@kal-elsam/kairo-runtime 0.11.0 → 0.13.0

package/src/global/ink/cockpit-control-center.js

@@ -5,13 +5,32 @@ import {
   formatMeasuredBudgets,
   formatUsageLinesFromModel
 } from "./cockpit-usage.js";
+import { LAYOUT_MODES } from "./layout.js";
+import {
+  formatSystemResourcesLines,
+  formatResourceAdviceLines
+} from "./system-resources-display.js";
+import { formatEcosystemUpdateLines } from "./ecosystem-updates-display.js";
+import { formatObsidianVaultLines } from "./obsidian-vault-display.js";
+
+const HERMES_WIDE_SESSION_LIMIT = 3;
+const HERMES_TITLE_MAX = 48;
+
+export {
+  diskFreeTone,
+  formatSystemResourcesLines,
+  formatResourceAdviceLines
+} from "./system-resources-display.js";
+export { formatEcosystemUpdateLines } from "./ecosystem-updates-display.js";
+export { formatObsidianVaultLines } from "./obsidian-vault-display.js";
 
 export function buildControlCenterModel({
   projectName = "project",
   snapshot = null,
   dashboard = null,
-  layoutMode = "compact",
-  alerts = null
+  layoutMode = LAYOUT_MODES.COMPACT,
+  alerts = null,
+  companion = null
 } = {}) {
   if (!snapshot) {
     return {
@@ -49,7 +68,9 @@ export function buildControlCenterModel({
       activity: { headline: "No activity yet" },
       alerts: formatAlertsHeadline(alerts),
       tokens: { headline: "Data unavailable" },
-      includeEmbeddedStatus: layoutMode !== "wide",
+      companion: null,
+      companionNextAction: null,
+      includeEmbeddedStatus: layoutMode !== LAYOUT_MODES.WIDE,
       runsSecondaryHint: "Detail via Enter · / actions"
     };
   }
@@ -94,11 +115,93 @@ export function buildControlCenterModel({
     },
     alerts: formatAlertsHeadline(alerts),
     tokens: { headline: formatTokenHeadline(snapshot.budgets) },
-    includeEmbeddedStatus: layoutMode !== "wide",
+    companion: formatCompanionOverlay(companion, layoutMode),
+    companionNextAction: companion?.nextSafeAction ?? null,
+    includeEmbeddedStatus: layoutMode !== LAYOUT_MODES.WIDE,
     runsSecondaryHint: "Detail via Enter · / actions"
   };
 }
 
