@neuralis/brain-core 0.3.1 → 0.4.0

package/app/filesystem/ui/PackagesPanel.tsx

@@ -3,19 +3,22 @@
 /**
  * Filesystem panel → Packages tab.
  *
- * Per-project list of installed packages (_packages/). Users flip trust and
- * trigger WASM build from here. Trust storage lives in the platform zone
- * (`ProjectRecord.packageTrust`) — the UI calls a host route that writes it.
+ * The packages the active agent can use in this project — its `_packages/`
+ * drop zone and every source package folder (a device's offline ones marked
+ * "Not available") — exactly as the agent gets them: the host's scoped
+ * snapshot for this caller and this agent. Native packages are not listed;
+ * they are the host's own and live in Admin → Packages. So do the changes a
+ * package manager makes (trust, Build, the access feature): this panel shows
+ * the state and, to a holder of `packages.manage`, a link there.
  */
 
 import { useCallback, useEffect, useMemo, useState } from 'react';
-import { createPortal } from 'react-dom';
 import {
   AlertTriangle,
   CheckCircle2,
   ChevronDown,
   ChevronRight,
-  HelpCircle,
+  ExternalLink,
   Info,
   Loader2,
   Package as PackageIcon,
@@ -23,43 +26,28 @@ import {
   Shield,
   ShieldAlert,
   ShieldCheck,
-  ShieldOff,
-  Wrench,
   Zap,
 } from 'lucide-react';
+import { hasFeature } from '@neuralis/package-system/access';
 import { SkillLauncher } from '@neuralis/package-system/client';
 import {
-  buildPackage,
   getPackagesDiagnostics,
   listProjectPackages,
-  setPackageTrust,
-  setPackageAccessFeature,
-  getGrantableFeatureIds,
   type ProjectPackageRow,
-  type BuildResponse,
   type PackageDiagnosticEntry,
-  type TrustValue,
 } from '../api/projectPackages';
 import { useFilesystemHost } from '../FilesystemHost';
 
 type Props = {
   projectId: string;
-};
-
-type PendingAction = 'none' | 'trust' | 'build' | 'access-feature';
-
-type LogModal = {
-  slug: string;
-  logs: string[];
-  ok?: boolean;
-  error?: string;
-  durationMs?: number;
+  /** The Files window's agent: its own packages show, and the Admin link opens in its window. */
+  agentId?: string;
 };
 
 const PARTIAL_REASON_COPY: Record<string, { label: string; hint: string }> = {
   'build-missing': {
     label: 'Needs build',
-    hint: 'The package has server-side code (src/) but the WASM binary is missing. Click Build to compile it.',
+    hint: 'The package has server-side code (src/) but the WASM binary is missing. A package manager builds it in Admin → Packages.',
   },
   'runtime-unavailable': {
     label: 'Runtime unavailable',
@@ -71,39 +59,37 @@ const PARTIAL_REASON_COPY: Record<string, { label: string; hint: string }> = {
   },
   'untrusted-mcp': {
     label: 'Declarative only',
-    hint: 'The "mcp" runtime spawns a subprocess as the host user and needs first-party trust, so no subprocess was started. Declare `runtime.type: "wasm"` in the manifest to enable handlers.',
+    hint: 'The "mcp" runtime spawns a subprocess as the host user and needs native trust, so no subprocess was started. Declare `runtime.type: "wasm"` in the manifest to enable handlers.',
+  },
+  'device-offline': {
+    label: 'Not available',
+    hint: 'The device that holds this package is offline. Its skills and tools return when the device reconnects; nothing of it is copied to this server.',
   },
 };
 
