@ran-sh/dsh-crew 1.0.2 → 1.1.0

package/scripts/verify-official-bridge-e2e.mjs

@@ -18,6 +18,17 @@ import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { npxInstall, npxIntegrate } from '../src/install/npx-lifecycle.mjs';
 
+// RETIRED as a release gate: the legacy 3080 -> 3210 bridge is retired and
+// npxIntegrate()/npxDetach() always return OFFICIAL_WEB_PROFILE_READ_ONLY, so
+// the bridge journey this script asserts can no longer pass on current code.
+// Kept only as an operator diagnostic: run with --diagnostic-only to skip the
+// retired integrate assertion and report the read-only policy explicitly.
+const diagnosticOnly = process.argv.includes('--diagnostic-only');
+if (diagnosticOnly) {
+  console.log('[diagnostic] legacy official-bridge e2e retired; official web profile is read-only; nothing to verify.');
+  process.exit(0);
+}
+
 const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
 const candidateVersion = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8')).version;
 if (typeof candidateVersion !== 'string' || candidateVersion === '') throw new Error('candidate package version is unavailable');
@@ -128,7 +139,7 @@ try {
       const target = join(harnessHome, 'runtime');
       mkdirSync(dirname(target), { recursive: true });
       symlinkSync(realpathSync(runtimeRoot), target, process.platform === 'win32' ? 'junction' : 'dir');
-      return { ok: true, version: '0.1.1-rc.2' };
+      return { ok: true, version: '0.1.2-rc.1' };
     },
   });
   assert(installed.ok, `disposable install failed: ${logs.join(' | ')}`);

