@cat-factory/app 0.224.0 → 0.225.0

package/app/components/panels/AgentStepDetail.vue

@@ -13,6 +13,7 @@ import BinaryOutputReport from '~/components/binaryOutput/BinaryOutputReport.vue
 import EnvironmentStatusPanel from '~/components/environments/EnvironmentStatusPanel.vue'
 import FrontendBindingsResolved from '~/components/panels/inspector/FrontendBindingsResolved.vue'
 import { UI_TESTER_AGENT_KIND } from '@cat-factory/contracts'
+import type { GateApprovalRefusal } from '@cat-factory/contracts'
 import ProvisioningLogsDrawer from '~/components/provisioning/ProvisioningLogsDrawer.vue'
 import IterationCapPrompt from '~/components/pipeline/IterationCapPrompt.vue'
 import StepExecutionHistory from '~/components/board/StepExecutionHistory.vue'
@@ -227,6 +228,10 @@ const {
   draftProposal,
   rejectArmed,
   canRequestChanges,
+  quorum: gateQuorum,
+  viewerHasApproved,
+  approvalWouldClearGate,
+  refusal: gateRefusal,
   onProseClick,
   addDraftComment,
   cancelDraft,
@@ -241,6 +246,25 @@ const {
   reject,
 } = approval
 
+/**
+ * Why the gate refuses this viewer, worded for them. An exhaustive Record over the shared refusal
+ * vocabulary with LITERAL keys, so the typed-message-key check sees them and a new refusal reason
+ * fails the typecheck instead of rendering as a blank line under a disabled button.
+ */
+const GATE_REFUSAL_KEYS: Record<GateApprovalRefusal, string> = {
+  not_a_gate_approver: 'panels.stepDetail.notAnApprover',
+  gate_approver_identity_required: 'panels.stepDetail.approverIdentityRequired',
+}
+
+/**
+ * Whether "approve with corrections" is offered RIGHT NOW. Two independent reasons withhold it,
+ * and they are kept apart because their remedies differ: an output that is a rendering can never
+ * be edited here, while an unmet quorum only means not yet: this viewer's approval is not the
+ * one that clears the gate, and an edit under it would move the artifact beneath the approvals
+ * already recorded. Each states itself below rather than the button quietly vanishing.
+ */
+const proposalEditableNow = computed(() => proposalEditable.value && approvalWouldClearGate.value)
+
 const resolvingCap = ref(false)
 async function resolveCompanionCap(choice: IterationCapChoice) {
   if (!ctx.value || !approvalId.value || resolvingCap.value) return
@@ -692,6 +716,30 @@ async function copyOutput() {
             <p class="mt-1 text-[12px] text-slate-400">
               {{ editing ? t('panels.stepDetail.editHint') : t('panels.stepDetail.reviewHint') }}
             </p>
+            <!-- The gate's configured POLICY, when it has one. Both lines exist because an
+               approve on such a gate legitimately may not advance the run: without the tally, a
+               correctly-recorded approval is indistinguishable from a call that failed, and
+               without the refusal a person would press a button the server answers 403. -->
+            <p
+              v-if="gateQuorum"
+              class="mt-1 text-[12px] text-amber-300/90"
+              data-testid="gate-quorum"
+            >
+              {{
+                t('panels.stepDetail.quorumProgress', {
+                  recorded: gateQuorum.recorded,
+                  required: gateQuorum.required,
+                })
+              }}
+              <span v-if="viewerHasApproved">{{ t('panels.stepDetail.quorumYours') }}</span>
+            </p>
+            <p
+              v-if="gateRefusal"
+              class="mt-1 text-[12px] text-slate-400"
+              data-testid="gate-not-approver"
+            >
+              {{ t(GATE_REFUSAL_KEYS[gateRefusal]) }}
+            </p>
           </div>
 
           <div class="flex-1 space-y-3 overflow-auto overscroll-contain px-4 py-3">
@@ -820,27 +868,36 @@ async function copyOutput() {
               size="sm"
               icon="i-lucide-check"
               block
-              :disabled="rejectArmed"
+              :disabled="rejectArmed || !!gateRefusal"
               :loading="submitting"
               @click="approve"
             >
               {{ t('panels.stepDetail.approveAndProceed') }}
             </UButton>
             <UButton
-              v-if="proposalEditable"
+              v-if="proposalEditableNow"
               color="primary"
               variant="soft"
               size="sm"
               icon="i-lucide-pencil"
               block
-              :disabled="rejectArmed || submitting"
+              :disabled="rejectArmed || submitting || !!gateRefusal"
               @click="startEditing"
             >
               {{ t('panels.stepDetail.approveWithCorrections') }}
             </UButton>
-            <p v-else class="text-[10px] text-slate-500" data-testid="step-rendered-output-note">
+            <p
+              v-else-if="!proposalEditable"
+              class="text-[10px] text-slate-500"
+              data-testid="step-rendered-output-note"
+            >
               {{ t('panels.stepDetail.renderedOutputNote') }}
             </p>
+            <!-- Withheld only until the quorum is one approval away, so it says so rather than
+               leaving a reviewer to wonder where the affordance went. -->
+            <p v-else class="text-[10px] text-slate-500" data-testid="step-quorum-edit-locked">
+              {{ t('panels.stepDetail.quorumEditLocked') }}
+            </p>
 
             <!-- destructive: a two-step inline confirm instead of a native dialog -->
             <div
@@ -881,7 +938,7 @@ async function copyOutput() {
                 icon="i-lucide-rotate-ccw"
                 class="flex-1"
                 data-testid="step-request-changes"
-                :disabled="!canRequestChanges"
+                :disabled="!canRequestChanges || !!gateRefusal"
                 :loading="submitting"
                 @click="requestChanges"
               >
@@ -893,7 +950,7 @@ async function copyOutput() {
                 size="sm"
                 icon="i-lucide-ban"
                 class="flex-1"
-                :disabled="submitting"
+                :disabled="submitting || !!gateRefusal"
                 @click="armReject"
               >
                 {{ t('panels.stepDetail.reject') }}

