@cat-factory/app 0.182.1 → 0.184.0

package/app/stores/ui/modals.ts

@@ -1,5 +1,6 @@
 import { ref } from 'vue'
 import type { DocumentSourceKind, InfraSetupArea, TaskSourceKind } from '~/types/domain'
+import type { InfrastructureTab, ProviderConnectionKind } from '~/types/providerConnections'
 import type { PendingContext } from '~/composables/useContextLinking'
 import {
   DEFAULT_PROVISION_DEEP_LINK_PARAM,
@@ -452,9 +453,8 @@ function createIntegrationPanelModals(resetHubReturn: ResetHubReturn) {
   // model / agent kind, spend + activity per workspace / service / task type). Admin-gated.
   // Distinct from `operatorDashboardOpen`, which answers the deployment-HEALTH question.
   const reportsOpen = ref(false)
-  // Private package registries: the workspace's npm/GitHub-Packages entries agent
-  // containers install with. Opened from the Integrations hub.
-  const packageRegistriesOpen = ref(false)
+  // NOTE: private package registries are no longer a panel of their own — they are a tab of
+  // the Infrastructure window (`infrastructureOpen`), reached from the navbar.
   // API access tokens: the workspace's inbound public-API keys external systems present to
   // the `/api/v1` surface. Opened from the Integrations hub.
   const apiTokensOpen = ref(false)
@@ -505,13 +505,6 @@ function createIntegrationPanelModals(resetHubReturn: ResetHubReturn) {
   function closeReports() {
     reportsOpen.value = false
   }
-  function openPackageRegistries() {
-    resetHubReturn()
-    packageRegistriesOpen.value = true
-  }
-  function closePackageRegistries() {
-    packageRegistriesOpen.value = false
-  }
   function openApiTokens() {
     resetHubReturn()
     apiTokensOpen.value = true
@@ -564,7 +557,6 @@ function createIntegrationPanelModals(resetHubReturn: ResetHubReturn) {
     observabilityConnectionOpen,
     operatorDashboardOpen,
     reportsOpen,
-    packageRegistriesOpen,
     apiTokensOpen,
     modelConfigOpen,
     vendorCredentialsOpen,
@@ -582,8 +574,6 @@ function createIntegrationPanelModals(resetHubReturn: ResetHubReturn) {
     openReports,
     closeReports,
     closeOperatorDashboard,
-    openPackageRegistries,
-    closePackageRegistries,
     openApiTokens,
     closeApiTokens,
     openModelConfig,
@@ -683,13 +673,19 @@ function createSettingsModals(resetHubReturn: ResetHubReturn) {
  */
 function createInfraModals(resetHubReturn: ResetHubReturn) {
   // The single tabbed Infrastructure window — a TOP-LEVEL navbar destination (no longer
-  // reached via the Integrations hub). Two topical tabs: "Agent containers" (the execution
-  // backend + self-hosted runner pool, plus the local-mode warm pool/checkout) and "Test
-  // environments" (the ephemeral-environment provider). `infrastructureOpen` is the modal
-  // flag; `infrastructureTab` selects the tab. `openInfrastructure()` is the navbar entry;
-  // `openProviderConnection(kind)` remains for deep-links (a banner's "Configure…" button).
+  // reached via the Integrations hub). Its topical tabs: "Agent containers" (the execution
+  // backend + self-hosted runner pool, plus the local-mode warm pool/checkout), "Test
+  // environments" (the ephemeral-environment provider), "Shared stacks" (long-lived Compose
+  // infra an environment attaches to) and "Package registries" (the private registries a
+  // checkout installs from). `infrastructureOpen` is the modal flag; `infrastructureTab`
+  // selects the tab. `openInfrastructure()` is the navbar entry; `openProviderConnection(kind)`
+  // remains for deep-links (a banner's "Configure…" button).