-export function PackagesPanel({ projectId }: Props) {
-  // R2b — owner/admin-effective (priority ≤ 2) gates the access-feature override
-  // control. Server (`canManagePackages`) is the enforcement floor.
+export function PackagesPanel({ projectId, agentId }: Props) {
+  // The link mirrors the admin route's own gate (`packages.manage`): hidden,
+  // never disabled, for anyone without it — the host re-checks every change.
   const host = useFilesystemHost();
-  const isOwnerEffective = (host.currentRole?.priority ?? 99) <= 2;
+  const canOpenAdmin = Boolean(agentId && host.openAdminPackages && hasFeature({ grantedFeatures: [...(host.grantedFeatures ?? [])] }, 'packages.manage'));
+  const openAdmin = useCallback(() => {
+    if (agentId) host.openAdminPackages?.(agentId);
+  }, [agentId, host]);
   const [rows, setRows] = useState<ProjectPackageRow[]>([]);
   const [loading, setLoading] = useState(true);
   const [loadError, setLoadError] = useState<string | null>(null);
   const [expanded, setExpanded] = useState<Record<string, boolean>>({});
-  const [pending, setPending] = useState<Record<string, PendingAction>>({});
-  const [toast, setToast] = useState<string | null>(null);
-  // SSR guard for the portals below (no `document` on the server pass).
-  const [mounted, setMounted] = useState(false);
-  useEffect(() => { setMounted(true); }, []);
-  const [logModal, setLogModal] = useState<LogModal | null>(null);
   // W3F — per-package diagnostic entries from /packages/diagnostics so the
   // panel can surface concrete validation/init errors instead of silently
   // dropping a broken `_packages/<x>/` from the list.
   const [diagnostics, setDiagnostics] = useState<PackageDiagnosticEntry[]>([]);
   const [diagnosticsError, setDiagnosticsError] = useState<string | null>(null);
-  // R2b — grantable feature ids for the access-feature governance picker
-  // (owner/admin only; degrades to free-text if the fetch fails).
-  const [featureIds, setFeatureIds] = useState<string[]>([]);
 
   const reload = useCallback(async () => {
     setLoading(true);
     setLoadError(null);
     try {
-      const list = await listProjectPackages(projectId);
+      const list = await listProjectPackages(projectId, agentId);
       setRows(list);
     } catch (err) {
       setLoadError(err instanceof Error ? err.message : String(err));
@@ -119,98 +105,16 @@ export function PackagesPanel({ projectId }: Props) {
       setDiagnostics([]);
       setDiagnosticsError(err instanceof Error ? err.message : String(err));
     }
-  }, [projectId]);
+  }, [projectId, agentId]);
 
   useEffect(() => {
     void reload();
   }, [reload]);
 
-  // R2b — load the grantable feature catalog once per project (owner/admin only;
-  // non-owners get 403 and we silently keep the empty list → free-text fallback).
-  useEffect(() => {
-    if (!isOwnerEffective) return;
-    let cancelled = false;
-    getGrantableFeatureIds(projectId)
-      .then((ids) => { if (!cancelled) setFeatureIds(ids); })
-      .catch(() => { /* silent — free-text fallback */ });
-    return () => { cancelled = true; };
-  }, [projectId, isOwnerEffective]);
-
   const handleToggleExpand = useCallback((slug: string) => {
     setExpanded((prev) => ({ ...prev, [slug]: !prev[slug] }));
   }, []);
 
