@shuffleio/shuffle-mcps 0.0.57 → 0.0.58

package/dist/index.mjs

@@ -2411,6 +2411,7 @@ var deleteDatastoreItems = async (keys2, category) => {
 };
 var DATASTORE_CATEGORIES = {
   INCIDENTS: "shuffle-security_incidents",
+  EVENTS: "shuffle-security_events",
   VULNERABILITIES: "shuffle-security_vulns",
   VULNS: "shuffle-security_vulns",
   ASSETS: "shuffle-security_assets",
@@ -3080,7 +3081,7 @@ var applyValidationStaleness = (data) => {
   });
 };
 var doFetch2 = async (crossOrgId) => {
-  if (!hasShuffleAuth()) return [];
+  if (!hasShuffleAuth()) return { data: [], failed: false };
   const headers = {
     ...getAuthHeader(crossOrgId ?? void 0)
   };
@@ -3089,12 +3090,13 @@ var doFetch2 = async (crossOrgId) => {
       credentials: "include",
       headers
     });
-    if (!resp.ok) return [];
+    if (!resp.ok) return { data: [], failed: true };
     const result = await resp.json();
     const data = result?.data || result;
-    return Array.isArray(data) ? applyValidationStaleness(data) : [];
+    if (!Array.isArray(data)) return { data: [], failed: true };
+    return { data: applyValidationStaleness(data), failed: false };
   } catch {
-    return [];
+    return { data: [], failed: true };
   }
 };
 var fetchAuthenticatedApps = (crossOrgId) => {
@@ -3104,12 +3106,17 @@ var fetchAuthenticatedApps = (crossOrgId) => {
     return Promise.resolve(entry.data);
   }
   if (entry.promise) return entry.promise;
-  const promise = doFetch2(crossOrgId).then((data) => {
-    cache2.set(key, { data, fetchedAt: Date.now() });
-    return data;
-  }).catch((err) => {
+  const promise = doFetch2(crossOrgId).then((outcome) => {
+    if (outcome.failed) {
+      const previous = cache2.get(key)?.data;
+      cache2.delete(key);
+      return previous || [];
+    }
+    cache2.set(key, { data: outcome.data, fetchedAt: Date.now() });
+    return outcome.data;
+  }).catch(() => {
     cache2.delete(key);
-    throw err;
+    return [];
   });
   cache2.set(key, { ...entry, promise });
   return promise;
@@ -8502,30 +8509,235 @@ function AppDetailContent({
 
 // drawerLayer.ts
 import { useEffect as useEffect8, useState as useState10 } from "react";
+var STACK_KEY = "__shuffleOverlayStack";
 var COUNTER_KEY = "__shuffleDrawerLayerTop";
-var DRAWER_LAYER_BASE = 10011;
-var STEP = 10;
-var getTop = (base3) => {
-  const store = globalThis;
-  const current = store[COUNTER_KEY];
-  return typeof current === "number" ? current : base3;
-};
-var useDrawerLayer = (open, base3 = DRAWER_LAYER_BASE) => {
-  const [zIndex, setZIndex] = useState10(base3);
+var AUTO_LAYER_KEY = "__shuffleOverlayAutoLayerInstalled";
+var OVERLAY_BASE = 10010;
+var DRAWER_LAYER_BASE = OVERLAY_BASE;
+var SURFACE_STEP = 20;
+var POPUP_OFFSET = 6;
+var TOOLTIP_OFFSET = 12;
+var getStore = () => globalThis;
+var getOverlayStack = () => {
+  const store = getStore();
+  if (!Array.isArray(store[STACK_KEY])) {
+    store[STACK_KEY] = [];
+  }
+  return store[STACK_KEY];
+};
+var getTopSurfaceZIndex = (base3 = OVERLAY_BASE) => {
+  const stack = getOverlayStack();
+  const surfaces = stack.filter((r) => r.type === "surface");
+  if (surfaces.length === 0) {
+    const store = getStore();
+    store[COUNTER_KEY] = base3;
+    return base3;
+  }
+  let maxZ = base3;
+  for (const s of surfaces) {
+    if (s.zIndex > maxZ) {
+      maxZ = s.zIndex;
+    }
+  }
+  getStore()[COUNTER_KEY] = maxZ;
+  return maxZ;
+};
+var syncGlobalCounter = (base3 = OVERLAY_BASE) => {
+  getTopSurfaceZIndex(base3);
+};
+var allocateSurfaceLayer = (id, element2, base3 = OVERLAY_BASE) => {
+  const stack = getOverlayStack();
+  const existing = stack.find((r) => r.id === id || element2 && r.element === element2);
+  if (existing) {
+    return existing.zIndex;
+  }
+  const currentTop = getTopSurfaceZIndex(base3);
+  const nextZ = currentTop + SURFACE_STEP;
+  stack.push({ id, element: element2, zIndex: nextZ, type: "surface" });
+  syncGlobalCounter(base3);
+  return nextZ;
+};
+var releaseOverlayLayer = (idOrElement) => {
+  const stack = getOverlayStack();
+  const index = stack.findIndex(
+    (r) => r.id === idOrElement || typeof idOrElement !== "string" && r.element === idOrElement
+  );
+  if (index !== -1) {
+    stack.splice(index, 1);
+  }
+  syncGlobalCounter();
+};
+var bringSurfaceToFront = (idOrElement) => {
+  const stack = getOverlayStack();
+  const record = stack.find(
+    (r) => r.id === idOrElement || typeof idOrElement !== "string" && r.element === idOrElement
+  );
+  if (!record || record.type !== "surface") {
+    return typeof idOrElement === "string" ? allocateSurfaceLayer(idOrElement, null) : allocateSurfaceLayer("surface_" + Math.random().toString(36).substring(2, 9), idOrElement);
+  }
+  const currentTop = getTopSurfaceZIndex();
+  if (record.zIndex >= currentTop) {
+    return record.zIndex;
+  }
+  record.zIndex = currentTop + SURFACE_STEP;
+  syncGlobalCounter();
+  return record.zIndex;
+};
+var useOverlayLayer = (open, options) => {
+  const base3 = options?.base ?? OVERLAY_BASE;
+  const [zIndex, setZIndex] = useState10(() => open ? getTopSurfaceZIndex(base3) + SURFACE_STEP : base3);
   useEffect8(() => {
     if (!open) return;
-    const store = globalThis;
-    const next = Math.max(base3, getTop(base3) + STEP);
-    store[COUNTER_KEY] = next;
-    setZIndex(next);
+    const id = "hook_" + Math.random().toString(36).substring(2, 9);
+    const allocated = allocateSurfaceLayer(id, null, base3);
+    setZIndex(allocated);
     return () => {
-      if (store[COUNTER_KEY] === next) {
-        store[COUNTER_KEY] = next - STEP;
-      }
+      releaseOverlayLayer(id);
     };
   }, [open, base3]);
   return zIndex;
 };
+var useDrawerLayer = (open, base3 = DRAWER_LAYER_BASE) => useOverlayLayer(open, { base: base3 });
+var isSurfaceElement = (el) => {
+  if (!(el instanceof HTMLElement)) return false;
+  return el.classList.contains("MuiDialog-root") || el.classList.contains("MuiDrawer-root") || el.classList.contains("MuiModal-root") && !el.classList.contains("MuiPopover-root") && !el.classList.contains("MuiMenu-root") || el.getAttribute("role") === "dialog" || el.getAttribute("role") === "alertdialog" || Boolean(el.closest("[data-radix-portal]"));
+};
+var isChildPopupElement = (el) => {
+  if (!(el instanceof HTMLElement)) return false;
+  return el.classList.contains("MuiPopover-root") || el.classList.contains("MuiMenu-root") || el.classList.contains("MuiAutocomplete-popper") || Boolean(el.closest("[data-radix-popper-content-wrapper]")) || el.classList.contains("MuiPopper-root") && !el.classList.contains("MuiTooltip-popper");
+};
+var isTooltipElement = (el) => {
+  if (!(el instanceof HTMLElement)) return false;
+  return el.classList.contains("MuiTooltip-popper") || el.getAttribute("role") === "tooltip";
+};
+var isElementOpen = (el) => {
+  if (el.getAttribute("aria-hidden") === "true") return false;
+  if (el.getAttribute("data-state") === "closed") return false;
+  if (el.classList.contains("MuiModal-hidden")) return false;
+  const style = el.style;
+  if (style.display === "none" || style.visibility === "hidden") return false;
+  return true;
+};
+var observerInstance = null;
+var installGlobalOverlayAutoLayer = () => {
+  if (typeof window === "undefined" || typeof document === "undefined") return;
+  const store = getStore();
+  if (store[AUTO_LAYER_KEY]) return;
+  store[AUTO_LAYER_KEY] = true;
+  const handleElementOpen = (el) => {
+    if (isSurfaceElement(el)) {
+      let layerId = el.dataset.shuffleLayerId;
+      if (!layerId) {
+        layerId = "dom_" + Math.random().toString(36).substring(2, 9);
+        el.dataset.shuffleLayerId = layerId;
+      }
+      const targetZ = allocateSurfaceLayer(layerId, el);
+      el.dataset.shuffleLayerZ = String(targetZ);
+      el.style.setProperty("z-index", String(targetZ), "important");
+      const dialogContent = el.querySelector('[role="dialog"], [role="alertdialog"]');
+      if (dialogContent && dialogContent !== el) {
+        dialogContent.style.setProperty("z-index", String(targetZ), "important");
+      }
+      return;
+    }
+    if (isChildPopupElement(el)) {
+      const topZ = getTopSurfaceZIndex();
+      const popupZ = topZ + POPUP_OFFSET;
+      el.dataset.shuffleLayerZ = String(popupZ);
+      el.style.setProperty("z-index", String(popupZ), "important");
+      return;
+    }
+    if (isTooltipElement(el)) {
+      const topZ = getTopSurfaceZIndex();
+      const tooltipZ = topZ + TOOLTIP_OFFSET;
+      el.dataset.shuffleLayerZ = String(tooltipZ);
+      el.style.setProperty("z-index", String(tooltipZ), "important");
+      return;
+    }
+  };
+  const handleElementClose = (el) => {
+    const layerId = el.dataset.shuffleLayerId;
+    if (layerId) {
+      releaseOverlayLayer(layerId);
+      delete el.dataset.shuffleLayerId;
+      delete el.dataset.shuffleLayerZ;
+    } else {
+      releaseOverlayLayer(el);
+    }
+  };
+  const scanNode = (node) => {
+    if (!(node instanceof HTMLElement)) return;
+    if (isSurfaceElement(node) || isChildPopupElement(node) || isTooltipElement(node)) {
+      if (isElementOpen(node)) {
