@volter-ai-dev/supercode-ui 0.1.61 → 0.1.63

package/README.md

@@ -159,7 +159,15 @@ join, branch, reduction, or export so a host can explain ownership and destinati
 
 Harness inventory also retains normalized auth, runtime, protocol, repair, and action-capability
 evidence. The new-chat view renders unavailable harnesses in a compact `HarnessReadiness` section;
-hosts can replace that component while continuing to consume the same readiness contract.
+hosts can replace that component while continuing to consume the same readiness contract. For an
+installed Claude Code or Codex that needs authentication, the default component emits the single
+`authenticateHarness` intent. A trusted host constructs the client's
+`HarnessAuthenticationController` with a visible terminal/process adapter and supplies it to the
+controller binding as `authentication`. The shared controller selects the native method, handles
+timeout/cancellation/verification, refreshes inventory after success, and exposes only sanitized
+progress to the default component. The browser-only UI never receives a launch command, spawns a
+local process, or handles credentials itself. `onAuthenticateHarness` remains a legacy escape hatch
+for hosts that have not adopted the shared lifecycle.
 
 When a controlled runtime truthfully advertises native steering, the composer sends a plain-text
 message into the active turn and keeps a separate secondary action for queueing a follow-up. With
@@ -175,6 +183,11 @@ Trusted desktop, editor, and Node hosts can avoid rewriting ordinary snapshot an
 import { createControllerBinding } from '@volter-ai-dev/supercode-ui/controller';
 
 const binding = createControllerBinding(controller, {
+  authentication,
+  authenticationRequest: () => ({
+    environment: isRemoteClient ? 'headless' : 'local_browser',
+    cwd: projectRoot,
+  }),
   onDraft: saveDraft,
   onAcknowledge: clearAttention,
   onArtifact: materializeArtifactInTrustedHost,

package/activity.mjs

@@ -55,6 +55,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),
@@ -74,12 +75,33 @@ var STARTUP = /* @__PURE__ */ new Set(["connecting", "starting", "discovering",
 var FIDELITY = /* @__PURE__ */ new Set(["byte_lossless", "value_lossless", "semantic"]);
 var TOOL_CATEGORIES = /* @__PURE__ */ new Set(["read", "search", "edit", "command", "test", "web", "agent", "plan", "other"]);
 var TOOL_DETAILS = /* @__PURE__ */ new Set(["file", "matches", "diff", "terminal", "web", "agent", "plan", "fields"]);
+var AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["idle", "checking", "required", "configured", "unavailable", "launching", "awaiting_user", "verifying", "authenticated", "failed", "cancelled"]);
 var MAX_TOOL_FIELDS = 8;
 var MAX_TOOL_FIELD_CHARS = 800;
 var MAX_TOOL_PREVIEW_CHARS = 4e3;
 function record(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
+function readHarnessAuthentication(value) {
+  const flow = record(value);
+  if (flow?.schema !== "supercode.harness-authentication-flow.v1" || !AUTHENTICATION_PHASES.has(flow.phase)) return null;
+  const plan = record(flow.plan);
+  const error = record(flow.error);
+  return {
+    schema: "supercode.harness-authentication-flow.v1",
+    revision: Number.isSafeInteger(flow.revision) ? Math.max(0, flow.revision) : 0,
+    phase: flow.phase,
+    harness: typeof flow.harness === "string" ? boundedString(flow.harness, 100) : null,
+    plan: plan ? {
+      method: plan.method === "device_code" ? "device_code" : "browser",
+      interaction: plan.interaction === "device_code" ? "device_code" : "browser",
+      browserBehavior: plan.browserBehavior === "none" ? "none" : "native_auto",
+      headless: plan.headless === true,
+      instructions: boundedString(plan.instructions, 2e3)
+    } : null,
+    error: error && typeof error.message === "string" ? { code: boundedString(error.code, 100), message: boundedString(error.message, 2e3) } : null
+  };
+}
 function string(value, fallback = "") {
   return typeof value === "string" ? value : fallback;
 }
@@ -754,6 +776,7 @@ function normalizeUiState(value) {
     reductionReceipt: readReductionReceipt(raw.reductionReceipt),
     interopSettings: readInteropSettings(raw.interopSettings),
     interopSettingsError: typeof raw.interopSettingsError === "string" ? boundedString(raw.interopSettingsError) : null,
+    harnessAuthentication: readHarnessAuthentication(raw.harnessAuthentication),
     error: typeof raw.error === "string" ? raw.error : null,
     recoverable: raw.recoverable === true,
     harnesses: Array.isArray(raw.harnesses) ? raw.harnesses.flatMap((candidate) => {

