@cat-factory/app 0.190.1 → 0.191.0

package/app/components/layout/InfraSetupBanner.vue

@@ -22,17 +22,36 @@
 // account that also has no storage — an accepted trade-off (the setting stays reachable from
 // account settings, and the SESSION dismissal re-nags on the next load regardless).
 //
-// Freshness note: `infraSetup` is a server projection recomputed only on snapshot (re)load, so a
-// banner clears on the next board load after the operator configures the area via the deep-link,
-// not the instant the config panel saves.
+// Two KINDS of card share this surface, and the difference drives the dismissal fork:
+//   - a setup gap (`not_defined`) is a stable operator decision, so both dismissals are offered;
+//   - an OUTAGE (`unreachable` — configured, but the reachability watcher's live probe can't reach
+//     it) is a health state, so ONLY the session dismissal is offered. A permanent "don't notify me
+//     again" on a transient failure would let one click silence every future outage, and the outage
+//     that matters is always the next one. `isInfraSetupHealthStatus` (contracts) is the single
+//     definition both this component and the store's re-nag logic key off.
+//
+// BOTH dismissals are keyed by the CLAIM, never by the area alone, because the two cards say
+// different things about the same area: silencing "you haven't configured this" must not also
+// silence the outage card raised after the operator configures it and the provider then dies.
+//
+// Freshness note: a setup gap clears on the next board load after the operator configures the area
+// via the deep-link, not the instant the config panel saves — the projection is recomputed on
+// snapshot (re)load. An OUTAGE is different: it arrives and clears live, pushed as an `infraSetup`
+// event by the watcher and applied by `workspace.patchInfraSetup`.
 import { useLocalStorage } from '@vueuse/core'
 import { computed } from 'vue'
 // The localStorage key holding the permanent per-user dismissals lives in `@cat-factory/contracts`
 // (a dependency-free package the SPA and the e2e suite both import), so the key + shape can't drift
 // between this component and the e2e seed in `backend/internal/e2e/tests/helpers.ts` (`pinWorkspace`).
-import { INFRA_SETUP_DISMISSED_STORAGE_KEY } from '@cat-factory/contracts'
+import {
+  INFRA_SETUP_DISMISSED_STORAGE_KEY,
+  type InfraSetupProbedArea,
+  isInfraSetupHealthStatus,
+  isInfraSetupProbedArea,
+} from '@cat-factory/contracts'
 import type { DropdownMenuItem } from '@nuxt/ui'
-import type { InfraSetupArea } from '~/types/domain'
+import type { InfraSetupArea, InfraSetupStatus } from '~/types/domain'
+import { infraSetupDismissalKey, type InfraSetupCardKind } from '~/utils/infraSetup'
 
 const { t } = useI18n()
 const ui = useUiStore()
@@ -75,6 +94,18 @@ const AREA_META: Record<
   },
 }
 
+// Outage titles are keyed over the PROBED areas only, not over every area: `binaryStorage` has no
+// reachability probe, so an entry for it would be copy that ships in every locale and can never
+// render. Each probed area carries its OWN title rather than interpolating the area name into a
+// shared one — a predicate adjective ("is unreachable") agrees with its subject's gender in most of
+// the locales we ship, so `{area} is unreachable` cannot be translated correctly as one string. The
+// outage BODY and action ARE shared, because neither refers back to the area; each locale's body
+// opens with its own fixed subject noun for exactly that reason.
+const UNREACHABLE_TITLE_KEYS: Record<InfraSetupProbedArea, string> = {
+  agentExecutor: 'layout.infraSetupBanner.agentExecutor.unreachableTitle',
+  ephemeralEnvironments: 'layout.infraSetupBanner.ephemeralEnvironments.unreachableTitle',
+}
+
 // Permanent, per-user dismissals: one shared localStorage record keyed BY user id (so it's
 // scoped to the signed-in user and doesn't leak across accounts on a shared browser). No
 // signed-in user (local/auth-off single-user mode) ⇒ the `local` bucket.
@@ -94,30 +125,64 @@ function dismissPermanently(area: InfraSetupArea) {
   }
 }
 
-const visible = computed<InfraSetupArea[]>(() => {
+/** One rendered card: the area plus which CLAIM it is making about it. */
+interface AreaCard {
+  area: InfraSetupArea
+  /** `outage` for a live-health status — drives the copy, the severity styling and the dismissals. */
+  kind: InfraSetupCardKind
+  /** The failing probe's reason, when this session saw the transition that raised the card. */
+  detail?: string
+}
+
+const visible = computed<AreaCard[]>(() => {
   const status = workspace.infraSetup
   if (!status) return []
-  return AREAS.filter(
-    (area) =>
-      status[area] === 'not_defined' &&
-      !ui.infraSetupSessionDismissed.includes(area) &&
-      !dismissedForUser.value.includes(area),
-  )
+  return AREAS.filter((area) => {
+    const kind = cardKind(status[area])
+    if (!kind) return false
+    // Both dismissals are keyed by the CLAIM, not by the area: silencing "you haven't configured
+    // this" must not also silence "you configured it and it is now down". The permanent dismissal
+    // only ever covers a setup gap (`dismissPermanently` is offered nowhere else).
+    if (ui.infraSetupSessionDismissed.includes(infraSetupDismissalKey(area, kind))) return false
+    return !(kind === 'setup' && dismissedForUser.value.includes(area))
+  }).map((area) => ({
+    area,
+    kind: cardKind(status[area])!,
+    ...(workspace.infraSetupDetails[area] ? { detail: workspace.infraSetupDetails[area] } : {}),
+  }))
 })
 
