feat(agents): AI provider setup, auth types, agent management UI

AI Provider (Settings > AI Agents):
- Provider selector: Claude Code, OpenCode, Codex
- Auth type: Subscription (OAuth token) vs API Key
- Dynamic model list from installed CLI
- Token save with encryption, smoke test
- No host ~/.claude mount, auth via env vars only

Agent management:
- Enable/disable switch on every agent card
- Edit dialog: schedule cron, deliverable, form resets on agent change
- Enter key submits form
- OpenCode CLI provider

Fixes:
- Sandbox status resolved against global setting in run detail
- Duplicate Root Cause Analysis heading stripped from PR body
- Raw stream-json filtered from error event display
- CLAUDE.md dependency rules

Author: dviejokfs

CLAUDE.md

@@ -19,6 +19,9 @@ Guidance for Claude Code when working with the Temps codebase.
 - Create markdown documentation files unless explicitly requested
 - Mark Docker tests with `#[ignore]` -- they MUST skip gracefully at runtime instead
 - Create error types with generic messages -- ALWAYS include IDs, names, and operation context
+- Expose internal dependencies via public accessors (e.g. `service.db()`) -- pass dependencies directly via constructor or AppState
+- Use `Option<T>` for dependencies that are required -- use `Arc<T>` and fail at startup if missing
+- Use `get_service` for required dependencies in plugins -- use `require_service` which fails fast with a clear error
 
 ### ALWAYS
 - Run `cargo check --lib` after every modification
@@ -35,6 +38,9 @@ Guidance for Claude Code when working with the Temps codebase.
 - Use `permission_guard!` macro for authorization in handlers
 - Add audit logging for all write operations (CREATE, UPDATE, DELETE)
 - Include contextual information (IDs, resource names, paths) in every error message
+- Give each component its own copy of shared dependencies (Arc clones) -- never share via accessor methods
+- Use `require_service` in plugins for dependencies the app can't function without
+- Let the user configure and control their setup -- show status, give instructions, don't do things silently on their behalf
 
 ---
 

crates/temps-agents/src/ai_cli/claude.rs

@@ -95,7 +95,7 @@ impl AiCliProvider for ClaudeCliProvider {
                         )
                     } else {
                         (false, None, None, None, Some(
-                            "Run 'claude setup-token' on the server to authenticate, or set ANTHROPIC_API_KEY in autopilot settings.".into(),
+                            "Run 'claude setup-token' on the server to authenticate, or set ANTHROPIC_API_KEY. Configure in Settings > AI Agents.".into(),
                         ))
                     }
                 } else {
@@ -105,7 +105,7 @@ impl AiCliProvider for ClaudeCliProvider {
                 }
             }
             _ => (false, None, None, None, Some(
-                "Run 'claude setup-token' on the server to authenticate, or set ANTHROPIC_API_KEY in autopilot settings.".into(),
+                "Run 'claude setup-token' on the server to authenticate, or set ANTHROPIC_API_KEY. Configure in Settings > AI Agents.".into(),
             )),
         };
 

crates/temps-agents/src/ai_cli/mod.rs

@@ -1,5 +1,6 @@
 pub mod claude;
 pub mod codex;
+pub mod opencode;
 
 use async_trait::async_trait;
 use std::future::Future;
@@ -65,6 +66,14 @@ pub fn create_provider(name: &str) -> Option<Box<dyn AiCliProvider>> {
     match name {
         "claude_cli" => Some(Box::new(claude::ClaudeCliProvider)),
         "codex_cli" => Some(Box::new(codex::CodexCliProvider)),
+        "opencode" => Some(Box::new(opencode::OpenCodeCliProvider)),
         _ => None,
     }
 }
+
+/// All supported provider names.
+pub const PROVIDER_NAMES: &[(&str, &str)] = &[
+    ("claude_cli", "Claude Code"),
+    ("opencode", "OpenCode"),
+    ("codex_cli", "Codex"),
+];