@burdenoff/microfe-botmanor 2026.1025.3 → 2026.1027.1

package/dist/botlit/pages/PolicyDetailPage.js

@@ -7,17 +7,18 @@ import { Badge as ee, StatusBadge as te } from "../components/Badge.js";
 import { isNative as l, nativeImpact as ne, nativeNotify as u } from "../../utils/nativeBridge.js";
 import { EmptyState as re } from "../components/EmptyState.js";
 import { FormField as d, Input as f, Textarea as p } from "../components/Input.js";
-import { useCreatePolicy as ie, useDeletePolicy as ae, usePolicy as oe, useUpdatePolicy as se } from "../hooks/usePolicies.js";
-import { toUnion as m } from "../utils/unions.js";
+import { useCreatePolicy as m, useDeletePolicy as ie, usePolicy as ae, useUpdatePolicy as oe } from "../hooks/usePolicies.js";
+import { toUnion as h } from "../utils/unions.js";
 import "../hooks/index.js";
-import { useState as h } from "react";
-import { PagePurpose as ce } from "@burdenoff/fe-libs/ui";
-import { Fragment as le, jsx as g, jsxs as _ } from "react/jsx-runtime";
-import { useParams as ue } from "react-router";
-import { AlertTriangle as v, ArrowLeft as de, Clock as y, Database as b, DollarSign as x, Edit as fe, FileText as S, Power as pe, Save as C, Settings as me, Shield as w, Trash2 as T, Wrench as E } from "lucide-react";
-import { toast as D } from "sonner";
+import { A2A_TRUST_LEVELS as se, CREATABLE_POLICY_TYPES as ce, EMPTY_POLICY_FORM as le, TOOL_RISK_LEVELS as ue, buildPolicyConfig as de, isCreatablePolicyType as fe, unenforcedConfigKeys as pe } from "../utils/policyConfig.js";
+import { useState as g } from "react";
+import { PagePurpose as me } from "@burdenoff/fe-libs/ui";
+import { Fragment as _, jsx as v, jsxs as y } from "react/jsx-runtime";
+import { useParams as he } from "react-router";
+import { AlertTriangle as b, ArrowLeft as ge, Clock as x, Database as S, DollarSign as C, Edit as _e, FileText as w, Power as ve, Save as T, Settings as ye, Shield as E, Trash2 as D, Wrench as O } from "lucide-react";
+import { toast as k } from "sonner";
 //#region src/botlit/pages/PolicyDetailPage.tsx
-var O = [
+var be = [
 	"CONTENT",
 	"TOOL",
 	"DATA",
@@ -25,23 +26,19 @@ var O = [
 	"BUDGET",
 	"RATE_LIMIT",
 	"RETENTION"
-], he = [
+], xe = [
 	"PRIVATE",
 	"WORKSPACE",
 	"PUBLIC"
-];
-function k(e) {
-	return e.split(",").map((e) => e.trim()).filter(Boolean);
-}
-var A = ({ type: e }) => ({
-	CONTENT: /* @__PURE__ */ g(v, { size: 18 }),
-	TOOL: /* @__PURE__ */ g(E, { size: 18 }),
-	DATA: /* @__PURE__ */ g(b, { size: 18 }),
-	RESPONSE: /* @__PURE__ */ g(S, { size: 18 }),
-	BUDGET: /* @__PURE__ */ g(x, { size: 18 }),
-	RATE_LIMIT: /* @__PURE__ */ g(y, { size: 18 }),
-	RETENTION: /* @__PURE__ */ g(T, { size: 18 })
-})[e] || /* @__PURE__ */ g(w, { size: 18 }), ge = {
+], A = "flex h-10 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm", j = ({ type: e }) => ({
+	CONTENT: /* @__PURE__ */ v(b, { size: 18 }),
+	TOOL: /* @__PURE__ */ v(O, { size: 18 }),
+	DATA: /* @__PURE__ */ v(S, { size: 18 }),
+	RESPONSE: /* @__PURE__ */ v(w, { size: 18 }),
+	BUDGET: /* @__PURE__ */ v(C, { size: 18 }),
+	RATE_LIMIT: /* @__PURE__ */ v(x, { size: 18 }),
+	RETENTION: /* @__PURE__ */ v(D, { size: 18 })
+})[e] || /* @__PURE__ */ v(E, { size: 18 }), M = {
 	CONTENT: "Content Policy",
 	TOOL: "Tool Policy",
 	DATA: "Data Policy",
@@ -49,262 +46,174 @@ var A = ({ type: e }) => ({
 	BUDGET: "Budget Policy",
 	RATE_LIMIT: "Rate Limit Policy",
 	RETENTION: "Retention Policy"
-}, j = ({ isNew: b }) => {
-	let { policyId: j } = ue(), { navigateTo: M } = e(), { data: N, loading: _e, refetch: P } = oe(b ? void 0 : j), { create: ve, loading: ye } = ie(), { update: F, loading: I } = se(), { remove: be, loading: xe } = ae(), [L, R] = h(!1), [Se, z] = h(!1), [B, V] = h({
+}, N = ({ isNew: S }) => {
+	let { policyId: N } = he(), { navigateTo: P } = e(), { data: F, loading: Se, refetch: I } = ae(S ? void 0 : N), { create: Ce, loading: we } = m(), { update: L, loading: R } = oe(), { remove: Te, loading: Ee } = ie(), [z, B] = g(!1), [De, V] = g(!1), [H, U] = g({
 		name: "",
 		description: "",
 		type: "CONTENT",
 		visibility: "PRIVATE"
-	}), [H, U] = h({
-		jailbreakDetection: !0,
-		piiDetection: !0,
-		toxicityThreshold: .7,
-		customPatterns: ""
-	}), [W, G] = h({
-		allowedTools: "",
-		deniedTools: "",
-		maxCallsPerExecution: 10,
-		timeoutSeconds: 30
-	}), [K, q] = h({
-		maxTokensPerExecution: 1e4,
-		maxCostPerExecution: 1,
-		allowEscalation: !1,
-		maxModelTier: "gpt-4"
-	}), [J, Y] = h({
-		requestsPerMinute: 60,
-		requestsPerHour: 1e3,
-		tokensPerMinute: 1e5,
-		scope: "app"
-	}), [X, Ce] = h({
-		allowedModels: "",
-		allowedProviders: ""
-	}), [we, Te] = h(!1), [Z, Ee] = h({
-		executionDataRetentionDays: 90,
-		payloadSnapshotsEnabled: !0
-	}), De = async () => {
-		if (!B.name) return;
-		let e;
-		switch (B.type) {
-			case "CONTENT":
-				e = {
-					jailbreakDetection: H.jailbreakDetection,
-					piiDetection: H.piiDetection,
-					toxicityThreshold: H.toxicityThreshold,
-					customPatterns: H.customPatterns.split("\n").filter(Boolean)
-				};
-				break;
-			case "TOOL":
-				e = {
-					allowedTools: W.allowedTools.split(",").map((e) => e.trim()).filter(Boolean),
-					deniedTools: W.deniedTools.split(",").map((e) => e.trim()).filter(Boolean),
-					limits: {
-						maxCallsPerExecution: W.maxCallsPerExecution,
-						timeoutSeconds: W.timeoutSeconds
-					}
-				};
-				break;
-			case "BUDGET":
-				e = {
-					maxTokensPerExecution: K.maxTokensPerExecution,
-					maxCostPerExecution: K.maxCostPerExecution,
-					modelEscalationConstraints: {
-						allowEscalation: K.allowEscalation,
-						maxModelTier: K.maxModelTier
-					}
-				};
-				break;
