@burdenoff/microfe-botmanor 2026.1027.2 → 2026.1027.3

package/dist/botlit/pages/PolicyDetailPage.js

@@ -1,24 +1,27 @@
 import { useBotlit as e } from "../providers/BotlitProvider.js";
 import { formatRelativeTime as t } from "../utils/formatters.js";
-import { PageLayout as n } from "../components/PageLayout.js";
-import { Card as r, CardContent as i, CardDescription as a, CardHeader as o, CardTitle as s } from "../components/Card.js";
-import { Button as c } from "../components/Button.js";
+import { BOTMANOR_PERMISSIONS as n } from "../permissions/botmanorPermissions.js";
+import { BotmanorPermissionGate as r } from "../permissions/useBotmanorPermissions.js";
+import { PageLayout as i } from "../components/PageLayout.js";
+import { Button as a } from "../components/Button.js";
+import "../permissions/index.js";
+import { Card as o, CardContent as s, CardDescription as c, CardHeader as l, CardTitle as u } from "../components/Card.js";
 import { Badge as ee, StatusBadge as te } from "../components/Badge.js";
-import { isNative as l, nativeImpact as ne, nativeNotify as u } from "../../utils/nativeBridge.js";
+import { isNative as d, nativeImpact as ne, nativeNotify as f } from "../../utils/nativeBridge.js";
 import { EmptyState as re } from "../components/EmptyState.js";
-import { FormField as d, Input as f, Textarea as p } from "../components/Input.js";
-import { useCreatePolicy as m, useDeletePolicy as ie, usePolicy as ae, useUpdatePolicy as oe } from "../hooks/usePolicies.js";
-import { toUnion as h } from "../utils/unions.js";
+import { FormField as p, Input as m, Textarea as h } from "../components/Input.js";
+import { useCreatePolicy as ie, useDeletePolicy as ae, usePolicy as oe, useUpdatePolicy as se } from "../hooks/usePolicies.js";
+import { toUnion as g } from "../utils/unions.js";
 import "../hooks/index.js";
-import { A2A_TRUST_LEVELS as se, CREATABLE_POLICY_TYPES as ce, EMPTY_POLICY_FORM as le, TOOL_RISK_LEVELS as ue, buildPolicyConfig as de, isCreatablePolicyType as fe, unenforcedConfigKeys as pe } from "../utils/policyConfig.js";
-import { useState as g } from "react";
-import { PagePurpose as me } from "@burdenoff/fe-libs/ui";
-import { Fragment as _, jsx as v, jsxs as y } from "react/jsx-runtime";
-import { useParams as he } from "react-router";
-import { AlertTriangle as b, ArrowLeft as ge, Clock as x, Database as S, DollarSign as C, Edit as _e, FileText as w, Power as ve, Save as T, Settings as ye, Shield as E, Trash2 as D, Wrench as O } from "lucide-react";
+import { A2A_TRUST_LEVELS as ce, CREATABLE_POLICY_TYPES as le, EMPTY_POLICY_FORM as ue, TOOL_RISK_LEVELS as de, buildPolicyConfig as fe, isCreatablePolicyType as pe, unenforcedConfigKeys as me } from "../utils/policyConfig.js";
+import { useState as _ } from "react";
+import { PagePurpose as he } from "@burdenoff/fe-libs/ui";
+import { Fragment as ge, jsx as v, jsxs as y } from "react/jsx-runtime";
+import { useParams as _e } from "react-router";
+import { AlertTriangle as b, ArrowLeft as ve, Clock as x, Database as S, DollarSign as C, Edit as ye, FileText as w, Power as be, Save as T, Settings as xe, Shield as E, Trash2 as D, Wrench as O } from "lucide-react";
 import { toast as k } from "sonner";
 //#region src/botlit/pages/PolicyDetailPage.tsx
-var be = [
+var Se = [
 	"CONTENT",
 	"TOOL",
 	"DATA",
@@ -26,7 +29,7 @@ var be = [
 	"BUDGET",
 	"RATE_LIMIT",
 	"RETENTION"
-], xe = [
+], Ce = [
 	"PRIVATE",
 	"WORKSPACE",
 	"PUBLIC"
@@ -47,32 +50,32 @@ var be = [
 	RATE_LIMIT: "Rate Limit Policy",
 	RETENTION: "Retention Policy"
 }, N = ({ isNew: S }) => {
