collavre 0.24.0 → 0.25.0

data/app/services/collavre/topics/next_name.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+module Collavre
+  module Topics
+    # The default name for a newly created topic: the localized prefix followed
+    # by the next unused number ("Topic 3").
+    #
+    # Extracted from TopicsController so the topic_create MCP tool produces the
+    # same names as the UI. An agent fanning work out across topics names them
+    # far more often than a human does, and two generators would have drifted
+    # into two numbering series in the same sidebar.
+    module NextName
+      module_function
+
+      # Archived topics count towards the next number. Topic names are unique
+      # per creative whether or not the topic is archived, so the previous
+      # active-only scan could propose a name that cannot be saved: archive
+      # "Topic 1" on an otherwise unnumbered creative and the next create
+      # proposes "Topic 1" again and fails validation. Reachable by hand before,
+      # routine once an agent creates topics in a loop.
+      def for(creative)
+        prefix = I18n.t("collavre.topics.default_name_prefix")
+        existing_numbers = creative.topics
+          .where("name LIKE ?", "#{Topic.sanitize_sql_like(prefix)}%")
+          .pluck(:name)
+          .filter_map { |n|
+            suffix = n.delete_prefix(prefix)
+            suffix.match?(/\A\d+\z/) ? suffix.to_i : nil
+          }
+
+        "#{prefix}#{(existing_numbers.max || 0) + 1}"
+      end
+    end
+  end
+end

data/app/services/collavre/topics/pin_rejection.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+module Collavre
+  module Topics
+    # Explains a Topic.primary_agent_rejection symbol to an MCP caller.
+    #
+    # The two reasons need different advice and the difference matters: sharing
+    # the creative fixes a missing-permission rejection, while a Claude Channel
+    # session agent stays confined to its own session topic no matter what is
+    # shared. Telling a caller to share in that second case sends it after a fix
+    # that cannot work — the same distinction TopicsController draws for humans.
+    module PinRejection
+      module_function
+
+      def message(agent, rejection)
+        if rejection == :session_agent_outside_session_topic
+          "#{agent.display_name} is a session agent and can only be pinned to its own session topic."
+        else
+          "#{agent.display_name} has no feedback permission on this creative, so it cannot be pinned. " \
+            "Share the creative with the agent at feedback or higher first."
+        end
+      end
+    end
+  end
+end

data/app/services/collavre/topics/read_pointer_relocator.rb

@@ -0,0 +1,71 @@
+# frozen_string_literal: true
+
+module Collavre
+  module Topics
+    # Topic cursors follow their topic across creatives, even while a reader is
+    # temporarily unable to access its new location. Receipt rendering filters
+    # inaccessible readers, while retaining the cursor prevents a deleted source
+    # creative from losing that reader's history.
+    class ReadPointerRelocator
+      def initialize(topic:, target_creative:)
+        @topic = topic
+        @target_creative = target_creative
+      end
+
+      def call
+        relocate_existing_pointers
+        initialize_destination_pointers
+      end
+
+      def self.relocate(pointer, target_creative)
+        destination = CommentReadPointer.find_by(user: pointer.user, creative: target_creative, topic: pointer.topic)
+        return pointer.update_column(:creative_id, target_creative.id) unless destination
+
+        destination.update_column(:last_read_comment_id, newest_read_id(destination, pointer))
+        pointer.delete
+      end
+
+      def self.newest_read_id(destination, pointer)
+        [ destination.last_read_comment_id, pointer.last_read_comment_id ].compact.max
+      end
+
+      private
+
+      attr_reader :topic, :target_creative
+
+      def relocate_existing_pointers
+        CommentReadPointer.where(topic: topic).where.not(creative: target_creative).find_each do |pointer|
+          relocate_pointer(pointer)
+        end
+      end
+
+      def relocate_pointer(pointer)
+        self.class.relocate(pointer, target_creative)
+      end
+
+      # Existing destination cursors are the only readers that need a topic row:
+      # otherwise their unrelated legacy cursor becomes the moved topic fallback.
+      def initialize_destination_pointers
+        readable_user_ids = CreativeShare.readable_user_ids_from_shares(target_creative, destination_reader_ids)
+        rows = (readable_user_ids - destination_topic_reader_ids).map { |user_id| new_pointer_row(user_id) }
+        CommentReadPointer.insert_all(rows, unique_by: :index_comment_read_pointers_on_user_creative_and_topic) if rows.any?
+      end
+
+      def destination_reader_ids
+        CommentReadPointer.where(creative: target_creative).distinct.pluck(:user_id)
+      end
+
+      def destination_topic_reader_ids
+        CommentReadPointer.where(creative: target_creative, topic: topic).pluck(:user_id)
+      end
+
+      def new_pointer_row(user_id)
+        now = Time.current
+        {
+          user_id: user_id, creative_id: target_creative.id, topic_id: topic.id,
+          last_read_comment_id: nil, created_at: now, updated_at: now
+        }
+      end
+    end
+  end
+end

