@stigmer/react 3.12.2 → 3.12.4

package/src/execution/ArtifactsWidget.tsx

@@ -3,6 +3,7 @@
 import { useCallback, useMemo, useState } from "react";
 import type { AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_LIST } from "../internal/element-resets.js";
 import {
   useSessionArtifacts,
   artifactKey,
@@ -116,7 +117,7 @@ export function ArtifactsWidget({
         </span>
       </div>
 
-      <ul role="list" className="stg:flex stg:flex-col">
+      <ul role="list" className={cn(UNSTYLED_LIST, "stg:flex stg:flex-col")}>
         {artifacts.map((entry) => (
           <ArtifactRow
             key={artifactKey(entry.artifact)}

package/src/execution/FileChangeProgressBar.tsx

@@ -3,6 +3,7 @@
 import { memo, useState } from "react";
 import type { FileChangeProgress } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/filereview_pb";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_LIST } from "../internal/element-resets.js";
 import { FileKindBadge, FileLineStats } from "./FileReviewAtoms.js";
 import { FilePathLink } from "./FilePathLink.js";
 
@@ -91,7 +92,7 @@ export const FileChangeProgressBar = memo(function FileChangeProgressBar({
         <FileLineStats linesAdded={linesAdded} linesRemoved={linesRemoved} />
       </div>
       {expanded && (
-        <ul className="stg:mt-2 stg:max-h-[30vh] stg:space-y-1 stg:overflow-y-auto">
+        <ul className={cn(UNSTYLED_LIST, "stg:mt-2 stg:max-h-[30vh] stg:space-y-1 stg:overflow-y-auto")}>
           {entries.map((entry) => {
             const path = entry.pathAfter || entry.pathBefore;
             return (

package/src/execution/TodoList.tsx

@@ -4,6 +4,7 @@ import { useMemo, type ComponentType } from "react";
 import type { TodoItem } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/todo_pb";
 import { TodoStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_LIST } from "../internal/element-resets.js";
 
 /** Props for {@link TodoList}. */
 export interface TodoListProps {
@@ -69,7 +70,7 @@ export function TodoList({
   return (
     <ul
       role="list"
-      className={cn("stg:flex stg:flex-col stg:gap-1", className)}
+      className={cn(UNSTYLED_LIST, "stg:flex stg:flex-col stg:gap-1", className)}
       aria-label="Tasks"
     >
       {sortedTodos.map((item) => (

package/src/execution/ToolCallItem.tsx

@@ -105,7 +105,9 @@ export interface ToolCallItemProps {
  *
  * Shows category-aware labels (e.g., "Shell", "Read", "Edit") with
  * the primary argument as a subtitle, a category-specific icon, and
- * an inline approval decision badge when applicable.
+ * an inline approval decision badge when applicable. A shell row whose
+ * call carries a model-authored intent phrase is titled with that phrase
+ * instead — the command becomes the subtitle (stigmer#276).
  *
  * Wrapped in `React.memo` — structural sharing (DD-009/010) preserves
  * the `ToolCall` reference when unchanged, so a settled row skips
@@ -138,7 +140,7 @@ export const ToolCallItem = memo(function ToolCallItem({
   const duration = formatHeaderDuration(toolCall.startedAt, toolCall.completedAt);
   const isSubAgent = subAgentExecution != null;
 
-  const { category, label, primaryArg, result, resultSummary, disclosure, chrome } =
+  const { category, label, intent, title, primaryArg, result, resultSummary, disclosure, chrome } =
     useToolPresentation(toolCall);
   const CategoryIcon = CATEGORY_ICON[category];
 
@@ -173,9 +175,12 @@ export const ToolCallItem = memo(function ToolCallItem({
     initialOpen: defaultExpanded || autoOpen,
   });
 
+  // Sub-agents title the row with their subject; every other row titles with
+  // the resolved presentation `title` (host label override > model-authored
+  // shell intent > category label, stigmer#276).
   const displayLabel = isSubAgent
     ? subAgentExecution.subject || subAgentExecution.name || label
-    : label;
+    : title;
 
   const approvalBadge = getApprovalBadge(toolCall);
 
