@ai-matrx/agents 0.59.226 → 0.59.228

package/CHANGELOG.md

@@ -1,10 +1,25 @@
 # Changelog
 
-## 0.59.226
+## 0.59.228
 
 UNVERIFIED: this release has no Unreleased entry and the source comparison could not be made (the caller supplied no source comparison). Whether source changed is unknown; consumer action is unknown.
 Check the package's gitHead on npm against this version's gitHead: `git diff <previous gitHead> <this gitHead> -- apps/shared/matrx-agents/src`.
 
+## 0.59.226
+
+Automatic changed-only republish (docs/metadata drift since the last published version; verified: `git diff 2859805452 9ef2018cc7 -- apps/shared/matrx-agents/src`
+has no shipped-source changes outside tests, fixtures and docs). No consumer action required.
+
+## 0.59.225
+
+Automatic changed-only republish (docs/metadata drift since the last published version; verified: `git diff fa2e9e0515 2859805452 -- apps/shared/matrx-agents/src`
+has no shipped-source changes outside tests, fixtures and docs). No consumer action required.
+
+## 0.59.224
+
+Automatic changed-only republish (docs/metadata drift since the last published version; verified: `git diff 54d2f38f9e fa2e9e0515 -- apps/shared/matrx-agents/src`
+has no shipped-source changes outside tests, fixtures and docs). No consumer action required.
+
 ## 0.59.223
 
 Automatic changed-only republish (docs/metadata drift since the last published version; verified: `git diff 02639b3a61 54d2f38f9e -- apps/shared/matrx-agents/src`

package/dist/content-transfer/index.cjs

@@ -210,6 +210,7 @@ var MANDATE_KEYS = {
   content_plan__route_picker: "content_plan.route_picker",
   content_plan__shape_planner: "content_plan.shape_planner",
   conversation__action_auditor: "conversation.action_auditor",
+  conversation__condense: "conversation.condense",
   conversation__decision_ledger: "conversation.decision_ledger",
   conversation__drift_auditor: "conversation.drift_auditor",
   conversation__label_agent_run: "conversation.label_agent_run",

package/dist/content-transfer/index.js

@@ -187,6 +187,7 @@ var MANDATE_KEYS = {
   content_plan__route_picker: "content_plan.route_picker",
   content_plan__shape_planner: "content_plan.shape_planner",
   conversation__action_auditor: "conversation.action_auditor",
+  conversation__condense: "conversation.condense",
   conversation__decision_ledger: "conversation.decision_ledger",
   conversation__drift_auditor: "conversation.drift_auditor",
   conversation__label_agent_run: "conversation.label_agent_run",

package/dist/content-transfer/react/index.cjs

@@ -163,6 +163,7 @@ var MANDATE_KEYS = {
   content_plan__route_picker: "content_plan.route_picker",
   content_plan__shape_planner: "content_plan.shape_planner",
   conversation__action_auditor: "conversation.action_auditor",
+  conversation__condense: "conversation.condense",
   conversation__decision_ledger: "conversation.decision_ledger",
   conversation__drift_auditor: "conversation.drift_auditor",
   conversation__label_agent_run: "conversation.label_agent_run",

package/dist/content-transfer/react/index.js

@@ -135,6 +135,7 @@ var MANDATE_KEYS = {
   content_plan__route_picker: "content_plan.route_picker",
   content_plan__shape_planner: "content_plan.shape_planner",
   conversation__action_auditor: "conversation.action_auditor",
+  conversation__condense: "conversation.condense",
   conversation__decision_ledger: "conversation.decision_ledger",
   conversation__drift_auditor: "conversation.drift_auditor",
   conversation__label_agent_run: "conversation.label_agent_run",

package/dist/mandates/index.cjs

@@ -47,9 +47,9 @@ module.exports = __toCommonJS(mandates_exports);
 
 // mandates/keys.generated.ts
 var MANDATE_KEYS_META = {
-  aidreamRevision: "9ef2018cc7c37ccd3760a47917c97f025c0327ce",
+  aidreamRevision: "b18bc55fbafb8d6529da4a296f7221c0bc6458d2",
   generatorVersion: "1.0.0",
-  packageVersion: "0.59.226",
+  packageVersion: "0.59.228",
   retireWindow: 3
 };
 var MANDATE_KEYS = {
@@ -173,6 +173,7 @@ var MANDATE_KEYS = {
   content_plan__route_picker: "content_plan.route_picker",
   content_plan__shape_planner: "content_plan.shape_planner",
   conversation__action_auditor: "conversation.action_auditor",
+  conversation__condense: "conversation.condense",
   conversation__decision_ledger: "conversation.decision_ledger",
   conversation__drift_auditor: "conversation.drift_auditor",
   conversation__label_agent_run: "conversation.label_agent_run",

package/dist/mandates/index.d.cts

@@ -6,10 +6,10 @@
  * from the IN-PROCESS mandate declarations — the same `declared_mandates()` the
  * boot sync writes to the database from. There is no hand list anywhere.
  *
- * aidream revision:   9ef2018cc7c37ccd3760a47917c97f025c0327ce
+ * aidream revision:   b18bc55fbafb8d6529da4a296f7221c0bc6458d2
  * generator version:  1.0.0
- * package version:    0.59.226
- * active keys:        615
+ * package version:    0.59.228
+ * active keys:        616
  * retiring keys:      5
  *
  * THE IDENTIFIER RULE: every `.` in a key becomes `__`, any character outside
@@ -19,9 +19,9 @@
  */
 /** Where this module came from — surfaced so a report can name the exact build. */
 declare const MANDATE_KEYS_META: {
-    readonly aidreamRevision: "9ef2018cc7c37ccd3760a47917c97f025c0327ce";
+    readonly aidreamRevision: "b18bc55fbafb8d6529da4a296f7221c0bc6458d2";
     readonly generatorVersion: "1.0.0";
-    readonly packageVersion: "0.59.226";
+    readonly packageVersion: "0.59.228";
     readonly retireWindow: 3;
 };
 /** Every declared mandate key, by THE IDENTIFIER RULE. */
@@ -146,6 +146,7 @@ declare const MANDATE_KEYS: {
     readonly content_plan__route_picker: "content_plan.route_picker";
     readonly content_plan__shape_planner: "content_plan.shape_planner";
     readonly conversation__action_auditor: "conversation.action_auditor";
+    readonly conversation__condense: "conversation.condense";
     readonly conversation__decision_ledger: "conversation.decision_ledger";
     readonly conversation__drift_auditor: "conversation.drift_auditor";
     readonly conversation__label_agent_run: "conversation.label_agent_run";