-// The dismiss dropdown: the product wants the user asked WHICH kind of dismissal on close.
-function dismissMenu(area: InfraSetupArea): DropdownMenuItem[][] {
+/** Which card an area's status raises, or null when it raises none (`configured`/`not_applicable`). */
+function cardKind(status: InfraSetupStatus): InfraSetupCardKind | null {
+  if (isInfraSetupHealthStatus(status)) return 'outage'
+  return status === 'not_defined' ? 'setup' : null
+}
+
+/** The card's title key: the per-area outage title for an outage, else the setup-gap title. */
+function titleKey(card: AreaCard): string {
+  return card.kind === 'outage' && isInfraSetupProbedArea(card.area)
+    ? UNREACHABLE_TITLE_KEYS[card.area]
+    : AREA_META[card.area].titleKey
+}
+
+/**
+ * The dismiss dropdown: the product wants the user asked WHICH kind of dismissal on close. An
+ * outage offers the session option ONLY — see the fork note at the top of this file.
+ */
+function dismissMenu(card: AreaCard): DropdownMenuItem[][] {
+  const session = {
+    label: t('layout.infraSetupBanner.dismiss.session'),
+    icon: 'i-lucide-clock',
+    onSelect: () => ui.dismissInfraSetupForSession(card.area, card.kind),
+  }
+  if (card.kind === 'outage') return [[session]]
   return [
     [
-      {
-        label: t('layout.infraSetupBanner.dismiss.session'),
-        icon: 'i-lucide-clock',
-        onSelect: () => ui.dismissInfraSetupForSession(area),
-      },
+      session,
       {
         label: t('layout.infraSetupBanner.dismiss.permanent'),
         icon: 'i-lucide-bell-off',
-        onSelect: () => dismissPermanently(area),
+        onSelect: () => dismissPermanently(card.area),
       },
     ],
   ]
@@ -135,42 +200,81 @@ function dismissMenu(area: InfraSetupArea): DropdownMenuItem[][] {
       role="status"
       aria-live="polite"
     >
+      <!-- An OUTAGE reads red, a setup gap amber: one is something breaking now, the other is
+           something never switched on, and a reader has to be able to tell at a glance. -->
       <div
-        v-for="area in visible"
-        :key="area"
-        class="pointer-events-auto w-full max-w-3xl rounded-2xl border-2 border-amber-500/70 bg-amber-950/95 p-5 shadow-2xl backdrop-blur"
-        :data-testid="`infra-setup-banner-${area}`"
+        v-for="card in visible"
+        :key="card.area"
+        class="pointer-events-auto w-full max-w-3xl rounded-2xl border-2 p-5 shadow-2xl backdrop-blur"
+        :class="
+          card.kind === 'outage'
+            ? 'border-red-500/70 bg-red-950/95'
+            : 'border-amber-500/70 bg-amber-950/95'
+        "
+        :data-testid="`infra-setup-banner-${card.area}`"
+        :data-infra-status="card.kind === 'outage' ? 'unreachable' : 'not_defined'"
       >
         <div class="flex items-start gap-4">
-          <UIcon :name="AREA_META[area].icon" class="mt-0.5 h-9 w-9 shrink-0 text-amber-400" />
+          <UIcon
+            :name="card.kind === 'outage' ? 'i-lucide-plug-zap' : AREA_META[card.area].icon"
+            class="mt-0.5 h-9 w-9 shrink-0"
+            :class="card.kind === 'outage' ? 'text-red-400' : 'text-amber-400'"
+          />
           <div class="min-w-0 flex-1">
             <div class="flex items-start justify-between gap-3">
-              <h2 class="text-lg font-semibold text-amber-100">
-                {{ t(AREA_META[area].titleKey) }}
+              <h2
+                class="text-lg font-semibold"
+                :class="card.kind === 'outage' ? 'text-red-100' : 'text-amber-100'"
+              >
+                {{ t(titleKey(card)) }}
               </h2>
-              <UDropdownMenu :items="dismissMenu(area)" :content="{ align: 'end' }">
+              <UDropdownMenu :items="dismissMenu(card)" :content="{ align: 'end' }">
                 <UButton
                   color="neutral"
                   variant="ghost"
                   size="xs"
                   icon="i-lucide-x"
                   :aria-label="t('common.close')"
-                  :data-testid="`infra-setup-dismiss-${area}`"
+                  :data-testid="`infra-setup-dismiss-${card.area}`"
                 />
               </UDropdownMenu>
             </div>
-            <p class="mt-1 text-sm text-amber-200/90">
-              {{ t(AREA_META[area].bodyKey) }}
+            <p
+              class="mt-1 text-sm"
+              :class="card.kind === 'outage' ? 'text-red-200/90' : 'text-amber-200/90'"
+            >
+              {{
+                card.kind === 'outage'
+                  ? t('layout.infraSetupBanner.unreachable.body')
+                  : t(AREA_META[card.area].bodyKey)
+              }}
+            </p>
+            <!-- The failing probe's OWN reason, when this session saw the transition that raised the
+                 card: a refused connection, a rejected token and a timeout need different fixes, and
+                 the generic body cannot tell them apart. Absent after a reload (it rides the live
+                 event, never the deduped notification), so it is an addition to the copy above and
+                 never the only thing that explains the card. -->
+            <p
+              v-if="card.detail"
+              class="mt-2 truncate font-mono text-xs text-red-300/80"
+              :title="card.detail"
+              :data-testid="`infra-setup-detail-${card.area}`"
+            >
+              {{ t('layout.infraSetupBanner.unreachable.reason', { detail: card.detail }) }}
             </p>
             <div class="mt-4">
               <UButton
-                color="warning"
+                :color="card.kind === 'outage' ? 'error' : 'warning'"
                 variant="solid"
                 icon="i-lucide-settings"
-                :data-testid="`infra-setup-configure-${area}`"
-                @click="AREA_META[area].onConfigure()"
+                :data-testid="`infra-setup-configure-${card.area}`"
+                @click="AREA_META[card.area].onConfigure()"
               >
-                {{ t(AREA_META[area].actionKey) }}
+                {{
+                  card.kind === 'outage'
+                    ? t('layout.infraSetupBanner.unreachable.action')
+                    : t(AREA_META[card.area].actionKey)
+                }}
               </UButton>
             </div>
           </div>

package/app/components/layout/NotificationsInbox.vue

@@ -88,6 +88,10 @@ const META: Record<Notification['type'], { icon: string; color: Accent }> = {
   // sealed). Not block-scoped; "act" drops the listed stale ciphertexts so they can be re-entered
   // (or restore the previous key to recover them instead).
   key_drift: { icon: 'i-lucide-key-round', color: 'error' },
+  // A configured infrastructure connection stopped answering its live probe. Not block-scoped and
+  // nothing to act on from here — the fix is on the provider's side, and the card clears itself when
+  // the reachability watcher sees it answer again; "act" just marks it read.
+  infra_unreachable: { icon: 'i-lucide-plug-zap', color: 'error' },
 }
 
 // Per-type primary-action label. An exhaustive Record keyed off the notification
@@ -114,6 +118,7 @@ const ACTION_KEYS: Record<Notification['type'], string> = {
   platform_health: 'layout.notifications.action.platform_health',
   budget_paused: 'layout.notifications.action.budget_paused',
   key_drift: 'layout.notifications.action.key_drift',
+  infra_unreachable: 'layout.notifications.action.infra_unreachable',
 }
 
 /** The localized primary-action label for a notification (te()-guarded against a

package/app/components/slack/SlackPanel.vue

@@ -43,6 +43,7 @@ const ROUTABLE = computed<{ type: NotificationType; label: string }[]>(() => [
   { type: 'pr_review_ready', label: t('slack.routable.pr_review_ready') },
   { type: 'initiative', label: t('slack.routable.initiative') },
   { type: 'platform_health', label: t('slack.routable.platform_health') },
+  { type: 'infra_unreachable', label: t('slack.routable.infra_unreachable') },
 ])
 
 /** Notification-role options for a mapped member (drives who gets @-mentioned). */
@@ -75,6 +76,7 @@ const routes = reactive<Record<NotificationType, SlackRoute>>({
   budget_paused: { enabled: false, channel: '' },
   // In-app only (not in ROUTABLE), but the map is exhaustive over the type.
   key_drift: { enabled: false, channel: '' },
+  infra_unreachable: { enabled: false, channel: '' },
 })
 const mentionsEnabled = ref(false)
 // Editable member rows carry a client-only stable `uid` (see `slackMemberMapping`) so

package/app/composables/useWorkspaceStream.ts

@@ -111,6 +111,12 @@ export function useWorkspaceStream() {
       // inspector's "Test environment creation" control shows the live stage + final
       // outcome in place without a refetch. No board block.
       environmentTest.upsert(event.run)
+    } else if (event.type === 'infraSetup') {
+      // The reachability watcher found a configured infrastructure area dead (or answering again) —
+      // patch that one area so the setup banner appears/clears immediately. A full refresh would
+      // pay the whole snapshot aggregate for a one-field delta, and the projection the snapshot
+      // recomputes already folds the same recorded state.
+      workspace.patchInfraSetup(event.area, event.status, event.detail)
     } else if (event.type === 'notification') {
       // A PR needs a merge decision, a pipeline finished, or CI gave up — patch the
       // inbox + per-block badge in place (resolved ones drop out of the inbox).