@@ -308,11 +313,17 @@ export const ToolCallItem = memo(function ToolCallItem({
     );
   }
 
-  // Shell shows neither a command subtitle nor an exit summary in the header —
-  // both live in the terminal session body below, so the header stays minimal
-  // (icon + label + status + duration).
-  const displaySubtitle =
-    isSubAgent || category === "shell" ? null : primaryArg;
+  // Shell headers stay minimal (icon + label + status + duration) — the
+  // command and exit summary live in the terminal session body — EXCEPT when
+  // the model authored an intent title (stigmer#276): the title then says
+  // *why*, so the command surfaces as the secondary text and a fully
+  // collapsed row still reads like a narrated log. Intent-less shell rows
+  // render byte-identically to before.
+  const displaySubtitle = isSubAgent
+    ? null
+    : category === "shell"
+      ? (intent ? primaryArg : null)
+      : primaryArg;
 
   // For file tools the subtitle is a path: render it filename-first through
   // FilePathLink (full path on hover) rather than the raw, often-absolute string

package/src/execution/WriteBacksWidget.tsx

@@ -2,6 +2,7 @@
 
 import type { AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_LIST } from "../internal/element-resets.js";
 import { useSessionWriteBacks } from "../session/useSessionWriteBacks.js";
 import { WriteBackCard } from "./WriteBackCard.js";
 
@@ -71,7 +72,7 @@ export function WriteBacksWidget({
         </span>
       </div>
 
-      <ul role="list" className="stg:flex stg:flex-col stg:gap-3">
+      <ul role="list" className={cn(UNSTYLED_LIST, "stg:flex stg:flex-col stg:gap-3")}>
         {writeBacks.map((entry) => (
           <li key={entry.writeBack.workspaceEntryName}>
             <WriteBackCard writeBack={entry.writeBack} />