-	let { policyId: N } = he(), { navigateTo: P } = e(), { data: F, loading: Se, refetch: I } = ae(S ? void 0 : N), { create: Ce, loading: we } = m(), { update: L, loading: R } = oe(), { remove: Te, loading: Ee } = ie(), [z, B] = g(!1), [De, V] = g(!1), [H, U] = g({
+	let { policyId: N } = _e(), { navigateTo: P } = e(), { data: F, loading: we, refetch: I } = oe(S ? void 0 : N), { create: Te, loading: Ee } = ie(), { update: L, loading: R } = se(), { remove: De, loading: Oe } = ae(), [z, B] = _(!1), [ke, V] = _(!1), [H, U] = _({
 		name: "",
 		description: "",
 		type: "CONTENT",
 		visibility: "PRIVATE"
-	}), [W, G] = g({
+	}), [W, G] = _({
 		name: "",
 		description: "",
 		visibility: "PRIVATE"
-	}), [K, Oe] = g(le), [q, J] = g(null), Y = (e, t) => {
-		J(null), Oe((n) => ({
+	}), [K, Ae] = _(ue), [q, J] = _(null), Y = (e, t) => {
+		J(null), Ae((n) => ({
 			...n,
 			[e]: {
 				...n[e],
 				...t
 			}
 		}));
-	}, [X, ke] = g(!1), Ae = async () => {
+	}, [X, je] = _(!1), Me = async () => {
 		if (!H.name) return;
-		let e = de(H.type, K);
+		let e = fe(H.type, K);
 		if (!e.ok) {
 			J(e.error), k.error(e.error);
 			return;
 		}
 		try {
-			await Ce({
+			await Te({
 				name: H.name,
 				description: H.description,
 				type: H.type,
@@ -85,7 +88,7 @@ var be = [
 			return;
 		}
 		k.success(`Policy "${H.name}" created`), P("policies");
-	}, je = async () => {
+	}, Ne = async () => {
 		if (!(!N || !W.name)) {
 			try {
 				await L({
@@ -102,13 +105,13 @@ var be = [
 			}
 			await I(), k.success("Policy updated"), B(!1);
 		}
-	}, Me = async () => {
+	}, Pe = async () => {
 		if (N) try {
-			await Te(N), l() && u("success"), P("policies");
+			await De(N), d() && f("success"), P("policies");
 		} catch (e) {
-			throw l() && u("error"), e;
+			throw d() && f("error"), e;
 		}
-	}, Z = F?.status === "ACTIVE", Ne = async () => {
+	}, Z = F?.status === "ACTIVE", Fe = async () => {
 		if (!N) return;
 		let e = Z ? "DRAFT" : "ACTIVE";
 		try {
@@ -121,26 +124,26 @@ var be = [
 			return;
 		}
 		await I(), k.success(e === "ACTIVE" ? "Policy is now enforced" : "Policy is no longer enforced");
-	}, Pe = () => {
+	}, Ie = () => {
 		F && (G({
 			name: F.name,
 			description: F.description || "",
-			visibility: h(F.visibility, xe, "PRIVATE")
+			visibility: g(F.visibility, Ce, "PRIVATE")
 		}), B(!0));
 	};
-	if (S) return /* @__PURE__ */ v(n, {
+	if (S) return /* @__PURE__ */ v(i, {
 		title: "Create Policy",
 		description: "Define guardrails and constraints for your AI agents",
 		actions: /* @__PURE__ */ y("div", {
 			className: "flex gap-2",
-			children: [/* @__PURE__ */ v(c, {
+			children: [/* @__PURE__ */ v(a, {
 				variant: "outline",
 				onClick: () => P("policies"),
 				children: "Cancel"
-			}), /* @__PURE__ */ v(c, {
+			}), /* @__PURE__ */ v(a, {
 				leftIcon: /* @__PURE__ */ v(T, { size: 16 }),
-				onClick: Ae,
-				isLoading: we,
+				onClick: Me,
+				isLoading: Ee,
 				disabled: !H.name,
 				children: "Create"
 			})]
@@ -148,13 +151,13 @@ var be = [
 		children: /* @__PURE__ */ y("div", {
 			className: "max-w-2xl space-y-6",
 			children: [
-				/* @__PURE__ */ y(r, { children: [/* @__PURE__ */ v(o, { children: /* @__PURE__ */ v(s, { children: "Basic Information" }) }), /* @__PURE__ */ y(i, {
+				/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ v(l, { children: /* @__PURE__ */ v(u, { children: "Basic Information" }) }), /* @__PURE__ */ y(s, {
 					className: "space-y-4",
 					children: [
-						/* @__PURE__ */ v(d, {
+						/* @__PURE__ */ v(p, {
 							label: "Policy Name",
 							required: !0,
-							children: /* @__PURE__ */ v(f, {