+/**
+ * Observe-only Hermes activity lines for Cockpit overlay.
+ * Never includes session ids, baseUrl, diagnostics dumps, or control affordances.
+ */
+export function formatHermesActivityLines(activity, layoutMode = LAYOUT_MODES.COMPACT) {
+  if (activity == null || typeof activity !== "object") {
+    return ["Hermes · unavailable"];
+  }
+  const state = typeof activity.state === "string" && activity.state.length > 0
+    ? activity.state
+    : "error";
+  if (state !== "available" && state !== "partial") {
+    return [`Hermes · ${state}`];
+  }
+
+  const agg = activity.aggregates && typeof activity.aggregates === "object"
+    ? activity.aggregates
+    : {};
+  const active = Number.isInteger(agg.activeCount) ? agg.activeCount : null;
+  const ended = Number.isInteger(agg.endedCount) ? agg.endedCount : null;
+  const bits = [`Hermes · ${state}`];
+  if (active != null) bits.push(`${active} active`);
+  if (layoutMode !== LAYOUT_MODES.MINIMAL && ended != null) {
+    bits.push(`${ended} ended`);
+  }
+  const lines = [bits.join(" · ")];
+
+  if (layoutMode !== LAYOUT_MODES.WIDE) return lines;
+
+  const sessions = Array.isArray(activity.sessions) ? activity.sessions : [];
+  for (const session of sessions.slice(0, HERMES_WIDE_SESSION_LIMIT)) {
+    const label = hermesSessionLabel(session);
+    if (label) lines.push(`  · ${label}`);
+  }
+  if (agg.hasMore === true || sessions.length > HERMES_WIDE_SESSION_LIMIT) {
+    lines.push("  · … more sessions");
+  }
+  return lines;
+}
+
+function hermesSessionLabel(session) {
+  if (session == null || typeof session !== "object" || Array.isArray(session)) return null;
+  const title = typeof session.title === "string" && session.title.trim()
+    ? session.title.trim()
+    : null;
+  const source = typeof session.source === "string" && session.source.trim()
+    ? session.source.trim()
+    : null;
+  const head = (title ?? source ?? "untitled")
+    .replace(/[\r\n\t]+/g, " ")
+    .slice(0, HERMES_TITLE_MAX);
+  const flag = session.active === true ? "active" : "ended";
+  return `${head} · ${flag}`;
+}
+
+function formatCompanionOverlay(companion, layoutMode = LAYOUT_MODES.COMPACT) {
+  if (!companion) return null;
+  const g = companion.signals?.gentle?.state ?? "unknown";
+  const gy = companion.signals?.graphify;
+  const graphBit = gy?.graphStatus ? `/${gy.graphStatus}` : "";
+  const en = companion.engram?.status ?? "unknown";
+  const links = companion.links?.length ?? 0;
+  return {
+    ok: companion.ok !== false,
+    lines: [
+      `Gentle · ${g}`,
+      `Graphify · ${gy?.state ?? "unknown"}${graphBit}`,
+      `Engram · ${en}`,
+      `Soft links · ${links}`,
+      ...formatHermesActivityLines(companion.signals?.hermes?.activity, layoutMode),
+      ...formatSystemResourcesLines(companion.signals?.system?.resources, layoutMode),
+      ...formatResourceAdviceLines(companion.signals?.system?.advice, layoutMode),
+      ...formatEcosystemUpdateLines(companion.signals?.ecosystem?.updates, layoutMode),
+      ...formatObsidianVaultLines(companion.signals?.obsidian?.vault, layoutMode)
+    ],
+    links: companion.links ?? [],
+    error: companion.error ?? null
+  };
+}
+
 function formatHealthLabel(kind) {
   switch (kind) {
     case CONTROL_PLANE_HEALTH.NOT_CONFIGURED:

package/src/global/ink/cockpit-scan.js

@@ -12,7 +12,8 @@ export async function loadCockpitScanBundle({
   cliVersion,
   buildDashboard,
   buildDiagnostics,
-  buildSnapshot
+  buildSnapshot,
+  buildCompanion = null
 }) {
   const [dashboard, diagnostics, snapshot] = await Promise.all([
     buildDashboard({ homeDir, workspaceRoot, cliVersion }),
@@ -26,7 +27,24 @@ export async function loadCockpitScanBundle({
       ...CONTROL_PLANE_AUTO_SCAN
     })
   ]);
-  return { dashboard, diagnostics, snapshot };
+  let companion = null;
+  if (typeof buildCompanion === "function") {
+    try {
+      companion = await buildCompanion({
+        homeDir, workspaceRoot, packageName, packageRoot, cliVersion, dashboard, snapshot
+      });
+    } catch (error) {
+      const detail = error instanceof Error ? error.message : String(error);
+      companion = {
+        ok: false, error: detail, signals: null, engram: null, links: [], alertsCount: null,
+        nextSafeAction: {
+          kind: "investigate", title: "Investigate companion diagnostics",
+          detail, secondary: true, displayOnly: true
+        }
+      };
+    }
+  }
+  return { dashboard, diagnostics, snapshot, companion };
 }
 
