@cat-factory/app 0.261.3 → 0.261.5

package/app/components/settings/KubernetesEngineForm.vue

@@ -65,6 +65,9 @@ const form = reactive({
   imageTemplate: '',
   urlSource: 'ingressTemplate' as UrlSource,
   hostTemplate: '',
+  // The ingress-template port, separate from `servicePort`: each url field belongs to exactly ONE
+  // variant, so a value entered for one source can never populate a config built for another.
+  ingressPort: '',
   ingressName: '',
   serviceName: '',
   servicePort: '',
@@ -121,28 +124,34 @@ watch(
     form.insecureSkipTlsVerify = k.insecureSkipTlsVerify === true
     form.namespaceTemplate = k.namespaceTemplate ?? ''
     form.imageTemplate = k.imageTemplate ?? ''
-    // Each url field is read off the ONE variant that carries it, so a field belonging to a
-    // different `source` cannot silently populate the form.
-    //
-    // Typed as present with an on-union `source`, read as neither: both were true when the
-    // connect form admitted this config, and the value has been through storage since — which is
-    // exactly why the backend re-parses a stored `providerConfig` rather than asserting it, and
-    // this form is where an operator REPAIRS one that drifted. An unrecognised source falls back
-    // to the form's default, because `buildUrl` has no branch to build a config out of one.
-    const url: KubeUrlSource | undefined = k.url
-    const source = url?.source
-    form.urlSource = isKubernetesUrlSource(source) ? source : 'ingressTemplate'
-    form.hostTemplate = url?.source === 'ingressTemplate' ? url.hostTemplate : ''
-    form.ingressName = url?.source === 'ingressStatus' ? (url.ingressName ?? '') : ''
-    form.serviceName = url?.source === 'serviceStatus' ? url.serviceName : ''
-    form.servicePort = url?.source === 'serviceStatus' && url.port != null ? String(url.port) : ''
-    form.gatewayName = url?.source === 'gatewayStatus' ? (url.gatewayName ?? '') : ''
-    form.httpRouteName = url?.source === 'httpRouteStatus' ? (url.httpRouteName ?? '') : ''
-    form.urlScheme = url?.scheme ?? 'default'
+    applyStoredUrlSource(k.url)
   },
   { immediate: true },
 )
 
+/**
+ * Prefill the URL-derivation fields from a stored config. Each field is read off the ONE variant
+ * that carries it, so a field belonging to a different `source` cannot silently populate the form.
+ *
+ * Typed as present with an on-union `source`, read as neither: both were true when the connect form
+ * admitted this config, and the value has been through storage since, which is exactly why the
+ * backend re-parses a stored `providerConfig` rather than asserting it, and this form is where an
+ * operator REPAIRS one that drifted. An unrecognised source falls back to the form's default,
+ * because `buildUrl` has no branch to build a config out of one.
+ */
+function applyStoredUrlSource(url: KubeUrlSource | undefined): void {
+  const source = url?.source
+  form.urlSource = isKubernetesUrlSource(source) ? source : 'ingressTemplate'
+  form.hostTemplate = url?.source === 'ingressTemplate' ? url.hostTemplate : ''
+  form.ingressPort = url?.source === 'ingressTemplate' && url.port != null ? String(url.port) : ''
+  form.ingressName = url?.source === 'ingressStatus' ? (url.ingressName ?? '') : ''
+  form.serviceName = url?.source === 'serviceStatus' ? url.serviceName : ''
+  form.servicePort = url?.source === 'serviceStatus' && url.port != null ? String(url.port) : ''
+  form.gatewayName = url?.source === 'gatewayStatus' ? (url.gatewayName ?? '') : ''
+  form.httpRouteName = url?.source === 'httpRouteStatus' ? (url.httpRouteName ?? '') : ''
+  form.urlScheme = url?.scheme ?? 'default'
+}
+
 // The local-cluster apiserver address every loopback distro (k3s / k3d / kind / minikube)
 // exposes by default — see `seedForEngine`.
 const LOCAL_K3S_API_SERVER = 'https://127.0.0.1:6443'
@@ -185,22 +194,33 @@ watch(
     if (prefill.insecureSkipTlsVerify !== undefined)
       form.insecureSkipTlsVerify = prefill.insecureSkipTlsVerify
     if (prefill.namespaceTemplate.trim()) form.namespaceTemplate = prefill.namespaceTemplate.trim()
+    // An EMPTY host template is meaningful, not a gap the link forgot to fill: the CLI withholds
+    // it when it could not establish that the cluster serves an ingress-derived URL, and leaving
+    // the required field blank is what stops a URL nothing answers being saved.
     if (prefill.hostTemplate.trim()) {
       form.urlSource = 'ingressTemplate'
       form.hostTemplate = prefill.hostTemplate.trim()
+      // Carried alongside the template, never inside it: a local cluster publishing its controller
+      // on 18080 needs the port in the URL and NOT in the Ingress host the manifests declare.
+      form.ingressPort = prefill.ingressPort.trim()
     }
+    if (prefill.urlScheme) form.urlScheme = prefill.urlScheme
   },
   { immediate: true },
 )
 
