@skyhook-io/radar-app 1.9.0 → 1.9.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skyhook-io/radar-app",
-  "version": "1.9.0",
+  "version": "1.9.1",
   "description": "Radar's full web UI as a reusable React component. Used by Radar's own binary and by external consumers like Radar Cloud.",
   "repository": {
     "type": "git",
@@ -41,7 +41,7 @@
     "yaml": "^2.9.0"
   },
   "peerDependencies": {
-    "@skyhook-io/k8s-ui": ">=1.8.15",
+    "@skyhook-io/k8s-ui": ">=1.10.0",
     "@tanstack/react-query": ">=5",
     "@xyflow/react": ">=12.0.0",
     "clsx": ">=2",
@@ -54,15 +54,15 @@
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@playwright/test": "^1.59.1",
+    "@playwright/test": "^1.62.0",
     "@skyhook-io/k8s-ui": "*",
     "@tailwindcss/typography": "^0.5.20",
-    "@tailwindcss/vite": "^4.3.1",
-    "@tanstack/react-query": "^5.101.2",
+    "@tailwindcss/vite": "^4.3.3",
+    "@tanstack/react-query": "^5.101.4",
     "@types/node": "^26.1.1",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
-    "@vitejs/plugin-react": "^6.0.2",
+    "@vitejs/plugin-react": "^6.0.4",
     "@xyflow/react": "^12.11.2",
     "clsx": "^2.1.1",
     "elkjs": "^0.11.1",
@@ -77,7 +77,7 @@
     "react-dom": "^19.2.7",
     "react-router-dom": "^7.18.1",
     "tailwind-merge": "^3.6.0",
-    "tailwindcss": "^4.3.1",
+    "tailwindcss": "^4.3.3",
     "typescript": "^6.0.2",
     "typescript-eslint": "^8.62.0",
     "vite": "^8.1.5"

package/src/App.tsx

@@ -50,7 +50,7 @@ import { DiagnosticsOverlay } from './components/ui/DiagnosticsOverlay'
 import { useEventSource } from './hooks/useEventSource'
 import { debugNamespaceLog, useNamespaces, useNamespaceScope, useSetActiveNamespace, useSwitchContext, useAuthMe, useAudit } from './api/client'
 import { buildAuditSeverityMap } from './utils/auditBadges'
-import { routePath, apiUrl, getAuthHeaders, getCredentialsMode } from './api/config'
+import { routePath, apiUrl, getAuthHeaders, getCredentialsMode, stripBasename } from './api/config'
 import { KeyboardShortcutProvider, useRegisterShortcut, useRegisterShortcuts, useSuppressBaseShortcuts } from './hooks/useKeyboardShortcuts'
 import { useAnimatedUnmount } from './hooks/useAnimatedUnmount'
 import { useDocumentTitle } from './hooks/useDocumentTitle'
@@ -60,7 +60,7 @@ import { Network, List, Clock, Package, Sun, Moon, Activity, Home, Star, Search,
 import { useTheme } from './context/ThemeContext'
 import { Tooltip } from './components/ui/Tooltip'
 import { LargeClusterNamespacePicker } from './components/shared/LargeClusterNamespacePicker'
-import { SettingsDialog } from './components/settings/SettingsDialog'
+import { SettingsDialog, type SettingsSectionId } from './components/settings/SettingsDialog'
 import type { APIResource, TopologyNode, GroupingMode, MainView, SelectedResource, SelectedHelmRelease, NodeKind, TopologyMode, Topology, K8sEvent } from './types'
 import { kindToPlural, pluralToKind, openExternal, apiVersionToGroup, relatedResourcePath, searchHitToSelectedResource } from './utils/navigation'
 import { type OmnibarHandle } from './components/ui/Omnibar'
@@ -343,12 +343,19 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
   // Auth check — detect if auth is enabled but user is not authenticated
   const { data: authMe, isPending: authMePending } = useAuthMe()
 