+  //
+  // The ref is typed against the FULL `InfrastructureTab` union, not the provider-connection
+  // kinds: a tab this cannot name is a tab nothing can deep-link to, which is how the
+  // non-connection tabs ended up reachable only by opening the window and clicking across.
   const infrastructureOpen = ref(false)
-  const infrastructureTab = ref<'environment' | 'runner-pool'>('runner-pool')
+  const infrastructureTab = ref<InfrastructureTab>('runner-pool')
   // Non-secret prefill captured from the `cat-factory k3s` CLI deep-link (see
   // `consumeK3sSetupDeepLink`). When set, the Test-environments tab's kube engine form seeds the
   // `local-k3s` connection from it; the ServiceAccount token is deliberately NOT in the link (a
@@ -704,12 +700,15 @@ function createInfraModals(resetHubReturn: ResetHubReturn) {
 
   // Top-level navbar entry into the Infrastructure window. No hub-return marker (it isn't
   // reached from the Integrations hub), so the window shows no "Back to Integrations" control.
-  function openInfrastructure(tab: 'environment' | 'runner-pool' = 'runner-pool') {
+  function openInfrastructure(tab: InfrastructureTab = 'runner-pool') {
     resetHubReturn()
     infrastructureTab.value = tab
     infrastructureOpen.value = true
   }
-  function openProviderConnection(kind: 'environment' | 'runner-pool') {
+  // Deep-link into a PROVIDER's tab specifically (a config banner's "Configure…" button), so
+  // this one stays narrowed to the connection kinds — it means "connect this provider", not
+  // "open the window somewhere". Use `openInfrastructure(tab)` for any other tab.
+  function openProviderConnection(kind: ProviderConnectionKind) {
     resetHubReturn()
     infrastructureTab.value = kind
     infrastructureOpen.value = true

package/app/types/agent-prompts.ts

@@ -0,0 +1,13 @@
+// Per-workspace agent system-prompt overrides, mirroring `@cat-factory/contracts`
+// (agent-prompts.ts). An append-only revision log per agent kind: the highest revision is what
+// every run in the workspace sends, and a revision whose `text` is null is the deliberate way
+// back to the prompt the product ships.
+//
+// All wire shapes are sourced from @cat-factory/contracts (single source of truth).
+
+export type {
+  AgentPromptDetail,
+  AgentPromptRevision,
+  AgentPromptSummary,
+  SaveAgentPromptInput,
+} from '@cat-factory/contracts'

package/app/types/providerConnections.ts

@@ -17,6 +17,18 @@ export type {
 /** The two infrastructure providers configured through the generic connect form. */
 export type ProviderConnectionKind = 'environment' | 'runner-pool'
 
+/**
+ * A tab of the Infrastructure window, and the vocabulary `ui.infrastructureTab` selects from.
+ *
+ * Deliberately WIDER than {@link ProviderConnectionKind}: the window also hosts tabs that are
+ * not a provider connection at all (long-lived shared Compose stacks, the workspace's private
+ * package registries). Typing the store's tab ref as the connection kinds alone is what made
+ * those tabs unreachable by deep link — a banner, a command-palette entry or an Integrations-hub
+ * pointer could open the window but never land the user on the tab it meant. Every tab
+ * `InfrastructureWindow.vue` can render must have a name here.
