-
Per-App Overrides
+
+
+
Per-App Options
+
+ Each app's toggle turns {taskType} on or off for that app —
+ an app stays off until you switch it on here, whatever the rest of the row says. The other controls are
+ optional: leave one on Inherit and it follows the global defaults.
+
+
@@ -58,6 +66,7 @@ export default function PerAppOverrideList({ taskType, config, apps, providers,
doWorkRequiresWorktree={config.doWorkRequiresWorktree}
inheritedProviderText={inheritedProviderText}
providers={providers}
+ providersLoaded={providersLoaded}
override={appOverrides[app.id]}
onUpdate={onUpdateOverride}
/>
diff --git a/client/src/components/cos/tabs/schedule/PipelineStageConfig.jsx b/client/src/components/cos/tabs/schedule/PipelineStageConfig.jsx
index c234e2c48b..260659c0ac 100644
--- a/client/src/components/cos/tabs/schedule/PipelineStageConfig.jsx
+++ b/client/src/components/cos/tabs/schedule/PipelineStageConfig.jsx
@@ -23,14 +23,17 @@ import {
// Which providers on THIS install the stage's picker actually offers. The
// posture half is server-published (`publicReviewPostures`, derived from the
// vendor rows — no vendor names on the client); the rest is the picker's own
-// visibility rule, reused so the "eligible" note can never list a provider
-// the dropdown hides (switched off, hardware-incompatible), which is what left
-// Stage 3 looking unconfigurable.
+// visibility rule, reused so the notes below can never name a provider the
+// dropdown hides (switched off, hardware-incompatible). The eligible set is
+// not re-listed in the copy — the dropdown already IS that list.
const eligibleProvidersFor = (providers, policy) =>
selectableProviders(providers, { allowed: policy.provider });
const providerNames = (providers) => providers.map((p) => p.name || p.id).join(', ');
+// Constant now that the eligible set is left to the dropdown.
+const NO_TOOL_STAGE_NOTE = "Tool-free stage. A local model must additionally report no tool-calling capability; a cloud model is held tool-free by the provider's own enforced flags. Leave the provider unset to use the first eligible one. It returns only a binary allowlist; the final stage never receives rejected content.";
+
// Every enabled CLI/TUI provider can run the actions stage; the note says which
// of them the server additionally wraps in the vendor's own OS sandbox, so a
// choice that relies on the disposable worktree alone is a visible one.
@@ -39,23 +42,27 @@ const actionsStageNote = (eligibleProviders) => {
const sandboxed = eligibleProviders.filter(isSandboxed);
const worktreeOnly = eligibleProviders.filter((p) => !isSandboxed(p));
const isolation = worktreeOnly.length === 0
- ? ['Each runs headless inside its vendor\'s maintained OS sandbox.']
+ ? ['Every selectable provider runs headless inside its vendor\'s maintained OS sandbox.']
: [
sandboxed.length > 0 && `OS-sandboxed by the vendor's own recipe: ${providerNames(sandboxed)}.`,
`Headless with standard permissions, isolated by the disposable worktree only: ${providerNames(worktreeOnly)}.`,
].filter(Boolean);
return [
- `Sandboxed stage. Eligible on this install: ${providerNames(eligibleProviders)}.`,
+ 'Sandboxed stage.',
...isolation,
'PortOS passes the selected provider, model, and thinking effort through, with no forge credential or configuration overlays; the deterministic coordinator owns comments, issue filing, CI triggers, and merges.',
].join(' ');
};
-export default function PipelineStageConfig({ taskType, config, providers, onUpdate, updating, setUpdating }) {
+export default function PipelineStageConfig({ taskType, config, providers, providersLoaded = true, onUpdate, updating, setUpdating }) {
const stages = pipelineStages(config);
const needsSecurityModelPolicy = taskType === 'pr-reviewer';
+ // Every public-review stage — not just the tool-free gate — resolves a local
+ // provider's models from the daemon, so the fetch follows the postures rather
+ // than the task type.
