@agent-native/toolkit 0.212.1 → 0.214.0

package/src/app/i18n/catalogs/es-ES.ts

@@ -1063,6 +1063,9 @@ const messages: ToolkitAgentChatTranslation = {
   "tool.worked": "Trabajó",
   "tool.workedFor": "Trabajó durante {{duration}}",
   "widget.chart": "Gráfico",
+  "widget.chartActions": "Acciones del gráfico",
+  "widget.dataSources": "Fuentes de datos",
+  "widget.tableActions": "Acciones de la tabla",
   "widget.dataChart": "Gráfico de datos",
   "widget.dataInsights": "Información sobre los datos",
   "widget.dataTable": "Tabla de datos",
@@ -2155,6 +2158,10 @@ const messages: ToolkitAgentChatTranslation = {
     "Definido. Permite que las apps de este espacio de trabajo se verifiquen entre sí.",
   "settingsOrg.auth.sharedSecretNotSet":
     "Sin definir. Permite que las apps de este espacio de trabajo se verifiquen entre sí.",
+  "settingsOrg.auth.memberDelegation":
+    "Delegación de identidad de miembros de la organización",
+  "settingsOrg.auth.memberDelegationHelp":
+    "Las aplicaciones conectadas que tengan este secreto compartido de la organización pueden afirmar la identidad de cualquier miembro actual al llamar a esta aplicación. Esta aplicación comprueba la lista de miembros en tiempo real y limita el acceso delegado a la organización a los permisos del rol de miembro.",
   "settingsOrg.auth.secretNotSetValue": "Sin definir",
   "settingsOrg.auth.manage": "Gestionar",
   "settingsOrg.auth.reveal": "Mostrar",
@@ -2227,6 +2234,13 @@ const messages: ToolkitAgentChatTranslation = {
   "settingsShell.account.languageAndRegion": "Idioma y región",
   "settingsShell.account.languageDescription":
     "Se aplica en todos tus dispositivos.",
+  "settingsShell.account.appearance": "Apariencia",
+  "settingsShell.account.themeFamily": "Familia de tema",
+  "settingsShell.account.themeFamilyAgentNative": "Agent-Native",
+  "settingsShell.account.themeFamilyOriginal":
+    "Colores originales de la aplicación",
+  "settingsShell.account.themeFamilySaveError":
+    "No se pudo actualizar el tema. Inténtalo de nuevo.",
   "settingsShell.account.manage": "Gestionar",
   "settingsShell.account.name": "Nombre",
   "settingsShell.account.nameDescription":

package/src/app/i18n/catalogs/fr-FR.ts

@@ -1068,6 +1068,9 @@ const messages: ToolkitAgentChatTranslation = {
   "tool.worked": "A travaillé",
   "tool.workedFor": "A travaillé pendant {{duration}}",
   "widget.chart": "Graphique",
+  "widget.chartActions": "Actions du graphique",
+  "widget.dataSources": "Sources de données",
+  "widget.tableActions": "Actions du tableau",
   "widget.dataChart": "Graphique de données",
   "widget.dataInsights": "Informations sur les données",
   "widget.dataTable": "Tableau de données",
@@ -2170,6 +2173,10 @@ const messages: ToolkitAgentChatTranslation = {
     "Défini. Permet aux applications de cet espace de travail de se vérifier mutuellement.",
   "settingsOrg.auth.sharedSecretNotSet":
     "Non défini. Permet aux applications de cet espace de travail de se vérifier mutuellement.",
+  "settingsOrg.auth.memberDelegation":
+    "Délégation d’identité des membres de l’organisation",
+  "settingsOrg.auth.memberDelegationHelp":
+    "Les applications connectées qui détiennent ce secret partagé de l’organisation peuvent déclarer l’identité de n’importe quel membre actuel lorsqu’elles appellent cette application. Cette application vérifie la liste des membres en temps réel et limite l’accès délégué à l’organisation aux autorisations du rôle de membre.",
   "settingsOrg.auth.secretNotSetValue": "Non défini",
   "settingsOrg.auth.manage": "Gérer",
   "settingsOrg.auth.reveal": "Afficher",
@@ -2241,6 +2248,13 @@ const messages: ToolkitAgentChatTranslation = {
   "settingsShell.account.languageAndRegion": "Langue et région",
   "settingsShell.account.languageDescription":
     "S’applique sur tous vos appareils.",
+  "settingsShell.account.appearance": "Apparence",
+  "settingsShell.account.themeFamily": "Famille de thème",
+  "settingsShell.account.themeFamilyAgentNative": "Agent-Native",
+  "settingsShell.account.themeFamilyOriginal":
+    "Couleurs d’origine de l’application",
+  "settingsShell.account.themeFamilySaveError":
+    "Impossible de mettre à jour le thème. Réessayez.",
   "settingsShell.account.manage": "Gérer",
   "settingsShell.account.name": "Nom",
   "settingsShell.account.nameDescription":

