@stigmer/react 3.1.17 → 3.2.1

package/src/session/index.ts

@@ -3,6 +3,11 @@ export type { ExecutionTargetOption } from "./execution-target.js";
 
 export type { RuntimeEnvProvider } from "./runtime-env.js";
 export type { SessionAudience } from "./audience.js";
+export {
+  CHANNEL_SESSION_LABELS,
+  isChannelOriginSession,
+  channelSessionExternalUserKey,
+} from "./channelOrigin.js";
 
 export { useCreateSession } from "./useCreateSession.js";
 export type {
@@ -129,12 +134,10 @@ export {
   PLAN_DOCUMENT_PATH,
 } from "./plan-document.js";
 
-// Artifact document — the editor-area rendering of an execution artifact
-// (mounted as an artifact-family virtual document) and the identity of its tabs.
-export { ARTIFACT_DOCUMENT_ENTRY_ID } from "./artifact-document.js";
-
-// Selection types (for platform builders composing their own Inspect facet)
-export type { SelectedThreadItem } from "../internal/store/selection-store.js";
+// Artifact document tab identity — promoted to execution/ (shared with the
+// workflow panel); re-exported here so `@stigmer/react`'s public export and
+// existing session-path importers are unchanged.
+export { ARTIFACT_DOCUMENT_ENTRY_ID } from "../execution/artifact-document.js";
 
 // Session facet components — the panel's rail views (Config et al.), also
 // independently importable (DD-003).

package/src/session/useNewSessionFlow.ts

@@ -23,6 +23,21 @@ const DEFAULT_AGENT_TIMEOUT_MS = 10_000;
 
 const STORAGE_KEY_HARNESS = "stigmer:session:harness";
 
+/**
+ * Platform policy for guest (share/embed) sessions: the cursor harness with
+ * the Auto model (an omitted modelName resolves to cursor's "default"/Auto in
+ * the runner).
+ *
+ * This lives CLIENT-side deliberately — it is the only layer that can. The
+ * SDK's guest audience covers both public visitors (guest tokens) and org
+ * members chatting via an org-audience share (their own member tokens, which
+ * carry no share linkage in Phase A) — the server cannot distinguish the
+ * latter from ordinary Console traffic, so share-surface policy must be
+ * applied where the surface is known. Server-side guest-token gates own the
+ * abuse controls (rate limits, bounded execution profile).
+ */
+const GUEST_HARNESS: HarnessOption = "cursor";
+
 function modelStorageKey(harness: HarnessOption): string {
   return harness === "cursor"
     ? "stigmer:session:model:cursor"
@@ -78,6 +93,10 @@ export interface UseNewSessionFlowOptions {
    * localStorage on explicit change — always takes precedence on
    * subsequent visits.
    *
+   * Ignored for the `"guest"` audience: guest sessions always run the
+   * platform's share-surface policy (cursor harness, Auto model), never an
+   * embedder preference or a stored Console choice.
+   *
    * @default DEFAULT_HARNESS ("native")
    */
   readonly defaultHarness?: HarnessOption;
@@ -205,6 +224,10 @@ export function useNewSessionFlow(
   const adapter = useRunnerAdapter();
 
   const [harness, setHarnessRaw] = useState<HarnessOption>(() => {
+    // Guests get the fixed platform policy (see GUEST_HARNESS) and never
+    // touch localStorage: a browser previously used in the Console must not
+    // leak its stored harness into a share/embed session.
+    if (isGuest) return GUEST_HARNESS;
     if (typeof window === "undefined") return defaultHarness ?? DEFAULT_HARNESS;
     // Only explicit user choices are persisted (see setHarness), so a
     // stored value always outranks the embedder's defaultHarness.
@@ -241,6 +264,9 @@ export function useNewSessionFlow(
   const setHarness = useCallback(
     (h: HarnessOption) => {
       setHarnessRaw(h);
+      // Guests have no harness picker; if a caller invokes this anyway, the
+      // guest surface must never write into the Console's preference keys.
+      if (isGuest) return;
       // Persist only explicit choices — never the seeded value — so the
       // embedder's defaultHarness keeps applying until the user decides.
       localStorage.setItem(STORAGE_KEY_HARNESS, h);
@@ -248,13 +274,16 @@ export function useNewSessionFlow(
       const plain = storedModel ? (parseModelKey(storedModel)?.modelId ?? storedModel) : undefined;
       setModelId(plain);
     },
-    [],
+    [isGuest],
   );
 