package/src/client/host-readiness.mjs

@@ -1,59 +1,62 @@
-export const READINESS_STATES = Object.freeze({
-  READY: 'READY',
-  DEGRADED: 'DEGRADED',
-  UNAVAILABLE: 'UNAVAILABLE',
-  UNKNOWN: 'UNKNOWN',
-});
-
-function componentState(status, keys, { aligned = false } = {}) {
-  if (status === undefined || status === null || typeof status !== 'object') return READINESS_STATES.UNKNOWN;
-  if (status.installed === false) return READINESS_STATES.UNAVAILABLE;
-  if (status.installed !== true || !status.components || typeof status.components !== 'object') return READINESS_STATES.UNKNOWN;
-  const evidence = keys.map((key) => status.components[key]);
-  if (evidence.some((value) => typeof value !== 'boolean')) return READINESS_STATES.UNKNOWN;
-  const ready = evidence.every(Boolean) && (!aligned || status.components.target_alignment === true);
-  return ready ? READINESS_STATES.READY : READINESS_STATES.DEGRADED;
-}
-
-function runtimeState(runtime, readinessSnapshot) {
-  if (readinessSnapshot && typeof readinessSnapshot === 'object') {
-    const identity = readinessSnapshot.runtime;
-    if (!(identity?.execution_plane === 'hub-3210' && identity.profile === 'dsh-crew'
-      && Number(identity.listen_port) === 3210 && typeof identity.runtime_id === 'string' && identity.runtime_id.trim())) {
-      return READINESS_STATES.UNAVAILABLE;
-    }
-    const row = Array.isArray(readinessSnapshot.readiness_matrix?.rows)
-      ? readinessSnapshot.readiness_matrix.rows.find((entry) => entry?.id === 'hub_compatibility') : undefined;
-    if (row?.status === 'PASS') return READINESS_STATES.READY;
-    if (row?.status === 'FAIL') return READINESS_STATES.UNAVAILABLE;
-    if (row?.status === 'NOT_RUN' || row?.status === 'SKIP') return READINESS_STATES.DEGRADED;
-    return READINESS_STATES.UNKNOWN;
-  }
-  if (runtime === undefined) return READINESS_STATES.UNKNOWN;
-  if (runtime === null) return READINESS_STATES.UNAVAILABLE;
-  return runtime?.ok === true && runtime.service === 'dsh-crew-hub'
-    ? READINESS_STATES.READY
-    : READINESS_STATES.DEGRADED;
-}
-
-function bridgeState(surface) {
-  if (surface === 'official-bridge') return READINESS_STATES.READY;
-  if (surface === 'native-crew-harness') return READINESS_STATES.UNAVAILABLE;
-  return READINESS_STATES.UNKNOWN;
-}
-
-/** Project only structured, non-secret installer/runtime evidence. */
-export function projectHostReadiness({ installStatus, runtime, surface, readinessSnapshot } = {}) {
-  const codex = installStatus?.codex;
-  const claude = installStatus?.claude;
-  const zcode = installStatus?.zcode;
-  return [
-    { id: 'codex_mcp', state: componentState(codex, ['mcp'], { aligned: true }) },
-    { id: 'ds_worker', state: componentState(codex, ['worker_role'], { aligned: true }) },
-    { id: 'ds_reviewer', state: componentState(codex, ['reviewer_role'], { aligned: true }) },
-    { id: 'claude_plugin', state: componentState(claude, ['enabled', 'marketplace', 'snapshot', 'permissions']) },
-    { id: 'zcode_mcp', state: componentState(zcode, ['mcp', 'policy', 'worker_agent', 'reviewer_agent', 'config_prompt', 'status_prompt', 'ownership']) },
-    { id: 'crew_harness', state: runtimeState(runtime, readinessSnapshot), detail: runtime?.runtime_version ?? null },
-    { id: 'official_bridge', state: bridgeState(surface) },
-  ];
-}
+export const READINESS_STATES = Object.freeze({
+  READY: 'READY',