package/src/execution/__tests__/intent-title.test.tsx

@@ -0,0 +1,221 @@
+/**
+ * Model-authored intent titles for shell tool calls (stigmer#276).
+ *
+ * The extraction contract is pinned by the cross-surface fixture
+ * test/fixtures/tool-view/intent-title.json — the same file the runner's
+ * tool-intent middleware tests assert against, so the wire key and the
+ * kind-scoping can never drift between the writer and the readers.
+ */
+
+import { readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, it, expect, afterEach } from "vitest";
+import { render, screen, cleanup } from "@testing-library/react";
+import { renderHook } from "@testing-library/react";
+import { create, type JsonObject } from "@bufbuild/protobuf";
+import {
+  ToolCallSchema,
+  type ToolCall,
+} from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
+import { PendingApprovalSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/approval_pb";
+import { ToolCallStatus, ToolKind } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import {
+  extractShellIntent,
+  extractShellIntentFromPreview,
+  SHELL_INTENT_ARG_FIELD,
+} from "../tool-categories";
+import { useToolPresentation, registerToolPresenter } from "../tool-presenter";
+import { ToolCallItem } from "../ToolCallItem";
+import { ApprovalCardHeader } from "../ApprovalCard";
+
+afterEach(cleanup);
+
+const here = dirname(fileURLToPath(import.meta.url));
+const fixturePath = resolve(here, "../../../../../test/fixtures/tool-view/intent-title.json");
+
+interface IntentFixture {
+  argField: string;
+  cases: Array<{
+    name: string;
+    mcpServerSlug: string;
+    args: Record<string, unknown>;
+    intent: string | null;
+  }>;
+}
+
+const fixture = JSON.parse(readFileSync(fixturePath, "utf8")) as IntentFixture;
+
+function makeToolCall(opts: {
+  name: string;
+  args?: Record<string, unknown>;
+  mcpServerSlug?: string;
+  status?: ToolCallStatus;
+}): ToolCall {
+  return create(ToolCallSchema, {
+    id: opts.name,
+    name: opts.name,
+    args: (opts.args ?? {}) as JsonObject,
+    mcpServerSlug: opts.mcpServerSlug ?? "",
+    status: opts.status ?? ToolCallStatus.TOOL_CALL_COMPLETED,
+  });
+}
+
+describe("intent-title fixture contract", () => {
+  it("pins the wire key shared with the runner middleware", () => {
+    expect(SHELL_INTENT_ARG_FIELD).toBe(fixture.argField);
+  });
+
+  it.each(fixture.cases.map((c, i) => [i, c] as const))(
+    "case %#: %j",
+    (_i, c) => {
+      const tc = makeToolCall({
+        name: c.name,
+        args: c.args,
+        mcpServerSlug: c.mcpServerSlug,
+      });
+      expect(extractShellIntent(tc)).toBe(c.intent);
+    },
+  );
+});
+
+describe("extractShellIntentFromPreview", () => {
+  it("mirrors the ToolCall extraction on a JSON args preview", () => {
+    expect(
+      extractShellIntentFromPreview(
+        "execute",
+        JSON.stringify({ command: "make check", [SHELL_INTENT_ARG_FIELD]: "Verify the build" }),
+      ),
+    ).toBe("Verify the build");
+  });
+
+  it("prefers the denormalized wire kind over the name", () => {
+    // A shell tool whose NAME the classifier does not recognize still
+    // resolves via the wire kind — matching extractPrimaryArgFromPreview.
+    expect(
+      extractShellIntentFromPreview(
+        "custom_runner",
+        JSON.stringify({ command: "ls", [SHELL_INTENT_ARG_FIELD]: "List files" }),
+        "",
+        ToolKind.SHELL,
+      ),
+    ).toBe("List files");
+  });
+
+  it("returns null for malformed previews and non-shell kinds", () => {
+    expect(extractShellIntentFromPreview("execute", "not json{")).toBeNull();
+    expect(extractShellIntentFromPreview("execute", "")).toBeNull();
+    expect(
+      extractShellIntentFromPreview(
+        "read_file",
+        JSON.stringify({ file_path: "a", [SHELL_INTENT_ARG_FIELD]: "x" }),
+      ),
+    ).toBeNull();
+  });
+});
+
+describe("useToolPresentation title precedence", () => {
+  it("titles a shell row with the model-authored intent", () => {
+    const tc = makeToolCall({
+      name: "Shell",
+      args: { command: "npm test", [SHELL_INTENT_ARG_FIELD]: "Run the test suite" },
+    });
+    const { result } = renderHook(() => useToolPresentation(tc));
+
+    expect(result.current.intent).toBe("Run the test suite");
+    expect(result.current.title).toBe("Run the test suite");
+    // The short kind label is unchanged — chips and badges keep "Shell".
+    expect(result.current.label).toBe("Shell");
+  });
+
+  it("falls back to the category label when no intent is present", () => {
+    const tc = makeToolCall({ name: "Shell", args: { command: "ls" } });
+    const { result } = renderHook(() => useToolPresentation(tc));
+
+    expect(result.current.intent).toBeNull();
+    expect(result.current.title).toBe("Shell");
+  });
+
+  it("a registered presenter label override outranks the intent", () => {
+    const dispose = registerToolPresenter(ToolKind.SHELL, {
+      label: () => "Run command",
+    });
+    try {
+      const tc = makeToolCall({
+        name: "Shell",
+        args: { command: "ls", [SHELL_INTENT_ARG_FIELD]: "List files" },
+      });
+      const { result } = renderHook(() => useToolPresentation(tc));
+
+      expect(result.current.title).toBe("Run command");
+      expect(result.current.intent).toBe("List files");
+    } finally {
+      dispose();
+    }
+  });
+});
+
+describe("ToolCallItem shell header", () => {
+  function headerOf(container: HTMLElement): Element {
+    const row = container.querySelector('[data-cursor-target="tool-call-row"]')!;
+    return row.firstElementChild!;
+  }
+
+  it("renders the intent as the title and the command as the subtitle", () => {
+    const tc = makeToolCall({
+      name: "Shell",
+      args: {
+        command: "npx vitest run src/parser",
+        [SHELL_INTENT_ARG_FIELD]: "Run unit tests for the parser",
+      },
+    });
+    const { container } = render(<ToolCallItem toolCall={tc} />);
+
+    const header = headerOf(container);
+    expect(header.textContent).toContain("Run unit tests for the parser");
+    expect(header.textContent).toContain("npx vitest run src/parser");
+    expect(header.textContent).not.toContain("Shell");
+  });
+
+  it("renders an intent-less shell row exactly as before: bare label, no subtitle", () => {
+    const tc = makeToolCall({
+      name: "Shell",
+      args: { command: "ls -la" },
+    });
+    const { container } = render(<ToolCallItem toolCall={tc} />);
+
+    const header = headerOf(container);
+    expect(header.textContent).toContain("Shell");
+    // The command lives in the terminal body only — never in the header.
+    expect(header.textContent).not.toContain("ls -la");
+  });
+});
+
+describe("ApprovalCardHeader shell title", () => {
+  it("titles a gated shell call with the intent phrase", () => {
+    const pending = create(PendingApprovalSchema, {
+      toolCallId: "tc-1",
+      toolName: "execute",
+      toolKind: ToolKind.SHELL,
+      argsPreview: JSON.stringify({
+        command: "rm -rf build",
+        [SHELL_INTENT_ARG_FIELD]: "Clean the build directory",
+      }),
+    });
+    render(<ApprovalCardHeader pendingApproval={pending} />);
+
+    expect(screen.getByText("Clean the build directory")).toBeDefined();
+  });
+
+  it("keeps the bare category label when no intent is present", () => {
+    const pending = create(PendingApprovalSchema, {
+      toolCallId: "tc-2",
+      toolName: "execute",
+      toolKind: ToolKind.SHELL,
+      argsPreview: JSON.stringify({ command: "rm -rf build" }),
+    });
+    render(<ApprovalCardHeader pendingApproval={pending} />);
+
+    expect(screen.getByText("Shell")).toBeDefined();
+  });
+});

