@nauticana/sail 1.1.34 → 1.1.35

package/README.md

@@ -2,7 +2,7 @@
 
 A shared Angular component library for building CRUD-based admin frontends. Provides table management, form handling, navigation, authentication, two-factor authentication, and trusted device management — all driven by metadata from a [keel](https://github.com/nauticana/keel) Go backend.
 
-> **Compatibility:** sail and keel are versioned in lock-step. The current line is **sail v1.1.x ↔ keel v1.2.x**; sail v1.1.33 adopts keel v1.2.106 (`prompt` on the login page, new-device step-up, sign-in sessions), sail v1.1.32 adopts keel v1.2.101 (the OAuth connect callback ticket), sail v1.1.31 adopts keel v1.2.100 (tenant single sign-on, DNS and HTTP-file domain verification), sail v1.1.30 adopts keel v1.2.99 (password routes; a password change signs out), sail v1.1.29 adopts keel v1.2.94 (signup: confirmation signs in, partner setup, sign-in hand-off code), sail v1.1.28 adopts keel v1.2.93 (absolute `return` for the OAuth hand-off), sail v1.1.18 adopts keel v1.2.58 (refresh-token rotation, `/public/logout`, setup intents, the realtime hub), the agency components in sail v1.1.14 require keel v1.2.41 (sail v1.1.9 needs keel v1.2.16 for the OAuth-connect layer). Earlier lines: **sail v0.5.x ↔ keel v0.5.x**, **sail v0.6.x / v0.7.x ↔ keel v0.7.x**, **sail v0.8.x ↔ keel v0.8.x**, **sail v0.9.x ↔ keel v0.9.x**. Newer sail releases extend the contract — older keel servers reject unknown endpoints with HTTP 404 / 400. The v0.8.x line additionally ships the `table_action` framework (per-table custom buttons surfaced in `TableList` / `TableSearch` / `TableEdit` / `TableDetail`); see the [Migrating to v0.7.0 §5 — TableAction](#migrating-to-v070--payout-user-payment-methods-table-actions) section for the seed shape (basis `table_action` + `authorization_object` + `authorization_object_action` rows) and the [keel/README Table Actions](https://github.com/nauticana/keel#table-actions) section for backend wiring via `handler.WrapTableAction`.
+> **Compatibility:** sail and keel are versioned in lock-step. The current line is **sail v1.1.x ↔ keel v1.2.x**; sail v1.1.35 adopts keel v1.2.112 (minor-unit money, the `currency` catalog, OAuth grant routes), sail v1.1.33 adopts keel v1.2.106 (`prompt` on the login page, new-device step-up, sign-in sessions), sail v1.1.32 adopts keel v1.2.101 (the OAuth connect callback ticket), sail v1.1.31 adopts keel v1.2.100 (tenant single sign-on, DNS and HTTP-file domain verification), sail v1.1.30 adopts keel v1.2.99 (password routes; a password change signs out), sail v1.1.29 adopts keel v1.2.94 (signup: confirmation signs in, partner setup, sign-in hand-off code), sail v1.1.28 adopts keel v1.2.93 (absolute `return` for the OAuth hand-off), sail v1.1.18 adopts keel v1.2.58 (refresh-token rotation, `/public/logout`, setup intents, the realtime hub), the agency components in sail v1.1.14 require keel v1.2.41 (sail v1.1.9 needs keel v1.2.16 for the OAuth-connect layer). Earlier lines: **sail v0.5.x ↔ keel v0.5.x**, **sail v0.6.x / v0.7.x ↔ keel v0.7.x**, **sail v0.8.x ↔ keel v0.8.x**, **sail v0.9.x ↔ keel v0.9.x**. Newer sail releases extend the contract — older keel servers reject unknown endpoints with HTTP 404 / 400. The v0.8.x line additionally ships the `table_action` framework (per-table custom buttons surfaced in `TableList` / `TableSearch` / `TableEdit` / `TableDetail`); see the [Migrating to v0.7.0 §5 — TableAction](#migrating-to-v070--payout-user-payment-methods-table-actions) section for the seed shape (basis `table_action` + `authorization_object` + `authorization_object_action` rows) and the [keel/README Table Actions](https://github.com/nauticana/keel#table-actions) section for backend wiring via `handler.WrapTableAction`.
 
 **Recent additions:** `BaseAuthService.acceptToken(jwt)` — adopt an externally-minted JWT (registration / SSO-handoff flows) and run the full post-login sequence (store under the canonical `jwt` key, load appdata, init routes); apps must use this instead of writing `localStorage` directly. `BaseRestService.analytic<T>(endpoint, params?)` — GET a keel `analytic/<endpoint>` report and return its rows. `passwordPolicyValidator` + `BaseAuthService.ensurePasswordPolicy()` — validate passwords against keel's policy (via `SailGuiConfig.passwordPolicyUrl`); see Configuration reference.
 