+ */
+export type InfrastructureTab = ProviderConnectionKind | 'shared-stacks' | 'package-registries'
+
 /** A workspace's provider binding, as exposed to clients (never secret values). */
 export interface ProviderConnection {
   /** The runner-backend kind for a runner-pool connection (`manifest` | `kubernetes`). */

package/i18n/locales/de.json

@@ -537,20 +537,22 @@
       "incidentNoun": "der Incident-Provider"
     },
     "packageRegistries": {
-      "title": "Private Package-Registries",
+      "tab": "Package-Registries",
       "intro": "Verbinde die privaten Registries, aus denen deine Repositories installieren. Agenten erhalten sie beim Auschecken eines Repositorys, sodass private Abhängigkeiten während der Installation aufgelöst werden. Tokens sind nur schreibbar: um eines zu ändern, entferne den Eintrag und füge ihn erneut hinzu.",
       "entryNoun": "Registry-Eintrag",
       "list": {
         "heading": "Verbundene Registries",
         "tokenTail": "Token …{tail}",
-        "remove": "Eintrag entfernen"
+        "remove": "Eintrag entfernen",
+        "noScopes": "Keine Scopes (das Token authentifiziert nur dieses Registry)"
       },
       "add": {
         "heading": "Eine Registry hinzufügen",
         "vendor": "Registry",
         "host": "Das Token wird nur an {host} gesendet.",
         "scopes": "Package-Scopes",
-        "scopesHelp": "Kommagetrennte npm-Scopes",
+        "scopesHelp": "Optional. Kommagetrennte npm-Scopes.",
+        "scopesNote": "Optional. Ein hier eingetragener Scope leitet jedes Paket darunter an dieses Registry, sodass ein Scope, der auch öffentlich veröffentlichte Pakete enthält, nicht mehr aufgelöst wird. Lass das Feld leer, wenn das Repository eine eigene .npmrc enthält oder wenn einzelne Abhängigkeiten über ein benanntes Registry-Präfix wie gh: festgelegt werden (pnpm 11.1 oder neuer) - das Token authentifiziert das Registry ohnehin.",
         "token": "Zugriffstoken",
         "save": "Registry hinzufügen"
       },
@@ -2147,10 +2149,6 @@
           "label": "Post-Release-Health",
           "description": "Überwachen Sie Monitore und SLOs, nachdem ein Release ausgeliefert wurde (Datadog)."
         },
-        "packageRegistries": {
-          "label": "Private Package-Registries",
-          "description": "npm- und GitHub-Packages-Tokens, mit denen Agenten private Abhängigkeiten installieren."
-        },
         "apiTokens": {
           "label": "API-Zugriffstokens",
           "description": "Tokens, die externe Systeme vorlegen, um die cat-factory-API aufzurufen."
@@ -3606,7 +3604,9 @@
       "skillNoneAvailable": "Keine Skills verfügbar. Verknüpfe eine Skill-Quelle in den Kontoeinstellungen.",
       "skillMissing": "Dieser Skill ist nicht mehr im Katalog; wähle einen anderen.",
       "skillNeedsPick": "Ein Skill-Schritt braucht einen ausgewählten Skill, bevor du speichern kannst.",
-      "purposeStepsConflict": "Dieser Zweck schreibt keinen Code und führt keine Tests aus, doch die Pipeline enthält noch Implementierungs- oder Testschritte. Entfernen Sie diese oder setzen Sie den Zweck auf Entwicklung."
+      "purposeStepsConflict": "Dieser Zweck schreibt keinen Code und führt keine Tests aus, doch die Pipeline enthält noch Implementierungs- oder Testschritte. Entfernen Sie diese oder setzen Sie den Zweck auf Entwicklung.",
+      "promptEditTooltip": "Systemprompt dieses Agenten bearbeiten",
+      "promptEditedTooltip": "Der Systemprompt dieses Agenten ist für diesen Arbeitsbereich bearbeitet"
     },
     "progress": {
       "status": {
@@ -3680,6 +3680,41 @@
       }
     }
   },
+  "agentPrompt": {
+    "title": "Systemprompt: {agent}",
+    "description": "Ersetzt die Anweisung dieses Agenten für alle Läufe in diesem Arbeitsbereich.",
+    "customized": "Bearbeitet",
+    "usingBuiltin": "Standard",
+    "managedNotice": "Die Plattform hängt an alles, was Sie hier speichern, ihre eigenen, nicht bearbeitbaren Regeln an.",
