@agent-native/core 0.175.5 → 0.175.6-nightly-20260827114203

package/corpus/templates/analytics/server/lib/replay-storage.ts

@@ -1,6 +1,7 @@
 import { listFileUploadProviders } from "@agent-native/core/file-upload";
 import {
-  resolveHasBuilderPrivateKey,
+  CredentialStoreUnavailableError,
+  hasBuilderApiCredentialCustody,
   runWithRequestContext,
 } from "@agent-native/core/server";
 
@@ -63,8 +64,9 @@ export async function hasRequestReplayStorage(
     }
 
     try {
-      return await resolveHasBuilderPrivateKey();
-    } catch {
+      return await hasBuilderApiCredentialCustody();
+    } catch (err) {
+      if (err instanceof CredentialStoreUnavailableError) throw err;
       return false;
     }
   };

package/corpus/templates/assets/server/lib/storage.ts

@@ -21,7 +21,10 @@ import {
   uploadFile,
   getActiveFileUploadProvider,
 } from "@agent-native/core/file-upload";
-import { resolveHasBuilderPrivateKey } from "@agent-native/core/server";
+import {
+  CredentialStoreUnavailableError,
+  hasBuilderApiCredentialCustody,
+} from "@agent-native/core/server";
 
 import {
   getPresignedS3ObjectUrl,
@@ -93,9 +96,9 @@ export async function isObjectStorageConfigured(): Promise<boolean> {
   const active = getActiveFileUploadProvider();
   if (active && active.id !== "sql") return true;
   try {
-    if (await resolveHasBuilderPrivateKey()) return true;
-  } catch {
-    /* fall through */
+    if (await hasBuilderApiCredentialCustody()) return true;
+  } catch (err) {
+    if (err instanceof CredentialStoreUnavailableError) throw err;
   }
   return false;
 }

package/corpus/templates/clips/actions/request-transcript.ts

@@ -37,7 +37,7 @@ import {
   writeAppState,
 } from "@agent-native/core/application-state";
 import { ssrfSafeFetch } from "@agent-native/core/extensions/url-safety";
-import { resolveHasBuilderPrivateKey } from "@agent-native/core/server";
+import { resolveHasBuilderGatewayCredential } from "@agent-native/core/server";
 import { assertAccess } from "@agent-native/core/sharing";
 import { transcribeWithBuilder } from "@agent-native/core/transcription/builder";
 import { and, eq } from "drizzle-orm";
@@ -1263,11 +1263,12 @@ const requestTranscriptAction = defineAction({
     }
 
     // ── Builder transcription (cloud fallback) ────────────────────────
-    // Builder proxy is available when the current user has connected
-    // Builder via OAuth (per-user app_secrets) OR when BUILDER_PRIVATE_KEY
-    // is set at the deployment level. Use the per-user-aware resolver so
-    // a sidebar OAuth connection actually wires through to transcription.
-    if (await resolveHasBuilderPrivateKey()) {
+    // Gate on the gateway credential, not on Builder connection custody:
+    // `transcribeWithBuilder` authenticates through `resolveBuilderGatewayAuth`,
+    // which reads gateway credentials and a legacy private key and never
+    // consults an OAuth grant. Gating on custody would select this path for an
+    // OAuth-only user, write pending state, prepare audio, and only then fail.
+    if (await resolveHasBuilderGatewayCredential()) {
       if (!regeneratingReadyTranscript) {
         await upsertTranscriptRow(db, {
           recordingId: args.recordingId,

package/corpus/templates/clips/app/components/meetings/share-meeting-dialog.tsx

@@ -4,7 +4,6 @@ import {
   useActionMutation,
 } from "@agent-native/core/client/hooks";
 import { useT } from "@agent-native/core/client/i18n";
-import { ShareAgentsSection } from "@agent-native/toolkit/sharing";
 import {
   useCallback,
   useEffect,
@@ -16,11 +15,12 @@ import {
 import { toast } from "sonner";
 
 import {
-  CopyField,
+  CopyButton,
   GeneralAccessSelect,
-  MakePublicCard,
-  SharePeopleTab,
-  copyToClipboard,
+  InvitePeopleField,
+  PeopleAccessSection,
+  ShareSectionLabel,
+  nestedLayerDismissGuards,
   useResourceVisibilityMutation,
   type SharesQuery,
   type SharesResponse,
@@ -32,6 +32,7 @@ import {
   PopoverContent,
   PopoverTrigger,
 } from "@/components/ui/popover";
+import { Separator } from "@/components/ui/separator";
 import { Switch } from "@/components/ui/switch";
 
