@cat-factory/app 0.32.2 → 0.34.0

package/app/components/layout/CommandBar.vue

@@ -173,6 +173,15 @@ const commands = computed<Command[]>(() => {
     keywords: 'fragment best practice guideline service default code-aware',
     run: () => ui.openWorkspaceSettings('fragments'),
   })
+  list.push({
+    id: 'account-settings',
+    label: 'Account settings',
+    group: 'Account',
+    icon: 'i-lucide-settings',
+    keywords:
+      'account team members roles invitations email api keys fragment best practice library context organization personal',
+    run: () => ui.openAccountSettings(),
+  })
   list.push({
     id: 'local-models',
     label: 'My local runners',

package/app/components/layout/SideBar.vue

@@ -14,6 +14,7 @@ const github = useGitHubStore()
 const slack = useSlackStore()
 const library = useFragmentLibraryStore()
 const workspace = useWorkspaceStore()
+const accounts = useAccountsStore()
 const ui = useUiStore()
 
 // Resolve whether the document-source / task-source / GitHub integrations are
@@ -203,6 +204,20 @@ watch(
         >
           Model Configuration
         </UButton>
+        <!-- Account & team: members + roles, invitations, email sender, account API keys.
+             Shown once accounts (auth) are enabled. -->
+        <UButton
+          v-if="accounts.enabled"
+          block
+          color="primary"
+          variant="soft"
+          size="sm"
+          icon="i-lucide-users"
+          class="justify-start"
+          @click="ui.openAccountSettings()"
+        >
+          Account settings
+        </UButton>
       </div>
     </section>
 

package/app/components/settings/AccountSettingsPanel.vue

@@ -0,0 +1,57 @@
+<script setup lang="ts">
+// Account settings — a single tabbed modal for the per-account configuration, distinct
+// from Workspace settings. Hosts the team panel (members + roles, invitations, email
+// sender, account-wide API keys; org-scoped, with a create-org CTA on a personal account)
+// and the account-tier prompt-fragment library (available for every account type).
+// Opened from the SideBar Configuration section, the account switcher and the command
+// bar; bound to the `ui` store so any surface can open it and deep-link to a tab.
+import AccountTeamSettings from '~/components/layout/AccountTeamSettings.vue'
+import AccountFragmentSettings from '~/components/layout/AccountFragmentSettings.vue'
+
+const ui = useUiStore()
+const accounts = useAccountsStore()
+
+const open = computed({
+  get: () => ui.accountSettingsOpen,
+  set: (v: boolean) => (v ? ui.openAccountSettings() : ui.closeAccountSettings()),
+})
+
+// Driven by the ui store so other surfaces (command bar, the workspace-settings
+// cross-link) can deep-link straight to a tab.
+const activeTab = computed({
+  get: () => ui.accountSettingsTab,
+  set: (v: string) => ui.setAccountSettingsTab(v),
+})
+
+const tabs = [
+  { value: 'team', label: 'Team & access', icon: 'i-lucide-users', slot: 'team' },
+  {
+    value: 'fragments',
+    label: 'Context fragments',
+    icon: 'i-lucide-book-marked',
+    slot: 'fragments',
+  },
+]
+</script>
+
+<template>
+  <UModal v-model:open="open" title="Account settings" :ui="{ content: 'max-w-3xl' }">
+    <template #body>
+      <p v-if="!accounts.activeAccountId" class="text-sm text-slate-400">No account selected.</p>
+      <UTabs
+        v-else
+        v-model="activeTab"
+        :items="tabs"
+        variant="link"
+        :ui="{ root: 'gap-4', list: 'overflow-x-auto' }"
+      >
+        <template #team>
+          <AccountTeamSettings :account-id="accounts.activeAccountId" />
+        </template>
+        <template #fragments>
+          <AccountFragmentSettings :account-id="accounts.activeAccountId" />
+        </template>
+      </UTabs>
+    </template>
+  </UModal>
+</template>

package/app/components/settings/ProviderConnectionPanel.vue

@@ -44,6 +44,41 @@ const meta = computed(() => (kind.value ? META[kind.value] : null))
 const descriptor = computed(() => (kind.value ? store.descriptorFor(kind.value) : null))
 const connection = computed(() => (kind.value ? store.connectionFor(kind.value) : null))
 