package/components.mjs

@@ -58,6 +58,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),
@@ -77,12 +78,33 @@ var STARTUP = /* @__PURE__ */ new Set(["connecting", "starting", "discovering",
 var FIDELITY = /* @__PURE__ */ new Set(["byte_lossless", "value_lossless", "semantic"]);
 var TOOL_CATEGORIES = /* @__PURE__ */ new Set(["read", "search", "edit", "command", "test", "web", "agent", "plan", "other"]);
 var TOOL_DETAILS = /* @__PURE__ */ new Set(["file", "matches", "diff", "terminal", "web", "agent", "plan", "fields"]);
+var AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["idle", "checking", "required", "configured", "unavailable", "launching", "awaiting_user", "verifying", "authenticated", "failed", "cancelled"]);
 var MAX_TOOL_FIELDS = 8;
 var MAX_TOOL_FIELD_CHARS = 800;
 var MAX_TOOL_PREVIEW_CHARS = 4e3;
 function record(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
+function readHarnessAuthentication(value) {
+  const flow = record(value);
+  if (flow?.schema !== "supercode.harness-authentication-flow.v1" || !AUTHENTICATION_PHASES.has(flow.phase)) return null;
+  const plan = record(flow.plan);
+  const error = record(flow.error);
+  return {
+    schema: "supercode.harness-authentication-flow.v1",
+    revision: Number.isSafeInteger(flow.revision) ? Math.max(0, flow.revision) : 0,
+    phase: flow.phase,
+    harness: typeof flow.harness === "string" ? boundedString(flow.harness, 100) : null,
+    plan: plan ? {
+      method: plan.method === "device_code" ? "device_code" : "browser",
+      interaction: plan.interaction === "device_code" ? "device_code" : "browser",
+      browserBehavior: plan.browserBehavior === "none" ? "none" : "native_auto",
+      headless: plan.headless === true,
+      instructions: boundedString(plan.instructions, 2e3)
+    } : null,
+    error: error && typeof error.message === "string" ? { code: boundedString(error.code, 100), message: boundedString(error.message, 2e3) } : null
+  };
+}
 function string(value, fallback = "") {
   return typeof value === "string" ? value : fallback;
 }
@@ -766,6 +788,7 @@ function normalizeUiState(value) {
     reductionReceipt: readReductionReceipt(raw.reductionReceipt),
     interopSettings: readInteropSettings(raw.interopSettings),
     interopSettingsError: typeof raw.interopSettingsError === "string" ? boundedString(raw.interopSettingsError) : null,
+    harnessAuthentication: readHarnessAuthentication(raw.harnessAuthentication),
     error: typeof raw.error === "string" ? raw.error : null,
     recoverable: raw.recoverable === true,
     harnesses: Array.isArray(raw.harnesses) ? raw.harnesses.flatMap((candidate) => {
@@ -2646,7 +2669,23 @@ function HarnessSettingsPanel({ state, adapter, onClose, recommendedChange = nul
     ] })
   ] });
 }
-function HarnessReadiness({ harnesses, adapter }) {
+var ACTIVE_AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["checking", "launching", "awaiting_user", "verifying"]);
+function HarnessAuthenticationButton({ item, state, adapter }) {
+  if (!item.installed || !["claude-code", "codex"].includes(item.id) || ["ready", "configured"].includes(item.auth)) return null;
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  const busy = flow && ACTIVE_AUTHENTICATION_PHASES.has(flow.phase);
+  const completed = flow?.phase === "authenticated";
+  const label = flow?.phase === "checking" ? "Checking\u2026" : flow?.phase === "launching" ? "Opening\u2026" : flow?.phase === "awaiting_user" ? "Finish sign-in" : flow?.phase === "verifying" ? "Verifying\u2026" : flow?.phase === "authenticated" ? "Signed in" : flow?.phase === "failed" ? "Try again" : "Sign in";
+  return /* @__PURE__ */ jsx10("button", { type: "button", disabled: Boolean(busy || completed), "aria-busy": Boolean(busy), onClick: () => adapter?.onIntent({ action: "authenticateHarness", harness: item.id }), children: label });
+}
+function canAuthenticateHarness(item) {
+  return item.installed && ["claude-code", "codex"].includes(item.id) && !["ready", "configured"].includes(item.auth);
+}
+function harnessAuthenticationReason(item, state) {
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  return flow?.error?.message || flow?.plan?.instructions || item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable");
+}
+function HarnessReadiness({ harnesses, state, adapter }) {
   const blocked = harnesses.filter((item) => !item.startable);
   if (!blocked.length || harnesses.some((item) => item.startable)) return null;
   return /* @__PURE__ */ jsxs9("details", { className: "scui-readiness", open: true, children: [
@@ -2655,18 +2694,19 @@ function HarnessReadiness({ harnesses, adapter }) {
       /* @__PURE__ */ jsx10(HarnessLogo, { id: item.id, size: 25 }),
       /* @__PURE__ */ jsxs9("span", { children: [
         /* @__PURE__ */ jsx10("strong", { children: item.label }),
-        /* @__PURE__ */ jsx10("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") }),
+        /* @__PURE__ */ jsx10("small", { children: harnessAuthenticationReason(item, state) }),
         item.protocol ? /* @__PURE__ */ jsxs9("em", { children: [
           item.protocol,
           " \xB7 ",
           item.runtime
         ] }) : null
       ] }),
-      item.repair ? /* @__PURE__ */ jsx10("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
+      /* @__PURE__ */ jsx10(HarnessAuthenticationButton, { item, state, adapter }),
+      !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx10("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
     ] }, item.id)) })
   ] });
 }
-function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
+function HarnessPicker({ harnesses, state, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
   const [open, setOpen] = useState6(false);
   const menuId = useId2();
   const root = useRef7(null);
@@ -2731,9 +2771,10 @@ function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange,
           /* @__PURE__ */ jsx10(Logo, { id: item.id, size: 24 }),
           /* @__PURE__ */ jsxs9("span", { children: [
             /* @__PURE__ */ jsx10("strong", { children: item.label }),
-            /* @__PURE__ */ jsx10("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") })
+            /* @__PURE__ */ jsx10("small", { children: harnessAuthenticationReason(item, state) })
           ] }),
-          item.repair ? /* @__PURE__ */ jsx10("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
+          /* @__PURE__ */ jsx10(HarnessAuthenticationButton, { item, state, adapter }),
+          !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx10("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
         ] }, item.id)) })
       ] }) : null
     ] }) : null
@@ -3231,7 +3272,7 @@ function NewChat({ state, adapter, onBack, onClose, onStarted, labels, memoryKey
         } }),
         /* @__PURE__ */ jsxs10("footer", { className: "scui-new-envelope-controls", children: [
           adapter.pickContext ? /* @__PURE__ */ jsx11("button", { className: "scui-attach", type: "button", "aria-label": labels.attachContext ?? DEFAULT_LABELS.attachContext, disabled: mode === "terminal" || picking || context.length >= MAX_CONTEXT_ITEMS && images.length >= MAX_IMAGE_ITEMS || Boolean(starting), onClick: pickContext, children: picking ? /* @__PURE__ */ jsx11("i", { className: "scui-control-spinner" }) : /* @__PURE__ */ jsx11(UiIcon, { name: "attach", size: 17 }) }) : null,
-          /* @__PURE__ */ jsx11(Picker, { harnesses: state.harnesses, value: harness, disabled: Boolean(starting), adapter, logo: components.HarnessLogo, onChange: (value) => {
+          /* @__PURE__ */ jsx11(Picker, { harnesses: state.harnesses, state, value: harness, disabled: Boolean(starting), adapter, logo: components.HarnessLogo, onChange: (value) => {
             setHarness(value);
             remember({ harness: value });
           } }),

package/composer.mjs

@@ -58,6 +58,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),

package/controller.d.ts

@@ -1,4 +1,5 @@
 import type {
+  HarnessId,
   SessionArtifact,
   SessionDescriptor,
   SessionFormat,
@@ -128,6 +129,29 @@ export interface ControllerBindingOptions {
   onCloseSubagents?: () => void | Promise<void>;
   onStartTerminal?: (intent: Extract<SupercodeUiIntent, { action: 'new' }>) => void | Promise<void>;
   onResumeTerminal?: (intent: Extract<SupercodeUiIntent, { action: 'resume' }>) => void | Promise<void>;
+  /** Shared Supercode authentication lifecycle. The host-specific execution adapter is injected
+   * when constructing this controller; the UI only observes and starts the flow. */
+  authentication?: {
+    getSnapshot(): unknown;
+    subscribe(listener: () => void): () => void;
+    authenticate(harness: HarnessId, request?: {
+      environment?: 'local_browser' | 'headless';
+      method?: 'browser' | 'device_code';
+      cwd?: string;
+    }): Promise<{ phase: string }>;
+  };
+  authenticationRequest?: (intent: Extract<SupercodeUiIntent, { action: 'authenticateHarness' }>) => {
+    environment?: 'local_browser' | 'headless';
+    method?: 'browser' | 'device_code';
+    cwd?: string;
+  } | Promise<{
+    environment?: 'local_browser' | 'headless';
+    method?: 'browser' | 'device_code';
+    cwd?: string;
+  }>;
+  /** Launch the native harness-owned sign-in flow. The host owns the process and terminal. */
+  /** @deprecated Prefer `authentication`; retained for custom legacy hosts. */
+  onAuthenticateHarness?: (intent: Extract<SupercodeUiIntent, { action: 'authenticateHarness' }>) => void | Promise<void>;
   copyText?: UiAdapter['copyText'];
   resolveImage?: UiAdapter['resolveImage'];
   confirmIntent?: UiAdapter['confirmIntent'];

package/controller.mjs

@@ -669,6 +669,19 @@ export async function dispatchControllerIntent(controller, intent, options = {})
   if (intent.action === 'terminal') return controller.dispatch({ type: 'openTerminal' });
   if (intent.action === 'interrupt') return controller.dispatch({ type: 'interrupt' });
   if (intent.action === 'respond') return controller.dispatch({ type: 'respond', requestId: intent.requestId, optionId: intent.optionId });
+  if (intent.action === 'authenticateHarness') {
+    if (options.authentication) {
+      const request = (await options.authenticationRequest?.(intent)) ?? {};
+      const result = await options.authentication.authenticate(intent.harness, request);
+      if (result?.phase === 'authenticated') {
+        await controller.dispatch({ type: 'refresh', autoObserve: false, silent: true });
+      }
+      return;
+    }
+    return options.onAuthenticateHarness
+      ? options.onAuthenticateHarness(intent)
+      : options.onUnsupported?.(intent);
+  }
   if (intent.action === 'configureHarness') return controller.dispatch({
     type: 'configureHarness',
     harness: intent.harness,
@@ -700,7 +713,12 @@ export function createControllerBinding(controller, options = {}) {
   if (!controller || typeof controller.getSnapshot !== 'function' || typeof controller.subscribe !== 'function' || typeof controller.dispatch !== 'function') {
     throw new TypeError('createControllerBinding requires a SupercodeController-compatible object');
   }
-  const getState = () => projectClientSnapshot(controller.getSnapshot(), options.projection?.() ?? {});
+  const getState = () => {
+    const state = projectClientSnapshot(controller.getSnapshot(), options.projection?.() ?? {});
+    return options.authentication
+      ? normalizeUiState({ ...state, harnessAuthentication: options.authentication.getSnapshot() })
+      : state;
+  };
   const adapter = {
     onIntent(intent) {
       return Promise.resolve(options.onIntent?.(intent))
@@ -719,7 +737,11 @@ export function createControllerBinding(controller, options = {}) {
     adapter,
     getState,
     subscribe(listener) {
-      return controller.subscribe(() => listener(getState()));
+      const unsubscribers = [controller.subscribe(() => listener(getState()))];
+      if (options.authentication?.subscribe) {
+        unsubscribers.push(options.authentication.subscribe(() => listener(getState())));
+      }
+      return () => { for (const unsubscribe of unsubscribers) unsubscribe(); };
     },
   };
 }

