@burdenoff/fluidgrids-fe-sdk 2026.1111.16 → 2026.1111.18

package/dist/{ManagedAiPolicyAuthority-DsSaz-vg.js → SettingsPage-CJLZvv4J.js}

@@ -1,15 +1,24 @@
 "use client";
-import { Bi as describeOperationError, Oi as getFluidGridsClient, Tt as ManagedAiWorkspacePolicyDocument, Ui as throwIfResultError, Vr as WorkflowNotificationSettingsDocument, ar as UpdateManagedAiWorkspacePolicyDocument, ir as UpdateDurableHistoryCapsDocument, lr as UpdateWorkflowNotificationSettingsDocument, qi as getFluidGridsConfig, tt as DurableHistoryCapsDocument } from "./node-endpoint-configs-DHFGA5MQ.js";
-import { At as useSaveStatusStore, Dn as FLUIDGRIDS_FLAGS, Fn as useFluidGridsFlag, Pn as useDurableParityEnabled, Qt as findSaveConflict, Rn as usePhaseCFlags, Zn as getGlobalStoreClient } from "./FluidGridsProvider-DmvFADFa.js";
-import { H as useFlowStore } from "./node-operation-selection--oy-yEq_.js";
+import { t as __exportAll } from "./rolldown-runtime-hDbaFkMy.js";
 import { r as useTr } from "./TranslationBridge-Da-TPgQm.js";
-import { Wt as useWorkflowDefinitionQuery, a as useConnections, n as useAgentDefinitions, qt as useWorkflowDefinitionsQuery, zt as useUpdateWorkflowDefinitionMutation } from "./useAgentDefinitions-NFtLytDR.js";
-import { KF as WorkflowSearchAttributeType, hI as FLUIDGRIDS_PERMISSIONS, xI as useFluidGridsPermission } from "./graphql-types-XcDLtFwU.js";
+import { s as useFluidGridsPermission, t as FLUIDGRIDS_PERMISSIONS } from "./constants-B2lhWNoN.js";
+import { n as useManagedAiPolicyAuthority } from "./ManagedAiPolicyAuthorityContext-CNkxIOZ1.js";
+import { Br as WorkflowNotificationSettingsDocument, cr as UpdateWorkflowNotificationSettingsDocument, et as DurableHistoryCapsDocument, ir as UpdateManagedAiWorkspacePolicyDocument, rr as UpdateDurableHistoryCapsDocument, wt as ManagedAiWorkspacePolicyDocument } from "./graphql-operation-types-kX-MMjgW.js";
+import { c as budgetInputValue, d as withBudgetMode, f as EffectBadge, m as useActionPolicies, n as checkCodecServerUrl, p as effectLabel, s as BUDGET_DIMENSIONS, u as withBudgetLimit } from "./codec-client-CJ95Rmqo.js";
+import { _ as throwIfResultError, m as describeOperationError, n as getFluidGridsClient, x as getFluidGridsConfig } from "./client-C9XSzSXr.js";
+import { c as useDurableParityEnabled, f as usePhaseCFlags, l as useFluidGridsFlag, t as FLUIDGRIDS_FLAGS } from "./feature-flags-DM5myWaD.js";
+import { M as saveCodecServerSettings, _ as fetchPauseRules, a as createPauseRule, c as deletePauseRule, f as fetchArchiveSettings, g as fetchCodecServerSettings, j as saveArchiveSettings, l as deleteSearchAttribute, o as createSearchAttribute, r as clearArchiveSettings, x as fetchSearchAttributes } from "./api-BrCHB5oA.js";
+import { i as NativeSelect, o as StatusPill, t as FieldError, u as useResource } from "./shared-CMfn30xT.js";
+import { KF as WorkflowSearchAttributeType } from "./graphql-types-CDKVWH2R.js";
+import { H as useFlowStore } from "./node-operation-selection--oy-yEq_.js";
+import { At as useSaveStatusStore, Qt as findSaveConflict } from "./FluidGridsProvider-dvZSNtSW.js";
+import { a as useLogStreamDestinations, i as useLogStreamDestinationActions } from "./useObservability-CfEw3ZFD.js";
+import { n as useConnections } from "./useConnections-Cs7LCWEM.js";
+import { Nt as useUpdateWorkflowDefinitionMutation, Rt as useWorkflowDefinitionQuery, Vt as useWorkflowDefinitionsQuery, n as useAgentDefinitions } from "./useAgentDefinitions-B0dam3_o.js";
+import { a as formToInput$2, i as emptyAgentForm, n as agentToForm, o as grantDays, r as describeRule, t as AgentFormError } from "./agent-form-Bfvm32j1.js";
+import { i as getGlobalStoreClient } from "./node-registry-refresh-Dy0uRg9f.js";
 import { t as FluidGridsDocsLink } from "./FluidGridsDocsLink-JxkBpOeb.js";
-import { C as createSearchAttribute, E as deleteSearchAttribute, J as saveArchiveSettings, N as fetchCodecServerSettings, P as fetchPauseRules, R as fetchSearchAttributes, S as createPauseRule, T as deletePauseRule, Y as saveCodecServerSettings, _ as useResource, a as formToInput$2, b as clearArchiveSettings, c as FieldError, d as NativeSelect, i as emptyAgentForm, k as fetchArchiveSettings, n as agentToForm, o as grantDays, p as StatusPill, r as describeRule, t as AgentFormError } from "./agent-form-BvMWhQ42.js";
-import { c as budgetInputValue, d as withBudgetMode, f as EffectBadge, m as useActionPolicies, n as checkCodecServerUrl, p as effectLabel, s as BUDGET_DIMENSIONS, u as withBudgetLimit } from "./codec-client-DstqyzTN.js";
-import { a as useLogStreamDestinations, i as useLogStreamDestinationActions } from "./useObservability-COCZ0hUS.js";
-import { createContext, useCallback, useContext, useEffect, useLayoutEffect, useMemo, useRef, useState } from "react";
+import { useCallback, useEffect, useLayoutEffect, useMemo, useRef, useState } from "react";
 import { useNavigate, useParams } from "react-router";
 import { Icon } from "@iconify/react";
 import { cn } from "@burdenoff/fe-libs/utils";
@@ -22,621 +31,190 @@ import { print } from "graphql";
 import { clearGraphqlFetchResponseCache, getStoredOrganizationId, getStoredProjectId, getWorkspaceTokenPayload, graphqlFetchPinned, isWorkspaceTokenValidForContext, prepareWorkspaceRequest } from "@burdenoff/fe-libs/shared";
 import { resolveExternalGatewayUrls } from "@burdenoff/fe-libs/shared/config";
 
-// src/modules/agent-definitions/components/AgentsTab.tsx
-/**
-* Settings → Agents (BOFF-9962): FluidGrids agents with their own identity.
-*
-* Builders create an agent, choose the tools it may call (node type and operations) and the
-* connections those tools may use, and can require approval for every tool call. Each person
-* lets the agent act for them with a time-boxed grant (30 days by default, 365 at most) and can
-* withdraw it at any time; admins can revoke anyone's grant. An AI Agent node that names the agent
-* runs its tools as "agent for user", and every call is recorded under both identities. Giving an
-* agent more access withdraws other people's grants until they grant again.
