diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 410e8a77..cb35760f 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -30,7 +30,7 @@
 	"dependencies": {
 		"@lucide/vue": "^1.41.0",
 		"@nvisy/console": "*",
-		"@nvisy/sdk": "^0.48.0",
+		"@nvisy/sdk": "^0.49.0",
 		"@tauri-apps/api": "^2",
 		"@tauri-apps/plugin-deep-link": "^2",
 		"@tauri-apps/plugin-http": "^2.6.0",
diff --git a/apps/web/package.json b/apps/web/package.json
index dee49372..21254b42 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -19,7 +19,7 @@
 	"dependencies": {
 		"@nuxtjs/device": "^4.0.0",
 		"@nvisy/console": "*",
-		"@nvisy/sdk": "^0.48.0",
+		"@nvisy/sdk": "^0.49.0",
 		"jszip": "^3.10.1",
 		"nuxt": "^4.5.2",
 		"vue": "^3.5.42",
diff --git a/package-lock.json b/package-lock.json
index 5c35ccd5..af089257 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -29,7 +29,7 @@
 			"dependencies": {
 				"@lucide/vue": "^1.41.0",
 				"@nvisy/console": "*",
-				"@nvisy/sdk": "^0.48.0",
+				"@nvisy/sdk": "^0.49.0",
 				"@tauri-apps/api": "^2",
 				"@tauri-apps/plugin-deep-link": "^2",
 				"@tauri-apps/plugin-http": "^2.6.0",
@@ -48,7 +48,7 @@
 			"dependencies": {
 				"@nuxtjs/device": "^4.0.0",
 				"@nvisy/console": "*",
-				"@nvisy/sdk": "^0.48.0",
+				"@nvisy/sdk": "^0.49.0",
 				"jszip": "^3.10.1",
 				"nuxt": "^4.5.2",
 				"vue": "^3.5.42",
@@ -3742,9 +3742,9 @@
 			"link": true
 		},
 		"node_modules/@nvisy/sdk": {
-			"version": "0.48.0",
-			"resolved": "https://registry.npmjs.org/@nvisy/sdk/-/sdk-0.48.0.tgz",
-			"integrity": "sha512-82WkJU3NcOq7vF1vqmrLk6wbhnjz/4M9syuY4DyVXSpbXHcB5L17/1g5cCa2Xny38Sys6g+HZjdwmSPgbkckCA==",
+			"version": "0.49.0",
+			"resolved": "https://registry.npmjs.org/@nvisy/sdk/-/sdk-0.49.0.tgz",
+			"integrity": "sha512-yLD7JiXSunJ5K3wPS35TRcHA2TEz3K2Cu4N15OfSGtyMmrokRxninYPxCdASHbYLPcnCaBBBQr/G4NnqsoWvKA==",
 			"license": "MIT",
 			"dependencies": {
 				"openapi-fetch": "^0.17.0"
@@ -19033,7 +19033,7 @@
 				"@lucide/vue": "^1.41.0",
 				"@nuxtjs/color-mode": "^4.0.0",
 				"@nuxtjs/i18n": "^10.6.0",
-				"@nvisy/sdk": "^0.48.0",
+				"@nvisy/sdk": "^0.49.0",
 				"@pinia/colada": "^1.4.4",
 				"@pinia/colada-nuxt": "^1.1.0",
 				"@pinia/nuxt": "^1.0.2",
diff --git a/packages/console/app/components/layout/AppChat.vue b/packages/console/app/components/layout/AppChat.vue
new file mode 100644
index 00000000..c4142ea0
--- /dev/null
+++ b/packages/console/app/components/layout/AppChat.vue
@@ -0,0 +1,61 @@
+<script setup lang="ts">
+import { Sheet, SheetContent } from "#console/components/ui/sheet";
+import SheetHeader from "#console/components/ui/sheet/SheetHeader.vue";
+import SheetTitle from "#console/components/ui/sheet/SheetTitle.vue";
+import SheetDescription from "#console/components/ui/sheet/SheetDescription.vue";
+import { useSidebar } from "#console/components/ui/sidebar";
+import AppChatPanel from "#console/components/layout/chat/AppChatPanel.vue";
+
+/**
+ * The global workspace chat rail. On desktop it fills the shell's `[chat]` grid
+ * track (see SidebarProvider), which reflows the content card when open; on
+ * mobile it's an overlay sheet from the right so a narrow viewport isn't
+ * squeezed. Both host the same `AppChatPanel`. Mounted once in the shell layout.
+ */
+const { t } = useI18n();
+const { isOpen, close } = useChatPanel();
+const { isMobile } = useSidebar();
+const { loadSessions } = useChat();
+
+// Load the workspace's chat sessions the first time the rail opens, so an unused
+// chat never fetches on every page.
+watch(
+	isOpen,
+	(open) => {
+		if (open) loadSessions();
+	},
+	{ immediate: true },
+);
+</script>
+
+<template>
+  <Sheet
+    v-if="isMobile"
+    :open="isOpen"
+    @update:open="(value: boolean) => !value && close()"
+  >
+    <SheetContent side="right" class="w-[min(22rem,90vw)] bg-sidebar p-0">
+      <SheetHeader class="sr-only">
+        <SheetTitle>{{ t("chat.title") }}</SheetTitle>
+        <SheetDescription>{{ t("chat.description") }}</SheetDescription>
+      </SheetHeader>
+      <AppChatPanel />
+    </SheetContent>
+  </Sheet>
+
+  <!-- `v-show` (not `v-if`) keeps the streamed conversation mounted across
+       toggles; the track collapses to zero width when closed (see the grid). -->
+  <aside
+    v-else
+    v-show="isOpen"
+    class="chat-rail bg-sidebar flex h-full min-h-0 min-w-0 flex-col overflow-hidden"
+  >
+    <AppChatPanel />
+  </aside>
+</template>
+
+<style scoped>
+.chat-rail {
+  grid-column: chat / -1;
+}
+</style>
diff --git a/packages/console/app/components/layout/AppHeader.vue b/packages/console/app/components/layout/AppHeader.vue
index ee81f43f..5f6e6707 100644
--- a/packages/console/app/components/layout/AppHeader.vue
+++ b/packages/console/app/components/layout/AppHeader.vue
@@ -1,6 +1,8 @@
 <script setup lang="ts">
+import { Sparkles } from "@lucide/vue";
 import { Separator } from "#console/components/ui/separator";
 import { SidebarTrigger } from "#console/components/ui/sidebar";
+import { Button } from "#console/components/ui/button";
 import {
 	Breadcrumb,
 	BreadcrumbItem,
@@ -9,6 +11,13 @@ import {
 } from "#console/components/ui/breadcrumb";
 import { NotificationsDropdown } from "#console/components/layout/header";
 
+const { toggle: toggleChat, isOpen: chatOpen } = useChatPanel();
+// The chat is workspace-scoped; hide its toggle until a workspace is resolved so
+// opening the panel can't fire workspace-required calls (loadSessions) with no
+// active workspace.
+const { currentWorkspaceSlug } = useWorkspaces();
+const hasWorkspace = computed(() => !!currentWorkspaceSlug.value);
+
 const route = useRoute();
 
 // The page category (a `header.category.*` i18n key) is set per page via
@@ -65,6 +74,18 @@ const pageCategory = computed(() =>
 
     <!-- Right: persistent app chrome. -->
     <div class="flex shrink-0 items-center gap-2">
+      <Button
+        v-if="hasWorkspace"
+        variant="ghost"
+        size="icon-sm"
+        class="size-8 text-muted-foreground hover:text-foreground"
+        :class="chatOpen && 'bg-muted text-foreground'"
+        :aria-label="t('chat.toggle')"
+        :aria-pressed="chatOpen"
+        @click="toggleChat"
+      >
+        <Sparkles :size="18" />
+      </Button>
       <NotificationsDropdown />
     </div>
   </header>
diff --git a/packages/console/app/components/layout/chat/AppChatPanel.vue b/packages/console/app/components/layout/chat/AppChatPanel.vue
new file mode 100644
index 00000000..d016585e
--- /dev/null
+++ b/packages/console/app/components/layout/chat/AppChatPanel.vue
@@ -0,0 +1,210 @@
+<script setup lang="ts">
+import { Plus, X, Sparkles, Trash2, MessageSquarePlus } from "@lucide/vue";
+import { Button } from "#console/components/ui/button";
+import {
+	DropdownMenu,
+	DropdownMenuContent,
+	DropdownMenuItem,
+	DropdownMenuSeparator,
+	DropdownMenuTrigger,
+} from "#console/components/ui/dropdown-menu";
+import ChatMessage from "#console/components/layout/chat/ChatMessage.vue";
+import ChatInput from "#console/components/layout/chat/ChatInput.vue";
+
+const { t } = useI18n();
+const { wLink } = useWorkspaceLink();
+const { close } = useChatPanel();
+
+const {
+	sessions,
+	currentSession,
+	currentSessionId,
+	messages,
+	isStreaming,
+	needsProvider,
+	error,
+	selectSession,
+	newSession,
+	deleteSession,
+	sendMessage,
+} = useChat();
+
+const draft = ref("");
+const listEl = ref<HTMLElement | null>(null);
+
+// A send/stream failure maps to actionable copy; anything else is unexpected.
+const errorMessage = computed(() =>
+	error.value ? t(`chat.error.${error.value}`) : null,
+);
+
+// Keep the newest message in view as the conversation grows and as the reply
+// streams in — but only when the user is already near the bottom, so scrolling
+// up to read earlier text mid-stream isn't yanked back down.
+function nearBottom(): boolean {
+	const el = listEl.value;
+	if (!el) return true;
+	return el.scrollHeight - el.scrollTop - el.clientHeight < 80;
+}
+function scrollToBottom() {
+	nextTick(() => {
+		const el = listEl.value;
+		if (el) el.scrollTop = el.scrollHeight;
+	});
+}
+// A new message (the user's own send, or a fresh assistant turn) always scrolls;
+// streaming tokens only when the user hasn't scrolled away.
+watch(() => messages.value.length, scrollToBottom);
+watch(
+	() => messages.value.at(-1)?.content,
+	() => {
+		if (isStreaming.value && nearBottom()) scrollToBottom();
+	},
+);
+onMounted(scrollToBottom);
+
+async function handleSend() {
+	const text = draft.value;
+	draft.value = "";
+	await sendMessage(text);
+	// A failure before the message was accepted (e.g. session create failed)
+	// leaves the text unsent — restore it so the user doesn't lose what they typed.
+	if (error.value === "send") draft.value = text;
+}
+
+function handleRetry() {
+	if (isStreaming.value) return;
+	const lastUser = [...messages.value].reverse().find((m) => m.role === "user");
+	if (lastUser) sendMessage(lastUser.content);
+}
+</script>
+
+<template>
+  <div class="flex h-full min-h-0 flex-col">
+    <!-- Header: session switcher, new chat, close. -->
+    <div
+      class="flex h-11 shrink-0 items-center gap-1.5 border-b border-border/50 px-3"
+    >
+      <Sparkles :size="16" class="shrink-0 text-muted-foreground" />
+      <DropdownMenu>
+        <DropdownMenuTrigger as-child>
+          <button
+            type="button"
+            class="min-w-0 flex-1 truncate rounded-md px-1.5 py-1 text-left text-sm font-medium outline-none hover:bg-muted focus-visible:ring-2 focus-visible:ring-ring/50"
+          >
+            {{ currentSession?.title ?? t("chat.newChat") }}
+          </button>
+        </DropdownMenuTrigger>
+        <DropdownMenuContent align="start" class="w-64">
+          <DropdownMenuItem @select="newSession">
+            <MessageSquarePlus :size="15" class="mr-2" />
+            {{ t("chat.newChat") }}
+          </DropdownMenuItem>
+          <template v-if="sessions.length">
+            <DropdownMenuSeparator />
+            <div
+              v-for="s in sessions"
+              :key="s.id"
+              class="group/session flex items-center"
+            >
+              <DropdownMenuItem
+                class="min-w-0 flex-1"
+                :class="s.id === currentSessionId && 'bg-muted'"
+                @select="selectSession(s.id)"
+              >
+                <span class="truncate">{{ s.title }}</span>
+              </DropdownMenuItem>
+              <button
+                type="button"
+                class="mr-1 rounded p-1 text-muted-foreground opacity-0 hover:text-destructive group-hover/session:opacity-100"
+                :aria-label="t('chat.deleteSession')"
+                @click.stop="deleteSession(s.id)"
+              >
+                <Trash2 :size="13" />
+              </button>
+            </div>
+          </template>
+        </DropdownMenuContent>
+      </DropdownMenu>
+      <Button
+        variant="ghost"
+        size="icon-sm"
+        class="size-7 shrink-0 text-muted-foreground hover:text-foreground"
+        :aria-label="t('chat.newChat')"
+        @click="newSession"
+      >
+        <Plus :size="16" />
+      </Button>
+      <Button
+        variant="ghost"
+        size="icon-sm"
+        class="size-7 shrink-0 text-muted-foreground hover:text-foreground"
+        :aria-label="t('chat.close')"
+        @click="close"
+      >
+        <X :size="16" />
+      </Button>
+    </div>
+
+    <!-- No inference provider: prompt to connect one instead of erroring. -->
+    <div
+      v-if="needsProvider"
+      class="flex flex-1 flex-col items-center justify-center gap-3 p-6 text-center"
+    >
+      <div
+        class="flex size-10 items-center justify-center rounded-lg bg-muted/50"
+      >
+        <Sparkles :size="20" class="text-muted-foreground" />
+      </div>
+      <p class="text-sm font-medium text-foreground">
+        {{ t("chat.needsProviderTitle") }}
+      </p>
+      <p class="max-w-xs text-xs text-muted-foreground">
+        {{ t("chat.needsProviderDescription") }}
+      </p>
+      <Button as-child size="sm" variant="outline">
+        <NuxtLink :to="wLink('/integrations/providers')">
+          {{ t("chat.needsProviderCta") }}
+        </NuxtLink>
+      </Button>
+    </div>
+
+    <!-- Empty conversation. -->
+    <div
+      v-else-if="messages.length === 0"
+      class="flex flex-1 flex-col items-center justify-center gap-3 p-6 text-center"
+    >
+      <div
+        class="flex size-10 items-center justify-center rounded-lg bg-muted/50"
+      >
+        <Sparkles :size="20" class="text-muted-foreground" />
+      </div>
+      <p class="text-sm font-medium text-foreground">
+        {{ t("chat.emptyTitle") }}
+      </p>
+      <p class="max-w-xs text-xs text-muted-foreground">
+        {{ t("chat.emptyDescription") }}
+      </p>
+    </div>
+
+    <!-- Conversation. -->
+    <div v-else ref="listEl" class="flex-1 space-y-4 overflow-y-auto px-3 py-4">
+      <ChatMessage
+        v-for="m in messages"
+        :key="m.id"
+        :message="m"
+        @try-again="handleRetry"
+      />
+    </div>
+
+    <!-- Input, hidden while the no-provider CTA is showing. -->
+    <div v-if="!needsProvider" class="shrink-0 border-t border-border/50 p-3">
+      <p
+        v-if="errorMessage"
+        class="mb-2 rounded-md border border-destructive/20 bg-destructive/10 px-2.5 py-1.5 text-xs text-destructive"
+      >
+        {{ errorMessage }}
+      </p>
+      <ChatInput v-model="draft" :disabled="isStreaming" @send="handleSend" />
+    </div>
+  </div>
+</template>
diff --git a/packages/console/app/components/layout/chat/ChatInput.vue b/packages/console/app/components/layout/chat/ChatInput.vue
new file mode 100644
index 00000000..64e3e022
--- /dev/null
+++ b/packages/console/app/components/layout/chat/ChatInput.vue
@@ -0,0 +1,54 @@
+<script setup lang="ts">
+import { ArrowUp } from "@lucide/vue";
+import { Button } from "#console/components/ui/button";
+import { Textarea } from "#console/components/ui/textarea";
+
+const value = defineModel<string>({ required: true });
+
+defineProps<{
+	disabled?: boolean;
+}>();
+
+const emit = defineEmits<{
+	send: [];
+}>();
+
+const { t } = useI18n();
+
+function handleSend() {
+	if (!value.value.trim()) return;
+	emit("send");
+	value.value = "";
+}
+
+// Enter submits, but not mid-IME composition — pressing Enter to pick a CJK
+// candidate must not send (and clear) the draft. Guard before preventing the
+// default so the composition keystroke still reaches the textarea.
+function onEnter(event: KeyboardEvent) {
+	if (event.isComposing) return;
+	event.preventDefault();
+	handleSend();
+}
+</script>
+
+<template>
+  <div
+    class="relative rounded-lg border border-border bg-background focus-within:border-ring focus-within:ring-[3px] focus-within:ring-ring/50"
+  >
+    <Textarea
+      v-model="value"
+      :placeholder="t('chat.placeholder')"
+      class="max-h-40 min-h-[64px] resize-none border-0 pr-12 shadow-none focus-visible:ring-0"
+      @keydown.enter.exact="onEnter"
+    />
+    <Button
+      size="icon-sm"
+      class="absolute bottom-2 right-2 size-8 rounded-md"
+      :disabled="!value.trim() || disabled"
+      :aria-label="t('chat.send')"
+      @click="handleSend"
+    >
+      <ArrowUp :size="16" />
+    </Button>
+  </div>
+</template>
diff --git a/packages/console/app/components/layout/chat/ChatMessage.vue b/packages/console/app/components/layout/chat/ChatMessage.vue
new file mode 100644
index 00000000..01085968
--- /dev/null
+++ b/packages/console/app/components/layout/chat/ChatMessage.vue
@@ -0,0 +1,104 @@
+<script setup lang="ts">
+import { Copy, Check, RefreshCw } from "@lucide/vue";
+import { Button } from "#console/components/ui/button";
+
+interface Message {
+	id: string;
+	role: "user" | "assistant";
+	content: string;
+	createdAt: string;
+	streaming?: boolean;
+}
+
+const props = defineProps<{
+	message: Message;
+}>();
+
+const emit = defineEmits<{
+	tryAgain: [id: string];
+}>();
+
+const { t, locale } = useI18n();
+
+const copied = ref(false);
+
+const timestamp = computed(() =>
+	new Date(props.message.createdAt).toLocaleTimeString(locale.value, {
+		hour: "2-digit",
+		minute: "2-digit",
+	}),
+);
+
+async function handleCopy() {
+	try {
+		await navigator.clipboard.writeText(props.message.content);
+	} catch {
+		// Clipboard unavailable (permissions, insecure context) — do nothing rather
+		// than leaving an unhandled rejection or a false "copied" state.
+		return;
+	}
+	copied.value = true;
+	setTimeout(() => {
+		copied.value = false;
+	}, 2000);
+}
+</script>
+
+<template>
+  <div
+    :class="[
+      'group flex flex-col gap-1',
+      message.role === 'user' ? 'items-end' : 'items-start',
+    ]"
+  >
+    <div
+      :class="[
+        'max-w-[85%] break-words rounded-lg px-3 py-2 text-sm',
+        message.role === 'user'
+          ? 'bg-primary text-primary-foreground'
+          : 'bg-muted text-foreground',
+      ]"
+    >
+      <p class="whitespace-pre-wrap break-words">{{ message.content }}</p>
+      <!-- A blinking caret while the assistant reply is still streaming in. -->
+      <span
+        v-if="message.streaming"
+        class="ml-0.5 inline-block h-3.5 w-1.5 translate-y-0.5 animate-pulse rounded-xs bg-current"
+      />
+    </div>
+
+    <!-- Actions + timestamp, revealed on hover. Assistant replies can be copied,
+         rated, and retried; the user's own messages just show a copy control. -->
+    <div
+      v-if="!message.streaming"
+      :class="[
+        'flex items-center gap-1 opacity-0 transition-opacity group-hover:opacity-100',
+        message.role === 'user' ? 'flex-row-reverse' : 'flex-row',
+      ]"
+    >
+      <Button
+        variant="ghost"
+        size="icon-sm"
+        class="size-6 text-muted-foreground hover:text-foreground"
+        :aria-label="copied ? t('chat.copied') : t('chat.copy')"
+        @click="handleCopy"
+      >
+        <Check v-if="copied" :size="13" />
+        <Copy v-else :size="13" />
+      </Button>
+      <Button
+        v-if="message.role === 'assistant'"
+        variant="ghost"
+        size="icon-sm"
+        class="size-6 text-muted-foreground hover:text-foreground"
+        :aria-label="t('chat.retry')"
+        @click="emit('tryAgain', message.id)"
+      >
+        <RefreshCw :size="13" />
+      </Button>
+      <span class="text-xs tabular-nums text-muted-foreground">
+        {{ timestamp }}
+      </span>
+    </div>
+  </div>
+</template>
diff --git a/packages/console/app/components/layout/header/StudioFileTab.vue b/packages/console/app/components/layout/header/StudioFileTab.vue
index 2168fc6a..f72d5c51 100644
--- a/packages/console/app/components/layout/header/StudioFileTab.vue
+++ b/packages/console/app/components/layout/header/StudioFileTab.vue
@@ -87,7 +87,11 @@ function onDragOver(event: DragEvent) {
               />
             </div>
             <span class="flex-1 truncate text-sm">
-              {{ truncate(file.displayName, 20) }}
+              {{
+                file.displayName
+                  ? truncate(file.displayName, 20)
+                  : t("studio.tabs.loading")
+              }}
             </span>
             <Button
               :aria-label="t('studio.tabs.close')"
diff --git a/packages/console/app/components/layout/sidebar/AppSidebar.vue b/packages/console/app/components/layout/sidebar/AppSidebar.vue
index 1c3ca2a0..e99a09ef 100644
--- a/packages/console/app/components/layout/sidebar/AppSidebar.vue
+++ b/packages/console/app/components/layout/sidebar/AppSidebar.vue
@@ -12,6 +12,7 @@ import {
 	PenTool,
 	Workflow,
 	ShieldCheck,
+	Webhook as WebhookIcon,
 } from "@lucide/vue";
 import NavMain from "#console/components/layout/sidebar/NavMain.vue";
 import NavUser from "#console/components/layout/sidebar/NavUser.vue";
@@ -92,6 +93,12 @@ const navAutomation = computed(() => [
 ]);
 
 const navObservability = computed(() => [
+	{
+		title: t("sidebar.webhooks"),
+		url: wLink("/webhooks"),
+		icon: WebhookIcon,
+		isActive: false,
+	},
 	{
 		title: t("sidebar.analytics"),
 		url: wLink("/analytics"),
diff --git a/packages/console/app/components/pages/analytics/AnalyticsAreaChart.vue b/packages/console/app/components/pages/analytics/AnalyticsAreaChart.vue
index b12ef0da..b9c7aed8 100644
--- a/packages/console/app/components/pages/analytics/AnalyticsAreaChart.vue
+++ b/packages/console/app/components/pages/analytics/AnalyticsAreaChart.vue
@@ -12,12 +12,26 @@ import {
 } from "#console/components/ui/chart";
 import { formatShortDate } from "#console/utils/date";
 
-const props = defineProps<{ spec: AreaChartSpec }>();
+const props = defineProps<{ spec: AreaChartSpec; compact?: boolean }>();
+
+const { t } = useI18n();
 
 type Row = Record<string, number | Date>;
 
 const series = computed(() => props.spec.series);
 
+/**
+ * Whether the series carry any non-zero value. A window that is all zeros (a
+ * brand-new workspace, or a metric that hasn't fired yet) plots as a flat line
+ * pinned to the axis, which reads as broken rather than "quiet". In that case we
+ * show a quiet placeholder at the chart's height instead of an empty plot.
+ */
+const hasData = computed(() =>
+	props.spec.data.some((row) =>
+		series.value.some((s) => (row[s.key] as number) > 0),
+	),
+);
+
 /** ChartConfig keyed by series key (plus an optional header label entry). */
 const chartConfig = computed<ChartConfig>(() => {
 	const config: ChartConfig = {};
@@ -83,7 +97,18 @@ const crosshair = computed(() =>
 </script>
 
 <template>
-  <ChartContainer :config="chartConfig" class="aspect-auto h-[250px] w-full">
+  <div
+    v-if="!hasData"
+    class="flex w-full items-center justify-center text-xs text-muted-foreground/70"
+    :class="compact ? 'h-[150px]' : 'h-[200px]'"
+  >
+    {{ t("analytics.trends.noData") }}
+  </div>
+  <ChartContainer
+    v-else
+    :config="chartConfig"
+    :class="compact ? 'aspect-auto h-[150px] w-full' : 'aspect-auto h-[200px] w-full'"
+  >
     <VisXYContainer
       :data="spec.data"
       :svg-defs="svgDefs"
diff --git a/packages/console/app/components/pages/analytics/AnalyticsAreaChartLazy.vue b/packages/console/app/components/pages/analytics/AnalyticsAreaChartLazy.vue
index 9298f587..4158df37 100644
--- a/packages/console/app/components/pages/analytics/AnalyticsAreaChartLazy.vue
+++ b/packages/console/app/components/pages/analytics/AnalyticsAreaChartLazy.vue
@@ -16,14 +16,15 @@ const AnalyticsAreaChart = defineAsyncComponent(
 	() => import("./AnalyticsAreaChart.vue"),
 );
 