package/app/components/pipeline/GateConfigFields.vue

@@ -0,0 +1,187 @@
+<script setup lang="ts">
+// One step's GATE configuration in the pipeline builder: who may clear its human approval gate,
+// how many of them must, and the parameters of the registered gate the step's kind runs.
+//
+// Two halves with deliberately different sources, rendered together because they are one question
+// to the author ("how does this checkpoint behave?"):
+//
+//   - the approval policy is PLATFORM-typed (`StepGateConfig.approvers` / `minApprovals`), so it
+//     gets purpose-built controls and the shared rules from `@cat-factory/contracts` decide what
+//     counts as configured;
+//   - the gate's own parameters are DECLARED BY THE GATE (`gateConfigForms` on the snapshot) and
+//     rendered through the shared `DescriptorFields`, so a deployment's gate gets an authoring
+//     form from its registration alone and this component learns nothing about it.
+//
+// Extracted rather than inlined into `PipelineBuilder.vue` for the size rule (split along a seam,
+// never grow the ratchet) and because the approver controls need a roster load this component can
+// own on its own terms.
+import { computed, ref, watch } from 'vue'
+import { MAX_GATE_APPROVALS, requiredGateApprovals } from '@cat-factory/contracts'
+import type { DescriptorFieldValues, StepGateConfig, WorkspaceRole } from '~/types/domain'
+import DescriptorFields from '~/components/common/DescriptorFields.vue'
+
+const props = defineProps<{
+  /** The step's index in the draft, for the store patch. */
+  index: number
+  /** Whether the step carries a human approval gate (the approval half renders only then). */
+  gated: boolean
+  /** The step's agent kind, for looking up its registered gate's declared parameters. */
+  kind: string
+}>()
+
+const { t } = useI18n()
+const pipelines = usePipelinesStore()
+const workspace = useWorkspaceStore()
+const members = useWorkspaceMembersStore()
+
+const config = computed<StepGateConfig>(() => pipelines.draftGateConfig(props.index) ?? {})
+
+/**
+ * The roles a gate may name. `viewer` is deliberately absent: the workspace RBAC write floor
+ * refuses a viewer's resolution before the policy is ever consulted, so offering it would let an
+ * author configure an approver who can never approve.
+ */
+const APPROVER_ROLES: readonly WorkspaceRole[] = ['admin', 'member']
+
+const ROLE_LABEL_KEYS: Record<'admin' | 'member', string> = {
+  admin: 'pipeline.gateConfig.roleAdmin',
+  member: 'pipeline.gateConfig.roleMember',
+}
+
+const requiredApprovals = computed(() => requiredGateApprovals(config.value))
+
+// The roster backs the named-approver picker. Loaded lazily the first time this panel renders (it
+// is not on the board snapshot) and only when the caller has a workspace — every resolved role may
+// read it, so this is not an admin-only affordance.
+const rosterLoaded = ref(false)
+watch(
+  () => [props.gated, workspace.workspaceId] as const,
+  async ([gated, workspaceId]) => {
+    if (!gated || !workspaceId || rosterLoaded.value) return
+    rosterLoaded.value = true
+    await members.load(workspaceId)
+  },
+  { immediate: true },
+)
+
+const memberOptions = computed(() =>
+  members.members.map((m) => ({ value: m.userId, label: m.name || m.email || m.userId })),
+)
+
+function toggleRole(role: WorkspaceRole, on: boolean) {
+  const roles = new Set<WorkspaceRole>(config.value.approvers?.roles ?? [])
+  if (on) roles.add(role)
+  else roles.delete(role)
+  patchApprovers({ roles: [...roles] })
+}
+
+function setNamedApprovers(userIds: string[]) {
+  patchApprovers({ userIds })
+}
+
+/**
+ * Write one axis of the approver policy back, keeping the other. Empty arrays are dropped rather
+ * than stored: `{ roles: [] }` names nobody, and a policy that names nobody would refuse every
+ * approver and park the run forever — so "no rule" has to persist as an ABSENT rule.
+ */
+function patchApprovers(patch: { roles?: WorkspaceRole[]; userIds?: string[] }) {
+  const merged = { ...config.value.approvers, ...patch }
+  const approvers: NonNullable<StepGateConfig['approvers']> = {}
+  if (merged.roles?.length) approvers.roles = merged.roles
+  if (merged.userIds?.length) approvers.userIds = merged.userIds
+  pipelines.patchDraftGateConfig(props.index, {
+    approvers: Object.keys(approvers).length ? approvers : undefined,
+  })
+}
+
+function setRequiredApprovals(raw: string) {
+  const parsed = Number.parseInt(raw, 10)
+  const bounded = Number.isFinite(parsed) ? Math.min(Math.max(parsed, 1), MAX_GATE_APPROVALS) : 1
+  // The store drops a value of 1 (the default), so an author who types the default back persists
+  // nothing — the same normalization every other per-step option follows.
+  pipelines.patchDraftGateConfig(props.index, { minApprovals: bounded })
+}
+
+/** The parameters the registered gate for this step's kind declares, if any. */
+const gateFields = computed(
+  () => pipelines.gateConfigForms.find((form) => form.kind === props.kind)?.fields,
+)
+
+const gateFieldValues = computed<DescriptorFieldValues>({
+  get: () => config.value.fields ?? {},
+  set: (fields) => pipelines.patchDraftGateConfig(props.index, { fields }),
+})
+</script>
+
+<template>
+  <div v-if="gated || gateFields?.length" class="ms-6 space-y-2" data-testid="gate-config">
+    <div v-if="gated" class="space-y-2 rounded-md border border-amber-800/40 bg-amber-950/10 p-2">
+      <div class="flex flex-wrap items-center gap-2 text-[10px]">
+        <span class="text-slate-500">{{ t('pipeline.gateConfig.approversLabel') }}</span>
+        <label
+          v-for="role in APPROVER_ROLES"
+          :key="role"
+          class="flex items-center gap-1 text-slate-400"
+        >
+          <input
+            type="checkbox"
+            :checked="config.approvers?.roles?.includes(role) ?? false"
+            :data-testid="`gate-approver-role-${role}`"
+            @change="toggleRole(role, ($event.target as HTMLInputElement).checked)"
+          />
+          {{ t(ROLE_LABEL_KEYS[role as 'admin' | 'member']) }}
+        </label>
+      </div>
+
+      <div class="flex flex-wrap items-center gap-2 text-[10px]">
+        <span class="text-slate-500">{{ t('pipeline.gateConfig.namedApproversLabel') }}</span>
+        <USelectMenu
+          class="w-64"
+          multiple
+          size="xs"
+          value-key="value"
+          :items="memberOptions"
+          :model-value="config.approvers?.userIds ?? []"
+          :placeholder="t('pipeline.gateConfig.namedApproversPlaceholder')"
+          data-testid="gate-named-approvers"
+          @update:model-value="setNamedApprovers(($event ?? []) as string[])"
+        />
+      </div>
+
+      <div class="flex flex-wrap items-center gap-2 text-[10px]">
+        <label class="text-slate-500" :title="t('pipeline.gateConfig.requiredApprovalsHint')">
+          {{ t('pipeline.gateConfig.requiredApprovalsLabel') }}
+        </label>
+        <input
+          :value="requiredApprovals"
+          type="number"
+          min="1"
+          :max="MAX_GATE_APPROVALS"
+          step="1"
+          class="w-14 rounded border border-slate-700 bg-slate-900 px-1.5 py-0.5 text-slate-100"
+          data-testid="gate-required-approvals"
+          @change="setRequiredApprovals(($event.target as HTMLInputElement).value)"
+        />
+        <span class="text-slate-500">{{ t('pipeline.gateConfig.requiredApprovalsHint') }}</span>
+      </div>
+
+      <p v-if="!config.approvers" class="text-[10px] text-slate-500">
+        {{ t('pipeline.gateConfig.anyoneHint') }}
+      </p>
+    </div>
+
+    <!-- The registered gate's OWN parameters, rendered from what it declared. Labels and help are
+       the gate's own English (the descriptor-form convention); only the heading is i18n. -->
+    <div
+      v-if="gateFields?.length"
+      class="space-y-2 rounded-md border border-slate-800 bg-slate-900/40 p-2"
+    >
+      <p class="text-[10px] text-slate-500">{{ t('pipeline.gateConfig.gateParametersLabel') }}</p>
+      <DescriptorFields
+        v-model="gateFieldValues"
+        :fields="gateFields"
+        testid-prefix="gate-parameter"
+      />
+    </div>
+  </div>
+</template>

package/app/components/pipeline/PipelineBuilder.vue

@@ -6,6 +6,7 @@ import AgentPalette from '~/components/palettes/AgentPalette.vue'
 import AgentKindIcon from '~/components/pipeline/AgentKindIcon.vue'
 import AgentPromptEditor from '~/components/pipeline/AgentPromptEditor.vue'
 import EstimateThresholdFields from '~/components/pipeline/EstimateThresholdFields.vue'
+import GateConfigFields from '~/components/pipeline/GateConfigFields.vue'
 import OutputBudgetInput from '~/components/pipeline/OutputBudgetInput.vue'
 import BinaryOutputStepPicker from '~/components/pipeline/BinaryOutputStepPicker.vue'
 import { ESTIMATE_AXES, ESTIMATE_AXIS_FIELD, type EstimateAxis } from '~/utils/estimateGating'
@@ -164,6 +165,23 @@ function showVariantPicker(index: number, kind: AgentKind): boolean {
   return showOverrideField(uiMode.isAdvanced, pipelines.draftAgentVariantId(index) ?? null)
 }
 
