@agent-native/core 0.155.0 → 0.157.0

package/dist/client/observability/ThumbsFeedback.js

@@ -3,14 +3,16 @@ import * as PopoverPrimitive from "@radix-ui/react-popover";
 import { IconThumbUp, IconThumbDown } from "@tabler/icons-react";
 import { useState, useCallback } from "react";
 import { agentNativePath } from "../api-path.js";
+import { useT } from "../i18n.js";
 import { cn } from "../utils.js";
 const THUMBS_DOWN_CATEGORIES = [
-    "Inaccurate",
-    "Not helpful",
-    "Wrong tool",
-    "Too slow",
+    { value: "Inaccurate", key: "agentChat.feedback.inaccurate" },
+    { value: "Not helpful", key: "agentChat.feedback.notHelpful" },
+    { value: "Wrong tool", key: "agentChat.feedback.wrongTool" },
+    { value: "Too slow", key: "agentChat.feedback.tooSlow" },
 ];
 export function ThumbsFeedback({ threadId, runId, messageSeq, className, }) {
+    const t = useT();
     const [selection, setSelection] = useState(null);
     const [categoryOpen, setCategoryOpen] = useState(false);
     const [submittedCategory, setSubmittedCategory] = useState(null);
@@ -54,11 +56,11 @@ export function ThumbsFeedback({ threadId, runId, messageSeq, className, }) {
         setCategoryOpen(false);
         sendFeedback("category", category);
     }, [sendFeedback]);
-    return (_jsxs("div", { className: cn("inline-flex items-center gap-0.5", className), children: [_jsx("button", { type: "button", "aria-label": "Thumbs up", onClick: handleThumbsUp, className: cn("flex h-6 w-6 items-center justify-center rounded", selection === "up"
+    return (_jsxs("div", { className: cn("inline-flex items-center gap-0.5", className), children: [_jsx("button", { type: "button", "aria-label": t("agentChat.feedback.thumbsUp"), onClick: handleThumbsUp, className: cn("flex h-6 w-6 items-center justify-center rounded", selection === "up"
                     ? "text-foreground"
-                    : "text-muted-foreground/70 hover:text-muted-foreground hover:bg-accent/50"), children: _jsx(IconThumbUp, { size: 16, stroke: selection === "up" ? 2.5 : 1.5, fill: selection === "up" ? "currentColor" : "none" }) }), _jsxs(PopoverPrimitive.Root, { open: categoryOpen, onOpenChange: setCategoryOpen, children: [_jsx(PopoverPrimitive.Trigger, { asChild: true, children: _jsx("button", { type: "button", "aria-label": "Thumbs down", onClick: handleThumbsDown, className: cn("flex h-6 w-6 items-center justify-center rounded", selection === "down"
+                    : "text-muted-foreground/70 hover:text-muted-foreground hover:bg-accent/50"), children: _jsx(IconThumbUp, { size: 16, stroke: selection === "up" ? 2.5 : 1.5, fill: selection === "up" ? "currentColor" : "none" }) }), _jsxs(PopoverPrimitive.Root, { open: categoryOpen, onOpenChange: setCategoryOpen, children: [_jsx(PopoverPrimitive.Trigger, { asChild: true, children: _jsx("button", { type: "button", "aria-label": t("agentChat.feedback.thumbsDown"), onClick: handleThumbsDown, className: cn("flex h-6 w-6 items-center justify-center rounded", selection === "down"
                                 ? "text-foreground"
-                                : "text-muted-foreground/70 hover:text-muted-foreground hover:bg-accent/50"), children: _jsx(IconThumbDown, { size: 16, stroke: selection === "down" ? 2.5 : 1.5, fill: selection === "down" ? "currentColor" : "none" }) }) }), _jsx(PopoverPrimitive.Portal, { children: _jsx(PopoverPrimitive.Content, { side: "bottom", align: "start", sideOffset: 4, collisionPadding: 8, className: "z-[300] overflow-hidden rounded-lg border border-border bg-popover p-1 shadow-lg outline-none", children: _jsx("div", { className: "flex flex-col gap-0.5", children: THUMBS_DOWN_CATEGORIES.map((category) => (_jsx("button", { type: "button", onClick: () => handleCategory(category), className: cn("rounded-md px-3 py-1.5 text-left text-xs", submittedCategory === category
+                                : "text-muted-foreground/70 hover:text-muted-foreground hover:bg-accent/50"), children: _jsx(IconThumbDown, { size: 16, stroke: selection === "down" ? 2.5 : 1.5, fill: selection === "down" ? "currentColor" : "none" }) }) }), _jsx(PopoverPrimitive.Portal, { children: _jsx(PopoverPrimitive.Content, { side: "bottom", align: "start", sideOffset: 4, collisionPadding: 8, className: "z-[300] overflow-hidden rounded-lg border border-border bg-popover p-1 shadow-lg outline-none", children: _jsx("div", { className: "flex flex-col gap-0.5", children: THUMBS_DOWN_CATEGORIES.map((category) => (_jsx("button", { type: "button", onClick: () => handleCategory(category.value), className: cn("rounded-md px-3 py-1.5 text-start text-xs", submittedCategory === category.value
                                         ? "bg-accent text-foreground font-medium"
-                                        : "text-muted-foreground hover:bg-accent/50 hover:text-foreground"), children: category }, category))) }) }) })] })] }));
+                                        : "text-muted-foreground hover:bg-accent/50 hover:text-foreground"), children: t(category.key) }, category.value))) }) }) })] })] }));
 }