@@ -16,7 +16,7 @@ A shared Angular component library for building CRUD-based admin frontends. Prov
 | **Form components** | `DynamicField`, `RecordForm`, `TableForm` |
 | **Navigation** | `Navigation` (sidenav + toolbar with menu, responsive) |
 | **Login** | `LoginComponent`, `RegisterComponent`, `ChpassComponent`, `ConfirmRegisterComponent`, `ConfirmChpassComponent` |
-| **Security** | `TwoFactorSetupComponent`, `TwoFactorVerifyComponent`, `TrustedDevicesComponent`, `SessionsComponent`, `AccountDeletionComponent` |
+| **Security** | `TwoFactorSetupComponent`, `TwoFactorVerifyComponent`, `TrustedDevicesComponent`, `SessionsComponent`, `ApiKeysComponent`, `ConnectedAppsComponent`, `AccountDeletionComponent` |
 | **Account** | `MyAccountComponent` (self-service hub), `ProfileEditorComponent` (name/locale immediate; email/phone verify-before-apply) |
 | **Auth** | `ConsentGateComponent`, `OtpInputComponent`, `SocialLoginComponent`, `SsoLoginComponent`, `SsoReturnComponent` |
 | **Billing** | `PlanSelectorComponent`, `PriceSelectorComponent`, `CheckoutButtonComponent`, `PaymentMethodsComponent`, `PortalButtonComponent`, `UsageMeterComponent`, `StatusChipComponent`, `TrialBannerComponent`, `SeatSelectorComponent`, `DunningBannerComponent` |
@@ -29,9 +29,9 @@ A shared Angular component library for building CRUD-based admin frontends. Prov
 | **Services** | `BaseAuthService` (OTP / social / push / deleteAccount / logoutEverywhere / profile: `getProfile`, `updateProfile`, `request`+`confirmEmailChange`, `request`+`confirmPhoneChange`), `BillingService`, `AgencyService`, `BackendService`, `PayoutService`, `UserPaymentMethodService`, `PartnerDocumentService`, `NotificationInboxService`, `loadScript()`, `authInterceptor`, `apiResponseInterceptor` |
 | **Abstracts** | `BaseTable`, `BaseForm`, `BaseView`, `AbstractEditableView`, `BaseAsync`, `BaseRestService` |
 | **Config** | `SAIL_GUI_CONFIG`, `SailGuiConfig`, `configureRestUrls()` |
-| **Models** | `ApplicationData`, `TableDefinition`, `SiudAction`, `ApplicationMenu`, `ConstantValue`, `UserAccount`, `RestReport`, `ReportParam`, `TrustedDevice`, `PublicPlan`, `PlanPrice`, `PaymentMethod`, `Subscription`, `Invoice`, `CheckoutRequest`/`CheckoutResponse`, `PortalResponse`, `UsageMeter`, `ChargeResult`, `UserPaymentMethod`, `TableAction`, `TableActionParameter`, `ReusableAccount`, `PayoutOnboardingSession`, `BankInfoFormValue`, `CountryProfile`, `OtpRequest`/`OtpResponse`, `SignupConsent`, `ConsentState`, `ConsentOption`, `SocialProvider`, `PushPlatform`, `InboxMessage`/`InboxPage`, `PartnerDocument`/`DocumentUploadRequest`, 2FA types, etc. |
+| **Models** | `ApplicationData`, `TableDefinition`, `SiudAction`, `ApplicationMenu`, `ConstantValue`, `UserAccount`, `RestReport`, `ReportParam`, `TrustedDevice`, `PublicPlan`, `PlanPrice`, `PaymentMethod`, `Subscription`, `Invoice`, `CheckoutRequest`/`CheckoutResponse`, `PortalResponse`, `UsageMeter`, `ChargeResult`, `UserPaymentMethod`, `TableAction`, `TableActionParameter`, `ReusableAccount`, `PayoutOnboardingSession`, `BankInfoFormValue`, `Currency`, `Country`, `OtpRequest`/`OtpResponse`, `SignupConsent`, `ConsentState`, `ConsentOption`, `SocialProvider`, `PushPlatform`, `InboxMessage`/`InboxPage`, `PartnerDocument`/`DocumentUploadRequest`, 2FA types, etc. |
 | **Decorators** | `@IsSailString()`, `@IsSailNumeric()` (class-validator based) |
-| **Utils** | `titleCase()`, `fromPriceLabel()`, `formatMinorCurrency()` |
+| **Utils** | `titleCase()`, `fromPriceLabel()`, `formatMinor()`, `CurrencyService`, `sailMoney` pipe |
 
 ## Quick start
 
@@ -262,6 +262,10 @@ this.backend.listPaginated<MyRow>('orders', { Status: 'open' }, {
 
 Default page size is 100, capped at 1000 server-side. Sail maps `limit`, `offset`, and `orderBy` to keel's `_limit`, `_offset`, and `_order` query controls. Existing callers that put those string controls in the filter map remain compatible; explicit `PageRequest` values take precedence.
 
+## Money
+
+keel stores money as integer minor units and serves the `currency` table (`code`, `caption`, `exponent`) as the only source of exponents. `formatMinor(minor, currency, exponent)` renders an amount; `Intl` supplies the symbol and grouping only. Billing payloads (`PlanPrice`, `Subscription`, `Invoice`) carry `exponent` beside their `…Minor` fields, so they render without a catalog: `{{ invoice.totalMinor | sailMoney:invoice.currency:invoice.exponent }}`. Amounts without an exponent, such as the agency ledger, use `{{ minor | sailMoney:currency }}`: the pipe loads the catalog once through `CurrencyService` (generic REST `currency`, so the role needs `TABLE SELECT currency`), renders `''` until it arrives, and throws for a code the catalog lacks rather than guessing decimals.
+
 ## Backend-driven constant captions
 
 `LabelService` loads one caption map from the backend-provided `ApplicationData`: a keel `constant_value` domain from `ConstantCache` by constant id, or a catalog table registered in `foreign_key_lookup` from `TableCache` by table name. `sailCaption` is the pipe form: `{{ code | sailCaption:'constant_id' }}`. The domain is the backend `constant_id` (for example `ride_type`), not a locale: keel's constant catalogue does not contain a language column. It does not call generic `constant_value` CRUD, which is normally restricted to administrative roles.
@@ -410,6 +414,8 @@ The login flow redirects `twoFactorRequired` responses to `/login/2fa`. With `tw
 
 `SessionsComponent` (`<sail-sessions>`) lists the sessions with their `sign_in_method` captions, marks the current one, and signs out any other.
 