-const servicePortValid = computed(() => {
-  const raw = form.servicePort.trim()
-  if (!raw) return true
-  const port = Number(raw)
+/** A blank port is valid (the scheme's default); anything typed has to be a real port number. */
+function portValid(raw: string): boolean {
+  const trimmed = raw.trim()
+  if (!trimmed) return true
+  const port = Number(trimmed)
   return Number.isInteger(port) && port >= 1 && port <= 65535
-})
+}
+const servicePortValid = computed(() => portValid(form.servicePort))
+const ingressPortValid = computed(() => portValid(form.ingressPort))
 const urlValid = computed(() => {
-  if (form.urlSource === 'ingressTemplate') return !!form.hostTemplate.trim()
+  if (form.urlSource === 'ingressTemplate')
+    return !!form.hostTemplate.trim() && ingressPortValid.value
   if (form.urlSource === 'serviceStatus') return !!form.serviceName.trim() && servicePortValid.value
   return true // ingressStatus / gatewayStatus / httpRouteStatus have no required field
 })
@@ -257,8 +277,15 @@ const connectBlockedReason = computed(() => {
 function buildUrl(): KubeUrlSource {
   const scheme = form.urlScheme === 'default' ? {} : { scheme: form.urlScheme }
   switch (form.urlSource) {
-    case 'ingressTemplate':
-      return { source: 'ingressTemplate', hostTemplate: form.hostTemplate.trim(), ...scheme }
+    case 'ingressTemplate': {
+      const port = Number(form.ingressPort)
+      return {
+        source: 'ingressTemplate',
+        hostTemplate: form.hostTemplate.trim(),
+        ...(form.ingressPort.trim() && Number.isInteger(port) ? { port } : {}),
+        ...scheme,
+      }
+    }
     case 'ingressStatus': {
       const ingressName = form.ingressName.trim()
       return { source: 'ingressStatus', ...(ingressName ? { ingressName } : {}), ...scheme }
@@ -456,6 +483,24 @@ async function copyAutoSetupCommand() {
       />
     </UFormField>
 
+    <!-- The host port the controller answers on, when it is not the scheme's default. Separate from
+         the template on purpose: the rendered template is also the Ingress `host` the manifests
+         declare, and Kubernetes rejects a `host` with a port in it. -->
+    <UFormField
+      v-if="form.urlSource === 'ingressTemplate'"
+      :label="optional(t('settings.infrastructure.kubernetesEngine.port'))"
+      :help="t('settings.infrastructure.kubernetesEngine.ingressPortHelp')"
+    >
+      <UInput
+        v-model="form.ingressPort"
+        type="number"
+        :min="1"
+        :max="65535"
+        class="font-mono"
+        placeholder="80"
+      />
+    </UFormField>
+
     <UFormField
       v-if="form.urlSource === 'ingressStatus'"
       :label="optional(t('settings.infrastructure.kubernetesEngine.ingressName'))"