package/dist/client/sharing/ShareButton.js

@@ -4,6 +4,7 @@ import { IconLock, IconWorld, IconTrash, IconCheck, IconChevronDown, IconLoader2
 import { useEffect, useId, useRef, useState, } from "react";
 import { writeClipboardText } from "../clipboard.js";
 import { Popover, PopoverAnchor, PopoverContent, PopoverTrigger, } from "../components/ui/popover.js";
+import { useT } from "../i18n.js";
 import { cn } from "../utils.js";
 import { useShareButtonController, } from "./useShareButtonController.js";
 // Match shadcn's <Button size="sm" variant="outline"> sizing so the trigger
@@ -17,46 +18,77 @@ const SHARE_NESTED_OVERLAY_ATTR = "data-agent-native-share-overlay";
 const SHARE_NESTED_OVERLAY_Z = "z-[100020]";
 const VIS_META = {
     private: {
-        label: "Private",
-        description: "Only people with access can view",
+        labelKey: "agentChat.share.private",
+        descriptionKey: "agentChat.share.privateDescription",
+        defaultLabel: "Private",
+        defaultDescription: "Only people with access can view",
         Icon: IconLock,
     },
     org: {
-        label: "Organization",
-        description: "Anyone in your organization can view",
+        labelKey: "agentChat.share.organization",
+        descriptionKey: "agentChat.share.organizationDescription",
+        defaultLabel: "Organization",
+        defaultDescription: "Anyone in your organization can view",
         Icon: IconUsersGroup,
     },
     public: {
-        label: "Public",
-        description: "Anyone with the link can view",
+        labelKey: "agentChat.share.public",
+        descriptionKey: "agentChat.share.publicDescription",
+        defaultLabel: "Public",
+        defaultDescription: "Anyone with the link can view",
         Icon: IconWorld,
     },
 };
-function visibilityMeta(visibility, copy) {
+function visibilityMeta(visibility, t, copy) {
     const base = VIS_META[visibility];
     const override = copy?.[visibility];
     return {
-        ...base,
-        label: override?.label ?? base.label,
-        description: override?.description ?? base.description,
+        Icon: base.Icon,
+        label: override?.label ??
+            t(base.labelKey, {
+                defaultValue: base.defaultLabel,
+            }),
+        description: override?.description ??
+            t(base.descriptionKey, {
+                defaultValue: base.defaultDescription,
+            }),
     };
 }
-const ROLE_OPTIONS = [
-    { value: "viewer", label: "Viewer", description: "Can view" },
-    {
-        value: "commenter",
-        label: "Commenter",
-        description: "Can view and add comments",
-    },
-    { value: "editor", label: "Editor", description: "Can edit" },
-    {
-        value: "admin",
-        label: "Admin",
-        description: "Can edit and manage access",
-    },
-];
-function roleMeta(role, copy) {
-    const base = ROLE_OPTIONS.find((option) => option.value === role) ?? ROLE_OPTIONS[0];
+function roleOptions(t) {
+    return [
+        {
+            value: "viewer",
+            label: t("agentChat.share.viewer", { defaultValue: "Viewer" }),
+            description: t("agentChat.share.viewerDescription", {
+                defaultValue: "Can view",
+            }),
+        },
+        {
+            value: "commenter",
+            label: t("agentChat.share.commenter", { defaultValue: "Commenter" }),
+            description: t("agentChat.share.commenterDescription", {
+                defaultValue: "Can view and add comments",
+            }),
+        },
+        {
+            value: "editor",
+            label: t("agentChat.share.editor", { defaultValue: "Editor" }),
+            description: t("agentChat.share.editorDescription", {
+                defaultValue: "Can edit",
+            }),
+        },
+        {
+            value: "admin",
+            label: t("agentChat.share.admin", { defaultValue: "Admin" }),
+            description: t("agentChat.share.adminDescription", {
+                defaultValue: "Can edit and manage access",
+            }),
+        },
+    ];
+}
+function roleMeta(role, t, copy) {
+    const options = roleOptions(t);
+    const base = options.find((option) => option.value === role) ?? options[0];
     const override = copy?.[role];
     return {
         ...base,
@@ -81,6 +113,7 @@ function handleSharePopoverInteractOutside(event) {
  * dark mode in any shadcn template.
  */
 export function ShareButton(props) {
+    const t = useT();
     const controller = useShareButtonController({
         resourceType: props.resourceType,
         resourceId: props.resourceId,
@@ -93,22 +126,32 @@ export function ShareButton(props) {
     });
     const triggerVisibility = controller.triggerVisibility;
     const triggerMeta = triggerVisibility
-        ? visibilityMeta(triggerVisibility, props.visibilityCopy)
+        ? visibilityMeta(triggerVisibility, t, props.visibilityCopy)
         : null;
     const TriggerIcon = triggerMeta?.Icon ?? IconShare3;
     const iconOnly = props.trigger === "icon";
     const showTriggerIcon = iconOnly || props.trigger === "label-icon";
-    const triggerLabel = iconOnly && triggerMeta ? `Share (${triggerMeta.label})` : "Share";
-    return (_jsxs(Popover, { open: controller.open, onOpenChange: controller.handleOpenChange, children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs("button", { type: "button", className: cn(iconOnly ? BUTTON_GHOST_ICON : BUTTON_OUTLINE_SM, props.triggerClassName), "aria-label": triggerLabel, title: triggerLabel, children: [showTriggerIcon && _jsx(TriggerIcon, { size: 16, strokeWidth: 1.75 }), !iconOnly && _jsx("span", { children: "Share" })] }) }), _jsx(PopoverContent, { align: "end", sideOffset: 6, "data-agent-native-share-overlay": "", className: cn("z-[2000] w-[min(460px,92vw)] rounded-lg p-4 shadow-lg", SHARE_POPOVER_SURFACE, props.popoverClassName), onOpenAutoFocus: (e) => e.preventDefault(), onInteractOutside: handleSharePopoverInteractOutside, children: _jsx(SharePanel, { ...props, controller: controller }) })] }));
+    const triggerLabel = iconOnly && triggerMeta
+        ? t("agentChat.share.triggerWithVisibility", {
+            defaultValue: "Share ({{visibility}})",
+            visibility: triggerMeta.label,
+        })
+        : t("agentChat.share.share", { defaultValue: "Share" });
+    return (_jsxs(Popover, { open: controller.open, onOpenChange: controller.handleOpenChange, children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs("button", { type: "button", className: cn(iconOnly ? BUTTON_GHOST_ICON : BUTTON_OUTLINE_SM, props.triggerClassName), "aria-label": triggerLabel, title: triggerLabel, children: [showTriggerIcon && _jsx(TriggerIcon, { size: 16, strokeWidth: 1.75 }), !iconOnly && (_jsx("span", { children: t("agentChat.share.share", { defaultValue: "Share" }) }))] }) }), _jsx(PopoverContent, { align: "end", sideOffset: 6, "data-agent-native-share-overlay": "", className: cn("z-[2000] w-[min(460px,92vw)] rounded-lg p-4 shadow-lg", SHARE_POPOVER_SURFACE, props.popoverClassName), onOpenAutoFocus: (e) => e.preventDefault(), onInteractOutside: handleSharePopoverInteractOutside, children: _jsx(SharePanel, { ...props, controller: controller }) })] }));
 }
 function SharePanel(props) {
+    const t = useT();
     const { controller } = props;
     const { inviteEmail, setInviteEmail: onInviteEmailChange, activeShareTab, handleShareTabChange, data, policy, visibility, canManage, role, setRole, notifyPeople, setNotifyPeople, shareMessage, setShareMessage, messageOpen, setMessageOpen, shareError, setShareError, suggestionsOpen, setSuggestionsOpen, inFlight, memberSearch, memberSuggestions, knownMembers, shares, handleVisibility, handleHideInSearch, handleAdd, handleChangeRole, handleRemove, } = controller;
     const hasInviteEmail = inviteEmail.trim().length > 0;
     const isLoading = data === undefined;
-    const meta = visibilityMeta(visibility, props.visibilityCopy);
-    const peopleAccessLabel = props.peopleAccessLabel ?? "People with access";
-    const generalAccessLabel = props.generalAccessLabel ?? "General access";
+    const meta = visibilityMeta(visibility, t, props.visibilityCopy);
+    const peopleAccessLabel = props.peopleAccessLabel ??
