@agent-native/core 0.154.5 → 0.157.0

package/dist/client/review/ReviewThreadPanel.js

@@ -8,6 +8,7 @@ import { Spinner } from "@agent-native/toolkit/ui/spinner";
 import { IconCircleCheck, IconDots, IconMessageCircle, IconSend, IconTrash, IconX, } from "@tabler/icons-react";
 import { useMemo, useState } from "react";
 import { useFormatters } from "../i18n.js";
+import { InlineMarkdown } from "../markdown/index.js";
 import { cn } from "../utils.js";
 import { ReviewCommentComposer } from "./ReviewCommentComposer.js";
 import { ReviewStatusBadge } from "./ReviewStatusBadge.js";
@@ -126,7 +127,7 @@ function CommentBubble({ comment, compact = false, resolvedLabel, reviewerLabel,
     const bodyIsResolutionNote = resolutionNote !== null &&
         resolutionNote === comment.body.trim() &&
         isResolutionNoteMetadata(comment.metadata);
-    return (_jsxs("div", { className: "flex min-w-0 items-start gap-2.5", children: [_jsx(Avatar, { className: compact ? "size-5" : "size-7", children: _jsx(AvatarFallback, { className: "text-[10px] font-semibold text-muted-foreground", children: authorInitials(author) }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsxs("div", { className: "flex min-w-0 items-center gap-2", children: [_jsx("span", { className: "truncate text-sm font-medium", children: author }), _jsx("time", { className: "shrink-0 text-[11px] text-muted-foreground", dateTime: comment.createdAt, children: formatCommentDate(comment.createdAt, formatDate) }), comment.status === "resolved" ? (_jsx("span", { className: "hidden shrink-0 rounded-full bg-muted px-1.5 py-0.5 text-[10px] font-medium text-muted-foreground @xs/review:inline-flex", children: resolvedLabel })) : null] }), !bodyIsResolutionNote ? (_jsx("p", { className: cn("mt-1 whitespace-pre-wrap break-words text-foreground", compact ? "text-xs leading-5" : "text-sm leading-5"), children: comment.body })) : null, resolutionNote ? (_jsxs("div", { className: "mt-1.5 flex min-w-0 items-start gap-1.5 rounded-md bg-muted/60 px-2 py-1.5 text-muted-foreground", "aria-label": resolvedLabel, children: [_jsx(IconCircleCheck, { className: "mt-0.5 size-3.5 shrink-0" }), _jsx("p", { className: "min-w-0 whitespace-pre-wrap break-words text-xs leading-4", children: resolutionNote })] })) : null] })] }));
+    return (_jsxs("div", { className: "flex min-w-0 items-start gap-2.5", children: [_jsx(Avatar, { className: compact ? "size-5" : "size-7", children: _jsx(AvatarFallback, { className: "text-[10px] font-semibold text-muted-foreground", children: authorInitials(author) }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsxs("div", { className: "flex min-w-0 items-center gap-2", children: [_jsx("span", { className: "truncate text-sm font-medium", children: author }), _jsx("time", { className: "shrink-0 text-[11px] text-muted-foreground", dateTime: comment.createdAt, children: formatCommentDate(comment.createdAt, formatDate) }), comment.status === "resolved" ? (_jsx("span", { className: "hidden shrink-0 rounded-full bg-muted px-1.5 py-0.5 text-[10px] font-medium text-muted-foreground @xs/review:inline-flex", children: resolvedLabel })) : null] }), !bodyIsResolutionNote ? (_jsx(InlineMarkdown, { content: comment.body, className: cn("mt-1 text-foreground", compact ? "text-xs leading-5" : "text-sm leading-5") })) : null, resolutionNote ? (_jsxs("div", { className: "mt-1.5 flex min-w-0 items-start gap-1.5 rounded-md bg-muted/60 px-2 py-1.5 text-muted-foreground", "aria-label": resolvedLabel, children: [_jsx(IconCircleCheck, { className: "mt-0.5 size-3.5 shrink-0" }), _jsx(InlineMarkdown, { content: resolutionNote, className: "min-w-0 text-xs leading-4" })] })) : null] })] }));
 }
 function capabilityAllowsThread(capability, thread) {
     return typeof capability === "function" ? capability(thread) : capability;

package/dist/client/run-stream-ownership.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Exactly one SSE reader may fold a given run into UI state.
+ *
+ * Two readers attach to the same run routinely: the chat adapter's own stream,
+ * and AssistantChat's reconnect reader for runs with no live adapter stream
+ * (page reload, tab restore). When both are attached they build two independent
+ * accumulators from the same events, and the UI renders both — duplicate tool
+ * cards (one spinning, one static) and the same assistant text streaming twice.
+ *
+ * The previous guard read a React ref (`isRuntimeRunningRef`) at attach time and
+ * re-checked it from a 1s poll. That is a race, not a lock: the ref lags a
+ * render behind, the poll is skipped while the tab is hidden, and the refs were
+ * per-component-instance while MultiTabAssistantChat mounts several instances
+ * against one run. Ownership therefore lives here — module scope, one registry
+ * per browser tab, claimed and checked synchronously.
+ *
+ * Claims are advisory in one direction only: a reader that does not hold the
+ * claim must not mutate UI state. It may still drain its socket to completion.
+ */
+/** Mint a token identifying one reader. Not shared between readers. */
+export declare function createRunStreamToken(label?: string): symbol;
+/**
+ * Take ownership of a run's UI fold. Returns false when another live reader
+ * already holds it — the caller must not attach, or must attach read-only.
+ * Re-claiming with the same token is a no-op success so retry loops are safe.
+ */
+export declare function claimRunStream(threadId: string, runId: string, token: symbol): boolean;
+/**
+ * Take ownership even if another reader holds it, and return whether the claim
+ * changed hands. The adapter's own stream outranks the reconnect fallback: when
+ * the user sends a message the adapter legitimately becomes the owner, and the
+ * displaced reader learns it lost via `ownsRunStream`.
+ */
+export declare function preemptRunStream(threadId: string, runId: string, token: symbol): boolean;
+export declare function ownsRunStream(threadId: string, runId: string, token: symbol): boolean;
+/** Release only if still held by this token, so a late unmount cannot free a successor's claim. */
+export declare function releaseRunStream(threadId: string, runId: string, token: symbol): void;
+/** Test seam. */
+export declare function __resetRunStreamOwnership(): void;

