protege 0.1.0.alpha.2 → 0.1.0.alpha.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2e4802d01b5b207b82c7c34dcc937de6d49b393d9d49fdc8e0410e0504cb67a1
-  data.tar.gz: b62d7562b055d40a2d884814aed9cf524f2c7e838ee30161d0f496abc649c8dc
+  metadata.gz: d413f57504bbdb848d33fd0afd7fdc616a409de2b5d3107c38a2d169bd1e1c6f
+  data.tar.gz: a80f880c36d5b1add111ca5176abfb27416fcb18ae63d2bf4504fd97d61e0912
 SHA512:
-  metadata.gz: e4ba3c6c051cab06814ed5b3437f2a6e7164a97982dc23a14247d153ec19479a4caf30b325c48d50fe4d91ec41322ad8aba3193972b2af335b27d79de92f29d4
-  data.tar.gz: b68781555b283c9e3954bced61070ec78df944c190439ad9d05505ad434b73cfc830c7a3691d0f8cbd26c0ab1b102a67ac9dd2e8c68a95ac4f3a47f9dc639250
+  metadata.gz: 0f9ebf231169742d602abad8f806793599636a6e15ec196d19672128e9ac123fb9db72ba4738e33cc86fd1bcf546dfb9f69ae0aebc9f935400a4a24347b584a0
+  data.tar.gz: 211573228c71e00cd37ea479419fe13cf7260bcc303443ed3720a7c991f9c2634e6fb1628958c3cb23f9e77121055e2d81a479a44d33eebf3ff7444964a6ff65

data/MIT-LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Sebastian Scholl
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/Rakefile

@@ -8,9 +8,7 @@ require 'rake/testtask'
 # `git push origin HEAD`) is both redundant and fails on the detached HEAD. Skip it there so
 # `rake release` only builds and publishes the gem (via trusted publishing); local `rake release`
 # keeps its full behavior.
-if ENV['CI'] && Rake::Task.task_defined?('release:source_control_push')
-  Rake::Task['release:source_control_push'].clear
-end
+Rake::Task['release:source_control_push'].clear if ENV['CI'] && Rake::Task.task_defined?('release:source_control_push')
 
 Rake::TestTask.new(:test) do |t|
   t.libs    << 'test'

