@cat-factory/app 0.312.0 → 0.313.0

package/README.md

@@ -1492,6 +1492,11 @@ example ships in [`deploy/frontend`](https://github.com/kibertoad/cat-factory/tr
   switchers, the `SpendWarningBanner`, and the toolbar (zoom, LOD, decision queue).
 - **Palettes** (`components/palettes`): drag blocks, pipelines and agents onto
   the board.
+- **Setup checklist** (`components/setup/SetupChecklistPanel.vue`, `utils/setupChecklist.ts`):
+  every prerequisite for "a task can run and merge" in one list, for people who can change the
+  setup. It adds no probe of its own: each row reads what its banner or startup dialog already
+  reads (`useSetupChecklist`) and opens the same surface. "Checking" and "missing" are separate
+  states, because an unanswered probe and an absent capability are opposite facts.
 - **Inspector** (`components/panels` + `panels/inspector`): per-block tabs:
   structure, dependencies, model + fragment picker, live execution, and linked
   docs/issues/scenarios. Decisions resolve via `DecisionModal`. A `review` task

package/app/components/layout/AiProvidersBanner.vue

@@ -8,6 +8,7 @@ import { computed } from 'vue'
 
 const { t } = useI18n()
 const ui = useUiStore()
+const remedies = useSetupRemedies()
 const { ready, hasUsableModel, defaultPresetBroken } = useAiReadiness()
 
 const showSetup = computed(() => ready.value && !hasUsableModel.value && !ui.aiSetupDismissed)
@@ -47,7 +48,7 @@ const show = computed(() => showSetup.value || showPreset.value)
               {{ t('layout.aiProvidersBanner.setup.body') }}
             </p>
             <div class="mt-4">
-              <UButton color="warning" icon="i-lucide-settings" @click="ui.openAiProviderSetup()">
+              <UButton color="warning" icon="i-lucide-settings" @click="remedies.openModelSetup()">
                 {{ t('layout.aiProvidersBanner.setup.action') }}
               </UButton>
             </div>
@@ -88,7 +89,7 @@ const show = computed(() => showSetup.value || showPreset.value)
                 size="sm"
                 color="warning"
                 icon="i-lucide-cpu"
-                @click="ui.openAiPresetMismatch()"
+                @click="remedies.openPresetMismatch()"
               >
                 {{ t('layout.aiProvidersBanner.preset.action') }}
               </UButton>

package/app/components/layout/GitHubPatBanner.vue

@@ -7,9 +7,9 @@ const { t } = useI18n()
 // repo-operating agent step (clone, push, open PR, CI gate, merge) will fail. The server
 // also logs this, but a dev terminal is easy to miss — so surface it in the UI with the
 // (scopes-preselected) creation URL as a one-click link straight to GitHub.
-const auth = useAuthStore()
+const { patSetupUrl } = useSetupRemedies()
 
-const setupUrl = computed(() => auth.localMode?.githubPatSetupUrl ?? '')
+const setupUrl = computed(() => patSetupUrl.value ?? '')
 const dismissed = ref(false)
 const show = computed(() => !!setupUrl.value && !dismissed.value)
 </script>

package/app/components/layout/GitHubPatPermissionsBanner.vue

@@ -3,11 +3,9 @@ import { computed, ref } from 'vue'
 import {
   GITHUB_PAT_FINE_GRAINED_PERMISSIONS,
   githubPatCheckNeedsAttention,
-  githubPatCheckSource,
   missingGitHubPatCapabilities,
 } from '@cat-factory/contracts'
-import type { GitHubPatCapability, GitHubPatKind } from '~/types/domain'
-import { githubPatRemintUrl } from '~/utils/vcs'
+import type { GitHubPatCapability } from '~/types/domain'
 
 // The token a run would authenticate with cannot do what the pipeline needs.
 //
@@ -67,14 +65,8 @@ function capabilityLabel(capability: GitHubPatCapability): string {
   return t(CAPABILITY_KEYS[capability])
 }
 