-			case "RATE_LIMIT":
-				e = {
-					limits: {
-						requestsPerMinute: J.requestsPerMinute,
-						requestsPerHour: J.requestsPerHour,
-						tokensPerMinute: J.tokensPerMinute
-					},
-					scope: J.scope
-				};
-				break;
-			case "RESPONSE": {
-				let t = k(X.allowedModels), n = k(X.allowedProviders).map((e) => e.toUpperCase());
-				e = {
-					...t.length > 0 ? { allowedModels: t } : {},
-					...n.length > 0 ? { allowedProviders: n } : {}
-				};
-				break;
+	}), [W, G] = g({
+		name: "",
+		description: "",
+		visibility: "PRIVATE"
+	}), [K, Oe] = g(le), [q, J] = g(null), Y = (e, t) => {
+		J(null), Oe((n) => ({
+			...n,
+			[e]: {
+				...n[e],
+				...t
 			}
-			case "RETENTION":
-				e = {
-					executionDataRetentionDays: Z.executionDataRetentionDays,
-					payloadSnapshotsEnabled: Z.payloadSnapshotsEnabled
-				};
-				break;
+		}));
+	}, [X, ke] = g(!1), Ae = async () => {
+		if (!H.name) return;
+		let e = de(H.type, K);
+		if (!e.ok) {
+			J(e.error), k.error(e.error);
+			return;
 		}
 		try {
-			await ve({
-				name: B.name,
-				description: B.description,
-				type: B.type,
-				visibility: B.visibility,
-				status: we ? "ACTIVE" : "DRAFT",
-				config: e
+			await Ce({
+				name: H.name,
+				description: H.description,
+				type: H.type,
+				visibility: H.visibility,
+				status: X ? "ACTIVE" : "DRAFT",
+				config: e.config
 			});
 		} catch (e) {
-			D.error(e instanceof Error ? e.message : "Failed to create policy");
+			k.error(e instanceof Error ? e.message : "Failed to create policy");
 			return;
 		}
-		D.success(`Policy "${B.name}" created`), M("policies");
-	}, Oe = async () => {
-		if (!(!j || !B.name)) {
+		k.success(`Policy "${H.name}" created`), P("policies");
+	}, je = async () => {
+		if (!(!N || !W.name)) {
 			try {
-				await F({
-					policyId: j,
+				await L({
+					policyId: N,
 					input: {
-						name: B.name,
-						description: B.description,
-						visibility: B.visibility
+						name: W.name,
+						description: W.description,
+						visibility: W.visibility
 					}
 				});
 			} catch (e) {
-				D.error(e instanceof Error ? e.message : "Failed to update policy");
+				k.error(e instanceof Error ? e.message : "Failed to update policy");
 				return;
 			}
-			await P(), D.success("Policy updated"), R(!1);
+			await I(), k.success("Policy updated"), B(!1);
 		}
-	}, ke = async () => {
-		if (j) try {
-			await be(j), l() && u("success"), M("policies");
+	}, Me = async () => {
+		if (N) try {
+			await Te(N), l() && u("success"), P("policies");
 		} catch (e) {
 			throw l() && u("error"), e;
 		}
-	}, Q = N?.status === "ACTIVE", Ae = async () => {
-		if (!j) return;
-		let e = Q ? "DRAFT" : "ACTIVE";
+	}, Z = F?.status === "ACTIVE", Ne = async () => {
+		if (!N) return;
+		let e = Z ? "DRAFT" : "ACTIVE";
 		try {
-			await F({
-				policyId: j,
+			await L({
+				policyId: N,
 				input: { status: e }
 			});
 		} catch (e) {
-			D.error(e instanceof Error ? e.message : "Failed to update policy");
+			k.error(e instanceof Error ? e.message : "Failed to update policy");
 			return;
 		}
-		await P(), D.success(e === "ACTIVE" ? "Policy is now enforced" : "Policy is no longer enforced");
-	}, je = () => {
-		N && (V({
-			name: N.name,
-			description: N.description || "",
-			type: m(N.type, O, "CONTENT"),
-			visibility: m(N.visibility, he, "PRIVATE")
-		}), R(!0));
+		await I(), k.success(e === "ACTIVE" ? "Policy is now enforced" : "Policy is no longer enforced");
+	}, Pe = () => {
+		F && (G({
+			name: F.name,
+			description: F.description || "",
+			visibility: h(F.visibility, xe, "PRIVATE")
+		}), B(!0));
 	};
-	if (b) return /* @__PURE__ */ g(n, {
+	if (S) return /* @__PURE__ */ v(n, {
 		title: "Create Policy",
 		description: "Define guardrails and constraints for your AI agents",
-		actions: /* @__PURE__ */ _("div", {
+		actions: /* @__PURE__ */ y("div", {
 			className: "flex gap-2",
-			children: [/* @__PURE__ */ g(c, {
+			children: [/* @__PURE__ */ v(c, {
 				variant: "outline",
-				onClick: () => M("policies"),
+				onClick: () => P("policies"),
 				children: "Cancel"
-			}), /* @__PURE__ */ g(c, {
-				leftIcon: /* @__PURE__ */ g(C, { size: 16 }),
-				onClick: De,
-				isLoading: ye,
-				disabled: !B.name,
+			}), /* @__PURE__ */ v(c, {
+				leftIcon: /* @__PURE__ */ v(T, { size: 16 }),
+				onClick: Ae,
+				isLoading: we,
+				disabled: !H.name,
 				children: "Create"
 			})]
 		}),
-		children: /* @__PURE__ */ _("div", {
+		children: /* @__PURE__ */ y("div", {
 			className: "max-w-2xl space-y-6",
 			children: [
-				/* @__PURE__ */ _(r, { children: [/* @__PURE__ */ g(o, { children: /* @__PURE__ */ g(s, { children: "Basic Information" }) }), /* @__PURE__ */ _(i, {
+				/* @__PURE__ */ y(r, { children: [/* @__PURE__ */ v(o, { children: /* @__PURE__ */ v(s, { children: "Basic Information" }) }), /* @__PURE__ */ y(i, {
 					className: "space-y-4",
 					children: [
-						/* @__PURE__ */ g(d, {
+						/* @__PURE__ */ v(d, {
 							label: "Policy Name",
 							required: !0,
-							children: /* @__PURE__ */ g(f, {
+							children: /* @__PURE__ */ v(f, {
 								placeholder: "e.g., Production Content Policy",
-								value: B.name,
-								onChange: (e) => V({
-									...B,
+								value: H.name,
+								onChange: (e) => U({
+									...H,
 									name: e.target.value
 								})
 							})
 						}),
-						/* @__PURE__ */ g(d, {
+						/* @__PURE__ */ v(d, {
 							label: "Description",
-							children: /* @__PURE__ */ g(p, {
+							children: /* @__PURE__ */ v(p, {
 								placeholder: "What does this policy enforce?",
-								value: B.description,
-								onChange: (e) => V({