+/**
+ * Whether to offer this step's GATE configuration (approvers + required approvals, and any
+ * parameters its registered gate declares). There has to be something to configure: either the
+ * step carries a human approval gate, or its kind has a registered gate that declares parameters.
+ *
+ * Then it is an OVERRIDE like the variant picker above — advanced-only until a value is actually
+ * set, and visible in both tiers from then on. That second half is load-bearing here rather than
+ * cosmetic: the builder saves the whole step-options bag, so a configured policy invisible to a
+ * basic-mode editor would be a policy they silently save over.
+ */
+function showGateConfig(index: number, kind: AgentKind): boolean {
+  const gated = pipelines.draftGates[index] === true
+  const declaresFields = pipelines.gateConfigForms.some((form) => form.kind === kind)
+  if (!gated && !declaresFields) return false
+  return showOverrideField(uiMode.isAdvanced, pipelines.draftGateConfig(index) ?? null)
+}
+
 /**
  * The variants registered for a step's kind as USelect items, with an explicit "shipped prompt"
  * entry so clearing the pick is a choice in the same list rather than a separate affordance.
@@ -843,6 +861,19 @@ async function clone(p: Pipeline) {
                 />
               </div>
 
+              <!-- Gate configuration: who may clear this step's approval gate and how many of
+                 them, plus the parameters its registered gate declares. An OVERRIDE of the
+                 defaults (one approval from anyone entitled to write, the gate's shipped knobs),
+                 so it is advanced-only until a step actually configures something — at which point
+                 it must stay visible in both tiers, or a member editing the pipeline would save
+                 over a policy they were never shown. -->
+              <GateConfigFields
+                v-if="showGateConfig(unit.index, unit.kind)"
+                :index="unit.index"
+                :gated="pipelines.draftGates[unit.index] === true"
+                :kind="unit.kind"
+              />
+
               <!-- Binary-output picker: a generator kind's step is parametrized by the
                  foundational STORAGE service its artifacts go through (`stepOptions.binaryOutput`)
                  plus any services consulted for the generation's scope. Required, not an

package/app/components/settings/ApiTokensPanel.vue

@@ -38,12 +38,20 @@ const auth = useAuthStore()
 const store = usePublicApiKeysStore()
 
 /**
- * The minter to attribute a key to. `null` when the key predates the audit column (or was
- * minted with no session), so the row simply omits the segment. When the minter is the
- * signed-in user we show a localized "you"; otherwise the raw `usr_*` id (the list has no
- * user-name lookup — the audit id is the honest, non-misleading thing to show).
+ * The minter to attribute a key to. When the minter is the signed-in user we show a localized
+ * "you"; for another person, the raw `usr_*` id (the list has no user-name lookup, so the audit id
+ * is the honest, non-misleading thing to show).
+ *
+ * A key PROVISIONED HEADLESSLY (`POST /api/v1/keys`) has no user and names the KEY that minted
+ * it instead. Reading `createdByKeyId` here is not a nicety: a headless mint stores a null user,
+ * so without this branch it would render exactly like a key that predates the audit column, and
+ * "nobody knows who made this" would be shown for the one case the platform knows precisely.
+ * `null` stays reserved for genuinely unattributed keys, where the row omits the segment.
  */
 function minterLabel(key: PublicApiKey): string | null {
+  if (key.createdByKeyId) {
+    return t('settings.apiTokens.list.createdByKey', { id: key.createdByKeyId })
+  }
   if (!key.createdByUserId) return null
   return key.createdByUserId === auth.user?.id
     ? t('settings.apiTokens.list.createdByYou')

package/app/composables/useStepApproval.ts

@@ -1,6 +1,9 @@
 import { ref, computed, nextTick } from 'vue'
+import { refuseGateResolution, UNATTRIBUTED_GATE_ACTOR } from '@cat-factory/contracts'
+import type { GateActor, GateApprovalRefusal } from '@cat-factory/contracts'
 import type { PipelineStep } from '~/types/execution'
 import { useProseComments } from '~/composables/useProseComments'
+import { useWorkspaceAccess } from '~/composables/useWorkspaceAccess'
 
 /**
  * The GitHub-style approval/review state machine for a pending gate step. When the
@@ -23,6 +26,8 @@ export function useStepApproval(opts: {
   close: () => void
 }) {
   const execution = useExecutionStore()
+  const auth = useAuthStore()
+  const access = useWorkspaceAccess()
 
   const feedback = ref('')
   const submitting = ref(false)
@@ -60,12 +65,71 @@ export function useStepApproval(opts: {
     () => !!feedback.value.trim() || reviewComments.value.length > 0,
   )
 