package/dist/mandates/index.d.ts

@@ -6,10 +6,10 @@
  * from the IN-PROCESS mandate declarations — the same `declared_mandates()` the
  * boot sync writes to the database from. There is no hand list anywhere.
  *
- * aidream revision:   9ef2018cc7c37ccd3760a47917c97f025c0327ce
+ * aidream revision:   b18bc55fbafb8d6529da4a296f7221c0bc6458d2
  * generator version:  1.0.0
- * package version:    0.59.226
- * active keys:        615
+ * package version:    0.59.228
+ * active keys:        616
  * retiring keys:      5
  *
  * THE IDENTIFIER RULE: every `.` in a key becomes `__`, any character outside
@@ -19,9 +19,9 @@
  */
 /** Where this module came from — surfaced so a report can name the exact build. */
 declare const MANDATE_KEYS_META: {
-    readonly aidreamRevision: "9ef2018cc7c37ccd3760a47917c97f025c0327ce";
+    readonly aidreamRevision: "b18bc55fbafb8d6529da4a296f7221c0bc6458d2";
     readonly generatorVersion: "1.0.0";
-    readonly packageVersion: "0.59.226";
+    readonly packageVersion: "0.59.228";
     readonly retireWindow: 3;
 };
 /** Every declared mandate key, by THE IDENTIFIER RULE. */
@@ -146,6 +146,7 @@ declare const MANDATE_KEYS: {
     readonly content_plan__route_picker: "content_plan.route_picker";
     readonly content_plan__shape_planner: "content_plan.shape_planner";
     readonly conversation__action_auditor: "conversation.action_auditor";
+    readonly conversation__condense: "conversation.condense";
     readonly conversation__decision_ledger: "conversation.decision_ledger";
     readonly conversation__drift_auditor: "conversation.drift_auditor";
     readonly conversation__label_agent_run: "conversation.label_agent_run";

package/dist/mandates/index.js

@@ -1,8 +1,8 @@
 // mandates/keys.generated.ts
 var MANDATE_KEYS_META = {
-  aidreamRevision: "9ef2018cc7c37ccd3760a47917c97f025c0327ce",
+  aidreamRevision: "b18bc55fbafb8d6529da4a296f7221c0bc6458d2",
   generatorVersion: "1.0.0",
-  packageVersion: "0.59.226",
+  packageVersion: "0.59.228",
   retireWindow: 3
 };
 var MANDATE_KEYS = {
@@ -126,6 +126,7 @@ var MANDATE_KEYS = {
   content_plan__route_picker: "content_plan.route_picker",
   content_plan__shape_planner: "content_plan.shape_planner",
   conversation__action_auditor: "conversation.action_auditor",
+  conversation__condense: "conversation.condense",
   conversation__decision_ledger: "conversation.decision_ledger",
   conversation__drift_auditor: "conversation.drift_auditor",
   conversation__label_agent_run: "conversation.label_agent_run",

package/dist/models/react/index.cjs

@@ -25,7 +25,9 @@ __export(react_exports, {
   ModelCatalogProvider: () => ModelCatalogProvider,
   ModelDiscovery: () => ModelDiscovery,
   ModelListDropdown: () => ModelListDropdown,
+  YOUR_KEY_LABEL: () => YOUR_KEY_LABEL,
   useLocalModels: () => useLocalModels,
+  useModelAccess: () => useModelAccess,
   useModelCatalog: () => useModelCatalog,
   useModelCatalogStore: () => useModelCatalogStore,
   useModelCatalogUiPorts: () => useModelCatalogUiPorts,
@@ -39,7 +41,7 @@ var import_react = require("react");
 var import_jsx_runtime = require("react/jsx-runtime");
 var ModelCatalogContext = (0, import_react.createContext)(null);
 var DefaultLink = ({ children, ...props }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("a", { ...props, children });
-function ModelCatalogProvider({ catalog, favorites, children, localModels, isSuperAdmin, canUseTopTier, hiddenModelIds, LinkComponent, settingsHref, renderErrorAction }) {
+function ModelCatalogProvider({ catalog, favorites, children, localModels, access, isSuperAdmin, canUseTopTier, hiddenModelIds, LinkComponent, settingsHref, renderErrorAction }) {
   const value = (0, import_react.useMemo)(
     () => ({
       catalog,
@@ -51,10 +53,11 @@ function ModelCatalogProvider({ catalog, favorites, children, localModels, isSup
         LinkComponent: LinkComponent ?? DefaultLink,
         settingsHref: settingsHref ?? null,
         ...localModels ? { localModels } : {},
+        ...access ? { access } : {},
         ...renderErrorAction ? { renderErrorAction } : {}
       }
     }),
-    [catalog, favorites, isSuperAdmin, canUseTopTier, hiddenModelIds, LinkComponent, settingsHref, renderErrorAction, localModels]
+    [catalog, favorites, isSuperAdmin, canUseTopTier, hiddenModelIds, LinkComponent, settingsHref, renderErrorAction, localModels, access]
   );
   return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ModelCatalogContext.Provider, { value, children });
 }
@@ -106,6 +109,12 @@ function useLocalModels(override) {
   );
   return { models, groupLabel: port?.groupLabel ?? "On this computer", open: port?.open ? (id) => port.open?.(id) : void 0 };
 }
+var NO_ACCESS = {};
+function useModelAccess(override) {
+  const contextPort = useBinding("useModelAccess").ports.access;
+  return override ?? contextPort ?? NO_ACCESS;
+}
+var YOUR_KEY_LABEL = "Your key";
 