-  const handleFlipTrust = useCallback(
-    async (row: ProjectPackageRow) => {
-      const currentTrust = row.access?.trust ?? 'untrusted';
-      if (currentTrust === 'first-party') return;
-      const next: TrustValue = currentTrust === 'trusted' ? 'untrusted' : 'trusted';
-      setPending((p) => ({ ...p, [row.slug]: 'trust' }));
-      try {
-        await setPackageTrust(projectId, row.slug, next);
-        setToast(`Trust: ${row.slug} → ${next}`);
-        await reload();
-      } catch (err) {
-        setToast(err instanceof Error ? err.message : 'Failed to set trust');
-      } finally {
-        setPending((p) => ({ ...p, [row.slug]: 'none' }));
-      }
-    },
-    [projectId, reload],
-  );
-
-  const handleSetAccessFeature = useCallback(
-    async (row: ProjectPackageRow, featureId: string | null) => {
-      setPending((p) => ({ ...p, [row.slug]: 'access-feature' }));
-      try {
-        await setPackageAccessFeature(projectId, row.packageId, featureId);
-        setToast(featureId ? `Access feature: ${row.slug} → ${featureId}` : `Access feature cleared: ${row.slug}`);
-        await reload();
-      } catch (err) {
-        setToast(err instanceof Error ? err.message : 'Failed to set access feature');
-      } finally {
-        setPending((p) => ({ ...p, [row.slug]: 'none' }));
-      }
-    },
-    [projectId, reload],
-  );
-
-  const handleBuild = useCallback(
-    async (row: ProjectPackageRow) => {
-      setPending((p) => ({ ...p, [row.slug]: 'build' }));
-      setLogModal({ slug: row.slug, logs: ['Starting build…'] });
-      let response: BuildResponse | null = null;
-      try {
-        response = await buildPackage(projectId, row.slug);
-        setLogModal({
-          slug: row.slug,
-          logs: response.logs,
-          ok: response.ok,
-          error: response.error,
-          durationMs: response.durationMs,
-        });
-        if (response.ok) {
-          setToast(`Build complete: ${row.slug} (${response.durationMs}ms)`);
-          await reload();
-        } else {
-          setToast(`Build failed: ${response.error ?? 'unknown'}`);
-        }
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        setLogModal({
-          slug: row.slug,
-          logs: [`Request failed: ${msg}`],
-          ok: false,
-          error: msg,
-        });
-        setToast(`Build request failed: ${msg}`);
-      } finally {
-        setPending((p) => ({ ...p, [row.slug]: 'none' }));
-      }
-    },
-    [projectId, reload],
-  );
-
   const sortedRows = useMemo(() => {
     return [...rows].sort((a, b) => a.name.localeCompare(b.name));
   }, [rows]);
@@ -220,13 +124,8 @@ export function PackagesPanel({ projectId }: Props) {
   // their package is missing.
   const orphanDiagnostics = useMemo(() => {
     const knownIds = new Set(rows.map((r) => r.packageId));
-    return diagnostics.filter((d) => !knownIds.has(d.packageId) || d.status === 'missing' || d.status === 'error');
+    return diagnostics.filter((d) => d.trust !== 'native' && (!knownIds.has(d.packageId) || d.status === 'missing' || d.status === 'error'));
   }, [diagnostics, rows]);
-  const diagnosticByPkg = useMemo(() => {
-    const map = new Map<string, PackageDiagnosticEntry>();
-    for (const d of diagnostics) map.set(d.packageId, d);
-    return map;
-  }, [diagnostics]);
 
   if (loading) {
     return (
@@ -265,6 +164,16 @@ export function PackagesPanel({ projectId }: Props) {
           </span>
         </div>
         <div className="flex items-center gap-1.5">
+          {canOpenAdmin ? (
+            <button
+              className="inline-flex items-center gap-1 rounded-md bg-white/5 px-2 py-1 text-[11px] text-white/60 hover:bg-white/10 hover:text-white/85"
+              onClick={openAdmin}
+              title="Trust, Build and the access feature"
+            >
+              <ExternalLink className="w-3 h-3" />
+              Admin → Packages
+            </button>
+          ) : null}
           {/* Authoring affordance — hands package scaffold/build (including the
               WASM pipeline) to the agent via the one `create-package` skill.
               The SKILL itself is ungated by design (so it stays importable),
@@ -275,8 +184,8 @@ export function PackagesPanel({ projectId }: Props) {
               than hiding it. `alsoRequires` can only ever REMOVE the button,
               never reveal one, so this cannot become a disclosure. Do not "fix"
               it to match the skill's own gate. Script-less skill, so the click
-              prefills the composer with the skill alone. Additive — the per-row
-              Build button stays. */}
+              prefills the composer with the skill alone. Additive — Build
+              itself lives in Admin → Packages. */}
           <SkillLauncher
             variant="label"
             size="sm"
@@ -301,12 +210,14 @@ export function PackagesPanel({ projectId }: Props) {
         <Info className="w-3.5 h-3.5 shrink-0 mt-0.5 text-violet-300/80" />
         <div className="space-y-1">
           <div>
-            Untrusted packages register their declarative content (skills, tool schemas,
-            commands) but cannot execute in-process code or call other packages.
+            What this agent can use from the project&apos;s own packages and its sources&apos;
+            package folders. Untrusted packages register their declarative content (skills,
+            tool schemas, commands) but cannot execute in-process code or call other packages.
           </div>
           <div className="text-violet-100/60">
-            Flip trust when you know the author. Run Build only for packages with server-side
-            code in <span className="font-mono">src/</span>.
+            Marking a package trusted, building one with code in{' '}
+            <span className="font-mono">src/</span> and gating one behind a feature happen in
+            Admin → Packages.
           </div>
         </div>
       </div>
@@ -348,8 +259,8 @@ export function PackagesPanel({ projectId }: Props) {
 