+  // ---- The gate's own POLICY, as the pipeline step configured it -------------------------
+  //
+  // Read from the SAME `@cat-factory/contracts` rules the engine enforces, never a local
+  // reimplementation: a button enabled by a second copy of the rule is a request the server
+  // refuses, and the person pressing it has no way to tell which of the two is right.
+
+  const approval = computed(() => opts.step()?.approval ?? null)
+
+  /**
+   * The gate's quorum, or null when it needs the usual single approval. Non-null is what makes
+   * the rail say "1 of 2 approvals" — otherwise an approve that correctly leaves the run parked
+   * looks exactly like one that failed.
+   */
+  const quorum = computed(() => {
+    const required = approval.value?.requiredApprovals ?? 1
+    if (required <= 1) return null
+    return { required, recorded: approval.value?.approvals?.length ?? 0 }
+  })
+
+  /** Whether the viewer's own approval is already counted (so the rail can say so). */
+  const viewerHasApproved = computed(() => {
+    const userId = auth.user?.id
+    return !!userId && !!approval.value?.approvals?.some((a) => a.actorId === userId)
+  })
+
+  /**
+   * Whether the viewer's approval would be the one that CLEARS the gate. Always true without a
+   * quorum; under one it folds the viewer in the way the server does, so a re-approval by someone
+   * already counted does not read as a new vote.
+   *
+   * This is what decides whether "approve with corrections" is offered: a quorum votes on ONE
+   * artifact, so an edit that does not clear the gate would rewrite the proposal under the people
+   * already counted toward it and the ones still to come. The server refuses that
+   * (`proposal_not_editable_until_quorum`); hiding the affordance is what stops a reviewer typing
+   * a correction into a dead end, the same disposition as `outputIsRendered`.
+   */
+  const approvalWouldClearGate = computed(() => {
+    const q = quorum.value
+    if (!q) return true
+    return (viewerHasApproved.value ? q.recorded : q.recorded + 1) >= q.required
+  })
+
+  /**
+   * Why the viewer may not resolve this gate, or null when they may. Drives the disabled state of
+   * all three verbs, since the policy governs every resolution and not just approve.
+   *
+   * With auth off there is no signed-in user, and the actor is `unattributed` — exactly what the
+   * server will decide with, so the rail refuses ahead of it rather than offering a button whose
+   * request comes back 403.
+   */
+  const refusal = computed<GateApprovalRefusal | null>(() => {
+    if (!approval.value) return null
+    const user = auth.user
+    const actor: GateActor = user
+      ? { id: user.id, kind: 'user', role: access.role.value }
+      : { id: UNATTRIBUTED_GATE_ACTOR, kind: 'unattributed', role: access.role.value }
+    return refuseGateResolution(approval.value.approverPolicy, actor)
+  })
+
   // Plain approve: accept the agent's proposal verbatim and advance. Every action below
   // closes the overlay ONLY when the command actually ran — a server refusal (surfaced as
   // a toast by the store) or a cancelled credential prompt keeps the review open.
   async function approve() {
     const id = opts.approvalId()
-    if (!opts.instanceId() || !id || submitting.value) return
+    if (!opts.instanceId() || !id || submitting.value || refusal.value) return
     submitting.value = true
     try {
       if (await execution.approveStep(opts.instanceId()!, id)) opts.close()
@@ -88,7 +152,9 @@ export function useStepApproval(opts: {
   }
   async function approveWithEdits() {
     const id = opts.approvalId()
-    if (!opts.instanceId() || !id || submitting.value) return
+    if (!opts.instanceId() || !id || submitting.value || refusal.value) return
+    // The server refuses an edit that does not clear the gate; never send one.
+    if (!approvalWouldClearGate.value) return
     submitting.value = true
     try {
       if (await execution.approveStep(opts.instanceId()!, id, draftProposal.value)) opts.close()
@@ -99,6 +165,7 @@ export function useStepApproval(opts: {
   async function requestChanges() {
     const id = opts.approvalId()
     if (!opts.instanceId() || !id || submitting.value || !canRequestChanges.value) return
+    if (refusal.value) return
     submitting.value = true
     try {
       const ok = await execution.requestStepChanges(opts.instanceId()!, id, {
@@ -118,7 +185,7 @@ export function useStepApproval(opts: {
   }
   async function reject() {
     const id = opts.approvalId()
-    if (!opts.instanceId() || !id || submitting.value) return
+    if (!opts.instanceId() || !id || submitting.value || refusal.value) return
     submitting.value = true
     try {
       if (await execution.rejectStep(opts.instanceId()!, id, feedback.value.trim() || undefined)) {
@@ -159,6 +226,10 @@ export function useStepApproval(opts: {
     draftProposal,
     rejectArmed,
     canRequestChanges,
+    quorum,
+    viewerHasApproved,
+    approvalWouldClearGate,
+    refusal,
     syncHighlights,
     onProseClick,
     addDraftComment,

package/app/stores/pipelines/draftActions.ts

@@ -2,6 +2,7 @@ import { computed } from 'vue'
 import type { AgentKind, Pipeline } from '~/types/domain'
 import { companionForProducer } from '~/utils/catalog'
 import type { PipelinesContext } from './context'
+import { createPipelineGateConfigActions } from './draftGateConfig'
 import { createPipelineStepConfigActions } from './draftStepConfig'
 
 /**
@@ -192,6 +193,7 @@ export function createPipelineDraftActions(ctx: PipelinesContext) {
 
   return {
     ...createPipelineStepConfigActions(ctx),
+    ...createPipelineGateConfigActions(ctx),
     addToDraft,
     removeFromDraft,
     moveInDraft,

package/app/stores/pipelines/draftGateConfig.ts

@@ -0,0 +1,55 @@
+import type { StepGateConfig, StepOptions } from '@cat-factory/contracts'
+import { hasApproverPolicy } from '@cat-factory/contracts'
+import type { PipelinesContext } from './context'
+
+/**
+ * The pipeline-builder draft's per-step GATE configuration: who may clear a step's human approval
+ * gate, how many of them must, and the parameters the step's registered gate declares.
+ *
+ * Its own module rather than another pair of accessors on `./draftStepConfig`, which owns the flat
+ * per-step options (a skill id, a variant id, a token ceiling — each one field, read and written
+ * whole). Gate config is the one nested value there: it MERGES a patch across two independently
+ * edited halves and normalizes at three levels on the way out, which is a different enough shape to
+ * be worth reading on its own. (It also put that file over the per-function line budget, which is
+ * the ratchet doing its job rather than a number to raise.)
+ */
+export function createPipelineGateConfigActions(ctx: PipelinesContext) {
+  const { draftStepOptions } = ctx
+
+  /**
+   * The gate configuration on the draft step at `index`, or undefined when the step takes every
+   * default (one approval from anyone entitled to write, and the gate's shipped knobs).
+   */
+  function draftGateConfig(index: number): StepGateConfig | undefined {
+    return draftStepOptions.value[index]?.gateConfig
+  }
+
+  /**
+   * Merge a PATCH into the draft step's gate configuration. A patch rather than a whole-value set
+   * because the builder edits the two halves through different controls: a whole-value write from
+   * the approver fields would drop the gate's own parameters, and vice versa.
+   *
+   * Normalizes downward at every level: a field set back to its default is deleted, an emptied
+   * `gateConfig` is dropped, and an emptied options bag becomes `null`. So a step returned to the
+   * defaults persists nothing at all — the same rule the other per-step options follow, and what
+   * keeps an all-default pipeline from growing a `step_options` array it does not need.
+   *
+   * An empty approver policy is dropped rather than stored, and that one is not just tidiness:
+   * `{ roles: [] }` names nobody, and a policy naming nobody would refuse every approver and park
+   * the run forever. "No rule" has to persist as an ABSENT rule.
+   */
+  function patchDraftGateConfig(index: number, patch: Partial<StepGateConfig>) {
+    const gateConfig: StepGateConfig = { ...draftGateConfig(index), ...patch }
+    if (!hasApproverPolicy(gateConfig.approvers)) delete gateConfig.approvers
+    if (gateConfig.minApprovals !== undefined && gateConfig.minApprovals <= 1) {
+      delete gateConfig.minApprovals
+    }
+    if (gateConfig.fields && Object.keys(gateConfig.fields).length === 0) delete gateConfig.fields
+    const next: StepOptions = { ...draftStepOptions.value[index] }
+    if (Object.keys(gateConfig).length) next.gateConfig = gateConfig
+    else delete next.gateConfig
+    draftStepOptions.value[index] = Object.keys(next).length ? next : null
+  }
+
+  return { draftGateConfig, patchDraftGateConfig }
+}

package/app/stores/pipelines/draftStepConfig.ts

@@ -7,7 +7,8 @@ import { defaultConsensusConfig, type PipelinesContext } from './context'
  * consensus-GROUP tier set), the human approval gate, the estimate gate on a companion step, the
  * follow-up and test-QC companions, the per-step enable flag, and the `StepOptions` bag
  * (requirements auto-recommendation, the picked skill, the picked agent-kind variant, the
- * per-step output-token ceiling, the binary-output storage/context selection).
+ * per-step output-token ceiling, the binary-output storage/context selection). The step's GATE
+ * configuration is the sibling `./draftGateConfig`, which explains why it is not here.
  *
  * Split out of `./draftActions`, which owns the draft's STRUCTURE (insert / remove / reorder /
  * units). Every function here reads and writes one of the parallel per-step arrays at an index and

package/app/stores/pipelines.ts

@@ -1,7 +1,7 @@
 import { defineStore } from 'pinia'
 import { ref } from 'vue'
 import type { Pipeline } from '~/types/domain'
-import type { PipelinePurpose, RetiredPipelineWire } from '@cat-factory/contracts'
+import type { GateConfigForm, PipelinePurpose, RetiredPipelineWire } from '@cat-factory/contracts'
 import { useUpsertList } from '~/composables/useUpsertList'
 import { createDraftStepState, type PipelinesContext } from '~/stores/pipelines/context'
 import { createPipelineDraftActions } from '~/stores/pipelines/draftActions'
@@ -39,6 +39,13 @@ export const usePipelinesStore = defineStore('pipelines', () => {
    * `usePipelineHealth`). Disjoint from {@link catalogVersions} by construction.
    */
   const retiredPipelines = ref<RetiredPipelineWire[]>([])
+  /**
+   * The per-step parameters each registered GATE declares, projected from the deployment's gate
+   * registry onto the board snapshot. The builder renders a gated step's own config form from
+   * these, so what it can save is exactly what run admission validates. Empty on a deployment
+   * whose gates declare nothing.
+   */
+  const gateConfigForms = ref<GateConfigForm[]>([])
 
