@kortix/ui 0.14.11 → 0.14.13

package/dist/customize/sections/view/agent-editor.d.ts

@@ -22,6 +22,8 @@ export interface AgentDraft {
     set: SetKortix;
     setOc: SetRuntime;
     isDirty: boolean;
+    /** The last saved block: the draft compares against it. */
+    baseline: AgentConfigBlock;
     /** Throw the draft away and return to the baseline. */
     discard: () => void;
     /** A save landed: the server's block is the new baseline AND the new draft. */
@@ -127,8 +129,9 @@ export type AgentConfigSectionGroup = (typeof AGENT_CONFIG_SECTION_GROUPS)[numbe
 /**
  * The page's topics, in rail order, each under a group heading.
  *
- * General is the agent itself and who runs it: overview, identity, people,
- * triggers. Access is one topic per grant set — skills, connectors, secrets,
+ * General is the agent itself and who runs it: the overview (the agent at a
+ * glance, every grant summarized), its instructions, people, triggers and the
+ * basic switches. Access is one topic per grant set — skills, connectors, secrets,
  * Apps, project actions — each its own page (Marko, 2026-09-03: "split up
  * ACCESS … into its own standalone menu items on the left & we can have nicer
  * UX/UI for each"). Runtime is what a session runs on: model, tools,
@@ -142,8 +145,8 @@ export declare const AGENT_CONFIG_SECTIONS: readonly [{
     readonly label: "Overview";
     readonly group: "General";
 }, {
-    readonly key: "basics";
-    readonly label: "Basics";
+    readonly key: "instructions";
+    readonly label: "Instructions";
     readonly group: "General";
 }, {
     readonly key: "people";
@@ -153,13 +156,21 @@ export declare const AGENT_CONFIG_SECTIONS: readonly [{
     readonly key: "triggers";
     readonly label: "Triggers";
     readonly group: "General";
+}, {
+    readonly key: "basics";
+    readonly label: "Basics";
+    readonly group: "General";
 }, {
     readonly key: "skills";
     readonly label: "Skills";
     readonly group: "Access";
 }, {
     readonly key: "subagents";
-    readonly label: "Subagents";
+    readonly label: "Agents";
+    readonly group: "Access";
+}, {
+    readonly key: "tools";
+    readonly label: "Tools";
     readonly group: "Access";
 }, {
     readonly key: "commands";
@@ -193,10 +204,6 @@ export declare const AGENT_CONFIG_SECTIONS: readonly [{
     readonly key: "model";
     readonly label: "Model";
     readonly group: "Runtime";
-}, {
-    readonly key: "tools";
-    readonly label: "Tools";
-    readonly group: "Runtime";
 }, {
     readonly key: "workspace";
     readonly label: "Workspace";
@@ -209,8 +216,8 @@ export declare function useLocalizedAgentConfigCatalog(): {
         readonly label: "Overview";
         readonly group: "General";
     }, {
-        readonly key: "basics";
-        readonly label: "Basics";
+        readonly key: "instructions";
+        readonly label: "Instructions";
         readonly group: "General";
     }, {
         readonly key: "people";
@@ -220,13 +227,21 @@ export declare function useLocalizedAgentConfigCatalog(): {
         readonly key: "triggers";
         readonly label: "Triggers";
         readonly group: "General";
+    }, {
+        readonly key: "basics";
+        readonly label: "Basics";
+        readonly group: "General";
     }, {
         readonly key: "skills";
         readonly label: "Skills";
         readonly group: "Access";
     }, {
         readonly key: "subagents";
-        readonly label: "Subagents";
+        readonly label: "Agents";
+        readonly group: "Access";
+    }, {
+        readonly key: "tools";
+        readonly label: "Tools";
         readonly group: "Access";
     }, {
         readonly key: "commands";
@@ -260,10 +275,6 @@ export declare function useLocalizedAgentConfigCatalog(): {
         readonly key: "model";
         readonly label: "Model";
         readonly group: "Runtime";
-    }, {
-        readonly key: "tools";
-        readonly label: "Tools";
-        readonly group: "Runtime";
     }, {
         readonly key: "workspace";
         readonly label: "Workspace";
@@ -271,13 +282,11 @@ export declare function useLocalizedAgentConfigCatalog(): {
     }];
 };
 export type AgentConfigSectionKey = (typeof AGENT_CONFIG_SECTIONS)[number]['key'];
-/** The grants only a kortix_version 3 manifest has: each names registered entries. */
+/** The grants that name registered entries of the manifest. */
 export declare const REGISTRY_GRANT_SECTIONS: readonly ["subagents", "commands", "extensions"];
 export type RegistryGrant = (typeof REGISTRY_GRANT_SECTIONS)[number];
-/** The editor's topics for a manifest version. The registry grants exist from v3 on. */
-export declare function agentConfigSectionKeys(schemaVersion: number): AgentConfigSectionKey[];
 /**
- * The pick lists behind the v3 grant pages. Subagents are the declared,
+ * The pick lists behind the registry grant pages. Subagents are the declared,
  * enabled agents with `mode` `subagent` or `all`, never the agent itself.
  * Commands and extensions are the root manifest's registries.
  * ponytail: names registered in an `imports:` file are not listed; a picked
@@ -299,15 +308,20 @@ export declare function isAgentConfigSectionKey(value: string | null): value is
  * grants and the access to what the agent has"): who may use the agent, and
  * what the agent — and therefore they — may reach.
  */
-export declare function AgentConfigSections({ section, editor, options, skillsOptions, registryOptions, overview, triggers, people, skills, connectors, secrets, apps, drives, authority, }: {
+export declare function AgentConfigSections({ section, editor, options, skillsOptions, registryOptions, overview, instructions, triggers, people, skills, connectors, secrets, apps, drives, sectionStyle, }: {
     section: AgentConfigSectionKey;
+    /** `tab` under the agent page's view switcher: the lead title goes, the
+     *  switcher names the view. */
+    sectionStyle?: 'panel' | 'tab';
     editor: AgentDraft;
     options: AgentEditorOptions;
     skillsOptions: GrantOption[];
-    /** The v3 grant pick lists (`registryGrantOptions`). */
+    /** The registry grant pick lists (`registryGrantOptions`). */
     registryOptions?: Record<RegistryGrant, GrantOption[]>;
-    /** Description + instructions — a page-owned section, the Overview tab. */
+    /** The agent at a glance — a page-owned section, the Overview tab. */
     overview?: React.ReactNode;
+    /** The system prompt editor — a page-owned section, the Instructions tab. */
+    instructions?: React.ReactNode;
     /** The agent's triggers — a page-owned section, the Triggers tab. */
     triggers?: React.ReactNode;
     /** Who may use the agent — a page-owned section, the People tab. */
@@ -323,8 +337,5 @@ export declare function AgentConfigSections({ section, editor, options, skillsOp
     apps?: React.ReactNode;
     /** Which shared drives the agent mounts. Page-owned, and only with Volumes on. */
     drives?: React.ReactNode;
-    /** What the agent can do once its Kortix permissions meet its IAM ceiling —
-     *  a page-owned card under the Kortix permissions checklist. */
-    authority?: React.ReactNode;
 }): import("react").JSX.Element;
 export { grantSummary } from './grant-mode-field.js';