+        handleElementOpen(node);
+      } else {
+        handleElementClose(node);
+      }
+    }
+    const children2 = node.children;
+    for (let i = 0; i < children2.length; i++) {
+      const child = children2[i];
+      if (child instanceof HTMLElement) {
+        if (isSurfaceElement(child) || isChildPopupElement(child) || isTooltipElement(child)) {
+          if (isElementOpen(child)) {
+            handleElementOpen(child);
+          } else {
+            handleElementClose(child);
+          }
+        }
+      }
+    }
+  };
+  observerInstance = new MutationObserver((mutations) => {
+    for (const m of mutations) {
+      if (m.type === "childList") {
+        m.addedNodes.forEach(scanNode);
+        m.removedNodes.forEach((node) => {
+          if (node instanceof HTMLElement) {
+            handleElementClose(node);
+          }
+        });
+      } else if (m.type === "attributes") {
+        const target = m.target;
+        if (target instanceof HTMLElement) {
+          scanNode(target);
+        }
+      }
+    }
+  });
+  const body = document.body;
+  if (body) {
+    observerInstance.observe(body, {
+      childList: true,
+      subtree: true,
+      attributes: true,
+      attributeFilter: ["class", "style", "aria-hidden", "data-state"]
+    });
+    Array.from(body.children).forEach(scanNode);
+  }
+  document.addEventListener(
+    "pointerdown",
+    (e) => {
+      const target = e.target;
+      if (!target) return;
+      const surface = target.closest(
+        '.MuiDialog-root, .MuiDrawer-root, .MuiModal-root:not(.MuiPopover-root):not(.MuiMenu-root), [role="dialog"], [role="alertdialog"]'
+      );
+      if (!surface || !surface.dataset.shuffleLayerId) return;
+      const currentZ = Number(surface.dataset.shuffleLayerZ || 0);
+      const topZ = getTopSurfaceZIndex();
+      if (currentZ > 0 && currentZ < topZ) {
+        const newZ = bringSurfaceToFront(surface.dataset.shuffleLayerId);
+        surface.dataset.shuffleLayerZ = String(newZ);
+        surface.style.setProperty("z-index", String(newZ), "important");
+      }
+    },
+    true
+  );
+};
+if (typeof window !== "undefined") {
+  installGlobalOverlayAutoLayer();
+}
 
 // views/AppDetailDrawer.tsx
 import { jsx as jsx17 } from "react/jsx-runtime";
@@ -8986,6 +9198,11 @@ var ShuffleMCP = React4.forwardRef(({
   const [isOpen, setIsOpen] = useState11(false);
   const [selectedIndex, setSelectedIndex] = useState11(-1);
   const [internalSelectedApps, setInternalSelectedApps] = useState11(selectedApps);
+  useEffect9(() => {
+    if (selectedApps) {
+      setInternalSelectedApps(selectedApps);
+    }
+  }, [selectedApps]);
   const [authenticatedApps, setAuthenticatedApps] = useState11(externalAuthenticatedApps || []);
   const [authenticatedAppsLoading, setAuthenticatedAppsLoading] = useState11(!externalAuthenticatedApps);
   const [drawerApp, setDrawerApp] = useState11(null);
@@ -10181,6 +10398,7 @@ var AddAppDialog = ({
   maxLength = 1024,
   initialInput = ""
 }) => {
+  const dialogZIndex = useOverlayLayer(open);
   const [input, setInput] = useState12(initialInput);
   const [stage, setStage] = useState12("idle");
   const [spec, setSpec] = useState12(null);
@@ -10347,6 +10565,12 @@ var AddAppDialog = ({
       onClose: () => onOpenChange(false),
       fullWidth: true,
       maxWidth: "sm",
+      sx: {
+        zIndex: dialogZIndex,
+        "& .MuiBackdrop-root": {
+          zIndex: dialogZIndex
+        }
+      },
       PaperProps: {
         sx: {
           maxWidth: 640,
@@ -10355,7 +10579,8 @@ var AddAppDialog = ({
           color: "hsl(var(--foreground))",
           border: "1px solid hsl(var(--border))",
           borderRadius: 2,
-          boxSizing: "border-box"
+          boxSizing: "border-box",
+          zIndex: dialogZIndex
         }
       },
       children: [
@@ -11403,6 +11628,8 @@ var AiAgentPromptsEditor = ({
   prompts,
   apps,
   readOnly = false,
+  skillLabel,
+  isBuiltInApp,
   onChangePrompt,
   onRemovePrompt,
   onAddPrompt,
@@ -11490,16 +11717,44 @@ var AiAgentPromptsEditor = ({
             ] }),
             /* @__PURE__ */ jsxs15(Box14, { sx: { display: "flex", alignItems: "center", gap: 1, flexWrap: "wrap" }, children: [
               /* @__PURE__ */ jsx22(
-                Typography12,
+                Tooltip8,
                 {
-                  sx: {
-                    fontSize: "0.65rem",
-                    fontWeight: 600,
-                    color: "hsl(var(--muted-foreground))",
-                    textTransform: "uppercase",
-                    letterSpacing: "0.05em"
-                  },
-                  children: "Allowed apps"
+                  title: skillLabel ? `Allowed apps are shared with ${skillLabel} permissions. Changes made here apply to all automations and agent runs.` : "Apps this AI Agent prompt is permitted to run.",
+                  children: /* @__PURE__ */ jsxs15(Box14, { sx: { display: "inline-flex", alignItems: "center", gap: 0.75 }, children: [
+                    /* @__PURE__ */ jsx22(
+                      Typography12,
+                      {
+                        sx: {
+                          fontSize: "0.65rem",
+                          fontWeight: 600,
+                          color: "hsl(var(--muted-foreground))",
+                          textTransform: "uppercase",
+                          letterSpacing: "0.05em"
+                        },
+                        children: "Allowed apps"
+                      }
+                    ),
+                    skillLabel && /* @__PURE__ */ jsxs15(
+                      Typography12,
+                      {
+                        component: "span",
+                        sx: {
+                          fontSize: "0.62rem",
+                          fontWeight: 600,
+                          color: "hsl(var(--primary))",
+                          bgcolor: "hsl(var(--primary) / 0.1)",
+                          px: 0.6,
+                          py: 0.1,
+                          borderRadius: 0.75,
+                          letterSpacing: "0.02em"
+                        },
+                        children: [
+                          skillLabel,
+                          " permissions"
+                        ]
+                      }
+                    )
+                  ] })
                 }
               ),
               /* @__PURE__ */ jsxs15(Box14, { sx: { display: "flex", alignItems: "center", gap: 0.5, flexWrap: "wrap", flex: 1 }, children: [
@@ -11508,8 +11763,9 @@ var AiAgentPromptsEditor = ({
                   const meta = resolveAppMeta(appKey);
                   const displayName2 = meta.name;
                   const img = meta.image || `https://shuffler.io/images/apps/${displayName2}.png`;
+                  const isBuiltIn = isBuiltInApp ? isBuiltInApp(appKey) : false;
                   const clickable = !readOnly && !!onRemoveApp;
-                  const tip = clickable ? `Remove ${displayName2.replace(/_/g, " ")}` : displayName2.replace(/_/g, " ");
+                  const tip = isBuiltIn ? `${displayName2.replace(/_/g, " ")} (Default built-in app for ${skillLabel || "skill"})` : clickable ? `Remove ${displayName2.replace(/_/g, " ")} (Assigned permission)` : displayName2.replace(/_/g, " ");
                   return /* @__PURE__ */ jsx22(Tooltip8, { title: tip, children: /* @__PURE__ */ jsx22(
                     IconButton7,
                     {
@@ -11519,12 +11775,12 @@ var AiAgentPromptsEditor = ({
                       sx: {
                         width: 26,
                         height: 26,
-                        border: "1px solid hsl(var(--severity-low) / 0.3)",
-                        bgcolor: "hsl(var(--severity-low) / 0.1)",
+                        border: isBuiltIn ? "1px solid hsl(var(--primary) / 0.35)" : "1px solid hsl(var(--severity-low) / 0.3)",
+                        bgcolor: isBuiltIn ? "hsl(var(--primary) / 0.08)" : "hsl(var(--severity-low) / 0.1)",
                         borderRadius: 1,
                         "&.Mui-disabled": {
                           opacity: 1,
-                          bgcolor: "hsl(var(--severity-low) / 0.1)"
+                          bgcolor: isBuiltIn ? "hsl(var(--primary) / 0.08)" : "hsl(var(--severity-low) / 0.1)"
                         },
                         "&:hover": clickable ? {
                           bgcolor: "hsl(var(--destructive) / 0.15)",
@@ -11543,7 +11799,7 @@ var AiAgentPromptsEditor = ({
                     }
                   ) }, appKey);
                 }),
-                !readOnly && onAddAppRequested && /* @__PURE__ */ jsx22(Tooltip8, { title: "Add allowed app", children: /* @__PURE__ */ jsx22(
+                !readOnly && onAddAppRequested && /* @__PURE__ */ jsx22(Tooltip8, { title: skillLabel ? `Assign tools to ${skillLabel}` : "Add allowed app", children: /* @__PURE__ */ jsx22(
                   IconButton7,
                   {
                     size: "small",
@@ -12325,7 +12581,7 @@ var AGENT_PRESETS = [
     icon: /* @__PURE__ */ jsx25(ShieldAlert, { size: 16 }),
