@agent-native/toolkit 0.212.0 → 0.213.1

package/src/app/i18n/catalogs/pt-BR.ts

@@ -2145,6 +2145,10 @@ const messages: ToolkitAgentChatTranslation = {
     "Definido. Permite que os apps deste espaço de trabalho verifiquem uns aos outros.",
   "settingsOrg.auth.sharedSecretNotSet":
     "Não definido. Permite que os apps deste espaço de trabalho verifiquem uns aos outros.",
+  "settingsOrg.auth.memberDelegation":
+    "Delegação de identidade de membros da organização",
+  "settingsOrg.auth.memberDelegationHelp":
+    "Apps conectados que tenham este segredo compartilhado da organização podem declarar a identidade de qualquer membro atual ao chamar este app. Este app verifica a lista de membros em tempo real e limita o acesso delegado à organização às permissões do nível de membro.",
   "settingsOrg.auth.secretNotSetValue": "Não definido",
   "settingsOrg.auth.manage": "Gerenciar",
   "settingsOrg.auth.reveal": "Mostrar",

package/src/app/i18n/catalogs/zh-CN.ts

@@ -1885,6 +1885,9 @@ const messages: ToolkitAgentChatTranslation = {
   "settingsOrg.auth.sharedSecret": "共享密钥",
   "settingsOrg.auth.sharedSecretSet": "已设置。让此工作区中的应用相互验证。",
   "settingsOrg.auth.sharedSecretNotSet": "未设置。让此工作区中的应用相互验证。",
+  "settingsOrg.auth.memberDelegation": "组织成员身份委派",
+  "settingsOrg.auth.memberDelegationHelp":
+    "持有此组织共享密钥的已连接应用在调用此应用时，可以声明为任意一名当前成员。此应用会检查实时成员名单，并将受委派的组织访问权限限制为成员级权限。",
   "settingsOrg.auth.secretNotSetValue": "未设置",
   "settingsOrg.auth.manage": "管理",
   "settingsOrg.auth.reveal": "显示",

package/src/app/i18n/catalogs/zh-TW.ts

@@ -1894,6 +1894,9 @@ const messages: ToolkitAgentChatTranslation = {
     "已設定。讓此工作區中的應用程式互相驗證。",
   "settingsOrg.auth.sharedSecretNotSet":
     "未設定。讓此工作區中的應用程式互相驗證。",
+  "settingsOrg.auth.memberDelegation": "組織成員身分委派",
+  "settingsOrg.auth.memberDelegationHelp":
+    "持有此組織共用密鑰的已連結應用程式在呼叫此應用程式時，可以聲稱是任何一位現任成員。此應用程式會檢查即時成員名單，並將受委派的組織存取權限制為成員層級的權限。",
   "settingsOrg.auth.secretNotSetValue": "未設定",
   "settingsOrg.auth.manage": "管理",
   "settingsOrg.auth.reveal": "顯示",

package/src/app/org/AuthenticationSection.spec.tsx

@@ -0,0 +1,62 @@
+// @vitest-environment happy-dom
+
+import React, { act } from "react";
+import { createRoot, type Root } from "react-dom/client";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+const mocks = vi.hoisted(() => ({
+  setDelegation: { error: null, isPending: false, mutate: vi.fn() },
+}));
+
+vi.mock("@agent-native/core/client/org", () => ({
+  useSetA2AMemberDelegation: () => mocks.setDelegation,
+}));
+
+vi.mock("@agent-native/core/client/i18n", () => ({
+  useT: () => (key: string) => key,
+}));
+
+import { TooltipProvider } from "@agent-native/toolkit/ui/tooltip";
+
+import { A2AMemberDelegationSection } from "./AuthenticationSection.js";
+
+describe("A2AMemberDelegationSection", () => {
+  let container: HTMLDivElement;
+  let root: Root;
+
+  beforeEach(() => {
+    vi.stubGlobal("IS_REACT_ACT_ENVIRONMENT", true);
+    container = document.createElement("div");
+    document.body.appendChild(container);
+    root = createRoot(container);
+    vi.clearAllMocks();
+  });
+
+  afterEach(() => {
+    act(() => root.unmount());
+    container.remove();
+    vi.unstubAllGlobals();
+  });
+
+  it("shows the owner-controlled setting and sends the selected value", () => {
+    act(() => {
+      root.render(
+        <TooltipProvider>
+          <A2AMemberDelegationSection enabled={false} />
+        </TooltipProvider>,
+      );
+    });
+
+    const toggle = container.querySelector('[role="switch"]');
+    expect(toggle?.getAttribute("aria-label")).toBe(
+      "agentChat.settingsOrg.auth.memberDelegation",
+    );
+    expect(toggle?.getAttribute("aria-checked")).toBe("false");
+
+    act(() =>
+      toggle?.dispatchEvent(new MouseEvent("click", { bubbles: true })),
+    );
+
+    expect(mocks.setDelegation.mutate).toHaveBeenCalledWith(true);
+  });
+});

