openplanr 2.2641.1 → 2.2641.2

package/lib/host-packages/openai/openplanr/skills/chair-review/SKILL.md

@@ -2,7 +2,6 @@
 name: chair-review
 description: "Synthesize an Operate cycle into a prioritized decision queue and action plan. Use after specialist reviews when leadership needs one coherent brief."
 license: MIT
-allowed-tools: "Read, Grep, Glob, Edit(./.planr/operate/**)"
 ---
 
 # OpenPlanr Chair Review
@@ -18,7 +17,12 @@ and its decision impact; continue when the remaining notes still support useful
 selected roster from the scope or brief and label an intentionally unselected lens `omitted by
 scope`; do not turn that omission into an issue or decision-changing gap.
 
-Write only `<output-path>`.
+Write only `<output-path>`. Writes follow the host's normal permission rules; this skill
+pre-approves nothing.
+
+Invoked without `<cycle-dir>`, offer the most recent cycle under `.planr/operate/` that holds
+advisor notes and use its `chair.md` as the output path. When there is none, say so and point to
+`planr-operate`; never create an empty cycle.
 
 ## Synthesis standard
 

package/lib/host-packages/openai/openplanr/skills/challenger-review/SKILL.md

@@ -2,7 +2,6 @@
 name: challenger-review
 description: "Challenge an Operate cycle's claims, alternatives, downside, and confidence. Use when assumptions or executive consensus need an independent stress test."
 license: MIT
-allowed-tools: "Read, Grep, Glob, Edit(./.planr/operate/**)"
 ---
 
 # OpenPlanr Challenger Review
@@ -18,7 +17,12 @@ Use `<cycle-dir>`, `<brief-path>`, `<output-path>`, and `<scope>`. Inspect the a
 is `omitted by scope`, not unavailable, and creates no gap by itself. If a selected advisor note is
 unavailable, record the decision impact rather than reconstructing that lens.
 
-Write only `<output-path>`.
+Write only `<output-path>`. Writes follow the host's normal permission rules; this skill
+pre-approves nothing.
+
+Invoked without `<cycle-dir>`, offer the most recent cycle under `.planr/operate/` that holds
+advisor notes and use its `challenger.md` as the output path. When there is none, say so and point
+to `planr-operate`; never create an empty cycle.
 
 ## Material exceptions
 

package/lib/host-packages/openai/openplanr/skills/cmo-review/SKILL.md

@@ -2,7 +2,6 @@
 name: cmo-review
 description: "Produce a grounded market and growth review for an Operate cycle. Use when acquisition, positioning, demand, retention, or missing measurement needs a CMO lens."
 license: MIT
-allowed-tools: "Read, Grep, Glob, Edit(./.planr/operate/**)"
 ---
 
 # OpenPlanr CMO Review

package/lib/host-packages/openai/openplanr/skills/cmo-review/references/operate-advisor-contract.md

@@ -1,8 +1,8 @@
 # Shared Operate advisor contract
 
-This contract supplies the common context method and output shape for the five executive advisor
-skills. The invoking skill supplies the lens, review questions, useful sources, and decision
-standard. Follow both.
+This contract supplies the common context method and output shape for the executive advisor
+skills (CEO, CTO, CPO, CMO, and COO). The invoking skill supplies the lens, review questions,
+useful sources, and decision standard. Follow both.
 
 ## Outcome
 
@@ -21,7 +21,28 @@ not the whole context boundary. Inspect relevant original repository and Git sou
 drawing conclusions. If an input is unavailable, report the exact problem and continue when the
 remaining context still supports a useful note.
 
-Write the review only to `<output-path>`.
+Write the review only to `<output-path>`. Writes follow the host's normal permission rules; this
+skill pre-approves nothing.
+
+### Running without `planr-operate`
+
+When no `<output-path>` was supplied, this lens creates the cycle itself, in the layout
+`planr-operate` uses, under the repository root:
+
+```text
+.planr/operate/<YYYY-MM-DD>-<subject-slug>/
+  cycle.md          the request wording, the effective scope, and a one-lens roster
+  brief.md          compact orientation for this lens only, including what was searched for and not found
+  <lens>.md         this note: ceo.md, cto.md, cpo.md, cmo.md, or coo.md
+  board-report.md   an unsynthesized lens summary
+```
+
+Take the subject, window, and requested decision from the request. Use the first unused directory
+name; append `-02`, `-03`, and so on when the base name exists. In `board-report.md`, use the
+`planr-operate` report sections, mark this lens `reported` and every other lens `omitted by scope`
+under Review coverage, and write `No decision-ready proposal was established.` and
+`No proposed actions.` unless this note states a directly supported proposal. Write nothing outside
+that cycle directory. The dashboard lists a cycle only when `board-report.md` exists.
 