+        t("agentChat.share.peopleWithAccess", {
+            defaultValue: "People with access",
+        });
+    const generalAccessLabel = props.generalAccessLabel ??
+        t("agentChat.share.generalAccess", { defaultValue: "General access" });
     const shareLinks = (_jsxs(_Fragment, { children: [props.shareUrl ? (_jsx(CopyLinkField, { value: props.shareUrl, label: props.shareUrlLabel, description: props.shareUrlDescription })) : props.shareUrlPlaceholder ? (_jsxs("div", { className: "mb-4 rounded-md border border-dashed border-border bg-muted/20 px-3 py-2.5 text-xs text-muted-foreground", children: [props.shareUrlLabel ? (_jsx("div", { className: "mb-0.5 font-medium text-foreground", children: props.shareUrlLabel })) : null, props.shareUrlPlaceholder] })) : null, props.secondaryShareUrl ? (_jsx(CopyLinkField, { value: props.secondaryShareUrl, label: props.secondaryShareUrlLabel, description: props.secondaryShareUrlDescription })) : null] }));
     const showShareLinks = (props.showShareLinks ?? true) &&
         (Boolean(props.shareUrl) ||
@@ -117,7 +160,8 @@ function SharePanel(props) {
     const shareUrlPlacement = props.shareUrlPlacement ?? "top";
     const extraTabs = props.shareTabs?.tabs.filter((tab) => tab.value !== "context") ?? [];
     const hasTabs = extraTabs.length > 0;
-    const shareTabLabel = props.shareTabs?.shareLabel ?? "Share link";
+    const shareTabLabel = props.shareTabs?.shareLabel ??
+        t("agentChat.share.shareLink", { defaultValue: "Share link" });
     const sharePanel = isLoading ? (_jsxs("div", { children: [showShareLinks ? (_jsx("div", { className: "mb-4 h-9 rounded-md bg-muted animate-pulse" })) : null, _jsx("div", { className: "mb-2 text-sm font-semibold", children: generalAccessLabel }), _jsx("div", { className: "mb-4 h-9 rounded-md bg-muted animate-pulse" }), _jsx("div", { className: "mb-2 text-sm font-semibold", children: peopleAccessLabel }), _jsx("div", { className: "mb-4 h-7 rounded-md bg-muted animate-pulse" })] })) : (_jsxs("div", { children: [showShareLinks && shareUrlPlacement === "top" ? shareLinks : null, _jsxs("div", { className: "mb-4", children: [_jsx("div", { className: "mb-2 text-sm font-semibold", children: generalAccessLabel }), _jsxs("div", { className: "flex items-center gap-3", children: [_jsx("span", { "aria-hidden": true, className: "inline-flex h-9 w-9 shrink-0 items-center justify-center rounded-full bg-muted text-muted-foreground", children: _jsx(meta.Icon, { size: 16, strokeWidth: 1.75 }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx(VisibilitySelect, { value: visibility, onChange: handleVisibility, disabled: !canManage, visibilityCopy: props.visibilityCopy, allowPublic: policy.allowPublic }), _jsxs("div", { className: "mt-0.5 flex flex-wrap items-center gap-x-2 gap-y-1 text-xs text-muted-foreground", children: [_jsx("span", { className: "sr-only", children: meta.description }), visibility === "org" && props.hideInSearchControl ? (_jsx(AdvancedAccessPopover, { control: props.hideInSearchControl, canManage: canManage, onToggle: handleHideInSearch })) : null] })] })] })] }), _jsxs("div", { className: "mb-4 space-y-4", children: [_jsx("div", { className: "text-sm font-semibold", children: peopleAccessLabel }), canManage ? (_jsxs("div", { className: "space-y-2", children: [_jsxs("div", { className: "flex items-stretch gap-2", children: [_jsx(MemberAutocomplete, { value: inviteEmail, open: suggestionsOpen, onOpenChange: setSuggestionsOpen, onValueChange: (next) => {
                                             onInviteEmailChange(next);
                                             if (shareError)
@@ -128,8 +172,28 @@ function SharePanel(props) {
                                             if (shareError)
                                                 setShareError(null);
                                         }, onSubmit: handleAdd, placeholder: policy.requireOrgMemberForUserShares
-                                            ? "Add people from your organization"
-                                            : "Add people by email", suggestions: memberSuggestions, search: memberSearch }), _jsx(RoleSelect, { value: role, onChange: setRole, roleCopy: props.roleCopy, allowedRoles: props.allowedRoles }), _jsx("button", { type: "button", onClick: handleAdd, disabled: !hasInviteEmail, className: BUTTON_PRIMARY_SM, children: "Add" })] }), shareError ? (_jsx("div", { role: "alert", className: "rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: shareError })) : null, hasInviteEmail ? (_jsxs("div", { className: "flex flex-wrap items-center gap-x-3 gap-y-2 text-xs text-muted-foreground", children: [_jsxs("label", { className: "inline-flex items-center gap-2", children: [_jsx("input", { type: "checkbox", checked: notifyPeople, onChange: (e) => setNotifyPeople(e.target.checked), className: "h-4 w-4 rounded border-input accent-primary" }), "Notify people"] }), notifyPeople ? (_jsx("button", { type: "button", "aria-expanded": messageOpen, onClick: () => setMessageOpen(!messageOpen), className: "rounded-sm px-1 py-0.5 font-medium text-foreground underline decoration-border underline-offset-2 transition-colors hover:bg-accent hover:text-accent-foreground", children: messageOpen ? "Hide message" : "Add a message" })) : null] })) : null, hasInviteEmail && notifyPeople && messageOpen ? (_jsx("div", { className: "rounded-md border border-border/70 bg-muted/20 p-2.5", children: _jsx("textarea", { "aria-label": "Message", placeholder: "Add a short note (optional)", value: shareMessage, onChange: (event) => setShareMessage(event.target.value), maxLength: 500, rows: 3, className: "w-full resize-y rounded-md border border-input bg-card px-3 py-2 text-sm text-foreground placeholder:text-muted-foreground focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 focus:ring-offset-background" }) })) : null] })) : null, _jsxs("ul", { className: "flex list-none flex-col gap-1 p-0 m-0", children: [data?.ownerEmail ? (_jsxs("li", { className: "flex items-center gap-3 px-1 py-1.5 text-sm", children: [_jsx(Avatar, { label: displayName(data.ownerEmail, knownMembers) }), _jsx("span", { className: "flex-1 min-w-0 truncate", children: displayName(data.ownerEmail, knownMembers) }), _jsx("span", { className: "text-xs text-muted-foreground", children: "Owner" })] })) : null, shares.map((s) => (_jsxs("li", { className: cn("flex items-center gap-3 px-1 py-1.5 text-sm", inFlight.has(keyOf(s)) && "opacity-60"), children: [_jsx(Avatar, { label: principalLabel(s, knownMembers), org: s.principalType === "org" }), _jsx("span", { className: "flex-1 min-w-0 truncate", children: principalLabel(s, knownMembers) }), canManage ? (_jsx(RoleSelect, { value: s.role, onChange: (r) => handleChangeRole(s, r), disabled: inFlight.has(keyOf(s)), plain: true, roleCopy: props.roleCopy, allowedRoles: props.allowedRoles })) : (_jsx("span", { className: "text-xs text-muted-foreground", children: roleMeta(s.role, props.roleCopy).label })), canManage ? (_jsx("button", { type: "button", "aria-label": "Remove", onClick: () => handleRemove(s), disabled: inFlight.has(keyOf(s)), className: BUTTON_GHOST_ICON, children: _jsx(IconTrash, { size: 14 }) })) : null] }, keyOf(s)))), !shares.length && !data?.ownerEmail ? (_jsx("li", { className: "px-1 py-1.5 text-sm text-muted-foreground", children: "No one has access yet." })) : null] })] }), shareError && !canManage ? (_jsx("div", { role: "alert", className: "mb-4 rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: shareError })) : null, props.accessNote ? (_jsx("div", { className: "mb-4 rounded-md border border-border bg-muted/35 p-3 text-xs text-muted-foreground", children: props.accessNote })) : null, showShareLinks && shareUrlPlacement === "bottom" ? shareLinks : null, props.shareFooterContent] }));
+                                            ? t("agentChat.share.addPeopleOrganization", {
+                                                defaultValue: "Add people from your organization",
+                                            })
+                                            : t("agentChat.share.addPeopleEmail", {
+                                                defaultValue: "Add people by email",