-									...B,
+								value: H.description,
+								onChange: (e) => U({
+									...H,
 									description: e.target.value
 								}),
 								rows: 3
 							})
 						}),
-						/* @__PURE__ */ _("div", {
+						/* @__PURE__ */ y("div", {
 							className: "grid grid-cols-2 gap-4",
-							children: [/* @__PURE__ */ g(d, {
+							children: [/* @__PURE__ */ v(d, {
 								label: "Policy Type",
 								required: !0,
-								children: /* @__PURE__ */ _("select", {
-									className: "flex h-10 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm",
-									value: B.type,
-									onChange: (e) => V({
-										...B,
-										type: e.target.value
-									}),
-									children: [
-										/* @__PURE__ */ g("option", {
-											value: "CONTENT",
-											children: "Content Policy"
-										}),
-										/* @__PURE__ */ g("option", {
-											value: "TOOL",
-											children: "Tool Policy"
-										}),
-										/* @__PURE__ */ g("option", {
-											value: "DATA",
-											children: "Data Policy"
-										}),
-										/* @__PURE__ */ g("option", {
-											value: "RESPONSE",
-											children: "Response & Model Policy"
-										}),
-										/* @__PURE__ */ g("option", {
-											value: "BUDGET",
-											children: "Budget Policy"
-										}),
-										/* @__PURE__ */ g("option", {
-											value: "RATE_LIMIT",
-											children: "Rate Limit Policy"
-										}),
-										/* @__PURE__ */ g("option", {
-											value: "RETENTION",
-											children: "Retention Policy"
-										})
-									]
+								children: /* @__PURE__ */ v("select", {
+									className: A,
+									value: H.type,
+									onChange: (e) => {
+										let t = e.target.value;
+										fe(t) && (J(null), U({
+											...H,
+											type: t
+										}));
+									},
+									children: ce.map((e) => /* @__PURE__ */ v("option", {
+										value: e,
+										children: M[e]
+									}, e))
 								})
-							}), /* @__PURE__ */ g(d, {
+							}), /* @__PURE__ */ v(d, {
 								label: "Visibility",
-								children: /* @__PURE__ */ _("select", {
+								children: /* @__PURE__ */ y("select", {
 									className: "flex h-10 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm",
-									value: B.visibility,
-									onChange: (e) => V({
-										...B,
+									value: H.visibility,
+									onChange: (e) => U({
+										...H,
 										visibility: e.target.value
 									}),
 									children: [
-										/* @__PURE__ */ g("option", {
+										/* @__PURE__ */ v("option", {
 											value: "PRIVATE",
 											children: "Private"
 										}),
-										/* @__PURE__ */ g("option", {
+										/* @__PURE__ */ v("option", {
 											value: "WORKSPACE",
 											children: "Workspace"
 										}),
-										/* @__PURE__ */ g("option", {
+										/* @__PURE__ */ v("option", {
 											value: "PUBLIC",
 											children: "Public"
 										})
@@ -314,628 +223,529 @@ var A = ({ type: e }) => ({
 						})
 					]
 				})] }),
-				B.type === "CONTENT" && /* @__PURE__ */ _(r, { children: [/* @__PURE__ */ g(o, { children: /* @__PURE__ */ _(s, {
+				H.type === "CONTENT" && /* @__PURE__ */ y(r, { children: [/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(s, {
 					className: "flex items-center gap-2",
-					children: [/* @__PURE__ */ g(v, { size: 18 }), "Content Policy Configuration"]
-				}) }), /* @__PURE__ */ _(i, {
+					children: [/* @__PURE__ */ v(b, { size: 18 }), "Content Policy Configuration"]
+				}), /* @__PURE__ */ v(a, { children: "Checked against every message sent to an agent and every response it gives. A blocked message is refused; a blocked response is replaced with a refusal." })] }), /* @__PURE__ */ y(i, {
 					className: "space-y-4",
 					children: [
-						/* @__PURE__ */ _("div", {
-							className: "grid grid-cols-2 gap-4",
-							children: [/* @__PURE__ */ _("div", {
-								className: "flex items-center gap-2",
-								children: [/* @__PURE__ */ g("input", {
-									type: "checkbox",
-									id: "jailbreak",
-									checked: H.jailbreakDetection,
-									onChange: (e) => U({
-										...H,
-										jailbreakDetection: e.target.checked
-									}),
-									className: "h-4 w-4"
-								}), /* @__PURE__ */ g("label", {
-									htmlFor: "jailbreak",
-									className: "text-sm",
-									children: "Jailbreak Detection"
-								})]
-							}), /* @__PURE__ */ _("div", {
-								className: "flex items-center gap-2",
-								children: [/* @__PURE__ */ g("input", {
-									type: "checkbox",
-									id: "pii",
-									checked: H.piiDetection,
-									onChange: (e) => U({
-										...H,
-										piiDetection: e.target.checked
-									}),
-									className: "h-4 w-4"
-								}), /* @__PURE__ */ g("label", {
-									htmlFor: "pii",
-									className: "text-sm",
+						/* @__PURE__ */ y("div", {
+							className: "flex items-start gap-2",
+							children: [/* @__PURE__ */ v("input", {
+								type: "checkbox",
+								id: "pii",
+								checked: K.content.piiDetection,
+								onChange: (e) => Y("content", { piiDetection: e.target.checked }),
+								className: "mt-1 h-4 w-4"
+							}), /* @__PURE__ */ y("label", {
+								htmlFor: "pii",
+								className: "text-sm",
+								children: [/* @__PURE__ */ v("span", {
+									className: "font-medium",
 									children: "PII Detection"
+								}), /* @__PURE__ */ v("span", {
+									className: "block text-text-secondary",
+									children: "Blocks text containing an email address, a US SSN or a card-number shaped digit run."