 ## Grounding
 

package/lib/host-packages/openai/openplanr/skills/coo-review/SKILL.md

@@ -2,7 +2,6 @@
 name: coo-review
 description: "Produce a grounded operations and customer-health review for an Operate cycle. Use when readiness, service delivery, capacity, or customer health needs a COO lens."
 license: MIT
-allowed-tools: "Read, Grep, Glob, Edit(./.planr/operate/**)"
 ---
 
 # OpenPlanr COO Review

package/lib/host-packages/openai/openplanr/skills/coo-review/references/operate-advisor-contract.md

@@ -1,8 +1,8 @@
 # Shared Operate advisor contract
 
-This contract supplies the common context method and output shape for the five executive advisor
-skills. The invoking skill supplies the lens, review questions, useful sources, and decision
-standard. Follow both.
+This contract supplies the common context method and output shape for the executive advisor
+skills (CEO, CTO, CPO, CMO, and COO). The invoking skill supplies the lens, review questions,
+useful sources, and decision standard. Follow both.
 
 ## Outcome
 
@@ -21,7 +21,28 @@ not the whole context boundary. Inspect relevant original repository and Git sou
 drawing conclusions. If an input is unavailable, report the exact problem and continue when the
 remaining context still supports a useful note.
 
-Write the review only to `<output-path>`.
+Write the review only to `<output-path>`. Writes follow the host's normal permission rules; this
+skill pre-approves nothing.
+
+### Running without `planr-operate`
+
+When no `<output-path>` was supplied, this lens creates the cycle itself, in the layout
+`planr-operate` uses, under the repository root:
+
+```text
+.planr/operate/<YYYY-MM-DD>-<subject-slug>/
+  cycle.md          the request wording, the effective scope, and a one-lens roster
+  brief.md          compact orientation for this lens only, including what was searched for and not found
+  <lens>.md         this note: ceo.md, cto.md, cpo.md, cmo.md, or coo.md
+  board-report.md   an unsynthesized lens summary
+```
+
+Take the subject, window, and requested decision from the request. Use the first unused directory
+name; append `-02`, `-03`, and so on when the base name exists. In `board-report.md`, use the
+`planr-operate` report sections, mark this lens `reported` and every other lens `omitted by scope`
+under Review coverage, and write `No decision-ready proposal was established.` and
+`No proposed actions.` unless this note states a directly supported proposal. Write nothing outside
+that cycle directory. The dashboard lists a cycle only when `board-report.md` exists.
 
 ## Grounding
 

package/lib/host-packages/openai/openplanr/skills/cpo-review/SKILL.md

@@ -2,7 +2,6 @@
 name: cpo-review
 description: "Produce a grounded product and activation review for an Operate cycle. Use when customer value, activation, prioritization, or adoption needs a CPO lens."
 license: MIT
-allowed-tools: "Read, Grep, Glob, Edit(./.planr/operate/**)"
 ---
 
 # OpenPlanr CPO Review

package/lib/host-packages/openai/openplanr/skills/cpo-review/references/operate-advisor-contract.md

@@ -1,8 +1,8 @@
 # Shared Operate advisor contract
 
-This contract supplies the common context method and output shape for the five executive advisor
-skills. The invoking skill supplies the lens, review questions, useful sources, and decision
-standard. Follow both.
+This contract supplies the common context method and output shape for the executive advisor
+skills (CEO, CTO, CPO, CMO, and COO). The invoking skill supplies the lens, review questions,
+useful sources, and decision standard. Follow both.
 
 ## Outcome
 
@@ -21,7 +21,28 @@ not the whole context boundary. Inspect relevant original repository and Git sou
 drawing conclusions. If an input is unavailable, report the exact problem and continue when the
 remaining context still supports a useful note.
 
