neko-harness 0.4.5 → 0.4.7

package/dist/neko.js

@@ -80,7 +80,7 @@ function updateAction(input) {
     return "install";
   return "none";
 }
-var RUNNING_VERSION = "0.4.5", APPLICATION_PROTOCOL = 6, ApplicationProtocolError;
+var RUNNING_VERSION = "0.4.7", APPLICATION_PROTOCOL = 8, ApplicationProtocolError;
 var init_application_version = __esm(() => {
   ApplicationProtocolError = class ApplicationProtocolError extends Error {
     constructor() {
@@ -90,8 +90,35 @@ var init_application_version = __esm(() => {
   };
 });
 
+// packages/core/src/rename-with-retry.ts
+import { rename } from "fs/promises";
+async function renameWithRetry(from, to, deps = {}) {
+  const doRename = deps.rename ?? rename;
+  const sleep = deps.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+  let delay = FIRST_DELAY_MS;
+  let waited = 0;
+  for (;; ) {
+    try {
+      await doRename(from, to);
+      return;
+    } catch (error) {
+      const code = error.code;
+      if (typeof code !== "string" || !TRANSIENT.has(code) || waited >= MAX_TOTAL_MS)
+        throw error;
+      const step = Math.min(delay, MAX_TOTAL_MS - waited);
+      await sleep(step);
+      waited += step;
+      delay *= 2;
+    }
+  }
+}
+var TRANSIENT, FIRST_DELAY_MS = 10, MAX_TOTAL_MS = 1000;
+var init_rename_with_retry = __esm(() => {
+  TRANSIENT = new Set(["EPERM", "EBUSY", "EACCES"]);
+});
+
 // packages/core/src/application-updates.ts
-import { mkdir, readFile, rename, rm, writeFile } from "fs/promises";
+import { mkdir, readFile, rm, writeFile } from "fs/promises";
 import { homedir } from "os";
 import { dirname, join } from "path";
 import { fileURLToPath } from "url";
@@ -220,7 +247,7 @@ class UpdateChecker {
       try {
         await mkdir(dirname(this.#cachePath), { recursive: true });
         await writeFile(temporary, JSON.stringify({ latestVersion: value.version, checkedAt: now }), { mode: 384 });
-        await rename(temporary, this.#cachePath);
+        await renameWithRetry(temporary, this.#cachePath);
       } catch {} finally {
         await rm(temporary, { force: true }).catch(() => {});
       }
@@ -238,6 +265,7 @@ class UpdateChecker {
 var INSTALL_MANIFEST;
 var init_application_updates = __esm(() => {
   init_application_version();
+  init_rename_with_retry();
   INSTALL_MANIFEST = stableVersion(RUNNING_VERSION) ? fileURLToPath(new URL("../package.json", import.meta.url)) : undefined;
 });
 
@@ -665,6 +693,16 @@ function validate(config, source) {
       throw new Error(`neko config: ${source}: "skills.marketUrl" must be a string.`);
     }
   }
+  const shell = config.shell;
+  if (shell !== undefined) {
+    if (typeof shell !== "object" || shell === null || Array.isArray(shell)) {
+      throw new Error(`neko config: ${source}: "shell" must be an object.`);
+    }
+    const { path } = shell;
+    if (path !== undefined && typeof path !== "string") {
+      throw new Error(`neko config: ${source}: "shell.path" must be a string.`);
+    }
+  }
   const webSearch = config.webSearch;
   if (webSearch !== undefined) {
     if (typeof webSearch !== "object" || webSearch === null || Array.isArray(webSearch)) {
@@ -691,30 +729,85 @@ var init_config = __esm(() => {
 });
 
 // packages/core/src/credential-providers.ts
+function isModelProvider(id) {
+  return MODEL_PROVIDERS.some((item) => item.id === id);
+}
 function credentialProvider(id) {
   const spec = CREDENTIAL_PROVIDERS.find((item) => item.id === id);
   if (!spec)
     throw new Error(`Unknown credential provider: ${id}`);
   return spec;
 }
-var CREDENTIAL_PROVIDERS;
+function normalizeEnabledProviders(saved) {
+  const wanted = new Set([...LOCKED_PROVIDERS, ...saved ?? DEFAULT_ENABLED_PROVIDERS]);
+  return MODEL_PROVIDERS.map((item) => item.id).filter((id) => wanted.has(id));
+}
+var model = (id, name, envVar, signupUrl) => ({ id, kind: "model", name, envVar, signupUrl, keyless: false }), MODEL_PROVIDERS, SEARCH_CREDENTIAL_PROVIDERS, CREDENTIAL_PROVIDERS, DEFAULT_ENABLED_PROVIDERS, LOCKED_PROVIDERS;
 var init_credential_providers = __esm(() => {
+  MODEL_PROVIDERS = [
+    model("deepseek", "DeepSeek", "DEEPSEEK_API_KEY", "https://platform.deepseek.com/api_keys"),
+    model("openrouter", "OpenRouter", "OPENROUTER_API_KEY", "https://openrouter.ai/keys"),
+    model("opencode-go", "OpenCode Go", "OPENCODE_API_KEY", "https://opencode.ai/auth"),
+    model("opencode", "OpenCode Zen", "OPENCODE_API_KEY", "https://opencode.ai/auth"),
+    model("openai", "OpenAI", "OPENAI_API_KEY", "https://platform.openai.com/api-keys"),
+    model("google", "Google", "GEMINI_API_KEY", "https://aistudio.google.com/apikey"),
+    model("groq", "Groq", "GROQ_API_KEY", "https://console.groq.com/keys"),
+    model("mistral", "Mistral", "MISTRAL_API_KEY", "https://console.mistral.ai/api-keys"),
+    model("xai", "xAI", "XAI_API_KEY", "https://console.x.ai"),
+    model("together", "Together", "TOGETHER_API_KEY", "https://api.together.ai/settings/api-keys"),
+    model("fireworks", "Fireworks", "FIREWORKS_API_KEY", "https://fireworks.ai/account/api-keys"),
+    model("cerebras", "Cerebras", "CEREBRAS_API_KEY", "https://cloud.cerebras.ai"),
+    model("nvidia", "NVIDIA", "NVIDIA_API_KEY", "https://build.nvidia.com/settings/api-keys"),
+    model("huggingface", "Hugging Face", "HF_TOKEN", "https://huggingface.co/settings/tokens"),
+    model("vercel-ai-gateway", "Vercel AI Gateway", "AI_GATEWAY_API_KEY", "https://vercel.com/ai-gateway"),
+    model("moonshotai", "Moonshot AI", "MOONSHOT_API_KEY", "https://platform.moonshot.ai/console/api-keys"),
+    model("moonshotai-cn", "Moonshot AI CN", "MOONSHOT_API_KEY", "https://platform.moonshot.cn/console/api-keys"),
+    model("minimax", "MiniMax", "MINIMAX_API_KEY", "https://platform.minimax.io"),
+    model("minimax-cn", "MiniMax CN", "MINIMAX_CN_API_KEY", "https://platform.minimaxi.com"),
+    model("zai", "Z.AI", "ZAI_API_KEY", "https://z.ai/manage-apikey/apikey-list"),
+    model("zai-coding-cn", "Z.AI Coding CN", "ZAI_CODING_CN_API_KEY", "https://bigmodel.cn/usercenter/proj-mgmt/apikeys"),
+    model("qwen-token-plan", "Qwen Token Plan", "QWEN_TOKEN_PLAN_API_KEY", "https://modelstudio.console.alibabacloud.com"),
+    model("qwen-token-plan-cn", "Qwen Token Plan CN", "QWEN_TOKEN_PLAN_CN_API_KEY", "https://bailian.console.aliyun.com"),
+    model("qwen-token-plan-individual", "Qwen Token Plan Individual", "QWEN_TOKEN_PLAN_API_KEY", "https://modelstudio.console.alibabacloud.com"),
+    model("xiaomi", "Xiaomi MiMo", "XIAOMI_API_KEY", "https://platform.xiaomimimo.com"),
+    model("xiaomi-token-plan-cn", "Xiaomi Token Plan CN", "XIAOMI_TOKEN_PLAN_CN_API_KEY", "https://platform.xiaomimimo.com"),
+    model("xiaomi-token-plan-ams", "Xiaomi Token Plan AMS", "XIAOMI_TOKEN_PLAN_AMS_API_KEY", "https://platform.xiaomimimo.com"),
+    model("xiaomi-token-plan-sgp", "Xiaomi Token Plan SGP", "XIAOMI_TOKEN_PLAN_SGP_API_KEY", "https://platform.xiaomimimo.com"),
+    model("baseten", "Baseten", "BASETEN_API_KEY", "https://app.baseten.co/settings/api_keys"),
+    model("ant-ling", "Ant Ling", "ANT_LING_API_KEY", "https://ling.tbox.cn"),
+    model("kimi-coding", "Kimi For Coding", "KIMI_API_KEY", "https://www.kimi.com/code/console"),
+    model("meta", "Meta", "META_API_KEY", "https://llama.developer.meta.com")
+  ];
+  SEARCH_CREDENTIAL_PROVIDERS = [
+    {
+      id: "tavily",
+      kind: "search",
+      name: "Tavily",
+      envVar: "TAVILY_API_KEY",
+      signupUrl: "https://app.tavily.com",
+      keyless: true
+    }
+  ];
   CREDENTIAL_PROVIDERS = [
-    { id: "deepseek", envVar: "DEEPSEEK_API_KEY", signupUrl: "https://platform.deepseek.com/api_keys", keyless: false },
-    { id: "tavily", envVar: "TAVILY_API_KEY", signupUrl: "https://app.tavily.com", keyless: true }
+    ...MODEL_PROVIDERS,
+    ...SEARCH_CREDENTIAL_PROVIDERS
   ];
+  DEFAULT_ENABLED_PROVIDERS = ["deepseek"];
+  LOCKED_PROVIDERS = ["deepseek"];
 });
 
 // packages/core/src/credentials.ts
-import { chmod, mkdir as mkdir3, open, readFile as readFile3, rename as rename2, unlink } from "fs/promises";
+import { chmod, mkdir as mkdir3, open, readFile as readFile3, stat as stat2, unlink } from "fs/promises";
 import { homedir as homedir3 } from "os";
 import { dirname as dirname4, join as join4 } from "path";
 import { InMemoryCredentialStore } from "@earendil-works/pi-ai";
 
 class FileCredentialStore {
   path;
-  constructor(path = DEFAULT_CREDENTIALS_PATH) {
+  #renameDeps;
+  constructor(path = DEFAULT_CREDENTIALS_PATH, renameDeps = {}) {
     this.path = path;
+    this.#renameDeps = renameDeps;
   }
   async#read() {
     try {
@@ -744,6 +837,7 @@ class FileCredentialStore {
     await mkdir3(dirname4(this.path), { recursive: true, mode: 448 });
     const lockPath = `${this.path}.lock`;
     let lock;
+    let reclaimed = false;
     for (let attempt = 0;; attempt++) {
       try {
         lock = await open(lockPath, "wx", 384);
@@ -751,6 +845,16 @@ class FileCredentialStore {
       } catch (error) {
         if (error.code !== "EEXIST" || attempt >= 100)
           throw new Error("Credential storage is busy or unavailable.");
+        if (!reclaimed) {
+          const info = await stat2(lockPath).catch(() => {
+            return;
+          });
+          if (info && Date.now() - info.mtimeMs > STALE_LOCK_MS) {
+            reclaimed = true;
+            await unlink(lockPath).catch(() => {});
+            continue;
+          }
+        }
         await new Promise((resolve) => setTimeout(resolve, 25));
       }
     }
@@ -772,7 +876,7 @@ class FileCredentialStore {
       } finally {
         await file.close();
       }
-      await rename2(temporary, this.path);
+      await renameWithRetry(temporary, this.path, this.#renameDeps);
       return result;
     } catch (error) {
       if (callbackFailed)
@@ -798,8 +902,9 @@ class FileCredentialStore {
     });
   }
 }
-var DEFAULT_CREDENTIALS_PATH;
+var STALE_LOCK_MS = 30000, DEFAULT_CREDENTIALS_PATH;
 var init_credentials = __esm(() => {
+  init_rename_with_retry();
   init_credential_providers();
   DEFAULT_CREDENTIALS_PATH = join4(homedir3(), ".neko", "credentials.json");
 });
@@ -1521,7 +1626,7 @@ async function acquireSlot(tx, round, cwd) {
   slots.items.push({ taskId: round.taskId, parentId: round.parentId, cwd, coder: round.role === "coder" });
   return true;
 }
-function createSubagentExtension(prepare, discard) {
+function createSubagentExtension(prepare, discard, guard) {
   const finish = async (tx, input, status, report) => {
     const round = (await tx.doc(DelegationsDoc, input.parentId)).items.find((r) => r.taskId === input.taskId);
     round.status = status;
@@ -1665,6 +1770,8 @@ function createSubagentExtension(prepare, discard) {
           if (!args.task.trim() || !args.title.trim() || Buffer.byteLength(args.task) > 32768)
             throw new Error("Task/title must be nonempty; task limit is 32 KiB.");
           const agent = await api.agent(context);
+          if (agent.model)
+            await guard?.(agent.model);
           const round = await api.commit(async (tx) => {
             const rounds = await refreshDelegations(tx, api.conversationId);
             const receipt = rounds.find((r) => r.taskId === api.taskId);
@@ -2842,7 +2949,7 @@ var init_agent_file_search = __esm(() => {
               complete = false;
               continue;
             }
-            const lines = new TextDecoder("utf-8", { fatal: true }).decode(data).split(/\r?\n/);
+            const lines = new TextDecoder("utf-8", { fatal: true }).decode(data).replace(/^\uFEFF/, "").split(/\r?\n/);
             for (let i = 0;i < lines.length; i++) {
               ctx.abortSignal?.throwIfAborted();
               const value = lines[i];
@@ -3232,8 +3339,11 @@ class JobManager {
                 outcome = { status: "failed", exitCode: null, reason: "timeout" };
               else if (result.error.code === "aborted")
                 outcome = { status: "stopped", exitCode: null, reason: "aborted" };
-              else
+              else {
+                entry.buffer.append(`${result.error.message}
+`);
                 outcome = { status: "failed", exitCode: null, reason: "spawn-error" };
+              }
             }
             if (this.#closing) {
               await new Promise((resolve) => {
@@ -3641,10 +3751,13 @@ var init_invoke = __esm(() => {
 
 // packages/core/src/prompt/prompt.ts
 import { defineExtension as defineExtension5, section } from "@earendil-works/pi-durable";
-var KEYS, PREAMBLE = "You are an expert coding assistant operating inside neko, a coding agent harness. You help users by reading files, executing commands, editing code, and writing new files.", TOOL_GUIDELINES, GENERIC_RULES, buildRules = (toolNames) => {
+var KEYS, PREAMBLE = "You are an expert coding assistant operating inside neko, a coding agent harness. You help users by reading files, executing commands, editing code, and writing new files.", TOOL_GUIDELINES, GENERIC_RULES, WINDOWS_SHELL_RULE = "On Windows, commands run in Git Bash (not PowerShell, cmd or WSL); write paths with forward slashes, e.g. D:/code or /d/code.", toolRules = (name, platform) => {
+  const rules = TOOL_GUIDELINES[name] ?? [];
+  return platform === "win32" && (name === "bash" || name === "job") ? [...rules, WINDOWS_SHELL_RULE] : rules;
+}, buildRules = (toolNames, platform) => {
   const rules = [];
   const seen = new Set;
-  for (const rule of [...toolNames.flatMap((name) => TOOL_GUIDELINES[name] ?? []), ...GENERIC_RULES]) {
+  for (const rule of [...toolNames.flatMap((name) => toolRules(name, platform)), ...GENERIC_RULES]) {
     if (seen.has(rule))
       continue;
     seen.add(rule);
@@ -3659,7 +3772,7 @@ ${content}
 </project_instructions>`)
 ].join(`
 
-`), createNekoPrompt = (loadResources) => {
+`), createNekoPrompt = (loadResources, platform = process.platform) => {
   const built = new WeakMap;
   const build = async (input, context) => {
     const cwd = input.agent.cwd;
@@ -3667,7 +3780,7 @@ ${content}
     const resources = cwd ? await loadResources(input.conversationId, cwd) : { contextFiles: [], skills: [] };
     const sections = {
       preamble: role ? ROLE_PROMPTS[role] + SUBAGENT_DELIVERY : PREAMBLE,
-      rules: buildRules(input.agent.tools.map((tool) => tool.name)),
+      rules: buildRules(input.agent.tools.map((tool) => tool.name), platform),
       project_context: renderProjectContext(resources.contextFiles),
       skills: formatSkillsForPrompt(resources.skills) || undefined,
       cwd: cwd?.replace(/\\/g, "/")
@@ -3746,7 +3859,7 @@ var userAgentsFile = (home) => join6(home, ".agents", "AGENTS.md"), userSkillsDi
   const contextFiles = [];
   for (const path of [userAgentsFile(home), workspaceAgentsFile(workspace)]) {
     try {
-      const content = await readFile5(path, "utf8");
+      const content = (await readFile5(path, "utf8")).replace(/^\uFEFF/, "");
       if (Buffer.byteLength(content, "utf8") > 64 * 1024)
         report({
           path,
@@ -4250,7 +4363,7 @@ function mergeUsage(base, extra) {
     }
   return result;
 }
-function namingTask() {
+function namingTask(canUse) {
   let active = 0;
   const waits = new Set;
   return defineTask3({
@@ -4287,7 +4400,7 @@ function namingTask() {
         try {
           const saved = await runtime.snapshot(SessionMetadataDoc, runtime.conversationId, context);
           const model = saved?.model && runtime.models.getModel(saved.model.provider, saved.model.modelId);
-          if (!saved || !model || saved.attempts >= 2 || !getSupportedThinkingLevels(model).includes("off")) {
+          if (!saved || !model || saved.attempts >= 2 || !getSupportedThinkingLevels(model).includes("off") || !await canUse(model.provider, model.id)) {
             await runtime.commit(async (tx) => {
               (await tx.doc(SessionMetadataDoc, runtime.conversationId)).naming = "fallback";
               return { status: "terminal", outcome: { status: "completed", result: null } };
@@ -4367,12 +4480,13 @@ class SessionMetadataManager {
   #known = new Set;
   #unsubscribe;
   #live = new Map;
-  task = namingTask();
+  task;
   harness;
   storage;
   context;
   report;
-  constructor(harness, storage, context, registry, report = console.error) {
+  constructor(harness, storage, context, registry, report = console.error, canUseModel = async () => true) {
+    this.task = namingTask(canUseModel);
     this.harness = harness;
     this.storage = storage;
     this.context = context;
@@ -5215,11 +5329,153 @@ var init_tavily = __esm(() => {
   init_http();
 });
 