   // Restore persisted model — only after the registry has loaded so
   // getModel can actually validate the stored ID against live data.
+  // Guests skip the restore: modelId stays undefined, the create omits
+  // modelName, and the cursor harness resolves it to Auto — a Console-used
+  // browser must not leak its stored model into a share/embed session.
   useEffect(() => {
-    if (isModelsLoading) return;
+    if (isGuest || isModelsLoading) return;
     const stored = localStorage.getItem(modelStorageKey(harness));
     if (stored) {
       const plain = parseModelKey(stored)?.modelId ?? stored;
@@ -262,16 +291,18 @@ export function useNewSessionFlow(
         setModelId(plain);
       }
     }
-  }, [getModel, harness, isModelsLoading]);
+  }, [getModel, harness, isGuest, isModelsLoading]);
 
   // Persist model on change (using current harness key).
   // Strip compound keys (e.g. "cursor/default") to plain modelId before storing.
+  // Guests never persist — the symmetric half of the isolation above.
   useEffect(() => {
+    if (isGuest) return;
     if (modelId) {
       const plain = parseModelKey(modelId)?.modelId ?? modelId;
       localStorage.setItem(modelStorageKey(harness), plain);
     }
-  }, [modelId, harness]);
+  }, [modelId, harness, isGuest]);
 
   const submit = useCallback(
     async (

package/src/session/usePersistedModel.ts

@@ -15,6 +15,17 @@ export interface UsePersistedModelOptions {
    * When `"native"` or omitted, the default key and registry apply.
    */
   readonly harness?: HarnessOption;
+  /**
+   * When `false`, the hook is a stable no-op: it never reads or writes
+   * localStorage and always returns `undefined` with a no-op setter.
+   *
+   * Guest (share/embed) surfaces disable persistence so a browser previously
+   * used in the Console cannot leak its stored model into a guest session,
+   * and a guest session never pollutes the Console's preference keys.
+   *
+   * @default true
+   */
+  readonly enabled?: boolean;
 }
 
 /** Return value of {@link usePersistedModel}. */
@@ -60,32 +71,43 @@ export function usePersistedModel(
   options?: UsePersistedModelOptions,
 ): UsePersistedModelReturn {
   const harness = options?.harness;
+  const enabled = options?.enabled ?? true;
   const { getModel } = useModelRegistry({ harness });
   const key = storageKey(harness);
   const prevKeyRef = useRef(key);
 
   const [modelId, setModelId] = useState<string | undefined>(() => {
-    if (typeof window === "undefined") return undefined;
+    if (!enabled || typeof window === "undefined") return undefined;
     const raw = localStorage.getItem(key);
     return raw ? extractPlainModelId(raw) : undefined;
   });
 
   // Re-read from localStorage when the storage key changes (harness transition).
   useEffect(() => {
+    if (!enabled) return;
     if (prevKeyRef.current === key) return;
     prevKeyRef.current = key;
 
     if (typeof window === "undefined") return;
     const raw = localStorage.getItem(key);
     setModelId(raw ? extractPlainModelId(raw) : undefined);
-  }, [key]);
+  }, [enabled, key]);
 
   useEffect(() => {
+    if (!enabled) return;
     if (modelId) {
       localStorage.setItem(key, modelId);
     }
-  }, [modelId, key]);
+  }, [enabled, modelId, key]);
+
+  if (!enabled) {
+    // Stable no-op shape: undefined model, inert setter. Returned after the
+    // hooks above so the hook order is identical whether enabled or not.
+    return [undefined, NOOP_SET_MODEL] as const;
+  }
 