   // The per-step, index-aligned draft arrays (kept in lockstep — see `createDraftStepState`).
   const {
@@ -83,6 +90,16 @@ export const usePipelinesStore = defineStore('pipelines', () => {
     retiredPipelines.value = retired ?? []
   }
 
+  /**
+   * Replace the registered gates' declared config forms from a snapshot. Applied even when EMPTY,
+   * for the reason `retired` is: carrying the previous board's forward would offer a form for a
+   * parameter this deployment's gates do not declare, and a value saved through it would then be
+   * refused at save by the very registry that never declared it.
+   */
+  function hydrateGateConfigForms(forms: GateConfigForm[]) {
+    gateConfigForms.value = forms
+  }
+
   function getPipeline(id: string) {
     return pipelines.value.find((p) => p.id === id)
   }
@@ -117,6 +134,7 @@ export const usePipelinesStore = defineStore('pipelines', () => {
     pipelines,
     catalogVersions,
     retiredPipelines,
+    gateConfigForms,
     draft,
     draftGates,
     draftEnabled,
@@ -132,6 +150,7 @@ export const usePipelinesStore = defineStore('pipelines', () => {
     draftDescription,
     editingId,
     hydrate,
+    hydrateGateConfigForms,
     getPipeline,
     ...draftActions,
     ...persistence,

package/app/stores/publicApiKeys.spec.ts

@@ -12,6 +12,7 @@ function key(over: Partial<PublicApiKey> = {}): PublicApiKey {
     label: 'CI',
     scope: 'write',
     createdByUserId: null,
+    createdByKeyId: null,
     createdAt: 1,
     lastUsedAt: null,
     revokedAt: null,

package/app/stores/workspace/hydrate.ts

@@ -114,6 +114,9 @@ export function applySnapshotToStores(snapshot: WorkspaceSnapshot, boardSince?:
     snapshot.binaryGeneratorsUnavailable === true,
   )
   useTaskTypesStore().hydrateCapabilities(capabilities)
+  // The per-step parameters each registered gate declares, so a gated step's config form in the
+  // builder comes from the gate's own registration rather than a form hard-coded per gate.
+  usePipelinesStore().hydrateGateConfigForms(snapshot.gateConfigForms ?? [])
   // The account's repo-sourced Claude Skills catalog (shared across its workspaces), so the
   // pipeline builder's per-step skill picker has its options. A straight replace.
   useSkillsStore().hydrate(snapshot.skills ?? [])

package/app/types/domain.ts

@@ -73,6 +73,11 @@ export type {
   DescriptorField,
   DescriptorFieldValue,
   DescriptorFieldValues,
+  // Per-step GATE configuration: who may resolve a human approval gate, how many of them, and
+  // the parameters the step's registered gate declares (`contracts/src/gate-config.ts`).
+  GateApproverPolicy,
+  GateConfigForm,
+  StepGateConfig,
   Pipeline,
   PipelinePurpose,
   SpendStatus,

package/i18n/locales/de.json

@@ -699,6 +699,7 @@
         "neverUsed": "nie verwendet",
         "createdBy": "erstellt von {user}",
         "createdByYou": "Ihnen",
+        "createdByKey": "API-Schlüssel {id}",
         "revoke": "Token widerrufen"
       },
       "add": {
@@ -1985,7 +1986,12 @@
         "notRun": "nicht ausgeführt",
         "attempts": "Versuch {attempts} von {maxAttempts}",
         "omittedTestPaths": "{count} deklarierte Testdatei wurde vor dem Nachweis verworfen, daher wurde der Stand vor dem Fix aus einer unvollständigen Reproduktion aufgebaut. | {count} deklarierte Testdateien wurden vor dem Nachweis verworfen, daher wurde der Stand vor dem Fix aus einer unvollständigen Reproduktion aufgebaut."
-      }
+      },
+      "quorumProgress": "{recorded} von {required} Freigaben",
+      "quorumYours": "(deine ist gezählt)",
+      "quorumEditLocked": "Korrekturen sind möglich, sobald deine Freigabe dieses Gate auflöst. Bis dahin unverändert freigeben oder Änderungen anfordern.",
+      "notAnApprover": "Dieses Gate benennt, wer es auflösen darf, und du gehörst nicht dazu.",
+      "approverIdentityRequired": "Dieses Gate benennt, wer es auflösen darf; eine dieser Personen muss dafür angemeldet sein."
     },
     "inspector": {
       "frameStatus": {
@@ -4129,6 +4135,17 @@
       "hint": "Der Höchstumfang einer einzelnen Antwort dieses Agenten. Leer lassen heißt vom nächsthöheren Level erben, nicht das Limit aufheben. Der Wert eines Pipeline-Schritts sticht die Vorgabe des Workspace.",
       "inherits": "Übernommen",
       "inheritsValue": "Übernommen ({tokens})"
+    },
+    "gateConfig": {
+      "approversLabel": "Wer freigeben darf",
+      "roleAdmin": "Administratoren",
+      "roleMember": "Mitglieder",
+      "namedApproversLabel": "Benannte Freigebende",
+      "namedApproversPlaceholder": "Alle mit Schreibrecht",
+      "requiredApprovalsLabel": "Erforderliche Freigaben",
+      "requiredApprovalsHint": "Jeweils von einer anderen Person, bevor der Lauf fortgesetzt wird.",
+      "anyoneHint": "Alle, die dieses Board bearbeiten dürfen, können diesen Schritt freigeben.",
+      "gateParametersLabel": "Gate-Einstellungen"
     }
   },
   "agentPrompt": {

