@stigmer/react 3.1.13 → 3.1.14

package/src/sharing/AgentShareList.tsx

@@ -0,0 +1,507 @@
+"use client";
+
+import { useCallback, useState } from "react";
+import { cn } from "@stigmer/theme";
+import {
+  appendLinkToken,
+  chatPath,
+  getUserMessage,
+} from "@stigmer/sdk";
+import type { Agent } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import type { AgentShare } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/api_pb";
+import { toast } from "../feedback/toast.js";
+import { PermissionGate } from "../iam-policy/PermissionGate.js";
+import { ConfirmDialog } from "../resource-detail/ConfirmDialog.js";
+import { useConfirmAction } from "../resource-detail/useConfirmAction.js";
+import { useCopyResource } from "../resource-detail/useCopyResource.js";
+import { ShareAgentDialog } from "./ShareAgentDialog.js";
+import { useAgentShares } from "./useAgentShares.js";
+import { useCanCreateAgentShare } from "./useCanCreateAgentShare.js";
+import { useDeleteAgentShare } from "./useDeleteAgentShare.js";
+import { useRotateShareLink } from "./useRotateShareLink.js";
+import {
+  draftFromShare,
+  sharingAudienceFromProto,
+  useSaveAgentShare,
+} from "./useSaveAgentShare.js";
+
+/** Props for {@link AgentShareList}. */
+export interface AgentShareListProps {
+  /** The agent whose shares are managed. */
+  readonly agent: Agent;
+  /**
+   * The viewer's active organization slug. A share created from this
+   * list lands in this org — its URL, billing, and credentials belong
+   * to it (a **cross-org share** when it differs from the agent's org,
+   * decision 013). Omit to default to the agent's own org.
+   */
+  readonly viewerOrg?: string;
+  /**
+   * Builds the absolute public chat URL for a share. The host
+   * application owns URL construction (its configured public origin may
+   * differ from the rendering origin — e.g. the desktop app). When
+   * omitted, links fall back to the relative `/chat/<org>/<slug>`.
+   */
+  readonly buildShareUrl?: (org: string, slug: string) => string;
+  /** Additional CSS class names. */
+  readonly className?: string;
+}
+
+/**
+ * Management surface for an agent's {@link AgentShare} channels — the
+ * agent analog of {@link AgentInstanceList}, rendered in the agent
+ * detail view's Shares tab.
+ *
+ * Lists every share the viewer can see (the server FGA-filters
+ * `getByAgent`, so each org's members see their own org's channels and
+ * never another org's — decision 013), with per-row copy link, edit,
+ * pause/resume, reset link, and delete. Creation goes through the same
+ * {@link ShareAgentDialog} and always lands in the viewer's active org;
+ * the create bar mirrors the server's via
+ * {@link useCanCreateAgentShare}, so the button never appears to a user
+ * whose create would be refused.
+ *
+ * Self-contained: owns its dialog, its confirmation prompts, and its
+ * refetch-after-mutation — hosts render it with just the agent and the
+ * URL builder.
+ *
+ * This is an SDK component (DD-001) — embeddable by platform builders.
+ */
+export function AgentShareList({
+  agent,
+  viewerOrg,
+  buildShareUrl,
+  className,
+}: AgentShareListProps) {
+  const agentId = agent.metadata?.id ?? "";
+  const { shares, isLoading, error, refetch } = useAgentShares(agentId);
+  const { allowed: canCreate, shareOrg } = useCanCreateAgentShare(
+    agent,
+    viewerOrg,
+  );
+  const { deleteShare } = useDeleteAgentShare();
+  const { confirmState, confirm, handleConfirm, handleCancel } =
+    useConfirmAction();
+
+  // One dialog instance serves both flows: editing the chosen share, or
+  // creating a new one in the viewer's org.
