@iblai/iblai-js 1.19.0 → 1.19.2

package/dist/data-layer/playwright/chat-privacy-helpers.d.ts

@@ -0,0 +1,127 @@
+import { Locator, Page } from '@playwright/test';
+/**
+ * Chat-privacy Playwright bindings.
+ *
+ * Three surfaces, three groups of helpers:
+ *
+ *  1. **Header toggle** — the nav-bar `ChatPrivacyToggle` (`<HatGlasses />`
+ *     icon-button that morphs into the "Private Mode" pill).
+ *  2. **User profile** — the "Private Mode" tab in `UserProfileModal`
+ *     (three radio-card options: Normal / Anonymized / Disabled).
+ *  3. **Tenant admin** — the "Allow users to control chat privacy" row in
+ *     the Advanced settings tab (`<Switch>`).
+ *
+ * All selectors target stable hooks — primarily `data-testid` plus the
+ * `data-state` / `data-source` / `aria-pressed` attributes the components
+ * already expose. Avoid asserting on visible copy directly (it changes);
+ * the label maps below are kept for readable assertions on the rare cases
+ * where copy IS the thing we want to lock.
+ */
+export declare const CHAT_PRIVACY_LABELS: {
+    readonly toggle: {
+        /** Title of the mid-session confirmation dialog. */
+        readonly dialogTitle: "Enable Private Mode for this chat?";
+        /** Label on the dialog's confirm button (matches both idle + busy state via regex). */
+        readonly dialogConfirm: RegExp;
+    };
+    readonly profileTab: {
+        /** Tab name in the user profile modal sidebar. */
+        readonly tabName: "Private Mode";
+        /** Section heading inside the tab body. */
+        readonly sectionHeading: "Default Private Mode";
+        /** Label text on each radio card. Kept in case the test wants to assert
+         *  copy explicitly — the click + read paths use the testid instead. */
+        readonly cards: {
+            readonly normal: "Normal";
+            readonly anonymized: "Anonymized";
+            readonly disabled: "Disabled";
+        };
+    };
+    readonly tenantToggle: {
+        /** Visible row label. */
+        readonly rowLabel: "Allow users to control chat privacy";
+    };
+};
+/** The four `effective.source` values the chat-privacy resolver returns. */
+export type ChatPrivacySource = 'mentor' | 'tenant' | 'user' | 'session' | 'default';
+/** The user-pickable modes on the profile tab. */
+export type ChatPrivacyMode = 'normal' | 'anonymized' | 'disabled';
+/** `data-state` on the header toggle. */
+export type ChatPrivacyToggleState = 'on' | 'off';
+/**
+ * Locator for the nav-bar Private-Mode toggle. The toggle is hidden below
+ * the `md` breakpoint — assertions in mobile contexts should use
+ * `expectChatPrivacyToggleVisible(scope, false)`.
+ */
+export declare function getChatPrivacyToggle(scope: Page | Locator): Locator;
+export declare function expectChatPrivacyToggleVisible(scope: Page | Locator, visible: boolean): Promise<void>;
+/**
+ * Assert the toggle is on / off via `data-state` (driven by the resolved
+ * effective mode + the local optimistic overlay).
+ */
+export declare function expectChatPrivacyState(scope: Page | Locator, state: ChatPrivacyToggleState): Promise<void>;
+/**
+ * Assert the resolved precedence-source via `data-source` (mentor / tenant
+ * / user / session / default). Useful for verifying the chat-privacy-
+ * effective endpoint resolved to the expected tier.
+ */
+export declare function expectChatPrivacySource(scope: Page | Locator, source: ChatPrivacySource): Promise<void>;
+/**
+ * Lock state is signalled via `aria-disabled` (the component uses
+ * `aria-disabled` instead of native `disabled` so the source-aware tooltip
+ * stays reachable on the locked pill).
+ */
+export declare function expectChatPrivacyLocked(scope: Page | Locator, locked: boolean): Promise<void>;
+/**
+ * Click the toggle. Covers two scenarios:
+ *  - Off → on (with no user messages) → starts a fresh private session.
+ *  - On (user-initiated, no user messages) → starts a fresh normal session.
+ * Use `confirmEnableChatPrivacyMidSession` for the mid-conversation flow.
+ */
+export declare function clickChatPrivacyToggle(scope: Page | Locator): Promise<void>;
+/** Locator for the AlertDialog content that the mid-session enable opens. */
+export declare function getChatPrivacyConfirmDialog(scope: Page | Locator): Locator;
+export declare function expectChatPrivacyConfirmDialogOpen(scope: Page | Locator, open: boolean): Promise<void>;
+/**
+ * Mid-conversation enable flow:
+ *  1. Click the toggle (opens the confirm dialog).
+ *  2. Click the "Enable Private Mode" action.
+ * The session-level disable-chathistory POST is one-way per spec; the
+ * helper resolves once the dialog closes after a successful confirm.