-/**
- * The kind carried over to the re-mint link. A rejected token was never classified, so it falls
- * back to `unknown` — which lands on the classic form, the only one GitHub lets us pre-fill.
- */
-const kind = computed<GitHubPatKind>(() => report.value?.kind ?? 'unknown')
-const remintUrl = computed(() =>
-  githubPatRemintUrl(kind.value, report.value?.webUrl ?? github.connection?.webUrl),
-)
+// The re-mint page and whose token it is: the map the setup checklist opens through too.
+const { patRemintUrl: remintUrl, patSource, patKind: kind } = useSetupRemedies()
 
 /**
  * Who has to act. A deployment token is replaced by whoever runs the deployment (local mode:
@@ -89,7 +81,7 @@ const remintUrl = computed(() =>
  * personal settings: the exact misrouting the wire field exists to prevent.
  */
 const sourceKey = computed(() =>
-  check.value && githubPatCheckSource(check.value) === 'deployment'
+  patSource.value === 'deployment'
     ? 'layout.githubPatPermissionsBanner.sourceDeployment'
     : 'layout.githubPatPermissionsBanner.sourceInitiator',
 )

package/app/components/layout/InfraSetupBanner.vue

@@ -65,6 +65,8 @@ const ui = useUiStore()
 const auth = useAuthStore()
 const workspace = useWorkspaceStore()
 const { actor } = useSetupActor()
+// Where each area is configured: the map the setup checklist opens through too.
+const remedies = useSetupRemedies()
 
 // Severity order: no executor blocks EVERY agent, so it leads; a missing test environment blocks
 // only testing agents; missing storage only degrades the UI-tester's screenshots.
@@ -73,32 +75,29 @@ const AREAS: InfraSetupArea[] = ['agentExecutor', 'ephemeralEnvironments', 'bina
 // Exhaustive per-area presentation (an exhaustive `Record<InfraSetupArea, …>`, so adding an area
 // without a meta entry fails typecheck — the tier-2 guard). The i18n keys are resolved
 // dynamically (`t(AREA_META[area].titleKey)`), so tier-1 typed-key checking doesn't cover them;
-// the `i18n:check` drift guard (tier 3) catches any that are absent from the catalog. `action`
-// deep-links into the relevant setup surface.
+// the `i18n:check` drift guard (tier 3) catches any that are absent from the catalog. The action
+// opens the area's setup surface through `useSetupRemedies`.
 const AREA_META: Record<
   InfraSetupArea,
-  { icon: string; titleKey: string; bodyKey: string; actionKey: string; onConfigure: () => void }
+  { icon: string; titleKey: string; bodyKey: string; actionKey: string }
 > = {
   agentExecutor: {
     icon: 'i-lucide-server-cog',
     titleKey: 'layout.infraSetupBanner.agentExecutor.title',
     bodyKey: 'layout.infraSetupBanner.agentExecutor.body',
     actionKey: 'layout.infraSetupBanner.agentExecutor.action',
-    onConfigure: () => ui.openProviderConnection('runner-pool'),
   },
   ephemeralEnvironments: {
     icon: 'i-lucide-flask-conical',
     titleKey: 'layout.infraSetupBanner.ephemeralEnvironments.title',
     bodyKey: 'layout.infraSetupBanner.ephemeralEnvironments.body',
     actionKey: 'layout.infraSetupBanner.ephemeralEnvironments.action',
-    onConfigure: () => ui.openProviderConnection('environment'),
   },
   binaryStorage: {
     icon: 'i-lucide-hard-drive',
     titleKey: 'layout.infraSetupBanner.binaryStorage.title',
     bodyKey: 'layout.infraSetupBanner.binaryStorage.body',
     actionKey: 'layout.infraSetupBanner.binaryStorage.action',
-    onConfigure: () => ui.openContentStorageSettings(),
   },
 }
 
