From 4bbe1e05dd6e53566b35a0b55f1faeb5083c4252 Mon Sep 17 00:00:00 2001
From: Sawyer Cutler <sawyer@dirtroad.dev>
Date: Sun, 23 Aug 2026 11:13:23 -0700
Subject: [PATCH] CL-6841: Delete dead AgentSection and CredentialsSection

Neither section is registered or called. Connections owns key management;
agent prefs have no hub store. Drop the files, exports, orphaned agent*
strings (keep timezone copy used by Account), and credentials-only strings.
---
 packages/settings-ui/README.md                |   4 +-
 packages/settings-ui/src/agent-section.tsx    | 161 -------
 .../settings-ui/src/credentials-section.tsx   | 453 ------------------
 packages/settings-ui/src/index.ts             |   5 -
 packages/settings-ui/src/section-registry.tsx |   4 +-
 packages/settings-ui/src/strings.ts           |  54 ---
 .../test/credentials-section.test.tsx         | 113 -----
 .../settings-ui/test/grants-section.test.tsx  |   2 +-
 8 files changed, 5 insertions(+), 791 deletions(-)
 delete mode 100644 packages/settings-ui/src/agent-section.tsx
 delete mode 100644 packages/settings-ui/src/credentials-section.tsx
 delete mode 100644 packages/settings-ui/test/credentials-section.test.tsx

diff --git a/packages/settings-ui/README.md b/packages/settings-ui/README.md
index 2e06d732e..f61041aa4 100644
--- a/packages/settings-ui/README.md
+++ b/packages/settings-ui/README.md
@@ -23,8 +23,8 @@ alongside these.
 - `section-registry.tsx` — the Account/Everyone grouping, ordering, icons,
   and tenancy gates
 - `people-section.tsx` / `roles-section.tsx` / `grants-section.tsx` /
-  `credentials-section.tsx` / `connections-section.tsx` — the Everyone-group
-  and account-scoped management surfaces, each with its own API module
+  `connections-section.tsx` — the Everyone-group and account-scoped
+  management surfaces, each with its own API module
 - `account-section.tsx` / `notifications-section.tsx` / `audit-section.tsx`
   — the Account-group surfaces
 - `access.ts` / `tenancy-api.ts` — tenancy-gate resolution and the
diff --git a/packages/settings-ui/src/agent-section.tsx b/packages/settings-ui/src/agent-section.tsx
deleted file mode 100644
index d449dfe59..000000000
--- a/packages/settings-ui/src/agent-section.tsx
+++ /dev/null
@@ -1,161 +0,0 @@
-// Personal "Your agent" settings: autonomy, morning brief, standing
-// instructions, pinned skills, and inference dials. No hub preference store
-// exists yet for these fields — the form is interactive for layout parity and
-// holds draft state only; save is honest about that.
-//
-// REMOVED FROM THE SETTINGS REGISTRY (see section-registry.tsx): six fields
-// that save nothing are fake controls, not a settings section — honest
-// absence beats that. Re-add the "agent" section to
-// `SETTINGS_SECTION_GROUPS`'s "personal" group only once a hub preference
-// store exists for these fields and `handleSave` actually persists them,
-// not before.