     enabled: true,
     tag: "Beta",
-    defaultApps: [{ name: "shuffle_incidents" }, { name: "shuffle_datastore" }]
+    defaultApps: [{ name: "shuffle_incidents" }]
   },
   {
     id: "host-monitor-control",
@@ -12786,6 +13042,150 @@ var AgentPresets = ({ variant = "default", onSelectPreset, selectedPreset, onRem
 };
 var AgentPresets_default = AgentPresets;
 
+// ../lib/agentTools.ts
+var STORAGE_KEY3 = "agent_tools_config";
+var AGENT_TOOLS_CHANGED_EVENT = "agent-tools-changed";
+var DEFAULT_AGENT = "default";
+var DEFAULT_ACTION_TYPE = "timeline_reply";
+var getActiveOrgId = () => {
+  if (typeof window === "undefined") return null;
+  try {
+    const raw = localStorage.getItem("shuffle_user_info") || localStorage.getItem("userinfo") || localStorage.getItem("user_info");
+    if (!raw) return null;
+    const parsed = JSON.parse(raw);
+    return parsed?.active_org?.id || parsed?.org_id || parsed?.active_org_id || Array.isArray(parsed?.orgs) && parsed.orgs[0]?.id || parsed?.id || null;
+  } catch {
+    return null;
+  }
+};
+var getStorageKey = (orgId) => {
+  const resolved = orgId || getActiveOrgId();
+  return resolved ? `${STORAGE_KEY3}_${resolved}` : STORAGE_KEY3;
+};
+var coerceTool = (raw) => {
+  if (typeof raw === "string") {
+    const trimmed = raw.trim();
+    if (!trimmed) return null;
+    return { name: trimmed, id: trimmed };
+  }
+  if (raw && typeof raw === "object") {
+    const obj = raw;
+    const name = typeof obj.name === "string" ? obj.name.trim() : "";
+    const id = typeof obj.id === "string" && obj.id.trim() ? obj.id.trim() : name;
+    if (!name) return null;
+    return { name, id };
+  }
+  return null;
+};
+var sanitize2 = (parsed) => {
+  let target = parsed;
+  if (target && typeof target === "object" && !Array.isArray(target)) {
+    const obj = target;
+    if (Array.isArray(obj.entries)) {
+      target = obj.entries;
+    }
+  }
+  if (!Array.isArray(target)) return [];
+  return target.filter((e) => e && typeof e.agent === "string" && typeof e.actionType === "string" && Array.isArray(e.tools)).map((e) => ({
+    agent: e.agent,
+    actionType: e.actionType,
+    tools: e.tools.map(coerceTool).filter((t) => !!t),
+    updatedAt: typeof e.updatedAt === "number" ? e.updatedAt : void 0
+  }));
+};
+var extractUpdatedAt = (parsed) => {
+  if (parsed && typeof parsed === "object") {
+    const obj = parsed;
+    if (typeof obj.updatedAt === "number") return obj.updatedAt;
+  }
+  return 0;
+};
+var readCacheRecord = () => {
+  if (typeof window === "undefined") return { entries: [], updatedAt: 0 };
+  try {
+    const key = getStorageKey();
+    let raw = localStorage.getItem(key);
+    let parsed = null;
+    let entries = [];
+    let updatedAt = 0;
+    if (raw) {
+      try {
+        parsed = JSON.parse(raw);
+        entries = sanitize2(parsed);
+        updatedAt = extractUpdatedAt(parsed) || entries.reduce((max, e) => Math.max(max, e.updatedAt || 0), 0);
+      } catch {
+      }
+    }
+    if (entries.length === 0 || entries.every((e) => e.tools.length === 0)) {
+      if (key !== STORAGE_KEY3) {
+        const fallbackRaw = localStorage.getItem(STORAGE_KEY3);
+        if (fallbackRaw) {
+          try {
+            const fallbackParsed = JSON.parse(fallbackRaw);
+            const fallbackEntries = sanitize2(fallbackParsed);
+            if (fallbackEntries.some((e) => e.tools.length > 0)) {
+              entries = fallbackEntries;
+              updatedAt = extractUpdatedAt(fallbackParsed) || fallbackEntries.reduce((max, e) => Math.max(max, e.updatedAt || 0), 0) || Date.now();
+              writeCache(entries, updatedAt);
+            }
+          } catch {
+          }
+        }
+      }
+    }
+    return { entries, updatedAt };
+  } catch {
+    return { entries: [], updatedAt: 0 };
+  }
+};
+var readAll = () => readCacheRecord().entries;
+var writeCache = (entries, explicitUpdatedAt) => {
+  if (typeof window === "undefined") return;
+  try {
+    const updatedAt = explicitUpdatedAt ?? Date.now();
+    const payload = {
+      version: 1,
+      updatedAt,
+      entries
+    };
+    const serialized = JSON.stringify(payload);
+    const orgKey = getStorageKey();
+    localStorage.setItem(orgKey, serialized);
+    if (orgKey !== STORAGE_KEY3) {
+      localStorage.setItem(STORAGE_KEY3, serialized);
+    }
+    window.dispatchEvent(
+      new CustomEvent(AGENT_TOOLS_CHANGED_EVENT, { detail: { updatedAt, entries } })
+    );
+  } catch {
+  }
+};
+var getAgentTools = (agent = DEFAULT_AGENT, actionType = DEFAULT_ACTION_TYPE) => {
+  const all = readAll();
+  const entry = all.find((e) => e.agent === agent && e.actionType === actionType);
+  if (entry && entry.tools && entry.tools.length > 0) {
+    return entry.tools;
+  }
+  if (agent === "incident-handler" || agent === "incident-response" || agent === DEFAULT_AGENT) {
+    const found = all.find(
+      (e) => (e.agent === "incident-handler" || e.agent === "incident-response" || e.agent === DEFAULT_AGENT) && e.actionType === actionType && e.tools && e.tools.length > 0
+    );
+    if (found?.tools && found.tools.length > 0) return found.tools;
+  }
+  return [];
+};
+var getToolsForSkill = (skillOrPresetId) => {
+  const normalized = (skillOrPresetId || "").toLowerCase().trim();
+  if (normalized === "incident-handler" || normalized === "incident-response" || normalized === "default") {
+    const ih = getAgentTools("incident-handler");
+    if (ih.length > 0) return ih;
+    const ir = getAgentTools("incident-response");
+    if (ir.length > 0) return ir;
+    return getAgentTools(DEFAULT_AGENT);
+  }
+  return getAgentTools(normalized);
+};
+
 // useAgentPromptPrefix.ts
 import { useCallback as useCallback9, useEffect as useEffect14, useRef as useRef10, useState as useState16 } from "react";
 var AGENT_PROMPT_PREFIX_CATEGORY = "agent-prompt-prefix";
@@ -13005,6 +13405,9 @@ var runAgent = async (request) => {
   if (request.incidentId) {
     input.incident_id = request.incidentId;
   }
+  if (request.incidentContext) {
+    input.incident_context = request.incidentContext;
+  }
   if (request.vulnerabilityId) {
     input.vulnerability_id = request.vulnerabilityId;
   }
@@ -13283,16 +13686,143 @@ var getCachedGroupDocs = (groupId, folder) => {
   }));
 };
 
+// ../lib/incidentPromptContext.ts
+var GLOBAL_INCIDENT_KEY = "__shuffleActiveIncidentContext";
+var getGlobalScope = () => {
+  if (typeof globalThis !== "undefined") return globalThis;
+  if (typeof window !== "undefined") return window;
+  if (typeof global !== "undefined") return global;
+  return null;
+};
+var getActiveIncidentPromptContext = () => {
+  const scope = getGlobalScope();
+  if (!scope) return null;
+  const info = scope[GLOBAL_INCIDENT_KEY];
+  if (info && typeof info === "object") {
+    return info;
+  }
+  return null;
+};
+var INCIDENT_PROMPT_DELIMITER_START = "=== INCIDENT CONTEXT ===";
+var INCIDENT_PROMPT_DELIMITER_END = "=== END INCIDENT CONTEXT ===";
+var formatObservableType = (type) => {
+  if (!type) return "Indicator";
+  const clean = type.toLowerCase().trim();
+  switch (clean) {
+    case "ip":
+    case "ipv4":
+    case "ip_address":
+      return "IPv4";
+    case "ipv6":
+      return "IPv6";
+    case "hash":
+    case "sha256":
+    case "file_hash":
+      return "SHA256";
+    case "md5":
+      return "MD5";
+    case "sha1":
+      return "SHA1";
+    case "hostname":
+    case "host":
+    case "endpoint":
+      return "Hostname";
+    case "domain":
+      return "Domain";
+    case "url":
+      return "URL";
+    case "user":
+    case "username":
+    case "account":
+      return "User";
+    case "email":
+      return "Email";
+    case "process":
+    case "process_name":
+      return "Process";
+    case "file":
+    case "filename":
+      return "File";
+    default:
+      return type.charAt(0).toUpperCase() + type.slice(1);
+  }
+};
+var isIncidentInjectedPrompt = (prompt) => {
+  if (!prompt || typeof prompt !== "string") return false;
+  return prompt.includes(INCIDENT_PROMPT_DELIMITER_START) || prompt.includes("OPERATIONAL DIRECTIVES:") || prompt.includes("INCIDENT OBSERVABLES / IOCs:");
+};
+var extractCleanIncidentPrompt = (prompt) => {
+  if (!prompt || typeof prompt !== "string") return "";
+  const trimmed = prompt.trim();
+  const taskMatch = trimmed.match(/TASK TO EXECUTE:\s*\n\s*-\s*Task:\s*([^\n]+)/i);
+  if (taskMatch && taskMatch[1]?.trim()) {
+    return `Task: ${taskMatch[1].trim()}`;
+  }
+  const legacyMatch = trimmed.match(/\n\s*Task:\s*([^\n]+)/i);
+  if (legacyMatch && legacyMatch[1]?.trim()) {
+    return `Task: ${legacyMatch[1].trim()}`;
+  }
+  if (trimmed.includes(INCIDENT_PROMPT_DELIMITER_START)) {
+    const before = trimmed.split(INCIDENT_PROMPT_DELIMITER_START)[0]?.trim();
+    if (before) return before;
+  }
+  return trimmed;
+};
+var composeIncidentPromptInput = (rawInput, context) => {
+  if (!rawInput || typeof rawInput !== "string") return "";
+  const trimmed = rawInput.trim();
+  if (isIncidentInjectedPrompt(trimmed)) {
+    return trimmed;
+  }
+  const ctx = context || getActiveIncidentPromptContext();