 								})]
 							})]
 						}),
-						/* @__PURE__ */ g(d, {
-							label: "Toxicity Threshold",
-							description: "0.0 to 1.0",
-							children: /* @__PURE__ */ g(f, {
-								type: "number",
-								min: 0,
-								max: 1,
-								step: .1,
-								value: H.toxicityThreshold,
-								onChange: (e) => U({
-									...H,
-									toxicityThreshold: parseFloat(e.target.value)
-								})
+						/* @__PURE__ */ v(d, {
+							label: "Blocked Keywords",
+							description: "Comma-separated. Case-insensitive; any occurrence blocks the text.",
+							children: /* @__PURE__ */ v(f, {
+								placeholder: "e.g., internal-only, project-x",
+								value: K.content.blockedKeywords,
+								onChange: (e) => Y("content", { blockedKeywords: e.target.value })
 							})
 						}),
-						/* @__PURE__ */ g(d, {
-							label: "Custom Patterns",
-							description: "One regex pattern per line",
-							children: /* @__PURE__ */ g(p, {
-								placeholder: "Enter custom patterns...",
-								value: H.customPatterns,
-								onChange: (e) => U({
-									...H,
-									customPatterns: e.target.value
-								}),
+						/* @__PURE__ */ v(d, {
+							label: "Blocked Patterns",
+							description: "One regular expression per line, matched case-insensitively.",
+							children: /* @__PURE__ */ v(p, {
+								placeholder: "e.g., \\bACME-\\d{6}\\b",
+								value: K.content.blockedPatterns,
+								onChange: (e) => Y("content", { blockedPatterns: e.target.value }),
 								rows: 3
 							})
 						})
 					]
 				})] }),
-				B.type === "TOOL" && /* @__PURE__ */ _(r, { children: [/* @__PURE__ */ g(o, { children: /* @__PURE__ */ _(s, {
+				H.type === "TOOL" && /* @__PURE__ */ y(r, { children: [/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(s, {
 					className: "flex items-center gap-2",
-					children: [/* @__PURE__ */ g(E, { size: 18 }), "Tool Policy Configuration"]
-				}) }), /* @__PURE__ */ _(i, {
+					children: [/* @__PURE__ */ v(O, { size: 18 }), "Tool Policy Configuration"]
+				}), /* @__PURE__ */ v(a, { children: "Applies to MCP tool calls made by agents and through Call Tool, and to agent delegation. Leave a field empty to not restrict it." })] }), /* @__PURE__ */ y(i, {
 					className: "space-y-4",
 					children: [
-						/* @__PURE__ */ g(d, {
+						/* @__PURE__ */ v(d, {
 							label: "Allowed Tools",
-							description: "Comma-separated tool IDs",
-							children: /* @__PURE__ */ g(f, {
-								placeholder: "e.g., search, read_file, web_browse",
-								value: W.allowedTools,
-								onChange: (e) => G({
-									...W,
-									allowedTools: e.target.value
-								})
+							description: "Comma-separated MCP tool names. End an entry with * to allow a prefix. Empty allows every tool.",
+							children: /* @__PURE__ */ v(f, {
+								placeholder: "e.g., search, read_*",
+								value: K.tool.allowedTools,
+								onChange: (e) => Y("tool", { allowedTools: e.target.value })
 							})
 						}),
-						/* @__PURE__ */ g(d, {
+						/* @__PURE__ */ v(d, {
 							label: "Denied Tools",
-							description: "Comma-separated tool IDs",
-							children: /* @__PURE__ */ g(f, {
-								placeholder: "e.g., delete_file, execute_code",
-								value: W.deniedTools,
-								onChange: (e) => G({
-									...W,
-									deniedTools: e.target.value
-								})
+							description: "Comma-separated MCP tool names that may never run. A deny always wins.",
+							children: /* @__PURE__ */ v(f, {
+								placeholder: "e.g., delete_*, execute_code",
+								value: K.tool.deniedTools,
+								onChange: (e) => Y("tool", { deniedTools: e.target.value })
 							})
 						}),
-						/* @__PURE__ */ _("div", {
-							className: "grid grid-cols-2 gap-4",
-							children: [/* @__PURE__ */ g(d, {
-								label: "Max Calls Per Execution",
-								children: /* @__PURE__ */ g(f, {
+						/* @__PURE__ */ y("div", {
+							className: "grid grid-cols-1 sm:grid-cols-2 gap-4",
+							children: [/* @__PURE__ */ v(d, {
+								label: "Max Tool Risk Level",
+								children: /* @__PURE__ */ y("select", {
+									className: A,
+									value: K.tool.maxToolRiskLevel,
+									onChange: (e) => Y("tool", { maxToolRiskLevel: e.target.value }),
+									children: [/* @__PURE__ */ v("option", {
+										value: "",
+										children: "Any risk level"
+									}), ue.map((e) => /* @__PURE__ */ y("option", {
+										value: e,
+										children: ["Up to ", e.toLowerCase()]
+									}, e))]
+								})
+							}), /* @__PURE__ */ v(d, {
+								label: "Minimum A2A Trust Level",
+								description: "For delegation to external registry agents.",
+								children: /* @__PURE__ */ y("select", {
+									className: A,
+									value: K.tool.a2aMinTrustLevel,
+									onChange: (e) => Y("tool", { a2aMinTrustLevel: e.target.value }),
+									children: [/* @__PURE__ */ v("option", {
+										value: "",
+										children: "Default (verified publisher)"
+									}), se.map((e) => /* @__PURE__ */ v("option", {
+										value: e,
+										children: e === "VERIFIED_PUBLISHER" ? "Verified publisher" : e.charAt(0) + e.slice(1).toLowerCase()
+									}, e))]
+								})
+							})]
+						}),
+						/* @__PURE__ */ y("div", {
+							className: "grid grid-cols-1 sm:grid-cols-2 gap-4",
+							children: [/* @__PURE__ */ v(d, {
+								label: "Max Tool Calls Per Execution",
+								description: "Tool calls allowed in one agent turn.",
+								children: /* @__PURE__ */ v(f, {
 									type: "number",
 									min: 1,
-									value: W.maxCallsPerExecution,
-									onChange: (e) => G({
-										...W,
-										maxCallsPerExecution: parseInt(e.target.value)
-									})
+									placeholder: "No limit",
+									value: K.tool.maxCallsPerExecution,
+									onChange: (e) => Y("tool", { maxCallsPerExecution: e.target.value })
 								})
-							}), /* @__PURE__ */ g(d, {
-								label: "Timeout (seconds)",
-								children: /* @__PURE__ */ g(f, {
+							}), /* @__PURE__ */ v(d, {
+								label: "Tool Call Timeout (seconds)",
+								description: "Can only shorten the platform's own timeout.",
+								children: /* @__PURE__ */ v(f, {
 									type: "number",
 									min: 1,
-									value: W.timeoutSeconds,
-									onChange: (e) => G({
-										...W,
-										timeoutSeconds: parseInt(e.target.value)
-									})
+									placeholder: "Platform default",
+									value: K.tool.timeoutSeconds,
+									onChange: (e) => Y("tool", { timeoutSeconds: e.target.value })
 								})
 							})]