-  // Restore navigation path after session-expiry re-auth redirect
+  // Restore navigation path after session-expiry re-auth redirect.
+  // The stored value is basename-relative, but strip defensively anyway:
+  // sessionStorage outlives app upgrades, so a value written by an older
+  // version may still carry the basename — and navigate() re-applies the
+  // basename, which would double it (/c/abc/c/abc/...). Trade-off: if a host
+  // mounts the app at a basename that exactly equals an internal route (e.g.
+  // /topology), this second strip eats the route and re-auth lands on home —
+  // accepted, since a wrong-but-valid landing beats a doubled URL.
   useEffect(() => {
     const returnPath = sessionStorage.getItem('radar_return_path')
     if (returnPath) {
       sessionStorage.removeItem('radar_return_path')
-      navigate(returnPath, { replace: true })
+      navigate(stripBasename(returnPath), { replace: true })
     }
   }, [navigate])
 
@@ -507,13 +514,23 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
 
   // Settings dialog state
   const [showSettings, setShowSettings] = useState(false)
+  const [settingsSection, setSettingsSection] = useState<SettingsSectionId>('overview')
+  const openSettings = useCallback((section: SettingsSectionId = 'overview') => {
+    setSettingsSection(section)
+    setShowSettings(true)
+  }, [])
 
   // Listen for "open-settings" DOM event (used by MCPSetupDialog etc.)
   useEffect(() => {
-    const handler = () => setShowSettings(true)
+    const handler = (event: Event) => {
+      const section =
+        (event as CustomEvent<{ section?: SettingsSectionId }>).detail?.section ??
+        'overview'
+      openSettings(section)
+    }
     window.addEventListener('radar:open-settings', handler)
     return () => window.removeEventListener('radar:open-settings', handler)
-  }, [])
+  }, [openSettings])
 
   // Listen for "open-local-terminal" DOM event — the AI surface is portaled above
   // the DockProvider, so it can't call useOpenLocalTerminal directly; it dispatches
@@ -853,7 +870,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
           description: 'Open settings',
           category: 'General' as const,
           scope: 'global' as const,
-          handler: () => setShowSettings(true),
+          handler: () => openSettings(),
         }]
       : []),
   ])
@@ -1599,7 +1616,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
           pinned={navRailEffectivePinned}
           onTogglePinned={toggleNavRailPinned}
           showPinToggle={!railForcedSlim}
-          onOpenSettings={() => setShowSettings(true)}
+          onOpenSettings={() => openSettings()}
           accountSlot={<UserMenu variant="rail" pinned={navRailEffectivePinned} />}
         />
       )}
@@ -2186,7 +2203,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
               navigateToResource(resource)
             }}
             onClearNamespaces={clearAllNamespaces}
-            onOpenSettings={() => setShowSettings(true)}
+            onOpenSettings={() => openSettings()}
           />
         )}
 
@@ -2417,6 +2434,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
       {/* Settings dialog — My permissions is rendered inline in its own section */}
       <SettingsDialog
         open={showSettings}
+        initialSection={settingsSection}
         onClose={() => setShowSettings(false)}
       />
 

package/src/api/client.ts

@@ -42,7 +42,7 @@ import type {
   ArgoRevisionMetadata,
 } from '../types'
 import type { GitOpsOperationResponse } from '../types/gitops'
-import { getApiBase, getAuthHeaders, getCredentialsMode, getBasename, routePath } from './config'
+import { getApiBase, getAuthHeaders, getCredentialsMode, getBasename, routePath, stripBasename } from './config'
 import { pluralToKind } from '../utils/navigation'
 
 // Auto-refresh cadences (ms) — named constants for each polled hook's
@@ -74,11 +74,13 @@ export function apiFetch(input: RequestInfo | URL, init?: RequestInit): Promise<
     const authPrefix = `${getBasename()}/auth`
     if (response.status === 401 && !window.location.pathname.startsWith(authPrefix)) {
       // Save current location so user returns to where they were after re-auth.
+      // Stored basename-relative: the restore path replays it through React
+      // Router's navigate(), which re-applies the basename itself.
       // Editor draft is auto-saved by EditableYamlView via sessionStorage.
       try {
         sessionStorage.setItem(
           'radar_return_path',
-          window.location.pathname + window.location.search,
+          stripBasename(window.location.pathname) + window.location.search,
         )
       } catch {
         /* best-effort */
@@ -2026,15 +2028,28 @@ export function useNodeMetricsHistory(nodeName: string) {
 }
 