@@ -291,7 +290,7 @@ function dismissMenu(card: Pick<AreaCard, 'area' | 'kind'>): DropdownMenuItem[][
                 :color="card.kind === 'outage' ? 'error' : 'warning'"
                 icon="i-lucide-settings"
                 :data-testid="`infra-setup-configure-${card.area}`"
-                @click="AREA_META[card.area].onConfigure()"
+                @click="remedies.openInfraArea(card.area)"
               >
                 {{
                   card.kind === 'outage'

package/app/components/setup/SetupChecklistPanel.vue

@@ -0,0 +1,340 @@
+<script setup lang="ts">
+import type { SetupRow, SetupRowCause, SetupRowId, SetupRowStatus } from '~/utils/setupChecklist'
+import type { SetupRemedy } from '~/utils/setupAudience'
+import SectionLabel from '~/components/common/SectionLabel.vue'
+import Spinner from '~/components/common/Spinner.vue'
+
+/**
+ * The setup checklist: every prerequisite for "a task can run and merge", its state, and one
+ * action per row (issue #2258).
+ *
+ * The probes and the surfaces each row opens are the ones the setup banners, the AI-provider
+ * dialogs and the startup health advisories already use (`useSetupChecklist`), and so is the rule
+ * for who may act: a row the caller cannot fix shows who can instead of a button. What it adds is
+ * the whole list in one place, with a finish line, instead of one interruption per missing piece.
+ * Opening a row's surface closes the checklist, so the two never stack.
+ */
+const { t } = useI18n()
+const ui = useUiStore()
+const { checklist, actionFor, refresh, patSource, patMissing } = useSetupChecklist()
+
+const open = computed({
+  get: () => ui.setupChecklistOpen,
+  set: (v: boolean) => (v ? ui.openSetupChecklist() : ui.closeSetupChecklist()),
+})
+watch(
+  () => ui.setupChecklistOpen,
+  (isOpen) => {
+    if (isOpen) refresh()
+  },
+  { immediate: true },
+)
+
+/** Open a surface from the checklist: close the checklist first, so the two never stack. */
+function go(fn: () => void) {
+  ui.closeSetupChecklist()
+  fn()
+}
+function act(row: SetupRow) {
+  const action = actionFor(row)
+  if (!action) return
+  // Asking a probe again keeps the checklist open: its answer lands here.
+  if (row.cause === 'probeFailed') action()
+  else go(action)
+}
+
+/** The rows this caller can act on, with the action to show. */
+function canAct(row: SetupRow): boolean {
+  return row.remedy === null && actionFor(row) !== null
+}
+
+/**
+ * The ONE solid button in the view: the first required row that is not done and that this caller
+ * can act on. Every other open row takes a lighter variant, so the list reads in order.
+ */
+const primaryRowId = computed<SetupRowId | null>(
+  () =>
+    checklist.value.rows.find(
+      (r) => r.required && (r.status === 'missing' || r.status === 'attention') && canAct(r),
+    )?.id ?? null,
+)
+
+const pipelineHealth = usePipelineHealth()
+const riskPolicyHealth = useRiskPolicyHealth()
+const modelPresetHealth = useModelPresetHealth()
+
+const STATUS_META: Record<SetupRowStatus, { icon: string; class: string }> = {
+  done: { icon: 'i-lucide-circle-check', class: 'text-success' },
+  missing: { icon: 'i-lucide-circle', class: 'text-dimmed' },
+  attention: { icon: 'i-lucide-circle-alert', class: 'text-warning' },
+  checking: { icon: 'i-lucide-loader-circle', class: 'text-dimmed' },
+  not_needed: { icon: 'i-lucide-circle-minus', class: 'text-dimmed' },
+}