+// packages/core/src/windows-shell.ts
+import { spawnSync } from "child_process";
+import { statSync as statSync2 } from "fs";
+import { win32 } from "path";
+function isWslBashPath(path) {
+  const normalized = path.replace(/\//g, "\\").toLowerCase();
+  return /^[a-z]:\\windows\\(?:system32|sysnative)\\bash\.exe$/.test(normalized) || /\\microsoft\\windowsapps\\(?:[^\\]+\\)*bash\.exe$/.test(normalized);
+}
+function envValue(env, name) {
+  const wanted = name.toLowerCase();
+  for (const [key, value] of Object.entries(env))
+    if (key.toLowerCase() === wanted && value)
+      return value;
+  return;
+}
+function bashBesideGit(gitExe) {
+  const dir = win32.dirname(gitExe);
+  const parent = win32.dirname(dir);
+  const name = win32.basename(dir).toLowerCase();
+  if (name === "cmd")
+    return win32.join(parent, "bin", "bash.exe");
+  if (name === "bin") {
+    const root = win32.basename(parent).toLowerCase() === "mingw64" ? win32.dirname(parent) : parent;
+    return win32.join(root, "bin", "bash.exe");
+  }
+  return;
+}
+function configProblem(path, kind) {
+  if (isWslBashPath(path))
+    return "it is WSL's bash, which is not supported (commands must run in Git Bash)";
+  if (kind === "missing")
+    return "the file does not exist";
+  if (kind === "directory")
+    return "it is a directory, not bash.exe";
+  return;
+}
+function resolveWindowsShell(deps, configPath) {
+  if (configPath !== undefined && configPath !== "") {
+    const problem = configProblem(configPath, deps.kind(configPath));
+    if (problem !== undefined) {
+      return {
+        kind: "missing",
+        reason: "invalid_config",
+        detail: `shell.path "${configPath}" is invalid: ${problem}.`,
+        searched: [configPath]
+      };
+    }
+    return { kind: "found", path: configPath, source: "config" };
+  }
+  const searched = [];
+  const check = (path) => {
+    if (!searched.includes(path))
+      searched.push(path);
+    return !isWslBashPath(path) && deps.kind(path) === "file";
+  };
+  const roots = [
+    envValue(deps.env, "ProgramFiles"),
+    envValue(deps.env, "ProgramFiles(x86)"),
+    (() => {
+      const local = envValue(deps.env, "LOCALAPPDATA");
+      return local === undefined ? undefined : win32.join(local, "Programs");
+    })()
+  ];
+  for (const root of roots) {
+    if (root === undefined)
+      continue;
+    const candidate = win32.join(root, "Git", "bin", "bash.exe");
+    if (check(candidate))
+      return { kind: "found", path: candidate, source: "auto" };
+  }
+  for (const gitExe of deps.where("git.exe")) {
+    const candidate = bashBesideGit(gitExe);
+    if (candidate !== undefined && check(candidate))
+      return { kind: "found", path: candidate, source: "auto" };
+  }
+  for (const candidate of deps.where("bash.exe")) {
+    if (check(candidate))
+      return { kind: "found", path: candidate, source: "auto" };
+  }
+  return { kind: "missing", reason: "not_found", detail: "No Git Bash was found.", searched };
+}
+function summarizeWindowsShell(status) {
+  return status.kind === "found" ? { status: "ready", path: status.path, source: status.source } : { status: "missing", reason: status.reason, detail: status.detail };
+}
+function windowsShellMessage(status) {
+  const lines = status.reason === "invalid_config" ? [
+    `Cannot run shell commands: ${status.detail}`,
+    "Fix shell.path in neko.config.json, or remove it to auto-detect Git Bash."
+  ] : [
+    "Cannot run shell commands: Git Bash was not found. neko runs commands in Git for Windows' bash, not PowerShell, cmd or WSL.",
+    "Install Git for Windows (https://git-scm.com/download/win), or set shell.path in neko.config.json to its bash.exe."
+  ];
+  if (status.searched.length > 0)
+    lines.push("Checked:", ...status.searched.map((path) => `  ${path}`));
+  lines.push("File tools (read, write, edit) still work.");
+  return lines.join(`
+`);
+}
+function systemWindowsShellDeps() {
+  return {
+    env: process.env,
+    kind(path) {
+      try {
+        return statSync2(path).isDirectory() ? "directory" : "file";
+      } catch {
+        return "missing";
+      }
+    },
+    where(program) {
+      const result = spawnSync("where", [program], { encoding: "utf8", timeout: 5000, windowsHide: true });
+      if (result.status !== 0 || typeof result.stdout !== "string")
+        return [];
+      return result.stdout.split(/\r?\n/).map((line) => line.trim()).filter((line) => line !== "");
+    }
+  };
+}
+function createWindowsShellResolver(options) {
+  const deps = options?.deps ?? systemWindowsShellDeps();
+  const now = options?.now ?? Date.now;
+  let cached;
+  return {
+    status(call) {
+      if (cached !== undefined && call?.refresh !== true) {
+        if (cached.status.kind === "found") {
+          if (deps.kind(cached.status.path) === "file")
+            return cached.status;
+        } else if (now() - cached.at < WINDOWS_SHELL_RETRY_MS) {
+          return cached.status;
+        }
+      }
+      cached = { status: resolveWindowsShell(deps, options?.configPath), at: now() };
+      return cached.status;
+    }
+  };
+}
+var WINDOWS_SHELL_RETRY_MS = 30000;
+var init_windows_shell = () => {};
+
 // packages/core/src/workspace-files.ts
-import { open as open2, realpath as realpath3, stat as stat2 } from "fs/promises";
+import { open as open2, realpath as realpath3, stat as stat3 } from "fs/promises";
 import { basename as basename3, isAbsolute as isAbsolute3, relative as relative2, resolve as resolve4, sep as sep2 } from "path";
 import { BACKGROUND_CONTEXT as BACKGROUND_CONTEXT2, withAbortSignal as withAbortSignal3 } from "@earendil-works/chord/context";
-import { getOrThrow as getOrThrow2 } from "@earendil-works/pi-durable/env";
+import {
+  ExecutionError,
+  err,
+  getOrThrow as getOrThrow2
+} from "@earendil-works/pi-durable/env";
 import { Connection, LocalExecutionEnv, localDaemon } from "@earendil-works/pi-env";
 function isProtectedPath(path) {
   const name = basename3(path).toLowerCase();
@@ -5257,8 +5513,10 @@ class WorkspaceFiles {
   #waiting = new Set;
   #timer;
   limits;
-  constructor(limits = FILE_CACHE_LIMITS) {
+  #shell;
+  constructor(limits = FILE_CACHE_LIMITS, shell) {
     this.limits = limits;
+    this.#shell = shell;
     this.#timer = setInterval(() => {
       for (const [key, item] of this.#cache)
         if (!item.waiters && Date.now() - item.used >= this.limits.idleMs)
@@ -5277,20 +5535,31 @@ class WorkspaceFiles {
       queued: this.#waiting.size
     };
   }
-  env(cwd) {
+  shellStatus(options) {
+    return this.#shell?.status(options);
+  }
+  #open() {
     if (this.#closed)
       throw new Error("File environment closed");
     this.#connection ??= new Connection({ command: [localDaemon()] });
-    return new LocalExecutionEnv({
-      connection: this.#connection,
+    return this.#connection;
+  }
+  env(cwd) {
+    const options = {
+      connection: this.#open(),
       cwd,
       ...process.platform === "win32" ? { shellEnv: { PYTHONIOENCODING: "utf-8", PYTHONUTF8: "1" } } : {}
-    });
+    };
+    const shell = this.#shell?.status();
+    if (shell === undefined)
+      return new LocalExecutionEnv(options);
+    if (shell.kind === "found")
+      return new LocalExecutionEnv({ ...options, shellPath: shell.path });
+    return new ShellUnavailableEnv(options, windowsShellMessage(shell));
   }
   async#ready() {
     if (!this.#starting) {
-      this.env(process.cwd());
-      const connection = this.#connection;
+      const connection = this.#open();
       let timer;
       const work = Promise.race([
         connection.info().then(() => connection.session()),
@@ -5367,7 +5636,7 @@ class WorkspaceFiles {
           { path: item.root, recursive: true, exclude: { names: [".git"] } }
         ];
         const git = resolve4(item.root, ".git");
-        if (await stat2(git).then(() => true, () => false))
+        if (await stat3(git).then(() => true, () => false))
           targets.push({ path: git, recursive: true, exclude: { names: ["objects", "logs", "refs"] } });
         const result = await env.watch(targets, (change) => {
           for (const user of current.users) {
@@ -5475,7 +5744,7 @@ class WorkspaceFiles {
     const slash = query.lastIndexOf("/"), prefix = slash < 0 ? "" : query.slice(0, slash + 1), needle = query.slice(slash + 1);
     root = await realpath3(root);
     const base = await workspaceTarget(root, prefix);
-    if (!(await stat2(base)).isDirectory())
+    if (!(await stat3(base)).isDirectory())
       throw new Error("Workspace directory is unavailable.");
     return this.#withListing(root, base, signal, async (listing) => {
       const pattern = new RegExp([...needle].map((c) => c.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join(".*"), /[A-Z]/.test(needle) ? "" : "i");
@@ -5505,7 +5774,7 @@ class WorkspaceFiles {
     const clean = dir === "" ? "" : relativeQuery(dir).replace(/\/+$/, "");
     root = await realpath3(root);
     const target = await workspaceTarget(root, clean);
-    if (!(await stat2(target)).isDirectory())
+    if (!(await stat3(target)).isDirectory())
       throw new Error("Not a directory.");
     const prefix = clean === "" ? "" : `${clean}/`;
     return this.#withListing(root, root, signal, async (listing) => {
@@ -5547,7 +5816,7 @@ class WorkspaceFiles {
         throw new Error("File not found.");
       throw error;
     }
-    const info = await stat2(target);
+    const info = await stat3(target);
     if (!info.isFile())
       throw new Error("Not a file.");
     const base = { path: clean, size: info.size, mtimeMs: info.mtimeMs };
@@ -5650,8 +5919,9 @@ function cancellable(work, signal) {
       abort();
   });
 }
-var BROWSE_LIMITS, ENV_TEMPLATE, FILE_CACHE_LIMITS;
+var BROWSE_LIMITS, ENV_TEMPLATE, FILE_CACHE_LIMITS, ShellUnavailableEnv;
 var init_workspace_files = __esm(() => {
+  init_windows_shell();
   BROWSE_LIMITS = { children: 1000, readBytes: 512 * 1024 };
   ENV_TEMPLATE = /\.(example|sample|template)$/;
   FILE_CACHE_LIMITS = {
@@ -5666,6 +5936,18 @@ var init_workspace_files = __esm(() => {
     idleMs: 300000,
     concurrent: 2
   };
+  ShellUnavailableEnv = class ShellUnavailableEnv extends LocalExecutionEnv {
+    #message;
+    constructor(options, message) {
+      super(options);
+      this.#message = message;
+    }
+    async exec(command, options, context) {
+      if (typeof command === "string")
+        return err(new ExecutionError("shell_unavailable", this.#message));
+      return super.exec(command, options, context);
+    }
+  };
 });
 
 // packages/core/src/runtime.ts
@@ -5673,7 +5955,7 @@ import { homedir as homedir5 } from "os";
 import { join as join7 } from "path";
 import { BACKGROUND_CONTEXT as BACKGROUND_CONTEXT3 } from "@earendil-works/chord/context";
 import { clampThinkingLevel, createModels, getSupportedThinkingLevels as getSupportedThinkingLevels2 } from "@earendil-works/pi-ai/models";
-import { deepseekProvider } from "@earendil-works/pi-ai/providers/deepseek";
+import { builtinProviders } from "@earendil-works/pi-ai/providers/all";
 import {
   AssistantEntry as AssistantEntry2,
   createRegistry,
@@ -5692,6 +5974,7 @@ async function createNekoRuntime(options = {}) {
   const context = options.context ?? BACKGROUND_CONTEXT3;
   const defaultCwd = normalizeWorkspace(options.cwd);
   const model = options.model ?? DEFAULT_MODEL;
+  const modelOverride = options.modelOverride;
   const providers = options.providers ?? [];
   const credentials = options.credentials ?? (options.storage === "memory" && !options.credentialsPath ? new InMemoryCredentialStore : new FileCredentialStore(options.credentialsPath));
   const runtimeKeys = new Map;
@@ -5711,16 +5994,47 @@ async function createNekoRuntime(options = {}) {
     delete: (id) => credentials.delete(id)
   } : credentials;
   const models = createModels({ credentials: effectiveCredentials });
-  models.setProvider(deepseekProvider());
+  for (const provider of builtinProviders())
+    if (isModelProvider(provider.id))
+      models.setProvider(provider);
   for (const provider of providers)
     models.setProvider(provider);
+  let enabled = new Set(normalizeEnabledProviders(null));
+  const guardProvider = async (ref) => {
+    if (!ref || !isModelProvider(ref.provider))
+      return;
+    const spec = credentialProvider(ref.provider);
+    if (!enabled.has(ref.provider))
+      throw new Error(`PROVIDER_DISABLED: ${spec.name} is not enabled. Enable it in /login or Web settings, or switch model.`);
+    if (!await models.checkAuth(ref.provider))
+      throw new Error(`PROVIDER_KEY_REQUIRED: Configure a ${spec.name} API key in /login or Web settings.`);
+  };
   const resolveLevel = (ref, level) => {
     const info = models.getModel(ref.provider, ref.modelId);
     if (!info)
       throw new Error("Unknown model");
     return clampThinkingLevel(info, level);
   };
-  const workspaceFiles = new WorkspaceFiles;
+  let modelInfoCache;
+  const allModels = () => {
+    modelInfoCache ??= models.getModels().map((model) => ({
+      provider: model.provider,
+      modelId: model.id,
+      name: model.name,
+      contextWindow: model.contextWindow,
+      input: model.input,
+      ...model.inputLimits ? { inputLimits: model.inputLimits } : {},
+      reasoning: model.reasoning,
+      supportedThinkingLevels: getSupportedThinkingLevels2(model),
+      thinkingLevelAdjustments: Object.fromEntries(["off", "minimal", "low", "medium", "high", "xhigh", "max"].map((level) => [
+        level,
+        clampThinkingLevel(model, level)
+      ]))
+    }));
+    return modelInfoCache;
+  };
+  const shellResolver = options.shellResolver ?? (process.platform === "win32" ? createWindowsShellResolver({ configPath: options.shellPath }) : undefined);
+  const workspaceFiles = new WorkspaceFiles(undefined, shellResolver);
   const storage = options.storage === "memory" ? new MemoryStorage : await openNodeSqliteStorage(options.storagePath ?? DEFAULT_STORAGE_PATH);
   const registry = createRegistry();
   registry.install(createCodingTools({ images: await createNodePhotonImages() }));
@@ -5746,7 +6060,7 @@ async function createNekoRuntime(options = {}) {
   registry.install(createNekoPrompt(resourceSnapshots.current));
   registry.install(createSubagentExtension(async (id, requestId, cwd) => {
     resourceSnapshots.stage(id, requestId, cwd, await loadResources(cwd));
-  }, resourceSnapshots.discard));
+  }, resourceSnapshots.discard, (ref) => guardProvider(ref)));
   const jobs = new JobManager;
   registry.install(jobs.extension);
   registry.install(createTodoExtension());
@@ -5764,7 +6078,7 @@ async function createNekoRuntime(options = {}) {
     registry,
     settings: {
       get compaction() {
-        return compactionPolicy(contextState, models.getModels().map((model) => model.contextWindow));
+        return compactionPolicy(contextState, allModels().filter((model) => !isModelProvider(model.provider) || enabled.has(model.provider)).map((model) => model.contextWindow));
       }
     },
     onReport: options.onReport,
@@ -5806,13 +6120,15 @@ async function createNekoRuntime(options = {}) {
     throw error;
   }
   await questions.reconcileAll();
+  const rootModel = modelOverride ?? model;
   const conversation = await harness.root(context, {
     agent: {
-      model,
-      thinkingLevel: resolveLevel(model, options.thinkingLevel ?? "high"),
+      model: rootModel,
+      thinkingLevel: resolveLevel(rootModel, options.thinkingLevel ?? "high"),
       cwd: defaultCwd
     }
   });
+  enabled = new Set(normalizeEnabledProviders((await harness.snapshot(ProviderSettingsDoc, conversation.id, context))?.enabled));
   const savedSearch = (await harness.snapshot(SearchSettingsDoc, conversation.id, context))?.provider;
   if (isSearchProvider(savedSearch))
     searchProvider = savedSearch;
@@ -5858,7 +6174,7 @@ async function createNekoRuntime(options = {}) {
   };
   if (existing.length === 0)
     await touchConversation(conversation.id);
-  const metadata = new SessionMetadataManager(harness, storage, context, registry, options.onReport);
+  const metadata = new SessionMetadataManager(harness, storage, context, registry, options.onReport, (provider, modelId) => guardProvider({ provider, modelId }).then(() => true, () => false));
   if (existing.length === 0)
     await metadata.initialize(conversation.id);
   for (const record of existing)
@@ -5919,9 +6235,8 @@ async function createNekoRuntime(options = {}) {
         data.skill = skill;
       });
     }
-    if (!duplicate && agent.model?.provider === "deepseek" && !await models.checkAuth("deepseek")) {
-      throw new Error("DEEPSEEK_KEY_REQUIRED: Configure a DeepSeek API key in /login or Web settings.");
-    }
+    if (!duplicate)
+      await guardProvider(agent.model);
     if (!duplicate && agent.model) {
       const resolved = models.getModel(agent.model.provider, agent.model.modelId);
       if (resolved)
@@ -6053,8 +6368,7 @@ async function createNekoRuntime(options = {}) {
     },
     async compact(instructions) {
       const agent = await target.agent(context);
-      if (agent.model?.provider === "deepseek" && !await models.checkAuth("deepseek"))
-        throw new Error("DEEPSEEK_KEY_REQUIRED: Configure DeepSeek in /login or Web settings.");
+      await guardProvider(agent.model);
       await admit(target.id, async () => {
         const live = await harness.snapshot(importLiveDoc, target.id, context);
         if (live?.compactions?.length || (await readCompaction(harness, storage, target.id, context))?.phase === "waiting-to-apply")
@@ -6230,6 +6544,10 @@ async function createNekoRuntime(options = {}) {
     questions,
     closed: harness.closed,
     workspaceFiles,
+    shellStatus(call) {
+      const status = workspaceFiles.shellStatus(call);
+      return status === undefined ? undefined : summarizeWindowsShell(status);
+    },
     conversation,
     root: rootSession,
     submit: rootSession.submit,
@@ -6280,11 +6598,13 @@ async function createNekoRuntime(options = {}) {
     },
     async createConversation(createOptions) {
       const workspace = await addWorkspace(createOptions?.cwd ?? defaultCwd);
+      const savedDefault = (await harness.snapshot(DefaultModelDoc, conversation.id, context))?.model ?? null;
+      const effective = createOptions?.model ?? modelOverride ?? savedDefault ?? model;
       const created = await harness.createConversation({
         ownership: { kind: "ownerless" },
         agent: {
-          model: createOptions?.model ?? model,
-          thinkingLevel: resolveLevel(createOptions?.model ?? model, createOptions?.thinkingLevel ?? options.thinkingLevel ?? "high"),
+          model: effective,
+          thinkingLevel: resolveLevel(effective, createOptions?.thinkingLevel ?? options.thinkingLevel ?? "high"),
           cwd: workspace.path
         }
       }, context);
@@ -6314,6 +6634,8 @@ async function createNekoRuntime(options = {}) {
         const targetModel = ref && models.getModel(ref.provider, ref.modelId);
         if (!targetModel)
           throw new Error("Unknown model");
+        if (change.model && isModelProvider(ref.provider) && !enabled.has(ref.provider))
+          throw new Error(`PROVIDER_DISABLED: ${credentialProvider(ref.provider).name} is not enabled.`);
         await session.conversation.configure({ model: ref, thinkingLevel: clampThinkingLevel(targetModel, change.thinkingLevel ?? current.thinkingLevel) }, context);
         return true;
       });
@@ -6368,20 +6690,62 @@ async function createNekoRuntime(options = {}) {
       }
     },
     listModels() {
-      return models.getModels().map((model) => ({
-        provider: model.provider,
-        modelId: model.id,
-        name: model.name,
-        contextWindow: model.contextWindow,
-        input: model.input,
-        ...model.inputLimits ? { inputLimits: model.inputLimits } : {},
-        reasoning: model.reasoning,
-        supportedThinkingLevels: getSupportedThinkingLevels2(model),
-        thinkingLevelAdjustments: Object.fromEntries(["off", "minimal", "low", "medium", "high", "xhigh", "max"].map((level) => [
-          level,
-          clampThinkingLevel(model, level)
-        ]))
-      }));
+      return allModels();
+    },
+    async listSelectableModels() {
+      const availability = new Map;
+      const result = [];
+      for (const info of allModels()) {
+        const managed = isModelProvider(info.provider);
+        if (managed && !enabled.has(info.provider))
+          continue;
+        if (!availability.has(info.provider))
+          availability.set(info.provider, !managed || Boolean(await models.checkAuth(info.provider)));
+        result.push({ ...info, available: availability.get(info.provider) ?? false });
+      }
+      return result;
+    },
+    enabledProviders() {
+      return MODEL_PROVIDERS.map((item) => item.id).filter((id) => enabled.has(id));
+    },
+    async setProviderEnabled(provider, value) {
+      if (!isModelProvider(provider))
+        throw new Error("Unknown model provider.");
+      if (typeof value !== "boolean")
+        throw new Error("Enabled must be a boolean.");
+      if (!value && LOCKED_PROVIDERS.includes(provider))
+        throw new Error("DeepSeek is always enabled.");
+      const next = new Set(enabled);
+      if (value)
+        next.add(provider);
+      else
+        next.delete(provider);
+      const list = normalizeEnabledProviders([...next]);
+      await harness.commit(async (tx) => {
+        (await tx.doc(ProviderSettingsDoc, conversation.id)).enabled = list;
+      }, context);
+      enabled = new Set(list);
+    },
+    async defaultModel() {
+      const saved = (await harness.snapshot(DefaultModelDoc, conversation.id, context))?.model ?? null;
+      if (modelOverride)
+        return { effective: modelOverride, source: "cli" };
+      if (saved)
+        return { effective: saved, source: "saved" };
+      if (options.model)
+        return { effective: model, source: "config" };
+      return { effective: model, source: "default" };
+    },
+    async setDefaultModel(ref) {
+      if (ref !== null) {
+        if (!models.getModel(ref.provider, ref.modelId))
+          throw new Error("Unknown model");
+        if (isModelProvider(ref.provider) && !enabled.has(ref.provider))
+          throw new Error(`PROVIDER_DISABLED: ${credentialProvider(ref.provider).name} is not enabled.`);
+      }
+      await harness.commit(async (tx) => {
+        (await tx.doc(DefaultModelDoc, conversation.id)).model = ref;
+      }, context);
     },
     async getAgent(id) {
       const session = await sessionFor(id);
@@ -6422,7 +6786,7 @@ async function createNekoRuntime(options = {}) {
     }
   };
 }
-var DEFAULT_MODEL, DEFAULT_STORAGE_PATH, neverAborted = () => new AbortController().signal, ArchivedDoc, WorkspacesDoc, SearchSettingsDoc, ContextSettingsDoc, ActivityDoc;
+var DEFAULT_MODEL, DEFAULT_STORAGE_PATH, neverAborted = () => new AbortController().signal, ArchivedDoc, WorkspacesDoc, SearchSettingsDoc, ProviderSettingsDoc, DefaultModelDoc, ContextSettingsDoc, ActivityDoc;
 var init_runtime = __esm(() => {
   init_agent_file_search();
   init_compaction();
@@ -6451,6 +6815,7 @@ var init_runtime = __esm(() => {
   init_deepseek();
   init_web_search();
   init_tavily();
+  init_windows_shell();
   init_workspace();
   init_workspace_files();
   DEFAULT_MODEL = { provider: "deepseek", modelId: "deepseek-flash" };
@@ -6479,6 +6844,22 @@ var init_runtime = __esm(() => {
     fork: "initial",
     initial: () => ({ provider: null })
   });
+  ProviderSettingsDoc = defineDoc7({
+    kind: "app.neko.provider-settings",
+    version: 1,
+    scope: "conversation",
+    history: "latest",
+    fork: "initial",
+    initial: () => ({ enabled: null })
+  });
+  DefaultModelDoc = defineDoc7({
+    kind: "app.neko.default-model",
+    version: 1,
+    scope: "conversation",
+    history: "latest",
+    fork: "initial",
+    initial: () => ({ model: null })
+  });
   ContextSettingsDoc = defineDoc7({
     kind: "app.neko.context-settings",
     version: 1,
@@ -6521,6 +6902,7 @@ var init_src = __esm(() => {
   init_projection();
   init_frontmatter();
   init_queued();
+  init_rename_with_retry();
   init_runtime();
   init_search_providers();
   init_session_metadata();
@@ -6529,6 +6911,7 @@ var init_src = __esm(() => {
   init_todos();
   init_tool_approvals();
   init_user_questions();
+  init_windows_shell();
   init_workspace();
   init_workspace_files();
 });
@@ -6654,7 +7037,7 @@ function contract(name, def) {
   ]));
   return remote(name, { ...def, host: hostNamed(GATEWAY_HOST), variants });
 }
-var GATEWAY_HOST = "neko", rpc = (args, result) => [args, result], str, num, bool, nil, integer, nullableString, phase, level, thinking, model, change, usage, image, skill, call, DelegationSchema, SubagentSummarySchema, jobStatus, JobSummarySchema, JobOutputSchema, QueuedInputSchema, WithdrawResultSchema, SteerResultSchema, TodoItemSchema, TodoListSchema, QuestionOptionSchema, questionStatus, QuestionSummarySchema, WorkspaceEntrySchema, WorkspaceDirSchema, WorkspaceFileSchema, ChangeSummarySchema, ChangedFileSchema, ChangeListSchema, ChangeOpSchema, ChangeDetailSchema, QuestionListSchema, QuestionRecordSchema, QuestionResponseSchema, ToolInteractionSchema, ChatViewSchema, SessionSummarySchema, DirectoryStateSchema, WorkspaceSummarySchema, WorkspaceStateSchema, credentialStatus, CredentialStateSchema, AttachmentSchema, chatInput, NekoSessionDirectory, NekoSessionManagement, resize, inputLimits, modelInfo, NekoModels, imageChunk, NekoSubagent, NekoChat, browse, page, NekoWorkspaces, provider, NekoCredentials, SearchSettingsStateSchema, NekoSearchSettings, contextSource, ContextSettingsStateSchema, nullable = (schema) => Type7.Union([schema, nil]), ContextSettingsPatchSchema, NekoContextSettings, FileCandidatesSchema, NekoWorkspaceFiles, marketSkill, preview, scope, installResult, NekoSkillMarket, ApplicationInfoSchema, NekoApplicationInfo;
+var GATEWAY_HOST = "neko", rpc = (args, result) => [args, result], str, num, bool, nil, integer, nullableString, phase, level, thinking, model2, change, usage, image, skill, call, DelegationSchema, SubagentSummarySchema, jobStatus, JobSummarySchema, JobOutputSchema, QueuedInputSchema, WithdrawResultSchema, SteerResultSchema, TodoItemSchema, TodoListSchema, QuestionOptionSchema, questionStatus, QuestionSummarySchema, WorkspaceEntrySchema, WorkspaceDirSchema, WorkspaceFileSchema, ChangeSummarySchema, ChangedFileSchema, ChangeListSchema, ChangeOpSchema, ChangeDetailSchema, QuestionListSchema, QuestionRecordSchema, QuestionResponseSchema, ToolInteractionSchema, ChatViewSchema, SessionSummarySchema, DirectoryStateSchema, WorkspaceSummarySchema, WorkspaceStateSchema, credentialStatus, CredentialStateSchema, AttachmentSchema, chatInput, NekoSessionDirectory, NekoSessionManagement, resize, inputLimits, modelInfo, NekoModels, imageChunk, NekoSubagent, NekoChat, browse, page, NekoWorkspaces, provider, NekoCredentials, SearchSettingsStateSchema, NekoSearchSettings, contextSource, ContextSettingsStateSchema, nullable = (schema) => Type7.Union([schema, nil]), ContextSettingsPatchSchema, NekoContextSettings, defaultModelSource, DefaultModelStateSchema, NekoDefaultModel, FileCandidatesSchema, NekoWorkspaceFiles, marketSkill, preview, scope, installResult, NekoSkillMarket, ShellStatusSchema, ApplicationInfoSchema, NekoApplicationInfo;
 var init_contract = __esm(() => {
   init_interactions();
   str = Type7.String();
@@ -6666,8 +7049,8 @@ var init_contract = __esm(() => {
   phase = Type7.Enum(["pending", "running", "done"]);
   level = Type7.Enum(["project", "user", "builtin"]);
   thinking = Type7.Enum(["off", "minimal", "low", "medium", "high", "xhigh", "max"]);
-  model = Type7.Object({ provider: str, modelId: str });
-  change = Type7.Object({ model: Type7.Optional(model), thinkingLevel: Type7.Optional(thinking) }, { additionalProperties: false });
+  model2 = Type7.Object({ provider: str, modelId: str });
+  change = Type7.Object({ model: Type7.Optional(model2), thinkingLevel: Type7.Optional(thinking) }, { additionalProperties: false });
   usage = Type7.Object({ input: num, output: num, cacheRead: num, cacheWrite: num, cost: num });
   image = Type7.Object({
     name: str,
@@ -6905,7 +7288,7 @@ var init_contract = __esm(() => {
     subagents: Type7.Optional(Type7.Array(DelegationSchema)),
     taskUsage: Type7.Optional(usage),
     model: str,
-    agent: Type7.Object({ model: Type7.Union([model, nil]), thinkingLevel: Type7.Union([thinking, nil]) }),
+    agent: Type7.Object({ model: Type7.Union([model2, nil]), thinkingLevel: Type7.Union([thinking, nil]) }),
     cwd: str,
     busy: bool,
     status: nullableString,
@@ -6990,7 +7373,7 @@ var init_contract = __esm(() => {
     firstPromptPreview: str,
     createdAt: num,
     lastMessageAt: Type7.Union([num, nil]),
-    model: Type7.Union([model, nil]),
+    model: Type7.Union([model2, nil]),
     status: Type7.Enum(["idle", "running", "error"]),
     awaitingAnswer: Type7.Optional(bool),
     id: str
@@ -7001,11 +7384,12 @@ var init_contract = __esm(() => {
   credentialStatus = Type7.Object({
     savedConfigured: bool,
     environmentConfigured: bool,
-    source: Type7.Enum(["saved", "environment", "runtime", "keyless", "none"])
+    source: Type7.Enum(["saved", "environment", "runtime", "keyless", "none"]),
+    enabled: Type7.Optional(bool)
   });
   CredentialStateSchema = Type7.Object({
     revision: integer,
-    statuses: Type7.Object({ deepseek: credentialStatus, tavily: credentialStatus })
+    statuses: Type7.Record(str, credentialStatus)
   });
   AttachmentSchema = Type7.Object({ sessionId: str, attachmentId: str });
   chatInput = Type7.Object({ sessionId: str, attachmentId: str }, { additionalProperties: false });
@@ -7047,6 +7431,7 @@ var init_contract = __esm(() => {
     provider: str,
     modelId: str,
     name: str,
+    available: bool,
     contextWindow: num,
     input: Type7.Array(str),
     inputLimits: Type7.Optional(inputLimits),
@@ -7152,16 +7537,17 @@ var init_contract = __esm(() => {
       }
     }
   });
-  provider = Type7.Enum(["deepseek", "tavily"]);
+  provider = Type7.String({ minLength: 1, maxLength: 64 });
   NekoCredentials = contract("neko.credentials", {
-    version: 1,
+    version: 2,
     input: Type7.Object({}, { additionalProperties: false }),
     variants: {
       ready: {
         state: { state: CredentialStateSchema },
         methods: {
           save: rpc(Type7.Object({ provider, key: Type7.String({ minLength: 1, maxLength: 8192 }) }, { additionalProperties: false }), nil),
-          remove: rpc(Type7.Object({ provider }, { additionalProperties: false }), nil)
+          remove: rpc(Type7.Object({ provider }, { additionalProperties: false }), nil),
+          setEnabled: rpc(Type7.Object({ provider, enabled: bool }, { additionalProperties: false }), nil)
         }
       }
     }
@@ -7237,6 +7623,24 @@ var init_contract = __esm(() => {
       }
     }
   });
+  defaultModelSource = Type7.Enum(["cli", "saved", "config", "default"]);
+  DefaultModelStateSchema = Type7.Object({
+    effective: model2,
+    source: defaultModelSource
+  });
+  NekoDefaultModel = contract("neko.default-model", {
+    version: 1,
+    input: Type7.Object({}, { additionalProperties: false }),
+    variants: {
+      ready: {
+        state: { state: DefaultModelStateSchema },
+        methods: {
+          set: rpc(model2, nil),
+          clear: rpc(nil, nil)
+        }
+      }
+    }
+  });
   FileCandidatesSchema = Type7.Object({
     entries: Type7.Array(Type7.Object({ name: str, path: str, kind: Type7.Enum(["file", "directory"]) }), { maxItems: 100 }),
     limited: bool,
@@ -7284,6 +7688,14 @@ var init_contract = __esm(() => {
       }
     }
   });
+  ShellStatusSchema = Type7.Union([
+    Type7.Object({ status: Type7.Literal("ready"), path: str, source: Type7.Enum(["config", "auto"]) }),
+    Type7.Object({
+      status: Type7.Literal("missing"),
+      reason: Type7.Enum(["not_found", "invalid_config"]),
+      detail: Type7.Optional(str)
+    })
+  ]);
   ApplicationInfoSchema = Type7.Object({
     runningVersion: str,
     installedVersion: nullableString,
@@ -7291,7 +7703,8 @@ var init_contract = __esm(() => {
     latestVersion: nullableString,
     checkedAt: Type7.Union([integer, nil]),
     checkState: Type7.Enum(["unknown", "checking", "ok", "failed", "development"]),
-    serverId: str
+    serverId: str,
+    shell: Type7.Optional(ShellStatusSchema)
   });
   NekoApplicationInfo = contract("neko.application-info", {
     version: 1,
@@ -7672,8 +8085,8 @@ function createGatewayConnection(link, serverId) {
   let business;
   let protocolChecked = false;
   function bindBusiness() {
-    const directory = get(NekoSessionDirectory), management = get(NekoSessionManagement), models = get(NekoModels), workspaces = get(NekoWorkspaces), workspaceFiles = get(NekoWorkspaceFiles), credentials = get(NekoCredentials), searchSettings = get(NekoSearchSettings), contextSettings = get(NekoContextSettings), skillMarket = get(NekoSkillMarket);
-    keep.push(directory.state.subscribe(() => {}), workspaces.state.subscribe(() => {}), credentials.state.subscribe(() => {}), searchSettings.state.subscribe(() => {}), contextSettings.state.subscribe(() => {}));
+    const directory = get(NekoSessionDirectory), management = get(NekoSessionManagement), models = get(NekoModels), workspaces = get(NekoWorkspaces), workspaceFiles = get(NekoWorkspaceFiles), credentials = get(NekoCredentials), searchSettings = get(NekoSearchSettings), contextSettings = get(NekoContextSettings), defaultModel = get(NekoDefaultModel), skillMarket = get(NekoSkillMarket);
+    keep.push(directory.state.subscribe(() => {}), workspaces.state.subscribe(() => {}), credentials.state.subscribe(() => {}), searchSettings.state.subscribe(() => {}), contextSettings.state.subscribe(() => {}), defaultModel.state.subscribe(() => {}));
     return {
       directory,
       management,
@@ -7683,6 +8096,7 @@ function createGatewayConnection(link, serverId) {
       credentials,
       searchSettings,
       contextSettings,
+      defaultModel,
       skillMarket
     };
   }
@@ -7709,6 +8123,7 @@ function createGatewayConnection(link, serverId) {
       credentials,
       searchSettings,
       contextSettings,
+      defaultModel,
       workspaceFiles,
       skillMarket
     } = services();
@@ -7720,6 +8135,7 @@ function createGatewayConnection(link, serverId) {
       credentials.ready,
       searchSettings.ready,
       contextSettings.ready,
+      defaultModel.ready,
       workspaceFiles.ready,
       skillMarket.ready
     ]), signal);
@@ -7763,6 +8179,9 @@ function createGatewayConnection(link, serverId) {
     get contextSettings() {
       return services().contextSettings;
     },
+    get defaultModel() {
+      return services().defaultModel;
+    },
     get skillMarket() {
       return services().skillMarket;
     },
@@ -20022,6 +20441,10 @@ function formatTokens(tokens) {
     return `${(tokens / 1000).toFixed(1)}k`;
   return String(tokens);
 }
+function modelDisplayName(model) {
+  const slash = model.indexOf("/");
+  return slash < 0 || slash === model.length - 1 ? model : model.slice(slash + 1);
+}
 