+    "showAppended": "Angehängten Text anzeigen",
+    "hideAppended": "Angehängten Text ausblenden",
+    "appendedHeading": "Von der Plattform angehängt (nicht bearbeitbar)",
+    "placeholder": "Beschreiben Sie, was dieser Agent tun soll.",
+    "save": "Als neue Version speichern",
+    "revert": "Zurück zum Standard",
+    "loadBuiltin": "Standardtext laden",
+    "showBuiltin": "Mit Standard vergleichen",
+    "hideBuiltin": "Standard ausblenden",
+    "restoringFrom": "Aus Version {n} geladen. Speichern, um sie wieder aktiv zu setzen.",
+    "builtinHeading": "Standardprompt",
+    "historyHeading": "Versionsverlauf",
+    "historyEmpty": "Dieser Agent wurde in diesem Arbeitsbereich noch nie bearbeitet.",
+    "live": "Aktiv",
+    "restore": "Laden",
+    "restoreTooltip": "Diese Version in den Editor laden",
+    "revision": {
+      "edit": "Version {n} (bearbeitet)",
+      "restored": "Version {n} (aus Version {from} wiederhergestellt)",
+      "builtin": "Version {n} (zurück zum Standard)"
+    },
+    "toast": {
+      "saved": "Prompt gespeichert",
+      "reverted": "Zurück zum Standardprompt",
+      "saveFailed": "Prompt konnte nicht gespeichert werden",
+      "loadFailed": "Prompt konnte nicht geladen werden",
+      "conflict": "Jemand anderes hat diesen Prompt geändert. Neu geladen - wenden Sie Ihre Änderung erneut an."
+    }
+  },
   "requirements": {
     "title": "Anforderungsprüfung",
     "iteration": "Iteration {current} / {max}",
@@ -4522,7 +4557,8 @@
         "env_test_infraless": "Nichts zu testen",
         "env_test_not_provisionable": "Umgebungs-Handler nicht konfiguriert",
         "env_test_no_vcs": "Git-Anbieter nicht verbunden",
-        "env_test_connection_failed": "Umgebungsverbindung fehlgeschlagen"
+        "env_test_connection_failed": "Umgebungsverbindung fehlgeschlagen",
+        "prompt_revision_conflict": "Prompt von jemand anderem geändert"
       },
       "description": {
         "dependencies_unmet": "Diese Aufgabe hängt von anderen ab, die noch nicht abgeschlossen sind. Schließe sie ab oder gib sie frei und starte dann erneut.",
@@ -4546,7 +4582,8 @@
         "env_test_not_provisionable_type_mismatch": "Mehr als ein Umgebungs-Handler könnte auf den Bereitstellungstyp dieses Service passen. Lege für diesen Service eine manifest id fest, sodass genau einer aufgelöst wird, oder entferne den überlappenden Handler in Infrastruktur → Testumgebungen.",
         "env_test_no_vcs": "Der Selbsttest benötigt einen Git-Anbieter, um seinen Wegwerf-Branch zu erstellen und zu löschen, aber dieser Workspace ist mit keinem verbunden.",
         "env_test_connection_failed": "Der Umgebungs-Handler dieses Dienstes hat seinen Verbindungstest nicht bestanden. Prüfen Sie Endpunkt, Anmeldedaten und Projekteinstellungen und testen Sie die Verbindung erneut.",
-        "env_test_connection_failed_detail": "Der Umgebungs-Handler dieses Dienstes hat seinen Verbindungstest nicht bestanden: {detail}. Prüfen Sie Endpunkt, Anmeldedaten und Projekteinstellungen und testen Sie die Verbindung erneut."
+        "env_test_connection_failed_detail": "Der Umgebungs-Handler dieses Dienstes hat seinen Verbindungstest nicht bestanden: {detail}. Prüfen Sie Endpunkt, Anmeldedaten und Projekteinstellungen und testen Sie die Verbindung erneut.",
+        "prompt_revision_conflict": "Eine andere Änderung an diesem Prompt war zuerst da. Laden Sie ihn neu und wenden Sie Ihre Änderung darauf erneut an."
       },
       "action": {
         "connectGitHub": "GitHub verbinden",
@@ -5285,7 +5322,12 @@
       "forkOf": "Fork · {name}",
       "newVersionOf": "Neue Version von · {name}",
       "saveVersion": "Neue Version speichern",
-      "hint": "Wähle einen Prompt, um eine ausgelieferte Baseline zu forken oder einen Kandidaten zu versionieren. Jedes Speichern hängt eine unveränderliche Version an, die du testen kannst."