   const validModelId = modelId && getModel(modelId) ? modelId : undefined;
   return [validModelId, setModelId] as const;
 }
+
+const NOOP_SET_MODEL: (id: string) => void = () => {};

package/src/session/useSessionFileChanges.ts

@@ -1,23 +1,17 @@
 "use client";
 
 import { useMemo } from "react";
-import { create } from "@bufbuild/protobuf";
 import type { AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
 import type { FileChange } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
-import { FileChangeSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
-import {
-  FileChangeCaptureLevel,
-  FileChangeType,
-} from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
-import { displayFileChangeSets, toDisplayFileChange } from "@stigmer/sdk";
+import { deriveExecutionFileChanges } from "../execution/deriveExecutionFileChanges.js";
 
 /** Return value of {@link useSessionFileChanges}. */
 export interface UseSessionFileChangesReturn {
   /**
    * One {@link FileChange} per file touched in the session — the *net*
-   * change for that path (see the net-diff note below) — ordered for a
-   * file-list (modified, then created/renamed, then deleted; alphabetical
-   * within each group).
+   * change for that path (see {@link deriveExecutionFileChanges} for the
+   * net-diff semantics) — ordered for a file-list (modified, then
+   * created/renamed, then deleted; alphabetical within each group).
    */
   readonly fileChanges: readonly FileChange[];
   /** `true` when at least one file was changed across all executions. */
@@ -34,39 +28,15 @@ export interface UseSessionFileChangesReturn {
  * file changes in the transcript (stamped edit rows + the per-turn decision
  * bar) and does not consume this hook.
  *
- * **Source (ledger-first).** Under apply-then-review the changes live in the
- * file-review ledger; {@link displayFileChangeSets} reads the server's live
- * projection or folds the durable ledger for a terminal execution (whose
- * projection is nil), and each captured change is projected onto the display
- * {@link FileChange} via {@link toDisplayFileChange}. A pre-capture
- * (legacy) execution has no ledger, so it falls back to the tool-call-coupled
- * `ToolCall.file_changes` (#186; removed in a later slice with that field). The
- * two sources are mutually exclusive per execution, so there is no double count.
- *
- * **Traversal.** The ledger is execution-scoped and already includes sub-agent
- * captures (DD-19), so the primary path is one pass per execution. The legacy
- * fallback walks the same surfaces the server-side approval recompute and
- * `MessageThread` walk: `status.messages[].toolCalls` **and**
- * `status.subAgentExecutions[].messages[].toolCalls`. Executions are visited in
- * chronological order, so each path's change list is chronological.
- *
- * **Net-diff (not latest-wins).** `useSessionWriteBacks`/`useSessionArtifacts`
- * dedup by "latest wins" because each entry is a *snapshot* (a PR; a file's
- * final bytes). A {@link FileChange} is a *delta* — an agent often rewrites the
- * same file several times in a turn, and showing only the last edit's diff
- * would misrepresent what changed. So changes to the same path are reduced to a
- * single net change: `before` from the first change, `after` from the last.
- * Because a WHOLE_FILE `after` is a complete file snapshot, `first.before →
- * last.after` is exactly the net change. A group with one change (the common
- * case) is passed through untouched; multi-edit groups synthesize a net
- * {@link FileChange} so every consumer speaks one proto type (DD-007).
- *
- * Counts and unified diffs for whole-file captures stay derivable by the
- * presentation layer (the runner emits 0/"" sentinels), matching the contract
- * the SDK `tool-view` established.
+ * A thin memoizing wrapper over {@link deriveExecutionFileChanges} — the
+ * shared execution-domain core that also powers the workflow panel's Changes
+ * facet (`useWorkflowExecutionFileChanges`). The source (ledger-first via