-
-import { Button, Input, SettingsPanel } from "@corbits/react-ui";
-import { useState } from "react";
-
-import { SETTINGS_STRINGS } from "./strings";
-
-const AUTONOMY_OPTIONS = [
-  { value: "prepare", label: SETTINGS_STRINGS.agentAutonomyPrepare },
-  { value: "gated", label: SETTINGS_STRINGS.agentAutonomyGated },
-  { value: "autonomous", label: SETTINGS_STRINGS.agentAutonomyAutonomous },
-] as const;
-
-const BRIEF_OPTIONS = [
-  { value: "off", label: SETTINGS_STRINGS.agentBriefOff },
-  { value: "07:30", label: SETTINGS_STRINGS.agentBrief0730 },
-  { value: "09:00", label: SETTINGS_STRINGS.agentBrief0900 },
-] as const;
-
-const DEFAULT_PINNED = ["Web research", "Long-form write", "Spreadsheet ops"];
-
-export function AgentSection() {
-  const [autonomy, setAutonomy] = useState<string>("gated");
-  const [brief, setBrief] = useState<string>("07:30");
-  const [instructions, setInstructions] = useState<string>(
-    SETTINGS_STRINGS.agentInstructionsDefault,
-  );
-  const [pinned, setPinned] = useState<readonly string[]>(DEFAULT_PINNED);
-  const [creativity, setCreativity] = useState(35);
-  const [thinking, setThinking] = useState(60);
-  const [note, setNote] = useState<string | null>(null);
-
-  function handleSave() {
-    setNote(SETTINGS_STRINGS.agentSaveHonesty);
-  }
-
-  function removePin(skill: string) {
-    setPinned((prev) => prev.filter((s) => s !== skill));
-  }
-
-  return (
-    <SettingsPanel
-      title={SETTINGS_STRINGS.agentSectionTitle}
-      description={SETTINGS_STRINGS.agentSectionDescription}
-    >
-      <h3 className="settings-subhead">
-        {SETTINGS_STRINGS.agentAutonomyHeading}
-      </h3>
-      <label className="settings-form-field">
-        <span>{SETTINGS_STRINGS.agentAutonomyLabel}</span>
-        <select
-          className="settings-select"
-          value={autonomy}
-          onChange={(event) => setAutonomy(event.target.value)}
-        >
-          {AUTONOMY_OPTIONS.map((option) => (
-            <option key={option.value} value={option.value}>
-              {option.label}
-            </option>
-          ))}
-        </select>
-      </label>
-      <label className="settings-form-field">
-        <span>{SETTINGS_STRINGS.agentBriefLabel}</span>
-        <select
-          className="settings-select"
-          value={brief}
-          onChange={(event) => setBrief(event.target.value)}
-        >
-          {BRIEF_OPTIONS.map((option) => (
-            <option key={option.value} value={option.value}>
-              {option.label}
-            </option>
-          ))}
-        </select>
-      </label>
-
-      <h3 className="settings-subhead">
-        {SETTINGS_STRINGS.agentInstructionsHeading}
-      </h3>
-      <label className="settings-form-field">
-        <span>{SETTINGS_STRINGS.agentInstructionsLabel}</span>
-        <textarea
-          className="settings-textarea"
-          rows={3}
-          value={instructions}
-          onChange={(event) => setInstructions(event.target.value)}
-        />
-      </label>
-
-      <h3 className="settings-subhead">
-        {SETTINGS_STRINGS.agentPinnedHeading}
-      </h3>
-      <div className="settings-chip-row">
-        {pinned.map((skill) => (
-          <span key={skill} className="settings-chip">
-            {skill}
-            <button
-              type="button"
-              className="settings-chip-remove"
-              aria-label={`Unpin ${skill}`}
-              onClick={() => removePin(skill)}
-            >
-              ×
-            </button>
-          </span>
-        ))}
-      </div>
-      <p className="settings-field-hint">{SETTINGS_STRINGS.agentPinnedHint}</p>
-
-      <h3 className="settings-subhead">
-        {SETTINGS_STRINGS.agentInferenceHeading}
-      </h3>
-      <label className="settings-form-field">
-        <span>
-          {SETTINGS_STRINGS.agentCreativityLabel} ({creativity})
-        </span>
-        <Input
-          type="range"
-          min={0}
-          max={100}
-          value={creativity}
-          onChange={(event) => setCreativity(Number(event.target.value))}
-        />
-      </label>
-      <label className="settings-form-field">
-        <span>
-          {SETTINGS_STRINGS.agentThinkingLabel} ({thinking})
-        </span>
-        <Input
-          type="range"
-          min={0}
-          max={100}
-          value={thinking}
-          onChange={(event) => setThinking(Number(event.target.value))}
-        />
-      </label>
-
-      <div className="settings-section-toolbar">
-        <Button variant="primary" onClick={handleSave}>
-          {SETTINGS_STRINGS.agentSaveAction}
-        </Button>
-      </div>
-      {note !== null ? (
-        <p className="settings-field-hint" role="status">
-          {note}
-        </p>
-      ) : null}
-    </SettingsPanel>
-  );
-}
diff --git a/packages/settings-ui/src/credentials-section.tsx b/packages/settings-ui/src/credentials-section.tsx
deleted file mode 100644
index 78c185a1b..000000000
--- a/packages/settings-ui/src/credentials-section.tsx
+++ /dev/null
@@ -1,453 +0,0 @@
-// The "Credentials" settings section: tenant-owned secrets (API keys,
-// tokens) listed without the secret material, creatable, and revocable
-// over the native `/api/tenants/:tenantId/credentials` routes.
