@agent-native/core 0.151.1 → 0.152.0

package/dist/client/sharing/ShareButton.js

@@ -50,6 +50,15 @@ const ROLE_OPTIONS = [
         description: "Can edit and manage access",
     },
 ];
+function roleMeta(role, copy) {
+    const base = ROLE_OPTIONS.find((option) => option.value === role) ?? ROLE_OPTIONS[0];
+    const override = copy?.[role];
+    return {
+        ...base,
+        label: override?.label ?? base.label,
+        description: override?.description ?? base.description,
+    };
+}
 function isShareNestedOverlayTarget(target) {
     return (target instanceof Element &&
         target.closest(`[${SHARE_NESTED_OVERLAY_ATTR}]`) !== null);
@@ -88,7 +97,7 @@ export function ShareButton(props) {
 }
 function SharePanel(props) {
     const { resourceTitle, controller } = props;
-    const { inviteEmail, setInviteEmail: onInviteEmailChange, activeShareTab, handleShareTabChange, data, policy, visibility, canManage, role, setRole, notifyPeople, setNotifyPeople, shareError, setShareError, suggestionsOpen, setSuggestionsOpen, inFlight, memberSearch, memberSuggestions, knownMembers, shares, handleVisibility, handleHideInSearch, handleAdd, handleChangeRole, handleRemove, } = controller;
+    const { inviteEmail, setInviteEmail: onInviteEmailChange, activeShareTab, handleShareTabChange, data, policy, visibility, canManage, role, setRole, notifyPeople, setNotifyPeople, shareMessage, setShareMessage, messageOpen, setMessageOpen, shareError, setShareError, suggestionsOpen, setSuggestionsOpen, inFlight, memberSearch, memberSuggestions, knownMembers, shares, handleVisibility, handleHideInSearch, handleAdd, handleChangeRole, handleRemove, } = controller;
     const hasInviteEmail = inviteEmail.trim().length > 0;
     const isLoading = data === undefined;
     const meta = visibilityMeta(visibility, props.visibilityCopy);
@@ -117,7 +126,7 @@ function SharePanel(props) {
                                         setShareError(null);
                                 }, onSubmit: handleAdd, placeholder: policy.requireOrgMemberForUserShares
                                     ? "Add people from your organization"
-                                    : "Add people by email", suggestions: memberSuggestions, search: memberSearch }), _jsx(RoleSelect, { value: role, onChange: setRole }), _jsx("button", { type: "button", onClick: handleAdd, disabled: !hasInviteEmail, className: BUTTON_PRIMARY_SM, children: "Add" })] }), shareError ? (_jsx("div", { role: "alert", className: "rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: shareError })) : null, hasInviteEmail ? (_jsxs("label", { className: "inline-flex items-center gap-2 text-xs text-muted-foreground", children: [_jsx("input", { type: "checkbox", checked: notifyPeople, onChange: (e) => setNotifyPeople(e.target.checked), className: "h-4 w-4 rounded border-input accent-primary" }), "Notify people"] })) : null] })) : null, _jsx("div", { className: "mb-2 text-sm font-semibold", children: peopleAccessLabel }), _jsxs("ul", { className: "mb-4 flex flex-col gap-1 list-none p-0 m-0", children: [data?.ownerEmail ? (_jsxs("li", { className: "flex items-center gap-3 px-1 py-1.5 text-sm", children: [_jsx(Avatar, { label: displayName(data.ownerEmail, knownMembers) }), _jsx("span", { className: "flex-1 min-w-0 truncate", children: displayName(data.ownerEmail, knownMembers) }), _jsx("span", { className: "text-xs text-muted-foreground", children: "Owner" })] })) : null, shares.map((s) => (_jsxs("li", { className: cn("flex items-center gap-3 px-1 py-1.5 text-sm", inFlight.has(keyOf(s)) && "opacity-60"), children: [_jsx(Avatar, { label: principalLabel(s, knownMembers), org: s.principalType === "org" }), _jsx("span", { className: "flex-1 min-w-0 truncate", children: principalLabel(s, knownMembers) }), canManage ? (_jsx(RoleSelect, { value: s.role, onChange: (r) => handleChangeRole(s, r), disabled: inFlight.has(keyOf(s)), plain: true })) : (_jsx("span", { className: "text-xs text-muted-foreground", children: cap(s.role) })), canManage ? (_jsx("button", { type: "button", "aria-label": "Remove", onClick: () => handleRemove(s), disabled: inFlight.has(keyOf(s)), className: BUTTON_GHOST_ICON, children: _jsx(IconTrash, { size: 14 }) })) : null] }, keyOf(s)))), !shares.length && !data?.ownerEmail ? (_jsx("li", { className: "px-1 py-1.5 text-sm text-muted-foreground", children: "No one has access yet." })) : null] }), _jsx("div", { className: "mb-2 text-sm font-semibold", children: generalAccessLabel }), _jsxs("div", { className: "mb-4 flex items-center gap-3", children: [_jsx("span", { "aria-hidden": true, className: "inline-flex h-9 w-9 shrink-0 items-center justify-center rounded-full bg-muted text-muted-foreground", children: _jsx(meta.Icon, { size: 16, strokeWidth: 1.75 }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx(VisibilitySelect, { value: visibility, onChange: handleVisibility, disabled: !canManage, visibilityCopy: props.visibilityCopy, allowPublic: policy.allowPublic }), _jsxs("div", { className: "mt-0.5 flex flex-wrap items-center gap-x-2 gap-y-1 text-xs text-muted-foreground", children: [_jsx("span", { children: meta.description }), visibility === "org" && props.hideInSearchControl ? (_jsx(AdvancedAccessPopover, { control: props.hideInSearchControl, canManage: canManage, onToggle: handleHideInSearch })) : null] })] })] }), shareError && !canManage ? (_jsx("div", { role: "alert", className: "mb-4 rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: shareError })) : null, props.accessNote ? (_jsx("div", { className: "mb-4 rounded-md border border-border bg-muted/35 p-3 text-xs text-muted-foreground", children: props.accessNote })) : null, showShareLinks && shareUrlPlacement === "bottom" ? shareLinks : null, props.shareFooterContent] }));
+                                    : "Add people by email", suggestions: memberSuggestions, search: memberSearch }), _jsx(RoleSelect, { value: role, onChange: setRole, roleCopy: props.roleCopy }), _jsx("button", { type: "button", onClick: handleAdd, disabled: !hasInviteEmail, className: BUTTON_PRIMARY_SM, children: "Add" })] }), shareError ? (_jsx("div", { role: "alert", className: "rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: shareError })) : null, hasInviteEmail ? (_jsxs("div", { className: "flex flex-wrap items-center gap-x-3 gap-y-2 text-xs text-muted-foreground", children: [_jsxs("label", { className: "inline-flex items-center gap-2", children: [_jsx("input", { type: "checkbox", checked: notifyPeople, onChange: (e) => setNotifyPeople(e.target.checked), className: "h-4 w-4 rounded border-input accent-primary" }), "Notify people"] }), notifyPeople ? (_jsx("button", { type: "button", "aria-expanded": messageOpen, onClick: () => setMessageOpen(!messageOpen), className: "rounded-sm px-1 py-0.5 font-medium text-foreground underline decoration-border underline-offset-2 transition-colors hover:bg-accent hover:text-accent-foreground", children: messageOpen ? "Hide message" : "Add a message" })) : null] })) : null, hasInviteEmail && notifyPeople && messageOpen ? (_jsx("div", { className: "rounded-md border border-border/70 bg-muted/20 p-2.5", children: _jsx("textarea", { "aria-label": "Message", placeholder: "Add a short note (optional)", value: shareMessage, onChange: (event) => setShareMessage(event.target.value), maxLength: 500, rows: 3, className: "w-full resize-y rounded-md border border-input bg-card px-3 py-2 text-sm text-foreground placeholder:text-muted-foreground focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 focus:ring-offset-background" }) })) : null] })) : null, _jsx("div", { className: "mb-2 text-sm font-semibold", children: peopleAccessLabel }), _jsxs("ul", { className: "mb-4 flex flex-col gap-1 list-none p-0 m-0", children: [data?.ownerEmail ? (_jsxs("li", { className: "flex items-center gap-3 px-1 py-1.5 text-sm", children: [_jsx(Avatar, { label: displayName(data.ownerEmail, knownMembers) }), _jsx("span", { className: "flex-1 min-w-0 truncate", children: displayName(data.ownerEmail, knownMembers) }), _jsx("span", { className: "text-xs text-muted-foreground", children: "Owner" })] })) : null, shares.map((s) => (_jsxs("li", { className: cn("flex items-center gap-3 px-1 py-1.5 text-sm", inFlight.has(keyOf(s)) && "opacity-60"), children: [_jsx(Avatar, { label: principalLabel(s, knownMembers), org: s.principalType === "org" }), _jsx("span", { className: "flex-1 min-w-0 truncate", children: principalLabel(s, knownMembers) }), canManage ? (_jsx(RoleSelect, { value: s.role, onChange: (r) => handleChangeRole(s, r), disabled: inFlight.has(keyOf(s)), plain: true, roleCopy: props.roleCopy })) : (_jsx("span", { className: "text-xs text-muted-foreground", children: roleMeta(s.role, props.roleCopy).label })), canManage ? (_jsx("button", { type: "button", "aria-label": "Remove", onClick: () => handleRemove(s), disabled: inFlight.has(keyOf(s)), className: BUTTON_GHOST_ICON, children: _jsx(IconTrash, { size: 14 }) })) : null] }, keyOf(s)))), !shares.length && !data?.ownerEmail ? (_jsx("li", { className: "px-1 py-1.5 text-sm text-muted-foreground", children: "No one has access yet." })) : null] }), _jsx("div", { className: "mb-2 text-sm font-semibold", children: generalAccessLabel }), _jsxs("div", { className: "mb-4 flex items-center gap-3", children: [_jsx("span", { "aria-hidden": true, className: "inline-flex h-9 w-9 shrink-0 items-center justify-center rounded-full bg-muted text-muted-foreground", children: _jsx(meta.Icon, { size: 16, strokeWidth: 1.75 }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx(VisibilitySelect, { value: visibility, onChange: handleVisibility, disabled: !canManage, visibilityCopy: props.visibilityCopy, allowPublic: policy.allowPublic }), _jsxs("div", { className: "mt-0.5 flex flex-wrap items-center gap-x-2 gap-y-1 text-xs text-muted-foreground", children: [_jsx("span", { children: meta.description }), visibility === "org" && props.hideInSearchControl ? (_jsx(AdvancedAccessPopover, { control: props.hideInSearchControl, canManage: canManage, onToggle: handleHideInSearch })) : null] })] })] }), shareError && !canManage ? (_jsx("div", { role: "alert", className: "mb-4 rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: shareError })) : null, props.accessNote ? (_jsx("div", { className: "mb-4 rounded-md border border-border bg-muted/35 p-3 text-xs text-muted-foreground", children: props.accessNote })) : null, showShareLinks && shareUrlPlacement === "bottom" ? shareLinks : null, props.shareFooterContent] }));
     if (!hasTabs)
         return sharePanel;
     const tabs = [
@@ -271,10 +280,11 @@ function SelectItems({ items }) {
     return (_jsx(_Fragment, { children: items.map((it) => (_jsxs(Select.Item, { value: it.value, className: selectItemClass, children: [_jsx("span", { className: "absolute start-2 top-2 flex h-4 w-4 items-center justify-center", children: _jsx(Select.ItemIndicator, { children: _jsx(IconCheck, { size: 14 }) }) }), _jsxs("span", { className: "flex flex-col", children: [_jsx(Select.ItemText, { children: it.label }), it.description ? (_jsx("span", { className: "text-xs text-muted-foreground", children: it.description })) : null] })] }, it.value))) }));
 }
 function RoleSelect(props) {
-    const current = ROLE_OPTIONS.find((o) => o.value === props.value) ?? ROLE_OPTIONS[0];
+    const current = roleMeta(props.value, props.roleCopy);
+    const options = ROLE_OPTIONS.map((option) => roleMeta(option.value, props.roleCopy));
     return (_jsxs(Select.Root, { value: props.value, onValueChange: (v) => props.onChange(v), disabled: props.disabled, children: [_jsxs(Select.Trigger, { className: props.plain
                     ? cn(BUTTON_BASE, "h-7 px-2 bg-transparent text-muted-foreground hover:bg-accent hover:text-accent-foreground")
-                    : cn(BUTTON_BASE, "h-9 px-3 border border-input bg-card hover:bg-accent hover:text-accent-foreground"), "aria-label": "Role", children: [_jsx(Select.Value, { children: current.label }), _jsx(Select.Icon, { children: _jsx(IconChevronDown, { size: 14 }) })] }), _jsx(Select.Portal, { children: _jsx(Select.Content, { "data-agent-native-share-overlay": "", className: selectContentClass, position: "popper", sideOffset: 4, children: _jsx(Select.Viewport, { children: _jsx(SelectItems, { items: ROLE_OPTIONS }) }) }) })] }));
+                    : cn(BUTTON_BASE, "h-9 px-3 border border-input bg-card hover:bg-accent hover:text-accent-foreground"), "aria-label": "Role", children: [_jsx(Select.Value, { children: current.label }), _jsx(Select.Icon, { children: _jsx(IconChevronDown, { size: 14 }) })] }), _jsx(Select.Portal, { children: _jsx(Select.Content, { "data-agent-native-share-overlay": "", className: selectContentClass, position: "popper", sideOffset: 4, children: _jsx(Select.Viewport, { children: _jsx(SelectItems, { items: options }) }) }) })] }));
 }
 function VisibilitySelect(props) {
     const allowPrivate = props.allowPrivate !== false;
@@ -302,9 +312,6 @@ function Avatar({ label, org }) {
 function keyOf(s) {
     return `${s.principalType}:${s.principalId}`;
 }
-function cap(s) {
-    return s.charAt(0).toUpperCase() + s.slice(1);
-}
 function initials(s) {
     const name = s.split("@")[0] ?? s;
     return (name[0] ?? "?").toUpperCase();