 /**

package/src/global/ink/ecosystem-updates-display.js

@@ -0,0 +1,37 @@
+import { LAYOUT_MODES } from "./layout.js";
+
+/** Display-only ecosystem update lines for Cockpit companion overlay. */
+export function formatEcosystemUpdateLines(updates, layoutMode = LAYOUT_MODES.COMPACT) {
+  if (updates == null || typeof updates !== "object") return ["Updates · unavailable"];
+  const state = typeof updates.state === "string" && updates.state ? updates.state : "error";
+  const tools = updates.tools && typeof updates.tools === "object" ? updates.tools : {};
+  const pending = ["kairo", "hermes", "gentle", "skills"]
+    .map((id) => tools[id])
+    .filter((t) => t && t.updateAvailable === true);
+  const cache = updates.cacheHit === true ? " · cache" : "";
+
+  if (state !== "available" && state !== "partial" && pending.length === 0) {
+    return [`Updates · ${state}${cache}`];
+  }
+
+  const lines = [
+    pending.length > 0
+      ? `Updates · ${pending.length} available${cache}`
+      : `Updates · current${cache}`
+  ];
+  if (layoutMode === LAYOUT_MODES.MINIMAL) return lines;
+
+  for (const tool of pending.slice(0, layoutMode === LAYOUT_MODES.WIDE ? 4 : 2)) {
+    const inst = tool.installed ?? "—";
+    const latest = tool.latest ?? "—";
+    lines.push(`  · ${tool.id} ${inst} → ${latest}`);
+  }
+  if (pending.length === 0 && layoutMode === LAYOUT_MODES.WIDE) {
+    for (const id of ["kairo", "hermes", "gentle", "skills"]) {
+      const tool = tools[id];
+      if (!tool) continue;
+      lines.push(`  · ${id} · ${tool.state ?? "unknown"}`);
+    }
+  }
+  return lines;
+}

package/src/global/ink/launch-input.js

@@ -1,6 +1,7 @@
 import {
   LAUNCH_PERMISSION_OPTIONS,
   LAUNCH_WIZARD_STEPS,
+  advanceLaunchWizardStep,
   retreatLaunchWizardStep
 } from "./orchestrator-state.js";
 
@@ -92,7 +93,19 @@ export function handleLaunchInput(ctx) {
 
   if (launchStep === LAUNCH_WIZARD_STEPS.CONFIRM) {
     if (key.return) {
-      handleLaunch({ ...launchDraft, permissionIndex: launchPermissionIndex });
+      const next = advanceLaunchWizardStep(LAUNCH_WIZARD_STEPS.CONFIRM, {
+        permissionIndex: launchPermissionIndex
+      });
+      if (next === LAUNCH_WIZARD_STEPS.UNSAFE_CONFIRM) {
+        setLaunchStep(LAUNCH_WIZARD_STEPS.UNSAFE_CONFIRM);
+        return true;
+      }
+      handleLaunch({
+        ...launchDraft,
+        permissionIndex: launchPermissionIndex,
+        allowUnsafePermissions: false,
+        permissionSource: "cockpit"
+      });
       return true;
     }
     if (key.escape) {
@@ -101,6 +114,24 @@ export function handleLaunchInput(ctx) {
     }
   }
 
+  if (launchStep === LAUNCH_WIZARD_STEPS.UNSAFE_CONFIRM) {
+    const answer = String(inputKey ?? "").toLowerCase();
+    if (answer === "y") {
+      handleLaunch({
+        ...launchDraft,
+        permissionIndex: launchPermissionIndex,
+        allowUnsafePermissions: true,
+        permissionSource: "cockpit"
+      });
+      return true;
+    }
+    if (answer === "n" || key.escape) {
+      setLaunchStep(LAUNCH_WIZARD_STEPS.CONFIRM);
+      return allowEscapeRetreat && key.escape ? "retreated" : true;
+    }
+    return true;
+  }
+
   if (inputKey.toLowerCase() === "r") {
     reload().catch(() => {});
     return true;