+ const hasPublicReviewStage = stages.some((stage) => stagePublicReviewPosture(stage));
const { ollama, lmstudio, capabilitiesByBackend, loading: localModelsLoading } = useLocalModels({
- enabled: needsSecurityModelPolicy,
+ enabled: needsSecurityModelPolicy || hasPublicReviewStage,
});
// One policy per posture. The provider half is server-derived; the model half
// adds the authoritative no-tool capability check only for a local runtime,
@@ -157,15 +164,29 @@ export default function PipelineStageConfig({ taskType, config, providers, onUpd
const localBackend = localBackendForProvider(stageProvider);
const localModelIds = localBackend === 'ollama' ? ollama : localBackend === 'lmstudio' ? lmstudio : [];
// A LOCAL provider's installed-model list is the source of truth (its
- // stored catalog is stale, and only an installed model has a probeable
- // capability report). Every other provider uses its own catalog, so a
- // cloud CLI stage can pick any model that provider offers.
- const stageModels = isNoToolStage && localBackend
- ? localModelIds.map(id => ({
- id,
- name: id,
- capabilities: capabilitiesByBackend?.[localBackend]?.[id],
- }))
+ // stored catalog is a cached snapshot, and only an installed model has
+ // a probeable capability report). That holds for the sandboxed actions
+ // stage as much as the tool-free gate — offering the stale catalog
+ // there let a stage be pinned to a model the daemon no longer serves,
+ // and hid one that had just been pulled. Every other provider uses its
+ // own catalog, so a cloud CLI stage can pick any model it offers.
+ //
+ // `useLocalModels` reports BOTH "not fetched yet" and "daemon said
+ // nothing" as `[]`, so an empty list is not evidence the daemon serves
+ // no models. The two stages part ways on what to do about that. The
+ // tool-free gate must stay strict: its policy needs a probeable
+ // capability report, and a model with none is not selectable at all,
+ // so an empty list correctly offers nothing. The actions stage has no
+ // such gate, so it falls back to the record's catalog — otherwise a
+ // stopped daemon (or the in-flight window) renders an empty picker and
+ // drops the stage's own saved pin out of the dropdown.
+ const localStageModels = localModelIds.map(id => ({
+ id,
+ name: id,
+ capabilities: capabilitiesByBackend?.[localBackend]?.[id],
+ }));
+ const stageModels = posture && localBackend && (isNoToolStage || localStageModels.length > 0)
+ ? localStageModels
: effortAwareModelOptions(stageProvider, stage.model);
const selectionPolicy = posture ? selectionPolicies[posture] : undefined;
const stageProviderId = stage.providerId || '';
@@ -203,6 +224,7 @@ export default function PipelineStageConfig({ taskType, config, providers, onUpd
)}
{!isSecurityStage && (
{localModelsLoading
? 'Loading installed local model capability reports…'
- : `Tool-free stage. Eligible on this install: ${eligibleProviders.map((p) => p.name || p.id).join(', ')}. A local model must additionally report no tool-calling capability; a cloud model is held tool-free by the provider's own enforced flags. Leave the provider unset to use the first eligible one. It returns only a binary allowlist; the final stage never receives rejected content.`}
+ : NO_TOOL_STAGE_NOTE}
)}
{isActionsStage && eligibleProviders?.length > 0 && (
- {actionsStageNote(eligibleProviders)}
+ {/* On a local provider this stage's model list comes from the
+ daemon too, so say so while it loads rather than leaving an
+ empty dropdown with a note that reads as if it were ready. */}
+ {localBackend && localModelsLoading
+ ? 'Loading installed local models…'
+ : actionsStageNote(eligibleProviders)}
)}
diff --git a/client/src/components/cos/tabs/schedule/PipelineStageConfig.test.jsx b/client/src/components/cos/tabs/schedule/PipelineStageConfig.test.jsx
index 0b0c8d9dcc..fbadc00fe2 100644
--- a/client/src/components/cos/tabs/schedule/PipelineStageConfig.test.jsx
+++ b/client/src/components/cos/tabs/schedule/PipelineStageConfig.test.jsx
@@ -1,21 +1,30 @@
-import { describe, expect, it, vi } from 'vitest';
+import { beforeEach, describe, expect, it, vi } from 'vitest';
import { fireEvent, render, screen, waitFor } from '@testing-library/react';
import { MemoryRouter } from 'react-router';
-vi.mock('../../../../hooks/useLocalModels', () => ({
- default: () => ({
- ollama: ['safe-model', 'tool-model'],
- lmstudio: [],
- capabilitiesByBackend: {
- ollama: {
- 'safe-model': ['chat'],
- 'tool-model': ['chat', 'tools'],
- },
+// The installed-local-model report, mutable so a test can model a daemon that
+// is stopped or still loading (both of which `useLocalModels` reports as `[]`).