 // models/react/ModelListDropdown.tsx
 var import_format = require("@ai-matrx/kit/format");
@@ -741,7 +750,8 @@ function ModelDetailCard({
   isCurrentModel,
   pinnedOfferingId,
   onPinOffering,
-  includeAdminSection
+  includeAdminSection,
+  yourKey = false
 }) {
   const pinnedHere = (t) => !!isCurrentModel && !!pinnedOfferingId && t.offeringId === pinnedOfferingId;
   const anyPinnedHere = model.tiers.some(pinnedHere);
@@ -806,7 +816,10 @@ function ModelDetailCard({
           )) })
         ] }),
         /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)("div", { className: "grid grid-cols-2 gap-2", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)("div", { className: "col-span-2", children: [
+          yourKey ? /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)("div", { className: "col-span-2", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("dt", { className: "text-[10px] uppercase tracking-wide text-muted-foreground", children: "Points" }),
+            /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("dd", { "data-your-key": true, className: "text-sm font-semibold text-foreground", title: "Runs on your own API key", children: YOUR_KEY_LABEL })
+          ] }) : /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)("div", { className: "col-span-2", children: [
             /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("dt", { className: "text-[10px] uppercase tracking-wide text-muted-foreground", children: "Points / 1M tokens" }),
             /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
               "dd",
@@ -1257,14 +1270,16 @@ function ModelRow({
   selected,
   isFavorite,
   locked = false,
+  blockedReason = null,
+  yourKey = false,
   onSelect,
   onHover,
   onToggleFavorite
 }) {
   const unavailable = variant === "admin" && !(model.admin?.offerings ?? []).some((o) => o.isAvailable);
   const retired = model.retiredAt != null;
-  const retiredTitle = retired ? `Retired ${model.retiredAt?.slice(0, 10)} \u2014 the provider no longer serves this model, so it cannot be selected.` : locked ? TOP_TIER_LOCKED_TITLE : void 0;
-  const blocked = retired || locked;
+  const retiredTitle = retired ? `Retired ${model.retiredAt?.slice(0, 10)} \u2014 the provider no longer serves this model, so it cannot be selected.` : blockedReason ? blockedReason : locked ? TOP_TIER_LOCKED_TITLE : void 0;
+  const blocked = retired || locked || blockedReason != null;
   return /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(
     "div",
     {
@@ -1312,55 +1327,67 @@ function ModelRow({
             children: /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(import_brand_glyphs.MakerBrandGlyph, { maker: model.maker, colored: true, className: "h-3.5 w-3.5" })
           }
         ),
-        /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)("span", { className: "flex min-w-0 items-center gap-1.5", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(DelayedHint, { label: model.name, children: /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("span", { className: "truncate text-xs font-medium text-foreground", children: model.name }) }),
-          isDecisionModelCapability(model) && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
-            "span",
-            {
-              className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
-              title: "Decision model \u2014 it answers a Questions part with probabilities and generates no text.",
-              children: "decision"
-            }
-          ),
-          model.isDeprecated && !retired && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
-            "span",
-            {
-              className: "shrink-0 rounded bg-destructive/15 px-1 text-[9px] text-destructive-ink",
-              title: "Deprecated \u2014 still runs; hidden from default selection",
-              children: "dep"
-            }
-          ),
-          retired && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
-            "span",
-            {
-              className: "shrink-0 rounded bg-destructive/15 px-1 text-[9px] text-destructive-ink",
-              title: retiredTitle,
-              children: "retired"
-            }
-          ),
-          unavailable && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
-            "span",
-            {
-              className: "shrink-0 rounded bg-destructive/15 px-1 text-[9px] text-destructive-ink",
-              title: "No available offerings \u2014 not callable",
-              children: "off"
-            }
-          ),
-          classTier ? /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
-            "span",
-            {
-              className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
-              title: `Runs on ${classTier.servedVia}`,
-              children: classTier.servedVia
-            }
-          ) : model.tiers.length > 1 && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
-            "span",
-            {
-              className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
-              title: model.tiers.map((t) => t.servedVia).join(" \xB7 "),
-              children: serviceCountLabel(model.tiers.length)
-            }
-          )
+        /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)("span", { className: "flex min-w-0 flex-col", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)("span", { className: "flex min-w-0 items-center gap-1.5", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(DelayedHint, { label: model.name, children: /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("span", { className: "truncate text-xs font-medium text-foreground", children: model.name }) }),
+            yourKey && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
+              "span",
+              {
+                "data-your-key": true,
+                className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
+                title: "Runs on your own API key",
+                children: YOUR_KEY_LABEL
+              }
+            ),
+            isDecisionModelCapability(model) && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
+              "span",
+              {
+                className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
+                title: "Decision model \u2014 it answers a Questions part with probabilities and generates no text.",
+                children: "decision"
+              }
+            ),
+            model.isDeprecated && !retired && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
+              "span",
+              {
+                className: "shrink-0 rounded bg-destructive/15 px-1 text-[9px] text-destructive-ink",
+                title: "Deprecated \u2014 still runs; hidden from default selection",
+                children: "dep"
+              }
+            ),
+            retired && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
+              "span",
+              {
+                className: "shrink-0 rounded bg-destructive/15 px-1 text-[9px] text-destructive-ink",
+                title: retiredTitle,
+                children: "retired"
+              }
+            ),
+            unavailable && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
+              "span",
+              {
+                className: "shrink-0 rounded bg-destructive/15 px-1 text-[9px] text-destructive-ink",
+                title: "No available offerings \u2014 not callable",
+                children: "off"
+              }
+            ),
+            classTier ? /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
+              "span",
+              {
+                className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
+                title: `Runs on ${classTier.servedVia}`,
+                children: classTier.servedVia
+              }
+            ) : model.tiers.length > 1 && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
+              "span",
+              {
+                className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
+                title: model.tiers.map((t) => t.servedVia).join(" \xB7 "),
+                children: serviceCountLabel(model.tiers.length)
+              }
+            )
+          ] }),
+          blockedReason && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("span", { "data-cloud-blocked-reason": true, className: "truncate text-[11px] text-muted-foreground", children: blockedReason })
         ] }),
         /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(SpeedCell, { value: model.speedRating }),
         /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
@@ -1435,6 +1462,7 @@ var GROUP_HEADING = "px-2 pb-0.5 pt-1.5 text-[10px] uppercase tracking-wide text
 function ModelListDropdown({
   value: savedValue,
   localModels: localModelsProp,
+  access: accessProp,
   onValueChange,
   inputModalities,
   outputModalities,
@@ -1465,6 +1493,9 @@ function ModelListDropdown({
   const { favoriteSet, toggleFavorite } = useModelFavorites(open);
   const ports = useModelCatalogUiPorts();
   const canUseTopTier = ports.canUseTopTier ?? false;
+  const access = useModelAccess(accessProp);
+  const cloudBlockedReason = access.cloudBlockedReason ?? null;
+  const usesOwnKey = (modelId) => !!modelId && access.usesOwnKey?.(modelId) === true;
   const isSuperAdmin = ports.isSuperAdmin ?? false;
   const LinkComponent = ports.LinkComponent;
   const hiddenModelIds = ports.hiddenModelIds;
@@ -1718,6 +1749,10 @@ function ModelListDropdown({
   };
   const refuseIfRetired = (id2) => {
     const target = models.find((m) => m.id === id2);
+    if (target && cloudBlockedReason) {
+      console.warn(`[ModelListDropdown] Refused to select ${target.name} (${id2}): ${cloudBlockedReason}.`);
+      return true;
+    }
     if (target && !canUseTopTier && isTopTierRating(target.costRating)) {
       console.warn(`[ModelListDropdown] Refused to select ${target.name} (${id2}): ${TOP_TIER_LOCKED_TITLE}.`);
       return true;
@@ -1796,6 +1831,10 @@ function ModelListDropdown({
             selectedClassLabel && /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)("span", { className: "text-muted-foreground", children: [
               " \xB7 ",
               selectedClassLabel
+            ] }),
+            usesOwnKey(value) && /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)("span", { "data-your-key": true, className: "text-muted-foreground", children: [
+              " \xB7 ",
+              YOUR_KEY_LABEL
             ] })
           ] })
         ] }) : /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("span", { className: "min-w-0 whitespace-normal text-left leading-tight text-muted-foreground", children: isLoading ? "Loading models\u2026" : emptyOptionLabel && !value ? emptyOptionLabel : placeholder }) }) : /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("span", { className: "flex min-w-0 flex-1 items-center gap-1.5", children: shown ? /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_jsx_runtime3.Fragment, { children: [
@@ -1812,6 +1851,10 @@ function ModelListDropdown({
             selectedClassLabel && /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)("span", { className: "text-muted-foreground", children: [
               " \xB7 ",
               selectedClassLabel
+            ] }),
+            usesOwnKey(value) && /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)("span", { "data-your-key": true, className: "text-muted-foreground", children: [
+              " \xB7 ",
+              YOUR_KEY_LABEL
             ] })
           ] })
         ] }) : /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("span", { className: "min-w-0 truncate text-muted-foreground", children: isLoading ? "Loading models\u2026" : emptyOptionLabel && !value ? emptyOptionLabel : placeholder }) }),
@@ -1931,6 +1974,8 @@ function ModelListDropdown({
           selected: m.id === value && (classTier == null || classTier.offeringId === selectedClass?.offeringId),
           isFavorite: favoriteSet.has(m.id),
           locked: !canUseTopTier && isTopTierRating(m.costRating),
+          blockedReason: cloudBlockedReason,
+          yourKey: usesOwnKey(m.id),
           onToggleFavorite: () => toggleFavorite(m.id),
           onSelect: () => isMobile ? (setMobileDetail(m), setMobileDetailClass(classTier)) : handleSelectClass(m, classTier),
           onHover: isMobile ? void 0 : () => {
@@ -1998,6 +2043,7 @@ function ModelListDropdown({
       ModelDetailCard,
       {
         model: mobileDetail,
+        yourKey: usesOwnKey(mobileDetail.id),
         tier: costRatingTier(mobileDetail.costRating),
         variant,
         onSelect: () => handleSelect(mobileDetail.id, mobileDetailClass),
@@ -2096,6 +2142,7 @@ function ModelListDropdown({
                       ModelDetailCard,
                       {
                         model: hovered,
+                        yourKey: usesOwnKey(hovered.id),
                         tier: costRatingTier(hovered.costRating),
                         variant,
                         onSelect: () => handleSelect(hovered.id, hoveredClass),