 // packages/tui/src/labels.ts
 var commands, labels;
@@ -20036,13 +20459,13 @@ var init_labels = __esm(() => {
     { name: "exit", description: "Exit neko TUI" },
     { name: "new", description: "Create a new session" },
     { name: "sessions", description: "Switch or create a session" },
-    { name: "login", description: "Configure DeepSeek API key" },
+    { name: "login", description: "Manage model providers and API keys" },
     { name: "model", description: "Choose a model" },
     { name: "agents", description: "View agent tasks and activity" },
     { name: "jobs", description: "View background jobs" },
     { name: "todos", description: "View the assistant's todo list" },
     { name: "question", description: "Answer the assistant's question (Ctrl+O)" },
-    { name: "search", description: "Choose the web search provider (Tavily/DeepSeek)" },
+    { name: "search", description: "Choose the web search provider (Tavily/DeepSeek); K sets its key" },
     { name: "context", description: "Tune context compaction and tool result pruning" },
     { name: "theme", description: "Choose color theme (auto/light/dark)" },
     { name: "think", description: "Set thinking level (/think high)" },
@@ -20111,7 +20534,7 @@ class StatusFooter {
     const statusText = truncateToWidth2(s.compaction ?? s.busy ?? labels.ready, Math.min(28, Math.floor(space / 2)));
     const tone = this.#tone();
     const statusStyled = tone === "error" ? theme.error(statusText) : tone === "warning" ? theme.warning(statusText) : tone === "accent" ? theme.accent(statusText) : theme.ok(statusText);
-    const modelShort = s.model.split("/").at(-1) ?? s.model;
+    const modelShort = modelDisplayName(s.model);
     const identity = [
       { text: basename4(s.cwd) || s.cwd, slot: theme.muted },
       { text: modelShort, slot: theme.model },
@@ -20660,16 +21083,21 @@ import {
   isKeyRelease as isKeyRelease2,
   matchesKey as matchesKey5,
   renderFakeCursor,
-  truncateToWidth as truncateToWidth3
+  truncateToWidth as truncateToWidth3,
+  visibleWidth as visibleWidth3
 } from "@earendil-works/pi-tui";
 
 class LoginPanel {
   height = 10;
   focused = false;
   open = false;
-  #input = new Input;
+  #level = "list";
+  #filter = new Input({ prompt: "\u276F ", placeholder: "Type to filter" });
+  #index = 0;
+  #inputs = new Map;
   #state;
   #provider = "deepseek";
+  #group = "model";
   #message = "";
   #busy = false;
   #confirmingRemove = false;
@@ -20680,24 +21108,35 @@ class LoginPanel {
   #closed;
   #save;
   #remove;
+  #toggle;
   #autoCloseMs;
   constructor(options) {
     this.#changed = options.changed;
     this.#closed = options.closed;
     this.#save = options.save;
     this.#remove = options.remove;
+    this.#toggle = options.toggle;
     this.#autoCloseMs = options.autoCloseMs ?? AUTO_CLOSE_MS;
   }
-  show(state, subscribe) {
+  show(state, subscribe, initial) {
     this.#generation++;
     this.#clearCloseTimer();
     this.open = true;
+    this.#level = "list";
     this.#busy = false;
     this.#confirmingRemove = false;
     this.#message = "";
-    this.#input = new Input;
+    this.#inputs.clear();
+    this.#filter = new Input({ prompt: "\u276F ", placeholder: "Type to filter" });
+    this.#index = 0;
     this.#provider = "deepseek";
+    this.#group = "model";
     this.#state = state;
+    if (initial) {
+      this.#provider = initial.provider;
+      this.#group = initial.group;
+      this.#level = "key";
+    }
     this.#unsubscribe?.();
     this.#unsubscribe = subscribe((value) => {
       if (this.open) {
@@ -20712,26 +21151,96 @@ class LoginPanel {
     this.#clearCloseTimer();
     this.open = false;
     this.#confirmingRemove = false;
-    this.#input = new Input;
+    this.#inputs.clear();
+    this.#filter = new Input({ prompt: "\u276F ", placeholder: "Type to filter" });
     this.#unsubscribe?.();
     this.#unsubscribe = undefined;
     this.#closed();
     this.#changed();
   }
   invalidate() {}
+  get #input() {
+    let input = this.#inputs.get(this.#provider);
+    if (!input) {
+      input = new Input;
+      this.#inputs.set(this.#provider, input);
+    }
+    return input;
+  }
+  get #status() {
+    return this.#state?.statuses[this.#provider];
+  }
+  #visible() {
+    const query = compact(this.#filter.getValue());
+    const all = listRows();
+    if (query === "")
+      return all;
+    return all.filter(({ spec }) => compact(`${spec.name} ${spec.id} ${spec.envVar}`).includes(query));
+  }
+  #isEnabled(spec) {
+    return isLocked(spec.id) || this.#state?.statuses[spec.id]?.enabled === true;
+  }
   handleInput(data) {
     if (isKeyRelease2(data))
       return;
-    if (matchesKey5(data, "escape") || matchesKey5(data, "ctrl+c")) {
+    if (matchesKey5(data, "ctrl+c")) {
+      this.close();
+      return;
+    }
+    if (this.#level === "list")
+      this.#handleList(data);
+    else
+      this.#handleKey(data);
+    this.#changed();
+  }
+  #handleList(data) {
+    if (matchesKey5(data, "escape")) {
       this.close();
       return;
     }
+    if (this.#busy)
+      return;
+    const items = this.#visible();
+    if (matchesKey5(data, "up") || matchesKey5(data, "down")) {
+      const delta = matchesKey5(data, "up") ? -1 : 1;
+      this.#index = Math.max(0, Math.min(items.length - 1, this.#index + delta));
+      this.#message = "";
+    } else if (matchesKey5(data, "space")) {
+      const row = items[this.#index];
+      if (row)
+        this.#toggleEnabled(row);
+    } else if (matchesKey5(data, "enter")) {
+      const row = items[this.#index];
+      if (!row)
+        return;
+      this.#provider = row.spec.id;
+      this.#group = row.group;
+      this.#level = "key";
+      this.#message = "";
+    } else {
+      const before = this.#filter.getValue();
+      this.#filter.handleInput(data);
+      if (this.#filter.getValue() !== before) {
+        this.#index = 0;
+        this.#message = "";
+      }
+    }
+  }
+  #handleKey(data) {
+    if (matchesKey5(data, "escape")) {
+      if (this.#busy || this.#closeTimer !== undefined)
+        this.close();
+      else
+        this.#backToList();
+      return;
+    }
     if (this.#busy)
       return;
     const confirming = this.#confirmingRemove;
     this.#confirmingRemove = false;
     if (confirming && !matchesKey5(data, "ctrl+r"))
       this.#message = "";
+    const input = this.#input;
     if (matchesKey5(data, "enter"))
       this.#apply(false);
     else if (matchesKey5(data, "ctrl+r") && this.#status?.savedConfigured) {
@@ -20741,23 +21250,52 @@ class LoginPanel {
         this.#confirmingRemove = true;
         this.#message = "Press Ctrl+R again to remove the saved key.";
       }
-    } else if (matchesKey5(data, "tab") || (matchesKey5(data, "left") || matchesKey5(data, "right")) && this.#input.getValue() === "")
-      this.#switch();
+    } else if (matchesKey5(data, "tab"))
+      this.#backToList();
     else {
-      this.#input.handleInput(data);
-      if (this.#input.getValue().length > 4096)
-        this.#input.setValue(this.#input.getValue().slice(0, 4096));
+      input.handleInput(data);
+      if (input.getValue().length > 4096)
+        input.setValue(input.getValue().slice(0, 4096));
     }
-    this.#changed();
-  }
-  get #status() {
-    return this.#state?.statuses[this.#provider];
   }
-  #switch() {
-    const index = CREDENTIAL_PROVIDERS.findIndex((spec) => spec.id === this.#provider);
-    this.#provider = CREDENTIAL_PROVIDERS[(index + 1) % CREDENTIAL_PROVIDERS.length].id;
+  #backToList() {
+    const index = this.#visible().findIndex((row) => row.spec.id === this.#provider && row.group === this.#group);
+    if (index >= 0)
+      this.#index = index;
+    this.#level = "list";
+    this.#confirmingRemove = false;
     this.#message = "";
   }
+  async#toggleEnabled({ spec, group }) {
+    if (group === "search") {
+      this.#message = isModelProvider(spec.id) ? `${spec.name} shares its key with the model provider and has no enable switch here.` : `${spec.name} is a web search credential and has no enable switch.`;
+      return;
+    }
+    if (isLocked(spec.id)) {
+      this.#message = `${spec.name} is always enabled.`;
+      return;
+    }
+    if (!isModelProvider(spec.id))
+      return;
+    const enable = !this.#isEnabled(spec);
+    const generation = this.#generation;
+    this.#busy = true;
+    this.#message = enable ? "Enabling..." : "Disabling...";
+    this.#changed();
+    try {
+      await this.#toggle(spec.id, enable);
+      if (generation === this.#generation)
+        this.#message = enable ? `${spec.name} enabled. Press Enter to add a key.` : `${spec.name} disabled.`;
+    } catch (error) {
+      if (generation === this.#generation)
+        this.#message = error instanceof Error ? error.message : "Could not update the provider. Try again.";
+    } finally {
+      if (generation === this.#generation) {
+        this.#busy = false;
+        this.#changed();
+      }
+    }
+  }
   #clearCloseTimer() {
     if (this.#closeTimer !== undefined)
       clearTimeout(this.#closeTimer);
@@ -20796,7 +21334,7 @@ class LoginPanel {
       else
         await this.#save(provider, key);
       if (generation === this.#generation) {
-        this.#input = new Input;
+        this.#inputs.set(provider, new Input);
         this.#message = remove ? "Saved key removed." : "Saved. Used by the next request.";
         this.#scheduleAutoClose(generation);
       }
@@ -20810,34 +21348,100 @@ class LoginPanel {
       }
     }
   }
+  #frame(rows, help, width) {
+    const body = Math.max(0, this.height - 1);
+    while (rows.length < body)
+      rows.push("");
+    return [...rows.slice(0, body), help].map((line) => theme.panel(` ${truncateToWidth3(line, Math.max(1, width - 2), "...", true)} `));
+  }
   render(width) {
+    return this.#level === "list" ? this.#renderList(width) : this.#renderKey(width);
+  }
+  #renderList(width) {
+    const w = Math.max(1, width - 2);
+    const items = this.#visible();
+    this.#index = Math.max(0, Math.min(this.#index, items.length - 1));
+    const selected = items[this.#index];
+    const rows = [theme.accent(style.bold("Model providers and API keys"))];
+    if (this.height >= 4) {
+      this.#filter.focused = this.focused;
+      rows.push(...this.#filter.render(w).slice(0, 1));
+    }
+    const showStatus = this.height >= 6;
+    const entries = [];
+    let group;
+    for (const row of items) {
+      const next = row.group === "search" ? "Web search" : "Model providers";
+      if (next !== group)
+        entries.push({ header: next });
+      group = next;
+      entries.push({ row });
+    }
+    const count = Math.max(1, this.height - rows.length - 1 - (showStatus ? 1 : 0));
+    const at = entries.findIndex((entry) => ("row" in entry) && entry.row === selected);
+    const start = Math.max(0, Math.min(at - Math.floor(count / 2), entries.length - count));
+    for (const entry of entries.slice(start, start + count)) {
+      if ("header" in entry) {
+        rows.push(theme.dim(` ${entry.header}`));
+        continue;
+      }
+      const { spec, group: rowGroup } = entry.row;
+      const status = this.#state?.statuses[spec.id];
+      const enabled = this.#isEnabled(spec);
+      const modelRow = rowGroup === "model";
+      const mark = modelRow ? enabled ? "[x]" : "[ ]" : "   ";
+      const right = status ? `${status.source} \xB7 env ${status.environmentConfigured ? "set" : "unset"}` : "loading";
+      const leftWidth = Math.max(1, w - 3 - visibleWidth3(right));
+      const left = truncateToWidth3(`${mark} ${spec.name}${modelRow && isLocked(spec.id) ? " (always on)" : ""}`, leftWidth, "...");
+      const label = `${left}${" ".repeat(Math.max(1, leftWidth - visibleWidth3(left) + 1))}${right}`;
+      if (entry.row === selected)
+        rows.push(theme.selection(`\u276F ${label}`));
+      else
+        rows.push(modelRow && !enabled ? theme.dim(`  ${label}`) : `  ${label}`);
+    }
+    if (items.length === 0)
+      rows.push("No matching providers");
+    if (showStatus) {
+      while (rows.length < this.height - 2)
+        rows.push("");
+      const hint = selected ? selected.group === "search" && isModelProvider(selected.spec.id) ? `Same key as the ${selected.spec.name} model provider. Environment variable: ${selected.spec.envVar}` : `Environment variable: ${selected.spec.envVar}` : "";
+      rows.push(this.#message || (hint ? theme.dim(hint) : ""));
+    }
+    const help = this.#busy ? shortcutHints(["Esc", "Close"]) : shortcutHints(["\u2191\u2193", "Select"], ["Space", "Toggle"], ["Enter", "Key"], ["Esc", "Close"]);
+    return this.#frame(rows, help, width);
+  }
+  #renderKey(width) {
     const state = this.#status;
-    const spec = credentialProvider(this.#provider);
-    const tabs = CREDENTIAL_PROVIDERS.map((item) => item.id === this.#provider ? `[${item.id}]` : ` ${item.id} `).join(" ");
+    const spec = CREDENTIAL_PROVIDERS.find((item) => item.id === this.#provider) ?? CREDENTIAL_PROVIDERS[0];
     const source = state?.source === "keyless" ? "keyless (rate-limited)" : state?.source ?? "Loading...";
     const keyLength = this.#input.getValue().length;
     const marker = this.focused ? CURSOR_MARKER2 : "";
     const keyRow = keyLength > 0 ? `API Key: ********${marker}${this.focused ? renderFakeCursor(" ") : ""} (${keyLength} characters)` : `API Key: ${marker}${this.focused ? `${renderFakeCursor("(")}paste key)` : "(paste key)"}`;
-    const rows = [
-      `Provider: ${tabs}`,
-      `Environment: ${state ? state.environmentConfigured ? "Configured" : "Not configured" : "Loading..."}`,
-      `Active source: ${source}`,
-      keyRow,
-      this.#message || (spec.keyless ? "Without a key, Tavily runs in rate-limited keyless mode." : "Saved key overrides environment."),
-      spec.signupUrl
-    ];
-    const switchHint = keyLength > 0 ? ["Tab", "Switch"] : ["Left/Right/Tab", "Switch"];
-    const help = this.#busy ? shortcutHints(["Esc", "Close"]) : this.#confirmingRemove ? shortcutHints(["Ctrl+R", "Confirm remove"], ["Esc", "Cancel"]) : state?.savedConfigured ? shortcutHints(["Enter", "Save"], ["Ctrl+R", "Remove"], switchHint, ["Esc", "Cancel"]) : shortcutHints(["Enter", "Save"], switchHint, ["Esc", "Cancel"]);
-    while (rows.length < this.height - 1)
-      rows.push("");
-    return [...rows.slice(0, Math.max(0, this.height - 1)), help].map((line) => theme.panel(` ${truncateToWidth3(line, Math.max(1, width - 2), "...", true)} `));
-  }
-}
-var AUTO_CLOSE_MS = 800;
+    const tag = this.#group === "search" ? isModelProvider(spec.id) ? "web search, same key as model provider" : "web search" : this.#isEnabled(spec) ? "enabled" : "disabled";
+    const defaultMessage = spec.keyless ? `Without a key, ${spec.name} runs in rate-limited keyless mode.` : this.#group === "model" && !this.#isEnabled(spec) ? "Provider is disabled. Esc, then Space enables it." : "Saved key overrides environment.";
+    const provider = `Provider: ${spec.name} (${tag})`;
+    const message = this.#message || defaultMessage;
+    const environment = `Environment: ${spec.envVar} ${state ? state.environmentConfigured ? "Configured" : "Not configured" : "Loading..."}`;
+    const sourceRow = `Active source: ${source}`;
+    const rows = this.height - 1 >= 6 ? [provider, environment, sourceRow, keyRow, message, spec.signupUrl] : [provider, keyRow, message, environment, sourceRow, spec.signupUrl];
+    const help = this.#busy ? shortcutHints(["Esc", "Close"]) : this.#confirmingRemove ? shortcutHints(["Ctrl+R", "Confirm remove"], ["Esc", "Back"]) : state?.savedConfigured ? shortcutHints(["Enter", "Save"], ["Ctrl+R", "Remove"], ["Tab", "Providers"], ["Esc", "Back"]) : shortcutHints(["Enter", "Save"], ["Tab", "Providers"], ["Esc", "Back"]);
+    return this.#frame(rows, help, width);
+  }
+}
+var AUTO_CLOSE_MS = 800, isLocked = (id) => LOCKED_PROVIDERS.includes(id), SEARCH_ALIASES, listRows = () => {
+  const all = CREDENTIAL_PROVIDERS.map((spec) => ({ spec, group: spec.kind === "search" ? "search" : "model" }));
+  for (const id of SEARCH_ALIASES) {
+    const spec = CREDENTIAL_PROVIDERS.find((item) => item.id === id);
+    if (spec)
+      all.push({ spec, group: "search" });
+  }
+  return all;
+}, compact = (value) => value.toLowerCase().replace(/\s+/g, "");
 var init_login = __esm(() => {
   init_src();
   init_theme();
   init_shortcut_hints();
+  SEARCH_ALIASES = ["deepseek"];
 });
 