-defineProps<{ spec: AreaChartSpec }>();
+/** `compact` shrinks the chart height for the smaller supporting cards. */
+defineProps<{ spec: AreaChartSpec; compact?: boolean }>();
 </script>
 
 <template>
   <Suspense>
-    <AnalyticsAreaChart :spec="spec" />
+    <AnalyticsAreaChart :spec="spec" :compact="compact" />
     <template #fallback>
-      <Skeleton class="h-[250px] w-full" />
+      <Skeleton :class="compact ? 'h-[150px] w-full' : 'h-[200px] w-full'" />
     </template>
   </Suspense>
 </template>
diff --git a/packages/console/app/components/pages/analytics/DetectionActivityGrid.vue b/packages/console/app/components/pages/analytics/DetectionActivityGrid.vue
index 7c027d51..2fcf6803 100644
--- a/packages/console/app/components/pages/analytics/DetectionActivityGrid.vue
+++ b/packages/console/app/components/pages/analytics/DetectionActivityGrid.vue
@@ -148,12 +148,9 @@ const weekdayLabels = computed(() => {
 
 <template>
   <div class="rounded-xl border border-border/50 bg-card p-5">
-    <div class="mb-4 flex items-baseline justify-between gap-3">
-      <span
-        class="text-xs font-medium uppercase tracking-wide text-muted-foreground"
-      >
-        {{ t("analytics.activity.title") }}
-      </span>
+    <!-- The section header above this card already names it; here we keep only
+         the total, right-aligned, so it isn't double-titled. -->
+    <div class="mb-4 flex items-baseline justify-end">
       <span class="text-sm text-muted-foreground">
         <b class="font-semibold tabular-nums text-foreground">{{
           totalDetections.toLocaleString()
diff --git a/packages/console/app/components/pages/integrations/ConfigureProviderDialog.vue b/packages/console/app/components/pages/integrations/ConfigureProviderDialog.vue
new file mode 100644
index 00000000..68aebe0b
--- /dev/null
+++ b/packages/console/app/components/pages/integrations/ConfigureProviderDialog.vue
@@ -0,0 +1,231 @@
+<script setup lang="ts">
+import type { LlmConfig, Provider, UpdateProvider } from "@nvisy/sdk/datatypes";
+import type { LlmProvider } from "#console/utils/connections";
+import {
+	LLM_PROVIDERS,
+	providerIcon,
+	providerLabel,
+} from "#console/utils/connections";
+import { ChevronDown, Loader2 } from "@lucide/vue";
+import { Input } from "#console/components/ui/input";
+import { Label } from "#console/components/ui/label";
+import { Switch } from "#console/components/ui/switch";
+import { Button } from "#console/components/ui/button";
+import { DialogFooter } from "#console/components/ui/dialog";
+import ProviderDialogShell from "./ProviderDialogShell.vue";
+
+const { t } = useI18n();
+
+const props = withDefaults(
+	defineProps<{
+		open?: boolean;
+		provider?: Provider | null;
+		isLoading?: boolean;
+	}>(),
+	{ open: false, provider: null, isLoading: false },
+);
+
+const emit = defineEmits<{
+	(e: "update:open", value: boolean): void;
+	(e: "update", updates: UpdateProvider): void;
+}>();
+
+const displayName = ref("");
+const isActive = ref(true);
+// Editing credentials is opt-in: the stored key is never shown, and a config
+// update replaces the whole stored config, so we only send one when the user
+// deliberately re-enters the fields.
+const showCredentials = ref(false);
+const apiKey = ref("");
+const baseUrl = ref("");
+const defaultModel = ref("");
+
+const providerTag = computed(
+	() => (props.provider?.provider ?? null) as LlmProvider | null,
+);
+const meta = computed(() =>
+	providerTag.value ? (LLM_PROVIDERS[providerTag.value] ?? null) : null,
+);
+
+// Valid to save when the name is set and — if the user opened "Update
+// credentials" — the re-entered credential fields form a complete config.
+// Without the second check an incomplete credential entry would submit with the
+// config silently dropped, so a key rotation would report success without
+// changing anything. (`buildConfig` is a hoisted function declaration.)
+const isValid = computed(() => {
+	if (displayName.value.trim().length === 0) return false;
+	if (showCredentials.value && providerTag.value) {
+		return buildConfig(providerTag.value) !== null;
+	}
+	return true;
+});
+
+function populate(provider: Provider) {
+	displayName.value = provider.displayName;
+	isActive.value = provider.isActive;
+	showCredentials.value = false;
+	apiKey.value = "";
+	baseUrl.value = "";
+	defaultModel.value = "";
+}
+
+watch(
+	() => props.open,
+	(isOpen) => {
+		if (isOpen && props.provider) populate(props.provider);
+	},
+	{ immediate: true },
+);
+
+function handleOpenChange(open: boolean) {
+	emit("update:open", open);
+}
+
+// Build a full LlmConfig from the re-entered fields (a config update replaces
+// the stored one wholesale, so every required field must be present).
+function buildConfig(tag: LlmProvider): LlmConfig | null {
+	const base = baseUrl.value.trim();
+	const model = defaultModel.value.trim();
+	const key = apiKey.value.trim();
+	if (tag === "ollama") {
+		if (!base) return null;
+		return {
+			provider: "ollama",
+			baseUrl: base,
+			...(model ? { defaultModel: model } : {}),
+		};
+	}
+	if (!key) return null;
+	return {
+		provider: tag,
+		apiKey: key,
+		...(base ? { baseUrl: base } : {}),
+		...(model ? { defaultModel: model } : {}),
+	};
+}
+
+function submit() {
+	if (!isValid.value || !props.provider) return;
+
+	const updates: UpdateProvider = {
+		displayName: displayName.value.trim(),
+		isActive: isActive.value,
+	};
+
+	if (showCredentials.value && providerTag.value) {
+		const config = buildConfig(providerTag.value);
+		if (config) updates.config = config;
+	}
+
+	emit("update", updates);
+}
+
+function cancel() {
+	emit("update:open", false);
+}
+</script>
+
+<template>
+  <ProviderDialogShell
+    :open="open"
+    :title="
+      t('providers.dialogs.configure.title', { name: provider?.displayName })
+    "
+    :description="
+      provider
+        ? providerLabel(provider.provider)
+        : t('providers.dialogs.configure.description')
+    "
+    :icon="provider ? providerIcon(provider.provider) : null"
+    :icon-alt="provider?.provider"
+    @update:open="handleOpenChange"
+  >
+    <!-- Provider name -->
+    <div class="space-y-2">
+      <Label required>{{ t("providers.dialogs.configure.nameLabel") }}</Label>
+      <Input
+        v-model="displayName"
+        :placeholder="t('providers.dialogs.configure.namePlaceholder')"
+      />
+    </div>
+
+    <!-- Update credentials (collapsible) -->
+    <section class="space-y-3">
+      <button
+        type="button"
+        class="flex w-full items-center justify-between text-xs font-medium uppercase tracking-wide text-muted-foreground hover:text-foreground"
+        @click="showCredentials = !showCredentials"
+      >
+        {{ t("providers.dialogs.configure.updateCredentials") }}
+        <ChevronDown
+          :size="14"
+          class="transition-transform"
+          :class="{ 'rotate-180': showCredentials }"
+        />
+      </button>
+      <p v-if="!showCredentials" class="text-xs text-muted-foreground">
+        {{ t("providers.dialogs.configure.credentialsHint") }}
+      </p>
+      <template v-if="showCredentials">
+        <div v-if="meta?.needsApiKey" class="space-y-1.5">
+          <Label class="text-sm font-normal">
+            {{ t("connections.dialogs.llm.apiKey") }}
+          </Label>
+          <Input
+            v-model="apiKey"
+            type="password"
+            :placeholder="t('connections.dialogs.llm.apiKeyPlaceholder')"
+          />
+        </div>
+        <div class="space-y-1.5">
+          <Label class="text-sm font-normal">
+            {{ t("connections.dialogs.llm.baseUrl") }}
+          </Label>
+          <Input
+            v-model="baseUrl"
+            :placeholder="
+              providerTag === 'ollama'
+                ? 'http://localhost:11434'
+                : t('connections.dialogs.llm.baseUrlPlaceholder')
+            "
+          />
+        </div>
+        <div class="space-y-1.5">
+          <Label class="text-sm font-normal">
+            {{ t("connections.dialogs.llm.defaultModel") }}
+          </Label>
+          <Input
+            v-model="defaultModel"
+            :placeholder="t('connections.dialogs.llm.defaultModelPlaceholder')"
+          />
+        </div>
+      </template>
+    </section>
+
+    <template #footer>
+      <DialogFooter
+        class="items-center justify-between border-t border-border/60 p-6 sm:justify-between"
+      >
+        <div class="flex items-center gap-2">
+          <Switch v-model="isActive" />
+          <span class="text-sm text-muted-foreground">
+            {{
+              isActive
+                ? t("connections.table.status.active")
+                : t("connections.table.status.paused")
+            }}
+          </span>
+        </div>
+        <div class="flex items-center gap-2">
+          <Button variant="outline" @click="cancel">
+            {{ t("providers.dialogs.configure.cancel") }}
+          </Button>
+          <Button :disabled="!isValid || isLoading" @click="submit">
+            <Loader2 v-if="isLoading" class="mr-2 h-4 w-4 animate-spin" />
+            {{ t("providers.dialogs.configure.save") }}
+          </Button>
+        </div>
+      </DialogFooter>
+    </template>
+  </ProviderDialogShell>
+</template>
diff --git a/packages/console/app/components/pages/integrations/ConnectLlmDialog.vue b/packages/console/app/components/pages/integrations/ConnectLlmDialog.vue
index 49a9604d..465ada04 100644
--- a/packages/console/app/components/pages/integrations/ConnectLlmDialog.vue
+++ b/packages/console/app/components/pages/integrations/ConnectLlmDialog.vue
@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import type { CreateConnection, LlmConfig } from "@nvisy/sdk/datatypes";
+import type { CreateProvider, LlmConfig } from "@nvisy/sdk/datatypes";
 import type { LlmProvider } from "#console/utils/connections";
 import { LLM_PROVIDERS } from "#console/utils/connections";
 import { Loader2 } from "@lucide/vue";
@@ -22,7 +22,7 @@ const props = withDefaults(
 
 const emit = defineEmits<{
 	(e: "update:open", value: boolean): void;
-	(e: "connect", connection: CreateConnection): void;
+	(e: "connect", provider: CreateProvider): void;
 }>();
 
 const meta = computed(() =>
@@ -89,7 +89,7 @@ function submit() {
 	emit("connect", {
 		displayName: displayName.value.trim(),
 		config,
-	} satisfies CreateConnection);
+	} satisfies CreateProvider);
 }
 </script>
 
diff --git a/packages/console/app/components/pages/integrations/ConnectionRunsPanel.vue b/packages/console/app/components/pages/integrations/ConnectionRunsPanel.vue
new file mode 100644
index 00000000..c64270eb
--- /dev/null
+++ b/packages/console/app/components/pages/integrations/ConnectionRunsPanel.vue
@@ -0,0 +1,293 @@
+<script setup lang="ts">
+import type { Component } from "vue";
+import type {
+	Connection,
+	ConnectionSync,
+	SyncStatus,
+} from "@nvisy/sdk/datatypes";
+import type { VirtualColumn } from "#console/components/ui/virtual-table";
+import {
+	Loader2,
+	Loader,
+	CircleCheck,
+	XCircle,
+	CircleSlash,
+	Clock,
+	HardDrive,
+	Ban,
+	History,
+} from "@lucide/vue";
+import { formatDuration } from "#console/utils/date";
+import { providerIcon } from "#console/utils/connections";
+import { Button } from "#console/components/ui/button";
+import { VirtualTable } from "#console/components/ui/virtual-table";
+import {
+	Select,
+	SelectContent,
+	SelectItem,
+	SelectTrigger,
+	SelectValue,
+} from "#console/components/ui/select";
+import { toast } from "vue-sonner";
+
+/**
+ * The workspace's connection sync runs — a filterable table of every sync, with
+ * an inline cancel for the ones still in flight. Rendered inside the "View runs"
+ * dialog on the Connections page (no page chrome of its own).
+ */
+const { t } = useI18n();
+const { relativeTime } = useRelativeTime();
+
+const SYNC_STATUSES: SyncStatus[] = [
+	"pending",
+	"running",
+	"completed",
+	"failed",
+	"cancelled",
+];
+
+// "all" maps to no status filter.
+const statusFilter = ref<SyncStatus | "all">("all");
+const status = computed<SyncStatus | undefined>(() =>
+	statusFilter.value === "all" ? undefined : statusFilter.value,
+);
+
+const { syncs, isLoading, hasMore, loadMore, isLoadingMore, cancelSyncAsync } =
+	useSyncs({ status });
+
+// Resolve connection id -> connection for name + provider logo.
+const { connections } = useConnections();
+const connectionById = computed(() => {
+	const map = new Map<string, Connection>();
+	for (const c of connections.value ?? []) map.set(c.id, c);
+	return map;
+});
+
+function connectionName(sync: ConnectionSync): string {
+	return (
+		connectionById.value.get(sync.connectionId)?.displayName ??
+		sync.connectionId
+	);
+}
+function connectionProvider(sync: ConnectionSync): string | undefined {
+	return connectionById.value.get(sync.connectionId)?.provider;
+}
+
+async function cancelSync(sync: ConnectionSync) {
+	try {
+		await cancelSyncAsync({
+			connectionId: sync.connectionId,
+			syncId: sync.id,
+		});
+		toast.success(t("connections.runs.syncCancelled"));
+	} catch (error) {
+		toast.error(t("connections.runs.syncCancelFailed"), {
+			description: error instanceof Error ? error.message : undefined,
+		});
+	}
+}
+
+const isCancellable = (sync: ConnectionSync) =>
+	sync.status === "running" || sync.status === "pending";
+
+function handleLoadMore() {
+	if (hasMore.value && !isLoadingMore.value) loadMore();
+}
+
+// Per-status presentation: icon + tint.
+const STATUS_META: Record<
+	SyncStatus,
+	{ icon: Component; class: string; spin?: boolean }
+> = {
+	pending: { icon: Clock, class: "text-muted-foreground" },
+	running: { icon: Loader, class: "text-blue-500", spin: true },
+	completed: { icon: CircleCheck, class: "text-emerald-500" },
+	failed: { icon: XCircle, class: "text-destructive" },
+	cancelled: { icon: CircleSlash, class: "text-muted-foreground" },
+};
+
+// Status comes from the API; fall back to a neutral icon if the backend ever
+// adds a status the map doesn't cover, so one unknown cell can't blank the table.
+const FALLBACK_STATUS_META = {
+	icon: Clock,
+	class: "text-muted-foreground",
+	spin: false,
+};
+function statusMeta(status: SyncStatus) {
+	return STATUS_META[status] ?? FALLBACK_STATUS_META;
+}
+
+const columns = computed<VirtualColumn<ConnectionSync>[]>(() => [
+	{
+		key: "connection",
+		header: t("connections.runs.connection"),
+		cell: () => ({ type: "custom" }),
+	},
+	{
+		key: "trigger",
+		header: t("connections.runs.trigger"),
+		width: "130px",
+		cell: (s) => ({
+			type: "badge",
+			label: t(`connections.runs.triggerType.${s.triggerType}`),
+			variant: "outline",
+		}),
+	},
+	{
+		key: "status",
+		header: t("connections.runs.statusHeader"),
+		width: "180px",
+		cell: () => ({ type: "custom" }),
+	},
+	{
+		key: "records",
+		header: t("connections.runs.records"),
+		width: "100px",
+		cell: (s) => ({
+			type: "text",
+			value: String(s.recordsSynced),
+			muted: true,
+		}),
+	},
+	{
+		key: "started",
+		header: t("connections.runs.started"),
+		width: "140px",
+		cell: (s) => ({
+			type: "text",
+			value: relativeTime(s.startedAt),
+			muted: true,
+		}),
+	},
+	{
+		key: "duration",
+		header: t("connections.runs.duration"),
+		width: "120px",
+		cell: (s) => ({
+			type: "text",
+			value: formatDuration(s.startedAt, s.completedAt),
+			muted: true,
+		}),
+	},
+	{
+		key: "cancel",
+		header: "",
+		width: "40px",
+		align: "right",
+		cell: () => ({ type: "custom" }),
+	},
+]);
+</script>
+
+<template>
+  <div class="flex min-h-0 flex-1 flex-col gap-4">
+    <!-- Filter toolbar: count on the left, status filter on the right. -->
+    <div class="flex flex-wrap items-center gap-3">
+      <p class="shrink-0 text-sm text-muted-foreground">
+        {{ t("connections.runs.runsFound", { count: syncs.length }) }}
+      </p>
+
+      <div class="flex-1" />
+
+      <Select v-model="statusFilter">
+        <SelectTrigger class="h-9 w-[160px] text-sm">
+          <SelectValue :placeholder="t('connections.runs.status')" />
+        </SelectTrigger>
+        <SelectContent>
+          <SelectItem value="all" class="text-sm font-normal">
+            {{ t("connections.runs.allStatus") }}
+          </SelectItem>
+          <SelectItem
+            v-for="s in SYNC_STATUSES"
+            :key="s"
+            :value="s"
+            class="text-sm font-normal"
+          >
+            {{ t(`connections.runs.syncStatus.${s}`) }}
+          </SelectItem>
+        </SelectContent>
+      </Select>
+    </div>
+
+    <!-- Loading -->
+    <div v-if="isLoading" class="flex flex-1 items-center justify-center py-12">
+      <Loader2 :size="24" class="animate-spin text-muted-foreground" />
+    </div>
+
+    <!-- Bare full-width table, filling the remaining height. -->
+    <div v-else class="relative min-h-0 flex-1">
+      <VirtualTable
+        :rows="syncs"
+        :columns="columns"
+        :empty="{
+          icon: History,
+          title: t('connections.runs.noRunsFound'),
+          description: t('connections.runs.noRunsDescription'),
+        }"
+        @load-more="handleLoadMore"
+      >
+        <!-- Connection + provider logo -->
+        <template #cell-connection="{ row }">
+          <div class="flex items-center gap-2.5">
+            <div
+              class="flex size-7 shrink-0 items-center justify-center rounded-md border border-border/60 bg-muted/40"
+            >
+              <img
+                v-if="
+                  connectionProvider(row) &&
+                  providerIcon(connectionProvider(row)!)
+                "
+                :src="providerIcon(connectionProvider(row)!)!"
+                :alt="connectionProvider(row)"
+                class="size-4 object-contain"
+              />
+              <HardDrive v-else :size="14" class="text-muted-foreground" />
+            </div>
+            <span class="truncate text-sm font-medium">
+              {{ connectionName(row) }}
+            </span>
+          </div>
+        </template>
+
+        <!-- Status + optional error subtitle -->
+        <template #cell-status="{ row }">
+          <div class="flex items-center gap-2">
+            <component
+              :is="statusMeta(row.status).icon"
+              :size="14"
+              :class="[
+                'shrink-0',
+                statusMeta(row.status).class,
+                statusMeta(row.status).spin && 'animate-spin',
+              ]"
+            />
+            <span class="text-sm">
+              {{ t(`connections.runs.syncStatus.${row.status}`) }}
+            </span>
+          </div>
+          <p
+            v-if="row.errorMessage"
+            class="mt-0.5 truncate text-xs text-destructive"
+            :title="row.errorMessage"
+          >
+            {{ row.errorMessage }}
+          </p>
+        </template>
+
+        <!-- Cancel (running/pending only) -->
+        <template #cell-cancel="{ row }">
+          <Button
+            v-if="isCancellable(row)"
+            variant="ghost"
+            size="icon"
+            class="size-8"
+            :aria-label="t('connections.runs.cancel')"
+            @click.stop="cancelSync(row)"
+          >
+            <Ban :size="15" class="text-muted-foreground" />
+          </Button>
+        </template>
+      </VirtualTable>
+    </div>
+  </div>
+</template>
diff --git a/packages/console/app/components/pages/integrations/ConnectionsTable.vue b/packages/console/app/components/pages/integrations/ConnectionsTable.vue
index 56f66e9f..83d3c565 100644
--- a/packages/console/app/components/pages/integrations/ConnectionsTable.vue
+++ b/packages/console/app/components/pages/integrations/ConnectionsTable.vue
@@ -81,8 +81,8 @@ const columns = computed<VirtualColumn<Connection>[]>(() => [
 		width: "160px",
 		cell: (c) => ({
 			type: "text",
-			value: c.sync?.lastSynced
-				? relativeTime(c.sync.lastSynced)
+			value: c.lastSyncedAt
+				? relativeTime(c.lastSyncedAt)
 				: t("common.time.never"),
 			muted: true,
 		}),
@@ -94,7 +94,7 @@ function rowActions(connection: Connection): RowAction[] {
 	// picker nor a redacted-export target). Import needs an active connection with
 	// a wired picker (the shared eligibility rule); export applies to any file
 	// service.
-	const fileService = connection.providerType === "file_service";
+	const fileService = connection.connectionType === "file_service";
 	const importAction: RowAction[] = isImportableConnection(connection, {
 		dropboxAppKey,
 	})
diff --git a/packages/console/app/components/pages/integrations/ExportToConnectionDialog.vue b/packages/console/app/components/pages/integrations/ExportToConnectionDialog.vue
index 151c6f12..caedb670 100644
--- a/packages/console/app/components/pages/integrations/ExportToConnectionDialog.vue
+++ b/packages/console/app/components/pages/integrations/ExportToConnectionDialog.vue
@@ -41,7 +41,7 @@ const emit = defineEmits<{
 // can't. Inactive connections are excluded - a paused connection won't sync.
 const targets = computed(() =>
 	props.connections.filter(
-		(c) => c.providerType === "file_service" && c.isActive,
+		(c) => c.connectionType === "file_service" && c.isActive,
 	),
 );
 
diff --git a/packages/console/app/components/pages/integrations/ProvidersTable.vue b/packages/console/app/components/pages/integrations/ProvidersTable.vue
new file mode 100644
index 00000000..bdc1a61c
--- /dev/null
+++ b/packages/console/app/components/pages/integrations/ProvidersTable.vue
@@ -0,0 +1,131 @@
+<script setup lang="ts">
+import type { Provider } from "@nvisy/sdk/datatypes";
+import type { RowAction } from "#console/components/pages/RowActions.vue";
+import type {
+	VirtualColumn,
+	VirtualTableEmpty,
+} from "#console/components/ui/virtual-table";
+import { Edit, Trash2, PlugZap, Bot } from "@lucide/vue";
+import { Switch } from "#console/components/ui/switch";
+import { VirtualTable } from "#console/components/ui/virtual-table";
+import { providerIcon, providerLabel } from "#console/utils/connections";
+
+const { t } = useI18n();
+const { relativeTime } = useRelativeTime();
+
+defineProps<{
+	providers: Provider[];
+	empty?: VirtualTableEmpty;
+}>();
+
+const emit = defineEmits<{
+	(e: "configure", providerId: string): void;
+	(e: "delete", providerId: string): void;
+	(e: "test", providerId: string): void;
+	(e: "toggleActive", provider: Provider): void;
+}>();
+
+const columns = computed<VirtualColumn<Provider>[]>(() => [
+	{
+		key: "name",
+		header: t("providers.table.headers.name"),
+		cell: () => ({ type: "custom" }),
+	},
+	{
+		key: "enabled",
+		header: t("providers.table.headers.enabled"),
+		width: "100px",
+		cell: () => ({ type: "custom" }),
+	},
+	{
+		key: "type",
+		header: t("providers.table.headers.type"),
+		width: "120px",
+		cell: (p) => ({
+			type: "text",
+			value: t(`providers.types.${p.providerType}`),
+			muted: true,
+		}),
+	},
+	{
+		key: "updated",
+		header: t("providers.table.headers.updated"),
+		width: "160px",
+		cell: (p) => ({
+			type: "text",
+			value: relativeTime(p.updatedAt),
+			muted: true,
+		}),
+	},
+]);
+
+function rowActions(provider: Provider): RowAction[] {
+	return [
+		{
+			key: "configure",
+			label: t("providers.table.actions.configure"),
+			icon: Edit,
+			select: () => emit("configure", provider.id),
+		},
+		{
+			key: "test",
+			label: t("providers.table.actions.test"),
+			icon: PlugZap,
+			select: () => emit("test", provider.id),
+		},
+		{
+			key: "delete",
+			label: t("providers.table.actions.delete"),
+			icon: Trash2,
+			danger: true,
+			separatorBefore: true,
+			select: () => emit("delete", provider.id),
+		},
+	];
+}
+</script>
+
+<template>
+  <VirtualTable
+    :rows="providers"
+    :columns="columns"
+    :row-actions="rowActions"
+    :menu-label="t('providers.table.actions.menu')"
+    :empty="empty"
+  >
+    <!-- Name + provider logo -->
+    <template #cell-name="{ row }">
+      <div class="flex items-center gap-3">
+        <div
+          class="flex size-9 shrink-0 items-center justify-center rounded-lg border border-border/60 bg-muted/40"
+        >
+          <img
+            v-if="providerIcon(row.provider)"
+            :src="providerIcon(row.provider)!"
+            :alt="row.provider"
+            class="size-5 object-contain"
+          />
+          <Bot v-else :size="18" class="text-muted-foreground" />
+        </div>
+        <div class="min-w-0">
+          <p class="truncate font-medium text-foreground">
+            {{ row.displayName }}
+          </p>
+          <p class="truncate text-xs text-muted-foreground">
+            {{ providerLabel(row.provider) }}
+          </p>
+        </div>
+      </div>
+    </template>
+
+    <!-- Enabled toggle -->
+    <template #cell-enabled="{ row }">
+      <div @click.stop>
+        <Switch
+          :model-value="row.isActive"
+          @update:model-value="emit('toggleActive', row)"
+        />
+      </div>
+    </template>
+  </VirtualTable>
+</template>
diff --git a/packages/console/app/components/pages/integrations/index.ts b/packages/console/app/components/pages/integrations/index.ts
index 0ae11891..00c21a52 100644
--- a/packages/console/app/components/pages/integrations/index.ts
+++ b/packages/console/app/components/pages/integrations/index.ts
@@ -7,6 +7,11 @@ export { default as ConnectLlmDialog } from "./ConnectLlmDialog.vue";
 export { default as ConnectFileServiceDialog } from "./ConnectFileServiceDialog.vue";
 export { default as ExportToConnectionDialog } from "./ExportToConnectionDialog.vue";
 export { default as ImportFromConnectionDialog } from "./ImportFromConnectionDialog.vue";
+export { default as ConnectionRunsPanel } from "./ConnectionRunsPanel.vue";
+
+// Providers (inference)
+export { default as ProvidersTable } from "./ProvidersTable.vue";
+export { default as ConfigureProviderDialog } from "./ConfigureProviderDialog.vue";
 
