVar: "MERCURY_HF_TOKEN",
+      placeholder: "hf_...",
+      defaultModel: "Qwen/Qwen3-235B-A22B-Thinking-2507",
+    },
+    {
+      id: "azure-openai-responses",
+      label: "Azure OpenAI",
+      envVar: "MERCURY_AZURE_OPENAI_API_KEY",
+      placeholder: "...",
+      defaultModel: "gpt-4o",
+    },
+    {
+      id: "vercel-ai-gateway",
+      label: "Vercel AI Gateway",
+      envVar: "MERCURY_AI_GATEWAY_API_KEY",
+      placeholder: "...",
+      defaultModel: "alibaba/qwen-3-235b",
+    },
+    {
+      id: "minimax",
+      label: "MiniMax",
+      envVar: "MERCURY_MINIMAX_API_KEY",
+      placeholder: "...",
+      defaultModel: "MiniMax-M2.7",
+    },
+    {
+      id: "minimax-cn",
+      label: "MiniMax (China)",
+      envVar: "MERCURY_MINIMAX_CN_API_KEY",
+      placeholder: "...",
+      defaultModel: "MiniMax-M2.7",
+    },
+    {
+      id: "zai",
+      label: "ZAI",
+      envVar: "MERCURY_ZAI_API_KEY",
+      placeholder: "...",
+      defaultModel: "glm-4.5",
+    },
+    {
+      id: "kimi-coding",
+      label: "Kimi (Moonshot)",
+      envVar: "MERCURY_KIMI_API_KEY",
+      placeholder: "...",
+      defaultModel: "k2p5",
+    },
+    {
+      id: "github-copilot",
+      label: "GitHub Copilot",
+      envVar: "MERCURY_GITHUB_COPILOT_OAUTH_TOKEN",
+      placeholder: "",
+      defaultModel: "claude-sonnet-4-6",
     },
   ];
 
@@ -1861,7 +1960,85 @@ export function createDashboardRoutes(ctx: DashboardContext) {
       `);
     }
 
-    const _envPath = path.join(projectRoot, ".env");
+    const cfg = core.config;
+    const isMultiLeg = cfg.resolvedModelChain.length > 1;
+    const currentProvider = cfg.resolvedModelChain[0]?.provider ?? "";
+    const currentModel = cfg.resolvedModelChain[0]?.model ?? "";
+    const currentProviderMeta = MODEL_PROVIDERS.find(
+      (p) => p.id === currentProvider,
+    );
+
+    const modelSelectorPanel = (() => {
+      if (isMultiLeg) {
+        return `
+          <div class="panel" style="margin-bottom:16px">
+            <div class="panel-header" style="font-weight:600;font-size:13px">Active model</div>
+            <div class="panel-body">
+              ${renderModelBlock(cfg)}
+              <p class="muted" style="font-size:12px;margin:8px 0 0">
+                Model chain is configured via <span class="mono">mercury.yaml</span> or
+                <span class="mono">MERCURY_MODEL_CHAIN</span> — edit those to change.
+              </p>
+            </div>
+          </div>`;
+      }
+
+      const providerOptions = MODEL_PROVIDERS.map((p) => {
+        const selected = p.id === currentProvider ? " selected" : "";
+        const keySet = !!process.env[p.envVar];
+        const suffix = keySet ? "" : " (no key)";
+        return `<option value="${escapeHtml(p.id)}"${selected}>${escapeHtml(p.label)}${suffix}</option>`;
+      }).join("");
+
+      const currentInRegistry = getModels(
+        currentProvider as KnownProvider,
+      ).some((m) => m.id === currentModel);
+
+      const modelOptions = getModels(currentProvider as KnownProvider);
+      let modelOptionsHtml: string;
+      if (modelOptions.length === 0) {
+        modelOptionsHtml = `<input type="text" name="model" value="${escapeHtml(currentModel)}" required
+          style="flex:1;min-width:200px;background:var(--bg);border:1px solid var(--border);color:var(--text);padding:6px 10px;border-radius:var(--radius,4px);font-size:13px;font-family:monospace"
+          placeholder="Enter model ID" />`;
+      } else {
+        const opts = modelOptions
+          .map(
+            (m) =>
+              `<option value="${escapeHtml(m.id)}"${m.id === currentModel ? " selected" : ""}>${escapeHtml(m.name)}</option>`,
+          )
+          .join("");
+        const customOpt =
+          !currentInRegistry && currentModel
+            ? `<option value="${escapeHtml(currentModel)}" selected>${escapeHtml(currentModel)} (not in registry)</option>`
+            : "";
+        modelOptionsHtml = `<select name="model" class="select" style="flex:1;min-width:200px">${customOpt}${opts}</select>`;
+      }
+
+      return `
+        <div class="panel" style="margin-bottom:16px">
+          <div class="panel-header" style="font-weight:600;font-size:13px">Active model</div>
+          <div class="panel-body">
+            <p class="muted" style="font-size:12px;margin:0 0 10px">
+              Current: <span class="mono">${escapeHtml(currentProvider)}</span> / <span class="mono">${escapeHtml(currentModel)}</span>
+            </p>
+            <form hx-post="/dashboard/api/model/set" hx-target="#keys-feedback" hx-swap="innerHTML"
+                  style="display:flex;gap:10px;align-items:center;flex-wrap:wrap">
+              <select name="provider" class="select" style="min-width:160px"
+                      hx-get="/dashboard/api/models" hx-trigger="change"
+                      hx-target="#model-select-container" hx-swap="innerHTML">
+                ${providerOptions}
+              </select>
+              <span id="model-select-container" style="display:flex;flex:1;min-width:200px">
+                ${modelOptionsHtml}
+              </span>
+              <button class="btn btn-sm" type="submit">Save</button>
+            </form>
+            <p id="model-key-warning" class="muted" style="font-size:12px;margin:8px 0 0;${currentProviderMeta && process.env[currentProviderMeta.envVar] ? "display:none" : ""}">
+              No API key set for this provider. Set one below or via <span class="mono">mercury auth login</span>.
+            </p>
+          </div>
+        </div>`;
+    })();
 
