@tangle-network/agent-app 0.60.172 → 0.60.174

package/dist/assistant/index.js

@@ -8,15 +8,15 @@ import "../chunk-FBVLEGEG.js";
 import "../chunk-CW6F6GDP.js";
 import "../chunk-ILZQAXJH.js";
 import "../chunk-E4AY62T2.js";
-import "../chunk-CRHXK3QT.js";
+import "../chunk-GYQTJA6N.js";
 import "../chunk-Y6PRDUFJ.js";
 import "../chunk-GEYACSFW.js";
 import {
   ChatComposer
-} from "../chunk-PZHZV6QY.js";
+} from "../chunk-PP5KIVHL.js";
 import "../chunk-L7MB2LLM.js";
 import "../chunk-SJWIZT7B.js";
-import "../chunk-KICTB6RK.js";
+import "../chunk-F2BXNZAH.js";
 import "../chunk-R5K5ML3Q.js";
 import {
   ModelPicker
@@ -27,7 +27,7 @@ import {
 } from "../chunk-LSUELMHY.js";
 import "../chunk-FQYAJYPW.js";
 import "../chunk-WTC6AOPL.js";
-import "../chunk-MXNVSY6J.js";
+import "../chunk-VBRUG4N5.js";
 import "../chunk-B7CL7ENS.js";
 import "../chunk-PV33JZKV.js";
 import "../chunk-AMUXRAUO.js";

package/dist/chat-react/index.js

@@ -1,15 +1,15 @@
 import {
   ComposerModeControls,
   EntryComposer
-} from "../chunk-PZHZV6QY.js";
+} from "../chunk-PP5KIVHL.js";
 import "../chunk-L7MB2LLM.js";
 import "../chunk-SJWIZT7B.js";
-import "../chunk-KICTB6RK.js";
+import "../chunk-F2BXNZAH.js";
 import "../chunk-R5K5ML3Q.js";
 import "../chunk-AA4FKEQW.js";
 import "../chunk-RASGKEAL.js";
 import "../chunk-WTC6AOPL.js";
-import "../chunk-MXNVSY6J.js";
+import "../chunk-VBRUG4N5.js";
 import "../chunk-AMUXRAUO.js";
 import "../chunk-YHRWZZJN.js";
 import "../chunk-TXD5HXLE.js";

package/dist/chat-routes/index.js

@@ -42,9 +42,9 @@ import {
   flattenHistory,
   readSandboxBinaryBytes,
   statSandboxFileSize
-} from "../chunk-RCRC2JKP.js";
+} from "../chunk-QW4UOEPH.js";
 import "../chunk-4LBCTFBP.js";
-import "../chunk-MXNVSY6J.js";
+import "../chunk-VBRUG4N5.js";
 import "../chunk-LWSJK546.js";
 import "../chunk-74WXGIEK.js";
 import "../chunk-6A7MYOUI.js";

package/dist/{chunk-KICTB6RK.js → chunk-F2BXNZAH.js}

@@ -15,7 +15,7 @@ import {
 import {
   snapHarnessToModel,
   snapModelToHarness
-} from "./chunk-MXNVSY6J.js";
+} from "./chunk-VBRUG4N5.js";
 
 // src/web-react/composer-file-accept.ts
 function isAcceptedFileType(file, accept) {
@@ -576,4 +576,4 @@ export {
   HarnessPicker,
   AgentSessionControls
 };
-//# sourceMappingURL=chunk-KICTB6RK.js.map
+//# sourceMappingURL=chunk-F2BXNZAH.js.map

package/dist/{chunk-CRHXK3QT.js → chunk-GYQTJA6N.js}

@@ -1,7 +1,7 @@
 import {
   HarnessPicker,
   filterAcceptedFiles
-} from "./chunk-KICTB6RK.js";
+} from "./chunk-F2BXNZAH.js";
 import {
   EffortPicker,
   ModelPicker,
@@ -13,7 +13,7 @@ import {
 import {
   isModelCompatibleWithHarness,
   snapModelToHarness
-} from "./chunk-MXNVSY6J.js";
+} from "./chunk-VBRUG4N5.js";
 import {
   isCommitSha,
   parseGitHubLocation,
@@ -2214,4 +2214,4 @@ export {
   AGENT_PROFILE_EDITOR_SECTIONS,
   AgentProfileEditor
 };
-//# sourceMappingURL=chunk-CRHXK3QT.js.map
+//# sourceMappingURL=chunk-GYQTJA6N.js.map

package/dist/{chunk-PZHZV6QY.js → chunk-PP5KIVHL.js}

@@ -10,7 +10,7 @@ import {
   filterAcceptedFiles,
   isAcceptedFileType,
   renamePastedImages
-} from "./chunk-KICTB6RK.js";
+} from "./chunk-F2BXNZAH.js";
 import {
   OVERLAY_SHADOW,
   POPOVER_OPTION_FOCUS,
@@ -1552,4 +1552,4 @@ export {
   ComposerModeControls,
   EntryComposer
 };
-//# sourceMappingURL=chunk-PZHZV6QY.js.map
+//# sourceMappingURL=chunk-PP5KIVHL.js.map

package/dist/{chunk-RCRC2JKP.js → chunk-QW4UOEPH.js}

@@ -13,7 +13,7 @@ import {
   DEFAULT_HARNESS,
   assertHarnessModelCompatible,
   isHarness
-} from "./chunk-MXNVSY6J.js";
+} from "./chunk-VBRUG4N5.js";
 import {
   assertProfilePromptWithinBudget,
   fingerprintAgentProfile
@@ -3343,4 +3343,4 @@ export {
   isTerminalPromptEvent,
   detectInteractiveQuestion
 };
-//# sourceMappingURL=chunk-RCRC2JKP.js.map
+//# sourceMappingURL=chunk-QW4UOEPH.js.map