+							children: /* @__PURE__ */ v(m, {
 								placeholder: "e.g., Production Content Policy",
 								value: H.name,
 								onChange: (e) => U({
@@ -163,9 +166,9 @@ var be = [
 								})
 							})
 						}),
-						/* @__PURE__ */ v(d, {
+						/* @__PURE__ */ v(p, {
 							label: "Description",
-							children: /* @__PURE__ */ v(p, {
+							children: /* @__PURE__ */ v(h, {
 								placeholder: "What does this policy enforce?",
 								value: H.description,
 								onChange: (e) => U({
@@ -177,7 +180,7 @@ var be = [
 						}),
 						/* @__PURE__ */ y("div", {
 							className: "grid grid-cols-2 gap-4",
-							children: [/* @__PURE__ */ v(d, {
+							children: [/* @__PURE__ */ v(p, {
 								label: "Policy Type",
 								required: !0,
 								children: /* @__PURE__ */ v("select", {
@@ -185,17 +188,17 @@ var be = [
 									value: H.type,
 									onChange: (e) => {
 										let t = e.target.value;
-										fe(t) && (J(null), U({
+										pe(t) && (J(null), U({
 											...H,
 											type: t
 										}));
 									},
-									children: ce.map((e) => /* @__PURE__ */ v("option", {
+									children: le.map((e) => /* @__PURE__ */ v("option", {
 										value: e,
 										children: M[e]
 									}, e))
 								})
-							}), /* @__PURE__ */ v(d, {
+							}), /* @__PURE__ */ v(p, {
 								label: "Visibility",
 								children: /* @__PURE__ */ y("select", {
 									className: "flex h-10 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm",
@@ -223,10 +226,10 @@ var be = [
 						})
 					]
 				})] }),
-				H.type === "CONTENT" && /* @__PURE__ */ y(r, { children: [/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(s, {
+				H.type === "CONTENT" && /* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(l, { children: [/* @__PURE__ */ y(u, {
 					className: "flex items-center gap-2",
 					children: [/* @__PURE__ */ v(b, { size: 18 }), "Content Policy Configuration"]
-				}), /* @__PURE__ */ v(a, { children: "Checked against every message sent to an agent and every response it gives. A blocked message is refused; a blocked response is replaced with a refusal." })] }), /* @__PURE__ */ y(i, {
+				}), /* @__PURE__ */ v(c, { children: "Checked against every message sent to an agent and every response it gives. A blocked message is refused; a blocked response is replaced with a refusal." })] }), /* @__PURE__ */ y(s, {
 					className: "space-y-4",
 					children: [
 						/* @__PURE__ */ y("div", {
@@ -249,19 +252,19 @@ var be = [
 								})]
 							})]
 						}),
-						/* @__PURE__ */ v(d, {
+						/* @__PURE__ */ v(p, {
 							label: "Blocked Keywords",
 							description: "Comma-separated. Case-insensitive; any occurrence blocks the text.",
-							children: /* @__PURE__ */ v(f, {
+							children: /* @__PURE__ */ v(m, {
 								placeholder: "e.g., internal-only, project-x",
 								value: K.content.blockedKeywords,
 								onChange: (e) => Y("content", { blockedKeywords: e.target.value })
 							})
 						}),
-						/* @__PURE__ */ v(d, {
+						/* @__PURE__ */ v(p, {
 							label: "Blocked Patterns",
 							description: "One regular expression per line, matched case-insensitively.",
-							children: /* @__PURE__ */ v(p, {
+							children: /* @__PURE__ */ v(h, {
 								placeholder: "e.g., \\bACME-\\d{6}\\b",
 								value: K.content.blockedPatterns,
 								onChange: (e) => Y("content", { blockedPatterns: e.target.value }),
@@ -270,25 +273,25 @@ var be = [
 						})
 					]
 				})] }),
-				H.type === "TOOL" && /* @__PURE__ */ y(r, { children: [/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(s, {