package/app/stores/ui/modals.ts

@@ -2,6 +2,11 @@ import { ref } from 'vue'
 import type { DocumentSourceKind, InfraSetupArea, TaskSourceKind } from '~/types/domain'
 import type { InfrastructureTab, ProviderConnectionKind } from '~/types/providerConnections'
 import type { PendingContext } from '~/composables/useContextLinking'
+import {
+  infraSetupDismissalKey,
+  type InfraSetupCardKind,
+  type InfraSetupDismissalKey,
+} from '~/utils/infraSetup'
 import {
   DEFAULT_PROVISION_DEEP_LINK_PARAM,
   DEFAULT_PROVISION_DEEP_LINK_VALUE,
@@ -820,18 +825,35 @@ function createAiOnboardingModals() {
   const aiSetupDismissed = ref(false)
   const aiPresetDismissed = ref(false)
 
-  // Infra-setup banner: per-SESSION dismissals, one flag per area, cleared on workspace switch
-  // exactly like the AI-onboarding flags (a dismissal in one workspace must not suppress the
-  // independent prompt for another). The PERMANENT "don't notify me again" dismissal is per-USER
-  // and persists in localStorage from the banner component; this only covers "hide for now".
-  const infraSetupSessionDismissed = ref<InfraSetupArea[]>([])
-  function dismissInfraSetupForSession(area: InfraSetupArea) {
-    if (!infraSetupSessionDismissed.value.includes(area))
-      infraSetupSessionDismissed.value = [...infraSetupSessionDismissed.value, area]
+  // Infra-setup banner: per-SESSION dismissals, cleared on workspace switch exactly like the
+  // AI-onboarding flags (a dismissal in one workspace must not suppress the independent prompt for
+  // another). The PERMANENT "don't notify me again" dismissal is per-USER and persists in
+  // localStorage from the banner component; this only covers "hide for now".
+  //
+  // Keyed by area AND KIND, not by area alone: the two cards an area can raise are different
+  // claims. Dismissing "you haven't configured this" for the session must not also silence the
+  // OUTAGE card that appears after the operator configures it and the provider then dies — the same
+  // asymmetry that makes the permanent dismissal setup-gap-only, one tier down.
+  const infraSetupSessionDismissed = ref<InfraSetupDismissalKey[]>([])
+  function dismissInfraSetupForSession(area: InfraSetupArea, kind: InfraSetupCardKind) {
+    const key = infraSetupDismissalKey(area, kind)
+    if (!infraSetupSessionDismissed.value.includes(key))
+      infraSetupSessionDismissed.value = [...infraSetupSessionDismissed.value, key]
   }
   function resetInfraSetupDismissals() {
     infraSetupSessionDismissed.value = []
   }
+  /**
+   * Drop an area's OUTAGE session dismissal — called when that area RECOVERS, so a transient health
+   * state (`unreachable`) re-nags the next time it fails. Without it, "hide for now" on one outage
+   * would quietly cover every later outage for the rest of the session, which is precisely the
+   * semantics `isInfraSetupHealthStatus` exists to keep away from a health state. The area's
+   * setup-gap dismissal is left alone: recovery says nothing about that claim.
+   */
+  function clearInfraSetupSessionDismissal(area: InfraSetupArea) {
+    const key = infraSetupDismissalKey(area, 'outage')
+    infraSetupSessionDismissed.value = infraSetupSessionDismissed.value.filter((k) => k !== key)
+  }
 
   // Default-test-environment banner: a single per-SESSION dismissal, cleared on workspace switch
   // like the flags above. There is deliberately no PERMANENT dismissal here (unlike the
@@ -889,6 +911,7 @@ function createAiOnboardingModals() {
     infraSetupSessionDismissed,
     dismissInfraSetupForSession,
     resetInfraSetupDismissals,
+    clearInfraSetupSessionDismissal,
     defaultProvisionDismissed,
     dismissDefaultProvision,
     resetDefaultProvisionDismissal,

package/app/stores/workspace/infraSetup.ts

@@ -0,0 +1,77 @@
+import { ref } from 'vue'
+import { applyInfraSetupTransition, isInfraSetupHealthStatus } from '@cat-factory/contracts'
+import type { InfraSetup, InfraSetupArea, InfraSetupStatus } from '~/types/domain'
+
+// The workspace store's infra-setup slice: the per-area setup/health projection the setup banner
+// renders, and the live `infraSetup` event patch the reachability watcher pushes into it. Its own
+// collaborator rather than more lines in the store body, because it is the one slice with RULES
+// (which prior state a probe verdict may overwrite, and what a recovery does to a dismissal) instead
+// of a plain assign-from-snapshot.
+
+/**
+ * Create the infra-setup slice. `hydrate` takes the authoritative projection off a snapshot;
+ * `patchInfraSetup` applies one live transition.
+ */
+export function createInfraSetupState() {
+  /**
+   * Per-area infrastructure-setup status (ephemeral environments / agent executor / binary
+   * storage) from the snapshot, driving the infra-setup banner. Null on an older backend that
+   * doesn't compute it (⇒ no banner).
+   */
+  const infraSetup = ref<InfraSetup | null>(null)
+  /**
+   * The failing probe's own operator-facing reason per area ("connect ECONNREFUSED …", "HTTP 401"),
+   * from the live `infraSetup` event only — a refused connection reads very differently from a
+   * rejected token, and it is the one thing on the banner that says WHY.
+   *
+   * Deliberately NOT on the snapshot: the reason varies between passes and the notification card is
+   * content-deduped, so persisting it there would re-toast the inbox for the whole outage. The
+   * consequence is that a reload mid-outage renders the banner with no reason line, which is honest
+   * (this session never saw the probe) and is why the reason is an ADDITION to the copy rather than
+   * a replacement for it.
+   */
+  const infraSetupDetails = ref<Partial<Record<InfraSetupArea, string>>>({})
+
+  function hydrate(next: InfraSetup | null | undefined) {
+    infraSetup.value = next ?? null
+    // The reasons belong to the live pushes this session observed, so an authoritative snapshot
+    // supersedes them: keeping one would caption a freshly-read status with a stale probe.
+    infraSetupDetails.value = {}
+  }
+
+  /**
+   * Patch ONE infra area's status from a live `infraSetup` event, so the setup banner appears (or
+   * clears) the moment the reachability watcher notices rather than on the next snapshot load.
+   *
+   * A targeted upsert, deliberately not a `refresh()`: this is a one-field delta on a projection
+   * the snapshot recomputes wholesale, and a coalesced full refresh here would pay the ~18-read
+   * aggregate for it. A no-op before the first snapshot has landed — `hydrate` is about to set the
+   * authoritative projection, which already carries the recorded outage.
+   *
+   * The write goes through contracts' `applyInfraSetupTransition`, the SAME rule the backend's
+   * snapshot fold uses, so live and reloaded state cannot disagree: only a `configured` area may
+   * become `unreachable`. Assigning unconditionally (as this once did) rendered a red "check that
+   * the service is running" banner over a `not_applicable`/`not_defined` area, which then vanished
+   * on the next reload — a banner that contradicts the projection is worse than a late one.
+   *
+   * Recovering an area also drops its OUTAGE session dismissal, so a health state re-nags when it
+   * recurs (see `isInfraSetupHealthStatus`): without this, dismissing one outage would silence the
+   * next one for the rest of the session.
+   */
+  function patchInfraSetup(area: InfraSetupArea, status: InfraSetupStatus, detail?: string) {
+    const current = infraSetup.value
+    if (!current) return
+    const next = applyInfraSetupTransition(current, area, status)
+    // Refused by the shared rule (the projection out-ranks this probe), so nothing about the area
+    // changed and its reason must not be captioned onto a status it does not describe.
+    if (next === current) return
+    infraSetup.value = next
+    infraSetupDetails.value = { ...infraSetupDetails.value, [area]: detail }
+    // `useUiStore` is resolved through the auto-import at CALL time, as it was in the store body
+    // this moved out of: the ui store is only needed on a recovery, and reaching for it lazily keeps
+    // this slice constructible before pinia has that store (and stubbable in the store unit tests).
+    if (!isInfraSetupHealthStatus(status)) useUiStore().clearInfraSetupSessionDismissal(area)
+  }
+
+  return { infraSetup, infraSetupDetails, hydrate, patchInfraSetup }
+}