 export interface ShareMeetingPopoverProps {
@@ -52,6 +53,7 @@ export function ShareMeetingPopover({
       <PopoverTrigger asChild>{children}</PopoverTrigger>
       <PopoverContent
         align="end"
+        {...nestedLayerDismissGuards()}
         className="max-h-[calc(100vh-1rem)] w-[440px] max-w-[calc(100vw-1rem)] overflow-y-auto border-border p-0"
       >
         <ShareMeetingContent
@@ -85,6 +87,14 @@ function ShareMeetingContent({
 
   const data = sharesQuery.data;
   const canManage = data?.role === "owner" || data?.role === "admin";
+  const visibility: Visibility =
+    (data?.visibility as Visibility | null) ?? "private";
+  const { setResourceVisibility, isPending } = useResourceVisibilityMutation(
+    "meeting",
+    meetingId,
+    sharesQuery,
+  );
+  const visibilityPending = isPending || sharesQuery.isLoading;
 
   return (
     <div className="min-w-0 px-4 py-3">
@@ -93,6 +103,9 @@ function ShareMeetingContent({
         shareUrl={shareUrl}
         sharesQuery={sharesQuery}
         canManage={canManage}
+        visibility={visibility}
+        visibilityPending={visibilityPending}
+        onVisibilityChange={setResourceVisibility}
         shareTranscript={shareTranscript}
         transcriptReady={transcriptReady}
       />
@@ -105,6 +118,9 @@ function LinkTab({
   shareUrl,
   sharesQuery,
   canManage,
+  visibility,
+  visibilityPending,
+  onVisibilityChange,
   shareTranscript,
   transcriptReady,
 }: {
@@ -112,6 +128,12 @@ function LinkTab({
   shareUrl: string;
   sharesQuery: SharesQuery;
   canManage: boolean;
+  visibility: Visibility;
+  visibilityPending: boolean;
+  onVisibilityChange: (
+    next: Visibility,
+    options?: { onSuccess?: () => void },
+  ) => void;
   shareTranscript: boolean;
   transcriptReady: boolean;
 }) {
@@ -121,14 +143,7 @@ function LinkTab({
     { id: string; shareTranscript: boolean }
   >("update-meeting");
   const [includeTranscript, setIncludeTranscript] = useState(shareTranscript);
-  const { setResourceVisibility, isPending } = useResourceVisibilityMutation(
-    "meeting",
-    meetingId,
-    sharesQuery,
-  );
   const data = sharesQuery.data;
-  const visibility: Visibility =
-    (data?.visibility as Visibility | null) ?? "private";
   const isPublic = visibility === "public";
   const sharesLoaded = data?.visibility != null;
   const createAgentLink = useActionMutation("create-agent-resource-link");
@@ -136,7 +151,6 @@ function LinkTab({
   const agentLinkRequestIdRef = useRef(0);
   const [agentLink, setAgentLink] = useState("");
   const [agentLinkError, setAgentLinkError] = useState(false);
-  const [agentDetailsOpen, setAgentDetailsOpen] = useState(false);
 
   useEffect(() => {
     createAgentLinkAsyncRef.current = createAgentLink.mutateAsync;
@@ -172,10 +186,6 @@ function LinkTab({
     };
   }, [isPublic, loadAgentLink, meetingId, sharesLoaded, visibility]);
 
-  useEffect(() => {
-    if (isPublic) setAgentDetailsOpen(false);
-  }, [isPublic]);
-
   const agentShareDisabled =
     sharesQuery.isLoading ||
     !sharesLoaded ||
@@ -206,23 +216,47 @@ function LinkTab({
 
   return (
     <div className="space-y-3">
-      <CopyField
-        label={
-          isPublic
-            ? t("clipsFinalRaw.shareLink")
-            : t("shareDialog.shareWithHumans")
-        }
-        value={shareUrl}
-        disabled={!sharesLoaded}
-      />
+      {canManage ? (
+        <InvitePeopleField
+          resourceType="meeting"
+          resourceId={meetingId}
+          sharesQuery={sharesQuery}
+          onError={(err) =>
+            toast.error(
+              err instanceof Error
+                ? err.message
+                : t("clipsFinalRaw.inviteFailed"),
+            )
+          }
+        />
+      ) : null}
 