+
+/**
+ * The action's word per state. Null for the two states that never carry an action
+ * (`useSetupChecklist.actionFor`), so no copy ships for a button that cannot render.
+ */
+const ACTION_KEYS: Record<SetupRowStatus, string | null> = {
+  done: 'setup.action.change',
+  missing: 'setup.action.connect',
+  attention: 'setup.action.fix',
+  checking: null,
+  not_needed: null,
+}
+
+function actionLabel(row: SetupRow): string {
+  if (row.cause === 'probeFailed') return t('setup.action.retry')
+  const key = ACTION_KEYS[row.status]
+  return key ? t(key) : ''
+}
+
+/** Whose token a token row is about: the remedy differs, so the row says it, as the banner does. */
+const patSourceKey = computed(() =>
+  patSource.value === 'deployment'
+    ? 'layout.githubPatPermissionsBanner.sourceDeployment'
+    : 'layout.githubPatPermissionsBanner.sourceInitiator',
+)
+
+/**
+ * Each row's title and its line for the states that are about the row. An `attention` row's line
+ * is its CAUSE (`CAUSE_KEYS`): the title already names the area, and each cause needs its own fix.
+ */
+const ROW_COPY: Record<
+  SetupRowId,
+  { title: string } & Record<Exclude<SetupRowStatus, 'attention'>, string>
+> = {
+  model: {
+    title: 'setup.rows.model.title',
+    done: 'setup.rows.model.done',
+    missing: 'setup.rows.model.missing',
+    checking: 'setup.rows.checking',
+    not_needed: 'setup.rows.notNeeded',
+  },
+  sourceControl: {
+    title: 'setup.rows.sourceControl.title',
+    done: 'setup.rows.sourceControl.done',
+    missing: 'setup.rows.sourceControl.missing',
+    checking: 'setup.rows.checking',
+    not_needed: 'setup.rows.notNeeded',
+  },
+  agentExecutor: {
+    title: 'setup.rows.agentExecutor.title',
+    done: 'setup.rows.agentExecutor.done',
+    missing: 'setup.rows.agentExecutor.missing',
+    checking: 'setup.rows.checking',
+    not_needed: 'setup.rows.agentExecutor.notNeeded',
+  },
+  ephemeralEnvironments: {
+    title: 'setup.rows.ephemeralEnvironments.title',
+    done: 'setup.rows.ephemeralEnvironments.done',
+    missing: 'setup.rows.ephemeralEnvironments.missing',
+    checking: 'setup.rows.checking',
+    not_needed: 'setup.rows.notNeeded',
+  },
+  binaryStorage: {
+    title: 'setup.rows.binaryStorage.title',
+    done: 'setup.rows.binaryStorage.done',
+    missing: 'setup.rows.binaryStorage.missing',
+    checking: 'setup.rows.checking',
+    not_needed: 'setup.rows.notNeeded',
+  },
+}
+const CAUSE_KEYS: Record<SetupRowCause, string> = {
+  unreachable: 'setup.causes.unreachable',
+  incomplete: 'setup.causes.incomplete',
+  rejected: 'setup.causes.rejected',
+  underscoped: 'setup.causes.underscoped',
+  presetBroken: 'setup.causes.presetBroken',
+  probeFailed: 'setup.causes.probeFailed',
+  notReported: 'setup.causes.notReported',
+}
+function rowLine(row: SetupRow): string {
+  return row.status === 'attention' ? t(CAUSE_KEYS[row.cause]) : t(ROW_COPY[row.id][row.status])
+}
+
+// The same "who can fix this" lines the infrastructure notice shows a caller who cannot act.
+const REMEDY_KEYS: Record<SetupRemedy, string> = {
+  workspace_admin: 'layout.infraSetupNotice.owner.workspace_admin',
+  account_admin: 'layout.infraSetupNotice.owner.account_admin',
+  operator: 'layout.infraSetupNotice.owner.operator',
+  full_surface: 'layout.infraSetupNotice.fullSurface',
+}
+
+/**
+ * The secondary list: advisories that used to open as startup dialogs, each count on its own so