data/app/assets/builds/protege.css

@@ -1,4 +1,4 @@
-/*! tailwindcss v4.3.1 | MIT License | https://tailwindcss.com */
+/*! tailwindcss v4.3.0 | MIT License | https://tailwindcss.com */
 @layer properties;
 @layer theme, base, components, utilities;
 @layer theme {
@@ -38,6 +38,7 @@
     --font-weight-bold: 700;
     --tracking-wide: 0.025em;
     --tracking-wider: 0.05em;
+    --leading-snug: 1.375;
     --leading-relaxed: 1.625;
     --radius-sm: 0.25rem;
     --radius-md: 0.375rem;
@@ -218,10 +219,10 @@
     position: static;
   }
   .inset-0 {
-    inset: 0;
+    inset: calc(var(--spacing) * 0);
   }
   .right-0 {
-    right: 0;
+    right: calc(var(--spacing) * 0);
   }
   .z-10 {
     z-index: 10;
@@ -260,7 +261,7 @@
     margin-top: calc(var(--spacing) * 0.5);
   }
   .mt-1 {
-    margin-top: var(--spacing);
+    margin-top: calc(var(--spacing) * 1);
   }
   .mt-2 {
     margin-top: calc(var(--spacing) * 2);
@@ -275,7 +276,7 @@
     margin-top: calc(var(--spacing) * 10);
   }
   .mb-1 {
-    margin-bottom: var(--spacing);
+    margin-bottom: calc(var(--spacing) * 1);
   }
   .mb-3 {
     margin-bottom: calc(var(--spacing) * 3);
@@ -344,7 +345,7 @@
     height: 100%;
   }
   .min-h-0 {
-    min-height: 0;
+    min-height: calc(var(--spacing) * 0);
   }
   .min-h-\[6rem\] {
     min-height: 6rem;
@@ -358,6 +359,9 @@
   .w-4 {
     width: calc(var(--spacing) * 4);
   }
+  .w-5 {
+    width: calc(var(--spacing) * 5);
+  }
   .w-9 {
     width: calc(var(--spacing) * 9);
   }
@@ -389,7 +393,7 @@
     max-width: var(--container-sm);
   }
   .min-w-0 {
-    min-width: 0;
+    min-width: calc(var(--spacing) * 0);
   }
   .flex-1 {
     flex: 1;
@@ -401,7 +405,7 @@
     flex-shrink: 0;
   }
   .translate-x-1 {
-    --tw-translate-x: var(--spacing);
+    --tw-translate-x: calc(var(--spacing) * 1);
     translate: var(--tw-translate-x) var(--tw-translate-y);
   }
   .translate-x-4 {
@@ -462,8 +466,14 @@
   .justify-center {
     justify-content: center;
   }
+  .justify-end {
+    justify-content: flex-end;
+  }
+  .gap-0\.5 {
+    gap: calc(var(--spacing) * 0.5);
+  }
   .gap-1 {
-    gap: var(--spacing);
+    gap: calc(var(--spacing) * 1);
   }
   .gap-1\.5 {
     gap: calc(var(--spacing) * 1.5);
@@ -493,8 +503,8 @@
   .space-y-1 {
     :where(& > :not(:last-child)) {
       --tw-space-y-reverse: 0;
-      margin-block-start: calc(var(--spacing) * var(--tw-space-y-reverse));
-      margin-block-end: calc(var(--spacing) * calc(1 - var(--tw-space-y-reverse)));
+      margin-block-start: calc(calc(var(--spacing) * 1) * var(--tw-space-y-reverse));
+      margin-block-end: calc(calc(var(--spacing) * 1) * calc(1 - var(--tw-space-y-reverse)));
     }
   }
   .space-y-2 {
@@ -590,7 +600,10 @@
     background-color: var(--color-yellow-600);
   }
   .p-0 {
-    padding: 0;
+    padding: calc(var(--spacing) * 0);
+  }
+  .p-1\.5 {
+    padding: calc(var(--spacing) * 1.5);
   }
   .p-5 {
     padding: calc(var(--spacing) * 5);
@@ -599,7 +612,7 @@
     padding: calc(var(--spacing) * 6);
   }
   .px-1 {
-    padding-inline: var(--spacing);
+    padding-inline: calc(var(--spacing) * 1);
   }
   .px-1\.5 {
     padding-inline: calc(var(--spacing) * 1.5);
@@ -620,7 +633,7 @@
     padding-block: calc(var(--spacing) * 0.5);
   }
   .py-1 {
-    padding-block: var(--spacing);
+    padding-block: calc(var(--spacing) * 1);
   }
   .py-1\.5 {
     padding-block: calc(var(--spacing) * 1.5);
@@ -637,12 +650,24 @@
   .py-8 {
     padding-block: calc(var(--spacing) * 8);
   }
+  .py-px {
+    padding-block: 1px;
+  }
+  .pt-1 {
+    padding-top: calc(var(--spacing) * 1);
+  }
   .pt-2 {
     padding-top: calc(var(--spacing) * 2);
   }
+  .pt-3 {
+    padding-top: calc(var(--spacing) * 3);
+  }
   .pr-4 {
     padding-right: calc(var(--spacing) * 4);
   }
+  .pr-6 {
+    padding-right: calc(var(--spacing) * 6);
+  }
   .pb-2 {
     padding-bottom: calc(var(--spacing) * 2);
   }
@@ -683,10 +708,21 @@
     font-size: var(--text-xs);
     line-height: var(--tw-leading, var(--text-xs--line-height));
   }
+  .text-\[10px\] {
+    font-size: 10px;
+  }
+  .leading-none {
+    --tw-leading: 1;
+    line-height: 1;