package/dist/models/react/index.d.cts

@@ -456,8 +456,25 @@ interface LocalModelsPort {
      */
     open?(id: string): void;
 }
+/**
+ * How the person may reach a cloud model in THIS place (a chat composer passes it to its own picker,
+ * like `localModels`). Both fields are optional; a host that supplies neither changes nothing.
+ */
+interface ModelAccessPort {
+    /**
+     * Set = every cloud model is listed disabled with this one-line reason (never hidden), e.g. a
+     * confidential chat in an organization that requires its own hardware: "Blocked by your organization".
+     */
+    cloudBlockedReason?: string | null;
+    /**
+     * True when the person's own API key serves this model: the picker and the chat's model chip say
+     * "Your key" and show no model points.
+     */
+    usesOwnKey?(modelId: string): boolean;
+}
 interface ModelCatalogUiPorts {
     localModels?: LocalModelsPort;
+    access?: ModelAccessPort;
     isSuperAdmin?: boolean;
     canUseTopTier?: boolean;
     hiddenModelIds?: readonly string[] | undefined;
@@ -470,7 +487,7 @@ interface ModelCatalogProviderProps extends ModelCatalogUiPorts {
     favorites: ModelFavorites;
     children: ReactNode;
 }
-declare function ModelCatalogProvider({ catalog, favorites, children, localModels, isSuperAdmin, canUseTopTier, hiddenModelIds, LinkComponent, settingsHref, renderErrorAction }: ModelCatalogProviderProps): react.JSX.Element;
+declare function ModelCatalogProvider({ catalog, favorites, children, localModels, access, isSuperAdmin, canUseTopTier, hiddenModelIds, LinkComponent, settingsHref, renderErrorAction }: ModelCatalogProviderProps): react.JSX.Element;
 declare const useModelCatalogStore: () => ModelCatalog;
 declare const useModelCatalogUiPorts: () => ModelCatalogUiPorts;
 /**
@@ -498,6 +515,10 @@ declare function useLocalModels(override?: LocalModelsPort): {
     groupLabel: string;
     open: ((id: string) => void) | undefined;
 };
+/** The cloud-access rules for this picker; a port passed straight to the picker beats the provider's. */
+declare function useModelAccess(override?: ModelAccessPort): ModelAccessPort;
+/** The label a model reached through the person's own key carries, in the picker and on the chat's chip. */
+declare const YOUR_KEY_LABEL = "Your key";
 
 /**
  * A model offered in several CLASSES (Matrx Fast, Matrx Lightning, ...) is
@@ -542,6 +563,12 @@ interface ModelListDropdownBaseProps {
      * supplies one.
      */
     localModels?: LocalModelsPort;
+    /**
+     * Cloud-access rules for THIS picker (a chat composer passes its host's): a blocked reason that
+     * lists every cloud model disabled with why, and which models run on the person's own key.
+     * Beats the provider's port.
+     */
+    access?: ModelAccessPort;
     onValueChange: (modelId: string) => void;
     /** REQUIRED — input modalities the model must accept (seeds the filter). */
     inputModalities: Modality[];
@@ -600,7 +627,7 @@ interface ModelListDropdownBaseProps {
     "aria-label"?: string;
     "aria-labelledby"?: string;
 }
-declare function ModelListDropdown({ value: savedValue, localModels: localModelsProp, onValueChange, inputModalities, outputModalities, selectionPurpose, allowedModelIds, catalogVariant, emptyOptionLabel, onClear, placeholder, priorityModelIds, pinnedOfferingId, onOfferingPinChange, modelOnly, className, triggerVariant, presentation, id, disabled, disabledTitle, "aria-label": ariaLabel, "aria-labelledby": ariaLabelledBy, }: ModelListDropdownProps): react.JSX.Element;
+declare function ModelListDropdown({ value: savedValue, localModels: localModelsProp, access: accessProp, onValueChange, inputModalities, outputModalities, selectionPurpose, allowedModelIds, catalogVariant, emptyOptionLabel, onClear, placeholder, priorityModelIds, pinnedOfferingId, onOfferingPinChange, modelOnly, className, triggerVariant, presentation, id, disabled, disabledTitle, "aria-label": ariaLabel, "aria-labelledby": ariaLabelledBy, }: ModelListDropdownProps): react.JSX.Element;
 
 /** Subscribe to a slice of a model catalog's records. `select` must return a stable value for unchanged state. */
 declare function useModelRecordsSelector<T>(records: ModelRecords, select: (state: ModelRecordsState) => T): T;
@@ -962,4 +989,4 @@ interface DiscoveryResultViewProps {
 /** A resolved model: its header, the source's reason when the originals will not run, and every version judged. */
 declare function DiscoveryResultView({ result, device, runtimes, want, chooseLabel, mode, onChoose, renderVariantActions, renderActions }: DiscoveryResultViewProps): react.JSX.Element;
 