+  DEGRADED: 'DEGRADED',
+  UNAVAILABLE: 'UNAVAILABLE',
+  UNKNOWN: 'UNKNOWN',
+});
+
+function componentState(status, keys, { aligned = false } = {}) {
+  if (status === undefined || status === null || typeof status !== 'object') return READINESS_STATES.UNKNOWN;
+  if (status.installed === false) return READINESS_STATES.UNAVAILABLE;
+  if (status.installed !== true || !status.components || typeof status.components !== 'object') return READINESS_STATES.UNKNOWN;
+  const evidence = keys.map((key) => status.components[key]);
+  if (evidence.some((value) => typeof value !== 'boolean')) return READINESS_STATES.UNKNOWN;
+  const ready = evidence.every(Boolean) && (!aligned || status.components.target_alignment === true);
+  return ready ? READINESS_STATES.READY : READINESS_STATES.DEGRADED;
+}
+
+function runtimeState(runtime, readinessSnapshot) {
+  if (readinessSnapshot && typeof readinessSnapshot === 'object') {
+    const identity = readinessSnapshot.runtime;
+    if (!(identity?.execution_plane === 'hub-3210' && identity.profile === 'dsh-crew'
+      && Number(identity.listen_port) === 3210 && typeof identity.runtime_id === 'string' && identity.runtime_id.trim())) {
+      return READINESS_STATES.UNAVAILABLE;
+    }
+    const row = Array.isArray(readinessSnapshot.readiness_matrix?.rows)
+      ? readinessSnapshot.readiness_matrix.rows.find((entry) => entry?.id === 'hub_compatibility') : undefined;
+    if (row?.status === 'PASS') return READINESS_STATES.READY;
+    if (row?.status === 'FAIL') return READINESS_STATES.UNAVAILABLE;
+    if (row?.status === 'NOT_RUN' || row?.status === 'SKIP') return READINESS_STATES.DEGRADED;
+    return READINESS_STATES.UNKNOWN;
+  }
+  if (runtime === undefined) return READINESS_STATES.UNKNOWN;
+  if (runtime === null) return READINESS_STATES.UNAVAILABLE;
+  return runtime?.ok === true && runtime.service === 'dsh-crew-hub'
+    ? READINESS_STATES.READY
+    : READINESS_STATES.DEGRADED;
+}
+
+function bridgeState(surface) {
+  // The official 3080 quick surface is an OPTIONAL convenience panel. Its
+  // absence must never degrade Crew readiness: on the native 3210 control
+  // plane the bridge is simply not part of the picture.
+  if (surface === 'official-bridge') return READINESS_STATES.READY;
+  if (surface === 'native-crew-harness') return READINESS_STATES.UNKNOWN;
+  return READINESS_STATES.UNKNOWN;
+}
+
+/** Project only structured, non-secret installer/runtime evidence. */
+export function projectHostReadiness({ installStatus, runtime, surface, readinessSnapshot } = {}) {
+  const codex = installStatus?.codex;
+  const claude = installStatus?.claude;
+  const zcode = installStatus?.zcode;
+  return [
+    { id: 'codex_mcp', state: componentState(codex, ['mcp'], { aligned: true }) },
+    { id: 'ds_worker', state: componentState(codex, ['worker_role'], { aligned: true }) },
+    { id: 'ds_reviewer', state: componentState(codex, ['reviewer_role'], { aligned: true }) },
+    { id: 'claude_plugin', state: componentState(claude, ['enabled', 'marketplace', 'snapshot', 'permissions']) },
+    { id: 'zcode_mcp', state: componentState(zcode, ['mcp', 'policy', 'worker_agent', 'reviewer_agent', 'config_prompt', 'status_prompt', 'ownership']) },
+    { id: 'crew_harness', state: runtimeState(runtime, readinessSnapshot), detail: runtime?.runtime_version ?? null },
+    { id: 'official_bridge', state: bridgeState(surface) },
+  ];
+}