package/app/stores/workspace.spec.ts

@@ -236,3 +236,132 @@ describe('workspace store cold-open speculative snapshot', () => {
     expect(ws.access).toBeNull()
   })
 })
+
+// The reachability watcher pushes ONE area's transition as an `infraSetup` event, which the stream
+// applies through `patchInfraSetup`. Two properties matter and neither is visible from the backend:
+// the patch is TARGETED (a full refresh here would pay the whole snapshot aggregate for a one-field
+// delta), and recovering an area drops its SESSION dismissal so a health state re-nags when it
+// recurs — without which dismissing one outage would silence every later one for the session.
+describe('workspace store infraSetup patching', () => {
+  /** A ui-store stub recording which areas had their session dismissal cleared. */
+  function stubUiStore() {
+    const cleared: string[] = []
+    vi.stubGlobal('useUiStore', () => ({
+      clearInfraSetupSessionDismissal: (area: string) => cleared.push(area),
+    }))
+    return cleared
+  }
+
+  async function openBoard(infraSetup: Record<string, string>) {
+    const snap = {
+      ...snapshot('ws1', [block('f1')]),
+      infraSetup,
+    } as unknown as WorkspaceSnapshot
+    const getWorkspace = vi.fn().mockResolvedValue(snap)
+    vi.stubGlobal('useApi', () => ({ getWorkspace }))
+    const ws = useWorkspaceStore()
+    await ws.switchTo('ws1')
+    return { ws, getWorkspace }
+  }
+
+  it('patches one area without refetching the snapshot', async () => {
+    stubUiStore()
+    const { ws, getWorkspace } = await openBoard({
+      agentExecutor: 'configured',
+      ephemeralEnvironments: 'configured',
+      binaryStorage: 'not_defined',
+    })
+    ws.patchInfraSetup('agentExecutor', 'unreachable')
+    expect(ws.infraSetup).toEqual({
+      agentExecutor: 'unreachable',
+      ephemeralEnvironments: 'configured',
+      binaryStorage: 'not_defined',
+    })
+    // One fetch: the initial switchTo. The live patch triggered no snapshot refresh.
+    expect(getWorkspace).toHaveBeenCalledTimes(1)
+  })
+
+  it('clears the area session dismissal on RECOVERY so the next outage re-nags', async () => {
+    const cleared = stubUiStore()
+    const { ws } = await openBoard({
+      agentExecutor: 'unreachable',
+      ephemeralEnvironments: 'configured',
+      binaryStorage: 'configured',
+    })
+    ws.patchInfraSetup('agentExecutor', 'configured')
+    expect(ws.infraSetup?.agentExecutor).toBe('configured')
+    expect(cleared).toEqual(['agentExecutor'])
+  })
+
+  it('leaves the session dismissal alone while the area is still unreachable', async () => {
+    const cleared = stubUiStore()
+    const { ws } = await openBoard({
+      agentExecutor: 'configured',
+      ephemeralEnvironments: 'configured',
+      binaryStorage: 'configured',
+    })
+    ws.patchInfraSetup('agentExecutor', 'unreachable')
+    expect(cleared).toEqual([])
+  })
+
+  it('is a no-op before the first snapshot has landed', () => {
+    // An event can arrive before the projection exists; `hydrate` is about to set the authoritative
+    // one (which already folds the recorded outage), so inventing a partial projection here would
+    // render a banner from a single field with the other areas unknown.
+    stubUiStore()
+    const ws = useWorkspaceStore()
+    ws.patchInfraSetup('agentExecutor', 'unreachable')
+    expect(ws.infraSetup).toBeNull()
+  })
+
+  it('refuses to mark an area unreachable that the projection does not call configured', async () => {
+    // The live patch honours the SAME rule as the backend's snapshot fold
+    // (`applyInfraSetupTransition`). Assigning unconditionally rendered a red "check that the
+    // service is running" banner over a `not_applicable`/`not_defined` area — which then vanished on
+    // the next reload, because the projection out-ranks the probe. A banner that contradicts the
+    // projection is worse than a late one.
+    stubUiStore()
+    const { ws } = await openBoard({
+      agentExecutor: 'not_applicable',
+      ephemeralEnvironments: 'not_defined',
+      binaryStorage: 'configured',
+    })
+    ws.patchInfraSetup('agentExecutor', 'unreachable')
+    ws.patchInfraSetup('ephemeralEnvironments', 'unreachable')
+    expect(ws.infraSetup?.agentExecutor).toBe('not_applicable')
+    expect(ws.infraSetup?.ephemeralEnvironments).toBe('not_defined')
+    // A refused patch must not caption its reason onto a status it does not describe.
+    expect(ws.infraSetupDetails).toEqual({})
+  })
+
+  it('keeps the probe reason for the banner, and drops it on recovery', async () => {
+    // The reason is the one thing on the banner that says WHY (a refused connection reads very
+    // differently from a rejected token), and it rides the live event only — the notification card
+    // is content-deduped, so persisting it there would re-toast the inbox for the whole outage.
+    stubUiStore()
+    const { ws } = await openBoard({
+      agentExecutor: 'configured',
+      ephemeralEnvironments: 'configured',
+      binaryStorage: 'configured',
+    })
+    ws.patchInfraSetup('agentExecutor', 'unreachable', 'connect ECONNREFUSED 10.0.0.4:6443')
+    expect(ws.infraSetupDetails.agentExecutor).toBe('connect ECONNREFUSED 10.0.0.4:6443')
+    ws.patchInfraSetup('agentExecutor', 'configured')
+    expect(ws.infraSetupDetails.agentExecutor).toBeUndefined()
+  })
+
+  it('drops live probe reasons when an authoritative snapshot lands', async () => {
+    stubUiStore()
+    const { ws } = await openBoard({
+      agentExecutor: 'configured',
+      ephemeralEnvironments: 'configured',
+      binaryStorage: 'configured',
+    })
+    ws.patchInfraSetup('agentExecutor', 'unreachable', 'HTTP 502')
+    expect(ws.infraSetupDetails.agentExecutor).toBe('HTTP 502')
+    await ws.refresh()
+    // A reload mid-outage renders the banner with no reason line, which is honest: this session
+    // never saw the probe, and captioning a fresh status with a stale reason would not be.
+    expect(ws.infraSetupDetails).toEqual({})
+  })
+})