-      <GeneralAccessSelect
-        visibility={visibility}
-        canManage={canManage}
-        isPending={isPending}
-        onChange={(next) => setResourceVisibility(next)}
-        showDescription={false}
-      />
+      <div className="space-y-2">
+        <ShareSectionLabel>{t("shareUi.whoHasAccess")}</ShareSectionLabel>
+        <div className="flex flex-col gap-1">
+          <PeopleAccessSection
+            resourceType="meeting"
+            resourceId={meetingId}
+            sharesQuery={sharesQuery}
+            canManage={canManage}
+            onError={(err, action) =>
+              toast.error(
+                err instanceof Error
+                  ? err.message
+                  : action === "permission"
+                    ? t("clipsFinalRaw.permissionUpdateFailed")
+                    : t("clipsFinalRaw.removePersonFailed"),
+              )
+            }
+          />
+          <GeneralAccessSelect
+            visibility={visibility}
+            canManage={canManage}
+            isPending={visibilityPending}
+            onChange={onVisibilityChange}
+          />
+        </div>
+      </div>
 
       <div className="flex items-center justify-between gap-4 rounded-md border border-border px-3 py-2.5">
         <div className="min-w-0">
@@ -251,73 +285,42 @@ function LinkTab({
         />
       </div>
 
-      <SharePeopleTab
-        resourceType="meeting"
-        resourceId={meetingId}
-        sharesQuery={sharesQuery}
-        canManage={canManage}
-        onError={(err, action) =>
-          toast.error(
-            err instanceof Error
-              ? err.message
-              : action === "invite"
-                ? t("clipsFinalRaw.inviteFailed")
-                : action === "permission"
-                  ? t("clipsFinalRaw.permissionUpdateFailed")
-                  : t("clipsFinalRaw.removePersonFailed"),
-          )
-        }
-      />
+      <CopyButton value={shareUrl} disabled={!sharesLoaded}>
+        {t("shareUi.copyLink")}
+      </CopyButton>
 
-      {!isPublic && canManage ? (
-        <MakePublicCard
-          isPending={isPending}
-          onMakePublic={() =>
-            setResourceVisibility("public", {
-              onSuccess: () => copyToClipboard(shareUrl),
-            })
-          }
-        />
-      ) : null}
+      <Separator />
 
-      <ShareAgentsSection
-        label={t("shareDialog.shareWithAgents")}
-        open={agentDetailsOpen}
-        onOpenChange={setAgentDetailsOpen}
-        contentClassName="clips-collapsible-content"
-      >
-        <div className="space-y-2">
-          <CopyField
-            label={t("shareDialog.shareLink")}
+      <div className="flex items-center justify-between gap-4">
+        <div className="min-w-0">
+          <div className="text-sm font-medium">
+            {t("shareDialog.shareWithAgents")}
+          </div>
+          <p className="text-xs text-muted-foreground">
+            {t("shareMeeting.agentLinkDescription")}
+          </p>
+        </div>
+        {agentLinkError ? (
+          <Button
+            type="button"
+            variant="outline"
+            size="sm"
+            className="shrink-0"
+            onClick={() => void loadAgentLink()}
+            disabled={createAgentLink.isPending}
+          >
+            {t("shareDialog.retryAgentLink")}
+          </Button>
+        ) : (
+          <CopyButton
             value={visibleAgentLink}
             disabled={agentShareDisabled}
-          />
-          {sharesLoaded ? (
-            <>
-              <p className="text-xs text-muted-foreground">
-                {t("shareMeeting.agentLinkDescription")}
-              </p>
-              {agentLinkError ? (
-                <div className="flex items-center justify-between gap-2 rounded-md border border-border bg-muted/30 px-3 py-2">
-                  <p className="text-xs text-muted-foreground">
-                    {t("shareDialog.agentLinkUnavailable")}
-                  </p>
-                  <Button
-                    type="button"
-                    variant="ghost"
-                    size="sm"
-                    className="h-7"
-                    onClick={() => void loadAgentLink()}
-                    disabled={createAgentLink.isPending}
-                  >
-                    {t("shareDialog.retryAgentLink")}
-                  </Button>
-                </div>
-              ) : null}
-            </>
-          ) : null}
-        </div>
-      </ShareAgentsSection>
+            className="shrink-0"
+          >
+            {t("shareUi.copy")}
+          </CopyButton>
+        )}
+      </div>
     </div>
   );
 }