+  const [editor, setEditor] = useState<
+    | { readonly mode: "create" }
+    | { readonly mode: "edit"; readonly share: AgentShare }
+    | null
+  >(null);
+
+  const handleDelete = useCallback(
+    async (share: AgentShare) => {
+      const slug = share.metadata?.slug ?? "";
+      const confirmed = await confirm({
+        title: "Delete share?",
+        description:
+          `The link /chat/${share.metadata?.org}/${slug} stops working ` +
+          "immediately — including for visitors mid-conversation — and its " +
+          "configuration (origins, messages, credential bindings) is gone. " +
+          "To stop serving while keeping the configuration, pause it instead.",
+        confirmLabel: "Delete",
+        variant: "destructive",
+      });
+      if (!confirmed) return;
+      try {
+        await deleteShare(share.metadata?.id ?? "");
+        toast.success("Share deleted");
+        refetch();
+      } catch (err) {
+        toast.error(getUserMessage(err));
+      }
+    },
+    [confirm, deleteShare, refetch],
+  );
+
+  if (isLoading) {
+    return <LoadingSkeleton />;
+  }
+
+  if (error) {
+    return (
+      <div className="py-8 text-center text-sm text-destructive">
+        Failed to load shares
+      </div>
+    );
+  }
+
+  return (
+    <div className={cn("space-y-3", className)}>
+      {shares.length === 0 ? (
+        <ShareEmptyState
+          canCreate={canCreate}
+          onCreateClick={() => setEditor({ mode: "create" })}
+        />
+      ) : (
+        <>
+          <div className="flex items-center justify-between">
+            <h3 className="text-sm font-medium text-foreground">
+              {shares.length} {shares.length === 1 ? "share" : "shares"}
+            </h3>
+            {canCreate && (
+              <button
+                type="button"
+                onClick={() => setEditor({ mode: "create" })}
+                className={cn(
+                  "inline-flex items-center gap-1 rounded-md px-2.5 py-1",
+                  "text-xs font-medium",
+                  "border border-border text-foreground",
+                  "hover:bg-accent-hover",
+                  "focus:outline-none focus:ring-2 focus:ring-ring",
+                )}
+              >
+                <PlusIcon />
+                Create share
+              </button>
+            )}
+          </div>
+
+          <div className="overflow-hidden rounded-lg border border-border">
+            <table className="w-full text-sm">
+              <thead>
+                <tr className="border-b border-border bg-muted-subtle">
+                  <th className="px-4 py-2 text-left font-medium text-muted-foreground">Name</th>
+                  <th className="px-4 py-2 text-left font-medium text-muted-foreground">Link</th>
+                  <th className="px-4 py-2 text-left font-medium text-muted-foreground">Audience</th>
+                  <th className="px-4 py-2 text-left font-medium text-muted-foreground">Status</th>
+                  <th className="px-4 py-2 text-right font-medium text-muted-foreground">Actions</th>
+                </tr>
+              </thead>
+              <tbody className="divide-y divide-border">
+                {shares.map((share) => (
+                  <ShareRow
+                    key={share.metadata?.id}
+                    share={share}
+                    agent={agent}
+                    buildShareUrl={buildShareUrl}
+                    onEditClick={(s) => setEditor({ mode: "edit", share: s })}
+                    onDeleteClick={handleDelete}
+                    refetch={refetch}
+                  />
+                ))}
+              </tbody>
+            </table>
+          </div>
+        </>
+      )}
+
+      {editor && (
+        <ShareAgentDialog
+          open
+          onOpenChange={(open) => {
+            if (!open) setEditor(null);
+          }}
+          agent={agent}
+          share={editor.mode === "edit" ? editor.share : undefined}
+          shareOrg={shareOrg}
+          buildShareUrl={buildShareUrl}
+          onSharingChanged={refetch}
+        />
+      )}
+
+      <ConfirmDialog
+        state={confirmState}
+        onConfirm={handleConfirm}
+        onCancel={handleCancel}
+      />
+    </div>
+  );
+}
+
+// ---------------------------------------------------------------------------
+// Row — one share channel
+// ---------------------------------------------------------------------------
+
+interface ShareRowProps {
+  readonly share: AgentShare;
+  readonly agent: Agent;
+  readonly buildShareUrl?: (org: string, slug: string) => string;
+  readonly onEditClick: (share: AgentShare) => void;
+  readonly onDeleteClick: (share: AgentShare) => void;
+  readonly refetch: () => void;
+}
+
+function ShareRow({
+  share,
+  agent,
+  buildShareUrl,
+  onEditClick,
+  onDeleteClick,
+  refetch,
+}: ShareRowProps) {
+  const meta = share.metadata;
+  const id = meta?.id ?? "";
+  const org = meta?.org ?? "";
+  const slug = meta?.slug ?? "";
+  const enabled = share.spec?.enabled ?? false;
+  const audience = sharingAudienceFromProto(share.spec?.audience);
+  const isCrossOrg = org !== (agent.metadata?.org ?? "");
+
+  const { copy } = useCopyResource();
+  const { save, isPending } = useSaveAgentShare(agent);
+  const { rotateShareLink, isPending: isRotating } = useRotateShareLink(id);
+
+  // The copyable URL carries the link token on public shares (org
+  // audience is gated by membership, not the token). The display stays
+  // the bare path — the token is a secret, not an address.