package/src/execution/index.ts

@@ -340,6 +340,9 @@ export {
   toolKindToCategoryInfo,
   extractPrimaryArg,
   extractPrimaryArgFromPreview,
+  extractShellIntent,
+  extractShellIntentFromPreview,
+  SHELL_INTENT_ARG_FIELD,
   humanizeToolName,
   defaultDisclosureForCategory,
   isRunGroupableCategory,

package/src/execution/tool-categories.ts

@@ -1,16 +1,22 @@
 import type { ToolCall } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
 import { ToolCallStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 import type { JsonObject } from "@bufbuild/protobuf";
-import { ToolKind, resolveToolKind, resolveToolKindByName } from "@stigmer/sdk";
+import {
+  ToolKind,
+  resolveToolKind,
+  resolveToolKindByName,
+  shellIntentFromArgs,
+} from "@stigmer/sdk";
 
 /**
  * Discriminated tool categories for type-aware rendering.
  *
  * This is the presentation taxonomy. Classification (name -> kind) lives in
  * `@stigmer/sdk`'s `resolveToolKind` (single source of truth, shared with the
- * runner and Go CLI); this file maps each {@link ToolKind} to its presentation
- * metadata (label, primary argument). `"mcp"` covers tools originating from an
- * MCP server, whose names are dynamic.
+ * runner, @stigmer/ink, and the CLI's headless renderers); this file maps each
+ * {@link ToolKind} to its presentation metadata (label, primary argument).
+ * `"mcp"` covers tools originating from an MCP server, whose names are
+ * dynamic.
  */
 export type ToolCategory =
   | "shell"
@@ -192,6 +198,14 @@ export interface ToolCategoryInfo {
   readonly primaryArgField: string;
   /** Fallback argument keys tried when the primary key is absent. */
   readonly fallbackArgFields: readonly string[];
+  /**
+   * JSON argument key carrying a model-authored intent phrase for this kind
+   * (stigmer#276), or `undefined` for kinds without one. Shell is the only
+   * carrier today: both harnesses converge on `description` — the Cursor
+   * harness's built-in Shell tool ships it natively, and the native harness's
+   * tool-intent middleware adds it to the `execute` schema at bind time.
+   */
+  readonly intentArgField?: string;
 }
 
 interface KindDisplayEntry {
@@ -199,6 +213,7 @@ interface KindDisplayEntry {
   readonly label: string;
   readonly primaryField: string;
   readonly fallbackFields?: readonly string[];
+  readonly intentField?: string;
 }
 