package/src/global/ink/obsidian-vault-display.js

@@ -0,0 +1,37 @@
+import { LAYOUT_MODES } from "./layout.js";
+
+/** Display-only Obsidian vault lines — never shows paths, write CTAs, or sync controls. */
+export function formatObsidianVaultLines(status, layoutMode = LAYOUT_MODES.COMPACT) {
+  if (status == null || typeof status !== "object") return ["Obsidian · unavailable"];
+  const state = typeof status.state === "string" && status.state ? status.state : "error";
+  const notes = typeof status.noteCount === "number" && Number.isFinite(status.noteCount)
+    ? status.noteCount
+    : 0;
+  const pending = typeof status.pendingProposals === "number" && status.pendingProposals > 0
+    ? status.pendingProposals
+    : 0;
+
+  if (state === "unconfigured") return ["Obsidian · unconfigured"];
+  if (state === "missing") return ["Obsidian · missing"];
+  if (state !== "available" && state !== "partial") {
+    return [`Obsidian · ${state}`];
+  }
+
+  const head = state === "partial"
+    ? `Obsidian · partial · ${notes} notes`
+    : `Obsidian · ${notes} notes`;
+  const lines = [head];
+  if (layoutMode === LAYOUT_MODES.MINIMAL) return lines;
+
+  if (pending > 0) lines.push(`  · pending · ${pending}`);
+  else if (layoutMode === LAYOUT_MODES.COMPACT) lines.push("  · no auto-sync");
+
+  if (layoutMode === LAYOUT_MODES.WIDE) {
+    const pub = typeof status.lastPublishAt === "string" && status.lastPublishAt
+      ? status.lastPublishAt.slice(0, 19)
+      : "never";
+    lines.push(`  · last publish · ${pub}`);
+    if (pending === 0) lines.push("  · no auto-sync");
+  }
+  return lines;
+}

package/src/global/ink/orchestrator-app.js

@@ -502,7 +502,8 @@ export function OrchestratorApp({
     snapshot: data.snapshot,
     dashboard: data.dashboard,
     layoutMode: mode,
-    alerts: data.alerts
+    alerts: data.alerts,
+    companion: data.companion
   });
   const systemOnline = data.snapshot
     ? data.snapshot.health !== CONTROL_PLANE_HEALTH.NOT_CONFIGURED

package/src/global/ink/orchestrator-state.js

@@ -47,7 +47,8 @@ export const LAUNCH_WIZARD_STEPS = {
   TASK: "task",
   MODEL: "model",
   PERMISSIONS: "permissions",
-  CONFIRM: "confirm"
+  CONFIRM: "confirm",
+  UNSAFE_CONFIRM: "unsafe-confirm"
 };
 
 export const LAUNCH_PERMISSION_OPTIONS = [
@@ -75,7 +76,7 @@ export function resolveLaunchPermissions(draft) {
   return LAUNCH_PERMISSION_OPTIONS[draft.permissionIndex]?.permissions ?? [];
 }
 
-export function advanceLaunchWizardStep(currentStep) {
+export function advanceLaunchWizardStep(currentStep, { permissionIndex = 0 } = {}) {
   switch (currentStep) {
     case LAUNCH_WIZARD_STEPS.AGENT:
       return LAUNCH_WIZARD_STEPS.TASK;
@@ -85,6 +86,10 @@ export function advanceLaunchWizardStep(currentStep) {
       return LAUNCH_WIZARD_STEPS.PERMISSIONS;
     case LAUNCH_WIZARD_STEPS.PERMISSIONS:
       return LAUNCH_WIZARD_STEPS.CONFIRM;
+    case LAUNCH_WIZARD_STEPS.CONFIRM: {
+      const perms = resolveLaunchPermissions({ permissionIndex });
+      return perms.length > 0 ? LAUNCH_WIZARD_STEPS.UNSAFE_CONFIRM : LAUNCH_WIZARD_STEPS.CONFIRM;
+    }
     default:
       return LAUNCH_WIZARD_STEPS.CONFIRM;
   }
@@ -92,6 +97,8 @@ export function advanceLaunchWizardStep(currentStep) {
 
 export function retreatLaunchWizardStep(currentStep) {
   switch (currentStep) {
+    case LAUNCH_WIZARD_STEPS.UNSAFE_CONFIRM:
+      return LAUNCH_WIZARD_STEPS.CONFIRM;
     case LAUNCH_WIZARD_STEPS.CONFIRM:
       return LAUNCH_WIZARD_STEPS.PERMISSIONS;
     case LAUNCH_WIZARD_STEPS.PERMISSIONS:
@@ -147,6 +154,14 @@ export function formatLaunchWizardLines({
     return lines;
   }
 