package/src/app/i18n/catalogs/hi-IN.ts

@@ -1491,6 +1491,9 @@ const messages: ToolkitAgentChatTranslation = {
   "tool.worked": "काम किया",
   "tool.workedFor": "{{duration}} तक काम किया",
   "widget.chart": "चार्ट",
+  "widget.chartActions": "चार्ट कार्रवाइयाँ",
+  "widget.dataSources": "डेटा स्रोत",
+  "widget.tableActions": "टेबल कार्रवाइयाँ",
   "widget.dataChart": "डेटा चार्ट",
   "widget.dataInsights": "डेटा इनसाइट्स",
   "widget.dataTable": "डेटा तालिका",
@@ -1998,6 +2001,9 @@ const messages: ToolkitAgentChatTranslation = {
     "सेट है। इससे इस वर्कस्पेस के ऐप्स एक-दूसरे की पुष्टि कर पाते हैं।",
   "settingsOrg.auth.sharedSecretNotSet":
     "सेट नहीं है। इससे इस वर्कस्पेस के ऐप्स एक-दूसरे की पुष्टि कर पाते हैं।",
+  "settingsOrg.auth.memberDelegation": "संगठन सदस्य की पहचान का प्रत्यायोजन",
+  "settingsOrg.auth.memberDelegationHelp":
+    "इस साझा संगठन सीक्रेट वाले कनेक्टेड ऐप्स इस ऐप को कॉल करते समय किसी भी वर्तमान सदस्य की पहचान का दावा कर सकते हैं। यह ऐप लाइव सदस्य सूची की जांच करता है और प्रत्यायोजित संगठन एक्सेस को सदस्य-स्तर की अनुमतियों तक सीमित रखता है।",
   "settingsOrg.auth.secretNotSetValue": "सेट नहीं है",
   "settingsOrg.auth.manage": "प्रबंधित करें",
   "settingsOrg.auth.reveal": "दिखाएं",
@@ -2060,6 +2066,12 @@ const messages: ToolkitAgentChatTranslation = {
     "इस बदलाव की पुष्टि करने के निर्देशों के लिए अपना ईमेल देखें।",
   "settingsShell.account.languageAndRegion": "भाषा और क्षेत्र",
   "settingsShell.account.languageDescription": "आपके सभी डिवाइस पर लागू होता है।",
+  "settingsShell.account.appearance": "रूप-रंग",
+  "settingsShell.account.themeFamily": "थीम शैली",
+  "settingsShell.account.themeFamilyAgentNative": "Agent-Native",
+  "settingsShell.account.themeFamilyOriginal": "ऐप के मूल रंग",
+  "settingsShell.account.themeFamilySaveError":
+    "थीम शैली अपडेट नहीं की जा सकी। फिर कोशिश करें।",
   "settingsShell.account.manage": "प्रबंधित करें",
   "settingsShell.account.name": "नाम",
   "settingsShell.account.nameDescription":