       {sortedRows.length === 0 ? (
         <div className="mx-1 mt-6 rounded-lg border border-white/10 bg-white/[0.02] p-6 text-center text-white/50 text-sm">
-          No packages installed yet. Drop packages into{' '}
-          <span className="font-mono text-white/70">_packages/</span> to see them here.
+          No packages for this agent yet. Drop one into{' '}
+          <span className="font-mono text-white/70">_packages/</span> or a source&apos;s package folder to see it here.
         </div>
       ) : (
         <div className="space-y-1">
@@ -358,72 +269,12 @@ export function PackagesPanel({ projectId }: Props) {
               key={row.slug}
               row={row}
               expanded={!!expanded[row.slug]}
-              pending={pending[row.slug] ?? 'none'}
-              canGovern={isOwnerEffective}
-              featureIds={featureIds}
               onToggle={() => handleToggleExpand(row.slug)}
-              onFlipTrust={() => void handleFlipTrust(row)}
-              onBuild={() => void handleBuild(row)}
-              onSetAccessFeature={(featureId) => void handleSetAccessFeature(row, featureId)}
             />
           ))}
         </div>
       )}
 
-      {/* Toast + build-log modal are `position: fixed` and PORTALED to the body:
-          inside the widget they would anchor to (and clip against) `PanelChrome`
-          depending on the transparency setting — the app-surfaces rule. */}
-      {toast && mounted ? createPortal(
-        <div
-          className="fixed bottom-4 right-4 z-[100000] rounded-lg border border-white/15 bg-neutral-900/95 px-3 py-2 text-[11px] text-white/85 shadow-lg"
-          onClick={() => setToast(null)}
-        >
-          {toast}
-        </div>,
-        document.body,
-      ) : null}
-
-      {logModal && mounted ? createPortal(
-        <div
-          className="fixed inset-0 z-[100000] flex items-center justify-center bg-black/60 backdrop-blur-sm"
-          onClick={() => setLogModal(null)}
-        >
-          <div
-            className="w-full max-w-xl rounded-lg border border-white/15 bg-neutral-900/95 p-4 shadow-xl"
-            onClick={(e) => e.stopPropagation()}
-          >
-            <div className="flex items-center justify-between mb-3">
-              <div className="flex items-center gap-2">
-                {logModal.ok === undefined ? (
-                  <Loader2 className="w-4 h-4 animate-spin text-white/60" />
-                ) : logModal.ok ? (
-                  <CheckCircle2 className="w-4 h-4 text-emerald-400" />
-                ) : (
-                  <AlertTriangle className="w-4 h-4 text-amber-300" />
-                )}
-                <span className="text-sm font-semibold text-white/85">
-                  Build — {logModal.slug}
-                </span>
-                {logModal.durationMs !== undefined ? (
-                  <span className="text-[10px] text-white/45">
-                    {logModal.durationMs}ms
-                  </span>
-                ) : null}
-              </div>
-              <button
-                className="text-white/50 hover:text-white/80 text-xs"
-                onClick={() => setLogModal(null)}
-              >
-                Close
-              </button>
-            </div>
-            <pre className="max-h-80 overflow-y-auto rounded-md bg-black/40 border border-white/10 p-2 text-[11px] font-mono text-white/75 whitespace-pre-wrap">
-              {logModal.logs.join('\n')}
-            </pre>
-          </div>
-        </div>,
-        document.body,
-      ) : null}
     </div>
   );
 }
@@ -431,21 +282,13 @@ export function PackagesPanel({ projectId }: Props) {
 function PackageCard(props: {
   row: ProjectPackageRow;
   expanded: boolean;
-  pending: PendingAction;
-  canGovern: boolean;
-  featureIds: string[];
   onToggle: () => void;
-  onFlipTrust: () => void;
-  onBuild: () => void;
-  onSetAccessFeature: (featureId: string | null) => void;
 }) {
-  const { row, expanded, pending, canGovern, featureIds, onToggle, onFlipTrust, onBuild, onSetAccessFeature } = props;