 // Webhooks
 export { default as WebhooksTable } from "./WebhooksTable.vue";
diff --git a/packages/console/app/components/pages/studio/chat/ChatMessage.vue b/packages/console/app/components/pages/studio/chat/ChatMessage.vue
deleted file mode 100644
index 8c29f8d7..00000000
--- a/packages/console/app/components/pages/studio/chat/ChatMessage.vue
+++ /dev/null
@@ -1,165 +0,0 @@
-<script setup lang="ts">
-import {
-	Copy,
-	Check,
-	ThumbsUp,
-	ThumbsDown,
-	RefreshCw,
-	Pencil,
-} from "@lucide/vue";
-import { Button } from "#console/components/ui/button";
-
-interface Message {
-	id: string;
-	role: "user" | "assistant";
-	content: string;
-	timestamp: Date;
-	goodFeedback?: boolean;
-	badFeedback?: boolean;
-}
-
-const props = defineProps<{
-	message: Message;
-	isEditing?: boolean;
-}>();
-
-const emit = defineEmits<{
-	copy: [id: string];
-	edit: [id: string];
-	good: [id: string];
-	bad: [id: string];
-	tryAgain: [id: string];
-}>();
-
-const { t, locale } = useI18n();
-
-const copied = ref(false);
-
-async function handleCopy() {
-	try {
-		await navigator.clipboard.writeText(props.message.content);
-	} catch {
-		// Clipboard unavailable (permissions, insecure context) — do nothing rather
-		// than leaving an unhandled rejection or a false "copied" state.
-		return;
-	}
-	copied.value = true;
-	emit("copy", props.message.id);
-	setTimeout(() => {
-		copied.value = false;
-	}, 2000);
-}
-</script>
-
-<template>
-  <div
-    :class="[
-      'flex flex-col group',
-      message.role === 'user' ? 'items-end' : 'items-start',
-    ]"
-  >
-    <div
-      class="rounded-lg px-4 py-2 max-w-[80%] bg-neutral-100 dark:bg-neutral-800 text-neutral-900 dark:text-white break-words"
-    >
-      <p class="text-sm break-words">
-        {{ message.content }}
-      </p>
-    </div>
-    <!-- Action buttons and timestamp positioned under message bubble -->
-    <div
-      :class="[
-        'flex items-center mt-1 gap-2 w-auto',
-        message.role === 'user' ? 'flex-row-reverse' : 'flex-row',
-      ]"
-    >
-      <!-- Action buttons -->
-      <div class="flex gap-1">
-        <!-- User message buttons: copy and edit -->
-        <template v-if="message.role === 'user'">
-          <Button
-            variant="ghost"
-            size="sm"
-            class="h-7 w-7 p-0 text-neutral-400 hover:text-neutral-900 dark:hover:text-neutral-100 transition-colors"
-            :aria-label="copied ? t('studio.chat.copied') : t('studio.chat.copy')"
-            @click="handleCopy"
-          >
-            <Check v-if="copied" :size="14" />
-            <Copy v-else :size="14" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="sm"
-            :class="[
-              'h-7 w-7 p-0 transition-colors',
-              isEditing
-                ? 'text-neutral-900 dark:text-neutral-100'
-                : 'text-neutral-400 hover:text-neutral-900 dark:hover:text-neutral-100',
-            ]"
-            :aria-label="t('studio.chat.edit')"
-            @click="emit('edit', message.id)"
-          >
-            <Pencil :size="14" />
-          </Button>
-        </template>
-
-        <!-- Assistant message buttons: copy, good, bad, try again -->
-        <template v-else>
-          <Button
-            variant="ghost"
-            size="sm"
-            class="h-7 w-7 p-0 text-neutral-400 hover:text-neutral-900 dark:hover:text-neutral-100 transition-colors"
-            :aria-label="copied ? t('studio.chat.copied') : t('studio.chat.copy')"
-            @click="handleCopy"
-          >
-            <Check v-if="copied" :size="14" />
-            <Copy v-else :size="14" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="sm"
-            :class="[
-              'h-7 w-7 p-0 transition-colors',
-              message.goodFeedback
-                ? 'text-neutral-900 dark:text-neutral-100'
-                : 'text-neutral-400 hover:text-neutral-900 dark:hover:text-neutral-100',
-            ]"
-            :aria-label="t('studio.chat.thumbsUp')"
-            @click="emit('good', message.id)"
-          >
-            <ThumbsUp :size="14" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="sm"
-            :class="[
-              'h-7 w-7 p-0 transition-colors',
-              message.badFeedback
-                ? 'text-neutral-900 dark:text-neutral-100'
-                : 'text-neutral-400 hover:text-neutral-900 dark:hover:text-neutral-100',
-            ]"
-            :aria-label="t('studio.chat.thumbsDown')"
-            @click="emit('bad', message.id)"
-          >
-            <ThumbsDown :size="14" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="sm"
-            class="h-7 w-7 p-0 text-neutral-400 hover:text-neutral-900 dark:hover:text-neutral-100 transition-colors"
-            :aria-label="t('studio.chat.retry')"
-            @click="emit('tryAgain', message.id)"
-          >
-            <RefreshCw :size="14" />
-          </Button>
-        </template>
-      </div>
-
-      <!-- Timestamp -->
-      <p
-        class="text-xs text-neutral-500 dark:text-neutral-400 opacity-100 md:opacity-0 md:group-hover:opacity-100 transition-opacity"
-      >
-        {{ message.timestamp.toLocaleTimeString(locale) }}
-      </p>
-    </div>
-  </div>
-</template>
diff --git a/packages/console/app/components/pages/studio/chat/MessageInput.vue b/packages/console/app/components/pages/studio/chat/MessageInput.vue
deleted file mode 100644
index 7b098a73..00000000
--- a/packages/console/app/components/pages/studio/chat/MessageInput.vue
+++ /dev/null
@@ -1,112 +0,0 @@
-<script setup lang="ts">
-import {
-	Send,
-	Pencil,
-	Paperclip,
-	Upload,
-	Sparkles,
-	FileText,
-} from "@lucide/vue";
-import { Button } from "#console/components/ui/button";
-import { Textarea } from "#console/components/ui/textarea";
-
-const value = defineModel<string>({ required: true });
-
-defineProps<{
-	isEditing?: boolean;
-}>();
-
-const emit = defineEmits<{
-	send: [];
-	attach: [];
-	upload: [];
-	generate: [];
-	summarize: [];
-}>();
-
-const { t } = useI18n();
-
-function handleSend() {
-	if (!value.value.trim()) return;
-	emit("send");
-	value.value = "";
-}
-
-// Enter submits, but not mid-IME composition — pressing Enter to pick a CJK
-// candidate must not send (and clear) the draft. Guard before preventing the
-// default so the composition keystroke still reaches the textarea.
-function onEnter(event: KeyboardEvent) {
-	if (event.isComposing) return;
-	event.preventDefault();
-	handleSend();
-}
-</script>
-
-<template>
-  <div
-    class="border border-neutral-200 dark:border-neutral-800 rounded-lg relative"
-  >
-    <Textarea
-      v-model="value"
-      :placeholder="t('studio.chat.inputPlaceholder')"
-      class="min-h-[120px] border-0 focus-visible:ring-0 resize-none pl-3 pr-12 pb-12"
-      @keydown.enter.exact="onEnter"
-    />
-    <!-- Buttons inside textarea -->
-    <div
-      class="absolute bottom-3 left-3 right-3 flex justify-between items-center"
-    >
-      <!-- Left side buttons with text and borders -->
-      <div class="flex gap-1">
-        <Button
-          variant="outline"
-          size="sm"
-          class="h-7 px-2"
-          @click="emit('attach')"
-        >
-          <Paperclip :size="14" class="mr-1.5" />
-          <span class="text-xs">{{ t("studio.chat.attach") }}</span>
-        </Button>
-        <Button
-          variant="outline"
-          size="sm"
-          class="h-7 px-2"
-          @click="emit('upload')"
-        >
-          <Upload :size="14" class="mr-1.5" />
-          <span class="text-xs">{{ t("studio.chat.upload") }}</span>
-        </Button>
-        <Button
-          variant="outline"
-          size="sm"
-          class="h-7 px-2"
-          @click="emit('generate')"
-        >
-          <Sparkles :size="14" class="mr-1.5" />
-          <span class="text-xs">{{ t("studio.chat.generate") }}</span>
-        </Button>
-        <Button
-          variant="outline"
-          size="sm"
-          class="h-7 px-2"
-          @click="emit('summarize')"
-        >
-          <FileText :size="14" class="mr-1.5" />
-          <span class="text-xs">{{ t("studio.chat.summarize") }}</span>
-        </Button>
-      </div>
-
-      <!-- Right side send/edit button -->
-      <Button
-        @click="handleSend"
-        :disabled="!value.trim()"
-        size="sm"
-        :aria-label="isEditing ? t('studio.chat.saveEdit') : t('studio.chat.send')"
-        :class="['h-8 w-8 p-0', isEditing && 'bg-blue-600 hover:bg-blue-700']"
-      >
-        <Pencil v-if="isEditing" :size="16" />
-        <Send v-else :size="16" />
-      </Button>
-    </div>
-  </div>
-</template>
diff --git a/packages/console/app/components/pages/studio/chat/StudioChatPanel.vue b/packages/console/app/components/pages/studio/chat/StudioChatPanel.vue
deleted file mode 100644
index fbe64c11..00000000
--- a/packages/console/app/components/pages/studio/chat/StudioChatPanel.vue
+++ /dev/null
@@ -1,377 +0,0 @@
-<script setup lang="ts">
-import { useEventListener } from "@vueuse/core";
-import type { Component } from "vue";
-import {
-	Send,
-	ChevronDown,
-	Split,
-	Merge,
-	Edit3,
-	FileOutput,
-	Highlighter,
-	MessageSquare,
-	GripHorizontal,
-} from "@lucide/vue";
-import { Button } from "#console/components/ui/button";
-import { Textarea } from "#console/components/ui/textarea";
-import { Kbd } from "#console/components/ui/kbd";
-
-interface ChatMessage {
-	id: string;
-	role: "user" | "assistant";
-	content: string;
-}
-
-interface Layer {
-	id: string;
-	name: string;
-	icon: Component;
-	page: number;
-	fileName: string;
-}
-
-const { t } = useI18n();
-const { getKbdKey } = useKbd();
-
-const chatMessage = ref("");
-const changesOpen = ref(false);
-const selectedTool = ref<string | null>(null);
-const inputHeight = ref(200);
-const isResizing = ref(false);
-const minInputHeight = 150;
-const maxInputHeight = 500;
-
-const tools = computed(() => [
-	{
-		id: "highlight",
-		name: t("studio.chat.tools.highlight"),
-		icon: Highlighter,
-		shortcut: "H",
-	},
-	{
-		id: "annotate",
-		name: t("studio.chat.tools.annotate"),
-		icon: MessageSquare,
-		shortcut: "N",
-	},
-]);
-
-function selectTool(toolId: string) {
-	selectedTool.value = selectedTool.value === toolId ? null : toolId;
-}
-
-const chatMessages = ref<ChatMessage[]>([
-	{
-		id: "1",
-		role: "assistant",
-		content: t("studio.chat.greeting"),
-	},
-]);
-
-const layers = ref<Layer[]>([
-	{ id: "1", name: "Split", icon: Split, page: 1, fileName: "contract.pdf" },
-	{ id: "2", name: "Edit", icon: Edit3, page: 2, fileName: "invoice.pdf" },
-	{
-		id: "3",
-		name: "Extract",
-		icon: FileOutput,
-		page: 3,
-		fileName: "report.pdf",
-	},
-	{ id: "4", name: "Merge", icon: Merge, page: 4, fileName: "document.pdf" },
-]);
-
-function deleteLayer(layerId: string) {
-	const index = layers.value.findIndex((l) => l.id === layerId);
-	if (index !== -1) {
-		layers.value.splice(index, 1);
-	}
-}
-
-function acceptChange(layerId: string) {
-	deleteLayer(layerId);
-}
-
-function rejectChange(layerId: string) {
-	deleteLayer(layerId);
-}
-
-function acceptAllChanges() {
-	layers.value = [];
-	changesOpen.value = false;
-}
-
-function rejectAllChanges() {
-	layers.value = [];
-	changesOpen.value = false;
-}
-
-// Keyboard shortcuts
-defineShortcuts({
-	meta_shift_a: () => {
-		if (layers.value.length > 0) acceptAllChanges();
-	},
-	meta_shift_r: () => {
-		if (layers.value.length > 0) rejectAllChanges();
-	},
-	meta_shift_h: () => selectTool("highlight"),
-	meta_shift_n: () => selectTool("annotate"),
-});
-
-function sendMessage() {
-	if (!chatMessage.value.trim()) return;
-
-	chatMessages.value.push({
-		id: Date.now().toString(),
-		role: "user",
-		content: chatMessage.value,
-	});
-
-	setTimeout(() => {
-		chatMessages.value.push({
-			id: `${Date.now() + 1}`,
-			role: "assistant",
-			content: t("studio.chat.processing"),
-		});
-	}, 500);
-
-	chatMessage.value = "";
-}
-
-// Enter sends, except mid-IME composition — pressing Enter to pick a CJK
-// candidate must not send (and clear) the draft. Guard before preventing the
-// default so the composition keystroke still reaches the textarea.
-function onEnter(event: KeyboardEvent) {
-	if (event.isComposing) return;
-	event.preventDefault();
-	sendMessage();
-}
-
-// Resize handling. useEventListener auto-removes on scope dispose, so a
-// mid-drag unmount can't leak document listeners.
-function startResize(e: MouseEvent) {
-	isResizing.value = true;
-	const startY = e.clientY;
-	const startHeight = inputHeight.value;
-
-	const stopMove = useEventListener(document, "mousemove", (ev: MouseEvent) => {
-		const delta = startY - ev.clientY;
-		inputHeight.value = Math.min(
-			Math.max(startHeight + delta, minInputHeight),
-			maxInputHeight,
-		);
-	});
-
-	const stopUp = useEventListener(document, "mouseup", () => {
-		isResizing.value = false;
-		stopMove();
-		stopUp();
-	});
-}
-</script>
-
-<template>
-  <div
-    class="flex flex-col h-full w-full overflow-hidden bg-background"
-  >
-    <!-- Chat Messages -->
-    <div
-      class="flex-1 overflow-y-auto overflow-x-hidden p-3 space-y-3 min-h-0 min-w-0"
-    >
-      <div
-        v-for="message in chatMessages"
-        :key="message.id"
-        :class="[
-          'p-2.5 rounded-lg text-sm font-normal break-words overflow-hidden max-w-full',
-          message.role === 'user'
-            ? 'bg-primary text-primary-foreground ml-8'
-            : 'bg-muted/50 text-muted-foreground mr-8',
-        ]"
-      >
-        {{ message.content }}
-      </div>
-    </div>
-
-    <!-- Resize Handle -->
-    <div
-      class="flex-shrink-0 h-2 border-t cursor-row-resize flex items-center justify-center hover:bg-muted/50 transition-colors group"
-      @mousedown="startResize"
-    >
-      <GripHorizontal
-        :size="12"
-        class="text-muted-foreground/50 group-hover:text-muted-foreground transition-colors"
-      />
-    </div>
-
-    <!-- Bottom Section (resizable) -->
-    <div
-      class="flex-shrink-0 flex flex-col overflow-hidden"
-      :style="{ height: `${inputHeight}px` }"
-    >
-      <!-- Changes Section -->
-      <div
-        class="flex flex-col"
-        :class="
-          changesOpen ? 'flex-shrink min-h-0 max-h-[50%]' : 'flex-shrink-0'
-        "
-      >
-        <!-- Header with Accept All / Reject All -->
-        <div class="flex items-center justify-between pt-1 px-2 pb-1.5">
-          <button
-            class="flex items-center gap-1 hover:bg-muted/50 rounded px-1 py-0.5 transition-colors"
-            @click="changesOpen = !changesOpen"
-          >
-            <span class="text-xs font-normal">{{
-              t("studio.chat.changes.title")
-            }}</span>
-            <span class="text-[10px] font-normal text-muted-foreground"
-              >({{ layers.length }})</span
-            >
-            <ChevronDown
-              :size="12"
-              class="transition-transform duration-200"
-              :class="{ 'rotate-180': changesOpen }"
-            />
-          </button>
-          <div class="flex items-center gap-1">
-            <Button
-              variant="outline"
-              size="sm"
-              class="h-6 text-xs font-normal px-2 gap-1"
-              :disabled="layers.length === 0"
-              @click="rejectAllChanges"
-            >
-              {{ t("studio.chat.changes.rejectAll") }}
-              <div class="flex items-center gap-0.5 ml-1">
-                <Kbd class="text-[10px] h-4 min-w-4">{{
-                  getKbdKey("meta")
-                }}</Kbd>
-                <Kbd class="text-[10px] h-4 min-w-4">{{
-                  getKbdKey("shift")
-                }}</Kbd>
-                <Kbd class="text-[10px] h-4 min-w-4">R</Kbd>
-              </div>
-            </Button>
-            <Button
-              variant="outline"
-              size="sm"
-              class="h-6 text-xs font-normal px-2 gap-1"
-              :disabled="layers.length === 0"
-              @click="acceptAllChanges"
-            >
-              {{ t("studio.chat.changes.acceptAll") }}
-              <div class="flex items-center gap-0.5 ml-1">
-                <Kbd class="text-[10px] h-4 min-w-4">{{
-                  getKbdKey("meta")
-                }}</Kbd>
-                <Kbd class="text-[10px] h-4 min-w-4">{{
-                  getKbdKey("shift")
-                }}</Kbd>
-                <Kbd class="text-[10px] h-4 min-w-4">A</Kbd>
-              </div>
-            </Button>
-          </div>
-        </div>
-
-        <!-- Collapsible Changes list -->
-        <div
-          v-if="changesOpen && layers.length > 0"
-          class="px-3 pb-2 overflow-y-auto min-h-0 flex-1"
-        >
-          <div class="space-y-1.5">
-            <div
-              v-for="layer in layers"
-              :key="layer.id"
-              class="p-2 bg-muted/50 rounded-md transition-colors"
-            >
-              <div class="flex items-center gap-2">
-                <component :is="layer.icon" :size="14" class="flex-shrink-0" />
-                <div class="flex-1 min-w-0">
-                  <p class="text-sm font-normal truncate">{{ layer.name }}</p>
-                  <p
-                    class="text-[10px] font-normal text-muted-foreground truncate"
-                  >
-                    {{ layer.fileName }} · Page {{ layer.page }}
-                  </p>
-                </div>
-                <div class="flex items-center gap-1 flex-shrink-0">
-                  <Button
-                    variant="outline"
-                    size="sm"
-                    class="h-6 text-xs font-normal px-2"
-                    @click.stop="rejectChange(layer.id)"
-                  >
-                    {{ t("studio.chat.changes.reject") }}
-                  </Button>
-                  <Button
-                    variant="outline"
-                    size="sm"
-                    class="h-6 text-xs font-normal px-2"
-                    @click.stop="acceptChange(layer.id)"
-                  >
-                    {{ t("studio.chat.changes.accept") }}
-                  </Button>
-                </div>
-              </div>
-            </div>
-          </div>
-        </div>
-
-        <!-- Empty state when no changes -->
-        <div v-else-if="changesOpen && layers.length === 0" class="px-3 pb-2">
-          <p class="text-xs text-muted-foreground text-center py-2">
-            {{ t("studio.chat.changes.empty") }}
-          </p>
-        </div>
-      </div>
-
-      <!-- Chat Input -->
-      <div class="flex-1 relative min-h-0">
-        <Textarea
-          v-model="chatMessage"
-          :placeholder="t('studio.chat.placeholder')"
-          class="h-full w-full rounded-none border-0 border-t focus-visible:ring-0 resize-none break-words pb-12 text-sm font-normal"
-          @keydown.enter.exact="onEnter"
-        />
-
-        <!-- Action bar inside textarea area -->
-        <div
-          class="absolute bottom-2 left-2 right-2 flex items-center justify-between"
-        >
-          <div class="flex items-center gap-1">
-            <Button
-              v-for="tool in tools"
-              :key="tool.id"
-              :variant="selectedTool === tool.id ? 'default' : 'outline'"
-              size="sm"
-              class="h-7 px-2 gap-1 cursor-pointer"
-              :title="`${tool.name} (${getKbdKey('meta')}${getKbdKey('shift')}${tool.shortcut})`"
-              @click="selectTool(tool.id)"
-            >
-              <component :is="tool.icon" :size="14" />
-              <div class="flex items-center gap-0.5">
-                <Kbd class="text-[10px] h-4 min-w-4">{{
-                  getKbdKey("meta")
-                }}</Kbd>
-                <Kbd class="text-[10px] h-4 min-w-4">{{
-                  getKbdKey("shift")
-                }}</Kbd>
-                <Kbd class="text-[10px] h-4 min-w-4">{{ tool.shortcut }}</Kbd>
-              </div>
-            </Button>
-          </div>
-          <div class="flex items-center gap-1">
-            <Button
-              size="sm"
-              class="h-7 w-7 p-0 cursor-pointer"
-              :disabled="!chatMessage.trim()"
-              @click="sendMessage"
-            >
-              <Send :size="14" />
-            </Button>
-          </div>
-        </div>
-      </div>
-    </div>
-  </div>
-</template>
diff --git a/packages/console/app/components/pages/studio/chat/index.ts b/packages/console/app/components/pages/studio/chat/index.ts
deleted file mode 100644
index 34e29bab..00000000
--- a/packages/console/app/components/pages/studio/chat/index.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-export { default as StudioChatPanel } from "./StudioChatPanel.vue";
-export { default as ChatMessage } from "./ChatMessage.vue";
-export { default as MessageInput } from "./MessageInput.vue";
diff --git a/packages/console/app/components/pages/studio/entities/StudioAuditPanel.vue b/packages/console/app/components/pages/studio/entities/StudioAuditPanel.vue
index 927403bc..42736329 100644
--- a/packages/console/app/components/pages/studio/entities/StudioAuditPanel.vue
+++ b/packages/console/app/components/pages/studio/entities/StudioAuditPanel.vue
@@ -1,9 +1,7 @@
 <script setup lang="ts">
 import {
-	ArrowUpFromLine,
 	ChevronRight,
 	CornerUpRight,
-	Download,
 	Info,
 	Loader2,
 	Plus,
@@ -22,6 +20,7 @@ import type {
 	StudioCategorizedGroup,
 	StudioEntityView,
 } from "#console/composables/useStudioEntities";
+import StudioRedactionFooter from "./StudioRedactionFooter.vue";
 import { Button } from "#console/components/ui/button";
 import { Checkbox } from "#console/components/ui/checkbox";
 import {
@@ -111,9 +110,6 @@ const {
 	(id) => emit("toggle-suppress", id),
 );
 