-export { type DiscoveryKind, type DiscoveryMode, type DiscoveryPort, DiscoveryResultView, type DiscoveryResultViewProps, type DiscoverySearchHit, type DiscoverySearchPage, type DiscoverySearchQuery, type DiscoverySort, type LocalModelEntry, type LocalModelsPort, type ModelCatalogLinkComponent, ModelCatalogProvider, type ModelCatalogProviderProps, type ModelCatalogUiPorts, ModelDiscovery, type ModelDiscoveryProps, ModelListDropdown, type ModelListDropdownProps, useLocalModels, useModelCatalog, useModelCatalogStore, useModelCatalogUiPorts, useModelFavorites, useModelRecordsSelector };
+export { type DiscoveryKind, type DiscoveryMode, type DiscoveryPort, DiscoveryResultView, type DiscoveryResultViewProps, type DiscoverySearchHit, type DiscoverySearchPage, type DiscoverySearchQuery, type DiscoverySort, type LocalModelEntry, type LocalModelsPort, type ModelAccessPort, type ModelCatalogLinkComponent, ModelCatalogProvider, type ModelCatalogProviderProps, type ModelCatalogUiPorts, ModelDiscovery, type ModelDiscoveryProps, ModelListDropdown, type ModelListDropdownProps, YOUR_KEY_LABEL, useLocalModels, useModelAccess, useModelCatalog, useModelCatalogStore, useModelCatalogUiPorts, useModelFavorites, useModelRecordsSelector };

package/dist/models/react/index.d.ts

@@ -456,8 +456,25 @@ interface LocalModelsPort {
      */
     open?(id: string): void;
 }
+/**
+ * How the person may reach a cloud model in THIS place (a chat composer passes it to its own picker,
+ * like `localModels`). Both fields are optional; a host that supplies neither changes nothing.
+ */
+interface ModelAccessPort {
+    /**
+     * Set = every cloud model is listed disabled with this one-line reason (never hidden), e.g. a
+     * confidential chat in an organization that requires its own hardware: "Blocked by your organization".
+     */
+    cloudBlockedReason?: string | null;
+    /**
+     * True when the person's own API key serves this model: the picker and the chat's model chip say
+     * "Your key" and show no model points.
+     */
+    usesOwnKey?(modelId: string): boolean;
+}
 interface ModelCatalogUiPorts {
     localModels?: LocalModelsPort;
+    access?: ModelAccessPort;
     isSuperAdmin?: boolean;
     canUseTopTier?: boolean;
     hiddenModelIds?: readonly string[] | undefined;
@@ -470,7 +487,7 @@ interface ModelCatalogProviderProps extends ModelCatalogUiPorts {
     favorites: ModelFavorites;
     children: ReactNode;
 }
-declare function ModelCatalogProvider({ catalog, favorites, children, localModels, isSuperAdmin, canUseTopTier, hiddenModelIds, LinkComponent, settingsHref, renderErrorAction }: ModelCatalogProviderProps): react.JSX.Element;
+declare function ModelCatalogProvider({ catalog, favorites, children, localModels, access, isSuperAdmin, canUseTopTier, hiddenModelIds, LinkComponent, settingsHref, renderErrorAction }: ModelCatalogProviderProps): react.JSX.Element;
 declare const useModelCatalogStore: () => ModelCatalog;
 declare const useModelCatalogUiPorts: () => ModelCatalogUiPorts;
 /**
@@ -498,6 +515,10 @@ declare function useLocalModels(override?: LocalModelsPort): {
     groupLabel: string;
     open: ((id: string) => void) | undefined;
 };
+/** The cloud-access rules for this picker; a port passed straight to the picker beats the provider's. */
+declare function useModelAccess(override?: ModelAccessPort): ModelAccessPort;
+/** The label a model reached through the person's own key carries, in the picker and on the chat's chip. */
+declare const YOUR_KEY_LABEL = "Your key";
 
 /**
  * A model offered in several CLASSES (Matrx Fast, Matrx Lightning, ...) is
@@ -542,6 +563,12 @@ interface ModelListDropdownBaseProps {
      * supplies one.
      */
     localModels?: LocalModelsPort;
+    /**
+     * Cloud-access rules for THIS picker (a chat composer passes its host's): a blocked reason that
+     * lists every cloud model disabled with why, and which models run on the person's own key.
+     * Beats the provider's port.
+     */
+    access?: ModelAccessPort;
     onValueChange: (modelId: string) => void;
     /** REQUIRED — input modalities the model must accept (seeds the filter). */
     inputModalities: Modality[];
@@ -600,7 +627,7 @@ interface ModelListDropdownBaseProps {
     "aria-label"?: string;
     "aria-labelledby"?: string;
 }
-declare function ModelListDropdown({ value: savedValue, localModels: localModelsProp, onValueChange, inputModalities, outputModalities, selectionPurpose, allowedModelIds, catalogVariant, emptyOptionLabel, onClear, placeholder, priorityModelIds, pinnedOfferingId, onOfferingPinChange, modelOnly, className, triggerVariant, presentation, id, disabled, disabledTitle, "aria-label": ariaLabel, "aria-labelledby": ariaLabelledBy, }: ModelListDropdownProps): react.JSX.Element;
+declare function ModelListDropdown({ value: savedValue, localModels: localModelsProp, access: accessProp, onValueChange, inputModalities, outputModalities, selectionPurpose, allowedModelIds, catalogVariant, emptyOptionLabel, onClear, placeholder, priorityModelIds, pinnedOfferingId, onOfferingPinChange, modelOnly, className, triggerVariant, presentation, id, disabled, disabledTitle, "aria-label": ariaLabel, "aria-labelledby": ariaLabelledBy, }: ModelListDropdownProps): react.JSX.Element;
 
 /** Subscribe to a slice of a model catalog's records. `select` must return a stable value for unchanged state. */
 declare function useModelRecordsSelector<T>(records: ModelRecords, select: (state: ModelRecordsState) => T): T;
@@ -962,4 +989,4 @@ interface DiscoveryResultViewProps {
 /** A resolved model: its header, the source's reason when the originals will not run, and every version judged. */
 declare function DiscoveryResultView({ result, device, runtimes, want, chooseLabel, mode, onChoose, renderVariantActions, renderActions }: DiscoveryResultViewProps): react.JSX.Element;
 
-export { type DiscoveryKind, type DiscoveryMode, type DiscoveryPort, DiscoveryResultView, type DiscoveryResultViewProps, type DiscoverySearchHit, type DiscoverySearchPage, type DiscoverySearchQuery, type DiscoverySort, type LocalModelEntry, type LocalModelsPort, type ModelCatalogLinkComponent, ModelCatalogProvider, type ModelCatalogProviderProps, type ModelCatalogUiPorts, ModelDiscovery, type ModelDiscoveryProps, ModelListDropdown, type ModelListDropdownProps, useLocalModels, useModelCatalog, useModelCatalogStore, useModelCatalogUiPorts, useModelFavorites, useModelRecordsSelector };
+export { type DiscoveryKind, type DiscoveryMode, type DiscoveryPort, DiscoveryResultView, type DiscoveryResultViewProps, type DiscoverySearchHit, type DiscoverySearchPage, type DiscoverySearchQuery, type DiscoverySort, type LocalModelEntry, type LocalModelsPort, type ModelAccessPort, type ModelCatalogLinkComponent, ModelCatalogProvider, type ModelCatalogProviderProps, type ModelCatalogUiPorts, ModelDiscovery, type ModelDiscoveryProps, ModelListDropdown, type ModelListDropdownProps, YOUR_KEY_LABEL, useLocalModels, useModelAccess, useModelCatalog, useModelCatalogStore, useModelCatalogUiPorts, useModelFavorites, useModelRecordsSelector };

