@stigmer/react 3.12.3 → 3.12.4

package/src/execution/FileChangeProgressBar.tsx

@@ -3,6 +3,7 @@
 import { memo, useState } from "react";
 import type { FileChangeProgress } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/filereview_pb";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_LIST } from "../internal/element-resets.js";
 import { FileKindBadge, FileLineStats } from "./FileReviewAtoms.js";
 import { FilePathLink } from "./FilePathLink.js";
 
@@ -91,7 +92,7 @@ export const FileChangeProgressBar = memo(function FileChangeProgressBar({
         <FileLineStats linesAdded={linesAdded} linesRemoved={linesRemoved} />
       </div>
       {expanded && (
-        <ul className="stg:mt-2 stg:max-h-[30vh] stg:space-y-1 stg:overflow-y-auto">
+        <ul className={cn(UNSTYLED_LIST, "stg:mt-2 stg:max-h-[30vh] stg:space-y-1 stg:overflow-y-auto")}>
           {entries.map((entry) => {
             const path = entry.pathAfter || entry.pathBefore;
             return (

package/src/execution/TodoList.tsx

@@ -4,6 +4,7 @@ import { useMemo, type ComponentType } from "react";
 import type { TodoItem } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/todo_pb";
 import { TodoStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_LIST } from "../internal/element-resets.js";
 
 /** Props for {@link TodoList}. */
 export interface TodoListProps {
@@ -69,7 +70,7 @@ export function TodoList({
   return (
     <ul
       role="list"
-      className={cn("stg:flex stg:flex-col stg:gap-1", className)}
+      className={cn(UNSTYLED_LIST, "stg:flex stg:flex-col stg:gap-1", className)}
       aria-label="Tasks"
     >
       {sortedTodos.map((item) => (

package/src/execution/WriteBacksWidget.tsx

@@ -2,6 +2,7 @@
 
 import type { AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_LIST } from "../internal/element-resets.js";
 import { useSessionWriteBacks } from "../session/useSessionWriteBacks.js";
 import { WriteBackCard } from "./WriteBackCard.js";
 
@@ -71,7 +72,7 @@ export function WriteBacksWidget({
         </span>
       </div>
 
-      <ul role="list" className="stg:flex stg:flex-col stg:gap-3">
+      <ul role="list" className={cn(UNSTYLED_LIST, "stg:flex stg:flex-col stg:gap-3")}>
         {writeBacks.map((entry) => (
           <li key={entry.writeBack.workspaceEntryName}>
             <WriteBackCard writeBack={entry.writeBack} />

package/src/execution/tool-categories.ts

@@ -1,16 +1,22 @@
 import type { ToolCall } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
 import { ToolCallStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 import type { JsonObject } from "@bufbuild/protobuf";
-import { ToolKind, resolveToolKind, resolveToolKindByName } from "@stigmer/sdk";
+import {
+  ToolKind,
+  resolveToolKind,
+  resolveToolKindByName,
+  shellIntentFromArgs,
+} from "@stigmer/sdk";
 
 /**
  * Discriminated tool categories for type-aware rendering.
  *
  * This is the presentation taxonomy. Classification (name -> kind) lives in
  * `@stigmer/sdk`'s `resolveToolKind` (single source of truth, shared with the
- * runner and Go CLI); this file maps each {@link ToolKind} to its presentation
- * metadata (label, primary argument). `"mcp"` covers tools originating from an
- * MCP server, whose names are dynamic.
+ * runner, @stigmer/ink, and the CLI's headless renderers); this file maps each
+ * {@link ToolKind} to its presentation metadata (label, primary argument).
+ * `"mcp"` covers tools originating from an MCP server, whose names are
+ * dynamic.
  */
 export type ToolCategory =
   | "shell"
@@ -497,42 +503,12 @@ export function extractIntentFromPreview(
   }
 }
 
