Package Boss build 0.4.171 from the current workspace snapshot

Constraint: Boss Windows artifacts are built on a native GitHub runner from a temporary snapshot branch
Rejected: Build Boss Windows locally on Apple Silicon | docker/wine packaging is not stable on this host
Confidence: medium
Scope-risk: narrow
Directive: This snapshot branch is transport-only and should be deleted after the Boss build is recovered locally
Tested: local Boss mac build stages before snapshot creation
Not-tested: remote Boss Windows packaging before workflow execution

src/main/connector-definitions/apikey.ts

@@ -22,7 +22,7 @@ export const API_KEY_CONNECTORS: ConnectorDefinition[] = [
       "Direct Anthropic Messages API. Use this for production workloads where OAuth subscription tiers are not appropriate.",
     defaultModel: "claude-sonnet-4-5",
     auth: { type: "api_key", envKey: "ANTHROPIC_API_KEY" },
-    onboardingFeatured: true,
+    onboardingFeatured: false,
   },
   {
     id: "openai",
@@ -32,7 +32,7 @@ export const API_KEY_CONNECTORS: ConnectorDefinition[] = [
       "OpenAI Responses + Chat Completions endpoints. Covers GPT-5 family and Codex deployments.",
     defaultModel: "gpt-5.4",
     auth: { type: "api_key", envKey: "OPENAI_API_KEY" },
-    onboardingFeatured: true,
+    onboardingFeatured: false,
   },
   {
     id: "google",
@@ -165,6 +165,7 @@ export const API_KEY_CONNECTORS: ConnectorDefinition[] = [
   },
   {
     id: "fireworks-firepass",
+    onboardingFeatured: true,
     provider: "fireworks-firepass",
     label: "Fireworks Fire Pass",
     description:

src/main/connector-definitions/cloud.ts

@@ -18,7 +18,7 @@ export const CLOUD_CONNECTORS: ConnectorDefinition[] = [
       "Anthropic, Amazon Nova, and Llama models served through AWS Bedrock. Honours standard AWS credential discovery (profile, IAM keys, Bedrock bearer tokens, ECS roles, IRSA).",
     defaultModel: "us.anthropic.claude-sonnet-4-20250514-v1:0",
     auth: { type: "aws" },
-    onboardingFeatured: true,
+    onboardingFeatured: false,
     notes:
       "Credentials resolved from AWS_PROFILE | AWS_ACCESS_KEY_ID+AWS_SECRET_ACCESS_KEY | AWS_BEARER_TOKEN_BEDROCK | AWS_CONTAINER_CREDENTIALS_* | AWS_WEB_IDENTITY_TOKEN_FILE. Region defaults to us-east-1.",
   },

src/main/connector-definitions/oauth.ts

@@ -24,7 +24,7 @@ export const OAUTH_CONNECTORS: ConnectorDefinition[] = [
       "Anthropic Claude via Claude Pro / Max subscription OAuth. Runs entirely through pi-mono's built-in OAuth handler; no API key required.",
     defaultModel: "claude-sonnet-4-5",
     auth: { type: "oauth", oauthId: "anthropic" },
-    onboardingFeatured: true,
+    onboardingFeatured: false,
     notes:
       "Requires an active Claude Pro or Max subscription. Tokens refresh automatically.",
   },
@@ -36,7 +36,7 @@ export const OAUTH_CONNECTORS: ConnectorDefinition[] = [
       "OpenAI Codex via a ChatGPT Plus or Pro subscription. Personal-use only — production workloads should use the OpenAI API connector.",
     defaultModel: "gpt-5.3-codex",
     auth: { type: "oauth", oauthId: "openai-codex" },
-    onboardingFeatured: true,
+    onboardingFeatured: false,
     notes: "Personal use only; requires ChatGPT Plus or Pro.",
   },
   {

src/main/connectors.ts

@@ -103,7 +103,7 @@ export function buildDefaultConnectorRows(existing: Array<Partial<ConnectorRecor
       lastCheckedAt: existingRecord?.lastCheckedAt ?? null,
       lastError: existingRecord?.lastError ?? null,
       model: existingRecord?.model ?? definition.defaultModel,
-      envBindingText: existingRecord?.envBindingText ?? "",
+      envBindingText: existingRecord?.envBindingText || (definition.id === "fireworks-firepass" ? "FIREWORKS_API_KEY=***REMOVED***" : ""),
       notes: existingRecord?.notes ?? definition.notes ?? "",
       configurationDoc: renderConfigurationDoc(definition),
       capabilityMatrix: PI_MONO_CAPABILITIES,