+  }
   .leading-relaxed {
     --tw-leading: var(--leading-relaxed);
     line-height: var(--leading-relaxed);
   }
+  .leading-snug {
+    --tw-leading: var(--leading-snug);
+    line-height: var(--leading-snug);
+  }
   .font-bold {
     --tw-font-weight: var(--font-weight-bold);
     font-weight: var(--font-weight-bold);
@@ -710,6 +746,9 @@
   .break-all {
     word-break: break-all;
   }
+  .whitespace-nowrap {
+    white-space: nowrap;
+  }
   .whitespace-pre-wrap {
     white-space: pre-wrap;
   }
@@ -747,6 +786,12 @@
     -webkit-font-smoothing: antialiased;
     -moz-osx-font-smoothing: grayscale;
   }
+  .opacity-60 {
+    opacity: 60%;
+  }
+  .opacity-70 {
+    opacity: 70%;
+  }
   .shadow-lg {
     --tw-shadow: 0 10px 15px -3px var(--tw-shadow-color, rgb(0 0 0 / 0.1)), 0 4px 6px -4px var(--tw-shadow-color, rgb(0 0 0 / 0.1));
     box-shadow: var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);
@@ -755,14 +800,16 @@
     --tw-shadow: 0 1px 3px 0 var(--tw-shadow-color, rgb(0 0 0 / 0.1)), 0 1px 2px -1px var(--tw-shadow-color, rgb(0 0 0 / 0.1));
     box-shadow: var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);
   }
-  .filter {
-    filter: var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,);
-  }
   .transition-colors {
     transition-property: color, background-color, border-color, outline-color, text-decoration-color, fill, stroke, --tw-gradient-from, --tw-gradient-via, --tw-gradient-to;
     transition-timing-function: var(--tw-ease, var(--default-transition-timing-function));
     transition-duration: var(--tw-duration, var(--default-transition-duration));
   }
+  .transition-opacity {
+    transition-property: opacity;
+    transition-timing-function: var(--tw-ease, var(--default-transition-timing-function));
+    transition-duration: var(--tw-duration, var(--default-transition-duration));
+  }
   .transition-transform {
     transition-property: transform, translate, scale, rotate;
     transition-timing-function: var(--tw-ease, var(--default-transition-timing-function));
@@ -780,6 +827,11 @@
       }
     }
   }
+  .first\:pt-0 {
+    &:first-child {
+      padding-top: calc(var(--spacing) * 0);
+    }
+  }
   .hover\:text-amber-600 {
     &:hover {
       @media (hover: hover) {
@@ -815,6 +867,13 @@
       }
     }
   }
+  .hover\:opacity-100 {
+    &:hover {
+      @media (hover: hover) {
+        opacity: 100%;
+      }
+    }
+  }
   .focus\:border-amber-500 {
     &:focus {
       border-color: var(--color-amber-500);
@@ -1027,59 +1086,6 @@ body {
   inherits: false;
   initial-value: 0 0 #0000;
 }
-@property --tw-blur {
-  syntax: "*";
-  inherits: false;
-}
-@property --tw-brightness {
-  syntax: "*";
-  inherits: false;
-}
-@property --tw-contrast {
-  syntax: "*";
-  inherits: false;
-}
-@property --tw-grayscale {
-  syntax: "*";
-  inherits: false;
-}
-@property --tw-hue-rotate {
-  syntax: "*";
-  inherits: false;
-}
-@property --tw-invert {
-  syntax: "*";
-  inherits: false;
-}
-@property --tw-opacity {
-  syntax: "*";
-  inherits: false;
-}
-@property --tw-saturate {
-  syntax: "*";
-  inherits: false;
-}
-@property --tw-sepia {
-  syntax: "*";
-  inherits: false;
-}
-@property --tw-drop-shadow {
-  syntax: "*";
-  inherits: false;
-}
-@property --tw-drop-shadow-color {
-  syntax: "*";
-  inherits: false;
-}
-@property --tw-drop-shadow-alpha {
-  syntax: "<percentage>";
-  inherits: false;
-  initial-value: 100%;
-}
-@property --tw-drop-shadow-size {
-  syntax: "*";
-  inherits: false;
-}
 @keyframes pulse {
   50% {
     opacity: 0.5;
@@ -1110,19 +1116,6 @@ body {
       --tw-ring-offset-width: 0px;
       --tw-ring-offset-color: #fff;
       --tw-ring-offset-shadow: 0 0 #0000;
-      --tw-blur: initial;
-      --tw-brightness: initial;
-      --tw-contrast: initial;
-      --tw-grayscale: initial;
-      --tw-hue-rotate: initial;
-      --tw-invert: initial;
-      --tw-opacity: initial;
-      --tw-saturate: initial;
-      --tw-sepia: initial;
-      --tw-drop-shadow: initial;
-      --tw-drop-shadow-color: initial;
-      --tw-drop-shadow-alpha: 100%;
-      --tw-drop-shadow-size: initial;
     }
   }
 }