+ * `displayFileChangeSets`), the net-diff collapse, and the file-list ordering
+ * are all documented on the core.
  *
  * @param executions - All executions for a session, in chronological order.
- *   Pass both completed and active-stream executions.
+ *   Pass both completed and active-stream executions. Ordering matters: the
+ *   net collapse anchors on each path's first and last change.
  *
  * @example
  * ```tsx
@@ -86,32 +56,7 @@ export function useSessionFileChanges(
   executions: readonly AgentExecution[],
 ): UseSessionFileChangesReturn {
   return useMemo(() => {
-    // Path -> chronological list of raw changes to that path.
-    const groups = new Map<string, FileChange[]>();
-    // Preserve first-seen path order as a stable tiebreaker before sorting.
-    const collect = (change: FileChange) => {
-      const key = change.path || change.absolutePath;
-      if (!key) return;
-      const list = groups.get(key);
-      if (list) list.push(change);
-      else groups.set(key, [change]);
-    };
-
-    for (const execution of executions) {
-      // The file-review ledger is the single source under apply-then-review: the
-      // display seam reads the live projection or folds the durable ledger for a
-      // terminal execution, and the execution-scoped ledger already covers
-      // sub-agent captures (DD-19), so one pass suffices. Each CapturedFileChange
-      // is projected onto the display FileChange the net-collapse + renderer speak.
-      const capturedChanges = displayFileChangeSets(execution.status).flatMap(
-        (set) => set.changes,
-      );
-      for (const captured of capturedChanges) collect(toDisplayFileChange(captured));
-    }
-
-    const fileChanges = Array.from(groups.values(), netChange);
-    fileChanges.sort(fileChangeComparator);
-
+    const fileChanges = deriveExecutionFileChanges(executions);
     return {
       fileChanges,
       hasFileChanges: fileChanges.length > 0,
@@ -119,89 +64,3 @@ export function useSessionFileChanges(
     };
   }, [executions]);
 }
-
-/**
- * Reduces a path's chronological change list to a single net change.
- * A one-change group is returned as-is (the common path, no allocation);
- * multi-edit groups synthesize a net {@link FileChange}.
- */
-function netChange(changes: FileChange[]): FileChange {
-  if (changes.length === 1) return changes[0];
-
-  const first = changes[0];
-  const last = changes[changes.length - 1];
-  const changeType = netChangeType(first, last);
-
-  // Whole-file only when both chosen sides come from whole-file captures;
-  // otherwise fall back to the last change's hunk diff. A path edited by a
-  // single harness won't mix levels — this just stays honest if it ever does.
-  const wholeFile =
-    first.captureLevel === FileChangeCaptureLevel.WHOLE_FILE &&
-    last.captureLevel === FileChangeCaptureLevel.WHOLE_FILE;
-
-  if (wholeFile) {
-    return create(FileChangeSchema, {
-      path: last.path,
-      absolutePath: last.absolutePath,
-      changeType,
-      captureLevel: FileChangeCaptureLevel.WHOLE_FILE,
-      before: first.before,
-      after: last.after,
-      renameFrom: changeType === FileChangeType.RENAME ? first.renameFrom : "",
-    });
-  }
-
-  return create(FileChangeSchema, {
-    path: last.path,
-    absolutePath: last.absolutePath,
-    changeType,
-    captureLevel: FileChangeCaptureLevel.HUNK_ONLY,
-    unifiedDiff: last.unifiedDiff,
-    linesAdded: last.linesAdded,
-    linesRemoved: last.linesRemoved,
-    renameFrom: changeType === FileChangeType.RENAME ? first.renameFrom : "",
-  });
-}
-
-/**
- * Reconciles the net `change_type` of a path from its first and last change.
- *
- * Intent: the badge should describe the file's journey across the *whole*
- * session, anchored on its two endpoints, in this precedence:
- *
- * 1. Ends deleted (`last` is DELETE) → DELETE. The file is gone, regardless of
- *    how it got there — this includes create-then-delete, which we deliberately
- *    surface as DELETE rather than hiding the path. (`before` then comes from