+ * no sentence has to agree with a number. Only rows with work.
+ */
+const also = computed(() =>
+  [
+    {
+      id: 'pipelines',
+      labelKey: 'setup.also.pipelines',
+      counts: [
+        {
+          key: 'setup.also.counts.repair',
+          n:
+            pipelineHealth.health.value.filter((h) => h.invalid).length +
+            pipelineHealth.retired.value.length,
+        },
+        {
+          key: 'setup.also.counts.outdated',
+          n: pipelineHealth.health.value.filter((h) => !h.invalid && h.outdated).length,
+        },
+        { key: 'setup.also.counts.new', n: pipelineHealth.newPipelines.value.length },
+      ],
+      open: () => go(() => ui.openPipelineHealth()),
+    },
+    {
+      id: 'riskPolicies',
+      labelKey: 'setup.also.riskPolicies',
+      counts: [
+        { key: 'setup.also.counts.outdated', n: riskPolicyHealth.outdated.value.length },
+        { key: 'setup.also.counts.new', n: riskPolicyHealth.newPresets.value.length },
+      ],
+      open: () => go(() => ui.openRiskPolicyHealth()),
+    },
+    {
+      id: 'modelPresets',
+      labelKey: 'setup.also.modelPresets',
+      counts: [
+        { key: 'setup.also.counts.outdated', n: modelPresetHealth.outdated.value.length },
+        { key: 'setup.also.counts.new', n: modelPresetHealth.newPresets.value.length },
+      ],
+      open: () => go(() => ui.openModelPresetHealth()),
+    },
+  ]
+    .map((row) => ({ ...row, counts: row.counts.filter((c) => c.n > 0) }))
+    .filter((row) => row.counts.length > 0),
+)
+</script>
+
+<template>
+  <UModal v-model:open="open" :title="t('setup.title')" :ui="{ content: 'sm:max-w-3xl' }">
+    <template #title>
+      <span class="flex items-baseline gap-3">
+        {{ t('setup.title') }}
+        <!-- While a probe has not answered, the count is not one yet, so the badge says so. -->
+        <UBadge color="neutral" variant="subtle" data-testid="setup-progress">
+          {{
+            checklist.checking
+              ? t('setup.rows.checking')
+              : t('setup.progress', { done: checklist.done, total: checklist.total })
+          }}
+        </UBadge>
+      </span>
+    </template>
+    <template #body>
+      <div data-testid="setup-checklist">
+        <p class="text-sm text-muted">{{ t('setup.intro') }}</p>
+
+        <ul class="mt-6 space-y-3">
+          <li
+            v-for="row in checklist.rows"
+            :key="row.id"
+            class="flex items-center gap-3 rounded-lg border border-muted bg-default p-4"
+            data-testid="setup-row"
+            :data-row="row.id"
+            :data-status="row.status"
+            :data-cause="row.cause ?? undefined"
+            :data-remedy="row.remedy ?? undefined"
+          >
+            <Spinner
+              :name="STATUS_META[row.status].icon"
+              :spinning="row.status === 'checking'"
+              class="h-5 w-5 shrink-0"
+              :class="STATUS_META[row.status].class"
+            />
+            <div class="min-w-0 flex-1">
+              <div class="flex flex-wrap items-center gap-2">
+                <span class="font-medium text-highlighted">{{ t(ROW_COPY[row.id].title) }}</span>
+                <UBadge v-if="row.status !== 'done'" size="sm" color="neutral" variant="outline">
+                  {{ row.required ? t('setup.required') : t('setup.optional') }}
+                </UBadge>