data/app/services/collavre/topics/reserved_name.rb

@@ -0,0 +1,18 @@
+module Collavre
+  module Topics
+    module ReservedName
+      module_function
+
+      def reserved?(creative, name)
+        name == Creative::MAIN_TOPIC_NAME ||
+          (creative.inbox? && name == Creative::SYSTEM_TOPIC_NAME)
+      end
+
+      def reject!(creative, name, error_class: ArgumentError)
+        return unless reserved?(creative, name)
+
+        raise error_class, I18n.t("collavre.topics.reserved_name")
+      end
+    end
+  end
+end

data/app/services/collavre/topics/serializer.rb

@@ -0,0 +1,92 @@
+# frozen_string_literal: true
+
+module Collavre
+  module Topics
+    # The topic payload the client merges into its cached sidebar entry, built
+    # outside a controller so TopicsController and the topic MCP tools cannot
+    # describe the same topic two different ways.
+    #
+    # The client merges rather than replaces, so a key that is sometimes omitted
+    # leaves stale state on screen. That is why #with_agent always carries
+    # :primary_agent, explicitly nil when the pin was cleared.
+    module Serializer
+      module_function
+
+      def call(topic, unread_count: nil)
+        data = topic.slice(:id, :name, :source_topic_id)
+        data[:primary_agent] = agent_json(topic.primary_agent) if topic.primary_agent
+        data[:agent_locked] = topic.session_id.present?
+        data[:archived_at] = topic.archived_at if topic.archived_at
+        data[:unread_count] = unread_count unless unread_count.nil?
+        data
+      end
+
+      def with_agent(topic, agent)
+        data = topic.slice(:id, :name, :source_topic_id)
+        data[:primary_agent] = agent ? agent_json(agent) : nil
+        data[:agent_locked] = topic.session_id.present?
+        data
+      end
+
+      # Matches ApplicationHelper#user_json's shape, but resolves the avatar
+      # itself. user_json reaches main_app.url_for, which needs the request that
+      # only the controller path has — the MCP tools broadcast this same event
+      # from outside one, and calling it there raises NameError. An attached
+      # avatar therefore resolves to a path, the way CreativesChannel already
+      # does for its out-of-request broadcasts; the client is same-origin, so a
+      # path merges into the sidebar the same as an absolute URL did.
+      AVATAR_SIZE = 20
+
+      def agent_json(agent)
+        {
+          id: agent.id,
+          name: agent.display_name,
+          avatar_url: avatar_url_for(agent),
+          default_avatar: !agent.avatar.attached? && agent.avatar_url.blank?,
+          initial: agent.display_name&.at(0)&.upcase || "?"
+        }
+      end
+
+      def avatar_url_for(agent)
+        if agent.avatar.attached?
+          variant = agent.avatar.variant(resize_to_fill: [ AVATAR_SIZE, AVATAR_SIZE ])
+          ::Rails.application.routes.url_helpers.rails_representation_path(variant, only_path: true)
+        elsif agent.avatar_url.present?
+          agent.avatar_url
+        else
+          ::ApplicationController.helpers.asset_path("default_avatar.svg")
+        end
+      end
+
+      # The compact shape the MCP tools return. Deliberately not the broadcast
+      # payload: an agent wants names and counts it can reason about, not the
+      # avatar URLs and merge-semantics keys the sidebar needs.
+      def for_tool(topic, message_count: nil, message_chars: nil, last_message_at: nil)
+        {
+          id: topic.id,
+          name: topic.name,
+          creative_id: topic.creative_id,
+          archived: topic.archived?,
+          main: topic.name == Creative::MAIN_TOPIC_NAME,
+          system: topic.creative.inbox? && topic.name == Creative::SYSTEM_TOPIC_NAME,
+          source_topic_id: topic.source_topic_id,
+          primary_agent: primary_agent_for_tool(topic),
+          # A session topic's pin is session identity, not a routing choice, and
+          # topic_update refuses to rewrite it. Say so here so an agent does not
+          # plan a reassignment that is going to be rejected.
+          agent_locked: topic.session_id.present?,
+          message_count: message_count,
+          message_chars: message_chars,
+          last_message_at: last_message_at&.iso8601
+        }.compact
+      end
+
+      def primary_agent_for_tool(topic)
+        agent = topic.primary_agent
+        return nil unless agent
+
+        { id: agent.id, name: agent.display_name }
+      end
+    end
+  end
+end

