mixdog 0.7.7 → 0.7.11

package/setup/wizard.mjs

@@ -1,696 +0,0 @@
-/**
- * Interactive terminal setup wizard for `npx mixdog` / mixdog-install.
- * Runs after plugin registration when stdin is a TTY and CI is unset.
- *
- * Callers must set process.env.CLAUDE_PLUGIN_DATA before importing this
- * module (install.mjs does that) so src/shared/config.mjs can resolve paths.
- */
-import { spawnSync } from 'node:child_process';
-import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync } from 'node:fs';
-import { join, dirname, basename } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { defaultPluginDataDir } from './install.mjs';
-import {
-  mergeAgentConfig,
-  mergeMemoryConfig,
-  mergeConfig,
-  mergeSearchConfig,
-} from './config-merge.mjs';
-import { DEFAULT_MODELS } from '../src/search/lib/config.mjs';
-import {
-  select,
-  multiselect,
-  confirm,
-  text,
-  password,
-  createProgressBar,
-  createSpinner,
-} from './tui.mjs';
-
-let _linuxSecretsCapable;
-const KEYTAR_SERVICE = 'mixdog';
-const KEYTAR_PROBE_TIMEOUT_MS = 8000;
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const REPO_ROOT = join(__dirname, '..');
-const DEFAULT_USER_WORKFLOW = JSON.parse(
-  readFileSync(join(REPO_ROOT, 'defaults', 'user-workflow.json'), 'utf8'),
-);
-
-const AG_API_PROVIDERS = [
-  { id: 'openai', name: 'OpenAI', env: 'OPENAI_API_KEY' },
-  { id: 'anthropic', name: 'Anthropic', env: 'ANTHROPIC_API_KEY' },
-  { id: 'gemini', name: 'Gemini', env: 'GEMINI_API_KEY' },
-  { id: 'deepseek', name: 'DeepSeek', env: 'DEEPSEEK_API_KEY' },
-  { id: 'xai', name: 'xAI', env: 'XAI_API_KEY' },
-  { id: 'nvidia', name: 'NVIDIA', env: 'NVIDIA_API_KEY' },
-];
-
-const WORKFLOW_ROLES = ['worker', 'reviewer', 'debugger', 'tester'];
-
-/** Raw SERP API keys (setup.html SR_KEY_PROVIDERS) — independent of active provider. */
-const SEARCH_RAW_KEY_PROVIDERS = [
-  { id: 'firecrawl', name: 'Firecrawl' },
-  { id: 'tavily', name: 'Tavily' },
-  { id: 'exa', name: 'Exa' },
-];
-const SEARCH_OAUTH_PROVIDERS = new Set(['anthropic-oauth', 'openai-oauth', 'grok-oauth']);
-const OPENAI_SEARCH_EFFORT_VALUES = new Set(['low', 'medium', 'high']);
-const SEARCH_OAUTH_ALIASES = Object.freeze({
-  'anthropic-oauth': 'anthropic-oauth',
-  anthropic: 'anthropic-oauth',
-  'openai-oauth': 'openai-oauth',
-  openai: 'openai-oauth',
-  'grok-oauth': 'grok-oauth',
-  grok: 'grok-oauth',
-});
-function pluginDataDir() {
-  const dir = process.env.CLAUDE_PLUGIN_DATA;
-  if (dir && typeof dir === 'string' && String(dir).trim()) {
-    return String(dir).trim();
-  }
-  return defaultPluginDataDir();
-}
-
-/** One-time Linux preflight: optional keytar must load before any secret prompt. */
-export function resetLinuxSecretsCapableCache() {
-  _linuxSecretsCapable = undefined;
-}
-
-function runLinuxKeytarOperationalProbe() {
-  const script = [
-    'try {',
-    'const keytar = require("keytar");',
-    'if (process.env.MIXDOG_KEYTAR_PROBE_INJECT_FAIL === "1") process.exit(3);',
-    `keytar.findCredentials(${JSON.stringify(KEYTAR_SERVICE)})`,
-    '  .then(() => process.exit(0))',
-    '  .catch((e) => { process.stderr.write(String(e && e.message ? e.message : e)); process.exit(1); });',
-    '} catch (e) { process.stderr.write(String(e && e.message ? e.message : e)); process.exit(2); }',
-  ].join(' ');
-  const r = spawnSync(process.execPath, ['-e', script], {
-    env: { ...process.env },
-    encoding: 'utf8',
-    timeout: KEYTAR_PROBE_TIMEOUT_MS,
-    windowsHide: true,
-    stdio: ['ignore', 'ignore', 'pipe'],
-  });
-  if (r.error) return false;
-  return r.status === 0;
-}
-
-/**
- * @param {{ treatAsLinux?: boolean }} [probeOptions] — .scratch harness only (operational probe).