package/i18n/locales/en.json

@@ -1544,7 +1544,12 @@
         "attempts": "Attempt {attempts} of {maxAttempts}",
         "omittedTestPaths": "{count} declared test file was dropped before the proof ran, so the pre-fix tree was rebuilt from an incomplete reproduction. | {count} declared test files were dropped before the proof ran, so the pre-fix tree was rebuilt from an incomplete reproduction.",
         "@omittedTestPaths": "Plural form required. A dropped file can leave the pre-fix tree without the reproduction, which makes the check pass there and wrongly reads as 'the test does not capture the defect'."
-      }
+      },
+      "quorumProgress": "{recorded} of {required} approvals",
+      "quorumYours": "(yours counted)",
+      "quorumEditLocked": "Corrections can be typed once yours is the approval that clears this gate. Until then, approve as-is or request changes.",
+      "notAnApprover": "This gate names who may resolve it, and you are not one of them.",
+      "approverIdentityRequired": "This gate names who may resolve it, so it has to be resolved by one of those people signed in."
     },
     "inspector": {
       "frameStatus": {
@@ -3185,6 +3190,7 @@
         "neverUsed": "never used",
         "createdBy": "created by {user}",
         "createdByYou": "you",
+        "createdByKey": "API key {id}",
         "revoke": "Revoke token"
       },
       "add": {
@@ -4643,6 +4649,17 @@
       "hint": "The most a single reply from this agent may run to. Leave it empty to inherit the next level up rather than to lift the limit. A pipeline step's own value wins over the workspace default.",
       "inherits": "Inherited",
       "inheritsValue": "Inherited ({tokens})"
+    },
+    "gateConfig": {
+      "approversLabel": "Who may approve",
+      "roleAdmin": "Admins",
+      "roleMember": "Members",
+      "namedApproversLabel": "Named approvers",
+      "namedApproversPlaceholder": "Anyone entitled to write",
+      "requiredApprovalsLabel": "Approvals required",
+      "requiredApprovalsHint": "Each from a different person before the run continues.",
+      "anyoneHint": "Anyone who can edit this board may approve this step.",
+      "gateParametersLabel": "Gate settings"
     }
   },
   "agentPrompt": {

package/i18n/locales/es.json

@@ -1455,7 +1455,12 @@
         "notRun": "no ejecutado",
         "attempts": "Intento {attempts} de {maxAttempts}",
         "omittedTestPaths": "Se descartó {count} archivo de prueba declarado antes de ejecutar la prueba, por lo que el árbol previo a la corrección se reconstruyó a partir de una reproducción incompleta. | Se descartaron {count} archivos de prueba declarados antes de ejecutar la prueba, por lo que el árbol previo a la corrección se reconstruyó a partir de una reproducción incompleta."
-      }
+      },
+      "quorumProgress": "{recorded} de {required} aprobaciones",
+      "quorumYours": "(la tuya está contada)",
+      "quorumEditLocked": "Podrás escribir correcciones cuando tu aprobación sea la que libere esta puerta. Hasta entonces, aprueba tal cual o solicita cambios.",
+      "notAnApprover": "Esta compuerta designa quién puede resolverla y tú no estás en la lista.",
+      "approverIdentityRequired": "Esta compuerta designa quién puede resolverla, así que debe resolverla una de esas personas con la sesión iniciada."
     },
     "inspector": {
       "frameStatus": {
@@ -2937,6 +2942,7 @@
         "neverUsed": "nunca usado",
         "createdBy": "creado por {user}",
         "createdByYou": "ti",
+        "createdByKey": "la clave de API {id}",
         "revoke": "Revocar token"
       },
       "add": {
@@ -4510,6 +4516,17 @@
       "hint": "El maximo al que puede llegar una sola respuesta de este agente. Dejarlo vacio hereda del nivel superior; no elimina el limite. El valor propio de un paso del pipeline prevalece sobre el predeterminado del espacio de trabajo.",
       "inherits": "Heredado",
       "inheritsValue": "Heredado ({tokens})"
+    },
+    "gateConfig": {
+      "approversLabel": "Quién puede aprobar",
+      "roleAdmin": "Administradores",
+      "roleMember": "Miembros",
+      "namedApproversLabel": "Aprobadores designados",
+      "namedApproversPlaceholder": "Cualquiera con permiso de escritura",
+      "requiredApprovalsLabel": "Aprobaciones necesarias",
+      "requiredApprovalsHint": "Cada una de una persona distinta antes de que la ejecución continúe.",
+      "anyoneHint": "Cualquiera que pueda editar este tablero puede aprobar este paso.",
+      "gateParametersLabel": "Ajustes de la compuerta"
     }
   },
   "agentPrompt": {

package/i18n/locales/fr.json

@@ -1455,7 +1455,12 @@
         "notRun": "non exécuté",
         "attempts": "Tentative {attempts} sur {maxAttempts}",
         "omittedTestPaths": "{count} fichier de test déclaré a été écarté avant l’exécution de la preuve, l’arbre d’avant le correctif a donc été reconstruit à partir d’une reproduction incomplète. | {count} fichiers de test déclarés ont été écartés avant l’exécution de la preuve, l’arbre d’avant le correctif a donc été reconstruit à partir d’une reproduction incomplète."
-      }
+      },
+      "quorumProgress": "{recorded} approbations sur {required}",
+      "quorumYours": "(la vôtre est comptée)",
+      "quorumEditLocked": "Les corrections seront possibles quand votre approbation sera celle qui libère ce point de contrôle. D'ici là, approuvez tel quel ou demandez des modifications.",
+      "notAnApprover": "Ce contrôle désigne qui peut le lever, et vous n'en faites pas partie.",
+      "approverIdentityRequired": "Ce contrôle désigne qui peut le lever : l'une de ces personnes doit être connectée pour le faire."
     },
     "inspector": {
       "frameStatus": {
@@ -2937,6 +2942,7 @@
         "neverUsed": "jamais utilisé",
         "createdBy": "créé par {user}",
         "createdByYou": "vous",
+        "createdByKey": "la clé d’API {id}",
         "revoke": "Révoquer le jeton"
       },
       "add": {
@@ -4510,6 +4516,17 @@
       "hint": "La longueur maximale d'une seule reponse de cet agent. Laisser vide herite du niveau superieur, cela ne leve pas la limite. La valeur propre a une etape du pipeline l'emporte sur la valeur par defaut de l'espace de travail.",
       "inherits": "Hérité",
       "inheritsValue": "Hérité ({tokens})"
+    },
+    "gateConfig": {
+      "approversLabel": "Qui peut approuver",
+      "roleAdmin": "Administrateurs",
+      "roleMember": "Membres",
+      "namedApproversLabel": "Approbateurs désignés",
+      "namedApproversPlaceholder": "Toute personne autorisée à écrire",
+      "requiredApprovalsLabel": "Approbations requises",
+      "requiredApprovalsHint": "Chacune d'une personne différente avant que l'exécution reprenne.",
+      "anyoneHint": "Toute personne pouvant modifier ce tableau peut approuver cette étape.",
+      "gateParametersLabel": "Paramètres du contrôle"
     }
   },
   "agentPrompt": {