package/src/app/org/AuthenticationSection.tsx

@@ -4,6 +4,7 @@ import {
   useSetOrgDomain,
   useRevealA2ASecret,
   useSetA2ASecret,
+  useSetA2AMemberDelegation,
   useSyncA2ASecret,
   type SyncA2ASecretResult,
 } from "@agent-native/core/client/org";
@@ -18,6 +19,7 @@ import {
   PopoverTrigger,
 } from "@agent-native/toolkit/ui/popover";
 import { Spinner } from "@agent-native/toolkit/ui/spinner";
+import { Switch } from "@agent-native/toolkit/ui/switch";
 import {
   Tooltip,
   TooltipContent,
@@ -34,6 +36,7 @@ import {
   IconEye,
   IconEyeOff,
   IconCloudUpload,
+  IconInfoCircle,
 } from "@tabler/icons-react";
 import { useState } from "react";
 
@@ -505,6 +508,44 @@ export function A2ASecretSection({ isSet }: { isSet: boolean }) {
   );
 }
 
+export function A2AMemberDelegationSection({ enabled }: { enabled: boolean }) {
+  const t = useT();
+  const setDelegation = useSetA2AMemberDelegation();
+
+  return (
+    <SettingsRow
+      id="a2a-member-delegation"
+      label={
+        <Tooltip>
+          <TooltipTrigger asChild>
+            <span className="inline-flex items-center gap-1" tabIndex={0}>
+              {t("agentChat.settingsOrg.auth.memberDelegation")}
+              <IconInfoCircle
+                aria-hidden="true"
+                className="size-4 text-muted-foreground"
+              />
+            </span>
+          </TooltipTrigger>
+          <TooltipContent>
+            {t("agentChat.settingsOrg.auth.memberDelegationHelp")}
+          </TooltipContent>
+        </Tooltip>
+      }
+      control={
+        <div className="flex items-center justify-end gap-3">
+          <ErrorText error={setDelegation.error} />
+          <Switch
+            checked={enabled}
+            onCheckedChange={(value) => setDelegation.mutate(value)}
+            disabled={setDelegation.isPending}
+            aria-label={t("agentChat.settingsOrg.auth.memberDelegation")}
+          />
+        </div>
+      }
+    />
+  );
+}
+
 /**
  * Sign-in policy, SSO, SCIM, and domain auto-join for owners and admins, plus
  * the cross-app secret for owners. Renders nothing for members.
@@ -528,7 +569,12 @@ export function AuthenticationSection({ title }: { title?: string }) {
           requiredAuthProvider={org.requiredAuthProvider}
         />
         {org.role === "owner" && (
-          <A2ASecretSection isSet={Boolean(org.a2aSecretSet)} />
+          <>
+            <A2ASecretSection isSet={Boolean(org.a2aSecretSet)} />
+            <A2AMemberDelegationSection
+              enabled={Boolean(org.a2aMemberDelegationEnabled)}
+            />
+          </>
         )}
       </SettingsGroup>
     </SectionTooltipProvider>

package/src/app/org/pages/OrgAuthenticationPage.tsx

@@ -19,6 +19,7 @@ import { useState } from "react";
 
 import { SettingsGroup, SettingsRow } from "../../settings/SettingsRow.js";
 import {
+  A2AMemberDelegationSection,
   A2ASecretSection,
   DomainSettingsSection,
 } from "../AuthenticationSection.js";
@@ -204,6 +205,9 @@ function OrgAuthenticationContent({ org }: { org: OrgInfo }) {
           title={t("agentChat.settingsOrg.auth.betweenApps")}
         >
           <A2ASecretSection isSet={Boolean(org.a2aSecretSet)} />
+          <A2AMemberDelegationSection
+            enabled={Boolean(org.a2aMemberDelegationEnabled)}
+          />
         </SettingsGroup>
       )}
     </div>

package/src/app/org/pages/OrgSettingsPages.spec.tsx

@@ -88,6 +88,7 @@ vi.mock("../OrgIdentitySettings.js", () => ({
 vi.mock("../AuthenticationSection.js", () => ({
   DomainSettingsSection: () => <div id="email-domain" />,
   A2ASecretSection: () => <div id="cross-app-authentication" />,
+  A2AMemberDelegationSection: () => <div id="member-delegation" />,
 }));
 
 vi.mock("../OrgGeneralSection.js", () => ({
@@ -194,6 +195,7 @@ describe("Organization settings pages", () => {
       expect(methods?.textContent).toContain("Email and password, and Google.");
       expect(container.querySelector("#email-domain")).not.toBeNull();
       expect(container.querySelector("#cross-app-authentication")).toBeNull();
+      expect(container.querySelector("#member-delegation")).toBeNull();
     });
 
     it("shows the owner the shared secret", () => {
@@ -203,6 +205,7 @@ describe("Organization settings pages", () => {
       expect(
         container.querySelector("#cross-app-authentication"),
       ).not.toBeNull();
+      expect(container.querySelector("#member-delegation")).not.toBeNull();
     });
 
     it("lists each method and the variables that turn it on", () => {