+              </div>
+              <p class="mt-0.5 text-xs text-muted">{{ rowLine(row) }}</p>
+              <!-- The token rows carry the banners' second half: whose token it is, and, for a
+                   missing local token, where the new one goes. -->
+              <p
+                v-if="row.cause === 'rejected' || row.cause === 'underscoped'"
+                class="mt-0.5 text-xs text-dimmed"
+              >
+                {{ t(patSourceKey) }}
+              </p>
+              <p
+                v-else-if="row.id === 'sourceControl' && row.status === 'missing' && patMissing"
+                class="mt-0.5 text-xs text-dimmed"
+              >
+                <i18n-t keypath="layout.githubPatBanner.thenSet" tag="span" scope="global">
+                  <template #envVar>
+                    <code class="font-mono">GITHUB_PAT</code>
+                  </template>
+                </i18n-t>
+              </p>
+              <!-- A gap this caller cannot close: who can, in place of a button their save would
+                   be refused on. A done row needs neither. -->
+              <p
+                v-if="row.remedy && row.status !== 'done' && row.status !== 'not_needed'"
+                class="mt-0.5 text-xs text-dimmed"
+                data-testid="setup-row-remedy"
+              >
+                {{ t(REMEDY_KEYS[row.remedy]) }}
+              </p>
+            </div>
+            <UButton
+              v-if="canAct(row)"
+              size="sm"
+              :color="row.status === 'done' ? 'neutral' : 'primary'"
+              :variant="
+                row.id === primaryRowId ? 'solid' : row.status === 'done' ? 'outline' : 'soft'
+              "
+              data-testid="setup-row-action"
+              @click="act(row)"
+            >
+              {{ actionLabel(row) }}
+            </UButton>
+          </li>
+        </ul>
+
+        <USeparator class="my-6" />
+        <SectionLabel as="h2" class="mb-3">{{ t('setup.also.title') }}</SectionLabel>
+        <ul class="space-y-2 text-sm">
+          <li v-for="row in also" :key="row.id" class="flex flex-wrap items-center gap-2">
+            <span class="text-muted">{{ t(row.labelKey) }}</span>
+            <UBadge v-for="c in row.counts" :key="c.key" size="sm" color="neutral" variant="subtle">
+              {{ t(c.key, { count: c.n }) }}
+            </UBadge>
+            <UButton
+              class="ms-auto"
+              size="xs"
+              color="neutral"
+              variant="outline"
+              @click="row.open()"
+            >
+              {{ t('setup.action.review') }}
+            </UButton>
+          </li>
+          <li class="flex flex-wrap items-center gap-2 text-muted">
+            <span class="flex-1">{{ t('setup.also.settings') }}</span>
+            <UButton
+              size="xs"
+              color="neutral"
+              variant="ghost"
+              @click="go(() => ui.openWorkspaceSettings())"
+            >
+              {{ t('setup.also.workspaceSettings') }}
+            </UButton>
+            <UButton
+              size="xs"
+              color="neutral"
+              variant="ghost"
+              @click="go(() => ui.openIntegrations())"
+            >
+              {{ t('setup.also.integrations') }}
+            </UButton>
+          </li>
+        </ul>
+      </div>
+    </template>
+  </UModal>
+</template>