 // packages/tui/src/components/notice.ts
@@ -20861,7 +21465,7 @@ import {
   isKeyRelease as isKeyRelease3,
   matchesKey as matchesKey6,
   truncateToWidth as truncateToWidth4,
-  visibleWidth as visibleWidth3,
+  visibleWidth as visibleWidth4,
   wrapTextWithAnsi as wrapTextWithAnsi3
 } from "@earendil-works/pi-tui";
 
@@ -20869,7 +21473,9 @@ class PickerPanel {
   pointerSelection = false;
   agentNavigation = false;
   emptyText;
+  groupedFilter = false;
   listKey;
+  help;
   search = new Input2({ prompt: "\u276F ", placeholder: "Type to filter" });
   #items = [];
   #index = 0;
@@ -20877,6 +21483,7 @@ class PickerPanel {
   #generation = 0;
   #state = "closed";
   #error = "";
+  #hint = "";
   #title = "";
   #load;
   #pick;
@@ -20896,6 +21503,9 @@ class PickerPanel {
   set focused(value) {
     this.search.focused = value;
   }
+  set hint(value) {
+    this.#hint = value;
+  }
   invalidate() {}
   async show(title, load, pick) {
     if (this.open)
@@ -20939,6 +21549,9 @@ class PickerPanel {
     this.pointerSelection = false;
     this.agentNavigation = false;
     this.emptyText = undefined;
+    this.groupedFilter = false;
+    this.help = undefined;
+    this.#hint = "";
     this.listKey = undefined;
     ++this.#generation;
     for (const detail of this.#details)
@@ -20969,9 +21582,23 @@ class PickerPanel {
   #details = [];
   #filtered() {
     const query = this.search.getValue().toLowerCase();
-    if (query !== "")
+    if (query === "")
+      return this.#items;
+    if (!this.groupedFilter)
       return this.#items.filter((item) => !item.header && this.#matches(item, query));
-    return this.#items;
+    const result = [];
+    let header;
+    for (const item of this.#items) {
+      if (item.header)
+        header = item;
+      else if (this.#matches(item, query)) {
+        if (header)
+          result.push(header);
+        header = undefined;
+        result.push(item);
+      }
+    }
+    return result;
   }
   #matches(item, query) {
     return `${item.label} ${item.description ?? ""} ${item.searchText ?? ""}`.toLowerCase().includes(query);
@@ -21019,6 +21646,7 @@ class PickerPanel {
     }
     if (this.#state !== "ready")
       return;
+    this.#hint = "";
     const items = this.#filtered();
     if (this.listKey?.(data, items[this.#index]?.value)) {
       this.changed();
@@ -21032,6 +21660,11 @@ class PickerPanel {
       const item = items[this.#index];
       if (!item || item.header)
         return;
+      if (item.blockedHint) {
+        this.#hint = item.blockedHint;
+        this.changed();
+        return;
+      }
       const generation = this.#generation;
       this.#state = "applying";
       this.#pick(item.value).then((result) => {
@@ -21112,8 +21745,9 @@ class PickerPanel {
     }
     if (height >= 4)
       rows.push(...this.search.render(w).slice(0, 1));
-    const help = this.#state === "error" ? labels.retry : this.#state === "ready" ? this.agentNavigation ? shortcutHints(["\u2191\u2193", "Select"], ["\u2192/Enter", "Open"], ["\u2190", "Main"]) : labels.select : labels.close;
-    const available = Math.max(1, height - rows.length - 1);
+    const help = this.#state === "error" ? labels.retry : this.#state === "ready" ? this.agentNavigation ? shortcutHints(["\u2191\u2193", "Select"], ["\u2192/Enter", "Open"], ["\u2190", "Main"]) : this.help ?? labels.select : labels.close;
+    const hint = this.#state === "ready" && height >= 5 ? this.#hint : "";
+    const available = Math.max(1, height - rows.length - 1 - (hint ? 1 : 0));
     if (this.#state !== "ready")
       rows.push(this.#state === "error" ? theme.error(`Error: ${this.#error}`) : this.#state === "applying" ? labels.applying : labels.loading);
     else {
@@ -21125,7 +21759,7 @@ class PickerPanel {
           this.#index = first;
       }
       const selected = items[this.#index];
-      const details = height >= 9 && selected?.description ? wrapTextWithAnsi3(selected.description, w).slice(0, 2) : [];
+      const details = height >= 9 && !hint && selected?.description ? wrapTextWithAnsi3(selected.description, w).slice(0, 2) : [];
       const count = Math.max(1, available - details.length);
       const start = Math.max(0, Math.min(this.#index - Math.floor(count / 2), items.length - count));
       for (const [i, item] of items.slice(start, start + count).entries()) {
@@ -21134,9 +21768,9 @@ class PickerPanel {
           continue;
         }
         const right = item.rightLabel ?? "";
-        const leftWidth = Math.max(1, w - 3 - visibleWidth3(right));
+        const leftWidth = Math.max(1, w - 3 - visibleWidth4(right));
         const left = truncateToWidth4(item.label, leftWidth, "...");
-        const label = right ? `${left}${" ".repeat(Math.max(1, leftWidth - visibleWidth3(left) + 1))}${right}` : left;
+        const label = right ? `${left}${" ".repeat(Math.max(1, leftWidth - visibleWidth4(left) + 1))}${right}` : left;
         const rendered = start + i === this.#index ? theme.selection(`\u276F ${label}`) : `  ${label}`;
         if (this.pointerSelection)
           this.#pointerRows.set(rows.length, start + i);
@@ -21144,9 +21778,11 @@ class PickerPanel {
       }
       if (items.length === 0)
         rows.push(this.emptyText !== undefined && this.#items.length === 0 ? this.emptyText : labels.noResults);
-      while (rows.length < height - 1 - details.length)
+      while (rows.length < height - 1 - details.length - (hint ? 1 : 0))
         rows.push("");
       rows.push(...details.map((line) => theme.dim(line)));
+      if (hint)
+        rows.push(theme.warning(hint));
     }
     while (rows.length < height - 1)
       rows.push("");
@@ -21899,10 +22535,151 @@ function followTerminalTheme(ui, apply) {
 }
 var THEME_QUERY_TIMEOUT_MS = 100;
 
+// packages/tui/src/image-input.ts
+import { execFile as execFile2 } from "child_process";
+import { readFileSync as readFileSync2 } from "fs";
+import { readFile as readFile6, stat as stat4 } from "fs/promises";
+import { homedir as homedir6 } from "os";
+import { basename as basename5, join as join8, resolve as resolve5 } from "path";
+import { promisify as promisify2 } from "util";
+import { isKeyRelease as isKeyRelease4, isKeyRepeat as isKeyRepeat2, matchesKey as matchesKey8 } from "@earendil-works/pi-tui";
+function imagePaths(text, platform = process.platform) {
+  const paths = [];
+  let word = "", quote = "", escaped = false;
+  for (const c of text.trim()) {
+    if (escaped) {
+      word += c;
+      escaped = false;
+    } else if (c === "\\" && quote !== "'" && platform !== "win32") {
+      escaped = true;
+    } else if (quote) {
+      if (c === quote)
+        quote = "";
+      else
+        word += c;
+    } else if (c === '"' || c === "'")
+      quote = c;
+    else if (/\s/.test(c)) {
+      if (word) {
+        paths.push(word);
+        word = "";
+      }
+    } else
+      word += c;
+  }
+  if (quote || escaped)
+    return null;
+  if (word)
+    paths.push(word);
+  return paths.length && paths.every((p) => /\.(png|jpe?g|webp)$/i.test(p)) ? paths : null;
+}
+function expandHome(path, platform = process.platform) {
+  if (path.startsWith("~/") || platform === "win32" && path.startsWith("~\\"))
+    return join8(homedir6(), path.slice(2));
+  return path;
+}
+async function readImageFile(path, cwd, platform = process.platform) {
+  const full = resolve5(cwd, expandHome(path, platform));
+  const info = await stat4(full);
+  if (!info.isFile() || info.size > 20 * 1024 * 1024)
+    throw new Error("Image must be a file no larger than 20 MiB");
+  const bytes = await readFile6(full);
+  const after = await stat4(full);
+  if (bytes.length !== info.size || after.size !== info.size || after.mtimeMs !== info.mtimeMs)
+    throw new Error("Image changed while reading");
+  const mimeType = /\.png$/i.test(full) ? "image/png" : /\.webp$/i.test(full) ? "image/webp" : "image/jpeg";
+  return { name: basename5(full), mimeType, bytes };
+}
+async function command(file, args, encoding = "utf8", timeout = 2000) {
+  return (await exec(file, args, { timeout, maxBuffer: 30 * 1024 * 1024, encoding })).stdout;
+}
+async function clipboard(options = {}) {
+  const run = options.command ?? command;
+  const platform = options.platform ?? process.platform;
+  if (platform === "darwin") {
+    const files = await run("osascript", [
+      "-e",
+      `try
+set fs to the clipboard as \xABclass furl\xBB
+return POSIX path of fs
+on error
+return ""
+end try`
+    ]).catch(() => "");
+    if (String(files).trim())
+      return /\.(png|jpe?g|webp)$/i.test(String(files).trim()) ? { paths: [String(files).trim()] } : { text: String(files).trim() };
+    const image = String(await run("osascript", ["-e", `try
+return the clipboard as \xABclass PNGf\xBB
+on error
+return ""
+end try`]).catch(() => ""));
+    const hex = /\u00ABdata PNGf([0-9A-Fa-f]+)\u00BB/.exec(image)?.[1];
+    if (hex)
+      return { image: { name: "Clipboard.png", mimeType: "image/png", bytes: Buffer.from(hex, "hex") } };
+    return { text: String(await run("pbpaste", [])) };
+  }
+  if (platform === "win32")
+    return windowsClipboard(run);
+  let windowsError;
+  if (platform === "linux" && (options.wsl ?? runningInWsl())) {
+    try {
+      return await windowsClipboard(run);
+    } catch (error) {
+      windowsError = error;
+    }
+  }
+  const wayland = options.wayland ?? !!process.env.WAYLAND_DISPLAY;
+  const tool = wayland ? "wl-paste" : "xclip";
+  try {
+    const bytes = await run(tool, wayland ? ["--type", "image/png"] : ["-selection", "clipboard", "-t", "image/png", "-o"], "buffer");
+    if (bytes.length)
+      return { image: { name: "Clipboard.png", mimeType: "image/png", bytes: Buffer.from(bytes) } };
+  } catch {}
+  try {
+    return { text: String(await run(tool, wayland ? ["--no-newline"] : ["-selection", "clipboard", "-o"])) };
+  } catch (error) {
+    throw windowsError ?? error;
+  }
+}
+async function windowsClipboard(run) {
+  const value = String(await run("powershell.exe", ["-NoProfile", "-STA", "-Command", WINDOWS_CLIPBOARD_SCRIPT], "utf8", 8000));
+  if (value.startsWith("IMAGE:"))
+    return {
+      image: { name: "Clipboard.png", mimeType: "image/png", bytes: Buffer.from(value.slice(6).trim(), "base64") }
+    };
+  return { text: value.replace(/\r?\n$/, "") };
+}
+function runningInWsl() {
+  wslHost ??= process.platform === "linux" && (Boolean(process.env.WSL_DISTRO_NAME || process.env.WSL_INTEROP || process.env.WSLENV) || /microsoft|wsl/i.test(readFileOrEmpty("/proc/version")));
+  return wslHost;
+}
+function readFileOrEmpty(path) {
+  try {
+    return readFileSync2(path, "utf8");
+  } catch {
+    return "";
+  }
+}
+function clipboardShortcutKey(platform = process.platform, wsl = runningInWsl()) {
+  return platform === "win32" || platform === "linux" && wsl ? "alt+v" : "ctrl+v";
+}
+function isClipboardShortcut(data, platform = process.platform, wsl = runningInWsl()) {
+  return !isKeyRelease4(data) && !isKeyRepeat2(data) && matchesKey8(data, clipboardShortcutKey(platform, wsl));
+}
+var exec, WINDOWS_CLIPBOARD_SCRIPT, wslHost;
+var init_image_input = __esm(() => {
+  exec = promisify2(execFile2);
+  WINDOWS_CLIPBOARD_SCRIPT = [
+    "try{[Console]::OutputEncoding=[Text.UTF8Encoding]::new($false)}catch{}",
+    "Add-Type -AssemblyName System.Windows.Forms",
+    "$i=[Windows.Forms.Clipboard]::GetImage()",
+    'if($i){$m=New-Object IO.MemoryStream; $i.Save($m,[Drawing.Imaging.ImageFormat]::Png); "IMAGE:"+[Convert]::ToBase64String($m.ToArray());$i.Dispose();$m.Dispose()}else{Get-Clipboard -Raw}'
+  ].join("; ");
+});
+
 // packages/tui/src/export-command.ts
 import { open as open3, unlink as unlink2 } from "fs/promises";
-import { homedir as homedir6 } from "os";
-import { resolve as resolve5 } from "path";
+import { resolve as resolve6 } from "path";
 function parseExportArgs(input) {
   const words = [];
   let word = "";
@@ -21952,7 +22729,7 @@ async function exportToFile(input) {
   const format = input.path === undefined ? "markdown" : exportFormatFromPath(input.path);
   if (format === null)
     throw new Error("Unsupported export format: use a .md, .html or .json path");
-  const target = resolve5(input.cwd, input.path === undefined ? exportFileName(input.source.title, format, input.source.exportedAt) : input.path.startsWith("~/") ? homedir6() + input.path.slice(1) : input.path);
+  const target = resolve6(input.cwd, input.path === undefined ? exportFileName(input.source.title, format, input.source.exportedAt) : expandHome(input.path, input.platform));
   let handle;
   try {
     handle = await open3(target, "wx");
@@ -21981,6 +22758,7 @@ async function exportToFile(input) {
 var EXPORT_USAGE = "Usage: /export [path.md|path.html|path.json] [--thinking]";
 var init_export_command = __esm(() => {
   init_conversation_export();
+  init_image_input();
 });
 
 // packages/core/src/file-mentions.ts
@@ -22290,7 +23068,11 @@ var init_ws_listener = __esm(() => {
 async function connectNekoGateway(address, signal) {
   signal?.throwIfAborted();
   const link = address.transport === "unix" ? await createUnixLink(address.socketPath, signal) : createWsLink(address.url, signal);
-  const connection = createGatewayConnection(link, address.serverId);
+  return connectNekoGatewayLink(link, address.serverId, signal);
+}
+async function connectNekoGatewayLink(link, serverId, signal) {
+  signal?.throwIfAborted();
+  const connection = createGatewayConnection(link, serverId);
   const controller = new AbortController;
   const abort = () => controller.abort(signal?.reason);
   signal?.addEventListener("abort", abort, { once: true });
@@ -22339,8 +23121,8 @@ var init_principal = __esm(() => {
 
 // packages/gateway/src/mobile/store.ts
 import { randomBytes } from "crypto";
-import { chmod as chmod2, mkdir as mkdir5, readFile as readFile6, rename as rename3, rm as rm3, writeFile as writeFile3 } from "fs/promises";
-import { join as join8 } from "path";
+import { chmod as chmod2, mkdir as mkdir5, readFile as readFile7, rm as rm3, writeFile as writeFile3 } from "fs/promises";
+import { join as join9 } from "path";
 function defaultState() {
   return {
     formatVersion: MOBILE_STATE_FORMAT_VERSION,
@@ -22460,9 +23242,10 @@ async function writeFileAtomic(filePath, contents, mode) {
     await writeFile3(tempPath, contents, { mode });
     if (POSIX)
       await chmod2(tempPath, mode);
-    await rename3(tempPath, filePath);
-  } finally {
+    await renameWithRetry(tempPath, filePath);
+  } catch (error) {
     await rm3(tempPath, { force: true });
+    throw error;
   }
 }
 async function writeSecretFile(filePath, contents) {
@@ -22470,7 +23253,7 @@ async function writeSecretFile(filePath, contents) {
 }
 async function readSecretFile(filePath) {
   try {
-    return await readFile6(filePath, "utf8");
+    return await readFile7(filePath, "utf8");
   } catch (error) {
     if (isNotFound(error))
       return;
@@ -22480,7 +23263,7 @@ async function readSecretFile(filePath) {
 async function loadState(statePath) {
   let raw;
   try {
-    raw = await readFile6(statePath, "utf8");
+    raw = await readFile7(statePath, "utf8");
   } catch (error) {
     if (isNotFound(error))
       return freezeState(defaultState());
@@ -22504,21 +23287,21 @@ class MobileStore {
   queue = Promise.resolve();
   constructor(mobileDir, initial) {
     this.mobileDir = mobileDir;
-    this.tlsDir = join8(mobileDir, "tls");
-    this.statePath = join8(mobileDir, "state.json");
-    this.adminTokenPath = join8(mobileDir, "admin-token");
+    this.tlsDir = join9(mobileDir, "tls");
+    this.statePath = join9(mobileDir, "state.json");
+    this.adminTokenPath = join9(mobileDir, "admin-token");
     this.current = initial;
   }
   static async open(nekoDir) {
-    const mobileDir = join8(nekoDir, "mobile");
-    const tlsDir = join8(mobileDir, "tls");
+    const mobileDir = join9(nekoDir, "mobile");
+    const tlsDir = join9(mobileDir, "tls");
     await mkdir5(mobileDir, { recursive: true, mode: 448 });
     await mkdir5(tlsDir, { recursive: true, mode: 448 });
     if (POSIX) {
       await chmod2(mobileDir, 448);
       await chmod2(tlsDir, 448);
     }
-    return new MobileStore(mobileDir, await loadState(join8(mobileDir, "state.json")));
+    return new MobileStore(mobileDir, await loadState(join9(mobileDir, "state.json")));
   }
   getState() {
     return this.current;
@@ -22640,6 +23423,7 @@ class MobileStore {
 }
 var MOBILE_STATE_FORMAT_VERSION = 1, MOBILE_DEFAULT_PORT = 8323, MOBILE_ADMIN_TOKEN_BYTES = 32, POSIX, ADMIN_TOKEN_PATTERN, CREDENTIAL_HASH_PATTERN, tempCounter = 0;
 var init_store = __esm(() => {
+  init_src();
   POSIX = process.platform !== "win32";
   ADMIN_TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
   CREDENTIAL_HASH_PATTERN = /^[0-9a-fA-F]{64}$/;
@@ -41082,7 +41866,7 @@ import {
   randomBytes as randomBytes2,
   X509Certificate
 } from "crypto";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 function mobileCommonName(serverId) {
   return `neko-${serverId.slice(0, 8).toLowerCase()}.invalid`;
 }
@@ -41174,8 +41958,8 @@ class MobileCertificate {
     this.current = initial;
   }
   static async load(store, serverId) {
-    const certPath = join9(store.tlsDir, TLS_CERT_FILE);
-    const keyPath = join9(store.tlsDir, TLS_KEY_FILE);
+    const certPath = join10(store.tlsDir, TLS_CERT_FILE);
+    const keyPath = join10(store.tlsDir, TLS_KEY_FILE);
     const certPem = await readSecretFile(certPath);
     const keyPem = await readSecretFile(keyPath);
     if (certPem === undefined && keyPem === undefined) {
@@ -41705,10 +42489,10 @@ var init_relay = __esm(() => {
 });
 