- *    the first change, which for a created-then-deleted file is empty, so the
- *    diff reads as the removal of whatever briefly existed.)
- * 2. Started created (`first` is CREATE) and still exists → CREATE. A file born
- *    this session and later modified is, on net, a new file.
- * 3. Started renamed (`first` is RENAME) and still exists → RENAME, carrying the
- *    original `rename_from` so the move is preserved across later edits.
- * 4. Otherwise → MODIFY (the common multi-edit case).
- */
-function netChangeType(first: FileChange, last: FileChange): FileChangeType {
-  if (last.changeType === FileChangeType.DELETE) return FileChangeType.DELETE;
-  if (first.changeType === FileChangeType.CREATE) return FileChangeType.CREATE;
-  if (first.changeType === FileChangeType.RENAME) return FileChangeType.RENAME;
-  return FileChangeType.MODIFY;
-}
-
-// Most-actionable first (modified), then additions (create/rename), then
-// deletions — mirroring GitHub's file-list convention — alphabetical within
-// each group so the list is stable and scannable.
-const CHANGE_TYPE_ORDER: Readonly<Record<FileChangeType, number>> = {
-  [FileChangeType.MODIFY]: 0,
-  [FileChangeType.CREATE]: 1,
-  [FileChangeType.RENAME]: 1,
-  [FileChangeType.DELETE]: 2,
-  [FileChangeType.UNSPECIFIED]: 3,
-};
-
-function fileChangeComparator(a: FileChange, b: FileChange): number {
-  const order =
-    (CHANGE_TYPE_ORDER[a.changeType] ?? 3) -
-    (CHANGE_TYPE_ORDER[b.changeType] ?? 3);
-  if (order !== 0) return order;
-  return a.path.localeCompare(b.path, undefined, { sensitivity: "base" });
-}

package/src/session/useSessionPageFlow.ts

@@ -249,8 +249,19 @@ export function useSessionPageFlow(
   const executionTarget: ExecutionTargetOption | undefined = fromProtoExecutionTarget(
     conv.session?.spec?.executionTarget ?? ExecutionTarget.UNSPECIFIED,
   );
-  const [persistedModelId, setPersistedModelId] = usePersistedModel({ harness });
-
+  // Guests never read or write the Console's persisted model preference —
+  // their follow-ups carry no modelName, and the session's harness (cursor
+  // for share surfaces) resolves the model server-side.
+  const [persistedModelId, setPersistedModelId] = usePersistedModel({
+    harness,
+    enabled: !isGuest,
+  });
+
+  // Guest note: this stays undefined for guests by construction — guest
+  // executions never carry a modelName (the first message omits it and the
+  // server-side guest execution profile owns the field thereafter). The
+  // guest flow test asserts that invariant; if it ever breaks, fix the
+  // server profile rather than special-casing here.
   const lastExecModelId = useMemo(() => {
     const lastExec = conv.completedExecutions.at(-1);
     return lastExec?.spec?.executionConfig?.modelName || undefined;

package/src/session/useSessionPanel.ts

@@ -4,14 +4,13 @@ import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import type { ExecutionPhase } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 import type { ExecutionArtifact } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/artifact_pb";
 import { isTerminalPhase } from "../execution/execution-phases.js";
-import type { SelectedThreadItem } from "../internal/store/selection-store.js";
 import {
   useWorkspaceEditorsStoreRef,
   type OpenFileOptions,
   type WorkspaceEditorsStore,
 } from "../internal/store/index.js";
 import { PLAN_DOCUMENT_ENTRY_ID, PLAN_DOCUMENT_PATH } from "./plan-document.js";
-import { ARTIFACT_DOCUMENT_ENTRY_ID } from "./artifact-document.js";
+import { ARTIFACT_DOCUMENT_ENTRY_ID } from "../execution/artifact-document.js";
 import { artifactKey } from "./useSessionArtifacts.js";
 
 /** Options for {@link useSessionPanel}. */
@@ -53,8 +52,8 @@ export interface UseSessionPanelOptions {
    * to `"files"` (the Explorer), which suits the session viewer. The launcher
    * passes `"configure"`: pre-session there is no workspace, so the Config
    * facet — carrying the run defaults (harness/model) — is the useful landing