package/src/app/i18n/catalogs/ja-JP.ts

@@ -1536,6 +1536,9 @@ const messages: ToolkitAgentChatTranslation = {
   "tool.worked": "作業しました",
   "tool.workedFor": "{{duration}} 作業しました",
   "widget.chart": "チャート",
+  "widget.chartActions": "チャート操作",
+  "widget.dataSources": "データソース",
+  "widget.tableActions": "テーブル操作",
   "widget.dataChart": "データチャート",
   "widget.dataInsights": "データインサイト",
   "widget.dataTable": "データテーブル",
@@ -2031,6 +2034,9 @@ const messages: ToolkitAgentChatTranslation = {
     "設定済み。このワークスペースのアプリが互いを検証できます。",
   "settingsOrg.auth.sharedSecretNotSet":
     "未設定。このワークスペースのアプリが互いを検証できます。",
+  "settingsOrg.auth.memberDelegation": "組織メンバーの本人確認を委任",
+  "settingsOrg.auth.memberDelegationHelp":
+    "この組織の共有シークレットを持つ接続済みアプリは、このアプリを呼び出す際に現在のメンバーであれば誰でもその本人であると主張できます。このアプリは最新のメンバー一覧を確認し、委任された組織アクセスをメンバー権限に制限します。",
   "settingsOrg.auth.secretNotSetValue": "未設定",
   "settingsOrg.auth.manage": "管理",
   "settingsOrg.auth.reveal": "表示",
@@ -2090,6 +2096,12 @@ const messages: ToolkitAgentChatTranslation = {
   "settingsShell.account.languageAndRegion": "言語と地域",
   "settingsShell.account.languageDescription":
     "すべてのデバイスに適用されます。",
+  "settingsShell.account.appearance": "外観",
+  "settingsShell.account.themeFamily": "テーマ",
+  "settingsShell.account.themeFamilyAgentNative": "Agent-Native",
+  "settingsShell.account.themeFamilyOriginal": "アプリのオリジナルカラー",
+  "settingsShell.account.themeFamilySaveError":
+    "テーマを更新できませんでした。もう一度お試しください。",
   "settingsShell.account.manage": "管理",
   "settingsShell.account.name": "名前",
   "settingsShell.account.nameDescription":

package/src/app/i18n/catalogs/ko-KR.ts

@@ -1510,6 +1510,9 @@ const messages: ToolkitAgentChatTranslation = {
   "tool.worked": "작업함",
   "tool.workedFor": "{{duration}} 동안 작업함",
   "widget.chart": "차트",
+  "widget.chartActions": "차트 작업",
+  "widget.dataSources": "데이터 소스",
+  "widget.tableActions": "표 작업",
   "widget.dataChart": "데이터 차트",
   "widget.dataInsights": "데이터 인사이트",
   "widget.dataTable": "데이터 테이블",
@@ -1998,6 +2001,9 @@ const messages: ToolkitAgentChatTranslation = {
     "설정됨. 이 워크스페이스의 앱이 서로를 확인할 수 있습니다.",
   "settingsOrg.auth.sharedSecretNotSet":
     "설정 안 됨. 이 워크스페이스의 앱이 서로를 확인할 수 있습니다.",
+  "settingsOrg.auth.memberDelegation": "조직 구성원 신원 위임",
+  "settingsOrg.auth.memberDelegationHelp":
+    "이 공유 조직 비밀을 보유한 연결된 앱은 이 앱을 호출할 때 현재 구성원 누구의 신원이든 주장할 수 있습니다. 이 앱은 실시간 구성원 명단을 확인하고 위임된 조직 액세스를 구성원 수준 권한으로 제한합니다.",
   "settingsOrg.auth.secretNotSetValue": "설정 안 됨",
   "settingsOrg.auth.manage": "관리",
   "settingsOrg.auth.reveal": "표시",
@@ -2054,6 +2060,12 @@ const messages: ToolkitAgentChatTranslation = {
     "이메일을 확인하고 안내에 따라 이 변경을 확정하세요.",
   "settingsShell.account.languageAndRegion": "언어 및 지역",
   "settingsShell.account.languageDescription": "모든 기기에 적용됩니다.",
+  "settingsShell.account.appearance": "모양",
+  "settingsShell.account.themeFamily": "테마 스타일",
+  "settingsShell.account.themeFamilyAgentNative": "Agent-Native",
+  "settingsShell.account.themeFamilyOriginal": "앱의 원래 색상",
+  "settingsShell.account.themeFamilySaveError":
+    "테마 스타일을 업데이트하지 못했습니다. 다시 시도하세요.",
   "settingsShell.account.manage": "관리",
   "settingsShell.account.name": "이름",
   "settingsShell.account.nameDescription":