-*/
-function errorMessage$2(err) {
-	if (err instanceof AgentFormError) return err.message;
-	return describeOperationError(err);
+// src/modules/action-policies/utils/policy-form.ts
+const POLICY_EFFECTS = [
+	"REQUIRE_APPROVAL",
+	"DENY",
+	"ALLOW",
+	"LOG"
+];
+const POLICY_ENVIRONMENTS = [
+	"DEV",
+	"STAGING",
+	"PROD"
+];
+const CONDITION_OPERATORS = [
+	{
+		value: "gt",
+		label: "is greater than",
+		kind: "number"
+	},
+	{
+		value: "gte",
+		label: "is at least",
+		kind: "number"
+	},
+	{
+		value: "lt",
+		label: "is less than",
+		kind: "number"
+	},
+	{
+		value: "lte",
+		label: "is at most",
+		kind: "number"
+	},
+	{
+		value: "eq",
+		label: "equals",
+		kind: "single"
+	},
+	{
+		value: "neq",
+		label: "does not equal",
+		kind: "single"
+	},
+	{
+		value: "in",
+		label: "is one of",
+		kind: "list"
+	},
+	{
+		value: "not_in",
+		label: "is not one of",
+		kind: "list"
+	},
+	{
+		value: "contains",
+		label: "contains",
+		kind: "single"
+	},
+	{
+		value: "count_gt",
+		label: "has more items than",
+		kind: "number"
+	},
+	{
+		value: "count_gte",
+		label: "has at least … items",
+		kind: "number"
+	},
+	{
+		value: "count_lt",
+		label: "has fewer items than",
+		kind: "number"
+	},
+	{
+		value: "count_lte",
+		label: "has at most … items",
+		kind: "number"
+	},
+	{
+		value: "exists",
+		label: "is set",
+		kind: "none"
+	},
+	{
+		value: "not_exists",
+		label: "is not set",
+		kind: "none"
+	}
+];
+var PolicyFormError = class extends Error {};
+const OPERATOR_KIND = new Map(CONDITION_OPERATORS.map((operator) => [operator.value, operator.kind]));
+function operatorKind(op) {
+	return OPERATOR_KIND.get(op) ?? "single";
 }
-function AgentEditor({ initial, onCancel, onSave }) {
-	const tr = useTr();
-	const [form, setForm] = useState(initial);
-	const [busy, setBusy] = useState(false);
-	const { connections, loading: connectionsLoading } = useConnections();
-	const setTool = (index, patch) => setForm((current) => ({
-		...current,
-		tools: current.tools.map((row, i) => i === index ? {
-			...row,
-			...patch
-		} : row)
-	}));
-	const toggleConnection = (id, on) => setForm((current) => ({
-		...current,
-		connectionScope: on ? [.../* @__PURE__ */ new Set([...current.connectionScope, id])] : current.connectionScope.filter((value) => value !== id)
-	}));
-	const submit = async () => {
-		setBusy(true);
-		try {
-			await onSave(form);
-		} catch (err) {
-			toast.error(errorMessage$2(err));
-		} finally {
-			setBusy(false);
+function emptyPolicyForm() {
+	return {
+		name: "",
+		description: "",
+		enabled: true,
+		priority: "100",
+		effect: "REQUIRE_APPROVAL",
+		nodeTypes: "",
+		operations: "",
+		connectionProviders: "",
+		workflowTags: "",
+		environments: ["PROD"],
+		join: "all",
+		rows: []
+	};
+}
+function splitList(text) {
+	return [...new Set(text.split(",").map((item) => item.trim()).filter(Boolean))];
+}
+/** "1500" -> 1500, "true" -> true, "null" -> null, anything else stays text. */
+function parseScalar(text) {
+	const trimmed = text.trim();
+	if (trimmed === "true") return true;
+	if (trimmed === "false") return false;
+	if (trimmed === "null") return null;
+	if (trimmed !== "" && Number.isFinite(Number(trimmed))) return Number(trimmed);
+	return trimmed;
+}
+function formatScalar(value) {
+	if (value === null) return "null";
+	return String(value);
+}
+function rowToLeaf(row, index) {
+	const path = row.path.trim();
+	if (!path) throw new PolicyFormError(`Condition ${index + 1} needs a parameter path`);
+	switch (operatorKind(row.op)) {
+		case "none": return {
+			path,
+			op: row.op
+		};
+		case "number": {
+			const value = Number(row.value.trim());
+			if (row.value.trim() === "" || !Number.isFinite(value)) throw new PolicyFormError(`Condition ${index + 1} needs a number`);
+			return {
+				path,
+				op: row.op,
+				value
+			};
+		}
+		case "list": {
+			const values = splitList(row.value).map(parseScalar);
+			if (values.length === 0) throw new PolicyFormError(`Condition ${index + 1} needs at least one value`);
+			return {
+				path,
+				op: row.op,
+				value: values
+			};
 		}
-	};
-	return /* @__PURE__ */ jsxs("div", {
-		className: "rounded-lg border border-border-secondary bg-background-primary p-4 space-y-4",
-		"data-testid": "agent-definition-editor",
-		children: [
-			/* @__PURE__ */ jsxs("div", {
-				className: "grid gap-3 sm:grid-cols-2",
-				children: [/* @__PURE__ */ jsxs("div", {
-					className: "space-y-1",
-					children: [/* @__PURE__ */ jsx(Label, {
-						htmlFor: "agent-name",
-						children: tr("fluidgrids.agents.name", "Name")
-					}), /* @__PURE__ */ jsx(Input, {
-						id: "agent-name",
-						value: form.name,
-						onChange: (e) => setForm({
-							...form,
-							name: e.target.value
-						}),
-						"data-testid": "agent-definition-name"
-					})]
-				}), /* @__PURE__ */ jsxs("div", {
-					className: "flex items-end gap-2",
-					children: [/* @__PURE__ */ jsx(Switch, {
-						id: "agent-active",
-						checked: form.status === "ACTIVE",
-						onCheckedChange: (on) => setForm({
-							...form,
-							status: on ? "ACTIVE" : "DISABLED"
-						})
-					}), /* @__PURE__ */ jsx(Label, {
-						htmlFor: "agent-active",
-						children: tr("fluidgrids.agents.active", "Active")
-					})]
-				})]
-			}),
-			/* @__PURE__ */ jsxs("div", {
-				className: "space-y-1",
-				children: [/* @__PURE__ */ jsx(Label, {
-					htmlFor: "agent-description",
-					children: tr("fluidgrids.agents.description", "Description")
-				}), /* @__PURE__ */ jsx(Textarea, {
-					id: "agent-description",
-					value: form.description,
-					onChange: (e) => setForm({
-						...form,
-						description: e.target.value
-					}),
-					rows: 2
-				})]
-			}),
-			/* @__PURE__ */ jsxs("div", {
-				className: "space-y-2",
-				children: [
-					/* @__PURE__ */ jsx(Label, { children: tr("fluidgrids.agents.tools", "Tools the agent may call") }),
-					/* @__PURE__ */ jsx("p", {
-						className: "text-xs text-text-secondary",
-						children: tr("fluidgrids.agents.toolsHelp", "A node type (for example store/slack) and the operations of it the agent may call, separated by commas. Leave the operations empty to allow every operation of that node type. Nothing else can be called.")
-					}),
-					form.tools.map((row, index) => /* @__PURE__ */ jsxs("div", {
-						className: "flex flex-wrap items-center gap-2",
-						"data-testid": `agent-definition-tool-${index}`,
-						children: [
-							/* @__PURE__ */ jsx(Input, {
-								className: "w-48",
-								placeholder: "store/slack",
-								value: row.nodeType,
-								onChange: (e) => setTool(index, { nodeType: e.target.value }),
-								"aria-label": tr("fluidgrids.agents.nodeType", "Node type")
-							}),
-							/* @__PURE__ */ jsx(Input, {
-								className: "min-w-48 flex-1",
-								placeholder: "postMessage, listChannels",
-								value: row.operations,
-								onChange: (e) => setTool(index, { operations: e.target.value }),
-								"aria-label": tr("fluidgrids.agents.operations", "Operations")
-							}),
-							/* @__PURE__ */ jsx(Button$1, {
-								variant: "ghost",
-								size: "sm",
-								onClick: () => setForm({
-									...form,
-									tools: form.tools.filter((_, i) => i !== index)
-								}),
-								"aria-label": tr("fluidgrids.agents.removeTool", "Remove tool"),
-								children: /* @__PURE__ */ jsx(Icon, {
-									icon: "mdi:close",
-									width: 16
-								})
-							})
-						]
-					}, index)),
-					/* @__PURE__ */ jsxs(Button$1, {
-						variant: "outline",
-						size: "sm",
-						onClick: () => setForm({
-							...form,
-							tools: [...form.tools, {
-								nodeType: "",
-								operations: ""
-							}]
-						}),
-						children: [/* @__PURE__ */ jsx(Icon, {
-							icon: "mdi:plus",
-							width: 16
-						}), tr("fluidgrids.agents.addTool", "Add tool")]
-					})
-				]
-			}),
-			/* @__PURE__ */ jsxs("div", {
-				className: "space-y-2",
-				children: [/* @__PURE__ */ jsx(Label, { children: tr("fluidgrids.agents.connections", "Connections the agent's tools may use") }), connectionsLoading ? /* @__PURE__ */ jsx("p", {
-					className: "text-xs text-text-secondary",
-					children: tr("fluidgrids.agents.loadingConnections", "Loading connections…")
-				}) : connections.length === 0 ? /* @__PURE__ */ jsx("p", {
-					className: "text-xs text-text-secondary",
-					children: tr("fluidgrids.agents.noConnections", "This workspace has no connections yet.")