-
-import {
-  Badge,
-  Button,
-  ConfirmButton,
-  Dialog,
-  DialogBody,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-  EmptyState,
-  Input,
-  SettingsPanel,
-  Table,
-  TableBody,
-  TableCell,
-  TableHead,
-  TableHeader,
-  TableRow,
-  toast,
-} from "@corbits/react-ui";
-import { credentialTypes } from "@intx/types";
-import type { CredentialType } from "@intx/types";
-import { Key } from "@corbits/icons";
-import { useEffect, useState } from "react";
-
-import type { APIQuery } from "@corbits/api-query";
-import {
-  QueryView,
-  UnauthenticatedError,
-  describeQueryError,
-} from "@corbits/api-query";
-import {
-  createCredential,
-  deleteCredential,
-  listCredentials,
-  listProviders,
-  type Credential,
-  type Provider,
-} from "./credentials-api";
-import { KindCards } from "./kind-cards";
-import { SETTINGS_STRINGS } from "./strings";
-
-const STATUS_TONE: Record<
-  Credential["status"],
-  "success" | "danger" | "neutral" | "info"
-> = {
-  active: "success",
-  expired: "neutral",
-  revoked: "danger",
-  error: "danger",
-};
-
-const CREDENTIAL_TYPE_LABEL: Record<CredentialType, string> = {
-  api_key: "API key",
-  oauth_token: "OAuth token",
-  certificate: "Certificate",
-  other: "Other",
-};
-
-type CredentialsData = {
-  readonly credentials: readonly Credential[];
-  readonly providers: readonly Provider[];
-};
-
-export function CredentialsSection({
-  tenantId,
-}: {
-  readonly tenantId: string | null;
-}) {
-  const [query, setQuery] = useState<APIQuery<CredentialsData>>({
-    kind: "loading",
-  });
-  const [reloadKey, setReloadKey] = useState(0);
-  const [createOpen, setCreateOpen] = useState(false);
-  const [creating, setCreating] = useState(false);
-  const [createError, setCreateError] = useState<string | null>(null);
-  const [rowError, setRowError] = useState<string | null>(null);
-  const [deletingIds, setDeletingIds] = useState<ReadonlySet<string>>(
-    new Set(),
-  );
-
-  function reload() {
-    setReloadKey((value) => value + 1);
-  }
-
-  useEffect(() => {
-    if (tenantId === null) return;
-    let cancelled = false;
-    setQuery({ kind: "loading" });
-    Promise.all([listCredentials(tenantId), listProviders(tenantId)])
-      .then(([credentials, providers]) => {
-        if (!cancelled)
-          setQuery({ kind: "ready", data: { credentials, providers } });
-      })
-      .catch((cause: unknown) => {
-        if (cancelled) return;
-        if (cause instanceof UnauthenticatedError) {
-          setQuery({ kind: "unauthenticated" });
-          return;
-        }
-        setQuery({
-          kind: "error",
-          message: describeQueryError(cause),
-          retry: reload,
-        });
-      });
-    return () => {
-      cancelled = true;
-    };
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [tenantId, reloadKey]);
-
-  if (tenantId === null) {
-    return (
-      <EmptyState
-        title={SETTINGS_STRINGS.benchNoneSelectedTitle}
-        description={SETTINGS_STRINGS.benchNoneSelectedDescription}
-      />
-    );
-  }
-
-  function handleCreate(input: {
-    readonly providerId: string;
-    readonly name: string;
-    readonly type: CredentialType;
-    readonly secret: string;
-    readonly description: string;
-  }) {
-    if (tenantId === null) return;
-    setCreating(true);
-    setCreateError(null);
-    const base = {
-      providerId: input.providerId,
-      name: input.name,
-      type: input.type,
-      secret: input.secret,
-    };
-    createCredential(
-      tenantId,
-      input.description.trim() !== ""