+				H.type === "TOOL" && /* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(l, { children: [/* @__PURE__ */ y(u, {
 					className: "flex items-center gap-2",
 					children: [/* @__PURE__ */ v(O, { size: 18 }), "Tool Policy Configuration"]
-				}), /* @__PURE__ */ v(a, { children: "Applies to MCP tool calls made by agents and through Call Tool, and to agent delegation. Leave a field empty to not restrict it." })] }), /* @__PURE__ */ y(i, {
+				}), /* @__PURE__ */ v(c, { children: "Applies to MCP tool calls made by agents and through Call Tool, and to agent delegation. Leave a field empty to not restrict it." })] }), /* @__PURE__ */ y(s, {
 					className: "space-y-4",
 					children: [
-						/* @__PURE__ */ v(d, {
+						/* @__PURE__ */ v(p, {
 							label: "Allowed Tools",
 							description: "Comma-separated MCP tool names. End an entry with * to allow a prefix. Empty allows every tool.",
-							children: /* @__PURE__ */ v(f, {
+							children: /* @__PURE__ */ v(m, {
 								placeholder: "e.g., search, read_*",
 								value: K.tool.allowedTools,
 								onChange: (e) => Y("tool", { allowedTools: e.target.value })
 							})
 						}),
-						/* @__PURE__ */ v(d, {
+						/* @__PURE__ */ v(p, {
 							label: "Denied Tools",
 							description: "Comma-separated MCP tool names that may never run. A deny always wins.",
-							children: /* @__PURE__ */ v(f, {
+							children: /* @__PURE__ */ v(m, {
 								placeholder: "e.g., delete_*, execute_code",
 								value: K.tool.deniedTools,
 								onChange: (e) => Y("tool", { deniedTools: e.target.value })
@@ -296,7 +299,7 @@ var be = [
 						}),
 						/* @__PURE__ */ y("div", {
 							className: "grid grid-cols-1 sm:grid-cols-2 gap-4",
-							children: [/* @__PURE__ */ v(d, {
+							children: [/* @__PURE__ */ v(p, {
 								label: "Max Tool Risk Level",
 								children: /* @__PURE__ */ y("select", {
 									className: A,
@@ -305,12 +308,12 @@ var be = [
 									children: [/* @__PURE__ */ v("option", {
 										value: "",
 										children: "Any risk level"
-									}), ue.map((e) => /* @__PURE__ */ y("option", {
+									}), de.map((e) => /* @__PURE__ */ y("option", {
 										value: e,
 										children: ["Up to ", e.toLowerCase()]
 									}, e))]
 								})
-							}), /* @__PURE__ */ v(d, {
+							}), /* @__PURE__ */ v(p, {
 								label: "Minimum A2A Trust Level",
 								description: "For delegation to external registry agents.",
 								children: /* @__PURE__ */ y("select", {
@@ -320,7 +323,7 @@ var be = [
 									children: [/* @__PURE__ */ v("option", {
 										value: "",
 										children: "Default (verified publisher)"
-									}), se.map((e) => /* @__PURE__ */ v("option", {
+									}), ce.map((e) => /* @__PURE__ */ v("option", {
 										value: e,
 										children: e === "VERIFIED_PUBLISHER" ? "Verified publisher" : e.charAt(0) + e.slice(1).toLowerCase()
 									}, e))]
@@ -329,20 +332,20 @@ var be = [
 						}),
 						/* @__PURE__ */ y("div", {
 							className: "grid grid-cols-1 sm:grid-cols-2 gap-4",
-							children: [/* @__PURE__ */ v(d, {
+							children: [/* @__PURE__ */ v(p, {
 								label: "Max Tool Calls Per Execution",
 								description: "Tool calls allowed in one agent turn.",
-								children: /* @__PURE__ */ v(f, {
+								children: /* @__PURE__ */ v(m, {
 									type: "number",
 									min: 1,
 									placeholder: "No limit",
 									value: K.tool.maxCallsPerExecution,
 									onChange: (e) => Y("tool", { maxCallsPerExecution: e.target.value })
 								})
-							}), /* @__PURE__ */ v(d, {