-				}) : /* @__PURE__ */ jsx("div", {
-					className: "grid gap-1 sm:grid-cols-2",
-					children: connections.map((connection) => /* @__PURE__ */ jsxs("label", {
-						className: "flex items-center gap-2 text-sm text-text-primary",
-						children: [
-							/* @__PURE__ */ jsx(Checkbox, {
-								checked: form.connectionScope.includes(connection.id),
-								onCheckedChange: (on) => toggleConnection(connection.id, on === true)
-							}),
-							/* @__PURE__ */ jsx("span", { children: connection.name }),
-							/* @__PURE__ */ jsx("span", {
-								className: "text-xs text-text-tertiary",
-								children: connection.provider?.name ?? connection.providerId
-							})
-						]
-					}, connection.id))
-				})]
-			}),
-			/* @__PURE__ */ jsxs("div", {
-				className: "flex items-center gap-2",
-				children: [/* @__PURE__ */ jsx(Switch, {
-					id: "agent-approval",
-					checked: form.requireToolApproval,
-					onCheckedChange: (on) => setForm({
-						...form,
-						requireToolApproval: on
-					})
-				}), /* @__PURE__ */ jsx(Label, {
-					htmlFor: "agent-approval",
-					children: tr("fluidgrids.agents.requireApproval", "Every tool call waits for a person's approval")
-				})]
-			}),
-			/* @__PURE__ */ jsxs("div", {
-				className: "flex gap-2",
-				children: [/* @__PURE__ */ jsx(Button$1, {
-					onClick: () => void submit(),
-					disabled: busy,
-					"data-testid": "agent-definition-save",
-					children: tr("fluidgrids.agents.save", "Save agent")
-				}), /* @__PURE__ */ jsx(Button$1, {
-					variant: "outline",
-					onClick: onCancel,
-					disabled: busy,
-					children: tr("fluidgrids.agents.cancel", "Cancel")
-				})]
-			})
-		]
-	});
-}
-function AgentGrants({ agent, loadGrants, onGrant, onRevoke }) {
-	const tr = useTr();
-	const [grants, setGrants] = useState(null);
-	const [days, setDays] = useState(String(30));
-	const [busy, setBusy] = useState(false);
-	const load = useCallback(async () => {
-		try {
-			setGrants(await loadGrants(agent.id));
-		} catch (err) {
-			setGrants([]);
-			toast.error(errorMessage$2(err));
-		}
-	}, [agent.id, loadGrants]);
-	useEffect(() => {
-		load();
-	}, [load]);
-	const run = async (action, done) => {
-		setBusy(true);
-		try {
-			await action();
-			toast.success(done);
-			await load();
-		} catch (err) {
-			toast.error(errorMessage$2(err));
-		} finally {
-			setBusy(false);
-		}
-	};
-	const mine = grants?.find((grant) => grant.isMine && grant.status === "ACTIVE");
-	return /* @__PURE__ */ jsxs("div", {
-		className: "space-y-2",
-		"data-testid": `agent-grants-${agent.id}`,
-		children: [/* @__PURE__ */ jsx("div", {
-			className: "flex flex-wrap items-center gap-2",
-			children: mine ? /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx("span", {
-				className: "text-sm text-text-primary",
-				children: mine.expiresAt ? tr("fluidgrids.agents.myGrantUntil", "This agent may act for you until {{date}}.", { date: new Date(mine.expiresAt).toLocaleDateString() }) : tr("fluidgrids.agents.myGrant", "This agent may act for you.")
-			}), /* @__PURE__ */ jsx(Button$1, {
-				variant: "outline",
-				size: "sm",
-				disabled: busy,
-				onClick: () => void run(() => onRevoke(agent.id, null), tr("fluidgrids.agents.withdrawn", "Grant withdrawn")),
-				"data-testid": "agent-grant-withdraw",
-				children: tr("fluidgrids.agents.withdraw", "Withdraw my grant")
-			})] }) : /* @__PURE__ */ jsxs(Fragment, { children: [
-				/* @__PURE__ */ jsx(Label, {
-					htmlFor: `grant-days-${agent.id}`,
-					className: "text-sm",
-					children: tr("fluidgrids.agents.grantFor", "Let it act for me for")
-				}),
-				/* @__PURE__ */ jsx(Input, {
-					id: `grant-days-${agent.id}`,
-					className: "w-20",
-					type: "number",
-					min: 1,
-					max: 365,
-					value: days,
-					onChange: (e) => setDays(e.target.value)
-				}),
-				/* @__PURE__ */ jsx("span", {
-					className: "text-sm text-text-secondary",
-					children: tr("fluidgrids.agents.days", "days")
-				}),
-				/* @__PURE__ */ jsx(Button$1, {
-					size: "sm",
-					disabled: busy || agent.status !== "ACTIVE",
-					onClick: () => void run(async () => onGrant(agent.id, grantDays(days)), tr("fluidgrids.agents.granted", "Grant given")),
-					"data-testid": "agent-grant-give",
-					children: tr("fluidgrids.agents.grant", "Grant")
-				})
-			] })
-		}), grants && grants.length > 0 ? /* @__PURE__ */ jsx("ul", {
-			className: "space-y-1 text-xs text-text-secondary",
-			children: grants.map((grant) => /* @__PURE__ */ jsxs("li", {
-				className: "flex items-center gap-2",
-				children: [
-					/* @__PURE__ */ jsx("span", {
-						className: "font-mono",
-						children: grant.userId
-					}),
-					/* @__PURE__ */ jsx(Badge, {
-						variant: "outline",
-						children: grant.status
-					}),
-					grant.expiresAt ? /* @__PURE__ */ jsx("span", { children: tr("fluidgrids.agents.until", "until {{date}}", { date: new Date(grant.expiresAt).toLocaleDateString() }) }) : null,
-					!grant.isMine && grant.status === "ACTIVE" ? /* @__PURE__ */ jsx(Button$1, {
-						variant: "ghost",
-						size: "sm",
-						disabled: busy,
-						onClick: () => void run(() => onRevoke(agent.id, grant.userId), tr("fluidgrids.agents.revoked", "Grant revoked")),
-						children: tr("fluidgrids.agents.revoke", "Revoke")
-					}) : null
-				]
-			}, grant.userId))
-		}) : null]
-	});
-}
-function AgentsTab() {
-	const tr = useTr();
-	const { agents, loading, error, save, remove, grants, grant, revoke } = useAgentDefinitions();
-	const [editing, setEditing] = useState(null);
-	const onSave = async (form) => {
-		const input = formToInput$2(form);
-		await save(editing?.id ?? null, input);
-		toast.success(tr("fluidgrids.agents.saved", "Agent saved"));
-		setEditing(null);
-	};
-	const onDelete = async (agent) => {
-		try {
-			await remove(agent.id);
-			toast.success(tr("fluidgrids.agents.deleted", "Agent deleted"));
-		} catch (err) {
-			toast.error(errorMessage$2(err));
-		}
-	};
-	return /* @__PURE__ */ jsxs("div", {
-		className: "space-y-4",
-		"data-testid": "agents-tab",
-		children: [
-			/* @__PURE__ */ jsxs("div", {
-				className: "flex flex-wrap items-start justify-between gap-2",
-				children: [/* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("h3", {
-					className: "text-base font-semibold text-text-primary",
-					children: tr("fluidgrids.agents.title", "Agents")
-				}), /* @__PURE__ */ jsx("p", {
-					className: "text-sm text-text-secondary",
-					children: tr("fluidgrids.agents.subtitle", "Give an AI Agent node an identity of its own. It can only call the tools and connections you allow, only for people who granted it, and every tool call is recorded under the agent and the person.")
-				})] }), !editing ? /* @__PURE__ */ jsxs(Button$1, {
-					onClick: () => setEditing({
-						id: null,
-						form: emptyAgentForm()
-					}),
-					"data-testid": "agent-definition-new",
-					children: [/* @__PURE__ */ jsx(Icon, {
-						icon: "mdi:plus",
-						width: 16
-					}), tr("fluidgrids.agents.new", "New agent")]
-				}) : null]
-			}),
-			editing ? /* @__PURE__ */ jsx(AgentEditor, {
-				initial: editing.form,
-				onCancel: () => setEditing(null),
-				onSave
-			}) : null,
-			error ? /* @__PURE__ */ jsx("p", {
-				className: "text-sm text-destructive",
-				children: errorMessage$2(error)
-			}) : null,
-			loading ? /* @__PURE__ */ jsx("p", {
-				className: "text-sm text-text-secondary",
-				children: tr("fluidgrids.agents.loading", "Loading agents…")
-			}) : agents.length === 0 && !error ? /* @__PURE__ */ jsx("p", {
-				className: "text-sm text-text-secondary",
-				children: tr("fluidgrids.agents.empty", "No agents yet.")