 						})
 					]
 				})] }),
-				B.type === "BUDGET" && /* @__PURE__ */ _(r, { children: [/* @__PURE__ */ g(o, { children: /* @__PURE__ */ _(s, {
+				H.type === "BUDGET" && /* @__PURE__ */ y(r, { children: [/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(s, {
 					className: "flex items-center gap-2",
-					children: [/* @__PURE__ */ g(x, { size: 18 }), "Budget Policy Configuration"]
-				}) }), /* @__PURE__ */ _(i, {
+					children: [/* @__PURE__ */ v(C, { size: 18 }), "Budget Policy Configuration"]
+				}), /* @__PURE__ */ v(a, { children: "Token budgets apply per agent. Leave a field empty to not restrict it." })] }), /* @__PURE__ */ v(i, {
 					className: "space-y-4",
-					children: [
-						/* @__PURE__ */ _("div", {
-							className: "grid grid-cols-2 gap-4",
-							children: [/* @__PURE__ */ g(d, {
-								label: "Max Tokens Per Execution",
-								children: /* @__PURE__ */ g(f, {
-									type: "number",
-									min: 100,
-									value: K.maxTokensPerExecution,
-									onChange: (e) => q({
-										...K,
-										maxTokensPerExecution: parseInt(e.target.value)
-									})
-								})
-							}), /* @__PURE__ */ g(d, {
-								label: "Max Cost Per Execution ($)",
-								children: /* @__PURE__ */ g(f, {
-									type: "number",
-									min: .01,
-									step: .01,
-									value: K.maxCostPerExecution,
-									onChange: (e) => q({
-										...K,
-										maxCostPerExecution: parseFloat(e.target.value)
-									})
-								})
-							})]
-						}),
-						/* @__PURE__ */ _("div", {
-							className: "flex items-center gap-2",
-							children: [/* @__PURE__ */ g("input", {
-								type: "checkbox",
-								id: "escalation",
-								checked: K.allowEscalation,
-								onChange: (e) => q({
-									...K,
-									allowEscalation: e.target.checked
-								}),
-								className: "h-4 w-4"
-							}), /* @__PURE__ */ g("label", {
-								htmlFor: "escalation",
-								className: "text-sm",
-								children: "Allow Model Escalation"
-							})]
-						}),
-						/* @__PURE__ */ g(d, {
-							label: "Max Model Tier",
-							children: /* @__PURE__ */ _("select", {
-								className: "flex h-10 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm",
-								value: K.maxModelTier,
-								onChange: (e) => q({
-									...K,
-									maxModelTier: e.target.value
-								}),
-								children: [
-									/* @__PURE__ */ g("option", {
-										value: "gpt-3.5-turbo",
-										children: "GPT-3.5 Turbo"
-									}),
-									/* @__PURE__ */ g("option", {
-										value: "gpt-4",
-										children: "GPT-4"
-									}),
-									/* @__PURE__ */ g("option", {
-										value: "gpt-4-turbo",
-										children: "GPT-4 Turbo"
-									}),
-									/* @__PURE__ */ g("option", {
-										value: "claude-3-sonnet",
-										children: "Claude 3 Sonnet"
-									}),
-									/* @__PURE__ */ g("option", {
-										value: "claude-3-opus",
-										children: "Claude 3 Opus"
-									})
-								]
+					children: /* @__PURE__ */ y("div", {
+						className: "grid grid-cols-1 sm:grid-cols-2 gap-4",
+						children: [/* @__PURE__ */ v(d, {
+							label: "Max Tokens Per Day",
+							description: "An agent that has used this many tokens today (UTC) is refused.",
+							children: /* @__PURE__ */ v(f, {
+								type: "number",
+								min: 1,
+								placeholder: "No limit",
+								value: K.budget.maxTokensPerDay,
+								onChange: (e) => Y("budget", { maxTokensPerDay: e.target.value })
 							})
-						})
-					]
+						}), /* @__PURE__ */ v(d, {
+							label: "Max Output Tokens Per Model Call",
+							description: "Lowers the agent's own max-tokens setting when it is higher.",
+							children: /* @__PURE__ */ v(f, {
+								type: "number",
+								min: 1,
+								placeholder: "No limit",
+								value: K.budget.maxTokensPerExecution,
+								onChange: (e) => Y("budget", { maxTokensPerExecution: e.target.value })
+							})
+						})]
+					})
 				})] }),
-				B.type === "RATE_LIMIT" && /* @__PURE__ */ _(r, { children: [/* @__PURE__ */ g(o, { children: /* @__PURE__ */ _(s, {
+				H.type === "RATE_LIMIT" && /* @__PURE__ */ y(r, { children: [/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(s, {
 					className: "flex items-center gap-2",
-					children: [/* @__PURE__ */ g(y, { size: 18 }), "Rate Limit Configuration"]
-				}) }), /* @__PURE__ */ _(i, {
+					children: [/* @__PURE__ */ v(x, { size: 18 }), "Rate Limit Configuration"]
+				}), /* @__PURE__ */ v(a, { children: "Every limit is counted per agent. Leave a field empty to not restrict it." })] }), /* @__PURE__ */ v(i, {
 					className: "space-y-4",
-					children: [/* @__PURE__ */ _("div", {
-						className: "grid grid-cols-3 gap-4",
+					children: /* @__PURE__ */ y("div", {
+						className: "grid grid-cols-1 sm:grid-cols-3 gap-4",
 						children: [
-							/* @__PURE__ */ g(d, {
+							/* @__PURE__ */ v(d, {
 								label: "Requests / Minute",
-								children: /* @__PURE__ */ g(f, {
+								children: /* @__PURE__ */ v(f, {
 									type: "number",
 									min: 1,
-									value: J.requestsPerMinute,
-									onChange: (e) => Y({
-										...J,
-										requestsPerMinute: parseInt(e.target.value)
-									})
+									placeholder: "No limit",
+									value: K.rateLimit.requestsPerMinute,
+									onChange: (e) => Y("rateLimit", { requestsPerMinute: e.target.value })
 								})
 							}),
-							/* @__PURE__ */ g(d, {
+							/* @__PURE__ */ v(d, {
 								label: "Requests / Hour",
-								children: /* @__PURE__ */ g(f, {
+								children: /* @__PURE__ */ v(f, {
 									type: "number",
 									min: 1,
-									value: J.requestsPerHour,
-									onChange: (e) => Y({
-										...J,
-										requestsPerHour: parseInt(e.target.value)
-									})
+									placeholder: "No limit",
+									value: K.rateLimit.requestsPerHour,
+									onChange: (e) => Y("rateLimit", { requestsPerHour: e.target.value })
 								})
 							}),
-							/* @__PURE__ */ g(d, {
+							/* @__PURE__ */ v(d, {
 								label: "Tokens / Minute",
-								children: /* @__PURE__ */ g(f, {
+								children: /* @__PURE__ */ v(f, {
 									type: "number",
 									min: 1,
-									value: J.tokensPerMinute,
-									onChange: (e) => Y({
-										...J,
-										tokensPerMinute: parseInt(e.target.value)
-									})
+									placeholder: "No limit",
+									value: K.rateLimit.tokensPerMinute,
+									onChange: (e) => Y("rateLimit", { tokensPerMinute: e.target.value })
 								})
 							})
 						]