package/src/client/index.tsx

@@ -106,13 +106,14 @@ const COPY = {
     harnessProviders: 'Harness Providers', harnessProviderHint: '3210 Crew Harness 的真实 Provider 注册与生命周期；不是视觉 / 生图适配器。',
     providerState: (state: string) => `状态：${state}`, providerModels: (count: number) => `${count} 个模型`, providerJobs: (count: number) => `${count} 个运行任务`,
     providerOfficialBuiltin: '· 官方内置（不可删除）', providerSourceUnresolved: '· 来源未解析（安全锁定）',
+    providerLayerMigration: '检测到旧版 profile Provider', providerLayerMigrationHint: '这些 Provider 仍在 Crew profile/base 层，所以 3210 原生页面不会显示删除。请先按迁移计划提升到 Harness 用户设置层；不会复制密钥。', providerLayerMigrationPlan: '迁移计划', providerLayerMigrate: '迁移到用户层', providerLayerMigrating: '迁移中…', providerLayerMigrationConfirm: '确认把这个 Provider 移到 Harness 用户设置层？会先保存可回滚快照，不会复制密钥值。', providerLayerRollback: '回滚迁移',
     providerDeletePlan: '生成删除计划', providerDelete: '确认删除', providerPlanReady: '计划已生成；再次确认后才会修改 3210 配置。', providerRollback: '回滚', providerRollbackConfirm: '按已保存事务恢复这个 Harness Provider 及原有路由？', providerRollbackUnavailable: '没有可验证的回滚事务',
     providerReplacement: '替换 Harness 默认 Provider（输入 Provider id）', providerDeleteConfirm: '确认按计划删除这个 Harness Provider？会清理路由引用并重启 3210。',
     providerDeleteBlocked: '当前 Provider 不能删除（内置、在用、已删除或缺少可用替换）。', providerLifecycleError: 'Provider 生命周期操作失败', providerDeletePending: '配置可能已变更，事务仍待重启/验证；请刷新状态后选择回滚。', providerRollbackContinue: '继续回滚验证', recoveryUnresolved: '发现不可自动恢复的事务', recoveryStorage: '存储项', recoveryQuarantine: '隔离', recoveryQuarantineConfirm: '该事务清单无法安全恢复。将其移入隔离区并阻止自动使用，继续？',
     providerNoInventory: '暂时无法读取 3210 Provider inventory。',
     credentialReferences: 'Credential 引用', credentialReferenceHint: '仅显示引用名、归属和孤儿状态；不会读取或删除密钥。',
     credentialOrphan: '孤儿 · 可单独申请清理', credentialInUse: (count: number) => `使用中 · ${count} 个 Provider`, credentialPurgePlan: '申请清理', credentialPurgeConfirm: '这是不可恢复的 Crew-owned 凭据清理，确认继续？', credentialPurging: '清理中…', credentialPurgeUnavailable: '凭据清理不可用', credentialPurgeUnverified: '已执行清理，但验证失败；引用仍保留用于恢复检查',
-    customProviders: '自定义 Provider', addProvider: '＋ 添加 Provider',
+    customProviders: '多模态适配器', addProvider: '＋ 添加多模态适配器',
     noCustomProviders: '暂无。添加后会出现在上方的视觉 / 生图 provider 选择里。',
     providerName: '名称', modelsField: '模型列表（逗号分隔）',
     providerType: '接入方式', typeApi: 'API · 兼容 OpenAI 接口', typeCli: 'CLI · 本地命令',
@@ -246,13 +247,14 @@ const COPY = {
     harnessProviders: 'Harness Providers', harnessProviderHint: 'Live Provider registration and lifecycle in the 3210 Crew Harness; separate from vision / image-gen adapters.',
     providerState: (state: string) => `State: ${state}`, providerModels: (count: number) => `${count} models`, providerJobs: (count: number) => `${count} running jobs`,
     providerOfficialBuiltin: '· official built-in (immutable)', providerSourceUnresolved: '· source unresolved (locked)',
+    providerLayerMigration: 'Legacy profile Providers detected', providerLayerMigrationHint: 'These Providers still exist in the Crew profile/base layer, so the native 3210 page cannot show Delete. Promote them to Harness user settings with an explicit plan; keys are never copied.', providerLayerMigrationPlan: 'Migration plan', providerLayerMigrate: 'Migrate to user layer', providerLayerMigrating: 'Migrating…', providerLayerMigrationConfirm: 'Move this Provider into Harness user settings? A rollback snapshot is saved first; credential values are never copied.', providerLayerRollback: 'Rollback migration',
     providerDeletePlan: 'Plan deletion', providerDelete: 'Confirm delete', providerPlanReady: 'Plan ready; a second confirmation is required before changing 3210 config.', providerRollback: 'Rollback', providerRollbackConfirm: 'Restore this Harness Provider and its previous routing from the saved transaction?', providerRollbackUnavailable: 'No verified rollback transaction is available',
     providerReplacement: 'Replacement Harness Default provider id', providerDeleteConfirm: 'Delete this Harness Provider per the plan? Routing refs will be scrubbed and 3210 restarted.',
     providerDeleteBlocked: 'This Provider cannot be deleted (built-in, in use, already absent, or missing a valid replacement).', providerLifecycleError: 'Provider lifecycle operation failed', providerDeletePending: 'Configuration may already be changed; the transaction still needs restart/verification. Refresh status and use rollback if needed.', providerRollbackContinue: 'Continue rollback verification', recoveryUnresolved: 'An unrecoverable recovery transaction is blocking deletion', recoveryStorage: 'storage entry', recoveryQuarantine: 'Quarantine', recoveryQuarantineConfirm: 'This recovery manifest cannot be safely reopened. Move it into the quarantine area and keep it out of automatic recovery?',
     providerNoInventory: '3210 Provider inventory is temporarily unavailable.',
     credentialReferences: 'Credential references', credentialReferenceHint: 'Names, ownership, and orphan status only; values are never read or deleted.',
     credentialOrphan: 'orphan · separate purge approval required', credentialInUse: (count: number) => `in use · ${count} provider(s)`, credentialPurgePlan: 'Purge…', credentialPurgeConfirm: 'This irreversibly removes a Crew-owned credential. Continue?', credentialPurging: 'Purging…', credentialPurgeUnavailable: 'Credential purge unavailable', credentialPurgeUnverified: 'Purge ran but verification failed; the reference remains visible for recovery',
-    customProviders: 'Custom providers', addProvider: '＋ Add provider',
+    customProviders: 'Multimodal adapters', addProvider: '＋ Add multimodal adapter',
     noCustomProviders: 'None yet. Added providers appear in the vision / image-gen selects above.',
     providerName: 'Name', modelsField: 'Models (comma-separated)',
     providerType: 'Connection', typeApi: 'API · OpenAI-compatible', typeCli: 'CLI · local command',
@@ -638,7 +640,8 @@ function WorkersPanel({ ctx }: { ctx: any }) {
   }, [get]);
 
   useEffect(() => {
-    if (surface !== CREW_UI_SURFACES.OFFICIAL) return undefined;
+    const responsibilities = surfaceResponsibilities(surface);
+    if (!responsibilities.fullControlPlane) return undefined;
     void refreshAll();
     const timer = setInterval(() => {
       void Promise.all([get('/jobs'), get('/provider-health').catch(() => null)]).then(([j, health]) => {
@@ -702,11 +705,11 @@ function WorkersPanel({ ctx }: { ctx: any }) {
   }, [copy, locale, post, readJson, refreshProviderInventory, withLang]);
 