package/dist/models/react/index.js

@@ -5,7 +5,7 @@ import { createContext, useContext, useEffect, useMemo, useSyncExternalStore } f
 import { jsx } from "react/jsx-runtime";
 var ModelCatalogContext = createContext(null);
 var DefaultLink = ({ children, ...props }) => /* @__PURE__ */ jsx("a", { ...props, children });
-function ModelCatalogProvider({ catalog, favorites, children, localModels, isSuperAdmin, canUseTopTier, hiddenModelIds, LinkComponent, settingsHref, renderErrorAction }) {
+function ModelCatalogProvider({ catalog, favorites, children, localModels, access, isSuperAdmin, canUseTopTier, hiddenModelIds, LinkComponent, settingsHref, renderErrorAction }) {
   const value = useMemo(
     () => ({
       catalog,
@@ -17,10 +17,11 @@ function ModelCatalogProvider({ catalog, favorites, children, localModels, isSup
         LinkComponent: LinkComponent ?? DefaultLink,
         settingsHref: settingsHref ?? null,
         ...localModels ? { localModels } : {},
+        ...access ? { access } : {},
         ...renderErrorAction ? { renderErrorAction } : {}
       }
     }),
-    [catalog, favorites, isSuperAdmin, canUseTopTier, hiddenModelIds, LinkComponent, settingsHref, renderErrorAction, localModels]
+    [catalog, favorites, isSuperAdmin, canUseTopTier, hiddenModelIds, LinkComponent, settingsHref, renderErrorAction, localModels, access]
   );
   return /* @__PURE__ */ jsx(ModelCatalogContext.Provider, { value, children });
 }
@@ -72,6 +73,12 @@ function useLocalModels(override) {
   );
   return { models, groupLabel: port?.groupLabel ?? "On this computer", open: port?.open ? (id) => port.open?.(id) : void 0 };
 }
+var NO_ACCESS = {};
+function useModelAccess(override) {
+  const contextPort = useBinding("useModelAccess").ports.access;
+  return override ?? contextPort ?? NO_ACCESS;
+}
+var YOUR_KEY_LABEL = "Your key";
 