+`ApiKeysComponent` (`<sail-api-keys [scopes]>`) lists the partner's keys and uses the backend-provided `generate` and `restrict` table actions; controls appear only for granted actions. Pass the scopes the app offers (`LabelOption[]`) after filtering out scopes the caller may not mint. The role also needs generic `SELECT` and `DELETE` grants to list and revoke keys. `ConnectedAppsComponent` (`<sail-connected-apps>`) lists and disconnects OAuth clients through keel's `GrantHandler` routes (v1.2.112, `RestURL.oauthGrantsURL` and `oauthGrantRevokeURL`).
+
 ### Cross-origin cookie requirement
 
 The "trust this device" feature (keel v0.9+) is backed by a server-set HttpOnly cookie named `keel_td`. The lifecycle is entirely server-driven:
@@ -498,9 +504,8 @@ unless the user holds `PARTNER_PLAN_SUBSCRIPTION` `CANCEL` / `CHANGE` / `PORTAL`
 </sail-price-selector>
 ```
 
-`<sail-price-selector>` is presentational (a `radiogroup` of offers), formats each amount with `Intl` from the offer's currency (so JPY/BHD render with the right number of decimals), and maps PERIOD_TYPE codes to copy via `[cycleLabels]`. It emits the full `PlanPrice` so you keep the chosen terms, not just the id.
+`<sail-price-selector>` is presentational (a `radiogroup` of offers), formats each `amountMinor` at the offer's `exponent`, and maps PERIOD_TYPE codes to copy via `[cycleLabels]`. It emits the full `PlanPrice` so you keep the chosen terms, not just the id.
 
-> **Migration.** The flat `PublicPlan.priceId` is deprecated (keel v1.0.5 dropped `subscription_plan.provider_price_id`) — read the id from the selected offer (`offer().priceId`). **keel v1.0.7 also removed `PublicPlan.monthlyCost`/`annualCost`** from both `/public/plans` and the billing catalog, so any plan-card code reading them now gets `undefined`. Derive a display price from the offers with `fromPriceLabel(plan.prices)` (used by `<sail-plan-selector>`), or render the per-offer amounts via `<sail-price-selector>`. These fields are removed from sail's `PublicPlan` type so the compiler flags any remaining references.
 
 **Checkout button** — calls `createCheckout()` and redirects to the provider-hosted URL. Feed it the chosen offer's `priceId`:
 ```html
@@ -684,7 +689,7 @@ A complete screen is the pieces above assembled over `BillingService` — no met
 
