cairn/changes/wizard-auth-and-mailbox-aliases/delta.md
The discovery list SHALL show one entry per reachable service, carrying the advertised authentication capabilities. The concrete method is chosen in a second, service-specific prompt (SASL mechanism for IMAP + SMTP, HTTP scheme for JMAP), skipped when only one qualifies.
OAuth SHALL NOT be a standalone list entry. It folds into the API-token credential prompt, which offers the OS keyrings and the OAuth token brokers together, the brokers appearing only when the service advertises OAuth.
The IMAP + SMTP flow SHALL test IMAP first, ask whether SMTP reuses the same credentials, re-run the SASL prompt for a distinct one, and test SMTP last. A backend that validates itself inline skips the final account test.
The wizard SHALL pre-fill mailbox.alias.*: JMAP roles read live, Gmail and Graph mapped from their fixed ids, IMAP pinned to the reserved INBOX.
The wizard SHALL derive the account name from the input and use it as the table key, without a prompt.