The CLI notices one ResolveCli call can put in its pane
(backend::cli_notice, SPEC_LAUNCH_CONTEXT_WORKSPACE_RULE_AND_STARTUP_FILES_2026_09_30.md
§6.3). A probe with no block_id (the picker, the Toolchain pane) puts
nothing anywhere.
A PATH-only provider’s CLI: on PATH, else in the folder its own installer
uses (crate::backend::providers::known_install_paths), which may not
be on this process’s PATH until AgentMux restarts.
Run the provider auth-check CLI against auth_env and parse the verdict.
Returns (authenticated, email, auth_method, raw_output). Extracted so the
stale-credential self-heal can re-run the exact same check after refreshing.
The lines of where/which output a spawn can use. On Windows that is
the ones make_cli_cmd can run (.exe / .cmd / .bat), skipping e.g. the
extensionless npm shell script; elsewhere which prints one path.