package/app/stores/workspace.ts

@@ -2,7 +2,6 @@ import { defineStore } from 'pinia'
 import { computed, ref } from 'vue'
 import type {
   BudgetCaps,
-  InfraSetup,
   SpendStatus,
   WorkspaceAccess,
   WorkspaceListItem,
@@ -11,6 +10,7 @@ import type {
 import { useAccountsStore } from '~/stores/accounts'
 import { useBoardStore } from '~/stores/board'
 import { applySnapshotToStores, resetPerBoardCaches } from '~/stores/workspace/hydrate'
+import { createInfraSetupState } from '~/stores/workspace/infraSetup'
 import { markBoot } from '~/utils/bootMarks'
 import { retryWhileBackendUnreachable } from '~/utils/backendReady'
 
@@ -50,12 +50,14 @@ export const useWorkspaceStore = defineStore(
     const userSpend = ref<SpendStatus | null>(null)
     /** Operator hard ceilings on the account/user budget tiers (null until first load). */
     const budgetCaps = ref<BudgetCaps | null>(null)
-    /**
-     * Per-area infrastructure-setup status (ephemeral environments / agent executor / binary
-     * storage) from the snapshot, driving the infra-setup banner. Null on an older backend that
-     * doesn't compute it (⇒ no banner).
-     */
-    const infraSetup = ref<InfraSetup | null>(null)
+    // The infra-setup slice (the banner's projection + the live reachability patch), extracted
+    // because it is the one slice with RULES rather than a plain assign-from-snapshot.
+    const {
+      infraSetup,
+      infraSetupDetails,
+      hydrate: hydrateInfraSetup,
+      patchInfraSetup,
+    } = createInfraSetupState()
     /**
      * The signed-in caller's resolved workspace-RBAC access to the ACTIVE board — their
      * effective role + the permission set it grants, from the auth gate's resolution
@@ -92,7 +94,7 @@ export const useWorkspaceStore = defineStore(
       accountSpend.value = snapshot.accountSpend ?? null
       userSpend.value = snapshot.userSpend ?? null
       budgetCaps.value = snapshot.budgetCaps ?? null
-      infraSetup.value = snapshot.infraSetup ?? null
+      hydrateInfraSetup(snapshot.infraSetup)
       access.value = snapshot.access ?? null
       // Keep the board list in step (e.g. a freshly created board, or a rename). The
       // snapshot's `workspace` carries no `viewerRole` (that's a `GET /workspaces` list
@@ -283,6 +285,8 @@ export const useWorkspaceStore = defineStore(
       userSpend,
       budgetCaps,
       infraSetup,
+      infraSetupDetails,
+      patchInfraSetup,
       access,
       init,
       switchTo,

package/app/utils/infraSetup.ts

@@ -0,0 +1,29 @@
+import type { InfraSetupArea } from '~/types/domain'
+
+// Shared vocabulary for the infra-setup banner's two card kinds, used by the banner itself and by
+// the ui store's session-dismissal book-keeping.
+
+/**
+ * Which CLAIM an infra-setup card is making about an area. They share one banner surface but they
+ * are not interchangeable, and every dismissal rule keys off the difference:
+ *  - `setup` — "you never configured this". A stable operator decision, so it may be dismissed
+ *    permanently as well as for the session.
+ *  - `outage` — "you DID configure it, and a live probe cannot reach it". A health state, so it is
+ *    session-dismissible only and must re-nag on recurrence.
+ */
+export type InfraSetupCardKind = 'setup' | 'outage'
+
+/** A session-dismissal key: one area's one KIND of card. */
+export type InfraSetupDismissalKey = `${InfraSetupArea}:${InfraSetupCardKind}`
+
+/**
+ * The session-dismissal key for one area's card kind. A composite key rather than a bare area,
+ * because dismissing the setup nag must not silence the outage card that a later failure raises for
+ * the same area — a different claim about a different state.
+ */
+export function infraSetupDismissalKey(
+  area: InfraSetupArea,
+  kind: InfraSetupCardKind,
+): InfraSetupDismissalKey {
+  return `${area}:${kind}`
+}

package/i18n/locales/de.json

@@ -1979,6 +1979,7 @@
         "clarity_review": "Als gelesen markieren",
         "release_regression": "Bestätigen",
         "platform_health": "Bestätigen",
+        "infra_unreachable": "Bestätigen",
         "decision_required": "Als gelesen markieren",
         "human_test_ready": "Als gelesen markieren",
         "visual_confirmation_ready": "Als gelesen markieren",
@@ -2027,11 +2028,13 @@
     "infraSetupBanner": {
       "agentExecutor": {
         "title": "Agent-Executor nicht konfiguriert",
+        "unreachableTitle": "Agent-Executor ist nicht erreichbar",
         "body": "Dieses Deployment führt Agenten auf einem selbst gehosteten Runner-Pool aus, aber es ist keiner registriert, sodass kein Agent laufen kann, bis Sie einen verbinden.",
         "action": "Runner-Pool konfigurieren"
       },
       "ephemeralEnvironments": {
         "title": "Testumgebung nicht konfiguriert",
+        "unreachableTitle": "Anbieter für Testumgebungen ist nicht erreichbar",
         "body": "Es ist kein Anbieter für ephemere Umgebungen registriert, sodass Test-Agenten, die eine aktive Vorschau-Umgebung benötigen, nicht laufen können. Öffnen Sie unten „Testumgebungen“ und verbinden Sie einen Kubernetes-Cluster oder einen benutzerdefinierten HTTP-Umgebungsanbieter, um sie zu aktivieren.",
         "action": "Environment konfigurieren"
       },
@@ -2043,6 +2046,11 @@
       "dismiss": {
         "session": "Für diese Sitzung verwerfen",
         "permanent": "Ich bin mit den Einschränkungen einverstanden, nicht erneut benachrichtigen"
+      },
+      "unreachable": {
+        "body": "Die Verbindung ist eingerichtet, aber eine Live-Prüfung konnte sie gerade nicht erreichen. Damit ist das ein Ausfall und keine fehlende Einrichtung: Agenten, die darauf angewiesen sind, schlagen fehl, bis wieder eine Antwort kommt. Prüfen Sie, ob der Dienst läuft, und testen Sie die Verbindung dann erneut.",
+        "reason": "Letzte Prüfung: {detail}",
+        "action": "Verbindung prüfen"
       }
     },
     "spendWarningBanner": {
@@ -4737,6 +4745,7 @@
     },
     "routable": {
       "platform_health": "Plattformzustand",
+      "infra_unreachable": "Infrastrukturausfälle",
       "merge_review": "Merge-Review",
       "pipeline_complete": "Pipeline abgeschlossen",
       "ci_failed": "CI fehlgeschlagen",