 // packages/gateway/src/mobile/wsl.ts
-import { execFile as execFile2 } from "child_process";
-import { accessSync as accessSync2, constants as constants2, readFileSync as readFileSync2 } from "fs";
+import { execFile as execFile3 } from "child_process";
+import { accessSync as accessSync2, constants as constants2, readFileSync as readFileSync3 } from "fs";
 import { networkInterfaces as networkInterfaces2 } from "os";
-import { delimiter, join as join10 } from "path";
+import { delimiter, join as join11 } from "path";
 function detectWsl(overrides = {}) {
   const deps = { ...defaultProbeDeps, ...overrides };
   if (deps.platform !== "linux")
@@ -41719,7 +42503,7 @@ function detectWsl(overrides = {}) {
   if (!inWsl)
     return;
   const candidates = [
-    ...(env.PATH ?? "").split(delimiter).filter((dir) => dir !== "").map((dir) => join10(dir, "powershell.exe")),
+    ...(env.PATH ?? "").split(delimiter).filter((dir) => dir !== "").map((dir) => join11(dir, "powershell.exe")),
     POWERSHELL_FALLBACK
   ];
   return { powershell: candidates.find((candidate) => deps.isExecutable(candidate)) };
@@ -41808,7 +42592,7 @@ function primaryWslAddress(interfaces = networkInterfaces2()) {
   return eth0?.address ?? wslOwnAddresses(interfaces)[0];
 }
 var POWERSHELL_FALLBACK = "/mnt/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe", defaultProbeDeps, WINDOWS_ADDRESSES_SCRIPT, WSL_ADAPTER_PATTERN, runPowerShell = (powershell, script, timeoutMs) => new Promise((resolve, reject) => {
-  execFile2(powershell, ["-NoProfile", "-NonInteractive", "-Command", script], { timeout: timeoutMs, windowsHide: true, maxBuffer: 1024 * 1024, encoding: "utf8" }, (error, stdout) => error ? reject(error) : resolve(stdout));
+  execFile3(powershell, ["-NoProfile", "-NonInteractive", "-Command", script], { timeout: timeoutMs, windowsHide: true, maxBuffer: 1024 * 1024, encoding: "utf8" }, (error, stdout) => error ? reject(error) : resolve(stdout));
 });
 var init_wsl = __esm(() => {
   init_network();
@@ -41817,7 +42601,7 @@ var init_wsl = __esm(() => {
     env: process.env,
     readProcVersion() {
       try {
-        return readFileSync2("/proc/version", "utf8");
+        return readFileSync3("/proc/version", "utf8");
       } catch {
         return;
       }
@@ -41889,6 +42673,10 @@ function toMessage(error) {
   }
   return String(error);
 }
+function normalizeLocalAddress(address) {
+  const mapped = address?.startsWith("::ffff:") ? address.slice("::ffff:".length) : undefined;
+  return mapped !== undefined && isIpv4Literal(mapped) ? mapped : address;
+}
 
 class MobileGateway {
   serverId;
@@ -42217,11 +43005,12 @@ class MobileGateway {
       connection.sendNotification(method, params);
   }
   advertisedAddress(localAddress) {
+    const normalized = normalizeLocalAddress(localAddress);
     const state = this.stateValue;
-    if (state.status === "listening" && state.mode === "wsl-relay" && localAddress === state.bindAddress) {
+    if (state.status === "listening" && state.mode === "wsl-relay" && normalized === state.bindAddress) {
       return state.address;
     }
-    return localAddress;
+    return normalized;
   }
   requireStore() {
     if (this.storeHandle === undefined)
@@ -42479,10 +43268,10 @@ var init_listener = __esm(() => {
 });
 
 // packages/gateway/src/port-file.ts
-import { readFile as readFile7, rm as rm4, writeFile as writeFile4 } from "fs/promises";
-import { join as join11 } from "path";
+import { readFile as readFile8, rm as rm4, writeFile as writeFile4 } from "fs/promises";
+import { join as join12 } from "path";
 function gatewayPortFilePath(nekoDir, serverId) {
-  return join11(nekoDir, `${serverId}.port`);
+  return join12(nekoDir, `${serverId}.port`);
 }
 async function writeGatewayPortFile(nekoDir, serverId, wsUrl) {
   await writeFile4(gatewayPortFilePath(nekoDir, serverId), `${wsUrl}
@@ -42491,7 +43280,7 @@ async function writeGatewayPortFile(nekoDir, serverId, wsUrl) {
 async function readGatewayPortFile(nekoDir, serverId) {
   let content;
   try {
-    content = await readFile7(gatewayPortFilePath(nekoDir, serverId), "utf8");
+    content = await readFile8(gatewayPortFilePath(nekoDir, serverId), "utf8");
   } catch {
     return;
   }
@@ -42838,7 +43627,7 @@ var init_subagent_host = __esm(() => {
 
 // packages/gateway/src/session-host.ts
 import { open as open4 } from "fs/promises";
-import { basename as basename5, extname } from "path";
+import { basename as basename6, extname } from "path";
 import {
   ChordError as ChordError4,
   local as local2,
@@ -43033,7 +43822,7 @@ function serveSessions(host, runtime, context) {
           if (!info.isFile())
             throw new Error("Image must be a file");
           ctx.signal?.throwIfAborted();
-          id = uploads.value.begin({ name: basename5(target), mimeType, size: info.size });
+          id = uploads.value.begin({ name: basename6(target), mimeType, size: info.size });
           let offset = 0;
           while (offset < info.size) {
             ctx.signal?.throwIfAborted();
@@ -43050,9 +43839,9 @@ function serveSessions(host, runtime, context) {
           ctx.signal?.throwIfAborted();
           uploads.value.finish(id);
           const raw = uploads.value.resolve([id])[0];
-          await prepareImage(Buffer.from(raw.content.data, "base64"), mimeType, basename5(target), model);
+          await prepareImage(Buffer.from(raw.content.data, "base64"), mimeType, basename6(target), model);
           ctx.signal?.throwIfAborted();
-          return { id, name: basename5(target) };
+          return { id, name: basename6(target) };
         } catch (error) {
           if (id)
             uploads.value.release(id);
@@ -43111,8 +43900,6 @@ function serveSessions(host, runtime, context) {
           for (const id of input.images ?? [])
             uploads.value.release(id);
         } catch (error) {
-          if (error instanceof Error && error.message.startsWith("DEEPSEEK_KEY_REQUIRED:"))
-            throw new ChordError4("invalid", "DEEPSEEK_KEY_REQUIRED: Configure DeepSeek in /login or Web settings.");
           throw new ChordError4("invalid", error instanceof Error ? error.message : "Cannot submit message");
         }
         return null;
@@ -43248,7 +44035,7 @@ function strFromU8(dat, latin1) {
   } else {
     var _a = dutf8(dat), { s, r } = _a;
     if (r.length)
-      err(8);
+      err2(8);
     return s;
   }
 }
@@ -43257,7 +44044,7 @@ function unzipSync(data, opts) {
   var e = data.length - 22;
   for (;b4(data, e) != 101010256; --e) {
     if (!e || data.length - e > 65558)
-      err(13);
+      err2(13);
   }
   var c = b2(data, e + 8);
   if (!c)
@@ -43287,7 +44074,7 @@ function unzipSync(data, opts) {
       else if (c_2 == 8)
         files[fn] = inflateSync(data.subarray(b, b + sc), { out: new u8(su) });
       else
-        err(14, "unknown compression type " + c_2);
+        err2(14, "unknown compression type " + c_2);
     }
   }
   return files;
@@ -43360,11 +44147,11 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
   if (e == null || e > v.length)
     e = v.length;
   return new u8(v.subarray(s, e));
-}, ec, err = function(ind, msg, nt) {
+}, ec, err2 = function(ind, msg, nt) {
   var e = new Error(msg || ec[ind]);
   e.code = ind;
   if (Error.captureStackTrace)
-    Error.captureStackTrace(e, err);
+    Error.captureStackTrace(e, err2);
   if (!nt)
     throw e;
   return e;
@@ -43396,7 +44183,7 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
         var s = shft(pos) + 4, l = dat[s - 4] | dat[s - 3] << 8, t = s + l;
         if (t > sl) {
           if (noSt)
-            err(0);
+            err2(0);
           break;
         }
         if (resize)
@@ -43442,10 +44229,10 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
         lm = hMap(lt, lbt, 1);
         dm = hMap(dt, dbt, 1);
       } else
-        err(1);
+        err2(1);
       if (pos > tbts) {
         if (noSt)
-          err(0);
+          err2(0);
         break;
       }
     }
@@ -43458,11 +44245,11 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
       pos += c & 15;
       if (pos > tbts) {
         if (noSt)
-          err(0);
+          err2(0);
         break;
       }
       if (!c)
-        err(2);
+        err2(2);
       if (sym < 256)
         buf[bt++] = sym;
       else if (sym == 256) {
@@ -43477,7 +44264,7 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
         }
         var d = dm[bits16(dat, pos) & dms], dsym = d >> 4;
         if (!d)
-          err(3);
+          err2(3);
         pos += d & 15;
         var dt = fd[dsym];
         if (dsym > 3) {
@@ -43486,7 +44273,7 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
         }
         if (pos > tbts) {
           if (noSt)
-            err(0);
+            err2(0);
           break;
         }
         if (resize)
@@ -43495,7 +44282,7 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
         if (bt < dt) {
           var shift = dl - dt, dend = Math.min(dt, end);
           if (shift + bt < 0)
-            err(3);
+            err2(3);
           for (;bt < dend; ++bt)
             buf[bt] = dict[shift + bt];
         }
@@ -43550,7 +44337,7 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
       }
     }
     if (z < 2)
-      err(13);
+      err2(13);
   }
   return [sc, su, off, 0];
 };
@@ -43619,13 +44406,14 @@ var init_esm = __esm(() => {
 
 // packages/gateway/src/skill-market.ts
 import { createHash as createHash6, randomUUID as randomUUID4 } from "crypto";
-import { mkdir as mkdir6, readdir as readdir2, rename as rename4, rm as rm5, stat as stat3, writeFile as writeFile5 } from "fs/promises";
+import { mkdir as mkdir6, readdir as readdir2, rm as rm5, stat as stat5, writeFile as writeFile5 } from "fs/promises";
 import { homedir as homedir7 } from "os";
-import { dirname as dirname8, join as join12 } from "path";
+import { dirname as dirname8, join as join13 } from "path";
 function createSkillMarketClient(options) {
   const home = options.home ?? homedir7();
   const fetchImpl = options.fetchImpl ?? fetch;
   const now = options.now ?? Date.now;
+  const placeRename = options.renameImpl;
   let base;
   try {
     base = new URL(options.marketUrl);
@@ -43730,6 +44518,8 @@ function createSkillMarketClient(options) {
       throw new SkillMarketError("market_unavailable", "Project-scope install needs a workspaceRoot");
     return projectSkillsDir(workspaceRoot);
   };
+  const BACKUP_PREFIX = ".bak-";
+  const UUID_LENGTH = 36;
   const sweepTempDirs = async (skillsDir) => {
     const parent = dirname8(skillsDir);
     let names = [];
@@ -43738,12 +44528,27 @@ function createSkillMarketClient(options) {
     } catch {
       return;
     }
-    await Promise.all(names.filter((n) => n.startsWith(".tmp-")).map((n) => rm5(join12(parent, n), { recursive: true, force: true }).catch(() => {})));
+    await Promise.all(names.filter((n) => n.startsWith(".tmp-")).map((n) => rm5(join13(parent, n), { recursive: true, force: true }).catch(() => {})));
+    for (const n of names.filter((n) => n.startsWith(BACKUP_PREFIX))) {
+      const backup = join13(parent, n);
+      const skill = n.slice(BACKUP_PREFIX.length + UUID_LENGTH + 1);
+      if (skill === "" || skill.includes("/") || skill.includes("\\") || skill === "." || skill === "..")
+        continue;
+      const target = join13(skillsDir, skill);
+      if (await stat5(target).catch(() => {
+        return;
+      }) === undefined) {
+        await mkdir6(skillsDir, { recursive: true }).catch(() => {});
+        await renameWithRetry(backup, target).catch(() => {});
+      } else {
+        await rm5(backup, { recursive: true, force: true }).catch(() => {});
+      }
+    }
   };
   const install = async ({ name, scope, workspaceRoot, overwrite }) => {
     const skillsDir = skillsDirFor(scope, workspaceRoot);
-    const target = join12(skillsDir, name);
-    const exists = await stat3(target).catch(() => {
+    const target = join13(skillsDir, name);
+    const exists = await stat5(target).catch(() => {
       return;
     }) !== undefined;
     if (exists && overwrite !== true)
@@ -43751,24 +44556,34 @@ function createSkillMarketClient(options) {
     const skill = await detail(name);
     const files = unpack(skill, await download(skill));
     await sweepTempDirs(skillsDir);
-    const temp = join12(dirname8(skillsDir), `.tmp-${randomUUID4()}`);
+    const temp = join13(dirname8(skillsDir), `.tmp-${randomUUID4()}`);
     try {
       for (const [relative, bytes] of files) {
-        const dest = join12(temp, ...relative.split("/"));
+        const dest = join13(temp, ...relative.split("/"));
         await mkdir6(dirname8(dest), { recursive: true });
         await writeFile5(dest, bytes);
       }
-      if (exists)
-        await rm5(target, { recursive: true, force: true });
       await mkdir6(skillsDir, { recursive: true });
-      await rename4(temp, target);
+      if (exists) {
+        const backup = join13(dirname8(skillsDir), `${BACKUP_PREFIX}${randomUUID4()}-${name}`);
+        await renameWithRetry(target, backup);
+        try {
+          await renameWithRetry(temp, target, placeRename ? { rename: placeRename } : {});
+        } catch (error) {
+          await renameWithRetry(backup, target).catch(() => {});
+          throw error;
+        }
+        await rm5(backup, { recursive: true, force: true }).catch(() => {});
+      } else {
+        await renameWithRetry(temp, target, placeRename ? { rename: placeRename } : {});
+      }
     } finally {
       await rm5(temp, { recursive: true, force: true }).catch(() => {});
     }
     let shadowedBy;
     if (scope === "user" && workspaceRoot !== undefined && workspaceRoot !== "") {
-      const projectDir = join12(projectSkillsDir(workspaceRoot), name);
-      if (await stat3(projectDir).catch(() => {
+      const projectDir = join13(projectSkillsDir(workspaceRoot), name);
+      if (await stat5(projectDir).catch(() => {
         return;
       }) !== undefined)
         shadowedBy = "project";
@@ -43777,8 +44592,8 @@ function createSkillMarketClient(options) {
   };
   const uninstall = async ({ name, scope, workspaceRoot }) => {
     const skillsDir = skillsDirFor(scope, workspaceRoot);
-    const target = join12(skillsDir, name);
-    if (await stat3(target).catch(() => {
+    const target = join13(skillsDir, name);
+    if (await stat5(target).catch(() => {
       return;
     }) === undefined)
       throw new SkillMarketError("skill_not_installed", `Skill ${name} is not installed at ${scope} level`);
@@ -43809,7 +44624,7 @@ function createSkillMarketClient(options) {
     uninstall
   };
 }
-var SkillMarketError, CATALOG_TTL_MS = 60000, ZIP_CACHE_MAX = 16, MAX_PACKAGE_BYTES, userSkillsDir2 = (home) => join12(home, ".agents", "skills"), projectSkillsDir = (workspaceRoot) => join12(workspaceRoot, ".agents", "skills"), activeLevelOf = (state) => state.project ? "project" : state.user ? "user" : state.builtin ? "builtin" : null, normalizeEntry = (raw) => {
+var SkillMarketError, CATALOG_TTL_MS = 60000, ZIP_CACHE_MAX = 16, MAX_PACKAGE_BYTES, userSkillsDir2 = (home) => join13(home, ".agents", "skills"), projectSkillsDir = (workspaceRoot) => join13(workspaceRoot, ".agents", "skills"), activeLevelOf = (state) => state.project ? "project" : state.user ? "user" : state.builtin ? "builtin" : null, normalizeEntry = (raw) => {
   const row = raw ?? {};
   const metadata = row.metadata;
   const source = metadata !== null && typeof metadata === "object" ? metadata.source : undefined;
@@ -43841,8 +44656,8 @@ var init_skill_market = __esm(() => {
 
 // packages/gateway/src/workspaces.ts
 import { constants as constants3 } from "fs";
-import { access, readdir as readdir3, stat as stat4 } from "fs/promises";
-import { dirname as dirname9, isAbsolute as isAbsolute4, join as join13 } from "path";
+import { access, readdir as readdir3, stat as stat6 } from "fs/promises";
+import { dirname as dirname9, isAbsolute as isAbsolute4, join as join14 } from "path";
 async function browseWorkspaces(options) {
   const requested = options.path.replace(/^\/+([A-Za-z]:[\\/])/, "$1");
   if (process.platform === "win32" && (requested === "/" || requested === "\\")) {
@@ -43869,11 +44684,11 @@ async function browseWorkspaces(options) {
   let next = offset;
   for (;next < entries.length && directories.length < 100; next++) {
     const entry = entries[next];
-    const target = join13(path, entry.name);
+    const target = join14(path, entry.name);
     if (!entry.isDirectory() && !entry.isSymbolicLink())
       continue;
     try {
-      if (!(await stat4(target)).isDirectory())
+      if (!(await stat6(target)).isDirectory())
         continue;
       await access(target, constants3.R_OK | constants3.X_OK);
       directories.push({ name: entry.name, path: target });
@@ -43912,12 +44727,15 @@ async function createNekoServerServices(options) {
   const updates = new UpdateChecker(options.updates);
   await updates.local();
   const updateListeners = new Set;
-  const info = (value) => ({ ...value, serverId: options.serverId });
-  let published = JSON.stringify(updates.state), closed = false;
+  const info = (value) => {
+    const shell = runtime.shellStatus();
+    return { ...value, serverId: options.serverId, ...shell === undefined ? {} : { shell } };
+  };
+  let published = JSON.stringify(info(updates.state)), closed = false;
   const publishUpdates = () => {
     if (closed)
       return;
-    const next = JSON.stringify(updates.state);
+    const next = JSON.stringify(info(updates.state));
     if (next === published)
       return;
     published = next;
@@ -43936,6 +44754,7 @@ async function createNekoServerServices(options) {
       variant: "ready",
       info: current,
       check: async () => {
+        runtime.shellStatus({ refresh: true });
         await updates.check(true);
         publishUpdates();
         return info(updates.state);
@@ -43982,13 +44801,20 @@ async function createNekoServerServices(options) {
     status: info.status,
     awaitingAnswer: info.awaitingAnswer
   }));
-  const readStatuses = async () => Object.fromEntries(await Promise.all(CREDENTIAL_PROVIDERS.map(async (spec) => [spec.id, await runtime.credentialStatus(spec.id)])));
-  const [sessions, workspaces, statuses, search, contextSettings0] = await Promise.all([
+  const readStatuses = async () => {
+    const enabled = new Set(runtime.enabledProviders());
+    return Object.fromEntries(await Promise.all(CREDENTIAL_PROVIDERS.map(async (spec) => {
+      const status = await runtime.credentialStatus(spec.id);
+      return [spec.id, spec.kind === "model" ? { ...status, enabled: enabled.has(spec.id) } : status];
+    })));
+  };
+  const [sessions, workspaces, statuses, search, contextSettings0, defaultModel0] = await Promise.all([
     list(),
     runtime.listWorkspaces(),
     readStatuses(),
     runtime.searchSettings(),
-    runtime.contextSettings()
+    runtime.contextSettings(),
+    runtime.defaultModel()
   ]);
   let mutationTail = Promise.resolve();
   const serialize = (fn) => {
@@ -44005,6 +44831,7 @@ async function createNekoServerServices(options) {
       revision: 1,
       ...contextSettings0
     });
+    const defaultModel = self2.state("defaultModel", DefaultModelStateSchema, defaultModel0);
     const refreshContextSettings = async (_input, ctx) => {
       const next = await runtime.contextSettings();
       const { revision, ...current } = contextSettings.value;
@@ -44012,6 +44839,12 @@ async function createNekoServerServices(options) {
         contextSettings.replace(ctx, { revision: revision + 1, ...next });
       return null;
     };
+    const refreshDefaultModel = async (_input, ctx) => {
+      const next = await runtime.defaultModel();
+      if (JSON.stringify(next) !== JSON.stringify(defaultModel.value))
+        defaultModel.replace(ctx, next);
+      return null;
+    };
     const refreshSearchSettings = async (_input, ctx) => {
       const next = await runtime.searchSettings();
       const current = searchSettings.value;
@@ -44040,6 +44873,7 @@ async function createNekoServerServices(options) {
       credentials,
       searchSettings,
       contextSettings,
+      defaultModel,
       async refreshCredentials(_input, ctx) {
         credentials.replace(ctx, {
           revision: credentials.value.revision + 1,
@@ -44048,7 +44882,8 @@ async function createNekoServerServices(options) {
         return null;
       },
       refreshSearchSettings,
-      refreshContextSettings
+      refreshContextSettings,
+      refreshDefaultModel
     };
   }, { lifetime: "host" });
   const shared = (self2) => self2.get(ServerState, {});
@@ -44071,7 +44906,17 @@ async function createNekoServerServices(options) {
       remove: async (input, ctx) => {
         await runtime.removeCredential(input.provider);
         return hub.refreshCredentials(null, ctx);
-      }
+      },
+      setEnabled: (input, ctx) => serialize(async () => {
+        if (!isModelProvider(input.provider))
+          throw new ChordError5("invalid", "Unknown model provider.");
+        try {
+          await runtime.setProviderEnabled(input.provider, input.enabled);
+        } catch (error) {
+          throw new ChordError5("invalid", error instanceof Error ? error.message : "Cannot change provider.");
+        }
+        return hub.refreshCredentials(null, ctx);
+      })
     };
   });
   host.serve(NekoSearchSettings, (_input, _principal, self2) => {
@@ -44100,9 +44945,24 @@ async function createNekoServerServices(options) {
       })
     };
   });
+  host.serve(NekoDefaultModel, (_input, _principal, self2) => {
+    const hub = shared(self2);
+    return {
+      variant: "ready",
+      state: hub.defaultModel,
+      set: (input, ctx) => serialize(async () => {
+        await runtime.setDefaultModel(input);
+        return hub.refreshDefaultModel(null, ctx);
+      }),
+      clear: (_input, ctx) => serialize(async () => {
+        await runtime.setDefaultModel(null);
+        return hub.refreshDefaultModel(null, ctx);
+      })
+    };
+  });
   host.serve(NekoModels, () => ({
     variant: "ready",
-    list: async () => [...runtime.listModels()].map((value) => ({
+    list: async () => (await runtime.listSelectableModels()).map((value) => ({
       ...value,
       input: [...value.input],
       supportedThinkingLevels: [...value.supportedThinkingLevels]
@@ -44194,23 +45054,24 @@ var init_server_services = __esm(() => {
       credentials: CredentialStateSchema,
       searchSettings: SearchSettingsStateSchema,
       contextSettings: ContextSettingsStateSchema,
+      defaultModel: DefaultModelStateSchema,
       refreshCredentials: method2(Type12.Null(), Type12.Null()),
       refreshSearchSettings: method2(Type12.Null(), Type12.Null()),
-      refreshContextSettings: method2(Type12.Null(), Type12.Null())
+      refreshContextSettings: method2(Type12.Null(), Type12.Null()),
+      refreshDefaultModel: method2(Type12.Null(), Type12.Null())
     }
   });
 });
 
