@stigmer/react 3.1.13 → 3.1.15

package/sharing/AgentShareList.js

@@ -0,0 +1,159 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useCallback, useState } from "react";
+import { cn } from "@stigmer/theme";
+import { appendLinkToken, chatPath, getUserMessage, } from "@stigmer/sdk";
+import { toast } from "../feedback/toast.js";
+import { Button } from "../button/Button.js";
+import { EmptyState } from "../empty-state/EmptyState.js";
+import { PermissionGate } from "../iam-policy/PermissionGate.js";
+import { ConfirmDialog } from "../resource-detail/ConfirmDialog.js";
+import { useConfirmAction } from "../resource-detail/useConfirmAction.js";
+import { useCopyResource } from "../resource-detail/useCopyResource.js";
+import { ShareAgentDialog } from "./ShareAgentDialog.js";
+import { useAgentShares } from "./useAgentShares.js";
+import { useCanCreateAgentShare } from "./useCanCreateAgentShare.js";
+import { useDeleteAgentShare } from "./useDeleteAgentShare.js";
+import { useRotateShareLink } from "./useRotateShareLink.js";
+import { draftFromShare, sharingAudienceFromProto, useSaveAgentShare, } from "./useSaveAgentShare.js";
+/**
+ * Management surface for an agent's {@link AgentShare} channels — the
+ * agent analog of {@link AgentInstanceList}, rendered in the agent
+ * detail view's Shares tab.
+ *
+ * Lists the viewer's active org's channels of the agent: `viewerOrg`
+ * scopes the `getByAgent` call server-side, so a member of several orgs
+ * sees exactly the current org context's channels — never a merged list
+ * of every org's (decision 013 amendment). Per-row actions: copy link,
+ * edit, pause/resume, reset link, delete. Creation goes through the same
+ * {@link ShareAgentDialog} and always lands in the viewer's active org;
+ * the create bar mirrors the server's via
+ * {@link useCanCreateAgentShare}, so the button never appears to a user
+ * whose create would be refused.
+ *
+ * Self-contained: owns its dialog, its confirmation prompts, and its
+ * refetch-after-mutation — hosts render it with just the agent and the
+ * URL builder.
+ *
+ * This is an SDK component (DD-001) — embeddable by platform builders.
+ */
+export function AgentShareList({ agent, viewerOrg, buildShareUrl, className, }) {
+    const agentId = agent.metadata?.id ?? "";
+    // Scope the list to the org whose context the viewer is in; when the
+    // host passes no viewerOrg the scope falls back to the agent's own org
+    // (the same-org owner flow), matching where creation would land.
+    const { shares, isLoading, error, refetch } = useAgentShares(agentId, viewerOrg || (agent.metadata?.org ?? ""));
+    const { allowed: canCreate, shareOrg } = useCanCreateAgentShare(agent, viewerOrg);
+    const { deleteShare } = useDeleteAgentShare();
+    const { confirmState, confirm, handleConfirm, handleCancel } = useConfirmAction();
+    // One dialog instance serves both flows: editing the chosen share, or
+    // creating a new one in the viewer's org.