package/dist/{chunk-MXNVSY6J.js → chunk-VBRUG4N5.js}

@@ -8,6 +8,50 @@ import {
   snapHarnessToModel as aiSnapHarnessToModel,
   snapModelToHarness as aiSnapModelToHarness
 } from "@tangle-network/agent-interface";
+
+// src/harness/session-selection.ts
+var HarnessSelectionError = class extends Error {
+  code;
+  harness;
+  source;
+  constructor(code, value, source) {
+    const harness = typeof value === "string" ? value : null;
+    super(`${code}: ${source} harness ${harness === null ? "<invalid>" : JSON.stringify(harness)}`);
+    this.name = "HarnessSelectionError";
+    this.code = code;
+    this.harness = harness;
+    this.source = source;
+  }
+};
+function selectSessionHarness(input, knownHarnesses, defaultHarness) {
+  const known = new Set(knownHarnesses);
+  const resolve = (value2, source2) => {
+    if (typeof value2 !== "string" || !known.has(value2)) {
+      throw new HarnessSelectionError("harness_unknown", value2, source2);
+    }
+    return value2;
+  };
+  const admit = (harness2, source2, existing) => {
+    if (input.availability === void 0) return;
+    const allowed = existing ? input.availability.existingSessions ?? input.availability.newSessions : input.availability.newSessions;
+    if (!allowed.includes(harness2)) {
+      throw new HarnessSelectionError("harness_unavailable", harness2, source2);
+    }
+  };
+  if (input.sessionHarness !== void 0 && input.sessionHarness !== null) {
+    const harness2 = resolve(input.sessionHarness, "session");
+    admit(harness2, "session", true);
+    const requested = input.requested === void 0 || input.requested === null ? void 0 : resolve(input.requested, "requested");
+    return { harness: harness2, locked: true, swapAttempted: requested !== void 0 && requested !== harness2 };
+  }
+  const source = input.requested !== void 0 && input.requested !== null ? "requested" : input.workspaceDefault !== void 0 && input.workspaceDefault !== null ? "workspace" : "fallback";
+  const value = source === "requested" ? input.requested : source === "workspace" ? input.workspaceDefault : input.fallback ?? defaultHarness;
+  const harness = resolve(value, source);
+  admit(harness, source, false);
+  return { harness, locked: false, swapAttempted: false };
+}
+
+// src/harness/index.ts
 var NON_BACKEND_HARNESSES = ["gemini"];
 var nonBackendHarnesses = new Set(NON_BACKEND_HARNESSES);
 var KNOWN_HARNESSES = [
@@ -24,14 +68,7 @@ function coerceHarness(value, fallback = DEFAULT_HARNESS) {
   return isHarness(value) ? value : fallback;
 }
 function resolveSessionHarness(input = {}) {
-  const fallback = input.fallback ?? DEFAULT_HARNESS;
-  if (isHarness(input.sessionHarness)) {
-    const locked = input.sessionHarness;
-    const swapAttempted = isHarness(input.requested) && input.requested !== locked;
-    return { harness: locked, locked: true, swapAttempted };
-  }
-  const harness = coerceHarness(input.requested, coerceHarness(input.workspaceDefault, fallback));
-  return { harness, locked: false, swapAttempted: false };
+  return selectSessionHarness(input, KNOWN_HARNESSES, DEFAULT_HARNESS);
 }
 function configHarness(value, where) {
   if (!isHarness(value)) throw new Error(`${where} names an unknown harness: ${String(value)}`);
@@ -93,9 +130,6 @@ var HARNESS_CAPABILITIES = {
   prime: { subagents: true, mcp: "native", toolControls: "runtime", skillsDir: ".prime/agent/skills" },
   hermes: { subagents: false, mcp: "native", toolControls: "runtime", skillsDir: null },
   openclaw: { subagents: false, mcp: "config-file", toolControls: "runtime", skillsDir: "skills" },
-  // Harnesses the platform placement map does not bridge yet: conservative
-  // facts — assert nothing they have not proven. Each upgrades to its real
-  // facts when the materializer grows support for it.
   acp: { subagents: false, mcp: "native", toolControls: "runtime", skillsDir: null },
   amp: { subagents: false, mcp: "native", toolControls: "runtime", skillsDir: null },
   "factory-droids": { subagents: false, mcp: "native", toolControls: "runtime", skillsDir: null },
@@ -110,6 +144,7 @@ function harnessCapabilities(harness) {
 }
 
 export {
+  HarnessSelectionError,
   modelProvider,
   KNOWN_HARNESSES,
   DEFAULT_HARNESS,
@@ -123,4 +158,4 @@ export {
   assertHarnessModelCompatible,
   harnessCapabilities
 };
-//# sourceMappingURL=chunk-MXNVSY6J.js.map
+//# sourceMappingURL=chunk-VBRUG4N5.js.map