+// --- Local-mode infrastructure delegation -------------------------------------------
+// In local mode this same screen is where a developer chooses, per workspace, whether to
+// run on this machine (host Docker for agents, in-container docker-compose for the Tester)
+// or delegate to an external service. The two opt-ins live here together to make the
+// cross-cutting nature explicit: the environment provider you configure on this screen is
+// one half; the runner pool (its own screen) is the other. Each toggle is enabled only
+// once its provider is registered. Shown only in local mode and only on the environment
+// kind (so it appears once, alongside the env provider it relates to).
+const auth = useAuthStore()
+const settings = useWorkspaceSettingsStore()
+const isLocal = computed(() => auth.localMode?.enabled === true)
+const showLocalDelegation = computed(() => isLocal.value && kind.value === 'environment')
+// Gating: a toggle's external option is selectable only when its provider is registered.
+const runnerPoolRegistered = computed(() => !!store.connectionFor('runner-pool'))
+const envRegistered = computed(() => !!store.connectionFor('environment'))
+const savingDelegation = ref(false)
+
+async function setDelegation(patch: {
+  delegateAgentsToRunnerPool?: boolean
+  delegateTestEnvToProvider?: boolean
+}) {
+  savingDelegation.value = true
+  try {
+    await settings.update(patch)
+  } catch (e) {
+    notifyError('Could not update delegation', e)
+  } finally {
+    savingDelegation.value = false
+  }
+}
+
+function openRunnerPoolPanel() {
+  ui.openProviderConnection('runner-pool')
+}
+
 // "View logs": the provisioning event history for this provider's subsystem — every
 // spin-up / tear-down attempt with its outcome and the exact error. The panel kind
 // maps 1:1 to the log subsystem ('environment' / 'runner-pool').
@@ -82,6 +117,9 @@ watch(
   kind,
   (k) => {
     if (k) void store.loadKind(k).then(resetDraft)
+    // In local mode the env panel also gates the agents toggle on a registered runner
+    // pool, so load that provider's connection state too (the env kind already loads above).
+    if (k === 'environment' && isLocal.value) void store.loadKind('runner-pool')
   },
   { immediate: true },
 )
@@ -228,6 +266,85 @@ function fieldHelp(key: string): string | undefined {
       <IntegrationBackTitle :title="meta?.title ?? 'Provider'" @back="back" />
     </template>
     <template #body>
+      <!-- Local-mode infrastructure delegation: the local-vs-external choice for BOTH
+           container agents AND the Tester's ephemeral environments, made once here. -->
+      <section
+        v-if="showLocalDelegation"
+        class="mb-4 space-y-3 rounded-lg border border-slate-700 bg-slate-900/40 p-3"
+      >
+        <div>
+          <h3 class="text-sm font-semibold text-slate-200">Local delegation</h3>
+          <p class="mt-1 text-[11px] text-slate-400">
+            By default this machine runs everything locally — container agents on host Docker, the
+            Tester's infrastructure via in-container docker-compose. Opt in below to delegate either
+            concern to an external service instead. Applies only in local mode.
+          </p>
+        </div>
+
+        <!-- Container agents → self-hosted runner pool -->
+        <div class="space-y-1">
+          <label class="flex items-center gap-2">
+            <USwitch
+              size="sm"
+              :model-value="settings.settings.delegateAgentsToRunnerPool"
+              :disabled="savingDelegation || !runnerPoolRegistered"
+              @update:model-value="(v) => setDelegation({ delegateAgentsToRunnerPool: v })"
+            />
+            <span class="text-sm text-slate-200">Run container agents on the runner pool</span>
+          </label>
+          <p class="pl-9 text-[11px] text-slate-400">
+            Dispatch every container agent (coder, tester, merger, bootstrap, …) to this workspace's
+            self-hosted runner pool instead of host Docker.
+            <template v-if="!runnerPoolRegistered">
+              <button
+                type="button"
+                class="text-sky-400 underline underline-offset-2 hover:text-sky-300"
+                @click="openRunnerPoolPanel"
+              >
+                Register a runner pool
+              </button>
+              first to enable this.
+            </template>
+          </p>
+        </div>
+
+        <!-- Tester environments → environment provider -->
+        <div class="space-y-1">
+          <label class="flex items-center gap-2">
+            <USwitch
+              size="sm"
+              :model-value="settings.settings.delegateTestEnvToProvider"
+              :disabled="savingDelegation || !envRegistered"
+              @update:model-value="(v) => setDelegation({ delegateTestEnvToProvider: v })"
+            />
+            <span class="text-sm text-slate-200">
+              Provision Tester environments via the provider
+            </span>
+          </label>
+          <p class="pl-9 text-[11px] text-slate-400">
+            Stand the Tester's preview environment up through the environment provider configured
+            below instead of in-container docker-compose. Connect a provider first to enable this.
+          </p>
+        </div>
+      </section>
+
+      <!-- In local mode the local-vs-external toggle for agents lives on the Ephemeral
+           environments screen (alongside the env toggle), so they're configured together. -->
+      <p
+        v-if="isLocal && kind === 'runner-pool'"
+        class="mb-4 rounded-md border border-slate-700 bg-slate-900/40 px-3 py-2 text-[11px] text-slate-400"
+      >
+        Register your pool here, then enable "Run container agents on the runner pool" on the
+        <button
+          type="button"
+          class="text-sky-400 underline underline-offset-2 hover:text-sky-300"
+          @click="ui.openProviderConnection('environment')"
+        >
+          Ephemeral environments
+        </button>
+        screen to route this workspace's agents to it.
+      </p>
+
       <div v-if="descriptor" class="space-y-4">
         <div class="flex items-start justify-between gap-3">
           <p class="text-xs text-slate-400">{{ meta?.blurb }}</p>