+    const [editor, setEditor] = useState(null);
+    const handleDelete = useCallback(async (share) => {
+        const slug = share.metadata?.slug ?? "";
+        const confirmed = await confirm({
+            title: "Delete share?",
+            description: `The link /chat/${share.metadata?.org}/${slug} stops working ` +
+                "immediately — including for visitors mid-conversation — and its " +
+                "configuration (origins, messages, credential bindings) is gone. " +
+                "To stop serving while keeping the configuration, pause it instead.",
+            confirmLabel: "Delete",
+            variant: "destructive",
+        });
+        if (!confirmed)
+            return;
+        try {
+            await deleteShare(share.metadata?.id ?? "");
+            toast.success("Share deleted");
+            refetch();
+        }
+        catch (err) {
+            toast.error(getUserMessage(err));
+        }
+    }, [confirm, deleteShare, refetch]);
+    if (isLoading) {
+        return _jsx(LoadingSkeleton, {});
+    }
+    if (error) {
+        return (_jsx("div", { className: "py-8 text-center text-sm text-destructive", children: "Failed to load shares" }));
+    }
+    return (_jsxs("div", { className: cn("space-y-3", className), children: [shares.length === 0 ? (_jsx(ShareEmptyState, { canCreate: canCreate, onCreateClick: () => setEditor({ mode: "create" }) })) : (_jsxs(_Fragment, { children: [_jsxs("div", { className: "flex items-center justify-between", children: [_jsxs("h3", { className: "text-sm font-medium text-foreground", children: [shares.length, " ", shares.length === 1 ? "share" : "shares"] }), canCreate && (_jsx(Button, { variant: "outline", size: "xs", icon: _jsx(PlusIcon, {}), onClick: () => setEditor({ mode: "create" }), children: "Create share" }))] }), _jsx("div", { className: "overflow-hidden rounded-lg border border-border", children: _jsxs("table", { className: "w-full text-sm", children: [_jsx("thead", { children: _jsxs("tr", { className: "border-b border-border bg-muted-subtle", children: [_jsx("th", { className: "px-4 py-2 text-left font-medium text-muted-foreground", children: "Name" }), _jsx("th", { className: "px-4 py-2 text-left font-medium text-muted-foreground", children: "Link" }), _jsx("th", { className: "px-4 py-2 text-left font-medium text-muted-foreground", children: "Audience" }), _jsx("th", { className: "px-4 py-2 text-left font-medium text-muted-foreground", children: "Status" }), _jsx("th", { className: "px-4 py-2 text-right font-medium text-muted-foreground", children: "Actions" })] }) }), _jsx("tbody", { className: "divide-y divide-border", children: shares.map((share) => (_jsx(ShareRow, { share: share, agent: agent, buildShareUrl: buildShareUrl, onEditClick: (s) => setEditor({ mode: "edit", share: s }), onDeleteClick: handleDelete, refetch: refetch }, share.metadata?.id))) })] }) })] })), editor && (_jsx(ShareAgentDialog, { open: true, onOpenChange: (open) => {
+                    if (!open)
+                        setEditor(null);
+                }, agent: agent, share: editor.mode === "edit" ? editor.share : undefined, shareOrg: shareOrg, buildShareUrl: buildShareUrl, onSharingChanged: refetch })), _jsx(ConfirmDialog, { state: confirmState, onConfirm: handleConfirm, onCancel: handleCancel })] }));
+}
+function ShareRow({ share, agent, buildShareUrl, onEditClick, onDeleteClick, refetch, }) {
+    const meta = share.metadata;
+    const id = meta?.id ?? "";
+    const org = meta?.org ?? "";
+    const slug = meta?.slug ?? "";
+    const enabled = share.spec?.enabled ?? false;
+    const audience = sharingAudienceFromProto(share.spec?.audience);
+    const isCrossOrg = org !== (agent.metadata?.org ?? "");
+    const { copy } = useCopyResource();
+    const { save, isPending } = useSaveAgentShare(agent);
+    const { rotateShareLink, isPending: isRotating } = useRotateShareLink(id);
+    // The copyable URL carries the link token on public shares (org
+    // audience is gated by membership, not the token). The display stays
+    // the bare path — the token is a secret, not an address.
+    const displayPath = chatPath(org, slug);
+    const copyUrl = (() => {
+        const base = buildShareUrl ? buildShareUrl(org, slug) : displayPath;
+        return audience === "org"
+            ? base
+            : appendLinkToken(base, share.status?.shareLinkToken ?? "");
+    })();
+    const handleCopyLink = useCallback(() => {
+        void copy(copyUrl, "Link");
+    }, [copy, copyUrl]);
+    // Pause/resume is a full-spec save with only `enabled` flipped —
+    // draftFromShare guarantees a toggle can never wipe origins, messages,
+    // or credential bindings (the fails-closed posture the CLI shares).
