feat(cli): ocx init exposes the full provider catalog (GUI parity)

init.ts shipped 7 hardcoded presets; the GUI exposed 30 API-key providers + OAuth + local.
Refactor init to build its menu from the SAME registries (OAUTH_PROVIDERS + KEY_LOGIN_PROVIDERS)
+ ChatGPT-forward + non-catalog key providers + local — a testable buildInitProviders(). Per kind:
forward saves authMode:forward; oauth saves the entry + points to `ocx login <id>`; key shows the
provider's dashboardUrl, collects the key, and runs enrichProviderFromCatalog (same models/vision
classification the GUI applies); local defaults to a blank key. Closes the goal's "GUI+CLI 양쪽" CLI gap.
Verified: menu=42 entries, all 30 catalog + 3 oauth + 3 local present (0 missing), tsc clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: lidge-jun

devlog/64_cli-provider-parity/00_plan.md

@@ -0,0 +1,33 @@
+# Plan — CLI `ocx init` provider-catalog parity with the GUI
+
+## Goal gap (from the active goal's last checkpoint)
+The GUI exposes the full provider set (30 KEY_LOGIN API-key providers via `/api/key-providers`
++ 3 OAuth + local), but the CLI `ocx init` ships **7 hardcoded `PRESETS`** that don't reference the
+registries. So the goal's "GUI(10100)+CLI 양쪽" is unmet on the CLI side: a CLI user can't pick
+deepseek/mistral/kilo/minimax/etc. without "custom".
+
+## Change
+Refactor `src/init.ts` to build its provider menu from the authoritative registries instead of a
+private list:
+- `OAUTH_PROVIDERS` (oauth/index) → account-login entries (xai/anthropic/kimi).
+- `KEY_LOGIN_PROVIDERS` (oauth/key-providers) → the full API-key catalog (30).
+- A few non-catalog key providers (OpenAI API-key, OpenRouter, Groq, Google, Azure) + ChatGPT-forward.
+- Local (ollama/vllm/lm-studio).
+
+Wizard behavior per kind:
+- **forward** (ChatGPT login): save `authMode:"forward"`, no key.
+- **oauth**: save the provider entry, then instruct `ocx login <id>` (the existing OAuth CLI flow).
+- **key**: show the provider's `dashboardUrl` ("get your key here"), collect the key (or `${ENV}`),
+  and `enrichProviderFromCatalog` so the catalog's models/noVisionModels classification is applied
+  (same enrichment the GUI POST does).
+- **local**: blank key by default.
+
+Add a testable `buildInitProviders()` exported for verification.
+
+## Files
+- MODIFY `src/init.ts` — registry-driven menu + per-kind handling + catalog enrichment.
+
+## Verify
+- `bun x tsc --noEmit` clean.
+- Probe `buildInitProviders()`: asserts the menu contains the full KEY_LOGIN catalog (all 30 ids),
+  the 3 OAuth ids, and the 3 local ids — i.e., CLI now reaches the same providers as the GUI.

src/init.ts

@@ -1,6 +1,8 @@
 import * as readline from "node:readline";
 import { injectCodexConfig } from "./codex-inject";
 import { getDefaultConfig, saveConfig } from "./config";
+import { KEY_LOGIN_PROVIDERS, enrichProviderFromCatalog } from "./oauth/key-providers";
+import { OAUTH_PROVIDERS } from "./oauth";
 import type { OcxConfig, OcxProviderConfig } from "./types";
 
 function createPrompt(): { ask(question: string): Promise<string>; close(): void } {
@@ -13,94 +15,120 @@ function createPrompt(): { ask(question: string): Promise<string>; close(): void
   };
 }
 
-const PRESETS: Record<string, { adapter: string; baseUrl: string; envKey: string; models: string[] }> = {
-  "opencode-go": {
-    adapter: "openai-chat",
-    baseUrl: "https://opencode.ai/zen/go/v1",
-    envKey: "OPENCODE_API_KEY",
-    models: ["kimi-k2.5", "kimi-k2.6", "deepseek-v4-flash", "qwen3.5-plus"],
-  },
-  "anthropic": {
-    adapter: "anthropic",
-    baseUrl: "https://api.anthropic.com",
-    envKey: "ANTHROPIC_API_KEY",
-    models: ["claude-sonnet-4-20250514", "claude-opus-4-20250916"],
-  },
-  "openai": {
-    adapter: "openai-responses",
-    baseUrl: "https://api.openai.com",
-    envKey: "OPENAI_API_KEY",
-    models: ["gpt-5.5", "o3-pro"],
-  },
-  "openrouter": {
-    adapter: "openai-chat",
-    baseUrl: "https://openrouter.ai/api/v1",
-    envKey: "OPENROUTER_API_KEY",
-    models: ["anthropic/claude-sonnet-4", "google/gemini-3-pro"],
-  },
-  "groq": {
-    adapter: "openai-chat",
-    baseUrl: "https://api.groq.com/openai/v1",
-    envKey: "GROQ_API_KEY",
-    models: ["llama-4-scout-17b", "llama-4-maverick-17b"],
-  },
-  "google": {
-    adapter: "google",
-    baseUrl: "https://generativelanguage.googleapis.com",
-    envKey: "GOOGLE_API_KEY",
-    models: ["gemini-3-pro", "gemini-3-flash"],
-  },
-  "azure-openai": {
-    adapter: "azure-openai",
-    baseUrl: "https://{your-resource}.openai.azure.com/openai/deployments/{deployment}",
-    envKey: "AZURE_OPENAI_API_KEY",
-    models: ["gpt-5.5"],
-  },
+type InitKind = "forward" | "oauth" | "key" | "local";
+export interface InitProvider {
+  id: string;
+  label: string;
+  adapter: string;
+  baseUrl: string;
+  kind: InitKind;
+  dashboardUrl?: string;
+  defaultModel?: string;
+}
+
+const OAUTH_LABELS: Record<string, string> = {
+  xai: "xAI (Grok)", anthropic: "Anthropic (Claude)", kimi: "Kimi (Moonshot)",
 };
 