+                                            }), suggestions: memberSuggestions, search: memberSearch }), _jsx(RoleSelect, { value: role, onChange: setRole, roleCopy: props.roleCopy, allowedRoles: props.allowedRoles }), _jsx("button", { type: "button", onClick: handleAdd, disabled: !hasInviteEmail, className: BUTTON_PRIMARY_SM, children: t("agentChat.share.add", { defaultValue: "Add" }) })] }), shareError ? (_jsx("div", { role: "alert", className: "rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: shareError })) : null, hasInviteEmail ? (_jsxs("div", { className: "flex flex-wrap items-center gap-x-3 gap-y-2 text-xs text-muted-foreground", children: [_jsxs("label", { className: "inline-flex items-center gap-2", children: [_jsx("input", { type: "checkbox", checked: notifyPeople, onChange: (e) => setNotifyPeople(e.target.checked), className: "h-4 w-4 rounded border-input accent-primary" }), t("agentChat.share.notifyPeople", {
+                                                defaultValue: "Notify people",
+                                            })] }), notifyPeople ? (_jsx("button", { type: "button", "aria-expanded": messageOpen, onClick: () => setMessageOpen(!messageOpen), className: "rounded-sm px-1 py-0.5 font-medium text-foreground underline decoration-border underline-offset-2 transition-colors hover:bg-accent hover:text-accent-foreground", children: messageOpen
+                                            ? t("agentChat.share.hideMessage", {
+                                                defaultValue: "Hide message",
+                                            })
+                                            : t("agentChat.share.addMessage", {
+                                                defaultValue: "Add a message",
+                                            }) })) : null] })) : null, hasInviteEmail && notifyPeople && messageOpen ? (_jsx("div", { className: "rounded-md border border-border/70 bg-muted/20 p-2.5", children: _jsx("textarea", { "aria-label": t("agentChat.share.message", {
+                                        defaultValue: "Message",
+                                    }), placeholder: t("agentChat.share.messagePlaceholder", {
+                                        defaultValue: "Add a short note (optional)",
+                                    }), value: shareMessage, onChange: (event) => setShareMessage(event.target.value), maxLength: 500, rows: 3, className: "w-full resize-y rounded-md border border-input bg-card px-3 py-2 text-sm text-foreground placeholder:text-muted-foreground focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 focus:ring-offset-background" }) })) : null] })) : null, _jsxs("ul", { className: "flex list-none flex-col gap-1 p-0 m-0", children: [data?.ownerEmail ? (_jsxs("li", { className: "flex items-center gap-3 px-1 py-1.5 text-sm", children: [_jsx(Avatar, { label: displayName(data.ownerEmail, knownMembers, t) }), _jsx("span", { className: "flex-1 min-w-0 truncate", children: displayName(data.ownerEmail, knownMembers, t) }), _jsx("span", { className: "text-xs text-muted-foreground", children: t("agentChat.share.owner", { defaultValue: "Owner" }) })] })) : null, shares.map((s) => (_jsxs("li", { className: cn("flex items-center gap-3 px-1 py-1.5 text-sm", inFlight.has(keyOf(s)) && "opacity-60"), children: [_jsx(Avatar, { label: principalLabel(s, knownMembers, t), org: s.principalType === "org" }), _jsx("span", { className: "flex-1 min-w-0 truncate", children: principalLabel(s, knownMembers, t) }), canManage ? (_jsx(RoleSelect, { value: s.role, onChange: (r) => handleChangeRole(s, r), disabled: inFlight.has(keyOf(s)), plain: true, roleCopy: props.roleCopy, allowedRoles: props.allowedRoles })) : (_jsx("span", { className: "text-xs text-muted-foreground", children: roleMeta(s.role, t, props.roleCopy).label })), canManage ? (_jsx("button", { type: "button", "aria-label": t("agentChat.share.remove", {
+                                            defaultValue: "Remove",
+                                        }), onClick: () => handleRemove(s), disabled: inFlight.has(keyOf(s)), className: BUTTON_GHOST_ICON, children: _jsx(IconTrash, { size: 14 }) })) : null] }, keyOf(s)))), !shares.length && !data?.ownerEmail ? (_jsx("li", { className: "px-1 py-1.5 text-sm text-muted-foreground", children: t("agentChat.share.noAccess", {
+                                    defaultValue: "No one has access yet.",
+                                }) })) : null] })] }), shareError && !canManage ? (_jsx("div", { role: "alert", className: "mb-4 rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: shareError })) : null, props.accessNote ? (_jsx("div", { className: "mb-4 rounded-md border border-border bg-muted/35 p-3 text-xs text-muted-foreground", children: props.accessNote })) : null, showShareLinks && shareUrlPlacement === "bottom" ? shareLinks : null, props.shareFooterContent] }));
     if (!hasTabs)
         return sharePanel;
     const tabs = [
@@ -144,17 +208,30 @@ function SharePanel(props) {
     const activeTab = tabs.some((tab) => tab.value === activeShareTab)
         ? activeShareTab
         : "share";
-    return (_jsxs("div", { className: "flex flex-col gap-4", children: [_jsx("div", { role: "tablist", "aria-label": "Share options", className: "flex gap-1 rounded-xl bg-muted/70 p-1", children: tabs.map((tab) => {
+    return (_jsxs("div", { className: "flex flex-col gap-4", children: [_jsx("div", { role: "tablist", "aria-label": t("agentChat.share.shareOptions", {
+                    defaultValue: "Share options",
+                }), className: "flex gap-1 rounded-xl bg-muted/70 p-1", children: tabs.map((tab) => {
                     const active = tab.value === activeTab;
                     return (_jsx("button", { type: "button", role: "tab", "aria-selected": active, disabled: tab.disabled, onClick: () => handleShareTabChange(tab.value), className: cn("h-11 min-w-0 flex-1 rounded-lg px-3 text-sm font-medium text-muted-foreground transition-colors hover:bg-background/70 hover:text-foreground disabled:pointer-events-none disabled:opacity-50", active &&
                             "bg-background text-foreground shadow-sm ring-2 ring-primary"), children: _jsx("span", { className: "block truncate", children: tab.label }) }, tab.value));
                 }) }), _jsx("div", { role: "tabpanel", children: tabs.find((tab) => tab.value === activeTab)?.content })] }));
 }
 function AdvancedAccessPopover({ control, canManage, onToggle, }) {
-    return (_jsxs(Popover, { children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs("button", { type: "button", disabled: !canManage, className: "inline-flex items-center gap-1 rounded-sm px-1 py-0.5 text-xs font-medium text-muted-foreground transition-colors hover:bg-accent hover:text-foreground disabled:cursor-not-allowed disabled:opacity-50", children: ["Advanced", _jsx(IconChevronDown, { size: 12, strokeWidth: 1.8 })] }) }), _jsx(PopoverContent, { align: "start", sideOffset: 6, "data-agent-native-share-overlay": "", onOpenAutoFocus: (event) => event.preventDefault(), className: cn(SHARE_NESTED_OVERLAY_Z, "w-72 p-3 shadow-lg", SHARE_POPOVER_SURFACE), children: _jsxs("div", { className: "space-y-3", children: [_jsxs("div", { children: [_jsx("div", { className: "text-sm font-medium text-foreground", children: "Advanced access" }), _jsx("div", { className: "mt-1 text-xs leading-5 text-muted-foreground", children: "Control how organization access appears in search." })] }), _jsxs("button", { type: "button", role: "switch", "aria-checked": control.checked, disabled: !canManage || control.pending, onClick: onToggle, className: cn("flex w-full items-start gap-3 rounded-md border border-border/70 bg-card px-3 py-2.5 text-start transition-colors hover:bg-accent/45 disabled:cursor-not-allowed disabled:opacity-60", control.checked && "border-border bg-accent/35 text-foreground"), children: [_jsx("span", { "aria-hidden": true, className: cn("relative mt-0.5 inline-flex h-5 w-9 shrink-0 items-center rounded-full border border-border bg-muted-foreground/25 transition-colors", control.checked && "border-primary/70 bg-primary"), children: _jsx("span", { className: cn("ml-0.5 size-4 rounded-full bg-popover shadow-sm transition-transform", control.checked && "translate-x-4") }) }), _jsxs("span", { className: "min-w-0 flex-1", children: [_jsxs("span", { className: "flex items-center gap-1.5 text-sm font-medium text-foreground", children: [_jsx(IconSearchOff, { size: 14, strokeWidth: 1.8 }), control.label ?? "Hide in search"] }), _jsx("span", { className: "mt-0.5 block text-xs leading-5 text-muted-foreground", children: control.description ??