 ## Agent UI (v1.1.20)
 
-Agent Studio and agent-conversation UI live in a secondary entry point, `@nauticana/sail/agent`. Nothing in it is exported from `@nauticana/sail`, so an app that never imports it bundles none of it. It needs no additional peer dependency. The wire types match Scout v1.2.8.
+Agent Studio and agent-conversation UI live in a secondary entry point, `@nauticana/sail/agent`. Nothing in it is exported from `@nauticana/sail`, so an app that never imports it bundles none of it. It needs no additional peer dependency. The wire types match Scout v1.2.13.
 
 ```ts
 import { AgentStudioService, PromptLanguageEditorComponent, TurnStream } from '@nauticana/sail/agent';
@@ -694,7 +699,10 @@ import { AgentStudioService, PromptLanguageEditorComponent, TurnStream } from '@
 |---|---|
 | `AgentStudioService` | Client for Scout's core Studio routes under `/api/agent-studio/` (fixed, unversioned paths): the `features` manifest, list, draft, settings, create, rename, archive, enable, test, publish, restore, reset, default, history, audit, release sections, models. Models mirror the backend's JSON names. |
 | `sail-studio-page` | Embeddable Studio: an agent rail grouped by `[groupBy]` (agent type by default; pass a function for workflow or position), and Overview, Prompts, Settings (scoped bindings and what they resolve to), Test, and History (diff, restore, audit) tabs. Product tabs are `<ng-template sailStudioTab="id" label="Label" let-agent>`. A control shows only when the `agents` feature lists its action and the caller holds the `AGENT_STUDIO` grant at `agent:<name>` (`agent_type:<type>` for create); hiding is never the authorization. `hasUnsavedChanges()` serves a `canDeactivate` guard. |
-| `sail-approval-inbox` / `ApprovalService` | The signed-in person's pending approvals (`GET /api/approval/pending`) and a decision view: approve, reject, or edit a tool call's arguments (`POST /api/approval/resolve`). A `409` reloads the list; `(decided)` emits the result. |
+| `sail-studio-page` Guardrails tab | Shown when the `features` manifest lists `guardrails`: inherited layers read-only, the agent's own rules as an editable JSON array saved against `expected_agent_revision`, and its safety events paged by `before`. Edit needs the feature's `EDIT` action. The rail captions Scout's fixed readiness values (`AGENT_READINESS_CAPTIONS`). |
+| `sail-assistant-activity` | The tenant's decision records from Scout's `decisions` feature (`GET /api/agent-studio/decisions`, `AGENT_AUDIT` `VIEW`), newest first and paged by `next_before`: when, action, resource, outcome caption, who (`[who]` names a principal), app (`client_ref`), and whom it acted for. `[category]` and `[outcome]` filter. |
+| `sail-turn-thread` | The signed-in person's turns from `GET {base}turns` (`ConversationService.turns`), newest first, paged by `next_before` and optionally narrowed to `[workRef]`: `turn_status` caption, settled cost in minor units with its exponent, agent and release version. Each `task_kind` renders its result through `<ng-template sailTurnResult="kind" let-turn>`; the first page reloads every `[pollMs]` while a turn is nonterminal. |
+| `sail-approval-inbox` / `ApprovalService` | The signed-in person's pending approvals (`GET /api/approval/pending`) and MCP confirmations (`GET /api/approval/confirmations`) in one list. Approvals are approved, rejected, or edited (`POST /api/approval/resolve`); confirmations are confirmed, declined, withdrawn, or reconciled as executed or failed through `/api/approval/confirmation/*`, each control shown only when Scout says the person may. A `409` reloads the list; `(decided)` and `(confirmationChanged)` emit the result. |
 | `studioErrorMessage(err)` | One message for a failed Studio call: the conflict cause, the field errors, or the detail. |
 | `studioConflictCause(err)` | `'revision'` (reload the draft), `'sealed'` (a layer sits under a sealed one) or `'other'` for a `409`. |
 | `studioFieldErrors(err)` / `retryAfterSeconds(err)` | Field errors of a `400`; `Retry-After` of a `429`/`503`. |
@@ -708,7 +716,7 @@ import { AgentStudioService, PromptLanguageEditorComponent, TurnStream } from '@
 | `ConversationService` | Transport for Scout's conversation bridge: `submit`, `stream(requestId, turnStream)`, `cancel`. Mount point injected through `CONVERSATION_BASE_PATH`. |
 | `SseParser` | Incremental `text/event-stream` parser: `push(chunk)` returns whole events out of chunks that split anywhere, including between the CR and LF of a CRLF; `finish()` flushes what the closing body left pending. |
 
-Map your audit rows onto `DecisionRecord` (outcome `A`, `D`, or `P`, captioned from `audit_decision_outcome`) to feed the timeline. Style the `.prompt-*`, `.release-*`, `.turn-*`, `.decision-*`, `.studio__*`, and `.approval-inbox__*` class hooks. Scout's short codes render through `sailCaption`, a pipe over the backend's constant captions.
+`DecisionRecord` is Scout's `api.DecisionRecord` (outcome `A`, `D`, or `P`, captioned from `audit_decision_outcome`); the timeline takes the records of one request, the activity table pages the tenant's. Style the `.prompt-*`, `.release-*`, `.turn-*`, `.decision-*`, `.studio__*`, and `.approval-inbox__*` class hooks. Scout's short codes render through `sailCaption`, a pipe over the backend's constant captions.
 
 ### Conversation transport (v1.1.22)
 
@@ -816,10 +824,9 @@ pending profile. The ledger and payout-history components show default empty
 messages; pass `[emptyMessage]="''"` when a composed page should omit empty
 regions entirely.
 
-All accounting values are integer minor units. `formatMinorCurrency()` uses the
-currency exponent reported by `Intl.NumberFormat`, so zero- and three-decimal
-currencies render correctly; earnings stay separated by currency rather than
-being summed into a misleading total.
+All accounting values are integer minor units rendered through the `sailMoney` pipe at the
+exponent of keel's `currency` catalog (see [Money](#money)); earnings stay separated by
+currency rather than being summed into a misleading total.
 
 **Delegation roles (v1.1.27, keel v1.2.89).** `AgencyDelegation.roles` (always present) and
 `AgencyClient.roles` carry `AgencyRoleGrant { role, expiresAt? }`; no `expiresAt` is