 // Presentation metadata per ToolKind. Classification (name -> kind) is owned by
@@ -209,7 +224,7 @@ const KIND_DISPLAY: Partial<Record<ToolKind, KindDisplayEntry>> = {
   [ToolKind.FILE_WRITE]:  { category: "write",     label: "Write",     primaryField: "path", fallbackFields: ["file_path", "file", "filename"] },
   [ToolKind.FILE_EDIT]:   { category: "edit",      label: "Edit",      primaryField: "path", fallbackFields: ["file_path", "file", "filename"] },
   [ToolKind.FILE_DELETE]: { category: "delete",    label: "Delete",    primaryField: "path", fallbackFields: ["file_path", "file", "filename"] },
-  [ToolKind.SHELL]:       { category: "shell",     label: "Shell",     primaryField: "command" },
+  [ToolKind.SHELL]:       { category: "shell",     label: "Shell",     primaryField: "command", intentField: "description" },
   [ToolKind.SEARCH]:      { category: "search",    label: "Search",    primaryField: "pattern", fallbackFields: ["query", "q"] },
   [ToolKind.LIST]:        { category: "list",      label: "List",      primaryField: "path" },
   [ToolKind.FETCH]:       { category: "fetch",     label: "Fetch",     primaryField: "url", fallbackFields: ["uri"] },
@@ -264,6 +279,7 @@ export function toolKindToCategoryInfo(
       label: entry.label,
       primaryArgField: entry.primaryField,
       fallbackArgFields: entry.fallbackFields ?? [],
+      ...(entry.intentField ? { intentArgField: entry.intentField } : {}),
     };
   }
 
@@ -440,6 +456,88 @@ export function extractPrimaryArgFromPreview(
   }
 }
 
+/**
+ * Extracts the model-authored intent phrase from a tool call's args
+ * (stigmer#276), or `null` when the kind carries none / the model omitted it.
+ *
+ * The intent is presentation metadata authored by the model *for the user* —
+ * "Run unit tests for the parser" — rendered as the row title in place of the
+ * bare category label. Extraction is kind-scoped via
+ * {@link ToolCategoryInfo.intentArgField} (shell-only today) so a same-named
+ * REAL argument on another kind (e.g. the sub-agent task tool's
+ * `description`, which is its subject) is never misread as an intent.
+ */
+export function extractIntent(toolCall: ToolCall): string | null {
+  const info = resolveToolCategoryFromCall(toolCall);
+  if (!info.intentArgField || !toolCall.args) return null;
+  const value = toolCall.args[info.intentArgField];
+  return typeof value === "string" && value.length > 0 ? value : null;
+}
+
+/**
+ * {@link extractIntent} for surfaces that carry a JSON `argsPreview` string
+ * instead of a full {@link ToolCall} — notably `PendingApproval`. Same
+ * kind-scoping; returns `null` on parse failure or when absent.
+ */
+export function extractIntentFromPreview(
+  toolName: string,
+  argsPreview: string,
+  mcpServerSlug?: string,
+  toolKind?: ToolKind,
+): string | null {
+  if (!argsPreview) return null;
+
+  const info =
+    toolKind !== undefined
+      ? resolveToolCategoryFromKind(toolKind, toolName, mcpServerSlug)
+      : resolveToolCategory(toolName, mcpServerSlug);
+  if (!info.intentArgField) return null;
+
+  try {
+    const parsed = JSON.parse(argsPreview);
+    if (typeof parsed !== "object" || parsed === null) return null;
+    const value = (parsed as Record<string, unknown>)[info.intentArgField];
+    return typeof value === "string" && value.length > 0 ? value : null;
+  } catch {
+    return null;
+  }
+}
+
+// Intent-title extraction lives in @stigmer/sdk's tool-view module — the
+// cross-surface single source of truth the intent-title.json fixture pins —
+// so React, Ink, and the CLI's headless renderers share one implementation.
+// Re-exported here because this module is where React's public tool-view API
+// surfaced them first (#677).
+export { SHELL_INTENT_ARG_FIELD, extractShellIntent } from "@stigmer/sdk";
+
+/**
+ * Preview-string twin of {@link extractShellIntent} for surfaces that carry a
+ * `PendingApproval` (JSON `argsPreview`) instead of a full {@link ToolCall} —
+ * mirrors {@link extractPrimaryArgFromPreview}'s kind resolution.
+ */
+export function extractShellIntentFromPreview(
+  toolName: string,
+  argsPreview: string,
+  mcpServerSlug?: string,
+  toolKind?: ToolKind,
+): string | null {
+  if (!argsPreview) return null;
+
+  const kind =
+    toolKind !== undefined && toolKind !== ToolKind.UNSPECIFIED
+      ? toolKind
+      : resolveToolKindByName(toolName, mcpServerSlug);
+  if (kind !== ToolKind.SHELL) return null;
+
+  try {
+    const parsed = JSON.parse(argsPreview);
+    if (typeof parsed !== "object" || parsed === null) return null;
+    return shellIntentFromArgs(kind, parsed as JsonObject);
+  } catch {
+    return null;
+  }
+}
+
 const WRITE_CONTENT_FIELDS = [
   "contents",
   "content",