package/dist/customize/sections/view/agent-editor.js

@@ -1,10 +1,10 @@
 'use client';
-import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, Fragment as _Fragment } from "react/jsx-runtime";
 import { useLocalizedUiCatalog } from '../../../i18n/ui-catalog/use-localized-ui-catalog.js';
 import { useTranslations as useI18nTranslations } from '../../../i18n/index.js';
 /**
- * The agent editor — every field of one `agents.<name>` block in a
- * kortix_version 2 or 3 manifest (agent-first spec §2.2), as three reusable parts
+ * The agent editor — every field of one `agents.<name>` block in
+ * `kortix.yaml` (agent-first spec §2.2), as three reusable parts
  * and no shell of its own.
  *
  * The shell is `/projects/[id]/agent/[name]`
@@ -128,7 +128,7 @@ export function useAgentDraft(initial) {
         setBaseline(block);
         setDraft(block);
     }, []);
-    return { draft, oc: draft.behavior ?? {}, set, setOc, isDirty, discard, commit };
+    return { draft, oc: draft.behavior ?? {}, set, setOc, isDirty, baseline, discard, commit };
 }
 const CONNECTOR_STATUS_BADGE = {
     needs_auth: { label: 'Needs auth', variant: 'destructive' },
@@ -223,8 +223,9 @@ export const AGENT_CONFIG_SECTION_GROUPS = ['General', 'Access', 'Runtime'];
 /**
  * The page's topics, in rail order, each under a group heading.
  *
- * General is the agent itself and who runs it: overview, identity, people,
- * triggers. Access is one topic per grant set — skills, connectors, secrets,
+ * General is the agent itself and who runs it: the overview (the agent at a
+ * glance, every grant summarized), its instructions, people, triggers and the
+ * basic switches. Access is one topic per grant set — skills, connectors, secrets,
  * Apps, project actions — each its own page (Marko, 2026-09-03: "split up
  * ACCESS … into its own standalone menu items on the left & we can have nicer
  * UX/UI for each"). Runtime is what a session runs on: model, tools,
@@ -235,11 +236,13 @@ export const AGENT_CONFIG_SECTION_GROUPS = ['General', 'Access', 'Runtime'];
  */
 export const AGENT_CONFIG_SECTIONS = [
     { key: 'overview', label: 'Overview', group: 'General' },
-    { key: 'basics', label: 'Basics', group: 'General' },
+    { key: 'instructions', label: 'Instructions', group: 'General' },
     { key: 'people', label: 'People', group: 'General' },
     { key: 'triggers', label: 'Triggers', group: 'General' },
+    { key: 'basics', label: 'Basics', group: 'General' },
     { key: 'skills', label: 'Skills', group: 'Access' },
-    { key: 'subagents', label: 'Subagents', group: 'Access' },
+    { key: 'subagents', label: 'Agents', group: 'Access' },
+    { key: 'tools', label: 'Tools', group: 'Access' },
     { key: 'commands', label: 'Commands', group: 'Access' },
     { key: 'extensions', label: 'Extensions', group: 'Access' },
     { key: 'connectors', label: 'Connectors', group: 'Access' },
@@ -248,7 +251,6 @@ export const AGENT_CONFIG_SECTIONS = [
     { key: 'drives', label: 'Drives', group: 'Access' },
     { key: 'actions', label: 'Kortix permissions', group: 'Access' },
     { key: 'model', label: 'Model', group: 'Runtime' },
-    { key: 'tools', label: 'Tools', group: 'Runtime' },
     { key: 'workspace', label: 'Workspace', group: 'Runtime' },
 ];
 export function useLocalizedAgentConfigCatalog() {
@@ -257,12 +259,8 @@ export function useLocalizedAgentConfigCatalog() {
         sections: AGENT_CONFIG_SECTIONS,
     });
 }
-/** The grants only a kortix_version 3 manifest has: each names registered entries. */
+/** The grants that name registered entries of the manifest. */
 export const REGISTRY_GRANT_SECTIONS = ['subagents', 'commands', 'extensions'];
-/** The editor's topics for a manifest version. The registry grants exist from v3 on. */