-   * view. Auto-switches (Changes/Inspect) and explicit rail picks still
-   * take over from here exactly as before.
+   * view. Auto-switches (Changes) and explicit rail picks still take over
+   * from here exactly as before.
    *
    * @default "files"
    */
@@ -73,8 +72,8 @@ export interface UseSessionPanelOptions {
  *
  * Owns the {@link WorkspaceEditorsStore} (the open-editor group) and the view
  * FSM ported from the retired inspector tabs: explicit picks are sticky until
- * a meaningful state change (selection cleared, running⇄terminal transition)
- * resets them back to the `defaultView`. Both are decoupled from any store
+ * a meaningful state change (the running⇄terminal transition) resets them
+ * back to the `defaultView`. Both are decoupled from any store
  * subscription at the owner level: callbacks mutate imperatively so a file
  * open/switch re-renders only the subscribing panel subtree, never the
  * streaming conversation column (DD-009/DD-010, invariant 2).
@@ -86,7 +85,7 @@ export interface SessionPanelController {
   readonly isOpen: boolean;
   /** The active rail view id (`"files"`, `"search"`, or an injected facet). */
   readonly view: string;
-  /** Expand the panel, restoring the previous view (or Inspect if a thread item is selected). */
+  /** Expand the panel, restoring the previous view. */
   readonly openPanel: () => void;
   /** Collapse the panel to the chip, preserving editors and view. */
   readonly closePanel: () => void;
@@ -140,15 +139,6 @@ export interface SessionPanelController {
    * no-op if the artifact is not open.
    */
   readonly pinArtifact: (artifact: ExecutionArtifact) => void;
-  /**
-   * Report the current thread-item selection. Called from an effect inside the
-   * panel subtree (the level that subscribes to the selection store), keeping
-   * the owner subscription-free. While the panel is open, a new selection
-   * auto-switches to the Inspect view (unless the user picked one explicitly);
-   * a collapsed panel deliberately ignores selections — Inspect has no
-   * auto-open (it must never pull the user out of the chat).
-   */
-  readonly notifySelection: (item: SelectedThreadItem | null) => void;
 }
 
 /**
@@ -167,14 +157,6 @@ export function useSessionPanel({
   // Sticky explicit pick (rail click) — auto-switching yields to it until a
   // meaningful state change resets it. Same semantics as the retired tab FSM.
   const userPickedViewRef = useRef(false);
-  // Render-synced mirror so imperative callbacks read the current view without
-  // re-binding on every view change.
-  const viewRef = useRef(view);
-  viewRef.current = view;
-  // Last selection reported by the panel subtree; consulted by transitions that
-  // fire at the owner level (open, phase change) where selection state is
-  // deliberately not subscribed.
-  const selectionRef = useRef<SelectedThreadItem | null>(null);
 
   // Running⇄terminal transition → reset the sticky pick and re-derive the view.
   // Adjust-state-during-render (the established ResizableSplit pattern) so it
@@ -186,7 +168,7 @@ export function useSessionPanel({
     setPrevPhase(phase);
     if (wasTerminal !== isNowTerminal) {
       userPickedViewRef.current = false;
-      setViewState(selectionRef.current ? "inspect" : defaultView);
+      setViewState(defaultView);
     }
   }
 
@@ -222,14 +204,7 @@ export function useSessionPanel({
     }
   }, [planKey, openPlanDocument]);
 
-  const openPanel = useCallback(() => {
-    setIsOpen(true);
-    // Re-derive the auto view on entry: a selection made while collapsed
-    // surfaces as Inspect now (the collapsed panel ignored it by design).
-    if (!userPickedViewRef.current && selectionRef.current) {
-      setViewState("inspect");
-    }
-  }, []);
+  const openPanel = useCallback(() => setIsOpen(true), []);
 
   const closePanel = useCallback(() => setIsOpen(false), []);
 
@@ -276,22 +251,6 @@ export function useSessionPanel({
     [editorsStore],
   );
 
-  const notifySelection = useCallback(
-    (item: SelectedThreadItem | null) => {