- */
-export function probeLinuxSecretsCapable(probeOptions = null) {
-  const isLinux = probeOptions?.treatAsLinux === true || process.platform === 'linux';
-  if (!isLinux) return true;
-  if (_linuxSecretsCapable !== undefined) return _linuxSecretsCapable;
-  _linuxSecretsCapable = runLinuxKeytarOperationalProbe();
-  return _linuxSecretsCapable;
-}
-
-export function linuxKeychainUnavailableMessage() {
-  return [
-    '',
-    '⚠ Linux keychain unavailable (optional `keytar` not installed or libsecret missing).',
-    '  Secret prompts are skipped; non-secret setup continues. Install keytar later, then use the Mixdog UI:',
-    '    Debian/Ubuntu: sudo apt install libsecret-1-dev   then: npm install keytar',
-    '    Fedora/RHEL:   sudo dnf install libsecret-devel then: npm install keytar',
-    '    Arch:          sudo pacman -S libsecret         then: npm install keytar',
-    '',
-  ].join('\n');
-}
-
-function sanitizeName(n) {
-  if (!n || typeof n !== 'string') return null;
-  if (n !== basename(n)) return null;
-  if (n.includes('..') || n.startsWith('.')) return null;
-  return n;
-}
-
-function isSkippableAnswer(raw) {
-  return raw === undefined || raw === null || String(raw).trim() === '';
-}
-
-function defaultIo() {
-  const interactive = !!(process.stdin.isTTY && !process.env.CI);
-  if (!interactive) {
-    return {
-      interactive: false,
-      ask: async () => '',
-      askSecret: async () => '',
-      say: (line) => { if (line) console.log(line); },
-    };
-  }
-  return {
-    interactive: true,
-    say: (line) => { if (line) console.log(line); },
-    close: () => {},
-  };
-}
-
-async function loadConfigModules() {
-  const { ensureDataSeeds } = await import('../src/shared/seed.mjs');
-  const { readSection, updateSection } = await import('../src/shared/config.mjs');
-  const { DEFAULT_PRESETS, DEFAULT_MAINTENANCE } = await import('../src/agent/orchestrator/config.mjs');
-  const dataDir = pluginDataDir();
-  mkdirSync(dataDir, { recursive: true });
-  ensureDataSeeds(dataDir);
-  return { readSection, updateSection, DEFAULT_PRESETS, DEFAULT_MAINTENANCE, dataDir };
-}
-
-function readUserWorkflow(dataDir) {
-  const path = join(dataDir, 'user-workflow.json');
-  if (!existsSync(path)) return structuredClone(DEFAULT_USER_WORKFLOW);
-  try {
-    const parsed = JSON.parse(readFileSync(path, 'utf8'));
-    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
-      throw new SyntaxError('user-workflow root must be a JSON object');
-    }
-    return parsed;
-  } catch (parseErr) {
-    const corrupt = `${path}.corrupt-${Date.now()}`;
-    try {
-      if (existsSync(path)) renameSync(path, corrupt);
-    } catch {}
-    process.stderr.write(
-      `[wizard] user-workflow.json is malformed (${parseErr.message}). Renamed to ${corrupt}. Fix or delete before re-running setup.\n`,
-    );
-    throw new Error(
-      `[wizard] user-workflow.json is malformed (${parseErr.message}); refusing role mapping that would overwrite user data`,
-    );
-  }
-}
-
-function writeUserWorkflow(dataDir, data) {
-  const path = join(dataDir, 'user-workflow.json');
-  const roles = Array.isArray(data?.roles) ? data.roles.slice() : [];
-  if (!roles.some((r) => r?.name === 'worker')) {
-    const seedWorker = DEFAULT_USER_WORKFLOW.roles.find((r) => r?.name === 'worker');
-    if (seedWorker) roles.unshift({ ...seedWorker });
-  }
-  const sanitizedRoles = roles.map((r) => {
-    if (!r || typeof r !== 'object') return r;
-    const name = sanitizeName(r.name);