-export function agentConfigSectionKeys(schemaVersion) {
-    return AGENT_CONFIG_SECTIONS.map((s) => s.key).filter((key) => schemaVersion >= 3 || !REGISTRY_GRANT_SECTIONS.includes(key));
-}
 /** The names of one manifest registry (`commands:` or `extensions:`), with descriptions. */
 function registryEntries(manifest, key) {
     const registry = manifest[key];
@@ -276,7 +274,7 @@ function registryEntries(manifest, key) {
         .sort((a, b) => a.id.localeCompare(b.id));
 }
 /**
- * The pick lists behind the v3 grant pages. Subagents are the declared,
+ * The pick lists behind the registry grant pages. Subagents are the declared,
  * enabled agents with `mode` `subagent` or `all`, never the agent itself.
  * Commands and extensions are the root manifest's registries.
  * ponytail: names registered in an `imports:` file are not listed; a picked
@@ -286,7 +284,7 @@ function registryEntries(manifest, key) {
 export function registryGrantOptions(config, agentName) {
     let manifest = {};
     try {
-        manifest = config.manifest_raw ? parseManifestText(config.manifest_raw, 'yaml') : {};
+        manifest = config.manifest_raw ? parseManifestText(config.manifest_raw) : {};
     }
     catch {
         // A manifest that does not parse lists nothing; the save path reports the error.
@@ -315,7 +313,7 @@ export function isAgentConfigSectionKey(value) {
  * grants and the access to what the agent has"): who may use the agent, and
  * what the agent — and therefore they — may reach.
  */
-export function AgentConfigSections({ section, editor, options, skillsOptions, registryOptions, overview, triggers, people, skills, connectors, secrets, apps, drives, authority, }) {
+export function AgentConfigSections({ section, editor, options, skillsOptions, registryOptions, overview, instructions, triggers, people, skills, connectors, secrets, apps, drives, sectionStyle = 'panel', }) {
     const { draft, oc, set, setOc } = editor;
     // Every pane opens with a `lead` section (the pane title) and stacks its
     // later sections under Settings subsection headings.
@@ -323,6 +321,8 @@ export function AgentConfigSections({ section, editor, options, skillsOptions, r
         switch (section) {
             case 'overview':
                 return _jsx(_Fragment, { children: overview });
+            case 'instructions':
+                return _jsx(_Fragment, { children: instructions });
             case 'people':
                 return _jsx(_Fragment, { children: people });
             case 'skills':
@@ -340,7 +340,7 @@ export function AgentConfigSections({ section, editor, options, skillsOptions, r
             case 'drives':
                 return _jsx(_Fragment, { children: drives });
             case 'actions':
-                return (_jsxs(_Fragment, { children: [_jsx(ProjectActionsSection, { draft: draft, set: set }), authority] }));
+                return (_jsx(_Fragment, { children: _jsx(ProjectActionsSection, { draft: draft, set: set }) }));
             case 'triggers':
                 return _jsx(_Fragment, { children: triggers });
             case 'model':
@@ -353,6 +353,6 @@ export function AgentConfigSections({ section, editor, options, skillsOptions, r
                 return (_jsx(BasicsSection, { draft: draft, set: set, oc: oc, setOc: setOc, showDescription: false }));
         }
     })();
-    return (_jsx(EditorSectionStyleProvider, { value: "panel", children: _jsx("div", { className: "space-y-8", children: body }) }));
+    return (_jsx(EditorSectionStyleProvider, { value: sectionStyle, children: _jsx("div", { className: "space-y-8", children: body }) }));
 }
 export { grantSummary } from './grant-mode-field.js';