+  if (!ctx || !ctx.id) {
+    return trimmed;
+  }
+  const incidentRef = ctx.id ? `#${ctx.id}` : "";
+  const incidentTitle = ctx.title?.trim() || "Incident";
+  const severity = ctx.severity || "Medium";
+  const status = ctx.status || "In Progress";
+  const description = ctx.description?.trim() || "No description provided.";
+  const seenObservables = /* @__PURE__ */ new Set();
+  const formattedObservables = [];
+  if (Array.isArray(ctx.observables)) {
+    for (const obs of ctx.observables) {
+      if (!obs || obs.archived || !obs.value?.trim()) continue;
+      const val = obs.value.trim();
+      const typeLabel = formatObservableType(obs.type);
+      const key = `${typeLabel.toLowerCase()}:${val.toLowerCase()}`;
+      if (seenObservables.has(key)) continue;
+      seenObservables.add(key);
+      formattedObservables.push(`- ${typeLabel}: ${val}`);
+    }
+  }
+  const observablesBlock = formattedObservables.length > 0 ? formattedObservables.slice(0, 50).join("\n") : "- None recorded yet";
+  return `${trimmed}
+
+${INCIDENT_PROMPT_DELIMITER_START}
+INCIDENT CONTEXT:
+- Incident: ${incidentRef} ("${incidentTitle}")
+- Severity: ${severity} | Status: ${status}
+- Summary: ${description}
+
+INCIDENT OBSERVABLES / IOCs:
+${observablesBlock}
+${INCIDENT_PROMPT_DELIMITER_END}
+
+DIRECTIVES:
+- Relevant incident details and observables are provided above. Do not call "get_incident" unless raw external logs are required.`;
+};
+
 // ../lib/docsPromptContext.ts
 var GLOBAL_DOC_KEY = "__shuffleActiveDocInfo";
-var getGlobalScope = () => {
+var getGlobalScope2 = () => {
   if (typeof globalThis !== "undefined") return globalThis;
   if (typeof window !== "undefined") return window;
   if (typeof global !== "undefined") return global;
   return null;
 };
 var getActiveDocPromptContext = () => {
-  const scope = getGlobalScope();
+  const scope = getGlobalScope2();
   if (!scope) return null;
   const info = scope[GLOBAL_DOC_KEY];
   if (info && typeof info === "object") {
@@ -13333,6 +13863,9 @@ var isDocInjectedPrompt = (prompt) => {
 var extractCleanDisplayPrompt = (prompt) => {
   if (!prompt || typeof prompt !== "string") return "";
   const trimmed = prompt.trim();
+  if (isIncidentInjectedPrompt(trimmed)) {
+    return extractCleanIncidentPrompt(trimmed);
+  }
   if (!isDocInjectedPrompt(trimmed)) return trimmed;
   if (trimmed.includes(DOC_PROMPT_DELIMITER_END)) {
     const parts = trimmed.split(DOC_PROMPT_DELIMITER_END);
@@ -13372,7 +13905,7 @@ var composeDocPromptInput = (userQuestion, pathname, fallbackTitle, overrideDocI
     return trimmedQuestion;
   }
   const activeDoc = overrideDocInfo ?? getActiveDocPromptContext();
-  const rawTitle = (activeDoc?.title || fallbackTitle || getGlobalScope()?.__shuffleActiveEntityTitle || "Shuffle documentation").trim();
+  const rawTitle = (activeDoc?.title || fallbackTitle || getGlobalScope2()?.__shuffleActiveEntityTitle || "Shuffle documentation").trim();
   const title = normalizeDocPromptTitle(rawTitle);
   const groupLabel = activeDoc?.groupLabel;
   const groupId = activeDoc?.groupId;
@@ -16023,6 +16556,7 @@ var DEFAULT_AGENT_CONTEXT_RULES = [
       const cleanId = formatEntityDisplayId(params.id);
       return `Investigate incident ${cleanId} and recommend next steps: `;
     },
+    composeInput: (raw) => composeIncidentPromptInput(raw),
     placeholder: "Ask about this incident, triage observables, or correlate...",
     getStorageKey: (params) => `incident_${params.id}`,
     description: "Focused on the currently viewed incident with Shuffle Incidents MCP"
@@ -16047,6 +16581,7 @@ var DEFAULT_AGENT_CONTEXT_RULES = [
       const cleanId = formatEntityDisplayId(params.id);
       return `Investigate incident ${cleanId} and recommend next steps: `;
     },
+    composeInput: (raw) => composeIncidentPromptInput(raw),
     placeholder: "Ask about this incident, triage observables, or correlate...",
     getStorageKey: (params) => `incident_${params.id}`,
     description: "Focused on the currently viewed incident with Shuffle Incidents MCP"
@@ -16069,6 +16604,7 @@ var DEFAULT_AGENT_CONTEXT_RULES = [
       const cleanId = formatEntityDisplayId(params.id);
       return `Investigate case ${cleanId} and recommend next steps: `;
     },
+    composeInput: (raw) => composeIncidentPromptInput(raw),
     placeholder: "Review case evidence, correlate events, or recommend response actions...",
     getStorageKey: (params) => `case_${params.id}`,
     description: "Focused on the currently viewed case with Shuffle Incidents MCP"
@@ -16799,6 +17335,18 @@ var readPresetAppsOverride = (presetId) => {
     return null;
   }
 };
+var resolvePresetApps = (preset) => {
+  const baseApps = (preset.defaultApps || []).map((app2) => ({ name: app2.name, id: app2.id, icon: app2.icon }));
+  const assigned = getToolsForSkill(preset.id);
+  const merged = [...baseApps];
+  for (const t of assigned) {
+    const key = (t.id || t.name).toLowerCase();
+    if (!merged.some((m) => (m.id || m.name).toLowerCase() === key)) {
+      merged.push({ name: t.name, id: t.id, icon: t.icon || void 0 });
+    }
+  }
+  return merged;
+};
 var writePresetAppsOverride = (presetId, apps) => {
   try {
     const raw = localStorage.getItem(PRESET_APPS_STORAGE_KEY);
@@ -17177,8 +17725,12 @@ var extractAuthRequest = (decision) => {
   } else if (raw && typeof raw === "object") {
     parsed = raw;
   }
-  const needsAuth = parsed && (parsed.action === "app_authentication" || parsed.app_authentication === true);
-  if (!needsAuth) return null;
+  const candidateObjects = [
+    parsed,
+    decision?.result,
+    decision?.run_details,
+    decision
+  ].filter(Boolean);
   let toolAppName;
   let appId = null;
   if (typeof decision?.tool === "string") {
@@ -17191,8 +17743,36 @@ var extractAuthRequest = (decision) => {
       toolAppName = t;
     }
   }
-  let appName = parsed.app || parsed.app_name || parsed.appname;
-  if (!appName) appName = toolAppName;
+  let needsAuth = false;
+  let candidateAppName;
+  for (const obj of candidateObjects) {
+    if (obj.action === "app_authentication" || obj.app_authentication === true || obj.action === "authenticate" || obj.needs_auth === true || obj.auth_required === true) {
+      needsAuth = true;
+    }
+    const candidate = obj.app || obj.app_name || obj.appname;
+    if (typeof candidate === "string" && candidate.trim()) {
+      candidateAppName = candidate.trim();
+    }
+  }
+  const textSources = [
+    decision?.error,
+    decision?.reason,
+    decision?.status_message,
+    decision?.message,
+    decision?.run_details?.error,
+    typeof raw === "string" ? raw : ""
+  ];
+  const combinedText = textSources.filter(Boolean).join(" ").toLowerCase();
+  if (combinedText.includes("app_authentication") || combinedText.includes("requires authentication") || combinedText.includes("missing authentication") || combinedText.includes("unauthorized") || combinedText.includes("not authenticated") || combinedText.includes("invalid credentials") || combinedText.includes("missing api key")) {
+    needsAuth = true;
+  }
+  if (!needsAuth && (decision?.status === "WAITING" || decision?.status === "PENDING" || decision?.run_details?.status === "WAITING" || decision?.run_details?.status === "PENDING")) {
+    if (toolAppName && appRequiresAuthentication(toolAppName)) {
+      needsAuth = true;
+    }
+  }
+  if (!needsAuth) return null;
+  let appName = candidateAppName || toolAppName;
   if (!appName) {
     const f = (decision?.fields || []).find((x) => x?.key === "app" || x?.key === "app_name");
     if (f?.value) appName = f.value;
@@ -17207,12 +17787,17 @@ var STATUS_COLORS = {
   running: "hsl(var(--primary))"
 };
 var TERMINAL_RUN_STATUSES = ["FINISHED", "FAILURE", "ABORTED", "CANCELLED", "CANCELED"];
-var resolveRunStatus = (executionStatus, agentStatus) => {
-  const exec = String(executionStatus || "").toUpperCase();
-  const agent = String(agentStatus || "").toUpperCase();
-  if (TERMINAL_RUN_STATUSES.includes(exec)) return exec;
-  if (TERMINAL_RUN_STATUSES.includes(agent)) return agent;
-  return exec || agent || "";
+var resolveRunStatus = (execStatus, agentStatus) => {
+  const e = (execStatus || "").toUpperCase();
+  const a = (agentStatus || "").toUpperCase();
+  if (e === "FINISHED" || a === "FINISHED") return "FINISHED";
+  if (e === "FAILURE" || a === "FAILURE") return "FAILURE";
+  if (e === "ABORTED" || a === "ABORTED") return "ABORTED";
+  if (e === "CANCELLED" || a === "CANCELLED" || e === "CANCELED" || a === "CANCELED") return "CANCELLED";
+  if (e === "WAITING" || a === "WAITING") return "WAITING";
+  if (e === "PENDING" || a === "PENDING") return "PENDING";
+  if (e === "RUNNING" || a === "RUNNING" || e === "EXECUTING" || a === "EXECUTING") return "RUNNING";
+  return e || a || "FINISHED";
 };
 var buildToolName = (apps) => {
   if (!apps.length) return "API";
@@ -17236,7 +17821,11 @@ var DurationCountdown = ({ resumeAtMs }) => {
   const remaining = resumeAtMs - nowMs;