package/conversation.mjs

@@ -59,6 +59,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),

package/core.mjs

@@ -56,6 +56,7 @@ export const EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),
@@ -76,6 +77,7 @@ const STARTUP = new Set(['connecting', 'starting', 'discovering', 'ready']);
 const FIDELITY = new Set(['byte_lossless', 'value_lossless', 'semantic']);
 const TOOL_CATEGORIES = new Set(['read', 'search', 'edit', 'command', 'test', 'web', 'agent', 'plan', 'other']);
 const TOOL_DETAILS = new Set(['file', 'matches', 'diff', 'terminal', 'web', 'agent', 'plan', 'fields']);
+const AUTHENTICATION_PHASES = new Set(['idle', 'checking', 'required', 'configured', 'unavailable', 'launching', 'awaiting_user', 'verifying', 'authenticated', 'failed', 'cancelled']);
 const MAX_TOOL_FIELDS = 8;
 const MAX_TOOL_FIELD_CHARS = 800;
 const MAX_TOOL_PREVIEW_CHARS = 4_000;
@@ -84,6 +86,29 @@ function record(value) {
   return value !== null && typeof value === 'object' && !Array.isArray(value) ? value : null;
 }
 
+function readHarnessAuthentication(value) {
+  const flow = record(value);
+  if (flow?.schema !== 'supercode.harness-authentication-flow.v1' || !AUTHENTICATION_PHASES.has(flow.phase)) return null;
+  const plan = record(flow.plan);
+  const error = record(flow.error);
+  return {
+    schema: 'supercode.harness-authentication-flow.v1',
+    revision: Number.isSafeInteger(flow.revision) ? Math.max(0, flow.revision) : 0,
+    phase: flow.phase,
+    harness: typeof flow.harness === 'string' ? boundedString(flow.harness, 100) : null,
+    plan: plan ? {
+      method: plan.method === 'device_code' ? 'device_code' : 'browser',
+      interaction: plan.interaction === 'device_code' ? 'device_code' : 'browser',
+      browserBehavior: plan.browserBehavior === 'none' ? 'none' : 'native_auto',
+      headless: plan.headless === true,
+      instructions: boundedString(plan.instructions, 2_000),
+    } : null,
+    error: error && typeof error.message === 'string'
+      ? { code: boundedString(error.code, 100), message: boundedString(error.message, 2_000) }
+      : null,
+  };
+}
+
 function string(value, fallback = '') {
   return typeof value === 'string' ? value : fallback;
 }
@@ -819,6 +844,7 @@ export function normalizeUiState(value) {
     reductionReceipt: readReductionReceipt(raw.reductionReceipt),
     interopSettings: readInteropSettings(raw.interopSettings),
     interopSettingsError: typeof raw.interopSettingsError === 'string' ? boundedString(raw.interopSettingsError) : null,
+    harnessAuthentication: readHarnessAuthentication(raw.harnessAuthentication),
     error: typeof raw.error === 'string' ? raw.error : null,
     recoverable: raw.recoverable === true,
     harnesses: Array.isArray(raw.harnesses) ? raw.harnesses.flatMap((candidate) => {
@@ -1165,6 +1191,11 @@ export function parseSupercodeUiIntent(value) {
       ? { action: 'respond', requestId: intent.requestId, optionId: intent.optionId }
       : null;
   }
+  if (intent.action === 'authenticateHarness') {
+    return exact('harness') && typeof intent.harness === 'string' && intent.harness.trim() && intent.harness.length <= 100
+      ? { action: 'authenticateHarness', harness: intent.harness.trim() }
+      : null;
+  }
   if (intent.action === 'configureHarness') {
     if (!exact('harness', 'changes', 'expectedRevision')) return null;
     if (typeof intent.harness !== 'string' || !intent.harness || intent.harness.length > 100) return null;

package/embed.mjs

@@ -61,6 +61,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),
@@ -80,12 +81,33 @@ var STARTUP = /* @__PURE__ */ new Set(["connecting", "starting", "discovering",
 var FIDELITY = /* @__PURE__ */ new Set(["byte_lossless", "value_lossless", "semantic"]);
 var TOOL_CATEGORIES = /* @__PURE__ */ new Set(["read", "search", "edit", "command", "test", "web", "agent", "plan", "other"]);
 var TOOL_DETAILS = /* @__PURE__ */ new Set(["file", "matches", "diff", "terminal", "web", "agent", "plan", "fields"]);
+var AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["idle", "checking", "required", "configured", "unavailable", "launching", "awaiting_user", "verifying", "authenticated", "failed", "cancelled"]);
 var MAX_TOOL_FIELDS = 8;
 var MAX_TOOL_FIELD_CHARS = 800;
 var MAX_TOOL_PREVIEW_CHARS = 4e3;
 function record(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
+function readHarnessAuthentication(value) {
+  const flow = record(value);
+  if (flow?.schema !== "supercode.harness-authentication-flow.v1" || !AUTHENTICATION_PHASES.has(flow.phase)) return null;
+  const plan = record(flow.plan);
+  const error = record(flow.error);
+  return {
+    schema: "supercode.harness-authentication-flow.v1",
+    revision: Number.isSafeInteger(flow.revision) ? Math.max(0, flow.revision) : 0,
+    phase: flow.phase,
+    harness: typeof flow.harness === "string" ? boundedString(flow.harness, 100) : null,
+    plan: plan ? {
+      method: plan.method === "device_code" ? "device_code" : "browser",
+      interaction: plan.interaction === "device_code" ? "device_code" : "browser",
+      browserBehavior: plan.browserBehavior === "none" ? "none" : "native_auto",
+      headless: plan.headless === true,
+      instructions: boundedString(plan.instructions, 2e3)
+    } : null,
+    error: error && typeof error.message === "string" ? { code: boundedString(error.code, 100), message: boundedString(error.message, 2e3) } : null
+  };
+}
 function string(value, fallback = "") {
   return typeof value === "string" ? value : fallback;
 }
@@ -769,6 +791,7 @@ function normalizeUiState(value) {
     reductionReceipt: readReductionReceipt(raw.reductionReceipt),
     interopSettings: readInteropSettings(raw.interopSettings),
     interopSettingsError: typeof raw.interopSettingsError === "string" ? boundedString(raw.interopSettingsError) : null,
+    harnessAuthentication: readHarnessAuthentication(raw.harnessAuthentication),
     error: typeof raw.error === "string" ? raw.error : null,
     recoverable: raw.recoverable === true,
     harnesses: Array.isArray(raw.harnesses) ? raw.harnesses.flatMap((candidate) => {
@@ -2563,7 +2586,23 @@ function HarnessSettingsPanel({ state, adapter, onClose, recommendedChange = nul
     ] })
   ] });
 }
-function HarnessReadiness({ harnesses, adapter }) {
+var ACTIVE_AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["checking", "launching", "awaiting_user", "verifying"]);
+function HarnessAuthenticationButton({ item, state, adapter }) {
+  if (!item.installed || !["claude-code", "codex"].includes(item.id) || ["ready", "configured"].includes(item.auth)) return null;
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  const busy = flow && ACTIVE_AUTHENTICATION_PHASES.has(flow.phase);
+  const completed = flow?.phase === "authenticated";
+  const label = flow?.phase === "checking" ? "Checking\u2026" : flow?.phase === "launching" ? "Opening\u2026" : flow?.phase === "awaiting_user" ? "Finish sign-in" : flow?.phase === "verifying" ? "Verifying\u2026" : flow?.phase === "authenticated" ? "Signed in" : flow?.phase === "failed" ? "Try again" : "Sign in";
+  return /* @__PURE__ */ jsx9("button", { type: "button", disabled: Boolean(busy || completed), "aria-busy": Boolean(busy), onClick: () => adapter?.onIntent({ action: "authenticateHarness", harness: item.id }), children: label });
+}
+function canAuthenticateHarness(item) {
+  return item.installed && ["claude-code", "codex"].includes(item.id) && !["ready", "configured"].includes(item.auth);
+}
+function harnessAuthenticationReason(item, state) {
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  return flow?.error?.message || flow?.plan?.instructions || item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable");
+}
+function HarnessReadiness({ harnesses, state, adapter }) {
   const blocked = harnesses.filter((item) => !item.startable);
   if (!blocked.length || harnesses.some((item) => item.startable)) return null;
   return /* @__PURE__ */ jsxs8("details", { className: "scui-readiness", open: true, children: [
@@ -2572,18 +2611,19 @@ function HarnessReadiness({ harnesses, adapter }) {
       /* @__PURE__ */ jsx9(HarnessLogo, { id: item.id, size: 25 }),
       /* @__PURE__ */ jsxs8("span", { children: [
         /* @__PURE__ */ jsx9("strong", { children: item.label }),
-        /* @__PURE__ */ jsx9("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") }),
+        /* @__PURE__ */ jsx9("small", { children: harnessAuthenticationReason(item, state) }),
         item.protocol ? /* @__PURE__ */ jsxs8("em", { children: [
           item.protocol,
           " \xB7 ",
           item.runtime
         ] }) : null
       ] }),
-      item.repair ? /* @__PURE__ */ jsx9("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
+      /* @__PURE__ */ jsx9(HarnessAuthenticationButton, { item, state, adapter }),
+      !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx9("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
     ] }, item.id)) })
   ] });
 }
-function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
+function HarnessPicker({ harnesses, state, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
   const [open, setOpen] = useState6(false);
   const menuId = useId2();
   const root = useRef7(null);
@@ -2648,9 +2688,10 @@ function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange,
           /* @__PURE__ */ jsx9(Logo, { id: item.id, size: 24 }),
           /* @__PURE__ */ jsxs8("span", { children: [
             /* @__PURE__ */ jsx9("strong", { children: item.label }),
-            /* @__PURE__ */ jsx9("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") })
+            /* @__PURE__ */ jsx9("small", { children: harnessAuthenticationReason(item, state) })
           ] }),
-          item.repair ? /* @__PURE__ */ jsx9("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
+          /* @__PURE__ */ jsx9(HarnessAuthenticationButton, { item, state, adapter }),
+          !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx9("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
         ] }, item.id)) })
       ] }) : null
     ] }) : null
@@ -3148,7 +3189,7 @@ function NewChat({ state, adapter, onBack, onClose, onStarted, labels, memoryKey
         } }),
         /* @__PURE__ */ jsxs9("footer", { className: "scui-new-envelope-controls", children: [
           adapter.pickContext ? /* @__PURE__ */ jsx10("button", { className: "scui-attach", type: "button", "aria-label": labels.attachContext ?? DEFAULT_LABELS.attachContext, disabled: mode === "terminal" || picking || context.length >= MAX_CONTEXT_ITEMS && images.length >= MAX_IMAGE_ITEMS || Boolean(starting), onClick: pickContext, children: picking ? /* @__PURE__ */ jsx10("i", { className: "scui-control-spinner" }) : /* @__PURE__ */ jsx10(UiIcon, { name: "attach", size: 17 }) }) : null,
-          /* @__PURE__ */ jsx10(Picker, { harnesses: state.harnesses, value: harness, disabled: Boolean(starting), adapter, logo: components.HarnessLogo, onChange: (value) => {
+          /* @__PURE__ */ jsx10(Picker, { harnesses: state.harnesses, state, value: harness, disabled: Boolean(starting), adapter, logo: components.HarnessLogo, onChange: (value) => {
             setHarness(value);
             remember({ harness: value });
           } }),