@@ -1607,10 +1614,10 @@ The v0.6 / v0.7 line introduced three additive feature groups against keel v0.7.
 |---|---|---|
 | `@nauticana/sail` | `PayoutService` | keel/payout API client — onboarding, reuse, status, bank-version replacement, beneficiary registration |
 | `@nauticana/sail` | `PayoutProviderOnboardingComponent` (`<sail-payout-provider-onboarding>`) | Drop-in onboarding step with reuse picker, hosted-KYC handoff, and asynchronous-confirmation output |
-| `@nauticana/sail` | `PayoutBankInfoFormComponent` (`<sail-payout-bank-info-form>`) | Tax + payout details form (country / currency / tax ID / billing address / agreement) |
+| `@nauticana/sail` | `PayoutBankInfoFormComponent` (`<sail-payout-bank-info-form>`) | Tax + payout details form; countries from keel's `country` table, tax-id types from the `tax_id_type` domain |
 | `@nauticana/sail` | `UserPaymentMethodService` | Saved-card list / remove / set-default API client |
 | `@nauticana/sail` | `UserPaymentMethodsComponent` (`<sail-user-payment-methods>`) | List of saved cards/wallets with set-default + remove |
-| `@nauticana/sail` | `TableAction`, `ReusableAccount`, `PayoutOnboardingSession`, `BankInfoFormValue`, `CountryProfile`, `UserPaymentMethod`, `DEFAULT_COUNTRY_PROFILES` | Model types / defaults |
+| `@nauticana/sail` | `TableAction`, `ReusableAccount`, `PayoutOnboardingSession`, `BankInfoFormValue`, `UserPaymentMethod` | Model types |
 
 ### 2. New keel endpoints
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nauticana/sail",
-  "version": "1.1.34",
+  "version": "1.1.35",
   "description": "Metadata-driven Angular component library for CRUD admin frontends backed by the keel Go backend. Tables, forms, navigation, OTP/2FA/social auth, billing, payout onboarding.",
   "main": "src/index.ts",
   "exports": {

package/src/agent/component/approval_inbox.html

@@ -1,13 +1,13 @@
 <div class="approval-inbox">
   <section class="approval-inbox__list" aria-label="Pending approvals">
-    @if (requests().length === 0 && !loading()) {
+    @if (requests().length === 0 && confirmations().length === 0 && !loading()) {
       <p class="approval-inbox__empty">Nothing is waiting for your decision.</p>
     }
     <ul>
       @for (request of requests(); track key(request)) {
         <li>
           <button type="button" class="approval-inbox__item" [class.selected]="key(request) === selectedKey()"
-            [attr.aria-current]="key(request) === selectedKey()" (click)="select(request)">
+            [attr.aria-current]="key(request) === selectedKey()" (click)="select(key(request))">
             <span class="approval-inbox__summary">{{ request.summary || request.action }}</span>
             @if (request.deadline_at) {
               <span class="approval-inbox__deadline">Due {{ request.deadline_at | date: 'medium' }}</span>
@@ -15,6 +15,17 @@
           </button>
         </li>
       }
+      @for (c of confirmations(); track confirmationKey(c)) {
+        <li>
+          <button type="button" class="approval-inbox__item" [class.selected]="confirmationKey(c) === selectedKey()"
+            [attr.aria-current]="confirmationKey(c) === selectedKey()" (click)="select(confirmationKey(c))">
+            <span class="approval-inbox__summary">{{ c.tool }} · {{ c.status | sailCaption:'mcp_confirmation_status' }}</span>
+            @if (c.status === 'P') {
+              <span class="approval-inbox__deadline">Expires {{ c.expires_at | date: 'medium' }}</span>
+            }
+          </button>
+        </li>
+      }
     </ul>
     <button matButton type="button" [disabled]="loading()" (click)="load()">Refresh</button>
   </section>
@@ -57,6 +68,42 @@
     </section>
   }
 
+  @if (selectedConfirmation(); as c) {
+    <section class="approval-inbox__decision" aria-label="Confirmation">
+      <h3>{{ c.tool }}</h3>
+      <dl>
+        <dt>Status</dt><dd>{{ c.status | sailCaption:'mcp_confirmation_status' }}@if (c.expired) { (expired) }</dd>
+        <dt>Requested by</dt><dd>{{ c.maker.kind }} {{ c.maker.id }}@if (c.client_ref) { through {{ c.client_ref }} }</dd>
+        <dt>Requested</dt><dd>{{ c.created_at | date: 'medium' }} · expires {{ c.expires_at | date: 'medium' }}</dd>
+        @if (c.approval_required) { <dt>Maker-checker</dt><dd>A second person must approve</dd> }
+        @if (c.decider; as d) { <dt>Decided</dt><dd>{{ d.kind }} {{ d.id }} · {{ c.decided_at | date: 'medium' }} {{ c.decision_note }}</dd> }
+        @if (c.reconciler; as r) { <dt>Reconciled</dt><dd>{{ r.kind }} {{ r.id }} {{ c.reconcile_note }}</dd> }
+        @if (c.error) { <dt>Error</dt><dd>{{ c.error }}</dd> }
+      </dl>
+      @if (c.preview !== undefined) { <pre class="approval-inbox__preview">{{ c.preview | json }}</pre> }
+
+      @if (c.can_decide || c.can_reconcile) {
+        <mat-form-field>
+          <mat-label>Note (optional)</mat-label>
+          <textarea matInput rows="2" [value]="reason()" (input)="reason.set($any($event.target).value)"></textarea>
+        </mat-form-field>
+      }
+      <div class="approval-inbox__actions">
+        @if (c.can_decide) {
+          <button matButton="elevated" type="button" [disabled]="loading()" (click)="confirm(true)">Confirm</button>
+          <button matButton type="button" class="warn" [disabled]="loading()" (click)="confirm(false)">Decline</button>
+        }
+        @if (c.can_withdraw) {
+          <button matButton type="button" [disabled]="loading()" (click)="withdraw()">Withdraw</button>
+        }
+        @if (c.can_reconcile) {
+          <button matButton type="button" [disabled]="loading()" (click)="reconcile('D')">Mark executed</button>
+          <button matButton type="button" [disabled]="loading()" (click)="reconcile('F')">Mark failed</button>
+        }
+      </div>
+    </section>
+  }
+
   @if (errorMessage()) {
     <p class="approval-inbox__error" role="alert">{{ errorMessage() }}</p>
   }

package/src/agent/component/approval_inbox.ts

@@ -1,52 +1,88 @@
-import { DatePipe } from '@angular/common';
+import { DatePipe, JsonPipe } from '@angular/common';
 import { ChangeDetectionStrategy, Component, OnInit, computed, inject, output, signal } from '@angular/core';