package/app/components/settings/ServiceFragmentDefaultsPanel.vue

@@ -8,6 +8,7 @@ import { onMounted, ref } from 'vue'
 
 const fragments = useFragmentsStore()
 const defaults = useServiceFragmentDefaultsStore()
+const ui = useUiStore()
 const toast = useToast()
 
 const busy = ref(false)
@@ -105,5 +106,25 @@ function remove(id: string) {
     <p v-else class="text-[11px] text-slate-500">
       None — new services start with no service-level fragments.
     </p>
+
+    <div class="flex flex-wrap gap-x-4 gap-y-1 border-t border-slate-800 pt-3 text-[11px]">
+      <span class="text-slate-500">
+        Need to add or edit the fragments themselves (hand-authored, linked docs, repos)?
+      </span>
+      <button
+        type="button"
+        class="font-medium text-primary-400 hover:underline"
+        @click="ui.openFragmentLibrary()"
+      >
+        Manage this board's fragment library →
+      </button>
+      <button
+        type="button"
+        class="font-medium text-primary-400 hover:underline"
+        @click="ui.openAccountSettings('fragments')"
+      >
+        Manage account fragments →
+      </button>
+    </div>
   </div>
 </template>

package/app/composables/api/fragments.ts

@@ -53,10 +53,19 @@ export function fragmentsApi({ http, ws, scope }: ApiContext) {
       body: CreateDocumentFragmentInput,
     ) => http<PromptFragment>(`${scope(kind, id)}/document-fragments`, { method: 'POST', body }),
 
-    // Force an immediate live re-resolve of a document-backed fragment.
-    refreshFragment: (kind: FragmentOwnerKind, id: string, fragmentId: string) =>
+    // Force an immediate live re-resolve of a document-backed fragment. At the
+    // account scope the backend needs a `viaWorkspaceId` (the workspace whose
+    // document-source connection to fetch through); it is ignored at workspace scope.
+    refreshFragment: (
+      kind: FragmentOwnerKind,
+      id: string,
+      fragmentId: string,
+      viaWorkspaceId?: string,
+    ) =>
       http<PromptFragment>(
-        `${scope(kind, id)}/prompt-fragments/${encodeURIComponent(fragmentId)}/refresh`,
+        `${scope(kind, id)}/prompt-fragments/${encodeURIComponent(fragmentId)}/refresh${
+          viaWorkspaceId ? `?viaWorkspaceId=${encodeURIComponent(viaWorkspaceId)}` : ''
+        }`,
         { method: 'POST' },
       ),
 