+/**
+ * The full CLI provider menu, built from the SAME registries the GUI uses (OAUTH_PROVIDERS +
+ * KEY_LOGIN_PROVIDERS) plus the ChatGPT-forward, a few non-catalog key providers, and local servers —
+ * so `ocx init` reaches provider parity with the GUI. Exported for verification.
+ */
+export function buildInitProviders(): InitProvider[] {
+  const out: InitProvider[] = [];
+  // ChatGPT login (no key) — the default forward provider.
+  out.push({ id: "openai", label: "OpenAI — ChatGPT login (no key)", adapter: "openai-responses", baseUrl: "https://chatgpt.com/backend-api/codex", kind: "forward" });
+  // Real account logins (OAuth).
+  for (const id of Object.keys(OAUTH_PROVIDERS)) {
+    const pc = OAUTH_PROVIDERS[id].providerConfig;
+    out.push({ id, label: `${OAUTH_LABELS[id] ?? id} — account login`, adapter: pc.adapter, baseUrl: pc.baseUrl, kind: "oauth", defaultModel: pc.defaultModel });
+  }
+  // Key providers not in the catalog (native adapters / well-known endpoints).
+  out.push({ id: "openai-apikey", label: "OpenAI (API key)", adapter: "openai-responses", baseUrl: "https://api.openai.com/v1", kind: "key", dashboardUrl: "https://platform.openai.com/api-keys", defaultModel: "gpt-5.5" });
+  out.push({ id: "openrouter", label: "OpenRouter", adapter: "openai-chat", baseUrl: "https://openrouter.ai/api/v1", kind: "key", dashboardUrl: "https://openrouter.ai/keys" });
+  out.push({ id: "groq", label: "Groq", adapter: "openai-chat", baseUrl: "https://api.groq.com/openai/v1", kind: "key", dashboardUrl: "https://console.groq.com/keys" });
+  out.push({ id: "google", label: "Google Gemini", adapter: "google", baseUrl: "https://generativelanguage.googleapis.com", kind: "key", dashboardUrl: "https://aistudio.google.com/apikey", defaultModel: "gemini-3-pro" });
+  out.push({ id: "azure-openai", label: "Azure OpenAI", adapter: "azure", baseUrl: "https://{resource}.openai.azure.com/openai/deployments/{deployment}", kind: "key", dashboardUrl: "https://portal.azure.com" });
+  // The full API-key catalog (deepseek, mistral, kilo, minimax, … — same set the GUI shows).
+  for (const [id, p] of Object.entries(KEY_LOGIN_PROVIDERS)) {
+    out.push({ id, label: p.label, adapter: p.adapter, baseUrl: p.baseUrl, kind: "key", dashboardUrl: p.dashboardUrl, defaultModel: p.defaultModel });
+  }
+  // Local servers (usually no key).
+  out.push({ id: "ollama", label: "Ollama (local)", adapter: "openai-chat", baseUrl: "http://localhost:11434/v1", kind: "local" });
+  out.push({ id: "vllm", label: "vLLM (local)", adapter: "openai-chat", baseUrl: "http://localhost:8000/v1", kind: "local" });
+  out.push({ id: "lm-studio", label: "LM Studio (local)", adapter: "openai-chat", baseUrl: "http://localhost:1234/v1", kind: "local" });
+  return out;
+}
+
+const KIND_HEADING: Record<InitKind, string> = {
+  forward: "ChatGPT login",
+  oauth: "Account login (OAuth — then run: ocx login <id>)",
+  key: "API key (paste a key from the provider's dashboard)",
+  local: "Local servers (usually no key)",
+};
+
+function printMenu(providers: InitProvider[]): void {
+  console.log("Available providers:");
+  let lastKind: InitKind | null = null;
+  providers.forEach((p, i) => {
+    if (p.kind !== lastKind) { console.log(`\n  ${KIND_HEADING[p.kind]}:`); lastKind = p.kind; }
+    console.log(`   ${String(i + 1).padStart(2)}. ${p.label}`);
+  });
+  console.log(`\n   ${providers.length + 1}. custom (enter URL manually)`);
+}
+
+const envKeyFor = (id: string) => `${id.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}_API_KEY`;
+
 export async function runInit(): Promise<void> {
   const prompt = createPrompt();
-
   console.log("\n🔧 opencodex (ocx) setup\n");
 