package/dist/client/sharing/ShareDialog.js

@@ -56,7 +56,11 @@ function InviteTab({ controller, showVisibility, }) {
     return (_jsxs("div", { className: "space-y-4", children: [controller.canManage ? (_jsxs("div", { className: "space-y-2", children: [_jsxs("div", { className: "flex items-stretch gap-2", children: [_jsx("input", { type: "email", placeholder: controller.labels.addPeopleByEmail, value: controller.invite.email, onChange: (event) => controller.invite.setEmail(event.currentTarget.value), onKeyDown: (event) => {
                                     if (event.key === "Enter")
                                         controller.invite.submit();
-                                }, autoComplete: "off", className: "flex-1 min-w-0 h-9 rounded-md border border-input bg-background px-3 text-sm text-foreground placeholder:text-muted-foreground focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 focus:ring-offset-background" }), _jsx(RoleSelect, { controller: controller })] }), controller.invite.showNotifyPeople ? (_jsxs("label", { className: "inline-flex items-center gap-2 text-xs text-muted-foreground", children: [_jsx("input", { type: "checkbox", checked: controller.invite.notifyPeople, onChange: (event) => controller.invite.setNotifyPeople(event.currentTarget.checked), className: "h-4 w-4 rounded border-input accent-primary" }), controller.labels.notifyPeople] })) : null] })) : null, _jsxs("div", { children: [_jsx("div", { className: "mb-2 text-sm font-semibold", children: controller.labels.peopleWithAccess }), _jsxs("ul", { className: "flex flex-col gap-1 list-none p-0 m-0", children: [controller.people.map((person) => (_jsx(PersonRow, { person: person, canManage: controller.canManage, removeLabel: controller.labels.remove, onRemove: controller.removeShare }, person.key))), !controller.people.length ? (_jsx("li", { className: "px-1 py-1.5 text-sm text-muted-foreground", children: controller.labels.noAccess })) : null] })] }), showVisibility ? (_jsxs("div", { children: [_jsx("div", { className: "mb-2 text-sm font-semibold", children: controller.labels.generalAccess }), _jsxs("div", { className: "flex items-center gap-3", children: [_jsx("span", { "aria-hidden": true, className: "inline-flex h-9 w-9 shrink-0 items-center justify-center rounded-full bg-muted text-muted-foreground", children: _jsx(Icon, { size: 16, strokeWidth: 1.75 }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx(VisibilitySelect, { controller: controller }), _jsx("div", { className: "mt-0.5 text-xs text-muted-foreground", children: controller.visibility.description })] })] })] })) : null] }));
+                                }, autoComplete: "off", className: "flex-1 min-w-0 h-9 rounded-md border border-input bg-background px-3 text-sm text-foreground placeholder:text-muted-foreground focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 focus:ring-offset-background" }), _jsx(RoleSelect, { controller: controller })] }), controller.invite.showNotifyPeople ? (_jsxs("div", { className: "flex flex-wrap items-center gap-x-3 gap-y-2 text-xs text-muted-foreground", children: [_jsxs("label", { className: "inline-flex items-center gap-2", children: [_jsx("input", { type: "checkbox", checked: controller.invite.notifyPeople, onChange: (event) => controller.invite.setNotifyPeople(event.currentTarget.checked), className: "h-4 w-4 rounded border-input accent-primary" }), controller.labels.notifyPeople] }), controller.invite.notifyPeople ? (_jsx(ActionButton, { type: "button", emphasis: "ghost", "aria-expanded": controller.invite.messageOpen, onPress: () => controller.invite.setMessageOpen(!controller.invite.messageOpen), className: "!h-auto !rounded-sm !px-1 !py-0.5 text-xs font-medium !text-foreground underline decoration-border underline-offset-2 hover:!bg-accent hover:!text-accent-foreground active:!scale-100", children: controller.invite.messageOpen
+                                    ? controller.labels.hideMessage
+                                    : controller.labels.addMessage })) : null] })) : null, controller.invite.showNotifyPeople &&
+                        controller.invite.notifyPeople &&
+                        controller.invite.messageOpen ? (_jsx(TextArea, { "aria-label": controller.labels.addMessage, placeholder: controller.labels.messagePlaceholder, value: controller.invite.message, onChange: (value) => controller.invite.setMessage(value), maxLength: 500, rows: 3, className: "min-h-20 resize-y text-sm" })) : null] })) : null, _jsxs("div", { children: [_jsx("div", { className: "mb-2 text-sm font-semibold", children: controller.labels.peopleWithAccess }), _jsxs("ul", { className: "flex flex-col gap-1 list-none p-0 m-0", children: [controller.people.map((person) => (_jsx(PersonRow, { person: person, canManage: controller.canManage, removeLabel: controller.labels.remove, onRemove: controller.removeShare }, person.key))), !controller.people.length ? (_jsx("li", { className: "px-1 py-1.5 text-sm text-muted-foreground", children: controller.labels.noAccess })) : null] })] }), showVisibility ? (_jsxs("div", { children: [_jsx("div", { className: "mb-2 text-sm font-semibold", children: controller.labels.generalAccess }), _jsxs("div", { className: "flex items-center gap-3", children: [_jsx("span", { "aria-hidden": true, className: "inline-flex h-9 w-9 shrink-0 items-center justify-center rounded-full bg-muted text-muted-foreground", children: _jsx(Icon, { size: 16, strokeWidth: 1.75 }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx(VisibilitySelect, { controller: controller }), _jsx("div", { className: "mt-0.5 text-xs text-muted-foreground", children: controller.visibility.description })] })] })] })) : null] }));
 }
 function PersonRow({ person, canManage, removeLabel, onRemove, }) {
     return (_jsxs("li", { className: "flex items-center gap-3 px-1 py-1.5 text-sm", children: [_jsx(DesignSystemAvatar, { name: person.label, fallback: person.principalType === "org" ? (_jsx(IconUsersGroup, { size: 14, strokeWidth: 1.75 })) : (person.avatarText), size: "compact", className: "inline-flex h-7 w-7 shrink-0 text-[11px] font-semibold" }), _jsx("span", { className: "flex-1 min-w-0 truncate", children: person.label }), _jsx(Status, { tone: "neutral", size: "compact", className: "border-0 bg-transparent px-0 text-xs text-muted-foreground", children: person.roleLabel }), canManage && person.share ? (_jsx(IconButton, { intent: "danger", emphasis: "ghost", size: "compact", icon: _jsx(IconTrash, { size: 14 }), label: removeLabel, "aria-label": removeLabel, onPress: () => onRemove(person.share), className: cn(BUTTON_GHOST_ICON, "[&_svg]:!size-auto") })) : null] }));