 // Top metrics types (bulk, for resource table view)
+export interface ContainerResourceMetrics {
+  name: string
+  cpu: number // nanocores (usage)
+  cpuRequest: number // nanocores
+  cpuLimit: number // nanocores
+  memory: number // bytes (usage)
+  memoryRequest: number // bytes
+  memoryLimit: number // bytes
+}
+
 export interface TopPodMetrics {
   namespace: string
   name: string
   cpu: number // nanocores (usage)
   memory: number // bytes (usage)
-  cpuRequest: number // nanocores (sum across containers)
-  cpuLimit: number // nanocores (sum across containers)
-  memoryRequest: number // bytes (sum across containers)
-  memoryLimit: number // bytes (sum across containers)
+  cpuRequest: number // nanocores (sum across running containers)
+  cpuLimit: number // nanocores (sum across running containers)
+  memoryRequest: number // bytes (sum across running containers)
+  memoryLimit: number // bytes (sum across running containers)
+  // Per-container breakdown; present only for pods with more than one running
+  // container (regular + native sidecars). Absent for single-container pods.
+  containers?: ContainerResourceMetrics[]
 }
 
 export interface TopNodeMetrics {

package/src/api/config.test.ts

@@ -0,0 +1,47 @@
+import { describe, expect, it, afterEach } from 'vitest'
+
+import { setBasename, stripBasename, routePath } from './config'
+
+// setBasename mutates module state — restore standalone default after each test.
+afterEach(() => {
+  setBasename('')
+})
+
+describe('stripBasename', () => {
+  it('passes paths through unchanged when no basename is configured', () => {
+    expect(stripBasename('/resources/pods')).toBe('/resources/pods')
+    expect(stripBasename('/')).toBe('/')
+  })
+
+  it('strips a configured basename prefix', () => {
+    setBasename('/c/abc')
+    expect(stripBasename('/c/abc/resources/pods')).toBe('/resources/pods')
+    expect(stripBasename('/c/abc/timeline?range=1h')).toBe('/timeline?range=1h')
+  })
+
+  it('maps the bare basename to root', () => {
+    setBasename('/c/abc')
+    expect(stripBasename('/c/abc')).toBe('/')
+  })
+
+  it('strips when the basename is followed directly by a query string', () => {
+    setBasename('/c/abc')
+    expect(stripBasename('/c/abc?tab=events')).toBe('?tab=events')
+  })
+
+  it('leaves basename-relative paths unchanged (idempotent)', () => {
+    setBasename('/c/abc')
+    expect(stripBasename('/resources/pods')).toBe('/resources/pods')
+    expect(stripBasename(stripBasename('/c/abc/resources/pods'))).toBe('/resources/pods')
+  })
+
+  it('does not strip a path that merely shares a string prefix', () => {
+    setBasename('/c/abc')
+    expect(stripBasename('/c/abcdef/resources')).toBe('/c/abcdef/resources')
+  })
+
+  it('inverts routePath', () => {
+    setBasename('/c/abc')
+    expect(stripBasename(routePath('/auth/login'))).toBe('/auth/login')
+  })
+})

package/src/api/config.ts

@@ -64,6 +64,21 @@ export function routePath(path: string): string {
   return prefix + path;
 }
 