-// How many entities the "Apply" button will redact (excludes kept ones).
-const applyCount = computed(() => props.effectiveRedactCount ?? props.count);
-
 /**
  * Label a tabular entity's cell. With headers on, use the column name (when the
  * recognizer supplied one) and count data rows from 1; with headers off, there
@@ -508,73 +504,20 @@ function clusterActiveClass(cluster: EntityCluster<StudioEntityView>): string {
       </template>
     </div>
 
-    <!-- Redaction footer: apply redaction to the complete detection, then download the
-         redacted output it produces. Shown whenever there's something to redact —
-         detected entities, or ones the reviewer added even if none were detected. -->
-    <div
+    <!-- Redaction footer: apply then download/export the redacted output. Shown
+         whenever there's something to redact — detected entities, or ones the
+         reviewer added even if none were detected. -->
+    <StudioRedactionFooter
       v-if="phase === 'complete' && (count > 0 || !!added?.length)"
-      class="border-t border-border/50 bg-muted/30 p-3"
-    >
-      <!-- Redaction failed: show why, keep the button available to retry. -->
-      <p
-        v-if="redactPhase === 'failed' && redactError"
-        class="mb-2 flex items-start gap-1.5 text-xs text-destructive"
-      >
-        <TriangleAlert :size="13" class="mt-px shrink-0" />
-        <span>{{ redactError }}</span>
-      </p>
-
-      <!-- Done: the redacted file is ready to download or export. -->
-      <template v-if="redactPhase === 'done' && output">
-        <div class="flex gap-2">
-          <Button
-            size="sm"
-            class="flex-1"
-            @click="emit('download-output')"
-          >
-            <Download :size="15" />
-            {{ t("studio.audit.downloadRedacted") }}
-          </Button>
-          <Button
-            variant="outline"
-            size="sm"
-            :title="t('studio.audit.exportRedacted')"
-            :aria-label="t('studio.audit.exportRedacted')"
-            @click="emit('export-output')"
-          >
-            <ArrowUpFromLine :size="15" />
-          </Button>
-        </div>
-        <p class="mt-1.5 truncate text-center text-[11px] text-muted-foreground">
-          {{ output.fileName }}
-        </p>
-      </template>
-
-      <!-- Idle / redacting / failed: apply (or retry) redaction. The count
-           reflects reviewer edits — kept (suppressed) entities are excluded. -->
-      <Button
-        v-else
-        variant="outline"
-        size="sm"
-        class="w-full"
-        :disabled="!canRedact || applyCount === 0"
-        @click="emit('redact')"
-      >
-        <Loader2
-          v-if="redactPhase === 'redacting'"
-          :size="15"
-          class="animate-spin"
-        />
-        {{
-          redactPhase === "redacting"
-            ? t("studio.audit.redacting")
-            : redactPhase === "failed"
-              ? t("studio.audit.retryRedaction")
-              : applyCount < count
-                ? t("studio.audit.applyCount", { n: applyCount, total: count })
-                : t("studio.audit.apply")
-        }}
-      </Button>
-    </div>
+      :redact-phase="redactPhase"
+      :can-redact="canRedact"
+      :redact-error="redactError"
+      :output="output"
+      :count="count"
+      :effective-redact-count="effectiveRedactCount"
+      @redact="emit('redact')"
+      @download-output="emit('download-output')"
+      @export-output="emit('export-output')"
+    />
   </div>
 </template>
diff --git a/packages/console/app/components/pages/studio/entities/StudioAuditToolbar.vue b/packages/console/app/components/pages/studio/entities/StudioAuditToolbar.vue
new file mode 100644
index 00000000..a07a620a
--- /dev/null
+++ b/packages/console/app/components/pages/studio/entities/StudioAuditToolbar.vue
@@ -0,0 +1,149 @@
+<script setup lang="ts">
+import type { PipelineSummary } from "@nvisy/sdk/datatypes";
+import {
+	ArrowUpFromLine,
+	Download,
+	Loader2,
+	Play,
+	RotateCcw,
+} from "@lucide/vue";
+import type { StudioDetectionPhase } from "#console/composables/useStudioDetection";
+import type {
+	RedactionOutput,
+	StudioRedactPhase,
+} from "#console/composables/useStudioRedaction";
+import { Button } from "#console/components/ui/button";
+import {
+	Select,
+	SelectContent,
+	SelectItem,
+	SelectTrigger,
+	SelectValue,
+} from "#console/components/ui/select";
+
+/**
+ * The floating controls bar for the full-screen audit review: pipeline
+ * selection + run on the left, redaction actions (apply, then download/export)
+ * on the right — all the inspector's controls in one bar so the collapsed
+ * inspector isn't missed. Floats centered at the bottom of the wide table.
+ */
+const props = defineProps<{
+	pipelines: PipelineSummary[] | undefined;
+	phase: StudioDetectionPhase;
+	canRun: boolean;
+	redactPhase?: StudioRedactPhase;
+	canRedact?: boolean;
+	redactError?: string;
+	output?: RedactionOutput | null;
+	count: number;
+	effectiveRedactCount?: number;
+}>();
+
+const emit = defineEmits<{
+	run: [];
+	redact: [];
+	"download-output": [];
+	"export-output": [];
+}>();
+
+const selectedPipeline = defineModel<string>("selectedPipeline", {
+	default: "",
+});
+
+const { t } = useI18n();
+
+// How many entities the "Apply" button will redact (excludes kept ones).
+const applyCount = computed(() => props.effectiveRedactCount ?? props.count);
+// Redaction actions only apply once there's a completed detection to redact.
+const showRedaction = computed(() => props.phase === "complete");
+</script>
+
+<template>
+  <div
+    class="flex items-center gap-2 rounded-xl border border-border/60 bg-background/95 p-2 shadow-lg backdrop-blur supports-[backdrop-filter]:bg-background/80"
+  >
+    <!-- Detection: pick a pipeline and run it. -->
+    <Select v-model="selectedPipeline" :disabled="phase === 'running'">
+      <SelectTrigger class="h-8 w-48 text-sm">
+        <SelectValue :placeholder="t('studio.audit.pipelinePlaceholder')" />
+      </SelectTrigger>
+      <SelectContent>
+        <SelectItem
+          v-for="p in pipelines ?? []"
+          :key="p.slug"
+          :value="p.slug"
+          class="text-sm font-normal"
+        >
+          {{ p.displayName }}
+        </SelectItem>
+        <p
+          v-if="!pipelines?.length"
+          class="px-2 py-1.5 text-sm text-muted-foreground"
+        >
+          {{ t("studio.audit.noPipelines") }}
+        </p>
+      </SelectContent>
+    </Select>
+    <Button
+      size="icon"
+      class="size-8 shrink-0"
+      :disabled="!canRun"
+      :title="phase === 'complete' ? t('studio.audit.runAgain') : t('studio.audit.run')"
+      :aria-label="
+        phase === 'complete' ? t('studio.audit.runAgain') : t('studio.audit.run')
+      "
+      @click="emit('run')"
+    >
+      <Loader2 v-if="phase === 'running'" :size="16" class="animate-spin" />
+      <RotateCcw v-else-if="phase === 'complete'" :size="16" />
+      <Play v-else :size="16" />
+    </Button>
+
+    <!-- Redaction: apply, then download / export the output. -->
+    <template v-if="showRedaction">
+      <div class="mx-1 h-6 w-px shrink-0 bg-border/60" />
+      <template v-if="redactPhase === 'done' && output">
+        <Button
+          size="sm"
+          class="h-8 shrink-0"
+          :title="output.fileName"
+          @click="emit('download-output')"
+        >
+          <Download :size="15" />
+          {{ t("studio.audit.download") }}
+        </Button>
+        <Button
+          variant="outline"
+          size="sm"
+          class="h-8 shrink-0"
+          @click="emit('export-output')"
+        >
+          <ArrowUpFromLine :size="15" />
+          {{ t("studio.audit.export") }}
+        </Button>
+      </template>
+      <Button
+        v-else
+        size="sm"
+        class="h-8 shrink-0"
+        :disabled="!canRedact || applyCount === 0"
+        @click="emit('redact')"
+      >
+        <Loader2
+          v-if="redactPhase === 'redacting'"
+          :size="15"
+          class="animate-spin"
+        />
+        {{
+          redactPhase === "redacting"
+            ? t("studio.audit.redacting")
+            : redactPhase === "failed"
+              ? t("studio.audit.retryRedaction")
+              : applyCount < count
+                ? t("studio.audit.applyCount", { n: applyCount, total: count })
+                : t("studio.audit.apply")
+        }}
+      </Button>
+    </template>
+  </div>
+</template>
diff --git a/packages/console/app/components/pages/studio/entities/StudioDetectionBar.vue b/packages/console/app/components/pages/studio/entities/StudioDetectionBar.vue
index d6e30126..8d42747f 100644
--- a/packages/console/app/components/pages/studio/entities/StudioDetectionBar.vue
+++ b/packages/console/app/components/pages/studio/entities/StudioDetectionBar.vue
@@ -29,7 +29,7 @@ defineEmits<{ run: [] }>();
 <template>
   <div class="flex h-11 items-center gap-2 border-b border-border/50 bg-background px-3">
     <Select v-model="selectedPipeline" :disabled="phase === 'running'">
-      <SelectTrigger class="h-8 flex-1 text-sm">
+      <SelectTrigger class="h-8 w-full max-w-xs text-sm">
         <SelectValue :placeholder="t('studio.audit.pipelinePlaceholder')" />
       </SelectTrigger>
       <SelectContent>
diff --git a/packages/console/app/components/pages/studio/entities/StudioRedactionFooter.vue b/packages/console/app/components/pages/studio/entities/StudioRedactionFooter.vue
new file mode 100644
index 00000000..cafaf17f
--- /dev/null
+++ b/packages/console/app/components/pages/studio/entities/StudioRedactionFooter.vue
@@ -0,0 +1,103 @@
+<script setup lang="ts">
+import { ArrowUpFromLine, Download, Loader2, TriangleAlert } from "@lucide/vue";
+import { Button } from "#console/components/ui/button";
+import type {
+	RedactionOutput,
+	StudioRedactPhase,
+} from "#console/composables/useStudioRedaction";
+
+/**
+ * The redaction action bar for a completed detection: apply redaction, then
+ * download or export the redacted output. Shared by the inspector audit panel
+ * and the full-screen audit review so the two never drift.
+ */
+const props = defineProps<{
+	/** Redaction lifecycle for the complete detection. */
+	redactPhase?: StudioRedactPhase;
+	/** Whether redaction can be applied right now (complete, not in flight). */
+	canRedact?: boolean;
+	/** Failure message shown when redaction failed. */
+	redactError?: string;
+	/** The redacted output produced by redaction, once done. */
+	output?: RedactionOutput | null;
+	/** Total entity count. */
+	count: number;
+	/** How many entities the redaction will actually redact (total minus kept). */
+	effectiveRedactCount?: number;
+}>();
+
+const emit = defineEmits<{
+	/** Apply redaction to the complete detection. */
+	redact: [];
+	/** Download the redacted output file. */
+	"download-output": [];
+	/** Export the redacted output file to a file-service connection. */
+	"export-output": [];
+}>();
+
+const { t } = useI18n();
+
+// How many entities the "Apply" button will redact (excludes kept ones).
+const applyCount = computed(() => props.effectiveRedactCount ?? props.count);
+</script>
+
+<template>
+  <div class="border-t border-border/50 bg-muted/30 p-3">
+    <!-- Redaction failed: show why, keep the button available to retry. -->
+    <p
+      v-if="redactPhase === 'failed' && redactError"
+      class="mb-2 flex items-start gap-1.5 text-xs text-destructive"
+    >
+      <TriangleAlert :size="13" class="mt-px shrink-0" />
+      <span>{{ redactError }}</span>
+    </p>
+
+    <!-- Done: the redacted file is ready to download or export. -->
+    <template v-if="redactPhase === 'done' && output">
+      <div class="flex gap-2">
+        <Button size="sm" class="flex-1" @click="emit('download-output')">
+          <Download :size="15" />
+          {{ t("studio.audit.downloadRedacted") }}
+        </Button>
+        <Button
+          variant="outline"
+          size="sm"
+          :title="t('studio.audit.exportRedacted')"
+          :aria-label="t('studio.audit.exportRedacted')"
+          @click="emit('export-output')"
+        >
+          <ArrowUpFromLine :size="15" />
+        </Button>
+      </div>
+      <p class="mt-1.5 truncate text-center text-[11px] text-muted-foreground">
+        {{ output.fileName }}
+      </p>
+    </template>
+
+    <!-- Idle / redacting / failed: apply (or retry) redaction. The count
+         reflects reviewer edits — kept (suppressed) entities are excluded. -->
+    <Button
+      v-else
+      variant="outline"
+      size="sm"
+      class="w-full"
+      :disabled="!canRedact || applyCount === 0"
+      @click="emit('redact')"
+    >
+      <Loader2
+        v-if="redactPhase === 'redacting'"
+        :size="15"
+        class="animate-spin"
+      />
+      {{
+        redactPhase === "redacting"
+          ? t("studio.audit.redacting")
+          : redactPhase === "failed"
+            ? t("studio.audit.retryRedaction")
+            : applyCount < count
+              ? t("studio.audit.applyCount", { n: applyCount, total: count })
+              : t("studio.audit.apply")
+      }}
+    </Button>
+  </div>
+</template>
diff --git a/packages/console/app/components/pages/studio/entities/index.ts b/packages/console/app/components/pages/studio/entities/index.ts
index 3291eff4..1ec37c7b 100644
--- a/packages/console/app/components/pages/studio/entities/index.ts
+++ b/packages/console/app/components/pages/studio/entities/index.ts
@@ -2,5 +2,7 @@ export { default as EntityDetailPopover } from "./EntityDetailPopover.vue";
 export { default as EntityAuditModal } from "./EntityAuditModal.vue";
 export { default as StudioAuditPanel } from "./StudioAuditPanel.vue";
 export { default as StudioAuditTable } from "./StudioAuditTable.vue";
+export { default as StudioRedactionFooter } from "./StudioRedactionFooter.vue";
+export { default as StudioAuditToolbar } from "./StudioAuditToolbar.vue";
 export { default as StudioDetectionBar } from "./StudioDetectionBar.vue";
 // AddEntityPopover / AddEntityHint are composed by the preview views directly.
diff --git a/packages/console/app/components/pages/studio/index.ts b/packages/console/app/components/pages/studio/index.ts
index a757b390..a5be22a8 100644
--- a/packages/console/app/components/pages/studio/index.ts
+++ b/packages/console/app/components/pages/studio/index.ts
@@ -1,3 +1,2 @@
 export * from "./preview";
 export * from "./entities";
-export * from "./chat";
diff --git a/packages/console/app/components/ui/sidebar/SidebarInset.vue b/packages/console/app/components/ui/sidebar/SidebarInset.vue
index 9c5ba78e..29f6cd5c 100644
--- a/packages/console/app/components/ui/sidebar/SidebarInset.vue
+++ b/packages/console/app/components/ui/sidebar/SidebarInset.vue
@@ -23,6 +23,8 @@ const props = defineProps<{
 
 <style scoped>
 .sidebar-content {
-  grid-column: content / -1;
+  /* Stop before the chat rail's inset gap so the content card reflows when the
+     chat opens, rather than spanning under it. */
+  grid-column: content / chat-rail;
 }
 </style>
diff --git a/packages/console/app/components/ui/sidebar/SidebarProvider.vue b/packages/console/app/components/ui/sidebar/SidebarProvider.vue
index f50dd86c..bc5cb53a 100644
--- a/packages/console/app/components/ui/sidebar/SidebarProvider.vue
+++ b/packages/console/app/components/ui/sidebar/SidebarProvider.vue
@@ -10,6 +10,7 @@ import { TooltipProvider } from "reka-ui";
 import { computed, ref } from "vue";
 import { cn } from "#console/utils/shadcn";
 import {
+	CHAT_WIDTH,
 	provideSidebarContext,
 	SIDEBAR_COOKIE_MAX_AGE,
 	SIDEBAR_COOKIE_NAME,
@@ -86,6 +87,19 @@ provideSidebarContext({
 	setOpenMobile,
 	toggleSidebar,
 });
+
+// The chat rail is its own feature (see useChatPanel) — the provider only reads
+// its open state to size the `[chat]` grid track, so the rail reflows the
+// content card without owning the chat's state. On desktop only; on mobile the
+// chat is an overlay sheet and takes no track.
+const { isOpen: chatOpen } = useChatPanel();
+const chatVisible = computed(() => !isMobile.value && chatOpen.value);
+const chatWidth = computed(() => (chatVisible.value ? CHAT_WIDTH : "0px"));
+// The inset gap before the chat rail only exists when the rail is open, so a
+// closed chat leaves no dead space on the content card's right edge.
+const chatGap = computed(() =>
+	chatVisible.value ? "var(--shell-inset)" : "0px",
+);
 </script>
 
 <template>
@@ -104,7 +118,11 @@ provideSidebarContext({
       :data-state="state"
       :data-collapsible="state === 'collapsed' ? 'icon' : ''"
       :data-mobile="isMobile ? 'true' : undefined"
-      :style="{ '--sidebar-w': state === 'collapsed' ? SIDEBAR_WIDTH_ICON : SIDEBAR_WIDTH }"
+      :style="{
+        '--sidebar-w': state === 'collapsed' ? SIDEBAR_WIDTH_ICON : SIDEBAR_WIDTH,
+        '--chat-w': chatWidth,
+        '--chat-gap': chatGap,
+      }"
       v-bind="$attrs"
       :class="cn(props.class)"
     >
@@ -126,6 +144,13 @@ provideSidebarContext({
   inherits: false;
   initial-value: 0px;
 }
+/* The chat rail's track width, animated 0 ↔ open like the sidebar track (see the
+   chat-rail track below). Same registration rules apply. */
+@property --chat-w {
+  syntax: "<length>";
+  inherits: false;
+  initial-value: 0px;
+}
 </style>
 
 <style scoped>
@@ -139,19 +164,29 @@ provideSidebarContext({
 .sidebar-shell {
   --shell-inset: 0.5rem;
   display: grid;
-  grid-template-columns: [sidebar] var(--sidebar-w) [rail] var(--shell-inset) [content] minmax(0, 1fr);
+  grid-template-columns:
+    [sidebar] var(--sidebar-w)
+    [rail] var(--shell-inset)
+    [content] minmax(0, 1fr)
+    [chat-rail] var(--chat-gap, 0px)
+    [chat] var(--chat-w);
   grid-template-rows: 100%;
   height: 100svh;
   width: 100%;
   overflow: hidden;
   padding: var(--shell-inset);
-  /* Smooth, decelerating collapse/expand of the whole track. */
-  transition: --sidebar-w 220ms cubic-bezier(0.4, 0, 0.2, 1);
+  /* Smooth, decelerating collapse/expand of the sidebar and chat tracks. */
+  transition:
+    --sidebar-w 220ms cubic-bezier(0.4, 0, 0.2, 1),
+    --chat-w 220ms cubic-bezier(0.4, 0, 0.2, 1);
 }
-/* Mobile: no sidebar/rail tracks — the sidebar is an overlay sheet, content
-   fills the shell with no floating inset. */
+/* Mobile: no sidebar/rail/chat tracks — the sidebar and chat are overlay sheets,
+   content fills the shell with no floating inset. */
 .sidebar-shell[data-mobile="true"] {
-  grid-template-columns: [content] minmax(0, 1fr);
+  /* `[chat-rail]` closes the content track so SidebarInset's
+     `grid-column: content / chat-rail` resolves to a declared line rather than
+     an implicit one the browser would synthesize. */
+  grid-template-columns: [content] minmax(0, 1fr) [chat-rail];
   padding: 0;
 }
 </style>
diff --git a/packages/console/app/components/ui/sidebar/utils.ts b/packages/console/app/components/ui/sidebar/utils.ts
index 6a422547..a6fd995e 100644
--- a/packages/console/app/components/ui/sidebar/utils.ts
+++ b/packages/console/app/components/ui/sidebar/utils.ts
@@ -7,6 +7,8 @@ export const SIDEBAR_WIDTH = "14rem";
 export const SIDEBAR_WIDTH_MOBILE = "18rem";
 export const SIDEBAR_WIDTH_ICON = "3rem";
 export const SIDEBAR_KEYBOARD_SHORTCUT = "b";
+/** Width of the global chat rail's grid track when open (see AppChat). */
+export const CHAT_WIDTH = "22rem";
 
 export const [useSidebar, provideSidebarContext] = createContext<{
 	state: ComputedRef<"expanded" | "collapsed">;
diff --git a/packages/console/app/composables/useApiTokens.ts b/packages/console/app/composables/useApiTokens.ts
index 111b7230..98f23bbf 100644
--- a/packages/console/app/composables/useApiTokens.ts
+++ b/packages/console/app/composables/useApiTokens.ts
@@ -14,11 +14,12 @@ export function useApiTokens() {
 