-                                                "People with the link can still open this." })] })] })] }) })] }));
+    const t = useT();
+    return (_jsxs(Popover, { children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs("button", { type: "button", disabled: !canManage, className: "inline-flex items-center gap-1 rounded-sm px-1 py-0.5 text-xs font-medium text-muted-foreground transition-colors hover:bg-accent hover:text-foreground disabled:cursor-not-allowed disabled:opacity-50", children: [t("agentChat.share.advanced", { defaultValue: "Advanced" }), _jsx(IconChevronDown, { size: 12, strokeWidth: 1.8 })] }) }), _jsx(PopoverContent, { align: "start", sideOffset: 6, "data-agent-native-share-overlay": "", onOpenAutoFocus: (event) => event.preventDefault(), className: cn(SHARE_NESTED_OVERLAY_Z, "w-72 p-3 shadow-lg", SHARE_POPOVER_SURFACE), children: _jsxs("div", { className: "space-y-3", children: [_jsxs("div", { children: [_jsx("div", { className: "text-sm font-medium text-foreground", children: t("agentChat.share.advancedAccess", {
+                                        defaultValue: "Advanced access",
+                                    }) }), _jsx("div", { className: "mt-1 text-xs leading-5 text-muted-foreground", children: t("agentChat.share.advancedDescription", {
+                                        defaultValue: "Control how organization access appears in search.",
+                                    }) })] }), _jsxs("button", { type: "button", role: "switch", "aria-checked": control.checked, disabled: !canManage || control.pending, onClick: onToggle, className: cn("flex w-full items-start gap-3 rounded-md border border-border/70 bg-card px-3 py-2.5 text-start transition-colors hover:bg-accent/45 disabled:cursor-not-allowed disabled:opacity-60", control.checked && "border-border bg-accent/35 text-foreground"), children: [_jsx("span", { "aria-hidden": true, className: cn("relative mt-0.5 inline-flex h-5 w-9 shrink-0 items-center rounded-full border border-border bg-muted-foreground/25 transition-colors", control.checked && "border-primary/70 bg-primary"), children: _jsx("span", { className: cn("ml-0.5 size-4 rounded-full bg-popover shadow-sm transition-transform", control.checked && "translate-x-4") }) }), _jsxs("span", { className: "min-w-0 flex-1", children: [_jsxs("span", { className: "flex items-center gap-1.5 text-sm font-medium text-foreground", children: [_jsx(IconSearchOff, { size: 14, strokeWidth: 1.8 }), control.label ??
+                                                    t("agentChat.share.hideInSearch", {
+                                                        defaultValue: "Hide in search",
+                                                    })] }), _jsx("span", { className: "mt-0.5 block text-xs leading-5 text-muted-foreground", children: control.description ??
+                                                t("agentChat.share.linkCanStillOpen", {
+                                                    defaultValue: "People with the link can still open this.",
+                                                }) })] })] })] }) })] }));
 }
 function MemberAutocomplete({ value, open, onOpenChange, onValueChange, onSelectMember, onSubmit, placeholder, suggestions, search, }) {
+    const t = useT();
     const rawListboxId = useId();
     const listboxId = rawListboxId.replace(/:/g, "");
     const inputRef = useRef(null);
@@ -247,12 +324,23 @@ function MemberAutocomplete({ value, open, onOpenChange, onValueChange, onSelect
                             return (_jsxs("div", { id: optionId(listboxId, index), role: "option", "aria-selected": active, onMouseDown: (event) => event.preventDefault(), onMouseEnter: () => setActiveIndex(index), onClick: () => chooseMember(member), className: cn("flex cursor-pointer select-none flex-col rounded-sm px-3 py-2 text-sm outline-none", active
                                     ? "bg-accent text-accent-foreground"
                                     : "text-foreground hover:bg-accent hover:text-accent-foreground"), children: [_jsx("span", { className: "truncate font-medium", children: member.name?.trim() || member.email }), member.name?.trim() ? (_jsx("span", { className: "truncate text-xs text-muted-foreground", children: member.email })) : null] }, member.email));
-                        }), search.isLoading && suggestions.length === 0 ? (_jsx("div", { className: "px-3 py-3 text-sm text-muted-foreground", children: "Searching..." })) : null, search.error ? (_jsx("div", { className: "px-3 py-3 text-sm text-muted-foreground", children: "Could not load people." })) : null, !search.isLoading && !search.error && suggestions.length === 0 ? (_jsx("div", { className: "px-3 py-3 text-sm text-muted-foreground", children: value.trim() ? "No matches." : "No people found." })) : null, search.isLoadingMore ? (_jsxs("div", { className: "flex items-center gap-2 px-3 py-2 text-sm text-muted-foreground", children: [_jsx(IconLoader2, { "aria-hidden": true, size: 14, strokeWidth: 1.8, className: "animate-spin" }), "Loading..."] })) : null, search.hasMore && !search.isLoadingMore ? (_jsx("button", { type: "button", onMouseDown: (event) => event.preventDefault(), onClick: search.loadMore, className: "mt-1 flex w-full items-center justify-center rounded-sm px-3 py-2 text-sm font-medium text-muted-foreground hover:bg-accent hover:text-accent-foreground", children: "Load more" })) : null] }) })] }));
+                        }), search.isLoading && suggestions.length === 0 ? (_jsx("div", { className: "px-3 py-3 text-sm text-muted-foreground", children: t("agentChat.share.searching", {
+                                defaultValue: "Searching...",
+                            }) })) : null, search.error ? (_jsx("div", { className: "px-3 py-3 text-sm text-muted-foreground", children: t("agentChat.share.loadPeopleFailed", {
+                                defaultValue: "Could not load people.",
+                            }) })) : null, !search.isLoading && !search.error && suggestions.length === 0 ? (_jsx("div", { className: "px-3 py-3 text-sm text-muted-foreground", children: value.trim()
+                                ? t("agentChat.share.noMatches", {
+                                    defaultValue: "No matches.",
+                                })
+                                : t("agentChat.share.noPeopleFound", {
+                                    defaultValue: "No people found.",
+                                }) })) : null, search.isLoadingMore ? (_jsxs("div", { className: "flex items-center gap-2 px-3 py-2 text-sm text-muted-foreground", children: [_jsx(IconLoader2, { "aria-hidden": true, size: 14, strokeWidth: 1.8, className: "animate-spin" }), t("agentChat.share.loading", { defaultValue: "Loading..." })] })) : null, search.hasMore && !search.isLoadingMore ? (_jsx("button", { type: "button", onMouseDown: (event) => event.preventDefault(), onClick: search.loadMore, className: "mt-1 flex w-full items-center justify-center rounded-sm px-3 py-2 text-sm font-medium text-muted-foreground hover:bg-accent hover:text-accent-foreground", children: t("agentChat.share.loadMore", { defaultValue: "Load more" }) })) : null] }) })] }));
 }
 function optionId(baseId, index) {
     return `${baseId}-option-${index}`;
 }
-function CopyLinkField({ value, label = "Share link", description, }) {
+function CopyLinkField({ value, label, description, }) {
+    const t = useT();
     const [copied, setCopied] = useState(false);
     const resetRef = useRef(undefined);
     useEffect(() => {
@@ -272,7 +360,12 @@ function CopyLinkField({ value, label = "Share link", description, }) {
             setCopied(false);
         }
     };