-    if (name == null) throw new Error(`invalid role name: ${r.name}`);
-    return { ...r, name };
-  });
-  mkdirSync(dirname(path), { recursive: true });
-  const tmp = `${path}.tmp`;
-  writeFileSync(tmp, JSON.stringify({ ...data, roles: sanitizedRoles }, null, 2) + '\n', 'utf8');
-  renameSync(tmp, path);
-}
-
-function presetIdsFromAgent(agentSection) {
-  const presets = Array.isArray(agentSection?.presets) ? agentSection.presets : [];
-  return presets.map((p) => p.id || p.name).filter(Boolean);
-}
-
-export async function stepDiscordToken(io, { updateSection, readSection, secretsCapable = true }) {
-  const { hasStoredSecret, SECRET_ACCOUNTS, getDiscordToken } = await import('../src/shared/config.mjs');
-  io.say('\n── Step 2/9: Discord ──');
-  io.say('Bot token (keychain), application ID, and optional main channel.');
-
-  let hadStoredToken = false;
-  let token = '';
-  let enteredToken = false;
-  if (!secretsCapable) {
-    io.say('• Discord bot token: skipped (Linux keychain unavailable).');
-  } else {
-    hadStoredToken = hasStoredSecret(SECRET_ACCOUNTS.discordToken);
-    const tokenPrompt = hadStoredToken
-      ? 'Discord bot token (stored — leave empty to keep)'
-      : 'Discord bot token (leave empty to skip whole step)';
-    token = (await password(tokenPrompt)).trim();
-    enteredToken = !isSkippableAnswer(token);
-    if (!enteredToken && !hadStoredToken) {
-      io.say('• Skipped Discord setup.');
-      return false;
-    }
-  }
-
-  const channels = readSection('channels') || {};
-  const curDiscord = channels.discord && typeof channels.discord === 'object' ? channels.discord : {};
-  const curAppId = String(curDiscord.applicationId || '').trim();
-  const appIdBase = 'Application ID';
-  const appIdRaw = await text(appIdBase, {
-    placeholder: curAppId ? `${curAppId} (Enter to keep)` : '',
-    initial: '',
-  });
-  const appIdToSet = isSkippableAnswer(appIdRaw) ? '' : String(appIdRaw).trim();
-  const chIdRaw = await text('Main channel ID', { placeholder: 'Enter to skip channel', initial: '' });
-  const channelId = isSkippableAnswer(chIdRaw) ? '' : String(chIdRaw).trim();
-  const channelName = 'main';
-  const mode = 'interactive';
-  const secrets = {};
-  updateSection('channels', (current) => {
-    const payload = {};
-    const discord = {};
-    if (enteredToken) discord.token = token;
-    if (appIdToSet) discord.applicationId = appIdToSet;
-    if (Object.keys(discord).length > 0) payload.discord = discord;
-    if (channelId) {
-      const existingCfg = current.channelsConfig && typeof current.channelsConfig === 'object'
-        ? { ...current.channelsConfig }
-        : {};
-      existingCfg[channelName] = { channelId, mode };
-      payload.channelsConfig = existingCfg;
-      payload.mainChannel = channelName;
-    }
-    return mergeConfig(current, payload, secrets);
-  });
-  if (enteredToken) io.say('• Discord token saved to keychain.');
-  if (appIdToSet) io.say('• Application ID saved.');
-  if (channelId) io.say(`• Main channel "${channelName}" configured (${mode}).`);
-  return enteredToken || hadStoredToken || !!getDiscordToken();
-}
-
-function formatVoiceProgress(p) {
-  const phase = p?.phase || 'download';
-  const downloaded = Number(p?.downloaded) || 0;
-  const total = Number(p?.total) || 0;
-  if (total > 0) {
-    const pct = Math.floor((downloaded / total) * 100);
-    const mb = (n) => `${(n / (1024 * 1024)).toFixed(1)} MB`;
-    return `${phase} · ${mb(downloaded)} / ${mb(total)} (${pct}%)`;
-  }
-  const mb = (downloaded / (1024 * 1024)).toFixed(1);