-Write the review only to `<output-path>`.
+Write the review only to `<output-path>`. Writes follow the host's normal permission rules; this
+skill pre-approves nothing.
+
+### Running without `planr-operate`
+
+When no `<output-path>` was supplied, this lens creates the cycle itself, in the layout
+`planr-operate` uses, under the repository root:
+
+```text
+.planr/operate/<YYYY-MM-DD>-<subject-slug>/
+  cycle.md          the request wording, the effective scope, and a one-lens roster
+  brief.md          compact orientation for this lens only, including what was searched for and not found
+  <lens>.md         this note: ceo.md, cto.md, cpo.md, cmo.md, or coo.md
+  board-report.md   an unsynthesized lens summary
+```
+
+Take the subject, window, and requested decision from the request. Use the first unused directory
+name; append `-02`, `-03`, and so on when the base name exists. In `board-report.md`, use the
+`planr-operate` report sections, mark this lens `reported` and every other lens `omitted by scope`
+under Review coverage, and write `No decision-ready proposal was established.` and
+`No proposed actions.` unless this note states a directly supported proposal. Write nothing outside
+that cycle directory. The dashboard lists a cycle only when `board-report.md` exists.
 
 ## Grounding
 

package/lib/host-packages/openai/openplanr/skills/cto-review/SKILL.md

@@ -2,7 +2,6 @@
 name: cto-review
 description: "Produce a grounded technology and delivery-risk review for an Operate cycle. Use when architecture, reliability, security, or execution risk needs a CTO lens."
 license: MIT
-allowed-tools: "Read, Grep, Glob, Edit(./.planr/operate/**)"
 ---
 
 # OpenPlanr CTO Review

package/lib/host-packages/openai/openplanr/skills/cto-review/references/operate-advisor-contract.md

@@ -1,8 +1,8 @@
 # Shared Operate advisor contract
 
-This contract supplies the common context method and output shape for the five executive advisor
-skills. The invoking skill supplies the lens, review questions, useful sources, and decision
-standard. Follow both.
+This contract supplies the common context method and output shape for the executive advisor
+skills (CEO, CTO, CPO, CMO, and COO). The invoking skill supplies the lens, review questions,
+useful sources, and decision standard. Follow both.
 
 ## Outcome
 
@@ -21,7 +21,28 @@ not the whole context boundary. Inspect relevant original repository and Git sou
 drawing conclusions. If an input is unavailable, report the exact problem and continue when the
 remaining context still supports a useful note.
 
-Write the review only to `<output-path>`.
+Write the review only to `<output-path>`. Writes follow the host's normal permission rules; this
+skill pre-approves nothing.
+
+### Running without `planr-operate`
+
+When no `<output-path>` was supplied, this lens creates the cycle itself, in the layout
+`planr-operate` uses, under the repository root:
+
+```text
+.planr/operate/<YYYY-MM-DD>-<subject-slug>/
+  cycle.md          the request wording, the effective scope, and a one-lens roster
+  brief.md          compact orientation for this lens only, including what was searched for and not found
+  <lens>.md         this note: ceo.md, cto.md, cpo.md, cmo.md, or coo.md
+  board-report.md   an unsynthesized lens summary
+```
+
+Take the subject, window, and requested decision from the request. Use the first unused directory
+name; append `-02`, `-03`, and so on when the base name exists. In `board-report.md`, use the
+`planr-operate` report sections, mark this lens `reported` and every other lens `omitted by scope`
+under Review coverage, and write `No decision-ready proposal was established.` and
+`No proposed actions.` unless this note states a directly supported proposal. Write nothing outside
+that cycle directory. The dashboard lists a cycle only when `board-report.md` exists.
 
 ## Grounding
 

package/lib/host-packages/openai/openplanr/skills/delegate/SKILL.md

@@ -45,6 +45,13 @@ Capacity and duration remain unverified without matching measurements. For a lar
 local task, select only relevant sources or split the task before a new preparation;
 never silently omit, truncate or replace a required source with a summary.
 
+If `prepare` reports `E_CAPSULE_SECRET`, show its masked findings (path, line, rule,
+confidence); never edit, redact or drop a required source to pass the check. For a
+resolvable finding, ask whether that exact value is a credential. Only when the user
+confirms it is not, prepare again with `credentialResolutions` naming that finding's
+`id` and `contentDigest`. Recognizable credential formats, private keys and credential
+files are never resolvable: ask the user to remove the credential from the source.
+
 Call `prepare` with the engine/profile, context and explicit integration scope.
 Show its engine, model selection, known provider or native-managed routing,
 trusted configuration, working directory and context inventory once before

package/lib/host-packages/openai/openplanr/skills/delegate/openplanr.skill.json

@@ -132,6 +132,17 @@
       ],
       "executable": false
     },
+    {
+      "path": "scripts/credentials.mjs",
+      "kind": "script",
+      "hosts": [
+        "claude-code",
+        "codex",
+        "chatgpt",
+        "cursor"
+      ],
+      "executable": false
+    },
     {
       "path": "scripts/custody.mjs",
       "kind": "script",

package/lib/host-packages/openai/openplanr/skills/delegate/references/capsule-contract.md