+  const { row, expanded, onToggle } = props;
   const trust = row.access?.trust ?? 'untrusted';
   const runtimeType = row.runtime?.type ?? 'node';
   const partialReason = row.partialReason;
   const partialCopy = partialReason ? PARTIAL_REASON_COPY[partialReason] : undefined;
-  const canBuild = runtimeType === 'wasm' && row.status === 'partial' && partialReason === 'build-missing';
-  const trustLocked = trust === 'first-party';
 
   return (
     <div className="rounded-lg border border-white/10 bg-white/[0.02] hover:bg-white/[0.035] transition-colors">
@@ -509,74 +352,8 @@ function PackageCard(props: {
             {`runtime: ${runtimeType}`}
           </div>
 
-          {/* Actions */}
-          <div className="flex items-center gap-2 pt-1">
-            <button
-              type="button"
-              className={[
-                'inline-flex items-center gap-1.5 rounded-md px-2.5 py-1 text-[11px] transition',
-                trustLocked
-                  ? 'bg-white/5 text-white/35 cursor-not-allowed'
-                  : trust === 'trusted'
-                    ? 'bg-emerald-500/15 border border-emerald-500/25 text-emerald-100 hover:bg-emerald-500/20'
-                    : 'bg-white/5 border border-white/10 text-white/70 hover:bg-white/10',
-              ].join(' ')}
-              disabled={trustLocked || pending !== 'none'}
-              onClick={onFlipTrust}
-              title={trustLocked ? 'First-party packages are trust-locked' : undefined}
-            >
-              {pending === 'trust' ? (
-                <Loader2 className="w-3 h-3 animate-spin" />
-              ) : trust === 'trusted' ? (
-                <ShieldCheck className="w-3 h-3" />
-              ) : (
-                <ShieldOff className="w-3 h-3" />
-              )}
-              {trust === 'trusted' ? 'Revert to untrusted' : 'Mark as trusted'}
-            </button>
-
-            <button
-              type="button"
-              className={[
-                'inline-flex items-center gap-1.5 rounded-md px-2.5 py-1 text-[11px] transition',
-                canBuild
-                  ? 'bg-violet-500/15 border border-violet-500/25 text-violet-100 hover:bg-violet-500/20'
-                  : 'bg-white/5 text-white/35 cursor-not-allowed',
-              ].join(' ')}
-              disabled={!canBuild || pending !== 'none'}
-              onClick={onBuild}
-              title={
-                canBuild
-                  ? 'Compile src/ → dist/package.wasm on the server'
-                  : runtimeType !== 'wasm'
-                    ? 'Build is only required for runtime.type: "wasm" packages'
-                    : 'Build is only needed when status is partial / build-missing'
-              }
-            >
-              {pending === 'build' ? (
-                <Loader2 className="w-3 h-3 animate-spin" />
-              ) : (
-                <Wrench className="w-3 h-3" />
-              )}
-              Build
-            </button>
-
-            <TrustHelp trust={trust} />
-          </div>
-
-          {/* R2b — base-access feature governance (owner/admin-effective). Attach
-              a required feature to gate the WHOLE package's visibility, or clear
-              it. Works for first-party AND WASM packages (both listed here). */}
-          {canGovern ? (
-            <AccessFeatureControl
-              row={row}
-              featureIds={featureIds}
-              pending={pending === 'access-feature'}
-              disabled={pending !== 'none'}
-              onSetAccessFeature={onSetAccessFeature}
-            />
-          ) : row.accessFeature ? (
-            <div className="mt-2 text-[10px] text-white/45">
+          {row.accessFeature ? (
+            <div className="text-[10px] text-white/45">
               Access feature: <span className="font-mono text-white/65">{row.accessFeature}</span>
               <span className="text-white/30"> ({row.accessFeatureSource})</span>
             </div>
@@ -587,76 +364,6 @@ function PackageCard(props: {
   );
 }
 
