From f69e1d7dec64390966b451fa09d01a524c7705bf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= <mbombeck@gmail.com>
Date: Thu, 6 Aug 2026 04:23:17 +0200
Subject: [PATCH] feat: add managed settings navigation

- Show only guardian settings for managed records\n- Keep record-scoped settings and exit context visible
---
 e2e/v137-sharing-managed-profiles.spec.ts     | 14 ++++++++++
 .../settings/managed-integration-status.tsx   | 13 ++++++++--
 .../managed-record-settings-section.tsx       |  6 ++++-
 src/components/settings/settings-shell.tsx    | 26 ++++++++++++++++---
 4 files changed, 53 insertions(+), 6 deletions(-)

diff --git a/e2e/v137-sharing-managed-profiles.spec.ts b/e2e/v137-sharing-managed-profiles.spec.ts
index 8546db512..5f4eb88c5 100644
--- a/e2e/v137-sharing-managed-profiles.spec.ts
+++ b/e2e/v137-sharing-managed-profiles.spec.ts
@@ -22,4 +22,18 @@ test.describe("sharing release journey anchors", () => {
       "manage-mutation-activity-and-fenced-settings",
     ]);
   });
+
+  test("managed profile lifecycle", () => {
+    const managedJourneyNames = RELEASE_JOURNEYS.filter((journey) =>
+      [
+        "managed-profile-creation-delegation-and-revocation",
+        "manage-mutation-activity-and-fenced-settings",
+      ].includes(journey.name),
+    ).map((journey) => journey.name);
+
+    expect(managedJourneyNames).toEqual([
+      "managed-profile-creation-delegation-and-revocation",
+      "manage-mutation-activity-and-fenced-settings",
+    ]);
+  });
 });
diff --git a/src/components/settings/managed-integration-status.tsx b/src/components/settings/managed-integration-status.tsx
index fe94431e5..4606edb09 100644
--- a/src/components/settings/managed-integration-status.tsx
+++ b/src/components/settings/managed-integration-status.tsx
@@ -80,7 +80,12 @@ export function ManagedIntegrationStatus() {
 
   if (statusQuery.isLoading || !statusQuery.data) {
     return (
-      <SettingsCard aria-busy="true" aria-live="polite">
+      <SettingsCard
+        aria-busy="true"
+        aria-live="polite"
+        data-record-id={recordId ?? undefined}
+        data-record-settings-family="integrations"
+      >
         <SettingsCardHeader
           icon={Plug}
           title={t("settings.sections.integrations.title")}
@@ -91,7 +96,11 @@ export function ManagedIntegrationStatus() {
   }
 
   return (
-    <SettingsCard aria-labelledby="managed-integration-status-title">
+    <SettingsCard
+      aria-labelledby="managed-integration-status-title"
+      data-record-id={recordId ?? undefined}
+      data-record-settings-family="integrations"
+    >
       <SettingsCardHeader
         icon={Plug}
         title={t("settings.sections.integrations.title")}
diff --git a/src/components/settings/managed-record-settings-section.tsx b/src/components/settings/managed-record-settings-section.tsx
index 76b30e62b..f6e66e601 100644
--- a/src/components/settings/managed-record-settings-section.tsx
+++ b/src/components/settings/managed-record-settings-section.tsx
@@ -984,7 +984,11 @@ export function ManagedRecordSettingsSection({
   }
 
   return (
-    <SettingsCard aria-busy={query.isLoading}>
+    <SettingsCard
+      aria-busy={query.isLoading}
+      data-record-id={recordId ?? undefined}
+      data-record-settings-family={family}
+    >
       <SettingsCardHeader
         icon={Settings}
         title={t(`settings.sharedRecord.managedSettings.${family}.title`)}
diff --git a/src/components/settings/settings-shell.tsx b/src/components/settings/settings-shell.tsx
index e574259f5..810b527d5 100644
--- a/src/components/settings/settings-shell.tsx
+++ b/src/components/settings/settings-shell.tsx
@@ -48,6 +48,7 @@ import { useAuth } from "@/hooks/use-auth";
 import { useMounted } from "@/hooks/use-mounted";
 import { useTranslations } from "@/lib/i18n/context";
 import type { ModuleKey } from "@/lib/modules/registry";
+import { classifySettingsDestination } from "@/lib/record-settings";
 import {
   SETTINGS_SECTION_SLUGS,
   isSettingsSectionSlug,
@@ -430,13 +431,28 @@ export function SettingsShell({
   // the two passes disagreeing.
   const hydrated = useMounted();
   const modules = user?.modules;
-  const visibleSections = SETTINGS_SECTIONS.filter(
+  const activeRecord = user?.accountAccess?.active ?? null;
+  const allVisibleSections = SETTINGS_SECTIONS.filter(
     (section) =>
       !hydrated ||
       !section.moduleGate ||
       modules?.[section.moduleGate] !== false,
   );
-  const activeSection = visibleSections.find(
+
+  // The server has already resolved which record is active. In a managed
+  // profile, only guardian settings are a navigation destination; the section
+  // gate remains responsible for refusing any direct URL that is not here.
+  // Keep `allVisibleSections` for the active heading so a direct unavailable
+  // link identifies itself before the gate explains why it cannot open.
+  const visibleSections =
+    activeRecord?.recordKind === "managed"
+      ? allVisibleSections.filter(
+          (section) =>
+            classifySettingsDestination(section.slug).kind ===
+            "managed-guardian",
+        )
+      : allVisibleSections;
+  const activeSection = allVisibleSections.find(
     (section) => section.slug === activeSlug,
   );
 
@@ -539,7 +555,11 @@ export function SettingsShell({
   // producing visibly more top/bottom whitespace on Settings/Admin
   // pages than on Dashboard/Insights/Measurements.
   return (
-    <div className="mx-auto w-full max-w-screen-xl">
+    <div
+      className="mx-auto w-full max-w-screen-xl"
+      data-active-record-id={activeRecord?.accountId}
+      data-record-kind={activeRecord?.recordKind}
+    >
       {/* v1.18.6.1 — on mobile the heading sits above the chip strip; on
           desktop it is rendered inside the grid (row 1 / content column) so
           it does not paint twice. */}