-			}) : /* @__PURE__ */ jsx("ul", {
-				className: "space-y-3",
-				children: agents.map((agent) => /* @__PURE__ */ jsxs("li", {
-					className: "rounded-lg border border-border-secondary bg-background-secondary p-3 space-y-2",
-					"data-testid": `agent-definition-${agent.id}`,
-					children: [
-						/* @__PURE__ */ jsxs("div", {
-							className: "flex flex-wrap items-center justify-between gap-2",
-							children: [/* @__PURE__ */ jsxs("div", {
-								className: "flex items-center gap-2",
-								children: [
-									/* @__PURE__ */ jsx(Icon, {
-										icon: "mdi:robot-outline",
-										width: 18
-									}),
-									/* @__PURE__ */ jsx("span", {
-										className: "font-medium text-text-primary",
-										children: agent.name
-									}),
-									/* @__PURE__ */ jsx(Badge, {
-										variant: "outline",
-										children: agent.status
-									}),
-									agent.requireToolApproval ? /* @__PURE__ */ jsx(Badge, {
-										variant: "outline",
-										children: tr("fluidgrids.agents.approvalBadge", "Approval required")
-									}) : null
-								]
-							}), /* @__PURE__ */ jsxs("div", {
-								className: "flex gap-1",
-								children: [/* @__PURE__ */ jsx(Button$1, {
-									variant: "ghost",
-									size: "sm",
-									onClick: () => setEditing({
-										id: agent.id,
-										form: agentToForm(agent)
-									}),
-									children: tr("fluidgrids.agents.edit", "Edit")
-								}), /* @__PURE__ */ jsx(Button$1, {
-									variant: "ghost",
-									size: "sm",
-									onClick: () => void onDelete(agent),
-									children: tr("fluidgrids.agents.delete", "Delete")
-								})]
-							})]
-						}),
-						agent.description ? /* @__PURE__ */ jsx("p", {
-							className: "text-sm text-text-secondary",
-							children: agent.description
-						}) : null,
-						/* @__PURE__ */ jsx("div", {
-							className: "text-xs text-text-secondary",
-							children: agent.toolAllowlist.length > 0 ? agent.toolAllowlist.map(describeRule).join(" · ") : tr("fluidgrids.agents.noTools", "No tools allowed")
-						}),
-						/* @__PURE__ */ jsx("div", {
-							className: "text-xs text-text-tertiary",
-							children: tr("fluidgrids.agents.connectionCount", "{{count}} connections in scope", { count: agent.connectionScope.length })
-						}),
-						/* @__PURE__ */ jsx(AgentGrants, {
-							agent,
-							loadGrants: grants,
-							onGrant: grant,
-							onRevoke: revoke
-						})
-					]
-				}, agent.id))
-			})
-		]
-	});
-}
-
-// src/modules/action-policies/utils/policy-form.ts
-const POLICY_EFFECTS = [
-	"REQUIRE_APPROVAL",
-	"DENY",
-	"ALLOW",
-	"LOG"
-];
-const POLICY_ENVIRONMENTS = [
-	"DEV",
-	"STAGING",
-	"PROD"
-];
-const CONDITION_OPERATORS = [
-	{
-		value: "gt",
-		label: "is greater than",
-		kind: "number"
-	},
-	{
-		value: "gte",
-		label: "is at least",
-		kind: "number"
-	},
-	{
-		value: "lt",
-		label: "is less than",
-		kind: "number"
-	},
-	{
-		value: "lte",
-		label: "is at most",
-		kind: "number"
-	},
-	{
-		value: "eq",
-		label: "equals",
-		kind: "single"
-	},
-	{
-		value: "neq",
-		label: "does not equal",
-		kind: "single"
-	},
-	{
-		value: "in",
-		label: "is one of",
-		kind: "list"
-	},
-	{
-		value: "not_in",
-		label: "is not one of",
-		kind: "list"
-	},
-	{
-		value: "contains",
-		label: "contains",
-		kind: "single"
-	},
-	{
-		value: "count_gt",
-		label: "has more items than",
-		kind: "number"
-	},
-	{
-		value: "count_gte",
-		label: "has at least … items",
-		kind: "number"
-	},
-	{
-		value: "count_lt",
-		label: "has fewer items than",
-		kind: "number"
-	},
-	{
-		value: "count_lte",
-		label: "has at most … items",
-		kind: "number"
-	},
-	{
-		value: "exists",
-		label: "is set",
-		kind: "none"
-	},
-	{
-		value: "not_exists",
-		label: "is not set",
-		kind: "none"
-	}
-];
-var PolicyFormError = class extends Error {};
-const OPERATOR_KIND = new Map(CONDITION_OPERATORS.map((operator) => [operator.value, operator.kind]));
-function operatorKind(op) {
-	return OPERATOR_KIND.get(op) ?? "single";
-}
-function emptyPolicyForm() {
-	return {
-		name: "",
-		description: "",
-		enabled: true,
-		priority: "100",
-		effect: "REQUIRE_APPROVAL",
-		nodeTypes: "",
-		operations: "",
-		connectionProviders: "",
-		workflowTags: "",
-		environments: ["PROD"],
-		join: "all",
-		rows: []
-	};
-}
-function splitList(text) {
-	return [...new Set(text.split(",").map((item) => item.trim()).filter(Boolean))];
-}
-/** "1500" -> 1500, "true" -> true, "null" -> null, anything else stays text. */
-function parseScalar(text) {
-	const trimmed = text.trim();
-	if (trimmed === "true") return true;
-	if (trimmed === "false") return false;
-	if (trimmed === "null") return null;
-	if (trimmed !== "" && Number.isFinite(Number(trimmed))) return Number(trimmed);
-	return trimmed;
-}
-function formatScalar(value) {
-	if (value === null) return "null";
-	return String(value);
-}
-function rowToLeaf(row, index) {
-	const path = row.path.trim();
-	if (!path) throw new PolicyFormError(`Condition ${index + 1} needs a parameter path`);
-	switch (operatorKind(row.op)) {
-		case "none": return {
-			path,
-			op: row.op
-		};
-		case "number": {
-			const value = Number(row.value.trim());
-			if (row.value.trim() === "" || !Number.isFinite(value)) throw new PolicyFormError(`Condition ${index + 1} needs a number`);
-			return {
-				path,
-				op: row.op,
-				value
-			};
-		}
-		case "list": {
-			const values = splitList(row.value).map(parseScalar);
-			if (values.length === 0) throw new PolicyFormError(`Condition ${index + 1} needs at least one value`);
-			return {
-				path,
-				op: row.op,
-				value: values
-			};
-		}
-		default: return {
-			path,
-			op: row.op,
-			value: parseScalar(row.value)
-		};
-	}
-}
-/** The editor state as the API input. Throws PolicyFormError with a readable reason. */
-function formToInput$1(form) {
-	const name = form.name.trim();
-	if (!name) throw new PolicyFormError("Give the policy a name");
-	const priority = Number(form.priority);
-	if (!Number.isInteger(priority) || priority < 0 || priority > 1e5) throw new PolicyFormError("Priority is a whole number from 0 to 100000");
-	const leaves = form.rows.map(rowToLeaf);
-	let condition = null;
-	if (leaves.length === 1) condition = leaves[0];
-	else if (leaves.length > 1) condition = { [form.join]: leaves };
-	return {
-		...form.id ? { id: form.id } : {},
-		name,
-		description: form.description.trim() || null,
-		enabled: form.enabled,
-		priority,
-		effect: form.effect,
-		matcher: {
-			nodeTypes: splitList(form.nodeTypes),
-			operations: splitList(form.operations),
-			connectionProviders: splitList(form.connectionProviders),
-			workflowTags: splitList(form.workflowTags)
-		},
-		condition,
-		environments: form.environments
+		default: return {
+			path,
+			op: row.op,
+			value: parseScalar(row.value)
+		};
+	}
+}
+/** The editor state as the API input. Throws PolicyFormError with a readable reason. */
+function formToInput$1(form) {
+	const name = form.name.trim();
+	if (!name) throw new PolicyFormError("Give the policy a name");
+	const priority = Number(form.priority);
+	if (!Number.isInteger(priority) || priority < 0 || priority > 1e5) throw new PolicyFormError("Priority is a whole number from 0 to 100000");
+	const leaves = form.rows.map(rowToLeaf);
+	let condition = null;
+	if (leaves.length === 1) condition = leaves[0];
+	else if (leaves.length > 1) condition = { [form.join]: leaves };
+	return {
+		...form.id ? { id: form.id } : {},
+		name,
+		description: form.description.trim() || null,
+		enabled: form.enabled,
+		priority,
+		effect: form.effect,
+		matcher: {
+			nodeTypes: splitList(form.nodeTypes),
+			operations: splitList(form.operations),
+			connectionProviders: splitList(form.connectionProviders),
+			workflowTags: splitList(form.workflowTags)
+		},
+		condition,
+		environments: form.environments
 	};
 }
 function isRecord$1(value) {
@@ -736,7 +314,7 @@ function needsAllowFallback(draft, others) {
 * rule; changing a policy or deciding an approval needs workflow publish rights.