package/app/components/settings/KubernetesEnvironmentForm.vue

@@ -46,6 +46,9 @@ const form = reactive({
   // url derivation
   urlSource: 'ingressTemplate' as 'ingressTemplate' | 'ingressStatus' | 'serviceStatus',
   hostTemplate: '',
+  // The ingress-template port, its own field because the rendered template is also the Ingress
+  // `host` a service's manifests declare, and Kubernetes rejects a `host` carrying a port.
+  ingressPort: '',
   ingressName: '',
   serviceName: '',
   servicePort: '',
@@ -111,6 +114,7 @@ function applyUrl(k: Record<string, unknown>): void {
   if (url?.source === 'ingressTemplate') {
     form.urlSource = 'ingressTemplate'
     form.hostTemplate = readString(url.hostTemplate)
+    form.ingressPort = typeof url.port === 'number' ? String(url.port) : ''
   } else if (url?.source === 'ingressStatus') {
     form.urlSource = 'ingressStatus'
     form.ingressName = readString(url.ingressName)
@@ -154,16 +158,20 @@ const manifestSourceValid = computed(() =>
     ? repoShapeValid.value && !!form.manifestPath.trim()
     : !!form.manifestPath.trim(),
 )
-// serviceStatus.port is an optional integer 1..65535 (kubernetesUrlSourceSchema). Validate
-// it here so a decimal isn't silently dropped and an out-of-range value isn't sent then 422'd.
-const servicePortValid = computed(() => {
-  const raw = form.servicePort.trim()
-  if (!raw) return true
-  const port = Number(raw)
+// Both `ingressTemplate.port` and `serviceStatus.port` are optional integers 1..65535
+// (kubernetesUrlSourceSchema). Validate here so a decimal isn't silently dropped and an
+// out-of-range value isn't sent then 422'd.
+function portValid(raw: string): boolean {
+  const trimmed = raw.trim()
+  if (!trimmed) return true
+  const port = Number(trimmed)
   return Number.isInteger(port) && port >= 1 && port <= 65535
-})
+}
+const servicePortValid = computed(() => portValid(form.servicePort))
+const ingressPortValid = computed(() => portValid(form.ingressPort))
 const urlValid = computed(() => {
-  if (form.urlSource === 'ingressTemplate') return !!form.hostTemplate.trim()
+  if (form.urlSource === 'ingressTemplate')
+    return !!form.hostTemplate.trim() && ingressPortValid.value
   if (form.urlSource === 'serviceStatus') return !!form.serviceName.trim() && servicePortValid.value
   return true // ingressStatus has no required field
 })
@@ -219,6 +227,8 @@ function buildUrl(): Record<string, unknown> {
   const url: Record<string, unknown> = { source: form.urlSource }
   if (form.urlSource === 'ingressTemplate') {
     url.hostTemplate = form.hostTemplate.trim()
+    const port = Number(form.ingressPort)
+    if (form.ingressPort.trim() && Number.isInteger(port)) url.port = port
   } else if (form.urlSource === 'ingressStatus') {
     if (form.ingressName.trim()) url.ingressName = form.ingressName.trim()
   } else {
@@ -338,6 +348,23 @@ function optional(label: string): string {
       />
     </UFormField>
 