-/**
- * The tool-call argument that carries a model-authored intent phrase for
- * SHELL tools (stigmer#276) — a short human description of what the command
- * does and why, rendered as the row title with the command as secondary text.
- *
- * Two writers populate it, converged on one wire key by design: the native
- * harness's tool-intent middleware (`backend/services/runner/src/middleware/
- * tool-intent.ts`, `INTENT_ARG`) extends the shell tool's bind-time schema
- * with it, and the Cursor harness's built-in Shell tool carries it natively.
- * The shared, machine-checked contract is
- * `test/fixtures/tool-view/intent-title.json` — keep all three in lockstep.
- */
-export const SHELL_INTENT_ARG_FIELD = "description";
-
-/**
- * The intent-title extraction core: SHELL-kind-scoped on purpose, because
- * `description` means other things on other tools (a task tool's description
- * is the sub-agent subject, never a row title). Blank and non-string values
- * degrade to null — the caller falls back to the category label.
- */
-function extractIntentFromArgs(kind: ToolKind, args: JsonObject | undefined): string | null {
-  if (kind !== ToolKind.SHELL || !args) return null;
-  const value = args[SHELL_INTENT_ARG_FIELD];
-  if (typeof value !== "string") return null;
-  const trimmed = value.trim();
-  return trimmed.length > 0 ? trimmed : null;
-}
-
-/**
- * Extracts the model-authored intent phrase from a SHELL tool call, or null
- * when absent (legacy executions, models that skipped the optional arg, and
- * every non-shell kind). See {@link SHELL_INTENT_ARG_FIELD}.
- */
-export function extractShellIntent(toolCall: ToolCall): string | null {
-  return extractIntentFromArgs(resolveToolKind(toolCall), toolCall.args);
-}
+// Intent-title extraction lives in @stigmer/sdk's tool-view module — the
+// cross-surface single source of truth the intent-title.json fixture pins —
+// so React, Ink, and the CLI's headless renderers share one implementation.
+// Re-exported here because this module is where React's public tool-view API
+// surfaced them first (#677).
+export { SHELL_INTENT_ARG_FIELD, extractShellIntent } from "@stigmer/sdk";
 
 /**
  * Preview-string twin of {@link extractShellIntent} for surfaces that carry a
@@ -556,7 +532,7 @@ export function extractShellIntentFromPreview(
   try {
     const parsed = JSON.parse(argsPreview);
     if (typeof parsed !== "object" || parsed === null) return null;
-    return extractIntentFromArgs(kind, parsed as JsonObject);
+    return shellIntentFromArgs(kind, parsed as JsonObject);
   } catch {
     return null;
   }

package/src/iam-policy/PeopleWithAccess.tsx

@@ -4,6 +4,7 @@ import { useCallback, useState } from "react";
 import type { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
 import type { PrincipalAccess } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/io_pb";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_LIST } from "../internal/element-resets.js";
 import { getUserMessage } from "@stigmer/sdk";
 import { useShareFlow, type ShareFlowResource } from "./useShareFlow.js";
 import { GrantAccessForm } from "./GrantAccessForm.js";
@@ -83,7 +84,7 @@ export function PeopleWithAccess({
         )}
 
         {!isLoading && accessList.length > 0 && (
-          <ul className="stg:space-y-1 stg:mt-2" aria-label="People with access">
+          <ul className={cn(UNSTYLED_LIST, "stg:space-y-1 stg:mt-2")} aria-label="People with access">
             {accessList.map((entry) => (
               <AccessEntry
                 key={entry.principal?.id ?? "unknown"}

package/src/iam-policy/PrincipalPicker.tsx

@@ -3,6 +3,7 @@
 import { useCallback, useId, useMemo, useRef, useState } from "react";
 import type { ApiResourceRefView } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/io_pb";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_LIST } from "../internal/element-resets.js";
 import { getUserMessage } from "@stigmer/sdk";
 import { useResourceAccess } from "./useResourceAccess.js";
 import { ProviderBadge, providerLabel } from "./ProviderBadge.js";
@@ -238,6 +239,7 @@ export function PrincipalPicker({
             role="listbox"
             aria-label="Organization members"
             className={cn(
+              UNSTYLED_LIST,
               "stg:absolute stg:z-10 stg:mt-1 stg:max-h-56 stg:w-full stg:overflow-auto stg:rounded-md stg:border stg:border-border stg:bg-popover stg:py-1 stg:shadow-md",
             )}
           >

package/src/iam-policy/RoleSelector.tsx

@@ -4,6 +4,7 @@ import { useId } from "react";
 import type { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
 import type { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_FIELDSET } from "../internal/element-resets.js";
 import { useRoleSelector } from "./useRoleSelector.js";
 