-        ? { ...base, description: input.description.trim() }
-        : base,
-    )
-      .then(() => {
-        setCreateOpen(false);
-        reload();
-        toast(SETTINGS_STRINGS.credentialSavedToast);
-      })
-      .catch(() => setCreateError(SETTINGS_STRINGS.credentialsCreateError))
-      .finally(() => setCreating(false));
-  }
-
-  function handleDelete(credential: Credential) {
-    if (tenantId === null) return;
-    if (deletingIds.has(credential.id)) return;
-    setRowError(null);
-    setDeletingIds((current) => new Set(current).add(credential.id));
-    deleteCredential(tenantId, credential.id)
-      .then(() => {
-        reload();
-        toast(SETTINGS_STRINGS.credentialRevokedToast);
-      })
-      .catch(() => setRowError(SETTINGS_STRINGS.credentialsDeleteError))
-      .finally(() => {
-        setDeletingIds((current) => {
-          const next = new Set(current);
-          next.delete(credential.id);
-          return next;
-        });
-      });
-  }
-
-  return (
-    <QueryView query={query} label={SETTINGS_STRINGS.credentialsLoadError}>
-      {({ credentials, providers }) => {
-        const providerNameById = new Map(
-          providers.map((provider) => [provider.id, provider.name]),
-        );
-        return (
-          <SettingsPanel
-            title={SETTINGS_STRINGS.credentialsSectionTitle}
-            description={SETTINGS_STRINGS.credentialsSectionDescription}
-          >
-            <div className="settings-section-toolbar">
-              <Button variant="primary" onClick={() => setCreateOpen(true)}>
-                {SETTINGS_STRINGS.credentialsCreateAction}
-              </Button>
-            </div>
-            {rowError !== null && (
-              <p className="settings-inline-error" role="alert">
-                {rowError}
-              </p>
-            )}
-            <CredentialsTable
-              credentials={credentials}
-              providerNameById={providerNameById}
-              onDelete={handleDelete}
-              deletingIds={deletingIds}
-            />
-            <CreateCredentialDialog
-              open={createOpen}
-              onOpenChange={setCreateOpen}
-              providers={providers}
-              onCreate={handleCreate}
-              submitting={creating}
-              error={createError}
-            />
-          </SettingsPanel>
-        );
-      }}
-    </QueryView>
-  );
-}
-
-export function CredentialsTable({
-  credentials,
-  providerNameById,
-  onDelete,
-  deletingIds = new Set(),
-}: {
-  readonly credentials: readonly Credential[];
-  readonly providerNameById: ReadonlyMap<string, string>;
-  readonly onDelete: (credential: Credential) => void;
-  readonly deletingIds?: ReadonlySet<string>;
-}) {
-  if (credentials.length === 0) {
-    return (
-      <EmptyState
-        icon={<Key />}
-        title={SETTINGS_STRINGS.credentialsEmptyTitle}
-        description={SETTINGS_STRINGS.credentialsEmptyDescription}
-      />
-    );
-  }
-  return (
-    <Table>
-      <TableHeader>
-        <TableRow>
-          <TableHead>Name</TableHead>
-          <TableHead>Provider</TableHead>
-          <TableHead>Type</TableHead>
-          <TableHead>Status</TableHead>
-          <TableHead>Actions</TableHead>
-        </TableRow>
-      </TableHeader>
-      <TableBody>
-        {credentials.map((credential) => (
-          <TableRow key={credential.id}>
-            <TableCell>{credential.name}</TableCell>
-            <TableCell>
-              {providerNameById.get(credential.providerId) ??