-					}), /* @__PURE__ */ g(d, {
-						label: "Scope",
-						children: /* @__PURE__ */ _("select", {
-							className: "flex h-10 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm",
-							value: J.scope,
-							onChange: (e) => Y({
-								...J,
-								scope: e.target.value
-							}),
-							children: [
-								/* @__PURE__ */ g("option", {
-									value: "connector",
-									children: "Per Connector"
-								}),
-								/* @__PURE__ */ g("option", {
-									value: "app",
-									children: "Per Bot"
-								}),
-								/* @__PURE__ */ g("option", {
-									value: "agent",
-									children: "Per Agent"
-								}),
-								/* @__PURE__ */ g("option", {
-									value: "user_group",
-									children: "Per User Group"
-								})
-							]
-						})
-					})]
+					})
 				})] }),
-				B.type === "RESPONSE" && /* @__PURE__ */ _(r, { children: [/* @__PURE__ */ _(o, { children: [/* @__PURE__ */ _(s, {
+				H.type === "RESPONSE" && /* @__PURE__ */ y(r, { children: [/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(s, {
 					className: "flex items-center gap-2",
-					children: [/* @__PURE__ */ g(S, { size: 18 }), "Model Usage Allowlist"]
-				}), /* @__PURE__ */ g(a, { children: "Agents in this workspace may only answer with models that match every active model policy. Leave both fields empty to allow all models." })] }), /* @__PURE__ */ _(i, {
+					children: [/* @__PURE__ */ v(w, { size: 18 }), "Model Usage Allowlist"]
+				}), /* @__PURE__ */ v(a, { children: "Agents in this workspace may only answer with models that match every active model policy. Leave both fields empty to allow all models." })] }), /* @__PURE__ */ y(i, {
 					className: "space-y-4",
-					children: [/* @__PURE__ */ g(d, {
+					children: [/* @__PURE__ */ v(d, {
 						label: "Allowed Models",
 						description: "Comma-separated model IDs. End an entry with * to allow a prefix.",
-						children: /* @__PURE__ */ g(f, {
+						children: /* @__PURE__ */ v(f, {
 							placeholder: "e.g., gpt-4o-mini, anthropic.claude-*",
-							value: X.allowedModels,
-							onChange: (e) => Ce({
-								...X,
-								allowedModels: e.target.value
-							})
+							value: K.response.allowedModels,
+							onChange: (e) => Y("response", { allowedModels: e.target.value })
 						})
-					}), /* @__PURE__ */ g(d, {
+					}), /* @__PURE__ */ v(d, {
 						label: "Allowed Providers",
 						description: "Comma-separated provider types, e.g. OPENAI, ANTHROPIC, AWS_BEDROCK.",
-						children: /* @__PURE__ */ g(f, {
+						children: /* @__PURE__ */ v(f, {
 							placeholder: "e.g., AWS_BEDROCK, ANTHROPIC",
-							value: X.allowedProviders,
-							onChange: (e) => Ce({
-								...X,
-								allowedProviders: e.target.value
-							})
+							value: K.response.allowedProviders,
+							onChange: (e) => Y("response", { allowedProviders: e.target.value })
 						})
 					})]
 				})] }),
-				/* @__PURE__ */ g(r, { children: /* @__PURE__ */ g(i, {
+				q && /* @__PURE__ */ v("p", {
+					className: "text-sm text-status-error-text",
+					role: "alert",
+					children: q
+				}),
+				/* @__PURE__ */ v(r, { children: /* @__PURE__ */ v(i, {
 					className: "pt-6",
-					children: /* @__PURE__ */ _("div", {
+					children: /* @__PURE__ */ y("div", {
 						className: "flex items-start gap-2",
-						children: [/* @__PURE__ */ g("input", {
+						children: [/* @__PURE__ */ v("input", {
 							type: "checkbox",
 							id: "activate-on-create",
-							checked: we,
-							onChange: (e) => Te(e.target.checked),
+							checked: X,
+							onChange: (e) => ke(e.target.checked),
 							className: "mt-1 h-4 w-4"
-						}), /* @__PURE__ */ _("label", {
+						}), /* @__PURE__ */ y("label", {
 							htmlFor: "activate-on-create",
 							className: "text-sm",
-							children: [/* @__PURE__ */ g("span", {
+							children: [/* @__PURE__ */ v("span", {
 								className: "font-medium",
 								children: "Enforce immediately"
-							}), /* @__PURE__ */ g("span", {
+							}), /* @__PURE__ */ v("span", {
 								className: "block text-text-secondary",
 								children: "Only active policies are enforced. Leave unchecked to save this policy as a draft and activate it later."
 							})]
 						})]
 					})
-				}) }),
-				B.type === "RETENTION" && /* @__PURE__ */ _(r, { children: [/* @__PURE__ */ g(o, { children: /* @__PURE__ */ _(s, {
-					className: "flex items-center gap-2",
-					children: [/* @__PURE__ */ g(T, { size: 18 }), "Retention Policy Configuration"]
-				}) }), /* @__PURE__ */ _(i, {
-					className: "space-y-4",
-					children: [/* @__PURE__ */ g(d, {
-						label: "Execution Data Retention (days)",
-						children: /* @__PURE__ */ g(f, {
-							type: "number",
-							min: 1,
-							value: Z.executionDataRetentionDays,
-							onChange: (e) => Ee({
-								...Z,
-								executionDataRetentionDays: parseInt(e.target.value)
-							})
-						})
-					}), /* @__PURE__ */ _("div", {
-						className: "flex items-center gap-2",
-						children: [/* @__PURE__ */ g("input", {
-							type: "checkbox",
-							id: "snapshots",
-							checked: Z.payloadSnapshotsEnabled,
-							onChange: (e) => Ee({
-								...Z,
-								payloadSnapshotsEnabled: e.target.checked
-							}),
-							className: "h-4 w-4"
-						}), /* @__PURE__ */ g("label", {
-							htmlFor: "snapshots",
-							className: "text-sm",
-							children: "Enable Payload Snapshots"
-						})]
-					})]
-				})] })
+				}) })
 			]
 		})
 	});
-	if (_e) return /* @__PURE__ */ g(n, {
+	if (Se) return /* @__PURE__ */ v(n, {
 		title: "Loading...",
-		children: /* @__PURE__ */ g("div", { className: "h-96 bg-bg-sunken motion-safe:animate-vc-shimmer rounded-lg" })
+		children: /* @__PURE__ */ v("div", { className: "h-96 bg-bg-sunken motion-safe:animate-vc-shimmer rounded-lg" })
 	});
-	if (!N) return /* @__PURE__ */ g(n, {
+	if (!F) return /* @__PURE__ */ v(n, {
 		title: "Policy Not Found",
-		children: /* @__PURE__ */ g(re, {
+		children: /* @__PURE__ */ v(re, {
 			illustration: "empty-generic",
 			title: "Policy Not Found",
 			description: "This policy doesn't exist.",
-			action: /* @__PURE__ */ g(c, {
-				onClick: () => M("policies"),
+			action: /* @__PURE__ */ v(c, {
+				onClick: () => P("policies"),
 				children: "Back to Policies"
 			})
 		})
 	});
-	let $ = m(N.type, O, "CONTENT");
-	return /* @__PURE__ */ g(n, {
-		title: /* @__PURE__ */ _("div", {
+	let Q = h(F.type, be, "CONTENT"), $ = pe(Q, F.config);
+	return /* @__PURE__ */ v(n, {
+		title: /* @__PURE__ */ y("div", {