package/src/app/i18n/catalogs/pt-BR.ts

@@ -1055,6 +1055,9 @@ const messages: ToolkitAgentChatTranslation = {
   "tool.worked": "Trabalhou",
   "tool.workedFor": "Trabalhou por {{duration}}",
   "widget.chart": "Gráfico",
+  "widget.chartActions": "Ações do gráfico",
+  "widget.dataSources": "Fontes de dados",
+  "widget.tableActions": "Ações da tabela",
   "widget.dataChart": "Gráfico de dados",
   "widget.dataInsights": "Insights de dados",
   "widget.dataTable": "Tabela de dados",
@@ -2145,6 +2148,10 @@ const messages: ToolkitAgentChatTranslation = {
     "Definido. Permite que os apps deste espaço de trabalho verifiquem uns aos outros.",
   "settingsOrg.auth.sharedSecretNotSet":
     "Não definido. Permite que os apps deste espaço de trabalho verifiquem uns aos outros.",
+  "settingsOrg.auth.memberDelegation":
+    "Delegação de identidade de membros da organização",
+  "settingsOrg.auth.memberDelegationHelp":
+    "Apps conectados que tenham este segredo compartilhado da organização podem declarar a identidade de qualquer membro atual ao chamar este app. Este app verifica a lista de membros em tempo real e limita o acesso delegado à organização às permissões do nível de membro.",
   "settingsOrg.auth.secretNotSetValue": "Não definido",
   "settingsOrg.auth.manage": "Gerenciar",
   "settingsOrg.auth.reveal": "Mostrar",
@@ -2216,6 +2223,12 @@ const messages: ToolkitAgentChatTranslation = {
   "settingsShell.account.languageAndRegion": "Idioma e região",
   "settingsShell.account.languageDescription":
     "Vale para todos os seus dispositivos.",
+  "settingsShell.account.appearance": "Aparência",
+  "settingsShell.account.themeFamily": "Família do tema",
+  "settingsShell.account.themeFamilyAgentNative": "Agent-Native",
+  "settingsShell.account.themeFamilyOriginal": "Cores originais do app",
+  "settingsShell.account.themeFamilySaveError":
+    "Não foi possível atualizar o tema. Tente novamente.",
   "settingsShell.account.manage": "Gerenciar",
   "settingsShell.account.name": "Nome",
   "settingsShell.account.nameDescription":

package/src/app/i18n/catalogs/zh-CN.ts

@@ -1419,6 +1419,9 @@ const messages: ToolkitAgentChatTranslation = {
   "tool.worked": "已处理",
   "tool.workedFor": "处理了 {{duration}}",
   "widget.chart": "图表",
+  "widget.chartActions": "图表操作",
+  "widget.dataSources": "数据来源",
+  "widget.tableActions": "表格操作",
   "widget.dataChart": "数据图表",
   "widget.dataInsights": "数据洞察",
   "widget.dataTable": "数据表",
@@ -1885,6 +1888,9 @@ const messages: ToolkitAgentChatTranslation = {
   "settingsOrg.auth.sharedSecret": "共享密钥",
   "settingsOrg.auth.sharedSecretSet": "已设置。让此工作区中的应用相互验证。",
   "settingsOrg.auth.sharedSecretNotSet": "未设置。让此工作区中的应用相互验证。",
+  "settingsOrg.auth.memberDelegation": "组织成员身份委派",
+  "settingsOrg.auth.memberDelegationHelp":
+    "持有此组织共享密钥的已连接应用在调用此应用时，可以声明为任意一名当前成员。此应用会检查实时成员名单，并将受委派的组织访问权限限制为成员级权限。",
   "settingsOrg.auth.secretNotSetValue": "未设置",
   "settingsOrg.auth.manage": "管理",
   "settingsOrg.auth.reveal": "显示",
@@ -1937,6 +1943,11 @@ const messages: ToolkitAgentChatTranslation = {
   "settingsShell.account.emailChangeSent": "请查看您的邮箱，按说明确认此更改。",
   "settingsShell.account.languageAndRegion": "语言和地区",
   "settingsShell.account.languageDescription": "适用于您的所有设备。",
+  "settingsShell.account.appearance": "外观",
+  "settingsShell.account.themeFamily": "主题样式",
+  "settingsShell.account.themeFamilyAgentNative": "Agent-Native",
+  "settingsShell.account.themeFamilyOriginal": "原应用配色",
+  "settingsShell.account.themeFamilySaveError": "无法更新主题样式。请重试。",
   "settingsShell.account.manage": "管理",
   "settingsShell.account.name": "姓名",
   "settingsShell.account.nameDescription":