package/src/execution/tool-presenter.ts

@@ -19,6 +19,7 @@ import type { ToolResultView } from "@stigmer/sdk";
 import {
   resolveToolCategoryFromCall,
   extractPrimaryArg,
+  extractShellIntent,
   defaultChromeForCategory,
   defaultDisclosureForCategory,
   isRunGroupableCategory,
@@ -124,6 +125,21 @@ export interface ToolPresentation {
   readonly category: ToolCategory;
   /** Display label, e.g. "Edit", "Shell". */
   readonly label: string;
+  /**
+   * The model-authored intent phrase for a SHELL call (stigmer#276), or null
+   * when absent (legacy executions, skipped optional arg, non-shell kinds).
+   * Raw extraction — precedence against overrides is resolved in
+   * {@link ToolPresentation.title}.
+   */
+  readonly intent: string | null;
+  /**
+   * The row title: a registered presenter's `label` override wins (a host's
+   * explicit wording is never displaced by model output), then the
+   * model-authored {@link intent}, then the category {@link label}. Renderers
+   * that title a row use this; {@link label} stays the short kind label for
+   * chips and badges.
+   */
+  readonly title: string;
   /** Primary argument (path, command, pattern...), or null. */
   readonly primaryArg: string | null;
   /** Normalized result view for rendering with {@link ResultView}. */
@@ -166,7 +182,10 @@ export function useToolPresentation(toolCall: ToolCall): ToolPresentation {
     const result = normalizeToolResult(toolCall);
     const override = registry.get(kind);
 
-    const label = override?.label?.(toolCall) ?? categoryInfo.label;
+    const overrideLabel = override?.label?.(toolCall);
+    const label = overrideLabel ?? categoryInfo.label;
+    const intent = extractShellIntent(toolCall);
+    const title = overrideLabel ?? intent ?? categoryInfo.label;
     const resultSummary =
       override?.summary?.(toolCall, result) ?? summarizeResultView(result);
     const disclosure =
@@ -183,6 +202,8 @@ export function useToolPresentation(toolCall: ToolCall): ToolPresentation {
       kind,
       category: categoryInfo.category,
       label,
+      intent,
+      title,
       primaryArg: extractPrimaryArg(toolCall),
       result,
       resultSummary,

package/src/iam-policy/PeopleWithAccess.tsx

@@ -4,6 +4,7 @@ import { useCallback, useState } from "react";
 import type { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
 import type { PrincipalAccess } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/io_pb";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_LIST } from "../internal/element-resets.js";
 import { getUserMessage } from "@stigmer/sdk";
 import { useShareFlow, type ShareFlowResource } from "./useShareFlow.js";
 import { GrantAccessForm } from "./GrantAccessForm.js";
@@ -83,7 +84,7 @@ export function PeopleWithAccess({
         )}
 