package/index.d.ts

@@ -258,6 +258,21 @@ export interface HarnessInteropSettingsModel {
   advisories: HarnessInteropAdvisoryModel[];
 }
 
+export interface HarnessAuthenticationUiState {
+  schema: 'supercode.harness-authentication-flow.v1';
+  revision: number;
+  phase: 'idle' | 'checking' | 'required' | 'configured' | 'unavailable' | 'launching' | 'awaiting_user' | 'verifying' | 'authenticated' | 'failed' | 'cancelled';
+  harness: HarnessId | null;
+  plan: {
+    method: 'browser' | 'device_code';
+    interaction: 'browser' | 'device_code';
+    browserBehavior: 'native_auto' | 'none';
+    headless: boolean;
+    instructions: string;
+  } | null;
+  error: { code: string; message: string } | null;
+}
+
 export interface SessionAttention {
   key: string;
   kind: 'unseen' | 'finished' | 'failed';
@@ -314,6 +329,7 @@ export interface SupercodeUiState {
   reductionReceipt: ReductionReceiptModel | null;
   interopSettings: HarnessInteropSettingsModel | null;
   interopSettingsError: string | null;
+  harnessAuthentication: HarnessAuthenticationUiState | null;
   error: string | null;
   recoverable: boolean;
   harnesses: HarnessOption[];
@@ -355,6 +371,7 @@ export type SupercodeUiIntent =
   | { action: 'export'; targetHarness: HarnessId }
   | { action: 'interrupt' }
   | { action: 'respond'; requestId: unknown; optionId: string | null }
+  | { action: 'authenticateHarness'; harness: HarnessId }
   | { action: 'configureHarness'; harness: HarnessId; changes: HarnessSettingChangeModel[]; expectedRevision: string }
   | { action: 'refresh' }
   | { action: 'release' };
@@ -467,9 +484,10 @@ export interface HarnessSettingsPanelProps {
 
 export interface HarnessPickerProps {
   harnesses: HarnessOption[];
+  state?: SupercodeUiState;
   value: HarnessId;
   disabled?: boolean;
-  adapter?: Pick<UiAdapter, 'copyText'>;
+  adapter?: Pick<UiAdapter, 'copyText' | 'onIntent'>;
   onChange(harness: HarnessId): void;
   logo?: ComponentType<{ id: HarnessId; activity?: SessionActivity; size?: number }>;
 }