package/src/app/i18n/catalogs/zh-TW.ts

@@ -1424,6 +1424,9 @@ const messages: ToolkitAgentChatTranslation = {
   "tool.worked": "已處理",
   "tool.workedFor": "處理了 {{duration}}",
   "widget.chart": "圖表",
+  "widget.chartActions": "圖表操作",
+  "widget.dataSources": "資料來源",
+  "widget.tableActions": "表格操作",
   "widget.dataChart": "資料圖表",
   "widget.dataInsights": "資料洞察",
   "widget.dataTable": "資料表",
@@ -1894,6 +1897,9 @@ const messages: ToolkitAgentChatTranslation = {
     "已設定。讓此工作區中的應用程式互相驗證。",
   "settingsOrg.auth.sharedSecretNotSet":
     "未設定。讓此工作區中的應用程式互相驗證。",
+  "settingsOrg.auth.memberDelegation": "組織成員身分委派",
+  "settingsOrg.auth.memberDelegationHelp":
+    "持有此組織共用密鑰的已連結應用程式在呼叫此應用程式時，可以聲稱是任何一位現任成員。此應用程式會檢查即時成員名單，並將受委派的組織存取權限制為成員層級的權限。",
   "settingsOrg.auth.secretNotSetValue": "未設定",
   "settingsOrg.auth.manage": "管理",
   "settingsOrg.auth.reveal": "顯示",
@@ -1947,6 +1953,12 @@ const messages: ToolkitAgentChatTranslation = {
     "請查看您的電子郵件，依照說明確認此變更。",
   "settingsShell.account.languageAndRegion": "語言和地區",
   "settingsShell.account.languageDescription": "套用至您的所有裝置。",
+  "settingsShell.account.appearance": "外觀",
+  "settingsShell.account.themeFamily": "主題樣式",
+  "settingsShell.account.themeFamilyAgentNative": "Agent-Native",
+  "settingsShell.account.themeFamilyOriginal": "原始應用程式配色",
+  "settingsShell.account.themeFamilySaveError":
+    "無法更新主題樣式，請再試一次。",
   "settingsShell.account.manage": "管理",
   "settingsShell.account.name": "姓名",
   "settingsShell.account.nameDescription":