+							}), /* @__PURE__ */ v(p, {
 								label: "Tool Call Timeout (seconds)",
 								description: "Can only shorten the platform's own timeout.",
-								children: /* @__PURE__ */ v(f, {
+								children: /* @__PURE__ */ v(m, {
 									type: "number",
 									min: 1,
 									placeholder: "Platform default",
@@ -353,27 +356,27 @@ var be = [
 						})
 					]
 				})] }),
-				H.type === "BUDGET" && /* @__PURE__ */ y(r, { children: [/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(s, {
+				H.type === "BUDGET" && /* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(l, { children: [/* @__PURE__ */ y(u, {
 					className: "flex items-center gap-2",
 					children: [/* @__PURE__ */ v(C, { size: 18 }), "Budget Policy Configuration"]
-				}), /* @__PURE__ */ v(a, { children: "Token budgets apply per agent. Leave a field empty to not restrict it." })] }), /* @__PURE__ */ v(i, {
+				}), /* @__PURE__ */ v(c, { children: "Token budgets apply per agent. Leave a field empty to not restrict it." })] }), /* @__PURE__ */ v(s, {
 					className: "space-y-4",
 					children: /* @__PURE__ */ y("div", {
 						className: "grid grid-cols-1 sm:grid-cols-2 gap-4",
-						children: [/* @__PURE__ */ v(d, {
+						children: [/* @__PURE__ */ v(p, {
 							label: "Max Tokens Per Day",
 							description: "An agent that has used this many tokens today (UTC) is refused.",
-							children: /* @__PURE__ */ v(f, {
+							children: /* @__PURE__ */ v(m, {
 								type: "number",
 								min: 1,
 								placeholder: "No limit",
 								value: K.budget.maxTokensPerDay,
 								onChange: (e) => Y("budget", { maxTokensPerDay: e.target.value })
 							})
-						}), /* @__PURE__ */ v(d, {
+						}), /* @__PURE__ */ v(p, {
 							label: "Max Output Tokens Per Model Call",
 							description: "Lowers the agent's own max-tokens setting when it is higher.",
-							children: /* @__PURE__ */ v(f, {
+							children: /* @__PURE__ */ v(m, {
 								type: "number",
 								min: 1,
 								placeholder: "No limit",
@@ -383,17 +386,17 @@ var be = [
 						})]
 					})
 				})] }),
-				H.type === "RATE_LIMIT" && /* @__PURE__ */ y(r, { children: [/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(s, {
+				H.type === "RATE_LIMIT" && /* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(l, { children: [/* @__PURE__ */ y(u, {
 					className: "flex items-center gap-2",
 					children: [/* @__PURE__ */ v(x, { size: 18 }), "Rate Limit Configuration"]
-				}), /* @__PURE__ */ v(a, { children: "Every limit is counted per agent. Leave a field empty to not restrict it." })] }), /* @__PURE__ */ v(i, {
+				}), /* @__PURE__ */ v(c, { children: "Every limit is counted per agent. Leave a field empty to not restrict it." })] }), /* @__PURE__ */ v(s, {
 					className: "space-y-4",
 					children: /* @__PURE__ */ y("div", {
 						className: "grid grid-cols-1 sm:grid-cols-3 gap-4",
 						children: [
-							/* @__PURE__ */ v(d, {
+							/* @__PURE__ */ v(p, {
 								label: "Requests / Minute",
-								children: /* @__PURE__ */ v(f, {
+								children: /* @__PURE__ */ v(m, {
 									type: "number",
 									min: 1,
 									placeholder: "No limit",
@@ -401,9 +404,9 @@ var be = [
 									onChange: (e) => Y("rateLimit", { requestsPerMinute: e.target.value })
 								})
 							}),
-							/* @__PURE__ */ v(d, {
+							/* @__PURE__ */ v(p, {
 								label: "Requests / Hour",
-								children: /* @__PURE__ */ v(f, {
+								children: /* @__PURE__ */ v(m, {
 									type: "number",
 									min: 1,
 									placeholder: "No limit",