+      "hint": "Wähle einen Prompt, um eine ausgelieferte Baseline zu forken oder einen Kandidaten zu versionieren. Jedes Speichern hängt eine unveränderliche Version an, die du testen kannst.",
+      "liveInWorkspace": "Aktiv",
+      "fromWorkspace": "Ihr Arbeitsbereich",
+      "promoteTitle": "Diesen Prompt für diesen Agenten aktiv schalten",
+      "promoted": "Jetzt der aktive Prompt für {agent}",
+      "promoteFailed": "Prompt konnte nicht aktiviert werden"
     },
     "fixtureKind": {
       "requirements": "Anforderungen",

package/i18n/locales/en.json

@@ -556,7 +556,8 @@
         "env_test_infraless": "Nothing to test",
         "env_test_not_provisionable": "Environment handler not configured",
         "env_test_no_vcs": "Git provider not connected",
-        "env_test_connection_failed": "Environment connection failed"
+        "env_test_connection_failed": "Environment connection failed",
+        "prompt_revision_conflict": "Prompt changed by someone else"
       },
       "description": {
         "dependencies_unmet": "This task depends on others that aren't finished yet. Complete or unblock them, then start it again.",
@@ -583,7 +584,8 @@
         "env_test_connection_failed_detail": "The environment handler for this service failed its connection test: {detail}. Check its endpoint, credentials and project settings, then re-test the connection.",
         "@env_test_connection_failed_detail": {
           "description": "Keep the named placeholder for the failure detail intact (the environment provider's connection-test error message, injected at runtime)."
-        }
+        },
+        "prompt_revision_conflict": "Another edit to this prompt landed first. Reload it and re-apply your change on top."
       },
       "action": {
         "connectGitHub": "Connect GitHub",
@@ -2163,10 +2165,6 @@
           "label": "Post-release health",
           "description": "Watch monitors and SLOs after a release ships (Datadog)."
         },
-        "packageRegistries": {
-          "label": "Private package registries",
-          "description": "npm and GitHub Packages tokens agents use to install private dependencies."
-        },
         "apiTokens": {
           "label": "API access tokens",
           "description": "Tokens external systems present to call the cat-factory API."
@@ -2813,20 +2811,22 @@
       "incidentNoun": "the incident provider"
     },
     "packageRegistries": {
-      "title": "Private package registries",
+      "tab": "Package registries",
       "intro": "Connect the private registries your repositories install from. Agents receive them when they check out a repository, so private dependencies resolve during installs. Tokens are write-only: to change one, remove the entry and add it again.",
       "entryNoun": "registry entry",
       "list": {
         "heading": "Connected registries",
         "tokenTail": "token …{tail}",
-        "remove": "Remove entry"
+        "remove": "Remove entry",
+        "noScopes": "No scopes (the token authenticates this registry only)"
       },
       "add": {
         "heading": "Add a registry",
         "vendor": "Registry",
         "host": "The token is sent only to {host}.",
         "scopes": "Package scopes",
-        "scopesHelp": "Comma-separated npm scopes",
+        "scopesHelp": "Optional. Comma-separated npm scopes.",
+        "scopesNote": "Optional. A scope listed here routes every package under it to this registry, so a scope that also holds publicly published packages stops resolving. Leave it empty when the repository commits its own .npmrc, or when single dependencies are pinned with a named-registry prefix such as gh: (pnpm 11.1 or newer) - the token authenticates the registry either way.",
         "token": "Access token",
         "save": "Add registry"
       },
@@ -4034,7 +4034,9 @@
       "skillNoneAvailable": "No skills available. Link a skill source in account settings.",
       "skillMissing": "This skill is no longer in the catalog; pick another.",
       "skillNeedsPick": "A Skill step needs a skill selected before you can save.",
-      "purposeStepsConflict": "This purpose writes no code and runs no tests, but the pipeline still has implementation or testing steps. Remove them or switch the purpose to Build."