package/src/app/org/AuthenticationSection.spec.tsx

@@ -0,0 +1,62 @@
+// @vitest-environment happy-dom
+
+import React, { act } from "react";
+import { createRoot, type Root } from "react-dom/client";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+const mocks = vi.hoisted(() => ({
+  setDelegation: { error: null, isPending: false, mutate: vi.fn() },
+}));
+
+vi.mock("@agent-native/core/client/org", () => ({
+  useSetA2AMemberDelegation: () => mocks.setDelegation,
+}));
+
+vi.mock("@agent-native/core/client/i18n", () => ({
+  useT: () => (key: string) => key,
+}));
+
+import { TooltipProvider } from "@agent-native/toolkit/ui/tooltip";
+
+import { A2AMemberDelegationSection } from "./AuthenticationSection.js";
+
+describe("A2AMemberDelegationSection", () => {
+  let container: HTMLDivElement;
+  let root: Root;
+
+  beforeEach(() => {
+    vi.stubGlobal("IS_REACT_ACT_ENVIRONMENT", true);
+    container = document.createElement("div");
+    document.body.appendChild(container);
+    root = createRoot(container);
+    vi.clearAllMocks();
+  });
+
+  afterEach(() => {
+    act(() => root.unmount());
+    container.remove();
+    vi.unstubAllGlobals();
+  });
+
+  it("shows the owner-controlled setting and sends the selected value", () => {
+    act(() => {
+      root.render(
+        <TooltipProvider>
+          <A2AMemberDelegationSection enabled={false} />
+        </TooltipProvider>,
+      );
+    });
+
+    const toggle = container.querySelector('[role="switch"]');
+    expect(toggle?.getAttribute("aria-label")).toBe(
+      "agentChat.settingsOrg.auth.memberDelegation",
+    );
+    expect(toggle?.getAttribute("aria-checked")).toBe("false");
+
+    act(() =>
+      toggle?.dispatchEvent(new MouseEvent("click", { bubbles: true })),
+    );
+
+    expect(mocks.setDelegation.mutate).toHaveBeenCalledWith(true);
+  });
+});

package/src/app/org/AuthenticationSection.tsx

@@ -4,6 +4,7 @@ import {
   useSetOrgDomain,
   useRevealA2ASecret,
   useSetA2ASecret,
+  useSetA2AMemberDelegation,
   useSyncA2ASecret,
   type SyncA2ASecretResult,
 } from "@agent-native/core/client/org";
@@ -18,6 +19,7 @@ import {
   PopoverTrigger,
 } from "@agent-native/toolkit/ui/popover";
 import { Spinner } from "@agent-native/toolkit/ui/spinner";
+import { Switch } from "@agent-native/toolkit/ui/switch";
 import {
   Tooltip,
   TooltipContent,
@@ -34,6 +36,7 @@ import {
   IconEye,
   IconEyeOff,
   IconCloudUpload,
+  IconInfoCircle,
 } from "@tabler/icons-react";
 import { useState } from "react";
 
@@ -505,6 +508,44 @@ export function A2ASecretSection({ isSet }: { isSet: boolean }) {
   );
 }
 
+export function A2AMemberDelegationSection({ enabled }: { enabled: boolean }) {
+  const t = useT();
+  const setDelegation = useSetA2AMemberDelegation();
+
+  return (
+    <SettingsRow
+      id="a2a-member-delegation"
+      label={
+        <Tooltip>
+          <TooltipTrigger asChild>
+            <span className="inline-flex items-center gap-1" tabIndex={0}>
+              {t("agentChat.settingsOrg.auth.memberDelegation")}
+              <IconInfoCircle
+                aria-hidden="true"
+                className="size-4 text-muted-foreground"
+              />
+            </span>
+          </TooltipTrigger>
+          <TooltipContent>
+            {t("agentChat.settingsOrg.auth.memberDelegationHelp")}
+          </TooltipContent>
+        </Tooltip>
+      }
+      control={
+        <div className="flex items-center justify-end gap-3">
+          <ErrorText error={setDelegation.error} />
+          <Switch
+            checked={enabled}
+            onCheckedChange={(value) => setDelegation.mutate(value)}
+            disabled={setDelegation.isPending}
+            aria-label={t("agentChat.settingsOrg.auth.memberDelegation")}
+          />
+        </div>
+      }
+    />
+  );
+}
+
 /**
  * Sign-in policy, SSO, SCIM, and domain auto-join for owners and admins, plus
  * the cross-app secret for owners. Renders nothing for members.
@@ -528,7 +569,12 @@ export function AuthenticationSection({ title }: { title?: string }) {
           requiredAuthProvider={org.requiredAuthProvider}
         />
         {org.role === "owner" && (
-          <A2ASecretSection isSet={Boolean(org.a2aSecretSet)} />
+          <>
+            <A2ASecretSection isSet={Boolean(org.a2aSecretSet)} />
+            <A2AMemberDelegationSection
+              enabled={Boolean(org.a2aMemberDelegationEnabled)}
+            />
+          </>
         )}
       </SettingsGroup>
     </SectionTooltipProvider>

