# Agent grants, execution visualizer, and Operations sidebar release train

This train publishes coordinated platform updates across `@elevasis/core`, `@elevasis/ui`,
and `@elevasis/sdk`, then syncs the external template baseline.

## What changes for tenant projects

1. `@elevasis/sdk` adds `grant:list`, `grant:create`, and `grant:disable` for
   managing public/code-gated agent access grants through the platform API.
2. `@elevasis/ui` adds shared agent public/private controls and improves the
   agent execution visualizer with per-iteration tool activity.
3. `@elevasis/core` adds the grant audit activity contract used by platform
   activity feeds.
4. The template `.claude/registries/skill-coverage.json` now explicitly waives
   the `grant` CLI domain as operator-facing access-management tooling.

## Operator action

- Run the prepared external sync manifest from the SDK ship artifact.
- Verify each derived project updates `.claude/registries/skill-coverage.json`.
- After package baselines are bumped, verify derived package manifests point at
  the newly published `@elevasis/core`, `@elevasis/ui`, and `@elevasis/sdk`
  versions selected by the release steps.

## Manual-review exclusions

Operations sidebar root-route parity for `external/nirvana-marketing` and
`external/ZentaraHQ` is intentionally excluded from this ship train. Their
root routes are project-specific merge-managed surfaces and should be reviewed
manually before adopting the template Operations manifest mount.