-function AccessFeatureControl(props: {
-  row: ProjectPackageRow;
-  featureIds: string[];
-  pending: boolean;
-  disabled: boolean;
-  onSetAccessFeature: (featureId: string | null) => void;
-}) {
-  const { row, featureIds, pending, disabled, onSetAccessFeature } = props;
-  const [value, setValue] = useState(row.accessFeature ?? '');
-  const listId = `af-${row.slug}`;
-  // Resync when the row's effective feature changes (after a save/reload).
-  useEffect(() => { setValue(row.accessFeature ?? ''); }, [row.accessFeature]);
-  const isManifest = row.accessFeatureSource === 'manifest';
-  const trimmed = value.trim();
-  const current = row.accessFeatureSource === 'override' ? (row.accessFeature ?? '') : '';
-  const dirty = trimmed !== current;
-
-  return (
-    <div className="mt-2 rounded-md border border-white/10 bg-white/[0.02] px-2.5 py-2 space-y-1.5">
-      <div className="flex items-center gap-1.5 text-[10px] font-semibold text-white/60">
-        <Shield className="w-3 h-3 text-cyan-300/80" />
-        Base-access feature
-        {row.accessFeature ? (
-          <span className="ml-auto font-mono text-[9px] text-white/45">
-            {row.accessFeature} <span className="text-white/30">({row.accessFeatureSource})</span>
-          </span>
-        ) : null}
-      </div>
-      <div className="text-[9px] text-white/40 leading-snug">
-        {isManifest
-          ? 'Declared in the manifest (requires.accessFeature) — not editable here. An override below adds an ADDITIONAL required feature.'
-          : 'Pick a feature to hide this package from anyone who lacks it (restrict-only), then grant that feature to a role in Admin → Roles. Clear to remove.'}
-      </div>
-      <div className="flex items-center gap-1.5">
-        {/* datalist (not a native <select>) — avoids the option-popup opacity gotcha;
-            still type-to-filter + free-text fallback when the catalog is empty. */}
-        <input
-          list={listId}
-          value={value}
-          onChange={(e) => setValue(e.target.value)}
-          placeholder="feature.id (e.g. labs.access)"
-          disabled={disabled}
-          className="flex-1 min-w-0 rounded bg-black/30 border border-white/10 px-2 py-1 text-[10px] font-mono text-white/80 placeholder:text-white/25 focus:outline-none focus:border-cyan-400/40"
-        />
-        <datalist id={listId}>
-          {featureIds.map((id) => <option key={id} value={id} />)}
-        </datalist>
-        <button
-          type="button"
-          disabled={disabled || !dirty || trimmed.length === 0}
-          onClick={() => onSetAccessFeature(trimmed)}
-          className="inline-flex items-center gap-1 rounded-md bg-cyan-500/15 border border-cyan-400/25 px-2 py-1 text-[10px] text-cyan-100 hover:bg-cyan-500/20 transition disabled:opacity-35"
-        >
-          {pending ? <Loader2 className="w-3 h-3 animate-spin" /> : null}
-          Set
-        </button>
-        <button
-          type="button"
-          disabled={disabled || row.accessFeatureSource !== 'override'}
-          onClick={() => onSetAccessFeature(null)}
-          title={row.accessFeatureSource === 'manifest' ? 'Manifest-declared features cannot be cleared here' : 'Clear the override'}
-          className="inline-flex items-center gap-1 rounded-md bg-white/5 border border-white/10 px-2 py-1 text-[10px] text-white/65 hover:bg-white/10 transition disabled:opacity-35"
-        >
-          Clear
-        </button>
-      </div>
-    </div>
-  );
-}
-
 function StatusPill(props: { status: ProjectPackageRow['status']; partialLabel?: string }) {
   const { status, partialLabel } = props;
   if (status === 'partial') {
@@ -689,10 +396,10 @@ function StatusPill(props: { status: ProjectPackageRow['status']; partialLabel?:
 