+const INSTALLED_LOCAL_MODELS = {
+ ollama: ['safe-model', 'tool-model'],
+ lmstudio: [],
+ capabilitiesByBackend: {
+ ollama: {
+ 'safe-model': ['chat'],
+ 'tool-model': ['chat', 'tools'],
},
- loading: false,
- }),
+ },
+ loading: false,
+};
+let localModels = { ...INSTALLED_LOCAL_MODELS };
+
+vi.mock('../../../../hooks/useLocalModels', () => ({
+ default: () => localModels,
}));
+beforeEach(() => {
+ localModels = { ...INSTALLED_LOCAL_MODELS };
+});
+
import PipelineStageConfig from './PipelineStageConfig';
const STAGES = [
@@ -174,14 +183,16 @@ describe('PipelineStageConfig — posture-driven eligibility', () => {
expect([...providerSelects[1].options].map((o) => o.value)).toEqual(['', 'grok-cli']);
// A non-local provider's own catalog is selectable — the installed-local
// model list only applies where PortOS can probe capabilities.
- expect(screen.getAllByText(/Eligible on this install: Grok/).length).toBe(2);
+ expect(screen.getByText(/^Tool-free stage\./)).toBeInTheDocument();
+ expect(screen.getByText(/^Sandboxed stage\./)).toBeInTheDocument();
});
// The bug behind #5906's blocked run: the CLI records were disabled and the
// TUI records enabled, so the note listed three "eligible" providers while
// the dropdown offered only the placeholder. Eligibility now follows what the
- // server publishes for the ENABLED records — TUI siblings included.
- it('lists only enabled providers as eligible, matching what the dropdown offers', () => {
+ // server publishes for the ENABLED records — TUI siblings included — and the
+ // dropdown is the only place that list is rendered.
+ it('offers only enabled providers in the dropdown, and names none of them in the note', () => {
renderWith([
{ id: 'codex', name: 'Codex CLI', type: 'cli', command: 'codex', enabled: false, models: ['gpt-5.6'], publicReviewPostures: ['no-tool', 'sandboxed-actions'] },
{ id: 'codex-tui', name: 'Codex TUI', type: 'tui', command: 'codex', enabled: true, models: ['gpt-5.6'], publicReviewPostures: ['no-tool', 'sandboxed-actions'] },
@@ -189,9 +200,11 @@ describe('PipelineStageConfig — posture-driven eligibility', () => {
]);
const providerSelects = screen.getAllByLabelText('Provider');
expect([...providerSelects[1].options].map((o) => o.value)).toEqual(['', 'codex-tui']);
- const note = screen.getByText(/Sandboxed stage\. Eligible on this install:/);
- expect(note.textContent).toContain('Eligible on this install: Codex TUI.');
+ // The dropdown IS the eligible list; the note must not re-name providers,
+ // least of all the disabled ones.
+ const note = screen.getByText(/^Sandboxed stage\./);
expect(note.textContent).not.toContain('Grok Build CLI');
+ expect(note.textContent).not.toContain('Codex CLI');
});
it('warns instead of silently offering nothing when a stage has no eligible provider', () => {
@@ -212,9 +225,96 @@ describe('PipelineStageConfig — posture-driven eligibility', () => {
const providerSelects = screen.getAllByLabelText('Provider');
expect([...providerSelects[0].options].map((o) => o.value)).toEqual(['', 'codex-tui']);
expect([...providerSelects[1].options].map((o) => o.value)).toEqual(['', 'codex-tui', 'opencode-tui']);
- const note = screen.getByText(/Sandboxed stage\. Eligible on this install:/);
- expect(note.textContent).toContain('Eligible on this install: Codex TUI, OpenCode TUI.');
+ const note = screen.getByText(/^Sandboxed stage\./);
+ // The eligible set is the dropdown's job; the note only separates the
+ // vendor-sandboxed providers from the worktree-only ones.