package/dist/client/run-stream-ownership.js

@@ -0,0 +1,65 @@
+/**
+ * Exactly one SSE reader may fold a given run into UI state.
+ *
+ * Two readers attach to the same run routinely: the chat adapter's own stream,
+ * and AssistantChat's reconnect reader for runs with no live adapter stream
+ * (page reload, tab restore). When both are attached they build two independent
+ * accumulators from the same events, and the UI renders both — duplicate tool
+ * cards (one spinning, one static) and the same assistant text streaming twice.
+ *
+ * The previous guard read a React ref (`isRuntimeRunningRef`) at attach time and
+ * re-checked it from a 1s poll. That is a race, not a lock: the ref lags a
+ * render behind, the poll is skipped while the tab is hidden, and the refs were
+ * per-component-instance while MultiTabAssistantChat mounts several instances
+ * against one run. Ownership therefore lives here — module scope, one registry
+ * per browser tab, claimed and checked synchronously.
+ *
+ * Claims are advisory in one direction only: a reader that does not hold the
+ * claim must not mutate UI state. It may still drain its socket to completion.
+ */
+const owners = new Map();
+function runKey(threadId, runId) {
+    return `${threadId} ${runId}`;
+}
+/** Mint a token identifying one reader. Not shared between readers. */
+export function createRunStreamToken(label) {
+    return Symbol(label ?? "run-stream-reader");
+}
+/**
+ * Take ownership of a run's UI fold. Returns false when another live reader
+ * already holds it — the caller must not attach, or must attach read-only.
+ * Re-claiming with the same token is a no-op success so retry loops are safe.
+ */
+export function claimRunStream(threadId, runId, token) {
+    const key = runKey(threadId, runId);
+    const current = owners.get(key);
+    if (current && current !== token)
+        return false;
+    owners.set(key, token);
+    return true;
+}
+/**
+ * Take ownership even if another reader holds it, and return whether the claim
+ * changed hands. The adapter's own stream outranks the reconnect fallback: when
+ * the user sends a message the adapter legitimately becomes the owner, and the
+ * displaced reader learns it lost via `ownsRunStream`.
+ */
+export function preemptRunStream(threadId, runId, token) {
+    const key = runKey(threadId, runId);
+    const current = owners.get(key);
+    owners.set(key, token);
+    return current !== token;
+}
+export function ownsRunStream(threadId, runId, token) {
+    return owners.get(runKey(threadId, runId)) === token;
+}
+/** Release only if still held by this token, so a late unmount cannot free a successor's claim. */
+export function releaseRunStream(threadId, runId, token) {
+    const key = runKey(threadId, runId);
+    if (owners.get(key) === token)
+        owners.delete(key);
+}
+/** Test seam. */
+export function __resetRunStreamOwnership() {
+    owners.clear();
+}