-  const presetNames = Object.keys(PRESETS);
-  console.log("Available providers:");
-  presetNames.forEach((name, i) => console.log(`  ${i + 1}. ${name}`));
-  console.log(`  ${presetNames.length + 1}. custom (enter URL manually)`);
+  const providers = buildInitProviders();
+  printMenu(providers);
 
   const choice = await prompt.ask("\nSelect provider (number): ");
   const idx = parseInt(choice, 10) - 1;
 
   let providerName: string;
   let providerConfig: OcxProviderConfig;
-
-  if (idx >= 0 && idx < presetNames.length) {
-    providerName = presetNames[idx];
-    const preset = PRESETS[providerName];
-
-    console.log(`\n📡 ${providerName} selected`);
-    console.log(`   Base URL: ${preset.baseUrl}`);
-    console.log(`   Models: ${preset.models.join(", ")}`);
-
-    const apiKey = await prompt.ask(`\nAPI key (or env var ${preset.envKey}): `);
-    const resolvedKey = apiKey.trim() || `\${${preset.envKey}}`;
-
-    const modelChoice = await prompt.ask(`Default model [${preset.models[0]}]: `);
-    const defaultModel = modelChoice.trim() || preset.models[0];
-
-    providerConfig = {
-      adapter: preset.adapter,
-      baseUrl: preset.baseUrl,
-      apiKey: resolvedKey,
-      defaultModel,
-    };
+  let oauthHint = false;
+
+  if (idx >= 0 && idx < providers.length) {
+    const p = providers[idx];
+    providerName = p.id;
+    console.log(`\n📡 ${p.label}`);
+    console.log(`   Base URL: ${p.baseUrl}`);
+
+    if (p.kind === "forward") {
+      providerConfig = { adapter: p.adapter, baseUrl: p.baseUrl, authMode: "forward" };
+      console.log("   No API key needed — forwards your existing `codex login`.");
+    } else if (p.kind === "oauth") {
+      providerConfig = { adapter: p.adapter, baseUrl: p.baseUrl, authMode: "oauth", ...(p.defaultModel ? { defaultModel: p.defaultModel } : {}) };
+      oauthHint = true;
+    } else {
+      // key + local: collect a key (local usually blank).
+      if (p.dashboardUrl) console.log(`   🔑 Get your key: ${p.dashboardUrl}`);
+      const env = envKeyFor(p.id);
+      const hint = p.kind === "local" ? "API key (usually blank — press Enter): " : `API key (paste, or env var $${env}): `;
+      const apiKey = (await prompt.ask(`\n${hint}`)).trim();
+      const modelChoice = (await prompt.ask(`Default model${p.defaultModel ? ` [${p.defaultModel}]` : " (optional)"}: `)).trim();
+      const defaultModel = modelChoice || p.defaultModel;
+      providerConfig = {
+        adapter: p.adapter,
+        baseUrl: p.baseUrl,
+        ...(p.kind === "key" ? { apiKey: apiKey || `\${${env}}` } : apiKey ? { apiKey } : {}),
+        ...(defaultModel ? { defaultModel } : {}),
+      };
+      // Apply the catalog's models / vision classification (same enrichment as the GUI).
+      enrichProviderFromCatalog(p.id, providerConfig);
+    }
   } else {
     providerName = await prompt.ask("Provider name: ");
     const baseUrl = await prompt.ask("Base URL (e.g. http://localhost:11434/v1): ");
     const adapter = await prompt.ask("Adapter [openai-chat]: ") || "openai-chat";
     const apiKey = await prompt.ask("API key (optional): ");
     const defaultModel = await prompt.ask("Default model: ");
-
     providerConfig = {
       adapter: adapter.trim(),
       baseUrl: baseUrl.trim(),
@@ -109,7 +137,7 @@ export async function runInit(): Promise<void> {
     };
   }
 
-  const portStr = await prompt.ask("Proxy port [10100]: ");
+  const portStr = await prompt.ask("\nProxy port [10100]: ");
   const port = parseInt(portStr, 10) || 10100;
 
   const config: OcxConfig = {
@@ -121,6 +149,7 @@ export async function runInit(): Promise<void> {
 
   saveConfig(config);
   console.log(`\n✅ Config saved to ~/.opencodex/config.json`);
+  if (oauthHint) console.log(`🔐 Authenticate this provider with:  ocx login ${providerName}`);
 
   const injectAnswer = await prompt.ask("Inject into Codex config.toml? [Y/n]: ");
   if (injectAnswer.trim().toLowerCase() !== "n") {