+ */
+export declare function confirmEnableChatPrivacyMidSession(scope: Page | Locator): Promise<void>;
+/** Cancel the confirm dialog without enabling. */
+export declare function cancelEnableChatPrivacyMidSession(scope: Page | Locator): Promise<void>;
+/**
+ * Switch to the Private Mode tab inside the user profile modal. Assumes
+ * the modal is already open. The tab only appears when the tenant has
+ * `allow_user_chat_privacy_control` on, so a `false` return from
+ * `isPrivateModeTabVisible` is a meaningful state, not an error.
+ */
+export declare function isPrivateModeTabVisible(page: Page): Promise<boolean>;
+export declare function switchToPrivateModeTab(page: Page): Promise<void>;
+/** Locator for one of the three radio cards. */
+export declare function getPrivateModeCard(scope: Page | Locator, mode: ChatPrivacyMode): Locator;
+/**
+ * Pick a mode by clicking its card. Resolves once the card flips into
+ * the selected state via `aria-pressed="true"` — i.e. the mutation came
+ * back and the local pending state caught up.
+ */
+export declare function selectPrivateMode(scope: Page | Locator, mode: ChatPrivacyMode): Promise<void>;
+/** Assert which mode is currently selected. Uses `aria-pressed` + `data-state`. */
+export declare function expectPrivateModeSelected(scope: Page | Locator, mode: ChatPrivacyMode): Promise<void>;
+/** Assert every card is rendered. Useful as a "tab loaded" sanity check. */
+export declare function expectPrivateModeTabReady(scope: Page | Locator): Promise<void>;
+/** Locator for the tenant-wide "Allow users to control chat privacy" switch. */
+export declare function getTenantChatPrivacySwitch(scope: Page | Locator): Locator;
+/** Locator for the surrounding row (useful for scoping label / spinner queries). */
+export declare function getTenantChatPrivacyRow(scope: Page | Locator): Locator;
+export declare function expectTenantChatPrivacyVisible(scope: Page | Locator, visible: boolean): Promise<void>;
+/** Assert the tenant gate's current state via `aria-checked` on the Radix switch. */
+export declare function expectTenantChatPrivacyEnabled(scope: Page | Locator, enabled: boolean): Promise<void>;
+/**
+ * Flip the tenant gate to the desired state. Idempotent — does nothing if
+ * the switch is already in the target state. Backend rejects this for
+ * non-admins (403) and the component surfaces an error toast in that case.
+ */
+export declare function setTenantChatPrivacyEnabled(scope: Page | Locator, enabled: boolean): Promise<void>;

package/dist/data-layer/playwright/index.d.ts

@@ -21,8 +21,10 @@ export type { AgentPromptField, SkillFormValues } from './claw-sandbox-helpers';
 export { navigateToAuditLog, verifyAuditLogTableVisible, getAuditLogRowCount, verifyAuditLogEntryStructure, verifyAuditLogEmptyState, verifyAuditLogPermissionError, verifyAuditLogGenericError, verifyAuditLogLoading, waitForAuditLogDataLoaded, filterByAction, filterByActor, getAvailableActors, filterByDateRange, clearDateRangeFilter, getPaginationInfo, goToNextPage, goToPreviousPage, goToFirstPage, goToLastPage, goToPage, verifyCurrentPage, isOnLastPage, isOnFirstPage, navigateToAuditLogAndWaitForData, filterByActionAndVerify, filterByActorAndVerify, } from './audit-log-helpers';
 export { getCurrentTenantShowPaywall, creditBalanceTrigger, creditBalancePanel, creditBalancePlanBadge, expectCreditBalanceVisibilityForTenant, openCreditBalanceDropdown, waitForCreditBalanceLoaded, closeCreditBalanceDropdown, getCreditBalancePlanLabel, getCreditBalanceRemaining, expectCreditBalancePanelForFreePlan, expectCreditBalancePanelForTrialPlan, expectCreditBalancePanelForPremiumPlan, expectCreditBalanceForCurrentPlan, } from './credit-balance-helpers';
 export type { CreditBalancePlan } from './credit-balance-helpers';
-export { PRIVACY_LABELS, isPrivacyTabVisible, switchToPrivacyTab, getPrivacyRouterSwitch, setPrivacyRouterEnabled, expectPrivacyRouterEnabled, expectPrivacyFieldsHidden, expectPrivacyFieldsVisible, selectPrivacyAction, setBlockMessage, getEntityChip, setEntitySelected, expectEntitySelected, getOutputFilterSwitch, setOutputFilterEnabled, expectOutputFilterEnabled, } from './privacy-tab-helpers';