+    <!-- The host port the controller answers on, when it is not the scheme's default. Kept out of
+         the template because that value is also the Ingress `host` the manifests declare. -->
+    <UFormField
+      v-if="form.urlSource === 'ingressTemplate'"
+      :label="optional(t('settings.providerConnection.kubernetesEnv.port'))"
+      :help="t('settings.providerConnection.kubernetesEnv.ingressPortHelp')"
+    >
+      <UInput
+        v-model="form.ingressPort"
+        type="number"
+        :min="1"
+        :max="65535"
+        class="font-mono"
+        placeholder="80"
+      />
+    </UFormField>
+
     <UFormField
       v-if="form.urlSource === 'ingressStatus'"
       :label="optional(t('settings.providerConnection.kubernetesEnv.ingressName'))"

package/app/components/settings/LocalContainerPoolSettings.vue

@@ -14,6 +14,7 @@ import { reactive, ref, watch } from 'vue'
 const { t } = useI18n()
 const store = useLocalSettingsStore()
 const toast = useToast()
+const { present } = usePipelineErrorToast()
 
 const saving = ref(false)
 
@@ -65,12 +66,7 @@ async function save() {
       color: 'success',
     })
   } catch (e) {
-    toast.add({
-      title: t('settings.localMode.toast.saveFailed'),
-      description: e instanceof Error ? e.message : String(e),
-      icon: 'i-lucide-triangle-alert',
-      color: 'error',
-    })
+    present(e, 'settings.localMode.toast.saveFailed')
   } finally {
     saving.value = false
   }

package/app/components/settings/LocalModelEndpointsPanel.vue

@@ -19,6 +19,7 @@ const { t } = useI18n()
 const ui = useUiStore()
 const store = useLocalModelsStore()
 const toast = useToast()
+const { present } = usePipelineErrorToast()
 const { confirm } = useConfirm()
 
 const open = computed({
@@ -96,15 +97,6 @@ watch(provider, (p) => {
   tested.value = false
 })
 
-function notifyError(title: string, e: unknown) {
-  toast.add({
-    title,
-    description: e instanceof Error ? e.message : String(e),
-    icon: 'i-lucide-triangle-alert',
-    color: 'error',
-  })
-}
-
 async function test() {
   if (!baseUrl.value.trim()) return
   testing.value = true
@@ -166,7 +158,7 @@ async function save() {
       color: 'success',
     })
   } catch (e) {
-    notifyError(t('settings.localModelEndpoints.toast.saveFailed'), e)
+    present(e, 'settings.localModelEndpoints.toast.saveFailed')
   } finally {
     busy.value = false
   }
@@ -195,7 +187,7 @@ async function remove(p: LocalRunner) {
     }
     toast.add({ title: t('settings.localModelEndpoints.toast.removed'), icon: 'i-lucide-check' })
   } catch (e) {
-    notifyError(t('settings.localModelEndpoints.toast.removeFailed'), e)
+    present(e, 'settings.localModelEndpoints.toast.removeFailed')
   } finally {
     busy.value = false
   }

package/app/components/settings/ModelConfigurationPanel.vue

@@ -32,6 +32,7 @@ const agents = useAgentsStore()
 const agentTier = useAgentTierStore()
 const creds = useVendorCredentialsStore()
 const workspace = useWorkspaceStore()
+const { present } = usePipelineErrorToast()
 const toast = useToast()
 const { confirm } = useConfirm()
 