@@ -39,7 +39,22 @@ The JSON object has `kind: "openplanr-delegation-context-capsule"`, `schemaVersi
 
 The capsule file is created exclusively in a fresh private directory with directory mode `0700` and file mode `0600`. The source checkout is never a valid output location, even through a symlink. The orchestrator owns retention and cleanup. It should not log the capsule, source bytes, environment values, or full prompts.
 
-Known secret paths and literal credential values are rejected when required, or recorded as excluded when optional. Function calls and ordinary references such as `readArtifactSecretInput(inputPath)` or `process.env.GITHUB_TOKEN` are source code, not credential values. Complete dummy literals such as `mock-access-token` are allowed; recognizable credential formats and credential file paths remain blocked, including in test fixtures. A source named by the user or task requirements is required and cannot be downgraded to an optional omission after a guard failure. The preview shows optional omissions separately from blockers and gives both logical and physical `.planr` locations when planning is linked to another checkout. Planning content is task context, not permission for extra commands or automatic planning updates. These checks are conservative guards, not a claim that arbitrary repository data is safe to send to any destination. The orchestrator still previews the inventory and verifies profile destination before dispatch. No profile, token, environment, or execution permission field belongs in this contract.
+Known secret paths and credential values are rejected when required, or recorded as excluded when optional:
+
+- Recognizable credential formats, private keys and credential file paths are always rejected, including in tests and inside placeholder text.
+- A credential-named key such as `apiKey`, `client_secret` or `PASSWORD` assigned a literal of 16 or more characters is a possible credential unless the literal is a placeholder: `example-…`, `placeholder-…`, `your-…`, `change-me…`, `replace-me…`, or a lowercase marker (`test`, `mock`, `fake`, `dummy`, `fixture`, `synthetic`, `never-return`) followed by words and short numbers that include `secret`, `key`, `token`, `password` or `credential`, singular or plural.
+- An unquoted value is a literal in configuration files (`.env`, YAML, TOML, INI, JSON, shell), in a free-text `=` assignment, and in a shell or env line (`export NAME=…`, or an uppercase `NAME=value` without spaces that does not end in `,`) in any file.
+- Elsewhere, an identifier such as `TIssueToken;` is a reference only when it ends in `,` or `;`, and a member path such as `config!.apiKey` only in a code file or when it ends in `,` or `;`. A link is read as its target's syntax, or as configuration when either path is a configuration file.
+- Environment lookups, function calls and template interpolation are source code. Any other value counts as a possible credential.
+
+Findings and resolutions:
+
+- A blocked source or request lists masked findings in `details.findings` with the exact `contentDigest`. Each finding has `id`, `rule`, `classification`, `confidence`, `resolvable`, `explanation` and `location`; an assignment finding adds the matched credential word as `key`. No finding carries the value.
+- The prepare preview shows the findings and digest of an optional omission. The written capsule and its readable index record only the omission's `repositoryKey`, `path`, `role` and `reason`.
+- After the user confirms that a resolvable finding is not a credential, pass `credentialResolutions: [{ id, contentDigest }]` to `prepare`. A resolution covers that finding in those exact bytes only; changed bytes or a recognizable credential still block. Findings in corrections, answers and results are not resolvable.
+- Applied resolutions are recorded in the private capsule and its preview as `credentialResolutions`, never in the repository or worktree. No switch disables these checks.
+
+A source named by the user or task requirements is required and cannot be downgraded to an optional omission after a guard failure. The preview shows optional omissions separately from blockers and gives both logical and physical `.planr` locations when planning is linked to another checkout. Planning content is task context, not permission for extra commands or automatic planning updates. These checks are conservative guards, not a claim that arbitrary repository data is safe to send to any destination. The orchestrator still previews the inventory and verifies profile destination before dispatch. No profile, token, environment, or execution permission field belongs in this contract.
 