 */
 const FIELD$1 = "rounded-md border border-border-secondary bg-background-secondary px-2 py-1.5 text-sm text-text-primary";
-function errorMessage$1(err) {
+function errorMessage$2(err) {
 	if (err instanceof PolicyFormError) return err.message;
 	return describeOperationError(err);
 }
@@ -850,7 +428,7 @@ function PolicyEditor({ initial, conditionEditable, storedCondition, others, onC
 		try {
 			await action();
 		} catch (err) {
-			toast.error(errorMessage$1(err));
+			toast.error(errorMessage$2(err));
 		} finally {
 			setBusy(false);
 		}
@@ -1205,7 +783,7 @@ function ApprovalsList({ approvals, onDecide }) {
 							await onDecide(approval.id, true);
 							toast.success(tr("fluidgrids.actionPolicies.approved", "Approved — the run continues"));
 						} catch (err) {
-							toast.error(errorMessage$1(err));
+							toast.error(errorMessage$2(err));
 						} finally {
 							setBusy(null);
 						}
@@ -1221,7 +799,7 @@ function ApprovalsList({ approvals, onDecide }) {
 							await onDecide(approval.id, false);
 							toast.success(tr("fluidgrids.actionPolicies.declined", "Declined — the node fails"));
 						} catch (err) {
-							toast.error(errorMessage$1(err));
+							toast.error(errorMessage$2(err));
 						} finally {
 							setBusy(null);
 						}
@@ -1348,7 +926,7 @@ function ActionPoliciesTab() {
 									try {
 										setPreview(await dryRun({ excludePolicyId: policy.id }));
 									} catch (err) {
-										toast.error(errorMessage$1(err));
+										toast.error(errorMessage$2(err));
 									}
 								},
 								children: tr("fluidgrids.actionPolicies.withoutIt", "Without it")
@@ -1381,7 +959,7 @@ function ActionPoliciesTab() {
 										await remove(policy.id);
 										toast.success(tr("fluidgrids.actionPolicies.deleted", "Policy deleted"));
 									} catch (err) {
-										toast.error(errorMessage$1(err));
+										toast.error(errorMessage$2(err));
 									}
 								},
 								children: confirmDelete === policy.id ? tr("fluidgrids.actionPolicies.confirmDelete", "Confirm delete") : tr("fluidgrids.actionPolicies.delete", "Delete")
@@ -1394,12 +972,6 @@ function ActionPoliciesTab() {
 	});
 }
 
-// src/modules/settings/api/ManagedAiPolicyAuthorityContext.ts
-const ManagedAiAuthorityContext = createContext(null);
-function useManagedAiPolicyAuthority() {
-	return useContext(ManagedAiAuthorityContext);
-}
-
 // src/modules/settings/api/managed-ai-request.ts
 const canonical = {
 	prepare: prepareWorkspaceRequest,
@@ -3805,127 +3377,558 @@ function LogStreamingSettings() {
 								className: "size-4 rounded border-border-secondary accent-action-primary-bg"
 							}), tr("fluidgrids.settings.logStreaming.enabled", "Destination enabled")]
 						}),
-						/* @__PURE__ */ jsxs("div", {
-							className: "flex justify-end gap-2",
-							children: [/* @__PURE__ */ jsx(Button$1, {
-								variant: "outline",
-								onClick: resetForm,
-								children: tr("fluidgrids.settings.logStreaming.cancel", "Cancel")
-							}), /* @__PURE__ */ jsx(Button$1, {
-								"data-agent": "confirm",
-								onClick: () => void save(),
-								disabled: actions.loading,
-								children: actions.loading ? tr("fluidgrids.settings.logStreaming.saving", "Saving…") : tr("fluidgrids.settings.logStreaming.save", "Save destination")
-							})]
+						/* @__PURE__ */ jsxs("div", {
+							className: "flex justify-end gap-2",
+							children: [/* @__PURE__ */ jsx(Button$1, {
+								variant: "outline",
+								onClick: resetForm,
+								children: tr("fluidgrids.settings.logStreaming.cancel", "Cancel")
+							}), /* @__PURE__ */ jsx(Button$1, {
+								"data-agent": "confirm",
+								onClick: () => void save(),
+								disabled: actions.loading,
+								children: actions.loading ? tr("fluidgrids.settings.logStreaming.saving", "Saving…") : tr("fluidgrids.settings.logStreaming.save", "Save destination")
+							})]
+						})
+					]
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-3",
+				children: [
+					loading && destinations.length === 0 && /* @__PURE__ */ jsx("div", {
+						className: "rounded-lg border border-border-secondary bg-background-secondary p-6 text-sm text-text-secondary",
+						children: tr("fluidgrids.settings.logStreaming.loading", "Loading destinations…")
+					}),
+					!loading && destinations.length === 0 && /* @__PURE__ */ jsxs("div", {
+						className: "rounded-lg border border-dashed border-border-secondary bg-background-secondary p-8 text-center",
+						children: [
+							/* @__PURE__ */ jsx(Icon, {
+								icon: "mdi:transit-connection-variant",
+								className: "mx-auto mb-3 text-text-secondary",
+								width: 32
+							}),
+							/* @__PURE__ */ jsx("p", {
+								className: "font-medium text-text-primary",
+								children: tr("fluidgrids.settings.logStreaming.emptyTitle", "No log destinations yet")
+							}),
+							/* @__PURE__ */ jsx("p", {
+								className: "mt-1 text-sm text-text-secondary",
+								children: tr("fluidgrids.settings.logStreaming.emptyDescription", "Add a webhook, syslog target, or Sentry DSN to start streaming events.")
+							})
+						]
+					}),
+					destinations.map((destination) => /* @__PURE__ */ jsx(Card, {
+						className: "border-border-secondary bg-background-secondary",
+						children: /* @__PURE__ */ jsxs(CardContent, {
+							className: "flex flex-col gap-4 p-4 sm:flex-row sm:items-center sm:justify-between",
+							children: [/* @__PURE__ */ jsxs("div", {
+								className: "min-w-0",
+								children: [
+									/* @__PURE__ */ jsxs("div", {
+										className: "flex flex-wrap items-center gap-2",
+										children: [
+											/* @__PURE__ */ jsx("h3", {
+												className: "font-medium text-text-primary",
+												children: destination.name
+											}),
+											/* @__PURE__ */ jsx("span", {
+												className: "rounded-full bg-background-tertiary px-2 py-0.5 text-xs text-text-secondary",
+												children: destination.provider
+											}),
+											/* @__PURE__ */ jsx("span", {
+												className: destination.isEnabled ? "text-xs text-status-success-text" : "text-xs text-text-secondary",
+												children: destination.isEnabled ? tr("fluidgrids.settings.logStreaming.enabledBadge", "Enabled") : tr("fluidgrids.settings.logStreaming.disabledBadge", "Disabled")
+											})
+										]
+									}),
+									/* @__PURE__ */ jsx("p", {
+										className: "mt-1 truncate text-sm text-text-secondary",
+										children: destination.endpoint
+									}),
+									/* @__PURE__ */ jsxs("p", {
+										className: "mt-1 text-xs text-text-secondary",
+										children: [destination.eventFilters.length > 0 ? destination.eventFilters.map(eventLabel).join(", ") : tr("fluidgrids.settings.logStreaming.allEvents", "All events"), destination.hasSecret && " · Secret configured"]
+									}),
+									destination.lastDispatchError && /* @__PURE__ */ jsx("p", {
+										className: "mt-2 text-xs text-status-error-text",
+										children: destination.lastDispatchError
+									})
+								]
+							}), /* @__PURE__ */ jsxs("div", {
+								className: "flex shrink-0 flex-wrap gap-2",
+								children: [
+									/* @__PURE__ */ jsxs(Button$1, {
+										variant: "outline",
+										size: "sm",
+										onClick: () => void sendTest(destination),
+										disabled: actions.loading,
+										children: [/* @__PURE__ */ jsx(Icon, {
+											icon: "mdi:send-check-outline",
+											className: "mr-1",
+											width: 15
+										}), tr("fluidgrids.settings.logStreaming.test", "Send test")]
+									}),
+									/* @__PURE__ */ jsx(Button$1, {
+										variant: "outline",
+										size: "sm",
+										onClick: () => {
+											setEditingId(destination.id);
+											setShowForm(true);
+										},
+										disabled: actions.loading,
+										children: tr("fluidgrids.settings.logStreaming.editButton", "Edit")
+									}),
+									/* @__PURE__ */ jsxs(Button$1, {
+										variant: "ghost",
+										size: "sm",
+										onClick: () => void remove(destination),
+										disabled: actions.loading,
+										children: [/* @__PURE__ */ jsx(Icon, {
+											icon: "mdi:trash-can-outline",
+											className: "text-status-error-text",
+											width: 17
+										}), /* @__PURE__ */ jsx("span", {
+											className: "sr-only",
+											children: tr("fluidgrids.settings.logStreaming.delete", "Delete")
+										})]
+									})
+								]
+							})]
+						})
+					}, destination.id))
+				]
+			})
+		]
+	});
+}
+
+// src/modules/agent-definitions/components/AgentsTab.tsx
+/**
+* Settings → Agents (BOFF-9962): FluidGrids agents with their own identity.