+  if (step === LAUNCH_WIZARD_STEPS.UNSAFE_CONFIRM) {
+    const label = LAUNCH_PERMISSION_OPTIONS[permissionIndex]?.label ?? "unsafe";
+    lines.push(`Unsafe mode selected: ${label}`);
+    lines.push("This skips agent permission prompts for this run only.");
+    lines.push("Press Y to confirm unsafe launch · N/Esc to go back");
+    return lines;
+  }
+
   lines.push(`Agent: ${draft.agentId ?? "—"}`);
   lines.push(`Task length: ${draft.task.length} chars (content not stored)`);
   lines.push(`Model: ${draft.model || "default"}`);

package/src/global/ink/system-resources-display.js

@@ -0,0 +1,109 @@
+import { LAYOUT_MODES } from "./layout.js";
+
+/** Disk free% tone — never invents a percent. */
+export function diskFreeTone(freePercent) {
+  if (typeof freePercent !== "number" || !Number.isFinite(freePercent)) return null;
+  if (freePercent < 10) return "critical";
+  if (freePercent < 20) return "warning";
+  return "healthy";
+}
+
+function formatBytesShort(bytes) {
+  if (typeof bytes !== "number" || !Number.isFinite(bytes) || bytes < 0) return null;
+  const gib = bytes / (1024 ** 3);
+  if (gib >= 1) return `${Math.round(gib * 10) / 10}G`;
+  const mib = bytes / (1024 ** 2);
+  return `${Math.round(mib)}M`;
+}
+
+function pctLabel(value, suffix = "% free") {
+  if (typeof value !== "number" || !Number.isFinite(value)) return null;
+  return `${value}${suffix}`;
+}
+
+/**
+ * Display-only System resource lines for Cockpit companion overlay.
+ * Never invents metrics; never includes paths, args, or control affordances.
+ */
+export function formatSystemResourcesLines(resources, layoutMode = LAYOUT_MODES.COMPACT) {
+  if (resources == null || typeof resources !== "object") {
+    return ["System · unavailable"];
+  }
+  const state = typeof resources.state === "string" && resources.state.length > 0
+    ? resources.state
+    : "error";
+  if (state !== "available" && state !== "partial") {
+    return [`System · ${state}`];
+  }
+
+  const ram = pctLabel(resources.memory?.freePercent);
+  const swapUsed = formatBytesShort(resources.swap?.usedBytes);
+  const diskPct = resources.disk?.freePercent;
+  const disk = pctLabel(diskPct);
+  const tone = diskFreeTone(diskPct);
+
+  const bits = ["System"];
+  bits.push(ram ? `RAM ${ram}` : "RAM n/a");
+  bits.push(swapUsed ? `Swap ${swapUsed} used` : "Swap n/a");
+  bits.push(disk ? `Disk ${disk}` : "Disk n/a");
+  if (tone && tone !== "healthy") bits.push(tone);
+
+  const lines = [bits.join(" · ")];
+  if (layoutMode === LAYOUT_MODES.MINIMAL) return lines;
+
+  const ramFree = resources.memory?.freePercent;
+  const memoryPressure = typeof ramFree === "number" && Number.isFinite(ramFree) && ramFree < 15;
+  if (memoryPressure) {
+    lines.push("  · Memory pressure · swap elevated relevance");
+  } else {
+    lines.push("  · Swap informational");
+  }
+
+  const proc = resources.processes && typeof resources.processes === "object"
+    ? resources.processes
+    : null;
+  if (proc) {
+    const total = Number.isInteger(proc.totalCount) ? proc.totalCount : null;
+    const zombies = Number.isInteger(proc.zombieCount) ? proc.zombieCount : null;
+    if (total != null && zombies != null) {
+      lines.push(`  · Processes ${total} · zombies ${zombies}`);
+    }
+  }
+
+  if (layoutMode !== LAYOUT_MODES.WIDE) return lines;
+
+  const tracked = Array.isArray(proc?.tracked) ? proc.tracked : [];
+  for (const entry of tracked.slice(0, 4)) {
+    if (entry == null || typeof entry !== "object") continue;
+    if (typeof entry.name !== "string" || !Number.isInteger(entry.count)) continue;
+    lines.push(`  · ${entry.name} ×${entry.count}`);
+  }
+  const thermal = resources.thermal?.state ?? "unavailable";
+  const ssd = resources.ssdWear?.state ?? "unavailable";
+  lines.push(`  · Thermal · ${thermal}`);
+  lines.push(`  · SSD wear · ${ssd}`);
+  return lines;
+}
+
+/** Display-only advisor lines from deterministic recommendations. */
+export function formatResourceAdviceLines(advice, layoutMode = LAYOUT_MODES.COMPACT) {
+  const list = Array.isArray(advice?.recommendations) ? advice.recommendations : [];
+  if (list.length === 0) return ["Advisor · quiet"];
+  const top = list[0];
+  const severity = typeof top.severity === "string" ? top.severity : "info";
+  const title = typeof top.title === "string" ? top.title : "recommendation";
+  const lines = [`Advisor · ${severity} · ${title}`];
+  if (layoutMode === LAYOUT_MODES.MINIMAL) return lines;
+  if (typeof top.detail === "string" && top.detail.length > 0) {
+    lines.push(`  · ${top.detail.slice(0, 96)}`);
+  }
+  if (layoutMode === LAYOUT_MODES.WIDE) {
+    for (const item of list.slice(1, 3)) {
+      if (item == null || typeof item !== "object") continue;
+      const sev = typeof item.severity === "string" ? item.severity : "info";
+      const t = typeof item.title === "string" ? item.title : "recommendation";
+      lines.push(`  · ${sev} · ${t}`);
+    }
+  }
+  return lines;
+}