 	const tokensQuery = useQuery({
 		key: ["apiTokens"],
-		query: async () => {
+		query: () => {
 			const client = $nvisyClient.value;
 			if (!client) throw new Error("Not authenticated");
-			const result = await client.apiTokens.listApiTokens();
-			return result.items;
+			return fetchAllPages((after) =>
+				client.apiTokens.listApiTokens({ after }),
+			);
 		},
 		enabled: () => isAuthenticated.value,
 	});
diff --git a/packages/console/app/composables/useChat.ts b/packages/console/app/composables/useChat.ts
new file mode 100644
index 00000000..e4143bdd
--- /dev/null
+++ b/packages/console/app/composables/useChat.ts
@@ -0,0 +1,294 @@
+import type { Ref } from "vue";
+import { NvisyApiError } from "@nvisy/sdk";
+import type { ChatMessage, ChatSession } from "@nvisy/sdk/datatypes";
+
+/**
+ * The workspace assistant chat, backed by the SDK's `client.chat.*` sessions and
+ * Server-Sent-Events message stream.
+ *
+ * State is a module-level singleton: there's one chat panel in the shell, so
+ * every trigger (the header toggle, the studio, a future launcher) drives the
+ * same sessions, current session, and message list. The assistant's reply
+ * streams token-by-token into the last message, which grows reactively as
+ * `ChatToken` deltas arrive.
+ *
+ * A workspace with no inference provider configured returns 409 on send; that's
+ * surfaced as `needsProvider` so the panel can prompt the user to connect one
+ * rather than showing an error.
+ */
+
+// A message as the panel renders it: the SDK's fields plus the transient
+// `streaming` flag on the assistant reply currently being received.
+export interface ChatMessageView {
+	id: string;
+	role: "user" | "assistant";
+	content: string;
+	createdAt: string;
+	parentId?: string;
+	streaming?: boolean;
+}
+
+const sessions = ref<ChatSession[]>([]);
+const currentSessionId = ref<string | null>(null);
+const messages = ref<ChatMessageView[]>([]);
+const isLoadingSessions = ref(false);
+const isLoadingMessages = ref(false);
+const isStreaming = ref(false);
+// Set when a send returns 409 — the workspace has no inference provider, so the
+// assistant can't reply until one is connected.
+const needsProvider = ref(false);
+const error = ref<string | null>(null);
+let loadedWorkspace: string | null = null;
+// Bumped on every workspace switch. A send captures the current value at start
+// and abandons its stream/reconcile if the value has moved on — so a reply that
+// was in flight when the user switched workspaces can't write into the new
+// workspace's panel or leave `isStreaming` stuck on.
+let generation = 0;
+
+// Reset all chat state when the workspace changes, so one workspace's
+// conversations never bleed into another's. Registered once in a DETACHED effect
+// scope (not the calling component's), so it lives for the app's lifetime rather
+// than dying when the first `useChat` consumer unmounts.
+let resetWatchBound = false;
+function bindWorkspaceReset(
+	currentWorkspaceSlug: Ref<string | null | undefined>,
+) {
+	if (resetWatchBound) return;
+	resetWatchBound = true;
+	effectScope(true).run(() => {
+		watch(currentWorkspaceSlug, () => {
+			// Invalidate any in-flight send so its stream/reconcile can't touch the
+			// freshly-cleared state, and release the input.
+			generation++;
+			isStreaming.value = false;
+			loadedWorkspace = null;
+			sessions.value = [];
+			currentSessionId.value = null;
+			messages.value = [];
+			error.value = null;
+			needsProvider.value = false;
+		});
+	});
+}
+
+/** Convert an SDK message into the view model. */
+function toView(message: ChatMessage): ChatMessageView {
+	return {
+		id: message.id,
+		role: message.role === "system" ? "assistant" : message.role,
+		content: message.content,
+		createdAt: message.createdAt,
+		parentId: message.parentId,
+	};
+}
+
+export function useChat() {
+	const { $nvisyClient } = useNuxtApp();
+	const { currentWorkspaceSlug } = useWorkspaces();
+	bindWorkspaceReset(currentWorkspaceSlug);
+
+	function requireClient() {
+		const client = $nvisyClient.value;
+		if (!client) throw new Error("Not authenticated");
+		return client;
+	}
+
+	function requireWorkspace(): string {
+		const slug = currentWorkspaceSlug.value;
+		if (!slug) throw new Error("No active workspace");
+		return slug;
+	}
+
+	const currentSession = computed(
+		() => sessions.value.find((s) => s.id === currentSessionId.value) ?? null,
+	);
+
+	// The leaf to branch new messages from: the active session's current message,
+	// else the last message we have loaded.
+	const currentLeafId = computed(
+		() => currentSession.value?.currentMessageId ?? messages.value.at(-1)?.id,
+	);
+
+	// Load the workspace's sessions once per workspace (a switch reloads). Selects
+	// the most recently active session so the panel opens on a conversation.
+	async function loadSessions() {
+		const slug = requireWorkspace();
+		if (loadedWorkspace === slug) return;
+		loadedWorkspace = slug;
+		isLoadingSessions.value = true;
+		error.value = null;
+		try {
+			const page = await requireClient().chat.listSessions(slug);
+			sessions.value = page.items;
+			if (page.items[0]) await selectSession(page.items[0].id);
+		} catch {
+			// A load failure leaves the panel empty; the next open retries.
+			loadedWorkspace = null;
+		} finally {
+			isLoadingSessions.value = false;
+		}
+	}
+
+	// Switch to a session and load its message history in chronological order.
+	async function selectSession(sessionId: string) {
+		currentSessionId.value = sessionId;
+		messages.value = [];
+		isLoadingMessages.value = true;
+		try {
+			const history = await requireClient().chat.listMessages(
+				requireWorkspace(),
+				sessionId,
+			);
+			messages.value = history.map(toView);
+		} catch {
+			messages.value = [];
+		} finally {
+			isLoadingMessages.value = false;
+		}
+	}
+
+	// Start a fresh conversation: clears the current session so the next send
+	// creates one (titled from its first message).
+	function newSession() {
+		currentSessionId.value = null;
+		messages.value = [];
+		error.value = null;
+		needsProvider.value = false;
+	}
+
+	async function deleteSession(sessionId: string) {
+		try {
+			await requireClient().chat.deleteSession(requireWorkspace(), sessionId);
+		} catch {
+			// The panel fires this without awaiting; surface a failure through the
+			// existing error banner rather than leaving an unhandled rejection.
+			error.value = "delete";
+			return;
+		}
+		sessions.value = sessions.value.filter((s) => s.id !== sessionId);
+		if (currentSessionId.value === sessionId) newSession();
+	}
+
+	/**
+	 * Send a message and stream the assistant's reply. Creates a session first
+	 * when there isn't one, appends the user message and a live assistant message,
+	 * then grows the assistant message as `ChatToken` deltas arrive.
+	 */
+	async function sendMessage(content: string) {
+		const text = content.trim();
+		if (!text || isStreaming.value) return;
+
+		const slug = requireWorkspace();
+		// Capture the workspace generation: if it moves on mid-send (the user
+		// switched workspaces), this send's stream and reconcile must not write into
+		// the new workspace's freshly-reset state.
+		const sendGeneration = generation;
+		error.value = null;
+		needsProvider.value = false;
+
+		// Ensure a session exists (seed its title from the first message).
+		if (!currentSessionId.value) {
+			try {
+				const session = await requireClient().chat.createSession(slug, {
+					title: text.slice(0, 80),
+				});
+				sessions.value = [session, ...sessions.value];
+				currentSessionId.value = session.id;
+			} catch {
+				error.value = "send";
+				return;
+			}
+		}
+		const sessionId = currentSessionId.value;
+		if (!sessionId) return;
+
+		const parentId = currentLeafId.value;
+		const now = new Date().toISOString();
+		messages.value.push({
+			id: `local-user-${crypto.randomUUID()}`,
+			role: "user",
+			content: text,
+			createdAt: now,
+			parentId,
+		});
+		const assistant = reactive<ChatMessageView>({
+			id: `local-assistant-${crypto.randomUUID()}`,
+			role: "assistant",
+			content: "",
+			createdAt: new Date().toISOString(),
+			streaming: true,
+		});
+		messages.value.push(assistant);
+
+		isStreaming.value = true;
+		try {
+			for await (const token of requireClient().chat.streamMessage(
+				slug,
+				sessionId,
+				{ content: text, ...(parentId ? { parentId } : {}) },
+			)) {
+				// The workspace changed while streaming: stop writing tokens into the
+				// now-detached assistant bubble and abandon the rest of the send.
+				if (generation !== sendGeneration) return;
+				assistant.content += token.delta;
+			}
+		} catch (err) {
+			if (generation !== sendGeneration) return;
+			// 409: the workspace has no inference provider configured.
+			if (err instanceof NvisyApiError && err.statusCode === 409) {
+				needsProvider.value = true;
+			} else {
+				error.value = "stream";
+			}
+			// Drop the empty/partial assistant bubble on failure.
+			if (!assistant.content) {
+				messages.value = messages.value.filter((m) => m.id !== assistant.id);
+			}
+		} finally {
+			// After a workspace switch the reset watcher already cleared isStreaming
+			// and the message list; don't reconcile the old session against the new
+			// workspace or stomp the new state.
+			if (generation === sendGeneration) {
+				assistant.streaming = false;
+				isStreaming.value = false;
+				// Reconcile ids/tree with the server (the optimistic ids are local),
+				// and refresh the session's updatedAt/currentMessageId for ordering.
+				await reconcile(sessionId);
+			}
+		}
+	}
+
+	// Re-fetch the session's messages and list so local optimistic ids are
+	// replaced by the server's, keeping the message tree consistent.
+	async function reconcile(sessionId: string) {
+		try {
+			const [history, page] = await Promise.all([
+				requireClient().chat.listMessages(requireWorkspace(), sessionId),
+				requireClient().chat.listSessions(requireWorkspace()),
+			]);
+			if (currentSessionId.value === sessionId) {
+				messages.value = history.map(toView);
+			}
+			sessions.value = page.items;
+		} catch {
+			// Best-effort; the optimistic view still reflects the conversation.
+		}
+	}
+
+	return {
+		sessions: readonly(sessions),
+		currentSession,
+		currentSessionId: readonly(currentSessionId),
+		messages: readonly(messages),
+		isLoadingSessions: readonly(isLoadingSessions),
+		isLoadingMessages: readonly(isLoadingMessages),
+		isStreaming: readonly(isStreaming),
+		needsProvider: readonly(needsProvider),
+		error: readonly(error),
+		loadSessions,
+		selectSession,
+		newSession,
+		deleteSession,
+		sendMessage,
+	};
+}
diff --git a/packages/console/app/composables/useChatPanel.ts b/packages/console/app/composables/useChatPanel.ts
new file mode 100644
index 00000000..47062cd7
--- /dev/null
+++ b/packages/console/app/composables/useChatPanel.ts
@@ -0,0 +1,43 @@
+/**
+ * Open state for the global chat rail, so any trigger in the shell (the header
+ * toggle, a keyboard shortcut) controls the single mounted `AppChat` instead of
+ * each caller poking a child ref. Independent of the left sidebar's state.
+ *
+ * A module-level singleton: one chat rail, one source of truth. The rail width
+ * animates from this via a CSS var on the shell (see `AppChat`).
+ */
+const isOpen = ref(false);
+
+/** Cmd/Ctrl+J toggles the chat rail (Cmd/Ctrl+B is the left sidebar). */
+const CHAT_SHORTCUT = "j";
+let shortcutBound = false;
+
+export function useChatPanel() {
+	function open() {
+		isOpen.value = true;
+	}
+
+	function close() {
+		isOpen.value = false;
+	}
+
+	function toggle() {
+		isOpen.value = !isOpen.value;
+	}
+
+	// Bind the toggle shortcut once, on the client, for the app's lifetime.
+	if (import.meta.client && !shortcutBound) {
+		shortcutBound = true;
+		window.addEventListener("keydown", (event) => {
+			if (
+				event.key.toLowerCase() === CHAT_SHORTCUT &&
+				(event.metaKey || event.ctrlKey)
+			) {
+				event.preventDefault();
+				toggle();
+			}
+		});
+	}
+
+	return { isOpen: readonly(isOpen), open, close, toggle };
+}
diff --git a/packages/console/app/composables/useConnectProvider.ts b/packages/console/app/composables/useConnectProvider.ts
index 6dd888fd..e408e255 100644
--- a/packages/console/app/composables/useConnectProvider.ts
+++ b/packages/console/app/composables/useConnectProvider.ts
@@ -1,5 +1,6 @@
 import type {
 	CreateConnection,
+	CreateProvider,
 	StartFileServiceOAuth,
 } from "@nvisy/sdk/datatypes";
 import type {
@@ -21,7 +22,8 @@ import { toast } from "vue-sonner";
  *
  * Three connectable families connect three different ways:
  *  - object stores (S3, Azure, GCS): a credential dialog -> `createConnection`.
- *  - LLMs (OpenAI, Anthropic, Ollama): a different credential dialog -> same.
+ *  - LLMs (OpenAI, Anthropic, Ollama): a credential dialog -> `createProvider`
+ *    (inference providers are a separate resource from connections).
  *  - cloud file services (Drive, Dropbox, OneDrive, Box): OAuth - a short dialog
  *    collects a name/folder, then we redirect to the provider's consent screen.
  *
@@ -33,10 +35,17 @@ export function useConnectProvider() {
 	const { wLink } = useWorkspaceLink();
 	const {
 		createConnectionAsync,
-		isCreating,
+		isCreating: isCreatingConnection,
 		startFileServiceOAuthAsync,
 		isStartingOAuth,
 	} = useConnections();
+	const { createProviderAsync, isCreating: isCreatingProvider } =
+		useProviders();
+
+	// Either create-path may be in flight; the dialogs share one busy flag.
+	const isCreating = computed(
+		() => isCreatingConnection.value || isCreatingProvider.value,
+	);
 
 	// Shared header for whichever dialog opens (name + icon of the clicked card).
 	const seed = ref({ name: "", icon: "" });
@@ -76,12 +85,11 @@ export function useConnectProvider() {
 		}
 	}
 
-	// Storage + LLM: create the connection from the dialog's payload.
-	async function submitCredentials(connection: CreateConnection) {
+	// Storage: create the object-store connection from the dialog's payload.
+	async function submitStorage(connection: CreateConnection) {
 		try {
 			await createConnectionAsync(connection);
 			storageOpen.value = false;
-			llmOpen.value = false;
 			toast.success(t("connections.dialogs.connect.success"));
 			await navigateTo(wLink("/integrations"));
 		} catch {
@@ -89,6 +97,19 @@ export function useConnectProvider() {
 		}
 	}
 
+	// LLM: create the inference provider from the dialog's payload, and land on
+	// the providers tab where it now lives.
+	async function submitLlm(provider: CreateProvider) {
+		try {
+			await createProviderAsync(provider);
+			llmOpen.value = false;
+			toast.success(t("connections.dialogs.connect.success"));
+			await navigateTo(wLink("/integrations/providers"));
+		} catch {
+			toast.error(t("connections.dialogs.connect.error"));
+		}
+	}
+
 	// File service: ask the server for the authorize URL and hand the browser to
 	// the consent screen. The connection is created by the server-side callback
 	// once the user grants access, which then redirects back to /integrations
@@ -121,7 +142,8 @@ export function useConnectProvider() {
 		fileServiceOpen,
 		fileServiceProvider,
 		// Submits + loading
-		submitCredentials,
+		submitStorage,
+		submitLlm,
 		submitOAuth,
 		isCreating,
 		isStartingOAuth,
diff --git a/packages/console/app/composables/useConnections.ts b/packages/console/app/composables/useConnections.ts
index 7658f0a0..f5f72986 100644
--- a/packages/console/app/composables/useConnections.ts
+++ b/packages/console/app/composables/useConnections.ts
@@ -12,10 +12,10 @@ import type { FileProvider } from "#console/utils/connections";
 export function useConnections() {
 	const connectionsQuery = workspaceQuery(
 		"connections",
-		async ({ client, workspaceSlug }) => {
-			const result = await client.connections.listConnections(workspaceSlug);
-			return result.items;
-		},
+		({ client, workspaceSlug }) =>
+			fetchAllPages((after) =>
+				client.connections.listConnections(workspaceSlug, { after }),
+			),
 	);
 
 	// Reflect updates on a row immediately, reconciling once settled.
@@ -118,10 +118,19 @@ export function useConnections() {
 
 	// Mint a short-lived provider access token for a browser file picker (Google
 	// Drive, OneDrive, Box - the pickers that take a server token; Dropbox's
-	// Chooser uses a client-side app key instead and rejects this).
+	// Chooser uses a client-side app key instead and rejects this). An optional
+	// `resource` scopes the token to what the picker asked for (OneDrive requests
+	// a token per resource); the server uses its default when omitted.
 	const getPickerTokenMutation = workspaceMutation(
-		({ client, workspaceSlug }, connectionId: string) =>
-			client.connections.getPickerToken(workspaceSlug, connectionId),
+		(
+			{ client, workspaceSlug },
+			{ connectionId, resource }: { connectionId: string; resource?: string },
+		) =>
+			client.connections.getPickerToken(
+				workspaceSlug,
+				connectionId,
+				resource ? { resource } : {},
+			),
 	);
 
 	// Import the files a user picked in a provider's picker (id + name each);
diff --git a/packages/console/app/composables/useFileImport.ts b/packages/console/app/composables/useFileImport.ts
index 23e97b55..04f219e6 100644
--- a/packages/console/app/composables/useFileImport.ts
+++ b/packages/console/app/composables/useFileImport.ts
@@ -13,8 +13,12 @@ interface PickerAvailability {
 
 /** What a picker needs at open time: the availability config plus a token minter. */
 interface PickerContext extends PickerAvailability {
-	/** Mint a short-lived provider access token for a token-based picker. */
-	getToken: (connectionId: string) => Promise<string>;
+	/**
+	 * Mint a short-lived provider access token for a token-based picker, optionally
+	 * scoped to the resource the picker asked for (its `authenticate` command's
+	 * `resource`); the server uses its default resource when none is given.
+	 */
+	getToken: (connectionId: string, resource?: string) => Promise<string>;
 }
 
 /**
@@ -42,8 +46,8 @@ interface ImportPicker {
 const PICKERS: Record<string, ImportPicker> = {
 	one_drive: {
 		available: () => true,
-		open: async (connection, { getToken }) =>
-			openOneDrivePicker(await getToken(connection.id)),
+		open: (connection, { getToken }) =>
+			openOneDrivePicker((resource) => getToken(connection.id, resource)),
 	},
 	dropbox: {
 		available: (config) => !!config.dropboxAppKey,
@@ -61,7 +65,7 @@ export function isImportableConnection(
 	connection: Connection,
 	config: PickerAvailability,
 ): boolean {
-	if (connection.providerType !== "file_service" || !connection.isActive) {
+	if (connection.connectionType !== "file_service" || !connection.isActive) {
 		return false;
 	}
 	return PICKERS[connection.provider]?.available(config) ?? false;
@@ -73,8 +77,8 @@ export function useFileImport() {
 
 	const ctx: PickerContext = {
 		dropboxAppKey,
-		getToken: async (connectionId) =>
-			(await getPickerTokenAsync(connectionId)).accessToken,
+		getToken: async (connectionId, resource) =>
+			(await getPickerTokenAsync({ connectionId, resource })).accessToken,
 	};
 
 	/**
diff --git a/packages/console/app/composables/useInvites.ts b/packages/console/app/composables/useInvites.ts
index c309deec..074e2a65 100644
--- a/packages/console/app/composables/useInvites.ts
+++ b/packages/console/app/composables/useInvites.ts
@@ -12,13 +12,13 @@ export function useInvites(query?: MaybeRef<ListInvites>) {
 
 	const invitesQuery = workspaceQuery(
 		"invites",
-		async ({ client, workspaceSlug }) => {
-			const result = await client.invites.listInvites(
-				workspaceSlug,
-				toValue(query) ?? { limit: 500 },
-			);
-			return result.items;
-		},
+		({ client, workspaceSlug }) =>
+			fetchAllPages((after) =>
+				client.invites.listInvites(workspaceSlug, {
+					...toValue(query),
+					after,
+				}),
+			),
 		{
 			key: () => [
 				"invites",
diff --git a/packages/console/app/composables/usePipelines.ts b/packages/console/app/composables/usePipelines.ts
index 08db125d..b41fda08 100644
--- a/packages/console/app/composables/usePipelines.ts
+++ b/packages/console/app/composables/usePipelines.ts
@@ -8,10 +8,10 @@ export function usePipelines() {
 
 	const pipelinesQuery = workspaceQuery(
 		"pipelines",
-		async ({ client, workspaceSlug }) => {
-			const result = await client.pipelines.listPipelines(workspaceSlug);
-			return result.items;
-		},
+		({ client, workspaceSlug }) =>
+			fetchAllPages((after) =>
+				client.pipelines.listPipelines(workspaceSlug, { after }),
+			),
 	);
 
 	// Pipelines are keyed by slug; a delete drops the row immediately.
diff --git a/packages/console/app/composables/usePolicies.ts b/packages/console/app/composables/usePolicies.ts
index 12201012..d05d9d5a 100644
--- a/packages/console/app/composables/usePolicies.ts
+++ b/packages/console/app/composables/usePolicies.ts
@@ -8,10 +8,10 @@ export function usePolicies() {
 
 	const policiesQuery = workspaceQuery(
 		"policies",
-		async ({ client, workspaceSlug }) => {
-			const result = await client.policies.listPolicies(workspaceSlug);
-			return result.items;
-		},
+		({ client, workspaceSlug }) =>
+			fetchAllPages((after) =>
+				client.policies.listPolicies(workspaceSlug, { after }),
+			),
 	);
 
 	// Policies are keyed by slug; a delete drops the row immediately.
diff --git a/packages/console/app/composables/useProviders.ts b/packages/console/app/composables/useProviders.ts
new file mode 100644
index 00000000..4dfdf06a
--- /dev/null
+++ b/packages/console/app/composables/useProviders.ts
@@ -0,0 +1,103 @@
+import type {
+	CreateProvider,
+	Provider,
+	UpdateProvider,
+} from "@nvisy/sdk/datatypes";
+
+/**
+ * Composable for inference-provider operations — the LLM / NER services the
+ * platform calls. Providers are a separate resource from connections: they carry
+ * only inference config (an API key + model), never sync or file transfer.
+ */
+export function useProviders() {
+	const providersQuery = workspaceQuery(
+		"providers",
+		({ client, workspaceSlug }) =>
+			fetchAllPages((after) =>
+				client.providers.listProviders(workspaceSlug, { after }),
+			),
+	);
+
+	// Reflect updates on a row immediately, reconciling once settled.
+	const optimistic = useOptimisticList<Provider, Partial<Provider>>(
+		providersQuery.data,
+		(p) => p.id,
+	);
+
+	const createProviderMutation = workspaceMutation(
+		({ client, workspaceSlug }, provider: CreateProvider) =>
+			client.providers.createProvider(workspaceSlug, provider),
+		{ invalidates: "providers" },
+	);
+
+	const updateProviderMutation = workspaceMutation(
+		(
+			{ client, workspaceSlug },
+			{ providerId, updates }: { providerId: string; updates: UpdateProvider },
+		) => client.providers.updateProvider(workspaceSlug, providerId, updates),
+		{
+			onMutate({ providerId, updates }) {
+				// Optimistically reflect only the fields that render on the row and are
+				// read-shape compatible. `config` uses a write-only input type, so it
+				// can't merge into a `Provider`; settle()/refresh reconciles it.
+				const patch: Partial<Provider> = {};
+				if (updates.displayName !== undefined)
+					patch.displayName = updates.displayName;
+				if (updates.isActive !== undefined) patch.isActive = updates.isActive;
+				optimistic.apply(providerId, patch);
+			},
+			onSettled(data, _error, { providerId }) {
+				optimistic.settle(providerId, data as Partial<Provider> | undefined);
+				providersQuery.refresh();
+			},
+		},
+	);
+
+	const deleteProviderMutation = workspaceMutation(
+		({ client, workspaceSlug }, providerId: string) =>
+			client.providers.deleteProvider(workspaceSlug, providerId),
+		{
+			invalidates: "providers",
+			onMutate: (providerId) => optimistic.remove(providerId),
+			onError: (_error, providerId) => optimistic.restore(providerId),
+		},
+	);
+
+	// Verify a provider is reachable with its stored credentials.
+	const verifyProviderMutation = workspaceMutation(
+		({ client, workspaceSlug }, providerId: string) =>
+			client.providers.verifyProvider(workspaceSlug, providerId),
+	);
+
+	return {
+		// Query state
+		providers: optimistic.items,
+		isLoading: providersQuery.isLoading,
+		error: providersQuery.error,
+		refresh: providersQuery.refresh,
+
+		// Create
+		createProvider: createProviderMutation.mutate,
+		createProviderAsync: createProviderMutation.mutateAsync,
+		isCreating: createProviderMutation.isLoading,
+		createError: createProviderMutation.error,
+
+		// Update
+		updateProvider: updateProviderMutation.mutate,
+		updateProviderAsync: updateProviderMutation.mutateAsync,
+		isUpdating: updateProviderMutation.isLoading,
+		updateError: updateProviderMutation.error,
+
+		// Delete
+		deleteProvider: deleteProviderMutation.mutate,
+		deleteProviderAsync: deleteProviderMutation.mutateAsync,
+		isDeleting: deleteProviderMutation.isLoading,
+		deleteError: deleteProviderMutation.error,
+
+		// Verify (test) provider
+		verifyProvider: verifyProviderMutation.mutate,
+		verifyProviderAsync: verifyProviderMutation.mutateAsync,
+		isVerifying: verifyProviderMutation.isLoading,
+		verifyError: verifyProviderMutation.error,
+	};
+}
diff --git a/packages/console/app/composables/useSectionTabs.ts b/packages/console/app/composables/useSectionTabs.ts
index de9485b9..afb3af79 100644
--- a/packages/console/app/composables/useSectionTabs.ts
+++ b/packages/console/app/composables/useSectionTabs.ts
@@ -1,5 +1,6 @@
 import {
 	Plug,
+	Bot,
 	Webhook as WebhookIcon,
 	Compass,
 	History,
@@ -64,10 +65,10 @@ export function useSectionTabs() {
 			to: "/integrations",
 		},
 		{
-			value: "webhooks",
-			label: t("header.tabs.connections.webhooks"),
-			icon: WebhookIcon,
-			to: "/integrations/webhooks",
+			value: "providers",
+			label: t("header.tabs.connections.providers"),
+			icon: Bot,
+			to: "/integrations/providers",
 		},
 		{
 			value: "explore",
@@ -75,12 +76,6 @@ export function useSectionTabs() {
 			icon: Compass,
 			to: "/integrations/explore",
 		},
-		{
-			value: "runs",
-			label: t("header.tabs.connections.runs"),
-			icon: History,
-			to: "/integrations/runs",
-		},
 	]);
 
 	const settings = computed<SectionTab[]>(() => [
@@ -105,6 +100,12 @@ export function useSectionTabs() {
 	]);
 
 	const analytics = computed<SectionTab[]>(() => [
+		{
+			value: "webhooks",
+			label: t("header.tabs.analytics.webhooks"),
+			icon: WebhookIcon,
+			to: "/webhooks",
+		},
 		{
 			value: "overview",
 			label: t("header.tabs.analytics.overview"),
diff --git a/packages/console/app/composables/useStudioFiles.ts b/packages/console/app/composables/useStudioFiles.ts
index 9ffa20eb..c4924274 100644
--- a/packages/console/app/composables/useStudioFiles.ts
+++ b/packages/console/app/composables/useStudioFiles.ts
@@ -76,10 +76,13 @@ export function useStudioFiles() {
 	const openFilesList = computed(() => Array.from(openFiles.value.values()));
 