-  return `${phase} · received ${mb} MB`;
-}
-
-async function installVoiceRuntime(dataDir) {
-  const {
-    ensureWhisperRuntime,
-    ensureWhisperModel,
-    ensureFfmpegRuntime,
-  } = await import('../src/channels/lib/voice-runtime-fetcher.mjs');
-  let spinner = createSpinner('Downloading voice runtime…');
-  let bar = null;
-  const onProgress = (p) => {
-    const line = formatVoiceProgress(p);
-    if (!line) return;
-    const downloaded = Number(p?.downloaded) || 0;
-    const total = Number(p?.total) || 0;
-    if (total > 0) {
-      if (!bar) {
-        spinner.stop('', true);
-        spinner = null;
-        bar = createProgressBar('Voice download', { total });
-      }
-      bar.update(downloaded, total);
-    } else if (spinner) {
-      spinner.update(line);
-    }
-  };
-  await ensureWhisperRuntime(dataDir, onProgress);
-  const model = await ensureWhisperModel(dataDir, onProgress);
-  await ensureFfmpegRuntime(dataDir, onProgress);
-  if (bar) bar.done('complete');
-  else if (spinner) spinner.stop('complete', true);
-  return model?.modelId || 'large-v3-turbo';
-}
-
-/** Mirrors setup.html channels save: `voice` via POST /config → mergeConfig. */
-async function stepVoiceTranscription(io, ctx, discordTokenSaved) {
-  if (!discordTokenSaved) return;
-  io.say('\n── Step 2a/9: Voice transcription (음성 전사) ──');
-  io.say('Install local Speech-to-text (whisper.cpp) for Discord voice messages.');
-  const enable = await confirm('Enable voice transcription?', { initial: false });
-  if (!enable) {
-    io.say('• Skipped voice transcription.');
-    return;
-  }
-  const { updateSection, dataDir } = ctx;
-  try {
-    const modelId = await installVoiceRuntime(dataDir);
-    const voice = { language: 'auto', model: modelId };
-    updateSection('channels', (current) => mergeConfig(current, { voice }, {}));
-    io.say('• Voice transcription runtime installed and channels voice config saved.');
-  } catch (err) {
-    io.say(`• Voice install failed: ${err?.message || err}`);
-    throw err;
-  }
-}
-
-async function stepAddressForm(io, { updateSection, readSection }) {
-  io.say('\n── Step 1/9: Address form (호칭) ──');
-  const memory = readSection('memory');
-  const curTitle = memory?.user?.title || '';
-  const curName = memory?.user?.name || '';
-  const titleRaw = await text('How should Mixdog address you? user.title', {
-    placeholder: curTitle || 'Enter to skip',
-    initial: '',
-  });
-  const nameRaw = await text('Your display name? user.name', {
-    placeholder: curName || 'Enter to skip',
-    initial: '',
-  });
-  const title = isSkippableAnswer(titleRaw) ? '' : String(titleRaw).trim();
-  const name = isSkippableAnswer(nameRaw) ? '' : String(nameRaw).trim();
-  if (!title && !name) {
-    io.say('• Skipped address form.');
-    return;
-  }
-  const user = {};
-  if (title) user.title = title;
-  if (name) user.name = name;
-  const secrets = {};
-  updateSection('memory', (current) => mergeMemoryConfig(current, { user }, secrets));
-  io.say('• Saved memory.user (title/name).');
-}
-
-export async function stepWebhookReceiver(io, { updateSection, readSection, secretsCapable = true }) {
-  io.say('\n── Step 3/9: Inbound webhooks (ngrok receiver) ──');
-  io.say('Global webhook tunnel for inbound HTTP (channels.webhook). Per-endpoint registration is configured later in the UI.');
-  const enableWebhooks = await confirm('Enable inbound webhooks?', { initial: false });
-  if (!enableWebhooks) {
-    io.say('• Skipped webhook setup.');
-    return;
-  }