+      "purposeStepsConflict": "This purpose writes no code and runs no tests, but the pipeline still has implementation or testing steps. Remove them or switch the purpose to Build.",
+      "promptEditTooltip": "Edit this agent's system prompt",
+      "promptEditedTooltip": "This agent's system prompt is edited for this workspace"
     },
     "progress": {
       "status": {
@@ -4108,6 +4110,50 @@
       }
     }
   },
+  "agentPrompt": {
+    "title": "System prompt: {agent}",
+    "description": "Replace what this agent is told to do, for every run in this workspace.",
+    "customized": "Edited",
+    "usingBuiltin": "Built-in",
+    "@usingBuiltin": {
+      "description": "Badge meaning this agent runs the prompt the product ships. \"Built-in\" refers to that shipped prompt specifically, not to a user-set default."
+    },
+    "managedNotice": "The platform appends its own non-editable rules to whatever you save here.",
+    "showAppended": "Show what gets appended",
+    "hideAppended": "Hide what gets appended",
+    "appendedHeading": "Appended by the platform (not editable)",
+    "placeholder": "Describe what this agent should do.",
+    "save": "Save as new version",
+    "revert": "Back to built-in",
+    "loadBuiltin": "Load built-in text",
+    "showBuiltin": "Compare with built-in",
+    "hideBuiltin": "Hide built-in",
+    "restoringFrom": "Loaded from version {n}. Save to make it live again.",
+    "builtinHeading": "Built-in prompt",
+    "historyHeading": "Version history",
+    "historyEmpty": "This agent has never been edited in this workspace.",
+    "live": "Live",
+    "@live": {
+      "description": "Adjective, not a verb: labels the revision that is currently in effect."
+    },
+    "restore": "Load",
+    "@restore": {
+      "description": "Verb, imperative: loads the chosen revision into the editor. It does NOT save it - the user still presses Save."
+    },
+    "restoreTooltip": "Load this version into the editor",
+    "revision": {
+      "edit": "Version {n} (edited)",
+      "restored": "Version {n} (restored from version {from})",
+      "builtin": "Version {n} (back to built-in)"
+    },
+    "toast": {
+      "saved": "Prompt saved",
+      "reverted": "Back to the built-in prompt",
+      "saveFailed": "Couldn't save the prompt",
+      "loadFailed": "Couldn't load the prompt",
+      "conflict": "Someone else changed this prompt. Reloaded - re-apply your edit."
+    }
+  },
   "riskPolicy": {
     "health": {
       "title": "Risk policy updates",
@@ -5241,7 +5287,18 @@
       "forkOf": "Fork · {name}",
       "newVersionOf": "New version of · {name}",
       "saveVersion": "Save new version",
-      "hint": "Pick a prompt to fork a shipped baseline or version a candidate. Each save appends an immutable version you can put under test."
+      "hint": "Pick a prompt to fork a shipped baseline or version a candidate. Each save appends an immutable version you can put under test.",
+      "liveInWorkspace": "Live",
+      "@liveInWorkspace": {
+        "description": "Adjective, not a verb: badges the prompt version this workspace is currently running."
+      },
+      "fromWorkspace": "Your workspace",
+      "@fromWorkspace": {
+        "description": "Badge on a prompt version that came from this workspace's own edits, as opposed to one the product ships."