package/dist/customize/sections/view/grant-mode-field.d.ts

@@ -1,26 +1,12 @@
 import type { UiTranslator } from '../../../i18n/index.js';
 import type { AgentGrantSetV2 } from '@kortix/sdk';
-import { type ReactNode } from 'react';
+import type { ReactNode } from 'react';
 export type GrantMode = 'all' | 'pick' | 'none';
 /** Summarize a grant set — "All", "None", "3 picked" — for a card header. */
 export declare function grantSummary(v: AgentGrantSetV2 | undefined, tI18nComplete?: UiTranslator): {
     label: string;
     tone: 'muted' | 'outline';
 };
-export declare function GrantModeField({ value, onChange, alwaysRender, children, }: {
-    value: AgentGrantSetV2 | undefined;
-    onChange: (v: AgentGrantSetV2) => void;
-    /** Render `children` in every mode, not only Pick — for a catalog that
-     *  stays on screen and shows each card as included / excluded. */
-    alwaysRender?: boolean;
-    children: (ctx: {
-        selected: Set<string>;
-        toggle: (id: string) => void;
-        mode: GrantMode;
-    }) => React.ReactNode;
-}): import("react").JSX.Element;
-/** All · Pick · None, with a checklist of the project's declared items when
- *  in Pick mode. The one governance control reused for skills/connectors/secrets. */
 /** One pickable row: the id the grant stores, and what a person needs to
  *  recognise it — a name, a second line, a status chip. */
 export interface GrantOption {
@@ -38,13 +24,15 @@ export declare function GrantSetField({ value, onChange, options, emptyLabel, ro
     options: GrantOption[];
     emptyLabel: string;
     /** Optional control rendered BESIDE each granted row (e.g. the connectors
-     *  field's "personal" toggle). The row itself is a `<button>`, so an
-     *  interactive accessory cannot be nested inside it — when this returns a
-     *  node the row is wrapped in a flex container and the accessory becomes a
-     *  sibling. Fields that pass nothing render exactly as before. */
+     *  field's "personal" toggle). The row itself is a checkbox, so an
+     *  interactive accessory is a sibling, never nested. */
     rowAccessory?: (id: string, isSelected: boolean) => ReactNode;
 }): import("react").JSX.Element;
-/** All · Pick · None over the grouped grantable Kortix permission catalog. */
+/**
+ * The grant sentence over the grouped Kortix permission catalog, listed in
+ * every mode like every other Access view: All checks every box, None none,
+ * Specific the granted ones. A box turned off under All keeps the rest.
+ */
 export declare function KortixPermissionsField({ value, onChange, }: {
     value: AgentGrantSetV2 | undefined;
     onChange: (v: AgentGrantSetV2) => void;