 /** Props for {@link RoleSelector}. */
@@ -73,7 +74,7 @@ export function RoleSelector({
   }
 
   return (
-    <fieldset className={cn("stg:space-y-1.5", className)}>
+    <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-1.5", className)}>
       <legend className="stg:text-xs stg:font-medium stg:text-foreground">Role</legend>
       <div className="stg:flex stg:flex-wrap stg:gap-2">
         {options.map((opt) => {

package/src/identity-provider/CreateIdentityProviderForm.tsx

@@ -2,6 +2,7 @@
 
 import { type FormEvent, useCallback, useId, useState } from "react";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_FIELDSET } from "../internal/element-resets.js";
 import { getUserMessage } from "@stigmer/sdk";
 import type { IdentityProvider } from "@stigmer/protos/ai/stigmer/iam/identityprovider/v1/api_pb";
 import { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
@@ -388,7 +389,7 @@ function JitSection({
   }
 
   return (
-    <fieldset className="stg:space-y-2.5" disabled={disabled}>
+    <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-2.5")} disabled={disabled}>
       <hr className="stg:border-border-muted" />
       <legend className="stg:text-xs stg:font-medium stg:text-foreground">
         JIT provisioning

package/src/identity-provider/IdentityProviderDetailPanel.tsx

@@ -2,6 +2,7 @@
 
 import { type FormEvent, useCallback, useId, useRef, useState } from "react";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_FIELDSET } from "../internal/element-resets.js";
 import { getUserMessage } from "@stigmer/sdk";
 import type { IdentityProvider } from "@stigmer/protos/ai/stigmer/iam/identityprovider/v1/api_pb";
 import { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
@@ -674,7 +675,7 @@ function JitEditSection({
   }
 
   return (
-    <fieldset className="stg:space-y-2.5" disabled={disabled}>
+    <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-2.5")} disabled={disabled}>
       <hr className="stg:border-border-muted" />
       <legend className="stg:text-xs stg:font-medium stg:text-foreground">
         JIT provisioning

package/src/identity-provider/IdentityProviderWizard.tsx

@@ -2,6 +2,7 @@
 
 import { type FormEvent, useCallback, useId, useState } from "react";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_FIELDSET } from "../internal/element-resets.js";
 import { getUserMessage } from "@stigmer/sdk";
 import type { IdentityProvider } from "@stigmer/protos/ai/stigmer/iam/identityprovider/v1/api_pb";
 import { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
@@ -838,7 +839,7 @@ function JitProvisioningSection({
   }
 
   return (
-    <fieldset className="stg:space-y-2.5" disabled={disabled}>
+    <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-2.5")} disabled={disabled}>
       <hr className="stg:border-border-muted" />
       <legend className="stg:text-xs stg:font-medium stg:text-foreground">
         JIT provisioning

package/src/index.ts

@@ -196,6 +196,7 @@ export type {
   UseSessionFileChangesReturn,
   ModelCostEntry,
   UseSessionUsageReturn,
+  ExecutionUsageEntry,
   UseAgentRefFromSessionReturn,
   UseNewSessionFlowOptions,
   UseNewSessionFlowReturn,
@@ -1042,6 +1043,18 @@ export type {
   CursorAccountEditorProps,
 } from "./cursor-accounts/index.js";
 
+// Provider standing — read-only platform-operator view of the platform's
+// LLM provider account health (canary-probe verdicts, cloud#447)
+export {
+  useProviderStanding,
+  ProviderStandingConsole,
+  ProviderStandingAccessNotice,
+} from "./provider-standing/index.js";
+export type {
+  UseProviderStandingReturn,
+  ProviderStandingConsoleProps,
+} from "./provider-standing/index.js";
+
 // Settings — navigation structure + section components shared across app shells
 export {
   SETTINGS_NAV_GROUPS,