package/i18n/locales/he.json

@@ -1455,7 +1455,12 @@
         "notRun": "לא הורץ",
         "attempts": "ניסיון {attempts} מתוך {maxAttempts}",
         "omittedTestPaths": "קובץ בדיקה אחד שהוצהר הושמט לפני הרצת ההוכחה, ולכן העץ שלפני התיקון נבנה משחזור חלקי. | שני קובצי בדיקה שהוצהרו הושמטו לפני הרצת ההוכחה, ולכן העץ שלפני התיקון נבנה משחזור חלקי. | {count} קובצי בדיקה שהוצהרו הושמטו לפני הרצת ההוכחה, ולכן העץ שלפני התיקון נבנה משחזור חלקי."
-      }
+      },
+      "quorumProgress": "{recorded} מתוך {required} אישורים",
+      "quorumYours": "(שלך נספר)",
+      "quorumEditLocked": "אפשר להקליד תיקונים כאשר האישור שלך יהיה זה שפותח את השער. עד אז, אשר כמות שהוא או בקש שינויים.",
+      "notAnApprover": "השער הזה מגדיר מי רשאי לפתור אותו, ואינך אחד מהם.",
+      "approverIdentityRequired": "השער הזה מגדיר מי רשאי לפתור אותו, ולכן אחד מאותם אנשים חייב להיות מחובר."
     },
     "inspector": {
       "frameStatus": {
@@ -3078,6 +3083,7 @@
         "neverUsed": "מעולם לא היה בשימוש",
         "createdBy": "נוצר על ידי {user}",
         "createdByYou": "אתה",
+        "createdByKey": "מפתח API {id}",
         "revoke": "בטל אסימון"
       },
       "add": {
@@ -4510,6 +4516,17 @@
       "hint": "המקסימום לתשובה בודדת של הסוכן הזה. השארה ריקה יורשת מהרמה שמעל, ואינה מבטלת את המגבלה. ערך של שלב בצינור גובר על ברירת המחדל של סביבת העבודה.",
       "inherits": "בירושה",
       "inheritsValue": "בירושה ({tokens})"
+    },
+    "gateConfig": {
+      "approversLabel": "מי רשאי לאשר",
+      "roleAdmin": "מנהלים",
+      "roleMember": "חברים",
+      "namedApproversLabel": "מאשרים ייעודיים",
+      "namedApproversPlaceholder": "כל מי שרשאי לערוך",
+      "requiredApprovalsLabel": "אישורים נדרשים",
+      "requiredApprovalsHint": "כל אחד מאדם אחר, לפני שההרצה ממשיכה.",
+      "anyoneHint": "כל מי שיכול לערוך את הלוח הזה רשאי לאשר את השלב.",
+      "gateParametersLabel": "הגדרות השער"
     }
   },
   "agentPrompt": {

package/i18n/locales/it.json

@@ -699,6 +699,7 @@
         "neverUsed": "mai utilizzato",
         "createdBy": "creato da {user}",
         "createdByYou": "te",
+        "createdByKey": "la chiave API {id}",
         "revoke": "Revoca token"
       },
       "add": {
@@ -1985,7 +1986,12 @@
         "notRun": "non eseguito",
         "attempts": "Tentativo {attempts} di {maxAttempts}",
         "omittedTestPaths": "{count} file di test dichiarato è stato scartato prima dell’esecuzione della prova, quindi l’albero precedente alla correzione è stato ricostruito da una riproduzione incompleta. | {count} file di test dichiarati sono stati scartati prima dell’esecuzione della prova, quindi l’albero precedente alla correzione è stato ricostruito da una riproduzione incompleta."
-      }
+      },
+      "quorumProgress": "{recorded} di {required} approvazioni",
+      "quorumYours": "(la tua è conteggiata)",
+      "quorumEditLocked": "Le correzioni si potranno scrivere quando la tua approvazione sarà quella che sblocca questo gate. Fino ad allora, approva così com'è o richiedi modifiche.",
+      "notAnApprover": "Questo gate indica chi può risolverlo e tu non sei tra loro.",
+      "approverIdentityRequired": "Questo gate indica chi può risolverlo, quindi deve farlo una di quelle persone dopo aver effettuato l’accesso."
     },
     "inspector": {
       "frameStatus": {
@@ -4129,6 +4135,17 @@
       "hint": "Il massimo a cui puo arrivare una singola risposta di questo agente. Lasciarlo vuoto eredita dal livello superiore, non toglie il limite. Il valore di uno step della pipeline prevale sul predefinito dello spazio di lavoro.",
       "inherits": "Ereditato",
       "inheritsValue": "Ereditato ({tokens})"
+    },
+    "gateConfig": {
+      "approversLabel": "Chi può approvare",
+      "roleAdmin": "Amministratori",
+      "roleMember": "Membri",
+      "namedApproversLabel": "Approvatori designati",
+      "namedApproversPlaceholder": "Chiunque abbia permessi di scrittura",
+      "requiredApprovalsLabel": "Approvazioni richieste",
+      "requiredApprovalsHint": "Ciascuna da una persona diversa prima che l'esecuzione prosegua.",
+      "anyoneHint": "Chiunque possa modificare questa board può approvare questo passo.",
+      "gateParametersLabel": "Impostazioni del gate"
     }
   },
   "agentPrompt": {

package/i18n/locales/ja.json

@@ -1455,7 +1455,12 @@
         "notRun": "未実行",
         "attempts": "{maxAttempts} 回中 {attempts} 回目の試行",
         "omittedTestPaths": "宣言されたテストファイル {count} 件が証跡の実行前に除外されたため、修正前のツリーは不完全な再現から再構築されました。 | 宣言されたテストファイル {count} 件が証跡の実行前に除外されたため、修正前のツリーは不完全な再現から再構築されました。"
-      }
+      },
+      "quorumProgress": "承認 {recorded} / {required}",
+      "quorumYours": "(あなたの承認は集計済み)",
+      "quorumEditLocked": "このゲートを解除する承認があなたのものになった時点で、修正を入力できます。それまでは、そのまま承認するか変更を依頼してください。",
+      "notAnApprover": "このゲートは解除できる人を指定しており、あなたは含まれていません。",
+      "approverIdentityRequired": "このゲートは解除できる人を指定しているため、その人がサインインして解除する必要があります。"
     },
     "inspector": {
       "frameStatus": {
@@ -3078,6 +3083,7 @@
         "neverUsed": "未使用",
         "createdBy": "作成者: {user}",
         "createdByYou": "あなた",
+        "createdByKey": "APIキー {id}",
         "revoke": "トークンを取り消す"
       },
       "add": {
@@ -4510,6 +4516,17 @@
       "hint": "このエージェントの1回の応答の上限です。空欄にすると上位の設定を継承します。上限が無くなるわけではありません。パイプラインのステップに設定した値はワークスペースの既定値より優先されます。",
       "inherits": "継承",
       "inheritsValue": "継承（{tokens}）"
+    },
+    "gateConfig": {
+      "approversLabel": "承認できる人",
+      "roleAdmin": "管理者",
+      "roleMember": "メンバー",
+      "namedApproversLabel": "指名した承認者",
+      "namedApproversPlaceholder": "書き込み権限のある全員",
+      "requiredApprovalsLabel": "必要な承認数",
+      "requiredApprovalsHint": "実行を再開する前に、それぞれ別の人からの承認が必要です。",
+      "anyoneHint": "このボードを編集できる人なら誰でもこのステップを承認できます。",
+      "gateParametersLabel": "ゲートの設定"
     }
   },
   "agentPrompt": {