package/messenger.mjs

@@ -58,6 +58,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),
@@ -77,12 +78,33 @@ var STARTUP = /* @__PURE__ */ new Set(["connecting", "starting", "discovering",
 var FIDELITY = /* @__PURE__ */ new Set(["byte_lossless", "value_lossless", "semantic"]);
 var TOOL_CATEGORIES = /* @__PURE__ */ new Set(["read", "search", "edit", "command", "test", "web", "agent", "plan", "other"]);
 var TOOL_DETAILS = /* @__PURE__ */ new Set(["file", "matches", "diff", "terminal", "web", "agent", "plan", "fields"]);
+var AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["idle", "checking", "required", "configured", "unavailable", "launching", "awaiting_user", "verifying", "authenticated", "failed", "cancelled"]);
 var MAX_TOOL_FIELDS = 8;
 var MAX_TOOL_FIELD_CHARS = 800;
 var MAX_TOOL_PREVIEW_CHARS = 4e3;
 function record(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
+function readHarnessAuthentication(value) {
+  const flow = record(value);
+  if (flow?.schema !== "supercode.harness-authentication-flow.v1" || !AUTHENTICATION_PHASES.has(flow.phase)) return null;
+  const plan = record(flow.plan);
+  const error = record(flow.error);
+  return {
+    schema: "supercode.harness-authentication-flow.v1",
+    revision: Number.isSafeInteger(flow.revision) ? Math.max(0, flow.revision) : 0,
+    phase: flow.phase,
+    harness: typeof flow.harness === "string" ? boundedString(flow.harness, 100) : null,
+    plan: plan ? {
+      method: plan.method === "device_code" ? "device_code" : "browser",
+      interaction: plan.interaction === "device_code" ? "device_code" : "browser",
+      browserBehavior: plan.browserBehavior === "none" ? "none" : "native_auto",
+      headless: plan.headless === true,
+      instructions: boundedString(plan.instructions, 2e3)
+    } : null,
+    error: error && typeof error.message === "string" ? { code: boundedString(error.code, 100), message: boundedString(error.message, 2e3) } : null
+  };
+}
 function string(value, fallback = "") {
   return typeof value === "string" ? value : fallback;
 }
@@ -766,6 +788,7 @@ function normalizeUiState(value) {
     reductionReceipt: readReductionReceipt(raw.reductionReceipt),
     interopSettings: readInteropSettings(raw.interopSettings),
     interopSettingsError: typeof raw.interopSettingsError === "string" ? boundedString(raw.interopSettingsError) : null,
+    harnessAuthentication: readHarnessAuthentication(raw.harnessAuthentication),
     error: typeof raw.error === "string" ? raw.error : null,
     recoverable: raw.recoverable === true,
     harnesses: Array.isArray(raw.harnesses) ? raw.harnesses.flatMap((candidate) => {
@@ -2560,7 +2583,23 @@ function HarnessSettingsPanel({ state, adapter, onClose, recommendedChange = nul
     ] })
   ] });
 }
-function HarnessReadiness({ harnesses, adapter }) {
+var ACTIVE_AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["checking", "launching", "awaiting_user", "verifying"]);
+function HarnessAuthenticationButton({ item, state, adapter }) {
+  if (!item.installed || !["claude-code", "codex"].includes(item.id) || ["ready", "configured"].includes(item.auth)) return null;
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  const busy = flow && ACTIVE_AUTHENTICATION_PHASES.has(flow.phase);
+  const completed = flow?.phase === "authenticated";
+  const label = flow?.phase === "checking" ? "Checking\u2026" : flow?.phase === "launching" ? "Opening\u2026" : flow?.phase === "awaiting_user" ? "Finish sign-in" : flow?.phase === "verifying" ? "Verifying\u2026" : flow?.phase === "authenticated" ? "Signed in" : flow?.phase === "failed" ? "Try again" : "Sign in";
+  return /* @__PURE__ */ jsx9("button", { type: "button", disabled: Boolean(busy || completed), "aria-busy": Boolean(busy), onClick: () => adapter?.onIntent({ action: "authenticateHarness", harness: item.id }), children: label });
+}
+function canAuthenticateHarness(item) {
+  return item.installed && ["claude-code", "codex"].includes(item.id) && !["ready", "configured"].includes(item.auth);
+}
+function harnessAuthenticationReason(item, state) {
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  return flow?.error?.message || flow?.plan?.instructions || item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable");
+}
+function HarnessReadiness({ harnesses, state, adapter }) {
   const blocked = harnesses.filter((item) => !item.startable);
   if (!blocked.length || harnesses.some((item) => item.startable)) return null;
   return /* @__PURE__ */ jsxs8("details", { className: "scui-readiness", open: true, children: [
@@ -2569,18 +2608,19 @@ function HarnessReadiness({ harnesses, adapter }) {
       /* @__PURE__ */ jsx9(HarnessLogo, { id: item.id, size: 25 }),
       /* @__PURE__ */ jsxs8("span", { children: [
         /* @__PURE__ */ jsx9("strong", { children: item.label }),
-        /* @__PURE__ */ jsx9("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") }),
+        /* @__PURE__ */ jsx9("small", { children: harnessAuthenticationReason(item, state) }),
         item.protocol ? /* @__PURE__ */ jsxs8("em", { children: [
           item.protocol,
           " \xB7 ",
           item.runtime
         ] }) : null
       ] }),
-      item.repair ? /* @__PURE__ */ jsx9("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
+      /* @__PURE__ */ jsx9(HarnessAuthenticationButton, { item, state, adapter }),
+      !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx9("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
     ] }, item.id)) })
   ] });
 }
-function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
+function HarnessPicker({ harnesses, state, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
   const [open, setOpen] = useState6(false);
   const menuId = useId2();
   const root = useRef7(null);
@@ -2645,9 +2685,10 @@ function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange,
           /* @__PURE__ */ jsx9(Logo, { id: item.id, size: 24 }),
           /* @__PURE__ */ jsxs8("span", { children: [
             /* @__PURE__ */ jsx9("strong", { children: item.label }),
-            /* @__PURE__ */ jsx9("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") })
+            /* @__PURE__ */ jsx9("small", { children: harnessAuthenticationReason(item, state) })
           ] }),
-          item.repair ? /* @__PURE__ */ jsx9("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
+          /* @__PURE__ */ jsx9(HarnessAuthenticationButton, { item, state, adapter }),
+          !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx9("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
         ] }, item.id)) })
       ] }) : null
     ] }) : null
@@ -3145,7 +3186,7 @@ function NewChat({ state, adapter, onBack, onClose, onStarted, labels, memoryKey
         } }),
         /* @__PURE__ */ jsxs9("footer", { className: "scui-new-envelope-controls", children: [
           adapter.pickContext ? /* @__PURE__ */ jsx10("button", { className: "scui-attach", type: "button", "aria-label": labels.attachContext ?? DEFAULT_LABELS.attachContext, disabled: mode === "terminal" || picking || context.length >= MAX_CONTEXT_ITEMS && images.length >= MAX_IMAGE_ITEMS || Boolean(starting), onClick: pickContext, children: picking ? /* @__PURE__ */ jsx10("i", { className: "scui-control-spinner" }) : /* @__PURE__ */ jsx10(UiIcon, { name: "attach", size: 17 }) }) : null,
-          /* @__PURE__ */ jsx10(Picker, { harnesses: state.harnesses, value: harness, disabled: Boolean(starting), adapter, logo: components.HarnessLogo, onChange: (value) => {
+          /* @__PURE__ */ jsx10(Picker, { harnesses: state.harnesses, state, value: harness, disabled: Boolean(starting), adapter, logo: components.HarnessLogo, onChange: (value) => {
             setHarness(value);
             remember({ harness: value });
           } }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter-ai-dev/supercode-ui",
-  "version": "0.1.61",
+  "version": "0.1.63",
   "type": "module",
   "description": "Composable default UI kit for Supercode-powered coding-agent experiences",
   "exports": {

package/react/activity.mjs

@@ -55,6 +55,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),
@@ -74,12 +75,33 @@ var STARTUP = /* @__PURE__ */ new Set(["connecting", "starting", "discovering",
 var FIDELITY = /* @__PURE__ */ new Set(["byte_lossless", "value_lossless", "semantic"]);
 var TOOL_CATEGORIES = /* @__PURE__ */ new Set(["read", "search", "edit", "command", "test", "web", "agent", "plan", "other"]);
 var TOOL_DETAILS = /* @__PURE__ */ new Set(["file", "matches", "diff", "terminal", "web", "agent", "plan", "fields"]);
+var AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["idle", "checking", "required", "configured", "unavailable", "launching", "awaiting_user", "verifying", "authenticated", "failed", "cancelled"]);
 var MAX_TOOL_FIELDS = 8;
 var MAX_TOOL_FIELD_CHARS = 800;
 var MAX_TOOL_PREVIEW_CHARS = 4e3;
 function record(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
+function readHarnessAuthentication(value) {
+  const flow = record(value);
+  if (flow?.schema !== "supercode.harness-authentication-flow.v1" || !AUTHENTICATION_PHASES.has(flow.phase)) return null;
+  const plan = record(flow.plan);
+  const error = record(flow.error);
+  return {
+    schema: "supercode.harness-authentication-flow.v1",
+    revision: Number.isSafeInteger(flow.revision) ? Math.max(0, flow.revision) : 0,
+    phase: flow.phase,
+    harness: typeof flow.harness === "string" ? boundedString(flow.harness, 100) : null,
+    plan: plan ? {
+      method: plan.method === "device_code" ? "device_code" : "browser",
+      interaction: plan.interaction === "device_code" ? "device_code" : "browser",
+      browserBehavior: plan.browserBehavior === "none" ? "none" : "native_auto",
+      headless: plan.headless === true,
+      instructions: boundedString(plan.instructions, 2e3)
+    } : null,
+    error: error && typeof error.message === "string" ? { code: boundedString(error.code, 100), message: boundedString(error.message, 2e3) } : null
+  };
+}
 function string(value, fallback = "") {
   return typeof value === "string" ? value : fallback;
 }
@@ -754,6 +776,7 @@ function normalizeUiState(value) {
     reductionReceipt: readReductionReceipt(raw.reductionReceipt),
     interopSettings: readInteropSettings(raw.interopSettings),
     interopSettingsError: typeof raw.interopSettingsError === "string" ? boundedString(raw.interopSettingsError) : null,
+    harnessAuthentication: readHarnessAuthentication(raw.harnessAuthentication),
     error: typeof raw.error === "string" ? raw.error : null,
     recoverable: raw.recoverable === true,
     harnesses: Array.isArray(raw.harnesses) ? raw.harnesses.flatMap((candidate) => {