 // models/react/ModelListDropdown.tsx
 import { formatCount } from "@ai-matrx/kit/format";
@@ -734,7 +741,8 @@ function ModelDetailCard({
   isCurrentModel,
   pinnedOfferingId,
   onPinOffering,
-  includeAdminSection
+  includeAdminSection,
+  yourKey = false
 }) {
   const pinnedHere = (t) => !!isCurrentModel && !!pinnedOfferingId && t.offeringId === pinnedOfferingId;
   const anyPinnedHere = model.tiers.some(pinnedHere);
@@ -799,7 +807,10 @@ function ModelDetailCard({
           )) })
         ] }),
         /* @__PURE__ */ jsxs2("div", { className: "grid grid-cols-2 gap-2", children: [
-          /* @__PURE__ */ jsxs2("div", { className: "col-span-2", children: [
+          yourKey ? /* @__PURE__ */ jsxs2("div", { className: "col-span-2", children: [
+            /* @__PURE__ */ jsx3("dt", { className: "text-[10px] uppercase tracking-wide text-muted-foreground", children: "Points" }),
+            /* @__PURE__ */ jsx3("dd", { "data-your-key": true, className: "text-sm font-semibold text-foreground", title: "Runs on your own API key", children: YOUR_KEY_LABEL })
+          ] }) : /* @__PURE__ */ jsxs2("div", { className: "col-span-2", children: [
             /* @__PURE__ */ jsx3("dt", { className: "text-[10px] uppercase tracking-wide text-muted-foreground", children: "Points / 1M tokens" }),
             /* @__PURE__ */ jsx3(
               "dd",
@@ -1250,14 +1261,16 @@ function ModelRow({
   selected,
   isFavorite,
   locked = false,
+  blockedReason = null,
+  yourKey = false,
   onSelect,
   onHover,
   onToggleFavorite
 }) {
   const unavailable = variant === "admin" && !(model.admin?.offerings ?? []).some((o) => o.isAvailable);
   const retired = model.retiredAt != null;
-  const retiredTitle = retired ? `Retired ${model.retiredAt?.slice(0, 10)} \u2014 the provider no longer serves this model, so it cannot be selected.` : locked ? TOP_TIER_LOCKED_TITLE : void 0;
-  const blocked = retired || locked;
+  const retiredTitle = retired ? `Retired ${model.retiredAt?.slice(0, 10)} \u2014 the provider no longer serves this model, so it cannot be selected.` : blockedReason ? blockedReason : locked ? TOP_TIER_LOCKED_TITLE : void 0;
+  const blocked = retired || locked || blockedReason != null;
   return /* @__PURE__ */ jsxs2(
     "div",
     {
@@ -1305,55 +1318,67 @@ function ModelRow({
             children: /* @__PURE__ */ jsx3(MakerBrandGlyph, { maker: model.maker, colored: true, className: "h-3.5 w-3.5" })
           }
         ),
-        /* @__PURE__ */ jsxs2("span", { className: "flex min-w-0 items-center gap-1.5", children: [
-          /* @__PURE__ */ jsx3(DelayedHint, { label: model.name, children: /* @__PURE__ */ jsx3("span", { className: "truncate text-xs font-medium text-foreground", children: model.name }) }),
-          isDecisionModelCapability(model) && /* @__PURE__ */ jsx3(
-            "span",
-            {
-              className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
-              title: "Decision model \u2014 it answers a Questions part with probabilities and generates no text.",
-              children: "decision"
-            }
-          ),
-          model.isDeprecated && !retired && /* @__PURE__ */ jsx3(
-            "span",
-            {
-              className: "shrink-0 rounded bg-destructive/15 px-1 text-[9px] text-destructive-ink",
-              title: "Deprecated \u2014 still runs; hidden from default selection",
-              children: "dep"
-            }
-          ),
-          retired && /* @__PURE__ */ jsx3(
-            "span",
-            {
-              className: "shrink-0 rounded bg-destructive/15 px-1 text-[9px] text-destructive-ink",
-              title: retiredTitle,
-              children: "retired"
-            }
-          ),
-          unavailable && /* @__PURE__ */ jsx3(
-            "span",
-            {
-              className: "shrink-0 rounded bg-destructive/15 px-1 text-[9px] text-destructive-ink",
-              title: "No available offerings \u2014 not callable",
-              children: "off"
-            }
-          ),
-          classTier ? /* @__PURE__ */ jsx3(
-            "span",
-            {
-              className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
-              title: `Runs on ${classTier.servedVia}`,
-              children: classTier.servedVia
-            }
-          ) : model.tiers.length > 1 && /* @__PURE__ */ jsx3(
-            "span",
-            {
-              className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
-              title: model.tiers.map((t) => t.servedVia).join(" \xB7 "),
-              children: serviceCountLabel(model.tiers.length)
-            }
-          )
+        /* @__PURE__ */ jsxs2("span", { className: "flex min-w-0 flex-col", children: [
+          /* @__PURE__ */ jsxs2("span", { className: "flex min-w-0 items-center gap-1.5", children: [
+            /* @__PURE__ */ jsx3(DelayedHint, { label: model.name, children: /* @__PURE__ */ jsx3("span", { className: "truncate text-xs font-medium text-foreground", children: model.name }) }),
+            yourKey && /* @__PURE__ */ jsx3(
+              "span",
+              {
+                "data-your-key": true,
+                className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
+                title: "Runs on your own API key",
+                children: YOUR_KEY_LABEL
+              }
+            ),
+            isDecisionModelCapability(model) && /* @__PURE__ */ jsx3(
+              "span",
+              {
+                className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
+                title: "Decision model \u2014 it answers a Questions part with probabilities and generates no text.",
+                children: "decision"
+              }
+            ),
+            model.isDeprecated && !retired && /* @__PURE__ */ jsx3(
+              "span",
+              {
+                className: "shrink-0 rounded bg-destructive/15 px-1 text-[9px] text-destructive-ink",
+                title: "Deprecated \u2014 still runs; hidden from default selection",
+                children: "dep"
+              }
+            ),
+            retired && /* @__PURE__ */ jsx3(
+              "span",
+              {
+                className: "shrink-0 rounded bg-destructive/15 px-1 text-[9px] text-destructive-ink",
+                title: retiredTitle,
+                children: "retired"
+              }
+            ),
+            unavailable && /* @__PURE__ */ jsx3(
+              "span",
+              {
+                className: "shrink-0 rounded bg-destructive/15 px-1 text-[9px] text-destructive-ink",
+                title: "No available offerings \u2014 not callable",
+                children: "off"
+              }
+            ),
+            classTier ? /* @__PURE__ */ jsx3(
+              "span",
+              {
+                className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
+                title: `Runs on ${classTier.servedVia}`,
+                children: classTier.servedVia
+              }
+            ) : model.tiers.length > 1 && /* @__PURE__ */ jsx3(
+              "span",
+              {
+                className: "shrink-0 rounded border border-primary/40 bg-primary/10 px-1 text-[9px] font-medium text-foreground/80",
+                title: model.tiers.map((t) => t.servedVia).join(" \xB7 "),
+                children: serviceCountLabel(model.tiers.length)
+              }
+            )
+          ] }),
+          blockedReason && /* @__PURE__ */ jsx3("span", { "data-cloud-blocked-reason": true, className: "truncate text-[11px] text-muted-foreground", children: blockedReason })
         ] }),
         /* @__PURE__ */ jsx3(SpeedCell, { value: model.speedRating }),
         /* @__PURE__ */ jsx3(
@@ -1428,6 +1453,7 @@ var GROUP_HEADING = "px-2 pb-0.5 pt-1.5 text-[10px] uppercase tracking-wide text
 function ModelListDropdown({
   value: savedValue,
   localModels: localModelsProp,
+  access: accessProp,
   onValueChange,
   inputModalities,
   outputModalities,
@@ -1458,6 +1484,9 @@ function ModelListDropdown({
   const { favoriteSet, toggleFavorite } = useModelFavorites(open);
   const ports = useModelCatalogUiPorts();
   const canUseTopTier = ports.canUseTopTier ?? false;
+  const access = useModelAccess(accessProp);
+  const cloudBlockedReason = access.cloudBlockedReason ?? null;
+  const usesOwnKey = (modelId) => !!modelId && access.usesOwnKey?.(modelId) === true;
   const isSuperAdmin = ports.isSuperAdmin ?? false;
   const LinkComponent = ports.LinkComponent;
   const hiddenModelIds = ports.hiddenModelIds;
@@ -1711,6 +1740,10 @@ function ModelListDropdown({
   };
   const refuseIfRetired = (id2) => {
     const target = models.find((m) => m.id === id2);
+    if (target && cloudBlockedReason) {
+      console.warn(`[ModelListDropdown] Refused to select ${target.name} (${id2}): ${cloudBlockedReason}.`);
+      return true;
+    }
     if (target && !canUseTopTier && isTopTierRating(target.costRating)) {
       console.warn(`[ModelListDropdown] Refused to select ${target.name} (${id2}): ${TOP_TIER_LOCKED_TITLE}.`);
       return true;
@@ -1789,6 +1822,10 @@ function ModelListDropdown({
             selectedClassLabel && /* @__PURE__ */ jsxs2("span", { className: "text-muted-foreground", children: [
               " \xB7 ",
               selectedClassLabel
+            ] }),
+            usesOwnKey(value) && /* @__PURE__ */ jsxs2("span", { "data-your-key": true, className: "text-muted-foreground", children: [
+              " \xB7 ",
+              YOUR_KEY_LABEL
             ] })
           ] })
         ] }) : /* @__PURE__ */ jsx3("span", { className: "min-w-0 whitespace-normal text-left leading-tight text-muted-foreground", children: isLoading ? "Loading models\u2026" : emptyOptionLabel && !value ? emptyOptionLabel : placeholder }) }) : /* @__PURE__ */ jsx3("span", { className: "flex min-w-0 flex-1 items-center gap-1.5", children: shown ? /* @__PURE__ */ jsxs2(Fragment2, { children: [
@@ -1805,6 +1842,10 @@ function ModelListDropdown({
             selectedClassLabel && /* @__PURE__ */ jsxs2("span", { className: "text-muted-foreground", children: [
               " \xB7 ",
               selectedClassLabel
+            ] }),
+            usesOwnKey(value) && /* @__PURE__ */ jsxs2("span", { "data-your-key": true, className: "text-muted-foreground", children: [
+              " \xB7 ",
+              YOUR_KEY_LABEL
             ] })
           ] })
         ] }) : /* @__PURE__ */ jsx3("span", { className: "min-w-0 truncate text-muted-foreground", children: isLoading ? "Loading models\u2026" : emptyOptionLabel && !value ? emptyOptionLabel : placeholder }) }),
@@ -1924,6 +1965,8 @@ function ModelListDropdown({
           selected: m.id === value && (classTier == null || classTier.offeringId === selectedClass?.offeringId),
           isFavorite: favoriteSet.has(m.id),
           locked: !canUseTopTier && isTopTierRating(m.costRating),
+          blockedReason: cloudBlockedReason,
+          yourKey: usesOwnKey(m.id),
           onToggleFavorite: () => toggleFavorite(m.id),
           onSelect: () => isMobile ? (setMobileDetail(m), setMobileDetailClass(classTier)) : handleSelectClass(m, classTier),
           onHover: isMobile ? void 0 : () => {
@@ -1991,6 +2034,7 @@ function ModelListDropdown({
       ModelDetailCard,
       {
         model: mobileDetail,
+        yourKey: usesOwnKey(mobileDetail.id),
         tier: costRatingTier(mobileDetail.costRating),
         variant,
         onSelect: () => handleSelect(mobileDetail.id, mobileDetailClass),
@@ -2089,6 +2133,7 @@ function ModelListDropdown({
                       ModelDetailCard,
                       {
                         model: hovered,
+                        yourKey: usesOwnKey(hovered.id),
                         tier: costRatingTier(hovered.costRating),
                         variant,
                         onSelect: () => handleSelect(hovered.id, hoveredClass),
@@ -2683,7 +2728,9 @@ export {
   ModelCatalogProvider,
   ModelDiscovery,
   ModelListDropdown,
+  YOUR_KEY_LABEL,
   useLocalModels,
+  useModelAccess,
   useModelCatalog,
   useModelCatalogStore,
   useModelCatalogUiPorts,