package/app/pages/index.vue

@@ -29,6 +29,7 @@ import FragmentLibraryPanel from '~/components/fragments/FragmentLibraryPanel.vu
 import CommandBar from '~/components/layout/CommandBar.vue'
 import IntegrationsHub from '~/components/layout/IntegrationsHub.vue'
 import WorkspaceSettingsPanel from '~/components/settings/WorkspaceSettingsPanel.vue'
+import AccountSettingsPanel from '~/components/settings/AccountSettingsPanel.vue'
 import ObservabilityConnectionPanel from '~/components/settings/ObservabilityConnectionPanel.vue'
 import ProviderConnectionPanel from '~/components/settings/ProviderConnectionPanel.vue'
 import ProviderConfigBanner from '~/components/layout/ProviderConfigBanner.vue'
@@ -188,6 +189,7 @@ watch(
       <CommandBar />
       <IntegrationsHub />
       <WorkspaceSettingsPanel />
+      <AccountSettingsPanel />
       <ObservabilityConnectionPanel />
       <ProviderConnectionPanel />
       <ModelConfigurationPanel />

package/app/stores/fragmentLibrary.ts

@@ -3,6 +3,7 @@ import { computed, ref } from 'vue'
 import type {
   CreateDocumentFragmentInput,
   CreatePromptFragmentInput,
+  FragmentOwnerKind,
   FragmentSource,
   LinkFragmentSourceInput,
   PromptFragment,
@@ -12,40 +13,62 @@ import type {
 import { useWorkspaceStore } from '~/stores/workspace'
 
 /**
- * Prompt-fragment library state (ADR 0006), scoped to the active board. Holds the
- * board's own (workspace-tier) fragments, its linked guideline repos, and the
- * merged catalog an agent actually sees (built-in ∪ account ∪ workspace). The
- * management surface targets the workspace tier; the resolved read is what every
- * agent run is selected from. `available` mirrors the backend's opt-in gate: a
- * 503 from the resolve probe means the feature is off and the UI hides its entry.
+ * Prompt-fragment library state (ADR 0006), scoped to a single owner — a board
+ * (`workspace`) or an account. Holds that owner's own (raw) tier fragments, its
+ * linked guideline repos, and — for the **workspace** tier only — the merged
+ * catalog an agent actually sees (built-in ∪ account ∪ workspace). `available`
+ * mirrors the backend's opt-in gate: a 503 from the probe means the feature is off
+ * and the UI hides its entry.
+ *
+ * Two entry points share this setup: `useFragmentLibraryStore` (the workspace
+ * singleton that follows the active board, used by the navbar + the board modal)
+ * and `useFragmentLibrary(kind, ownerId)` (an owner-keyed store, used for the
+ * account tier). The account tier has no resolved/merged catalog and, for
+ * document-backed fragments, needs a `viaWorkspaceId` (document-source credentials
+ * are per-workspace).
  */
-export const useFragmentLibraryStore = defineStore('fragmentLibrary', () => {
+function fragmentLibrarySetup(kind: FragmentOwnerKind, resolveOwnerId: () => string | null) {
   const api = useApi()
-  const workspace = useWorkspaceStore()
+
+  /** The merged/resolved catalog only exists at the workspace tier. */
+  const hasResolved = kind === 'workspace'
 
