fix(vscode): restore authenticated speech input

[marius-kilocode]

Speech input availability currently depends on a successful profile and balance refresh. A transient Kilo API failure clears profile data and removes the microphone even while the stored OAuth or API credential remains valid and Kilo chat continues to work. The transcription model selector also remained under Experimental after voice input graduated from its feature flag.

This change introduces a protected local authentication-status endpoint that exposes only whether a usable Kilo credential exists and its credential type. Speech controls and provider status now use that local state, while transcription failures still offer sign-in recovery when a credential is rejected.

The transcription model selector moves to the Models tab, remains visible but disabled with guidance when Kilo is unavailable, and defaults to Whisper Large V3 Turbo without overriding explicit user selections.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (32 files, excluding i18n refactors and auto-generated SDK/screenshots)

• .changeset/restore-authenticated-speech-input.md - changeset present and user-facing
• packages/kilo-docs/pages/code-with-ai/features/speech-to-text.md - docs updated for Models tab move
• packages/kilo-docs/pages/getting-started/settings/index.md - docs restructured
• packages/kilo-vscode/package.json - removed legacy speech model setting
• packages/kilo-vscode/src/provider-actions.ts - new authStatus integration, Kilo authState from local endpoint
• packages/kilo-vscode/src/speech-to-text/models.ts - default changed to Whisper Large V3 Turbo
• packages/kilo-vscode/tests/model-selector-accessibility.spec.ts - accessibility test for new selector
• packages/kilo-vscode/tests/unit/provider-actions-save.test.ts - authStatus fetch tests
• packages/kilo-vscode/tests/unit/speech-to-text-availability.test.ts - updated availability tests
• packages/kilo-vscode/tests/unit/speech-to-text-models-sync.test.ts - default model test
• packages/kilo-vscode/tests/unit/use-speech-to-text.test.ts - login recovery test
• packages/kilo-vscode/webview-ui/agent-manager/DiffPanel.tsx - caller updated
• packages/kilo-vscode/webview-ui/agent-manager/NewWorktreeDialog.tsx - caller updated
• packages/kilo-vscode/webview-ui/diff-viewer/FullScreenDiffView.tsx - caller updated
• packages/kilo-vscode/webview-ui/src/components/chat/PromptInput.tsx - caller updated
• packages/kilo-vscode/webview-ui/src/components/settings/ExperimentalTab.tsx - speech selector removed
• packages/kilo-vscode/webview-ui/src/components/settings/ModelsTab.tsx - speech selector added
• packages/kilo-vscode/webview-ui/src/components/settings/ProvidersTab.tsx - logged-in check uses authStates
• packages/kilo-vscode/webview-ui/src/components/speech-to-text/availability.ts - refactored to use authStates
• packages/kilo-vscode/webview-ui/src/components/speech-to-text/useSpeechToText.ts - deferred login check
• packages/kilo-vscode/webview-ui/src/stories/settings.stories.tsx - ModelsSpeechToText story added
• packages/opencode/src/kilocode/server/httpapi/groups/kilo-gateway.ts - AuthStatus schema + route
• packages/opencode/src/kilocode/server/httpapi/handlers/kilo-gateway.ts - authStatus handler
• packages/opencode/test/kilocode/server/httpapi-exercise-scenarios.ts - exercise test
• packages/opencode/test/kilocode/server/httpapi-public.test.ts - OpenAPI contract test
• packages/opencode/test/kilocode/server/kilo-gateway-statuses.test.ts - live endpoint test
• packages/sdk/js/src/v2/gen/sdk.gen.ts - SDK regen
• packages/sdk/js/src/v2/gen/types.gen.ts - SDK types regen
• packages/sdk/openapi.json - OpenAPI spec regen

Summary

Introduces a local /kilo/auth-status endpoint that checks credential validity without hitting the Kilo API, so transient gateway failures no longer hide speech-to-text input. Moves the transcription model selector from the Experimental tab to the Models tab, defaults to Whisper Large V3 Turbo, and defers the login prompt to transcription-failure recovery rather than pre-emptively blocking recording. All call sites consistently updated and well tested.

---

_{Reviewed by deepseek-v4-pro-20260423 · 2,235,408 tokens}

_{Review guidance: REVIEW.md from base branch main}