 // packages/gateway/src/gateway.ts
 import { randomUUID as randomUUID6 } from "crypto";
-import { mkdir as mkdir7, readFile as readFile8, writeFile as writeFile6 } from "fs/promises";
-import { basename as basename6, dirname as dirname10, join as join14 } from "path";
+import { mkdir as mkdir7, readFile as readFile9, writeFile as writeFile6 } from "fs/promises";
+import { basename as basename7, dirname as dirname10, join as join15 } from "path";
 import { createHost as createHost2 } from "@earendil-works/chord";
 import { BACKGROUND_CONTEXT as BACKGROUND_CONTEXT4 } from "@earendil-works/chord/context";
 async function startGateway(options = {}) {
   const context = options.context ?? BACKGROUND_CONTEXT4;
   const fileConfig = loadNekoConfig(options.configDir);
-  const model = options.model ?? fileConfig.defaultModel ?? DEFAULT_MODEL;
   const storagePath = options.storagePath ?? fileConfig.storagePath ?? DEFAULT_STORAGE_PATH;
   const host = options.host ?? fileConfig.gateway?.host ?? DEFAULT_HOST;
   const port = options.port !== undefined ? options.port : fileConfig.gateway?.port ?? (process.platform === "win32" ? 0 : DEFAULT_PORT);
@@ -44218,7 +45079,7 @@ async function startGateway(options = {}) {
   const marketUrl = options.marketUrl ?? fileConfig.skills?.marketUrl ?? DEFAULT_SKILL_MARKET_URL;
   const nekoDir = dirname10(storagePath);
   const serverId = options.serverId ?? await loadOrCreateServerId(nekoDir);
-  const socketPath = options.socketPath !== undefined ? options.socketPath : fileConfig.gateway?.socketPath !== undefined ? fileConfig.gateway.socketPath : process.platform === "win32" ? null : join14(nekoDir, `${serverId}.sock`);
+  const socketPath = options.socketPath !== undefined ? options.socketPath : fileConfig.gateway?.socketPath !== undefined ? fileConfig.gateway.socketPath : process.platform === "win32" ? null : join15(nekoDir, `${serverId}.sock`);
   const runtime = await createNekoRuntime({
     context,
     onReport: (error) => options.onError?.(error instanceof Error ? error : new Error(String(error))),
@@ -44228,12 +45089,15 @@ async function startGateway(options = {}) {
     ...options.apiKey !== undefined ? { apiKey: options.apiKey } : {},
     ...searchProvider !== undefined ? { searchProvider } : {},
     ...fileConfig.context !== undefined ? { contextSettings: fileConfig.context } : {},
-    model,
+    ...fileConfig.defaultModel !== undefined ? { model: fileConfig.defaultModel } : {},
+    ...options.model !== undefined ? { modelOverride: options.model } : {},
     thinkingLevel: options.thinkingLevel ?? fileConfig.thinkingLevel ?? "high",
     ...options.cwd !== undefined ? { cwd: options.cwd } : {},
     ...options.providers !== undefined ? { providers: options.providers } : {},
     ...options.extensions !== undefined ? { extensions: options.extensions } : {},
-    ...options.promptHome !== undefined ? { promptHome: options.promptHome } : {}
+    ...options.promptHome !== undefined ? { promptHome: options.promptHome } : {},
+    ...fileConfig.shell?.path !== undefined ? { shellPath: fileConfig.shell.path } : {},
+    ...options.shellResolver !== undefined ? { shellResolver: options.shellResolver } : {}
   });
   try {
     return await bindGateway(runtime, {
@@ -44243,12 +45107,12 @@ async function startGateway(options = {}) {
       socketPath,
       serverId,
       nekoDir,
-      model,
       marketUrl,
       promptHome: options.promptHome,
       updates: options.updates,
       updateIntervalMs: options.updateIntervalMs,
       mobileServerName: options.mobileServerName,
+      mobileNetwork: options.mobileNetwork,
       onError: options.onError
     });
   } catch (error) {
@@ -44283,12 +45147,13 @@ async function bindGateway(runtime, options) {
     wsListener = createWsListener({ host, port, onError: options.onError });
     listeners.push(wsListener);
   }
+  const acceptLocal = (link) => chord.accept(link, {
+    principal: { kind: "local", connectionId: randomUUID6() },
+    onProtocolMismatch: ({ peer }) => options.onError?.(new Error(`Rejected a client on Chord protocol ${peer ?? "unknown"}; restart or update it.`))
+  });
   try {
     for (const listener of listeners)
-      await listener.start((link) => chord.accept(link, {
-        principal: { kind: "local", connectionId: randomUUID6() },
-        onProtocolMismatch: ({ peer }) => options.onError?.(new Error(`Rejected a client on Chord protocol ${peer ?? "unknown"}; restart or update it.`))
-      }));
+      await listener.start(acceptLocal);
   } catch (error) {
     await Promise.allSettled(listeners.map((listener) => listener.close()));
     await chord.close();
@@ -44304,6 +45169,7 @@ async function bindGateway(runtime, options) {
     serverId,
     serverName: options.mobileServerName,
     onError: options.onError,
+    network: options.mobileNetwork,
     chord: {
       accept: (link, acceptOptions) => chord.accept(link, acceptOptions),
       invalidatePrincipal: (match) => chord.invalidatePrincipal(match)
@@ -44328,6 +45194,9 @@ async function bindGateway(runtime, options) {
     port: wsListener?.port,
     runtime,
     mobile,
+    accept(link) {
+      acceptLocal(link);
+    },
     async close() {
       if (closing)
         return closing;
@@ -44368,16 +45237,16 @@ ${connectHint}`);
   return error instanceof Error ? error : new Error(message);
 }
 function serverIdFromSocketPath(socketPath) {
-  const name = basename6(socketPath);
+  const name = basename7(socketPath);
   if (!name.endsWith(".sock"))
     return;
   const candidate = name.slice(0, -".sock".length);
   return isServerId(candidate) ? candidate : undefined;
 }
 async function loadOrCreateServerId(nekoDir) {
-  const file = join14(nekoDir, SERVER_ID_FILENAME);
+  const file = join15(nekoDir, SERVER_ID_FILENAME);
   try {
-    const existing = (await readFile8(file, "utf8")).trim();
+    const existing = (await readFile9(file, "utf8")).trim();
     if (existing !== "")
       return existing;
   } catch {}
@@ -44416,10 +45285,11 @@ function gatewayCommand(args) {
 async function stopGatewayProcess(child, options = {}) {
   if (child.pid === undefined || child.exitCode !== null || child.signalCode !== null)
     return;
+  const viaStdin = options.viaStdin === true && child.stdin != null;
   await new Promise((resolve) => {
     let forcedTimer;
     const timer = setTimeout(() => {
-      child.kill("SIGKILL");
+      child.kill(viaStdin ? undefined : "SIGKILL");
       forcedTimer = setTimeout(resolve, options.forcedMs ?? FORCED_STOP_MS);
     }, options.gracefulMs ?? GRACEFUL_STOP_MS);
     child.once("exit", () => {
@@ -44427,7 +45297,10 @@ async function stopGatewayProcess(child, options = {}) {
       clearTimeout(forcedTimer);
       resolve();
     });
-    child.kill("SIGTERM");
+    if (viaStdin)
+      child.stdin?.end();
+    else
+      child.kill("SIGTERM");
   });
 }
 var GRACEFUL_STOP_MS = 3000, FORCED_STOP_MS = 2000;
@@ -44457,14 +45330,15 @@ function installShutdown(options = {}) {
       exit(1);
     });
   };
-  const onSignal = () => {
+  const begin = (reason) => {
     if (controller.signal.aborted) {
       options.log?.("\u518D\u6B21\u6536\u5230\u7EC8\u6B62\u4FE1\u53F7\uFF0C\u5F3A\u5236\u9000\u51FA\u3002");
       exit(130);
       return;
     }
-    options.log?.(`
-\u6B63\u5728\u5173\u95ED\u2026`);
+    options.log?.(reason === undefined ? `
+\u6B63\u5728\u5173\u95ED\u2026` : `
+\u6B63\u5728\u5173\u95ED\uFF08${reason}\uFF09\u2026`);
     controller.abort();
     timer = setTimeout(() => {
       options.log?.("\u5173\u95ED\u8D85\u65F6\uFF0C\u5F3A\u5236\u9000\u51FA\u3002");
@@ -44473,6 +45347,7 @@ function installShutdown(options = {}) {
     timer.unref?.();
     runCleanup();
   };
+  const onSignal = () => begin(undefined);
   const installed = [];
   for (const signal of shutdownSignals(proc.platform)) {
     try {
@@ -44487,6 +45362,9 @@ function installShutdown(options = {}) {
       if (controller.signal.aborted)
         runCleanup();
     },
+    trigger(reason) {
+      begin(reason);
+    },
     dispose() {
       clearTimeout(timer);
       for (const signal of installed)
@@ -44512,13 +45390,13 @@ var init_src2 = __esm(() => {
 
 // packages/tui/src/gateway.ts
 import { spawn as spawn3 } from "child_process";
-import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
-import { basename as basename7, dirname as dirname11, join as join15 } from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync4 } from "fs";
+import { basename as basename8, dirname as dirname11, join as join16 } from "path";
 async function connectToGateway(options = {}) {
   const config = loadNekoConfig(options.configDir);
   const storagePath = options.storagePath ?? config.storagePath ?? DEFAULT_STORAGE_PATH;
   const nekoDir = dirname11(storagePath);
-  const fileServerId = readServerId(join15(nekoDir, SERVER_ID_FILENAME2));
+  const fileServerId = readServerId(join16(nekoDir, SERVER_ID_FILENAME2));
   const platform = options.platform ?? process.platform;
   if (platform === "win32") {
     if (fileServerId !== undefined) {
@@ -44535,8 +45413,8 @@ async function connectToGateway(options = {}) {
     }
     return spawnAndConnect({ ...options, platform, storagePath, socketPath: undefined, nekoDir, fileServerId });
   }
-  const socketPath = options.socketPath ?? config.gateway?.socketPath ?? (fileServerId !== undefined ? join15(nekoDir, `${fileServerId}.sock`) : undefined);
-  const serverIdFor = (path) => fileServerId ?? serverIdFromSocketPath2(path) ?? readServerId(join15(nekoDir, SERVER_ID_FILENAME2));
+  const socketPath = options.socketPath ?? config.gateway?.socketPath ?? (fileServerId !== undefined ? join16(nekoDir, `${fileServerId}.sock`) : undefined);
+  const serverIdFor = (path) => fileServerId ?? serverIdFromSocketPath2(path) ?? readServerId(join16(nekoDir, SERVER_ID_FILENAME2));
   if (socketPath !== undefined && existsSync3(socketPath)) {
     const serverId = serverIdFor(socketPath);
     if (serverId !== undefined) {
@@ -44553,7 +45431,9 @@ async function connectToGateway(options = {}) {
 }
 async function spawnAndConnect(plan) {
   const command = gatewayCommand(gatewayArgs(plan));
-  const child = spawn3(command.binary, command.args, { stdio: ["ignore", "pipe", "pipe"] });
+  const child = spawn3(command.binary, command.args, {
+    stdio: [plan.platform === "win32" ? "pipe" : "ignore", "pipe", "pipe"]
+  });
   const outputTail = captureOutput(child);
   let spawnError;
   child.on("error", (error) => {
@@ -44562,7 +45442,7 @@ async function spawnAndConnect(plan) {
   try {
     return await connectSpawned(plan, child, outputTail, () => spawnError);
   } catch (error) {
-    await stopGatewayProcess(child);
+    await stopGatewayProcess(child, { viaStdin: plan.platform === "win32" });
     throw error;
   }
 }
@@ -44570,7 +45450,7 @@ async function connectSpawned(plan, child, outputTail, spawnError) {
   const timeoutMs = plan.spawnTimeoutMs ?? 20000;
   if (plan.platform === "win32") {
     const timeoutAt = Date.now() + timeoutMs;
-    const serverId = plan.fileServerId ?? await waitForValue(() => readServerId(join15(plan.nekoDir, SERVER_ID_FILENAME2)), "gateway serverId file", timeoutMs, child, outputTail, spawnError);
+    const serverId = plan.fileServerId ?? await waitForValue(() => readServerId(join16(plan.nekoDir, SERVER_ID_FILENAME2)), "gateway serverId file", timeoutMs, child, outputTail, spawnError);
     let lastError = new Error("Gateway port file unavailable");
     while (Date.now() < timeoutAt) {
       if (child.exitCode !== null || child.signalCode !== null || spawnError() !== undefined) {
@@ -44591,7 +45471,7 @@ async function connectSpawned(plan, child, outputTail, spawnError) {
           spawned: true,
           async close() {
             await client.close().catch(() => {});
-            await stopGatewayProcess(child);
+            await stopGatewayProcess(child, { viaStdin: plan.platform === "win32" });
             await removeGatewayPortFile(plan.nekoDir, serverId).catch(() => {});
           }
         };
@@ -44607,11 +45487,11 @@ async function connectSpawned(plan, child, outputTail, spawnError) {
   }
   let socketPath = plan.socketPath;
   if (socketPath === undefined) {
-    const generated = await waitForValue(() => readServerId(join15(plan.nekoDir, SERVER_ID_FILENAME2)), "gateway serverId file", timeoutMs, child, outputTail, spawnError);
-    socketPath = join15(plan.nekoDir, `${generated}.sock`);
+    const generated = await waitForValue(() => readServerId(join16(plan.nekoDir, SERVER_ID_FILENAME2)), "gateway serverId file", timeoutMs, child, outputTail, spawnError);
+    socketPath = join16(plan.nekoDir, `${generated}.sock`);
   }
   await waitForValue(() => existsSync3(socketPath) ? true : undefined, `gateway ready (socket: ${socketPath})`, timeoutMs, child, outputTail, spawnError);
-  const serverId = plan.fileServerId ?? serverIdFromSocketPath2(socketPath) ?? readServerId(join15(plan.nekoDir, SERVER_ID_FILENAME2));
+  const serverId = plan.fileServerId ?? serverIdFromSocketPath2(socketPath) ?? readServerId(join16(plan.nekoDir, SERVER_ID_FILENAME2));
   if (serverId === undefined) {
     throw new Error(`Cannot determine gateway serverId (socket: ${socketPath})`);
   }
@@ -44628,7 +45508,7 @@ async function connectSpawned(plan, child, outputTail, spawnError) {
         spawned: true,
         async close() {
           await client.close().catch(() => {});
-          await stopGatewayProcess(child);
+          await stopGatewayProcess(child, { viaStdin: plan.platform === "win32" });
         }
       };
     } catch (error) {
@@ -44645,6 +45525,7 @@ function gatewayArgs(plan) {
   if (plan.platform === "win32") {
     return [
       "--no-socket",
+      "--stop-on-stdin",
       "--storage",
       plan.storagePath,
       ...plan.credentialsPath ? ["--credentials", plan.credentialsPath] : [],
@@ -44663,14 +45544,14 @@ function gatewayArgs(plan) {
 }
 function readServerId(file) {
   try {
-    const value = readFileSync3(file, "utf8").trim();
+    const value = readFileSync4(file, "utf8").trim();
     return isServerId(value) ? value : undefined;
   } catch {
     return;
   }
 }
 function serverIdFromSocketPath2(socketPath) {
-  const name = basename7(socketPath);
+  const name = basename8(socketPath);
   if (!name.endsWith(".sock"))
     return;
   const candidate = name.slice(0, -".sock".length);
@@ -44742,8 +45623,8 @@ var init_gateway2 = __esm(() => {
 });
 
 // packages/tui/src/help-ui.ts
-import { getKeybindings, matchesKey as matchesKey8, TUI_KEYBINDINGS, wrapTextWithAnsi as wrapTextWithAnsi4 } from "@earendil-works/pi-tui";
-function helpLines(platform = process.platform) {
+import { getKeybindings, matchesKey as matchesKey9, TUI_KEYBINDINGS, wrapTextWithAnsi as wrapTextWithAnsi4 } from "@earendil-works/pi-tui";
+function helpLines(platform = process.platform, wsl = runningInWsl()) {
   const rows = [];
   const section = (title, hints) => {
     rows.push(theme.accent(title), ...hints.map(([key, description]) => shortcutHints([key, description])), "");
@@ -44756,7 +45637,7 @@ function helpLines(platform = process.platform) {
     ["Ctrl+C", "Stop while running; exit when idle"],
     ["Ctrl+S", "Open sessions"],
     ["Ctrl+O", "Open or close the assistant's question"],
-    [platform === "win32" ? "Alt+V" : "Ctrl+V", "Paste clipboard image or text"],
+    [keyLabel(clipboardShortcutKey(platform, wsl)), "Paste clipboard image or text"],
     ["/", "Complete commands"],
     ["@", "Complete workspace files"],
     ["/skill:", "Complete installed skills"]
@@ -44815,7 +45696,8 @@ function helpLines(platform = process.platform) {
   ]);
   section("Web search", [
     ["/search", "Choose the web search provider"],
-    ["Enter", "Apply the highlighted provider"]
+    ["Enter", "Apply the highlighted provider"],
+    ["K", "Set the highlighted provider's API key (opens /login)"]
   ]);
   section("Context", [
     ["/context", "Tune compaction and tool result pruning"],
@@ -44874,13 +45756,13 @@ class HelpDetail {
     this.#offset = Math.max(0, Math.min(this.#max, this.#offset + delta));
   }
   handleKey(data) {
-    if (matchesKey8(data, "up"))
+    if (matchesKey9(data, "up"))
       this.scroll(-1);
-    else if (matchesKey8(data, "down"))
+    else if (matchesKey9(data, "down"))
       this.scroll(1);
-    else if (matchesKey8(data, "pageUp"))
+    else if (matchesKey9(data, "pageUp"))
       this.scroll(-this.#page);
-    else if (matchesKey8(data, "pageDown"))
+    else if (matchesKey9(data, "pageDown"))
       this.scroll(this.#page);
     else
       return false;
@@ -44897,117 +45779,11 @@ class HelpDetail {
 var keyLabel = (key) => key.split("+").map((part) => ({ escape: "Esc", pageUp: "PgUp", pageDown: "PgDn" })[part] ?? part[0].toUpperCase() + part.slice(1)).join("+");
 var init_help_ui = __esm(() => {
   init_shortcut_hints();
+  init_image_input();
   init_labels();
   init_theme();
 });
 
-// packages/tui/src/image-input.ts
-import { execFile as execFile3 } from "child_process";
-import { readFile as readFile9, stat as stat5 } from "fs/promises";
-import { homedir as homedir8 } from "os";
-import { basename as basename8, resolve as resolve6 } from "path";
-import { promisify as promisify2 } from "util";
-import { isKeyRelease as isKeyRelease4, isKeyRepeat as isKeyRepeat2, matchesKey as matchesKey9 } from "@earendil-works/pi-tui";
-function imagePaths(text, platform = process.platform) {
-  const paths = [];
-  let word = "", quote = "", escaped = false;
-  for (const c of text.trim()) {
-    if (escaped) {
-      word += c;
-      escaped = false;
-    } else if (c === "\\" && quote !== "'" && platform !== "win32") {
-      escaped = true;
-    } else if (quote) {
-      if (c === quote)
-        quote = "";
-      else
-        word += c;
-    } else if (c === '"' || c === "'")
-      quote = c;
-    else if (/\s/.test(c)) {
-      if (word) {
-        paths.push(word);
-        word = "";
-      }
-    } else
-      word += c;
-  }
-  if (quote || escaped)
-    return null;
-  if (word)
-    paths.push(word);
-  return paths.length && paths.every((p) => /\.(png|jpe?g|webp)$/i.test(p)) ? paths : null;
-}
-async function readImageFile(path, cwd) {
-  const full = resolve6(cwd, path.startsWith("~/") ? homedir8() + path.slice(1) : path);
-  const info = await stat5(full);
-  if (!info.isFile() || info.size > 20 * 1024 * 1024)
-    throw new Error("Image must be a file no larger than 20 MiB");
-  const bytes = await readFile9(full);
-  const after = await stat5(full);
-  if (bytes.length !== info.size || after.size !== info.size || after.mtimeMs !== info.mtimeMs)
-    throw new Error("Image changed while reading");
-  const mimeType = /\.png$/i.test(full) ? "image/png" : /\.webp$/i.test(full) ? "image/webp" : "image/jpeg";
-  return { name: basename8(full), mimeType, bytes };
-}
-async function command(file, args, encoding = "utf8") {
-  return (await exec(file, args, { timeout: 2000, maxBuffer: 30 * 1024 * 1024, encoding })).stdout;
-}
-async function clipboard(options = {}) {
-  const run = options.command ?? command;
-  const platform = options.platform ?? process.platform;
-  if (platform === "darwin") {
-    const files = await run("osascript", [
-      "-e",
-      `try
-set fs to the clipboard as \xABclass furl\xBB
-return POSIX path of fs
-on error
-return ""
-end try`
-    ]).catch(() => "");
-    if (String(files).trim())
-      return /\.(png|jpe?g|webp)$/i.test(String(files).trim()) ? { paths: [String(files).trim()] } : { text: String(files).trim() };
-    const image = String(await run("osascript", ["-e", `try
-return the clipboard as \xABclass PNGf\xBB
-on error
-return ""
-end try`]).catch(() => ""));
-    const hex = /\u00ABdata PNGf([0-9A-Fa-f]+)\u00BB/.exec(image)?.[1];
-    if (hex)
-      return { image: { name: "Clipboard.png", mimeType: "image/png", bytes: Buffer.from(hex, "hex") } };
-    return { text: String(await run("pbpaste", [])) };
-  }
-  if (platform === "win32") {
-    const value = String(await run("powershell.exe", [
-      "-NoProfile",
-      "-STA",
-      "-Command",
-      'Add-Type -AssemblyName System.Windows.Forms; $i=[Windows.Forms.Clipboard]::GetImage(); if($i){$m=New-Object IO.MemoryStream; $i.Save($m,[Drawing.Imaging.ImageFormat]::Png); "IMAGE:"+[Convert]::ToBase64String($m.ToArray());$i.Dispose();$m.Dispose()}else{Get-Clipboard -Raw}'
-    ]));
-    if (value.startsWith("IMAGE:"))
-      return {
-        image: { name: "Clipboard.png", mimeType: "image/png", bytes: Buffer.from(value.slice(6).trim(), "base64") }
-      };
-    return { text: value };
-  }
-  const wayland = options.wayland ?? !!process.env.WAYLAND_DISPLAY;
-  const tool = wayland ? "wl-paste" : "xclip";
-  try {
-    const bytes = await run(tool, wayland ? ["--type", "image/png"] : ["-selection", "clipboard", "-t", "image/png", "-o"], "buffer");
-    if (bytes.length)
-      return { image: { name: "Clipboard.png", mimeType: "image/png", bytes: Buffer.from(bytes) } };
-  } catch {}
-  return { text: String(await run(tool, wayland ? ["--no-newline"] : ["-selection", "clipboard", "-o"])) };
-}
-function isClipboardShortcut(data, platform = process.platform) {
-  return !isKeyRelease4(data) && !isKeyRepeat2(data) && matchesKey9(data, platform === "win32" ? "alt+v" : "ctrl+v");
-}
-var exec;
-var init_image_input = __esm(() => {
-  exec = promisify2(execFile3);
-});
-
 // packages/tui/src/question-dock.ts
 import {
   Input as Input3,
@@ -45015,7 +45791,7 @@ import {
   isKeyRepeat as isKeyRepeat3,
   matchesKey as matchesKey10,
   truncateToWidth as truncateToWidth6,
-  visibleWidth as visibleWidth4,
+  visibleWidth as visibleWidth5,
   wrapTextWithAnsi as wrapTextWithAnsi5
 } from "@earendil-works/pi-tui";
 function settlementText(record, mine) {
@@ -45494,7 +46270,7 @@ class QuestionDock {
       `\u2753 \u7B49\u5F85\u56DE\u7B54 (${n}) \xB7 Ctrl+O \u6216 /question`,
       "\u2753 \u7B49\u5F85\u56DE\u7B54 \xB7 /question"
     ];
-    const text = candidates.find((candidate) => visibleWidth4(candidate) <= width - 1) ?? candidates.at(-1) ?? "";
+    const text = candidates.find((candidate) => visibleWidth5(candidate) <= width - 1) ?? candidates.at(-1) ?? "";
     return theme.warning(truncateToWidth6(` ${text}`, width));
   }
   #panel(entries, width) {
@@ -45539,7 +46315,7 @@ class QuestionDock {
       ["", maxScroll > 0 ? range : ""],
       ["", ""]
     ].map(([a, b]) => title + theme.dim([a, b].filter(Boolean).map((part) => ` \xB7 ${part}`).join("")));
-    const rows = [headers.find((header) => visibleWidth4(header) <= width) ?? headers.at(-1) ?? title];
+    const rows = [headers.find((header) => visibleWidth5(header) <= width) ?? headers.at(-1) ?? title];
     for (const line of bodyLines.slice(scroll, scroll + bodyRows))
       rows.push(`${theme.dim("\u2502 ")}${line}`);
     if (form) {
@@ -45619,7 +46395,7 @@ class QuestionDock {
       ];
     }
     const lines = candidates.map((parts) => ` ${shortcutHints(...parts)}`);
-    return lines.find((line) => visibleWidth4(line) <= width) ?? truncateToWidth6(lines.at(-1) ?? "", width);
+    return lines.find((line) => visibleWidth5(line) <= width) ?? truncateToWidth6(lines.at(-1) ?? "", width);
   }
 }
 var QUESTION_MAX_ROWS = 14, QUESTION_MIN_ROWS = 6, SKIP_LABEL = "\u8DF3\u8FC7\u6B64\u95EE\u9898", QUESTION_KEY = "ctrl+o", canAutoOpen = (focus) => focus.online && focus.usable && focus.editorText === "" && !focus.autocomplete && !focus.overlayOpen && !focus.approvalFocused && !focus.sessionOperation && !focus.queueSelecting, keyOf = (session, id, version) => `${session}\x00${id}\x00${version}`, messageOf = (error) => error instanceof Error ? error.message : String(error);
@@ -45759,6 +46535,95 @@ var init_input_router = __esm(() => {
   init_question_dock();
 });
 