   useEffect(() => {
-    if (surface === CREW_UI_SURFACES.OFFICIAL) void refreshHarnessModels();
+    if (surfaceResponsibilities(surface).fullControlPlane) void refreshHarnessModels();
   }, [surface, refreshHarnessModels]);
 
   useEffect(() => {
-    if (surface === CREW_UI_SURFACES.OFFICIAL) void refreshProviderInventory();
+    if (surfaceResponsibilities(surface).fullControlPlane) void refreshProviderInventory();
   }, [surface, refreshProviderInventory]);
 
   const act = useCallback(async (target: string, confirmName?: string) => {
@@ -737,6 +740,25 @@ function WorkersPanel({ ctx }: { ctx: any }) {
       return false;
     }
   }, [post, get, copy]);
+
+  /** Request a Crew 3210 restart through the durable supervisor channel
+   *  (hub writes the request; the Windows watcher executes it). Polls until
+   *  VERIFIED or a terminal failure. Same-origin against the 3210 API — the
+   *  legacy 3080 supervisor endpoint is retired. */
+  const requestRestart = useCallback(async (reason?: string): Promise<any> => {
+    const created = await post('/runtime/restart-request', { confirm: true, reason: reason ?? 'configuration change' });
+    if (!created.ok) throw new Error(created.code ?? created.error ?? copy.providerLifecycleError);
+    const requestId = created.request_id;
+    const deadline = Date.now() + 90_000;
+    for (;;) {
+      await new Promise((resolve) => setTimeout(resolve, 1000));
+      if (Date.now() > deadline) throw new Error('Crew restart timed out');
+      const status = await get(`/runtime/restart-status?id=${encodeURIComponent(requestId)}`);
+      if (!status.ok) continue; // 404 while the watcher has not picked it up
+      if (status.state === 'VERIFIED') return { ok: true, ...status };
+      if (status.state !== 'RESTART_REQUESTED') throw new Error(status.state ?? 'Crew restart failed');
+    }
+  }, [post, get, copy]);
   /** Selects & checkboxes: apply immediately. */
   const field = (key: string, value: any) => {
     setConfig((c: any) => ({ ...c, [key]: value }));
@@ -906,12 +928,7 @@ function WorkersPanel({ ctx }: { ctx: any }) {
       }), path);
       if (!result.ok) throw new Error(result.code ?? result.error ?? copy.providerLifecycleError);
       if (result.restart_required === true && result.result?.state === 'RESTART_PENDING') {
-        const restartPath = 'http://127.0.0.1:3080/_dsh/dsh-crew/supervisor/restart';
-        const restarted = await readJson(await fetch(restartPath, {
-          method: 'POST', headers: { 'content-type': 'application/json' },
-          body: JSON.stringify({ confirm: true }),
-        }), restartPath);
-        if (!restarted.ok) throw new Error(restarted.code ?? restarted.error ?? copy.providerLifecycleError);
+        await requestRestart('provider delete');
         const verified = await post(`/providers/${encoded}/verify-delete`, { transaction_id: planned.plan.plan_id, confirm: true });
         if (!verified.ok || verified.state !== 'VERIFIED') throw new Error(verified.code ?? verified.error ?? copy.providerLifecycleError);
       }
@@ -925,6 +942,57 @@ function WorkersPanel({ ctx }: { ctx: any }) {
     }
   };
 