+export { PRIVACY_LABELS, isPrivacyTabVisible, switchToPrivacyTab, expectPrivacyFieldsHidden, expectPrivacyFieldsVisible, selectPrivacyAction, setBlockMessage, getEntityChip, setEntitySelected, expectEntitySelected, getOutputFilterSwitch, setOutputFilterEnabled, expectOutputFilterEnabled, } from './privacy-tab-helpers';
 export type { PrivacyAction, PrivacyEntity } from './privacy-tab-helpers';
+export { CHAT_PRIVACY_LABELS, getChatPrivacyToggle, expectChatPrivacyToggleVisible, expectChatPrivacyState, expectChatPrivacySource, expectChatPrivacyLocked, clickChatPrivacyToggle, getChatPrivacyConfirmDialog, expectChatPrivacyConfirmDialogOpen, confirmEnableChatPrivacyMidSession, cancelEnableChatPrivacyMidSession, isPrivateModeTabVisible, switchToPrivateModeTab, getPrivateModeCard, selectPrivateMode, expectPrivateModeSelected, expectPrivateModeTabReady, getTenantChatPrivacySwitch, getTenantChatPrivacyRow, expectTenantChatPrivacyVisible, expectTenantChatPrivacyEnabled, setTenantChatPrivacyEnabled, } from './chat-privacy-helpers';
+export type { ChatPrivacyMode, ChatPrivacySource, ChatPrivacyToggleState, } from './chat-privacy-helpers';
 export { VOICE_LABELS, isVoiceTabVisible, switchToVoiceTab, switchToVoiceSubTab, getVoiceProviderCard, selectVoiceProvider, expectVoiceProviderSelected, openMentorVoicePicker, openCallConfigVoicePicker, previewMentorVoiceInline, previewCallConfigVoiceInline, expectMentorVoiceTriggerShows, expectCallConfigVoiceTriggerShows, searchVoices, getVoiceRow, expectVoiceVisible, selectVoice, previewVoice, saveVoiceSettings, getCallConfigForm, expectCallConfigVisible, selectCallMode, setCallLanguage, selectLlmProvider, selectTtsProvider, selectSttProvider, expectTtsSelectDisabled, expectSttSelectDisabled, setUseFunctionCallingEnabled, setEnableVideo, saveCallConfig, resetCallConfig, } from './voice-tab-helpers';
 export type { VoiceProvider, CallMode, TtsProvider, SttProvider, LlmProvider, } from './voice-tab-helpers';
 export { SCREENSHARE_LABELS, isScreenShareTabVisible, switchToScreenShareTab, openScreenSharePromptEditor, setScreenSharePrompt, saveScreenSharePrompts, expectScreenShareDisabledHint, } from './screenshare-tab-helpers';

package/dist/data-layer/playwright/privacy-tab-helpers.d.ts

@@ -14,7 +14,6 @@ import { Locator, Page } from '@playwright/test';
 export declare const PRIVACY_LABELS: {
     readonly tabName: "Privacy";
     readonly headerTitle: "Privacy";
-    readonly routerLabel: "Enable Privacy Router";
     readonly actionLabel: "When PII is detected";
     readonly blockMessageLabel: "Block Message";
     readonly entitiesLabel: "Entity Types";
@@ -51,20 +50,16 @@ export type PrivacyEntity = keyof typeof PRIVACY_LABELS.entityChips;
 export declare function isPrivacyTabVisible(page: Page): Promise<boolean>;
 /**
  * Switch to the Privacy tab. Assumes the Edit Mentor dialog is open.
+ *
+ * The Privacy Router on/off toggle lives on the Settings tab — this tab
+ * only shows dependent PII-handling fields when the router is enabled.
+ * Confirm landing via the tab body's testid rather than any inner label,
+ * since the field labels are conditional.
  */
 export declare function switchToPrivacyTab(page: Page): Promise<void>;
-/**
- * Locator for the master privacy-router switch.
- */
-export declare function getPrivacyRouterSwitch(scope: Page | Locator): Locator;
-/**
- * Click the master toggle until it matches the desired state.
- */
-export declare function setPrivacyRouterEnabled(scope: Page | Locator, enabled: boolean): Promise<void>;
-export declare function expectPrivacyRouterEnabled(scope: Page | Locator, enabled: boolean): Promise<void>;
 /**
  * Assert that all dependent privacy fields are hidden — the case when the
- * master toggle is off.
+ * Privacy Router is disabled (on the Settings tab).
  */
 export declare function expectPrivacyFieldsHidden(scope: Page | Locator): Promise<void>;
 /**

package/dist/playwright/index.cjs

@@ -3120,7 +3120,6 @@ async function expectCreditBalanceForCurrentPlan(page, options) {
 const PRIVACY_LABELS = {
     tabName: 'Privacy',
     headerTitle: 'Privacy',
-    routerLabel: 'Enable Privacy Router',
     actionLabel: 'When PII is detected',
     blockMessageLabel: 'Block Message',
     entitiesLabel: 'Entity Types',
@@ -3152,7 +3151,7 @@ const PRIVACY_LABELS = {
  * reach DOM that Radix renders outside the dialog subtree (popovers,
  * select options, etc.).
