feat(permissions): expose network permission state (#103)

frontend/src/features/agents/agents.test.tsx

@@ -21,6 +21,7 @@ import {
 
 import {
   MockAgentGateway,
+  MockPermissionGateway,
   MockProfileGateway,
   MockSystemGateway,
   MockTemplateGateway,
@@ -44,13 +45,15 @@ function renderPanel(
   profile: MockProfileGateway = new MockProfileGateway(),
   projectRoot = "/home/me/proj",
   template?: MockTemplateGateway,
+  permission: MockPermissionGateway = new MockPermissionGateway(),
 ) {
   const tmpl = template ?? new MockTemplateGateway(agent);
-  const gateways = { agent, profile, template: tmpl } as unknown as Gateways;
+  const gateways = { agent, profile, template: tmpl, permission } as unknown as Gateways;
   return {
     agent,
     profile,
     template: tmpl,
+    permission,
     ...render(
       <DIProvider gateways={gateways}>
         <AgentsPanel projectId={PROJECT_ID} projectRoot={projectRoot} />
@@ -108,6 +111,27 @@ describe("AgentsPanel (with MockAgentGateway)", () => {
     expect(agent).toBeTruthy();
   });
 
+  it("shows the resolved network permission badge for an agent", async () => {
+    const agent = new MockAgentGateway();
+    const permission = new MockPermissionGateway();
+    const created = await agent.createAgent(PROJECT_ID, {
+      name: "Builder",
+      profileId: "p1",
+    });
+    permission.setResolvedAgentSystemPermissions(created.id, {
+      wanted: "allow",
+      effective: "deny",
+      runtimeLock: { state: "locked", reason: "Runtime locked." },
+      control: { mode: "readOnly", reason: "Runtime locked." },
+    });
+
+    renderPanel(agent, new MockProfileGateway(), "/home/me/proj", undefined, permission);
+
+    await waitFor(() => {
+      expect(screen.getByText("Réseau: Verrouillé")).toBeTruthy();
+    });
+  });
+
   it("the Create button is disabled when the name is empty", async () => {
     renderPanel();
     await waitForIdle();