package/dist/chunk-VBRUG4N5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/harness/index.ts","../src/harness/session-selection.ts"],"sourcesContent":["/**\n * Coding-agent harness selection, model compatibility, and the session lock.\n *\n * Known identities are not a deployment's available runners. Products supply\n * server-owned availability to resolveSessionHarness. Historical session IDs\n * remain intact when their runner is unavailable; a harness change requires an\n * explicit transfer, not a fallback or a rewritten session lock.\n *\n * Model compatibility is owned by @tangle-network/agent-interface. The shell\n * owns session selection; the consumer owns storage and deployment policy.\n */\n\nimport {\n  harnessProviders,\n  harnessSupportsModel,\n  harnessTypeSchema,\n  modelProvider,\n  preferredHarnessForModel,\n  snapHarnessToModel as aiSnapHarnessToModel,\n  snapModelToHarness as aiSnapModelToHarness,\n  type HarnessType,\n} from '@tangle-network/agent-interface'\nimport {\n  selectSessionHarness,\n  type HarnessAvailability as SelectionAvailability,\n  type SessionHarnessSelection,\n  type SessionHarnessSelectionInput,\n} from './session-selection'\n\nexport { HarnessSelectionError } from './session-selection'\n\n/** Canonical identities that have no direct Sandbox backend. */\nconst NON_BACKEND_HARNESSES = ['gemini'] as const satisfies readonly HarnessType[]\nconst nonBackendHarnesses = new Set<string>(NON_BACKEND_HARNESSES)\n\n/** A recognized coding-agent backend, not a promise that it is installed. */\nexport type Harness = Exclude<HarnessType, (typeof NON_BACKEND_HARNESSES)[number]>\n\n/**\n * Recognized backend identities, including IDs needed by historical sessions.\n * Use deployment availability, not membership here, to offer or admit new runs.\n */\nexport const KNOWN_HARNESSES: readonly Harness[] = [\n  ...harnessTypeSchema.options.filter(\n    (harness): harness is Exclude<HarnessType, (typeof NON_BACKEND_HARNESSES)[number]> =>\n      !nonBackendHarnesses.has(harness),\n  ),\n]\n\n/** Default for an absent choice; never a replacement for an invalid explicit ID. */\nexport const DEFAULT_HARNESS: Harness = 'opencode'\nconst HARNESS_SET: ReadonlySet<string> = new Set(KNOWN_HARNESSES)\n\n/** Determine whether a value is a recognized identity, independently of availability. */\nexport function isHarness(value: unknown): value is Harness {\n  return typeof value === 'string' && HARNESS_SET.has(value)\n}\n\n/** Display/config convenience only. Never use coercion to admit an execution or restore a lock. */\nexport function coerceHarness(value: unknown, fallback: Harness = DEFAULT_HARNESS): Harness {\n  return isHarness(value) ? value : fallback\n}\n\n/** Server-owned start and resume sets. Existing-only entries are draining. */\nexport type HarnessAvailability = SelectionAvailability<Harness>\n\n/** A saved lock, explicit choice, workspace default, and optional deployment availability. */\nexport type ResolveSessionHarnessInput = SessionHarnessSelectionInput<Harness>\n\n/** The selected identity and the existing session-lock/swap-attempt result. */\nexport type ResolvedSessionHarness = SessionHarnessSelection<Harness>\n\n/**\n * Resolve requested → workspaceDefault → fallback only for a genuinely new session.\n * A non-null saved identity always takes the lock path. Unknown/retired identities\n * and invalid explicit requests throw HarnessSelectionError instead of falling back.\n * A known different request still reports swapAttempted while preserving the lock.\n * The caller must reject that attempt before execution, as in the existing contract.\n */\nexport function resolveSessionHarness(input: ResolveSessionHarnessInput = {}): ResolvedSessionHarness {\n  return selectSessionHarness(input, KNOWN_HARNESSES, DEFAULT_HARNESS)\n}\n\n/**\n * An app's harness configuration, read from its deploy configuration (for example the env vars\n * `AGENT_HARNESS` and `AGENT_HARNESS_WORKSPACES`), so no product hard-codes `backend.type`.\n */\nexport interface HarnessConfig {\n  /** The app default for new sessions. Unset or blank means {@link DEFAULT_HARNESS}. */\n  default?: string\n  /** Per-workspace choices: a JSON object mapping a workspace id to a harness. */\n  workspaces?: string\n}\n\nfunction configHarness(value: unknown, where: string): Harness {\n  if (!isHarness(value)) throw new Error(`${where} names an unknown harness: ${String(value)}`)\n  return value\n}\n\n/**\n * The harness a workspace's new sessions start on: its own choice, else the app default, else\n * {@link DEFAULT_HARNESS}. Pass the result to {@link resolveSessionHarness} as `workspaceDefault`\n * so a session that already ran keeps its harness. A value naming an unknown harness throws:\n * a configuration typo must fail loudly, never run a different harness than the one configured.\n */\nexport function configuredHarness(config: HarnessConfig, workspaceId?: string): Harness {\n  const appDefault = config.default?.trim()\n    ? configHarness(config.default.trim(), 'The harness default') : DEFAULT_HARNESS\n  const raw = config.workspaces?.trim()\n  if (!raw) return appDefault\n  let choices: unknown\n  try {\n    choices = JSON.parse(raw)\n  } catch {\n    throw new Error('The per-workspace harness configuration is not JSON')\n  }\n  if (!choices || typeof choices !== 'object' || Array.isArray(choices)) {\n    throw new Error('The per-workspace harness configuration must map workspace ids to harnesses')\n  }\n  // Every entry is checked, not only the caller's, so one bad entry fails every workspace's\n  // first turn after the deploy instead of hiding until that workspace sends a message.\n  const parsed = new Map(Object.entries(choices).map(([id, value]) =>\n    [id, configHarness(value, `The harness for workspace ${id}`)]))\n  return (workspaceId === undefined ? undefined : parsed.get(workspaceId)) ?? appDefault\n}\n\n/** Harness-model compatibility is delegated to the Interface owner. */\nexport { modelProvider }\n\n/** A resolved model and the transport provider that will execute it. */\nexport interface HarnessModelSelection {\n  model: string\n  provider?: string\n}\n\n/** Provider-less ids (sentinels like \"default\", or a session's own config) are\n *  compatible everywhere — every harness honors its own configuration. */\nexport function isModelCompatibleWithHarness(harness: Harness, modelId: string): boolean {\n  return harnessSupportsModel(harness, modelId)\n}\n\n/** Keep `modelId` when the harness can run it; else the harness's best compatible\n *  catalog id (preferred patterns in order, highest version). When nothing in the\n *  catalog fits, return the original so the caller sees the incompatibility. */\nexport function snapModelToHarness(harness: Harness, modelId: string, canonicalIds: readonly string[]): string {\n  return aiSnapModelToHarness(harness, modelId, canonicalIds)\n}\n\n/** Keep the harness when it can run `modelId`; else the model's native harness\n *  (anthropic → claude-code, openai → codex, moonshot → kimi-code), falling back to opencode. */\nexport function snapHarnessToModel(harness: Harness, modelId: string): Harness {\n  const snapped = aiSnapHarnessToModel(harness, modelId)\n  if (!isHarness(snapped)) {\n    throw new Error(\n      `Harness \"${harness}\" snapped to \"${snapped}\" for model \"${modelId}\", which this platform has no backend for.