+  const migrateHarnessProvider = async (entry: any) => {
+    if (!entry || !['promote-existing-user', 'materialize-user'].includes(entry.action)) {
+      setNotice(entry?.blocked_reason ?? copy.providerLayerMigrationHint);
+      return;
+    }
+    if (!window.confirm(copy.providerLayerMigrationConfirm)) return;
+    const id = String(entry.provider_id ?? '');
+    if (!id) return;
+    setProviderLifecycleBusy(`migrate:${id}`);
+    setNotice(copy.providerLayerMigrating);
+    try {
+      const encoded = encodeURIComponent(id);
+      const planned = await post(`/providers/${encoded}/migrate-plan`, {});
+      if (!planned.ok || !planned.plan) throw new Error(planned.code ?? copy.providerLifecycleError);
+      if (!window.confirm(`${copy.providerLayerMigrationConfirm}\n\n${id}`)) return;
+      const result = await post(`/providers/${encoded}/migrate`, { plan_id: planned.plan.plan_id, confirm: true });
+      if (!result.ok) throw new Error(result.code ?? result.error ?? copy.providerLifecycleError);
+      if (result.restart_required === true && result.result?.state === 'RESTART_PENDING') {
+        await requestRestart('provider migrate');
+        const verified = await post(`/providers/${encoded}/verify-migration`, { transaction_id: planned.plan.plan_id, confirm: true });
+        if (!verified.ok || verified.state !== 'VERIFIED') throw new Error(verified.code ?? verified.error ?? copy.providerLifecycleError);
+      }
+      setNotice(copy.saved);
+      await refreshProviderInventory();
+    } catch (error: any) {
+      try { await refreshProviderInventory(); } catch { /* preserve the original migration error */ }
+      setNotice(String(error?.message ?? error));
+    } finally {
+      setProviderLifecycleBusy(null);
+    }
+  };
+
+  const rollbackHarnessMigration = async (record: any, transactionId: string) => {
+    if (!record?.id || !transactionId || !window.confirm(copy.providerRollbackConfirm)) return;
+    setProviderLifecycleBusy(`rollback-migrate:${record.id}`);
+    setNotice(copy.working);
+    try {
+      const encoded = encodeURIComponent(record.id);
+      const result = await post(`/providers/${encoded}/rollback-migration`, { transaction_id: transactionId, confirm: true });
+      if (!result.ok) throw new Error(result.code ?? result.error ?? copy.providerLifecycleError);
+      if (result.restart_required === true) {
+        await requestRestart('provider migrate');
+      }
+      setNotice(copy.saved);
+      await refreshProviderInventory();
+    } catch (error: any) {
+      setNotice(String(error?.message ?? error));
+      try { await refreshProviderInventory(); } catch { /* preserve the original rollback error */ }
+    } finally { setProviderLifecycleBusy(null); }
+  };
+
   const rollbackHarnessProvider = async (record: any, transactionId: string, transactionState: string = 'VERIFIED') => {
     const continuing = ['ROLLBACK_PENDING', 'ROLLBACK_RESTART_PENDING'].includes(transactionState);
     const recoverable = ['PLANNED', 'TOMBSTONE_APPLYING', 'TOMBSTONE_APPLIED', 'REFERENCES_APPLYING', 'REFERENCES_APPLIED', 'DECLARATIONS_APPLYING', 'DECLARATIONS_APPLIED', 'DELETE_RESTART_PENDING', 'ROLLBACK_APPLYING', 'ROLLBACK_RESTORED'].includes(transactionState);
@@ -942,11 +1010,7 @@ function WorkersPanel({ ctx }: { ctx: any }) {
         : await post(`/providers/${encoded}/rollback`, { transaction_id: transactionId, confirm: true });
       if (!result.ok) throw new Error(result.code ?? result.error ?? copy.providerLifecycleError);
       if (result.restart_required === true && result.state === 'ROLLBACK_PENDING') {
-        const restartPath = 'http://127.0.0.1:3080/_dsh/dsh-crew/supervisor/restart';
-        const restarted = await readJson(await fetch(restartPath, {
-          method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ confirm: true }),
-        }), restartPath);
-        if (!restarted.ok) throw new Error(restarted.code ?? restarted.error ?? copy.providerLifecycleError);
+        await requestRestart('provider migrate');
         const verified = await post(`/providers/${encoded}/verify-rollback`, { transaction_id: transactionId, confirm: true });
         if (!verified.ok || verified.state !== 'ROLLED_BACK') throw new Error(verified.code ?? verified.error ?? copy.providerLifecycleError);
       } else if (result.state !== 'ROLLED_BACK') {
@@ -1475,6 +1539,27 @@ function WorkersPanel({ ctx }: { ctx: any }) {
           summary={sectionSummary(copy.providerCount(providerInventory?.records?.length ?? 0), providerInventoryError ? copy.providerLifecycleError : '')}
           expanded={!!expandedSections.harnessProviders} onToggle={() => toggleSection('harnessProviders')}>
           {providerInventoryError && <div style={{ fontSize: 12, color: '#c55' }}>{providerInventoryError}</div>}
+          {!providerInventoryError && (providerInventory?.migration?.providers?.length ?? 0) > 0 && (
+            <div style={{ border: '1px solid rgba(201,135,53,0.45)', borderRadius: 7, padding: '8px 10px', marginBottom: 8 }}>
+              <div style={{ fontWeight: 650, fontSize: 12.5 }}>{copy.providerLayerMigration}</div>
+              <div style={{ fontSize: 11.5, opacity: 0.7, marginTop: 3 }}>{copy.providerLayerMigrationHint}</div>