package/dist/client/sharing/useShareButtonController.d.ts

@@ -71,6 +71,10 @@ export interface ShareButtonController {
     setRole: (role: ShareButtonRole) => void;
     notifyPeople: boolean;
     setNotifyPeople: (notify: boolean) => void;
+    shareMessage: string;
+    setShareMessage: (message: string) => void;
+    messageOpen: boolean;
+    setMessageOpen: (open: boolean) => void;
     shareError: string | null;
     setShareError: (error: string | null) => void;
     suggestionsOpen: boolean;

package/dist/client/sharing/useShareButtonController.js

@@ -25,6 +25,8 @@ export function useShareButtonController(options) {
     }, [options, shareTabDefaultValue, sharesQuery, visibilityOverride]);
     useEffect(() => {
         setInviteEmail("");
+        setShareMessage("");
+        setMessageOpen(false);
     }, [options.resourceId, options.resourceType]);
     useEffect(() => {
         if (!options.defaultOpen || appliedDefaultOpenRef.current)
@@ -102,6 +104,8 @@ export function useShareButtonController(options) {
     // the popover cannot drop an in-flight mutation or an unsent invite.
     const [role, setRole] = useState("viewer");
     const [notifyPeople, setNotifyPeople] = useState(true);
+    const [shareMessage, setShareMessage] = useState("");
+    const [messageOpen, setMessageOpen] = useState(false);
     const [suggestionsOpen, setSuggestionsOpen] = useState(false);
     const [pendingAdds, setPendingAdds] = useState([]);
     const [pendingRemoves, setPendingRemoves] = useState(new Set());
@@ -177,6 +181,7 @@ export function useShareButtonController(options) {
         const trimmed = inviteEmail.trim();
         if (!trimmed || !canManage)
             return;
+        const message = notifyPeople ? shareMessage.trim() : "";
         const optimistic = {
             id: `pending-${trimmed}`,
             principalType: "user",
@@ -189,6 +194,8 @@ export function useShareButtonController(options) {
         setShareError(null);
         setPendingAdds((previous) => [...previous, optimistic]);
         setInviteEmail("");
+        setShareMessage("");
+        setMessageOpen(false);
         setSuggestionsOpen(false);
         addInFlight(key);
         const previous = optimisticallyUpdateShareCache(queryClient, shareQueryKey, (cached) => cached ? { ...cached, shares: [...cached.shares, optimistic] } : cached);
@@ -200,6 +207,7 @@ export function useShareButtonController(options) {
             role,
             notify: notifyPeople,
             resourceUrl: getNotificationUrl(options.shareUrl),
+            ...(message ? { message } : {}),
         }, {
             onSuccess: () => {
                 sharesQuery.refetch().then(() => {
@@ -212,6 +220,8 @@ export function useShareButtonController(options) {
                 setPendingAdds((previous) => previous.filter((item) => item.id !== optimistic.id));
                 clearInFlight(key);
                 setInviteEmail(trimmed);
+                setShareMessage((current) => current || message);
+                setMessageOpen((current) => current || Boolean(message));
                 setShareError(extractShareErrorMessage(error));
             },
         });
@@ -226,6 +236,7 @@ export function useShareButtonController(options) {
         options.resourceType,
         options.shareUrl,
         role,
+        shareMessage,
         share,
         queryClient,
         shareQueryKey,
@@ -361,6 +372,10 @@ export function useShareButtonController(options) {
         role,
         setRole,
         notifyPeople,
+        shareMessage,
+        setShareMessage,
+        messageOpen,
+        setMessageOpen,
         setNotifyPeople,
         shareError,
         setShareError,

package/dist/client/sharing/useShareDialogController.d.ts

@@ -62,6 +62,9 @@ export interface ShareDialogController {
         peopleWithAccess: string;
         addPeopleByEmail: string;
         notifyPeople: string;
+        addMessage: string;
+        hideMessage: string;
+        messagePlaceholder: string;
         role: string;
         remove: string;
         noAccess: string;
@@ -87,6 +90,10 @@ export interface ShareDialogController {
         notifyPeople: boolean;
         setNotifyPeople: (notify: boolean) => void;
         showNotifyPeople: boolean;
+        message: string;
+        setMessage: (message: string) => void;
+        messageOpen: boolean;
+        setMessageOpen: (open: boolean) => void;
         disabled: boolean;
         pending: boolean;
         submit: () => void;