-    return (_jsxs("div", { className: "mb-4 flex items-center justify-between gap-4", children: [_jsxs("div", { className: "min-w-0", children: [_jsx("div", { className: "text-sm font-semibold", children: label }), description ? (_jsx("div", { className: "mt-1 text-xs text-muted-foreground", children: description })) : null] }), _jsxs("button", { type: "button", onClick: handleCopy, "aria-label": copied ? "Link copied" : "Copy", className: "inline-flex h-9 shrink-0 items-center gap-2 whitespace-nowrap rounded-md border border-input bg-card px-3 text-sm font-medium text-foreground hover:bg-accent", children: [copied ? _jsx(IconCheck, { size: 15 }) : _jsx(IconLink, { size: 15 }), copied ? "Copied" : "Copy"] })] }));
+    return (_jsxs("div", { className: "mb-4 flex items-center justify-between gap-4", children: [_jsxs("div", { className: "min-w-0", children: [_jsx("div", { className: "text-sm font-semibold", children: label ??
+                            t("agentChat.share.shareLink", { defaultValue: "Share link" }) }), description ? (_jsx("div", { className: "mt-1 text-xs text-muted-foreground", children: description })) : null] }), _jsxs("button", { type: "button", onClick: handleCopy, "aria-label": copied
+                    ? t("agentChat.share.copied", { defaultValue: "Copied" })
+                    : t("agentChat.share.copy", { defaultValue: "Copy" }), className: "inline-flex h-9 shrink-0 items-center gap-2 whitespace-nowrap rounded-md border border-input bg-card px-3 text-sm font-medium text-foreground hover:bg-accent", children: [copied ? _jsx(IconCheck, { size: 15 }) : _jsx(IconLink, { size: 15 }), copied
+                        ? t("agentChat.share.copied", { defaultValue: "Copied" })
+                        : t("agentChat.share.copy", { defaultValue: "Copy" })] })] }));
 }
 // ---------------------------------------------------------------------------
 // Radix Select wrappers styled like shadcn Select (no native <select> anywhere)
@@ -283,17 +376,22 @@ function SelectItems({ items }) {
     return (_jsx(_Fragment, { children: items.map((it) => (_jsxs(Select.Item, { value: it.value, className: selectItemClass, children: [_jsx("span", { className: "absolute start-2 top-2 flex h-4 w-4 items-center justify-center", children: _jsx(Select.ItemIndicator, { children: _jsx(IconCheck, { size: 14 }) }) }), _jsxs("span", { className: "flex flex-col", children: [_jsx(Select.ItemText, { children: it.label }), it.description ? (_jsx("span", { className: "text-xs text-muted-foreground", children: it.description })) : null] })] }, it.value))) }));
 }
 function RoleSelect(props) {
-    const current = roleMeta(props.value, props.roleCopy);
-    const allowedRoles = props.allowedRoles ?? ROLE_OPTIONS.map((item) => item.value);
-    const options = ROLE_OPTIONS.filter((option) => option.value === props.value || allowedRoles.includes(option.value)).map((option) => roleMeta(option.value, props.roleCopy));
+    const t = useT();
+    const allOptions = roleOptions(t);
+    const current = roleMeta(props.value, t, props.roleCopy);
+    const allowedRoles = props.allowedRoles ?? allOptions.map((item) => item.value);
+    const options = allOptions
+        .filter((option) => option.value === props.value || allowedRoles.includes(option.value))
+        .map((option) => roleMeta(option.value, t, props.roleCopy));
     return (_jsxs(Select.Root, { value: props.value, onValueChange: (v) => props.onChange(v), disabled: props.disabled, children: [_jsxs(Select.Trigger, { className: props.plain
                     ? cn(BUTTON_BASE, "h-7 px-2 bg-transparent text-muted-foreground hover:bg-accent hover:text-accent-foreground")
-                    : cn(BUTTON_BASE, "h-9 px-3 border border-input bg-card hover:bg-accent hover:text-accent-foreground"), "aria-label": "Role", children: [_jsx(Select.Value, { children: current.label }), _jsx(Select.Icon, { children: _jsx(IconChevronDown, { size: 14 }) })] }), _jsx(Select.Portal, { children: _jsx(Select.Content, { "data-agent-native-share-overlay": "", className: selectContentClass, position: "popper", sideOffset: 4, children: _jsx(Select.Viewport, { children: _jsx(SelectItems, { items: options }) }) }) })] }));
+                    : cn(BUTTON_BASE, "h-9 px-3 border border-input bg-card hover:bg-accent hover:text-accent-foreground"), "aria-label": t("agentChat.share.role", { defaultValue: "Role" }), children: [_jsx(Select.Value, { children: current.label }), _jsx(Select.Icon, { children: _jsx(IconChevronDown, { size: 14 }) })] }), _jsx(Select.Portal, { children: _jsx(Select.Content, { "data-agent-native-share-overlay": "", className: selectContentClass, position: "popper", sideOffset: 4, children: _jsx(Select.Viewport, { children: _jsx(SelectItems, { items: options }) }) }) })] }));
 }
 function VisibilitySelect(props) {
+    const t = useT();
     const allowPrivate = props.allowPrivate !== false;
     const allowPublic = props.allowPublic !== false;
-    const current = visibilityMeta(props.value, props.visibilityCopy);
+    const current = visibilityMeta(props.value, t, props.visibilityCopy);
     const options = Object.keys(VIS_META).filter((k) => {
         if (k === props.value)
             return true;
@@ -303,10 +401,12 @@ function VisibilitySelect(props) {
             return false;
         return true;
     });
-    return (_jsxs(Select.Root, { value: props.value, onValueChange: (v) => props.onChange(v), disabled: props.disabled, children: [_jsxs(Select.Trigger, { className: cn(BUTTON_BASE, "h-7 px-1 -ms-1 bg-transparent text-foreground hover:bg-accent hover:text-accent-foreground"), "aria-label": "General access", children: [_jsx(Select.Value, { children: current.label }), _jsx(Select.Icon, { children: _jsx(IconChevronDown, { size: 14 }) })] }), _jsx(Select.Portal, { children: _jsx(Select.Content, { "data-agent-native-share-overlay": "", className: selectContentClass, position: "popper", sideOffset: 4, children: _jsx(Select.Viewport, { children: _jsx(SelectItems, { items: options.map((k) => ({
+    return (_jsxs(Select.Root, { value: props.value, onValueChange: (v) => props.onChange(v), disabled: props.disabled, children: [_jsxs(Select.Trigger, { className: cn(BUTTON_BASE, "h-7 px-1 -ms-1 bg-transparent text-foreground hover:bg-accent hover:text-accent-foreground"), "aria-label": t("agentChat.share.generalAccess", {
+                    defaultValue: "General access",
+                }), children: [_jsx(Select.Value, { children: current.label }), _jsx(Select.Icon, { children: _jsx(IconChevronDown, { size: 14 }) })] }), _jsx(Select.Portal, { children: _jsx(Select.Content, { "data-agent-native-share-overlay": "", className: selectContentClass, position: "popper", sideOffset: 4, children: _jsx(Select.Viewport, { children: _jsx(SelectItems, { items: options.map((k) => ({
                                 value: k,
-                                label: visibilityMeta(k, props.visibilityCopy).label,
-                                description: visibilityMeta(k, props.visibilityCopy)
+                                label: visibilityMeta(k, t, props.visibilityCopy).label,
+                                description: visibilityMeta(k, t, props.visibilityCopy)
                                     .description,
                             })) }) }) }) })] }));
 }
@@ -320,18 +420,24 @@ function initials(s) {
     const name = s.split("@")[0] ?? s;
     return (name[0] ?? "?").toUpperCase();
 }
-function principalLabel(share, members) {
+function principalLabel(share, members, t) {
     const serverLabel = share.displayName?.trim();
     if (serverLabel)
         return serverLabel;
     if (share.principalType === "org")
-        return "Organization";
-    return displayName(share.principalId, members);
+        return t("agentChat.share.organization", {
+            defaultValue: "Organization",
+        });
+    return displayName(share.principalId, members, t);
 }
-function displayName(emailOrId, members) {
+function displayName(emailOrId, members, t) {
     const normalized = emailOrId.trim().toLowerCase();
     const match = members.find((m) => m.email.toLowerCase() === normalized);
     if (match?.name && match.name.trim())
         return match.name;
-    return normalized.includes("@") ? emailOrId : "Unknown person";
+    return normalized.includes("@")
+        ? emailOrId
+        : t("agentChat.share.unknownPerson", {
+            defaultValue: "Unknown person",
+        });
 }