package/i18n/locales/pl.json

@@ -1455,7 +1455,12 @@
         "notRun": "nie uruchomiono",
         "attempts": "Próba {attempts} z {maxAttempts}",
         "omittedTestPaths": "Przed uruchomieniem dowodu pominięto {count} zadeklarowany plik testowy, więc drzewo sprzed poprawki odtworzono z niepełnej reprodukcji. | Przed uruchomieniem dowodu pominięto {count} zadeklarowane pliki testowe, więc drzewo sprzed poprawki odtworzono z niepełnej reprodukcji. | Przed uruchomieniem dowodu pominięto {count} zadeklarowanych plików testowych, więc drzewo sprzed poprawki odtworzono z niepełnej reprodukcji."
-      }
+      },
+      "quorumProgress": "{recorded} z {required} zatwierdzeń",
+      "quorumYours": "(twoje jest policzone)",
+      "quorumEditLocked": "Poprawki będzie można wpisać, gdy Twoja akceptacja odblokuje tę bramkę. Do tego czasu zatwierdź bez zmian lub poproś o zmiany.",
+      "notAnApprover": "Ta bramka wskazuje, kto może ją rozstrzygnąć, a ciebie na tej liście nie ma.",
+      "approverIdentityRequired": "Ta bramka wskazuje, kto może ją rozstrzygnąć, więc musi to zrobić jedna z tych osób po zalogowaniu."
     },
     "inspector": {
       "frameStatus": {
@@ -2937,6 +2942,7 @@
         "neverUsed": "nigdy nie użyto",
         "createdBy": "utworzone przez {user}",
         "createdByYou": "Ciebie",
+        "createdByKey": "klucz API {id}",
         "revoke": "Unieważnij token"
       },
       "add": {
@@ -4510,6 +4516,17 @@
       "hint": "Maksymalna długość pojedynczej odpowiedzi tego agenta. Puste pole dziedziczy wartość z wyższego poziomu, a nie znosi limitu. Wartość ustawiona na kroku pipeline'u ma pierwszeństwo przed domyślną wartością obszaru roboczego.",
       "inherits": "Odziedziczone",
       "inheritsValue": "Odziedziczone ({tokens})"
+    },
+    "gateConfig": {
+      "approversLabel": "Kto może zatwierdzić",
+      "roleAdmin": "Administratorzy",
+      "roleMember": "Członkowie",
+      "namedApproversLabel": "Wskazane osoby zatwierdzające",
+      "namedApproversPlaceholder": "Każdy z prawem zapisu",
+      "requiredApprovalsLabel": "Wymagane zatwierdzenia",
+      "requiredApprovalsHint": "Każde od innej osoby, zanim przebieg ruszy dalej.",
+      "anyoneHint": "Każdy, kto może edytować tę tablicę, może zatwierdzić ten krok.",
+      "gateParametersLabel": "Ustawienia bramki"
     }
   },
   "agentPrompt": {

package/i18n/locales/tr.json

@@ -1455,7 +1455,12 @@
         "notRun": "çalıştırılmadı",
         "attempts": "{maxAttempts} denemeden {attempts}. deneme",
         "omittedTestPaths": "Kanıt çalıştırılmadan önce bildirilen {count} test dosyası atıldı; bu yüzden düzeltme öncesi ağaç eksik bir yeniden üretimden kuruldu. | Kanıt çalıştırılmadan önce bildirilen {count} test dosyası atıldı; bu yüzden düzeltme öncesi ağaç eksik bir yeniden üretimden kuruldu."
-      }
+      },
+      "quorumProgress": "{required} onaydan {recorded} tanesi",
+      "quorumYours": "(seninki sayıldı)",
+      "quorumEditLocked": "Bu geçidi açan onay sizinki olduğunda düzeltme yazabilirsiniz. O ana kadar olduğu gibi onaylayın ya da değişiklik isteyin.",
+      "notAnApprover": "Bu kapı kimlerin karar verebileceğini belirtiyor ve sen bunlardan biri değilsin.",
+      "approverIdentityRequired": "Bu kapı kimlerin karar verebileceğini belirtiyor; bu kişilerden biri oturum açarak karar vermeli."
     },
     "inspector": {
       "frameStatus": {
@@ -3078,6 +3083,7 @@
         "neverUsed": "hiç kullanılmadı",
         "createdBy": "oluşturan: {user}",
         "createdByYou": "siz",
+        "createdByKey": "{id} API anahtarı",
         "revoke": "Belirteci iptal et"
       },
       "add": {
@@ -4510,6 +4516,17 @@
       "hint": "Bu ajanın tek bir yanıtının ulaşabileceği üst sınır. Boş bırakmak sınırı kaldırmaz, bir üst seviyeden devralır. Pipeline adımının kendi değeri çalışma alanı varsayılanını geçersiz kılar.",
       "inherits": "Devralındı",
       "inheritsValue": "Devralındı ({tokens})"
+    },
+    "gateConfig": {
+      "approversLabel": "Kimler onaylayabilir",
+      "roleAdmin": "Yöneticiler",
+      "roleMember": "Üyeler",
+      "namedApproversLabel": "Adı geçen onaylayıcılar",
+      "namedApproversPlaceholder": "Yazma yetkisi olan herkes",
+      "requiredApprovalsLabel": "Gereken onay sayısı",
+      "requiredApprovalsHint": "Çalışma devam etmeden önce her biri farklı bir kişiden.",
+      "anyoneHint": "Bu panoyu düzenleyebilen herkes bu adımı onaylayabilir.",
+      "gateParametersLabel": "Kapı ayarları"
     }
   },
   "agentPrompt": {

package/i18n/locales/uk.json

@@ -1455,7 +1455,12 @@
         "notRun": "не запускалося",
         "attempts": "Спроба {attempts} з {maxAttempts}",
         "omittedTestPaths": "Перед запуском доказу пропущено {count} оголошений тестовий файл, тож дерево до виправлення відтворено з неповної репродукції. | Перед запуском доказу пропущено {count} оголошені тестові файли, тож дерево до виправлення відтворено з неповної репродукції. | Перед запуском доказу пропущено {count} оголошених тестових файлів, тож дерево до виправлення відтворено з неповної репродукції."
-      }
+      },
+      "quorumProgress": "{recorded} із {required} схвалень",
+      "quorumYours": "(твоє враховано)",
+      "quorumEditLocked": "Виправлення можна буде ввести, коли саме твоє схвалення відкриє цей шлюз. До того часу схвали як є або попроси зміни.",
+      "notAnApprover": "Цей шлюз називає, хто може його розв’язати, і тебе серед них немає.",
+      "approverIdentityRequired": "Цей шлюз називає, хто може його розв’язати, тож це має зробити одна з тих людей, увійшовши в систему."
     },
     "inspector": {
       "frameStatus": {
@@ -2937,6 +2942,7 @@
         "neverUsed": "ніколи не використовувався",
         "createdBy": "створено {user}",
         "createdByYou": "вами",
+        "createdByKey": "ключ API {id}",
         "revoke": "Відкликати токен"
       },
       "add": {
@@ -4510,6 +4516,17 @@
       "hint": "Максимум для однієї відповіді цього агента. Порожнє поле успадковує значення з вищого рівня, а не знімає обмеження. Значення кроку пайплайна має перевагу над типовим значенням робочого простору.",
       "inherits": "Успадковано",
       "inheritsValue": "Успадковано ({tokens})"
+    },
+    "gateConfig": {
+      "approversLabel": "Хто може схвалити",
+      "roleAdmin": "Адміністратори",
+      "roleMember": "Учасники",
+      "namedApproversLabel": "Названі схвалювачі",
+      "namedApproversPlaceholder": "Будь-хто з правом запису",
+      "requiredApprovalsLabel": "Потрібно схвалень",
+      "requiredApprovalsHint": "Кожне від іншої людини, перш ніж запуск продовжиться.",
+      "anyoneHint": "Будь-хто, хто може редагувати цю дошку, може схвалити цей крок.",
+      "gateParametersLabel": "Налаштування шлюзу"
     }
   },
   "agentPrompt": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/app",
-  "version": "0.224.0",
+  "version": "0.225.0",
   "description": "Reusable Nuxt layer for the Agent Architecture Board SPA (components, stores, composables, pages). Consume it from a thin deployment app via `extends: ['@cat-factory/app']` and point it at your backend with NUXT_PUBLIC_API_BASE. See deploy/frontend for an example.",
   "repository": {
     "type": "git",
@@ -40,7 +40,7 @@
     "valibot": "^1.4.2",
     "vue": "3.5.40",
     "wretch": "^3.0.9",
-    "@cat-factory/contracts": "0.240.0"
+    "@cat-factory/contracts": "0.242.0"
   },
   "devDependencies": {
     "@toad-contracts/testing": "0.3.2",