-  const { hasStoredSecret, SECRET_ACCOUNTS } = await import('../src/shared/config.mjs');
-  const channels = readSection('channels') || {};
-  const curWebhook = channels.webhook && typeof channels.webhook === 'object' ? channels.webhook : {};
-  const curDomain = String(curWebhook.domain || curWebhook.ngrokDomain || '').trim();
-  const domainBase =
-    'Domain (ngrok, e.g. your-name.ngrok-free.dev — get it at dashboard.ngrok.com/domains)';
-  const domainRaw = await text(domainBase, {
-    placeholder: curDomain ? `${curDomain} (Enter to keep)` : '',
-    initial: '',
-  });
-  const webhook = { enabled: true };
-  if (!isSkippableAnswer(domainRaw)) {
-    webhook.domain = String(domainRaw).trim();
-  }
-  if (secretsCapable) {
-    const authPrompt = hasStoredSecret(SECRET_ACCOUNTS.webhookAuth)
-      ? 'ngrok Auth Token (stored — leave empty to keep)'
-      : 'ngrok Auth Token';
-    webhook.authtoken = (await password(authPrompt)).trim();
-  } else {
-    io.say('• ngrok Auth Token: skipped (Linux keychain unavailable).');
-  }
-  const secrets = {};
-  updateSection('channels', (current) => mergeConfig(current, { webhook }, secrets));
-  io.say(secretsCapable
-    ? '• Inbound webhook receiver saved (channels.webhook enabled/domain; authtoken in keychain).'
-    : '• Inbound webhook receiver saved (channels.webhook enabled/domain; authtoken not collected).');
-}
-
-async function stepProviderKeys(io, { updateSection, secretsCapable = true }) {
-  io.say('\n── Step 4/9: Provider API keys ──');
-  if (!secretsCapable) {
-    io.say('• Skipped provider API keys (Linux keychain unavailable).');
-    return;
-  }
-  io.say('Optional API keys (hidden). Pick providers to configure.');
-  const providerOpts = AG_API_PROVIDERS.map((p) => ({
-    value: p.id,
-    label: p.name,
-    hint: p.env,
-  }));
-  const selectedIds = await multiselect('Which provider API keys to set?', providerOpts, { min: 0 });
-  const providers = {};
-  for (const p of AG_API_PROVIDERS.filter((x) => selectedIds.includes(x.id))) {
-    const key = (await password(`${p.name} API key (${p.env})`)).trim();
-    if (!isSkippableAnswer(key)) {
-      providers[p.id] = { apiKey: key, enabled: true };
-    }
-  }
-  if (Object.keys(providers).length === 0) {
-    io.say('• Skipped provider keys.');
-    return;
-  }
-  const secrets = {};
-  updateSection('agent', (current) => mergeAgentConfig(current, { providers }, secrets));
-  io.say(`• Saved ${Object.keys(providers).length} provider key(s) to keychain.`);
-}
-
-async function stepPresets(io, { readSection, updateSection, DEFAULT_PRESETS }) {
-  io.say('\n── Step 5/9: Agent presets ──');
-  const agent = readSection('agent');
-  const existing = presetIdsFromAgent(agent);
-  if (existing.length > 0) {
-    io.say(`Current presets: ${existing.join(', ')}`);
-  }
-  const installDefaults = await confirm('Install default Mixdog presets?', { initial: false });
-  if (!installDefaults) {
-    io.say('• Kept existing presets.');
-    return;
-  }
-  const list = DEFAULT_PRESETS.map((p) => ({ ...p }));
-  updateSection('agent', (current) => {
-    const next = { ...current, presets: list };
-    const validKeys = list.map((p) => p.id).filter(Boolean);
-    if (!next.default || !validKeys.includes(next.default)) next.default = validKeys[0] || null;
-    return next;
-  });
-  io.say(`• Installed ${list.length} default presets.`);
-}
-
-async function stepRolePresetMapping(io, { readSection, dataDir }) {
-  io.say('\n── Step 6/9: Role → preset mapping ──');
-  const agent = readSection('agent');