  */
-function asPage$3(scope) {
+function asPage$4(scope) {
     return 'page' in scope ? scope.page() : scope;
 }
 /**
@@ -3172,45 +3171,22 @@ async function isPrivacyTabVisible(page) {
 }
 /**
  * Switch to the Privacy tab. Assumes the Edit Mentor dialog is open.
+ *
+ * The Privacy Router on/off toggle lives on the Settings tab — this tab
+ * only shows dependent PII-handling fields when the router is enabled.
+ * Confirm landing via the tab body's testid rather than any inner label,
+ * since the field labels are conditional.
  */
 async function switchToPrivacyTab(page) {
     const tab = page.getByRole('tab', { name: PRIVACY_LABELS.tabName, exact: true });
     await test$1.expect(tab).toBeVisible({ timeout: 10000 });
     await tab.click();
-    // The master toggle label is unique to the privacy tab — its presence
-    // confirms we landed on the right pane.
-    await test$1.expect(page.getByText(PRIVACY_LABELS.routerLabel)).toBeVisible({
-        timeout: 10000,
-    });
+    await test$1.expect(page.getByTestId('privacy-tab-body')).toBeVisible({ timeout: 10000 });
     logger.info('Switched to Privacy tab');
 }
-/**
- * Locator for the master privacy-router switch.
- */
-function getPrivacyRouterSwitch(scope) {
-    return scope.getByRole('switch', { name: /Privacy router (enabled|disabled)/ });
-}
-/**
- * Click the master toggle until it matches the desired state.
- */
-async function setPrivacyRouterEnabled(scope, enabled) {
-    const toggle = getPrivacyRouterSwitch(scope);
-    await test$1.expect(toggle).toBeVisible({ timeout: 10000 });
-    const isChecked = (await toggle.getAttribute('aria-checked')) === 'true';
-    if (isChecked !== enabled) {
-        await toggle.click();
-        await test$1.expect(toggle).toHaveAttribute('aria-checked', String(enabled), {
-            timeout: 10000,
-        });
-    }
-    logger.info(`Privacy router set to ${enabled ? 'enabled' : 'disabled'}`);
-}
-async function expectPrivacyRouterEnabled(scope, enabled) {
-    await test$1.expect(getPrivacyRouterSwitch(scope)).toHaveAttribute('aria-checked', String(enabled));
-}
 /**
  * Assert that all dependent privacy fields are hidden — the case when the
- * master toggle is off.
+ * Privacy Router is disabled (on the Settings tab).
  */
 async function expectPrivacyFieldsHidden(scope) {
     await test$1.expect(scope.getByText(PRIVACY_LABELS.actionLabel)).toBeHidden();
@@ -3236,7 +3212,7 @@ async function selectPrivacyAction(scope, action) {
     await trigger.click();
     // Radix Select renders options in a portal at the document root, so we
     // always look them up on the Page — never on the dialog Locator.
-    const option = asPage$3(scope).getByRole('option', {
+    const option = asPage$4(scope).getByRole('option', {
         name: PRIVACY_LABELS.actionOptions[action],
     });
     await test$1.expect(option).toBeVisible({ timeout: 5000 });
@@ -3305,6 +3281,264 @@ async function expectOutputFilterEnabled(scope, enabled) {
     await test$1.expect(getOutputFilterSwitch(scope)).toHaveAttribute('aria-checked', String(enabled));
 }
 
+/**
+ * Chat-privacy Playwright bindings.
+ *
+ * Three surfaces, three groups of helpers:
+ *
+ *  1. **Header toggle** — the nav-bar `ChatPrivacyToggle` (`<HatGlasses />`
+ *     icon-button that morphs into the "Private Mode" pill).
+ *  2. **User profile** — the "Private Mode" tab in `UserProfileModal`
+ *     (three radio-card options: Normal / Anonymized / Disabled).
+ *  3. **Tenant admin** — the "Allow users to control chat privacy" row in
+ *     the Advanced settings tab (`<Switch>`).
+ *
+ * All selectors target stable hooks — primarily `data-testid` plus the
+ * `data-state` / `data-source` / `aria-pressed` attributes the components
+ * already expose. Avoid asserting on visible copy directly (it changes);
+ * the label maps below are kept for readable assertions on the rare cases
+ * where copy IS the thing we want to lock.