   return /* @__PURE__ */ jsx31(Tooltip14, { title: `Scheduled to continue at ${new Date(resumeAtMs).toLocaleString()}`, arrow: true, children: /* @__PURE__ */ jsx31(Box22, { component: "span", sx: { whiteSpace: "nowrap", cursor: "default" }, children: remaining > 0 ? `in ${formatTimeLeft(remaining)}` : "due now" }) });
 };
-var StatusIcon = ({ status, resumeAtMs }) => {
+var StatusIcon = ({
+  status,
+  resumeAtMs,
+  authBlockedApp
+}) => {
   const s = (status || "").toUpperCase();
   const isScheduledWait = s === "WAITING" && !!resumeAtMs;
   const [nowMs, setNowMs] = useState20(() => Date.now());
@@ -17247,7 +17836,10 @@ var StatusIcon = ({ status, resumeAtMs }) => {
   }, [isScheduledWait]);
   let node;
   let label;
-  if (s === "RUNNING" || s === "EXECUTING" || s === "") {
+  if (authBlockedApp) {
+    node = /* @__PURE__ */ jsx31(LockIcon3, { size: 20, color: "hsl(var(--destructive))" });
+    label = `Authentication required for ${formatAppDisplayName(authBlockedApp)} \u2014 step cannot proceed until connected`;
+  } else if (s === "RUNNING" || s === "EXECUTING" || s === "") {
     node = /* @__PURE__ */ jsx31(CircularProgress5, { size: 18, sx: { color: STATUS_COLORS.running } });
     label = "Running";
   } else if (s === "WAITING") {
@@ -17446,8 +18038,10 @@ var TimelineRow = ({
     const s = (effectiveStatus || "").toUpperCase();
     return s === "WAITING" || s === "RUNNING" || s === "EXECUTING" || s === "";
   })();
-  const barColor = isProcessing ? "hsl(var(--muted-foreground) / 0.45)" : isFailed ? STATUS_COLORS.error : "hsl(var(--muted-foreground) / 0.35)";
-  const hoverBarColor = isProcessing ? "hsl(var(--muted-foreground) / 0.45)" : effectiveStatus === "FINISHED" || effectiveStatus === "IGNORED" ? STATUS_COLORS.finished : isFailed ? STATUS_COLORS.error : STATUS_COLORS.running;
+  const rowAuthReq = extractAuthRequest(details);
+  const isRowAuthBlocked = !!rowAuthReq && !isAppAuthenticated?.(rowAuthReq.appName, rowAuthReq.appId) && (effectiveStatus === "WAITING" || effectiveStatus === "PENDING" || effectiveStatus === "FAILURE" || effectiveStatus === "ABORTED");
+  const barColor = isProcessing ? "hsl(var(--muted-foreground) / 0.45)" : isFailed || isRowAuthBlocked ? STATUS_COLORS.error : "hsl(var(--muted-foreground) / 0.35)";
+  const hoverBarColor = isProcessing ? "hsl(var(--muted-foreground) / 0.45)" : effectiveStatus === "FINISHED" || effectiveStatus === "IGNORED" ? STATUS_COLORS.finished : isFailed || isRowAuthBlocked ? STATUS_COLORS.error : STATUS_COLORS.running;
   const isRerunTarget = !!rerunningDecisionId && item.type === "decision" && details?.run_details?.id === rerunningDecisionId;
   return /* @__PURE__ */ jsxs24(
     Box22,
@@ -17456,9 +18050,25 @@ var TimelineRow = ({
       sx: {
         borderTop: index === 0 ? "none" : "1px solid hsl(var(--border))",
         bgcolor: highlight ? "hsla(var(--severity-medium) / 0.12)" : isRerunTarget ? "hsla(var(--primary) / 0.08)" : open ? "hsl(var(--muted) / 0.3)" : "transparent",
-        transition: "background 0.6s ease, box-shadow 0.6s ease, opacity 0.2s ease",
-        scrollMarginTop: 96,
+        transition: "background-color 0.2s ease",
+        "&:hover": {
+          bgcolor: "hsl(var(--muted) / 0.4)"
+        },
         position: "relative",
+        "&::before": {
+          content: '""',
+          position: "absolute",
+          left: 0,
+          top: 0,
+          bottom: 0,
+          width: 3,
+          bgcolor: barColor,
+          transition: "background-color 0.15s ease"
+        },
+        "&:hover::before": {
+          bgcolor: hoverBarColor
+        },
+        scrollMarginTop: 96,
         boxShadow: highlight ? "inset 0 0 0 2px hsla(var(--severity-medium) / 0.55)" : isRerunTarget ? "inset 0 0 0 1px hsla(var(--primary) / 0.5)" : "none",
         opacity: dimmedByRerun ? 0.35 : 1,
         pointerEvents: dimmedByRerun ? "none" : "auto"
@@ -17467,22 +18077,17 @@ var TimelineRow = ({
         /* @__PURE__ */ jsxs24(
           Box22,
           {
-            onClick: isProcessing ? void 0 : onToggle,
+            onClick: onToggle,
             sx: {
               display: "flex",
               alignItems: "center",
               gap: 1.5,
-              px: 2,
-              py: 1.25,
-              cursor: isProcessing ? "default" : "pointer",
-              "--timeline-bar-color": barColor,
-              "&:hover": isProcessing ? {} : {
-                bgcolor: "hsl(var(--muted) / 0.4)",
-                "--timeline-bar-color": hoverBarColor
-              }
+              p: 1.5,
+              cursor: "pointer",
+              userSelect: "none"
             },
             children: [
-              /* @__PURE__ */ jsx31(Box22, { sx: { width: 24, display: "flex", justifyContent: "center" }, children: isRerunTarget ? /* @__PURE__ */ jsx31(CircularProgress5, { size: 14, sx: { color: "hsl(var(--primary))" } }) : isProcessing ? isLikelyTimedOut ? /* @__PURE__ */ jsx31(Tooltip14, { title: "No new activity for over a minute \u2014 this run has most likely timed out.", arrow: true, children: /* @__PURE__ */ jsx31(Box22, { sx: { display: "flex" }, children: /* @__PURE__ */ jsx31(WarningIcon, { size: 14, color: STATUS_COLORS.warning }) }) }) : isLiveProcessing ? /* @__PURE__ */ jsx31(CircularProgress5, { size: 12, sx: { color: "hsl(var(--muted-foreground))" } }) : /* @__PURE__ */ jsx31(Box22, { sx: { width: 6, height: 6, borderRadius: "50%", bgcolor: "hsl(var(--muted-foreground) / 0.5)" } }) : /* @__PURE__ */ jsx31(StatusIcon, { status: effectiveStatus, resumeAtMs: scheduledResumeMs }) }),
+              /* @__PURE__ */ jsx31(Box22, { sx: { width: 24, display: "flex", justifyContent: "center" }, children: isRerunTarget ? /* @__PURE__ */ jsx31(CircularProgress5, { size: 14, sx: { color: "hsl(var(--primary))" } }) : isProcessing ? isLikelyTimedOut ? /* @__PURE__ */ jsx31(Tooltip14, { title: "No new activity for over a minute \u2014 this run has most likely timed out.", arrow: true, children: /* @__PURE__ */ jsx31(Box22, { sx: { display: "flex" }, children: /* @__PURE__ */ jsx31(WarningIcon, { size: 14, color: STATUS_COLORS.warning }) }) }) : isLiveProcessing ? /* @__PURE__ */ jsx31(CircularProgress5, { size: 12, sx: { color: "hsl(var(--muted-foreground))" } }) : /* @__PURE__ */ jsx31(Box22, { sx: { width: 6, height: 6, borderRadius: "50%", bgcolor: "hsl(var(--muted-foreground) / 0.5)" } }) : /* @__PURE__ */ jsx31(StatusIcon, { status: effectiveStatus, resumeAtMs: scheduledResumeMs, authBlockedApp: isRowAuthBlocked ? rowAuthReq.appName : null }) }),
               /* @__PURE__ */ jsx31(Box22, { sx: { width: 24, display: "flex", justifyContent: "center" }, children: isProcessing ? /* @__PURE__ */ jsx31(Box22, { sx: { width: 22 } }) : toolApp?.icon ? /* @__PURE__ */ jsx31(Tooltip14, { title: (toolApp.name || "").replace(/_/g, " "), arrow: true, children: /* @__PURE__ */ jsx31(Avatar6, { src: toolApp.icon, sx: { width: 22, height: 22, bgcolor: "transparent" }, variant: "rounded" }) }) : item.category === "finalise" || details?.action === "finish" ? /* @__PURE__ */ jsx31(Tooltip14, { title: "Final answer", arrow: true, children: /* @__PURE__ */ jsx31(CheckIcon3, { size: 18 }) }) : /* @__PURE__ */ jsx31(Box22, { sx: { width: 22 } }) }),
               /* @__PURE__ */ jsx31(
                 Tooltip14,
@@ -18001,6 +18606,7 @@ var AgentUI = ({
   composeSubmitInput: propComposeSubmitInput,
   contextParams,
   incidentId: propIncidentId,
+  incidentContext: propIncidentContext,
   vulnerabilityId: propVulnerabilityId,
   workflowId: propWorkflowId
 }) => {
@@ -18015,6 +18621,10 @@ var AgentUI = ({
     return h;
   }, [apiKey, orgId]);
   const hasApiKey = !!apiKey || !!API_CONFIG.apiKey;
+  const resolvedIncidentId = propIncidentId || (contextCategory === "incidents" ? contextParams?.id : void 0) || (typeof window !== "undefined" ? window.__shuffleActiveIncidentId : void 0);
+  const resolvedIncidentContext = propIncidentContext || (typeof window !== "undefined" ? window.__shuffleActiveIncidentContext : void 0);
+  const resolvedVulnerabilityId = propVulnerabilityId || (contextCategory === "vulnerabilities" ? contextParams?.id : void 0) || (typeof window !== "undefined" ? window.__shuffleActiveVulnerabilityId : void 0);
+  const resolvedWorkflowId = propWorkflowId || (contextCategory === "workflows" ? contextParams?.id : void 0) || (typeof window !== "undefined" ? window.__shuffleActiveWorkflowId : void 0);
   const isPhoneScreen = useMediaQuery("(max-width:600px)", { noSsr: true });
   const isPhone = mobileView !== void 0 ? mobileView : isPhoneScreen;
   const [actionInput, setActionInput] = useState20(() => {
@@ -18095,17 +18705,37 @@ var AgentUI = ({
       if (!match || match.enabled === false) return;
       setSelectedPreset(match);
       if (defaultApps === void 0 && !apps) {
+        const resolved = resolvePresetApps(match);
         const override = readPresetAppsOverride(match.id);
-        if (override) {
-          setChosenApps(override);
-        } else if (match.defaultApps && match.defaultApps.length > 0) {
-          setChosenApps(match.defaultApps.map((app2) => ({ name: app2.name, id: app2.id, icon: app2.icon })));
+        if (override && override.length > 0) {
+          const merged = [...override];