@@ -411,9 +414,9 @@ var be = [
 									onChange: (e) => Y("rateLimit", { requestsPerHour: e.target.value })
 								})
 							}),
-							/* @__PURE__ */ v(d, {
+							/* @__PURE__ */ v(p, {
 								label: "Tokens / Minute",
-								children: /* @__PURE__ */ v(f, {
+								children: /* @__PURE__ */ v(m, {
 									type: "number",
 									min: 1,
 									placeholder: "No limit",
@@ -424,23 +427,23 @@ var be = [
 						]
 					})
 				})] }),
-				H.type === "RESPONSE" && /* @__PURE__ */ y(r, { children: [/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(s, {
+				H.type === "RESPONSE" && /* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(l, { children: [/* @__PURE__ */ y(u, {
 					className: "flex items-center gap-2",
 					children: [/* @__PURE__ */ v(w, { size: 18 }), "Model Usage Allowlist"]
-				}), /* @__PURE__ */ v(a, { children: "Agents in this workspace may only answer with models that match every active model policy. Leave both fields empty to allow all models." })] }), /* @__PURE__ */ y(i, {
+				}), /* @__PURE__ */ v(c, { children: "Agents in this workspace may only answer with models that match every active model policy. Leave both fields empty to allow all models." })] }), /* @__PURE__ */ y(s, {
 					className: "space-y-4",
-					children: [/* @__PURE__ */ v(d, {
+					children: [/* @__PURE__ */ v(p, {
 						label: "Allowed Models",
 						description: "Comma-separated model IDs. End an entry with * to allow a prefix.",
-						children: /* @__PURE__ */ v(f, {
+						children: /* @__PURE__ */ v(m, {
 							placeholder: "e.g., gpt-4o-mini, anthropic.claude-*",
 							value: K.response.allowedModels,
 							onChange: (e) => Y("response", { allowedModels: e.target.value })
 						})
-					}), /* @__PURE__ */ v(d, {
+					}), /* @__PURE__ */ v(p, {
 						label: "Allowed Providers",
 						description: "Comma-separated provider types, e.g. OPENAI, ANTHROPIC, AWS_BEDROCK.",
-						children: /* @__PURE__ */ v(f, {
+						children: /* @__PURE__ */ v(m, {
 							placeholder: "e.g., AWS_BEDROCK, ANTHROPIC",
 							value: K.response.allowedProviders,
 							onChange: (e) => Y("response", { allowedProviders: e.target.value })
@@ -452,7 +455,7 @@ var be = [
 					role: "alert",
 					children: q
 				}),
-				/* @__PURE__ */ v(r, { children: /* @__PURE__ */ v(i, {
+				/* @__PURE__ */ v(o, { children: /* @__PURE__ */ v(s, {
 					className: "pt-6",
 					children: /* @__PURE__ */ y("div", {
 						className: "flex items-start gap-2",
@@ -460,7 +463,7 @@ var be = [
 							type: "checkbox",
 							id: "activate-on-create",
 							checked: X,
-							onChange: (e) => ke(e.target.checked),
+							onChange: (e) => je(e.target.checked),
 							className: "mt-1 h-4 w-4"
 						}), /* @__PURE__ */ y("label", {
 							htmlFor: "activate-on-create",
@@ -478,32 +481,32 @@ var be = [
 			]
 		})
 	});
-	if (Se) return /* @__PURE__ */ v(n, {
+	if (we) return /* @__PURE__ */ v(i, {
 		title: "Loading...",
 		children: /* @__PURE__ */ v("div", { className: "h-96 bg-bg-sunken motion-safe:animate-vc-shimmer rounded-lg" })
 	});
-	if (!F) return /* @__PURE__ */ v(n, {
+	if (!F) return /* @__PURE__ */ v(i, {
 		title: "Policy Not Found",
 		children: /* @__PURE__ */ v(re, {
 			illustration: "empty-generic",
 			title: "Policy Not Found",
 			description: "This policy doesn't exist.",
-			action: /* @__PURE__ */ v(c, {
+			action: /* @__PURE__ */ v(a, {
 				onClick: () => P("policies"),
 				children: "Back to Policies"
 			})
 		})
 	});
-	let Q = h(F.type, be, "CONTENT"), $ = pe(Q, F.config);
-	return /* @__PURE__ */ v(n, {