package/i18n/locales/en.json

@@ -1962,6 +1962,7 @@
         "clarity_review": "Mark read",
         "release_regression": "Acknowledge",
         "platform_health": "Acknowledge",
+        "infra_unreachable": "Acknowledge",
         "decision_required": "Mark read",
         "human_test_ready": "Mark read",
         "visual_confirmation_ready": "Mark read",
@@ -2010,11 +2011,13 @@
     "infraSetupBanner": {
       "agentExecutor": {
         "title": "Agent executor not configured",
+        "unreachableTitle": "Agent executor is unreachable",
         "body": "This deployment runs agents on a self-hosted runner pool, but none is registered, so no agent can run until you connect one.",
         "action": "Configure runner pool"
       },
       "ephemeralEnvironments": {
         "title": "Test environment not configured",
+        "unreachableTitle": "Test environment provider is unreachable",
         "body": "No ephemeral environment provider is registered, so testing agents that need a live preview environment can't run. Open Test environments below and connect a Kubernetes cluster or a custom HTTP environment provider to enable them.",
         "action": "Configure environment"
       },
@@ -2026,6 +2029,11 @@
       "dismiss": {
         "session": "Dismiss for this session",
         "permanent": "I'm OK with the limitations, don't notify me again"
+      },
+      "unreachable": {
+        "body": "The connection is set up, but a live check could not reach it just now. That makes this an outage rather than a missing setup: agents that depend on it will fail until it answers again. Check that the service is running, then retest the connection.",
+        "reason": "Last probe: {detail}",
+        "action": "Check connection"
       }
     },
     "spendWarningBanner": {
@@ -3695,6 +3703,7 @@
     },
     "routable": {
       "platform_health": "Platform health",
+      "infra_unreachable": "Infrastructure outages",
       "merge_review": "Merge review",
       "pipeline_complete": "Pipeline complete",
       "ci_failed": "CI failed",

package/i18n/locales/es.json

@@ -1886,6 +1886,7 @@
         "clarity_review": "Marcar como leída",
         "release_regression": "Confirmar recepción",
         "platform_health": "Confirmar recepción",
+        "infra_unreachable": "Confirmar",
         "decision_required": "Marcar como leída",
         "human_test_ready": "Marcar como leída",
         "visual_confirmation_ready": "Marcar como leída",
@@ -1940,11 +1941,13 @@
     "infraSetupBanner": {
       "agentExecutor": {
         "title": "Ejecutor de agentes no configurado",
+        "unreachableTitle": "El ejecutor de agentes no está accesible",
         "body": "Este despliegue ejecuta los agentes en un pool de runners autoalojado, pero no hay ninguno registrado, así que ningún agente podrá ejecutarse hasta que conectes uno.",
         "action": "Configurar pool de runners"
       },
       "ephemeralEnvironments": {
         "title": "Entorno de pruebas no configurado",
+        "unreachableTitle": "El proveedor de entornos de prueba no está accesible",
         "body": "No hay ningún proveedor de entornos efímeros registrado, así que los agentes de pruebas que necesitan un entorno de vista previa activo no pueden ejecutarse. Abre Entornos de prueba abajo y conecta un clúster de Kubernetes o un proveedor de entornos HTTP personalizado para habilitarlos.",
         "action": "Configurar entorno"
       },
@@ -1956,6 +1959,11 @@
       "dismiss": {
         "session": "Descartar durante esta sesión",
         "permanent": "Acepto las limitaciones, no volver a avisarme"
+      },
+      "unreachable": {
+        "body": "La conexión está configurada, pero una comprobación en vivo no ha podido alcanzarla ahora mismo. Por eso se trata de una interrupción y no de una configuración pendiente: los agentes que dependen de ella fallarán hasta que vuelva a responder. Comprueba que el servicio esté en marcha y vuelve a probar la conexión.",
+        "reason": "Última comprobación: {detail}",
+        "action": "Comprobar conexión"
       }
     },
     "spendWarningBanner": {
@@ -3586,6 +3594,7 @@
     },
     "routable": {
       "platform_health": "Estado de la plataforma",
+      "infra_unreachable": "Interrupciones de infraestructura",
       "merge_review": "Revision de fusion",
       "pipeline_complete": "Pipeline completado",
       "ci_failed": "CI fallido",

package/i18n/locales/fr.json

@@ -1886,6 +1886,7 @@
         "clarity_review": "Marquer comme lu",
         "release_regression": "Accuser réception",
         "platform_health": "Accuser réception",
+        "infra_unreachable": "Accuser réception",
         "decision_required": "Marquer comme lu",
         "human_test_ready": "Marquer comme lu",
         "visual_confirmation_ready": "Marquer comme lu",
@@ -1940,11 +1941,13 @@
     "infraSetupBanner": {
       "agentExecutor": {
         "title": "Exécuteur d'agents non configuré",
+        "unreachableTitle": "L'exécuteur d'agents est inaccessible",
         "body": "Ce déploiement exécute les agents sur un pool de runners auto-hébergé, mais aucun n'est enregistré, donc aucun agent ne pourra s'exécuter tant que vous n'en connectez pas un.",
         "action": "Configurer le pool de runners"
       },
       "ephemeralEnvironments": {
         "title": "Environnement de test non configuré",
+        "unreachableTitle": "Le fournisseur d'environnements de test est inaccessible",
         "body": "Aucun fournisseur d'environnements éphémères n'est enregistré, donc les agents de test qui nécessitent un environnement de prévisualisation actif ne peuvent pas s'exécuter. Ouvrez Environnements de test ci-dessous et connectez un cluster Kubernetes ou un fournisseur d'environnements HTTP personnalisé pour les activer.",
         "action": "Configurer l'environnement"
       },
@@ -1956,6 +1959,11 @@
       "dismiss": {
         "session": "Ignorer pour cette session",
         "permanent": "J'accepte les limitations, ne plus me notifier"
+      },
+      "unreachable": {
+        "body": "La connexion est configurée, mais une vérification en direct n'a pas pu l'atteindre à l'instant. Il s'agit donc d'une panne et non d'une configuration manquante : les agents qui en dépendent échoueront jusqu'à ce qu'une réponse revienne. Vérifiez que le service fonctionne, puis testez la connexion à nouveau.",
+        "reason": "Dernière vérification : {detail}",
+        "action": "Vérifier la connexion"
       }
     },
     "spendWarningBanner": {
@@ -3586,6 +3594,7 @@
     },
     "routable": {
       "platform_health": "Santé de la plateforme",
+      "infra_unreachable": "Pannes d'infrastructure",
       "merge_review": "Revue de fusion",
       "pipeline_complete": "Pipeline termine",
       "ci_failed": "Echec de CI",