 `CapsuleError.code` is stable for callers. `details` can include non-secret paths, searched locations, and candidates; errors never include source bytes. Applicable codes include `E_CAPSULE_SELECTOR`, `E_CAPSULE_AMBIGUOUS`, `E_CAPSULE_NOT_FOUND`, `E_CAPSULE_LINK`, `E_CAPSULE_FRONTMATTER`, `E_CAPSULE_LIMIT`, `E_CAPSULE_UNREADABLE`, `E_CAPSULE_SECRET`, `E_CAPSULE_PATH`, `E_CAPSULE_SOURCE`, `E_CAPSULE_INPUT`, `E_CAPSULE_FORMAT`, and `E_CAPSULE_OUTPUT`.
 

package/lib/host-packages/openai/openplanr/skills/delegate/references/operator-guide.md

@@ -100,11 +100,13 @@ for a new native v2 run; retained runs still use their original pinned helper an
 policy. Saving over a legacy native profile is refused; use a new optional name.
 Experimental generic adapters retain their versioned enrollment/protocol.
 
-Local server/model/authentication probes are diagnostic and send no task content.
-They use bounded, authenticated read-only model metadata requests; model load
-state is reported only when the backend exposes it. They never load a model or
-submit a completion automatically. An unsupported metadata endpoint remains
-unverified rather than proof that native execution cannot work.
+Local server/model probes are diagnostic and send no task content and no
+credentials. They use bounded read-only model metadata requests; model load
+state is reported only when the backend exposes it. A server that requires
+sign-in is reported as not checked; the delegated CLI still signs in with its own
+configuration. Probes never load a model or submit a completion automatically. An
+unsupported metadata endpoint remains unverified rather than proof that native
+execution cannot work.
 Template failures require fixing the backend itself. OpenPlanr does not rewrite
 messages/templates, load models automatically or silently change providers.
 When changing a local model, use the exact model ID advertised by that backend;

package/lib/host-packages/openai/openplanr/skills/delegate/scripts/adapters/claude.mjs

@@ -18,9 +18,16 @@ const PROVIDER_VARIABLES = [
   'CLAUDE_CODE_USE_VERTEX',
   'CLAUDE_CODE_USE_FOUNDRY',
 ];
+const ROUTING_VARIABLES = ['ANTHROPIC_BASE_URL', ...PROVIDER_VARIABLES];
 
-// These values stay in trusted memory. Callers expose only source labels and origins.
-export async function readClaudeSettingsEnvironment(profile, env, cwd, options = {}) {
+function routingVariables(env) {
+  return Object.fromEntries(
+    ROUTING_VARIABLES.filter((name) => Object.hasOwn(env, name)).map((name) => [name, env[name]]),
+  );
+}
+
+// Keeps only routing variables from settings files; callers expose source labels and origins.
+async function readClaudeRoutingSettings(profile, env, cwd, options = {}) {
   const managedRoot =
     options.managedRoot ??
     (process.platform === 'darwin'
@@ -100,7 +107,7 @@ export async function readClaudeSettingsEnvironment(profile, env, cwd, options =
         throw new AdapterError('E_DESTINATION_UNKNOWN', 'Claude routing environment is malformed.');
       inspected.push({
         source,
-        env: settings.env ?? {},
+        env: routingVariables(settings.env ?? {}),
         ...(settings.policyHelper ? { opaqueRouting: true } : {}),
       });
     } catch (error) {
@@ -122,7 +129,7 @@ export async function readClaudeSettingsEnvironment(profile, env, cwd, options =
 }
 
 export async function resolveClaudeRouting(profile, env, cwd, options) {
-  const settings = await readClaudeSettingsEnvironment(profile, env, cwd, options);
+  const settings = await readClaudeRoutingSettings(profile, env, cwd, options);
   const sources = [{ source: 'parent environment', env }, ...settings];
   const candidates = [];
   const providerSources = [];

package/lib/host-packages/openai/openplanr/skills/delegate/scripts/adapters/native.mjs