+  const displayPath = chatPath(org, slug);
+  const copyUrl = (() => {
+    const base = buildShareUrl ? buildShareUrl(org, slug) : displayPath;
+    return audience === "org"
+      ? base
+      : appendLinkToken(base, share.status?.shareLinkToken ?? "");
+  })();
+
+  const handleCopyLink = useCallback(() => {
+    void copy(copyUrl, "Link");
+  }, [copy, copyUrl]);
+
+  // Pause/resume is a full-spec save with only `enabled` flipped —
+  // draftFromShare guarantees a toggle can never wipe origins, messages,
+  // or credential bindings (the fails-closed posture the CLI shares).
+  const handleToggleEnabled = useCallback(async () => {
+    try {
+      await save({ ...draftFromShare(share), enabled: !enabled }, share);
+      toast.success(enabled ? "Share paused" : "Share resumed");
+      refetch();
+    } catch (err) {
+      toast.error(getUserMessage(err));
+    }
+  }, [save, share, enabled, refetch]);
+
+  const handleResetLink = useCallback(async () => {
+    try {
+      await rotateShareLink();
+      toast.success("Link reset — the old link no longer works");
+      refetch();
+    } catch (err) {
+      toast.error(getUserMessage(err));
+    }
+  }, [rotateShareLink, refetch]);
+
+  return (
+    <tr
+      className="cursor-pointer transition-colors hover:bg-accent-hover"
+      onClick={() => onEditClick(share)}
+    >
+      <td className="px-4 py-2.5">
+        <div className="flex items-center gap-2">
+          <span className="font-medium text-foreground">
+            {meta?.name || slug || "\u2014"}
+          </span>
+          {isCrossOrg && (
+            <span
+              className={cn(
+                "inline-flex items-center rounded-md px-1.5 py-0.5",
+                "text-[0.6rem] font-medium uppercase tracking-wide",
+                "bg-muted text-muted-foreground border border-border",
+              )}
+              title={`This share lives in ${org}; the agent lives in ${agent.metadata?.org}`}
+            >
+              Cross-org
+            </span>
+          )}
+        </div>
+      </td>
+
+      <td className="px-4 py-2.5" onClick={(e) => e.stopPropagation()}>
+        <div className="flex items-center gap-1.5">
+          <code
+            className="max-w-56 truncate font-mono text-xs text-muted-foreground"
+            title={displayPath}
+          >
+            {displayPath}
+          </code>
+          <button
+            type="button"
+            onClick={handleCopyLink}
+            aria-label={`Copy link for ${meta?.name || slug}`}
+            className={cn(
+              "rounded p-1 text-muted-foreground",
+              "hover:bg-accent-hover hover:text-foreground",
+              "focus:outline-none focus:ring-1 focus:ring-ring",
+            )}
+          >
+            <CopyIcon />
+          </button>
+        </div>
+      </td>
+
+      <td className="px-4 py-2.5">
+        <span className="text-xs text-muted-foreground">
+          {audience === "org" ? "Org members" : "Public"}
+        </span>
+      </td>
+
+      <td className="px-4 py-2.5">
+        <span
+          className={cn(
+            "inline-flex items-center gap-1.5 text-xs",
+            enabled ? "text-foreground" : "text-muted-foreground",
+          )}
+        >
+          <span
+            aria-hidden="true"
+            className={cn(
+              "size-1.5 rounded-full",
+              enabled ? "bg-success" : "bg-muted-foreground",
+            )}
+          />
+          {enabled ? "Active" : "Paused"}
+        </span>
+      </td>
+
+      <td className="px-4 py-2.5 text-right" onClick={(e) => e.stopPropagation()}>
+        <div className="flex items-center justify-end gap-1">
+          <PermissionGate resource={{ kind: "agent_share", id }} relation="can_edit">
+            <button
+              type="button"
+              onClick={() => onEditClick(share)}
+              className={cn(
+                "rounded px-2 py-1 text-xs font-medium",
+                "text-foreground hover:bg-accent-hover",
+                "focus:outline-none focus:ring-1 focus:ring-ring",
+              )}
+            >
+              Edit
+            </button>
+            <button
+              type="button"
+              onClick={() => void handleToggleEnabled()}
+              disabled={isPending}
+              className={cn(