 import { MatButtonModule } from '@angular/material/button';
 import { MatFormFieldModule } from '@angular/material/form-field';
 import { MatInputModule } from '@angular/material/input';
+import { Observable, forkJoin } from 'rxjs';
 import { BaseAsync } from '../../component/abstract/base_async';
 import { CaptionPipe } from '../../service/caption_pipe';
-import { ApprovalRequest, ApprovalVerdict } from '../model/approval';
+import { ApprovalRequest, ApprovalVerdict, Confirmation } from '../model/approval';
 import { ApprovalService } from '../service/approval.service';
 
 /**
- * The signed-in person's pending approvals and a decision view: approve, reject, or edit a
- * tool call's arguments. A 409 (reassigned or decided elsewhere) reloads the list.
+ * The signed-in person's pending approvals and MCP confirmations with a decision view: approve,
+ * reject, or edit a tool call's arguments; confirm, decline, withdraw, or reconcile a confirmation.
+ * A 409 (reassigned or decided elsewhere) reloads the list.
  * Selector: <sail-approval-inbox>.
  */
 @Component({
   selector: 'sail-approval-inbox',
   changeDetection: ChangeDetectionStrategy.OnPush,
-  imports: [DatePipe, MatButtonModule, MatFormFieldModule, MatInputModule, CaptionPipe],
+  imports: [DatePipe, JsonPipe, MatButtonModule, MatFormFieldModule, MatInputModule, CaptionPipe],
   templateUrl: './approval_inbox.html',
 })
 export class ApprovalInboxComponent extends BaseAsync implements OnInit {
   private readonly approvals = inject(ApprovalService);
 
   readonly decided = output<ApprovalRequest>();
+  readonly confirmationChanged = output<Confirmation>();
 
   readonly requests = signal<ApprovalRequest[]>([]);
+  readonly confirmations = signal<Confirmation[]>([]);
   readonly selectedKey = signal('');
   readonly reason = signal('');
   readonly revisedArguments = signal('');
   readonly selected = computed(() => this.requests().find((r) => this.key(r) === this.selectedKey()));
+  readonly selectedConfirmation = computed(() => this.confirmations().find((c) => this.confirmationKey(c) === this.selectedKey()));
 
   ngOnInit(): void {
     this.load();
   }
 
   load(): void {
-    this.run(this.approvals.pending(), (rows) => {
-      this.requests.set(rows);
-      if (!this.selected()) this.select(rows[0]);
+    this.run(forkJoin([this.approvals.pending(), this.approvals.confirmations()]), ([requests, confirmations]) => {
+      this.requests.set(requests);
+      this.confirmations.set(confirmations);
+      if (!this.selected() && !this.selectedConfirmation()) this.select(requests[0] ? this.key(requests[0]) : confirmations[0] ? this.confirmationKey(confirmations[0]) : '');
     }, 'Failed to load approvals.');
   }
 
-  select(request: ApprovalRequest | undefined): void {
-    this.selectedKey.set(request ? this.key(request) : '');
+  select(key: string): void {
+    this.selectedKey.set(key);
     this.reason.set('');
     this.revisedArguments.set('');
   }
 
+  confirm(approve: boolean): void {
+    const c = this.selectedConfirmation();
+    if (!c) return;
+    this.applyConfirmation(this.approvals.decideConfirmation(c, approve, this.reason().trim()));
+  }
+
+  withdraw(): void {
+    const c = this.selectedConfirmation();
+    if (!c || !window.confirm('Withdraw this confirmation?')) return;
+    this.run(this.approvals.withdrawConfirmation(c), () => this.load(), 'Failed to withdraw the confirmation.');
+  }
+
+  reconcile(outcome: 'D' | 'F'): void {
+    const c = this.selectedConfirmation();
+    if (!c) return;
+    this.applyConfirmation(this.approvals.reconcileConfirmation(c, outcome, this.reason().trim()));
+  }
+
+  private applyConfirmation(request: Observable<Confirmation>): void {
+    this.run(request, (result) => {
+      this.confirmations.update((rows) => rows.map((c) => c.id === result.id && c.tenant_id === result.tenant_id ? result : c));
+      this.reason.set('');
+      this.confirmationChanged.emit(result);
+    }, 'Failed to record the decision.', (err) => this.reloadOnConflict(err));
+  }
+
+  confirmationKey(c: Confirmation): string {
+    return `${c.tenant_id}/${c.id}`;
+  }
+
   decide(verdict: ApprovalVerdict): void {
     const request = this.selected();
     if (!request) return;
@@ -67,13 +103,15 @@ export class ApprovalInboxComponent extends BaseAsync implements OnInit {
       revised_arguments: revised,
     }), (result) => {
       this.requests.update((rows) => rows.filter((r) => this.key(r) !== this.key(request)));
-      this.select(this.requests()[0]);
+      this.select(this.requests()[0] ? this.key(this.requests()[0]) : '');
       this.decided.emit(result);
-    }, 'Failed to record the decision.', (err) => {
-      if ((err as { status?: number })?.status !== 409) return;
-      this.load();
-      this.errorMessage.set('This request was reassigned or decided elsewhere; the list was refreshed.');
-    });
+    }, 'Failed to record the decision.', (err) => this.reloadOnConflict(err));
+  }
+
+  private reloadOnConflict(err: unknown): void {
+    if ((err as { status?: number })?.status !== 409) return;
+    this.load();
+    this.errorMessage.set('This request was reassigned or decided elsewhere; the list was refreshed.');
   }
 
   key(request: ApprovalRequest): string {

package/src/agent/component/assistant_activity.html

@@ -0,0 +1,28 @@
+<div class="assistant-activity">
+  @if (records().length > 0) {
+    <table class="assistant-activity__table">
+      <thead>
+        <tr><th>When</th><th>Action</th><th>Resource</th><th>Outcome</th><th>By</th><th>App</th><th>Acting for</th></tr>
+      </thead>
+      <tbody>
+        @for (record of records(); track record.id) {
+          <tr [class]="'assistant-activity__row assistant-activity__row--' + record.outcome">
+            <td>{{ record.occurred_at | date: 'medium' }}</td>
+            <td><code>{{ record.action }}</code></td>
+            <td>{{ record.resource }}</td>
+            <td>{{ record.outcome | sailCaption:'audit_decision_outcome' }}@if (record.reason) { <span class="assistant-activity__reason">({{ record.reason }})</span> }</td>
+            <td>{{ who()(record) }}</td>
+            <td>{{ record.client_ref }}</td>
+            <td>@if (record.authority; as a) { {{ a.subject.kind }} {{ a.subject.id }} }</td>