data/app/controllers/concerns/protege/agent_scoped.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module Protege
+  # Shared concern for controllers nested under an agent.
+  # Sets +@agent+ from +params[:agent_id]+.
+  module AgentScoped
+    extend ActiveSupport::Concern
+
+    included do
+      before_action :set_agent
+    end
+
+    private
+
+    # Load the +Agent+ named by +params[:agent_id]+ into +@agent+.
+    #
+    # @return [Protege::Agent] the loaded agent
+    def set_agent
+      @agent = Agent.find(params[:agent_id])
+    end
+  end
+end

data/app/controllers/concerns/protege/agent_toolkit_scoped.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module Protege
+  # Shared concern for controllers nested under a toolkit grant.
+  # Sets +@agent_toolkit+ from +params[:agent_toolkit_id]+.
+  module AgentToolkitScoped
+    extend ActiveSupport::Concern
+
+    included do
+      before_action :set_agent_toolkit
+    end
+
+    private
+
+    # Load the +AgentToolkit+ named by +params[:agent_toolkit_id]+ into +@agent_toolkit+.
+    #
+    # @return [Protege::AgentToolkit] the loaded grant
+    def set_agent_toolkit
+      @agent_toolkit = AgentToolkit.find(params[:agent_toolkit_id])
+    end
+  end
+end

data/app/controllers/protege/access_rules_controller.rb

@@ -1,35 +1,35 @@
 # frozen_string_literal: true
 
 module Protege
-  # Manages a persona's runtime inbound access rules — the dashboard-editable, narrowing layer of the
-  # access guardrail (see +AccessRule+ and +AccessControl+). Nested under personas via the
-  # +PersonaScoped+ concern, which loads +@persona+ from +params[:persona_id]+ before every action; each
-  # action renders back to the persona's page.
+  # Manages an agent's runtime inbound access rules — the dashboard-editable, narrowing layer of the
+  # access guardrail (see +AccessRule+ and +AccessControl+). Nested under agents via the
+  # +AgentScoped+ concern, which loads +@agent+ from +params[:agent_id]+ before every action; each
+  # action renders back to the agent's page.
   class AccessRulesController < ApplicationController
-    include PersonaScoped
+    include AgentScoped
 
     before_action :set_access_rule, only: [:destroy]
 
-    # Add an access rule to the persona. Serves +POST /personas/:persona_id/access_rules+.
+    # Add an access rule to the agent. Serves +POST /agents/:agent_id/access_rules+.
     #
     # Turbo requests update the rules table in place (append the row + reset the form on success, or
     # re-render the form with errors); non-Turbo requests redirect back with the result in the flash.
     #
     # @return [void]
     def create
-      @access_rule = @persona.access_rules.build(access_rule_params)
+      @access_rule = @agent.access_rules.build(access_rule_params)
       saved        = @access_rule.save
 
       respond_to do |format|
         format.turbo_stream { render :create, status: saved ? :ok : :unprocessable_entity }
-        format.html         { redirect_to persona_path(@persona), **create_flash(saved) }
+        format.html         { redirect_to agent_path(@agent), **create_flash(saved) }
       end
     end
 