+              <div style={{ fontSize: 11, marginTop: 6, fontFamily: 'monospace' }}>
+                {(providerInventory.migration.providers ?? []).map((entry: any) => (
+                  <div key={entry.provider_id} style={{ display: 'flex', alignItems: 'center', gap: 6, marginTop: 3 }}>
+                    {entry.provider_id} · {entry.action}{entry.harness_default ? ' · Harness Default' : ''}
+                    <span style={{ flex: 1 }} />
+                    {['promote-existing-user', 'materialize-user'].includes(entry.action) && <button type="button" style={{ ...S.btn, padding: '2px 7px' }} disabled={providerLifecycleBusy !== null}
+                      onClick={() => { void migrateHarnessProvider(entry); }}>
+                      {providerLifecycleBusy === `migrate:${entry.provider_id}` ? copy.providerLayerMigrating : copy.providerLayerMigrate}
+                    </button>}
+                  </div>
+                ))}
+              </div>
+              <a href="http://127.0.0.1:3210/" target="_blank" rel="noopener noreferrer" style={{ ...S.btn, display: 'inline-block', textDecoration: 'none', marginTop: 7, padding: '3px 8px' }}>
+                {copy.providerLayerMigrationPlan} → 3210
+              </a>
+            </div>
+          )}
           {!providerInventoryError && (providerInventory?.records?.length ?? 0) === 0 && (
             <div style={{ fontSize: 12, opacity: 0.55 }}>{copy.providerNoInventory}</div>
           )}
@@ -1486,7 +1571,7 @@ function WorkersPanel({ ctx }: { ctx: any }) {
             const lifecycleTransactions = providerInventory?.lifecycle_transactions ?? [];
             const recoveryTransactions = (providerInventory?.recovery_transactions ?? []).map((entry: any) => ({ ...entry, state: entry.phase }));
             const rollbackTransaction = [...lifecycleTransactions, ...recoveryTransactions]
-              .filter((entry: any) => entry.provider_id === record.id && ['VERIFIED', 'RESTART_PENDING', 'ROLLBACK_PENDING', 'PLANNED', 'TOMBSTONE_APPLYING', 'TOMBSTONE_APPLIED', 'REFERENCES_APPLYING', 'REFERENCES_APPLIED', 'DECLARATIONS_APPLYING', 'DECLARATIONS_APPLIED', 'DELETE_RESTART_PENDING', 'ROLLBACK_RESTART_PENDING', 'ROLLBACK_RESTORED', 'ROLLBACK_APPLYING'].includes(entry.state))
+              .filter((entry: any) => entry.provider_id === record.id && ['VERIFIED', 'RESTART_PENDING', 'ROLLBACK_PENDING', 'PLANNED', 'TOMBSTONE_APPLYING', 'TOMBSTONE_APPLIED', 'REFERENCES_APPLYING', 'REFERENCES_APPLIED', 'DECLARATIONS_APPLYING', 'DECLARATIONS_APPLIED', 'DELETE_RESTART_PENDING', 'ROLLBACK_RESTART_PENDING', 'ROLLBACK_RESTORED', 'ROLLBACK_APPLYING', 'PREPARED', 'USER_MATERIALIZED', 'BASE_REMOVED'].includes(entry.state))
               .sort((a: any, b: any) => String(a.updated_at ?? '').localeCompare(String(b.updated_at ?? ''))).at(-1);
             return (
               <div key={record.id} style={{ display: 'flex', alignItems: 'center', gap: 8, fontSize: 12.5, flexWrap: 'wrap' as const }}>
@@ -1504,12 +1589,18 @@ function WorkersPanel({ ctx }: { ctx: any }) {
                     {providerLifecycleBusy === record.id ? copy.working : copy.providerDeletePlan}
                   </button>
                 )}
-                {(record.desired_state === 'absent' || ['PLANNED', 'TOMBSTONE_APPLYING', 'TOMBSTONE_APPLIED', 'REFERENCES_APPLYING', 'REFERENCES_APPLIED', 'DECLARATIONS_APPLYING', 'DECLARATIONS_APPLIED', 'DELETE_RESTART_PENDING', 'ROLLBACK_PENDING', 'ROLLBACK_RESTART_PENDING', 'ROLLBACK_RESTORED', 'ROLLBACK_APPLYING'].includes(rollbackTransaction?.state)) && rollbackTransaction && (
+                {(record.desired_state === 'absent' || ['PLANNED', 'TOMBSTONE_APPLYING', 'TOMBSTONE_APPLIED', 'REFERENCES_APPLYING', 'REFERENCES_APPLIED', 'DECLARATIONS_APPLYING', 'DECLARATIONS_APPLIED', 'DELETE_RESTART_PENDING', 'ROLLBACK_PENDING', 'ROLLBACK_RESTART_PENDING', 'ROLLBACK_RESTORED', 'ROLLBACK_APPLYING'].includes(rollbackTransaction?.state)) && rollbackTransaction && rollbackTransaction.source !== 'provider-layer-migration' && (
                   <button type="button" style={{ ...S.btn, padding: '2px 8px' }} disabled={providerLifecycleBusy !== null}
                     onClick={() => { void rollbackHarnessProvider(record, rollbackTransaction.transaction_id, rollbackTransaction.state); }}>
                     {providerLifecycleBusy === `rollback:${record.id}` ? copy.working : rollbackTransaction.state === 'ROLLBACK_PENDING' ? copy.providerRollbackContinue : copy.providerRollback}
                   </button>
                 )}
+                {rollbackTransaction?.source === 'provider-layer-migration' && rollbackTransaction.transaction_id && (
+                  <button type="button" style={{ ...S.btn, padding: '2px 8px' }} disabled={providerLifecycleBusy !== null}
+                    onClick={() => { void rollbackHarnessMigration(record, rollbackTransaction.transaction_id); }}>
+                    {providerLifecycleBusy === `rollback-migrate:${record.id}` ? copy.working : copy.providerLayerRollback}
+                  </button>
+                )}
               </div>
             );
           })}
@@ -1753,7 +1844,7 @@ function WorkersPanel({ ctx }: { ctx: any }) {
 