package/dist/coding-tools/run-code.js

@@ -30,7 +30,7 @@
  */
 import crypto from "node:crypto";
 import http from "node:http";
-import { getRequestUserEmail } from "../server/request-context.js";
+import { getRequestRunContext, getRequestUserEmail, } from "../server/request-context.js";
 import { failExpiredSandboxExecution, getSandboxExecutionForOwner, } from "./sandbox/executions-store.js";
 import { BACKGROUND_DEFAULT_TIMEOUT_MS, BACKGROUND_MAX_TIMEOUT_MS, SANDBOX_EXECUTION_REDRIVE_AFTER_MS, driveSandboxExecution, enqueueSandboxExecution, getSandboxAdapter, isQueuedSandboxAdapter, registerSandboxExecutionRunner, resolveExecutionSandboxAdapter, } from "./sandbox/index.js";
 const DEFAULT_TIMEOUT_MS = 120_000;
@@ -289,6 +289,7 @@ async function enqueueBackgroundRunCode(input) {
         owner,
         orgId: input.context?.orgId ?? null,
         threadId: input.context?.threadId ?? null,
+        allowedActionNames: getRequestRunContext()?.allowedActionNames,
     });
     const hasGetTool = Boolean(input.getActions()["get-code-execution"]);
     return JSON.stringify({

package/dist/coding-tools/sandbox/background.d.ts

@@ -96,6 +96,7 @@ export interface EnqueueSandboxExecutionInput {
     owner: string;
     orgId?: string | null;
     threadId?: string | null;
+    allowedActionNames?: readonly string[];
 }
 export interface EnqueueSandboxExecutionResult {
     execution: SandboxExecutionRow;

package/dist/coding-tools/sandbox/background.js

@@ -106,6 +106,7 @@ export async function enqueueSandboxExecution(input) {
         code: input.code,
         timeoutMs: input.timeoutMs,
         maxOutputChars: input.maxOutputChars,
+        allowedActionNames: input.allowedActionNames,
     });
     let driveNote;
     try {
@@ -201,7 +202,13 @@ export async function processQueuedSandboxExecution(executionId) {
             threadId: claimed.threadId ?? undefined,
             actionName: "run-code",
         };
-        const output = await runWithRequestContext({ userEmail: claimed.owner, orgId: claimed.orgId ?? undefined }, () => runner.execute({
+        const output = await runWithRequestContext({
+            userEmail: claimed.owner,
+            orgId: claimed.orgId ?? undefined,
+            run: claimed.allowedActionNames === undefined
+                ? undefined
+                : { allowedActionNames: claimed.allowedActionNames },
+        }, () => runner.execute({
             code: claimed.code,
             timeoutMs: claimed.timeoutMs,
             context,