+    const handleToggleEnabled = useCallback(async () => {
+        try {
+            await save({ ...draftFromShare(share), enabled: !enabled }, share);
+            toast.success(enabled ? "Share paused" : "Share resumed");
+            refetch();
+        }
+        catch (err) {
+            toast.error(getUserMessage(err));
+        }
+    }, [save, share, enabled, refetch]);
+    const handleResetLink = useCallback(async () => {
+        try {
+            await rotateShareLink();
+            toast.success("Link reset — the old link no longer works");
+            refetch();
+        }
+        catch (err) {
+            toast.error(getUserMessage(err));
+        }
+    }, [rotateShareLink, refetch]);
+    return (_jsxs("tr", { className: "cursor-pointer transition-colors hover:bg-accent-hover", onClick: () => onEditClick(share), children: [_jsx("td", { className: "px-4 py-2.5", children: _jsxs("div", { className: "flex items-center gap-2", children: [_jsx("span", { className: "font-medium text-foreground", children: meta?.name || slug || "\u2014" }), isCrossOrg && (_jsx("span", { className: cn("inline-flex items-center rounded-md px-1.5 py-0.5", "text-[0.6rem] font-medium uppercase tracking-wide", "bg-muted text-muted-foreground border border-border"), title: `This share lives in ${org}; the agent lives in ${agent.metadata?.org}`, children: "Cross-org" }))] }) }), _jsx("td", { className: "px-4 py-2.5", onClick: (e) => e.stopPropagation(), children: _jsxs("div", { className: "flex items-center gap-1.5", children: [_jsx("code", { className: "max-w-56 truncate font-mono text-xs text-muted-foreground", title: displayPath, children: displayPath }), _jsx("button", { type: "button", onClick: handleCopyLink, "aria-label": `Copy link for ${meta?.name || slug}`, className: cn("rounded p-1 text-muted-foreground", "hover:bg-accent-hover hover:text-foreground", "focus:outline-none focus:ring-1 focus:ring-ring"), children: _jsx(CopyIcon, {}) })] }) }), _jsx("td", { className: "px-4 py-2.5", children: _jsx("span", { className: "text-xs text-muted-foreground", children: audience === "org" ? "Org members" : "Public" }) }), _jsx("td", { className: "px-4 py-2.5", children: _jsxs("span", { className: cn("inline-flex items-center gap-1.5 text-xs", enabled ? "text-foreground" : "text-muted-foreground"), children: [_jsx("span", { "aria-hidden": "true", className: cn("size-1.5 rounded-full", enabled ? "bg-success" : "bg-muted-foreground") }), enabled ? "Active" : "Paused"] }) }), _jsx("td", { className: "px-4 py-2.5 text-right", onClick: (e) => e.stopPropagation(), children: _jsxs("div", { className: "flex items-center justify-end gap-1", children: [_jsxs(PermissionGate, { resource: { kind: "agent_share", id }, relation: "can_edit", children: [_jsx("button", { type: "button", onClick: () => onEditClick(share), className: cn("rounded px-2 py-1 text-xs font-medium", "text-foreground hover:bg-accent-hover", "focus:outline-none focus:ring-1 focus:ring-ring"), children: "Edit" }), _jsx("button", { type: "button", onClick: () => void handleToggleEnabled(), disabled: isPending, className: cn("rounded px-2 py-1 text-xs font-medium", "text-foreground hover:bg-accent-hover", "focus:outline-none focus:ring-1 focus:ring-ring", "disabled:pointer-events-none disabled:opacity-50"), children: enabled ? "Pause" : "Resume" }), audience === "public" && (_jsx("button", { type: "button", onClick: () => void handleResetLink(), disabled: isRotating, className: cn("rounded px-2 py-1 text-xs font-medium", "text-foreground hover:bg-accent-hover", "focus:outline-none focus:ring-1 focus:ring-ring", "disabled:pointer-events-none disabled:opacity-50"), children: isRotating ? "Resetting…" : "Reset link" }))] }), _jsx(PermissionGate, { resource: { kind: "agent_share", id }, relation: "can_delete", children: _jsx("button", { type: "button", onClick: () => onDeleteClick(share), className: cn("rounded px-2 py-1 text-xs font-medium", "text-destructive hover:bg-destructive-subtle", "focus:outline-none focus:ring-1 focus:ring-ring"), children: "Delete" }) })] }) })] }));
+}