+          </tr>
+        }
+      </tbody>
+    </table>
+  } @else if (!loading()) {
+    <p class="assistant-activity__empty">No assistant activity yet.</p>
+  }
+  @if (nextBefore()) {
+    <button matButton type="button" [disabled]="loading()" (click)="load(nextBefore())">Load more</button>
+  }
+  @if (errorMessage()) { <p class="assistant-activity__error" role="alert">{{ errorMessage() }}</p> }
+</div>

package/src/agent/component/assistant_activity.ts

@@ -0,0 +1,40 @@
+import { DatePipe } from '@angular/common';
+import { ChangeDetectionStrategy, Component, OnInit, inject, input, signal } from '@angular/core';
+import { MatButtonModule } from '@angular/material/button';
+import { BaseAsync } from '../../component/abstract/base_async';
+import { CaptionPipe } from '../../service/caption_pipe';
+import { DecisionOutcome, DecisionRecord } from '../model/decision';
+import { AgentStudioService } from '../service/agent_studio.service';
+
+/**
+ * What assistants did in the tenant: Scout's decision records (`decisions` feature, `AGENT_AUDIT`
+ * `VIEW`), newest first and paged by `next_before`. Selector: <sail-assistant-activity>.
+ */
+@Component({
+  selector: 'sail-assistant-activity',
+  changeDetection: ChangeDetectionStrategy.OnPush,
+  imports: [DatePipe, MatButtonModule, CaptionPipe],
+  templateUrl: './assistant_activity.html',
+})
+export class AssistantActivityComponent extends BaseAsync implements OnInit {
+  private readonly studio = inject(AgentStudioService);
+
+  readonly category = input('');
+  readonly outcome = input<DecisionOutcome | undefined>(undefined);
+  /** Who acted, as the app names its principals; kind and id by default. */
+  readonly who = input<(record: DecisionRecord) => string>((r) => `${r.principal.kind} ${r.principal.id}`);
+
+  readonly records = signal<DecisionRecord[]>([]);
+  readonly nextBefore = signal(0);
+
+  ngOnInit(): void {
+    this.load();
+  }
+
+  load(before = 0): void {
+    this.run(this.studio.decisions(before, 0, this.category(), this.outcome()), (page) => {
+      this.records.update((rows) => before ? [...rows, ...page.records] : page.records);
+      this.nextBefore.set(page.next_before ?? 0);
+    }, 'Failed to load assistant activity.');
+  }
+}

package/src/agent/component/studio_page.html

@@ -10,7 +10,7 @@
               <button type="button" class="studio__agent" [class.selected]="agent.agent_name === selectedName()"
                 [attr.aria-current]="agent.agent_name === selectedName()" (click)="select(agent.agent_name)">
                 <span class="studio__agent-name">{{ agent.display_name }}</span>
-                <span [class]="'studio__readiness studio__readiness--' + agent.readiness">{{ agent.readiness }}</span>
+                <span [class]="'studio__readiness studio__readiness--' + agent.readiness">{{ readinessCaption(agent.readiness) }}</span>
                 <span class="studio__agent-meta">
                   @if (agent.is_default) { <span>Default</span> }
                   @if (agent.archived) { <span>Archived</span> }
@@ -232,6 +232,40 @@
               </ul>
             }
           }
+          @case ('guardrails') {
+            @if (guardrails(); as g) {
+              @if (g.problem) { <p class="studio__error" role="alert">{{ g.problem }}</p> }
+              @for (layer of g.inherited; track layer.layer) {
+                <h3>Inherited · layer {{ layer.layer }}@if (layer.digest) { · {{ layer.digest.slice(0, 12) }} }</h3>
+                <pre class="studio__rules">{{ layer.rules | json }}</pre>
+              }
+              <h3>This agent's rules</h3>
+              <p>Rules only add to the inherited ones or tighten a rule of the same id.</p>
+              <mat-form-field class="studio__rules-editor">
+                <mat-label>Rules (JSON array)</mat-label>
+                <textarea matInput rows="10" #rules [value]="g.rules | json" [disabled]="!can('EDIT', undefined, 'guardrails')"></textarea>
+              </mat-form-field>
+              @if (can('EDIT', undefined, 'guardrails')) {
+                <button matButton="elevated" type="button" [disabled]="busy()" (click)="saveGuardrails(rules.value)">Save rules</button>
+              }
+              <h3>Safety events</h3>
+              <ul class="studio__safety-events">
+                @for (event of safetyEvents(); track event.id) {
+                  <li>
+                    {{ event.occurred_at | date: 'medium' }} · {{ event.stage }} · layer {{ event.layer }} · {{ event.action }} ({{ event.severity }})
+                    · rules {{ event.rule_ids.join(', ') }}
+                    @if (event.version) { · v{{ event.version }} }
+                    @if (event.actor_kind) { · {{ event.actor_kind }} {{ event.actor_id }} }
+                  </li>
+                } @empty {
+                  <li>No safety event recorded.</li>
+                }
+              </ul>
+              @if (!safetyExhausted()) {
+                <button matButton type="button" [disabled]="busy()" (click)="loadSafetyEvents()">Load more</button>
+              }
+            }
+          }
           @default {
             @if (productTab(); as t) {
               @if (selected(); as agent) {

package/src/agent/component/studio_page.ts

@@ -13,8 +13,9 @@ import { BaseAuthService } from '../../service/auth.service';
 import { CaptionPipe } from '../../service/caption_pipe';
 import { LabelOption, LabelService } from '../../service/label.service';
 import {
-  AgentAuditEvent, AgentDraft, AgentLanguageDraft, AgentMergeMode, AgentModelSelection, AgentRelease, AgentSetting,
-  AgentSettings, AgentSummary, AgentTestResult, StudioFeature, StudioModel,
+  AGENT_READINESS_CAPTIONS, AgentAuditEvent, AgentDraft, AgentGuardrails, AgentLanguageDraft, AgentMergeMode,
+  AgentModelSelection, AgentRelease, AgentSetting, AgentSettings, AgentSummary, AgentTestResult, GuardrailRule,
+  SafetyEvent, StudioFeature, StudioModel,
 } from '../model/agent_studio';
 import { AgentStudioService } from '../service/agent_studio.service';
 import { ReleaseSectionDiff, diffReleaseSections } from '../util/release_diff';
@@ -29,11 +30,12 @@ const CORE_TABS = [
   { id: 'test', label: 'Test' },