+      },
+      "promoteTitle": "Make this the live prompt for this agent",
+      "promoted": "Now the live prompt for {agent}",
+      "promoteFailed": "Couldn't promote this prompt"
     },
     "fixtureKind": {
       "requirements": "requirements",

package/i18n/locales/es.json

@@ -511,7 +511,8 @@
         "env_test_infraless": "Nada que probar",
         "env_test_not_provisionable": "Gestor de entorno no configurado",
         "env_test_no_vcs": "Proveedor de Git no conectado",
-        "env_test_connection_failed": "Fallo de conexión del entorno"
+        "env_test_connection_failed": "Fallo de conexión del entorno",
+        "prompt_revision_conflict": "Otra persona cambió el prompt"
       },
       "description": {
         "dependencies_unmet": "Esta tarea depende de otras que aún no están terminadas. Complétalas o desbloquéalas y vuelve a iniciarla.",
@@ -535,7 +536,8 @@
         "env_test_not_provisionable_type_mismatch": "Más de un gestor de entorno podría coincidir con el tipo de aprovisionamiento de este servicio. Fija un manifest id para este servicio de modo que se resuelva exactamente uno, o elimina el gestor superpuesto en Infraestructura → Entornos de prueba.",
         "env_test_no_vcs": "La autoprueba necesita un proveedor de Git para crear y eliminar su rama desechable, pero este espacio de trabajo no está conectado a ninguno.",
         "env_test_connection_failed": "El gestor de entornos de este servicio no superó su prueba de conexión. Revisa su endpoint, sus credenciales y la configuración del proyecto, y vuelve a probar la conexión.",
-        "env_test_connection_failed_detail": "El gestor de entornos de este servicio no superó su prueba de conexión: {detail}. Revisa su endpoint, sus credenciales y la configuración del proyecto, y vuelve a probar la conexión."
+        "env_test_connection_failed_detail": "El gestor de entornos de este servicio no superó su prueba de conexión: {detail}. Revisa su endpoint, sus credenciales y la configuración del proyecto, y vuelve a probar la conexión.",
+        "prompt_revision_conflict": "Otra edición de este prompt llegó primero. Recárgalo y vuelve a aplicar tu cambio encima."
       },
       "action": {
         "connectGitHub": "Conectar GitHub",
@@ -2087,10 +2089,6 @@
           "label": "Salud posterior al lanzamiento",
           "description": "Vigila los monitores y SLO después de publicar una versión (Datadog)."
         },
-        "packageRegistries": {
-          "label": "Registros privados de paquetes",
-          "description": "Tokens de npm y GitHub Packages que los agentes usan para instalar dependencias privadas."
-        },
         "apiTokens": {
           "label": "Tokens de acceso a la API",
           "description": "Tokens que los sistemas externos presentan para llamar a la API de cat-factory."
@@ -2594,20 +2592,22 @@
       "incidentNoun": "el proveedor de incidencias"
     },
     "packageRegistries": {
-      "title": "Registros privados de paquetes",
+      "tab": "Registros de paquetes",
       "intro": "Conecta los registros privados desde los que instalan tus repositorios. Los agentes los reciben al hacer checkout de un repositorio, de modo que las dependencias privadas se resuelven durante la instalación. Los tokens son de solo escritura: para cambiar uno, elimina la entrada y vuelve a agregarla.",
       "entryNoun": "entrada de registro",
       "list": {
         "heading": "Registros conectados",
         "tokenTail": "token …{tail}",
-        "remove": "Eliminar entrada"
+        "remove": "Eliminar entrada",
+        "noScopes": "Sin ámbitos (el token solo autentica este registro)"
       },
       "add": {
         "heading": "Agregar un registro",
         "vendor": "Registro",
         "host": "El token solo se envía a {host}.",
         "scopes": "Ámbitos de paquetes",
-        "scopesHelp": "Ámbitos de npm separados por comas",
+        "scopesHelp": "Opcional. Ámbitos de npm separados por comas.",
+        "scopesNote": "Opcional. Un ámbito indicado aquí dirige a este registro todos los paquetes que contiene, de modo que un ámbito que también incluye paquetes publicados publicamente deja de resolverse. Déjalo vacío cuando el repositorio incluya su propio .npmrc o cuando las dependencias individuales se fijen con un prefijo de registro con nombre como gh: (pnpm 11.1 o posterior); el token autentica el registro en cualquier caso.",
         "token": "Token de acceso",
         "save": "Agregar registro"
       },
@@ -3920,7 +3920,9 @@
       "skillNoneAvailable": "No hay habilidades disponibles. Vincula una fuente de habilidades en la configuración de la cuenta.",
       "skillMissing": "Esta habilidad ya no está en el catálogo; elige otra.",
       "skillNeedsPick": "Un paso Skill necesita una habilidad seleccionada antes de poder guardar.",
-      "purposeStepsConflict": "Este propósito no escribe código ni ejecuta pruebas, pero la canalización todavía tiene pasos de implementación o de prueba. Quítalos o cambia el propósito a Desarrollo."