package/src/internal/element-resets.ts

@@ -0,0 +1,33 @@
+// ---------------------------------------------------------------------------
+// Per-element UA-default resets for preflight-less hosts (#695).
+// Internal — never exported from the package barrel.
+//
+// Why these are per-component classes and NOT stylesheet rules: the #374
+// scoped form-control preflight in `styles.css` could reset every button
+// under `.stgm` because UA control chrome is never wanted. Lists are
+// different — "UI list" vs "content list" is a semantic distinction CSS
+// scoping cannot express. The documented quickstart wraps the host's whole
+// app in `StigmerProvider`, so a `.stgm ul { list-style: none }` rule would
+// strip the bullets off the HOST's own content. Every SDK-rendered UI list
+// therefore declares its own reset (enforced by the `stigmer/require-list-reset`
+// lint rule); markdown-rendered content lists instead declare their bullets
+// explicitly (`stg:list-disc stg:pl-5 ...` in markdown-components.tsx).
+// ---------------------------------------------------------------------------
+
+/**
+ * UA-default reset for a UI `<ul>`/`<ol>` (no bullets, no indent, no
+ * margins). Without it, a host that ships no global CSS reset renders list
+ * markers and ~40px of `padding-inline-start` on every SDK list — invisible
+ * on first-party surfaces (console, desktop, docs tours all ship global
+ * resets), broken in exactly the third-party embeds the SDK exists for.
+ * Spacing utilities (`stg:space-y-*`, `stg:p-*`) compose on top.
+ */
+export const UNSTYLED_LIST = "stg:m-0 stg:list-none stg:p-0";
+
+/**
+ * UA-default reset for `<fieldset>` (margin-inline, padding, and
+ * `min-inline-size: min-content` — the last one silently breaks flex/grid
+ * shrinking). The UA border is already cleared by the `.stgm *` border reset
+ * in `styles.css`, so it is not repeated here.
+ */
+export const UNSTYLED_FIELDSET = "stg:m-0 stg:min-w-0 stg:p-0";

package/src/internal/file-tree/FileTreeNode.tsx

@@ -2,6 +2,7 @@
 
 import { useCallback, useState, type DragEvent } from "react";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_LIST } from "../element-resets.js";
 import { FileTypeIcon, FolderTypeIcon } from "../file-icons/index.js";
 import type { TreeNode } from "./tree-node.js";
 
@@ -151,7 +152,7 @@ export function FileTreeNode({
       {isFolder && expanded && node.children && (
         <ul
           role="group"
-          className={cn(indentGuides && "stg:ml-3 stg:border-l stg:border-border")}
+          className={cn(UNSTYLED_LIST, indentGuides && "stg:ml-3 stg:border-l stg:border-border")}
         >
           {node.children.map((child) => (
             <FileTreeNode

package/src/internal/markdown-components.tsx

@@ -152,12 +152,19 @@ function extractMermaidSource(children: ReactNode): string | null {
  * ensuring correct rendering in both the Stigmer Console and third-party
  * host applications with custom themes.
  *
+ * Margin-bearing elements (`p`, `ul`, `ol`, `pre`, `blockquote`) declare
+ * their top margin (`stg:mt-0`) and blockquote its inline margins
+ * explicitly: the spacing rhythm here is authored via `mb-*` on the
+ * assumption that UA base margins are zero, which is only true when the
+ * host ships a global reset — preflight-less embeds otherwise stack
+ * `margin-top: 1em` (and 40px blockquote indents) on top (#695).
+ *
  * Used by `MessageEntry` (chat messages) and `SkillDetailView` (SKILL.md).
  */
 export const MARKDOWN_COMPONENTS: Components = {
   p({ children, ...props }: MdProps<"p">) {
     return (
-      <p className="stg:text-sm stg:text-foreground stg:mb-3 stg:last:mb-0 stg:leading-relaxed stg:break-words" {...props}>
+      <p className="stg:text-sm stg:text-foreground stg:mt-0 stg:mb-3 stg:last:mb-0 stg:leading-relaxed stg:break-words" {...props}>
         {children}
       </p>
     );
@@ -211,7 +218,7 @@ export const MARKDOWN_COMPONENTS: Components = {
 