 	// Register a tab in loading state (synchronous, so tabs appear immediately).
+	// The name is left empty until metadata resolves — the UI shows the loading
+	// state from `isLoading`, so a placeholder string never stands in for the real
+	// name (and never leaks into derived names like the redacted-file download).
 	function addLoadingTab(fileId: string, file?: NvisyFile) {
 		openFiles.value.set(fileId, {
 			fileId,
-			displayName: file?.displayName || "Loading...",
+			displayName: file?.displayName ?? "",
 			fileExtension: file?.fileExtension ?? "",
 			contentUrl: null,
 			isLoading: true,
diff --git a/packages/console/app/composables/useStudioRedaction.ts b/packages/console/app/composables/useStudioRedaction.ts
index 949f09a4..2e591614 100644
--- a/packages/console/app/composables/useStudioRedaction.ts
+++ b/packages/console/app/composables/useStudioRedaction.ts
@@ -533,7 +533,8 @@ export function useStudioRedaction(target: RedactionTarget) {
 	);
 
 	// The download name for a redacted output: the input's name tagged `.redacted`
-	// (keeping its extension so it still opens), falling back to the file id.
+	// (keeping its extension so it still opens), falling back to the file id while
+	// the name isn't known yet.
 	function redactedName(fileId: string): string {
 		const base = detectionFileName.value;
 		if (!base) return fileId;
diff --git a/packages/console/app/composables/useWebhooks.ts b/packages/console/app/composables/useWebhooks.ts
index 74d4c26c..dd60fad2 100644
--- a/packages/console/app/composables/useWebhooks.ts
+++ b/packages/console/app/composables/useWebhooks.ts
@@ -10,10 +10,10 @@ import type {
 export function useWebhooks() {
 	const webhooksQuery = workspaceQuery(
 		"webhooks",
-		async ({ client, workspaceSlug }) => {
-			const result = await client.webhooks.listWebhooks(workspaceSlug);
-			return result.items;
-		},
+		({ client, workspaceSlug }) =>
+			fetchAllPages((after) =>
+				client.webhooks.listWebhooks(workspaceSlug, { after }),
+			),
 	);
 
 	// Reflect updates on a row immediately, reconciling once settled.
diff --git a/packages/console/app/layouts/default.vue b/packages/console/app/layouts/default.vue
index 53cc6d08..468c7b7f 100644
--- a/packages/console/app/layouts/default.vue
+++ b/packages/console/app/layouts/default.vue
@@ -1,6 +1,7 @@
 <script setup lang="ts">
 import AppSidebar from "#console/components/layout/sidebar/AppSidebar.vue";
 import AppHeader from "#console/components/layout/AppHeader.vue";
+import AppChat from "#console/components/layout/AppChat.vue";
 import { Loader2 } from "@lucide/vue";
 import {
 	SidebarInset,
@@ -56,6 +57,11 @@ const showPage = computed(
         </div>
       </div>
     </SidebarInset>
+    <!-- The global chat rail: the shell's `[chat]` grid track on desktop, an
+         overlay sheet on mobile. Mounted once so it's available on every page,
+         but only while a workspace is active — the chat is workspace-scoped and
+         its open watcher fetches sessions for the current workspace. -->
+    <AppChat v-if="currentWorkspaceSlug" />
   </SidebarProvider>
 
   <ClientOnly>
diff --git a/packages/console/app/pages/account/general.vue b/packages/console/app/pages/account/general.vue
index 5bed1aff..0649b691 100644
--- a/packages/console/app/pages/account/general.vue
+++ b/packages/console/app/pages/account/general.vue
@@ -386,7 +386,13 @@ async function savePassword() {
 
         <!-- Email & Password Card -->
         <Card class="rounded-xl border-border/50 py-0 pt-6">
-          <CardContent class="space-y-5">
+          <!-- No footer in the set-a-password state (no existing password, form
+               not yet revealed), so the content needs its own bottom padding —
+               otherwise the "Set a password" button clips the card's edge. -->
+          <CardContent
+            class="space-y-5"
+            :class="!hasPassword && !showFirstPasswordForm && 'pb-6'"
+          >
             <!-- Email Address (read-only) -->
             <div class="space-y-2">
               <Label for="email" required>
@@ -410,23 +416,28 @@ async function savePassword() {
                    one. Setting a first password needs a fresh re-auth, so this
                    redirects to the provider first, then reveals the form. -->
               <template v-if="!hasPassword && !showFirstPasswordForm">
-                <div class="space-y-2">
-                  <Label>{{ t("account.password.label") }}</Label>
-                  <p class="text-xs text-muted-foreground">
-                    {{ t("account.password.noneHint") }}
-                  </p>
+                <div class="flex items-center justify-between gap-4">
+                  <div class="space-y-1">
+                    <Label>{{ t("account.password.label") }}</Label>
+                    <p class="text-xs text-muted-foreground">
+                      {{ t("account.password.noneHint") }}
+                    </p>
+                  </div>
+                  <Button
+                    variant="outline"
+                    size="sm"
+                    class="shrink-0"
+                    :disabled="!canLink"
+                    :title="
+                      canLink
+                        ? undefined
+                        : t('account.password.reauthNeedsProvider')
+                    "
+                    @click="beginSetFirstPassword"
+                  >
+                    {{ t("account.password.setButton") }}
+                  </Button>
                 </div>
-                <Button
-                  variant="outline"
-                  size="sm"
-                  :disabled="!canLink"
-                  :title="
-                    canLink ? undefined : t('account.password.reauthNeedsProvider')
-                  "
-                  @click="beginSetFirstPassword"
-                >
-                  {{ t("account.password.setButton") }}
-                </Button>
               </template>
 
               <!-- Change existing password (needs the current one). -->
diff --git a/packages/console/app/pages/w/[workspace]/analytics/index.vue b/packages/console/app/pages/w/[workspace]/analytics/index.vue
index cc02eb8d..730ef867 100644
--- a/packages/console/app/pages/w/[workspace]/analytics/index.vue
+++ b/packages/console/app/pages/w/[workspace]/analytics/index.vue
@@ -194,13 +194,14 @@ const usageByModel = computed<BreakdownRow[]>(() =>
         <SectionTabs :tabs="sectionTabs.analytics.value" />
       </HeaderSocket>
 
-      <!-- KPI tiles -->
+      <!-- KPI tiles: the primary metric (detections) leads with the ink accent;
+           storage and usage sit alongside as quieter supporting figures. -->
       <div class="grid gap-4 sm:grid-cols-2 lg:grid-cols-3">
         <template v-if="isLoading && !analytics">
           <Card
             v-for="i in 3"
             :key="i"
-            class="flex h-[92px] items-center justify-center rounded-xl border-border/50 py-0"
+            class="flex h-[104px] items-center justify-center rounded-xl border-border/50 py-0"
           >
             <div
               class="size-5 animate-spin rounded-full border-2 border-muted-foreground/30 border-t-muted-foreground"
@@ -208,42 +209,57 @@ const usageByModel = computed<BreakdownRow[]>(() =>
           </Card>
         </template>
         <Card
-          v-for="kpi in kpis"
+          v-for="(kpi, i) in kpis"
           v-else
           :key="kpi.key"
-          class="flex flex-row items-center gap-4 rounded-xl border-border/50 px-5 py-4"
+          class="rounded-xl border-border/50 px-4 py-3.5"
+          :class="i === 0 && 'bg-primary/[0.03] ring-1 ring-primary/10'"
         >
-          <div
-            class="flex size-10 shrink-0 items-center justify-center rounded-lg border border-border/60 bg-muted/40 text-muted-foreground"
-          >
-            <component :is="kpi.icon" :size="18" :stroke-width="1.75" />
-          </div>
-          <div class="min-w-0">
-            <p
-              class="text-xs font-medium uppercase tracking-wide text-muted-foreground"
+          <div class="flex items-center gap-2">
+            <div
+              class="flex size-6 shrink-0 items-center justify-center rounded-md"
+              :class="
+                i === 0
+                  ? 'bg-primary/10 text-primary'
+                  : 'border border-border/60 bg-muted/40 text-muted-foreground'
+              "
             >
-              {{ kpi.label }}
-            </p>
+              <component :is="kpi.icon" :size="14" :stroke-width="1.75" />
+            </div>
             <p
-              class="mt-0.5 text-2xl font-semibold leading-none tabular-nums text-foreground"
+              class="text-[11px] font-semibold uppercase tracking-wider text-muted-foreground"
             >
-              {{ kpi.value }}
-            </p>
-            <p class="mt-1 truncate text-xs text-muted-foreground">
-              {{ kpi.sub }}
+              {{ kpi.label }}
             </p>
           </div>
+          <p
+            class="mt-2 font-mono text-2xl font-semibold leading-none tabular-nums text-foreground"
+          >
+            {{ kpi.value }}
+          </p>
+          <p class="mt-1.5 truncate text-xs text-muted-foreground">
+            {{ kpi.sub }}
+          </p>
         </Card>
       </div>
 
-      <!-- Detection activity heatmap -->
-      <DetectionActivityGrid
-        :time-series="timeSeries"
-        :is-loading="isLoadingTimeSeries"
-      />
+      <!-- Activity -->
+      <section class="flex flex-col gap-3">
+        <h2 class="analytics-section-title">
+          {{ t("analytics.sections.activity") }}
+        </h2>
+        <DetectionActivityGrid
+          :time-series="timeSeries"
+          :is-loading="isLoadingTimeSeries"
+        />
+      </section>
+
+      <!-- Trends: detections lead as the hero chart; the rest are supporting. -->
+      <section class="flex flex-col gap-3">
+        <h2 class="analytics-section-title">
+          {{ t("analytics.sections.trends") }}
+        </h2>
 
-      <!-- Trend charts -->
-      <div class="grid gap-4 md:grid-cols-2">
         <Card class="rounded-xl border-border/50">
           <CardHeader class="pb-2">
             <CardTitle class="text-sm font-medium">
@@ -255,42 +271,48 @@ const usageByModel = computed<BreakdownRow[]>(() =>
           </CardContent>
         </Card>
 
-        <Card class="rounded-xl border-border/50">
-          <CardHeader class="pb-2">
-            <CardTitle class="text-sm font-medium">
-              {{ t("analytics.trends.tokensTitle") }}
-            </CardTitle>
-          </CardHeader>
-          <CardContent class="pt-2">
-            <AnalyticsAreaChart :spec="tokensTrend" />
-          </CardContent>
-        </Card>
+        <div class="grid gap-4 md:grid-cols-3">
+          <Card class="rounded-xl border-border/50">
+            <CardHeader class="pb-2">
+              <CardTitle class="text-sm font-medium">
+                {{ t("analytics.trends.tokensTitle") }}
+              </CardTitle>
+            </CardHeader>
+            <CardContent class="pt-2">
+              <AnalyticsAreaChart :spec="tokensTrend" compact />
+            </CardContent>
+          </Card>
 
-        <Card class="rounded-xl border-border/50">
-          <CardHeader class="pb-2">
-            <CardTitle class="text-sm font-medium">
-              {{ t("analytics.trends.errorRateTitle") }}
-            </CardTitle>
-          </CardHeader>
-          <CardContent class="pt-2">
-            <AnalyticsAreaChart :spec="errorTrend" />
-          </CardContent>
-        </Card>
+          <Card class="rounded-xl border-border/50">
+            <CardHeader class="pb-2">
+              <CardTitle class="text-sm font-medium">
+                {{ t("analytics.trends.errorRateTitle") }}
+              </CardTitle>
+            </CardHeader>
+            <CardContent class="pt-2">
+              <AnalyticsAreaChart :spec="errorTrend" compact />
+            </CardContent>
+          </Card>
 
-        <Card class="rounded-xl border-border/50">
-          <CardHeader class="pb-2">
-            <CardTitle class="text-sm font-medium">
-              {{ t("analytics.trends.avgDurationTitle") }}
-            </CardTitle>
-          </CardHeader>
-          <CardContent class="pt-2">
-            <AnalyticsAreaChart :spec="durationTrend" />
-          </CardContent>
-        </Card>
-      </div>
+          <Card class="rounded-xl border-border/50">
+            <CardHeader class="pb-2">
+              <CardTitle class="text-sm font-medium">
+                {{ t("analytics.trends.avgDurationTitle") }}
+              </CardTitle>
+            </CardHeader>
+            <CardContent class="pt-2">
+              <AnalyticsAreaChart :spec="durationTrend" compact />
+            </CardContent>
+          </Card>
+        </div>
+      </section>
 
       <!-- Breakdowns -->
-      <div class="grid gap-4 md:grid-cols-3">
+      <section class="flex flex-col gap-3">
+        <h2 class="analytics-section-title">
+          {{ t("analytics.sections.breakdowns") }}
+        </h2>
+        <div class="grid gap-4 md:grid-cols-3">
         <AnalyticsBreakdown
           :title="t('analytics.breakdowns.detectionsByStatus')"
           :rows="detectionsByStatus"
@@ -306,7 +328,28 @@ const usageByModel = computed<BreakdownRow[]>(() =>
           :rows="usageByModel"
           :empty-text="t('analytics.breakdowns.noUsage')"
         />
-      </div>
+        </div>
+      </section>
     </div>
   </div>
 </template>
+
+<style scoped>
+/* Section heading: a small ink tick + a quiet label, so the page reads as
+   grouped sections rather than a flat stack of cards. */
+.analytics-section-title {
+	display: flex;
+	align-items: center;
+	gap: 0.5rem;
+	font-size: 0.8125rem;
+	font-weight: 600;
+	color: var(--foreground);
+}
+.analytics-section-title::before {
+	content: "";
+	width: 3px;
+	height: 0.85em;
+	border-radius: 1px;
+	background: var(--primary);
+}
+</style>
diff --git a/packages/console/app/pages/w/[workspace]/integrations/explore.vue b/packages/console/app/pages/w/[workspace]/integrations/explore.vue
index 2bec33a3..ec4e7b03 100644
--- a/packages/console/app/pages/w/[workspace]/integrations/explore.vue
+++ b/packages/console/app/pages/w/[workspace]/integrations/explore.vue
@@ -53,7 +53,8 @@ const {
 	llmProvider,
 	fileServiceOpen,
 	fileServiceProvider,
-	submitCredentials,
+	submitStorage,
+	submitLlm,
 	submitOAuth,
 	isCreating,
 	isStartingOAuth,
@@ -227,7 +228,7 @@ const {
         :provider-name="seed.name"
         :provider-icon="seed.icon"
         :is-loading="isCreating"
-        @connect="submitCredentials"
+        @connect="submitStorage"
       />
 
       <!-- Connect dialog (LLM) -->
@@ -235,7 +236,7 @@ const {
         v-model:open="llmOpen"
         :provider="llmProvider"
         :is-loading="isCreating"
-        @connect="submitCredentials"
+        @connect="submitLlm"
       />
 
       <!-- Connect dialog (cloud file service / OAuth) -->
diff --git a/packages/console/app/pages/w/[workspace]/integrations/index.vue b/packages/console/app/pages/w/[workspace]/integrations/index.vue
index 66a18226..df318c09 100644
--- a/packages/console/app/pages/w/[workspace]/integrations/index.vue
+++ b/packages/console/app/pages/w/[workspace]/integrations/index.vue
@@ -7,7 +7,15 @@ import { Button } from "#console/components/ui/button";
 import {
 	ConfigureConnectionDialog,
 	ConnectionsTable,
+	ConnectionRunsPanel,
 } from "#console/components/pages/integrations";
+import {
+	Dialog,
+	DialogContent,
+	DialogDescription,
+	DialogHeader,
+	DialogTitle,
+} from "#console/components/ui/dialog";
 import {
 	ImportError,
 	providerIcon,
@@ -98,6 +106,9 @@ onMounted(() => {
 // Connection dialogs
 const isConfigureConnectionDialogOpen = ref(false);
 const isDisconnectConnectionDialogOpen = ref(false);
+// The connection sync runs, shown in a wide dialog from the "View runs" button.
+// Also opened by a `?runs=1` deep link (sync notifications land here).
+const runsOpen = ref(useRoute().query.runs === "1");
 const selectedConnection = ref<Connection | null>(null);
 