`,\n    )\n  }\n  return snapped\n}\n\n/** Fail-loud server guard: throw when a harness is asked to run a model it can't.\n *  A resolved model tuple supplies provider evidence when its id is unqualified.\n *  Call before dispatching a sandbox turn so a bypassed UI cannot reach the\n *  sidecar with an incompatible or unproven pair. */\nexport function assertHarnessModelCompatible(\n  harness: Harness,\n  selection: string | HarnessModelSelection,\n): void {\n  const modelId = typeof selection === 'string' ? selection : selection.model\n  const transportProvider = typeof selection === 'string' ? undefined : selection.provider\n  const providers = harnessProviders(harness)\n  const provider = modelProvider(modelId) ?? transportProvider ?? null\n  // An omitted/default model is deliberately left to the harness. Once a\n  // caller names a model, however, a vendor-locked harness must have provider\n  // evidence. Treating a router provider as compatible with every native CLI\n  // is how a bare Gemini model reached Claude Code and produced \"Not logged in\".\n  const isDefaultSentinel = modelId.trim() === '' || modelId.trim() === 'default'\n  const compatible = isDefaultSentinel\n    || providers === null\n    || (provider !== null && providers.includes(provider))\n  if (!compatible) {\n    const native = preferredHarnessForModel(modelId)\n    const providerDescription = provider ?? 'unqualified'\n    throw new Error(\n      `Harness \"${harness}\" cannot run model \"${modelId}\" (provider \"${providerDescription}\"). ` +\n        `Use ${native ?? 'a router-backed harness (opencode)'} or an allowed model.`,\n    )\n  }\n}\n\n// Profile-support facts remain here until the materializer supplies its owned descriptor.\n// Do not confuse these facts with deployment availability.\n\n/** What a harness can express, for profile assembly. */\nexport interface HarnessCapabilities {\n  /** Lower profile.subagents into native cwd files; false means materialization refuses them. */\n  subagents: boolean\n  /** How profile.mcp reaches the harness. */\n  mcp: 'native' | 'config-file' | 'extension' | 'none'\n  /** Whether tool controls are checked before MCP tools register. */\n  toolControls: 'startup' | 'runtime'\n  /** cwd-relative skill directory, or null when skills must be inlined. */\n  skillsDir: string | null\n}\n\nconst HARNESS_CAPABILITIES: Record<Harness, HarnessCapabilities> = {\n  'claude-code': { subagents: true, mcp: 'native', toolControls: 'runtime', skillsDir: '.claude/skills' },\n  nanoclaw: { subagents: true, mcp: 'native', toolControls: 'runtime', skillsDir: '.claude/skills' },\n  opencode: { subagents: true, mcp: 'config-file', toolControls: 'runtime', skillsDir: '.opencode/skills' },\n  codex: { subagents: true, mcp: 'config-file', toolControls: 'runtime', skillsDir: '.codex/skills' },\n  'kimi-code': { subagents: false, mcp: 'config-file', toolControls: 'runtime', skillsDir: '.kimi/skills' },\n  pi: { subagents: false, mcp: 'extension', toolControls: 'startup', skillsDir: '.pi/skills' },\n  prime: { subagents: true, mcp: 'native', toolControls: 'runtime', skillsDir: '.prime/agent/skills' },\n  hermes: { subagents: false, mcp: 'native', toolControls: 'runtime', skillsDir: null },\n  openclaw: { subagents: false, mcp: 'config-file', toolControls: 'runtime', skillsDir: 'skills' },\n  acp: { subagents: false, mcp: 'native', toolControls: 'runtime', skillsDir: null },\n  amp: { subagents: false, mcp: 'native', toolControls: 'runtime', skillsDir: null },\n  'factory-droids': { subagents: false, mcp: 'native', toolControls: 'runtime', skillsDir: null },\n  forge: { subagents: false, mcp: 'native', toolControls: 'runtime', skillsDir: null },\n  cursor: { subagents: false, mcp: 'native', toolControls: 'runtime', skillsDir: null },\n  'cli-base': { subagents: false, mcp: 'native', toolControls: 'runtime', skillsDir: null },\n}\n\n/** Profile-support facts, independent of whether this deployment enables the harness. */\nexport function harnessCapabilities(harness: Harness): HarnessCapabilities {\n  const caps = HARNESS_CAPABILITIES[harness]\n  if (!caps) throw new Error(`harnessCapabilities: no capability facts for \"${harness}\"`)\n  return caps\n}\n","/** Pure session admission. Harness identity is not deployment availability. */\nexport interface HarnessAvailability<H extends string> {\n  /** Server-owned selection for new sessions. An empty list disables all starts. */\n  readonly newSessions: readonly H[]\n  /** Includes draining harnesses. Omission uses newSessions, never all known IDs. */\n  readonly existingSessions?: readonly H[]\n}\n\nexport interface SessionHarnessSelectionInput<H extends string> {\n  sessionHarness?: unknown\n  requested?: unknown\n  workspaceDefault?: unknown\n  fallback?: H\n  /** Omit only when the caller deliberately admits every known harness. */\n  availability?: HarnessAvailability<H>\n}\n\nexport interface SessionHarnessSelection<H extends string> {\n  harness: H\n  locked: boolean\n  swapAttempted: boolean\n}\n\ntype SelectionSource = 'session' | 'requested' | 'workspace' | 'fallback'\n\n/** An admission failure, never permission to retry on another harness. */\nexport class HarnessSelectionError extends Error {\n  readonly code: 'harness_unknown' | 'harness_unavailable'\n  readonly harness: string | null\n  readonly source: SelectionSource\n\n  constructor(\n    code: 'harness_unknown' | 'harness_unavailable',\n    value: unknown,\n    source: SelectionSource,\n  ) {\n    const harness = typeof value === 'string' ? value : null\n    super(`${code}: ${source} harness ${harness === null ? '<invalid>' : JSON.stringify(harness)}`)\n    this.name = 'HarnessSelectionError'\n    this.code = code\n    this.harness = harness\n    this.source = source\n  }\n}\n\n/**\n * Null/undefined mean no choice. Every other value is an explicit choice and must\n * validate. A retired or unrecognized saved identity must never become a new session.