package/dist/coding-tools/sandbox/executions-store.d.ts

@@ -51,6 +51,7 @@ export interface SandboxExecutionRow {
     timedOut: boolean;
     error: string | null;
     bridgeToolsUsed: string[];
+    allowedActionNames: string[] | undefined;
     createdAt: number;
     startedAt: number | null;
     finishedAt: number | null;
@@ -65,6 +66,7 @@ export interface CreateSandboxExecutionInput {
     maxOutputChars: number;
     maxAttempts?: number;
     runtime?: string;
+    allowedActionNames?: readonly string[];
 }
 export interface FinalizeSandboxExecutionInput {
     status: Extract<SandboxExecutionStatus, "succeeded" | "failed" | "timed_out">;

package/dist/coding-tools/sandbox/executions-store.js

@@ -79,6 +79,7 @@ async function _doEnsureTable() {
       timed_out ${intType()} NOT NULL DEFAULT 0,
       error TEXT,
       bridge_tools_used TEXT,
+      allowed_action_names TEXT,
       created_at ${intType()} NOT NULL,
       started_at ${intType()},
       finished_at ${intType()},
@@ -94,7 +95,10 @@ async function _doEnsureTable() {
         await ensureTableExists(TABLE, createSql);
         // Additive-column guard: keeps older deployments (created before a column
         // was added) self-healing without destructive migrations.
-        const pgColumns = [["bridge_tools_used", "TEXT"]];
+        const pgColumns = [
+            ["bridge_tools_used", "TEXT"],
+            ["allowed_action_names", "TEXT"],
+        ];
         for (const [col, def] of pgColumns) {
             await ensureColumnExists(TABLE, col, `ALTER TABLE ${TABLE} ADD COLUMN IF NOT EXISTS ${col} ${def}`);
         }
@@ -103,6 +107,15 @@ async function _doEnsureTable() {
     }
     else {
         await retryOnDdlRace(() => client.execute(createSql));
+        try {
+            await retryOnDdlRace(() => client.execute(`ALTER TABLE ${TABLE} ADD COLUMN allowed_action_names TEXT`));
+        }
+        catch (error) {
+            const message = String(error?.message ?? error);
+            if (!/duplicate column name|column .* already exists/i.test(message)) {
+                throw error;
+            }
+        }
         await retryOnDdlRace(() => client.execute(ownerIdxSql));
         await retryOnDdlRace(() => client.execute(dueIdxSql));
     }
@@ -136,6 +149,27 @@ function rowFromDb(raw) {
             bridgeToolsUsed = [];
         }
     }
+    let allowedActionNames;
+    if (raw.allowed_action_names !== null &&
+        raw.allowed_action_names !== undefined) {
+        if (typeof raw.allowed_action_names !== "string") {
+            allowedActionNames = [];
+        }
+        else {
+            try {
+                const parsed = JSON.parse(raw.allowed_action_names);
+                allowedActionNames =
+                    Array.isArray(parsed) &&
+                        parsed.every((item) => typeof item === "string")
+                        ? [...new Set(parsed)]
+                        : [];
+            }
+            catch {
+                // A malformed persisted surface must never restore the full registry.
+                allowedActionNames = [];
+            }
+        }
+    }
     return {
         id: String(raw.id),
         owner: String(raw.owner),
@@ -165,6 +199,7 @@ function rowFromDb(raw) {
         timedOut: toBool(raw.timed_out),
         error: raw.error === null || raw.error === undefined ? null : String(raw.error),
         bridgeToolsUsed,
+        allowedActionNames,
         createdAt: toNumberOrNull(raw.created_at) ?? 0,
         startedAt: toNumberOrNull(raw.started_at),
         finishedAt: toNumberOrNull(raw.finished_at),
@@ -180,8 +215,8 @@ export async function createSandboxExecution(input) {
     const maxAttempts = Math.max(1, Math.min(input.maxAttempts ?? SANDBOX_EXECUTION_DEFAULT_MAX_ATTEMPTS, 5));
     await client.execute({
         sql: `INSERT INTO ${TABLE}
-      (id, owner, org_id, thread_id, runtime, code, status, timeout_ms, max_output_chars, attempt_count, max_attempts, created_at, updated_at)
-      VALUES (?, ?, ?, ?, ?, ?, 'queued', ?, ?, 0, ?, ?, ?)`,
+      (id, owner, org_id, thread_id, runtime, code, status, timeout_ms, max_output_chars, attempt_count, max_attempts, allowed_action_names, created_at, updated_at)
+      VALUES (?, ?, ?, ?, ?, ?, 'queued', ?, ?, 0, ?, ?, ?, ?)`,
         args: [
             id,
             input.owner,
@@ -192,6 +227,9 @@ export async function createSandboxExecution(input) {
             input.timeoutMs,
             input.maxOutputChars,
             maxAttempts,
+            input.allowedActionNames === undefined
+                ? null
+                : JSON.stringify([...new Set(input.allowedActionNames)]),
             now,
             now,
         ],

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export * from "./config.js";
-export { createProductionAgentHandler, type ActionEntry, type ScriptEntry, type ProductionAgentOptions, type ActionTool, type ScriptTool, type AgentMessage, type AgentChatRequest, type AgentChatEvent, type AgentChatAttachment, DEFAULT_MODEL, TripWire, type Processor, type ProcessorState, type ProcessorAbort, } from "./agent/index.js";
+export { createProductionAgentHandler, type ActionEntry, type ScriptEntry, type ProductionAgentOptions, type AgentActionSurface, type AgentActionSurfaceDetails, type ActionTool, type ScriptTool, type AgentMessage, type AgentChatRequest, type AgentChatEvent, type AgentChatAttachment, DEFAULT_MODEL, TripWire, type Processor, type ProcessorState, type ProcessorAbort, } from "./agent/index.js";
 export { defineAction, ActionContractError, isActionContractError, type ActionContractErrorOptions, AgentActionStopError, isAgentActionStopError, type ActionDefinition, type ActionHttpConfig, type AgentActionStopOptions, type PublicAgentActionConfig, type ActionDeepLink, type ActionLinkBuilder, MCP_APP_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_URI_META_KEY, type ActionMcpAppConfig, type ActionMcpAppCsp, type ActionMcpAppCspBuilder, type ActionMcpAppHtmlBuilder, type ActionMcpAppPermissions, type ActionMcpAppResourceConfig, type ActionMcpAppResourceMeta, } from "./action.js";
 export * from "./user-profile/index.js";
 export { embedApp, MCP_APP_REQUEST_ORIGIN_CSP_SOURCE, type EmbedAppOptions, } from "./mcp/embed-app.js";

package/dist/localization/core-messages/ar-SA.d.ts

@@ -0,0 +1,3 @@
+import type { AgentChatTranslation } from "../core-messages.js";
+declare const messages: AgentChatTranslation;
+export default messages;