package/dist/customize/sections/view/grant-mode-field.js

@@ -2,18 +2,16 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useTranslations as useI18nTranslations } from '../../../i18n/index.js';
 /**
- * All · Pick · None — the one governance grant-mode machine, parameterized so
- * both a flat checklist (skills/connectors/secrets) and a grouped catalog
- * (kortix_permissions) share the same state transitions instead of re-implementing
- * them twice.
+ * The grant fields of the agent editor: the grant sentence (`GrantModeTabs`)
+ * over a list that is always shown, flat (skills, connectors, the registry
+ * grants) or grouped (kortix_permissions).
  */
-import { Tabs, TabsList, TabsTrigger } from '../../../primitives/tabs.js';
 import { Badge } from '../../../primitives/badge.js';
 import { Checkbox } from '../../../primitives/checkbox.js';
-import { useState } from 'react';
 import { KORTIX_PERMISSIONS_CATALOG } from './agent-editor-catalog.js';
 import { useUiParams } from '../../../providers/ui-provider.js';
 import { useProjectFeatureFlags } from '../../../internal/lib/use-project-feature-flags.js';
+import { GrantModeTabs, plainGrantSwitch, useAgentGrant, withCatalog } from '../../shared/agent-resource-scope.js';
 /** Summarize a grant set — "All", "None", "3 picked" — for a card header. */
 export function grantSummary(v, tI18nComplete) {
     if (v === 'all')
@@ -26,64 +24,40 @@ export function grantSummary(v, tI18nComplete) {
         tone: 'outline',
     };
 }
-const GRANT_MODES = [
-    { value: 'all', label: 'All' },
-    { value: 'pick', label: 'Pick' },
-    { value: 'none', label: 'None' },
-];
-export function GrantModeField({ value, onChange, alwaysRender = false, children, }) {
-    const tI18nComplete = useI18nTranslations('hardcodedUi.i18nComplete');
-    const mode = value === 'all' ? 'all' : value === 'none' || value === undefined ? 'none' : 'pick';
-    const [wantPick, setWantPick] = useState(() => Array.isArray(value) && value.length > 0);
-    const effectiveMode = value === 'all'
-        ? 'all'
-        : Array.isArray(value) && (value.length > 0 || wantPick)
-            ? 'pick'
-            : mode;
-    const selected = new Set(Array.isArray(value) ? value : []);
-    const pick = (m) => {
-        setWantPick(m === 'pick');
-        if (m === 'all')
-            return onChange('all');
-        if (m === 'none')
-            return onChange('none');
-        onChange(Array.isArray(value) ? value : []);
-    };
-    const toggle = (id) => {
-        const next = new Set(selected);
-        if (next.has(id))
-            next.delete(id);
-        else
-            next.add(id);
-        onChange([...next]);
-    };
-    return (_jsxs("div", { className: "space-y-3", children: [_jsx(Tabs, { value: effectiveMode, onValueChange: (m) => pick(m), children: _jsx(TabsList, { "aria-label": tI18nComplete.raw('text74009e6664f5'), children: GRANT_MODES.map((m) => (_jsx(TabsTrigger, { value: m.value, children: m.label }, m.value))) }) }), effectiveMode === 'pick' || alwaysRender
-                ? children({ selected, toggle, mode: effectiveMode })
-                : null] }));
-}
 export function GrantSetField({ value, onChange, options, emptyLabel, rowAccessory, }) {
     const tI18nComplete = useI18nTranslations('hardcodedUi.i18nComplete');
-    return (_jsx(GrantModeField, { value: value, onChange: onChange, children: ({ selected, toggle }) => {
-            const optionIds = new Set(options.map((o) => o.id));
-            const orphans = [];
-            for (const id of selected) {
-                if (!optionIds.has(id))
-                    orphans.push({ id, label: id });
-            }
-            const rows = [...options, ...orphans];
-            return rows.length === 0 ? (_jsx("p", { className: "text-muted-foreground text-xs", children: emptyLabel })) : (_jsx("ul", { className: "bg-popover divide-border max-h-96 divide-y overflow-y-auto rounded-md border", children: rows.map((o) => {
-                    const isSel = selected.has(o.id);
+    // The same grant sentence and always-listed rows as every other Access view:
+    // All checks every row, None none, Specific the granted ones. A row turned
+    // off under All keeps the rest (`plainGrantSwitch`).
+    const grant = useAgentGrant(value, onChange);
+    const ids = options.map((o) => o.id);
+    const box = plainGrantSwitch(value, ids, onChange);
+    const optionIds = new Set(ids);
+    const orphans = (Array.isArray(value) ? value : [])
+        .filter((id) => !optionIds.has(id))