   ul({ children, ...props }: MdProps<"ul">) {
     return (
-      <ul className="stg:list-disc stg:pl-5 stg:mb-3 stg:last:mb-0 stg:space-y-1 stg:text-sm stg:text-foreground" {...props}>
+      <ul className="stg:list-disc stg:pl-5 stg:mt-0 stg:mb-3 stg:last:mb-0 stg:space-y-1 stg:text-sm stg:text-foreground" {...props}>
         {children}
       </ul>
     );
@@ -219,7 +226,7 @@ export const MARKDOWN_COMPONENTS: Components = {
 
   ol({ children, ...props }: MdProps<"ol">) {
     return (
-      <ol className="stg:list-decimal stg:pl-5 stg:mb-3 stg:last:mb-0 stg:space-y-1 stg:text-sm stg:text-foreground" {...props}>
+      <ol className="stg:list-decimal stg:pl-5 stg:mt-0 stg:mb-3 stg:last:mb-0 stg:space-y-1 stg:text-sm stg:text-foreground" {...props}>
         {children}
       </ol>
     );
@@ -245,7 +252,7 @@ export const MARKDOWN_COMPONENTS: Components = {
 
     return (
       <pre
-        className="stg:mb-3 stg:last:mb-0 stg:overflow-x-auto stg:rounded-md stg:bg-muted stg:p-3"
+        className="stg:mt-0 stg:mb-3 stg:last:mb-0 stg:overflow-x-auto stg:rounded-md stg:bg-muted stg:p-3"
         {...props}
       >
         {children}
@@ -293,9 +300,12 @@ export const MARKDOWN_COMPONENTS: Components = {
   },
 
   blockquote({ children, ...props }: MdProps<"blockquote">) {
+    // mx-0 matters as much as mt-0 here: UA blockquote margin is `1em 40px`,
+    // so a preflight-less host renders a double indent on BOTH sides on top
+    // of the border-l + pl-4 treatment.
     return (
       <blockquote
-        className="stg:border-l-2 stg:border-border stg:pl-4 stg:mb-3 stg:last:mb-0 stg:text-muted-foreground stg:italic"
+        className="stg:border-l-2 stg:border-border stg:mx-0 stg:mt-0 stg:mb-3 stg:pl-4 stg:last:mb-0 stg:text-muted-foreground stg:italic"
         {...props}
       >
         {children}

package/src/invitation/InvitationManager.tsx

@@ -2,6 +2,7 @@
 
 import { useCallback, useId, useState, type FormEvent } from "react";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_FIELDSET } from "../internal/element-resets.js";
 import {
   getUserMessage,
   iamRoleDisplayName,
@@ -302,7 +303,7 @@ function CreateInvitationForm({
       />
 
       {/* Expiry */}
-      <fieldset className="stg:space-y-1.5">
+      <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-1.5")}>
         <legend className="stg:text-xs stg:font-medium stg:text-foreground">
           Expires in
         </legend>
@@ -324,7 +325,7 @@ function CreateInvitationForm({
       </fieldset>
 
       {/* Redemption mode */}
-      <fieldset className="stg:space-y-1.5">
+      <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-1.5")}>
         <legend className="stg:text-xs stg:font-medium stg:text-foreground">
           Usage limit
         </legend>

package/src/manifest/ApplyManifestDialog.tsx

@@ -3,6 +3,7 @@
 import { lazy, Suspense, useCallback, useEffect, useRef } from "react";
 import { cn } from "@stigmer/theme";
 import { DialogShell } from "../internal/DialogShell.js";
+import { UNSTYLED_LIST } from "../internal/element-resets.js";
 import { toast } from "../feedback/toast.js";
 import { RedactedSecretsNotice } from "./RedactedSecretsNotice.js";
 import {
@@ -189,7 +190,7 @@ export function ApplyManifestDialog({
 