+/**
+ * Inverse of `routePath`: strips the configured basename from a window-level
+ * path so it can be handed to React Router's navigate(), which re-applies the
+ * basename. Passing an already-prefixed path to navigate() doubles the prefix
+ * (e.g. /c/abc/c/abc/...). Basename-relative paths pass through unchanged.
+ */
+export function stripBasename(path: string): string {
+  const prefix = basename;
+  if (!prefix) return path;
+  if (path === prefix || path.startsWith(prefix + '/') || path.startsWith(prefix + '?')) {
+    return path.slice(prefix.length) || '/';
+  }
+  return path;
+}
+
 /**
  * Builds a WebSocket URL for a given API path.
  *

package/src/api/diagnose.ts

@@ -10,6 +10,8 @@ export interface AgentInfo {
   version: string;
   present: boolean;
   supported: boolean;
+  profiles?: ExecutionProfile[];
+  consentSurfaces?: Partial<Record<ExecutionProfile, string>>;
   hosted?: boolean;
 }
 
@@ -18,9 +20,11 @@ export interface AgentsResponse {
   enabled: boolean;
   // Machine-scoped consent per disclosure surface, recorded server-side
   // (~/.radar) — one acknowledgment covers the web panel and the CLI.
-  consented?: { standard?: boolean; cursor?: boolean };
+  consented?: Record<string, boolean>;
 }
 
+export type ExecutionProfile = "safeguarded" | "full-local";
+
 export interface DiagnoseStep {
   id: string;
   tool: string;
@@ -64,14 +68,7 @@ export interface ResourceHealthSignal {
 }
 
 export interface DiagnoseStreamEvent {
-  type:
-    | "turn"
-    | "phase"
-    | "step"
-    | "thinking"
-    | "done"
-    | "error"
-    | "closed";
+  type: "turn" | "phase" | "step" | "thinking" | "done" | "error" | "closed";
   phase?: string;
   step?: DiagnoseStep;
   token?: string;
@@ -91,7 +88,7 @@ export interface RunSummary {
   name: string;
   context: string;
   agent?: string; // backend CLI that drove this run ("claude"/"codex")
-  isolated?: boolean;
+  profile?: ExecutionProfile;
   model?: string;
   effort?: string;
   managedBy?: string; // GitOps/Helm owner of the target ("Argo CD"/"Flux"/"Helm"), for the Apply warning
@@ -145,7 +142,7 @@ export async function createRun(
   },
   opts?: {
     agent?: string;
-    isolated?: boolean;
+    profile?: ExecutionProfile;
     model?: string;
     effort?: string;
   },
@@ -179,10 +176,8 @@ export async function listRuns(signal?: AbortSignal): Promise<RunsResponse> {
   return { runs: d.runs ?? [], historyDegraded: !!d.historyDegraded };
 }
 
-// recordConsent acknowledges the current disclosure for a surface, server-side.
-export async function recordConsent(
-  surface: "standard" | "cursor",
-): Promise<void> {
+// recordConsent acknowledges the current disclosure for an execution profile, server-side.
+export async function recordConsent(surface: string): Promise<void> {
   const res = await fetch(`${getApiBase()}/diagnose/consent`, {
     method: "POST",
     credentials: getCredentialsMode(),

package/src/components/diagnose/AISettings.tsx

@@ -5,12 +5,16 @@
 // Settings tabs' layout — this renders only the controls (no card, no heading).
 import { useState } from "react";
 import { Trash2 } from "lucide-react";
-import { clearHistory, type AgentInfo } from "../../api/diagnose";
+import {
+  clearHistory,
+  type AgentInfo,
+  type ExecutionProfile,
+} from "../../api/diagnose";
 import { AgentControls } from "./parts";
 