package/react/components.mjs

@@ -58,6 +58,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),
@@ -77,12 +78,33 @@ var STARTUP = /* @__PURE__ */ new Set(["connecting", "starting", "discovering",
 var FIDELITY = /* @__PURE__ */ new Set(["byte_lossless", "value_lossless", "semantic"]);
 var TOOL_CATEGORIES = /* @__PURE__ */ new Set(["read", "search", "edit", "command", "test", "web", "agent", "plan", "other"]);
 var TOOL_DETAILS = /* @__PURE__ */ new Set(["file", "matches", "diff", "terminal", "web", "agent", "plan", "fields"]);
+var AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["idle", "checking", "required", "configured", "unavailable", "launching", "awaiting_user", "verifying", "authenticated", "failed", "cancelled"]);
 var MAX_TOOL_FIELDS = 8;
 var MAX_TOOL_FIELD_CHARS = 800;
 var MAX_TOOL_PREVIEW_CHARS = 4e3;
 function record(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
+function readHarnessAuthentication(value) {
+  const flow = record(value);
+  if (flow?.schema !== "supercode.harness-authentication-flow.v1" || !AUTHENTICATION_PHASES.has(flow.phase)) return null;
+  const plan = record(flow.plan);
+  const error = record(flow.error);
+  return {
+    schema: "supercode.harness-authentication-flow.v1",
+    revision: Number.isSafeInteger(flow.revision) ? Math.max(0, flow.revision) : 0,
+    phase: flow.phase,
+    harness: typeof flow.harness === "string" ? boundedString(flow.harness, 100) : null,
+    plan: plan ? {
+      method: plan.method === "device_code" ? "device_code" : "browser",
+      interaction: plan.interaction === "device_code" ? "device_code" : "browser",
+      browserBehavior: plan.browserBehavior === "none" ? "none" : "native_auto",
+      headless: plan.headless === true,
+      instructions: boundedString(plan.instructions, 2e3)
+    } : null,
+    error: error && typeof error.message === "string" ? { code: boundedString(error.code, 100), message: boundedString(error.message, 2e3) } : null
+  };
+}
 function string(value, fallback = "") {
   return typeof value === "string" ? value : fallback;
 }
@@ -766,6 +788,7 @@ function normalizeUiState(value) {
     reductionReceipt: readReductionReceipt(raw.reductionReceipt),
     interopSettings: readInteropSettings(raw.interopSettings),
     interopSettingsError: typeof raw.interopSettingsError === "string" ? boundedString(raw.interopSettingsError) : null,
+    harnessAuthentication: readHarnessAuthentication(raw.harnessAuthentication),
     error: typeof raw.error === "string" ? raw.error : null,
     recoverable: raw.recoverable === true,
     harnesses: Array.isArray(raw.harnesses) ? raw.harnesses.flatMap((candidate) => {
@@ -2646,7 +2669,23 @@ function HarnessSettingsPanel({ state, adapter, onClose, recommendedChange = nul
     ] })
   ] });
 }
-function HarnessReadiness({ harnesses, adapter }) {
+var ACTIVE_AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["checking", "launching", "awaiting_user", "verifying"]);
+function HarnessAuthenticationButton({ item, state, adapter }) {
+  if (!item.installed || !["claude-code", "codex"].includes(item.id) || ["ready", "configured"].includes(item.auth)) return null;
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  const busy = flow && ACTIVE_AUTHENTICATION_PHASES.has(flow.phase);
+  const completed = flow?.phase === "authenticated";
+  const label = flow?.phase === "checking" ? "Checking\u2026" : flow?.phase === "launching" ? "Opening\u2026" : flow?.phase === "awaiting_user" ? "Finish sign-in" : flow?.phase === "verifying" ? "Verifying\u2026" : flow?.phase === "authenticated" ? "Signed in" : flow?.phase === "failed" ? "Try again" : "Sign in";
+  return /* @__PURE__ */ jsx10("button", { type: "button", disabled: Boolean(busy || completed), "aria-busy": Boolean(busy), onClick: () => adapter?.onIntent({ action: "authenticateHarness", harness: item.id }), children: label });
+}
+function canAuthenticateHarness(item) {
+  return item.installed && ["claude-code", "codex"].includes(item.id) && !["ready", "configured"].includes(item.auth);
+}
+function harnessAuthenticationReason(item, state) {
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  return flow?.error?.message || flow?.plan?.instructions || item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable");
+}
+function HarnessReadiness({ harnesses, state, adapter }) {
   const blocked = harnesses.filter((item) => !item.startable);
   if (!blocked.length || harnesses.some((item) => item.startable)) return null;
   return /* @__PURE__ */ jsxs9("details", { className: "scui-readiness", open: true, children: [
@@ -2655,18 +2694,19 @@ function HarnessReadiness({ harnesses, adapter }) {
       /* @__PURE__ */ jsx10(HarnessLogo, { id: item.id, size: 25 }),
       /* @__PURE__ */ jsxs9("span", { children: [
         /* @__PURE__ */ jsx10("strong", { children: item.label }),
-        /* @__PURE__ */ jsx10("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") }),
+        /* @__PURE__ */ jsx10("small", { children: harnessAuthenticationReason(item, state) }),
         item.protocol ? /* @__PURE__ */ jsxs9("em", { children: [
           item.protocol,
           " \xB7 ",
           item.runtime
         ] }) : null
       ] }),
-      item.repair ? /* @__PURE__ */ jsx10("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
+      /* @__PURE__ */ jsx10(HarnessAuthenticationButton, { item, state, adapter }),
+      !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx10("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
     ] }, item.id)) })
   ] });
 }
-function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
+function HarnessPicker({ harnesses, state, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
   const [open, setOpen] = useState6(false);
   const menuId = useId2();
   const root = useRef7(null);
@@ -2731,9 +2771,10 @@ function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange,
           /* @__PURE__ */ jsx10(Logo, { id: item.id, size: 24 }),
           /* @__PURE__ */ jsxs9("span", { children: [
             /* @__PURE__ */ jsx10("strong", { children: item.label }),
-            /* @__PURE__ */ jsx10("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") })
+            /* @__PURE__ */ jsx10("small", { children: harnessAuthenticationReason(item, state) })
           ] }),
-          item.repair ? /* @__PURE__ */ jsx10("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
+          /* @__PURE__ */ jsx10(HarnessAuthenticationButton, { item, state, adapter }),
+          !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx10("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
         ] }, item.id)) })
       ] }) : null
     ] }) : null
@@ -3231,7 +3272,7 @@ function NewChat({ state, adapter, onBack, onClose, onStarted, labels, memoryKey
         } }),
         /* @__PURE__ */ jsxs10("footer", { className: "scui-new-envelope-controls", children: [
           adapter.pickContext ? /* @__PURE__ */ jsx11("button", { className: "scui-attach", type: "button", "aria-label": labels.attachContext ?? DEFAULT_LABELS.attachContext, disabled: mode === "terminal" || picking || context.length >= MAX_CONTEXT_ITEMS && images.length >= MAX_IMAGE_ITEMS || Boolean(starting), onClick: pickContext, children: picking ? /* @__PURE__ */ jsx11("i", { className: "scui-control-spinner" }) : /* @__PURE__ */ jsx11(UiIcon, { name: "attach", size: 17 }) }) : null,
-          /* @__PURE__ */ jsx11(Picker, { harnesses: state.harnesses, value: harness, disabled: Boolean(starting), adapter, logo: components.HarnessLogo, onChange: (value) => {
+          /* @__PURE__ */ jsx11(Picker, { harnesses: state.harnesses, state, value: harness, disabled: Boolean(starting), adapter, logo: components.HarnessLogo, onChange: (value) => {
             setHarness(value);
             remember({ harness: value });
           } }),