     const providerRows = MODEL_PROVIDERS.map((p) => {
       const isSet = !!process.env[p.envVar];
@@ -1900,6 +2077,8 @@ export function createDashboardRoutes(ctx: DashboardContext) {
 
       <div id="keys-feedback" style="min-height:4px"></div>
 
+      ${raw(modelSelectorPanel)}
+
       <div class="panel" style="margin-bottom:16px">
         <div class="panel-header" style="font-weight:600;font-size:13px">Model providers</div>
         <div class="panel-body" style="padding:0 16px">
@@ -1995,6 +2174,91 @@ export function createDashboardRoutes(ctx: DashboardContext) {
     );
   });
 
+  // ─── Model Selector ─────────────────────────────────────────────────────
+
+  app.get("/api/models", (c) => {
+    const provider = c.req.query("provider") ?? "";
+    const meta = MODEL_PROVIDERS.find((p) => p.id === provider);
+    const hasKey = meta ? !!process.env[meta.envVar] : false;
+    const keyWarning = `<p id="model-key-warning" hx-swap-oob="true" class="muted" style="font-size:12px;margin:8px 0 0;${hasKey ? "display:none" : ""}">
+      No API key set for this provider. Set one below or via <span class="mono">mercury auth login</span>.
+    </p>`;
+
+    const models = getModels(provider as KnownProvider);
+    if (models.length === 0) {
+      const placeholder = meta?.defaultModel ?? "model-id";
+      return c.html(
+        `<input type="text" name="model" required placeholder="${escapeHtml(placeholder)}"
+          style="flex:1;min-width:200px;background:var(--bg);border:1px solid var(--border);color:var(--text);padding:6px 10px;border-radius:var(--radius,4px);font-size:13px;font-family:monospace" />${keyWarning}`,
+      );
+    }
+    const options = models
+      .map(
+        (m) =>
+          `<option value="${escapeHtml(m.id)}">${escapeHtml(m.name)}</option>`,
+      )
+      .join("");
+    return c.html(
+      `<select name="model" class="select" style="flex:1;min-width:200px">${options}</select>${keyWarning}`,
+    );
+  });
+
+  app.post("/api/model/set", async (c) => {
+    if (core.config.consoleUrl) {
+      return c.html(
+        renderFeaturesToast(
+          "error",
+          "Model configuration is managed from the Mercury Console.",
+        ),
+      );
+    }
+
+    if (core.config.resolvedModelChain.length > 1) {
+      return c.html(
+        renderFeaturesToast(
+          "error",
+          "Model chain is configured — edit mercury.yaml or MERCURY_MODEL_CHAIN directly.",
+        ),
+      );
+    }
+
+    const form = await c.req.parseBody();
+    const provider =
+      typeof form.provider === "string" ? form.provider.trim() : "";
+    const model = typeof form.model === "string" ? form.model.trim() : "";
+
+    if (!provider) {
+      return c.html(renderFeaturesToast("error", "Provider is required."));
+    }
+    if (!model) {
+      return c.html(renderFeaturesToast("error", "Model is required."));
+    }
+
+    const meta = MODEL_PROVIDERS.find((p) => p.id === provider);
+    const providerLabel = meta?.label ?? provider;
+
+    try {
+      const envPath = path.join(projectRoot, ".env");
+      updateDotEnv(envPath, {
+        MERCURY_MODEL_PROVIDER: provider,
+        MERCURY_MODEL: model,
+      });
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      return c.html(
+        renderFeaturesToast("error", `Failed to write .env: ${msg}`),
+      );
+    }
+
+    setTimeout(() => process.kill(process.pid, "SIGTERM"), 500);
+    return c.html(
+      renderFeaturesToast(
+        "success",
+        `Model set to ${providerLabel} / ${model} — restarting…`,
+      ),
+    );
+  });
+
   // ─── SSE Stream ─────────────────────────────────────────────────────────
 
   app.get("/events", (c) => {

package/src/extensions/catalog.ts

@@ -30,7 +30,6 @@ export const EXTENSION_CATALOG: ExtensionCatalogEntry[] = [
       "Web search (Brave) and interactive browser (pinchtab) for sites like Gmail, banks, and forms.",
     category: "automation",
     sourceDir: "pinchtab",
-    requiredEnvVars: ["MERCURY_BRAVE_API_KEY"],
     requiresRestart: true,
   },
   {

package/src/extensions/types.ts

@@ -356,8 +356,8 @@ export interface MercuryExtensionAPI {
    * handler stay on the host and never enter the agent container.
    *
    * @example
-   * mercury.capability("barber", async (req, ctx) => {
-   *   if (req.action === "book") return { data: await book(req.callerId, req.body) };
+   * mercury.capability("rooms", async (req, ctx) => {
+   *   if (req.action === "book") return { data: await bookRoom(req.callerId, req.body) };
    *   return { status: 400, data: { error: "unknown action" } };
    * });
    */