package/src/global/ink/use-orchestrator-data.js

@@ -40,7 +40,14 @@ import {
 } from "./cockpit-settings.js";
 import { listReviewReceipts } from "../runtime/review/review-receipts.js";
 import { assertReceiptSecretFree } from "../runtime/review/review-validate.js";
-import { listAlerts, resolveAlert, dismissAlert } from "../runtime/alerts/alert-store.js";
+import { listAlerts } from "../runtime/alerts/alert-store.js";
+import {
+  controlledDismissAlert, controlledResolveAlert
+} from "../runtime/alerts/controlled-alert-actions.js";
+import { buildCompanionSnapshot } from "../observability/build-companion-snapshot.js";
+import { resolveGitHeadSha } from "../observability/graphify-probe.js";
+import { runPassiveObservabilitySnapshot } from "../observability/passive-snapshot-flight.js";
+import { inspectEngramIntegration } from "../integrations/engram-evidence.js";
 
 export function useOrchestratorData({
   homeDir,
@@ -56,6 +63,7 @@ export function useOrchestratorData({
   const [dashboard, setDashboard] = useState(null);
   const [diagnostics, setDiagnostics] = useState(null);
   const [snapshot, setSnapshot] = useState(null);
+  const [companion, setCompanion] = useState(null);
   const [selectedRun, setSelectedRun] = useState(null);
   const [selectedEvents, setSelectedEvents] = useState([]);
   const [reviews, setReviews] = useState([]);
@@ -78,7 +86,24 @@ export function useOrchestratorData({
     cliVersion,
     buildDashboard: buildRuntimeDashboardData,
     buildDiagnostics: buildReadOnlyDiagnostics,
-    buildSnapshot: buildControlPlaneSnapshot
+    buildSnapshot: buildControlPlaneSnapshot,
+    buildCompanion: async ({ dashboard, snapshot: snap }) => buildCompanionSnapshot({
+      controlPlaneHealth: snap?.health ?? null,
+      runs: dashboard?.recentRuns ?? [],
+      inspectEngram: (ctx) => inspectEngramIntegration({
+        env: ctx?.env ?? process.env,
+        homeDir: ctx?.homeDir ?? homeDir
+      }),
+      buildObservability: (ctx) => runPassiveObservabilitySnapshot(ctx, {
+        force: Boolean(ctx?.force)
+      }),
+      observabilityContext: {
+        cwd: workspaceRoot, workspaceRoot, env: process.env,
+        headSha: resolveGitHeadSha(workspaceRoot)
+      },
+      loadReviews: async () => listReviewReceipts({ homeDir, limit: 20 }),
+      loadAlerts: async () => listAlerts({ homeDir, limit: 50 })
+    })
   })), [homeDir, workspaceRoot, packageName, packageRoot, cliVersion]);
 