+*
+* Builders create an agent, choose the tools it may call (node type and operations) and the
+* connections those tools may use, and can require approval for every tool call. Each person
+* lets the agent act for them with a time-boxed grant (30 days by default, 365 at most) and can
+* withdraw it at any time; admins can revoke anyone's grant. An AI Agent node that names the agent
+* runs its tools as "agent for user", and every call is recorded under both identities. Giving an
+* agent more access withdraws other people's grants until they grant again.
+*/
+function errorMessage$1(err) {
+	if (err instanceof AgentFormError) return err.message;
+	return describeOperationError(err);
+}
+function AgentEditor({ initial, onCancel, onSave }) {
+	const tr = useTr();
+	const [form, setForm] = useState(initial);
+	const [busy, setBusy] = useState(false);
+	const { connections, loading: connectionsLoading } = useConnections();
+	const setTool = (index, patch) => setForm((current) => ({
+		...current,
+		tools: current.tools.map((row, i) => i === index ? {
+			...row,
+			...patch
+		} : row)
+	}));
+	const toggleConnection = (id, on) => setForm((current) => ({
+		...current,
+		connectionScope: on ? [.../* @__PURE__ */ new Set([...current.connectionScope, id])] : current.connectionScope.filter((value) => value !== id)
+	}));
+	const submit = async () => {
+		setBusy(true);
+		try {
+			await onSave(form);
+		} catch (err) {
+			toast.error(errorMessage$1(err));
+		} finally {
+			setBusy(false);
+		}
+	};
+	return /* @__PURE__ */ jsxs("div", {
+		className: "rounded-lg border border-border-secondary bg-background-primary p-4 space-y-4",
+		"data-testid": "agent-definition-editor",
+		children: [
+			/* @__PURE__ */ jsxs("div", {
+				className: "grid gap-3 sm:grid-cols-2",
+				children: [/* @__PURE__ */ jsxs("div", {
+					className: "space-y-1",
+					children: [/* @__PURE__ */ jsx(Label, {
+						htmlFor: "agent-name",
+						children: tr("fluidgrids.agents.name", "Name")
+					}), /* @__PURE__ */ jsx(Input, {
+						id: "agent-name",
+						value: form.name,
+						onChange: (e) => setForm({
+							...form,
+							name: e.target.value
+						}),
+						"data-testid": "agent-definition-name"
+					})]
+				}), /* @__PURE__ */ jsxs("div", {
+					className: "flex items-end gap-2",
+					children: [/* @__PURE__ */ jsx(Switch, {
+						id: "agent-active",
+						checked: form.status === "ACTIVE",
+						onCheckedChange: (on) => setForm({
+							...form,
+							status: on ? "ACTIVE" : "DISABLED"
 						})
-					]
+					}), /* @__PURE__ */ jsx(Label, {
+						htmlFor: "agent-active",
+						children: tr("fluidgrids.agents.active", "Active")
+					})]
 				})]
 			}),
 			/* @__PURE__ */ jsxs("div", {
-				className: "space-y-3",
+				className: "space-y-1",
+				children: [/* @__PURE__ */ jsx(Label, {
+					htmlFor: "agent-description",
+					children: tr("fluidgrids.agents.description", "Description")
+				}), /* @__PURE__ */ jsx(Textarea, {
+					id: "agent-description",
+					value: form.description,
+					onChange: (e) => setForm({
+						...form,
+						description: e.target.value
+					}),
+					rows: 2
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-2",
+				children: [
+					/* @__PURE__ */ jsx(Label, { children: tr("fluidgrids.agents.tools", "Tools the agent may call") }),
+					/* @__PURE__ */ jsx("p", {
+						className: "text-xs text-text-secondary",
+						children: tr("fluidgrids.agents.toolsHelp", "A node type (for example store/slack) and the operations of it the agent may call, separated by commas. Leave the operations empty to allow every operation of that node type. Nothing else can be called.")
+					}),
+					form.tools.map((row, index) => /* @__PURE__ */ jsxs("div", {
+						className: "flex flex-wrap items-center gap-2",
+						"data-testid": `agent-definition-tool-${index}`,
+						children: [
+							/* @__PURE__ */ jsx(Input, {
+								className: "w-48",
+								placeholder: "store/slack",
+								value: row.nodeType,
+								onChange: (e) => setTool(index, { nodeType: e.target.value }),
+								"aria-label": tr("fluidgrids.agents.nodeType", "Node type")
+							}),
+							/* @__PURE__ */ jsx(Input, {
+								className: "min-w-48 flex-1",
+								placeholder: "postMessage, listChannels",
+								value: row.operations,
+								onChange: (e) => setTool(index, { operations: e.target.value }),
+								"aria-label": tr("fluidgrids.agents.operations", "Operations")
+							}),
+							/* @__PURE__ */ jsx(Button$1, {
+								variant: "ghost",
+								size: "sm",
+								onClick: () => setForm({
+									...form,
+									tools: form.tools.filter((_, i) => i !== index)
+								}),
+								"aria-label": tr("fluidgrids.agents.removeTool", "Remove tool"),
+								children: /* @__PURE__ */ jsx(Icon, {
+									icon: "mdi:close",
+									width: 16
+								})
+							})
+						]
+					}, index)),
+					/* @__PURE__ */ jsxs(Button$1, {
+						variant: "outline",
+						size: "sm",
+						onClick: () => setForm({
+							...form,
+							tools: [...form.tools, {
+								nodeType: "",
+								operations: ""
+							}]
+						}),
+						children: [/* @__PURE__ */ jsx(Icon, {
+							icon: "mdi:plus",
+							width: 16
+						}), tr("fluidgrids.agents.addTool", "Add tool")]
+					})
+				]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-2",
+				children: [/* @__PURE__ */ jsx(Label, { children: tr("fluidgrids.agents.connections", "Connections the agent's tools may use") }), connectionsLoading ? /* @__PURE__ */ jsx("p", {
+					className: "text-xs text-text-secondary",
+					children: tr("fluidgrids.agents.loadingConnections", "Loading connections…")
+				}) : connections.length === 0 ? /* @__PURE__ */ jsx("p", {
+					className: "text-xs text-text-secondary",
+					children: tr("fluidgrids.agents.noConnections", "This workspace has no connections yet.")