data/app/services/collavre/topics/topic_destroy.rb

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+module Collavre
+  module Topics
+    class TopicDestroy
+      def initialize(topic:, source_creative:)
+        @topic = topic
+        @source_creative = source_creative
+      end
+
+      def call
+        Topic.transaction do
+          topic.lock!
+          reject_changed_source!
+          [ topic.id, topic.name ].tap { topic.destroy! }
+        end
+      end
+
+      private
+
+      attr_reader :topic, :source_creative
+
+      def reject_changed_source!
+        return if topic.creative_id == source_creative.id
+
+        raise TopicMove::SourceChangedError, I18n.t("collavre.topics.move.source_changed")
+      end
+    end
+  end
+end

data/app/services/collavre/topics/topic_move.rb

@@ -0,0 +1,80 @@
+# frozen_string_literal: true
+
+module Collavre
+  module Topics
+    class TopicMove
+      class SourceChangedError < StandardError; end
+      MoveBlockedError = MoveBlocker::MoveBlockedError
+      ActiveTaskError = MoveBlocker::ActiveTaskError
+      PendingDeliveryError = MoveBlocker::PendingDeliveryError
+      RecurringTaskError = MoveBlocker::RecurringTaskError
+      TriggerLoopError = MoveBlocker::TriggerLoopError
+
+      def initialize(topic:, target_creative:)
+        @topic = topic
+        @target_creative = target_creative
+        @source_creative_id = topic.creative_id
+      end
+
+      def call(after_commit: nil)
+        result = Topic.transaction do
+          # TopicBranchService locks the source before reading its comments.
+          # Take the same parent-first lock order here so a branch cannot
+          # authorize the old creative while this transaction has already
+          # relocated the topic's comment rows to the new one.
+          topic.lock!
+          reject_changed_source!
+          lock_creative_memberships!
+          yield topic if block_given?
+          MoveBlocker.new(topic).call
+          clear_source_last_topic_preferences
+          topic.comments.update_all(creative_id: target_creative.id)
+          topic.comment_snapshots.update_all(creative_id: target_creative.id)
+          ReadPointerRelocator.new(topic: topic, target_creative: target_creative).call
+          topic.update!(creative: target_creative)
+          release_unroutable_primary_agent
+        end
+        schedule_after_commit(&after_commit) if after_commit
+        result
+      end
+
+      private
+
+      attr_reader :topic, :target_creative, :source_creative_id
+
+      def reject_changed_source!
+        return if topic.creative_id == source_creative_id
+
+        raise SourceChangedError, I18n.t("collavre.topics.move.source_changed")
+      end
+
+      def lock_creative_memberships!
+        Creative.where(id: [ source_creative_id, target_creative.id ].uniq).order(:id).lock.load
+      end
+
+      def schedule_after_commit(&callback)
+        ActiveRecord.after_all_transactions_commit do
+          Topic.transaction do
+            current_topic = Topic.lock.find_by(id: topic.id)
+            callback.call(current_topic)
+          end
+        end
+      end
+
+      def clear_source_last_topic_preferences
+        topic.user_creative_preferences_as_last_topic
+             .where(creative_id: source_creative_id)
+             .update_all("last_topic_id = NULL, last_topic_revision = last_topic_revision + 1")
+      end
+
+      def release_unroutable_primary_agent
+        agent = topic.primary_agent
+        rejection = agent && Topic.primary_agent_rejection(target_creative, agent, topic: topic)
+        return [ nil, nil ] unless rejection
+
+        topic.set_primary_agent!(nil)
+        [ agent, rejection ]
+      end
+    end
+  end
+end