+ */
+const CHAT_PRIVACY_LABELS = {
+    toggle: {
+        /** Title of the mid-session confirmation dialog. */
+        dialogTitle: 'Enable Private Mode for this chat?',
+        /** Label on the dialog's confirm button (matches both idle + busy state via regex). */
+        dialogConfirm: /Enable Private Mode|Enabling…/,
+    },
+    profileTab: {
+        /** Tab name in the user profile modal sidebar. */
+        tabName: 'Private Mode',
+        /** Section heading inside the tab body. */
+        sectionHeading: 'Default Private Mode',
+        /** Label text on each radio card. Kept in case the test wants to assert
+         *  copy explicitly — the click + read paths use the testid instead. */
+        cards: {
+            normal: 'Normal',
+            anonymized: 'Anonymized',
+            disabled: 'Disabled',
+        },
+    },
+    tenantToggle: {
+        /** Visible row label. */
+        rowLabel: 'Allow users to control chat privacy',
+    },
+};
+function asPage$3(scope) {
+    return 'page' in scope ? scope.page() : scope;
+}
+// ──────────────────────────────────────────────────────────────────────
+// 1. Header toggle (ChatPrivacyToggle)
+// ──────────────────────────────────────────────────────────────────────
+/**
+ * Locator for the nav-bar Private-Mode toggle. The toggle is hidden below
+ * the `md` breakpoint — assertions in mobile contexts should use
+ * `expectChatPrivacyToggleVisible(scope, false)`.
+ */
+function getChatPrivacyToggle(scope) {
+    return scope.getByTestId('chat-privacy-toggle');
+}
+async function expectChatPrivacyToggleVisible(scope, visible) {
+    if (visible) {
+        await test$1.expect(getChatPrivacyToggle(scope)).toBeVisible({ timeout: 10000 });
+    }
+    else {
+        await test$1.expect(getChatPrivacyToggle(scope)).toBeHidden();
+    }
+}
+/**
+ * Assert the toggle is on / off via `data-state` (driven by the resolved
+ * effective mode + the local optimistic overlay).
+ */
+async function expectChatPrivacyState(scope, state) {
+    await test$1.expect(getChatPrivacyToggle(scope)).toHaveAttribute('data-state', state, {
+        timeout: 10000,
+    });
+}
+/**
+ * Assert the resolved precedence-source via `data-source` (mentor / tenant
+ * / user / session / default). Useful for verifying the chat-privacy-
+ * effective endpoint resolved to the expected tier.
+ */
+async function expectChatPrivacySource(scope, source) {
+    await test$1.expect(getChatPrivacyToggle(scope)).toHaveAttribute('data-source', source, {
+        timeout: 10000,
+    });
+}
+/**
+ * Lock state is signalled via `aria-disabled` (the component uses
+ * `aria-disabled` instead of native `disabled` so the source-aware tooltip
+ * stays reachable on the locked pill).
+ */
+async function expectChatPrivacyLocked(scope, locked) {
+    const toggle = getChatPrivacyToggle(scope);
+    if (locked) {
+        await test$1.expect(toggle).toHaveAttribute('aria-disabled', 'true', { timeout: 10000 });
+    }
+    else {
+        // When unlocked, the attribute is either absent or explicitly "false".
+        const value = await toggle.getAttribute('aria-disabled');
+        test$1.expect(value === null || value === 'false').toBe(true);
+    }
+}
+/**
+ * Click the toggle. Covers two scenarios:
+ *  - Off → on (with no user messages) → starts a fresh private session.
+ *  - On (user-initiated, no user messages) → starts a fresh normal session.
+ * Use `confirmEnableChatPrivacyMidSession` for the mid-conversation flow.
+ */
+async function clickChatPrivacyToggle(scope) {
+    const toggle = getChatPrivacyToggle(scope);
+    await test$1.expect(toggle).toBeVisible({ timeout: 10000 });
+    await toggle.click();
+    logger.info('Clicked chat-privacy toggle');
+}
+// ── Mid-session confirm dialog ────────────────────────────────────────
+/** Locator for the AlertDialog content that the mid-session enable opens. */
+function getChatPrivacyConfirmDialog(scope) {
+    return asPage$3(scope).getByTestId('chat-privacy-confirm-dialog');
+}
+async function expectChatPrivacyConfirmDialogOpen(scope, open) {
+    if (open) {
+        await test$1.expect(getChatPrivacyConfirmDialog(scope)).toBeVisible({ timeout: 10000 });
+    }
+    else {
+        await test$1.expect(getChatPrivacyConfirmDialog(scope)).toBeHidden({ timeout: 10000 });
+    }
+}
+/**
+ * Mid-conversation enable flow:
+ *  1. Click the toggle (opens the confirm dialog).
+ *  2. Click the "Enable Private Mode" action.
+ * The session-level disable-chathistory POST is one-way per spec; the
+ * helper resolves once the dialog closes after a successful confirm.