+                "rounded px-2 py-1 text-xs font-medium",
+                "text-foreground hover:bg-accent-hover",
+                "focus:outline-none focus:ring-1 focus:ring-ring",
+                "disabled:pointer-events-none disabled:opacity-50",
+              )}
+            >
+              {enabled ? "Pause" : "Resume"}
+            </button>
+            {audience === "public" && (
+              <button
+                type="button"
+                onClick={() => void handleResetLink()}
+                disabled={isRotating}
+                className={cn(
+                  "rounded px-2 py-1 text-xs font-medium",
+                  "text-foreground hover:bg-accent-hover",
+                  "focus:outline-none focus:ring-1 focus:ring-ring",
+                  "disabled:pointer-events-none disabled:opacity-50",
+                )}
+              >
+                {isRotating ? "Resetting…" : "Reset link"}
+              </button>
+            )}
+          </PermissionGate>
+          <PermissionGate resource={{ kind: "agent_share", id }} relation="can_delete">
+            <button
+              type="button"
+              onClick={() => onDeleteClick(share)}
+              className={cn(
+                "rounded px-2 py-1 text-xs font-medium",
+                "text-destructive hover:bg-destructive-subtle",
+                "focus:outline-none focus:ring-1 focus:ring-ring",
+              )}
+            >
+              Delete
+            </button>
+          </PermissionGate>
+        </div>
+      </td>
+    </tr>
+  );
+}
+
+// ---------------------------------------------------------------------------
+// Empty state
+// ---------------------------------------------------------------------------
+
+function ShareEmptyState({
+  canCreate,
+  onCreateClick,
+}: {
+  readonly canCreate: boolean;
+  readonly onCreateClick: () => void;
+}) {
+  return (
+    <div className="flex flex-col items-center gap-2 py-12 text-center">
+      <ShareIcon className="size-10 text-muted-foreground-faint" />
+      <p className="text-sm font-medium text-muted-foreground">No shares yet</p>
+      <p className="max-w-sm text-xs text-muted-foreground-subtle">
+        A share gives this agent a hosted chat link you can send or embed —
+        each share is its own channel with its own audience, embed origins,
+        and tool credentials.
+      </p>
+      {canCreate && (
+        <button
+          type="button"
+          onClick={onCreateClick}
+          className={cn(
+            "mt-2 inline-flex items-center gap-1 rounded-md px-3 py-1.5",
+            "text-xs font-medium",
+            "bg-primary text-primary-foreground hover:bg-primary-hover",
+            "focus:outline-none focus:ring-2 focus:ring-ring",
+          )}
+        >
+          <PlusIcon />
+          Create share
+        </button>
+      )}
+    </div>
+  );
+}
+
+// ---------------------------------------------------------------------------
+// Non-happy states + icons
+// ---------------------------------------------------------------------------
+
+function LoadingSkeleton() {
+  return (
+    <div className="space-y-2 py-4">
+      {[1, 2, 3].map((i) => (
+        <div key={i} className="h-12 animate-pulse rounded-md bg-muted-faint" />
+      ))}
+    </div>
+  );
+}
+
+function PlusIcon() {
+  return (
+    <svg width="12" height="12" viewBox="0 0 12 12" fill="none" aria-hidden="true">
+      <path d="M6 2v8M2 6h8" stroke="currentColor" strokeWidth="1.5" strokeLinecap="round" />
+    </svg>
+  );
+}
+
+function CopyIcon() {
+  return (
+    <svg width="12" height="12" viewBox="0 0 16 16" fill="none" stroke="currentColor" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true">
+      <rect x="5.5" y="5.5" width="8" height="8" rx="1.5" />
+      <path d="M10.5 5.5v-2a1 1 0 0 0-1-1h-6a1 1 0 0 0-1 1v6a1 1 0 0 0 1 1h2" />
+    </svg>
+  );
+}
+
+function ShareIcon({ className }: { readonly className?: string }) {
+  return (
+    <svg
+      className={className}
+      viewBox="0 0 16 16"
+      fill="none"
+      stroke="currentColor"
+      strokeWidth="1.5"
+      strokeLinecap="round"
+      strokeLinejoin="round"
+      aria-hidden="true"
+    >
+      <circle cx="4" cy="8" r="2" />
+      <circle cx="12" cy="4" r="2" />
+      <circle cx="12" cy="12" r="2" />
+      <path d="m5.8 7.1 4.4-2.2M5.8 8.9l4.4 2.2" />
+    </svg>
+  );
+}