         {/* Per-document preview */}
         {manifest.entries && manifest.entries.length > 0 && (
-          <ul className="stg:flex stg:max-h-48 stg:flex-col stg:gap-2 stg:overflow-y-auto" aria-label="Resources to apply">
+          <ul className={cn(UNSTYLED_LIST, "stg:flex stg:max-h-48 stg:flex-col stg:gap-2 stg:overflow-y-auto")} aria-label="Resources to apply">
             {manifest.entries.map((entry, index) => (
               <PreviewRow key={`${entry.document.handler.yamlKind}/${entry.document.org}/${entry.document.slug}/${index}`} entry={entry} />
             ))}

package/src/mcp-server/steps/IdentityTransportStep.tsx

@@ -2,6 +2,7 @@
 
 import { useCallback, useId } from "react";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_FIELDSET } from "../../internal/element-resets.js";
 import { generateSlug } from "../../internal/slug.js";
 import type { McpServerWizardData, KeyValueEntry } from "./types.js";
 
@@ -179,7 +180,7 @@ export function IdentityTransportStep({
           />
         </div>
 
-        <fieldset className="stg:space-y-1.5">
+        <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-1.5")}>
           <legend className="stg:text-sm stg:font-medium stg:text-foreground">
             Visibility
           </legend>
@@ -204,7 +205,7 @@ export function IdentityTransportStep({
 
       {/* data-scroll-target: guided tours/demos scroll the transport config
           (the step's decision point) into view within the wizard's scroll area. */}
-      <fieldset className="stg:space-y-3" data-scroll-target="mcp-transport">
+      <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-3")} data-scroll-target="mcp-transport">
         <legend className="stg:text-sm stg:font-medium stg:text-foreground">
           Transport <span className="stg:text-destructive">*</span>
         </legend>

package/src/platform-client/CreatePlatformClientForm.tsx

@@ -2,6 +2,7 @@
 
 import { type FormEvent, type KeyboardEvent, useCallback, useId, useState } from "react";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_FIELDSET } from "../internal/element-resets.js";
 import { getUserMessage } from "@stigmer/sdk";
 import { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
 import type { PlatformClientCreateResponse } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/io_pb";
@@ -167,7 +168,7 @@ export function CreatePlatformClientForm({
       />
 
       {/* Expiry */}
-      <fieldset className="stg:space-y-2" disabled={isCreating}>
+      <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-2")} disabled={isCreating}>
         <legend className="stg:text-xs stg:font-medium stg:text-foreground">
           Expiry
         </legend>
@@ -202,7 +203,7 @@ export function CreatePlatformClientForm({
       </fieldset>
 
       {/* JIT provisioning */}
-      <fieldset className="stg:space-y-2.5" disabled={isCreating}>
+      <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-2.5")} disabled={isCreating}>
         <hr className="stg:border-border-muted" />
         <legend className="stg:text-xs stg:font-medium stg:text-foreground">
           JIT provisioning
@@ -263,7 +264,7 @@ export function CreatePlatformClientForm({
       </fieldset>
 
       {/* Allowed origins */}
-      <fieldset className="stg:space-y-2" disabled={isCreating}>
+      <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-2")} disabled={isCreating}>
         <hr className="stg:border-border-muted" />
         <legend className="stg:text-xs stg:font-medium stg:text-foreground">
           Allowed origins

package/src/platform-client/PlatformClientDetailPanel.tsx

@@ -2,6 +2,7 @@
 
 import { type FormEvent, type KeyboardEvent, useCallback, useId, useState } from "react";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_FIELDSET } from "../internal/element-resets.js";
 import { getUserMessage } from "@stigmer/sdk";
 import { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
 import { timestampDate, type Timestamp } from "@bufbuild/protobuf/wkt";
@@ -302,7 +303,7 @@ export function PlatformClientDetailPanel({
           </div>
 
           {/* Expiry */}
-          <fieldset className="stg:space-y-2" disabled={isUpdating}>
+          <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-2")} disabled={isUpdating}>
             <legend className="stg:text-xs stg:font-medium stg:text-foreground">
               Expiry
             </legend>
@@ -337,7 +338,7 @@ export function PlatformClientDetailPanel({
           </fieldset>
 
           {/* JIT provisioning */}
-          <fieldset className="stg:space-y-2.5" disabled={isUpdating}>
+          <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-2.5")} disabled={isUpdating}>
             <hr className="stg:border-border-muted" />
             <legend className="stg:text-xs stg:font-medium stg:text-foreground">
               JIT provisioning
@@ -393,7 +394,7 @@ export function PlatformClientDetailPanel({
           </fieldset>
 