package/dist/client/sharing/ShareButton.js

@@ -4,6 +4,7 @@ import { IconLock, IconWorld, IconTrash, IconCheck, IconChevronDown, IconLoader2
 import { useEffect, useId, useRef, useState, } from "react";
 import { writeClipboardText } from "../clipboard.js";
 import { Popover, PopoverAnchor, PopoverContent, PopoverTrigger, } from "../components/ui/popover.js";
+import { useT } from "../i18n.js";
 import { cn } from "../utils.js";
 import { useShareButtonController, } from "./useShareButtonController.js";
 // Match shadcn's <Button size="sm" variant="outline"> sizing so the trigger
@@ -17,46 +18,77 @@ const SHARE_NESTED_OVERLAY_ATTR = "data-agent-native-share-overlay";
 const SHARE_NESTED_OVERLAY_Z = "z-[100020]";
 const VIS_META = {
     private: {
-        label: "Private",
-        description: "Only people with access can view",
+        labelKey: "agentChat.share.private",
+        descriptionKey: "agentChat.share.privateDescription",
+        defaultLabel: "Private",
+        defaultDescription: "Only people with access can view",
         Icon: IconLock,
     },
     org: {
-        label: "Organization",
-        description: "Anyone in your organization can view",
+        labelKey: "agentChat.share.organization",
+        descriptionKey: "agentChat.share.organizationDescription",
+        defaultLabel: "Organization",
+        defaultDescription: "Anyone in your organization can view",
         Icon: IconUsersGroup,
     },
     public: {
-        label: "Public",
-        description: "Anyone with the link can view",
+        labelKey: "agentChat.share.public",
+        descriptionKey: "agentChat.share.publicDescription",
+        defaultLabel: "Public",
+        defaultDescription: "Anyone with the link can view",
         Icon: IconWorld,
     },
 };
-function visibilityMeta(visibility, copy) {
+function visibilityMeta(visibility, t, copy) {
     const base = VIS_META[visibility];
     const override = copy?.[visibility];
     return {
-        ...base,
-        label: override?.label ?? base.label,
-        description: override?.description ?? base.description,
+        Icon: base.Icon,
+        label: override?.label ??
+            t(base.labelKey, {
+                defaultValue: base.defaultLabel,
+            }),
+        description: override?.description ??
+            t(base.descriptionKey, {
+                defaultValue: base.defaultDescription,
+            }),
     };
 }
-const ROLE_OPTIONS = [
-    { value: "viewer", label: "Viewer", description: "Can view" },
-    {
-        value: "commenter",
-        label: "Commenter",
-        description: "Can view and add comments",
-    },
-    { value: "editor", label: "Editor", description: "Can edit" },
-    {
-        value: "admin",
-        label: "Admin",
-        description: "Can edit and manage access",
-    },
-];
-function roleMeta(role, copy) {
-    const base = ROLE_OPTIONS.find((option) => option.value === role) ?? ROLE_OPTIONS[0];
+function roleOptions(t) {
+    return [
+        {
+            value: "viewer",
+            label: t("agentChat.share.viewer", { defaultValue: "Viewer" }),
+            description: t("agentChat.share.viewerDescription", {
+                defaultValue: "Can view",
+            }),
+        },
+        {
+            value: "commenter",
+            label: t("agentChat.share.commenter", { defaultValue: "Commenter" }),
+            description: t("agentChat.share.commenterDescription", {
+                defaultValue: "Can view and add comments",
+            }),
+        },
+        {
+            value: "editor",
+            label: t("agentChat.share.editor", { defaultValue: "Editor" }),
+            description: t("agentChat.share.editorDescription", {
+                defaultValue: "Can edit",
+            }),
+        },
+        {
+            value: "admin",
+            label: t("agentChat.share.admin", { defaultValue: "Admin" }),
+            description: t("agentChat.share.adminDescription", {
+                defaultValue: "Can edit and manage access",
+            }),
+        },
+    ];
+}
+function roleMeta(role, t, copy) {
+    const options = roleOptions(t);
+    const base = options.find((option) => option.value === role) ?? options[0];
     const override = copy?.[role];
     return {
         ...base,
@@ -81,6 +113,7 @@ function handleSharePopoverInteractOutside(event) {
  * dark mode in any shadcn template.
  */
 export function ShareButton(props) {
+    const t = useT();
     const controller = useShareButtonController({
         resourceType: props.resourceType,
         resourceId: props.resourceId,
@@ -93,22 +126,32 @@ export function ShareButton(props) {
     });
     const triggerVisibility = controller.triggerVisibility;
     const triggerMeta = triggerVisibility
-        ? visibilityMeta(triggerVisibility, props.visibilityCopy)
+        ? visibilityMeta(triggerVisibility, t, props.visibilityCopy)
         : null;
     const TriggerIcon = triggerMeta?.Icon ?? IconShare3;
     const iconOnly = props.trigger === "icon";
     const showTriggerIcon = iconOnly || props.trigger === "label-icon";
-    const triggerLabel = iconOnly && triggerMeta ? `Share (${triggerMeta.label})` : "Share";
-    return (_jsxs(Popover, { open: controller.open, onOpenChange: controller.handleOpenChange, children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs("button", { type: "button", className: cn(iconOnly ? BUTTON_GHOST_ICON : BUTTON_OUTLINE_SM, props.triggerClassName), "aria-label": triggerLabel, title: triggerLabel, children: [showTriggerIcon && _jsx(TriggerIcon, { size: 16, strokeWidth: 1.75 }), !iconOnly && _jsx("span", { children: "Share" })] }) }), _jsx(PopoverContent, { align: "end", sideOffset: 6, "data-agent-native-share-overlay": "", className: cn("z-[2000] w-[min(460px,92vw)] rounded-lg p-4 shadow-lg", SHARE_POPOVER_SURFACE, props.popoverClassName), onOpenAutoFocus: (e) => e.preventDefault(), onInteractOutside: handleSharePopoverInteractOutside, children: _jsx(SharePanel, { ...props, controller: controller }) })] }));
+    const triggerLabel = iconOnly && triggerMeta
+        ? t("agentChat.share.triggerWithVisibility", {
+            defaultValue: "Share ({{visibility}})",
+            visibility: triggerMeta.label,
+        })
+        : t("agentChat.share.share", { defaultValue: "Share" });
+    return (_jsxs(Popover, { open: controller.open, onOpenChange: controller.handleOpenChange, children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs("button", { type: "button", className: cn(iconOnly ? BUTTON_GHOST_ICON : BUTTON_OUTLINE_SM, props.triggerClassName), "aria-label": triggerLabel, title: triggerLabel, children: [showTriggerIcon && _jsx(TriggerIcon, { size: 16, strokeWidth: 1.75 }), !iconOnly && (_jsx("span", { children: t("agentChat.share.share", { defaultValue: "Share" }) }))] }) }), _jsx(PopoverContent, { align: "end", sideOffset: 6, "data-agent-native-share-overlay": "", className: cn("z-[2000] w-[min(460px,92vw)] rounded-lg p-4 shadow-lg", SHARE_POPOVER_SURFACE, props.popoverClassName), onOpenAutoFocus: (e) => e.preventDefault(), onInteractOutside: handleSharePopoverInteractOutside, children: _jsx(SharePanel, { ...props, controller: controller }) })] }));
 }
 function SharePanel(props) {
+    const t = useT();
     const { controller } = props;
     const { inviteEmail, setInviteEmail: onInviteEmailChange, activeShareTab, handleShareTabChange, data, policy, visibility, canManage, role, setRole, notifyPeople, setNotifyPeople, shareMessage, setShareMessage, messageOpen, setMessageOpen, shareError, setShareError, suggestionsOpen, setSuggestionsOpen, inFlight, memberSearch, memberSuggestions, knownMembers, shares, handleVisibility, handleHideInSearch, handleAdd, handleChangeRole, handleRemove, } = controller;
     const hasInviteEmail = inviteEmail.trim().length > 0;
     const isLoading = data === undefined;
-    const meta = visibilityMeta(visibility, props.visibilityCopy);
-    const peopleAccessLabel = props.peopleAccessLabel ?? "People with access";
-    const generalAccessLabel = props.generalAccessLabel ?? "General access";
+    const meta = visibilityMeta(visibility, t, props.visibilityCopy);
+    const peopleAccessLabel = props.peopleAccessLabel ??