data/app/services/collavre/topics/topic_move_effects.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+module Collavre
+  module Topics
+    class TopicMoveEffects
+      def initialize(topic, source_creative, target_creative)
+        @topic = topic
+        @source_creative = source_creative
+        @target_creative = target_creative
+      end
+
+      def call(current_topic)
+        reset_comment_counters
+        unless current_topic&.creative_id == source_creative.id
+          TopicsChannel.broadcast_to(source_creative, { action: "deleted", topic_id: topic.id })
+        end
+        return unless current_topic&.creative_id == target_creative.id
+
+        TopicsChannel.broadcast_to(
+          target_creative, { action: "created", topic: Serializer.call(current_topic) }
+        )
+      end
+
+      private
+
+      attr_reader :topic, :source_creative, :target_creative
+
+      def reset_comment_counters
+        [ source_creative, target_creative ].uniq(&:id).sort_by(&:id).each do |creative|
+          Creative.reset_counters(creative.id, :comments)
+        end
+      end
+    end
+  end
+end

data/app/services/collavre/topics/topic_mutation.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+module Collavre
+  module Topics
+    class TopicMutation
+      def initialize(topic:, source_creative:)
+        @topic = topic
+        @source_creative = source_creative
+      end
+
+      def call
+        Topic.transaction do
+          topic.lock!
+          unless topic.creative_id == source_creative.id
+            raise TopicMove::SourceChangedError, I18n.t("collavre.topics.move.source_changed")
+          end
+
+          yield topic
+        end
+      end
+
+      private
+
+      attr_reader :topic, :source_creative
+    end
+  end
+end

data/app/views/collavre/admin/integrations/_setting_row.html.erb

@@ -38,14 +38,11 @@
             rows: 8,
             style: "width: 100%; font-family: var(--font-mono, monospace); font-size: 0.85em; min-height: 8em;" %>
     <% else %>
-      <% input_tag = definition.sensitive ? :password_field_tag : :text_field_tag %>
-      <%= send(input_tag,
-            "integration_setting[#{key_str}]",
-            nil,
-            form: bulk_form_id,
-            placeholder: current_display,
-            autocomplete: "off",
-            style: "width: 100%;") %>
+      <% if definition.sensitive %>
+	<%= masked_secret_field_tag "integration_setting[#{key_str}]", nil, form: bulk_form_id, placeholder: current_display, style: "width: 100%;" %>
+      <% else %>
+	<%= text_field_tag "integration_setting[#{key_str}]", nil, form: bulk_form_id, placeholder: current_display, autocomplete: "off", style: "width: 100%;" %>
+      <% end %>
     <% end %>
     <div style="font-size: 0.8em; margin-top: 0.25em;">
       <span class="badge badge-source-<%= row[:source] %>" style="display: inline-block; padding: 0.1em 0.5em; font-size: 0.85em; border-radius: 3px; background: <%= source_bg %>; color: <%= source_fg %>;">