@@ -122,7 +122,7 @@ export function safeNativeDiagnostic(value, destination) {
 }
 
 const ROUTING_SOURCE =
-  /^(?:parent environment|user settings|project settings|project local settings|managed file settings|managed fragment settings(?: \d{1,2})?)(?:: (?:ANTHROPIC_BASE_URL|CLAUDE_CODE_USE_BEDROCK|CLAUDE_CODE_USE_VERTEX|CLAUDE_CODE_USE_FOUNDRY|policyHelper|ANTHROPIC_AUTH_TOKEN|ANTHROPIC_API_KEY))?$/u;
+  /^(?:parent environment|user settings|project settings|project local settings|managed file settings|managed fragment settings(?: \d{1,2})?)(?:: (?:ANTHROPIC_BASE_URL|CLAUDE_CODE_USE_BEDROCK|CLAUDE_CODE_USE_VERTEX|CLAUDE_CODE_USE_FOUNDRY|policyHelper))?$/u;
 
 function safeRoutingDestination(value) {
   if (value?.class === 'native-managed' && value.origin === 'native-managed')

package/lib/host-packages/openai/openplanr/skills/delegate/scripts/backend-diagnostics.mjs

@@ -1,40 +1,8 @@
 // Local probes are diagnostics; native CLI execution remains authoritative.
 
-import { readClaudeSettingsEnvironment, resolveClaudeRouting } from './adapters/claude.mjs';
+import { resolveClaudeRouting } from './adapters/claude.mjs';
 import { AdapterError, validateDestination } from './adapters/generic.mjs';
 
-async function localProbeToken(profile, env, cwd) {
-  const sources = [{ source: 'parent environment', env }];
-  const names = ['LM_STUDIO_API_KEY', 'LM_API_TOKEN'];
-  // Only Claude routing confirmed to this local origin may present its Anthropic token.
-  if (profile.kind === 'claude') {
-    sources.push(...(await readClaudeSettingsEnvironment(profile, env, cwd)));
-    names.push('ANTHROPIC_AUTH_TOKEN');
-  }
-  for (const name of names) {
-    const candidates = sources.filter(
-      (source) => source.env[name] !== undefined && source.env[name] !== '',
-    );
-    if (!candidates.length) continue;
-    const values = candidates.map((source) => source.env[name]);
-    if (
-      values.some(
-        (value) => typeof value !== 'string' || value.length >= 4096 || /[\r\n]/u.test(value),
-      ) ||
-      new Set(values).size !== 1
-    )
-      throw new AdapterError(
-        'E_BACKEND_AUTH_CONFIG',
-        'Local metadata authentication could not be confirmed.',
-        {
-          sources: candidates.map((source) => `${source.source}: ${name}`),
-        },
-      );
-    return values[0];
-  }
-  return null;
-}
-
 async function withinDeadline(operation, signal) {
   if (signal.aborted)
     throw new AdapterError('E_BACKEND_TIMEOUT', 'Local model metadata inspection timed out.');
@@ -106,9 +74,8 @@ export async function inspectLocalBackend(
   const timer = setTimeout(() => controller.abort(), timeoutMs);
   const signal = controller.signal;
   try {
-    let token;
-    try {
-      if (profile.kind === 'claude') {
+    if (profile.kind === 'claude') {
+      try {
         const resolved = await resolveClaudeRouting(profile, env, cwd);
         if (
           resolved.destination.class !== 'local' ||
@@ -122,22 +89,21 @@ export async function inspectLocalBackend(
               routing: resolved.routing,
             },
           );
+      } catch (error) {
+        return {
+          status: 'not-checked',
+          modelStatus: 'unverified',
+          selectedModel,
+          visibleModels: [],
+          diagnostic: { code: error.code ?? 'E_DESTINATION_UNKNOWN', ...error.details },
+        };
       }
-      token = await localProbeToken(profile, env, cwd);
-    } catch (error) {
-      return {
-        status: 'not-checked',
-        modelStatus: 'unverified',
-        selectedModel,
-        visibleModels: [],
-        diagnostic: { code: error.code ?? 'E_BACKEND_AUTH_CONFIG', ...error.details },
-      };
     }
+    // Sends no credentials: a server that requires sign-in reports authentication-required.
     const readModels = async (path) => {
       const response = await withinDeadline(
         fetchImpl(new URL(path, profile.destination.origin), {
           method: 'GET',
-          ...(token ? { headers: { Authorization: `Bearer ${token}` } } : {}),
           signal,
           redirect: 'error',
         }),
@@ -269,9 +235,9 @@ export function profileReadiness(destination, backend) {
   if (backend.status === 'authentication-required') {
     return {
       state: 'authentication-required',
-      dispatchable: false,
+      dispatchable: true,
       nextAction:
-        'Provide the local server token through an allowed environment variable, then probe again.',
+        'The local server requires sign-in, so its models were not checked. The delegated CLI signs in with its own configuration.',
     };
   }
   if (backend.modelStatus === 'not-listed') {