-                SETTINGS_STRINGS.credentialsRemovedProvider}
-            </TableCell>
-            <TableCell>
-              <span title={credential.type}>
-                {CREDENTIAL_TYPE_LABEL[credential.type]}
-              </span>
-            </TableCell>
-            <TableCell>
-              <Badge tone={STATUS_TONE[credential.status]}>
-                {credential.status}
-              </Badge>
-            </TableCell>
-            <TableCell>
-              <ConfirmButton
-                variant="destructive"
-                size="sm"
-                confirmLabel={SETTINGS_STRINGS.credentialsDeleteConfirm}
-                onConfirm={() => onDelete(credential)}
-                disabled={deletingIds.has(credential.id)}
-              >
-                {deletingIds.has(credential.id)
-                  ? SETTINGS_STRINGS.credentialsDeleting
-                  : SETTINGS_STRINGS.credentialsDelete}
-              </ConfirmButton>
-            </TableCell>
-          </TableRow>
-        ))}
-      </TableBody>
-    </Table>
-  );
-}
-export function CreateCredentialDialog({
-  open,
-  onOpenChange,
-  providers,
-  onCreate,
-  submitting,
-  error,
-}: {
-  readonly open: boolean;
-  readonly onOpenChange: (open: boolean) => void;
-  readonly providers: readonly Provider[];
-  readonly onCreate: (input: {
-    readonly providerId: string;
-    readonly name: string;
-    readonly type: CredentialType;
-    readonly secret: string;
-    readonly description: string;
-  }) => void;
-  readonly submitting: boolean;
-  readonly error: string | null;
-}) {
-  const [providerId, setProviderId] = useState("");
-  const [name, setName] = useState("");
-  const [type, setType] = useState<CredentialType>("api_key");
-  const [secret, setSecret] = useState("");
-  const [description, setDescription] = useState("");
-  const [showSecret, setShowSecret] = useState(false);
-
-  useEffect(() => {
-    if (!open) return;
-    setProviderId(providers[0]?.id ?? "");
-    setName("");
-    setType("api_key");
-    setSecret("");
-    setDescription("");
-    setShowSecret(false);
-  }, [open, providers]);
-
-  const canSubmit =
-    providerId !== "" &&
-    name.trim() !== "" &&
-    secret.trim() !== "" &&
-    !submitting;
-
-  return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent>
-        <DialogHeader>
-          <DialogTitle>
-            {SETTINGS_STRINGS.credentialsCreateDialogTitle}
-          </DialogTitle>
-          <DialogDescription>
-            {SETTINGS_STRINGS.credentialsCreateDialogDescription}
-          </DialogDescription>
-        </DialogHeader>
-        <DialogBody className="settings-form-stack">
-          <div className="settings-form-field">
-            <span>{SETTINGS_STRINGS.credentialsProviderLabel}</span>
-            {providers.length === 0 ? (
-              <p className="settings-field-hint">
-                {SETTINGS_STRINGS.credentialsNoProviders}
-              </p>
-            ) : (
-              <KindCards
-                label={SETTINGS_STRINGS.credentialsProviderLabel}
-                columns={2}
-                value={providerId}
-                onChange={setProviderId}
-                options={providers.map((provider) => ({
-                  id: provider.id,
-                  title: provider.name,
-                  description: provider.id,
-                }))}
-              />
-            )}
-          </div>
-          <label className="settings-form-field">
-            <span>{SETTINGS_STRINGS.credentialsNameLabel}</span>
-            <Input
-              value={name}
-              onChange={(event) => setName(event.target.value)}
-              placeholder={SETTINGS_STRINGS.credentialsNamePlaceholder}
-            />
-          </label>
-          <label className="settings-form-field">
-            <span>{SETTINGS_STRINGS.credentialsTypeLabel}</span>
-            <select
-              className="settings-select"
-              value={type}
-              onChange={(event) =>
-                setType(event.target.value as CredentialType)
-              }
-            >
-              {credentialTypes.map((credType) => (
-                <option key={credType} value={credType}>
-                  {CREDENTIAL_TYPE_LABEL[credType]}
-                </option>
-              ))}
-            </select>
-          </label>
-          <div className="settings-form-field">
-            <span>{SETTINGS_STRINGS.credentialsSecretLabel}</span>
-            <div className="settings-secret-row">
-              <Input
-                type={showSecret ? "text" : "password"}
-                value={secret}
-                onChange={(event) => setSecret(event.target.value)}
-                autoComplete="off"
-              />
-              <Button
-                type="button"
-                variant="outline"
-                size="sm"
-                onClick={() => setShowSecret((value) => !value)}
-              >
-                {showSecret ? "Hide" : "Show"}
-              </Button>
-            </div>
-            <p className="settings-field-hint">
-              Sealed on save — this secret is never shown again after create.
