Visibility is not executability
Every row in the Console tabs comes from a scanner. Scanners run read-only, so many rows show up even when Gandalf has no way to safely modify them. Rather than pretend an action exists, Gandalf marks each action as available or unavailable based on whether a provider can:- Describe the target (which file, which entry, which agent, which scope).
- Describe the expected effect.
- Produce a Review Changes preview.
- Provide the execution mechanism.
Available vs unavailable actions
Actions surface in two states in the TUI:- Available: a provider is registered, a preview can be built, and the mutation can be executed after Review Changes.
- Unavailable: no provider, or the provider explicitly declined. Gandalf shows the reason (for example: “no add-source provider for this marketplace kind” or “unsupported evidence kind for update”).
What providers exist today
The support matrix in Support Matrix is authoritative, but at a high level for the current release:- Codex: provider-backed actions are available where discovered evidence has a concrete action provider. Marketplace-originated Review Actions produce non-mutating setup guidance where source metadata is sufficient.
- Claude Code: reviewed install is available for eligible user-scope Claude Code marketplace plugins with verified rollback. Update, uninstall, add-source, and remove-source remain unavailable without a concrete mutation provider.