+      "purposeStepsConflict": "Este propósito no escribe código ni ejecuta pruebas, pero la canalización todavía tiene pasos de implementación o de prueba. Quítalos o cambia el propósito a Desarrollo.",
+      "promptEditTooltip": "Editar el prompt del sistema de este agente",
+      "promptEditedTooltip": "El prompt del sistema de este agente está editado para este espacio de trabajo"
     },
     "progress": {
       "status": {
@@ -3994,6 +3996,41 @@
       }
     }
   },
+  "agentPrompt": {
+    "title": "Prompt del sistema: {agent}",
+    "description": "Sustituye lo que se le pide a este agente en todas las ejecuciones de este espacio de trabajo.",
+    "customized": "Editado",
+    "usingBuiltin": "Predeterminado",
+    "managedNotice": "La plataforma añade sus propias reglas, no editables, a todo lo que guardes aquí.",
+    "showAppended": "Ver el texto añadido",
+    "hideAppended": "Ocultar el texto añadido",
+    "appendedHeading": "Añadido por la plataforma (no editable)",
+    "placeholder": "Describe qué debe hacer este agente.",
+    "save": "Guardar como versión nueva",
+    "revert": "Volver al predeterminado",
+    "loadBuiltin": "Cargar el texto predeterminado",
+    "showBuiltin": "Comparar con el predeterminado",
+    "hideBuiltin": "Ocultar el predeterminado",
+    "restoringFrom": "Cargado desde la versión {n}. Guarda para volver a activarla.",
+    "builtinHeading": "Prompt predeterminado",
+    "historyHeading": "Historial de versiones",
+    "historyEmpty": "Este agente nunca se ha editado en este espacio de trabajo.",
+    "live": "Activa",
+    "restore": "Cargar",
+    "restoreTooltip": "Cargar esta versión en el editor",
+    "revision": {
+      "edit": "Versión {n} (editada)",
+      "restored": "Versión {n} (restaurada desde la versión {from})",
+      "builtin": "Versión {n} (vuelta al predeterminado)"
+    },
+    "toast": {
+      "saved": "Prompt guardado",
+      "reverted": "De vuelta al prompt predeterminado",
+      "saveFailed": "No se pudo guardar el prompt",
+      "loadFailed": "No se pudo cargar el prompt",
+      "conflict": "Otra persona cambió este prompt. Se recargó: vuelve a aplicar tu edición."
+    }
+  },
   "palette": {
     "hint": "Haz clic en un agente para añadirlo al pipeline.",
     "customAgents": "Agentes personalizados"
@@ -5022,7 +5059,12 @@
       "forkOf": "Bifurcación · {name}",
       "newVersionOf": "Nueva versión de · {name}",
       "saveVersion": "Guardar nueva versión",
-      "hint": "Elige un prompt para bifurcar una base publicada o versionar un candidato. Cada guardado añade una versión inmutable que puedes poner a prueba."
+      "hint": "Elige un prompt para bifurcar una base publicada o versionar un candidato. Cada guardado añade una versión inmutable que puedes poner a prueba.",
+      "liveInWorkspace": "Activo",
+      "fromWorkspace": "Tu espacio de trabajo",
+      "promoteTitle": "Convertir en el prompt activo de este agente",
+      "promoted": "Ahora es el prompt activo de {agent}",
+      "promoteFailed": "No se pudo activar este prompt"
     },
     "fixtureKind": {
       "requirements": "requisitos",