-            </p>
-          </div>
-          <label className="settings-form-field">
-            <span>{SETTINGS_STRINGS.credentialsDescriptionLabel}</span>
-            <Input
-              value={description}
-              onChange={(event) => setDescription(event.target.value)}
-            />
-          </label>
-          <p className="settings-field-hint">
-            Who can use it defaults to this workbench&apos;s agents and tools
-            that hold a grant for the provider.
-          </p>
-          {error !== null && (
-            <p className="settings-inline-error" role="alert">
-              {error}
-            </p>
-          )}
-        </DialogBody>
-        <DialogFooter>
-          <Button variant="ghost" onClick={() => onOpenChange(false)}>
-            {SETTINGS_STRINGS.credentialsCreateCancel}
-          </Button>
-          <Button
-            variant="primary"
-            disabled={!canSubmit}
-            onClick={() =>
-              onCreate({
-                providerId,
-                name: name.trim(),
-                type,
-                secret,
-                description,
-              })
-            }
-          >
-            {submitting
-              ? SETTINGS_STRINGS.credentialsCreateSubmitting
-              : SETTINGS_STRINGS.credentialsCreateSubmit}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/packages/settings-ui/src/index.ts b/packages/settings-ui/src/index.ts
index d7a5b42f6..3aa036566 100644
--- a/packages/settings-ui/src/index.ts
+++ b/packages/settings-ui/src/index.ts
@@ -39,11 +39,6 @@ export {
   GrantsTable,
   CreateGrantDialog,
 } from "./grants-section";
-export {
-  CredentialsSection,
-  CredentialsTable,
-  CreateCredentialDialog,
-} from "./credentials-section";
 export {
   ConnectionsSection,
   ConnectorRowList,
diff --git a/packages/settings-ui/src/section-registry.tsx b/packages/settings-ui/src/section-registry.tsx
index 206dbe757..1c4615b00 100644
--- a/packages/settings-ui/src/section-registry.tsx
+++ b/packages/settings-ui/src/section-registry.tsx
@@ -55,8 +55,8 @@ const SETTINGS_SECTION_GROUPS: readonly SettingsSectionGroupDef[] = [
   {
     id: "account",
     label: SETTINGS_STRINGS.groupAccountLabel,
-    // No "Your agent" section here: it has no preference store to back it —
-    // see agent-section.tsx's header comment for the re-add condition.
+    // No "Your agent" section here: it has no preference store to back it.
+    // Re-add only once a hub preference store exists and save actually persists.