package/react/composer.mjs

@@ -58,6 +58,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),

package/react/conversation.mjs

@@ -59,6 +59,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),

package/react/messenger.mjs

@@ -58,6 +58,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),
@@ -77,12 +78,33 @@ var STARTUP = /* @__PURE__ */ new Set(["connecting", "starting", "discovering",
 var FIDELITY = /* @__PURE__ */ new Set(["byte_lossless", "value_lossless", "semantic"]);
 var TOOL_CATEGORIES = /* @__PURE__ */ new Set(["read", "search", "edit", "command", "test", "web", "agent", "plan", "other"]);
 var TOOL_DETAILS = /* @__PURE__ */ new Set(["file", "matches", "diff", "terminal", "web", "agent", "plan", "fields"]);
+var AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["idle", "checking", "required", "configured", "unavailable", "launching", "awaiting_user", "verifying", "authenticated", "failed", "cancelled"]);
 var MAX_TOOL_FIELDS = 8;
 var MAX_TOOL_FIELD_CHARS = 800;
 var MAX_TOOL_PREVIEW_CHARS = 4e3;
 function record(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
+function readHarnessAuthentication(value) {
+  const flow = record(value);
+  if (flow?.schema !== "supercode.harness-authentication-flow.v1" || !AUTHENTICATION_PHASES.has(flow.phase)) return null;
+  const plan = record(flow.plan);
+  const error = record(flow.error);
+  return {
+    schema: "supercode.harness-authentication-flow.v1",
+    revision: Number.isSafeInteger(flow.revision) ? Math.max(0, flow.revision) : 0,
+    phase: flow.phase,
+    harness: typeof flow.harness === "string" ? boundedString(flow.harness, 100) : null,
+    plan: plan ? {
+      method: plan.method === "device_code" ? "device_code" : "browser",
+      interaction: plan.interaction === "device_code" ? "device_code" : "browser",
+      browserBehavior: plan.browserBehavior === "none" ? "none" : "native_auto",
+      headless: plan.headless === true,
+      instructions: boundedString(plan.instructions, 2e3)
+    } : null,
+    error: error && typeof error.message === "string" ? { code: boundedString(error.code, 100), message: boundedString(error.message, 2e3) } : null
+  };
+}
 function string(value, fallback = "") {
   return typeof value === "string" ? value : fallback;
 }
@@ -766,6 +788,7 @@ function normalizeUiState(value) {
     reductionReceipt: readReductionReceipt(raw.reductionReceipt),
     interopSettings: readInteropSettings(raw.interopSettings),
     interopSettingsError: typeof raw.interopSettingsError === "string" ? boundedString(raw.interopSettingsError) : null,
+    harnessAuthentication: readHarnessAuthentication(raw.harnessAuthentication),
     error: typeof raw.error === "string" ? raw.error : null,
     recoverable: raw.recoverable === true,
     harnesses: Array.isArray(raw.harnesses) ? raw.harnesses.flatMap((candidate) => {
@@ -2560,7 +2583,23 @@ function HarnessSettingsPanel({ state, adapter, onClose, recommendedChange = nul
     ] })
   ] });
 }
-function HarnessReadiness({ harnesses, adapter }) {
+var ACTIVE_AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["checking", "launching", "awaiting_user", "verifying"]);
+function HarnessAuthenticationButton({ item, state, adapter }) {
+  if (!item.installed || !["claude-code", "codex"].includes(item.id) || ["ready", "configured"].includes(item.auth)) return null;
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  const busy = flow && ACTIVE_AUTHENTICATION_PHASES.has(flow.phase);
+  const completed = flow?.phase === "authenticated";
+  const label = flow?.phase === "checking" ? "Checking\u2026" : flow?.phase === "launching" ? "Opening\u2026" : flow?.phase === "awaiting_user" ? "Finish sign-in" : flow?.phase === "verifying" ? "Verifying\u2026" : flow?.phase === "authenticated" ? "Signed in" : flow?.phase === "failed" ? "Try again" : "Sign in";
+  return /* @__PURE__ */ jsx9("button", { type: "button", disabled: Boolean(busy || completed), "aria-busy": Boolean(busy), onClick: () => adapter?.onIntent({ action: "authenticateHarness", harness: item.id }), children: label });
+}
+function canAuthenticateHarness(item) {
+  return item.installed && ["claude-code", "codex"].includes(item.id) && !["ready", "configured"].includes(item.auth);
+}
+function harnessAuthenticationReason(item, state) {
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  return flow?.error?.message || flow?.plan?.instructions || item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable");
+}
+function HarnessReadiness({ harnesses, state, adapter }) {
   const blocked = harnesses.filter((item) => !item.startable);
   if (!blocked.length || harnesses.some((item) => item.startable)) return null;
   return /* @__PURE__ */ jsxs8("details", { className: "scui-readiness", open: true, children: [
@@ -2569,18 +2608,19 @@ function HarnessReadiness({ harnesses, adapter }) {
       /* @__PURE__ */ jsx9(HarnessLogo, { id: item.id, size: 25 }),
       /* @__PURE__ */ jsxs8("span", { children: [
         /* @__PURE__ */ jsx9("strong", { children: item.label }),
-        /* @__PURE__ */ jsx9("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") }),
+        /* @__PURE__ */ jsx9("small", { children: harnessAuthenticationReason(item, state) }),
         item.protocol ? /* @__PURE__ */ jsxs8("em", { children: [
           item.protocol,
           " \xB7 ",
           item.runtime
         ] }) : null
       ] }),
-      item.repair ? /* @__PURE__ */ jsx9("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
+      /* @__PURE__ */ jsx9(HarnessAuthenticationButton, { item, state, adapter }),
+      !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx9("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
     ] }, item.id)) })
   ] });
 }
-function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
+function HarnessPicker({ harnesses, state, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
   const [open, setOpen] = useState6(false);
   const menuId = useId2();
   const root = useRef7(null);
@@ -2645,9 +2685,10 @@ function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange,
           /* @__PURE__ */ jsx9(Logo, { id: item.id, size: 24 }),
           /* @__PURE__ */ jsxs8("span", { children: [
             /* @__PURE__ */ jsx9("strong", { children: item.label }),
-            /* @__PURE__ */ jsx9("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") })
+            /* @__PURE__ */ jsx9("small", { children: harnessAuthenticationReason(item, state) })
           ] }),
-          item.repair ? /* @__PURE__ */ jsx9("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
+          /* @__PURE__ */ jsx9(HarnessAuthenticationButton, { item, state, adapter }),
+          !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx9("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
         ] }, item.id)) })
       ] }) : null
     ] }) : null
@@ -3145,7 +3186,7 @@ function NewChat({ state, adapter, onBack, onClose, onStarted, labels, memoryKey
         } }),
         /* @__PURE__ */ jsxs9("footer", { className: "scui-new-envelope-controls", children: [
           adapter.pickContext ? /* @__PURE__ */ jsx10("button", { className: "scui-attach", type: "button", "aria-label": labels.attachContext ?? DEFAULT_LABELS.attachContext, disabled: mode === "terminal" || picking || context.length >= MAX_CONTEXT_ITEMS && images.length >= MAX_IMAGE_ITEMS || Boolean(starting), onClick: pickContext, children: picking ? /* @__PURE__ */ jsx10("i", { className: "scui-control-spinner" }) : /* @__PURE__ */ jsx10(UiIcon, { name: "attach", size: 17 }) }) : null,
-          /* @__PURE__ */ jsx10(Picker, { harnesses: state.harnesses, value: harness, disabled: Boolean(starting), adapter, logo: components.HarnessLogo, onChange: (value) => {
+          /* @__PURE__ */ jsx10(Picker, { harnesses: state.harnesses, state, value: harness, disabled: Boolean(starting), adapter, logo: components.HarnessLogo, onChange: (value) => {
             setHarness(value);
             remember({ harness: value });
           } }),