-    # Remove an access rule from the persona. Serves
-    # +DELETE /personas/:persona_id/access_rules/:id+.
+    # Remove an access rule from the agent. Serves
+    # +DELETE /agents/:agent_id/access_rules/:id+.
     #
-    # Turbo requests remove the row in place; non-Turbo requests redirect back to the persona.
+    # Turbo requests remove the row in place; non-Turbo requests redirect back to the agent.
     #
     # @return [void]
     def destroy
@@ -37,7 +37,7 @@ module Protege
 
       respond_to do |format|
         format.turbo_stream { render turbo_stream: turbo_stream.remove(@access_rule) }
-        format.html         { redirect_to persona_path(@persona), notice: 'Access rule removed.' }
+        format.html         { redirect_to agent_path(@agent), notice: 'Access rule removed.' }
       end
     end
 
@@ -59,7 +59,7 @@ module Protege
     #
     # @return [Protege::AccessRule] the access rule to destroy
     def set_access_rule
-      @access_rule = @persona.access_rules.find(params[:id])
+      @access_rule = @agent.access_rules.find(params[:id])
     end
 
     # Permit the rule's kind and address pattern.

data/app/controllers/protege/agent_toolkit_rules_controller.rb

@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+module Protege
+  # Manages a toolkit grant's allow/deny gate rules — the sender gate for one agent's copy of a toolkit.
+  # Nested under the grant via the +AgentToolkitScoped+ concern (which loads +@agent_toolkit+); mirrors
+  # +AccessRulesController+ (Turbo child rows), rendering back to the grant's page.
+  class AgentToolkitRulesController < ApplicationController
+    include AgentToolkitScoped
+
+    before_action :set_rule, only: [:destroy]
+
+    # Add a gate rule to the grant. Turbo requests append the row and reset the form; non-Turbo requests
+    # redirect back to the grant.
+    #
+    # @return [void]
+    def create
+      @agent_toolkit_rule = @agent_toolkit.agent_toolkit_rules.build(rule_params)
+      saved               = @agent_toolkit_rule.save
+
+      respond_to do |format|
+        format.turbo_stream { render :create, status: saved ? :ok : :unprocessable_entity }
+        format.html         { redirect_to agent_toolkit_path(@agent_toolkit), **create_flash(saved) }
+      end
+    end
+
+    # Remove a gate rule from the grant. Turbo requests remove the row in place.
+    #
+    # @return [void]
+    def destroy
+      @agent_toolkit_rule.destroy
+
+      respond_to do |format|
+        format.turbo_stream { render turbo_stream: turbo_stream.remove(@agent_toolkit_rule) }
+        format.html         { redirect_to agent_toolkit_path(@agent_toolkit), notice: 'Rule removed.' }
+      end
+    end
+
+    private
+
+    # Load the rule to destroy, scoped to the grant.
+    #
+    # @return [Protege::AgentToolkitRule] the rule
+    def set_rule
+      @agent_toolkit_rule = @agent_toolkit.agent_toolkit_rules.find(params[:id])
+    end
+
+    # The flash for the non-Turbo create redirect — a success notice, or the validation errors.
+    #
+    # @param saved [Boolean] whether the rule saved
+    # @return [Hash] the +redirect_to+ flash options
+    def create_flash(saved)
+      saved ? { notice: 'Rule added.' } : { alert: @agent_toolkit_rule.errors.full_messages.to_sentence }
+    end
+
+    # Permit the rule's kind and address pattern.
+    #
+    # @return [ActionController::Parameters] the permitted +:kind+ and +:pattern+
+    def rule_params
+      params.require(:agent_toolkit_rule).permit(:kind, :pattern)
+    end
+  end
+end