+          for (const app2 of resolved) {
+            const key = (app2.id || app2.name).toLowerCase();
+            if (!merged.some((m) => (m.id || m.name).toLowerCase() === key)) {
+              merged.push(app2);
+            }
+          }
+          setChosenApps(merged);
+        } else {
+          setChosenApps(resolved);
         }
       }
       seededPresetIdRef.current = match.id;
     } catch {
     }
   }, [presets, defaultInput, isEffectiveSupport, initialPresetId, defaultApps, apps]);
+  useEffect18(() => {
+    const handleToolsChanged = () => {
+      const targetPreset = selectedPreset || AGENT_PRESETS.find((p) => p.id === "incident-response") || AGENT_PRESETS[0];
+      if (targetPreset) {
+        const next = resolvePresetApps(targetPreset);
+        setChosenApps(next);
+        writePresetAppsOverride(targetPreset.id, next);
+      }
+    };
+    window.addEventListener(AGENT_TOOLS_CHANGED_EVENT, handleToolsChanged);
+    return () => window.removeEventListener(AGENT_TOOLS_CHANGED_EVENT, handleToolsChanged);
+  }, [selectedPreset]);
   useLayoutEffect(() => {
     if (hidePresets) {
       setPresetsChipWidth(0);
@@ -18383,13 +19013,19 @@ var AgentUI = ({
       localStorage.setItem(LAST_PRESET_STORAGE_KEY, preset.id);
     } catch {
     }
+    const resolved = resolvePresetApps(preset);
     const override = readPresetAppsOverride(preset.id);
     if (override && override.length > 0) {
-      setChosenApps(override);
-    } else if (preset.defaultApps && preset.defaultApps.length > 0) {
-      setChosenApps(preset.defaultApps.map((app2) => ({ name: app2.name, id: app2.id, icon: app2.icon })));
+      const merged = [...override];
+      for (const app2 of resolved) {
+        const key = (app2.id || app2.name).toLowerCase();
+        if (!merged.some((m) => (m.id || m.name).toLowerCase() === key)) {
+          merged.push(app2);
+        }
+      }
+      setChosenApps(merged);
     } else {
-      setChosenApps([]);
+      setChosenApps(resolved);
     }
     seededPresetIdRef.current = preset.id;
     if (onSelectPreset) {
@@ -18607,9 +19243,9 @@ var AgentUI = ({
   }, [availableApps]);
   const pendingAuthApps = useMemo10(() => {
     if (authAppsLoading) return [];
-    const decisions = agentData?.decisions || [];
     const seen = /* @__PURE__ */ new Set();
     const out = [];
+    const decisions = agentData?.decisions || [];
     for (const d of decisions) {
       const req = extractAuthRequest(d);
       if (!req) continue;
@@ -18621,8 +19257,21 @@ var AgentUI = ({
       const icon = appsById[req.appName]?.icon || appsById[slug]?.icon || (appId ? appsById[appId]?.icon : "") || "";
       out.push({ appName: req.appName, appId, icon });
     }
+    const hasAllowed = Array.isArray(agentData?.allowed_actions) && agentData.allowed_actions.length > 0;
+    const activeAppList = hasAllowed ? executionApps : chosenApps;
+    for (const app2 of activeAppList) {
+      if (!app2?.name) continue;
+      const slug = normalizeAgentAppName(app2.name);
+      if (seen.has(slug)) continue;
+      if (appRequiresAuthentication(slug) && !isAppAuthenticated(app2.name, app2.id || null)) {
+        seen.add(slug);
+        const appId = app2.id || appsById[app2.name]?.id || appsById[slug]?.id || null;
+        const icon = app2.icon || appsById[app2.name]?.icon || appsById[slug]?.icon || (appId ? appsById[appId]?.icon : "") || "";
+        out.push({ appName: app2.name, appId, icon });
+      }
+    }
     return out;
-  }, [agentData, appsById, authAppsLoading, isAppAuthenticated]);
+  }, [agentData, executionApps, chosenApps, appsById, authAppsLoading, isAppAuthenticated]);
   useEffect18(() => {
     if (apps) setChosenApps(apps);
   }, [apps]);
@@ -19237,9 +19886,6 @@ var AgentUI = ({
         return next;
       }, { replace: true });
     }
-    const resolvedIncidentId = propIncidentId || (contextCategory === "incidents" ? contextParams?.id : void 0) || (typeof window !== "undefined" ? window.__shuffleActiveIncidentId : void 0);
-    const resolvedVulnerabilityId = propVulnerabilityId || (contextCategory === "vulnerabilities" ? contextParams?.id : void 0) || (typeof window !== "undefined" ? window.__shuffleActiveVulnerabilityId : void 0);
-    const resolvedWorkflowId = propWorkflowId || (contextCategory === "workflows" ? contextParams?.id : void 0) || (typeof window !== "undefined" ? window.__shuffleActiveWorkflowId : void 0);
     const result = await runAgent({
       input: composed.trim(),
       skipPolling: true,
@@ -19248,6 +19894,7 @@ var AgentUI = ({
       ...apiBaseUrl ? { apiBaseUrl } : {},
       ...orgId ? { orgId } : {},
       ...resolvedIncidentId ? { incidentId: resolvedIncidentId } : {},
+      ...resolvedIncidentContext ? { incidentContext: resolvedIncidentContext } : {},
       ...resolvedVulnerabilityId ? { vulnerabilityId: resolvedVulnerabilityId } : {},
       ...resolvedWorkflowId ? { workflowId: resolvedWorkflowId } : {},
       // Send a single comma-separated `tool_name` in the format
@@ -19318,6 +19965,13 @@ var AgentUI = ({
     const auth = raw?.authorization;
     if (eid && auth) {
       activeExecutionIdRef.current = eid;
+      if (typeof window !== "undefined") {
+        window.dispatchEvent(
+          new CustomEvent("shuffle:agent_execution_status", {
+            detail: { executionId: eid, status: "running", incidentId: resolvedIncidentId }
+          })
+        );
+      }
       if (contextStorageKey) {
         setPageContextChoice(contextStorageKey, {
           draftPrompt: "",
@@ -19905,17 +20559,30 @@ var AgentUI = ({
     if (status === "FINISHED" || status === "SUCCESS") {
       window.dispatchEvent(
         new CustomEvent("shuffle:agent_execution_status", {
-          detail: { executionId: eid, status: "completed" }
+          detail: { executionId: eid, status: "completed", incidentId: resolvedIncidentId }
         })
       );
+      if (resolvedIncidentId) {
+        window.dispatchEvent(
+          new CustomEvent("incident:refresh", {
+            detail: { id: resolvedIncidentId, incidentId: resolvedIncidentId, executionId: eid }
+          })
+        );
+      }
     } else if (["FAILURE", "ABORTED", "CANCELLED", "CANCELED"].includes(status)) {
       window.dispatchEvent(
         new CustomEvent("shuffle:agent_execution_status", {
-          detail: { executionId: eid, status: "failed" }
+          detail: { executionId: eid, status: "failed", incidentId: resolvedIncidentId }
+        })
+      );
+    } else if (["RUNNING", "EXECUTING", "IN_PROGRESS", "WAITING"].includes(status)) {
+      window.dispatchEvent(
+        new CustomEvent("shuffle:agent_execution_status", {
+          detail: { executionId: eid, status: "running", incidentId: resolvedIncidentId }
         })
       );
     }
-  }, [execution?.execution_id, execution?.status, agentData?.status]);
+  }, [execution?.execution_id, execution?.status, agentData?.status, resolvedIncidentId]);
   useEffect18(() => {
     if (!finishDecisionId || agentRequestLoading) return;
     if (continuationFocusedForRef.current === finishDecisionId) return;
@@ -22113,7 +22780,47 @@ var AgentUI = ({
                                           children: formatAppDisplayName(app2.name || "")
                                         }
                                       ),
-                                      (needsAuth || isUnavailable) && /* @__PURE__ */ jsx31(WarningIcon, { size: 14, color: "hsl(var(--severity-medium))", style: { marginRight: 2 } }),
+                                      needsAuth ? /* @__PURE__ */ jsx31(
+                                        Box22,
+                                        {
+                                          component: "span",
+                                          sx: {
+                                            fontSize: "0.65rem",
+                                            fontWeight: 600,
+                                            color: "hsl(var(--destructive))",
+                                            bgcolor: "hsl(var(--destructive) / 0.12)",
+                                            border: "1px solid hsl(var(--destructive) / 0.3)",
+                                            borderRadius: 1,
+                                            px: 0.6,
+                                            py: 0.1,
+                                            letterSpacing: "0.02em",
+                                            textTransform: "uppercase",
+                                            ml: 0.5,
+                                            mr: 0.25
+                                          },
+                                          children: "Missing auth"
+                                        }
+                                      ) : isUnavailable ? /* @__PURE__ */ jsx31(
+                                        Box22,
+                                        {
+                                          component: "span",
+                                          sx: {
+                                            fontSize: "0.65rem",