package/dist/client/sharing/useShareDialogController.js

@@ -18,6 +18,8 @@ export function useShareDialogController({ open, onClose, resourceType, resource
     const [email, setEmail] = useState("");
     const [role, setRole] = useState("viewer");
     const [notifyPeople, setNotifyPeople] = useState(true);
+    const [message, setMessage] = useState("");
+    const [messageOpen, setMessageOpen] = useState(false);
     const [copiedField, setCopiedField] = useState(null);
     const [visibilityOverride, setVisibilityOverride] = useState(null);
     const [mutationError, setMutationError] = useState(null);
@@ -100,6 +102,7 @@ export function useShareDialogController({ open, onClose, resourceType, resource
         const principalId = email.trim();
         if (!canManage || !principalId)
             return;
+        const notificationMessage = notifyPeople ? message.trim() : "";
         const optimistic = {
             id: `pending-${principalId}`,
             principalType: "user",
@@ -116,9 +119,12 @@ export function useShareDialogController({ open, onClose, resourceType, resource
             role,
             notify: notifyPeople,
             resourceUrl: getNotificationUrl(shareUrl),
+            ...(notificationMessage ? { message: notificationMessage } : {}),
         }, {
             onSuccess: () => {
                 setEmail("");
+                setMessage("");
+                setMessageOpen(false);
                 void refetch();
             },
             onError: (error) => {
@@ -129,6 +135,7 @@ export function useShareDialogController({ open, onClose, resourceType, resource
     }, [
         canManage,
         email,
+        message,
         notifyPeople,
         refetch,
         resourceId,
@@ -220,6 +227,9 @@ export function useShareDialogController({ open, onClose, resourceType, resource
             peopleWithAccess: t("share.peopleWithAccess"),
             addPeopleByEmail: t("share.addPeopleByEmail"),
             notifyPeople: t("share.notifyPeople"),
+            addMessage: t("share.addMessage"),
+            hideMessage: t("share.hideMessage"),
+            messagePlaceholder: t("share.messagePlaceholder"),
             role: t("share.role"),
             remove: t("share.remove"),
             noAccess: t("share.noAccess"),
@@ -245,6 +255,10 @@ export function useShareDialogController({ open, onClose, resourceType, resource
             notifyPeople,
             setNotifyPeople,
             showNotifyPeople: email.trim().length > 0,
+            message,
+            setMessage,
+            messageOpen,
+            setMessageOpen,
             disabled: !canManage || email.trim().length === 0,
             pending: shareMutation.isPending,
             submit: submitInvite,

package/dist/client/sse-event-processor.js

@@ -1,4 +1,5 @@
 import { LLM_MISSING_CREDENTIALS_ERROR_CODE, LLM_MISSING_CREDENTIALS_MESSAGE, } from "../agent/engine/credential-errors.js";
+import { emitChatFirstOpenApp } from "./chat-first.js";
 import { formatChatErrorText, normalizeChatError } from "./error-format.js";
 import { humanizeToolLabelText, humanizeToolName, runningToolLabel, } from "./tool-display.js";
 const INTERRUPTED_TOOL_RESULT = "Interrupted before this tool returned a result.";
@@ -869,6 +870,41 @@ function shouldDispatchStreamProgress(state) {
         state.streamProgressDispatched = true;
     return true;
 }
+function emitFirstPartyOpenAppHandoff(ev) {
+    if (ev.type !== "tool_done" || (ev.tool ?? "unknown") !== "open_app") {
+        return;
+    }
+    if (ev.isError === true)
+        return;
+    if (!ev.result?.trim()) {
+        console.warn("[chat-first] open_app completed without a readable result; no app pane opened");
+        return;
+    }
+    let result;
+    try {
+        const parsed = JSON.parse(ev.result);
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+            console.warn("[chat-first] open_app completed without a readable result; no app pane opened");
+            return;
+        }
+        result = parsed;
+    }
+    catch {
+        // coercion-ok: unreadable tool output must not be treated as a successful handoff.
+        console.warn("[chat-first] open_app completed without a readable result; no app pane opened");
+        return;
+    }
+    const readString = (value) => typeof value === "string" && value.trim() ? value : undefined;
+    const delivery = emitChatFirstOpenApp({
+        app: readString(result.app ?? result.appId ?? result.application),
+        path: readString(result.path ?? result.targetPath),
+        url: readString(result.url ?? result.href),
+        view: readString(result.view),
+    });
+    if (!delivery.delivered) {
+        console.warn(`[chat-first] open_app was completed but not delivered (${delivery.reason ?? "unknown"})`);
+    }
+}
 /**
  * Process a single SSE event and update the content accumulator.
  * Returns: "continue" to keep going, "done" to stop, or a yield-ready result.
@@ -1124,6 +1160,7 @@ export function processEvent(ev, content, toolCallCounter, tabId, state) {
         if (findCompletedToolCallIndex(content, ev.id) >= 0) {
             return { action: "continue" };
         }
+        emitFirstPartyOpenAppHandoff(ev);
         if (typeof window !== "undefined") {
             window.dispatchEvent(new CustomEvent("agent-native:tool-done", {
                 detail: { tool: doneTool, result: ev.result },

