feat(cli): add live provider management and safe editor apply

devlog/_plan/261003_cli_gui_parity/008_task_ledger.json

@@ -4,12 +4,12 @@
   "scopeNote": "176 initial rows plus two confirmed embedded settings groups; aliases are retained and excluded from unique eligible denominator, not silently dropped.",
   "rows": [
     {"id":"set-P01","domain":"settings","baseline":"DISCOVERY_ONLY","status":"complete","unit":"wp2","evidence":["022_discovery_verification.md","src/cli/capabilities.ts","skills/ocx/references/01_management_surface.md"],"task":"set-P01 — Inspect configured providers, presets, authentication availability","existingCli":"provider list/show/presets; inspect config; account list/current; status --json","sourceInventory":"004_settings_coverage.md"},
-    {"id":"set-P02","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp3","evidence":[],"task":"set-P02 — Add a preset/custom provider; enable canonical OpenAI account provider","existingCli":"provider add P [--adapter A --base-url U --api-key ... --default-model M --allow-private-network --force --set-default --sync]; provider edit openai --enabled on","sourceInventory":"004_settings_coverage.md"},
-    {"id":"set-P03","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp3","evidence":[],"task":"set-P03 — Edit provider transport, discovery, default model, note, network permission","existingCli":"provider edit/update P --adapter A --base-url U --default-model M\\|- --auth-mode MODE\\|- --note TEXT\\|- --api-key-transport MODE\\|- --enabled on\\|off --live-models on\\|off --allow-private-network on\\|off","sourceInventory":"004_settings_coverage.md"},
-    {"id":"set-P04","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp3","evidence":[],"task":"set-P04 — Configure and inspect request pacing","existingCli":"inspect pacing --name P --json","sourceInventory":"004_settings_coverage.md"},
-    {"id":"set-P05","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp3","evidence":[],"task":"set-P05 — Enable/disable, choose default, remove provider","existingCli":"provider edit P --enabled on\\|off; provider set-default P; provider remove P","sourceInventory":"004_settings_coverage.md"},
+    {"id":"set-P02","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"complete","unit":"wp3","evidence":["032_provider_verification.md","src/cli/provider-lifecycle-runtime.ts","src/cli/provider-settings.ts","src/cli/provider-batch.ts","tests/cli/cli-provider-sync-result.test.ts"],"task":"set-P02 — Add a preset/custom provider; enable canonical OpenAI account provider","existingCli":"provider add P [--adapter A --base-url U --api-key ... --default-model M --allow-private-network --force --set-default --sync]; provider edit openai --enabled on","sourceInventory":"004_settings_coverage.md"},
+    {"id":"set-P03","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"complete","unit":"wp3","evidence":["032_provider_verification.md","src/cli/provider-lifecycle-runtime.ts","src/cli/provider-settings.ts","src/cli/provider-batch.ts","tests/cli/cli-provider-sync-result.test.ts"],"task":"set-P03 — Edit provider transport, discovery, default model, note, network permission","existingCli":"provider edit/update P --adapter A --base-url U --default-model M\\|- --auth-mode MODE\\|- --note TEXT\\|- --api-key-transport MODE\\|- --enabled on\\|off --live-models on\\|off --allow-private-network on\\|off","sourceInventory":"004_settings_coverage.md"},
+    {"id":"set-P04","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"complete","unit":"wp3","evidence":["032_provider_verification.md","src/cli/provider-lifecycle-runtime.ts","src/cli/provider-settings.ts","src/cli/provider-batch.ts","tests/cli/cli-provider-sync-result.test.ts"],"task":"set-P04 — Configure and inspect request pacing","existingCli":"inspect pacing --name P --json","sourceInventory":"004_settings_coverage.md"},