+ */
+async function confirmEnableChatPrivacyMidSession(scope) {
+    await clickChatPrivacyToggle(scope);
+    const page = asPage$3(scope);
+    await expectChatPrivacyConfirmDialogOpen(page, true);
+    const action = page.getByTestId('chat-privacy-confirm-action');
+    await test$1.expect(action).toBeVisible({ timeout: 10000 });
+    await test$1.expect(action).toBeEnabled({ timeout: 10000 });
+    await action.click();
+    await expectChatPrivacyConfirmDialogOpen(page, false);
+    logger.info('Confirmed mid-session Private Mode enable');
+}
+/** Cancel the confirm dialog without enabling. */
+async function cancelEnableChatPrivacyMidSession(scope) {
+    const page = asPage$3(scope);
+    const cancel = page.getByTestId('chat-privacy-confirm-cancel');
+    await test$1.expect(cancel).toBeVisible({ timeout: 10000 });
+    await cancel.click();
+    await expectChatPrivacyConfirmDialogOpen(page, false);
+    logger.info('Cancelled mid-session Private Mode dialog');
+}
+// ──────────────────────────────────────────────────────────────────────
+// 2. User profile — Private Mode tab
+// ──────────────────────────────────────────────────────────────────────
+/**
+ * Switch to the Private Mode tab inside the user profile modal. Assumes
+ * the modal is already open. The tab only appears when the tenant has
+ * `allow_user_chat_privacy_control` on, so a `false` return from
+ * `isPrivateModeTabVisible` is a meaningful state, not an error.
+ */
+async function isPrivateModeTabVisible(page) {
+    const tab = page.getByRole('tab', {
+        name: CHAT_PRIVACY_LABELS.profileTab.tabName,
+        exact: true,
+    });
+    try {
+        await test$1.expect(tab).toBeVisible({ timeout: 5000 });
+        return true;
+    }
+    catch (_a) {
+        return false;
+    }
+}
+async function switchToPrivateModeTab(page) {
+    const tab = page.getByRole('tab', {
+        name: CHAT_PRIVACY_LABELS.profileTab.tabName,
+        exact: true,
+    });
+    await test$1.expect(tab).toBeVisible({ timeout: 10000 });
+    await tab.click();
+    await test$1.expect(page.getByTestId('chat-privacy-tab-body')).toBeVisible({ timeout: 10000 });
+    logger.info('Switched to Private Mode tab');
+}
+/** Locator for one of the three radio cards. */
+function getPrivateModeCard(scope, mode) {
+    return scope.getByTestId(`chat-privacy-mode-${mode}`);
+}
+/**
+ * Pick a mode by clicking its card. Resolves once the card flips into
+ * the selected state via `aria-pressed="true"` — i.e. the mutation came
+ * back and the local pending state caught up.
+ */
+async function selectPrivateMode(scope, mode) {
+    const card = getPrivateModeCard(scope, mode);
+    await test$1.expect(card).toBeVisible({ timeout: 10000 });
+    await test$1.expect(card).toBeEnabled({ timeout: 10000 });
+    await card.click();
+    await test$1.expect(card).toHaveAttribute('aria-pressed', 'true', { timeout: 10000 });
+    logger.info(`Selected Private Mode "${mode}"`);
+}
+/** Assert which mode is currently selected. Uses `aria-pressed` + `data-state`. */
+async function expectPrivateModeSelected(scope, mode) {
+    await test$1.expect(getPrivateModeCard(scope, mode)).toHaveAttribute('aria-pressed', 'true', {
+        timeout: 10000,
+    });
+    await test$1.expect(getPrivateModeCard(scope, mode)).toHaveAttribute('data-state', 'selected', {
+        timeout: 10000,
+    });
+}
+/** Assert every card is rendered. Useful as a "tab loaded" sanity check. */
+async function expectPrivateModeTabReady(scope) {
+    await test$1.expect(scope.getByTestId('chat-privacy-tab-body')).toBeVisible({ timeout: 10000 });
+    await test$1.expect(getPrivateModeCard(scope, 'normal')).toBeVisible();
+    await test$1.expect(getPrivateModeCard(scope, 'anonymized')).toBeVisible();
+    await test$1.expect(getPrivateModeCard(scope, 'disabled')).toBeVisible();
+}
+// ──────────────────────────────────────────────────────────────────────
+// 3. Tenant admin gate (ChatPrivacyContent in Advanced settings)
+// ──────────────────────────────────────────────────────────────────────
+/** Locator for the tenant-wide "Allow users to control chat privacy" switch. */
+function getTenantChatPrivacySwitch(scope) {
+    return scope.getByTestId('tenant-chat-privacy-switch');
+}
+/** Locator for the surrounding row (useful for scoping label / spinner queries). */
+function getTenantChatPrivacyRow(scope) {
+    return scope.getByTestId('tenant-chat-privacy-row');
+}
+async function expectTenantChatPrivacyVisible(scope, visible) {
+    if (visible) {
+        await test$1.expect(getTenantChatPrivacyRow(scope)).toBeVisible({ timeout: 10000 });
+    }
+    else {
+        await test$1.expect(getTenantChatPrivacyRow(scope)).toBeHidden();
+    }
+}
+/** Assert the tenant gate's current state via `aria-checked` on the Radix switch. */
+async function expectTenantChatPrivacyEnabled(scope, enabled) {
+    await test$1.expect(getTenantChatPrivacySwitch(scope)).toHaveAttribute('aria-checked', String(enabled), { timeout: 10000 });
+}
+/**
+ * Flip the tenant gate to the desired state. Idempotent — does nothing if
+ * the switch is already in the target state. Backend rejects this for
+ * non-admins (403) and the component surfaces an error toast in that case.