package/src/app/org/pages/OrgAuthenticationPage.tsx

@@ -19,6 +19,7 @@ import { useState } from "react";
 
 import { SettingsGroup, SettingsRow } from "../../settings/SettingsRow.js";
 import {
+  A2AMemberDelegationSection,
   A2ASecretSection,
   DomainSettingsSection,
 } from "../AuthenticationSection.js";
@@ -204,6 +205,9 @@ function OrgAuthenticationContent({ org }: { org: OrgInfo }) {
           title={t("agentChat.settingsOrg.auth.betweenApps")}
         >
           <A2ASecretSection isSet={Boolean(org.a2aSecretSet)} />
+          <A2AMemberDelegationSection
+            enabled={Boolean(org.a2aMemberDelegationEnabled)}
+          />
         </SettingsGroup>
       )}
     </div>

package/src/app/org/pages/OrgSettingsPages.spec.tsx

@@ -88,6 +88,7 @@ vi.mock("../OrgIdentitySettings.js", () => ({
 vi.mock("../AuthenticationSection.js", () => ({
   DomainSettingsSection: () => <div id="email-domain" />,
   A2ASecretSection: () => <div id="cross-app-authentication" />,
+  A2AMemberDelegationSection: () => <div id="member-delegation" />,
 }));
 
 vi.mock("../OrgGeneralSection.js", () => ({
@@ -194,6 +195,7 @@ describe("Organization settings pages", () => {
       expect(methods?.textContent).toContain("Email and password, and Google.");
       expect(container.querySelector("#email-domain")).not.toBeNull();
       expect(container.querySelector("#cross-app-authentication")).toBeNull();
+      expect(container.querySelector("#member-delegation")).toBeNull();
     });
 
     it("shows the owner the shared secret", () => {
@@ -203,6 +205,7 @@ describe("Organization settings pages", () => {
       expect(
         container.querySelector("#cross-app-authentication"),
       ).not.toBeNull();
+      expect(container.querySelector("#member-delegation")).not.toBeNull();
     });
 
     it("lists each method and the variables that turn it on", () => {

package/src/app/providers/AppProviders.spec.tsx

@@ -9,12 +9,17 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import { resetAgentEngineReadinessForTests } from "../../../../core/src/client/agent-engine-readiness.js";
 
 const useSessionMock = vi.fn();
+const useThemeFamilyMock = vi.fn();
 vi.mock("@agent-native/core/client/use-session", async (importOriginal) => ({
   ...(await importOriginal<
     typeof import("@agent-native/core/client/use-session")
   >()),
   useSession: () => useSessionMock(),
 }));
+vi.mock("@agent-native/core/client/ui", async (importOriginal) => ({
+  ...(await importOriginal<typeof import("@agent-native/core/client/ui")>()),
+  useThemeFamily: () => useThemeFamilyMock(),
+}));
 vi.mock("@agent-native/core/client/action-query-cache", () => ({
   ActionQueryCacheGate: ({ children }: { children: React.ReactNode }) => (
     <div data-testid="action-query-cache-gate">{children}</div>
@@ -48,9 +53,34 @@ let originalLocation: Location;
 let originalParent: Window;
 let originalFetch: typeof window.fetch;
 let originalModelContext: PropertyDescriptor | undefined;
+let originalLocalStorage: PropertyDescriptor | undefined;
 let originalDocumentTitle: string;
 let replaceMock: ReturnType<typeof vi.fn>;
 