+ expect(note.textContent).not.toContain('Eligible on this install');
expect(note.textContent).toContain("OS-sandboxed by the vendor's own recipe: Codex TUI.");
expect(note.textContent).toContain('isolated by the disposable worktree only: OpenCode TUI.');
});
+
+ // A local runtime's daemon is the authority on what it serves; the provider
+ // record's `models` array is a cached snapshot. The tool-free gate already
+ // read the daemon, but the sandboxed actions stage read the snapshot — so a
+ // stage on a local provider could only be pinned to models that had since
+ // been removed, and never to one just pulled.
+ it('offers the installed local models for a local-backed ACTIONS stage', () => {
+ const localProvider = {
+ id: 'opencode-ollama-tui',
+ name: 'OpenCode Ollama TUI',
+ type: 'tui',
+ command: 'opencode',
+ models: ['stale-cached-model'],
+ publicReviewPostures: ['no-tool', 'sandboxed-actions'],
+ publicReviewEnforcedPostures: ['no-tool'],
+ };
+ render(
+
+ {}}
+ />
+ ,
+ );
+
+ const modelSelects = screen.getAllByLabelText('Model');
+ // The daemon's installed models, NOT the record's `stale-cached-model`.
+ expect([...modelSelects[1].options].map((o) => o.value)).toEqual(['', 'safe-model', 'tool-model']);
+ });
+});
+
+// `useLocalModels` reports "not fetched yet" and "the daemon listed nothing"
+// identically, as `[]` — so an empty list is not evidence the daemon serves no
+// models. The actions stage has no capability gate, so it must fall back to the
+// record's catalog rather than render an empty picker that also drops the
+// stage's own saved pin. The tool-free gate deliberately does NOT: a model with
+// no probeable capability report is not selectable there at all.
+describe('PipelineStageConfig — local daemon unreachable', () => {
+ const LOCAL = {
+ id: 'opencode-ollama-tui',
+ name: 'OpenCode Ollama TUI',
+ type: 'tui',
+ command: 'opencode',
+ models: ['cached-a', 'cached-b'],
+ publicReviewPostures: ['no-tool', 'sandboxed-actions'],
+ publicReviewEnforcedPostures: ['no-tool'],
+ };
+
+ it('falls back to the record catalog for the actions stage, but not for the gate', () => {
+ localModels = { ollama: [], lmstudio: [], capabilitiesByBackend: {}, loading: false };
+ render(
+
+ {}}
+ />
+ ,
+ );
+ const modelSelects = screen.getAllByLabelText('Model');
+ // The gate offers nothing from the catalog — `cached-a` is present only
+ // because ProviderModelSelector keeps a disallowed *selected* value visible
+ // rather than blanking the control, and `cached-b` proves the list itself
+ // was not consulted.
+ expect([...modelSelects[0].options].map((o) => o.value)).toEqual(['', 'cached-a']);
+ // The actions stage gets the whole record catalog instead of an empty
+ // picker that would also drop its own saved pin (nothing re-adds it there:
+ // its policy allows every model, so the disallowed affordance never fires).
+ expect([...modelSelects[1].options].map((o) => o.value)).toEqual(['', 'cached-a', 'cached-b']);
+ });
});
diff --git a/client/src/components/cos/tabs/schedule/TaskConfigDrawer.jsx b/client/src/components/cos/tabs/schedule/TaskConfigDrawer.jsx
index 3ff076578f..9626905092 100644
--- a/client/src/components/cos/tabs/schedule/TaskConfigDrawer.jsx
+++ b/client/src/components/cos/tabs/schedule/TaskConfigDrawer.jsx
@@ -16,8 +16,9 @@ import PerAppOverrideList from './PerAppOverrideList';
// - Stage config — per-stage provider/model (only when the task has a
// pipeline; count = number of stages)
// - Global defaults — schedule/provider/prompt controls (always present)
-// - Per-app overrides — per-app enablement (only when there are active apps;
-// count = number of active apps)
+// - Per-app options — turns the task on/off per app, plus that app's
+// optional per-app settings (only when there are
+// active apps; count = number of active apps)
// The active tab lives in the `taskTab` URL param so it survives reload and is
// shareable. TaskHeader (identity + badges) stays at the top of every tab.