+    {"id":"set-P05","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"complete","unit":"wp3","evidence":["032_provider_verification.md","src/cli/provider-lifecycle-runtime.ts","src/cli/provider-settings.ts","src/cli/provider-batch.ts","tests/cli/cli-provider-sync-result.test.ts"],"task":"set-P05 — Enable/disable, choose default, remove provider","existingCli":"provider edit P --enabled on\\|off; provider set-default P; provider remove P","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-P06","domain":"settings","baseline":"DISCOVERY_ONLY","status":"complete","unit":"wp2","evidence":["022_discovery_verification.md","src/cli/capabilities.ts","skills/ocx/references/01_management_surface.md"],"task":"set-P06 — Change OpenAI account mode","existingCli":"provider account-mode pool\\|direct --json","sourceInventory":"004_settings_coverage.md"},
-    {"id":"set-P07","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp3","evidence":[],"task":"set-P07 — Atomically edit provider JSON","existingCli":"config import exists but is not provider-editor CAS parity","sourceInventory":"004_settings_coverage.md"},
+    {"id":"set-P07","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"complete","unit":"wp3","evidence":["032_provider_verification.md","src/cli/provider-lifecycle-runtime.ts","src/cli/provider-settings.ts","src/cli/provider-batch.ts","tests/cli/cli-provider-sync-result.test.ts"],"task":"set-P07 — Atomically edit provider JSON","existingCli":"config import exists but is not provider-editor CAS parity","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-P08","domain":"settings","baseline":"DISCOVERY_ONLY","status":"complete","unit":"wp2","evidence":["022_discovery_verification.md","src/cli/capabilities.ts","skills/ocx/references/01_management_surface.md"],"task":"set-P08 — Check provider connectivity","existingCli":"provider test P --json","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-P09","domain":"settings","baseline":"COMPLETE","status":"complete","unit":"wp2","evidence":["022_discovery_verification.md","src/cli/capabilities.ts","skills/ocx/references/01_management_surface.md"],"task":"set-P09 — Inspect provider quota/capacity/usage","existingCli":"provider quota [--refresh] --json; account list P --quota [--refresh] --json; usage --range 30d --surface codex\\|all --json","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-P10","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp5","evidence":[],"task":"set-P10 — OAuth login, add another account, reauthenticate, submit callback, cancel, logout","existingCli":"account login P [--reauth --id I] [--no-wait]; account reauth/code/cancel; login P (local); logout P --json (local)","sourceInventory":"004_settings_coverage.md"},
@@ -19,7 +19,7 @@
     {"id":"set-P14","domain":"settings","baseline":"DISCOVERY_ONLY","status":"complete","unit":"wp2","evidence":["022_discovery_verification.md","src/cli/capabilities.ts","skills/ocx/references/01_management_surface.md"],"task":"set-P14 — Manage API-key pool","existingCli":"account list/use P I; account add-key P [--label L] (stdin); account alias P I TEXT\\|-; account remove P I --yes --json","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-P15","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp5","evidence":[],"task":"set-P15 — Set account-pool strategy and thresholds","existingCli":"account strategy P STRATEGY; account sticky P N; account auto-switch P on\\|off\\|threshold N\\|status; account routes anthropic ...","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-P16","domain":"settings","baseline":"COMPLETE","status":"complete","unit":"wp2","evidence":["022_discovery_verification.md","src/cli/capabilities.ts","skills/ocx/references/01_management_surface.md"],"task":"set-P16 — Set per-Anthropic-account auto-switch override","existingCli":"account auto-switch anthropic status\\|on\\|off\\|inherit\\|threshold N --account I --json","sourceInventory":"004_settings_coverage.md"},
-    {"id":"set-P17","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp3","evidence":[],"task":"set-P17 — Control xAI Responses opt-in and model Fast variants","existingCli":"provider edit xai --xai-chat on\\|off --json","sourceInventory":"004_settings_coverage.md"},