 export interface AIDraft {
   agent: string;
-  isolated: boolean;
+  profile: ExecutionProfile;
   model: string;
   effort: string;
 }
@@ -120,17 +124,27 @@ export function AISettingsSection({
         // The agent, its model, and how it runs are all fixed by the host — none
         // of the local BYO-agent knobs apply, so there's nothing to configure.
         <p className="text-xs leading-snug text-theme-text-tertiary">
-          {agentLabel} manages the model and how it runs — there&apos;s nothing to
-          configure here.
+          {agentLabel} manages the model and how it runs — there&apos;s nothing
+          to configure here.
         </p>
       ) : (
         <AgentControls
           agents={agents}
           selectedAgent={draft.agent}
           // Model + effort are agent-specific; reset them when the agent changes.
-          onSelectAgent={(a) => onChange({ agent: a, model: "", effort: "" })}
-          isolated={draft.isolated}
-          onSetIsolated={(v) => onChange({ isolated: v })}
+          onSelectAgent={(a) => {
+            const nextProfile = agents.find(
+              (agent) => agent.name === a,
+            )?.profiles?.[0];
+            onChange({
+              agent: a,
+              profile: nextProfile ?? draft.profile,
+              model: "",
+              effort: "",
+            });
+          }}
+          profile={draft.profile}
+          onSetProfile={(v) => onChange({ profile: v })}
           model={draft.model}
           onSetModel={(v) => onChange({ model: v })}
           effort={draft.effort}

package/src/components/diagnose/DiagnoseContext.tsx

@@ -22,7 +22,11 @@ import {
   recordConsent,
   DiagnoseError,
 } from "../../api/diagnose";
-import { type RunSummary, type AgentInfo } from "../../api/diagnose";
+import {
+  type RunSummary,
+  type AgentInfo,
+  type ExecutionProfile,
+} from "../../api/diagnose";
 
 export interface Target {
   kind: string;
@@ -38,8 +42,8 @@ interface DiagnoseCtx {
   agents: AgentInfo[]; // supported agents detected on PATH (for the picker)
   selectedAgent: string; // name of the chosen backend ("claude"/"codex")
   setSelectedAgent: (name: string) => void;
-  isolated: boolean; // run the agent without the user's own CLI config
-  setIsolated: (v: boolean) => void;
+  profile: ExecutionProfile;
+  setProfile: (v: ExecutionProfile) => void;
   model: string; // optional model override ("" = the agent's own default)
   setModel: (v: string) => void;
   effort: string; // optional Codex reasoning effort ("" = default)
@@ -108,15 +112,10 @@ const WIDTH_KEY = "radar-ai-panel-width";
 // Consent is machine-scoped and lives server-side (~/.radar): it gates a
 // machine-scoped action (spawn this machine's agent CLI, persist transcripts to
 // this machine's disk), so one acknowledgment covers this panel AND the
-// `radar diagnose` CLI. Cursor gets its own surface — its trust model is
-// materially different (the user's global MCP servers can't be excluded), so
-// approving Claude/Codex never bypasses Cursor's distinct disclosure.
-type ConsentSurface = "standard" | "cursor";
-function consentSurfaceFor(agent: string): ConsentSurface {
-  return agent === "cursor-agent" ? "cursor" : "standard";
-}
+// `radar diagnose` CLI. The execution profile selects the disclosure because
+// it determines the actual access available to the agent process.
 const AGENT_KEY = "radar-ai-agent";
-const ISOLATED_KEY = "radar-ai-isolated";
+const PROFILE_KEY = "radar-ai-profile";
 const MODEL_KEY = "radar-ai-model";
 const EFFORT_KEY = "radar-ai-effort";
 // Push (reflow the app left) only while the app keeps at least this much width to
@@ -140,7 +139,9 @@ export function agentLabelFor(name: string, fallbackLabel?: string): string {
 // openDiagnoseSettings opens the Settings dialog (App.tsx listens for this DOM
 // event) — the canonical home for AI-diagnosis config.
 export function openDiagnoseSettings() {
-  window.dispatchEvent(new CustomEvent("radar:open-settings"));
+  window.dispatchEvent(
+    new CustomEvent("radar:open-settings", { detail: { section: "ai" } }),
+  );
 }
 