@@ -180,7 +181,7 @@ async function setDefault(p: ModelPreset) {
   try {
     await presets.update(p.id, { isDefault: true })
   } catch (e) {
-    fail(t('settings.modelConfiguration.toast.setDefaultFailed'), e)
+    present(e, 'settings.modelConfiguration.toast.setDefaultFailed')
   } finally {
     busy.value = false
   }
@@ -199,7 +200,7 @@ async function remove(p: ModelPreset) {
   try {
     await presets.remove(p.id)
   } catch (e) {
-    fail(t('settings.modelConfiguration.toast.deleteFailed'), e)
+    present(e, 'settings.modelConfiguration.toast.deleteFailed')
   } finally {
     busy.value = false
   }
@@ -251,10 +252,15 @@ async function save() {
   const e = editor.value
   if (!e) return
   if (!e.name.trim()) {
-    fail(
-      t('settings.modelConfiguration.toast.nameRequiredTitle'),
-      new Error(t('settings.modelConfiguration.toast.nameRequiredBody')),
-    )
+    // NOT through `present`: that funnel classifies a BACKEND failure, and a synthesized local
+    // `Error` carries no envelope and no status, so it lands on the network-fault description and
+    // tells the user the server could not be reached about a check that never left the browser.
+    toast.add({
+      title: t('settings.modelConfiguration.toast.nameRequiredTitle'),
+      description: t('settings.modelConfiguration.toast.nameRequiredBody'),
+      color: 'warning',
+      icon: 'i-lucide-triangle-alert',
+    })
     return
   }
   busy.value = true
@@ -280,20 +286,11 @@ async function save() {
     }
     editor.value = null
   } catch (err) {
-    fail(t('settings.modelConfiguration.toast.saveFailed'), err)
+    present(err, 'settings.modelConfiguration.toast.saveFailed')
   } finally {
     busy.value = false
   }
 }
-
-function fail(title: string, e: unknown) {
-  toast.add({
-    title,
-    description: e instanceof Error ? e.message : String(e),
-    icon: 'i-lucide-triangle-alert',
-    color: 'error',
-  })
-}
 </script>
 
 <template>

package/app/components/settings/ModelPresetHealthModal.vue

@@ -9,7 +9,7 @@ const { t } = useI18n()
 const ui = useUiStore()
 const presets = useModelPresetsStore()
 const { newPresets, outdated, hasIssues } = useModelPresetHealth()
-const toast = useToast()
+const { present } = usePipelineErrorToast()
 
 const open = computed({
   get: () => ui.modelPresetHealthOpen,
@@ -28,12 +28,7 @@ async function reseed(id: string) {
   try {
     await presets.reseed(id)
   } catch (e) {
-    toast.add({
-      title: t('modelPreset.health.toast.reseedFailed'),
-      description: e instanceof Error ? e.message : String(e),
-      icon: 'i-lucide-triangle-alert',
-      color: 'error',
-    })
+    present(e, 'modelPreset.health.toast.reseedFailed')
   } finally {
     const next = new Set(busy.value)
     next.delete(id)
@@ -48,12 +43,7 @@ async function reseedAll() {
   try {
     await presets.reseedMany(ids)
   } catch (e) {
-    toast.add({
-      title: t('modelPreset.health.toast.reseedFailed'),
-      description: e instanceof Error ? e.message : String(e),
-      icon: 'i-lucide-triangle-alert',
-      color: 'error',
-    })
+    present(e, 'modelPreset.health.toast.reseedFailed')
   } finally {
     const next = new Set(busy.value)
     for (const id of ids) next.delete(id)

package/app/components/settings/ObservabilityConnectionPanel.vue

@@ -13,6 +13,7 @@ const { t } = useI18n()
 const ui = useUiStore()
 const store = useReleaseHealthStore()
 const toast = useToast()
+const { present } = usePipelineErrorToast()
 const { confirmAction, toastDone } = useConfirmAction()
 
 const open = computed({
@@ -36,15 +37,6 @@ const pagerDuty = reactive({ apiToken: '', fromEmail: '' })
 const incidentIo = reactive({ apiKey: '' })
 const incidentBusy = ref(false)
 