data/app/views/collavre/admin/settings/_system_tab.html.erb

@@ -135,6 +135,13 @@
           <%= t('admin.settings.llm_request_timeout_seconds_hint') %>
         </div>
       </div>
+      <div style="max-width: 300px;">
+        <%= f.label :ai_agent_turn_deadline_seconds, t('admin.settings.ai_agent_turn_deadline_seconds') %>
+        <%= f.number_field :ai_agent_turn_deadline_seconds, value: @ai_agent_turn_deadline_seconds, min: 60, style: "width: 100%;" %>
+        <div class="help-text" style="font-size: 0.85em; color: var(--color-text-muted); margin-top: 0.25em;">
+          <%= t('admin.settings.ai_agent_turn_deadline_seconds_hint') %>
+        </div>
+      </div>
     </div>
 
     <div style="margin-top: 2em; border-top: 1px solid var(--color-border); padding-top: 1.5em;">

data/app/views/collavre/agent_connections/show.html.erb

@@ -0,0 +1,77 @@
+<h1 class="no-top-margin"><%= t("collavre.agent_connections.title", agent: @agent.name) %></h1>
+
+<div class="alert alert-info">
+  <strong><%= @agent.agent_gateway.name %></strong>
+  · <%= t("collavre.agent_gateways.workspace_mode.#{@agent.agent_gateway.workspace_mode}") %>
+  · <%= t("collavre.agent_connections.credential_axis") %> <code><%= @workspace.proxy_credential_id %></code>
+  · <%= t("collavre.agent_connections.workspace_axis") %> <code><%= @workspace.proxy_workspace_id %></code>
+  <p class="text-muted" style="margin-bottom: 0;">
+    <%= t("collavre.agent_connections.axis_help.#{@agent.agent_gateway.workspace_mode}") %>
+  </p>
+</div>
+
+<div data-controller="agent-connection"
+     data-agent-connection-status-url-value="<%= collavre.agent_connection_status_path(@agent) %>"
+     data-agent-connection-session-url-value="<%= collavre.agent_connection_auth_sessions_path(@agent, engine: '__ENGINE__') %>"
+     data-agent-connection-session-detail-url-value="<%= collavre.agent_connection_auth_session_path(@agent, engine: '__ENGINE__', session_id: '__SESSION__') %>"
+     data-agent-connection-sync-url-value="<%= collavre.agent_connection_provision_sync_path(@agent) %>"
+     data-agent-connection-approve-url-value="<%= collavre.agent_connection_provision_approve_path(@agent, type: '__TYPE__', name: '__NAME__') %>"
+     data-agent-connection-delete-url-value="<%= collavre.agent_connection_provision_delete_path(@agent, type: '__TYPE__', name: '__NAME__') %>"
+     data-agent-connection-loading-value="<%= t('collavre.agent_connections.loading') %>"
+     data-agent-connection-login-value="<%= t('collavre.agent_connections.login') %>"
+     data-agent-connection-submit-value="<%= t('collavre.agent_connections.submit') %>"
+     data-agent-connection-base-url-label-value="<%= t('collavre.agent_connections.base_url.label') %>"
+     data-agent-connection-base-url-help-value="<%= t('collavre.agent_connections.base_url.help') %>"
+     data-agent-connection-cancel-value="<%= t('common.cancel') %>"
+     data-agent-connection-open-url-value="<%= t('collavre.agent_connections.open_url') %>"
+     data-agent-connection-approve-value="<%= t('collavre.agent_connections.approve') %>"
+     data-agent-connection-revoke-value="<%= t('collavre.agent_connections.revoke') %>"
+     data-agent-connection-error-value="<%= t('collavre.agent_connections.error') %>"