+        t("agentChat.share.peopleWithAccess", {
+            defaultValue: "People with access",
+        });
+    const generalAccessLabel = props.generalAccessLabel ??
+        t("agentChat.share.generalAccess", { defaultValue: "General access" });
     const shareLinks = (_jsxs(_Fragment, { children: [props.shareUrl ? (_jsx(CopyLinkField, { value: props.shareUrl, label: props.shareUrlLabel, description: props.shareUrlDescription })) : props.shareUrlPlaceholder ? (_jsxs("div", { className: "mb-4 rounded-md border border-dashed border-border bg-muted/20 px-3 py-2.5 text-xs text-muted-foreground", children: [props.shareUrlLabel ? (_jsx("div", { className: "mb-0.5 font-medium text-foreground", children: props.shareUrlLabel })) : null, props.shareUrlPlaceholder] })) : null, props.secondaryShareUrl ? (_jsx(CopyLinkField, { value: props.secondaryShareUrl, label: props.secondaryShareUrlLabel, description: props.secondaryShareUrlDescription })) : null] }));
     const showShareLinks = (props.showShareLinks ?? true) &&
         (Boolean(props.shareUrl) ||
@@ -117,7 +160,8 @@ function SharePanel(props) {
     const shareUrlPlacement = props.shareUrlPlacement ?? "top";
     const extraTabs = props.shareTabs?.tabs.filter((tab) => tab.value !== "context") ?? [];
     const hasTabs = extraTabs.length > 0;
-    const shareTabLabel = props.shareTabs?.shareLabel ?? "Share link";
+    const shareTabLabel = props.shareTabs?.shareLabel ??
+        t("agentChat.share.shareLink", { defaultValue: "Share link" });
     const sharePanel = isLoading ? (_jsxs("div", { children: [showShareLinks ? (_jsx("div", { className: "mb-4 h-9 rounded-md bg-muted animate-pulse" })) : null, _jsx("div", { className: "mb-2 text-sm font-semibold", children: generalAccessLabel }), _jsx("div", { className: "mb-4 h-9 rounded-md bg-muted animate-pulse" }), _jsx("div", { className: "mb-2 text-sm font-semibold", children: peopleAccessLabel }), _jsx("div", { className: "mb-4 h-7 rounded-md bg-muted animate-pulse" })] })) : (_jsxs("div", { children: [showShareLinks && shareUrlPlacement === "top" ? shareLinks : null, _jsxs("div", { className: "mb-4", children: [_jsx("div", { className: "mb-2 text-sm font-semibold", children: generalAccessLabel }), _jsxs("div", { className: "flex items-center gap-3", children: [_jsx("span", { "aria-hidden": true, className: "inline-flex h-9 w-9 shrink-0 items-center justify-center rounded-full bg-muted text-muted-foreground", children: _jsx(meta.Icon, { size: 16, strokeWidth: 1.75 }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx(VisibilitySelect, { value: visibility, onChange: handleVisibility, disabled: !canManage, visibilityCopy: props.visibilityCopy, allowPublic: policy.allowPublic }), _jsxs("div", { className: "mt-0.5 flex flex-wrap items-center gap-x-2 gap-y-1 text-xs text-muted-foreground", children: [_jsx("span", { className: "sr-only", children: meta.description }), visibility === "org" && props.hideInSearchControl ? (_jsx(AdvancedAccessPopover, { control: props.hideInSearchControl, canManage: canManage, onToggle: handleHideInSearch })) : null] })] })] })] }), _jsxs("div", { className: "mb-4 space-y-4", children: [_jsx("div", { className: "text-sm font-semibold", children: peopleAccessLabel }), canManage ? (_jsxs("div", { className: "space-y-2", children: [_jsxs("div", { className: "flex items-stretch gap-2", children: [_jsx(MemberAutocomplete, { value: inviteEmail, open: suggestionsOpen, onOpenChange: setSuggestionsOpen, onValueChange: (next) => {
                                             onInviteEmailChange(next);
                                             if (shareError)
@@ -128,8 +172,28 @@ function SharePanel(props) {
                                             if (shareError)
                                                 setShareError(null);
                                         }, onSubmit: handleAdd, placeholder: policy.requireOrgMemberForUserShares
-                                            ? "Add people from your organization"
-                                            : "Add people by email", suggestions: memberSuggestions, search: memberSearch }), _jsx(RoleSelect, { value: role, onChange: setRole, roleCopy: props.roleCopy, allowedRoles: props.allowedRoles }), _jsx("button", { type: "button", onClick: handleAdd, disabled: !hasInviteEmail, className: BUTTON_PRIMARY_SM, children: "Add" })] }), shareError ? (_jsx("div", { role: "alert", className: "rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: shareError })) : null, hasInviteEmail ? (_jsxs("div", { className: "flex flex-wrap items-center gap-x-3 gap-y-2 text-xs text-muted-foreground", children: [_jsxs("label", { className: "inline-flex items-center gap-2", children: [_jsx("input", { type: "checkbox", checked: notifyPeople, onChange: (e) => setNotifyPeople(e.target.checked), className: "h-4 w-4 rounded border-input accent-primary" }), "Notify people"] }), notifyPeople ? (_jsx("button", { type: "button", "aria-expanded": messageOpen, onClick: () => setMessageOpen(!messageOpen), className: "rounded-sm px-1 py-0.5 font-medium text-foreground underline decoration-border underline-offset-2 transition-colors hover:bg-accent hover:text-accent-foreground", children: messageOpen ? "Hide message" : "Add a message" })) : null] })) : null, hasInviteEmail && notifyPeople && messageOpen ? (_jsx("div", { className: "rounded-md border border-border/70 bg-muted/20 p-2.5", children: _jsx("textarea", { "aria-label": "Message", placeholder: "Add a short note (optional)", value: shareMessage, onChange: (event) => setShareMessage(event.target.value), maxLength: 500, rows: 3, className: "w-full resize-y rounded-md border border-input bg-card px-3 py-2 text-sm text-foreground placeholder:text-muted-foreground focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 focus:ring-offset-background" }) })) : null] })) : null, _jsxs("ul", { className: "flex list-none flex-col gap-1 p-0 m-0", children: [data?.ownerEmail ? (_jsxs("li", { className: "flex items-center gap-3 px-1 py-1.5 text-sm", children: [_jsx(Avatar, { label: displayName(data.ownerEmail, knownMembers) }), _jsx("span", { className: "flex-1 min-w-0 truncate", children: displayName(data.ownerEmail, knownMembers) }), _jsx("span", { className: "text-xs text-muted-foreground", children: "Owner" })] })) : null, shares.map((s) => (_jsxs("li", { className: cn("flex items-center gap-3 px-1 py-1.5 text-sm", inFlight.has(keyOf(s)) && "opacity-60"), children: [_jsx(Avatar, { label: principalLabel(s, knownMembers), org: s.principalType === "org" }), _jsx("span", { className: "flex-1 min-w-0 truncate", children: principalLabel(s, knownMembers) }), canManage ? (_jsx(RoleSelect, { value: s.role, onChange: (r) => handleChangeRole(s, r), disabled: inFlight.has(keyOf(s)), plain: true, roleCopy: props.roleCopy, allowedRoles: props.allowedRoles })) : (_jsx("span", { className: "text-xs text-muted-foreground", children: roleMeta(s.role, props.roleCopy).label })), canManage ? (_jsx("button", { type: "button", "aria-label": "Remove", onClick: () => handleRemove(s), disabled: inFlight.has(keyOf(s)), className: BUTTON_GHOST_ICON, children: _jsx(IconTrash, { size: 14 }) })) : null] }, keyOf(s)))), !shares.length && !data?.ownerEmail ? (_jsx("li", { className: "px-1 py-1.5 text-sm text-muted-foreground", children: "No one has access yet." })) : null] })] }), shareError && !canManage ? (_jsx("div", { role: "alert", className: "mb-4 rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: shareError })) : null, props.accessNote ? (_jsx("div", { className: "mb-4 rounded-md border border-border bg-muted/35 p-3 text-xs text-muted-foreground", children: props.accessNote })) : null, showShareLinks && shareUrlPlacement === "bottom" ? shareLinks : null, props.shareFooterContent] }));
+                                            ? t("agentChat.share.addPeopleOrganization", {
+                                                defaultValue: "Add people from your organization",
+                                            })
+                                            : t("agentChat.share.addPeopleEmail", {
+                                                defaultValue: "Add people by email",