+				}) : /* @__PURE__ */ jsx("div", {
+					className: "grid gap-1 sm:grid-cols-2",
+					children: connections.map((connection) => /* @__PURE__ */ jsxs("label", {
+						className: "flex items-center gap-2 text-sm text-text-primary",
+						children: [
+							/* @__PURE__ */ jsx(Checkbox, {
+								checked: form.connectionScope.includes(connection.id),
+								onCheckedChange: (on) => toggleConnection(connection.id, on === true)
+							}),
+							/* @__PURE__ */ jsx("span", { children: connection.name }),
+							/* @__PURE__ */ jsx("span", {
+								className: "text-xs text-text-tertiary",
+								children: connection.provider?.name ?? connection.providerId
+							})
+						]
+					}, connection.id))
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex items-center gap-2",
+				children: [/* @__PURE__ */ jsx(Switch, {
+					id: "agent-approval",
+					checked: form.requireToolApproval,
+					onCheckedChange: (on) => setForm({
+						...form,
+						requireToolApproval: on
+					})
+				}), /* @__PURE__ */ jsx(Label, {
+					htmlFor: "agent-approval",
+					children: tr("fluidgrids.agents.requireApproval", "Every tool call waits for a person's approval")
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex gap-2",
+				children: [/* @__PURE__ */ jsx(Button$1, {
+					onClick: () => void submit(),
+					disabled: busy,
+					"data-testid": "agent-definition-save",
+					children: tr("fluidgrids.agents.save", "Save agent")
+				}), /* @__PURE__ */ jsx(Button$1, {
+					variant: "outline",
+					onClick: onCancel,
+					disabled: busy,
+					children: tr("fluidgrids.agents.cancel", "Cancel")
+				})]
+			})
+		]
+	});
+}
+function AgentGrants({ agent, loadGrants, onGrant, onRevoke }) {
+	const tr = useTr();
+	const [grants, setGrants] = useState(null);
+	const [days, setDays] = useState(String(30));
+	const [busy, setBusy] = useState(false);
+	const load = useCallback(async () => {
+		try {
+			setGrants(await loadGrants(agent.id));
+		} catch (err) {
+			setGrants([]);
+			toast.error(errorMessage$1(err));
+		}
+	}, [agent.id, loadGrants]);
+	useEffect(() => {
+		load();
+	}, [load]);
+	const run = async (action, done) => {
+		setBusy(true);
+		try {
+			await action();
+			toast.success(done);
+			await load();
+		} catch (err) {
+			toast.error(errorMessage$1(err));
+		} finally {
+			setBusy(false);
+		}
+	};
+	const mine = grants?.find((grant) => grant.isMine && grant.status === "ACTIVE");
+	return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-2",
+		"data-testid": `agent-grants-${agent.id}`,
+		children: [/* @__PURE__ */ jsx("div", {
+			className: "flex flex-wrap items-center gap-2",
+			children: mine ? /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx("span", {
+				className: "text-sm text-text-primary",
+				children: mine.expiresAt ? tr("fluidgrids.agents.myGrantUntil", "This agent may act for you until {{date}}.", { date: new Date(mine.expiresAt).toLocaleDateString() }) : tr("fluidgrids.agents.myGrant", "This agent may act for you.")
+			}), /* @__PURE__ */ jsx(Button$1, {
+				variant: "outline",
+				size: "sm",
+				disabled: busy,
+				onClick: () => void run(() => onRevoke(agent.id, null), tr("fluidgrids.agents.withdrawn", "Grant withdrawn")),
+				"data-testid": "agent-grant-withdraw",
+				children: tr("fluidgrids.agents.withdraw", "Withdraw my grant")
+			})] }) : /* @__PURE__ */ jsxs(Fragment, { children: [
+				/* @__PURE__ */ jsx(Label, {
+					htmlFor: `grant-days-${agent.id}`,
+					className: "text-sm",
+					children: tr("fluidgrids.agents.grantFor", "Let it act for me for")
+				}),
+				/* @__PURE__ */ jsx(Input, {
+					id: `grant-days-${agent.id}`,
+					className: "w-20",
+					type: "number",
+					min: 1,
+					max: 365,
+					value: days,
+					onChange: (e) => setDays(e.target.value)
+				}),
+				/* @__PURE__ */ jsx("span", {
+					className: "text-sm text-text-secondary",
+					children: tr("fluidgrids.agents.days", "days")
+				}),
+				/* @__PURE__ */ jsx(Button$1, {
+					size: "sm",
+					disabled: busy || agent.status !== "ACTIVE",
+					onClick: () => void run(async () => onGrant(agent.id, grantDays(days)), tr("fluidgrids.agents.granted", "Grant given")),
+					"data-testid": "agent-grant-give",
+					children: tr("fluidgrids.agents.grant", "Grant")
+				})
+			] })
+		}), grants && grants.length > 0 ? /* @__PURE__ */ jsx("ul", {
+			className: "space-y-1 text-xs text-text-secondary",
+			children: grants.map((grant) => /* @__PURE__ */ jsxs("li", {
+				className: "flex items-center gap-2",
 				children: [
-					loading && destinations.length === 0 && /* @__PURE__ */ jsx("div", {
-						className: "rounded-lg border border-border-secondary bg-background-secondary p-6 text-sm text-text-secondary",
-						children: tr("fluidgrids.settings.logStreaming.loading", "Loading destinations…")
+					/* @__PURE__ */ jsx("span", {
+						className: "font-mono",
+						children: grant.userId
 					}),
-					!loading && destinations.length === 0 && /* @__PURE__ */ jsxs("div", {
-						className: "rounded-lg border border-dashed border-border-secondary bg-background-secondary p-8 text-center",
-						children: [
-							/* @__PURE__ */ jsx(Icon, {
-								icon: "mdi:transit-connection-variant",
-								className: "mx-auto mb-3 text-text-secondary",
-								width: 32
-							}),
-							/* @__PURE__ */ jsx("p", {
-								className: "font-medium text-text-primary",
-								children: tr("fluidgrids.settings.logStreaming.emptyTitle", "No log destinations yet")
-							}),
-							/* @__PURE__ */ jsx("p", {
-								className: "mt-1 text-sm text-text-secondary",
-								children: tr("fluidgrids.settings.logStreaming.emptyDescription", "Add a webhook, syslog target, or Sentry DSN to start streaming events.")
-							})
-						]
+					/* @__PURE__ */ jsx(Badge, {
+						variant: "outline",
+						children: grant.status
 					}),
-					destinations.map((destination) => /* @__PURE__ */ jsx(Card, {
-						className: "border-border-secondary bg-background-secondary",
-						children: /* @__PURE__ */ jsxs(CardContent, {
-							className: "flex flex-col gap-4 p-4 sm:flex-row sm:items-center sm:justify-between",
+					grant.expiresAt ? /* @__PURE__ */ jsx("span", { children: tr("fluidgrids.agents.until", "until {{date}}", { date: new Date(grant.expiresAt).toLocaleDateString() }) }) : null,
+					!grant.isMine && grant.status === "ACTIVE" ? /* @__PURE__ */ jsx(Button$1, {
+						variant: "ghost",
+						size: "sm",
+						disabled: busy,
+						onClick: () => void run(() => onRevoke(agent.id, grant.userId), tr("fluidgrids.agents.revoked", "Grant revoked")),
+						children: tr("fluidgrids.agents.revoke", "Revoke")
+					}) : null
+				]
+			}, grant.userId))
+		}) : null]
+	});
+}
+function AgentsTab() {
+	const tr = useTr();
+	const { agents, loading, error, save, remove, grants, grant, revoke } = useAgentDefinitions();
+	const [editing, setEditing] = useState(null);
+	const onSave = async (form) => {
+		const input = formToInput$2(form);
+		await save(editing?.id ?? null, input);
+		toast.success(tr("fluidgrids.agents.saved", "Agent saved"));
+		setEditing(null);
+	};
+	const onDelete = async (agent) => {
+		try {
+			await remove(agent.id);
+			toast.success(tr("fluidgrids.agents.deleted", "Agent deleted"));
+		} catch (err) {
+			toast.error(errorMessage$1(err));
+		}
+	};
+	return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-4",
+		"data-testid": "agents-tab",
+		children: [
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex flex-wrap items-start justify-between gap-2",
+				children: [/* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("h3", {
+					className: "text-base font-semibold text-text-primary",
+					children: tr("fluidgrids.agents.title", "Agents")
+				}), /* @__PURE__ */ jsx("p", {
+					className: "text-sm text-text-secondary",
+					children: tr("fluidgrids.agents.subtitle", "Give an AI Agent node an identity of its own. It can only call the tools and connections you allow, only for people who granted it, and every tool call is recorded under the agent and the person.")