 function TrustBadge(props: { trust: string }) {
   const { trust } = props;
-  if (trust === 'first-party') {
+  if (trust === 'native') {
     return (
       <span className="inline-flex items-center gap-1 rounded-full border border-sky-500/25 bg-sky-500/10 px-2 py-0.5 text-[10px] text-sky-100/85">
-        <Shield className="w-2.5 h-2.5" /> First-party
+        <Shield className="w-2.5 h-2.5" /> Native
       </span>
     );
   }
@@ -728,32 +435,3 @@ function Stat(props: { label: string; value: number }) {
     </div>
   );
 }
-
-function TrustHelp(props: { trust: string }) {
-  const [open, setOpen] = useState(false);
-  return (
-    <div className="relative">
-      <button
-        type="button"
-        className="inline-flex items-center rounded-md bg-white/5 p-1 text-white/40 hover:text-white/70 hover:bg-white/10"
-        onClick={() => setOpen((o) => !o)}
-      >
-        <HelpCircle className="w-3 h-3" />
-      </button>
-      {open ? (
-        <div className="absolute right-0 bottom-full mb-2 w-64 rounded-lg border border-white/15 bg-neutral-900/95 p-2.5 text-[11px] text-white/75 shadow-xl z-10">
-          <div className="font-semibold text-white/85 mb-1">
-            {props.trust === 'trusted' ? 'Trusted' : props.trust === 'first-party' ? 'First-party' : 'Untrusted'}
-          </div>
-          <div className="text-white/60">
-            {props.trust === 'first-party'
-              ? 'Built-in package, full access — trust is locked.'
-              : props.trust === 'trusted'
-                ? 'Full fs / network / cross-package API. Only flip this when you trust the author.'
-                : 'Data-only filesystem, no network, no cross-package API. Safe default for unknown packages.'}
-          </div>
-        </div>
-      ) : null}
-    </div>
-  );
-}

package/app/filesystem/ui/PendingChangesPanel.tsx

@@ -216,7 +216,7 @@ const NO_FILTERS: ChangeFilters = { kind: 'all', source: '', repo: '', branch: '
 export function PendingChangesPanel({ agentId, projectId }: Props) {
   const client = useFilesystemStore((s) => s.client);
   const host = useFilesystemHost();
-  const canWrite = hasFeature({ grantedFeatures: [...(host.grantedFeatures ?? [])] }, 'drive.write');
+  const canWrite = hasFeature({ grantedFeatures: [...(host.grantedFeatures ?? [])] }, 'files.write');
   const storeApi = useFilesystemStoreApi();
   const sources = useFilesystemStore(s => s.sources);
   const liveRevisions = useFilesystemStore(s => s.sourceChangeRevision);