package/dist/client/use-session.d.ts

@@ -15,6 +15,8 @@ interface UseSessionResult {
     /** Restart the resolve loop, e.g. from a "Try again" control. */
     retry: () => void;
 }
+/** Tell mounted session consumers to re-check auth after a logout. */
+export declare function notifySessionInvalidated(): void;
 /**
  * Client-side hook to get the current auth session.
  *

package/dist/client/use-session.js

@@ -1,13 +1,18 @@
 import { useCallback, useEffect, useState } from "react";
 import { setSentryUser, trackSessionStatus } from "./analytics.js";
-import { fetchAuthSessionStatus } from "./client-status-requests.js";
+import { fetchAuthSessionStatus, invalidateClientStatusRequest, } from "./client-status-requests.js";
 const SESSION_CACHE_TTL_MS = 30_000;
 const SESSION_RETRY_DELAY_MS = 1_000;
 const SESSION_MAX_ATTEMPTS = 4;
+const SESSION_INVALIDATION_STORAGE_KEY = "agent-native:session-invalidated";
+const SESSION_STATUS_PATH = "/_agent-native/auth/session";
 let cachedSession;
 let cachedSessionAt = 0;
 let sessionRequest;
 let trackedSessionIdentity;
+let sessionGeneration = 0;
+let sessionInvalidationListenersInstalled = false;
+const sessionInvalidationSubscribers = new Set();
 function hasFreshSessionCache() {
     return (cachedSession !== undefined &&
         Date.now() - cachedSessionAt < SESSION_CACHE_TTL_MS);
@@ -29,16 +34,61 @@ function publishSessionIdentity(session) {
     }
     trackSessionStatus(Boolean(session));
 }
+function invalidateSessionCache() {
+    sessionGeneration += 1;
+    cachedSession = undefined;
+    cachedSessionAt = 0;
+    sessionRequest = undefined;
+    invalidateClientStatusRequest(SESSION_STATUS_PATH);
+    for (const subscriber of sessionInvalidationSubscribers)
+        subscriber();
+}
+function installSessionInvalidationListeners() {
+    if (sessionInvalidationListenersInstalled ||
+        typeof window === "undefined" ||
+        typeof document === "undefined") {
+        return;
+    }
+    sessionInvalidationListenersInstalled = true;
+    window.addEventListener("focus", invalidateSessionCache);
+    window.addEventListener("storage", (event) => {
+        if (event.key === SESSION_INVALIDATION_STORAGE_KEY) {
+            invalidateSessionCache();
+        }
+    });
+    document.addEventListener("visibilitychange", () => {
+        if (document.visibilityState === "visible") {
+            invalidateSessionCache();
+        }
+    });
+}
+/** Tell mounted session consumers to re-check auth after a logout. */
+export function notifySessionInvalidated() {
+    if (typeof window === "undefined")
+        return;
+    installSessionInvalidationListeners();
+    invalidateSessionCache();
+    try {
+        window.localStorage.setItem(SESSION_INVALIDATION_STORAGE_KEY, `${Date.now()}:${Math.random()}`);
+    }
+    catch (error) {
+        console.warn("Unable to broadcast session invalidation", error);
+    }
+}
 function fetchSharedSession() {
     if (hasFreshSessionCache())
         return Promise.resolve(cachedSession ?? null);
     if (sessionRequest)
         return sessionRequest;
-    sessionRequest = (async () => {
+    const requestGeneration = sessionGeneration;
+    let request;
+    const requestResult = (async () => {
         try {
             const result = await fetchAuthSessionStatus();
             if (result.state === "unavailable")
                 return undefined;
+            if (requestGeneration !== sessionGeneration)
+                return undefined;
             const data = result.value;
             const session = data.error ? null : data;
             cachedSession = session;
@@ -49,9 +99,12 @@ function fetchSharedSession() {
         catch {
             return undefined;
         }
-    })().finally(() => {
-        sessionRequest = undefined;
+    })();
+    request = requestResult.finally(() => {
+        if (sessionRequest === request)
+            sessionRequest = undefined;
     });
+    sessionRequest = request;
     return sessionRequest;
 }
 /**
@@ -64,6 +117,7 @@ function fetchSharedSession() {
  * Templates should use this instead of building their own auth context.
  */
 export function useSession() {
+    installSessionInvalidationListeners();
     const cached = hasFreshSessionCache() ? (cachedSession ?? null) : null;
     const [session, setSession] = useState(cached);
     const [status, setStatus] = useState(() => {
@@ -73,11 +127,21 @@ export function useSession() {
     });
     const [error, setError] = useState(null);
     const [retryToken, setRetryToken] = useState(0);
+    const [invalidationToken, setInvalidationToken] = useState(0);
     const retry = useCallback(() => {
         setError(null);
         setStatus("loading");
         setRetryToken((token) => token + 1);
     }, []);
+    useEffect(() => {
+        const subscriber = () => {
+            setInvalidationToken((token) => token + 1);
+        };
+        sessionInvalidationSubscribers.add(subscriber);
+        return () => {
+            sessionInvalidationSubscribers.delete(subscriber);
+        };
+    }, []);
     useEffect(() => {
         let cancelled = false;
         let retryTimer;
@@ -108,7 +172,7 @@ export function useSession() {
             if (retryTimer)
                 clearTimeout(retryTimer);
         };
-    }, [retryToken]);
+    }, [invalidationToken, retryToken]);
     // Callers that only read `isLoading`/`session` (most of the codebase, not
     // yet migrated to `status`) must not see "unavailable" as "signed out" —
     // that bounces an authenticated user through sign-in-only UI over a