-      if (item === selectionRef.current) return;
-      selectionRef.current = item;
-      if (item) {
-        if (isOpen && !userPickedViewRef.current) setViewState("inspect");
-      } else if (viewRef.current === "inspect") {
-        // Selection cleared: leave Inspect (its content is gone) and unstick,
-        // returning to the panel's home view.
-        userPickedViewRef.current = false;
-        setViewState(defaultView);
-      }
-    },
-    [isOpen, defaultView],
-  );
-
   return useMemo(
     () => ({
       editorsStore,
@@ -307,7 +266,6 @@ export function useSessionPanel({
       openPlanDocument,
       openArtifact,
       pinArtifact,
-      notifySelection,
     }),
     [
       editorsStore,
@@ -323,7 +281,6 @@ export function useSessionPanel({
       openPlanDocument,
       openArtifact,
       pinArtifact,
-      notifySelection,
     ],
   );
 }

package/src/session/useSessionRailViews.tsx

@@ -3,7 +3,6 @@
 import { useMemo } from "react";
 import type { AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
 import type { SurfaceRailView } from "../workspace/WorkspaceSurface.js";
-import type { SelectedThreadItem } from "../internal/store/selection-store.js";
 import type { ApplyResourceResult } from "../library/useApplyResource.js";
 import { useSessionWriteBacks } from "./useSessionWriteBacks.js";
 import {
@@ -14,7 +13,6 @@ import { SetupTab, type SetupTabProps } from "./facets/SetupTab.js";
 import { ChangesTab } from "./facets/ChangesTab.js";
 import { ArtifactsTab } from "./facets/ArtifactsTab.js";
 import { UsageTab } from "./facets/UsageTab.js";
-import { InspectTab } from "./facets/InspectTab.js";
 
 /** Options for {@link useSessionRailViews}. */
 export interface UseSessionRailViewsOptions {
@@ -24,8 +22,6 @@ export interface UseSessionRailViewsOptions {
   readonly org: string;
   /** Session configuration for the Config facet. */
   readonly sessionConfig: SetupTabProps | undefined;
-  /** Currently selected thread item — surfaces the Inspect facet. */
-  readonly selectedItem: SelectedThreadItem | null;
   /** Called after a resource is applied from the Artifacts facet. */
   readonly onApplied?: (result: ApplyResourceResult) => void;
   /** Implement a plan — the Artifacts facet's preview action for `plan.md`. */
@@ -72,20 +68,19 @@ export interface UseSessionRailViewsOptions {
 }
 
 /**
- * Composes the session facets (Config / Changes / Artifacts / Usage / Inspect)
+ * Composes the session facets (Config / Changes / Artifacts / Usage)
  * as {@link SurfaceRailView}s for the workspace surface's activity rail.
  *
  * This is the session-domain half of the unified panel: the surface stays a
  * domain-pure workspace organism and these views are injected into its rail
  * (DD-004 composition). Contextual visibility mirrors the retired inspector's
  * tab rules — Changes/Artifacts surface only when data exists (with count
- * badges), Inspect only when a thread item is selected.
+ * badges).
  */
 export function useSessionRailViews({
   allExecutions,
   org,
   sessionConfig,
-  selectedItem,
   onApplied,
   onImplementPlan,
   onOpenPlan,
@@ -158,15 +153,6 @@ export function useSessionRailViews({
       });
     }
 
-    if (selectedItem) {
-      views.push({
-        id: "inspect",
-        label: "Inspect",
-        icon: <InspectIcon />,
-        content: <InspectTab selectedItem={selectedItem} />,
-      });
-    }
-
     return views;
   }, [
     sessionConfig,
@@ -184,7 +170,6 @@ export function useSessionRailViews({
     onOpenPlan,
     onOpenArtifact,
     onActivateArtifact,
-    selectedItem,
   ]);
 }
 
@@ -236,13 +221,3 @@ function UsageIcon() {
     </svg>
   );
 }
-
-/** Crosshair glyph — inspecting a selected thread item. */
-function InspectIcon() {
-  return (
-    <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="1.7" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true">
-      <circle cx="12" cy="12" r="7" />
-      <path d="M12 2v4M12 18v4M2 12h4M18 12h4" />
-    </svg>
-  );
-}