   /** null = not probed yet; true/false = library on/off. */
   const available = ref<boolean | null>(null)
-  /** This board's hand-authored + sourced fragments (workspace tier, raw). */
+  /** This owner's hand-authored + sourced fragments (its own tier, raw). */
   const fragments = ref<PromptFragment[]>([])
-  /** The merged catalog an agent sees (with each entry's winning tier). */
+  /** The merged catalog an agent sees (workspace tier only; empty otherwise). */
   const resolved = ref<ResolvedFragment[]>([])
-  /** Linked guideline repos for this board. */
+  /** Linked guideline repos for this owner. */
   const sources = ref<FragmentSource[]>([])
   /** Per-source "changes available" counts from the last status check. */
   const sourceChanges = ref<Record<string, number>>({})
   const loading = ref(false)
+  /**
+   * Account-tier document fragments only: the workspace whose stored
+   * document-source connection is used to fetch/refresh the page (credentials are
+   * per-workspace). Set by the caller; ignored at the workspace scope (the owner
+   * board is used directly).
+   */
+  const viaWorkspaceId = ref<string | undefined>(undefined)
 
   const builtinCount = computed(() => resolved.value.filter((f) => f.tier === 'builtin').length)
 
-  /** Probe the feature + load this board's tier, sources and resolved catalog. */
+  function requireOwnerId(): string {
+    const id = resolveOwnerId()
+    if (!id) throw new Error('No fragment-library owner')
+    return id
+  }
+
+  /** Probe the feature + load this owner's tier, sources and (ws) resolved catalog. */
   async function probe() {
-    if (!workspace.workspaceId) return
-    const id = workspace.requireId()
+    const id = resolveOwnerId()
+    if (!id) return
     try {
       const [tier, srcs, merged] = await Promise.all([
-        api.listFragments('workspace', id),
-        api.listFragmentSources('workspace', id).catch(() => [] as FragmentSource[]),
-        api.getResolvedFragments(id),
+        api.listFragments(kind, id),
+        api.listFragmentSources(kind, id).catch(() => [] as FragmentSource[]),
+        hasResolved ? api.getResolvedFragments(id) : Promise.resolve([] as ResolvedFragment[]),
       ])
       fragments.value = tier
       sources.value = srcs
@@ -60,13 +83,14 @@ export const useFragmentLibraryStore = defineStore('fragmentLibrary', () => {
   }
 
   async function refreshResolved() {
-    resolved.value = await api.getResolvedFragments(workspace.requireId())
+    if (!hasResolved) return
+    resolved.value = await api.getResolvedFragments(requireOwnerId())
   }
 
   async function create(input: CreatePromptFragmentInput) {
     loading.value = true
     try {
-      await api.createFragment('workspace', workspace.requireId(), input)
+      await api.createFragment(kind, requireOwnerId(), input)
       await Promise.all([reloadTier(), refreshResolved()])
     } finally {
       loading.value = false
@@ -74,7 +98,7 @@ export const useFragmentLibraryStore = defineStore('fragmentLibrary', () => {
   }
 
   async function update(fragmentId: string, patch: UpdatePromptFragmentInput) {
-    await api.updateFragment('workspace', workspace.requireId(), fragmentId, patch)
+    await api.updateFragment(kind, requireOwnerId(), fragmentId, patch)
     await Promise.all([reloadTier(), refreshResolved()])
   }
 
@@ -82,7 +106,10 @@ export const useFragmentLibraryStore = defineStore('fragmentLibrary', () => {
   async function createDocumentFragment(input: CreateDocumentFragmentInput) {
     loading.value = true
     try {
-      await api.createDocumentFragment('workspace', workspace.requireId(), input)
+      await api.createDocumentFragment(kind, requireOwnerId(), {
+        ...input,
+        ...(viaWorkspaceId.value ? { viaWorkspaceId: viaWorkspaceId.value } : {}),
+      })
       await Promise.all([reloadTier(), refreshResolved()])
     } finally {
       loading.value = false
@@ -93,31 +120,31 @@ export const useFragmentLibraryStore = defineStore('fragmentLibrary', () => {
   async function refreshDocumentFragment(fragmentId: string) {
     loading.value = true
     try {
-      await api.refreshFragment('workspace', workspace.requireId(), fragmentId)
+      await api.refreshFragment(kind, requireOwnerId(), fragmentId, viaWorkspaceId.value)
       await Promise.all([reloadTier(), refreshResolved()])
     } finally {
       loading.value = false
     }
   }
 