+ */
+async function setTenantChatPrivacyEnabled(scope, enabled) {
+    const sw = getTenantChatPrivacySwitch(scope);
+    await test$1.expect(sw).toBeVisible({ timeout: 10000 });
+    const current = (await sw.getAttribute('aria-checked')) === 'true';
+    if (current === enabled) {
+        logger.info(`Tenant chat-privacy already ${enabled ? 'enabled' : 'disabled'}`);
+        return;
+    }
+    await sw.click();
+    await test$1.expect(sw).toHaveAttribute('aria-checked', String(enabled), { timeout: 10000 });
+    logger.info(`Tenant chat-privacy set to ${enabled ? 'enabled' : 'disabled'}`);
+}
+
 /**
  * Voice tab helpers — Playwright bindings for the `AgentVoiceTab` component
  * from `@iblai/web-containers`.
@@ -4409,6 +4643,7 @@ Object.defineProperty(exports, "expect", {
     get: function () { return test$1.expect; }
 });
 exports.AuthFlowBuilder = AuthFlowBuilder;
+exports.CHAT_PRIVACY_LABELS = CHAT_PRIVACY_LABELS;
 exports.CustomReporter = CustomReporter;
 exports.MailsacClient = MailsacClient;
 exports.PRIVACY_LABELS = PRIVACY_LABELS;
@@ -4426,6 +4661,7 @@ exports.canChatWithEmbedMentor = canChatWithEmbedMentor;
 exports.cancelDeleteInstance = cancelDeleteInstance;
 exports.cancelDeleteSkill = cancelDeleteSkill;
 exports.cancelDisconnectInstance = cancelDisconnectInstance;
+exports.cancelEnableChatPrivacyMidSession = cancelEnableChatPrivacyMidSession;
 exports.cancelNewInstanceDialog = cancelNewInstanceDialog;
 exports.checkAdminStatus = checkAdminStatus;
 exports.clearDateRangeFilter = clearDateRangeFilter;
@@ -4435,10 +4671,12 @@ exports.clickBillingAddCredits = clickBillingAddCredits;
 exports.clickBillingManageBilling = clickBillingManageBilling;
 exports.clickBillingManageUsage = clickBillingManageUsage;
 exports.clickBillingUpgrade = clickBillingUpgrade;
+exports.clickChatPrivacyToggle = clickChatPrivacyToggle;
 exports.clickDownloadAgain = clickDownloadAgain;
 exports.clickManualDownloadLink = clickManualDownloadLink;
 exports.closeCreditBalanceDropdown = closeCreditBalanceDropdown;
 exports.closeWithEsc = closeWithEsc;
+exports.confirmEnableChatPrivacyMidSession = confirmEnableChatPrivacyMidSession;
 exports.connectToInstance = connectToInstance;
 exports.createAuthSetup = createAuthSetup;
 exports.createEnvConfig = createEnvConfig;
@@ -4468,6 +4706,11 @@ exports.expectBillingTabForPremiumPlan = expectBillingTabForPremiumPlan;
 exports.expectBillingTabForTrialPlan = expectBillingTabForTrialPlan;
 exports.expectCallConfigVisible = expectCallConfigVisible;
 exports.expectCallConfigVoiceTriggerShows = expectCallConfigVoiceTriggerShows;
+exports.expectChatPrivacyConfirmDialogOpen = expectChatPrivacyConfirmDialogOpen;
+exports.expectChatPrivacyLocked = expectChatPrivacyLocked;
+exports.expectChatPrivacySource = expectChatPrivacySource;
+exports.expectChatPrivacyState = expectChatPrivacyState;
+exports.expectChatPrivacyToggleVisible = expectChatPrivacyToggleVisible;
 exports.expectCompletedTasks = expectCompletedTasks;
 exports.expectCreditBalanceForCurrentPlan = expectCreditBalanceForCurrentPlan;
 exports.expectCreditBalancePanelForFreePlan = expectCreditBalancePanelForFreePlan;
@@ -4485,7 +4728,8 @@ exports.expectNoLogsForSelectedTask = expectNoLogsForSelectedTask;
 exports.expectOutputFilterEnabled = expectOutputFilterEnabled;
 exports.expectPrivacyFieldsHidden = expectPrivacyFieldsHidden;
 exports.expectPrivacyFieldsVisible = expectPrivacyFieldsVisible;
-exports.expectPrivacyRouterEnabled = expectPrivacyRouterEnabled;
+exports.expectPrivateModeSelected = expectPrivateModeSelected;
+exports.expectPrivateModeTabReady = expectPrivateModeTabReady;
 exports.expectScheduleStartTimeInPastError = expectScheduleStartTimeInPastError;
 exports.expectScreenShareDisabledHint = expectScreenShareDisabledHint;