+// packages/tui/src/provider-ui.ts
+function providerSendBlock(model, credentials) {
+  const status = model ? credentials?.statuses[model.provider] : undefined;
+  if (!model || !status)
+    return;
+  const name = providerName(model.provider);
+  if (status.enabled === false)
+    return `${name} is disabled. Enable it with /login or switch model.`;
+  if (status.source === "none")
+    return `Configure ${name} with /login before sending.`;
+  return;
+}
+function modelItems(models, current, defaultModel) {
+  const currentKey = current ? modelKey(current) : undefined;
+  const defaultKey = defaultModel ? modelKey(defaultModel) : undefined;
+  const order = new Map(MODEL_PROVIDERS.map((spec, index) => [spec.id, index + 1]));
+  const rank = (provider) => provider === current?.provider ? 0 : order.get(provider) ?? order.size + 1;
+  const providers = [...new Set(models.map((model) => model.provider))].sort((a, b) => rank(a) - rank(b) || a.localeCompare(b));
+  const items = [];
+  for (const provider of providers) {
+    const group = models.filter((model) => model.provider === provider).sort((a, b) => Number(modelKey(b) === currentKey) - Number(modelKey(a) === currentKey) || a.name.localeCompare(b.name));
+    const name = providerName(provider);
+    const available = group.some((model) => model.available);
+    items.push({
+      value: `header:${provider}`,
+      label: `${name}${available ? "" : " \xB7 needs key"}`,
+      header: true
+    });
+    for (const model of group) {
+      const key = modelKey(model);
+      const image = model.input.includes("image");
+      const tags = [
+        ...key === defaultKey ? ["default"] : [],
+        ...model.available ? [] : ["needs key"],
+        formatTokens(model.contextWindow),
+        ...model.reasoning ? ["Thinking"] : [],
+        ...image ? ["Images"] : []
+      ];
+      items.push({
+        value: key,
+        label: `${key}${key === currentKey ? " (Current)" : ""}${key === defaultKey ? " \u2605" : ""}`,
+        rightLabel: tags.join(" \xB7 "),
+        searchText: `${model.name} ${name}`,
+        description: `${model.name} | ${formatTokens(model.contextWindow)} context${model.reasoning ? " | Thinking" : ""} | ${image ? "Images" : "Text only"}`,
+        ...model.available ? {} : { blockedHint: needsKeyHint(provider) }
+      });
+    }
+  }
+  return items;
+}
+function openModelPanel(panel, client, current, applyModel, notify) {
+  let models = [];
+  const currentKey = current ? modelKey(current) : null;
+  const effectiveDefault = () => client.defaultModel.state.value?.effective ?? null;
+  const items = () => modelItems(models, current, effectiveDefault());
+  const stop = client.defaultModel.state.subscribe(() => panel.update(items()));
+  panel.groupedFilter = true;
+  panel.help = shortcutHints(["\u2191\u2193", "Select"], ["Enter", "Open"], ["D", "Toggle default"], ["Esc", "Close"]);
+  panel.listKey = (data, value) => {
+    if (data.toLowerCase() !== "d" || panel.search.getValue() !== "" || value === undefined)
+      return false;
+    const model = models.find((m) => modelKey(m) === value);
+    if (!model)
+      return false;
+    if (!model.available) {
+      panel.hint = needsKeyHint(model.provider);
+      return true;
+    }
+    const effective = effectiveDefault();
+    const toggle = effective !== null && modelKey(effective) === value ? client.defaultModel.clear(null) : client.defaultModel.set({ provider: model.provider, modelId: model.modelId });
+    toggle.catch((error) => notify(error instanceof Error ? error.message : String(error)));
+    return true;
+  };
+  panel.show("Models", async () => {
+    models = await client.models.list(null);
+    return items();
+  }, async (value) => {
+    const selected = models.find((m) => modelKey(m) === value);
+    if (selected?.available && value !== currentKey)
+      await applyModel(selected);
+  });
+  return stop;
+}
+var modelKey = (model) => `${model.provider}/${model.modelId}`, providerName = (id) => CREDENTIAL_PROVIDERS.find((spec) => spec.id === id)?.name ?? id, isProviderRejection = (message) => /^(PROVIDER_KEY_REQUIRED|PROVIDER_DISABLED):/.test(message), needsKeyHint = (provider) => `${providerName(provider)} needs a key. Use /login to configure it.`;
+var init_provider_ui = __esm(() => {
+  init_src();
+  init_shortcut_hints();
+});
+
 // packages/tui/src/queue-ui.ts
 import { matchesKey as matchesKey12, truncateToWidth as truncateToWidth7 } from "@earendil-works/pi-tui";
 
@@ -45866,10 +46731,10 @@ function searchItems(settings, credentials) {
     const status = credentials?.statuses[provider];
     return status ? SOURCES2[status.source] : "loading";
   };
-  const deepseekMissing = credentials?.statuses.deepseek.source === "none";
+  const deepseekMissing = credentials?.statuses.deepseek?.source === "none";
   const descriptions = {
     tavily: `Tavily search (${source("tavily")}). Default`,
-    deepseek: deepseekMissing ? "No DeepSeek key. Run /login to set one before choosing it" : `DeepSeek search and fetch with your DeepSeek API key (${source("deepseek")})`
+    deepseek: deepseekMissing ? "No DeepSeek key. Press k (or use /login) to set one before choosing it" : `DeepSeek search and fetch with your DeepSeek API key (${source("deepseek")})`
   };
   return SEARCH_PROVIDERS.map((value) => ({
     value,
@@ -45877,11 +46742,23 @@ function searchItems(settings, credentials) {
     description: descriptions[value]
   }));
 }
-function openSearchPanel(panel, client, notify) {
+function openSearchPanel(panel, client, notify, openKey) {
   const items = () => searchItems(client.searchSettings.state.value, client.credentials.state.value);
   const refresh = () => panel.update(items());
   const stops = [client.searchSettings.state.subscribe(refresh), client.credentials.state.subscribe(refresh)];
   panel.emptyText = SEARCH_EMPTY;
+  if (openKey) {
+    panel.help = shortcutHints(["\u2191\u2193", "Select"], ["Enter", "Choose"], ["K", "Set key"], ["Esc", "Close"]);
+    panel.listKey = (data, value) => {
+      if (data.toLowerCase() !== "k" || panel.search.getValue() !== "" || value === undefined)
+        return false;
+      if (!SEARCH_PROVIDERS.includes(value))
+        return false;
+      panel.close();
+      openKey(value);
+      return true;
+    };
+  }
   panel.show("Web search", async () => items(), async (value) => {
     await client.searchSettings.set({ provider: value });
     notify(`Web search provider set to ${NAMES[value]}.`);
@@ -45894,6 +46771,7 @@ function openSearchPanel(panel, client, notify) {
 var SEARCH_EMPTY = "Search settings are unavailable.", NAMES, SOURCES2;
 var init_search_ui = __esm(() => {
   init_search_providers();
+  init_shortcut_hints();
   NAMES = { tavily: "Tavily", deepseek: "DeepSeek" };
   SOURCES2 = {
     saved: "saved key",
@@ -45904,6 +46782,31 @@ var init_search_ui = __esm(() => {
   };
 });
 
+// packages/tui/src/shell-notice.ts
+function shellNoticeText(shell) {
+  if (shell.status !== "missing")
+    return;
+  if (shell.reason === "invalid_config")
+    return `${shell.detail ?? "shell.path is invalid."} Bash and background jobs are unavailable. Fix shell.path in neko.config.json.`;
+  return "Git Bash not found: bash and background jobs are unavailable. Install Git for Windows (https://git-scm.com/download/win) or set shell.path in neko.config.json.";
+}
+function createShellNotifier(show) {
+  let last;
+  return (shell) => {
+    if (shell === undefined)
+      return;
+    const text = shellNoticeText(shell);
+    if (text === undefined) {
+      last = undefined;
+      return;
+    }
+    if (text === last)
+      return;
+    last = text;
+    show(text);
+  };
+}
+
 // packages/tui/src/skill-market-ui.ts
 import { ChordError as ChordError6 } from "@earendil-works/chord";
 import { Markdown as Markdown3, matchesKey as matchesKey13, wrapTextWithAnsi as wrapTextWithAnsi6 } from "@earendil-works/pi-tui";
@@ -46424,7 +47327,7 @@ var init_subagents_ui = __esm(() => {
 });
 
 // packages/tui/src/todos-ui.ts
-import { matchesKey as matchesKey15, truncateToWidth as truncateToWidth8, visibleWidth as visibleWidth5, wrapTextWithAnsi as wrapTextWithAnsi7 } from "@earendil-works/pi-tui";
+import { matchesKey as matchesKey15, truncateToWidth as truncateToWidth8, visibleWidth as visibleWidth6, wrapTextWithAnsi as wrapTextWithAnsi7 } from "@earendil-works/pi-tui";
 function todoProgressText(list) {
   if (!list || list.items.length === 0)
     return;
@@ -46487,7 +47390,7 @@ class TodosDetail {
         rows.push(row === 0 ? styled(item.status, glyph, `${number}${line}`) : theme.dim(`${indent}${line}`));
       });
     });
-    const legend = height >= 5 && visibleWidth5(LEGEND) <= width ? [theme.dim(LEGEND)] : [];
+    const legend = height >= 5 && visibleWidth6(LEGEND) <= width ? [theme.dim(LEGEND)] : [];
     const pinned = offline.length + 1 + legend.length;
     const room = Math.max(1, height - pinned);
     this.#max = Math.max(0, rows.length - room);
@@ -46686,6 +47589,7 @@ class NekoTuiApp {
   #notices = new Container6;
   #versionNotice = new Container6;
   #versionStop;
+  #shellStop;
   #versionTimer;
   #terminal = new ProcessTerminal;
   #panel;
@@ -46715,6 +47619,7 @@ class NekoTuiApp {
   #queueRow = new QueueRow;
   #searchStop;
   #contextStop;
+  #modelStop;
   #agentDetails = new Map;
   #sessionId = "";
   #viewUnsubscribe;
@@ -46773,6 +47678,8 @@ class NekoTuiApp {
       this.#searchStop = undefined;
       this.#contextStop?.();
       this.#contextStop = undefined;
+      this.#modelStop?.();
+      this.#modelStop = undefined;
       clearInterval(this.#sessionPanelTimer);
       this.#sessionPanelTimer = undefined;
       this.#ui.setFocus(this.#question.open ? this.#question : this.#editor);
@@ -46801,6 +47708,9 @@ class NekoTuiApp {
       },
       remove: async (provider) => {
         await this.#gateway.client.credentials.remove({ provider });
+      },
+      toggle: async (provider, enabled) => {
+        await this.#gateway.client.credentials.setEnabled({ provider, enabled });
       }
     });
     const complete = fileCompletion(this.#commands, options.cwd ?? process.cwd(), (text) => this.addNotice(text), (query, signal) => this.#gateway.client.host.root((ctx) => this.#gateway.client.workspaceFiles.search({ workspaceRoot: this.#lastView?.cwd ?? options.cwd ?? process.cwd(), query }, ctx), { signal }));
@@ -46849,7 +47759,7 @@ class NekoTuiApp {
       showAgents: () => this.#showAgents(),
       toggleQuestion: () => this.#toggleQuestion(),
       clipboardKey: (data) => {
-        if (!matchesKey17(data, process.platform === "win32" ? "alt+v" : "ctrl+v"))
+        if (!matchesKey17(data, clipboardShortcutKey()))
           return false;
         if (isClipboardShortcut(data))
           this.pasteClipboard();
@@ -46938,15 +47848,20 @@ class NekoTuiApp {
       this.#ui.requestRender();
     };
     this.#versionStop = this.#gateway.client.application.info.subscribe(() => void refreshVersion());
+    const notifyShell = createShellNotifier((text) => this.addNotice(text, "warning", { wrap: true, ttlMs: 20000 }));
+    const checkShell = () => notifyShell(this.#gateway.client.application.info.value?.shell);
+    this.#shellStop = this.#gateway.client.application.info.subscribe(checkShell);
     this.#versionTimer = setInterval(() => void refreshVersion(), 30000);
     refreshVersion();
     await this.switchSession(initialSessionId);
     this.#ui.start();
     this.#ui.requestRender(true);
+    checkShell();
     loadAllHighlightLanguages();
     this.#startThemeDetection();
     await this.#exited;
     this.#versionStop?.();
+    this.#shellStop?.();
     clearInterval(this.#versionTimer);
     this.#viewUnsubscribe?.();
     this.#directoryUnsubscribe?.();
@@ -47003,7 +47918,7 @@ class NekoTuiApp {
         chat.compact({ instructions }).catch((e) => {
           if (session === this.#sessionId) {
             this.#editor.setText(text);
-            this.addNotice(messageOf2(e), "error");
+            this.addNotice(messageOf2(e), isProviderRejection(messageOf2(e)) ? "warning" : "error");
           }
         });
       return;
@@ -47017,14 +47932,7 @@ class NekoTuiApp {
       return;
     }
     if (trimmed === "/login") {
-      if (!this.#panel.open && !this.#login.open) {
-        const service = this.#gateway.client.credentials;
-        this.#login.show(service.state.value, (fn) => service.state.subscribe((value) => {
-          if (value)
-            fn(value);
-        }));
-        this.#ui.setFocus(this.#login);
-      }
+      this.#showLogin();
       return;
     }
     if (trimmed.startsWith("/login ")) {
@@ -47080,9 +47988,10 @@ class NekoTuiApp {
     const chat = this.#chat;
     if (chat === undefined)
       return;
-    if (this.#lastView?.agent.model?.provider === "deepseek" && this.#gateway.client.credentials.state.value.statuses.deepseek.source === "none") {
+    const blocked = providerSendBlock(this.#lastView?.agent.model, this.#gateway.client.credentials.state.value);
+    if (blocked) {
       this.#editor.setText(text);
-      this.addNotice("Configure DeepSeek with /login before sending.", "warning");
+      this.addNotice(blocked, "warning");
       return;
     }
     this.sendImages(text);
@@ -47163,8 +48072,10 @@ class NekoTuiApp {
           this.#imageDrafts.get(session)?.delete(ref);
       this.#retryRequests.delete(session);
     } catch (e) {
-      if (session === this.#sessionId)
-        this.addNotice(messageOf2(e), "error");
+      if (session === this.#sessionId) {
+        const message = messageOf2(e);
+        this.addNotice(message, isProviderRejection(message) ? "warning" : "error");
+      }
     } finally {
       for (const id of ids)
         await chat.releaseImage(id).catch(() => {});
@@ -47345,22 +48256,10 @@ class NekoTuiApp {
       return;
     const chat = this.#chat;
     const current = this.#lastView?.agent.model;
-    const currentKey = current ? `${current.provider}/${current.modelId}` : null;
-    let models = [];
-    const ready = this.#panel.show("Models", async () => {
-      models = await this.#gateway.client.models.list(null);
-      return [...models].sort((a, b) => Number(keyOf2(b) === currentKey) - Number(keyOf2(a) === currentKey)).map((model) => ({
-        value: keyOf2(model),
-        label: `${model.name}${keyOf2(model) === currentKey ? " (Current)" : ""}`,
-        description: `${keyOf2(model)} | ${formatContextWindow(model.contextWindow)} context${model.reasoning ? " | Thinking" : ""} | ${model.input.includes("image") ? "Images" : "Text only"}`
-      }));
-    }, async (value) => {
-      const selected = models.find((m) => keyOf2(m) === value);
-      if (selected && value !== currentKey)
-        await chat?.configure({ model: { provider: selected.provider, modelId: selected.modelId } });
-    });
+    this.#modelStop = openModelPanel(this.#panel, this.#gateway.client, current, async (selected) => {
+      await chat?.configure({ model: { provider: selected.provider, modelId: selected.modelId } });
+    }, (message) => this.addNotice(message, "error"));
     this.#ui.setFocus(this.#panel);
-    await ready;
   }
   async openThemeOverlay() {
     if (this.#exitStarted || this.#panel.open || this.#login.open)
@@ -47402,8 +48301,12 @@ class NekoTuiApp {
       return;
     try {
       const model = (await this.#gateway.client.models.list(null)).find((m) => m.provider === ref.provider && m.modelId === ref.modelId);
-      if (chat !== this.#chat || this.#exitStarted || this.#panel.open || this.#login.open || !model)
+      if (chat !== this.#chat || this.#exitStarted || this.#panel.open || this.#login.open)
+        return;
+      if (!model) {
+        this.addNotice("The current model is unavailable. Choose another with /model.", "warning");
         return;
+      }
       if (raw) {
         const level = model.supportedThinkingLevels.find((value) => value === raw);
         if (!level) {
@@ -47562,10 +48465,20 @@ class NekoTuiApp {
     });
     return { consume: true };
   }
+  #showLogin(initial) {
+    if (this.#panel.open || this.#login.open)
+      return;
+    const service = this.#gateway.client.credentials;
+    this.#login.show(service.state.value, (fn) => service.state.subscribe((value) => {
+      if (value)
+        fn(value);
+    }), initial);
+    this.#ui.setFocus(this.#login);
+  }
   #showSearch() {
     if (this.#exitStarted || this.#panel.open || this.#login.open)
       return;
-    this.#searchStop = openSearchPanel(this.#panel, this.#gateway.client, (message) => this.addNotice(message));
+    this.#searchStop = openSearchPanel(this.#panel, this.#gateway.client, (message) => this.addNotice(message), (provider) => this.#showLogin({ provider, group: "search" }));
     this.#ui.setFocus(this.#panel);
   }
   #showContext() {
@@ -47655,7 +48568,8 @@ class NekoTuiApp {
     if (this.#imageWarningModel !== imageModel && view.items.some((i) => (i.type === "user" || i.type === "tool") && i.images?.length)) {
       this.#imageWarningModel = imageModel;
       this.#gateway.client.models.list(null).then((models) => {
-        if (this.#imageWarningModel === imageModel && !models.find((m) => m.provider === view.agent.model?.provider && m.modelId === view.agent.model?.modelId)?.input.includes("image"))
+        const model = models.find((m) => m.provider === view.agent.model?.provider && m.modelId === view.agent.model?.modelId);
+        if (this.#imageWarningModel === imageModel && model && !model.input.includes("image"))
           this.addNotice("Text-only model: previous images are unavailable to the model; written analysis is retained.", "warning");
       }).catch(() => {});
     }
@@ -47849,7 +48763,7 @@ class NekoTuiApp {
   #syncWelcome(view) {
     const empty = view.items.length === 0 && view.streaming === null && !view.busy;
     if (empty) {
-      const modelShort = view.model.split("/").at(-1) ?? view.model;
+      const modelShort = modelDisplayName(view.model);
       this.#welcome.setModelLine(view.agent.thinkingLevel !== null ? `${modelShort} \xB7 Think ${view.agent.thinkingLevel}` : modelShort);
       if (!this.#welcomeAttached) {
         this.#imageTranscript.addChild(this.#welcome);
@@ -47957,12 +48871,6 @@ function hiddenCommands(view) {
     hidden.add("question");
   return hidden;
 }
-function keyOf2(model) {
-  return `${model.provider}/${model.modelId}`;
-}
-function formatContextWindow(tokens) {
-  return formatTokens(tokens);
-}
 async function runTui(options = {}) {
   options = { ...options, cwd: normalizeWorkspace(options.cwd) };
   const gateway = await connectToGateway({
@@ -47986,7 +48894,7 @@ async function initialSessionId(gateway, cwd) {
     return first.id;
   return (await gateway.client.management.create({ ...cwd !== undefined ? { cwd } : {} })).id;
 }
-var EXIT_COMMANDS, SESSIONS_COMMANDS, NEW_SESSION_VALUE = "__new__";
+var EXIT_COMMANDS, SESSIONS_COMMANDS, NEW_SESSION_VALUE = "__new__", keyOf2;
 var init_tui = __esm(() => {
   init_src();
   init_application_updates();
@@ -48016,6 +48924,7 @@ var init_tui = __esm(() => {
   init_jobs_ui();
   init_labels();
   init_layout();
+  init_provider_ui();
   init_question_dock();
   init_queue_ui();
   init_search_ui();
@@ -48027,6 +48936,7 @@ var init_tui = __esm(() => {
   init_workspace2();
   EXIT_COMMANDS = new Set(["/exit", "/quit"]);
   SESSIONS_COMMANDS = new Set(["/sessions", "/session"]);
+  keyOf2 = modelKey;
 });
 