package/i18n/locales/he.json

@@ -1886,6 +1886,7 @@
         "clarity_review": "סמן כנקרא",
         "release_regression": "אשר",
         "platform_health": "אשר",
+        "infra_unreachable": "אישור",
         "decision_required": "סמן כנקרא",
         "human_test_ready": "סמן כנקרא",
         "visual_confirmation_ready": "סמן כנקרא",
@@ -1940,11 +1941,13 @@
     "infraSetupBanner": {
       "agentExecutor": {
         "title": "מנוע הסוכנים אינו מוגדר",
+        "unreachableTitle": "מריץ הסוכנים אינו נגיש",
         "body": "פריסה זו מריצה סוכנים במאגר ראנרים בניהול עצמי, אך אף מאגר אינו רשום, ולכן אף סוכן לא יוכל לפעול עד שתחברו אחד.",
         "action": "הגדרת מאגר ראנרים"
       },
       "ephemeralEnvironments": {
         "title": "סביבת בדיקות אינה מוגדרת",
+        "unreachableTitle": "ספק סביבות הבדיקה אינו נגיש",
         "body": "לא רשום שום ספק סביבות ארעיות, ולכן סוכני בדיקה הזקוקים לסביבת תצוגה מקדימה פעילה אינם יכולים לפעול. פתחו את 'סביבות בדיקה' למטה וחברו אשכול Kubernetes או ספק סביבות HTTP מותאם אישית כדי להפעיל אותם.",
         "action": "הגדרת סביבה"
       },
@@ -1956,6 +1959,11 @@
       "dismiss": {
         "session": "התעלם להפעלה זו",
         "permanent": "אני מסכים למגבלות, אל תודיעו לי שוב"
+      },
+      "unreachable": {
+        "body": "החיבור מוגדר, אך בדיקה חיה לא הצליחה להגיע אליו כרגע. לכן מדובר בתקלה ולא בהגדרה חסרה: סוכנים שתלויים בו ייכשלו עד שתחזור תשובה. בדקו שהשירות פועל, ולאחר מכן בדקו את החיבור מחדש.",
+        "reason": "בדיקה אחרונה: {detail}",
+        "action": "בדיקת החיבור"
       }
     },
     "spendWarningBanner": {
@@ -3597,6 +3605,7 @@
     },
     "routable": {
       "platform_health": "תקינות הפלטפורמה",
+      "infra_unreachable": "תקלות תשתית",
       "merge_review": "סקירת מיזוג",
       "pipeline_complete": "הצינור הושלם",
       "ci_failed": "CI נכשל",

package/i18n/locales/it.json

@@ -1979,6 +1979,7 @@
         "clarity_review": "Segna come letto",
         "release_regression": "Conferma presa visione",
         "platform_health": "Conferma presa visione",
+        "infra_unreachable": "Conferma",
         "decision_required": "Segna come letto",
         "human_test_ready": "Segna come letto",
         "visual_confirmation_ready": "Segna come letto",
@@ -2027,11 +2028,13 @@
     "infraSetupBanner": {
       "agentExecutor": {
         "title": "Esecutore degli agenti non configurato",
+        "unreachableTitle": "L'esecutore degli agenti non è raggiungibile",
         "body": "Questo deployment esegue gli agenti su un runner pool self-hosted, ma nessuno è registrato, quindi nessun agente può funzionare finché non ne connetti uno.",
         "action": "Configura il runner pool"
       },
       "ephemeralEnvironments": {
         "title": "Ambiente di test non configurato",
+        "unreachableTitle": "Il provider di ambienti di test non è raggiungibile",
         "body": "Nessun provider di ambiente effimero è registrato, quindi gli agenti di test che necessitano di un ambiente di anteprima live non possono funzionare. Apri Ambienti di test qui sotto e connetti un cluster Kubernetes o un provider di ambienti HTTP personalizzato per abilitarli.",
         "action": "Configura l'ambiente"
       },
@@ -2043,6 +2046,11 @@
       "dismiss": {
         "session": "Ignora per questa sessione",
         "permanent": "Accetto le limitazioni, non notificarmi più"
+      },
+      "unreachable": {
+        "body": "La connessione è configurata, ma una verifica in tempo reale non è riuscita a raggiungerla in questo momento. Si tratta quindi di un'interruzione e non di una configurazione mancante: gli agenti che ne dipendono falliranno finché non arriverà di nuovo una risposta. Controlla che il servizio sia attivo, poi riprova la connessione.",
+        "reason": "Ultima verifica: {detail}",
+        "action": "Verifica connessione"
       }
     },
     "spendWarningBanner": {
@@ -4737,6 +4745,7 @@
     },
     "routable": {
       "platform_health": "Salute della piattaforma",
+      "infra_unreachable": "Interruzioni dell’infrastruttura",
       "merge_review": "Revisione del merge",
       "pipeline_complete": "Pipeline completata",
       "ci_failed": "CI non riuscita",

package/i18n/locales/ja.json

@@ -1886,6 +1886,7 @@
         "clarity_review": "既読にする",
         "release_regression": "確認",
         "platform_health": "確認",
+        "infra_unreachable": "確認",
         "decision_required": "既読にする",
         "human_test_ready": "既読にする",
         "visual_confirmation_ready": "既読にする",
@@ -1940,11 +1941,13 @@
     "infraSetupBanner": {
       "agentExecutor": {
         "title": "エージェント実行環境が未設定です",
+        "unreachableTitle": "エージェント実行環境に到達できません",
         "body": "このデプロイはセルフホストのランナープールでエージェントを実行しますが、登録されているものがないため、接続するまでエージェントを実行できません。",
         "action": "ランナープールを設定"
       },
       "ephemeralEnvironments": {
         "title": "テスト環境が未設定です",
+        "unreachableTitle": "テスト環境プロバイダーに到達できません",
         "body": "エフェメラル環境プロバイダーが登録されていないため、稼働中のプレビュー環境を必要とするテストエージェントを実行できません。下の「テスト環境」を開き、Kubernetes クラスターまたはカスタム HTTP 環境プロバイダーを接続して有効にしてください。",
         "action": "環境を設定"
       },
@@ -1956,6 +1959,11 @@
       "dismiss": {
         "session": "このセッションでは非表示にする",
         "permanent": "制限を理解しました。今後通知しない"
+      },
+      "unreachable": {
+        "body": "接続は設定済みですが、ライブチェックでは到達できませんでした。つまり設定漏れではなく障害です。応答が戻るまで、これに依存するエージェントは失敗します。サービスが稼働しているか確認したうえで、接続を再テストしてください。",
+        "reason": "最後のチェック: {detail}",
+        "action": "接続を確認"
       }
     },
     "spendWarningBanner": {
@@ -3598,6 +3606,7 @@
     },
     "routable": {
       "platform_health": "プラットフォームの健全性",
+      "infra_unreachable": "インフラ障害",
       "merge_review": "マージレビュー",
       "pipeline_complete": "パイプライン完了",
       "ci_failed": "CI失敗",