 			className: "flex items-center gap-3",
 			children: [
-				/* @__PURE__ */ g(c, {
+				/* @__PURE__ */ v(c, {
 					variant: "ghost",
 					size: "icon",
-					onClick: () => M("policies"),
-					children: /* @__PURE__ */ g(de, { size: 20 })
+					onClick: () => P("policies"),
+					children: /* @__PURE__ */ v(ge, { size: 20 })
 				}),
-				/* @__PURE__ */ g("div", {
+				/* @__PURE__ */ v("div", {
 					className: "p-2 rounded-lg bg-action-primary-bg/10",
-					children: /* @__PURE__ */ g(A, { type: $ })
+					children: /* @__PURE__ */ v(j, { type: Q })
 				}),
-				/* @__PURE__ */ _("div", { children: [/* @__PURE__ */ _("div", {
+				/* @__PURE__ */ y("div", { children: [/* @__PURE__ */ y("div", {
 					className: "flex items-center gap-2",
-					children: [/* @__PURE__ */ g("span", { children: N.name }), /* @__PURE__ */ g(te, { status: N.status })]
-				}), /* @__PURE__ */ g("p", {
+					children: [/* @__PURE__ */ v("span", { children: F.name }), /* @__PURE__ */ v(te, { status: F.status })]
+				}), /* @__PURE__ */ v("p", {
 					className: "text-sm font-normal text-text-secondary",
-					children: N.description
+					children: F.description
 				})] })
 			]
 		}),
-		actions: /* @__PURE__ */ g("div", {
+		actions: /* @__PURE__ */ v("div", {
 			className: "flex gap-2",
-			children: L ? /* @__PURE__ */ _(le, { children: [/* @__PURE__ */ g(c, {
+			children: z ? /* @__PURE__ */ y(_, { children: [/* @__PURE__ */ v(c, {
 				variant: "outline",
-				onClick: () => R(!1),
+				onClick: () => B(!1),
 				children: "Cancel"
-			}), /* @__PURE__ */ g(c, {
-				leftIcon: /* @__PURE__ */ g(C, { size: 16 }),
-				onClick: Oe,
-				isLoading: I,
-				disabled: !B.name,
+			}), /* @__PURE__ */ v(c, {
+				leftIcon: /* @__PURE__ */ v(T, { size: 16 }),
+				onClick: je,
+				isLoading: R,
+				disabled: !W.name,
 				children: "Save Changes"
-			})] }) : /* @__PURE__ */ _(le, { children: [
-				/* @__PURE__ */ g(c, {
-					variant: Q ? "outline" : "default",
-					leftIcon: /* @__PURE__ */ g(pe, { size: 16 }),
-					onClick: () => void Ae(),
-					isLoading: I,
-					children: Q ? "Deactivate" : "Activate"
+			})] }) : /* @__PURE__ */ y(_, { children: [
+				/* @__PURE__ */ v(c, {
+					variant: Z ? "outline" : "default",
+					leftIcon: /* @__PURE__ */ v(ve, { size: 16 }),
+					onClick: () => void Ne(),
+					isLoading: R,
+					children: Z ? "Deactivate" : "Activate"
 				}),
-				/* @__PURE__ */ g(c, {
+				/* @__PURE__ */ v(c, {
 					variant: "outline",
-					leftIcon: /* @__PURE__ */ g(fe, { size: 16 }),
-					onClick: je,
+					leftIcon: /* @__PURE__ */ v(_e, { size: 16 }),
+					onClick: Pe,
 					children: "Edit"
 				}),
-				Se ? /* @__PURE__ */ _("div", {
+				De ? /* @__PURE__ */ y("div", {
 					className: "flex gap-2",
-					children: [/* @__PURE__ */ g(c, {
+					children: [/* @__PURE__ */ v(c, {
 						variant: "outline",
 						size: "sm",
-						onClick: () => z(!1),
+						onClick: () => V(!1),
 						children: "Cancel"
-					}), /* @__PURE__ */ g(c, {
+					}), /* @__PURE__ */ v(c, {
 						variant: "destructive",
 						size: "sm",
 						onClick: () => {
-							ne("medium"), ke();
+							ne("medium"), Me();
 						},
-						isLoading: xe,
+						isLoading: Ee,
 						children: "Confirm Delete"
 					})]
-				}) : /* @__PURE__ */ g(c, {
+				}) : /* @__PURE__ */ v(c, {
 					variant: "destructive",
-					leftIcon: /* @__PURE__ */ g(T, { size: 16 }),
-					onClick: () => z(!0),
+					leftIcon: /* @__PURE__ */ v(D, { size: 16 }),
+					onClick: () => V(!0),
 					children: "Delete"
 				})
 			] })
 		}),
-		children: /* @__PURE__ */ _("div", {
+		children: /* @__PURE__ */ y("div", {
 			className: "space-y-6",
 			children: [
-				/* @__PURE__ */ g(ce, {
-					icon: /* @__PURE__ */ g(w, { size: 18 }),
+				/* @__PURE__ */ v(me, {
+					icon: /* @__PURE__ */ v(E, { size: 18 }),
 					children: "This is a single guardrail and its rules. Review and tune exactly what it enforces — what content to block, which tools are allowed, the spend or rate limits it applies — then attach it to the agents and bots that should obey it. Policies are how you keep agents safe, compliant and within budget."
 				}),
-				L && /* @__PURE__ */ _(r, { children: [/* @__PURE__ */ g(o, { children: /* @__PURE__ */ g(s, { children: "Edit Policy" }) }), /* @__PURE__ */ _(i, {
+				z && /* @__PURE__ */ y(r, { children: [/* @__PURE__ */ v(o, { children: /* @__PURE__ */ v(s, { children: "Edit Policy" }) }), /* @__PURE__ */ y(i, {
 					className: "space-y-4",
 					children: [
-						/* @__PURE__ */ g(d, {
+						/* @__PURE__ */ v(d, {
 							label: "Policy Name",
 							required: !0,
-							children: /* @__PURE__ */ g(f, {
-								value: B.name,
-								onChange: (e) => V({
-									...B,
+							children: /* @__PURE__ */ v(f, {
+								value: W.name,
+								onChange: (e) => G({
+									...W,
 									name: e.target.value
 								})
 							})
 						}),
-						/* @__PURE__ */ g(d, {
+						/* @__PURE__ */ v(d, {
 							label: "Description",
-							children: /* @__PURE__ */ g(p, {
-								value: B.description,
-								onChange: (e) => V({
-									...B,
+							children: /* @__PURE__ */ v(p, {
+								value: W.description,
+								onChange: (e) => G({
+									...W,
 									description: e.target.value
 								}),
 								rows: 3
 							})
 						}),
-						/* @__PURE__ */ g(d, {
+						/* @__PURE__ */ v(d, {
 							label: "Visibility",
-							children: /* @__PURE__ */ _("select", {
-								className: "flex h-10 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm",
-								value: B.visibility,
-								onChange: (e) => V({
-									...B,
+							children: /* @__PURE__ */ y("select", {
+								className: A,
+								value: W.visibility,
+								onChange: (e) => G({
+									...W,
 									visibility: e.target.value
 								}),
 								children: [
-									/* @__PURE__ */ g("option", {
+									/* @__PURE__ */ v("option", {
 										value: "PRIVATE",
 										children: "Private"
 									}),
-									/* @__PURE__ */ g("option", {
+									/* @__PURE__ */ v("option", {
 										value: "WORKSPACE",
 										children: "Workspace"
 									}),
-									/* @__PURE__ */ g("option", {
+									/* @__PURE__ */ v("option", {
 										value: "PUBLIC",
 										children: "Public"
 									})
 								]
 							})
 						}),
-						/* @__PURE__ */ g("p", {
+						/* @__PURE__ */ v("p", {
 							className: "text-sm text-text-secondary",
 							children: "Note: Policy type and configuration cannot be changed after creation."