 function readStored(key: string): string | null {
@@ -161,14 +162,12 @@ function writeStored(key: string, value: string) {
 export function DiagnoseProvider({ children }: { children: ReactNode }) {
   const [available, setAvailable] = useState(false);
   const [agents, setAgents] = useState<AgentInfo[]>([]);
-  const [consented, setConsented] = useState<
-    Record<ConsentSurface, boolean>
-  >({ standard: false, cursor: false });
+  const [consented, setConsented] = useState<Record<string, boolean>>({});
   const [selectedAgent, setSelectedAgentState] = useState<string>(
     () => readStored(AGENT_KEY) || "",
   );
-  const [isolated, setIsolatedState] = useState<boolean>(
-    () => readStored(ISOLATED_KEY) !== "0", // default isolated
+  const [profile, setProfileState] = useState<ExecutionProfile>(
+    () => (readStored(PROFILE_KEY) as ExecutionProfile) || "safeguarded",
   );
   const [model, setModelState] = useState<string>(
     () => readStored(MODEL_KEY) || "",
@@ -205,12 +204,15 @@ export function DiagnoseProvider({ children }: { children: ReactNode }) {
     fetchAgents()
       .then((r) => {
         if (!live) return;
-        setAvailable(r.enabled);
-        setConsented({
-          standard: !!r.consented?.standard,
-          cursor: !!r.consented?.cursor,
-        });
-        const supported = r.agents.filter((a) => a.supported);
+        setConsented(r.consented ?? {});
+        const supported = r.agents.filter(
+          (a) =>
+            a.supported &&
+            (a.hosted ||
+              (!!a.profiles?.length &&
+                a.profiles.every((p) => !!a.consentSurfaces?.[p]))),
+        );
+        setAvailable(r.enabled && supported.length > 0);
         setAgents(supported);
         // Keep the stored pick only if it's still installed; else default to the
         // first supported agent (matches the server's default selection).
@@ -220,6 +222,13 @@ export function DiagnoseProvider({ children }: { children: ReactNode }) {
             ? stored
             : (supported[0]?.name ?? "");
         setSelectedAgentState(next);
+        const profiles = supported.find((a) => a.name === next)?.profiles ?? [];
+        const storedProfile =
+          (readStored(PROFILE_KEY) as ExecutionProfile) || "safeguarded";
+        if (!profiles.includes(storedProfile) && profiles[0]) {
+          setProfileState(profiles[0]);
+          writeStored(PROFILE_KEY, profiles[0]);
+        }
         // Model/effort are agent-specific; if the stored agent is gone, its values
         // don't apply to the fallback agent (e.g. a Codex slug under Claude) — drop them.
         if (next !== stored) {
@@ -247,23 +256,35 @@ export function DiagnoseProvider({ children }: { children: ReactNode }) {
     (name: string) => {
       setSelectedAgentState(name);
       writeStored(AGENT_KEY, name);
+      const nextProfile = agents.find((agent) => agent.name === name)?.profiles?.[0];
+      if (nextProfile) {
+        setProfileState(nextProfile);
+        writeStored(PROFILE_KEY, nextProfile);
+      }
       // Model + effort are agent-specific (Claude aliases vs Codex slugs); reset
       // to the new agent's default rather than carry an invalid value across.
       setModel("");
       setEffort("");
     },
-    [setModel, setEffort],
+    [agents, setModel, setEffort],
   );
-  const setIsolated = useCallback((v: boolean) => {
-    setIsolatedState(v);
-    writeStored(ISOLATED_KEY, v ? "1" : "0");
+  const setProfile = useCallback((v: ExecutionProfile) => {
+    setProfileState(v);
+    writeStored(PROFILE_KEY, v);
   }, []);
 
-  const agentLabel = agentLabelFor(
-    selectedAgent,
-    agents.find((a) => a.name === selectedAgent)?.label,
-  );
-  const hosted = !!agents.find((a) => a.name === selectedAgent)?.hosted;
+  const selectedAgentInfo = agents.find((a) => a.name === selectedAgent);
+  const effectiveProfile =
+    selectedAgentInfo?.profiles?.includes(profile)
+      ? profile
+      : (selectedAgentInfo?.profiles?.[0] ?? profile);
+  const agentLabel = agentLabelFor(selectedAgent, selectedAgentInfo?.label);
+  const hosted = !!selectedAgentInfo?.hosted;
+  // Hosted Radar uses its existing per-user disclosure surface and supplies its
+  // own copy. Local agents use the execution profile as the consent contract.
+  const consentSurface = hosted
+    ? "standard"
+    : (selectedAgentInfo?.consentSurfaces?.[effectiveProfile] ?? "");
 
   useEffect(() => {
     const onResize = () => setViewportW(window.innerWidth);
@@ -314,10 +335,6 @@ export function DiagnoseProvider({ children }: { children: ReactNode }) {
     return () => clearInterval(t);
   }, [open, available, hasRunning, refreshRuns]);
 