\n * Availability is supplied by the authenticated server, not by a request body.\n */\nexport function selectSessionHarness<H extends string>(\n  input: SessionHarnessSelectionInput<H>,\n  knownHarnesses: readonly H[],\n  defaultHarness: H,\n): SessionHarnessSelection<H> {\n  const known = new Set<string>(knownHarnesses)\n  const resolve = (value: unknown, source: SelectionSource): H => {\n    if (typeof value !== 'string' || !known.has(value)) {\n      throw new HarnessSelectionError('harness_unknown', value, source)\n    }\n    return value as H\n  }\n  const admit = (harness: H, source: SelectionSource, existing: boolean): void => {\n    if (input.availability === undefined) return\n    const allowed = existing\n      ? input.availability.existingSessions ?? input.availability.newSessions\n      : input.availability.newSessions\n    if (!allowed.includes(harness)) {\n      throw new HarnessSelectionError('harness_unavailable', harness, source)\n    }\n  }\n\n  if (input.sessionHarness !== undefined && input.sessionHarness !== null) {\n    const harness = resolve(input.sessionHarness, 'session')\n    admit(harness, 'session', true)\n    // A known different request remains a swap attempt; it is not executed. An\n    // invalid request is refused rather than being misreported as no swap.\n    const requested = input.requested === undefined || input.requested === null\n      ? undefined : resolve(input.requested, 'requested')\n    return { harness, locked: true, swapAttempted: requested !== undefined && requested !== harness }\n  }\n\n  const source: SelectionSource = input.requested !== undefined && input.requested !== null\n    ? 'requested'\n    : input.workspaceDefault !== undefined && input.workspaceDefault !== null\n      ? 'workspace' : 'fallback'\n  const value = source === 'requested' ? input.requested\n    : source === 'workspace' ? input.workspaceDefault : input.fallback ?? defaultHarness\n  const harness = resolve(value, source)\n  admit(harness, source, false)\n  return { harness, locked: false, swapAttempted: false }\n}\n"],"mappings":";AAYA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,sBAAsB;AAAA,EACtB,sBAAsB;AAAA,OAEjB;;;ACKA,IAAM,wBAAN,cAAoC,MAAM;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EAET,YACE,MACA,OACA,QACA;AACA,UAAM,UAAU,OAAO,UAAU,WAAW,QAAQ;AACpD,UAAM,GAAG,IAAI,KAAK,MAAM,YAAY,YAAY,OAAO,cAAc,KAAK,UAAU,OAAO,CAAC,EAAE;AAC9F,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,UAAU;AACf,SAAK,SAAS;AAAA,EAChB;AACF;AAOO,SAAS,qBACd,OACA,gBACA,gBAC4B;AAC5B,QAAM,QAAQ,IAAI,IAAY,cAAc;AAC5C,QAAM,UAAU,CAACA,QAAgBC,YAA+B;AAC9D,QAAI,OAAOD,WAAU,YAAY,CAAC,MAAM,IAAIA,MAAK,GAAG;AAClD,YAAM,IAAI,sBAAsB,mBAAmBA,QAAOC,OAAM;AAAA,IAClE;AACA,WAAOD;AAAA,EACT;AACA,QAAM,QAAQ,CAACE,UAAYD,SAAyB,aAA4B;AAC9E,QAAI,MAAM,iBAAiB,OAAW;AACtC,UAAM,UAAU,WACZ,MAAM,aAAa,oBAAoB,MAAM,aAAa,cAC1D,MAAM,aAAa;AACvB,QAAI,CAAC,QAAQ,SAASC,QAAO,GAAG;AAC9B,YAAM,IAAI,sBAAsB,uBAAuBA,UAASD,OAAM;AAAA,IACxE;AAAA,EACF;AAEA,MAAI,MAAM,mBAAmB,UAAa,MAAM,mBAAmB,MAAM;AACvE,UAAMC,WAAU,QAAQ,MAAM,gBAAgB,SAAS;AACvD,UAAMA,UAAS,WAAW,IAAI;AAG9B,UAAM,YAAY,MAAM,cAAc,UAAa,MAAM,cAAc,OACnE,SAAY,QAAQ,MAAM,WAAW,WAAW;AACpD,WAAO,EAAE,SAAAA,UAAS,QAAQ,MAAM,eAAe,cAAc,UAAa,cAAcA,SAAQ;AAAA,EAClG;AAEA,QAAM,SAA0B,MAAM,cAAc,UAAa,MAAM,cAAc,OACjF,cACA,MAAM,qBAAqB,UAAa,MAAM,qBAAqB,OACjE,cAAc;AACpB,QAAM,QAAQ,WAAW,cAAc,MAAM,YACzC,WAAW,cAAc,MAAM,mBAAmB,MAAM,YAAY;AACxE,QAAM,UAAU,QAAQ,OAAO,MAAM;AACrC,QAAM,SAAS,QAAQ,KAAK;AAC5B,SAAO,EAAE,SAAS,QAAQ,OAAO,eAAe,MAAM;AACxD;;;AD3DA,IAAM,wBAAwB,CAAC,QAAQ;AACvC,IAAM,sBAAsB,IAAI,IAAY,qBAAqB;AAS1D,IAAM,kBAAsC;AAAA,EACjD,GAAG,kBAAkB,QAAQ;AAAA,IAC3B,CAAC,YACC,CAAC,oBAAoB,IAAI,OAAO;AAAA,EACpC;AACF;AAGO,IAAM,kBAA2B;AACxC,IAAM,cAAmC,IAAI,IAAI,eAAe;AAGzD,SAAS,UAAU,OAAkC;AAC1D,SAAO,OAAO,UAAU,YAAY,YAAY,IAAI,KAAK;AAC3D;AAGO,SAAS,cAAc,OAAgB,WAAoB,iBAA0B;AAC1F,SAAO,UAAU,KAAK,IAAI,QAAQ;AACpC;AAkBO,SAAS,sBAAsB,QAAoC,CAAC,GAA2B;AACpG,SAAO,qBAAqB,OAAO,iBAAiB,eAAe;AACrE;AAaA,SAAS,cAAc,OAAgB,OAAwB;AAC7D,MAAI,CAAC,UAAU,KAAK,EAAG,OAAM,IAAI,MAAM,GAAG,KAAK,8BAA8B,OAAO,KAAK,CAAC,EAAE;AAC5F,SAAO;AACT;AAQO,SAAS,kBAAkB,QAAuB,aAA+B;AACtF,QAAM,aAAa,OAAO,SAAS,KAAK,IACpC,cAAc,OAAO,QAAQ,KAAK,GAAG,qBAAqB,IAAI;AAClE,QAAM,MAAM,OAAO,YAAY,KAAK;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI;AACJ,MAAI;AACF,cAAU,KAAK,MAAM,GAAG;AAAA,EAC1B,QAAQ;AACN,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA,MAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAAG;AACrE,UAAM,IAAI,MAAM,6EAA6E;AAAA,EAC/F;AAGA,QAAM,SAAS,IAAI,IAAI,OAAO,QAAQ,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,MAC5D,CAAC,IAAI,cAAc,OAAO,6BAA6B,EAAE,EAAE,CAAC,CAAC,CAAC;AAChE,UAAQ,gBAAgB,SAAY,SAAY,OAAO,IAAI,WAAW,MAAM;AAC9E;AAaO,SAAS,6BAA6B,SAAkB,SAA0B;AACvF,SAAO,qBAAqB,SAAS,OAAO;AAC9C;AAKO,SAAS,mBAAmB,SAAkB,SAAiB,cAAyC;AAC7G,SAAO,qBAAqB,SAAS,SAAS,YAAY;AAC5D;AAIO,SAAS,mBAAmB,SAAkB,SAA0B;AAC7E,QAAM,UAAU,qBAAqB,SAAS,OAAO;AACrD,MAAI,CAAC,UAAU,OAAO,GAAG;AACvB,UAAM,IAAI;AAAA,MACR,YAAY,OAAO,iBAAiB,OAAO,gBAAgB,OAAO;AAAA,IACpE;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,6BACd,SACA,WACM;AACN,QAAM,UAAU,OAAO,cAAc,WAAW,YAAY,UAAU;AACtE,QAAM,oBAAoB,OAAO,cAAc,WAAW,SAAY,UAAU;AAChF,QAAM,YAAY,iBAAiB,OAAO;AAC1C,QAAM,WAAW,cAAc,OAAO,KAAK,qBAAqB;AAKhE,QAAM,oBAAoB,QAAQ,KAAK,MAAM,MAAM,QAAQ,KAAK,MAAM;AACtE,QAAM,aAAa,qBACd,cAAc,QACb,aAAa,QAAQ,UAAU,SAAS,QAAQ;AACtD,MAAI,CAAC,YAAY;AACf,UAAM,SAAS,yBAAyB,OAAO;AAC/C,UAAM,sBAAsB,YAAY;AACxC,UAAM,IAAI;AAAA,MACR,YAAY,OAAO,uBAAuB,OAAO,gBAAgB,mBAAmB,WAC3E,UAAU,oCAAoC;AAAA,IACzD;AAAA,EACF;AACF;AAiBA,IAAM,uBAA6D;AAAA,EACjE,eAAe,EAAE,WAAW,MAAM,KAAK,UAAU,cAAc,WAAW,WAAW,iBAAiB;AAAA,EACtG,UAAU,EAAE,WAAW,MAAM,KAAK,UAAU,cAAc,WAAW,WAAW,iBAAiB;AAAA,EACjG,UAAU,EAAE,WAAW,MAAM,KAAK,eAAe,cAAc,WAAW,WAAW,mBAAmB;AAAA,EACxG,OAAO,EAAE,WAAW,MAAM,KAAK,eAAe,cAAc,WAAW,WAAW,gBAAgB;AAAA,EAClG,aAAa,EAAE,WAAW,OAAO,KAAK,eAAe,cAAc,WAAW,WAAW,eAAe;AAAA,EACxG,IAAI,EAAE,WAAW,OAAO,KAAK,aAAa,cAAc,WAAW,WAAW,aAAa;AAAA,EAC3F,OAAO,EAAE,WAAW,MAAM,KAAK,UAAU,cAAc,WAAW,WAAW,sBAAsB;AAAA,EACnG,QAAQ,EAAE,WAAW,OAAO,KAAK,UAAU,cAAc,WAAW,WAAW,KAAK;AAAA,EACpF,UAAU,EAAE,WAAW,OAAO,KAAK,eAAe,cAAc,WAAW,WAAW,SAAS;AAAA,EAC/F,KAAK,EAAE,WAAW,OAAO,KAAK,UAAU,cAAc,WAAW,WAAW,KAAK;AAAA,EACjF,KAAK,EAAE,WAAW,OAAO,KAAK,UAAU,cAAc,WAAW,WAAW,KAAK;AAAA,EACjF,kBAAkB,EAAE,WAAW,OAAO,KAAK,UAAU,cAAc,WAAW,WAAW,KAAK;AAAA,EAC9F,OAAO,EAAE,WAAW,OAAO,KAAK,UAAU,cAAc,WAAW,WAAW,KAAK;AAAA,EACnF,QAAQ,EAAE,WAAW,OAAO,KAAK,UAAU,cAAc,WAAW,WAAW,KAAK;AAAA,EACpF,YAAY,EAAE,WAAW,OAAO,KAAK,UAAU,cAAc,WAAW,WAAW,KAAK;AAC1F;AAGO,SAAS,oBAAoB,SAAuC;AACzE,QAAM,OAAO,qBAAqB,OAAO;AACzC,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,iDAAiD,OAAO,GAAG;AACtF,SAAO;AACT;","names":["value","source","harness"]}

