feat: complete evidence restructuring worktree

backend/src/pi/provider-smoke.ts

@@ -11,6 +11,7 @@ import { buildPiChildEnv, canonicalPiProvider } from "./provider-credentials.js"
 import type { PiReasoning } from "./management.js";
 import {
   PiManagedConfigError,
+  configuredPiProviderApiKey,
   isPiManagedConfigError,
   parsePiConfigJson,
   readConfiguredPiAgentFile,
@@ -65,11 +66,15 @@ export function createPiProviderSmoke(
       const canonicalProvider = canonicalPiProvider(provider);
       if (!canonicalProvider || timeoutMs <= 0) throw providerFailure();
       const configuredAuthProviders = authProviders();
+      const configuredModels = options.readModelsStore
+        ? options.readModelsStore()
+        : readConfiguredPiAgentFile("models.json", true);
       const env = buildPiChildEnv({
         provider: canonicalProvider,
         authProviders: configuredAuthProviders,
         credentialValue: secretValue(config, "THT_MODEL_API_KEY"),
         credentialFile: config.modelApiKeyFile,
+        configuredApiKey: configuredPiProviderApiKey(configuredModels, canonicalProvider),
       });
       clearPrincipalEnvironment(env);
       delete env.THT_DATA_ROOT;
@@ -90,9 +95,6 @@ export function createPiProviderSmoke(
         );
         writeDeclarativeAgentConfig(join(isolatedAgentDir, "auth.json"), authStore);
       }
-      const configuredModels = options.readModelsStore
-        ? options.readModelsStore()
-        : readConfiguredPiAgentFile("models.json", true);
       if (configuredModels !== undefined) {
         const modelsStore = selectedProviderModelsStore(
           configuredModels,