 function findConnectionById(connectionId: string): Connection | undefined {
@@ -242,14 +253,14 @@ async function handleTestConnection(connectionId: string) {
           }}
         </p>
         <div class="flex shrink-0 items-center gap-2">
-          <Button as-child variant="outline" size="sm" class="font-normal">
-            <NuxtLink
-              :to="wLink('/integrations/runs')"
-              class="flex items-center gap-2"
-            >
-              <History :size="16" />
-              {{ t("connections.actions.viewRuns") }}
-            </NuxtLink>
+          <Button
+            variant="outline"
+            size="sm"
+            class="font-normal"
+            @click="runsOpen = true"
+          >
+            <History :size="16" />
+            {{ t("connections.actions.viewRuns") }}
           </Button>
           <Button as-child size="sm">
             <NuxtLink
@@ -352,6 +363,22 @@ async function handleTestConnection(connectionId: string) {
           </div>
         </template>
       </ConfirmDialog>
+
+      <!-- Sync runs: a wide dialog so the run table isn't cramped. Mounted only
+           while open so its data query runs on demand. -->
+      <Dialog v-model:open="runsOpen">
+        <DialogContent
+          class="flex h-[80vh] max-w-4xl flex-col gap-4 sm:max-w-4xl"
+        >
+          <DialogHeader>
+            <DialogTitle>{{ t("connections.runs.title") }}</DialogTitle>
+            <DialogDescription>
+              {{ t("connections.runs.description") }}
+            </DialogDescription>
+          </DialogHeader>
+          <ConnectionRunsPanel v-if="runsOpen" />
+        </DialogContent>
+      </Dialog>
     </div>
   </div>
 </template>
diff --git a/packages/console/app/pages/w/[workspace]/integrations/providers.vue b/packages/console/app/pages/w/[workspace]/integrations/providers.vue
new file mode 100644
index 00000000..4d5bdcfa
--- /dev/null
+++ b/packages/console/app/pages/w/[workspace]/integrations/providers.vue
@@ -0,0 +1,234 @@
+<script setup lang="ts">
+import { Bot, Loader2, Compass } from "@lucide/vue";
+import { toast } from "vue-sonner";
+import type { Provider, UpdateProvider } from "@nvisy/sdk/datatypes";
+import { Button } from "#console/components/ui/button";
+import {
+	ProvidersTable,
+	ConfigureProviderDialog,
+} from "#console/components/pages/integrations";
+import { providerIcon, providerLabel } from "#console/utils/connections";
+import { ConfirmDialog } from "#console/components/shared";
+import { HeaderSocket, SectionTabs } from "#console/components/layout/header";
+
+const { t } = useI18n();
+const sectionTabs = useSectionTabs();
+const { wLink } = useWorkspaceLink();
+
+useHead({ title: "Providers" });
+
+definePageMeta({
+	pageCategory: "header.category.integrations",
+	hideCategory: true,
+});
+
+const {
+	providers,
+	isLoading,
+	error,
+	refresh,
+	updateProviderAsync,
+	deleteProviderAsync,
+	verifyProviderAsync,
+	isUpdating,
+	isDeleting,
+} = useProviders();
+
+const isConfigureDialogOpen = ref(false);
+const isDeleteDialogOpen = ref(false);
+const selectedProvider = ref<Provider | null>(null);
+
+function findProviderById(providerId: string): Provider | undefined {
+	return providers.value?.find((p) => p.id === providerId);
+}
+
+function openConfigureDialog(providerId: string) {
+	const provider = findProviderById(providerId);
+	if (provider) {
+		selectedProvider.value = provider;
+		isConfigureDialogOpen.value = true;
+	}
+}
+
+function openDeleteDialog(providerId: string) {
+	const provider = findProviderById(providerId);
+	if (provider) {
+		selectedProvider.value = provider;
+		isDeleteDialogOpen.value = true;
+	}
+}
+
+async function handleUpdateProvider(updates: UpdateProvider) {
+	if (!selectedProvider.value) return;
+	try {
+		await updateProviderAsync({
+			providerId: selectedProvider.value.id,
+			updates,
+		});
+		isConfigureDialogOpen.value = false;
+		toast.success(t("providers.toast.updated"));
+	} catch (error) {
+		toast.error(t("providers.toast.updateFailed"), {
+			description: error instanceof Error ? error.message : undefined,
+		});
+	}
+}
+
+async function handleDeleteProvider(providerId: string) {
+	try {
+		await deleteProviderAsync(providerId);
+		isDeleteDialogOpen.value = false;
+		toast.success(t("providers.toast.deleted"));
+	} catch (error) {
+		toast.error(t("providers.toast.deleteFailed"), {
+			description: error instanceof Error ? error.message : undefined,
+		});
+	}
+}
+
+async function handleToggleActive(provider: Provider) {
+	try {
+		await updateProviderAsync({
+			providerId: provider.id,
+			updates: { isActive: !provider.isActive },
+		});
+		toast.success(
+			provider.isActive
+				? t("providers.toast.disabled")
+				: t("providers.toast.enabled"),
+		);
+	} catch (error) {
+		toast.error(t("providers.toast.updateFailed"), {
+			description: error instanceof Error ? error.message : undefined,
+		});
+	}
+}
+
+async function handleTestProvider(providerId: string) {
+	try {
+		const result = await verifyProviderAsync(providerId);
+		if (result.reachable) {
+			toast.success(t("providers.toast.testReachable"));
+		} else {
+			toast.error(t("providers.toast.testUnreachable"), {
+				description: result.error,
+			});
+		}
+	} catch (error) {
+		toast.error(t("providers.toast.testFailed"), {
+			description: error instanceof Error ? error.message : undefined,
+		});
+	}
+}
+</script>
+
+<template>
+  <!-- Fixed-height page so the table fills and scrolls (like /integrations). -->
+  <div class="flex flex-1 flex-col gap-4 p-4 pt-4 pb-6 h-[calc(100vh-5.5rem)]">
+    <div class="mx-auto flex w-full max-w-7xl flex-1 flex-col gap-4 min-h-0">
+      <!-- Section tabs in the app-header socket. -->
+      <HeaderSocket>
+        <SectionTabs :tabs="sectionTabs.integrations.value" />
+      </HeaderSocket>
+
+      <!-- Action row: count on the left, explore on the right. -->
+      <div class="flex items-center justify-between gap-3">
+        <p class="text-sm text-muted-foreground">
+          {{ t("providers.description", { count: providers?.length ?? 0 }) }}
+        </p>
+        <Button as-child size="sm">
+          <NuxtLink
+            :to="wLink('/integrations/explore')"
+            class="flex items-center gap-2"
+          >
+            <Compass :size="16" />
+            {{ t("connections.actions.explore") }}
+          </NuxtLink>
+        </Button>
+      </div>
+
+      <!-- Loading -->
+      <div
+        v-if="isLoading"
+        class="flex flex-1 items-center justify-center py-12"
+      >
+        <Loader2 :size="24" class="animate-spin text-muted-foreground" />
+      </div>
+
+      <!-- Error: surface the failure with a retry, not an empty state. -->
+      <div
+        v-else-if="error"
+        class="flex flex-1 flex-col items-center justify-center gap-3 py-12 text-center"
+      >
+        <p class="text-sm text-destructive">
+          {{ error.message || t("providers.errors.loadFailed") }}
+        </p>
+        <Button variant="outline" size="sm" @click="refresh()">
+          {{ t("common.errors.tryAgain") }}
+        </Button>
+      </div>
+
+      <!-- Bare full-width table, filling the remaining height. -->
+      <div v-else class="relative min-h-0 flex-1">
+        <ProvidersTable
+          :providers="providers ?? []"
+          :empty="{
+            icon: Bot,
+            title: t('providers.empty.title'),
+            description: t('providers.empty.description'),
+          }"
+          @configure="openConfigureDialog"
+          @delete="openDeleteDialog"
+          @test="handleTestProvider"
+          @toggle-active="handleToggleActive"
+        />
+      </div>
+
+      <!-- Dialogs -->
+      <ConfigureProviderDialog
+        v-model:open="isConfigureDialogOpen"
+        :provider="selectedProvider"
+        :is-loading="isUpdating"
+        @update="handleUpdateProvider"
+      />
+
+      <ConfirmDialog
+        v-model:open="isDeleteDialogOpen"
+        :title="
+          t('providers.dialogs.delete.title', {
+            name: selectedProvider?.displayName,
+          })
+        "
+        :description="t('providers.dialogs.delete.description')"
+        :confirm-label="t('providers.dialogs.delete.confirm')"
+        :cancel-label="t('providers.dialogs.delete.cancel')"
+        :is-loading="isDeleting"
+        @confirm="selectedProvider && handleDeleteProvider(selectedProvider.id)"
+      >
+        <template v-if="selectedProvider" #details>
+          <div class="flex items-center gap-3">
+            <div
+              class="flex size-9 shrink-0 items-center justify-center rounded-lg border border-border/60 bg-muted/40"
+            >
+              <img
+                v-if="providerIcon(selectedProvider.provider)"
+                :src="providerIcon(selectedProvider.provider)!"
+                :alt="selectedProvider.provider"
+                class="size-5 object-contain"
+              />
+              <Bot v-else :size="18" class="text-muted-foreground" />
+            </div>
+            <div class="min-w-0">
+              <p class="truncate text-sm font-medium text-foreground">
+                {{ selectedProvider.displayName }}
+              </p>
+              <p class="truncate text-xs text-muted-foreground">
+                {{ providerLabel(selectedProvider.provider) }}
+              </p>
+            </div>
+          </div>
+        </template>
+      </ConfirmDialog>
+    </div>
+  </div>
+</template>
diff --git a/packages/console/app/pages/w/[workspace]/integrations/runs.vue b/packages/console/app/pages/w/[workspace]/integrations/runs.vue
deleted file mode 100644
index ab57f796..00000000
--- a/packages/console/app/pages/w/[workspace]/integrations/runs.vue
+++ /dev/null
@@ -1,305 +0,0 @@
-<script setup lang="ts">
-import type { Component } from "vue";
-import type {
-	Connection,
-	ConnectionSync,
-	SyncStatus,
-} from "@nvisy/sdk/datatypes";
-import type { VirtualColumn } from "#console/components/ui/virtual-table";
-import {
-	Loader2,
-	Loader,
-	CircleCheck,
-	XCircle,
-	CircleSlash,
-	Clock,
-	HardDrive,
-	Ban,
-	History,
-} from "@lucide/vue";
-import { formatDuration } from "#console/utils/date";
-import { providerIcon } from "#console/utils/connections";
-import { Button } from "#console/components/ui/button";
-import { VirtualTable } from "#console/components/ui/virtual-table";
-import {
-	Select,
-	SelectContent,
-	SelectItem,
-	SelectTrigger,
-	SelectValue,
-} from "#console/components/ui/select";
-import { HeaderSocket, SectionTabs } from "#console/components/layout/header";
-import { toast } from "vue-sonner";
-
-const { t } = useI18n();
-const sectionTabs = useSectionTabs();
-const { relativeTime } = useRelativeTime();
-
-useHead({ title: "Connection Syncs" });
-
-definePageMeta({
-	pageCategory: "header.category.integrations",
-	hideCategory: true,
-});
-
-const SYNC_STATUSES: SyncStatus[] = [
-	"pending",
-	"running",
-	"completed",
-	"failed",
-	"cancelled",
-];
-
-// "all" maps to no status filter.
-const statusFilter = ref<SyncStatus | "all">("all");
-const status = computed<SyncStatus | undefined>(() =>
-	statusFilter.value === "all" ? undefined : statusFilter.value,
-);
-
-const { syncs, isLoading, hasMore, loadMore, isLoadingMore, cancelSyncAsync } =
-	useSyncs({ status });
-
-// Resolve connection id -> connection for name + provider logo.
-const { connections } = useConnections();
-const connectionById = computed(() => {
-	const map = new Map<string, Connection>();
-	for (const c of connections.value ?? []) map.set(c.id, c);
-	return map;
-});
-
-function connectionName(sync: ConnectionSync): string {
-	return (
-		connectionById.value.get(sync.connectionId)?.displayName ??
-		sync.connectionId
-	);
-}
-function connectionProvider(sync: ConnectionSync): string | undefined {
-	return connectionById.value.get(sync.connectionId)?.provider;
-}
-
-async function cancelSync(sync: ConnectionSync) {
-	try {
-		await cancelSyncAsync({
-			connectionId: sync.connectionId,
-			syncId: sync.id,
-		});
-		toast.success(t("connections.runs.syncCancelled"));
-	} catch (error) {
-		toast.error(t("connections.runs.syncCancelFailed"), {
-			description: error instanceof Error ? error.message : undefined,
-		});
-	}
-}
-
-const isCancellable = (sync: ConnectionSync) =>
-	sync.status === "running" || sync.status === "pending";
-
-function handleLoadMore() {
-	if (hasMore.value && !isLoadingMore.value) loadMore();
-}
-
-// Per-status presentation: icon + tint.
-const STATUS_META: Record<
-	SyncStatus,
-	{ icon: Component; class: string; spin?: boolean }
-> = {
-	pending: { icon: Clock, class: "text-muted-foreground" },
-	running: { icon: Loader, class: "text-blue-500", spin: true },
-	completed: { icon: CircleCheck, class: "text-emerald-500" },
-	failed: { icon: XCircle, class: "text-destructive" },
-	cancelled: { icon: CircleSlash, class: "text-muted-foreground" },
-};
-
-// Status comes from the API; fall back to a neutral icon if the backend ever
-// adds a status the map doesn't cover, so one unknown cell can't blank the table.
-const FALLBACK_STATUS_META = {
-	icon: Clock,
-	class: "text-muted-foreground",
-	spin: false,
-};
-function statusMeta(status: SyncStatus) {
-	return STATUS_META[status] ?? FALLBACK_STATUS_META;
-}
-
-const columns = computed<VirtualColumn<ConnectionSync>[]>(() => [
-	{
-		key: "connection",
-		header: t("connections.runs.connection"),
-		cell: () => ({ type: "custom" }),
-	},
-	{
-		key: "trigger",
-		header: t("connections.runs.trigger"),
-		width: "130px",
-		cell: (s) => ({
-			type: "badge",
-			label: t(`connections.runs.triggerType.${s.triggerType}`),
-			variant: "outline",
-		}),
-	},
-	{
-		key: "status",
-		header: t("connections.runs.statusHeader"),
-		width: "180px",
-		cell: () => ({ type: "custom" }),
-	},
-	{
-		key: "records",
-		header: t("connections.runs.records"),
-		width: "100px",
-		cell: (s) => ({
-			type: "text",
-			value: String(s.recordsSynced),
-			muted: true,
-		}),
-	},
-	{
-		key: "started",
-		header: t("connections.runs.started"),
-		width: "140px",
-		cell: (s) => ({
-			type: "text",
-			value: relativeTime(s.startedAt),
-			muted: true,
-		}),
-	},
-	{
-		key: "duration",
-		header: t("connections.runs.duration"),
-		width: "120px",
-		cell: (s) => ({
-			type: "text",
-			value: formatDuration(s.startedAt, s.completedAt),
-			muted: true,
-		}),
-	},
-	{
-		key: "cancel",
-		header: "",
-		width: "40px",
-		align: "right",
-		cell: () => ({ type: "custom" }),
-	},
-]);
-</script>
-
-<template>
-  <!-- Fixed-height page so the table fills and scrolls (like /files). -->
-  <div class="flex flex-1 flex-col gap-4 p-4 pt-4 pb-6 h-[calc(100vh-5.5rem)]">
-    <div class="mx-auto flex w-full max-w-7xl flex-1 flex-col gap-4 min-h-0">
-      <!-- Section tabs in the app-header socket. -->
-      <HeaderSocket>
-        <SectionTabs :tabs="sectionTabs.integrations.value" />
-      </HeaderSocket>
-
-      <!-- Filter toolbar: count on the left, status filter on the right. -->
-      <div class="flex flex-wrap items-center gap-3">
-        <p class="shrink-0 text-sm text-muted-foreground">
-          {{ t("connections.runs.runsFound", { count: syncs.length }) }}
-        </p>
-
-        <div class="flex-1" />
-
-        <Select v-model="statusFilter">
-          <SelectTrigger class="h-9 w-[160px] text-sm">
-            <SelectValue :placeholder="t('connections.runs.status')" />
-          </SelectTrigger>
-          <SelectContent>
-            <SelectItem value="all" class="text-sm font-normal">
-              {{ t("connections.runs.allStatus") }}
-            </SelectItem>
-            <SelectItem
-              v-for="s in SYNC_STATUSES"
-              :key="s"
-              :value="s"
-              class="text-sm font-normal"
-            >
-              {{ t(`connections.runs.syncStatus.${s}`) }}
-            </SelectItem>
-          </SelectContent>
-        </Select>
-      </div>
-
-      <!-- Loading -->
-      <div v-if="isLoading" class="flex flex-1 items-center justify-center py-12">
-        <Loader2 :size="24" class="animate-spin text-muted-foreground" />
-      </div>
-
-      <!-- Bare full-width table, filling the remaining height. -->
-      <div v-else class="relative min-h-0 flex-1">
-        <VirtualTable
-          :rows="syncs"
-          :columns="columns"
-          :empty="{
-            icon: History,
-            title: t('connections.runs.noRunsFound'),
-            description: t('connections.runs.noRunsDescription'),
-          }"
-          @load-more="handleLoadMore"
-        >
-            <!-- Connection + provider logo -->
-            <template #cell-connection="{ row }">
-              <div class="flex items-center gap-2.5">
-                <div
-                  class="flex size-7 shrink-0 items-center justify-center rounded-md border border-border/60 bg-muted/40"
-                >
-                  <img
-                    v-if="
-                      connectionProvider(row) &&
-                      providerIcon(connectionProvider(row)!)
-                    "
-                    :src="providerIcon(connectionProvider(row)!)!"
-                    :alt="connectionProvider(row)"
-                    class="size-4 object-contain"
-                  />
-                  <HardDrive v-else :size="14" class="text-muted-foreground" />
-                </div>
-                <span class="truncate text-sm font-medium">
-                  {{ connectionName(row) }}
-                </span>
-              </div>
-            </template>
-
-            <!-- Status + optional error subtitle -->
-            <template #cell-status="{ row }">
-              <div class="flex items-center gap-2">
-                <component
-                  :is="statusMeta(row.status).icon"
-                  :size="14"
-                  :class="[
-                    'shrink-0',
-                    statusMeta(row.status).class,
-                    statusMeta(row.status).spin && 'animate-spin',
-                  ]"
-                />
-                <span class="text-sm">
-                  {{ t(`connections.runs.syncStatus.${row.status}`) }}
-                </span>
-              </div>
-              <p
-                v-if="row.errorMessage"
-                class="mt-0.5 truncate text-xs text-destructive"
-                :title="row.errorMessage"
-              >
-                {{ row.errorMessage }}
-              </p>
-            </template>
-
-            <!-- Cancel (running/pending only) -->
-            <template #cell-cancel="{ row }">
-              <Button
-                v-if="isCancellable(row)"
-                variant="ghost"
-                size="icon"
-                class="size-8"
-                :aria-label="t('connections.runs.cancel')"
-                @click.stop="cancelSync(row)"
-              >
-                <Ban :size="15" class="text-muted-foreground" />
-              </Button>
-            </template>
-        </VirtualTable>
-      </div>
-    </div>
-  </div>
-</template>
diff --git a/packages/console/app/pages/w/[workspace]/studio/index.vue b/packages/console/app/pages/w/[workspace]/studio/index.vue
index c9082225..3bfb5088 100644
--- a/packages/console/app/pages/w/[workspace]/studio/index.vue
+++ b/packages/console/app/pages/w/[workspace]/studio/index.vue
@@ -4,8 +4,6 @@ import { SplitterPanel } from "reka-ui";
 import { toast } from "vue-sonner";
 import JSZip from "jszip";
 import {
-	MessageSquare,
-	ScanSearch,
 	Maximize2,
 	Minimize2,
 	PanelRightClose,
@@ -13,10 +11,10 @@ import {
 } from "@lucide/vue";
 import {
 	StudioDocumentPreview,
-	StudioChatPanel,
 	StudioAuditPanel,
 	StudioAuditTable,
 	StudioDetectionBar,
+	StudioAuditToolbar,
 	EntityAuditModal,
 } from "#console/components/pages/studio";
 import { ExportToConnectionDialog } from "#console/components/pages/integrations";
@@ -28,7 +26,6 @@ import {
 	ResizablePanel,
 	ResizableHandle,
 } from "#console/components/ui/resizable";
-import { Tabs, TabsList, TabsTrigger } from "#console/components/ui/tabs";
 import { Button } from "#console/components/ui/button";
 import {
 	HeaderSocket,
@@ -67,9 +64,6 @@ const detectionSource = computed(
 	() => renderer.value?.detectionSource ?? "none",
 );
 
-// Right-panel tabs: Chat (existing) and Audit (detection results).
-const panelTab = ref<"chat" | "audit">("audit");
-
 // Cross-focus between the audit panel (list) and the document preview (inline
 // highlights). The detected entities themselves come from the shared audit
 // state below.
@@ -279,8 +273,8 @@ useEventListener(document, "keydown", (e: KeyboardEvent) => {
 	else if (activeEntityId.value) clearEntity();
 });
 
-// The right-hand inspector (Audit / Chat) is a resizable, collapsible split
-// panel. The Splitter owns sizing (percent-based), keyboard resize, and — via
+// The right-hand audit inspector is a resizable, collapsible split panel. The
+// Splitter owns sizing (percent-based), keyboard resize, and — via
 // `auto-save-id` — persisting the layout across reloads; we only hold a ref to
 // drive collapse from the document toolbar's toggle and a flag to flip its icon.
 // Typed against reka-ui's SplitterPanel (our ResizablePanel wrapper forwards its
@@ -296,9 +290,9 @@ function toggleInspector() {
 }
 
 // Which surface fills the main (left) area: the file preview, or the wide audit
-// review. Only this pane swaps between modes — the sidebar (detection bar + tabs
-// + chat) is one persistent panel throughout, so chat and its size are never
-// rebuilt. Reviewing the audit big on the left is what "full-screen" means here.
+// review. Only this pane swaps between modes — the inspector (detection bar +
+// audit) is one persistent panel throughout. Reviewing the audit big on the left
+// is what "full-screen" means here.
 const mainSurface = ref<"preview" | "audit">("preview");
 // The audit review is only reachable once a detection has completed with findings
 // — otherwise there's nothing to review. This gates the swap control and reverts
@@ -309,11 +303,15 @@ const canReview = computed(
 watch(canReview, (ok) => {
 	if (!ok) mainSurface.value = "preview";
 });
-// While the audit is the main surface, the sidebar hides its Audit tab (no point
-// showing audit twice), so move an audit-focused sidebar off to Chat.
+
+// Full-screen audit review shows the wide table on the main pane and carries its
+// own detection + redaction controls, so the inspector would only duplicate the
+// list — collapse it on entering full-screen and restore it on exit.
 watch(mainSurface, (surface) => {
-	if (surface === "audit" && panelTab.value === "audit")
-		panelTab.value = "chat";
+	const panel = inspectorPanel.value;
+	if (!panel) return;
+	if (surface === "audit") panel.collapse();
+	else panel.expand();
 });
 
 // Revealing an entity from the audit review steps back to the preview, focused on
@@ -365,18 +363,44 @@ const auditProps = computed(() => ({
       <ResizablePanel :min-size="30" class="min-w-0">
         <div class="relative h-full">
           <Transition name="main-fade">
-            <StudioAuditTable
-              v-if="mainSurface === 'audit'"
-              class="absolute inset-0"
-              :phase="detection.phase.value"
-              :categorized-groups="detection.categorizedGroups.value"
-              :count="detection.count.value"
-              :error-message="detection.errorMessage.value"
-              :suppressed="redaction.suppressed.value"
-              @reveal-entity="revealEntity"
-              @toggle-suppress="redaction.toggleSuppress"
-              @view-details="auditModalEntity = $event"
-            />
+            <!-- Full-screen audit: the wide table with a floating controls bar,
+                 since the inspector collapses here. -->
+            <div v-if="mainSurface === 'audit'" class="absolute inset-0">
+              <StudioAuditTable
+                class="absolute inset-0"
+                :phase="detection.phase.value"
+                :categorized-groups="detection.categorizedGroups.value"
+                :count="detection.count.value"
+                :error-message="detection.errorMessage.value"
+                :suppressed="redaction.suppressed.value"
+                @reveal-entity="revealEntity"
+                @toggle-suppress="redaction.toggleSuppress"
+                @view-details="auditModalEntity = $event"
+              />
+              <!-- Floating toolbar: detection + redaction controls, centered at
+                   the bottom so they float over the table without a full-width bar. -->
+              <div
+                class="pointer-events-none absolute inset-x-0 bottom-6 flex justify-center px-6"
+              >
+                <StudioAuditToolbar
+                  class="pointer-events-auto"
+                  v-model:selected-pipeline="detection.selectedPipeline.value"
+                  :pipelines="detection.pipelines.value"
+                  :phase="detection.phase.value"
+                  :can-run="detection.canRun.value"
+                  :redact-phase="redaction.redactPhase.value"
+                  :can-redact="redaction.canRedact.value"
+                  :redact-error="redaction.redactError.value"
+                  :output="redaction.output.value"
+                  :count="detection.count.value"
+                  :effective-redact-count="redaction.effectiveRedactCount.value"
+                  @run="detection.run"
+                  @redact="redaction.redact"
+                  @download-output="redaction.downloadRedacted"
+                  @export-output="openExportRedacted"
+                />
+              </div>
+            </div>
             <StudioDocumentPreview
               v-else
               class="absolute inset-0"
@@ -441,8 +465,9 @@ const auditProps = computed(() => ({
 
       <ResizableHandle with-handle />
 
-      <!-- Inspector: Audit / Chat, with shared detection controls above the tabs.
-           Collapses to nothing when the toolbar toggle hides it. -->
+      <!-- Inspector: the detection controls above the audit review. Collapses to
+           nothing when the toolbar toggle hides it. (The assistant chat is the
+           global right rail now, not a tab here.) -->
       <ResizablePanel
         ref="inspectorPanel"
         :default-size="28"
@@ -462,42 +487,7 @@ const auditProps = computed(() => ({
             :can-run="detection.canRun.value"
             @run="detection.run"
           />
-          <!-- While the audit is the main surface it's shown there in full, so the
-               sidebar Audit tab is disabled (not removed — the chrome stays put),
-               and the active tab moves to Chat. -->
-          <Tabs v-model="panelTab" class="border-b border-border/50 p-2">
-            <TabsList class="w-full">
-              <TabsTrigger
-                value="audit"
-                class="flex-1 gap-1.5"
-                :disabled="mainSurface === 'audit'"
-              >
-                <ScanSearch :size="14" />
-                {{ t("studio.audit.tabAudit") }}
-                <span
-                  v-if="detection.count.value"
-                  class="rounded-full bg-primary px-1.5 text-[11px] font-semibold text-primary-foreground tabular-nums"
-                >
-                  {{ detection.count.value }}
-                </span>
-              </TabsTrigger>
-              <TabsTrigger value="chat" class="flex-1 gap-1.5">
-                <MessageSquare :size="14" />
-                {{ t("studio.audit.tabChat") }}
-              </TabsTrigger>
-            </TabsList>
-          </Tabs>
-
-          <div
-            v-show="panelTab === 'chat'"
-            class="min-h-0 flex-1 overflow-hidden"
-          >
-            <StudioChatPanel />
-          </div>
-          <div
-            v-show="panelTab === 'audit'"
-            class="min-h-0 flex-1 overflow-hidden"
-          >
+          <div class="min-h-0 flex-1 overflow-hidden">
             <StudioAuditPanel
               v-bind="auditProps"
               @focus-entity="focusEntity"
diff --git a/packages/console/app/pages/w/[workspace]/integrations/webhooks.vue b/packages/console/app/pages/w/[workspace]/webhooks.vue
similarity index 98%
rename from packages/console/app/pages/w/[workspace]/integrations/webhooks.vue
rename to packages/console/app/pages/w/[workspace]/webhooks.vue
index 37232c7d..f83c0cfb 100644
--- a/packages/console/app/pages/w/[workspace]/integrations/webhooks.vue
+++ b/packages/console/app/pages/w/[workspace]/webhooks.vue
@@ -19,7 +19,7 @@ const sectionTabs = useSectionTabs();
 useHead({ title: "Webhooks" });
 
 definePageMeta({
-	pageCategory: "header.category.integrations",
+	pageCategory: "header.category.analytics",
 	hideCategory: true,
 });
 
@@ -175,7 +175,7 @@ async function testWebhook(webhookId: string) {
     <div class="mx-auto flex w-full max-w-7xl flex-1 flex-col gap-4 min-h-0">
       <!-- Section tabs in the app-header socket. -->
       <HeaderSocket>
-        <SectionTabs :tabs="sectionTabs.integrations.value" />
+        <SectionTabs :tabs="sectionTabs.analytics.value" />
       </HeaderSocket>
 
       <!-- Action row: count on the left, create on the right. -->
diff --git a/packages/console/app/utils/connections/fileservice.ts b/packages/console/app/utils/connections/fileservice.ts
index 8fc5ebcb..236b6308 100644
--- a/packages/console/app/utils/connections/fileservice.ts
+++ b/packages/console/app/utils/connections/fileservice.ts
@@ -1,13 +1,13 @@
-import type { FileProviders, Provider } from "@nvisy/sdk/datatypes";
+import type { FileProviders, FileServiceProvider } from "@nvisy/sdk/datatypes";
 
 /**
  * Cloud file-service providers connected over OAuth (Google Drive, Dropbox,
  * OneDrive, Box). These differ from object stores and LLMs: they carry no
  * user-entered credentials, so they are connected by redirecting the user to
  * the provider's `authorizeUrl` (see `startFileServiceOAuth`) rather than
- * through a credential form. Derived from the SDK's `Provider` type.
+ * through a credential form. Derived from the SDK's `FileServiceProvider` type.
  */
-export type FileProvider = Provider;
+export type FileProvider = FileServiceProvider;
 
 /**
  * Maps an OAuth file-service provider to its key on the catalog's
diff --git a/packages/console/app/utils/connections/pickers/onedrive.ts b/packages/console/app/utils/connections/pickers/onedrive.ts
index f49f3044..84e85e7f 100644
--- a/packages/console/app/utils/connections/pickers/onedrive.ts
+++ b/packages/console/app/utils/connections/pickers/onedrive.ts
@@ -12,22 +12,40 @@ import { ImportError } from "#console/utils/connections/pickers/types";
 const ONEDRIVE_BASE = "https://onedrive.live.com/picker";
 
 /**
- * Open the OneDrive picker with a short-lived provider access token and resolve
- * with the chosen files (or `null` if the user cancelled). The token is minted
- * server-side (`getPickerToken`) from the connection's credentials.
+ * Open the OneDrive picker and resolve with the chosen files (or `null` if the
+ * user cancelled).
+ *
+ * The picker authenticates per resource: its `authenticate` command names the
+ * resource it needs a token for (consumer OneDrive asks for
+ * `my.microsoftpersonalcontent.com` and `api.onedrive.com`, which need
+ * differently-scoped tokens), so `getToken` mints a token server-side
+ * (`getPickerToken`) for each requested resource. It's also called once with no
+ * resource to seed the launch form (the server's default picker resource).
  */
-export function openOneDrivePicker(
-	accessToken: string,
+export async function openOneDrivePicker(
+	getToken: (resource?: string) => Promise<string>,
 ): Promise<PickedFile[] | null> {
-	return new Promise((resolve, reject) => {
-		const opened = window.open("", "onedrive-picker", "width=1080,height=680");
-		if (!opened) {
-			reject(new ImportError("files.errors.importPopupBlocked"));
-			return;
-		}
-		// Non-null alias so the closures below see a `Window`, not `Window | null`.
-		const popup: Window = opened;
+	// Open the popup FIRST, synchronously in the click handler, before any await.
+	// Minting the token is async, and awaiting it before `window.open` would spend
+	// the click's transient user activation — some browsers then block the popup
+	// even though the import began from a genuine gesture.
+	const opened = window.open("", "onedrive-picker", "width=1080,height=680");
+	if (!opened) {
+		throw new ImportError("files.errors.importPopupBlocked");
+	}
+	const popup: Window = opened;
 