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/deploy/build.js

@@ -1452,7 +1452,7 @@ export function generateCloudflarePagesStaticShellFromManifest(manifest, basePat
         ? DEFAULT_ROOT_LOADER_REACT_ROUTER_TURBO_STREAM
         : EMPTY_REACT_ROUTER_TURBO_STREAM;
     // guard:allow-raw-color - static shell loads before app theme tokens exist
-    return `<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="manifest" href="/manifest.json"/><link rel="icon" type="image/svg+xml" href="/favicon.svg"/>${modulePreloads}${stylesheets}</head><body><div style="display:flex;align-items:center;justify-content:center;height:100vh;width:100%"><svg role="status" aria-label="Loading" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="animation:an-spin 1s linear infinite;opacity:0.7"><path d="M21 12a9 9 0 1 1-6.219-8.56"></path></svg><style>@keyframes an-spin { to { transform: rotate(360deg) } } @media (prefers-color-scheme: dark) { html { background: #09090b; color: #fafafa } }</style></div><script>window.__reactRouterContext = ${JSON.stringify(context)};window.__reactRouterContext.stream = new ReadableStream({start(controller){window.__reactRouterContext.streamController = controller;}}).pipeThrough(new TextEncoderStream());</script><script type="module" async="">${routeModuleScript}</script><!--$--><script>window.__reactRouterContext.streamController.enqueue(${JSON.stringify(encodedInitialState)});</script><!--$--><script>window.__reactRouterContext.streamController.close();</script><!--/$--><!--/$--></body></html>`;
+    return `<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="icon" type="image/svg+xml" href="/favicon.svg"/>${modulePreloads}${stylesheets}</head><body><div style="display:flex;align-items:center;justify-content:center;height:100vh;width:100%"><svg role="status" aria-label="Loading" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="animation:an-spin 1s linear infinite;opacity:0.7"><path d="M21 12a9 9 0 1 1-6.219-8.56"></path></svg><style>@keyframes an-spin { to { transform: rotate(360deg) } } @media (prefers-color-scheme: dark) { html { background: #09090b; color: #fafafa } }</style></div><script>window.__reactRouterContext = ${JSON.stringify(context)};window.__reactRouterContext.stream = new ReadableStream({start(controller){window.__reactRouterContext.streamController = controller;}}).pipeThrough(new TextEncoderStream());</script><script type="module" async="">${routeModuleScript}</script><!--$--><script>window.__reactRouterContext.streamController.enqueue(${JSON.stringify(encodedInitialState)});</script><!--$--><script>window.__reactRouterContext.streamController.close();</script><!--/$--><!--/$--></body></html>`;
 }
 function writeCloudflarePagesStaticShell({ serverDir, distDir, tmpDir, }) {
     const serverEntry = path.join(serverDir, "index.js");

package/dist/file-upload/pre-upload-attachments.d.ts

@@ -27,7 +27,7 @@ export interface PreUploadAttachmentsResult {
     /** Set when at least one image was uploaded. List of hosted URLs the agent
      *  can embed in HTML, slide content, documents, etc. */
     uploaded: PreUploadedImageAttachment[];
-    /** Uploaded non-image files (PDF, generic binary). Parallel to `uploaded`
+    /** Uploaded non-image files (documents, spreadsheets, generic binary). Parallel to `uploaded`
      *  but for the file/document attachment type. */
     uploadedFiles: PreUploadedFileAttachment[];
     /** True if at least one image or file could not be uploaded because no
@@ -39,8 +39,7 @@ export interface PreUploadAttachmentsResult {
     /** The first provider error, bounded for safe inclusion in the chat hint. */
     uploadError?: string;
     /** A pre-formatted block to inject into the user message text so the agent
-     *  has each hosted URL inline. Null when nothing was uploaded or no provider
-     *  is configured. */
+     *  has hosted URLs and bounded derived source context inline. */
     injectedText: string | null;
 }
 /**
@@ -63,7 +62,7 @@ export declare function preUploadImageAttachments(opts: {
     ownerEmail: string | null | undefined;
 }): Promise<PreUploadAttachmentsResult>;
 /**
- * Pre-upload ALL chat attachments (images AND files/PDFs) through the active
+ * Pre-upload ALL chat attachments (images AND files) through the active
  * file-upload provider. When a provider is configured, each attachment gets a
  * `url` property injected so downstream code can store/send URLs instead of
  * base64. The base64 data is kept in-memory for the current turn so vision and