+function createTestLocalStorage(): Storage {
+  const values = new Map<string, string>();
+  return {
+    get length() {
+      return values.size;
+    },
+    clear() {
+      values.clear();
+    },
+    getItem(key) {
+      return values.get(String(key)) ?? null;
+    },
+    key(index) {
+      return [...values.keys()][index] ?? null;
+    },
+    removeItem(key) {
+      values.delete(String(key));
+    },
+    setItem(key, value) {
+      values.set(String(key), String(value));
+    },
+  };
+}
+
 beforeEach(() => {
   resetAgentEngineReadinessForTests();
   container = document.createElement("div");
@@ -64,6 +94,14 @@ beforeEach(() => {
     document,
     "modelContext",
   );
+  originalLocalStorage = Object.getOwnPropertyDescriptor(
+    window,
+    "localStorage",
+  );
+  Object.defineProperty(window, "localStorage", {
+    configurable: true,
+    value: createTestLocalStorage(),
+  });
   Object.defineProperty(window, "fetch", {
     configurable: true,
     value: vi
@@ -102,6 +140,11 @@ afterEach(() => {
     configurable: true,
     value: originalFetch,
   });
+  if (originalLocalStorage) {
+    Object.defineProperty(window, "localStorage", originalLocalStorage);
+  } else {
+    delete (window as Window & { localStorage?: Storage }).localStorage;
+  }
   if (originalModelContext) {
     Object.defineProperty(document, "modelContext", originalModelContext);
   } else {
@@ -115,6 +158,7 @@ function renderProviders(props: {
   isPublicPath?: boolean;
   sessionBypass?: boolean;
   skipFirstRunOnboarding?: boolean;
+  enableThemeFamily?: boolean;
   disableWebMcp?: boolean;
   children?: React.ReactNode;
 }) {
@@ -183,6 +227,33 @@ const SIGNED_IN_SESSION = {
 };
 
 describe("AppProviders session gate", () => {
+  it("mounts theme-family sync by default in an authenticated app shell", async () => {
+    useSessionMock.mockReturnValue(SIGNED_IN_SESSION);
+
+    renderProviders({ skipFirstRunOnboarding: true });
+    await act(async () => {
+      await import("./ThemeFamilySync.js");
+    });
+
+    expect(useThemeFamilyMock).toHaveBeenCalledOnce();
+  });
+
+  it("allows an authenticated app shell to disable theme-family sync", () => {
+    useSessionMock.mockReturnValue(SIGNED_IN_SESSION);
+
+    renderProviders({ skipFirstRunOnboarding: true, enableThemeFamily: false });
+
+    expect(useThemeFamilyMock).not.toHaveBeenCalled();
+  });
+
+  it("does not load theme-family settings on public routes", () => {
+    useSessionMock.mockReturnValue(SIGNED_OUT_SESSION);
+
+    renderProviders({ isPublicPath: true });
+
+    expect(useThemeFamilyMock).not.toHaveBeenCalled();
+  });
+
   it("uses Toolkit's theme-aware toaster by default", () => {
     useSessionMock.mockReturnValue(SIGNED_OUT_SESSION);
 

package/src/app/providers/AppProviders.tsx

@@ -95,6 +95,8 @@ export interface AppProvidersProps {
    */
   ownsDocument?: boolean;
 
+  enableThemeFamily?: boolean;
+
   documentTitleFallback?: string;
 
   children: React.ReactNode;
@@ -397,6 +399,8 @@ function AgentEngineReadinessBootstrap() {
   return null;
 }
 
+const ThemeFamilySync = React.lazy(() => import("./ThemeFamilySync.js"));
+
 function ProvidersInner({
   queryClient,
   defaultTheme = "system",
@@ -507,6 +511,7 @@ export function AppProviders({
   i18n,
   documentTitleFallback,
   ownsDocument = true,
+  enableThemeFamily = true,
   children,
 }: AppProvidersProps) {
   const fallback = clientOnlyFallback ?? (
@@ -543,6 +548,11 @@ export function AppProviders({
         children
       ) : (
         <>
+          {ownsDocument && enableThemeFamily ? (
+            <React.Suspense fallback={null}>
+              <ThemeFamilySync />
+            </React.Suspense>
+          ) : null}
           <AgentEngineReadinessBootstrap />
           <FirstRunOnboardingStartupGate
             suppressSurface={skipFirstRunOnboarding}

package/src/app/providers/ThemeFamilySync.tsx

@@ -0,0 +1,6 @@
+import { useThemeFamily } from "@agent-native/core/client/ui";
+
+export default function ThemeFamilySync() {
+  useThemeFamily();
+  return null;
+}