+                                            }), suggestions: memberSuggestions, search: memberSearch }), _jsx(RoleSelect, { value: role, onChange: setRole, roleCopy: props.roleCopy, allowedRoles: props.allowedRoles }), _jsx("button", { type: "button", onClick: handleAdd, disabled: !hasInviteEmail, className: BUTTON_PRIMARY_SM, children: t("agentChat.share.add", { defaultValue: "Add" }) })] }), shareError ? (_jsx("div", { role: "alert", className: "rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: shareError })) : null, hasInviteEmail ? (_jsxs("div", { className: "flex flex-wrap items-center gap-x-3 gap-y-2 text-xs text-muted-foreground", children: [_jsxs("label", { className: "inline-flex items-center gap-2", children: [_jsx("input", { type: "checkbox", checked: notifyPeople, onChange: (e) => setNotifyPeople(e.target.checked), className: "h-4 w-4 rounded border-input accent-primary" }), t("agentChat.share.notifyPeople", {
+                                                defaultValue: "Notify people",
+                                            })] }), notifyPeople ? (_jsx("button", { type: "button", "aria-expanded": messageOpen, onClick: () => setMessageOpen(!messageOpen), className: "rounded-sm px-1 py-0.5 font-medium text-foreground underline decoration-border underline-offset-2 transition-colors hover:bg-accent hover:text-accent-foreground", children: messageOpen
+                                            ? t("agentChat.share.hideMessage", {
+                                                defaultValue: "Hide message",
+                                            })
+                                            : t("agentChat.share.addMessage", {
+                                                defaultValue: "Add a message",
+                                            }) })) : null] })) : null, hasInviteEmail && notifyPeople && messageOpen ? (_jsx("div", { className: "rounded-md border border-border/70 bg-muted/20 p-2.5", children: _jsx("textarea", { "aria-label": t("agentChat.share.message", {
+                                        defaultValue: "Message",
+                                    }), placeholder: t("agentChat.share.messagePlaceholder", {
+                                        defaultValue: "Add a short note (optional)",
+                                    }), value: shareMessage, onChange: (event) => setShareMessage(event.target.value), maxLength: 500, rows: 3, className: "w-full resize-y rounded-md border border-input bg-card px-3 py-2 text-sm text-foreground placeholder:text-muted-foreground focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 focus:ring-offset-background" }) })) : null] })) : null, _jsxs("ul", { className: "flex list-none flex-col gap-1 p-0 m-0", children: [data?.ownerEmail ? (_jsxs("li", { className: "flex items-center gap-3 px-1 py-1.5 text-sm", children: [_jsx(Avatar, { label: displayName(data.ownerEmail, knownMembers, t) }), _jsx("span", { className: "flex-1 min-w-0 truncate", children: displayName(data.ownerEmail, knownMembers, t) }), _jsx("span", { className: "text-xs text-muted-foreground", children: t("agentChat.share.owner", { defaultValue: "Owner" }) })] })) : null, shares.map((s) => (_jsxs("li", { className: cn("flex items-center gap-3 px-1 py-1.5 text-sm", inFlight.has(keyOf(s)) && "opacity-60"), children: [_jsx(Avatar, { label: principalLabel(s, knownMembers, t), org: s.principalType === "org" }), _jsx("span", { className: "flex-1 min-w-0 truncate", children: principalLabel(s, knownMembers, t) }), canManage ? (_jsx(RoleSelect, { value: s.role, onChange: (r) => handleChangeRole(s, r), disabled: inFlight.has(keyOf(s)), plain: true, roleCopy: props.roleCopy, allowedRoles: props.allowedRoles })) : (_jsx("span", { className: "text-xs text-muted-foreground", children: roleMeta(s.role, t, props.roleCopy).label })), canManage ? (_jsx("button", { type: "button", "aria-label": t("agentChat.share.remove", {
+                                            defaultValue: "Remove",
+                                        }), onClick: () => handleRemove(s), disabled: inFlight.has(keyOf(s)), className: BUTTON_GHOST_ICON, children: _jsx(IconTrash, { size: 14 }) })) : null] }, keyOf(s)))), !shares.length && !data?.ownerEmail ? (_jsx("li", { className: "px-1 py-1.5 text-sm text-muted-foreground", children: t("agentChat.share.noAccess", {
+                                    defaultValue: "No one has access yet.",
+                                }) })) : null] })] }), shareError && !canManage ? (_jsx("div", { role: "alert", className: "mb-4 rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: shareError })) : null, props.accessNote ? (_jsx("div", { className: "mb-4 rounded-md border border-border bg-muted/35 p-3 text-xs text-muted-foreground", children: props.accessNote })) : null, showShareLinks && shareUrlPlacement === "bottom" ? shareLinks : null, props.shareFooterContent] }));
     if (!hasTabs)
         return sharePanel;
     const tabs = [
@@ -144,17 +208,30 @@ function SharePanel(props) {
     const activeTab = tabs.some((tab) => tab.value === activeShareTab)
         ? activeShareTab
         : "share";
-    return (_jsxs("div", { className: "flex flex-col gap-4", children: [_jsx("div", { role: "tablist", "aria-label": "Share options", className: "flex gap-1 rounded-xl bg-muted/70 p-1", children: tabs.map((tab) => {
+    return (_jsxs("div", { className: "flex flex-col gap-4", children: [_jsx("div", { role: "tablist", "aria-label": t("agentChat.share.shareOptions", {
+                    defaultValue: "Share options",
+                }), className: "flex gap-1 rounded-xl bg-muted/70 p-1", children: tabs.map((tab) => {
                     const active = tab.value === activeTab;
                     return (_jsx("button", { type: "button", role: "tab", "aria-selected": active, disabled: tab.disabled, onClick: () => handleShareTabChange(tab.value), className: cn("h-11 min-w-0 flex-1 rounded-lg px-3 text-sm font-medium text-muted-foreground transition-colors hover:bg-background/70 hover:text-foreground disabled:pointer-events-none disabled:opacity-50", active &&
                             "bg-background text-foreground shadow-sm ring-2 ring-primary"), children: _jsx("span", { className: "block truncate", children: tab.label }) }, tab.value));
                 }) }), _jsx("div", { role: "tabpanel", children: tabs.find((tab) => tab.value === activeTab)?.content })] }));
 }
 function AdvancedAccessPopover({ control, canManage, onToggle, }) {
-    return (_jsxs(Popover, { children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs("button", { type: "button", disabled: !canManage, className: "inline-flex items-center gap-1 rounded-sm px-1 py-0.5 text-xs font-medium text-muted-foreground transition-colors hover:bg-accent hover:text-foreground disabled:cursor-not-allowed disabled:opacity-50", children: ["Advanced", _jsx(IconChevronDown, { size: 12, strokeWidth: 1.8 })] }) }), _jsx(PopoverContent, { align: "start", sideOffset: 6, "data-agent-native-share-overlay": "", onOpenAutoFocus: (event) => event.preventDefault(), className: cn(SHARE_NESTED_OVERLAY_Z, "w-72 p-3 shadow-lg", SHARE_POPOVER_SURFACE), children: _jsxs("div", { className: "space-y-3", children: [_jsxs("div", { children: [_jsx("div", { className: "text-sm font-medium text-foreground", children: "Advanced access" }), _jsx("div", { className: "mt-1 text-xs leading-5 text-muted-foreground", children: "Control how organization access appears in search." })] }), _jsxs("button", { type: "button", role: "switch", "aria-checked": control.checked, disabled: !canManage || control.pending, onClick: onToggle, className: cn("flex w-full items-start gap-3 rounded-md border border-border/70 bg-card px-3 py-2.5 text-start transition-colors hover:bg-accent/45 disabled:cursor-not-allowed disabled:opacity-60", control.checked && "border-border bg-accent/35 text-foreground"), children: [_jsx("span", { "aria-hidden": true, className: cn("relative mt-0.5 inline-flex h-5 w-9 shrink-0 items-center rounded-full border border-border bg-muted-foreground/25 transition-colors", control.checked && "border-primary/70 bg-primary"), children: _jsx("span", { className: cn("ml-0.5 size-4 rounded-full bg-popover shadow-sm transition-transform", control.checked && "translate-x-4") }) }), _jsxs("span", { className: "min-w-0 flex-1", children: [_jsxs("span", { className: "flex items-center gap-1.5 text-sm font-medium text-foreground", children: [_jsx(IconSearchOff, { size: 14, strokeWidth: 1.8 }), control.label ?? "Hide in search"] }), _jsx("span", { className: "mt-0.5 block text-xs leading-5 text-muted-foreground", children: control.description ??