-  /** Tombstone a fragment at the workspace tier (suppresses an inherited one). */
+  /** Tombstone a fragment at this tier (suppresses an inherited one). */
   async function remove(fragmentId: string) {
-    await api.deleteFragment('workspace', workspace.requireId(), fragmentId)
+    await api.deleteFragment(kind, requireOwnerId(), fragmentId)
     await Promise.all([reloadTier(), refreshResolved()])
   }
 
   async function reloadTier() {
-    fragments.value = await api.listFragments('workspace', workspace.requireId())
+    fragments.value = await api.listFragments(kind, requireOwnerId())
   }
 
   async function linkSource(input: LinkFragmentSourceInput) {
-    const source = await api.linkFragmentSource('workspace', workspace.requireId(), input)
+    const source = await api.linkFragmentSource(kind, requireOwnerId(), input)
     sources.value = [source, ...sources.value]
     return source
   }
 
   async function unlinkSource(sourceId: string) {
-    await api.unlinkFragmentSource('workspace', workspace.requireId(), sourceId)
+    await api.unlinkFragmentSource(kind, requireOwnerId(), sourceId)
     sources.value = sources.value.filter((s) => s.id !== sourceId)
     await refreshResolved()
   }
@@ -126,7 +153,7 @@ export const useFragmentLibraryStore = defineStore('fragmentLibrary', () => {
   async function syncSource(sourceId: string) {
     loading.value = true
     try {
-      const result = await api.syncFragmentSource('workspace', workspace.requireId(), sourceId)
+      const result = await api.syncFragmentSource(kind, requireOwnerId(), sourceId)
       delete sourceChanges.value[sourceId]
       await Promise.all([reloadSources(), refreshResolved()])
       return result
@@ -137,7 +164,7 @@ export const useFragmentLibraryStore = defineStore('fragmentLibrary', () => {
 
   /** Cheap "check for changes" for a source; caches the changed count. */
   async function checkSource(sourceId: string) {
-    const status = await api.fragmentSourceStatus('workspace', workspace.requireId(), sourceId)
+    const status = await api.fragmentSourceStatus(kind, requireOwnerId(), sourceId)
     sourceChanges.value = {
       ...sourceChanges.value,
       [sourceId]: status.changed ? status.changedCount : 0,
@@ -146,16 +173,19 @@ export const useFragmentLibraryStore = defineStore('fragmentLibrary', () => {
   }
 
   async function reloadSources() {
-    sources.value = await api.listFragmentSources('workspace', workspace.requireId())
+    sources.value = await api.listFragmentSources(kind, requireOwnerId())
   }
 
   return {
+    kind,
+    hasResolved,
     available,
     fragments,
     resolved,
     sources,
     sourceChanges,
     loading,
+    viaWorkspaceId,
     builtinCount,
     probe,
     refreshResolved,
@@ -169,4 +199,23 @@ export const useFragmentLibraryStore = defineStore('fragmentLibrary', () => {
     syncSource,
     checkSource,
   }
-})
+}
+
+/**
+ * The workspace-tier library for the **active** board — a singleton that resolves
+ * the owner lazily, so it follows board switches and is shared by the navbar
+ * (SideBar/CommandBar probes) and the board fragment modal.
+ */
+export const useFragmentLibraryStore = defineStore('fragmentLibrary', () =>
+  fragmentLibrarySetup('workspace', () => useWorkspaceStore().workspaceId),
+)
+
+/**
+ * An owner-keyed library store, used for the **account** tier (and reusable for any
+ * explicit owner). Keyed by `(kind, ownerId)` so each account gets isolated state.
+ */
+export function useFragmentLibrary(kind: FragmentOwnerKind, ownerId: string) {
+  return defineStore(`fragmentLibrary:${kind}:${ownerId}`, () =>
+    fragmentLibrarySetup(kind, () => ownerId),
+  )()
+}