+	let Q = g(F.type, Se, "CONTENT"), $ = me(Q, F.config);
+	return /* @__PURE__ */ v(i, {
 		title: /* @__PURE__ */ y("div", {
 			className: "flex items-center gap-3",
 			children: [
-				/* @__PURE__ */ v(c, {
+				/* @__PURE__ */ v(a, {
 					variant: "ghost",
 					size: "icon",
 					onClick: () => P("policies"),
-					children: /* @__PURE__ */ v(ge, { size: 20 })
+					children: /* @__PURE__ */ v(ve, { size: 20 })
 				}),
 				/* @__PURE__ */ v("div", {
 					className: "p-2 rounded-lg bg-action-primary-bg/10",
@@ -520,68 +523,77 @@ var be = [
 		}),
 		actions: /* @__PURE__ */ v("div", {
 			className: "flex gap-2",
-			children: z ? /* @__PURE__ */ y(_, { children: [/* @__PURE__ */ v(c, {
+			children: z ? /* @__PURE__ */ y(ge, { children: [/* @__PURE__ */ v(a, {
 				variant: "outline",
 				onClick: () => B(!1),
 				children: "Cancel"
-			}), /* @__PURE__ */ v(c, {
+			}), /* @__PURE__ */ v(a, {
 				leftIcon: /* @__PURE__ */ v(T, { size: 16 }),
-				onClick: je,
+				onClick: Ne,
 				isLoading: R,
 				disabled: !W.name,
 				children: "Save Changes"
-			})] }) : /* @__PURE__ */ y(_, { children: [
-				/* @__PURE__ */ v(c, {
-					variant: Z ? "outline" : "default",
-					leftIcon: /* @__PURE__ */ v(ve, { size: 16 }),
-					onClick: () => void Ne(),
-					isLoading: R,
-					children: Z ? "Deactivate" : "Activate"
+			})] }) : /* @__PURE__ */ y(ge, { children: [
+				/* @__PURE__ */ v(r, {
+					permission: n.POLICY_UPDATE,
+					children: /* @__PURE__ */ v(a, {
+						variant: Z ? "outline" : "default",
+						leftIcon: /* @__PURE__ */ v(be, { size: 16 }),
+						onClick: () => void Fe(),
+						isLoading: R,
+						children: Z ? "Deactivate" : "Activate"
+					})
 				}),
-				/* @__PURE__ */ v(c, {
-					variant: "outline",
-					leftIcon: /* @__PURE__ */ v(_e, { size: 16 }),
-					onClick: Pe,
-					children: "Edit"
+				/* @__PURE__ */ v(r, {
+					permission: n.POLICY_UPDATE,
+					children: /* @__PURE__ */ v(a, {
+						variant: "outline",
+						leftIcon: /* @__PURE__ */ v(ye, { size: 16 }),
+						onClick: Ie,
+						children: "Edit"
+					})
 				}),
-				De ? /* @__PURE__ */ y("div", {
+				ke ? /* @__PURE__ */ y("div", {
 					className: "flex gap-2",
-					children: [/* @__PURE__ */ v(c, {
+					children: [/* @__PURE__ */ v(a, {
 						variant: "outline",
 						size: "sm",
 						onClick: () => V(!1),
 						children: "Cancel"
-					}), /* @__PURE__ */ v(c, {
+					}), /* @__PURE__ */ v(a, {
 						variant: "destructive",
 						size: "sm",
 						onClick: () => {
-							ne("medium"), Me();
+							ne("medium"), Pe();
 						},
-						isLoading: Ee,
+						isLoading: Oe,
 						children: "Confirm Delete"
 					})]
-				}) : /* @__PURE__ */ v(c, {
-					variant: "destructive",
-					leftIcon: /* @__PURE__ */ v(D, { size: 16 }),
-					onClick: () => V(!0),
-					children: "Delete"
+				}) : /* @__PURE__ */ v(r, {
+					permission: n.POLICY_DELETE,
+					children: /* @__PURE__ */ v(a, {
+						variant: "destructive",
+						leftIcon: /* @__PURE__ */ v(D, { size: 16 }),
+						onClick: () => V(!0),
+						children: "Delete"
+					})
 				})
 			] })
 		}),
 		children: /* @__PURE__ */ y("div", {
 			className: "space-y-6",
 			children: [
-				/* @__PURE__ */ v(me, {
+				/* @__PURE__ */ v(he, {
 					icon: /* @__PURE__ */ v(E, { size: 18 }),
 					children: "This is a single guardrail and its rules. Review and tune exactly what it enforces — what content to block, which tools are allowed, the spend or rate limits it applies — then attach it to the agents and bots that should obey it. Policies are how you keep agents safe, compliant and within budget."