+                                            fontWeight: 600,
+                                            color: "hsl(var(--severity-medium))",
+                                            bgcolor: "hsl(var(--severity-medium) / 0.12)",
+                                            border: "1px solid hsl(var(--severity-medium) / 0.3)",
+                                            borderRadius: 1,
+                                            px: 0.6,
+                                            py: 0.1,
+                                            letterSpacing: "0.02em",
+                                            textTransform: "uppercase",
+                                            ml: 0.5,
+                                            mr: 0.25
+                                          },
+                                          children: "Unavailable"
+                                        }
+                                      ) : null,
                                       isRequired ? /* @__PURE__ */ jsx31(
                                         LockIcon3,
                                         {
@@ -22315,43 +23022,83 @@ var AgentUI = ({
                     return list;
                   })().map((app2, i) => {
                     const slug = normalizeAgentAppName(app2.name || "");
+                    const appNeedsAuth = !authAppsLoading && appRequiresAuthentication(slug) && !isAppAuthenticated(app2.name || "", app2.id || null);
                     const appIcon = app2.icon || availableApps.find((a) => normalizeAgentAppName(a.name || "") === slug)?.icon || resolvedToolApps[slug]?.icon;
-                    return /* @__PURE__ */ jsx31(Tooltip14, { title: formatAppDisplayName(app2.name || ""), children: /* @__PURE__ */ jsx31(
-                      Box22,
+                    return /* @__PURE__ */ jsx31(
+                      Tooltip14,
                       {
-                        onClick: () => setAuthDrawerApp({ name: app2.name, id: app2.id || null }),
-                        sx: {
-                          display: "inline-flex",
-                          alignItems: "center",
-                          justifyContent: "center",
-                          width: 24,
-                          height: 24,
-                          borderRadius: "6px",
-                          overflow: "hidden",
-                          bgcolor: "hsl(var(--muted))",
-                          cursor: "pointer",
-                          transition: "transform 0.15s ease, border-color 0.15s ease",
-                          "&:hover": { transform: "scale(1.08)", borderColor: "hsl(var(--primary)) !important" }
-                        },
+                        title: appNeedsAuth ? `${formatAppDisplayName(app2.name || "")} \u2014 Missing authentication (Click to connect)` : formatAppDisplayName(app2.name || ""),
                         children: /* @__PURE__ */ jsx31(
-                          AppFallbackIcon,
+                          Box22,
                           {
-                            name: app2.name,
-                            imageUrl: appIcon,
-                            size: 24,
-                            style: { borderRadius: 6, objectFit: "contain" }
+                            onClick: () => setAuthDrawerApp({ name: app2.name, id: app2.id || null }),
+                            sx: {
+                              display: "inline-flex",
+                              alignItems: "center",
+                              justifyContent: "center",
+                              width: 24,
+                              height: 24,
+                              borderRadius: "6px",
+                              overflow: "hidden",
+                              bgcolor: "hsl(var(--muted))",
+                              cursor: "pointer",
+                              transition: "transform 0.15s ease, border-color 0.15s ease",
+                              border: appNeedsAuth ? "2px solid hsl(var(--destructive)) !important" : "none",
+                              boxShadow: appNeedsAuth ? "0 0 0 1px hsl(var(--destructive) / 0.4)" : "none",
+                              "&:hover": { transform: "scale(1.08)", borderColor: "hsl(var(--primary)) !important" }
+                            },
+                            children: /* @__PURE__ */ jsx31(
+                              AppFallbackIcon,
+                              {
+                                name: app2.name,
+                                imageUrl: appIcon,
+                                size: 24,
+                                style: { borderRadius: 6, objectFit: "contain" }
+                              }
+                            )
                           }
                         )
-                      }
-                    ) }, i);
+                      },
+                      i
+                    );
                   }) }),
                   /* @__PURE__ */ jsxs24(Box22, { sx: { flex: 1, minWidth: 0 }, children: [
                     /* @__PURE__ */ jsx31(Typography19, { sx: { fontSize: "0.85rem", color: "hsl(var(--foreground))", fontWeight: 600, overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap" }, children: extractCleanDisplayPrompt(agentData?.original_input) || actionInput || "Agent run" }),
-                    /* @__PURE__ */ jsxs24(Typography19, { sx: { fontSize: "0.7rem", color: "hsl(var(--muted-foreground))" }, children: [
-                      "Status: ",
-                      execution?.status || agentData?.status || "\u2014",
-                      " \xB7 ",
-                      execution?.execution_id?.slice(0, 8) || ""
+                    /* @__PURE__ */ jsxs24(Typography19, { sx: { fontSize: "0.7rem", color: "hsl(var(--muted-foreground))", display: "flex", alignItems: "center", gap: 1, flexWrap: "wrap", mt: 0.25 }, children: [
+                      /* @__PURE__ */ jsxs24("span", { children: [
+                        "Status: ",
+                        execution?.status || agentData?.status || "\u2014",
+                        " \xB7 ",
+                        execution?.execution_id?.slice(0, 8) || ""
+                      ] }),
+                      pendingAuthApps.length > 0 && /* @__PURE__ */ jsxs24(
+                        Box22,
+                        {
+                          component: "span",
+                          onClick: () => setAuthDrawerApp({ name: pendingAuthApps[0].appName, id: pendingAuthApps[0].appId }),
+                          sx: {
+                            display: "inline-flex",
+                            alignItems: "center",
+                            gap: 0.5,
+                            px: 0.75,
+                            py: 0.15,
+                            borderRadius: 1,
+                            bgcolor: "hsl(var(--destructive) / 0.12)",
+                            border: "1px solid hsl(var(--destructive) / 0.35)",
+                            color: "hsl(var(--destructive))",
+                            fontSize: "0.68rem",
+                            fontWeight: 600,
+                            cursor: "pointer",
+                            textTransform: "none",
+                            "&:hover": { bgcolor: "hsl(var(--destructive) / 0.2)" }
+                          },
+                          children: [
+                            "Missing Auth: ",
+                            pendingAuthApps.map((a) => formatAppDisplayName(a.appName)).join(", "),
+                            " \u2014 Connect"
+                          ]
+                        }
+                      )
                     ] })
                   ] }),
                   /* @__PURE__ */ jsx31(AgentAttachmentsButton_default, { attachments: llmImageAttachments }),
@@ -22531,6 +23278,57 @@ var AgentUI = ({
                     }
                   }
                 ),
+                pendingAuthApps.length > 0 && /* @__PURE__ */ jsxs24(
+                  Box22,
+                  {
+                    sx: {
+                      mb: 2,
+                      p: 2,
+                      borderRadius: 2,
+                      border: "1px solid hsla(var(--severity-medium) / 0.35)",
+                      bgcolor: "hsla(var(--severity-medium) / 0.08)",
+                      display: "flex",
+                      alignItems: "center",
+                      justifyContent: "space-between",
+                      gap: 2,
+                      flexWrap: "wrap"
+                    },
+                    children: [
+                      /* @__PURE__ */ jsxs24(Box22, { sx: { display: "flex", alignItems: "center", gap: 1.5, flex: 1, minWidth: 260 }, children: [
+                        /* @__PURE__ */ jsx31(LockIcon3, { size: 22, color: "hsl(var(--severity-medium))" }),
+                        /* @__PURE__ */ jsxs24(Box22, { sx: { flex: 1, minWidth: 0 }, children: [