+        .map((id) => ({ id, label: id }));
+    const rows = [...options, ...orphans];
+    return (_jsxs("div", { className: "space-y-3", children: [_jsx(GrantModeTabs, { grant: withCatalog(grant, ids), label: tI18nComplete.raw('text74009e6664f5') }), rows.length === 0 ? (_jsx("p", { className: "text-muted-foreground text-xs", children: emptyLabel })) : (_jsx("ul", { className: "bg-popover divide-border max-h-96 divide-y overflow-y-auto rounded-md border", children: rows.map((o) => {
                     const isOrphan = !optionIds.has(o.id);
-                    const accessory = rowAccessory?.(o.id, isSel);
-                    return (_jsxs("li", { className: "flex items-center gap-3 px-4 py-2.5", children: [_jsx(Checkbox, { variant: "black", checked: isSel, onCheckedChange: () => toggle(o.id), "aria-label": o.label }), _jsxs("span", { className: "min-w-0 flex-1", children: [_jsx("span", { className: "text-foreground block truncate font-mono text-sm", children: o.label }), o.description ? (_jsx("span", { className: "text-muted-foreground block truncate text-xs", children: o.description })) : null] }), isOrphan ? (_jsx(Badge, { variant: "warning", size: "xs", children: tI18nComplete.raw('textffa63583dfa6') })) : null, o.trailing, accessory] }, o.id));
-                }) }));
-        } }));
+                    const control = isOrphan
+                        ? { checked: true, onCheckedChange: () => onChange(value.filter((id) => id !== o.id)) }
+                        : box(o.id);
+                    const accessory = rowAccessory?.(o.id, control.checked);
+                    return (_jsxs("li", { className: "flex items-center gap-3 px-4 py-2.5", children: [_jsx(Checkbox, { variant: "black", ...control, "aria-label": o.label }), _jsxs("span", { className: "min-w-0 flex-1", children: [_jsx("span", { className: "text-foreground block truncate font-mono text-sm", children: o.label }), o.description ? (_jsx("span", { className: "text-muted-foreground block truncate text-xs", children: o.description })) : null] }), isOrphan ? (_jsx(Badge, { variant: "warning", size: "xs", children: tI18nComplete.raw('textffa63583dfa6') })) : null, o.trailing, accessory] }, o.id));
+                }) }))] }));
 }
-/** All · Pick · None over the grouped grantable Kortix permission catalog. */
+/**
+ * The grant sentence over the grouped Kortix permission catalog, listed in
+ * every mode like every other Access view: All checks every box, None none,
+ * Specific the granted ones. A box turned off under All keeps the rest.
+ */
 export function KortixPermissionsField({ value, onChange, }) {
     const tI18nComplete = useI18nTranslations('hardcodedUi.i18nComplete');
     const params = useUiParams();
     const { flags } = useProjectFeatureFlags(typeof params.id === 'string' ? params.id : null);
     const groups = KORTIX_PERMISSIONS_CATALOG.filter((grp) => !grp.featureFlag || flags[grp.featureFlag] === true);
-    return (_jsx(GrantModeField, { value: value, onChange: onChange, children: ({ selected, toggle }) => (_jsx("div", { className: "bg-popover divide-border divide-y rounded-md border", children: groups.map((grp) => (_jsxs("div", { className: "space-y-2.5 px-4 py-3", children: [_jsx("p", { className: "text-muted-foreground text-xs font-medium", children: grp.group }), _jsx("div", { className: "-mx-3 grid gap-x-2 gap-y-0.5 sm:grid-cols-2", children: grp.actions.map((action) => (_jsx(Checkbox, { variant: "black", checked: selected.has(action), onCheckedChange: () => toggle(action), label: _jsx("span", { className: "font-mono text-xs", children: action.replace(/^project\./, '') }) }, action))) })] }, grp.group))) })) }));
+    const ids = groups.flatMap((grp) => grp.actions);
+    const grant = useAgentGrant(value, onChange);
+    const box = plainGrantSwitch(value, ids, onChange);
+    return (_jsxs("div", { className: "space-y-5", children: [_jsx(GrantModeTabs, { grant: withCatalog(grant, ids), label: tI18nComplete.raw('text74009e6664f5') }), _jsx("div", { className: "bg-popover divide-border divide-y rounded-md border", children: groups.map((grp) => (_jsxs("div", { className: "space-y-2.5 px-4 py-3", children: [_jsx("p", { className: "text-muted-foreground text-xs font-medium", children: grp.group }), _jsx("div", { className: "-mx-3 grid gap-x-2 gap-y-0.5 sm:grid-cols-2", children: grp.actions.map((action) => (_jsx(Checkbox, { variant: "black", ...box(action), label: _jsx("span", { className: "font-mono text-xs", children: action.replace(/^project\./, '') }) }, action))) })] }, grp.group))) })] }));
 }