 exports.expectSttSelectDisabled = expectSttSelectDisabled;
@@ -4493,6 +4737,8 @@ exports.expectTaskInList = expectTaskInList;
 exports.expectTaskNotInList = expectTaskNotInList;
 exports.expectTaskStatus = expectTaskStatus;
 exports.expectTasksEmpty = expectTasksEmpty;
+exports.expectTenantChatPrivacyEnabled = expectTenantChatPrivacyEnabled;
+exports.expectTenantChatPrivacyVisible = expectTenantChatPrivacyVisible;
 exports.expectTotalTasks = expectTotalTasks;
 exports.expectTtsSelectDisabled = expectTtsSelectDisabled;
 exports.expectVoiceProviderSelected = expectVoiceProviderSelected;
@@ -4510,6 +4756,8 @@ exports.getBillingAutoRechargeStatus = getBillingAutoRechargeStatus;
 exports.getBillingPlanLabel = getBillingPlanLabel;
 exports.getBrowserKey = getBrowserKey;
 exports.getCallConfigForm = getCallConfigForm;
+exports.getChatPrivacyConfirmDialog = getChatPrivacyConfirmDialog;
+exports.getChatPrivacyToggle = getChatPrivacyToggle;
 exports.getCreditBalancePlanLabel = getCreditBalancePlanLabel;
 exports.getCreditBalanceRemaining = getCreditBalanceRemaining;
 exports.getCurrentModel = getCurrentModel;
@@ -4522,11 +4770,13 @@ exports.getMemoryCount = getMemoryCount;
 exports.getMentorIdFromUrl = getMentorIdFromUrl;
 exports.getOutputFilterSwitch = getOutputFilterSwitch;
 exports.getPaginationInfo = getPaginationInfo;
-exports.getPrivacyRouterSwitch = getPrivacyRouterSwitch;
+exports.getPrivateModeCard = getPrivateModeCard;
 exports.getScheduleTaskButton = getScheduleTaskButton;
 exports.getSearchInput = getSearchInput;
 exports.getSkillRowCount = getSkillRowCount;
 exports.getTaskRow = getTaskRow;
+exports.getTenantChatPrivacyRow = getTenantChatPrivacyRow;
+exports.getTenantChatPrivacySwitch = getTenantChatPrivacySwitch;
 exports.getVoiceProviderCard = getVoiceProviderCard;
 exports.getVoiceRow = getVoiceRow;
 exports.goToFirstPage = goToFirstPage;
@@ -4541,6 +4791,7 @@ exports.isMemoryTabVisible = isMemoryTabVisible;
 exports.isOnFirstPage = isOnFirstPage;
 exports.isOnLastPage = isOnLastPage;
 exports.isPrivacyTabVisible = isPrivacyTabVisible;
+exports.isPrivateModeTabVisible = isPrivateModeTabVisible;
 exports.isSandboxTabVisible = isSandboxTabVisible;
 exports.isScreenShareTabVisible = isScreenShareTabVisible;
 exports.isSkillEnabled = isSkillEnabled;
@@ -4593,6 +4844,7 @@ exports.selectDateFromCalendar = selectDateFromCalendar;
 exports.selectLLMModel = selectLLMModel;
 exports.selectLlmProvider = selectLlmProvider;
 exports.selectPrivacyAction = selectPrivacyAction;
+exports.selectPrivateMode = selectPrivateMode;
 exports.selectSttProvider = selectSttProvider;
 exports.selectTaskInList = selectTaskInList;
 exports.selectTtsProvider = selectTtsProvider;
@@ -4603,8 +4855,8 @@ exports.setCallLanguage = setCallLanguage;
 exports.setEnableVideo = setEnableVideo;
 exports.setEntitySelected = setEntitySelected;
 exports.setOutputFilterEnabled = setOutputFilterEnabled;
-exports.setPrivacyRouterEnabled = setPrivacyRouterEnabled;
 exports.setScreenSharePrompt = setScreenSharePrompt;
+exports.setTenantChatPrivacyEnabled = setTenantChatPrivacyEnabled;
 exports.setUseFunctionCallingEnabled = setUseFunctionCallingEnabled;
 exports.setupSandboxInstance = setupSandboxInstance;
 exports.shouldAddNewRowWhenClickingAddRowButton = shouldAddNewRowWhenClickingAddRowButton;
@@ -4626,6 +4878,7 @@ exports.shouldVerifyCSVEditorDialogAccessibility = shouldVerifyCSVEditorDialogAc
 exports.signUpWithEmailAndPassword = signUpWithEmailAndPassword;
 exports.switchToMemoryTab = switchToMemoryTab;
 exports.switchToPrivacyTab = switchToPrivacyTab;
+exports.switchToPrivateModeTab = switchToPrivateModeTab;
 exports.switchToSandboxTab = switchToSandboxTab;
 exports.switchToScreenShareTab = switchToScreenShareTab;
 exports.switchToSkillsTab = switchToSkillsTab;