package/i18n/locales/pl.json

@@ -1886,6 +1886,7 @@
         "clarity_review": "Oznacz jako przeczytane",
         "release_regression": "Potwierdź",
         "platform_health": "Potwierdź",
+        "infra_unreachable": "Potwierdź",
         "decision_required": "Oznacz jako przeczytane",
         "human_test_ready": "Oznacz jako przeczytane",
         "visual_confirmation_ready": "Oznacz jako przeczytane",
@@ -1940,11 +1941,13 @@
     "infraSetupBanner": {
       "agentExecutor": {
         "title": "Wykonawca agentów nie jest skonfigurowany",
+        "unreachableTitle": "Wykonawca agentów jest nieosiągalny",
         "body": "To wdrożenie uruchamia agentów w samodzielnie hostowanej puli runnerów, ale żadna nie jest zarejestrowana, więc żaden agent nie będzie mógł działać, dopóki jej nie podłączysz.",
         "action": "Skonfiguruj pulę runnerów"
       },
       "ephemeralEnvironments": {
         "title": "Środowisko testowe nie jest skonfigurowane",
+        "unreachableTitle": "Dostawca środowisk testowych jest nieosiągalny",
         "body": "Nie zarejestrowano żadnego dostawcy środowisk efemerycznych, więc agenci testowi wymagający działającego środowiska podglądu nie mogą działać. Otwórz poniżej „Środowiska testowe” i podłącz klaster Kubernetes lub niestandardowego dostawcę środowisk HTTP, aby je włączyć.",
         "action": "Skonfiguruj środowisko"
       },
@@ -1956,6 +1959,11 @@
       "dismiss": {
         "session": "Odrzuć na tę sesję",
         "permanent": "Akceptuję ograniczenia, nie powiadamiaj mnie ponownie"
+      },
+      "unreachable": {
+        "body": "Połączenie jest skonfigurowane, ale kontrola na żywo nie mogła go teraz uzyskać. To awaria, a nie brak konfiguracji: agenci, którzy od tego zależą, będą kończyć się błędem, dopóki nie pojawi się znowu odpowiedź. Sprawdź, czy usługa działa, a następnie ponownie przetestuj połączenie.",
+        "reason": "Ostatnia kontrola: {detail}",
+        "action": "Sprawdź połączenie"
       }
     },
     "spendWarningBanner": {
@@ -3586,6 +3594,7 @@
     },
     "routable": {
       "platform_health": "Kondycja platformy",
+      "infra_unreachable": "Awarie infrastruktury",
       "merge_review": "Przeglad scalenia",
       "pipeline_complete": "Pipeline ukonczony",
       "ci_failed": "Niepowodzenie CI",

package/i18n/locales/tr.json

@@ -1886,6 +1886,7 @@
         "clarity_review": "Okundu olarak işaretle",
         "release_regression": "Onayla",
         "platform_health": "Onayla",
+        "infra_unreachable": "Onayla",
         "decision_required": "Okundu işaretle",
         "human_test_ready": "Okundu işaretle",
         "visual_confirmation_ready": "Okundu işaretle",
@@ -1940,11 +1941,13 @@
     "infraSetupBanner": {
       "agentExecutor": {
         "title": "Aracı yürütücüsü yapılandırılmadı",
+        "unreachableTitle": "Aracı yürütücüsüne erişilemiyor",
         "body": "Bu dağıtım aracıları kendi barındırdığınız bir runner havuzunda çalıştırır, ancak kayıtlı bir havuz yok; bu yüzden bir tane bağlayana kadar hiçbir aracı çalışamaz.",
         "action": "Runner havuzunu yapılandır"
       },
       "ephemeralEnvironments": {
         "title": "Test ortamı yapılandırılmadı",
+        "unreachableTitle": "Test ortamı sağlayıcısına erişilemiyor",
         "body": "Kayıtlı bir geçici ortam sağlayıcısı yok; bu nedenle çalışan bir önizleme ortamına ihtiyaç duyan test aracıları çalışamaz. Aşağıdaki Test ortamları sekmesini açın ve etkinleştirmek için bir Kubernetes kümesi ya da özel bir HTTP ortam sağlayıcısı bağlayın.",
         "action": "Ortamı yapılandır"
       },
@@ -1956,6 +1959,11 @@
       "dismiss": {
         "session": "Bu oturum için kapat",
         "permanent": "Kısıtlamaları kabul ediyorum, beni tekrar bilgilendirme"
+      },
+      "unreachable": {
+        "body": "Bağlantı yapılandırılmış durumda, ancak canlı bir denetim şu anda ona ulaşamadı. Bu yüzden eksik bir yapılandırma değil bir kesinti söz konusu: buna bağlı aracılar yeniden yanıt gelene kadar başarısız olacak. Hizmetin çalıştığını doğrulayın, ardından bağlantıyı yeniden test edin.",
+        "reason": "Son denetim: {detail}",
+        "action": "Bağlantıyı denetle"
       }
     },
     "spendWarningBanner": {
@@ -3598,6 +3606,7 @@
     },
     "routable": {
       "platform_health": "Platform sağlığı",
+      "infra_unreachable": "Altyapı kesintileri",
       "merge_review": "Birleştirme incelemesi",
       "pipeline_complete": "Pipeline tamamlandı",
       "ci_failed": "CI başarısız",

package/i18n/locales/uk.json

@@ -1886,6 +1886,7 @@
         "clarity_review": "Позначити прочитаним",
         "release_regression": "Підтвердити отримання",
         "platform_health": "Підтвердити отримання",
+        "infra_unreachable": "Підтвердити",
         "decision_required": "Позначити прочитаним",
         "human_test_ready": "Позначити прочитаним",
         "visual_confirmation_ready": "Позначити прочитаним",
@@ -1940,11 +1941,13 @@
     "infraSetupBanner": {
       "agentExecutor": {
         "title": "Виконавець агентів не налаштований",
+        "unreachableTitle": "Виконавець агентів недоступний",
         "body": "Це розгортання запускає агентів у самостійно розміщеному пулі раннерів, але жоден не зареєстрований, тож жоден агент не зможе працювати, доки ви не підключите його.",
         "action": "Налаштувати пул раннерів"
       },
       "ephemeralEnvironments": {
         "title": "Тестове середовище не налаштоване",
+        "unreachableTitle": "Постачальник тестових середовищ недоступний",
         "body": "Не зареєстровано жодного постачальника ефемерних середовищ, тож тестові агенти, яким потрібне робоче середовище попереднього перегляду, не можуть працювати. Відкрийте нижче «Тестові середовища» та підключіть кластер Kubernetes або власного постачальника середовищ HTTP, щоб увімкнути їх.",
         "action": "Налаштувати середовище"
       },
@@ -1956,6 +1959,11 @@
       "dismiss": {
         "session": "Відхилити на цю сесію",
         "permanent": "Мене влаштовують обмеження, більше не сповіщати"
+      },
+      "unreachable": {
+        "body": "З’єднання налаштоване, але жива перевірка щойно не змогла до нього дістатися. Тому це збій, а не відсутнє налаштування: агенти, які від нього залежать, завершуватимуться з помилкою, доки не з’явиться відповідь. Перевірте, чи працює служба, а потім протестуйте з’єднання ще раз.",
+        "reason": "Остання перевірка: {detail}",
+        "action": "Перевірити з’єднання"
       }
     },
     "spendWarningBanner": {
@@ -3586,6 +3594,7 @@
     },
     "routable": {
       "platform_health": "Стан платформи",
+      "infra_unreachable": "Збої інфраструктури",
       "merge_review": "Перевірка злиття",
       "pipeline_complete": "Конвеєр завершено",
       "ci_failed": "Збій CI",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/app",
-  "version": "0.190.1",
+  "version": "0.191.0",
   "description": "Reusable Nuxt layer for the Agent Architecture Board SPA (components, stores, composables, pages). Consume it from a thin deployment app via `extends: ['@cat-factory/app']` and point it at your backend with NUXT_PUBLIC_API_BASE. See deploy/frontend for an example.",
   "repository": {
     "type": "git",
@@ -40,7 +40,7 @@
     "valibot": "^1.4.2",
     "vue": "3.5.40",
     "wretch": "^3.0.9",
-    "@cat-factory/contracts": "0.197.0"
+    "@cat-factory/contracts": "0.198.0"
   },
   "devDependencies": {
     "@toad-contracts/testing": "0.3.2",