package/dist/harness/index.d.ts

@@ -1,73 +1,44 @@
 /**
- * Coding-agent harness selection — taxonomy, coercion, and the session-lock invariant.
+ * Coding-agent harness selection, model compatibility, and the session lock.
  *
- * A "harness" is the coding-agent CLI a sandbox drives (opencode / codex /
- * claude-code / …). The shell governs WHICH harness a chat session uses and
- * enforces that a session is LOCKED to the harness it started with — the model
- * may change mid-session, the harness may not (swapping it mid-session would
- * orphan the session's running agent state). Every product otherwise hand-rolls
- * this and hard-codes a single harness; this is the one place the rule lives.
+ * Known identities are not a deployment's available runners. Products supply
+ * server-owned availability to resolveSessionHarness. Historical session IDs
+ * remain intact when their runner is unavailable; a harness change requires an
+ * explicit transfer, not a fallback or a rewritten session lock.
  *
- * Substrate-free: the harness list is derived from `@tangle-network/agent-interface`'s canonical
- * harness enum and mirrors the sandbox SDK's `BackendType` (no sandbox dependency). The consumer
- * owns storage — which harness a workspace defaults to, which one a session locked — and maps the
- * resolved value onto the SDK's `backend.type`.
- *
- * Harness↔model COMPATIBILITY (which models a harness can run, snapping) is NOT defined here — it
- * comes from `@tangle-network/agent-interface`, the single source of truth shared with the
- * sandbox-ui pickers and the cli-bridge backends. This module owns the harness TAXONOMY + the
- * session lock, and its server assertion also checks resolved transport-provider evidence.
+ * Model compatibility is owned by @tangle-network/agent-interface. The shell
+ * owns session selection; the consumer owns storage and deployment policy.
  */
 import { modelProvider, type HarnessType } from '@tangle-network/agent-interface';
-/**
- * Canonical harnesses that are NOT sandbox backends. Each value in `KNOWN_HARNESSES` is dispatched
- * as `backend.type`, so a harness the platform ships no provider adapter for must stay out —
- * offering it would resolve a session onto a runner that cannot start.
- */
+import { type HarnessAvailability as SelectionAvailability, type SessionHarnessSelection, type SessionHarnessSelectionInput } from './session-selection';
+export { HarnessSelectionError } from './session-selection';
+/** Canonical identities that have no direct Sandbox backend. */
 declare const NON_BACKEND_HARNESSES: readonly ["gemini"];
-/** A coding-agent backend this shell can dispatch a session onto. */
+/** A recognized coding-agent backend, not a promise that it is installed. */
 export type Harness = Exclude<HarnessType, (typeof NON_BACKEND_HARNESSES)[number]>;
 /**
- * The known coding-agent backends: the canonical harness set minus what has no provider adapter,
- * Derived from `harnessTypeSchema.options` so a harness added upstream reaches this shell without
- * an edit here, and kept structural so this module still needs no sandbox dependency.
+ * Recognized backend identities, including IDs needed by historical sessions.
+ * Use deployment availability, not membership here, to offer or admit new runs.
  */
 export declare const KNOWN_HARNESSES: readonly Harness[];
-/** Define the default harness to use for code execution and testing environments */
+/** Default for an absent choice; never a replacement for an invalid explicit ID. */
 export declare const DEFAULT_HARNESS: Harness;
-/** Determine if a value is a recognized harness string identifier */
+/** Determine whether a value is a recognized identity, independently of availability. */
 export declare function isHarness(value: unknown): value is Harness;
-/** Coerce an arbitrary value to a known harness, falling back (default `opencode`). */
+/** Display/config convenience only. Never use coercion to admit an execution or restore a lock. */
 export declare function coerceHarness(value: unknown, fallback?: Harness): Harness;
-/** Resolve input options to determine the appropriate session harness to use */
-export interface ResolveSessionHarnessInput {
-    /** The harness already locked to this session (recorded at its first turn). */
-    sessionHarness?: unknown;
-    /** The harness requested now — a new session's choice, or a turn's attempt to switch. */
-    requested?: unknown;
-    /** The workspace's default harness, used only when starting a fresh session. */
-    workspaceDefault?: unknown;
-    /** Final fallback when nothing else resolves (default `opencode`). */
-    fallback?: Harness;
-}
-/** Represent resolved session state including harness, lock status, and swap attempt flag */
-export interface ResolvedSessionHarness {
-    /** The harness to actually run — the locked one when the session already has it. */
-    harness: Harness;
-    /** True when the session already had a locked harness (this turn did not pick it). */
-    locked: boolean;
-    /** True when `requested` differs from the locked harness — a forbidden mid-session
-     *  swap the caller should reject or warn on. The lock always wins regardless. */
-    swapAttempted: boolean;
-}
+/** Server-owned start and resume sets. Existing-only entries are draining. */
+export type HarnessAvailability = SelectionAvailability<Harness>;
+/** A saved lock, explicit choice, workspace default, and optional deployment availability. */
+export type ResolveSessionHarnessInput = SessionHarnessSelectionInput<Harness>;
+/** The selected identity and the existing session-lock/swap-attempt result. */
+export type ResolvedSessionHarness = SessionHarnessSelection<Harness>;
 /**
- * Resolve the harness for a turn, enforcing the session lock.
- *
- * - **Session already started** (`sessionHarness` is a known harness): that harness
- *   wins (`locked: true`); a differing `requested` sets `swapAttempted` so the caller
- *   can reject the swap. The model is a separate per-turn concern and is unaffected.
- * - **Fresh session**: pick `requested → workspaceDefault → fallback`. The caller
- *   persists the result as the session's lock for every subsequent turn.
+ * Resolve requested → workspaceDefault → fallback only for a genuinely new session.
+ * A non-null saved identity always takes the lock path. Unknown/retired identities
+ * and invalid explicit requests throw HarnessSelectionError instead of falling back.
+ * A known different request still reports swapAttempted while preserving the lock.
+ * The caller must reject that attempt before execution, as in the existing contract.
  */
 export declare function resolveSessionHarness(input?: ResolveSessionHarnessInput): ResolvedSessionHarness;
 /**
@@ -87,13 +58,7 @@ export interface HarnessConfig {
  * a configuration typo must fail loudly, never run a different harness than the one configured.
  */
 export declare function configuredHarness(config: HarnessConfig, workspaceId?: string): Harness;
-/**
- * Harness ↔ model compatibility + snapping — delegated to `@tangle-network/agent-interface`.
- *
- * `Harness` is the dispatchable subset of `HarnessType`: this shell drops only canonical harnesses
- * for which the platform has no backend. Compatibility therefore comes entirely from Interface;
- * this package keeps no second harness taxonomy.
- */
+/** Harness-model compatibility is delegated to the Interface owner. */
 export { modelProvider };
 /** A resolved model and the transport provider that will execute it. */
 export interface HarnessModelSelection {
@@ -117,20 +82,14 @@ export declare function snapHarnessToModel(harness: Harness, modelId: string): H
 export declare function assertHarnessModelCompatible(harness: Harness, selection: string | HarnessModelSelection): void;
 /** What a harness can express, for profile assembly. */
 export interface HarnessCapabilities {
-    /** Lower `profile.subagents` into native cwd files (e.g. `.claude/agents/`).
-     *  False: a profile carrying subagents is refused at materialization —
-     *  builders must not add them. */
+    /** Lower profile.subagents into native cwd files; false means materialization refuses them. */
     subagents: boolean;
-    /** How `profile.mcp` reaches the harness. */
+    /** How profile.mcp reaches the harness. */
     mcp: 'native' | 'config-file' | 'extension' | 'none';
-    /** When tool controls are validated: 'startup' means an allowlist naming
-     *  MCP-carried verbs is checked before MCP tools register (spawn-time
-     *  validation refuses unknown names); 'runtime' tolerates them. */
+    /** Whether tool controls are checked before MCP tools register. */
     toolControls: 'startup' | 'runtime';
-    /** cwd-relative directory `resources.skills` materializes into, or null
-     *  when the harness has no cwd skill primitive (falls back to inline). */
+    /** cwd-relative skill directory, or null when skills must be inlined. */
     skillsDir: string | null;
 }
-/** The capability facts for `harness`. Every harness in KNOWN_HARNESSES has
- *  an entry; the map is exhaustive by construction (tests assert parity). */
+/** Profile-support facts, independent of whether this deployment enables the harness. */
 export declare function harnessCapabilities(harness: Harness): HarnessCapabilities;