         {!isLoading && accessList.length > 0 && (
-          <ul className="stg:space-y-1 stg:mt-2" aria-label="People with access">
+          <ul className={cn(UNSTYLED_LIST, "stg:space-y-1 stg:mt-2")} aria-label="People with access">
             {accessList.map((entry) => (
               <AccessEntry
                 key={entry.principal?.id ?? "unknown"}

package/src/iam-policy/PrincipalPicker.tsx

@@ -3,6 +3,7 @@
 import { useCallback, useId, useMemo, useRef, useState } from "react";
 import type { ApiResourceRefView } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/io_pb";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_LIST } from "../internal/element-resets.js";
 import { getUserMessage } from "@stigmer/sdk";
 import { useResourceAccess } from "./useResourceAccess.js";
 import { ProviderBadge, providerLabel } from "./ProviderBadge.js";
@@ -238,6 +239,7 @@ export function PrincipalPicker({
             role="listbox"
             aria-label="Organization members"
             className={cn(
+              UNSTYLED_LIST,
               "stg:absolute stg:z-10 stg:mt-1 stg:max-h-56 stg:w-full stg:overflow-auto stg:rounded-md stg:border stg:border-border stg:bg-popover stg:py-1 stg:shadow-md",
             )}
           >

package/src/iam-policy/RoleSelector.tsx

@@ -4,6 +4,7 @@ import { useId } from "react";
 import type { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
 import type { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_FIELDSET } from "../internal/element-resets.js";
 import { useRoleSelector } from "./useRoleSelector.js";
 
 /** Props for {@link RoleSelector}. */
@@ -73,7 +74,7 @@ export function RoleSelector({
   }
 
   return (
-    <fieldset className={cn("stg:space-y-1.5", className)}>
+    <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-1.5", className)}>
       <legend className="stg:text-xs stg:font-medium stg:text-foreground">Role</legend>
       <div className="stg:flex stg:flex-wrap stg:gap-2">
         {options.map((opt) => {

package/src/identity-provider/CreateIdentityProviderForm.tsx

@@ -2,6 +2,7 @@
 
 import { type FormEvent, useCallback, useId, useState } from "react";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_FIELDSET } from "../internal/element-resets.js";
 import { getUserMessage } from "@stigmer/sdk";
 import type { IdentityProvider } from "@stigmer/protos/ai/stigmer/iam/identityprovider/v1/api_pb";
 import { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
@@ -388,7 +389,7 @@ function JitSection({
   }
 
   return (
-    <fieldset className="stg:space-y-2.5" disabled={disabled}>
+    <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-2.5")} disabled={disabled}>
       <hr className="stg:border-border-muted" />
       <legend className="stg:text-xs stg:font-medium stg:text-foreground">
         JIT provisioning

package/src/identity-provider/IdentityProviderDetailPanel.tsx

@@ -2,6 +2,7 @@
 
 import { type FormEvent, useCallback, useId, useRef, useState } from "react";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_FIELDSET } from "../internal/element-resets.js";
 import { getUserMessage } from "@stigmer/sdk";
 import type { IdentityProvider } from "@stigmer/protos/ai/stigmer/iam/identityprovider/v1/api_pb";
 import { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
@@ -674,7 +675,7 @@ function JitEditSection({
   }
 
   return (
-    <fieldset className="stg:space-y-2.5" disabled={disabled}>
+    <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-2.5")} disabled={disabled}>
       <hr className="stg:border-border-muted" />
       <legend className="stg:text-xs stg:font-medium stg:text-foreground">
         JIT provisioning

package/src/identity-provider/IdentityProviderWizard.tsx

@@ -2,6 +2,7 @@
 
 import { type FormEvent, useCallback, useId, useState } from "react";
 import { cn } from "@stigmer/theme";
+import { UNSTYLED_FIELDSET } from "../internal/element-resets.js";
 import { getUserMessage } from "@stigmer/sdk";
 import type { IdentityProvider } from "@stigmer/protos/ai/stigmer/iam/identityprovider/v1/api_pb";
 import { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
@@ -838,7 +839,7 @@ function JitProvisioningSection({
   }
 
   return (
-    <fieldset className="stg:space-y-2.5" disabled={disabled}>
+    <fieldset className={cn(UNSTYLED_FIELDSET, "stg:space-y-2.5")} disabled={disabled}>
       <hr className="stg:border-border-muted" />
       <legend className="stg:text-xs stg:font-medium stg:text-foreground">
         JIT provisioning