 export function apply(ctx: any): void {
   let runningCount = 0;
-  let officialSurface: boolean | null = null;
+  let badgeSurface: boolean | null = null;
   ctx.slots.inject('settings.section', () => {
     let dispose = register();
     function register() {
@@ -1777,12 +1868,14 @@ export function apply(ctx: any): void {
     const poll = async () => {
       if (document.visibilityState !== 'visible') return;
       try {
-        if (officialSurface === null) {
-          const response = await fetch(`${API}/bridge-status`, { cache: 'no-store' });
-          const bridgeStatus = response.ok ? await response.json() : null;
-          officialSurface = classifyCrewSurface({ bridgeStatus }) === CREW_UI_SURFACES.OFFICIAL;
+        if (badgeSurface === null) {
+          const [bridgeStatus, runtime] = await Promise.all([
+            fetch(`${API}/bridge-status`, { cache: 'no-store' }).then((r) => (r.ok ? r.json() : null)).catch(() => null),
+            fetch(`${API}/runtime`, { cache: 'no-store' }).then((r) => (r.ok ? r.json() : null)).catch(() => null),
+          ]);
+          badgeSurface = surfaceResponsibilities(classifyCrewSurface({ bridgeStatus, runtime })).fullControlPlane;
         }
-        if (!officialSurface) return;
+        if (!badgeSurface) return;
         const r = await (await fetch(`${API}/jobs`, { cache: 'no-store' })).json();
         const n = r.ok ? (r.jobs ?? []).filter((j: any) => j.status === 'running').length : 0;
         if (n !== runningCount) {

package/src/client/quick-entry.tsx

@@ -0,0 +1,10 @@
+import { applyQuick } from './quick-panel';
+
+export const inject = ['slots', 'locale'];
+
+// Quick-controls entry for the official 3080 surface: master switch,
+// flash/pro model priority, vision/imagegen toggles only. Never ships the
+// full control-plane code.
+export function apply(ctx: any): void {
+  applyQuick(ctx);
+}