-  // Keep the live selected agent reachable from the [] -dep callbacks below
-  // (consent is agent-specific, so they must read the CURRENT pick, not a closure).
-  const selectedAgentRef = useRef(selectedAgent);
-  selectedAgentRef.current = selectedAgent;
   const consentedRef = useRef(consented);
   consentedRef.current = consented;
 
@@ -329,7 +346,7 @@ export function DiagnoseProvider({ children }: { children: ReactNode }) {
     const seq = ++startSeqRef.current;
     createRun(t, {
       agent: selectedAgent || undefined,
-      isolated,
+      profile: hosted ? undefined : effectiveProfile,
       model: model || undefined,
       effort: effort || undefined,
     })
@@ -351,17 +368,26 @@ export function DiagnoseProvider({ children }: { children: ReactNode }) {
       });
   };
 
-  const openInvestigation = useCallback((t: Target) => {
-    setStartError(null);
-    setOpen(true);
-    if (!consentedRef.current[consentSurfaceFor(selectedAgentRef.current)]) {
-      setPendingTarget(t);
+  const openInvestigation = useCallback(
+    (t: Target) => {
+      setStartError(null);
+      setOpen(true);
+      if (!hosted && !consentSurface) {
+        setPendingTarget(null);
+        setStartError("Radar can’t run this agent with a verified execution profile.");
+        setView("investigation");
+        return;
+      }
+      if (!consentedRef.current[consentSurface]) {
+        setPendingTarget(t);
+        setView("investigation");
+        return;
+      }
       setView("investigation");
-      return;
-    }
-    setView("investigation");
-    startRunRef.current(t);
-  }, []);
+      startRunRef.current(t);
+    },
+    [consentSurface, hosted],
+  );
   const openRun = useCallback((id: string) => {
     setStartError(null);
     setActiveRunId(id);
@@ -401,15 +427,18 @@ export function DiagnoseProvider({ children }: { children: ReactNode }) {
   const consentBusyRef = useRef(false);
   const approveConsent = useCallback(() => {
     if (consentBusyRef.current) return;
+    if (!consentSurface) {
+      setStartError("Radar can’t record consent for this agent.");
+      return;
+    }
     consentBusyRef.current = true;
     setStartError(null);
-    const surface = consentSurfaceFor(selectedAgentRef.current);
     const t = pendingTarget;
     // The server ENFORCES consent at start, so the acknowledgment must land
     // before the run request — awaiting also makes it durable for the CLI.
-    recordConsent(surface)
+    recordConsent(consentSurface)
       .then(() => {
-        setConsented((prev) => ({ ...prev, [surface]: true }));
+        setConsented((prev) => ({ ...prev, [consentSurface]: true }));
         // Cleared only on success: a failed write keeps the consent card up
         // (needsConsent = !!pendingTarget) so "try again" works in place.
         setPendingTarget(null);
@@ -421,7 +450,7 @@ export function DiagnoseProvider({ children }: { children: ReactNode }) {
       .finally(() => {
         consentBusyRef.current = false;
       });
-  }, [pendingTarget]);
+  }, [consentSurface, pendingTarget]);
   const cancelConsent = useCallback(() => {
     setPendingTarget(null);
     setOpen(false);
@@ -440,8 +469,8 @@ export function DiagnoseProvider({ children }: { children: ReactNode }) {
     agents,
     selectedAgent,
     setSelectedAgent,
-    isolated,
-    setIsolated,
+    profile: effectiveProfile,
+    setProfile,
     model,
     setModel,
     effort,