   { id: 'history', label: 'History' },
 ];
+const GUARDRAILS_TAB = { id: 'guardrails', label: 'Guardrails' };
 
 /**
  * Embeddable Agent Studio over Scout's core `agents` feature: a grouped agent rail and tabs
- * for the draft, prompts, scoped settings, tests, and release history, plus product tabs
- * declared with `sailStudioTab`. A control shows only when the feature manifest lists its
+ * for the draft, prompts, scoped settings, tests, and release history, a Guardrails tab when the
+ * manifest lists that feature, plus product tabs declared with `sailStudioTab`. A control shows only when the feature manifest lists its
  * action and the caller holds the grant; hiding is never the authorization, Scout decides.
  * Selector: <sail-studio-page>.
  */
@@ -66,6 +68,9 @@ export class StudioPageComponent implements OnInit {
   readonly settings = signal<AgentSettings | null>(null);
   readonly releases = signal<AgentRelease[]>([]);
   readonly audit = signal<AgentAuditEvent[]>([]);
+  readonly guardrails = signal<AgentGuardrails | null>(null);
+  readonly safetyEvents = signal<SafetyEvent[]>([]);
+  readonly safetyExhausted = signal(true);
   readonly diff = signal<{ version: number; previous: number; rows: ReleaseSectionDiff[] } | null>(null);
   readonly testResult = signal<AgentTestResult | null>(null);
   readonly tab = signal('overview');
@@ -79,7 +84,10 @@ export class StudioPageComponent implements OnInit {
   private readonly pending = signal(0);
   readonly busy = computed(() => this.pending() > 0);
 
-  readonly tabs = computed(() => [...CORE_TABS, ...this.productTabs().map((t) => ({ id: t.id(), label: t.label() }))]);
+  readonly tabs = computed(() => [
+    ...CORE_TABS, ...(this.feature('guardrails') ? [GUARDRAILS_TAB] : []),
+    ...this.productTabs().map((t) => ({ id: t.id(), label: t.label() })),
+  ]);
   readonly productTab = computed(() => this.productTabs().find((t) => t.id() === this.tab()));
   readonly selected = computed(() => this.summaries().find((a) => a.agent_name === this.selectedName()));
   readonly dirty = computed(() => this.draft() !== null && JSON.stringify(this.draft()) !== this.baseline());
@@ -97,7 +105,6 @@ export class StudioPageComponent implements OnInit {
     }
     return [...groups].map(([name, agents]) => ({ name, agents }));
   });
-  private readonly core = computed(() => this.features().find((f) => f.id === 'agents'));
 
   ngOnInit(): void {
     this.call(this.studio.features(), (features) => this.features.set(features));
@@ -110,10 +117,18 @@ export class StudioPageComponent implements OnInit {
     return this.dirty();
   }
 
-  /** Whether the manifest serves `action` and the caller holds it at `value` (the selected agent by default). */
-  can(action: string, value = `agent:${this.selectedName()}`): boolean {
-    const core = this.core();
-    return !!core?.actions.includes(action) && this.auth.hasPermission(core.object || 'AGENT_STUDIO', action, value);
+  /** Whether `feature` serves `action` and the caller holds it at `value` (the selected agent by default). */
+  can(action: string, value = `agent:${this.selectedName()}`, feature = 'agents'): boolean {
+    const f = this.feature(feature);
+    return !!f?.actions.includes(action) && this.auth.hasPermission(f.object || 'AGENT_STUDIO', action, value);
+  }
+
+  private feature(id: string): StudioFeature | undefined {
+    return this.features().find((f) => f.id === id);
+  }
+
+  readinessCaption(code: string): string {
+    return AGENT_READINESS_CAPTIONS[code] ?? code;
   }
 
   modelsOf(type: string): StudioModel[] {
@@ -136,6 +151,8 @@ export class StudioPageComponent implements OnInit {
     this.settings.set(null);
     this.releases.set([]);
     this.audit.set([]);
+    this.guardrails.set(null);
+    this.safetyEvents.set([]);
     this.diff.set(null);
     this.testResult.set(null);
     this.errorMessage.set('');
@@ -146,6 +163,7 @@ export class StudioPageComponent implements OnInit {
   openTab(id: string): void {
     this.tab.set(id);
     if (id === 'history') this.loadHistory();
+    if (id === 'guardrails') this.loadGuardrails();
   }
 
   private loadAgent(): void {
@@ -153,6 +171,7 @@ export class StudioPageComponent implements OnInit {
     this.call(this.studio.getDraft(name), (draft) => this.applyDraft(draft), name);
     this.call(this.studio.settings(name), (settings) => this.settings.set(settings), name);
     if (this.tab() === 'history') this.loadHistory();
+    if (this.tab() === 'guardrails') this.loadGuardrails();
   }
 
   private applyDraft(draft: AgentDraft): void {
@@ -312,6 +331,44 @@ export class StudioPageComponent implements OnInit {
     }, name);
   }
 
+  loadGuardrails(): void {
+    const name = this.selectedName();
+    this.safetyEvents.set([]);
+    this.call(this.studio.guardrails(name), (g) => this.guardrails.set(g), name);
+    this.loadSafetyEvents();
+  }
+
+  loadSafetyEvents(): void {
+    const name = this.selectedName();
+    const before = this.safetyEvents().at(-1)?.id ?? 0;
+    this.call(this.studio.safetyEvents(name, before), (events) => {
+      this.safetyEvents.update((rows) => [...rows, ...events]);
+      this.safetyExhausted.set(events.length < 50);
+    }, name);
+  }
+
+  /** Replaces the agent's own rules with the JSON array typed in. */
+  saveGuardrails(rulesText: string): void {
+    const g = this.guardrails();
+    if (!g) return;
+    let rules: GuardrailRule[];
+    try {
+      rules = JSON.parse(rulesText.trim() || '[]') as GuardrailRule[];
+    } catch {
+      this.errorMessage.set('The rules must be a JSON array.');
+      return;
+    }
+    if (!Array.isArray(rules)) {
+      this.errorMessage.set('The rules must be a JSON array.');
+      return;
+    }
+    this.act(this.studio.saveGuardrails({ agent_name: g.agent_name, rules, expected_agent_revision: g.expected_agent_revision }), (saved) => {
+      this.guardrails.set(saved);
+      this.applyRevisions(saved.expected_agent_revision);
+      this.successMessage.set('Guardrails saved.');
+    }, g.agent_name);
+  }
+
   previousVersion(version: number): number {
     return this.releases().reduce((best, r) => r.version < version && r.version > best ? r.version : best, 0);
   }