+     data-agent-connection-manifest-unregistered-value="<%= t('collavre.agent_connections.manifest_unregistered') %>"
+     data-agent-connection-last-error-value="<%= t('collavre.agent_connections.last_error') %>"
+     data-agent-connection-status-labels-value="<%= t('collavre.agent_connections.statuses').to_json %>"
+     data-agent-connection-item-type-labels-value="<%= t('collavre.agent_connections.item_types').to_json %>">
+  <section class="form-section">
+    <div class="flex-row-center-between">
+      <h2><%= t("collavre.agent_connections.engines") %></h2>
+      <button type="button" class="btn btn-sm btn-secondary" data-action="agent-connection#refresh"><%= t("collavre.agent_connections.refresh") %></button>
+    </div>
+    <div data-agent-connection-target="error" class="alert alert-danger" hidden></div>
+    <div data-agent-connection-target="engines"><%= t("collavre.agent_connections.loading") %></div>
+    <div data-agent-connection-target="session"></div>
+  </section>
+
+  <section class="form-section" style="margin-top: 1.5rem;">
+    <div class="flex-row-center-between">
+      <div>
+        <h2><%= t("collavre.agent_connections.provisioning") %></h2>
+        <p class="text-muted"><%= t("collavre.agent_connections.provisioning_help") %></p>
+      </div>
+      <button type="button" class="btn btn-sm btn-primary" data-action="agent-connection#sync"><%= t("collavre.agent_connections.sync") %></button>
+    </div>
+    <div data-agent-connection-target="manifest"></div>
+    <table class="settings-table" style="width:100%">
+      <thead><tr><th><%= t("collavre.agent_connections.item") %></th><th><%= t("collavre.agent_connections.kind") %></th><th><%= t("collavre.agent_connections.state") %></th><th><%= t("collavre.agent_connections.actions") %></th></tr></thead>
+      <tbody data-agent-connection-target="provision">
+        <tr><td><strong>collavre</strong></td><td><%= t("collavre.agent_connections.item_types.skill") %></td><td><%= t("collavre.agent_connections.loading") %></td><td></td></tr>
+        <tr><td><strong>collavre</strong></td><td><%= t("collavre.agent_connections.item_types.config") %></td><td><%= t("collavre.agent_connections.loading") %></td><td></td></tr>
+      </tbody>
+    </table>
+  </section>
+</div>
+
+<section class="form-section" style="margin-top: 1.5rem;">
+  <h2><%= t("collavre.agent_connections.meta_skills") %></h2>
+  <p class="text-muted"><%= t("collavre.agent_connections.meta_skills_help") %></p>
+  <% if @agent.tools.present? %>
+    <ul><% @agent.tools.each do |tool| %><li><code><%= tool %></code></li><% end %></ul>
+  <% else %>
+    <p class="text-muted"><%= t("collavre.users.edit_ai.no_tools_found") %></p>
+  <% end %>
+</section>
+
+<div class="flex-row-center-between" style="margin-top: 1.5rem;">
+  <%= link_to t("collavre.agent_connections.back"), collavre.user_path(@agent), class: "btn btn-secondary" %>
+  <%= button_to t("collavre.agent_connections.rotate_tokens"), collavre.agent_connection_rotate_tokens_path(@agent), method: :post,
+                class: "btn btn-danger", form: { data: { turbo_confirm: t("collavre.agent_connections.rotate_confirm") } } %>
+</div>

