feat: add "Anthropic — via Claude CLI" as a first-class provider

Replaces the stray useClaudeCli settings checkbox + onboarding question
with a proper provider-card UX. The card lives next to OAuth + API-key
cards in onboarding and settings, with Enable/Disable + Test actions.

Backend:
 - Vendors rchern/pi-claude-cli@0.3.1 as packages/pi-claude-cli
   (MIT, attribution in UPSTREAM.md). Lets us bump peer-dep on
   pi-coding-agent in lockstep with Fusion (upstream pinned ^0.52.0
   vs ours ^0.62.0) and fix bugs without waiting on upstream.
 - Adds @fusion/pi-claude-cli as a workspace dep of @runfusion/fusion
   so users don't have to `npm install -g pi-claude-cli` manually.
 - serve/daemon/dashboard conditionally load the extension via
   discoverAndLoadExtensions() when GlobalSettings.useClaudeCli is on;
   no side-effects on user ~/.fusion/agent/settings.json.
 - New GET /api/providers/claude-cli/status: claude --version probe
   + toggle state + cached extension resolution.
 - New POST /api/auth/claude-cli: flips useClaudeCli, refuses if the
   claude binary is missing, fires the existing skill-backfill hook.
 - /api/auth/status now injects a synthetic {id:"claude-cli", type:"cli"}
   provider entry so onboarding + settings see a consistent list.

Frontend:
 - New ClaudeCliProviderCard component shared between ModelOnboardingModal
   and SettingsModal's Authentication section.
 - New AuthProvider.type = "cli" variant.
 - Removed the old "Route AI calls through the Claude CLI" checkbox from
   Global Models settings and the opt-in step from the onboarding wizard.
 - ProviderIcon gets a composite Anthropic-mark-plus-terminal glyph for
   the claude-cli provider id.

Tests:
 - 8 unit tests for extension resolution (@fusion/pi-claude-cli is
   workspace-linked so these run in-tree).
 - 2 unit tests for the binary probe.
 - Existing /auth/status tests filter out the new synthetic entry so
   they keep asserting structural OAuth/API-key behavior in isolation.
 - The vendored package's own 296 tests still pass unchanged.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