+    {"id":"set-P17","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"complete","unit":"wp3","evidence":["032_provider_verification.md","src/cli/provider-lifecycle-runtime.ts","src/cli/provider-settings.ts","src/cli/provider-batch.ts","tests/cli/cli-provider-sync-result.test.ts"],"task":"set-P17 — Control xAI Responses opt-in and model Fast variants","existingCli":"provider edit xai --xai-chat on\\|off --json","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-P18","domain":"settings","baseline":"COMPLETE","status":"complete","unit":"wp2","evidence":["022_discovery_verification.md","src/cli/capabilities.ts","skills/ocx/references/01_management_surface.md"],"task":"set-P18 — Inspect/redeem Grok reset coupons","existingCli":"account grok-reset-coupons [I] [--consume --yes --token-id T --operation-id UUID] --json","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-P19","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp5","evidence":[],"task":"set-P19 — Inspect/redeem Anthropic reset grants","existingCli":"No Anthropic grant read command in account-auth dispatcher; Grok/Codex reset commands target different contracts","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-P20","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp5","evidence":[],"task":"set-P20 — Choose whether OAuth launches browser on proxy host","existingCli":"account login currently omits openBrowser; GUI local preference feeds request field","sourceInventory":"004_settings_coverage.md"},
@@ -46,7 +46,7 @@
     {"id":"set-M05","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp4","evidence":[],"task":"set-M05 — Edit/reset model display label and cost override","existingCli":"models price P/M; models set-price P/M --input N --output N [--cache-read N --cache-write N] or --auto; custom models edit --display-name only","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-M06","domain":"settings","baseline":"UNKNOWN","status":"pending","unit":"wp4","evidence":[],"task":"set-M06 — Create/edit/delete custom model definitions","existingCli":"models add P M --display-name --context-window --modalities --reasoning-efforts --default-reasoning-effort; models list-custom --json; models edit ID ...; models remove ID\\|P/M --yes","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-M07","domain":"settings","baseline":"COMPLETE","status":"complete","unit":"wp2","evidence":["022_discovery_verification.md","src/cli/capabilities.ts","skills/ocx/references/01_management_surface.md"],"task":"set-M07 — Override/restore discovered-model capability metadata","existingCli":"models set P/M --context-window N\\|0\\|- --modalities CSV\\|- --reasoning-efforts CSV\\|\"\"\\|- --default-reasoning-effort LEVEL\\|-; --reset --json","sourceInventory":"004_settings_coverage.md"},
-    {"id":"set-M08","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp3","evidence":[],"task":"set-M08 — Override provider/per-model advertised context window","existingCli":"models set P/M --context-window N\\|0\\|- covers per-model override","sourceInventory":"004_settings_coverage.md"},
+    {"id":"set-M08","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"complete","unit":"wp3","evidence":["032_provider_verification.md","src/cli/provider-lifecycle-runtime.ts","src/cli/provider-settings.ts","src/cli/provider-batch.ts","tests/cli/cli-provider-sync-result.test.ts"],"task":"set-M08 — Override provider/per-model advertised context window","existingCli":"models set P/M --context-window N\\|0\\|- covers per-model override","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-M09","domain":"settings","baseline":"DISCOVERY_ONLY","status":"complete","unit":"wp2","evidence":["022_discovery_verification.md","src/cli/capabilities.ts","skills/ocx/references/01_management_surface.md"],"task":"set-M09 — Configure context caps: per-provider, global default, apply/remove all","existingCli":"models context status; models context value N [--set-all]; models context provider P on\\|off [--value N]; models context all on\\|off --json","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-M10","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp4","evidence":[],"task":"set-M10 — Configure picker order manually or by ranking policy","existingCli":"agent subagents status shows picker fields; agent subagents set writes featured models only","sourceInventory":"004_settings_coverage.md"},
     {"id":"set-M11","domain":"settings","baseline":"IMPLEMENTATION_GAP","status":"pending","unit":"wp5","evidence":[],"task":"set-M11 — Show generated Fast catalog rows","existingCli":"system settings --json reads fastRows","sourceInventory":"004_settings_coverage.md"},