data/app/views/collavre/agent_gateways/_form.html.erb

@@ -0,0 +1,71 @@
+<%= form_with model: agent_gateway, class: "stacked-form" do |form| %>
+  <% if agent_gateway.errors.any? %>
+    <div class="alert alert-danger" role="alert">
+      <ul class="mb-0 ps-3">
+        <% agent_gateway.errors.full_messages.each do |message| %>
+          <li><%= message %></li>
+        <% end %>
+      </ul>
+    </div>
+  <% end %>
+
+  <div class="form-group">
+    <%= form.label :name, t("collavre.agent_gateways.name") %>
+    <%= form.text_field :name, required: true, class: "stacked-form-control", placeholder: t("collavre.agent_gateways.name_placeholder") %>
+  </div>
+  <div class="form-group">
+    <%= form.label :base_url, t("collavre.agent_gateways.base_url") %>
+    <%= form.url_field :base_url, required: true, class: "stacked-form-control", placeholder: "https://proxy.example.com" %>
+    <small class="form-text text-muted">
+      <%= t(Current.user.system_admin? ? "collavre.agent_gateways.base_url_help_admin" : "collavre.agent_gateways.base_url_help") %>
+    </small>
+  </div>
+
+  <% secret_placeholder = agent_gateway.persisted? ? t("collavre.agent_gateways.secret_unchanged") : nil %>
+  <div class="form-group">
+    <%= form.label :admin_key, t("collavre.agent_gateways.admin_key") %>
+    <%= masked_secret_field form, :admin_key, value: nil, required: agent_gateway.new_record?, class: "stacked-form-control", placeholder: secret_placeholder %>
+    <small class="form-text text-muted"><%= t("collavre.agent_gateways.admin_key_help") %></small>
+  </div>
+  <div class="form-group">
+    <%= form.label :completion_key, t("collavre.agent_gateways.completion_key") %>
+    <%= masked_secret_field form, :completion_key, value: nil, class: "stacked-form-control", placeholder: secret_placeholder %>
+    <small class="form-text text-muted"><%= t("collavre.agent_gateways.completion_key_help") %></small>
+    <% if agent_gateway.persisted? && @has_stored_completion_key %>
+      <div class="form-check mt-2">
+        <%= check_box_tag "agent_gateway[clear_completion_key]", "1", @clear_completion_key, id: "agent_gateway_clear_completion_key", class: "form-check-input" %>
+        <%= label_tag "agent_gateway_clear_completion_key", t("collavre.agent_gateways.clear_completion_key_label"), class: "form-check-label" %>
+      </div>
+      <small class="form-text text-muted"><%= t("collavre.agent_gateways.clear_completion_key_help") %></small>
+    <% end %>
+  </div>
+  <div class="form-group">
+    <%= form.label :identity_secret, t("collavre.agent_gateways.identity_secret") %>
+    <%= masked_secret_field form, :identity_secret, value: nil, class: "stacked-form-control", placeholder: secret_placeholder %>
+    <small class="form-text text-muted"><%= t("collavre.agent_gateways.identity_secret_help") %></small>
+  </div>
+  <div class="form-group">
+    <%= form.label :tenant_id, t("collavre.agent_gateways.tenant_id") %>
+    <%= form.text_field :tenant_id, required: true, class: "stacked-form-control", value: agent_gateway.tenant_id.presence || "collavre" %>
+    <small class="form-text text-muted"><%= t("collavre.agent_gateways.tenant_id_help") %></small>
+  </div>
+
+  <fieldset class="form-group">
+    <legend class="form-label"><%= t("collavre.agent_gateways.workspace_mode.label") %></legend>
+    <% Collavre::AgentGateway.workspace_modes.each_key do |mode| %>
+      <div class="form-check mb-2">
+        <%= form.radio_button :workspace_mode, mode, checked: agent_gateway.workspace_mode == mode, class: "form-check-input" %>
+        <%= form.label "workspace_mode_#{mode}", t("collavre.agent_gateways.workspace_mode.#{mode}"), class: "form-check-label" %>
+        <small class="form-text text-muted"><%= t("collavre.agent_gateways.workspace_mode.#{mode}_help") %></small>
+      </div>
+    <% end %>
+  </fieldset>
+
+  <div class="form-group form-check">
+    <%= form.check_box :active, class: "form-check-input" %>
+    <%= form.label :active, t("collavre.agent_gateways.active"), class: "form-check-label" %>
+  </div>
+
+  <%= form.submit t("common.save"), class: "primary-action-button" %>
+  <%= link_to t("common.cancel"), collavre.agent_gateways_path, class: "btn btn-secondary" %>
+<% end %>

data/app/views/collavre/agent_gateways/edit.html.erb

@@ -0,0 +1,2 @@
+<h1 class="no-top-margin"><%= t("collavre.agent_gateways.edit_title") %></h1>
+<%= render "form", agent_gateway: @agent_gateway %>