     // Account (General) leads — it is the reference's landing section
     // (account card, theme, timezone); notifications follow.
     sections: [
diff --git a/packages/settings-ui/src/strings.ts b/packages/settings-ui/src/strings.ts
index 99fd34c14..52759b5df 100644
--- a/packages/settings-ui/src/strings.ts
+++ b/packages/settings-ui/src/strings.ts
@@ -12,32 +12,6 @@ export const SETTINGS_STRINGS = {
   advancedSectionsSummary: "Advanced",
   advancedSectionsHint: "Roles, granular permissions, and activity history.",
 
-  agentSectionTitle: "Your agent",
-  agentSectionDescription:
-    "How your default agent works for you on this workbench.",
-  agentAutonomyHeading: "Autonomy",
-  agentAutonomyLabel: "Default behavior",
-  agentAutonomyPrepare: "Prepare only — draft, never send",
-  agentAutonomyGated: "Execute with gates — ask before side effects",
-  agentAutonomyAutonomous: "Autonomous in approved spaces",
-  agentBriefLabel: "Morning brief",
-  agentBriefOff: "Off",
-  agentBrief0730: "07:30 local",
-  agentBrief0900: "09:00 local",
-  agentInstructionsHeading: "Standing instructions",
-  agentInstructionsLabel: "Applied to every chat",
-  agentInstructionsDefault:
-    "Concise, multiplayer-aware. Prefer canvas for artifacts. End turns with a clear next step.",
-  agentPinnedHeading: "Pinned skills",
-  agentPinnedHint:
-    "Pinning edits the skill library when that store is wired; chips here are draft-only for now.",
-  agentInferenceHeading: "Inference",
-  agentCreativityLabel: "Creativity",
-  agentThinkingLabel: "Thinking budget",
-  agentSaveAction: "Save",
-  agentSaveHonesty:
-    "Draft only — personal agent prefs are not stored on the hub yet.",
-
   notificationsSectionTitle: "Notifications",
   notificationsSectionDescription: "How activity reaches you.",
   notificationsMentions: "Mentions & DMs",
@@ -213,34 +187,6 @@ export const SETTINGS_STRINGS = {
   grantCreatedToast: "Rule created",
   grantRevokedToast: "Rule revoked",
 
-  credentialsSectionTitle: "Keys",
-  credentialsSectionDescription:
-    "API keys and tokens this workbench stores for providers. Secrets are write-only — they are never shown again after create.",
-  credentialsLoadError: "this workbench's keys",
-  credentialsEmptyTitle: "No keys yet",
-  credentialsEmptyDescription:
-    "Add a key so your agents can reach this service.",
-  credentialsCreateAction: "New key",
-  credentialsCreateDialogTitle: "New key",
-  credentialsCreateDialogDescription:
-    "Store a secret against a provider. The secret is encrypted and never returned on later reads.",
-  credentialsProviderLabel: "Provider",
-  credentialsNoProviders: "No providers configured yet",
-  credentialsNameLabel: "Name",
-  credentialsNamePlaceholder: "e.g. OpenAI production",
-  credentialsTypeLabel: "Type",
-  credentialsSecretLabel: "Secret",
-  credentialsDescriptionLabel: "Description (optional)",
-  credentialsCreateSubmit: "Store",
-  credentialsCreateSubmitting: "Storing…",
-  credentialsCreateCancel: "Cancel",
-  credentialsCreateError: "Couldn't store that key — try again.",
-  credentialsDelete: "Revoke",
-  credentialsDeleting: "Revoking…",
-  credentialsDeleteConfirm: "Revoke for good?",
-  credentialsDeleteError: "Couldn't revoke that key — try again.",
-  credentialsRemovedProvider: "Removed provider",
-  credentialSavedToast: "Key saved · value hidden",
   credentialRevokedToast: "Key revoked",
 
   connectionsSectionTitle: "AI providers",
diff --git a/packages/settings-ui/test/credentials-section.test.tsx b/packages/settings-ui/test/credentials-section.test.tsx
deleted file mode 100644
index b41326ad0..000000000
--- a/packages/settings-ui/test/credentials-section.test.tsx
+++ /dev/null
@@ -1,113 +0,0 @@
-// CredentialsTable's Type column: a raw enum ("oauth_token") reads as
-// engineering internals, not settings copy — the visible cell shows a
-// human label, and the raw slug survives only as a title/tooltip.