 // packages/tui/src/main.ts
@@ -48110,7 +49020,7 @@ var USAGE = `\u7528\u6CD5: neko tui [\u9009\u9879]
 
 \u6062\u590D\u5F53\u524D\u5DE5\u4F5C\u76EE\u5F55\u6700\u8FD1\u4F7F\u7528\u7684\u4F1A\u8BDD\uFF0C\u4E0D\u5B58\u5728\u5219\u521B\u5EFA\u3002
 \u6309\u9700\u62C9\u8D77\u7F51\u5173\uFF0C\u5C5E\u4E3B TUI \u9000\u51FA\u65F6\u968F\u4E4B\u505C\u6B62\u3002
-\u53EF\u7528 /login \u6216 DEEPSEEK_API_KEY \u914D\u7F6E\u51ED\u636E\uFF1B/search \u9009\u62E9\u8054\u7F51\u641C\u7D22\u670D\u52A1\uFF08tavily / deepseek\uFF0C\u9ED8\u8BA4 tavily\uFF09\uFF1B/context \u8C03\u6574\u4E0A\u4E0B\u6587\u538B\u7F29\u4E0E\u5DE5\u5177\u7ED3\u679C\u88C1\u526A\u3002`;
+\u53EF\u7528 /login \u6216 DEEPSEEK_API_KEY \u7B49\u73AF\u5883\u53D8\u91CF\u914D\u7F6E\u51ED\u636E\uFF08\u9664 DeepSeek \u5916\u7684 provider \u9700\u5148\u5728 /login \u542F\u7528\uFF09\uFF1B/search \u9009\u62E9\u8054\u7F51\u641C\u7D22\u670D\u52A1\uFF08tavily / deepseek\uFF0C\u9ED8\u8BA4 tavily\uFF09\uFF1B/context \u8C03\u6574\u4E0A\u4E0B\u6587\u538B\u7F29\u4E0E\u5DE5\u5177\u7ED3\u679C\u88C1\u526A\uFF1B/model \u4E2D\u53EF\u628A\u53EF\u9009\u6A21\u578B\u300C\u8BBE\u4E3A\u9ED8\u8BA4\u300D\uFF0C\u4F18\u5148\u7EA7\u4F4E\u4E8E --model\u3001\u9AD8\u4E8E\u914D\u7F6E\u6587\u4EF6 defaultModel\u3002`;
 var init_main = __esm(async () => {
   init_tui();
   try {
@@ -48142,7 +49052,7 @@ var init_open_browser = () => {};
 import { spawn as spawn4 } from "child_process";
 import { randomUUID as randomUUID7 } from "crypto";
 import { mkdir as mkdir8, readFile as readFile10, writeFile as writeFile7 } from "fs/promises";
-import { dirname as dirname12, join as join16 } from "path";
+import { dirname as dirname12, join as join17 } from "path";
 async function ensureNekoGateway(options) {
   const timeoutMs = options.spawnTimeoutMs ?? 30000;
   const timeoutAt = Date.now() + timeoutMs;
@@ -48184,11 +49094,11 @@ async function ensureNekoGateway(options) {
       }
       throw new Error(`\u7B49\u5F85 neko gateway \u5C31\u7EEA\u8D85\u65F6\uFF08${options.spawnTimeoutMs ?? 30000}ms\uFF09\uFF1A${lastError instanceof Error ? lastError.message : String(lastError)}`);
     } catch (error) {
-      await stopGatewayProcess(child);
+      await stopSpawnedGateway(child);
       throw error;
     }
   }
-  const socketPath = options.socketPath ?? join16(nekoDir, `${serverId}.sock`);
+  const socketPath = options.socketPath ?? join17(nekoDir, `${serverId}.sock`);
   const host = options.host ?? "127.0.0.1";
   const port = options.port ?? 8321;
   const wsUrl = `ws://${host.includes(":") && !host.startsWith("[") ? `[${host}]` : host}:${port}`;
@@ -48227,15 +49137,18 @@ async function ensureNekoGateway(options) {
     }
     throw new Error(`\u7B49\u5F85 neko gateway \u5C31\u7EEA\u8D85\u65F6\uFF08${options.spawnTimeoutMs ?? 30000}ms\uFF09\uFF1A${lastError instanceof Error ? lastError.message : String(lastError)}`);
   } catch (error) {
-    await stopGatewayProcess(child);
+    await stopSpawnedGateway(child);
     throw error;
   }
 }
+function stopSpawnedGateway(child) {
+  return stopGatewayProcess(child, { viaStdin: process.platform === "win32" });
+}
 function spawnGatewayProcess(options, socketPath, serverId) {
   const args = [
     "--host",
     options.host ?? "127.0.0.1",
-    ...process.platform === "win32" ? ["--no-socket"] : ["--port", String(options.port ?? 8321), "--socket-path", socketPath ?? ""],
+    ...process.platform === "win32" ? ["--no-socket", "--stop-on-stdin"] : ["--port", String(options.port ?? 8321), "--socket-path", socketPath ?? ""],
     "--server-id",
     serverId,
     "--storage",
@@ -48245,7 +49158,10 @@ function spawnGatewayProcess(options, socketPath, serverId) {
     ...options.model !== undefined ? ["--model", `${options.model.provider}/${options.model.modelId}`] : []
   ];
   const command = gatewayCommand(args);
-  return spawn4(command.binary, command.args, { env: process.env, stdio: ["ignore", "pipe", "pipe"] });
+  return spawn4(command.binary, command.args, {
+    env: process.env,
+    stdio: [process.platform === "win32" ? "pipe" : "ignore", "pipe", "pipe"]
+  });
 }
 function pipeChildLogs(child, onLog) {
   if (onLog === undefined)
@@ -48302,7 +49218,7 @@ function makeHandle(serverId, socketPath, wsUrl, spawned, nekoDir) {
     spawned,
     async close() {
       if (spawned !== null) {
-        await stopGatewayProcess(spawned);
+        await stopSpawnedGateway(spawned);
         if (process.platform === "win32")
           await removeGatewayPortFile(nekoDir, serverId).catch(() => {});
       }
@@ -48310,7 +49226,7 @@ function makeHandle(serverId, socketPath, wsUrl, spawned, nekoDir) {
   };
 }
 async function loadOrCreateServerId2(nekoDir) {
-  const file = join16(nekoDir, SERVER_ID_FILENAME3);
+  const file = join17(nekoDir, SERVER_ID_FILENAME3);
   try {
     const existing = (await readFile10(file, "utf8")).trim();
     if (existing !== "")
@@ -48635,9 +49551,9 @@ var init_mobile_admin = __esm(() => {
 
 // packages/web/src/open-target.ts
 import { spawn as spawn5 } from "child_process";
-import { existsSync as existsSync4, readFileSync as readFileSync4 } from "fs";
-import { homedir as homedir9 } from "os";
-import { posix, win32 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync5 } from "fs";
+import { homedir as homedir8 } from "os";
+import { posix, win32 as win322 } from "path";
 function isOpenTargetId(value) {
   return value === "vscode" || value === "file-manager";
 }
@@ -48656,9 +49572,9 @@ function systemOpenHost() {
   const platform = process.platform;
   return {
     platform,
-    wsl: detectWsl2(platform, process.env, () => readFileSync4("/proc/version", "utf8")),
+    wsl: detectWsl2(platform, process.env, () => readFileSync5("/proc/version", "utf8")),
     env: process.env,
-    home: homedir9(),
+    home: homedir8(),
     exists: existsSync4
   };
 }
@@ -48671,7 +49587,7 @@ function fileManagerLabel(host) {
 }
 function findOnPath(host, names) {
   const windows = host.platform === "win32";
-  const pathApi = windows ? win32 : posix;
+  const pathApi = windows ? win322 : posix;
   const raw = host.env[windows ? "Path" : "PATH"] ?? host.env.PATH ?? host.env.Path ?? "";
   for (const entry of raw.split(windows ? ";" : ":")) {
     if (entry === "")
@@ -48687,7 +49603,7 @@ function findOnPath(host, names) {
 function windowsCodeExecutable(host) {
   const shim = findOnPath(host, ["code.cmd"]);
   if (shim !== undefined) {
-    const exe = win32.join(win32.dirname(win32.dirname(shim)), "Code.exe");
+    const exe = win322.join(win322.dirname(win322.dirname(shim)), "Code.exe");
     if (host.exists(exe))
       return exe;
   }
@@ -48698,7 +49614,7 @@ function windowsCodeExecutable(host) {
     const base = host.env[variable];
     if (base === undefined || base === "")
       continue;
-    const exe = win32.join(base, suffix);
+    const exe = win322.join(base, suffix);
     if (host.exists(exe))
       return exe;
   }
@@ -48743,8 +49659,7 @@ function spawnDetached(spec) {
     const child = spawn5(spec.command, [...spec.args], {
       cwd: spec.cwd,
       detached: true,
-      stdio: "ignore",
-      windowsHide: true
+      stdio: "ignore"
     });
     const timer = setTimeout(() => reject(new OpenError("launch_failed", "\u542F\u52A8\u8D85\u65F6")), LAUNCH_TIMEOUT_MS);
     child.once("error", (error) => {
@@ -48785,7 +49700,7 @@ var init_open_target = __esm(() => {
 });
 
 // packages/web/src/open-api.ts
-import { realpath as realpath4, stat as stat6 } from "fs/promises";
+import { realpath as realpath4, stat as stat7 } from "fs/promises";
 import { isAbsolute as isAbsolute5 } from "path";
 async function validateDirectory(value) {
   if (typeof value !== "string" || value === "" || value.length > MAX_PATH_LENGTH)
@@ -48794,7 +49709,7 @@ async function validateDirectory(value) {
     return;
   try {
     const resolved = await realpath4(value);
-    return (await stat6(resolved)).isDirectory() ? resolved : undefined;
+    return (await stat7(resolved)).isDirectory() ? resolved : undefined;
   } catch {
     return;
   }
@@ -48856,7 +49771,7 @@ var init_open_api = __esm(() => {
 
 // packages/web/src/server.ts
 import { createReadStream } from "fs";
-import { stat as stat7 } from "fs/promises";
+import { stat as stat8 } from "fs/promises";
 import { createServer as createServer3 } from "http";
 import { dirname as dirname13, extname as extname2, resolve as resolve7, sep as sep3 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
@@ -48988,18 +49903,18 @@ async function serveStatic(pathname, method, response, staticDir) {
     return;
   }
   let file = candidate;
-  let stats = await stat7(file).catch(() => {
+  let stats = await stat8(file).catch(() => {
     return;
   });
   if (stats?.isDirectory()) {
     file = resolve7(file, "index.html");
-    stats = await stat7(file).catch(() => {
+    stats = await stat8(file).catch(() => {
       return;
     });
   }
   if (stats === undefined && extname2(candidate) === "") {
     file = resolve7(staticDir, "index.html");
-    stats = await stat7(file).catch(() => {
+    stats = await stat8(file).catch(() => {
       return;
     });
   }
@@ -49154,11 +50069,13 @@ var USAGE2 = `\u7528\u6CD5: neko web [\u9009\u9879]
   --server-id <id>     \u7F51\u5173\u903B\u8F91\u8EAB\u4EFD\uFF08\u9ED8\u8BA4\u8BFB\u53D6/\u751F\u6210 <\u6570\u636E\u76EE\u5F55>/gateway-server-id\uFF09
   --storage <path>     SQLite \u5B58\u50A8\u6587\u4EF6\uFF08\u9ED8\u8BA4 ~/.neko/neko.sqlite\uFF09
   --cwd <dir>          \u4F1A\u8BDD\u5DE5\u5177\u7684\u5DE5\u4F5C\u76EE\u5F55\uFF08\u9ED8\u8BA4\u5F53\u524D\u76EE\u5F55\uFF09
-  --model <ref>        \u6A21\u578B\uFF0C\u683C\u5F0F provider/modelId\uFF08\u9ED8\u8BA4 deepseek/deepseek-flash\uFF09
+  --model <ref>        \u6A21\u578B\uFF0C\u683C\u5F0F provider/modelId\uFF08modelId \u53EF\u542B /\uFF0C\u9ED8\u8BA4 deepseek/deepseek-flash\uFF09
   --no-open            \u4E0D\u81EA\u52A8\u6253\u5F00\u6D4F\u89C8\u5668\uFF08\u9002\u7528\u4E8E\u8FDC\u7A0B\u6216\u65E0\u684C\u9762\u73AF\u5883\uFF09
   -h, --help           \u663E\u793A\u6B64\u5E2E\u52A9
 
-\u53EF\u5728 Web \u8BBE\u7F6E\u9875\u914D\u7F6E Key\uFF1B\u7F51\u5173\u5B50\u8FDB\u7A0B\u4E5F\u4F1A\u7EE7\u627F DEEPSEEK_API_KEY\u3002`, server, shutdown;
+\u53EF\u5728 Web \u8BBE\u7F6E\u9875\u300C\u6A21\u578B\u670D\u52A1\u300D\u542F\u7528 provider\uFF08\u5982 OpenRouter\u3001OpenCode Go\uFF09\u5E76\u914D\u7F6E Key\uFF0C\u8054\u7F51\u641C\u7D22\u5728\u300C\u8054\u7F51\u641C\u7D22\u300D\u9875\u8BBE\u7F6E\uFF1B
+\u6A21\u578B\u9009\u62E9\u5668\u4E2D\u53EF\u628A\u53EF\u9009\u6A21\u578B\u300C\u8BBE\u4E3A\u9ED8\u8BA4\u300D\uFF0C\u4F18\u5148\u7EA7\u4F4E\u4E8E --model\u3001\u9AD8\u4E8E\u914D\u7F6E\u6587\u4EF6 defaultModel\uFF1B
+\u7F51\u5173\u5B50\u8FDB\u7A0B\u4E5F\u4F1A\u7EE7\u627F DEEPSEEK_API_KEY / OPENROUTER_API_KEY / OPENCODE_API_KEY \u7B49\u73AF\u5883\u53D8\u91CF\u3002`, server, shutdown;
 var init_main2 = __esm(async () => {
   init_src2();
   init_open_browser();
@@ -49284,6 +50201,9 @@ function parseGatewayArgs(argv) {
         options.configDir = next;
         i++;
         break;
+      case "--stop-on-stdin":
+        options.stopOnStdin = true;
+        break;
       default:
         throw new Error(`\u672A\u77E5\u9009\u9879: ${arg}`);
     }
@@ -49301,14 +50221,17 @@ var GATEWAY_USAGE = `\u7528\u6CD5: neko serve [\u9009\u9879]
   --no-socket          \u7981\u7528 Unix socket \u4F20\u8F93\uFF08\u4EC5 WebSocket\uFF09
   --server-id <id>     \u903B\u8F91\u670D\u52A1\u5668\u8EAB\u4EFD\uFF08\u9ED8\u8BA4\u8BFB\u53D6/\u751F\u6210 <\u6570\u636E\u76EE\u5F55>/gateway-server-id\uFF09
   --cwd <dir>          \u4F1A\u8BDD\u5DE5\u5177\u7684\u5DE5\u4F5C\u76EE\u5F55\uFF08\u9ED8\u8BA4\u5F53\u524D\u76EE\u5F55\uFF09
-  --model <ref>        \u6A21\u578B\uFF0C\u683C\u5F0F provider/modelId\uFF08\u9ED8\u8BA4 deepseek/deepseek-flash\uFF09
+  --model <ref>        \u6A21\u578B\uFF0C\u683C\u5F0F provider/modelId\uFF08modelId \u53EF\u542B /\uFF0C\u9ED8\u8BA4 deepseek/deepseek-flash\uFF09
   --storage <path>     SQLite \u5B58\u50A8\u6587\u4EF6\uFF08\u9ED8\u8BA4 ~/.neko/neko.sqlite\uFF09
   --credentials <path> \u7528\u6237\u51ED\u636E\u6587\u4EF6\uFF08\u9ED8\u8BA4 ~/.neko/credentials.json\uFF09
   --config <dir>       neko.config.json \u67E5\u627E\u8D77\u59CB\u76EE\u5F55\uFF08\u9ED8\u8BA4\u5F53\u524D\u76EE\u5F55\uFF09
+  --stop-on-stdin      \u6807\u51C6\u8F93\u5165\u7ED3\u675F\u65F6\u5173\u505C\u7F51\u5173\uFF08\u4F9B Windows \u4E0A\u62C9\u8D77\u7F51\u5173\u7684\u524D\u7AEF\u4F7F\u7528\uFF09
   -h, --help           \u663E\u793A\u6B64\u5E2E\u52A9
 
-\u53EF\u901A\u8FC7\u524D\u7AEF\u8BBE\u7F6E\u6216 DEEPSEEK_API_KEY / TAVILY_API_KEY \u914D\u7F6E\u51ED\u636E\uFF1B
-\u8054\u7F51\u641C\u7D22\u670D\u52A1\u53EF\u5728\u524D\u7AEF\u8BBE\u7F6E\uFF0C\u6216\u7528\u914D\u7F6E\u6587\u4EF6 webSearch.provider\uFF08tavily / deepseek\uFF0C\u9ED8\u8BA4 tavily\uFF09\u3002`;
+\u53EF\u901A\u8FC7\u524D\u7AEF\u8BBE\u7F6E\u6216\u73AF\u5883\u53D8\u91CF\uFF08DEEPSEEK_API_KEY / OPENROUTER_API_KEY / OPENCODE_API_KEY / TAVILY_API_KEY \u7B49\uFF09\u914D\u7F6E\u51ED\u636E\uFF1B
+\u9664 DeepSeek \u5916\u7684\u6A21\u578B provider \u9700\u5148\u5728\u524D\u7AEF\u542F\u7528\uFF0C--model \u6307\u5411\u672A\u542F\u7528\u7684 provider \u65F6\u63D0\u4EA4\u4F1A\u88AB\u62D2\u7EDD\uFF1B
+\u8054\u7F51\u641C\u7D22\u670D\u52A1\u53EF\u5728\u524D\u7AEF\u8BBE\u7F6E\uFF0C\u6216\u7528\u914D\u7F6E\u6587\u4EF6 webSearch.provider\uFF08tavily / deepseek\uFF0C\u9ED8\u8BA4 tavily\uFF09\uFF1B
+\u9ED8\u8BA4\u6A21\u578B\u8FD8\u53EF\u5728 TUI /model \u6216 Web \u6A21\u578B\u9009\u62E9\u5668\u4E2D\u300C\u8BBE\u4E3A\u9ED8\u8BA4\u300D\uFF0C\u4F18\u5148\u7EA7\u4F4E\u4E8E --model\u3001\u9AD8\u4E8E\u914D\u7F6E\u6587\u4EF6 defaultModel\u3002`;
 
 // packages/gateway/src/main.ts
 var argv, shutdown2, options, gateway;
@@ -49335,6 +50258,18 @@ var init_main3 = __esm(async () => {
     console.log(`  WebSocket:   ${gateway.wsUrl}`);
   console.log("\u6309 Ctrl+C \u505C\u6B62\u3002");
   shutdown2.setCleanup(() => gateway.close());
+  if (options.stopOnStdin === true) {
+    let triggered = false;
+    const onStdinEnd = () => {
+      if (triggered)
+        return;
+      triggered = true;
+      shutdown2.trigger("stdin \u5DF2\u5173\u95ED");
+    };
+    process.stdin.once("end", onStdinEnd);
+    process.stdin.once("close", onStdinEnd);
+    process.stdin.resume();
+  }
 });
 
 // packages/cli/src/main.ts
@@ -49352,8 +50287,10 @@ var USAGE3 = `\u7528\u6CD5: neko <\u547D\u4EE4> [\u9009\u9879]
   -h, --help     \u663E\u793A\u6B64\u5E2E\u52A9
 
 \u5404\u547D\u4EE4\u7684\u9009\u9879\u8BE6\u89C1 neko <\u547D\u4EE4> --help\u3002
-\u53EF\u901A\u8FC7 TUI /login\u3001Web \u8BBE\u7F6E\u9875\u6216 DEEPSEEK_API_KEY / TAVILY_API_KEY \u914D\u7F6E\u51ED\u636E\u3002
-\u8054\u7F51\u641C\u7D22\u670D\u52A1\uFF08\u9ED8\u8BA4 Tavily\uFF0C\u53EF\u6539\u9009 DeepSeek\uFF09\u53EF\u7528 TUI /search\u3001Web \u8BBE\u7F6E\u9875\u6216\u914D\u7F6E\u6587\u4EF6 webSearch.provider \u9009\u62E9\u3002`;
+\u53EF\u901A\u8FC7 TUI /login\u3001Web \u8BBE\u7F6E\u9875\u6216\u73AF\u5883\u53D8\u91CF\uFF08DEEPSEEK_API_KEY / OPENROUTER_API_KEY / OPENCODE_API_KEY / TAVILY_API_KEY \u7B49\uFF09\u914D\u7F6E\u51ED\u636E\uFF1B
+\u9664 DeepSeek \u5916\u7684\u6A21\u578B provider\uFF08\u5982 OpenRouter\u3001OpenCode Go\uFF09\u9700\u5148\u5728 /login \u6216 Web \u8BBE\u7F6E\u9875\u300C\u6A21\u578B\u670D\u52A1\u300D\u542F\u7528\uFF0C--model \u683C\u5F0F\u4E3A provider/modelId\u3002
+\u8054\u7F51\u641C\u7D22\u670D\u52A1\uFF08\u9ED8\u8BA4 Tavily\uFF0C\u53EF\u6539\u9009 DeepSeek\uFF09\u53EF\u7528 TUI /search\u3001Web \u8BBE\u7F6E\u9875\u300C\u8054\u7F51\u641C\u7D22\u300D\u6216\u914D\u7F6E\u6587\u4EF6 webSearch.provider \u9009\u62E9\u3002
+\u9ED8\u8BA4\u6A21\u578B\u53EF\u5728 TUI /model \u6216 Web \u6A21\u578B\u9009\u62E9\u5668\u300C\u8BBE\u4E3A\u9ED8\u8BA4\u300D\uFF0C\u4F18\u5148\u7EA7\u4F4E\u4E8E --model\u3001\u9AD8\u4E8E\u914D\u7F6E\u6587\u4EF6 defaultModel\u3002`;
 var [command2, ...rest] = process.argv.slice(2);
 switch (command2) {
   case "update": {