+                          /* @__PURE__ */ jsx31(Typography19, { sx: { fontSize: "0.875rem", fontWeight: 600, color: "hsl(var(--foreground))" }, children: pendingAuthApps.length === 1 ? `${formatAppDisplayName(pendingAuthApps[0].appName)} requires authentication` : `${pendingAuthApps.map((a) => formatAppDisplayName(a.appName)).join(", ")} require authentication` }),
+                          /* @__PURE__ */ jsx31(Typography19, { sx: { fontSize: "0.78rem", color: "hsl(var(--muted-foreground))" }, children: pendingAuthApps.length === 1 ? `The agent cannot complete steps using ${formatAppDisplayName(pendingAuthApps[0].appName)} and may remain pending until connected.` : `The agent cannot complete steps using these tools and may remain pending until connected.` })
+                        ] })
+                      ] }),
+                      /* @__PURE__ */ jsx31(Box22, { sx: { display: "flex", gap: 1, flexWrap: "wrap" }, children: pendingAuthApps.map(({ appName, appId }) => /* @__PURE__ */ jsxs24(
+                        Button13,
+                        {
+                          variant: "outlined",
+                          size: "small",
+                          onClick: () => setAuthDrawerApp({ name: appName, id: appId }),
+                          sx: {
+                            borderColor: "hsla(var(--severity-medium) / 0.6)",
+                            color: "hsl(var(--foreground))",
+                            textTransform: "none",
+                            fontSize: "0.75rem",
+                            fontWeight: 600,
+                            height: 32,
+                            "&:hover": {
+                              bgcolor: "hsla(var(--severity-medium) / 0.15)",
+                              borderColor: "hsl(var(--severity-medium))"
+                            }
+                          },
+                          children: [
+                            "Authenticate ",
+                            formatAppDisplayName(appName)
+                          ]
+                        },
+                        appName
+                      )) })
+                    ]
+                  }
+                ),
                 viewMode === "simple" && /* @__PURE__ */ jsx31(Box22, { sx: {
                   borderRadius: 2,
                   border: "1px solid hsl(var(--border))",
@@ -22572,7 +23370,7 @@ var AgentUI = ({
                   }
                   const pendingAnswered = pendingQuestions.every((q) => questionAnswers[q.question]?.value);
                   return /* @__PURE__ */ jsxs24(Fragment12, { children: [
-                    /* @__PURE__ */ jsxs24(
+                    /* @__PURE__ */ jsx31(
                       RunFinishedSummary,
                       {
                         status,
@@ -22585,77 +23383,7 @@ var AgentUI = ({
                         durationSec,
                         showMeta: true,
                         bottomContent: aiAuthSuggestionNode,
-                        children: [
-                          pendingAuthApps.map(({ appName, appId, icon }) => {
-                            const pretty = appName.replace(/_/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
-                            return /* @__PURE__ */ jsxs24(
-                              Box22,
-                              {
-                                sx: {
-                                  display: "flex",
-                                  alignItems: "center",
-                                  gap: 1.5,
-                                  p: 1.5,
-                                  borderRadius: 1.5,
-                                  border: "1px solid hsla(var(--severity-medium) / 0.3)",
-                                  bgcolor: "hsla(var(--severity-medium) / 0.08)"
-                                },
-                                children: [
-                                  /* @__PURE__ */ jsx31(LockIcon3, { size: 22, color: "hsl(var(--severity-medium))" }),
-                                  /* @__PURE__ */ jsxs24(Box22, { sx: { flex: 1, minWidth: 0 }, children: [
-                                    /* @__PURE__ */ jsxs24(Typography19, { sx: { fontSize: "0.85rem", fontWeight: 600, color: "hsl(var(--foreground))" }, children: [
-                                      pretty,
-                                      " requires authentication"
-                                    ] }),
-                                    /* @__PURE__ */ jsxs24(Typography19, { sx: { fontSize: "0.75rem", color: "hsl(var(--muted-foreground))" }, children: [
-                                      "Connect your ",
-                                      pretty,
-                                      " account so the agent can complete this step, then rerun."
-                                    ] })
-                                  ] }),
-                                  /* @__PURE__ */ jsxs24(
-                                    Button13,
-                                    {
-                                      variant: "outlined",
-                                      size: "small",
-                                      startIcon: /* @__PURE__ */ jsx31(
-                                        Avatar6,
-                                        {
-                                          src: icon || void 0,
-                                          alt: "",
-                                          variant: "rounded",
-                                          sx: {
-                                            width: 18,
-                                            height: 18,
-                                            borderRadius: 0.5,
-                                            bgcolor: "hsl(var(--background) / 0.4)",
-                                            color: "hsl(var(--background))",
-                                            fontSize: "0.7rem",
-                                            fontWeight: 700,
-                                            "& img": { objectFit: "contain" }
-                                          },
-                                          children: pretty.charAt(0)
-                                        }
-                                      ),
-                                      onClick: () => setAuthDrawerApp({ name: appName, id: appId }),
-                                      sx: {
-                                        height: 36,
-                                        textTransform: "none",
-                                        fontWeight: 600
-                                      },
-                                      children: [
-                                        "Authenticate ",
-                                        pretty
-                                      ]
-                                    }
-                                  )
-                                ]
-                              },
-                              `auth-${appName}`
-                            );
-                          }),
-                          !isRunning && postRunDiscovery
-                        ]
+                        children: !isRunning && postRunDiscovery
                       }
                     ),
                     !finishAnswer && pendingAsk && pendingQuestions.length > 0 ? (() => {
@@ -27005,6 +27733,8 @@ var AskAiSidePanel = ({
   defaultInput,
   serverside,
   colorMode,
+  incidentId: propIncidentId,
+  incidentContext: propIncidentContext,
   sx
 }) => {
   const themeScope = useShuffleMcpTheme();
@@ -27127,11 +27857,15 @@ var AskAiSidePanel = ({
   }, [open, initialTab, onTabChange]);
   const [activeTaskId, setActiveTaskId] = useState29(null);
   const [activeExecutionId, setActiveExecutionId] = useState29(null);
+  const [activeIncidentId, setActiveIncidentId] = useState29(null);
+  const [activeIncidentContext, setActiveIncidentContext] = useState29(null);
   const [runResetKey, setRunResetKey] = useState29(0);
   useEffect26(() => {
     if (!open) {
       setActiveTaskId(null);
       setActiveExecutionId(null);
+      setActiveIncidentId(null);
+      setActiveIncidentContext(null);
     }
   }, [open]);
   useEffect26(() => {
@@ -27163,6 +27897,12 @@ var AskAiSidePanel = ({
       } else if (!detail?.tab) {
         setActiveTaskId(null);
       }
+      if (detail?.incidentId !== void 0) {
+        setActiveIncidentId(detail.incidentId || null);
+      }
+      if (detail?.incidentContext !== void 0) {
+        setActiveIncidentContext(detail.incidentContext || null);
+      }
       if (detail?.resetExecution) {
         setActiveExecutionId(null);
         setRunResetKey((k) => k + 1);
@@ -27796,6 +28536,8 @@ var AskAiSidePanel = ({
                     onAppsChange: handleAppsChange,
                     onSelectPreset: handleSelectPreset,
                     onChooseLLM: () => handleTabChange("localLLM"),
+                    incidentId: activeIncidentId || propIncidentId || agentUIProps?.incidentId,
+                    incidentContext: activeIncidentContext || propIncidentContext || agentUIProps?.incidentContext,
                     apiBaseUrl: globalUrl || agentUIProps?.apiBaseUrl,
                     theme: effectiveTheme,
                     sx: {