 						})
 					]
 				})] }),
-				/* @__PURE__ */ _("div", {
+				/* @__PURE__ */ y("div", {
 					className: "grid grid-cols-2 md:grid-cols-4 gap-4",
 					children: [
-						/* @__PURE__ */ g(r, {
+						/* @__PURE__ */ v(r, {
 							treatment: "glass",
 							glow: !0,
-							children: /* @__PURE__ */ _(i, {
+							children: /* @__PURE__ */ y(i, {
 								className: "pt-6 text-center",
 								children: [
-									/* @__PURE__ */ g("div", {
+									/* @__PURE__ */ v("div", {
 										className: "p-3 rounded-full bg-action-primary-bg/10 w-fit mx-auto mb-2",
-										children: /* @__PURE__ */ g(A, { type: $ })
+										children: /* @__PURE__ */ v(j, { type: Q })
 									}),
-									/* @__PURE__ */ g("p", {
+									/* @__PURE__ */ v("p", {
 										className: "text-lg font-bold",
-										children: ge[$]
+										children: M[Q]
 									}),
-									/* @__PURE__ */ g("p", {
+									/* @__PURE__ */ v("p", {
 										className: "text-sm text-text-secondary",
 										children: "Policy Type"
 									})
 								]
 							})
 						}),
-						/* @__PURE__ */ g(r, { children: /* @__PURE__ */ _(i, {
+						/* @__PURE__ */ v(r, { children: /* @__PURE__ */ y(i, {
 							className: "pt-6 text-center",
-							children: [/* @__PURE__ */ g("p", {
+							children: [/* @__PURE__ */ v("p", {
 								className: "text-3xl font-bold text-text-primary capitalize",
-								children: N.visibility.toLowerCase()
-							}), /* @__PURE__ */ g("p", {
+								children: F.visibility.toLowerCase()
+							}), /* @__PURE__ */ v("p", {
 								className: "text-sm text-text-secondary",
 								children: "Visibility"
 							})]
 						}) }),
-						/* @__PURE__ */ g(r, { children: /* @__PURE__ */ _(i, {
+						/* @__PURE__ */ v(r, { children: /* @__PURE__ */ y(i, {
 							className: "pt-6 text-center",
-							children: [/* @__PURE__ */ g("p", {
+							children: [/* @__PURE__ */ v("p", {
 								className: "text-3xl font-bold text-text-primary",
-								children: N.revision
-							}), /* @__PURE__ */ g("p", {
+								children: F.revision
+							}), /* @__PURE__ */ v("p", {
 								className: "text-sm text-text-secondary",
 								children: "Revision"
 							})]
 						}) }),
-						/* @__PURE__ */ g(r, { children: /* @__PURE__ */ _(i, {
+						/* @__PURE__ */ v(r, { children: /* @__PURE__ */ y(i, {
 							className: "pt-6 text-center",
-							children: [/* @__PURE__ */ g("p", {
+							children: [/* @__PURE__ */ v("p", {
 								className: "text-lg font-bold text-text-primary",
-								children: t(N.updatedAt)
-							}), /* @__PURE__ */ g("p", {
+								children: t(F.updatedAt)
+							}), /* @__PURE__ */ v("p", {
 								className: "text-sm text-text-secondary",
 								children: "Last Updated"
 							})]
 						}) })
 					]
 				}),
-				/* @__PURE__ */ _(r, { children: [/* @__PURE__ */ _(o, { children: [/* @__PURE__ */ g(s, { children: "Configuration" }), /* @__PURE__ */ g(a, { children: "Current policy configuration" })] }), /* @__PURE__ */ g(i, { children: /* @__PURE__ */ g("div", {
-					className: "p-4 bg-bg-sunken rounded-lg font-mono text-sm overflow-auto",
-					children: /* @__PURE__ */ g("pre", { children: JSON.stringify(N.config, null, 2) })
-				}) })] }),
-				/* @__PURE__ */ _(r, { children: [/* @__PURE__ */ g(o, { children: /* @__PURE__ */ _(s, {
+				/* @__PURE__ */ y(r, { children: [/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ v(s, { children: "Configuration" }), /* @__PURE__ */ v(a, { children: "Current policy configuration" })] }), /* @__PURE__ */ y(i, {
+					className: "space-y-4",
+					children: [$ === null ? /* @__PURE__ */ y("div", {
+						className: "flex items-start gap-2 p-3 bg-status-warning-bg-subtle rounded-lg text-sm",
+						"data-testid": "policy-not-enforced",
+						children: [/* @__PURE__ */ v(b, {
+							size: 16,
+							className: "mt-0.5 shrink-0 text-status-warning-text"
+						}), /* @__PURE__ */ y("p", { children: [M[Q], " settings are not enforced at runtime. This policy is kept for reference only and does not restrict any agent."] })]
+					}) : $.length > 0 ? /* @__PURE__ */ y("div", {
+						className: "flex items-start gap-2 p-3 bg-status-warning-bg-subtle rounded-lg text-sm",
+						"data-testid": "policy-ignored-keys",
+						children: [/* @__PURE__ */ v(b, {
+							size: 16,
+							className: "mt-0.5 shrink-0 text-status-warning-text"
+						}), /* @__PURE__ */ y("p", { children: [
+							"These settings are not enforced at runtime and have no effect:",
+							" ",
+							/* @__PURE__ */ v("span", {
+								className: "font-mono",
+								children: $.join(", ")
+							}),
+							". Create a new policy to use the enforced settings."
+						] })]
+					}) : null, /* @__PURE__ */ v("div", {
+						className: "p-4 bg-bg-sunken rounded-lg font-mono text-sm overflow-auto",
+						children: /* @__PURE__ */ v("pre", { children: JSON.stringify(F.config, null, 2) })
+					})]
+				})] }),
+				/* @__PURE__ */ y(r, { children: [/* @__PURE__ */ v(o, { children: /* @__PURE__ */ y(s, {
 					className: "flex items-center gap-2",
-					children: [/* @__PURE__ */ g(me, { size: 18 }), "Metadata"]
-				}) }), /* @__PURE__ */ g(i, { children: /* @__PURE__ */ _("div", {
+					children: [/* @__PURE__ */ v(ye, { size: 18 }), "Metadata"]
+				}) }), /* @__PURE__ */ v(i, { children: /* @__PURE__ */ y("div", {
 					className: "grid grid-cols-2 md:grid-cols-4 gap-6 text-sm",
 					children: [
-						/* @__PURE__ */ _("div", { children: [/* @__PURE__ */ g("p", {
+						/* @__PURE__ */ y("div", { children: [/* @__PURE__ */ v("p", {
 							className: "text-text-secondary",
 							children: "Created"
-						}), /* @__PURE__ */ g("p", {
+						}), /* @__PURE__ */ v("p", {
 							className: "font-medium",
-							children: t(N.createdAt)
+							children: t(F.createdAt)
 						})] }),
-						/* @__PURE__ */ _("div", { children: [/* @__PURE__ */ g("p", {
+						/* @__PURE__ */ y("div", { children: [/* @__PURE__ */ v("p", {
 							className: "text-text-secondary",
 							children: "Updated"
-						}), /* @__PURE__ */ g("p", {
+						}), /* @__PURE__ */ v("p", {
 							className: "font-medium",
-							children: t(N.updatedAt)
+							children: t(F.updatedAt)
 						})] }),
-						/* @__PURE__ */ _("div", { children: [/* @__PURE__ */ g("p", {
+						/* @__PURE__ */ y("div", { children: [/* @__PURE__ */ v("p", {
 							className: "text-text-secondary",
 							children: "Tags"
-						}), /* @__PURE__ */ g("div", {
+						}), /* @__PURE__ */ v("div", {
 							className: "flex gap-1",
-							children: N.tags.length > 0 ? N.tags.map((e) => /* @__PURE__ */ g(ee, {
+							children: F.tags.length > 0 ? F.tags.map((e) => /* @__PURE__ */ v(ee, {
 								variant: "secondary",
 								className: "text-xs",
 								children: e
-							}, e)) : /* @__PURE__ */ g("span", {
+							}, e)) : /* @__PURE__ */ v("span", {
 								className: "text-text-secondary",
 								children: "None"
 							})
@@ -947,6 +757,6 @@ var A = ({ type: e }) => ({
 	});
 };
 //#endregion
-export { j as PolicyDetailPage };
+export { N as PolicyDetailPage };
 
 //# sourceMappingURL=PolicyDetailPage.js.map