package/dist/harness/index.js

@@ -1,5 +1,6 @@
 import {
   DEFAULT_HARNESS,
+  HarnessSelectionError,
   KNOWN_HARNESSES,
   assertHarnessModelCompatible,
   coerceHarness,
@@ -11,9 +12,10 @@ import {
   resolveSessionHarness,
   snapHarnessToModel,
   snapModelToHarness
-} from "../chunk-MXNVSY6J.js";
+} from "../chunk-VBRUG4N5.js";
 export {
   DEFAULT_HARNESS,
+  HarnessSelectionError,
   KNOWN_HARNESSES,
   assertHarnessModelCompatible,
   coerceHarness,

package/dist/harness/session-selection.d.ts

@@ -0,0 +1,35 @@
+/** Pure session admission. Harness identity is not deployment availability. */
+export interface HarnessAvailability<H extends string> {
+    /** Server-owned selection for new sessions. An empty list disables all starts. */
+    readonly newSessions: readonly H[];
+    /** Includes draining harnesses. Omission uses newSessions, never all known IDs. */
+    readonly existingSessions?: readonly H[];
+}
+export interface SessionHarnessSelectionInput<H extends string> {
+    sessionHarness?: unknown;
+    requested?: unknown;
+    workspaceDefault?: unknown;
+    fallback?: H;
+    /** Omit only when the caller deliberately admits every known harness. */
+    availability?: HarnessAvailability<H>;
+}
+export interface SessionHarnessSelection<H extends string> {
+    harness: H;
+    locked: boolean;
+    swapAttempted: boolean;
+}
+type SelectionSource = 'session' | 'requested' | 'workspace' | 'fallback';
+/** An admission failure, never permission to retry on another harness. */
+export declare class HarnessSelectionError extends Error {
+    readonly code: 'harness_unknown' | 'harness_unavailable';
+    readonly harness: string | null;
+    readonly source: SelectionSource;
+    constructor(code: 'harness_unknown' | 'harness_unavailable', value: unknown, source: SelectionSource);
+}
+/**
+ * Null/undefined mean no choice. Every other value is an explicit choice and must
+ * validate. A retired or unrecognized saved identity must never become a new session.
+ * Availability is supplied by the authenticated server, not by a request body.
+ */
+export declare function selectSessionHarness<H extends string>(input: SessionHarnessSelectionInput<H>, knownHarnesses: readonly H[], defaultHarness: H): SessionHarnessSelection<H>;
+export {};

package/dist/integrations-react/index.d.ts

@@ -3,4 +3,4 @@ export { createHubIntegrationsClient, type HubIntegrationsClient, type HubIntegr
 export { connectionTone, HubIntegrationsPanel, hubConnectionStatus, type HubAccountStatus, type HubConnectionState, type HubIntegrationsAccounts, type HubIntegrationsPanelProps } from './panel';
 export { HUB_CONNECT_CHANNEL, HUB_CONNECTED_MESSAGE_TYPE, HUB_CONNECT_FAILED_MESSAGE_TYPE, POPUP_TIMEOUT_MS } from './popup';
 export { useHubIntegrations, type HubHostConnect, type HubWriteReceipt, type UseHubIntegrationsOptions } from './use-hub-integrations';
-export { type HubIntegrationCapabilities, type HubIntegrationCapability } from './projection';
+export { type HubActionPolicy, type HubActionPolicyDisplay, type HubIntegrationCapabilities, type HubIntegrationCapability } from './projection';