package/dist/settings/index.d.cts

@@ -586,6 +586,22 @@ interface LocalModelsPort {
      */
     open?(id: string): void;
 }
+/**
+ * How the person may reach a cloud model in THIS place (a chat composer passes it to its own picker,
+ * like `localModels`). Both fields are optional; a host that supplies neither changes nothing.
+ */
+interface ModelAccessPort {
+    /**
+     * Set = every cloud model is listed disabled with this one-line reason (never hidden), e.g. a
+     * confidential chat in an organization that requires its own hardware: "Blocked by your organization".
+     */
+    cloudBlockedReason?: string | null;
+    /**
+     * True when the person's own API key serves this model: the picker and the chat's model chip say
+     * "Your key" and show no model points.
+     */
+    usesOwnKey?(modelId: string): boolean;
+}
 
 /**
  * THE SETTINGS WRITE TARGET — the one seam between THE model-settings panel
@@ -683,6 +699,8 @@ interface ModelRowTarget {
     };
     /** The person's local models (a chat host's port). */
     localModels?: LocalModelsPort | undefined;
+    /** The picker's cloud-access rules for this conversation (blocked cloud models, own-key labels). */
+    access?: ModelAccessPort | undefined;
     disabled?: boolean;
     /** Said on the read-only picker when `disabled`. */
     disabledTitle?: string;

package/dist/settings/index.d.ts

@@ -586,6 +586,22 @@ interface LocalModelsPort {
      */
     open?(id: string): void;
 }
+/**
+ * How the person may reach a cloud model in THIS place (a chat composer passes it to its own picker,
+ * like `localModels`). Both fields are optional; a host that supplies neither changes nothing.
+ */
+interface ModelAccessPort {
+    /**
+     * Set = every cloud model is listed disabled with this one-line reason (never hidden), e.g. a
+     * confidential chat in an organization that requires its own hardware: "Blocked by your organization".
+     */
+    cloudBlockedReason?: string | null;
+    /**
+     * True when the person's own API key serves this model: the picker and the chat's model chip say
+     * "Your key" and show no model points.
+     */
+    usesOwnKey?(modelId: string): boolean;
+}
 
 /**
  * THE SETTINGS WRITE TARGET — the one seam between THE model-settings panel
@@ -683,6 +699,8 @@ interface ModelRowTarget {
     };
     /** The person's local models (a chat host's port). */
     localModels?: LocalModelsPort | undefined;
+    /** The picker's cloud-access rules for this conversation (blocked cloud models, own-key labels). */
+    access?: ModelAccessPort | undefined;
     disabled?: boolean;
     /** Said on the read-only picker when `disabled`. */
     disabledTitle?: string;

package/dist/settings/react/index.cjs

@@ -1054,6 +1054,7 @@ function ModelRow({ model, resetLabel, idPrefix, disabled }) {
             onOfferingPinChange: model.changePin,
             ...model.emptyChoice ? { emptyOptionLabel: model.emptyChoice.label, onClear: model.emptyChoice.choose, placeholder: model.emptyChoice.label } : {},
             ...model.localModels ? { localModels: model.localModels } : {},
+            ...model.access ? { access: model.access } : {},
             ...model.disabledTitle ? { disabledTitle: model.disabledTitle } : {}
           }
         ),

package/dist/settings/react/index.d.cts

@@ -1,7 +1,7 @@
 import { components } from '@ai-matrx/api/types';
 import * as React from 'react';
 import { ReactNode } from 'react';
-import { LocalModelsPort } from '@ai-matrx/agents/models/react';
+import { LocalModelsPort, ModelAccessPort } from '@ai-matrx/agents/models/react';
 
 /**
  * Agent Settings — Type Definitions
@@ -348,6 +348,8 @@ interface ModelRowTarget {
     };
     /** The person's local models (a chat host's port). */
     localModels?: LocalModelsPort | undefined;
+    /** The picker's cloud-access rules for this conversation (blocked cloud models, own-key labels). */
+    access?: ModelAccessPort | undefined;
     disabled?: boolean;
     /** Said on the read-only picker when `disabled`. */
     disabledTitle?: string;

package/dist/settings/react/index.d.ts

@@ -1,7 +1,7 @@
 import { components } from '@ai-matrx/api/types';
 import * as React from 'react';
 import { ReactNode } from 'react';
-import { LocalModelsPort } from '@ai-matrx/agents/models/react';
+import { LocalModelsPort, ModelAccessPort } from '@ai-matrx/agents/models/react';
 
 /**
  * Agent Settings — Type Definitions
@@ -348,6 +348,8 @@ interface ModelRowTarget {
     };
     /** The person's local models (a chat host's port). */
     localModels?: LocalModelsPort | undefined;
+    /** The picker's cloud-access rules for this conversation (blocked cloud models, own-key labels). */
+    access?: ModelAccessPort | undefined;
     disabled?: boolean;
     /** Said on the read-only picker when `disabled`. */
     disabledTitle?: string;

package/dist/settings/react/index.js

@@ -1051,6 +1051,7 @@ function ModelRow({ model, resetLabel, idPrefix, disabled }) {
             onOfferingPinChange: model.changePin,
             ...model.emptyChoice ? { emptyOptionLabel: model.emptyChoice.label, onClear: model.emptyChoice.choose, placeholder: model.emptyChoice.label } : {},
             ...model.localModels ? { localModels: model.localModels } : {},
+            ...model.access ? { access: model.access } : {},
             ...model.disabledTitle ? { disabledTitle: model.disabledTitle } : {}
           }
         ),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-matrx/agents",
-  "version": "0.59.226",
+  "version": "0.59.228",
   "description": "Portable AI Matrx agent stream protocol, event projection, and safe result-presentation primitives.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -509,8 +509,8 @@
   "sideEffects": false,
   "dependencies": {
     "@ai-matrx/alchemy": "latest",
-    "@ai-matrx/api": "latest",
     "@ai-matrx/associations": "latest",
+    "@ai-matrx/api": "latest",
     "@ai-matrx/data": "latest",
     "@ai-matrx/design-system": "latest",
     "@ai-matrx/content-ir": "latest",
@@ -561,5 +561,5 @@
     "verify:tarball": "node ./scripts/verify-tarball.mjs",
     "typegen:self-test": "node scripts/typegen/drop-guard.self-test.mjs && node scripts/typegen/check-api-types-fresh.mjs --self-test"
   },
-  "gitHead": "9ef2018cc7c37ccd3760a47917c97f025c0327ce"
+  "gitHead": "b18bc55fbafb8d6529da4a296f7221c0bc6458d2"
 }