-  const presetIds = presetIdsFromAgent(agent);
-  if (presetIds.length === 0) {
-    io.say('No presets on disk — run step 5 first or configure presets in the Mixdog UI later.');
-    return;
-  }
-  io.say(`Available presets: ${presetIds.join(', ')}`);
-  const wf = readUserWorkflow(dataDir);
-  const roles = Array.isArray(wf.roles) ? wf.roles : [];
-  const byName = new Map(roles.map((r) => [r.name, r]));
-  for (const roleName of WORKFLOW_ROLES) {
-    const cur = byName.get(roleName)?.preset || DEFAULT_USER_WORKFLOW.roles.find((r) => r.name === roleName)?.preset || '';
-    const options = [
-      { value: '__keep__', label: `Keep current${cur ? ` (${cur})` : ''}` },
-      ...presetIds.map((id) => ({ value: id, label: id })),
-    ];
-    const chosen = await select(`Preset for role "${roleName}"`, options, {
-      initial: cur && presetIds.includes(cur) ? cur : '__keep__',
-    });
-    if (chosen === '__keep__') continue;
-    const preset = String(chosen).trim();
-    if (!presetIds.includes(preset)) {
-      io.say(`  ! Unknown preset "${preset}" — left "${roleName}" unchanged.`);
-      continue;
-    }
-    const entry = byName.get(roleName) || { name: roleName, permission: 'full' };
-    entry.preset = preset;
-    byName.set(roleName, entry);
-  }
-  const mergedRoles = WORKFLOW_ROLES.map((name) => byName.get(name)).filter(Boolean);
-  for (const r of roles) {
-    if (!WORKFLOW_ROLES.includes(r.name) && !mergedRoles.some((x) => x.name === r.name)) {
-      mergedRoles.push(r);
-    }
-  }
-  writeUserWorkflow(dataDir, { ...wf, roles: mergedRoles });
-  io.say('• Role → preset mapping saved to user-workflow.json.');
-}
-
-function resolveSearchBackendInput(raw) {
-  if (isSkippableAnswer(raw)) return null;
-  const key = String(raw).trim().toLowerCase();
-  return SEARCH_OAUTH_ALIASES[key] || null;
-}
-
-/** Mirrors POST /search/config → mergeSearchConfig. */
-export async function stepSearchBackend(io, { updateSection, readSection, secretsCapable = true }) {
-  io.say('\n── Step 7/9: Search backend ──');
-  io.say('Active provider: anthropic-oauth | openai-oauth | grok-oauth (OAuth — uses Agent credentials).');
-  const { hasStoredSecret, SECRET_ACCOUNTS, getSearchApiKey } = await import('../src/shared/config.mjs');
-  const search = readSection('search') || {};
-  const curProvider = String(search.provider || 'anthropic-oauth').trim() || 'anthropic-oauth';
-  const providerOptions = [
-    { value: 'anthropic-oauth', label: 'anthropic-oauth', hint: 'Claude OAuth' },
-    { value: 'openai-oauth', label: 'openai-oauth', hint: 'OpenAI OAuth' },
-    { value: 'grok-oauth', label: 'grok-oauth', hint: 'xAI Grok OAuth' },
-  ];
-  const backendRaw = await select('Search provider', providerOptions, {
-    initial: SEARCH_OAUTH_PROVIDERS.has(curProvider) ? curProvider : 'anthropic-oauth',
-  });
-  let provider = curProvider;
-  if (!isSkippableAnswer(backendRaw)) {
-    const resolved = resolveSearchBackendInput(backendRaw) || String(backendRaw).trim();
-    if (!SEARCH_OAUTH_PROVIDERS.has(resolved)) {
-      io.say(`  ! Provider "${resolved}" is not a supported OAuth backend — keeping ${curProvider}.`);
-    } else {
-      provider = resolved;
-    }
-  }
-
-  const payload = {};
-  if (provider !== curProvider) payload.provider = provider;
-
-  const searchProviders = {};
-  if (secretsCapable) {
-    for (const p of SEARCH_RAW_KEY_PROVIDERS) {
-      const hadKey = hasStoredSecret(SECRET_ACCOUNTS.searchApiKey(p.id));
-      const keyPrompt = hadKey