 				}),
-				z && /* @__PURE__ */ y(r, { children: [/* @__PURE__ */ v(o, { children: /* @__PURE__ */ v(s, { children: "Edit Policy" }) }), /* @__PURE__ */ y(i, {
+				z && /* @__PURE__ */ y(o, { children: [/* @__PURE__ */ v(l, { children: /* @__PURE__ */ v(u, { children: "Edit Policy" }) }), /* @__PURE__ */ y(s, {
 					className: "space-y-4",
 					children: [
-						/* @__PURE__ */ v(d, {
+						/* @__PURE__ */ v(p, {
 							label: "Policy Name",
 							required: !0,
-							children: /* @__PURE__ */ v(f, {
+							children: /* @__PURE__ */ v(m, {
 								value: W.name,
 								onChange: (e) => G({
 									...W,
@@ -589,9 +601,9 @@ var be = [
 								})
 							})
 						}),
-						/* @__PURE__ */ v(d, {
+						/* @__PURE__ */ v(p, {
 							label: "Description",
-							children: /* @__PURE__ */ v(p, {
+							children: /* @__PURE__ */ v(h, {
 								value: W.description,
 								onChange: (e) => G({
 									...W,
@@ -600,7 +612,7 @@ var be = [
 								rows: 3
 							})
 						}),
-						/* @__PURE__ */ v(d, {
+						/* @__PURE__ */ v(p, {
 							label: "Visibility",
 							children: /* @__PURE__ */ y("select", {
 								className: A,
@@ -634,10 +646,10 @@ var be = [
 				/* @__PURE__ */ y("div", {
 					className: "grid grid-cols-2 md:grid-cols-4 gap-4",
 					children: [
-						/* @__PURE__ */ v(r, {
+						/* @__PURE__ */ v(o, {
 							treatment: "glass",
 							glow: !0,
-							children: /* @__PURE__ */ y(i, {
+							children: /* @__PURE__ */ y(s, {
 								className: "pt-6 text-center",
 								children: [
 									/* @__PURE__ */ v("div", {
@@ -655,7 +667,7 @@ var be = [
 								]
 							})
 						}),
-						/* @__PURE__ */ v(r, { children: /* @__PURE__ */ y(i, {
+						/* @__PURE__ */ v(o, { children: /* @__PURE__ */ y(s, {
 							className: "pt-6 text-center",
 							children: [/* @__PURE__ */ v("p", {
 								className: "text-3xl font-bold text-text-primary capitalize",
@@ -665,7 +677,7 @@ var be = [
 								children: "Visibility"
 							})]
 						}) }),
-						/* @__PURE__ */ v(r, { children: /* @__PURE__ */ y(i, {
+						/* @__PURE__ */ v(o, { children: /* @__PURE__ */ y(s, {
 							className: "pt-6 text-center",
 							children: [/* @__PURE__ */ v("p", {
 								className: "text-3xl font-bold text-text-primary",
@@ -675,7 +687,7 @@ var be = [
 								children: "Revision"
 							})]
 						}) }),
-						/* @__PURE__ */ v(r, { children: /* @__PURE__ */ y(i, {
+						/* @__PURE__ */ v(o, { children: /* @__PURE__ */ y(s, {
 							className: "pt-6 text-center",
 							children: [/* @__PURE__ */ v("p", {
 								className: "text-lg font-bold text-text-primary",
@@ -687,7 +699,7 @@ var be = [
 						}) })
 					]
 				}),
-				/* @__PURE__ */ y(r, { children: [/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ v(s, { children: "Configuration" }), /* @__PURE__ */ v(a, { children: "Current policy configuration" })] }), /* @__PURE__ */ y(i, {
+				/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ y(l, { children: [/* @__PURE__ */ v(u, { children: "Configuration" }), /* @__PURE__ */ v(c, { children: "Current policy configuration" })] }), /* @__PURE__ */ y(s, {
 					className: "space-y-4",
 					children: [$ === null ? /* @__PURE__ */ y("div", {
 						className: "flex items-start gap-2 p-3 bg-status-warning-bg-subtle rounded-lg text-sm",
@@ -716,10 +728,10 @@ var be = [
 						children: /* @__PURE__ */ v("pre", { children: JSON.stringify(F.config, null, 2) })
 					})]
 				})] }),
-				/* @__PURE__ */ y(r, { children: [/* @__PURE__ */ v(o, { children: /* @__PURE__ */ y(s, {
+				/* @__PURE__ */ y(o, { children: [/* @__PURE__ */ v(l, { children: /* @__PURE__ */ y(u, {
 					className: "flex items-center gap-2",
-					children: [/* @__PURE__ */ v(ye, { size: 18 }), "Metadata"]
-				}) }), /* @__PURE__ */ v(i, { children: /* @__PURE__ */ y("div", {
+					children: [/* @__PURE__ */ v(xe, { size: 18 }), "Metadata"]
+				}) }), /* @__PURE__ */ v(s, { children: /* @__PURE__ */ y("div", {
 					className: "grid grid-cols-2 md:grid-cols-4 gap-6 text-sm",
 					children: [
 						/* @__PURE__ */ y("div", { children: [/* @__PURE__ */ v("p", {