package/dist/integrations-react/index.js

@@ -102,7 +102,7 @@ function waitForConnection(input) {
       candidate.onmessage = (event) => {
         const message = event.data;
         if (!message || message.provider !== input.providerId || message.nonce !== input.nonce || message.context !== input.contextToken) return;
-        if (message.type === HUB_CONNECT_FAILED_MESSAGE_TYPE) finish("cancelled");
+        if (message.type === HUB_CONNECT_FAILED_MESSAGE_TYPE) finish("failed");
         if (message.type === HUB_CONNECTED_MESSAGE_TYPE) {
           if (pollId !== void 0) window.clearTimeout(pollId);
           void check();
@@ -187,7 +187,7 @@ function HubConnectCallbackPage({ returnHref }) {
       setPhase("failed");
       return;
     }
-    const failure = params.get("error_description") || params.get("error");
+    const failure = params.get("error_description") || params.get("error") || (params.get("hub_connection") === "error" ? params.get("hub_error") || "Please restart the connection flow." : null);
     try {
       const channel = new BroadcastChannel(HUB_CONNECT_CHANNEL);
       channel.postMessage({ type: failure ? HUB_CONNECT_FAILED_MESSAGE_TYPE : HUB_CONNECTED_MESSAGE_TYPE, provider, nonce, context });
@@ -352,7 +352,7 @@ var OPTIONS = [
   { value: "ask", label: "Ask" },
   { value: "deny", label: "Deny" }
 ];
-function permissionDetails(tools, policies, connectionId, can) {
+function permissionDetails(tools, policies, connectionId, can, getActionPolicy) {
   const overrides = new Map(policies.filter((policy) => policy.connectionId === connectionId).map((policy) => [policy.actionPath, policy.decision]));
   const groups = [
     { id: "writes", title: "Write and unknown actions", rows: [] },
@@ -362,16 +362,17 @@ function permissionDetails(tools, policies, connectionId, can) {
   const reads = [];
   for (const tool of tools) {
     const override = overrides.get(tool.path);
+    const enforced = getActionPolicy?.(tool, override);
     const row = {
       actionPath: tool.path,
       title: tool.title ?? tool.path,
       riskLabel: tool.risk ?? "unknown",
       riskTone: tool.risk === "destructive" ? "error" : tool.risk === "write" || tool.risk === void 0 ? "warning" : "neutral",
-      decision: override ?? null,
-      decisionOptions: OPTIONS,
-      sourceLabel: override ? "Stored override" : "No stored override",
-      canReset: override !== void 0 && can({ operation: "policy.reset", connectionId, actionPath: tool.path }),
-      disabled: !can({ operation: "policy.set", connectionId, actionPath: tool.path })
+      decision: enforced?.decision ?? override ?? null,
+      decisionOptions: enforced ? [{ value: enforced.decision, label: enforced.label }] : OPTIONS,
+      sourceLabel: enforced?.sourceLabel ?? (override ? "Stored override" : "No stored override"),
+      canReset: !enforced && override !== void 0 && can({ operation: "policy.reset", connectionId, actionPath: tool.path }),
+      disabled: !!enforced || !can({ operation: "policy.set", connectionId, actionPath: tool.path })
     };
     if (tool.risk === "read") reads.push(row);
     else writes.push(row);
@@ -399,7 +400,7 @@ function updateUrl(providerId, connectionId) {
   else url.searchParams.delete("connection");
   window.history.pushState(window.history.state, "", url);
 }
-function useHubIntegrations({ identity, client, can, callbackPath, onUnsupportedConnect, hostConnect }) {
+function useHubIntegrations({ identity, client, can, callbackPath, onUnsupportedConnect, hostConnect, getActionPolicy }) {
   const scope = contextKey(identity);
   const activeScope = useRef(scope);
   activeScope.current = scope;
@@ -544,7 +545,7 @@ function useHubIntegrations({ identity, client, can, callbackPath, onUnsupported
       connections.retry();
       setDialog(null);
       setConnectStatus({ scope, status: "connected", message: "Connection verified." });
-    } else setConnectStatus({ scope, status: "failed", message: result === "blocked" ? "Allow the popup and try again." : result === "unverified" ? "Could not verify a new connection. Refresh and try again." : result === "cancelled" ? "Connection was cancelled." : "This connection flow is unavailable." });
+    } else setConnectStatus({ scope, status: "failed", providerId: target.providerId, message: result === "blocked" ? "Allow the popup and try again." : result === "unverified" ? "Could not verify a new connection. Refresh and try again." : result === "failed" ? "Could not connect your account. Please try again." : result === "cancelled" ? "Connection was cancelled." : "This connection flow is unavailable." });
     return result;
   }, [can, connections, client, identity, callbackPath, scope]);
   const beginConnect = useCallback((target) => {
@@ -580,7 +581,7 @@ function useHubIntegrations({ identity, client, can, callbackPath, onUnsupported
     pendingPopup.current?.abort();
     pendingPopup.current = null;
     setDialog(null);
-    setConnectStatus({ scope, status: "failed", message: "Connection was cancelled." });
+    setConnectStatus((current) => ({ scope, status: "failed", providerId: current.scope === scope ? current.providerId : void 0, message: "Connection was cancelled." }));
   }, [scope]);
   const rows = useMemo(
     () => catalogRows(
@@ -593,7 +594,7 @@ function useHubIntegrations({ identity, client, can, callbackPath, onUnsupported
     ),
     [providerList, connectionList, visibleSelection.providerId, visibleSelection.connectionId, can, onUnsupportedConnect, hostConnect]
   );
-  const details = detail.status === "ready" && connection ? permissionDetails(detail.value.tools, detail.value.policies, connection.id, can) : void 0;
+  const details = detail.status === "ready" && connection ? permissionDetails(detail.value.tools, detail.value.policies, connection.id, can, (tool, storedDecision) => getActionPolicy?.({ connection, tool, storedDecision })) : void 0;
   return {
     providers,
     connections,
@@ -795,6 +796,7 @@ function HubIntegrationsPanel(props) {
   }, [hub.connectStatus.status, scope]);
   const connectedProviders = new Set(connectionList.filter((connection) => connection.status !== "revoked").map((connection) => connection.providerId));
   const catalogRows2 = props.accounts && hub.connections.status === "error" ? [] : props.accounts ? rows.filter((row) => !connectedProviders.has(row.providerId)).map((row) => ({ ...row, connections: [], selectedConnectionId: null })) : rows;
+  const retryProvider = hub.providers.status === "ready" ? hub.providers.value.find((provider) => provider.providerId === hub.connectStatus.providerId) : void 0;
   const selectedConnection = hub.connection;
   const detailError = hub.detail.status === "error" ? hub.detail.message : hub.detail.status === "ready" && hub.detail.value.truncated ? `Showing at most ${hub.detail.value.tools.length} actions. The provider catalog may be incomplete.` : null;
   const detailsByConnectionId = useMemo2(() => hub.connection ? {
@@ -841,7 +843,6 @@ function HubIntegrationsPanel(props) {
       loading: hub.providers.status === "loading" || hub.connections.status === "loading",
       error,
       actionError: mutationError,
-      connectError: hub.connectStatus.status === "failed" ? hub.connectStatus.message : null,
       busyProviderId: hub.connectStatus.status === "pending" ? hub.connectStatus.providerId ?? null : null,
       reserveConnectionContext: true,
       emptyCatalogLabel: props.accounts && rows.length > 0 ? "Every available integration has a connected account. Manage an account to connect another." : void 0
@@ -855,7 +856,10 @@ function HubIntegrationsPanel(props) {
     hub.writeState.status === "pending" ? /* @__PURE__ */ jsx2("p", { role: "status", children: "Saving Hub settings\u2026" }) : null,
     mutationError ? /* @__PURE__ */ jsx2("p", { role: "alert", children: mutationError }) : null,
     writeMessage ? /* @__PURE__ */ jsx2("p", { role: writeWarning ? "alert" : "status", children: writeMessage }) : null,
-    hub.connectStatus.message && hub.provider ? /* @__PURE__ */ jsx2("p", { role: hub.connectStatus.status === "failed" ? "alert" : "status", children: hub.connectStatus.message }) : null,
+    hub.connectStatus.status === "failed" ? /* @__PURE__ */ jsxs2("div", { role: "alert", className: "mb-4 flex flex-wrap items-center gap-3 text-sm text-destructive", children: [
+      /* @__PURE__ */ jsx2("p", { "data-testid": "integration-connect-error", children: hub.connectStatus.message }),
+      retryProvider ? /* @__PURE__ */ jsx2(Button, { type: "button", variant: "outline", disabled: pending, onClick: () => hub.beginConnect(retryProvider), children: "Retry connection" }) : null
+    ] }) : hub.connectStatus.message && hub.provider ? /* @__PURE__ */ jsx2("p", { role: "status", children: hub.connectStatus.message }) : null,
     hub.provider ? /* @__PURE__ */ jsxs2(Fragment, { children: [
       props.accounts && selectedConnection || selectedRow?.canConnect ? /* @__PURE__ */ jsxs2("div", { className: "mb-4 flex min-w-0 flex-wrap items-center gap-2", children: [
         props.accounts && selectedConnection ? /* @__PURE__ */ jsxs2(