-        ? `${p.name} API key (stored — leave empty to keep)`
-        : `${p.name} API key (leave empty to skip)`;
-      const key = (await password(keyPrompt)).trim();
-      if (!isSkippableAnswer(key)) {
-        searchProviders[p.id] = key;
-      }
-    }
-  } else {
-    io.say('• Search provider API keys: skipped (Linux keychain unavailable).');
-  }
-  if (Object.keys(searchProviders).length) payload.searchProviders = searchProviders;
-
-  if (provider === 'openai-oauth') {
-    const curModel = (search.models && search.models.openai)
-      || DEFAULT_MODELS.openai
-      || '';
-    const modelRaw = await text('OpenAI model', {
-      placeholder: curModel ? `${curModel} (Enter to keep)` : 'Enter to keep',
-      initial: '',
-    });
-    if (!isSkippableAnswer(modelRaw)) {
-      const model = String(modelRaw).trim();
-      if (model) payload.models = { ...(payload.models || {}), openai: model };
-    }
-    const curEffort = String(search.modelOptions?.openai?.effort || 'medium').trim() || 'medium';
-    const effortRaw = await select('OpenAI effort', [
-      { value: '__keep__', label: `Keep current (${curEffort})` },
-      { value: 'low', label: 'low' },
-      { value: 'medium', label: 'medium' },
-      { value: 'high', label: 'high' },
-    ], { initial: '__keep__' });
-    if (!isSkippableAnswer(effortRaw) && effortRaw !== '__keep__') {
-      const effort = String(effortRaw).trim().toLowerCase();
-      if (!OPENAI_SEARCH_EFFORT_VALUES.has(effort)) {
-        io.say(`  ! Unknown effort "${effortRaw.trim()}" — keeping ${curEffort}.`);
-      } else {
-        const openaiOpts = { ...(search.modelOptions?.openai || {}), effort };
-        payload.modelOptions = { ...(payload.modelOptions || {}), openai: openaiOpts };
-      }
-    }
-    const curFast = !!search.modelOptions?.openai?.fast;
-    const fastKeep = await confirm(`OpenAI Fast mode (current: ${curFast ? 'on' : 'off'}) — enable?`, {
-      initial: curFast,
-    });
-    const fastParsed = fastKeep === curFast ? null : fastKeep;
-    if (fastParsed !== null) {
-      const base = payload.modelOptions?.openai || search.modelOptions?.openai || {};
-      const openaiOpts = { ...base };
-      if (fastParsed) openaiOpts.fast = true;
-      else delete openaiOpts.fast;
-      // Write even an empty object: mergeSearchConfig treats an empty per-family
-      // entry as "clear this family", which is how an explicit Fast=n drops a
-      // lone fast flag (no effort left to keep the object non-empty).
-      payload.modelOptions = { ...(payload.modelOptions || {}), openai: openaiOpts };
-    }
-  } else if (provider === 'grok-oauth') {
-    const curModel = (search.models && search.models.xai)
-      || DEFAULT_MODELS.xai
-      || '';
-    const modelRaw = await text('xAI model', {
-      placeholder: curModel ? `${curModel} (Enter to keep)` : 'Enter to keep',
-      initial: '',
-    });
-    if (!isSkippableAnswer(modelRaw)) {
-      const model = String(modelRaw).trim();
-      if (model) payload.models = { ...(payload.models || {}), xai: model };
-    }
-  }
-
-  const secrets = {};
-  updateSection('search', (current) => mergeSearchConfig(current, payload, secrets));
-  const after = readSection('search') || {};
-  const savedProvider = after.provider || curProvider;
-  io.say(`• Search provider: ${savedProvider}.`);
-  for (const p of SEARCH_RAW_KEY_PROVIDERS) {
-    io.say(`• ${p.name} API key: ${getSearchApiKey(p.id) ? 'stored' : 'not set'}.`);
-  }
-  if (savedProvider === 'openai-oauth' && after.models?.openai) {