+				})] }), !editing ? /* @__PURE__ */ jsxs(Button$1, {
+					onClick: () => setEditing({
+						id: null,
+						form: emptyAgentForm()
+					}),
+					"data-testid": "agent-definition-new",
+					children: [/* @__PURE__ */ jsx(Icon, {
+						icon: "mdi:plus",
+						width: 16
+					}), tr("fluidgrids.agents.new", "New agent")]
+				}) : null]
+			}),
+			editing ? /* @__PURE__ */ jsx(AgentEditor, {
+				initial: editing.form,
+				onCancel: () => setEditing(null),
+				onSave
+			}) : null,
+			error ? /* @__PURE__ */ jsx("p", {
+				className: "text-sm text-destructive",
+				children: errorMessage$1(error)
+			}) : null,
+			loading ? /* @__PURE__ */ jsx("p", {
+				className: "text-sm text-text-secondary",
+				children: tr("fluidgrids.agents.loading", "Loading agents…")
+			}) : agents.length === 0 && !error ? /* @__PURE__ */ jsx("p", {
+				className: "text-sm text-text-secondary",
+				children: tr("fluidgrids.agents.empty", "No agents yet.")
+			}) : /* @__PURE__ */ jsx("ul", {
+				className: "space-y-3",
+				children: agents.map((agent) => /* @__PURE__ */ jsxs("li", {
+					className: "rounded-lg border border-border-secondary bg-background-secondary p-3 space-y-2",
+					"data-testid": `agent-definition-${agent.id}`,
+					children: [
+						/* @__PURE__ */ jsxs("div", {
+							className: "flex flex-wrap items-center justify-between gap-2",
 							children: [/* @__PURE__ */ jsxs("div", {
-								className: "min-w-0",
+								className: "flex items-center gap-2",
 								children: [
-									/* @__PURE__ */ jsxs("div", {
-										className: "flex flex-wrap items-center gap-2",
-										children: [
-											/* @__PURE__ */ jsx("h3", {
-												className: "font-medium text-text-primary",
-												children: destination.name
-											}),
-											/* @__PURE__ */ jsx("span", {
-												className: "rounded-full bg-background-tertiary px-2 py-0.5 text-xs text-text-secondary",
-												children: destination.provider
-											}),
-											/* @__PURE__ */ jsx("span", {
-												className: destination.isEnabled ? "text-xs text-status-success-text" : "text-xs text-text-secondary",
-												children: destination.isEnabled ? tr("fluidgrids.settings.logStreaming.enabledBadge", "Enabled") : tr("fluidgrids.settings.logStreaming.disabledBadge", "Disabled")
-											})
-										]
-									}),
-									/* @__PURE__ */ jsx("p", {
-										className: "mt-1 truncate text-sm text-text-secondary",
-										children: destination.endpoint
+									/* @__PURE__ */ jsx(Icon, {
+										icon: "mdi:robot-outline",
+										width: 18
 									}),
-									/* @__PURE__ */ jsxs("p", {
-										className: "mt-1 text-xs text-text-secondary",
-										children: [destination.eventFilters.length > 0 ? destination.eventFilters.map(eventLabel).join(", ") : tr("fluidgrids.settings.logStreaming.allEvents", "All events"), destination.hasSecret && " · Secret configured"]
+									/* @__PURE__ */ jsx("span", {
+										className: "font-medium text-text-primary",
+										children: agent.name
 									}),
-									destination.lastDispatchError && /* @__PURE__ */ jsx("p", {
-										className: "mt-2 text-xs text-status-error-text",
-										children: destination.lastDispatchError
-									})
-								]
-							}), /* @__PURE__ */ jsxs("div", {
-								className: "flex shrink-0 flex-wrap gap-2",
-								children: [
-									/* @__PURE__ */ jsxs(Button$1, {
+									/* @__PURE__ */ jsx(Badge, {
 										variant: "outline",
-										size: "sm",
-										onClick: () => void sendTest(destination),
-										disabled: actions.loading,
-										children: [/* @__PURE__ */ jsx(Icon, {
-											icon: "mdi:send-check-outline",
-											className: "mr-1",
-											width: 15
-										}), tr("fluidgrids.settings.logStreaming.test", "Send test")]
+										children: agent.status
 									}),
-									/* @__PURE__ */ jsx(Button$1, {
+									agent.requireToolApproval ? /* @__PURE__ */ jsx(Badge, {
 										variant: "outline",
-										size: "sm",
-										onClick: () => {
-											setEditingId(destination.id);
-											setShowForm(true);
-										},
-										disabled: actions.loading,
-										children: tr("fluidgrids.settings.logStreaming.editButton", "Edit")
-									}),
-									/* @__PURE__ */ jsxs(Button$1, {
-										variant: "ghost",
-										size: "sm",
-										onClick: () => void remove(destination),
-										disabled: actions.loading,
-										children: [/* @__PURE__ */ jsx(Icon, {
-											icon: "mdi:trash-can-outline",
-											className: "text-status-error-text",
-											width: 17
-										}), /* @__PURE__ */ jsx("span", {
-											className: "sr-only",
-											children: tr("fluidgrids.settings.logStreaming.delete", "Delete")
-										})]
-									})
+										children: tr("fluidgrids.agents.approvalBadge", "Approval required")
+									}) : null
 								]
+							}), /* @__PURE__ */ jsxs("div", {
+								className: "flex gap-1",
+								children: [/* @__PURE__ */ jsx(Button$1, {
+									variant: "ghost",
+									size: "sm",
+									onClick: () => setEditing({
+										id: agent.id,
+										form: agentToForm(agent)
+									}),
+									children: tr("fluidgrids.agents.edit", "Edit")
+								}), /* @__PURE__ */ jsx(Button$1, {
+									variant: "ghost",
+									size: "sm",
+									onClick: () => void onDelete(agent),
+									children: tr("fluidgrids.agents.delete", "Delete")
+								})]
 							})]
+						}),
+						agent.description ? /* @__PURE__ */ jsx("p", {
+							className: "text-sm text-text-secondary",
+							children: agent.description
+						}) : null,
+						/* @__PURE__ */ jsx("div", {
+							className: "text-xs text-text-secondary",
+							children: agent.toolAllowlist.length > 0 ? agent.toolAllowlist.map(describeRule).join(" · ") : tr("fluidgrids.agents.noTools", "No tools allowed")
+						}),
+						/* @__PURE__ */ jsx("div", {
+							className: "text-xs text-text-tertiary",
+							children: tr("fluidgrids.agents.connectionCount", "{{count}} connections in scope", { count: agent.connectionScope.length })
+						}),
+						/* @__PURE__ */ jsx(AgentGrants, {
+							agent,
+							loadGrants: grants,
+							onGrant: grant,
+							onRevoke: revoke
 						})
-					}, destination.id))
-				]
+					]
+				}, agent.id))
 			})
 		]
 	});
@@ -5202,6 +5205,7 @@ function isRecord(value) {
 }
 
 // src/modules/settings/pages/SettingsPage.tsx
+var SettingsPage_exports = /* @__PURE__ */ __exportAll({ SettingsPage: () => SettingsPage });
 /**
 * A workflow's `definitionJson.config` (a sibling of `data`, not nested inside it): the same
 * shared type the SDK exports, so the form and typed readers agree on every field.
@@ -5984,38 +5988,4 @@ function SettingsPage({ workflowKey: workflowKeyProp } = {}) {
 	});
 }
 
-// src/modules/settings/api/ManagedAiPolicyAuthority.tsx
-/** Hosts explicitly bridge their authority; a missing profile never becomes an embed fallback. */
-function ManagedAiPolicyAuthorityProvider({ scope, children }) {
-	const { authority, url, actorId, workspaceId, organizationId, tenantId, projectId, authToken, workspaceToken } = scope ?? {};
-	const value = useMemo(() => {
-		if (!authority || !url || !actorId || !workspaceId || !organizationId || !tenantId || !authToken) return null;
-		return Object.freeze({
-			authority,
-			url,
-			actorId,
-			workspaceId,
-			organizationId,
-			tenantId,
-			projectId,
-			authToken,
-			workspaceToken
-		});
-	}, [
-		authority,
-		url,
-		actorId,
-		workspaceId,
-		organizationId,
-		tenantId,
-		projectId,
-		authToken,
-		workspaceToken
-	]);
-	return /* @__PURE__ */ jsx(ManagedAiAuthorityContext.Provider, {
-		value,
-		children
-	});
-}
-
-export { SettingsPage as n, ManagedAiPolicyAuthorityProvider as t };
+export { SettingsPage_exports as n, SettingsPage as t };