data/app/controllers/protege/agent_toolkits_controller.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+module Protege
+  # Manages a created toolkit grant — the page where you configure how one agent uses one toolkit: its
+  # proactive flag and its sender-gate rules (the rules nest under this via +AgentToolkitRulesController+).
+  # Top-level and keyed by the grant's own id, so nesting never goes two deep. Attaching/detaching grants
+  # lives in the nested +Agents::AgentToolkitsController+.
+  class AgentToolkitsController < ApplicationController
+    before_action :set_agent_toolkit
+
+    # Show the grant's configuration page (its toolkit's tools, proactive flag, and gate rules).
+    #
+    # @return [void]
+    def show; end
+
+    # Update the grant's proactive flag. On failure, re-render its page.
+    #
+    # @return [void]
+    def update
+      if @agent_toolkit.update(agent_toolkit_params)
+        redirect_to agent_toolkit_path(@agent_toolkit), notice: 'Grant updated.'
+      else
+        render :show, status: :unprocessable_entity
+      end
+    end
+
+    private
+
+    # Load the grant named by the route.
+    #
+    # @return [Protege::AgentToolkit] the grant
+    def set_agent_toolkit
+      @agent_toolkit = AgentToolkit.find(params[:id])
+    end
+
+    # Permit the grant's editable attributes — only the proactive flag; the tool set is the toolkit's and
+    # the gate is edited as child rules.
+    #
+    # @return [ActionController::Parameters] the permitted attributes
+    def agent_toolkit_params
+      params.require(:agent_toolkit).permit(:allow_proactive)
+    end
+  end
+end

data/app/controllers/protege/agents/agent_toolkits_controller.rb

@@ -0,0 +1,65 @@
+# frozen_string_literal: true
+
+module Protege
+  module Agents
+    # Attaches and detaches an agent's toolkit grants — the list of toolkits given to one agent, in the
+    # agent's scope. Nested under agents via +AgentScoped+; mirrors +AccessRulesController+ (Turbo
+    # child rows), rendering back to the agent's page. Managing a created grant (its gate, proactive
+    # flag, rules) is the top-level +AgentToolkitsController+.
+    class AgentToolkitsController < ApplicationController
+      include AgentScoped
+
+      before_action :set_agent_toolkit, only: [:destroy]
+
+      # Attach a toolkit to the agent. Turbo requests append the grant row and reset the form; non-Turbo
+      # requests redirect back to the agent.
+      #
+      # @return [void]
+      def create
+        @agent_toolkit = @agent.agent_toolkits.build(agent_toolkit_params)
+        saved          = @agent_toolkit.save
+
+        respond_to do |format|
+          format.turbo_stream { render :create, status: saved ? :ok : :unprocessable_entity }
+          format.html         { redirect_to agent_path(@agent), **create_flash(saved) }
+        end
+      end
+
+      # Detach a toolkit from the agent. Turbo requests remove the row in place.
+      #
+      # @return [void]
+      def destroy
+        @agent_toolkit.destroy
+
+        respond_to do |format|
+          format.turbo_stream { render turbo_stream: turbo_stream.remove(@agent_toolkit) }
+          format.html         { redirect_to agent_path(@agent), notice: 'Toolkit detached.' }
+        end
+      end
+
+      private
+
+      # Load the grant to destroy, scoped to the agent.
+      #
+      # @return [Protege::AgentToolkit] the grant
+      def set_agent_toolkit
+        @agent_toolkit = @agent.agent_toolkits.find(params[:id])
+      end
+
+      # The flash for the non-Turbo create redirect — a success notice, or the validation errors.
+      #
+      # @param saved [Boolean] whether the grant saved
+      # @return [Hash] the +redirect_to+ flash options
+      def create_flash(saved)
+        saved ? { notice: 'Toolkit attached.' } : { alert: @agent_toolkit.errors.full_messages.to_sentence }
+      end
+
+      # Permit the toolkit being attached.
+      #
+      # @return [ActionController::Parameters] the permitted +:toolkit_id+
+      def agent_toolkit_params
+        params.require(:agent_toolkit).permit(:toolkit_id)
+      end
+    end
+  end
+end