-    io.say(`• OpenAI model: ${after.models.openai}.`);
-  }
-  if (savedProvider === 'grok-oauth' && after.models?.xai) {
-    io.say(`• xAI model: ${after.models.xai}.`);
-  }
-  if (savedProvider === 'openai-oauth' && after.modelOptions?.openai?.effort) {
-    io.say(`• OpenAI effort: ${after.modelOptions.openai.effort}.`);
-  }
-  if (savedProvider === 'openai-oauth' && after.modelOptions?.openai?.fast) {
-    io.say('• OpenAI Fast mode: on.');
-  }
-}
-
-/** Mirrors POST /agent/maintenance for the explore slot. */
-export async function stepExplorerPreset(io, { readSection, updateSection, DEFAULT_PRESETS, DEFAULT_MAINTENANCE }) {
-  io.say('\n── Step 8/9: Explorer model (explore tool) ──');
-  const agent = readSection('agent') || {};
-  const presetIds = presetIdsFromAgent(agent);
-  const validIds = new Set([
-    ...presetIds,
-    ...DEFAULT_PRESETS.map((p) => p.id).filter(Boolean),
-  ]);
-  const curExplore = String(agent.maintenance?.explore || DEFAULT_MAINTENANCE.explore || 'haiku').trim() || 'haiku';
-  if (validIds.size > 0) {
-    io.say(`Available presets: ${[...validIds].join(', ')}`);
-  }
-  const exploreOptions = [
-    { value: '__keep__', label: `Keep current (${curExplore})` },
-    ...[...validIds].map((id) => ({ value: id, label: id })),
-  ];
-  const raw = await select('Preset for explorer (explore tool)', exploreOptions, {
-    initial: validIds.has(curExplore) ? curExplore : '__keep__',
-  });
-  if (raw === '__keep__' || isSkippableAnswer(raw)) {
-    io.say(`• Explorer preset unchanged (${curExplore}).`);
-    return;
-  }
-  const preset = String(raw).trim();
-  if (!validIds.has(preset)) {
-    io.say(`  ! Unknown preset "${preset}" — keeping ${curExplore}.`);
-    return;
-  }
-  updateSection('agent', (current) => ({
-    ...current,
-    maintenance: { ...(current.maintenance || {}), explore: preset },
-  }));
-  io.say(`• Explorer maintenance preset: ${preset}.`);
-}
-
-/**
- * @param {object} [ioOverride]
- * @param {boolean} [ioOverride.interactive]
- * @param {(prompt:string)=>Promise<string>} [ioOverride.ask]
- * @param {(prompt:string)=>Promise<string>} [ioOverride.askSecret]
- * @param {(line:string)=>void} [ioOverride.say]
- * @param {object} [options]
- * @param {boolean} [options.secretsCapable] — override Linux keytar preflight (tests).
- */
-export async function runSetupWizard(ioOverride = null, options = {}) {
-  const io = ioOverride ? { ...defaultIo(), ...ioOverride } : defaultIo();
-  if (!io.interactive) return { skipped: true };
-
-  const secretsCapable = options.secretsCapable ?? probeLinuxSecretsCapable();
-  if (!secretsCapable) io.say(linuxKeychainUnavailableMessage());
-
-  io.say('\nMixdog setup wizard — configure before opening Claude Code.');
-  io.say('Press Enter on any step to skip it.\n');
-
-  const ctx = await loadConfigModules();
-  ctx.secretsCapable = secretsCapable;
-  try {
-    await stepAddressForm(io, ctx);
-    const discordSaved = await stepDiscordToken(io, ctx);
-    await stepVoiceTranscription(io, ctx, discordSaved);
-    await stepWebhookReceiver(io, ctx);
-    await stepProviderKeys(io, ctx);
-    await stepPresets(io, ctx);
-    await stepRolePresetMapping(io, ctx);
-    await stepSearchBackend(io, ctx);
-    await stepExplorerPreset(io, ctx);
-    io.say('\n✓ Wizard complete. Restart Claude Code (or /reload-plugins) to load mixdog.');
-  } catch (err) {
-    io.say(`\n✗ Wizard error: ${err?.message || err}`);
-    throw err;
-  } finally {
-    if (typeof io.close === 'function') io.close();
-  }
-  return { skipped: false };
-}