-function notifyError(title: string, e: unknown) {
-  toast.add({
-    title,
-    description: e instanceof Error ? e.message : String(e),
-    icon: 'i-lucide-triangle-alert',
-    color: 'error',
-  })
-}
-
 watch(
   open,
   async (isOpen) => {
@@ -56,7 +48,7 @@ watch(
       if (site) datadog.site = site
       await store.loadIncident()
     } catch (e) {
-      notifyError(t('settings.observabilityConnection.toast.loadFailed'), e)
+      present(e, 'settings.observabilityConnection.toast.loadFailed')
     }
   },
   { immediate: true },
@@ -90,7 +82,7 @@ async function saveIncident() {
       color: 'success',
     })
   } catch (e) {
-    notifyError(t('settings.observabilityConnection.toast.incidentSaveFailed'), e)
+    present(e, 'settings.observabilityConnection.toast.incidentSaveFailed')
   } finally {
     incidentBusy.value = false
   }
@@ -104,7 +96,7 @@ async function disconnectIncident() {
     await store.removeIncident()
     toastDone('disconnect', noun)
   } catch (e) {
-    notifyError(t('settings.observabilityConnection.toast.incidentDisconnectFailed'), e)
+    present(e, 'settings.observabilityConnection.toast.incidentDisconnectFailed')
   } finally {
     incidentBusy.value = false
   }
@@ -125,7 +117,7 @@ async function saveConnection() {
       color: 'success',
     })
   } catch (e) {
-    notifyError(t('settings.observabilityConnection.toast.connectFailed'), e)
+    present(e, 'settings.observabilityConnection.toast.connectFailed')
   } finally {
     busy.value = false
   }
@@ -139,7 +131,7 @@ async function disconnect() {
     await store.removeConnection()
     toastDone('disconnect', noun)
   } catch (e) {
-    notifyError(t('settings.observabilityConnection.toast.disconnectFailed'), e)
+    present(e, 'settings.observabilityConnection.toast.disconnectFailed')
   } finally {
     busy.value = false
   }

package/app/components/settings/OpenRouterCatalogPanel.vue

@@ -19,6 +19,7 @@ const store = useOpenRouterStore()
 const apiKeys = useApiKeysStore()
 const models = useModelsStore()
 const toast = useToast()
+const { present } = usePipelineErrorToast()
 
 const open = computed({
   get: () => ui.openRouterOpen,
@@ -158,12 +159,7 @@ async function connectKey() {
       color: 'success',
     })
   } catch (e) {
-    toast.add({
-      title: t('settings.openRouterCatalog.toast.connectFailed'),
-      description: e instanceof Error ? e.message : String(e),
-      icon: 'i-lucide-triangle-alert',
-      color: 'error',
-    })
+    present(e, 'settings.openRouterCatalog.toast.connectFailed')
   } finally {
     connectingKey.value = false
   }
@@ -200,12 +196,7 @@ async function save() {
       color: 'success',
     })
   } catch (e) {
-    toast.add({
-      title: t('settings.openRouterCatalog.toast.saveFailed'),
-      description: e instanceof Error ? e.message : String(e),
-      icon: 'i-lucide-triangle-alert',
-      color: 'error',
-    })
+    present(e, 'settings.openRouterCatalog.toast.saveFailed')
   } finally {
     busy.value = false
   }

package/app/components/settings/PackageRegistriesPanel.vue

@@ -13,6 +13,7 @@ import SecretInput from '~/components/common/SecretInput.vue'
 const { t } = useI18n()
 const store = usePackageRegistriesStore()
 const toast = useToast()
+const { present } = usePipelineErrorToast()
 const { confirmAction, toastDone } = useConfirmAction()
 
 // The registry vendors a workspace can connect. Fixed set — the host derives from the
@@ -44,15 +45,6 @@ const parsedScopes = computed(() =>
     .map((s) => (s.startsWith('@') ? s : `@${s}`)),
 )
 
-function notifyError(title: string, e: unknown) {
-  toast.add({
-    title,
-    description: e instanceof Error ? e.message : String(e),
-    icon: 'i-lucide-triangle-alert',
-    color: 'error',
-  })
-}
-
 // The tab this renders in only exists once the window's probe resolved `available === true`, so
 // `ensureLoaded()` here would early-return every time and this error branch would be dead code.
 // Read the list outright instead: the window owns the PROBE (a failure there means no tab), the
@@ -63,7 +55,7 @@ onMounted(async () => {
   try {
     await store.load()
   } catch (e) {
-    notifyError(t('settings.packageRegistries.toast.loadFailed'), e)
+    present(e, 'settings.packageRegistries.toast.loadFailed')
   }
 })
 
