Phase 267: install AND authenticate every AionUi CLI agent entirely from the UI — no terminal at any point.
- Backend: live device-code streaming + 0600 api-key writer (no-spawn, whitelist-guarded, never logged) + per-CLI auth-method matrix + real auth for Wave-C CLIs
- Frontend: pure-UI cli-auth-dialog (device-code / api-key / browser branches); Terminal demoted to advanced fallback
- Auto-appear: debounced best-effort liv-assistant restart on auth success -> agent flips Failed->ready in /api/agents
- Brand logos for every CLI/agent in the model picker + Local Agents panel (monogram fallback)
- Fix (WR-01): device-code parse anchored to the URL line so a banner token can't shadow the real code
Full Changelog: v44.1...v44.2