packages/pi-claude-cli/src/tool-mapping.ts

@@ -0,0 +1,147 @@
+/**
+ * Single-source-of-truth tool mapping table for bidirectional translation
+ * between Claude CLI tool names/arguments and pi tool names/arguments.
+ *
+ * All lookup tables are derived from the TOOL_MAPPINGS array.
+ * Unknown tools and arguments pass through unchanged.
+ */
+
+/**
+ * A mapping entry for a single tool.
+ * `args` maps Claude argument names to pi argument names (only renamed args).
+ */
+export interface ToolMapping {
+  claude: string;
+  pi: string;
+  args: Record<string, string>;
+}
+
+/**
+ * The canonical tool mapping table. All other lookup structures are derived from this.
+ */
+export const TOOL_MAPPINGS: ToolMapping[] = [
+  { claude: "Read", pi: "read", args: { file_path: "path" } },
+  { claude: "Write", pi: "write", args: { file_path: "path" } },
+  {
+    claude: "Edit",
+    pi: "edit",
+    args: { file_path: "path", old_string: "oldText", new_string: "newText" },
+  },
+  { claude: "Bash", pi: "bash", args: {} },
+  { claude: "Grep", pi: "grep", args: { head_limit: "limit" } },
+  { claude: "Glob", pi: "find", args: {} },
+];
+
+/** Prefix for custom pi tools exposed via MCP. */
+export const CUSTOM_TOOLS_MCP_PREFIX = "mcp__custom-tools__";
+
+/** Set of built-in pi tool names derived from TOOL_MAPPINGS for O(1) lookup. */
+const BUILT_IN_PI_NAMES = new Set(TOOL_MAPPINGS.map((m) => m.pi));
+
+/**
+ * Check if a pi tool name is a custom tool (not one of the 6 built-in tools).
+ * Used by prompt builder to decide whether to add MCP prefix in history replay.
+ */
+export function isCustomToolName(piName: string): boolean {
+  return !BUILT_IN_PI_NAMES.has(piName);
+}
+
+/**
+ * Check if a Claude tool name maps to a pi-known tool.
+ * Returns true for built-in tools (Read, Write, etc.) and custom MCP tools (mcp__custom-tools__*).
+ * Returns false for internal Claude Code tools (ToolSearch, Task, Agent, etc.) that pi cannot execute.
+ * Used by event bridge to filter out internal tool calls.
+ */
+export function isPiKnownClaudeTool(claudeName: string): boolean {
+  if (claudeName.startsWith(CUSTOM_TOOLS_MCP_PREFIX)) return true;
+  return claudeName.toLowerCase() in CLAUDE_TO_PI_NAME;
+}
+
+// Derived lookup maps
+
+/** Lowercase Claude name -> pi name */
+const CLAUDE_TO_PI_NAME: Record<string, string> = {};
+/** Pi name -> PascalCase Claude name */
+const PI_TO_CLAUDE_NAME: Record<string, string> = {};
+/** Lowercase Claude name -> { claudeArgName: piArgName } */
+const CLAUDE_TO_PI_ARGS: Record<string, Record<string, string>> = {};
+/** Pi name -> { piArgName: claudeArgName } */
+const PI_TO_CLAUDE_ARGS: Record<string, Record<string, string>> = {};
+
+for (const m of TOOL_MAPPINGS) {
+  CLAUDE_TO_PI_NAME[m.claude.toLowerCase()] = m.pi;
+  PI_TO_CLAUDE_NAME[m.pi] = m.claude;
+  CLAUDE_TO_PI_ARGS[m.claude.toLowerCase()] = m.args;
+
+  // Build reverse arg map
+  const reverseArgs: Record<string, string> = {};
+  for (const [from, to] of Object.entries(m.args)) {
+    reverseArgs[to] = from;
+  }
+  PI_TO_CLAUDE_ARGS[m.pi] = reverseArgs;
+}
+
+// Handle glob/find asymmetry: pi's "glob" also maps back to Claude's "Glob"
+PI_TO_CLAUDE_NAME["glob"] = "Glob";
+
+/**
+ * Map a Claude tool name to the corresponding pi tool name.
+ * Strips the mcp__custom-tools__ prefix for custom tools first,
+ * then falls back to case-insensitive built-in lookup.
+ * Unknown tool names pass through unchanged.
+ */
+export function mapClaudeToolNameToPi(claudeName: string): string {
+  // Strip custom-tools MCP prefix first (e.g., "mcp__custom-tools__deploy" -> "deploy")
+  if (claudeName.startsWith(CUSTOM_TOOLS_MCP_PREFIX)) {
+    return claudeName.slice(CUSTOM_TOOLS_MCP_PREFIX.length);
+  }
+  // Standard built-in tool mapping (case-insensitive)
+  return CLAUDE_TO_PI_NAME[claudeName.toLowerCase()] ?? claudeName;
+}
+
+/**
+ * Map a pi tool name to the corresponding Claude tool name.
+ * Direct lookup. Unknown tool names pass through unchanged.
+ */
+export function mapPiToolNameToClaude(piName: string): string {
+  return PI_TO_CLAUDE_NAME[piName] ?? piName;
+}
+
+/**
+ * Translate Claude tool arguments to pi format.
+ * Only known renamed arguments are translated; all others pass through unchanged.
+ * This prevents dropping unknown/extra arguments (Pitfall 5).
+ */
+export function translateClaudeArgsToPi(
+  claudeToolName: string,
+  args: Record<string, unknown>,
+): Record<string, unknown> {
+  const renames = CLAUDE_TO_PI_ARGS[claudeToolName.toLowerCase()];
+  if (!renames || Object.keys(renames).length === 0) return args;
+
+  const result: Record<string, unknown> = {};
+  for (const [key, value] of Object.entries(args)) {
+    const newKey = renames[key] ?? key;
+    result[newKey] = value;
+  }
+  return result;
+}
+
+/**
+ * Translate pi tool arguments to Claude format.
+ * Only known renamed arguments are translated; all others pass through unchanged.
+ */
+export function translatePiArgsToClaude(
+  piToolName: string,
+  args: Record<string, unknown>,
+): Record<string, unknown> {
+  const renames = PI_TO_CLAUDE_ARGS[piToolName];
+  if (!renames || Object.keys(renames).length === 0) return args;
+
+  const result: Record<string, unknown> = {};
+  for (const [key, value] of Object.entries(args)) {
+    const newKey = renames[key] ?? key;
+    result[newKey] = value;
+  }
+  return result;
+}