feat(mobile): show BYOK badges for CLI models

[iscekic]

Users now see a BYOK badge for eligible remote CLI models in the mobile picker row and selected-model pill. Cloud-agent model badges remain unchanged, and CLI free, data-collection, and cost metadata stay suppressed.

The change makes BYOK model selection visible before a remote CLI run and adds seed topics that provide repeatable BYOK fixture and usage evidence for verification.

The mobile selector uses one pure badge predicate that separates the user BYOK flag from gateway metadata. The seed topics encrypt a placeholder key, atomically replace marked catalog fixture data, and read usage rows through a bounded, read-only query.

Human steps: before merge, a repository administrator must enable Code Security under Kilo-Org/cloud Settings → Code Security so the CodeQL checks can upload SARIF results. No product deployment step is needed after merge.

E2E: bot-e2e — fresh iOS verification passed the remote CLI badge, cloud-agent badge regression, BYOK usage rows, and non-BYOK control evidence.

Visual Changes:

Remote CLI picker row:

Remote CLI selected-model pill:

Cloud-agent picker row:

Cloud-agent selected-model pill:

Checks: repository typecheck, repository lint, mobile model-selector tests, mobile unused-export checks, format, and diff checks passed locally. Current CodeQL checks fail only because Code Security is disabled on the private repository.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Executive Summary

Incremental review of the latest commits: the seed user-resolution helpers were extracted into shared dev/seed/lib/users.ts with identical lookup/ambiguity logic, usage-evidence dropped only select fields that are not referenced downstream, and the badge predicate's unused unavailable input was removed with both call sites passing variables (no excess-property breakage) — all behavior-preserving, verified against current HEAD with high confidence.

Files Reviewed (10 files)

• apps/mobile/src/components/agents/model-selector-badges.ts
• apps/mobile/src/components/agents/model-selector-badges.test.ts
• apps/mobile/src/components/agents/model-selector.mounted.test.tsx
• apps/mobile/src/components/agents/model-selector.tsx
• apps/mobile/src/lib/free-model-data-disclosure.ts
• dev/seed/app/byok-e2e-fixture.ts
• dev/seed/app/usage-evidence.ts
• dev/seed/coding-plans/occupied-minimax-byok.ts
• dev/seed/lib/byok.ts
• dev/seed/lib/users.ts

Previous Review Summary (commit 0887634)

Current summary above is authoritative. Previous snapshots are kept for context only.

Previous review (commit 0887634)

Status: No Issues Found | Recommendation: Merge

Executive Summary

Reviewed the mobile BYOK badge predicate extraction (ungating BYOK from showGatewayMetadata for CLI-catalog options while keeping free/data-collection gated) and the new BYOK E2E seed topics; badge semantics, schema usage, encryption format, snapshot merge/delete SQL, and runner contract all verified against current HEAD with high confidence.

Files Reviewed (9 files)

• apps/mobile/src/components/agents/model-selector-badges.ts
• apps/mobile/src/components/agents/model-selector-badges.test.ts
• apps/mobile/src/components/agents/model-selector.mounted.test.tsx
• apps/mobile/src/components/agents/model-selector.tsx
• apps/mobile/src/lib/free-model-data-disclosure.ts
• dev/seed/app/byok-e2e-fixture.ts
• dev/seed/app/usage-evidence.ts
• dev/seed/coding-plans/occupied-minimax-byok.ts
• dev/seed/lib/byok.ts

---

_{Reviewed by kimi-k3 · Input: 44.3K · Output: 6.9K · Cached: 354.4K}

_{Review guidance: REVIEW.md from base branch main}