-                                                "People with the link can still open this." })] })] })] }) })] }));
+    const t = useT();
+    return (_jsxs(Popover, { children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs("button", { type: "button", disabled: !canManage, className: "inline-flex items-center gap-1 rounded-sm px-1 py-0.5 text-xs font-medium text-muted-foreground transition-colors hover:bg-accent hover:text-foreground disabled:cursor-not-allowed disabled:opacity-50", children: [t("agentChat.share.advanced", { defaultValue: "Advanced" }), _jsx(IconChevronDown, { size: 12, strokeWidth: 1.8 })] }) }), _jsx(PopoverContent, { align: "start", sideOffset: 6, "data-agent-native-share-overlay": "", onOpenAutoFocus: (event) => event.preventDefault(), className: cn(SHARE_NESTED_OVERLAY_Z, "w-72 p-3 shadow-lg", SHARE_POPOVER_SURFACE), children: _jsxs("div", { className: "space-y-3", children: [_jsxs("div", { children: [_jsx("div", { className: "text-sm font-medium text-foreground", children: t("agentChat.share.advancedAccess", {
+                                        defaultValue: "Advanced access",
+                                    }) }), _jsx("div", { className: "mt-1 text-xs leading-5 text-muted-foreground", children: t("agentChat.share.advancedDescription", {
+                                        defaultValue: "Control how organization access appears in search.",
+                                    }) })] }), _jsxs("button", { type: "button", role: "switch", "aria-checked": control.checked, disabled: !canManage || control.pending, onClick: onToggle, className: cn("flex w-full items-start gap-3 rounded-md border border-border/70 bg-card px-3 py-2.5 text-start transition-colors hover:bg-accent/45 disabled:cursor-not-allowed disabled:opacity-60", control.checked && "border-border bg-accent/35 text-foreground"), children: [_jsx("span", { "aria-hidden": true, className: cn("relative mt-0.5 inline-flex h-5 w-9 shrink-0 items-center rounded-full border border-border bg-muted-foreground/25 transition-colors", control.checked && "border-primary/70 bg-primary"), children: _jsx("span", { className: cn("ml-0.5 size-4 rounded-full bg-popover shadow-sm transition-transform", control.checked && "translate-x-4") }) }), _jsxs("span", { className: "min-w-0 flex-1", children: [_jsxs("span", { className: "flex items-center gap-1.5 text-sm font-medium text-foreground", children: [_jsx(IconSearchOff, { size: 14, strokeWidth: 1.8 }), control.label ??
+                                                    t("agentChat.share.hideInSearch", {
+                                                        defaultValue: "Hide in search",
+                                                    })] }), _jsx("span", { className: "mt-0.5 block text-xs leading-5 text-muted-foreground", children: control.description ??
+                                                t("agentChat.share.linkCanStillOpen", {
+                                                    defaultValue: "People with the link can still open this.",
+                                                }) })] })] })] }) })] }));
 }
 function MemberAutocomplete({ value, open, onOpenChange, onValueChange, onSelectMember, onSubmit, placeholder, suggestions, search, }) {
+    const t = useT();
     const rawListboxId = useId();
     const listboxId = rawListboxId.replace(/:/g, "");
     const inputRef = useRef(null);
@@ -247,12 +324,23 @@ function MemberAutocomplete({ value, open, onOpenChange, onValueChange, onSelect
                             return (_jsxs("div", { id: optionId(listboxId, index), role: "option", "aria-selected": active, onMouseDown: (event) => event.preventDefault(), onMouseEnter: () => setActiveIndex(index), onClick: () => chooseMember(member), className: cn("flex cursor-pointer select-none flex-col rounded-sm px-3 py-2 text-sm outline-none", active
                                     ? "bg-accent text-accent-foreground"
                                     : "text-foreground hover:bg-accent hover:text-accent-foreground"), children: [_jsx("span", { className: "truncate font-medium", children: member.name?.trim() || member.email }), member.name?.trim() ? (_jsx("span", { className: "truncate text-xs text-muted-foreground", children: member.email })) : null] }, member.email));
-                        }), search.isLoading && suggestions.length === 0 ? (_jsx("div", { className: "px-3 py-3 text-sm text-muted-foreground", children: "Searching..." })) : null, search.error ? (_jsx("div", { className: "px-3 py-3 text-sm text-muted-foreground", children: "Could not load people." })) : null, !search.isLoading && !search.error && suggestions.length === 0 ? (_jsx("div", { className: "px-3 py-3 text-sm text-muted-foreground", children: value.trim() ? "No matches." : "No people found." })) : null, search.isLoadingMore ? (_jsxs("div", { className: "flex items-center gap-2 px-3 py-2 text-sm text-muted-foreground", children: [_jsx(IconLoader2, { "aria-hidden": true, size: 14, strokeWidth: 1.8, className: "animate-spin" }), "Loading..."] })) : null, search.hasMore && !search.isLoadingMore ? (_jsx("button", { type: "button", onMouseDown: (event) => event.preventDefault(), onClick: search.loadMore, className: "mt-1 flex w-full items-center justify-center rounded-sm px-3 py-2 text-sm font-medium text-muted-foreground hover:bg-accent hover:text-accent-foreground", children: "Load more" })) : null] }) })] }));
+                        }), search.isLoading && suggestions.length === 0 ? (_jsx("div", { className: "px-3 py-3 text-sm text-muted-foreground", children: t("agentChat.share.searching", {
+                                defaultValue: "Searching...",
+                            }) })) : null, search.error ? (_jsx("div", { className: "px-3 py-3 text-sm text-muted-foreground", children: t("agentChat.share.loadPeopleFailed", {
+                                defaultValue: "Could not load people.",
+                            }) })) : null, !search.isLoading && !search.error && suggestions.length === 0 ? (_jsx("div", { className: "px-3 py-3 text-sm text-muted-foreground", children: value.trim()
+                                ? t("agentChat.share.noMatches", {
+                                    defaultValue: "No matches.",
+                                })
+                                : t("agentChat.share.noPeopleFound", {
+                                    defaultValue: "No people found.",
+                                }) })) : null, search.isLoadingMore ? (_jsxs("div", { className: "flex items-center gap-2 px-3 py-2 text-sm text-muted-foreground", children: [_jsx(IconLoader2, { "aria-hidden": true, size: 14, strokeWidth: 1.8, className: "animate-spin" }), t("agentChat.share.loading", { defaultValue: "Loading..." })] })) : null, search.hasMore && !search.isLoadingMore ? (_jsx("button", { type: "button", onMouseDown: (event) => event.preventDefault(), onClick: search.loadMore, className: "mt-1 flex w-full items-center justify-center rounded-sm px-3 py-2 text-sm font-medium text-muted-foreground hover:bg-accent hover:text-accent-foreground", children: t("agentChat.share.loadMore", { defaultValue: "Load more" }) })) : null] }) })] }));
 }
 function optionId(baseId, index) {
     return `${baseId}-option-${index}`;
 }
-function CopyLinkField({ value, label = "Share link", description, }) {
+function CopyLinkField({ value, label, description, }) {
+    const t = useT();
     const [copied, setCopied] = useState(false);
     const resetRef = useRef(undefined);
     useEffect(() => {
@@ -272,7 +360,12 @@ function CopyLinkField({ value, label = "Share link", description, }) {
             setCopied(false);
         }
     };