package/react/sessions.mjs

@@ -58,6 +58,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),

package/react/settings.mjs

@@ -58,6 +58,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),
@@ -302,7 +303,23 @@ function HarnessSettingsPanel({ state, adapter, onClose, recommendedChange = nul
     ] })
   ] });
 }
-function HarnessReadiness({ harnesses, adapter }) {
+var ACTIVE_AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["checking", "launching", "awaiting_user", "verifying"]);
+function HarnessAuthenticationButton({ item, state, adapter }) {
+  if (!item.installed || !["claude-code", "codex"].includes(item.id) || ["ready", "configured"].includes(item.auth)) return null;
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  const busy = flow && ACTIVE_AUTHENTICATION_PHASES.has(flow.phase);
+  const completed = flow?.phase === "authenticated";
+  const label = flow?.phase === "checking" ? "Checking\u2026" : flow?.phase === "launching" ? "Opening\u2026" : flow?.phase === "awaiting_user" ? "Finish sign-in" : flow?.phase === "verifying" ? "Verifying\u2026" : flow?.phase === "authenticated" ? "Signed in" : flow?.phase === "failed" ? "Try again" : "Sign in";
+  return /* @__PURE__ */ jsx3("button", { type: "button", disabled: Boolean(busy || completed), "aria-busy": Boolean(busy), onClick: () => adapter?.onIntent({ action: "authenticateHarness", harness: item.id }), children: label });
+}
+function canAuthenticateHarness(item) {
+  return item.installed && ["claude-code", "codex"].includes(item.id) && !["ready", "configured"].includes(item.auth);
+}
+function harnessAuthenticationReason(item, state) {
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  return flow?.error?.message || flow?.plan?.instructions || item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable");
+}
+function HarnessReadiness({ harnesses, state, adapter }) {
   const blocked = harnesses.filter((item) => !item.startable);
   if (!blocked.length || harnesses.some((item) => item.startable)) return null;
   return /* @__PURE__ */ jsxs3("details", { className: "scui-readiness", open: true, children: [
@@ -311,18 +328,19 @@ function HarnessReadiness({ harnesses, adapter }) {
       /* @__PURE__ */ jsx3(HarnessLogo, { id: item.id, size: 25 }),
       /* @__PURE__ */ jsxs3("span", { children: [
         /* @__PURE__ */ jsx3("strong", { children: item.label }),
-        /* @__PURE__ */ jsx3("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") }),
+        /* @__PURE__ */ jsx3("small", { children: harnessAuthenticationReason(item, state) }),
         item.protocol ? /* @__PURE__ */ jsxs3("em", { children: [
           item.protocol,
           " \xB7 ",
           item.runtime
         ] }) : null
       ] }),
-      item.repair ? /* @__PURE__ */ jsx3("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
+      /* @__PURE__ */ jsx3(HarnessAuthenticationButton, { item, state, adapter }),
+      !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx3("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
     ] }, item.id)) })
   ] });
 }
-function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
+function HarnessPicker({ harnesses, state, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
   const [open, setOpen] = useState(false);
   const menuId = useId();
   const root = useRef(null);
@@ -387,9 +405,10 @@ function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange,
           /* @__PURE__ */ jsx3(Logo, { id: item.id, size: 24 }),
           /* @__PURE__ */ jsxs3("span", { children: [
             /* @__PURE__ */ jsx3("strong", { children: item.label }),
-            /* @__PURE__ */ jsx3("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") })
+            /* @__PURE__ */ jsx3("small", { children: harnessAuthenticationReason(item, state) })
           ] }),
-          item.repair ? /* @__PURE__ */ jsx3("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
+          /* @__PURE__ */ jsx3(HarnessAuthenticationButton, { item, state, adapter }),
+          !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx3("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
         ] }, item.id)) })
       ] }) : null
     ] }) : null

package/react/subagents.mjs

@@ -58,6 +58,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),

package/sessions.mjs

@@ -58,6 +58,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),

package/settings.mjs

@@ -58,6 +58,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),
@@ -302,7 +303,23 @@ function HarnessSettingsPanel({ state, adapter, onClose, recommendedChange = nul
     ] })
   ] });
 }
-function HarnessReadiness({ harnesses, adapter }) {
+var ACTIVE_AUTHENTICATION_PHASES = /* @__PURE__ */ new Set(["checking", "launching", "awaiting_user", "verifying"]);
+function HarnessAuthenticationButton({ item, state, adapter }) {
+  if (!item.installed || !["claude-code", "codex"].includes(item.id) || ["ready", "configured"].includes(item.auth)) return null;
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  const busy = flow && ACTIVE_AUTHENTICATION_PHASES.has(flow.phase);
+  const completed = flow?.phase === "authenticated";
+  const label = flow?.phase === "checking" ? "Checking\u2026" : flow?.phase === "launching" ? "Opening\u2026" : flow?.phase === "awaiting_user" ? "Finish sign-in" : flow?.phase === "verifying" ? "Verifying\u2026" : flow?.phase === "authenticated" ? "Signed in" : flow?.phase === "failed" ? "Try again" : "Sign in";
+  return /* @__PURE__ */ jsx3("button", { type: "button", disabled: Boolean(busy || completed), "aria-busy": Boolean(busy), onClick: () => adapter?.onIntent({ action: "authenticateHarness", harness: item.id }), children: label });
+}
+function canAuthenticateHarness(item) {
+  return item.installed && ["claude-code", "codex"].includes(item.id) && !["ready", "configured"].includes(item.auth);
+}
+function harnessAuthenticationReason(item, state) {
+  const flow = state?.harnessAuthentication?.harness === item.id ? state.harnessAuthentication : null;
+  return flow?.error?.message || flow?.plan?.instructions || item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable");
+}
+function HarnessReadiness({ harnesses, state, adapter }) {
   const blocked = harnesses.filter((item) => !item.startable);
   if (!blocked.length || harnesses.some((item) => item.startable)) return null;
   return /* @__PURE__ */ jsxs3("details", { className: "scui-readiness", open: true, children: [
@@ -311,18 +328,19 @@ function HarnessReadiness({ harnesses, adapter }) {
       /* @__PURE__ */ jsx3(HarnessLogo, { id: item.id, size: 25 }),
       /* @__PURE__ */ jsxs3("span", { children: [
         /* @__PURE__ */ jsx3("strong", { children: item.label }),
-        /* @__PURE__ */ jsx3("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") }),
+        /* @__PURE__ */ jsx3("small", { children: harnessAuthenticationReason(item, state) }),
         item.protocol ? /* @__PURE__ */ jsxs3("em", { children: [
           item.protocol,
           " \xB7 ",
           item.runtime
         ] }) : null
       ] }),
-      item.repair ? /* @__PURE__ */ jsx3("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
+      /* @__PURE__ */ jsx3(HarnessAuthenticationButton, { item, state, adapter }),
+      !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx3("button", { type: "button", onClick: () => adapter.copyText?.(item.repair), children: "Copy fix" }) : null
     ] }, item.id)) })
   ] });
 }
-function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
+function HarnessPicker({ harnesses, state, value, disabled = false, adapter, onChange, logo: Logo = HarnessLogo }) {
   const [open, setOpen] = useState(false);
   const menuId = useId();
   const root = useRef(null);
@@ -387,9 +405,10 @@ function HarnessPicker({ harnesses, value, disabled = false, adapter, onChange,
           /* @__PURE__ */ jsx3(Logo, { id: item.id, size: 24 }),
           /* @__PURE__ */ jsxs3("span", { children: [
             /* @__PURE__ */ jsx3("strong", { children: item.label }),
-            /* @__PURE__ */ jsx3("small", { children: item.reason || (item.auth === "required" ? "Authentication required" : "Unavailable") })
+            /* @__PURE__ */ jsx3("small", { children: harnessAuthenticationReason(item, state) })
           ] }),
-          item.repair ? /* @__PURE__ */ jsx3("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
+          /* @__PURE__ */ jsx3(HarnessAuthenticationButton, { item, state, adapter }),
+          !canAuthenticateHarness(item) && item.repair ? /* @__PURE__ */ jsx3("button", { type: "button", onClick: () => adapter?.copyText?.(item.repair), children: "Copy fix" }) : null
         ] }, item.id)) })
       ] }) : null
     ] }) : null

package/subagents.mjs

@@ -58,6 +58,7 @@ var EMPTY_UI_STATE = Object.freeze({
   reductionReceipt: null,
   interopSettings: null,
   interopSettingsError: null,
+  harnessAuthentication: null,
   error: null,
   recoverable: false,
   harnesses: Object.freeze([]),