export default function TaskConfigDrawer({
@@ -28,6 +29,7 @@ export default function TaskConfigDrawer({
onUpdate,
onTrigger,
providers,
+ providersLoaded,
activeProviderId,
apps,
onUpdateOverride,
@@ -44,11 +46,11 @@ export default function TaskConfigDrawer({
const hasOverrides = activeApps.length > 0;
// Tabs are dynamic: a task without a pipeline hides Stage config, and an
- // install with no active apps hides Per-app overrides — never an empty tab.
+ // install with no active apps hides Per-app options — never an empty tab.
const tabs = [
hasStages && { id: 'stages', label: 'Stage config', count: stages.length },
{ id: 'global', label: 'Global defaults' },
- hasOverrides && { id: 'overrides', label: 'Per-app overrides', count: activeApps.length },
+ hasOverrides && { id: 'overrides', label: 'Per-app options', count: activeApps.length },
].filter(Boolean);
const tabIds = tabs.map(t => t.id);
const defaultTab = hasStages ? 'stages' : 'global';
@@ -75,6 +77,7 @@ export default function TaskConfigDrawer({
taskType={taskType}
config={config}
providers={providers}
+ providersLoaded={providersLoaded}
onUpdate={onUpdate}
updating={updating}
setUpdating={setUpdating}
@@ -89,6 +92,7 @@ export default function TaskConfigDrawer({
onTrigger={onTrigger}
category="appImprovement"
providers={providers}
+ providersLoaded={providersLoaded}
activeProviderId={activeProviderId}
apps={apps}
updating={updating}
@@ -105,6 +109,7 @@ export default function TaskConfigDrawer({
config={config}
apps={apps}
providers={providers}
+ providersLoaded={providersLoaded}
onUpdateOverride={onUpdateOverride}
onBulkToggleOverride={onBulkToggleOverride}
/>
diff --git a/client/src/components/cos/tabs/schedule/TaskConfigDrawer.test.jsx b/client/src/components/cos/tabs/schedule/TaskConfigDrawer.test.jsx
index 2c6f0f9621..a8a9e09608 100644
--- a/client/src/components/cos/tabs/schedule/TaskConfigDrawer.test.jsx
+++ b/client/src/components/cos/tabs/schedule/TaskConfigDrawer.test.jsx
@@ -65,10 +65,10 @@ describe('TaskConfigDrawer tabbed layout', () => {
renderDrawer();
expect(screen.getByRole('tab', { name: /Stage config/ })).toBeInTheDocument();
expect(screen.getByRole('tab', { name: /Global defaults/ })).toBeInTheDocument();
- expect(screen.getByRole('tab', { name: /Per-app overrides/ })).toBeInTheDocument();
+ expect(screen.getByRole('tab', { name: /Per-app options/ })).toBeInTheDocument();
// Counts surface: 2 stages, 1 active (non-archived) app.