package/dist/customize/sections/view/permission-editor.d.ts

@@ -7,7 +7,9 @@ import type { PermissionConfig } from '@kortix/sdk';
  * behind one summary row that reports how many tools are already customized,
  * so the count is visible without expanding it.
  */
-export declare function ToolsSection({ permission, onChange, }: {
+export declare function ToolsSection({ permission, onChange, title, }: {
     permission: PermissionConfig | undefined;
     onChange: (next: PermissionConfig | undefined) => void;
+    /** Set when the section sits under another lead section (the tool switches): it becomes a subsection with this title. */
+    title?: string;
 }): import("react").JSX.Element;

package/dist/customize/sections/view/permission-editor.js

@@ -48,28 +48,37 @@ function PermissionKeyName({ permKey }) {
  *  pattern → action rules. */
 function PermissionRuleRow({ label, rule, onChange, }) {
     const tI18nComplete = useI18nTranslations('hardcodedUi.i18nComplete');
+    // One rule is a default plus patterns. Alone, the default is a bare action;
+    // with patterns it is the map's `*` entry, the form both harnesses read.
     const isMap = rule !== undefined && typeof rule === 'object';
-    const bare = typeof rule === 'string' ? rule : undefined;
-    const map = isMap ? rule : {};
+    const full = isMap ? rule : {};
+    const bare = typeof rule === 'string' ? rule : full['*'];
+    const map = Object.fromEntries(Object.entries(full).filter(([pattern]) => pattern !== '*'));
     const [showRules, setShowRules] = useState(isMap);
     const ruleCount = Object.keys(map).length;
-    const setBare = (v) => onChange(v);
-    const setRuleEntry = (pattern, action) => onChange({ ...map, [pattern]: action });
+    /** Write a default and patterns back in the smallest form. */
+    const write = (fallback, patterns) => {
+        if (Object.keys(patterns).length === 0)
+            return onChange(fallback);
+        onChange(fallback ? { ...patterns, '*': fallback } : patterns);
+    };
+    const setBare = (v) => write(v, map);
+    const setRuleEntry = (pattern, action) => write(bare, { ...map, [pattern]: action });
     const removeRuleEntry = (pattern) => {
         const next = { ...map };
         delete next[pattern];
-        onChange(Object.keys(next).length ? next : undefined);
+        write(bare, next);
     };
-    const addRule = () => onChange({ ...map, '': 'deny' });
+    const addRule = () => write(bare, { ...map, '': 'deny' });
     const renameRule = (from, to) => {
         if (from === to)
             return;
         const next = {};
         for (const [k, v] of Object.entries(map))
             next[k === from ? to : k] = v;
-        onChange(next);
+        write(bare, next);
     };
-    return (_jsxs("div", { className: "space-y-2 px-4 py-3", children: [_jsxs("div", { className: "flex items-center justify-between gap-3", children: [_jsx(PermissionKeyName, { permKey: label }), _jsxs("div", { className: "flex shrink-0 items-center gap-1.5", children: [_jsx(ActionSelect, { value: isMap ? undefined : bare, onChange: setBare, inheritLabel: tI18nComplete.raw('text3f72f0385768'), label: tI18nComplete('textfaaaefbff336', {
+    return (_jsxs("div", { className: "space-y-2 px-4 py-3", children: [_jsxs("div", { className: "flex items-center justify-between gap-3", children: [_jsx(PermissionKeyName, { permKey: label }), _jsxs("div", { className: "flex shrink-0 items-center gap-1.5", children: [_jsx(ActionSelect, { value: bare, onChange: setBare, inheritLabel: tI18nComplete.raw('text3f72f0385768'), label: tI18nComplete('textfaaaefbff336', {
                                     value0: PERMISSION_KEY_LABEL[label] ?? label,
                                 }) }), _jsxs(Button, { type: "button", variant: isMap || showRules ? 'secondary' : 'outline', size: "sm", className: "gap-1 px-2 text-xs", "aria-expanded": showRules, onClick: () => setShowRules((s) => !s), children: [tI18nComplete.raw('text4228aeb07c41'), ruleCount > 0 ? _jsx("span", { className: "tabular-nums", children: ruleCount }) : null] })] })] }), _jsx(AnimatePresence, { initial: false, children: showRules && (_jsx(m.div, { initial: { opacity: 0, height: 0 }, animate: { opacity: 1, height: 'auto' }, exit: { opacity: 0, height: 0 }, transition: { type: 'spring', duration: 0.3, bounce: 0 }, className: "overflow-hidden", children: _jsxs("div", { className: "bg-muted/40 space-y-1.5 rounded-md p-2", children: [ruleCount === 0 ? (_jsx("p", { className: "text-muted-foreground px-1 pt-0.5 text-xs text-pretty", children: tI18nComplete.raw('text8d1833ac5f65') })) : null, Object.entries(map).map(([pattern, action]) => (_jsxs("div", { className: "flex items-center gap-1.5", children: [_jsx(Input, { value: pattern, "aria-label": tI18nComplete.raw('text4288ade73ff9'), placeholder: tI18nComplete.raw('textcf134a1de504'), variant: "popover", className: "h-8 flex-1 font-mono text-xs", onChange: (e) => renameRule(pattern, e.target.value) }), _jsx(ActionSelect, { value: action, label: tI18nComplete('text494cb0162c19', {
                                             value0: pattern || tI18nComplete.raw('textc6fbcde46fa9'),
@@ -83,7 +92,7 @@ function PermissionRuleRow({ label, rule, onChange, }) {
  * behind one summary row that reports how many tools are already customized,
  * so the count is visible without expanding it.
  */
-export function ToolsSection({ permission, onChange, }) {
+export function ToolsSection({ permission, onChange, title, }) {
     const tI18nComplete = useI18nTranslations('hardcodedUi.i18nComplete');
     // A bare string is one action applied to EVERY tool, not one customized
     // tool — the old count printed "1" for it, which read as "one tool changed"
@@ -93,7 +102,7 @@ export function ToolsSection({ permission, onChange, }) {
         : permission && Object.keys(permission).length > 0
             ? `${Object.keys(permission).length} tool${Object.keys(permission).length === 1 ? '' : 's'} customized`
             : 'Every tool follows the runtime default';
-    return (_jsx(EditorSection, { title: tI18nComplete.raw('textea93d6a262ec'), description: tI18nComplete.raw('text765f388e2ce6'), lead: true, bare: true, children: _jsx(PermissionEditor, { permission: permission, onChange: onChange, summary: summary }) }));
+    return (_jsx(EditorSection, { title: title ?? tI18nComplete.raw('textea93d6a262ec'), description: tI18nComplete.raw('text765f388e2ce6'), lead: title === undefined, bare: true, children: _jsx(PermissionEditor, { permission: permission, onChange: onChange, summary: summary }) }));
 }
 function PermissionEditor({ permission, onChange, summary, }) {
     const tI18nComplete = useI18nTranslations('hardcodedUi.i18nComplete');