   const reload = async ({ showLoading = false, asRetry = false } = {}) => {
@@ -98,6 +123,7 @@ export function useOrchestratorData({
     setDashboard(outcome.result.dashboard);
     setDiagnostics(outcome.result.diagnostics);
     setSnapshot(outcome.result.snapshot);
+    setCompanion(outcome.result.companion ?? null);
     try {
       setAlerts(await listAlerts({ homeDir, limit: 50 }));
     } catch {
@@ -166,8 +192,14 @@ export function useOrchestratorData({
     if (!alert) return;
     setBusy(true);
     try {
-      if (action === "dismiss") await dismissAlert(alert.alertId, { homeDir });
-      else await resolveAlert(alert.alertId, { homeDir });
+      const result = action === "dismiss"
+        ? await controlledDismissAlert({
+          alertId: alert.alertId, confirmed: true, source: "cockpit", homeDir
+        })
+        : await controlledResolveAlert({
+          alertId: alert.alertId, confirmed: true, source: "cockpit", homeDir
+        });
+      if (!result.ok) throw new Error(result.message ?? result.code);
       setAlerts(await listAlerts({ homeDir, limit: 50 }));
       setStatusMessage(action === "dismiss" ? "Alert dismissed" : "Alert resolved");
     } catch (error) {
@@ -197,6 +229,9 @@ export function useOrchestratorData({
         cwd: workspaceRoot,
         model: draft.model.trim() || null,
         permissions,
+        allowUnsafePermissions: Boolean(draft.allowUnsafePermissions),
+        permissionSource: draft.permissionSource ?? "cockpit",
+        permissionConsentType: draft.allowUnsafePermissions ? "cockpit-unsafe-confirm" : null,
         cliVersion,
         profile: profile ?? null,
         follow: false,
@@ -424,6 +459,7 @@ export function useOrchestratorData({
     dashboard,
     diagnostics,
     snapshot,
+    companion,
     selectedRun,
     setSelectedRun,
     selectedEvents,

package/src/global/ink/ux/live-overview.js

@@ -55,6 +55,10 @@ export function buildOverviewDetails(model = {}) {
   if (typeof model.alerts?.count === "number") {
     lines.push(`Open alerts · ${model.alerts.count}`);
   }
+  const secondary = model.companionNextAction;
+  if (secondary?.title && secondary.kind !== "idle") {
+    lines.push(`Companion · ${secondary.title}`);
+  }
   if (lines.length === 0) return ["No extra evidence beyond the metrics above."];
   return lines;
 }
@@ -62,10 +66,15 @@ export function buildOverviewDetails(model = {}) {
 /**
  * Pure adapter: buildControlCenterModel → semantic overview props.
  * Callout / CTA / metrics never include paths or IDs.
+ * Primary action is always governance CTA — companion is secondary metrics/details only.
  */
 export function adaptControlCenterToOverview(model = {}) {
   const status = model.status ?? model.health ?? {};
   const next = model.nextAction ?? model.cta ?? {};
+  const companionMetrics = (model.companion?.lines ?? []).map((label, i) => ({
+    id: `companion-${i}`,
+    label
+  }));
   return {
     title: model.title ?? "Overview",
     callout: {
@@ -81,7 +90,8 @@ export function adaptControlCenterToOverview(model = {}) {
     metrics: [
       { id: "activity", label: `Activity · ${model.activity?.headline ?? "Idle"}` },
       { id: "alerts", label: `Alerts · ${model.alerts?.headline ?? "Alert data unavailable"}` },
-      { id: "tokens", label: `Tokens · ${model.tokens?.headline ?? "Data unavailable"}` }
+      { id: "tokens", label: `Tokens · ${model.tokens?.headline ?? "Data unavailable"}` },
+      ...companionMetrics
     ],
     details: buildOverviewDetails(model)
   };