package/app/composables/useNavContributions.ts

@@ -55,6 +55,7 @@ export function useNavContributions() {
     foundationalServices: () => ui.openFoundationalServices(),
     mergeThresholds: () => ui.openWorkspaceSettings('merge'),
     workspaceSettings: () => ui.openWorkspaceSettings(),
+    setupChecklist: () => ui.openSetupChecklist(),
     modelConfiguration: () => ui.openModelConfig(),
     serviceFragmentDefaults: () => ui.openWorkspaceSettings('fragments'),
     localModels: () => ui.openLocalModels(),

package/app/composables/useSetupChecklist.ts

@@ -0,0 +1,122 @@
+import { computed, ref } from 'vue'
+import { githubPatCheckNeedsAttention } from '@cat-factory/contracts'
+import { deriveSetupChecklist, type SetupRow } from '~/utils/setupChecklist'
+
+/**
+ * The store-facing half of `utils/setupChecklist.ts`: resolve every probe the checklist reads,
+ * and the existing surface each row's action opens.
+ *
+ * Every action goes to the surface the matching banner or dialog opens for the same state, so
+ * the checklist is a new index over the setup the product has, never a second copy of it.
+ */
+export function useSetupChecklist() {
+  const ui = useUiStore()
+  const github = useGitHubStore()
+  const models = useModelsStore()
+  const workspace = useWorkspaceStore()
+  const providerConnections = useProviderConnectionsStore()
+  const ai = useAiReadiness()
+  const { actor } = useSetupActor()
+  // Where each gap is fixed: the map the setup banners open through too.
+  const remedies = useSetupRemedies()
+  /** Local mode with no token: the row says where the new one goes, as the banner does. */
+  const patMissing = computed(() => !!remedies.patSetupUrl.value)
+
+  // The catalog is loaded on board open, and a failed load is dropped there on purpose (it stays
+  // retryable, see `models.prefetchForBoard`). The checklist is where that failure is stated, so
+  // it asks for the catalog itself and keeps the outcome.
+  const modelLoadFailed = ref(false)
+  async function loadModels() {
+    const id = workspace.workspaceId
+    if (!id) return
+    modelLoadFailed.value = false
+    try {
+      await models.ensureLoaded(id)
+    } catch {
+      modelLoadFailed.value = true
+    }
+  }
+
+  /**
+   * Ask every probe the checklist reads, so a row does not wait on a banner that happens to be
+   * mounted. Each is single-flighted or load-once in its store, so this costs nothing when the
+   * board already asked.
+   */
+  function refresh() {
+    void loadModels()
+    void providerConnections.ensureLoaded()
+    void github.ensureProbed()
+  }
+
+  const patCheck = computed(() => github.patCheck)
+  const patProblem = computed<'rejected' | 'underscoped' | null>(() => {
+    const check = patCheck.value
+    if (!check || !githubPatCheckNeedsAttention(check)) return null
+    return check.state === 'token_rejected' ? 'rejected' : 'underscoped'
+  })
+
+  const checklist = computed(() =>
+    deriveSetupChecklist({
+      model: {
+        loaded: ai.ready.value,
+        loadFailed: modelLoadFailed.value,
+        usable: ai.hasUsableModel.value,
+        presetBroken: ai.defaultPresetBroken.value,
+      },
+      sourceControl: {
+        available: github.available,
+        unavailableCause: github.unavailableCause,
+        connected: github.connected,
+        patMissing: patMissing.value,
+        patProblem: patProblem.value,
+      },
+      infra: workspace.infraSetup ?? null,
+      workspaceLoaded: workspace.ready,
+      infraOwners: workspace.infraSetupOwners ?? null,
+      providers: {
+        loaded: providerConnections.loaded,
+        needingConfig: providerConnections.needingConfig,
+      },
+      actor: actor.value,
+    }),
+  )
+
+  /**
+   * Where a row's action goes, by row AND state, through the remedies the matching banner uses.
+   * Null where there is nothing to open: the deployment does not use the area, or does not report
+   * it.
+   */
+  function actionFor(row: SetupRow): (() => void) | null {
+    if (row.status === 'not_needed' || row.status === 'checking') return null
+    if (row.cause === 'notReported') return null
+    switch (row.id) {
+      case 'model':
+        if (row.cause === 'probeFailed') return () => void loadModels()
+        if (row.status === 'missing') return remedies.openModelSetup
+        if (row.cause === 'presetBroken') return remedies.openPresetMismatch
+        return () => ui.openModelProviders()
+      case 'sourceControl': {
+        const setupUrl = remedies.patSetupUrl.value
+        if (setupUrl) return () => window.open(setupUrl, '_blank', 'noopener')
+        if (row.cause === 'rejected' || row.cause === 'underscoped') {
+          const remint = remedies.patRemintUrl.value
+          return () => window.open(remint, '_blank', 'noopener')
+        }
+        if (row.cause === 'probeFailed') return () => void github.probe()
+        return () => ui.openGitHub()
+      }
+      case 'agentExecutor':
+      case 'ephemeralEnvironments':
+      case 'binaryStorage': {
+        const area = row.id
+        return () => remedies.openInfraArea(area)
+      }
+      default: {
+        const unreachable: never = row.id
+        return unreachable
+      }
+    }
+  }
+
+  return { checklist, actionFor, refresh, patSource: remedies.patSource, patMissing }
+}