package/dist/customize/sections/view/review-view.d.ts

@@ -6,3 +6,11 @@
 export declare function ReviewView({ projectId }: {
     projectId: string;
 }): import("react").JSX.Element;
+/**
+ * /customize/review: the Review Center under the one Customize header
+ * (`CustomizeHeader`), so its title sits where the Agents index, an agent and
+ * My Kortix put theirs.
+ */
+export declare function ReviewPage({ projectId }: {
+    projectId: string;
+}): import("react").JSX.Element;

package/dist/customize/sections/view/review-view.js

@@ -1,6 +1,8 @@
 'use client';
-import { jsx as _jsx } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { ProjectFilesProvider } from '../../../files/project/index.js';
+import { useTranslations } from '../../../i18n/index.js';
+import { CustomizeHeader } from '../../agents/agent-page-chrome.js';
 import { ReviewCenterConnected } from './review-center-connected.js';
 import { useProjectName } from '@kortix/sdk/react';
 /**
@@ -17,3 +19,12 @@ export function ReviewView({ projectId }) {
     const projectName = useProjectName(projectId) ?? '';
     return (_jsx("div", { className: "bg-background flex h-full min-h-0 flex-col", children: _jsx(ProjectFilesProvider, { value: { projectId, ref: '', defaultBranch: '' }, children: _jsx(ReviewCenterConnected, { projectName: projectName }) }) }));
 }
+/**
+ * /customize/review: the Review Center under the one Customize header
+ * (`CustomizeHeader`), so its title sits where the Agents index, an agent and
+ * My Kortix put theirs.
+ */
+export function ReviewPage({ projectId }) {
+    const t = useTranslations('agentEditor.tabs');
+    return (_jsxs("div", { className: "flex min-h-0 flex-1 flex-col overflow-hidden", children: [_jsx(CustomizeHeader, { title: t('review'), rule: true }), _jsx(ReviewView, { projectId: projectId })] }));
+}

package/dist/customize/sections/view/secret-delivery.js

@@ -475,7 +475,7 @@ export function mergeAgentSecretGrant(current, identifier) {
 /** The kortix.yaml edit that grants the secret, for anyone editing the repo by hand. */
 export function agentGrantSnippet(identifier, agent, current) {
     const secrets = mergeAgentSecretGrant(current, identifier);
-    return `kortix_version: 3\nagents:\n  ${agent ?? 'my-agent'}:\n    secrets: [${secrets.join(', ')}]`;
+    return `agents:\n  ${agent ?? 'my-agent'}:\n    secrets: [${secrets.join(', ')}]`;
 }
 /** One agent needs no picker, so the button carries the name instead. */
 export function agentGrantActionLabel(plan, selected) {
@@ -526,9 +526,6 @@ export function agentGrantOutcome(result, tI18nComplete) {
 /** Turn a grant failure into the next action the user can take. */
 export function agentGrantErrorMessage(error) {
     const fields = typeof error === 'object' && error !== null ? error : {};
-    if (fields.code === 'manifest_v1_unsupported') {
-        return 'This project uses a kortix_version 1 manifest. Edit kortix.toml directly, or upgrade the project to kortix_version 3.';
-    }
     if (fields.code === 'secret_not_grantable') {
         return 'This secret is disabled. Change its delivery policy before granting it.';
     }

package/dist/customize/sections/view/secrets-view.d.ts

@@ -1,3 +1,4 @@
+import { type AgentGrant, type ResourceScope } from '../../shared/agent-resource-scope.js';
 import { type ConnectionShare, type ProjectSecret, type ProjectSecretsResponse, type SecretConsumer, type SecretDeliveryStatus, type SecretDeliveryStrategy, type SecretEgressPolicy } from '@kortix/sdk';
 import { type SecretDeliveryBlockedReason } from './secret-delivery.js';
 type Requirement = 'required' | 'optional' | null;
@@ -37,8 +38,13 @@ export interface SecretRow {
      *  decrypted (`mine.status: 'undecryptable'`). */
     mineUndecryptable: boolean;
 }
-export declare function SecretsView({ projectId }: {
+export declare function SecretsView({ projectId, surface, grant, }: {
     projectId: string;
+    /** `global` (default) is the project's secrets; `agent` is the same screen
+     *  for one agent, with a grant checkbox on every row. */
+    surface?: ResourceScope;
+    /** Required in `agent` scope: the agent's `secrets` grant, by identifier. */
+    grant?: AgentGrant;
 }): import("react").JSX.Element;
 export declare function buildRows(raw: ProjectSecretsResponse | ProjectSecret[] | null | undefined): SecretRow[];
 /**