-    return (_jsxs("div", { className: "mb-4 flex items-center justify-between gap-4", children: [_jsxs("div", { className: "min-w-0", children: [_jsx("div", { className: "text-sm font-semibold", children: label }), description ? (_jsx("div", { className: "mt-1 text-xs text-muted-foreground", children: description })) : null] }), _jsxs("button", { type: "button", onClick: handleCopy, "aria-label": copied ? "Link copied" : "Copy", className: "inline-flex h-9 shrink-0 items-center gap-2 whitespace-nowrap rounded-md border border-input bg-card px-3 text-sm font-medium text-foreground hover:bg-accent", children: [copied ? _jsx(IconCheck, { size: 15 }) : _jsx(IconLink, { size: 15 }), copied ? "Copied" : "Copy"] })] }));
+    return (_jsxs("div", { className: "mb-4 flex items-center justify-between gap-4", children: [_jsxs("div", { className: "min-w-0", children: [_jsx("div", { className: "text-sm font-semibold", children: label ??
+                            t("agentChat.share.shareLink", { defaultValue: "Share link" }) }), description ? (_jsx("div", { className: "mt-1 text-xs text-muted-foreground", children: description })) : null] }), _jsxs("button", { type: "button", onClick: handleCopy, "aria-label": copied
+                    ? t("agentChat.share.copied", { defaultValue: "Copied" })
+                    : t("agentChat.share.copy", { defaultValue: "Copy" }), className: "inline-flex h-9 shrink-0 items-center gap-2 whitespace-nowrap rounded-md border border-input bg-card px-3 text-sm font-medium text-foreground hover:bg-accent", children: [copied ? _jsx(IconCheck, { size: 15 }) : _jsx(IconLink, { size: 15 }), copied
+                        ? t("agentChat.share.copied", { defaultValue: "Copied" })
+                        : t("agentChat.share.copy", { defaultValue: "Copy" })] })] }));
 }
 // ---------------------------------------------------------------------------
 // Radix Select wrappers styled like shadcn Select (no native <select> anywhere)
@@ -283,17 +376,22 @@ function SelectItems({ items }) {
     return (_jsx(_Fragment, { children: items.map((it) => (_jsxs(Select.Item, { value: it.value, className: selectItemClass, children: [_jsx("span", { className: "absolute start-2 top-2 flex h-4 w-4 items-center justify-center", children: _jsx(Select.ItemIndicator, { children: _jsx(IconCheck, { size: 14 }) }) }), _jsxs("span", { className: "flex flex-col", children: [_jsx(Select.ItemText, { children: it.label }), it.description ? (_jsx("span", { className: "text-xs text-muted-foreground", children: it.description })) : null] })] }, it.value))) }));
 }
 function RoleSelect(props) {
-    const current = roleMeta(props.value, props.roleCopy);
-    const allowedRoles = props.allowedRoles ?? ROLE_OPTIONS.map((item) => item.value);
-    const options = ROLE_OPTIONS.filter((option) => option.value === props.value || allowedRoles.includes(option.value)).map((option) => roleMeta(option.value, props.roleCopy));
+    const t = useT();
+    const allOptions = roleOptions(t);
+    const current = roleMeta(props.value, t, props.roleCopy);
+    const allowedRoles = props.allowedRoles ?? allOptions.map((item) => item.value);
+    const options = allOptions
+        .filter((option) => option.value === props.value || allowedRoles.includes(option.value))
+        .map((option) => roleMeta(option.value, t, props.roleCopy));
     return (_jsxs(Select.Root, { value: props.value, onValueChange: (v) => props.onChange(v), disabled: props.disabled, children: [_jsxs(Select.Trigger, { className: props.plain
                     ? cn(BUTTON_BASE, "h-7 px-2 bg-transparent text-muted-foreground hover:bg-accent hover:text-accent-foreground")
-                    : cn(BUTTON_BASE, "h-9 px-3 border border-input bg-card hover:bg-accent hover:text-accent-foreground"), "aria-label": "Role", children: [_jsx(Select.Value, { children: current.label }), _jsx(Select.Icon, { children: _jsx(IconChevronDown, { size: 14 }) })] }), _jsx(Select.Portal, { children: _jsx(Select.Content, { "data-agent-native-share-overlay": "", className: selectContentClass, position: "popper", sideOffset: 4, children: _jsx(Select.Viewport, { children: _jsx(SelectItems, { items: options }) }) }) })] }));
+                    : cn(BUTTON_BASE, "h-9 px-3 border border-input bg-card hover:bg-accent hover:text-accent-foreground"), "aria-label": t("agentChat.share.role", { defaultValue: "Role" }), children: [_jsx(Select.Value, { children: current.label }), _jsx(Select.Icon, { children: _jsx(IconChevronDown, { size: 14 }) })] }), _jsx(Select.Portal, { children: _jsx(Select.Content, { "data-agent-native-share-overlay": "", className: selectContentClass, position: "popper", sideOffset: 4, children: _jsx(Select.Viewport, { children: _jsx(SelectItems, { items: options }) }) }) })] }));
 }
 function VisibilitySelect(props) {
+    const t = useT();
     const allowPrivate = props.allowPrivate !== false;
     const allowPublic = props.allowPublic !== false;
-    const current = visibilityMeta(props.value, props.visibilityCopy);
+    const current = visibilityMeta(props.value, t, props.visibilityCopy);
     const options = Object.keys(VIS_META).filter((k) => {
         if (k === props.value)
             return true;
@@ -303,10 +401,12 @@ function VisibilitySelect(props) {
             return false;
         return true;
     });
-    return (_jsxs(Select.Root, { value: props.value, onValueChange: (v) => props.onChange(v), disabled: props.disabled, children: [_jsxs(Select.Trigger, { className: cn(BUTTON_BASE, "h-7 px-1 -ms-1 bg-transparent text-foreground hover:bg-accent hover:text-accent-foreground"), "aria-label": "General access", children: [_jsx(Select.Value, { children: current.label }), _jsx(Select.Icon, { children: _jsx(IconChevronDown, { size: 14 }) })] }), _jsx(Select.Portal, { children: _jsx(Select.Content, { "data-agent-native-share-overlay": "", className: selectContentClass, position: "popper", sideOffset: 4, children: _jsx(Select.Viewport, { children: _jsx(SelectItems, { items: options.map((k) => ({
+    return (_jsxs(Select.Root, { value: props.value, onValueChange: (v) => props.onChange(v), disabled: props.disabled, children: [_jsxs(Select.Trigger, { className: cn(BUTTON_BASE, "h-7 px-1 -ms-1 bg-transparent text-foreground hover:bg-accent hover:text-accent-foreground"), "aria-label": t("agentChat.share.generalAccess", {
+                    defaultValue: "General access",
+                }), children: [_jsx(Select.Value, { children: current.label }), _jsx(Select.Icon, { children: _jsx(IconChevronDown, { size: 14 }) })] }), _jsx(Select.Portal, { children: _jsx(Select.Content, { "data-agent-native-share-overlay": "", className: selectContentClass, position: "popper", sideOffset: 4, children: _jsx(Select.Viewport, { children: _jsx(SelectItems, { items: options.map((k) => ({
                                 value: k,
-                                label: visibilityMeta(k, props.visibilityCopy).label,
-                                description: visibilityMeta(k, props.visibilityCopy)
+                                label: visibilityMeta(k, t, props.visibilityCopy).label,
+                                description: visibilityMeta(k, t, props.visibilityCopy)
                                     .description,
                             })) }) }) }) })] }));
 }
@@ -320,18 +420,24 @@ function initials(s) {
     const name = s.split("@")[0] ?? s;
     return (name[0] ?? "?").toUpperCase();
 }
-function principalLabel(share, members) {
+function principalLabel(share, members, t) {
     const serverLabel = share.displayName?.trim();
     if (serverLabel)
         return serverLabel;
     if (share.principalType === "org")
-        return "Organization";
-    return displayName(share.principalId, members);
+        return t("agentChat.share.organization", {
+            defaultValue: "Organization",
+        });
+    return displayName(share.principalId, members, t);
 }
-function displayName(emailOrId, members) {
+function displayName(emailOrId, members, t) {
     const normalized = emailOrId.trim().toLowerCase();
     const match = members.find((m) => m.email.toLowerCase() === normalized);
     if (match?.name && match.name.trim())
         return match.name;
-    return normalized.includes("@") ? emailOrId : "Unknown person";
+    return normalized.includes("@")
+        ? emailOrId
+        : t("agentChat.share.unknownPerson", {
+            defaultValue: "Unknown person",
+        });
 }