-
-import { describe, expect, test } from "bun:test";
-import { act } from "react";
-import { createRoot } from "react-dom/client";
-import type { Root } from "react-dom/client";
-import { renderToStaticMarkup } from "react-dom/server";
-
-import { CredentialsTable } from "../src/credentials-section";
-
-const timestamps = {
-  createdAt: "2026-01-01T00:00:00.000Z",
-  updatedAt: "2026-01-01T00:00:00.000Z",
-};
-
-function visibleText(markup: string): string {
-  return markup.replace(/<[^>]*>/g, " ");
-}
-
-describe("CredentialsTable", () => {
-  test("shows a human label for the credential type, not the raw enum value", () => {
-    const markup = renderToStaticMarkup(
-      <CredentialsTable
-        credentials={[
-          {
-            id: "cred_1",
-            tenantId: "tnt_1",
-            providerId: "prov_1",
-            name: "OpenAI production",
-            type: "oauth_token",
-            status: "active",
-            ...timestamps,
-          },
-        ]}
-        providerNameById={new Map([["prov_1", "OpenAI"]])}
-        onDelete={() => undefined}
-      />,
-    );
-    expect(visibleText(markup)).toContain("OAuth token");
-    expect(visibleText(markup)).not.toContain("oauth_token");
-    expect(markup).toContain('title="oauth_token"');
-  });
-
-  test("a provider missing from providerNameById reads as Removed provider, never the raw providerId", () => {
-    const markup = renderToStaticMarkup(
-      <CredentialsTable
-        credentials={[
-          {
-            id: "cred_1",
-            tenantId: "tnt_1",
-            providerId: "prov_gone",
-            name: "Old key",
-            type: "api_key",
-            status: "revoked",
-            ...timestamps,
-          },
-        ]}
-        providerNameById={new Map()}
-        onDelete={() => undefined}
-      />,
-    );
-    expect(visibleText(markup)).toContain("Removed provider");
-    expect(visibleText(markup)).not.toContain("prov_gone");
-  });
-
-  test("a row already deleting is disabled — a second click never fires a second delete", () => {
-    const credential = {
-      id: "cred_1",
-      tenantId: "tnt_1",
-      providerId: "prov_1",
-      name: "OpenAI production",
-      type: "api_key" as const,
-      status: "active" as const,
-      ...timestamps,
-    };
-    let deleteCalls = 0;
-    const container = document.createElement("div");
-    document.body.appendChild(container);
-    const root: Root = createRoot(container);
-    act(() => {
-      root.render(
-        <CredentialsTable
-          credentials={[credential]}
-          providerNameById={new Map([["prov_1", "OpenAI"]])}
-          onDelete={() => {
-            deleteCalls += 1;
-          }}
-          deletingIds={new Set(["cred_1"])}
-        />,
-      );
-    });
-
-    const button = container.querySelector("button");
-    expect(button).not.toBeNull();
-    expect(button?.disabled).toBe(true);
-    expect(button?.textContent).toContain("Revoking");
-
-    // Two clicks (arm + confirm) on a disabled button must never reach
-    // onDelete — the busy row is not clickable at all.
-    act(() => {
-      button?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
-    });
-    act(() => {
-      button?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
-    });
-    expect(deleteCalls).toBe(0);
-
-    act(() => root.unmount());
-    container.remove();
-  });
-});
diff --git a/packages/settings-ui/test/grants-section.test.tsx b/packages/settings-ui/test/grants-section.test.tsx
index 03f64fb2f..74fcedde7 100644
--- a/packages/settings-ui/test/grants-section.test.tsx
+++ b/packages/settings-ui/test/grants-section.test.tsx
@@ -7,7 +7,7 @@
 //      resource labels ("agent workflows"), not the raw slug
 //      ("workflow-definition") — the slug survives only as a tooltip.
 //   3. target-type and resource are guided KindCards, matching the same
-//      who -> what -> effect card treatment CreateCredentialDialog uses.
+//      who -> what -> effect card treatment KindCards uses.
 
 import { describe, expect, test } from "bun:test";
 import { act } from "react";