@@ -84,7 +76,7 @@ async function addEntry() {
       color: 'success',
     })
   } catch (e) {
-    notifyError(t('settings.packageRegistries.toast.addFailed'), e)
+    present(e, 'settings.packageRegistries.toast.addFailed')
   } finally {
     busy.value = false
   }
@@ -98,7 +90,7 @@ async function removeEntry(entryId: string) {
     await store.remove(entryId)
     toastDone('remove', noun)
   } catch (e) {
-    notifyError(t('settings.packageRegistries.toast.removeFailed'), e)
+    present(e, 'settings.packageRegistries.toast.removeFailed')
   } finally {
     busy.value = false
   }

package/app/components/settings/ProviderConnectionTab.vue

@@ -36,6 +36,7 @@ const emit = defineEmits<{ connected: [] }>()
 const { t } = useI18n()
 const store = useProviderConnectionsStore()
 const toast = useToast()
+const { present } = usePipelineErrorToast()
 const { confirmAction } = useConfirmAction()
 
 const descriptor = computed(() => store.descriptorFor(props.kind))
@@ -205,15 +206,6 @@ function buildFlatPayload() {
   return isNativeConfig.value ? buildConfigPayload() : buildManifestPayload()
 }
 
-function notifyError(title: string, e: unknown) {
-  toast.add({
-    title,
-    description: e instanceof Error ? e.message : String(e),
-    icon: 'i-lucide-triangle-alert',
-    color: 'error',
-  })
-}
-
 function toastSaved() {
   toast.add({
     title: t('settings.providerConnection.toast.saved', { title: title.value }),
@@ -246,7 +238,7 @@ async function saveNative() {
     resetDraft()
     toastSaved()
   } catch (e) {
-    notifyError(t('settings.providerConnection.toast.saveFailed'), e)
+    present(e, 'settings.providerConnection.toast.saveFailed')
   } finally {
     busy.value = false
   }
@@ -280,7 +272,7 @@ async function saveManifest(payload: {
     emit('connected')
     toastSaved()
   } catch (e) {
-    notifyError(t('settings.providerConnection.toast.saveFailed'), e)
+    present(e, 'settings.providerConnection.toast.saveFailed')
   } finally {
     busy.value = false
   }
@@ -325,7 +317,7 @@ async function saveConfig(payload: {
     emit('connected')
     toastSaved()
   } catch (e) {
-    notifyError(t('settings.providerConnection.toast.saveFailed'), e)
+    present(e, 'settings.providerConnection.toast.saveFailed')
   } finally {
     busy.value = false
   }
@@ -339,7 +331,7 @@ async function remove() {
     resetDraft()
     toast.add({ title: t('settings.providerConnection.toast.removed'), icon: 'i-lucide-check' })
   } catch (e) {
-    notifyError(t('settings.providerConnection.toast.removeFailed'), e)
+    present(e, 'settings.providerConnection.toast.removeFailed')
   } finally {
     busy.value = false
   }

package/app/components/settings/RiskPolicyHealthModal.vue

@@ -9,7 +9,7 @@ const { t } = useI18n()
 const ui = useUiStore()
 const presets = useRiskPoliciesStore()
 const { newPresets, outdated, hasIssues } = useRiskPolicyHealth()
-const toast = useToast()
+const { present } = usePipelineErrorToast()
 
 const open = computed({
   get: () => ui.riskPolicyHealthOpen,
@@ -28,12 +28,7 @@ async function reseed(id: string) {
   try {
     await presets.reseed(id)
   } catch (e) {
-    toast.add({
-      title: t('riskPolicy.health.toast.reseedFailed'),
-      description: e instanceof Error ? e.message : String(e),
-      icon: 'i-lucide-triangle-alert',
-      color: 'error',
-    })
+    present(e, 'riskPolicy.health.toast.reseedFailed')
   } finally {
     const next = new Set(busy.value)
     next.delete(id)