package/app/stores/ui.ts

@@ -96,6 +96,13 @@ export const useUiStore = defineStore('ui', () => {
   // `workspaceSettingsTab` lets other surfaces deep-link straight to a tab.
   const workspaceSettingsOpen = ref(false)
   const workspaceSettingsTab = ref('workspace')
+  // Account-settings modal: a single tabbed window for the per-account configuration —
+  // the team panel (members + roles + invitations + email sender + account API keys,
+  // `AccountTeamSettings`) and the account-tier prompt-fragment library. Account-scoped
+  // (distinct from workspace settings). `accountSettingsTab` lets other surfaces deep-link
+  // straight to a tab.
+  const accountSettingsOpen = ref(false)
+  const accountSettingsTab = ref('team')
   // Observability integration: the post-release-health connection panel (Datadog
   // today, pluggable). NB: distinct from `observabilityInstanceId` below, which is the
   // LLM per-call observability panel.
@@ -380,6 +387,17 @@ export const useUiStore = defineStore('ui', () => {
   function setWorkspaceSettingsTab(tab: string) {
     workspaceSettingsTab.value = tab
   }
+  function openAccountSettings(tab = 'team') {
+    cameFromIntegrations.value = false
+    accountSettingsTab.value = tab
+    accountSettingsOpen.value = true
+  }
+  function closeAccountSettings() {
+    accountSettingsOpen.value = false
+  }
+  function setAccountSettingsTab(tab: string) {
+    accountSettingsTab.value = tab
+  }
   function openObservabilityConnection() {
     cameFromIntegrations.value = false
     observabilityConnectionOpen.value = true
@@ -555,6 +573,8 @@ export const useUiStore = defineStore('ui', () => {
     cameFromIntegrations,
     workspaceSettingsOpen,
     workspaceSettingsTab,
+    accountSettingsOpen,
+    accountSettingsTab,
     observabilityConnectionOpen,
     providerConnectionKind,
     modelConfigOpen,
@@ -617,6 +637,9 @@ export const useUiStore = defineStore('ui', () => {
     openWorkspaceSettings,
     closeWorkspaceSettings,
     setWorkspaceSettingsTab,
+    openAccountSettings,
+    closeAccountSettings,
+    setAccountSettingsTab,
     openObservabilityConnection,
     closeObservabilityConnection,
     openProviderConnection,

package/app/stores/workspaceSettings.ts

@@ -11,6 +11,8 @@ const DEFAULTS: WorkspaceSettings = {
   taskLimitPerType: null,
   storeAgentContext: true,
   kaizenEnabled: true,
+  delegateAgentsToRunnerPool: false,
+  delegateTestEnvToProvider: false,
   spendCurrency: null,
   spendMonthlyLimit: null,
 }

package/app/types/domain.ts

@@ -512,6 +512,10 @@ export interface WorkspaceSettings {
   storeAgentContext: boolean
   /** Whether the Kaizen agent grades agent steps after each run. On by default. */
   kaizenEnabled: boolean
+  /** Local mode only: dispatch container agents to the runner pool instead of host Docker. */
+  delegateAgentsToRunnerPool: boolean
+  /** Local mode only: provision Tester environments via the env provider instead of DinD. */
+  delegateTestEnvToProvider: boolean
   /** Spend budget currency (ISO 4217). Null ⇒ the built-in default (`EUR`). */
   spendCurrency: string | null
   /** Monthly spend budget in `spendCurrency`. Null ⇒ the built-in default. */
@@ -526,6 +530,8 @@ export interface UpdateWorkspaceSettingsInput {
   taskLimitPerType?: Partial<Record<CreateTaskType, number>> | null
   storeAgentContext?: boolean
   kaizenEnabled?: boolean
+  delegateAgentsToRunnerPool?: boolean
+  delegateTestEnvToProvider?: boolean
   spendCurrency?: string | null
   spendMonthlyLimit?: number | null
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/app",
-  "version": "0.32.2",
+  "version": "0.34.0",
   "description": "Reusable Nuxt layer for the Agent Architecture Board SPA (components, stores, composables, pages). Consume it from a thin deployment app via `extends: ['@cat-factory/app']` and point it at your backend with NUXT_PUBLIC_API_BASE. See deploy/frontend for an example.",
   "repository": {
     "type": "git",