package/dist/coding-tools/run-code.js

@@ -30,7 +30,7 @@
  */
 import crypto from "node:crypto";
 import http from "node:http";
-import { getRequestUserEmail } from "../server/request-context.js";
+import { getRequestRunContext, getRequestUserEmail, } from "../server/request-context.js";
 import { failExpiredSandboxExecution, getSandboxExecutionForOwner, } from "./sandbox/executions-store.js";
 import { BACKGROUND_DEFAULT_TIMEOUT_MS, BACKGROUND_MAX_TIMEOUT_MS, SANDBOX_EXECUTION_REDRIVE_AFTER_MS, driveSandboxExecution, enqueueSandboxExecution, getSandboxAdapter, isQueuedSandboxAdapter, registerSandboxExecutionRunner, resolveExecutionSandboxAdapter, } from "./sandbox/index.js";
 const DEFAULT_TIMEOUT_MS = 120_000;
@@ -289,6 +289,7 @@ async function enqueueBackgroundRunCode(input) {
         owner,
         orgId: input.context?.orgId ?? null,
         threadId: input.context?.threadId ?? null,
+        allowedActionNames: getRequestRunContext()?.allowedActionNames,
     });
     const hasGetTool = Boolean(input.getActions()["get-code-execution"]);
     return JSON.stringify({

package/dist/coding-tools/sandbox/background.d.ts

@@ -96,6 +96,7 @@ export interface EnqueueSandboxExecutionInput {
     owner: string;
     orgId?: string | null;
     threadId?: string | null;
+    allowedActionNames?: readonly string[];
 }
 export interface EnqueueSandboxExecutionResult {
     execution: SandboxExecutionRow;

package/dist/coding-tools/sandbox/background.js

@@ -106,6 +106,7 @@ export async function enqueueSandboxExecution(input) {
         code: input.code,
         timeoutMs: input.timeoutMs,
         maxOutputChars: input.maxOutputChars,
+        allowedActionNames: input.allowedActionNames,
     });
     let driveNote;
     try {
@@ -201,7 +202,13 @@ export async function processQueuedSandboxExecution(executionId) {
             threadId: claimed.threadId ?? undefined,
             actionName: "run-code",
         };
-        const output = await runWithRequestContext({ userEmail: claimed.owner, orgId: claimed.orgId ?? undefined }, () => runner.execute({
+        const output = await runWithRequestContext({
+            userEmail: claimed.owner,
+            orgId: claimed.orgId ?? undefined,
+            run: claimed.allowedActionNames === undefined
+                ? undefined
+                : { allowedActionNames: claimed.allowedActionNames },
+        }, () => runner.execute({
             code: claimed.code,
             timeoutMs: claimed.timeoutMs,
             context,

package/dist/coding-tools/sandbox/executions-store.d.ts

@@ -51,6 +51,7 @@ export interface SandboxExecutionRow {
     timedOut: boolean;
     error: string | null;
     bridgeToolsUsed: string[];
+    allowedActionNames: string[] | undefined;
     createdAt: number;
     startedAt: number | null;
     finishedAt: number | null;
@@ -65,6 +66,7 @@ export interface CreateSandboxExecutionInput {
     maxOutputChars: number;
     maxAttempts?: number;
     runtime?: string;
+    allowedActionNames?: readonly string[];
 }
 export interface FinalizeSandboxExecutionInput {
     status: Extract<SandboxExecutionStatus, "succeeded" | "failed" | "timed_out">;