           {/* Allowed origins */}
-          <fieldset className="stg:space-y-2" disabled={isUpdating}>
+          <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-2")} disabled={isUpdating}>
             <hr className="stg:border-border-muted" />
             <legend className="stg:text-xs stg:font-medium stg:text-foreground">
               Allowed origins

package/src/pricing-governance/BaselineEditor.tsx

@@ -1,6 +1,7 @@
 "use client";
 
 import { useCallback, useState, type FormEvent } from "react";
+import { UNSTYLED_FIELDSET } from "../internal/element-resets.js";
 import { create } from "@bufbuild/protobuf";
 import { getUserMessage } from "@stigmer/sdk";
 import {
@@ -546,7 +547,7 @@ export function BaselineEditor({
         Featured (appears in the curated default picker list)
       </label>
 
-      <fieldset className="stg:space-y-2">
+      <fieldset className={`${UNSTYLED_FIELDSET} stg:space-y-2`}>
         <legend className="stg:text-xs stg:font-medium stg:text-foreground">
           Rates ($ per million tokens)
         </legend>
@@ -565,7 +566,7 @@ export function BaselineEditor({
         </div>
       </fieldset>
 
-      <fieldset className="stg:space-y-2">
+      <fieldset className={`${UNSTYLED_FIELDSET} stg:space-y-2`}>
         <legend className="stg:text-xs stg:font-medium stg:text-foreground">Pricing variants</legend>
         {form.variants.map((variant, index) => (
           <div key={index} className="stg:space-y-2 stg:rounded-md stg:border stg:border-border-muted stg:px-2.5 stg:py-2">

package/src/pricing-governance/PricingGovernanceConsole.tsx

@@ -11,6 +11,7 @@ import { RetireConfirm } from "./RetireConfirm.js";
 import { ModelGovernanceDetail } from "./ModelGovernanceDetail.js";
 import { OperatorAccessNotice } from "./OperatorAccessNotice.js";
 import { GovernanceBadge, PendingOverrideCard, RateCell } from "./governance-primitives.js";
+import { UNSTYLED_LIST } from "../internal/element-resets.js";
 import { INPUT_CLASSES } from "../internal/form-primitives.js";
 import { TruncatedText } from "../internal/truncated-text.js";
 import { ZERO } from "./pricing-format.js";
@@ -328,7 +329,7 @@ function ModelsTab({
               : "The catalog is empty — has the baseline seed migration run?"}
           </p>
         ) : (
-          <ul role="list" aria-label="Models" className="stg:m-0 stg:list-none stg:p-0">
+          <ul role="list" aria-label="Models" className={UNSTYLED_LIST}>
             {view.models.map((row) => (
               <ModelRow key={row.key} row={row} onOpen={() => view.openDetail(row.key)} />
             ))}

package/src/provider-standing/ProviderStandingAccessNotice.tsx

@@ -0,0 +1,36 @@
+"use client";
+
+import { cn } from "@stigmer/theme";
+
+/**
+ * The access-denied state for the provider-standing operator surface.
+ * Server-side authorization (`can_view_provider_standing` on
+ * `platform:stigmer`) is the real gate — this is the honest, designed
+ * face of that denial for anyone who navigates to the operator route
+ * without the permission, instead of a raw RPC error string.
+ */
+export function ProviderStandingAccessNotice({
+  className,
+}: {
+  readonly className?: string;
+}) {
+  return (
+    <div
+      className={cn(
+        "stg:rounded-lg stg:border stg:border-border stg:bg-card stg:px-4 stg:py-6 stg:text-center",
+        className,
+      )}
+      role="status"
+    >
+      <p className="stg:text-xs stg:font-semibold stg:text-foreground">
+        Platform operator access required
+      </p>
+      <p className="stg:mx-auto stg:mt-1 stg:max-w-md stg:text-xs stg:text-muted-foreground">
+        Provider standing reports the health of the platform&apos;s own LLM
+        provider accounts, which is Stigmer-internal. It needs the platform
+        operator role — organization roles do not grant it. If you believe
+        you should have access, contact a platform operator.
+      </p>
+    </div>
+  );
+}