expect(screen.getByRole('tab', { name: /Stage config/ })).toHaveTextContent('2');
- expect(screen.getByRole('tab', { name: /Per-app overrides/ })).toHaveTextContent('1');
+ expect(screen.getByRole('tab', { name: /Per-app options/ })).toHaveTextContent('1');
});
it('opens on Stage config and mounts only the active tab section', () => {
@@ -78,13 +78,13 @@ describe('TaskConfigDrawer tabbed layout', () => {
expect(screen.queryByTestId('override-list')).not.toBeInTheDocument();
});
- it('switches to Global defaults and Per-app overrides on tab click', () => {
+ it('switches to Global defaults and Per-app options on tab click', () => {
renderDrawer();
fireEvent.click(screen.getByRole('tab', { name: /Global defaults/ }));
expect(screen.getByTestId('global-config')).toHaveTextContent('global:do:next');
expect(screen.queryByTestId('stage-config')).not.toBeInTheDocument();
- fireEvent.click(screen.getByRole('tab', { name: /Per-app overrides/ }));
+ fireEvent.click(screen.getByRole('tab', { name: /Per-app options/ }));
expect(screen.getByTestId('override-list')).toHaveTextContent('overrides:do:next');
expect(screen.queryByTestId('global-config')).not.toBeInTheDocument();
});
@@ -106,9 +106,9 @@ describe('TaskConfigDrawer tabbed layout', () => {
expect(screen.getByTestId('global-config')).toBeInTheDocument();
});
- it('hides the Per-app overrides tab when there are no active apps', () => {
+ it('hides the Per-app options tab when there are no active apps', () => {
renderDrawer({ apps: [{ id: 'a', name: 'A', archived: true }] });
- expect(screen.queryByRole('tab', { name: /Per-app overrides/ })).not.toBeInTheDocument();
+ expect(screen.queryByRole('tab', { name: /Per-app options/ })).not.toBeInTheDocument();
});
it('renders nothing when config is not yet loaded', () => {
diff --git a/client/src/components/cos/tabs/schedule/TaskModelQuickControls.jsx b/client/src/components/cos/tabs/schedule/TaskModelQuickControls.jsx
index 673fde41a8..39cea3fe21 100644
--- a/client/src/components/cos/tabs/schedule/TaskModelQuickControls.jsx
+++ b/client/src/components/cos/tabs/schedule/TaskModelQuickControls.jsx
@@ -7,7 +7,7 @@ import ProviderModelSelector from '../../../ProviderModelSelector';
//
// `highlightToolUse` is on because a scheduled task IS an agent run: a task
// pinned to a local model that can't call tools narrates instead of working.
-export default function TaskModelQuickControls({ pins, providers, disabled = false }) {
+export default function TaskModelQuickControls({ pins, providers, loading = false, disabled = false }) {
const {
providerId, model, effort, effectiveProviderId, defaultProviderLabel,
availableModels, saving, changeProvider, changeModel, changeEffort,
@@ -30,6 +30,7 @@ export default function TaskModelQuickControls({ pins, providers, disabled = fal
alwaysShowModel
compact
highlightToolUse
+ loading={loading}
disabled={disabled || saving}
/>
diff --git a/client/src/components/dashboard/LayoutEditor.jsx b/client/src/components/dashboard/LayoutEditor.jsx
index 0adb2ba0db..0043877561 100644
--- a/client/src/components/dashboard/LayoutEditor.jsx
+++ b/client/src/components/dashboard/LayoutEditor.jsx
@@ -327,9 +327,9 @@ export default function LayoutEditor({ layouts, activeLayoutId, limits, onClose,
{meta?.label ?? id}
{!meta &&
);
})}
diff --git a/client/src/components/dashboard/builtins/DailyDriverWidget.jsx b/client/src/components/dashboard/builtins/DailyDriverWidget.jsx
index 553e627ae8..a9e87ea96d 100644
--- a/client/src/components/dashboard/builtins/DailyDriverWidget.jsx
+++ b/client/src/components/dashboard/builtins/DailyDriverWidget.jsx
@@ -118,7 +118,7 @@ export default function DailyDriverWidget({ dashboardState }) {
disabled={dismissing}
aria-label="Dismiss for today"
title="Dismiss for today"
- className="ml-auto p-1 rounded text-gray-500 hover:text-white hover:bg-port-border/60 disabled:opacity-50"
+ className="min-h-[44px] min-w-[44px] inline-flex items-center justify-center ml-auto p-1 rounded text-gray-500 hover:text-white hover:bg-port-border/60 disabled:opacity-50"
>
diff --git a/client/src/components/digital-twin/ListEnrichment.jsx b/client/src/components/digital-twin/ListEnrichment.jsx
index a812b0cefc..5a6afc2038 100644
--- a/client/src/components/digital-twin/ListEnrichment.jsx
+++ b/client/src/components/digital-twin/ListEnrichment.jsx
@@ -194,7 +194,7 @@ export default function ListEnrichment({
{items.length > 1 && (