+	// The launch form needs a token; mint the initial one now that the popup is
+	// already open. If it fails, close the popup so we don't leave a blank window.
+	let initialToken: string;
+	try {
+		initialToken = await getToken();
+	} catch (err) {
+		popup.close();
+		throw err;
+	}
+
+	return new Promise((resolve, reject) => {
 		// A per-instance channel id (a GUID, per the v8 contract) the picker echoes
 		// back on `initialize`, so we only adopt the channel meant for us.
 		const channelId = crypto.randomUUID();
@@ -56,7 +74,7 @@ export function openOneDrivePicker(
 		const tokenInput = popup.document.createElement("input");
 		tokenInput.setAttribute("type", "hidden");
 		tokenInput.setAttribute("name", "access_token");
-		tokenInput.setAttribute("value", accessToken);
+		tokenInput.setAttribute("value", initialToken);
 		form.appendChild(tokenInput);
 		popup.document.body.appendChild(form);
 		form.submit();
@@ -83,13 +101,21 @@ export function openOneDrivePicker(
 			port?.postMessage({ type: "acknowledge", id });
 
 			if (command === "authenticate") {
-				// The picker asks for a token for a specific resource
-				// (`msg.data.resource`); reply with the access token.
-				port?.postMessage({
-					type: "result",
-					id,
-					data: { result: "token", token: accessToken },
-				});
+				// The picker asks for a token scoped to `msg.data.resource`; mint one
+				// for exactly that resource and reply with it.
+				const resource = msg.data?.resource as string | undefined;
+				getToken(resource)
+					.then((token) => {
+						port?.postMessage({
+							type: "result",
+							id,
+							data: { result: "token", token },
+						});
+					})
+					.catch(() => {
+						cleanup();
+						reject(new ImportError("files.errors.importAuthFailed"));
+					});
 			} else if (command === "close") {
 				cleanup();
 				resolve(null);
diff --git a/packages/console/app/utils/notifications.ts b/packages/console/app/utils/notifications.ts
index 1c09de48..e4938174 100644
--- a/packages/console/app/utils/notifications.ts
+++ b/packages/console/app/utils/notifications.ts
@@ -42,13 +42,13 @@ export function notificationContent(
 			return content(
 				"connectionSyncCompleted",
 				payload.data,
-				"/integrations/runs",
+				"/integrations?runs=1",
 			);
 		case "connection.sync.failed":
 			return content(
 				"connectionSyncFailed",
 				payload.data,
-				"/integrations/runs",
+				"/integrations?runs=1",
 			);
 		case "pipeline.detection.completed":
 			return content(
diff --git a/packages/console/app/utils/pagination.ts b/packages/console/app/utils/pagination.ts
new file mode 100644
index 00000000..a833fe10
--- /dev/null
+++ b/packages/console/app/utils/pagination.ts
@@ -0,0 +1,36 @@
+/** A cursor-paginated response page: a batch of items plus the next cursor. */
+interface CursorPage<T> {
+	items: T[];
+	nextCursor?: string;
+}
+
+/**
+ * Fetch every page of a cursor-paginated list and return the flattened items.
+ *
+ * `fetchPage(after)` requests one page starting after the given cursor (undefined
+ * for the first). We keep following `nextCursor` until it's absent, so a caller
+ * that must show the whole list (workspace-config tables — connections, webhooks,
+ * providers, policies, …) isn't silently truncated to the first page.
+ *
+ * A safety cap bounds the loop so a server that always returns a cursor can't
+ * spin forever; it's far above any realistic config-list size. Hitting the cap
+ * with a cursor still pending means the list is larger than we assumed, so we
+ * throw rather than return a silently-truncated list the caller would render as
+ * complete.
+ */
+export async function fetchAllPages<T>(
+	fetchPage: (after?: string) => Promise<CursorPage<T>>,
+	maxPages = 100,
+): Promise<T[]> {
+	const all: T[] = [];
+	let after: string | undefined;
+	for (let page = 0; page < maxPages; page++) {
+		const { items, nextCursor } = await fetchPage(after);
+		all.push(...items);
+		if (!nextCursor) return all;
+		after = nextCursor;
+	}
+	throw new Error(
+		`fetchAllPages exceeded ${maxPages} pages with more results pending`,
+	);
+}
diff --git a/packages/console/app/utils/retention.ts b/packages/console/app/utils/retention.ts
index bd67c00e..361bf51a 100644
--- a/packages/console/app/utils/retention.ts
+++ b/packages/console/app/utils/retention.ts
@@ -18,9 +18,10 @@ export interface RetentionField {
 /** Retention mode options, in display order. */
 export const RETENTION_MODES: RetentionMode[] = ["forever", "days", "zeroDays"];
 
-/** The three retention scopes a workspace configures. */
+/** The retention scopes a workspace configures. */
 export const RETENTION_TARGETS = [
 	"auditLogs",
+	"intermediates",
 	"originalDocuments",
 	"redactedDocuments",
 ] as const;
@@ -38,6 +39,7 @@ export function newRetentionField(): RetentionField {
 export function defaultRetentionForm(): RetentionForm {
 	return {
 		auditLogs: newRetentionField(),
+		intermediates: newRetentionField(),
 		originalDocuments: newRetentionField(),
 		redactedDocuments: newRetentionField(),
 	};
@@ -59,6 +61,7 @@ export function fieldToRetention(f: RetentionField): Retention {
 export function formToRetention(form: RetentionForm) {
 	return {
 		auditLogs: fieldToRetention(form.auditLogs),
+		intermediates: fieldToRetention(form.intermediates),
 		originalDocuments: fieldToRetention(form.originalDocuments),
 		redactedDocuments: fieldToRetention(form.redactedDocuments),
 	};
@@ -73,6 +76,7 @@ const FOREVER: Retention = { mode: "forever" };
 export function retentionToForm(r?: RetentionSettings): RetentionForm {
 	return {
 		auditLogs: retentionToField(r?.auditLogs ?? FOREVER),
+		intermediates: retentionToField(r?.intermediates ?? FOREVER),
 		originalDocuments: retentionToField(r?.originalDocuments ?? FOREVER),
 		redactedDocuments: retentionToField(r?.redactedDocuments ?? FOREVER),
 	};
diff --git a/packages/console/i18n/locales/de.json b/packages/console/i18n/locales/de.json
index ea34a93e..73619626 100644
--- a/packages/console/i18n/locales/de.json
+++ b/packages/console/i18n/locales/de.json
@@ -3,9 +3,8 @@
 		"tabs": {
 			"connections": {
 				"connections": "Verbindungen",
-				"webhooks": "Webhooks",
 				"explore": "Erkunden",
-				"runs": "Ausführungen"
+				"providers": "Anbieter"
 			},
 			"workflows": {
 				"index": "Pipelines",
@@ -22,7 +21,8 @@
 			},
 			"analytics": {
 				"overview": "Übersicht",
-				"logs": "Protokolle"
+				"logs": "Protokolle",
+				"webhooks": "Webhooks"
 			},
 			"policies": {
 				"index": "Übersicht",
@@ -39,7 +39,8 @@
 			"integrations": "Integrationen",
 			"analytics": "Analysen",
 			"billing": "Abrechnung",
-			"settings": "Einstellungen"
+			"settings": "Einstellungen",
+			"webhooks": "Webhooks"
 		}
 	},
 	"common": {
@@ -146,6 +147,7 @@
 					"description": "Wie lange die jeweiligen Daten aufbewahrt werden.",
 					"targets": {
 						"auditLogs": "Audit-Protokolle",
+						"intermediates": "Anreicherungsdaten",
 						"originalDocuments": "Originaldokumente",
 						"redactedDocuments": "Geschwärzte Dokumente"
 					},
@@ -534,7 +536,8 @@
 			"importFailed": "Import der Dateien fehlgeschlagen",
 			"importUnavailable": "Import ist für diese Verbindung nicht verfügbar.",
 			"importPopupBlocked": "Die Auswahl wurde blockiert. Erlauben Sie Pop-ups für diese Seite und versuchen Sie es erneut.",
-			"importPickerLoadFailed": "Die Dateiauswahl konnte nicht geladen werden. Prüfen Sie Ihre Verbindung und versuchen Sie es erneut."
+			"importPickerLoadFailed": "Die Dateiauswahl konnte nicht geladen werden. Prüfen Sie Ihre Verbindung und versuchen Sie es erneut.",
+			"importAuthFailed": "Authentifizierung beim Dateidienst fehlgeschlagen. Bitte verbinden Sie ihn erneut und versuchen Sie es noch einmal."
 		},
 		"kind": {
 			"original": "Original",
@@ -1214,6 +1217,8 @@
 			"importFailed": "Dateien konnten nicht importiert werden"
 		},
 		"runs": {
+			"title": "Synchronisierungen",
+			"description": "Alle Synchronisierungsläufe Ihrer Verbindungen.",
 			"allStatus": "Alle Status",
 			"runsFound": "{count} Synchronisierung | {count} Synchronisierungen",
 			"statusHeader": "Status",
@@ -1250,6 +1255,63 @@
 			"failed": "Verbindung konnte nicht abgeschlossen werden. Bitte erneut versuchen."
 		}
 	},
+	"providers": {
+		"description": "{count} Anbieter konfiguriert | {count} Anbieter konfiguriert",
+		"types": {
+			"llm": "Sprachmodell",
+			"ner": "Entitätserkennung"
+		},
+		"empty": {
+			"title": "Keine Inferenz-Anbieter",
+			"description": "Verbinden Sie ein Sprachmodell (OpenAI, Anthropic, Ollama) für Erkennung und Schwärzung."
+		},
+		"table": {
+			"headers": {
+				"name": "Name",
+				"enabled": "Aktiviert",
+				"type": "Typ",
+				"updated": "Aktualisiert"
+			},
+			"actions": {
+				"menu": "Aktionen",
+				"configure": "Konfigurieren",
+				"test": "Testen",
+				"delete": "Entfernen"
+			}
+		},
+		"dialogs": {
+			"configure": {
+				"title": "{name} konfigurieren",
+				"description": "Aktualisieren Sie die Einstellungen des Anbieters.",
+				"nameLabel": "Anzeigename",
+				"namePlaceholder": "z. B. Produktion OpenAI",
+				"updateCredentials": "Zugangsdaten aktualisieren",
+				"credentialsHint": "Geschlossen lassen, um die gespeicherten Zugangsdaten beizubehalten.",
+				"cancel": "Abbrechen",
+				"save": "Änderungen speichern"
+			},
+			"delete": {
+				"title": "{name} entfernen?",
+				"description": "Dieser Anbieter steht dann nicht mehr für Erkennung und Schwärzung zur Verfügung. Dies kann nicht rückgängig gemacht werden.",
+				"confirm": "Entfernen",
+				"cancel": "Abbrechen"
+			}
+		},
+		"toast": {
+			"updated": "Anbieter aktualisiert",
+			"updateFailed": "Anbieter konnte nicht aktualisiert werden",
+			"deleted": "Anbieter entfernt",
+			"deleteFailed": "Anbieter konnte nicht entfernt werden",
+			"enabled": "Anbieter aktiviert",
+			"disabled": "Anbieter deaktiviert",
+			"testReachable": "Anbieter ist erreichbar",
+			"testUnreachable": "Anbieter ist nicht erreichbar",
+			"testFailed": "Anbieter konnte nicht getestet werden"
+		},
+		"errors": {
+			"loadFailed": "Anbieter konnten nicht geladen werden"
+		}
+	},
 	"sidebar": {
 		"overview": "Übersicht",
 		"workspace": "Arbeitsbereich",
@@ -1266,7 +1328,8 @@
 		"logs": "Protokolle",
 		"billing": "Abrechnung",
 		"settings": "Einstellungen",
-		"support": "Support"
+		"support": "Support",
+		"webhooks": "Webhooks"
 	},
 	"health": {
 		"status": {
@@ -1281,41 +1344,7 @@
 		}
 	},
 	"studio": {
-		"chat": {
-			"placeholder": "Änderungen beschreiben...",
-			"inputPlaceholder": "Geben Sie hier Ihre Nachricht ein.",
-			"send": "Nachricht senden",
-			"saveEdit": "Änderung speichern",
-			"attach": "Anhängen",
-			"upload": "Hochladen",
-			"generate": "Generieren",
-			"summarize": "Zusammenfassen",
-			"greeting": "Hallo! Ich kann Ihnen helfen, dieses Dokument zu prüfen und zu redigieren. Fragen Sie mich etwas oder nutzen Sie die Werkzeuge unten.",
-			"processing": "Ich arbeite daran…",
-			"copy": "Kopieren",
-			"copied": "Kopiert",
-			"edit": "Bearbeiten",
-			"thumbsUp": "Gute Antwort",
-			"thumbsDown": "Schlechte Antwort",
-			"retry": "Wiederholen",
-			"you": "Sie",
-			"assistant": "Assistent",
-			"tools": {
-				"highlight": "Hervorheben",
-				"annotate": "Annotieren"
-			},
-			"changes": {
-				"title": "Änderungen",
-				"accept": "Annehmen",
-				"reject": "Ablehnen",
-				"acceptAll": "Alle annehmen",
-				"rejectAll": "Alle ablehnen",
-				"empty": "Keine ausstehenden Änderungen"
-			}
-		},
 		"audit": {
-			"tabChat": "Chat",
-			"tabAudit": "Audit",
 			"expand": "Auf Vollbild erweitern",
 			"collapse": "Vollbild verlassen",
 			"revealInDocument": "Im Dokument anzeigen",
@@ -1403,7 +1432,9 @@
 				"organization": "Organisation",
 				"contextual": "Kontextbezogen"
 			},
-			"exportRedacted": "Redigierte Datei exportieren"
+			"exportRedacted": "Redigierte Datei exportieren",
+			"download": "Herunterladen",
+			"export": "Exportieren"
 		},
 		"preview": {
 			"loading": "Dokument wird geladen …",
@@ -1446,7 +1477,31 @@
 			"close": "Schließen",
 			"closeOthers": "Andere schließen",
 			"closeToRight": "Rechts schließen",
-			"closeAll": "Alle schließen"
+			"closeAll": "Alle schließen",
+			"loading": "Wird geladen…"
+		}
+	},
+	"chat": {
+		"title": "Assistent",
+		"description": "Der KI-Assistent des Arbeitsbereichs.",
+		"toggle": "Assistent umschalten",
+		"close": "Schließen",
+		"newChat": "Neuer Chat",
+		"deleteSession": "Chat löschen",
+		"placeholder": "Den Assistenten fragen…",
+		"send": "Senden",
+		"copy": "Kopieren",
+		"copied": "Kopiert",
+		"retry": "Erneut versuchen",
+		"emptyTitle": "Fragen Sie alles",
+		"emptyDescription": "Der Assistent beantwortet Fragen zu Ihrem Arbeitsbereich und hilft Ihnen bei Ihren Aufgaben.",
+		"needsProviderTitle": "Kein KI-Anbieter verbunden",
+		"needsProviderDescription": "Verbinden Sie einen Inferenz-Anbieter (OpenAI, Anthropic, Ollama…), um mit dem Assistenten zu chatten.",
+		"needsProviderCta": "Anbieter verbinden",
+		"error": {
+			"send": "Nachricht konnte nicht gesendet werden. Bitte erneut versuchen.",
+			"stream": "Die Antwort des Assistenten wurde unterbrochen. Bitte erneut versuchen.",
+			"delete": "Diese Unterhaltung konnte nicht gelöscht werden. Bitte erneut versuchen."
 		}
 	},
 	"commandMenu": {
@@ -1916,7 +1971,8 @@
 			"errorRate": "Fehlerrate",
 			"avgDuration": "Ø Dauer",
 			"errorRateTitle": "Fehlerrate pro Tag",
-			"avgDurationTitle": "Ø Erkennungszeit pro Tag"
+			"avgDurationTitle": "Ø Erkennungszeit pro Tag",
+			"noData": "Noch nicht genügend Daten"
 		},
 		"breakdowns": {
 			"detectionsByStatus": "Erkennungen nach Status",
@@ -1925,6 +1981,11 @@
 			"noDetections": "Noch keine Erkennungen.",
 			"noStorage": "Noch keine Dateien gespeichert.",
 			"noUsage": "Noch keine KI-Nutzung."
+		},
+		"sections": {
+			"activity": "Erkennungsaktivität",
+			"trends": "Trends",
+			"breakdowns": "Aufschlüsselungen"
 		}
 	},
 	"auth": {
diff --git a/packages/console/i18n/locales/en.json b/packages/console/i18n/locales/en.json
index 66d2a0cb..04667b77 100644
--- a/packages/console/i18n/locales/en.json
+++ b/packages/console/i18n/locales/en.json
@@ -3,9 +3,8 @@
 		"tabs": {
 			"connections": {
 				"connections": "Connections",
-				"webhooks": "Webhooks",
 				"explore": "Explore",
-				"runs": "Runs"
+				"providers": "Providers"
 			},
 			"workflows": {
 				"index": "Pipelines",
@@ -22,7 +21,8 @@
 			},
 			"analytics": {
 				"overview": "Overview",
-				"logs": "Logs"
+				"logs": "Logs",
+				"webhooks": "Webhooks"
 			},
 			"policies": {
 				"index": "Overview",
@@ -39,7 +39,8 @@
 			"integrations": "Integrations",
 			"analytics": "Analytics",
 			"billing": "Billing",
-			"settings": "Settings"
+			"settings": "Settings",
+			"webhooks": "Webhooks"
 		}
 	},
 	"common": {
@@ -146,6 +147,7 @@
 					"description": "How long to keep each kind of data.",
 					"targets": {
 						"auditLogs": "Audit logs",
+						"intermediates": "Enrichment data",
 						"originalDocuments": "Original documents",
 						"redactedDocuments": "Redacted documents"
 					},
@@ -534,7 +536,8 @@
 			"importFailed": "Failed to import files",
 			"importUnavailable": "Import isn't available for this connection.",
 			"importPopupBlocked": "The picker was blocked. Allow pop-ups for this site and try again.",
-			"importPickerLoadFailed": "Couldn't load the file picker. Check your connection and try again."
+			"importPickerLoadFailed": "Couldn't load the file picker. Check your connection and try again.",
+			"importAuthFailed": "Couldn't authenticate with the file service. Please reconnect it and try again."
 		},
 		"kind": {
 			"original": "Original",
@@ -1214,6 +1217,8 @@
 			"importFailed": "Failed to import files"
 		},
 		"runs": {
+			"title": "Sync runs",
+			"description": "Every sync run across your connections.",
 			"allStatus": "All Status",
 			"runsFound": "{count} sync | {count} syncs",
 			"statusHeader": "Status",
@@ -1250,6 +1255,63 @@
 			"failed": "Couldn't finish connecting. Please try again."
 		}
 	},
+	"providers": {
+		"description": "{count} provider configured | {count} providers configured",
+		"types": {
+			"llm": "Language model",
+			"ner": "Entity recognition"
+		},
+		"empty": {
+			"title": "No inference providers",
+			"description": "Connect a language model (OpenAI, Anthropic, Ollama) to power detection and redaction."
+		},
+		"table": {
+			"headers": {
+				"name": "Name",
+				"enabled": "Enabled",
+				"type": "Type",
+				"updated": "Updated"
+			},
+			"actions": {
+				"menu": "Actions",
+				"configure": "Configure",
+				"test": "Test",
+				"delete": "Remove"
+			}
+		},
+		"dialogs": {
+			"configure": {
+				"title": "Configure {name}",
+				"description": "Update the provider's settings.",
+				"nameLabel": "Display name",
+				"namePlaceholder": "e.g. Production OpenAI",
+				"updateCredentials": "Update credentials",
+				"credentialsHint": "Leave closed to keep the stored credentials.",
+				"cancel": "Cancel",
+				"save": "Save changes"
+			},
+			"delete": {
+				"title": "Remove {name}?",
+				"description": "This provider will no longer be available for detection and redaction. This can't be undone.",
+				"confirm": "Remove",
+				"cancel": "Cancel"
+			}
+		},
+		"toast": {
+			"updated": "Provider updated",
+			"updateFailed": "Failed to update provider",
+			"deleted": "Provider removed",
+			"deleteFailed": "Failed to remove provider",
+			"enabled": "Provider enabled",
+			"disabled": "Provider disabled",
+			"testReachable": "Provider is reachable",
+			"testUnreachable": "Provider is not reachable",
+			"testFailed": "Failed to test provider"
+		},
+		"errors": {
+			"loadFailed": "Failed to load providers"
+		}
+	},
 	"sidebar": {
 		"overview": "Overview",
 		"workspace": "Workspace",
@@ -1266,7 +1328,8 @@
 		"logs": "Logs",
 		"billing": "Billing",
 		"settings": "Settings",
-		"support": "Support"
+		"support": "Support",
+		"webhooks": "Webhooks"
 	},
 	"health": {
 		"status": {
@@ -1281,41 +1344,7 @@
 		}
 	},
 	"studio": {
-		"chat": {
-			"placeholder": "Describe changes...",
-			"inputPlaceholder": "Type your message here.",
-			"send": "Send message",
-			"saveEdit": "Save edit",
-			"attach": "Attach",
-			"upload": "Upload",
-			"generate": "Generate",
-			"summarize": "Summarize",
-			"greeting": "Hi! I can help you review and redact this document. Ask me anything or use the tools below.",
-			"processing": "Working on it…",
-			"copy": "Copy",
-			"copied": "Copied",
-			"edit": "Edit",
-			"thumbsUp": "Good response",
-			"thumbsDown": "Bad response",
-			"retry": "Retry",
-			"you": "You",
-			"assistant": "Assistant",
-			"tools": {
-				"highlight": "Highlight",
-				"annotate": "Annotate"
-			},
-			"changes": {
-				"title": "Changes",
-				"accept": "Accept",
-				"reject": "Reject",
-				"acceptAll": "Accept All",
-				"rejectAll": "Reject All",
-				"empty": "No pending changes"
-			}
-		},
 		"audit": {
-			"tabChat": "Chat",
-			"tabAudit": "Audit",
 			"expand": "Expand to full screen",
 			"collapse": "Exit full screen",
 			"revealInDocument": "Reveal in document",
@@ -1403,7 +1432,9 @@
 				"organization": "Organization",
 				"contextual": "Contextual"
 			},
-			"exportRedacted": "Export redacted file"
+			"exportRedacted": "Export redacted file",
+			"download": "Download",
+			"export": "Export"
 		},
 		"preview": {
 			"loading": "Loading document...",
@@ -1446,7 +1477,31 @@
 			"close": "Close",
 			"closeOthers": "Close others",
 			"closeToRight": "Close to the right",
-			"closeAll": "Close all"
+			"closeAll": "Close all",
+			"loading": "Loading…"
+		}
+	},
+	"chat": {
+		"title": "Assistant",
+		"description": "The workspace AI assistant.",
+		"toggle": "Toggle assistant",
+		"close": "Close",
+		"newChat": "New chat",
+		"deleteSession": "Delete chat",
+		"placeholder": "Ask the assistant…",
+		"send": "Send",
+		"copy": "Copy",
+		"copied": "Copied",
+		"retry": "Retry",
+		"emptyTitle": "Ask anything",
+		"emptyDescription": "The assistant can answer questions about your workspace and help you get things done.",
+		"needsProviderTitle": "No AI provider connected",
+		"needsProviderDescription": "Connect an inference provider (OpenAI, Anthropic, Ollama…) to chat with the assistant.",
+		"needsProviderCta": "Connect a provider",
+		"error": {
+			"send": "Couldn't send your message. Please try again.",
+			"stream": "The assistant's reply was interrupted. Please try again.",
+			"delete": "Couldn't delete that conversation. Please try again."
 		}
 	},
 	"commandMenu": {
@@ -1916,7 +1971,8 @@
 			"errorRate": "Error rate",
 			"avgDuration": "Avg duration",
 			"errorRateTitle": "Error rate per day",
-			"avgDurationTitle": "Avg detection time per day"
+			"avgDurationTitle": "Avg detection time per day",
+			"noData": "Not enough data yet"
 		},
 		"breakdowns": {
 			"detectionsByStatus": "Detections by status",
@@ -1925,6 +1981,11 @@
 			"noDetections": "No detections yet.",
 			"noStorage": "No files stored yet.",
 			"noUsage": "No AI usage yet."
+		},
+		"sections": {
+			"activity": "Detection activity",
+			"trends": "Trends",
+			"breakdowns": "Breakdowns"
 		}
 	},
 	"auth": {
diff --git a/packages/console/package.json b/packages/console/package.json
index 76c733bd..0d0ecbfb 100644
--- a/packages/console/package.json
+++ b/packages/console/package.json
@@ -15,7 +15,7 @@
 		"@lucide/vue": "^1.41.0",
 		"@nuxtjs/color-mode": "^4.0.0",
 		"@nuxtjs/i18n": "^10.6.0",
-		"@nvisy/sdk": "^0.48.0",
+		"@nvisy/sdk": "^0.49.0",
 		"@pinia/colada": "^1.4.4",
 		"@pinia/colada-nuxt": "^1.1.0",
 		"@pinia/nuxt": "^1.0.2",