+// ---------------------------------------------------------------------------
+// Empty state
+// ---------------------------------------------------------------------------
+function ShareEmptyState({ canCreate, onCreateClick, }) {
+    return (_jsx(EmptyState, { variant: "first-use", icon: _jsx(ShareIcon, { className: "size-10" }), title: "No shares yet", description: "A share gives this agent a hosted chat link you can send or embed — " +
+            "each share is its own channel with its own audience, embed origins, " +
+            "and tool credentials.", action: canCreate
+            ? { label: "Create share", onClick: onCreateClick, icon: _jsx(PlusIcon, {}) }
+            : undefined }));
+}
+// ---------------------------------------------------------------------------
+// Non-happy states + icons
+// ---------------------------------------------------------------------------
+function LoadingSkeleton() {
+    return (_jsx("div", { className: "space-y-2 py-4", children: [1, 2, 3].map((i) => (_jsx("div", { className: "h-12 animate-pulse rounded-md bg-muted-faint" }, i))) }));
+}
+function PlusIcon() {
+    return (_jsx("svg", { width: "12", height: "12", viewBox: "0 0 12 12", fill: "none", "aria-hidden": "true", children: _jsx("path", { d: "M6 2v8M2 6h8", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round" }) }));
+}
+function CopyIcon() {
+    return (_jsxs("svg", { width: "12", height: "12", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [_jsx("rect", { x: "5.5", y: "5.5", width: "8", height: "8", rx: "1.5" }), _jsx("path", { d: "M10.5 5.5v-2a1 1 0 0 0-1-1h-6a1 1 0 0 0-1 1v6a1 1 0 0 0 1 1h2" })] }));
+}
+function ShareIcon({ className }) {
+    return (_jsxs("svg", { className: className, viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [_jsx("circle", { cx: "4", cy: "8", r: "2" }), _jsx("circle", { cx: "12", cy: "4", r: "2" }), _jsx("circle", { cx: "12", cy: "12", r: "2" }), _jsx("path", { d: "m5.8 7.1 4.4-2.2M5.8 8.9l4.4 2.2" })] }));
+}
+//# sourceMappingURL=AgentShareList.js.map

package/sharing/AgentShareList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentShareList.js","sourceRoot":"","sources":["../../src/sharing/AgentShareList.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EACL,eAAe,EACf,QAAQ,EACR,cAAc,GACf,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAyBhC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,cAAc,CAAC,EAC7B,KAAK,EACL,SAAS,EACT,aAAa,EACb,SAAS,GACW;IACpB,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IACzC,qEAAqE;IACrE,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,cAAc,CAC1D,OAAO,EACP,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CACzC,CAAC;IACF,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,sBAAsB,CAC7D,KAAK,EACL,SAAS,CACV,CAAC;IACF,MAAM,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAC9C,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,GAC1D,gBAAgB,EAAE,CAAC;IAErB,sEAAsE;IACtE,0CAA0C;IAC1C,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAIlC,IAAI,CAAC,CAAC;IAER,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,KAAiB,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC;YAC9B,KAAK,EAAE,eAAe;YACtB,WAAW,EACT,kBAAkB,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,IAAI,iBAAiB;gBAC9D,kEAAkE;gBAClE,kEAAkE;gBAClE,oEAAoE;YACtE,YAAY,EAAE,QAAQ;YACtB,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAChC,CAAC;IAEF,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,KAAC,eAAe,KAAG,CAAC;IAC7B,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CACL,cAAK,SAAS,EAAC,2CAA2C,sCAEpD,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,aACvC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACrB,KAAC,eAAe,IACd,SAAS,EAAE,SAAS,EACpB,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,GAClD,CACH,CAAC,CAAC,CAAC,CACF,8BACE,eAAK,SAAS,EAAC,mCAAmC,aAChD,cAAI,SAAS,EAAC,qCAAqC,aAChD,MAAM,CAAC,MAAM,OAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IACtD,EACJ,SAAS,IAAI,CACZ,KAAC,MAAM,IACL,OAAO,EAAC,SAAS,EACjB,IAAI,EAAC,IAAI,EACT,IAAI,EAAE,KAAC,QAAQ,KAAG,EAClB,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,6BAGrC,CACV,IACG,EAEN,cAAK,SAAS,EAAC,iDAAiD,YAC9D,iBAAO,SAAS,EAAC,gBAAgB,aAC/B,0BACE,cAAI,SAAS,EAAC,wCAAwC,aACpD,aAAI,SAAS,EAAC,uDAAuD,qBAAU,EAC/E,aAAI,SAAS,EAAC,uDAAuD,qBAAU,EAC/E,aAAI,SAAS,EAAC,uDAAuD,yBAAc,EACnF,aAAI,SAAS,EAAC,uDAAuD,uBAAY,EACjF,aAAI,SAAS,EAAC,wDAAwD,wBAAa,IAChF,GACC,EACR,gBAAO,SAAS,EAAC,wBAAwB,YACtC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACrB,KAAC,QAAQ,IAEP,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,KAAK,EACZ,aAAa,EAAE,aAAa,EAC5B,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EACzD,aAAa,EAAE,YAAY,EAC3B,OAAO,EAAE,OAAO,IANX,KAAK,CAAC,QAAQ,EAAE,EAAE,CAOvB,CACH,CAAC,GACI,IACF,GACJ,IACL,CACJ,EAEA,MAAM,IAAI,CACT,KAAC,gBAAgB,IACf,IAAI,QACJ,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;oBACrB,IAAI,CAAC,IAAI;wBAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC,EACD,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EACxD,QAAQ,EAAE,QAAQ,EAClB,aAAa,EAAE,aAAa,EAC5B,gBAAgB,EAAE,OAAO,GACzB,CACH,EAED,KAAC,aAAa,IACZ,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,aAAa,EACxB,QAAQ,EAAE,YAAY,GACtB,IACE,CACP,CAAC;AACJ,CAAC;AAeD,SAAS,QAAQ,CAAC,EAChB,KAAK,EACL,KAAK,EACL,aAAa,EACb,WAAW,EACX,aAAa,EACb,OAAO,GACO;IACd,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC5B,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC;IAC7C,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAEvD,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAE1E,gEAAgE;IAChE,qEAAqE;IACrE,yDAAyD;IACzD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE;QACpB,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QACpE,OAAO,QAAQ,KAAK,KAAK;YACvB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;QACtC,KAAK,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpB,iEAAiE;IACjE,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,mBAAmB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;YACnE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YAC1D,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpC,MAAM,eAAe,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,eAAe,EAAE,CAAC;YACxB,KAAK,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;YAC3D,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAE/B,OAAO,CACL,cACE,SAAS,EAAC,wDAAwD,EAClE,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,aAEjC,aAAI,SAAS,EAAC,aAAa,YACzB,eAAK,SAAS,EAAC,yBAAyB,aACtC,eAAM,SAAS,EAAC,6BAA6B,YAC1C,IAAI,EAAE,IAAI,IAAI,IAAI,IAAI,QAAQ,GAC1B,EACN,UAAU,IAAI,CACb,eACE,SAAS,EAAE,EAAE,CACX,mDAAmD,EACnD,mDAAmD,EACnD,qDAAqD,CACtD,EACD,KAAK,EAAE,uBAAuB,GAAG,wBAAwB,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,0BAGzE,CACR,IACG,GACH,EAEL,aAAI,SAAS,EAAC,aAAa,EAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,YAC7D,eAAK,SAAS,EAAC,2BAA2B,aACxC,eACE,SAAS,EAAC,2DAA2D,EACrE,KAAK,EAAE,WAAW,YAEjB,WAAW,GACP,EACP,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,cAAc,gBACX,iBAAiB,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,EACjD,SAAS,EAAE,EAAE,CACX,mCAAmC,EACnC,6CAA6C,EAC7C,iDAAiD,CAClD,YAED,KAAC,QAAQ,KAAG,GACL,IACL,GACH,EAEL,aAAI,SAAS,EAAC,aAAa,YACzB,eAAM,SAAS,EAAC,+BAA+B,YAC5C,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,GACzC,GACJ,EAEL,aAAI,SAAS,EAAC,aAAa,YACzB,gBACE,SAAS,EAAE,EAAE,CACX,0CAA0C,EAC1C,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,uBAAuB,CACtD,aAED,8BACc,MAAM,EAClB,SAAS,EAAE,EAAE,CACX,uBAAuB,EACvB,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAC/C,GACD,EACD,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IACzB,GACJ,EAEL,aAAI,SAAS,EAAC,wBAAwB,EAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,YACxE,eAAK,SAAS,EAAC,qCAAqC,aAClD,MAAC,cAAc,IAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAC,UAAU,aACxE,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,EACjC,SAAS,EAAE,EAAE,CACX,uCAAuC,EACvC,uCAAuC,EACvC,iDAAiD,CAClD,qBAGM,EACT,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,mBAAmB,EAAE,EACzC,QAAQ,EAAE,SAAS,EACnB,SAAS,EAAE,EAAE,CACX,uCAAuC,EACvC,uCAAuC,EACvC,iDAAiD,EACjD,kDAAkD,CACnD,YAEA,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GACtB,EACR,QAAQ,KAAK,QAAQ,IAAI,CACxB,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,eAAe,EAAE,EACrC,QAAQ,EAAE,UAAU,EACpB,SAAS,EAAE,EAAE,CACX,uCAAuC,EACvC,uCAAuC,EACvC,iDAAiD,EACjD,kDAAkD,CACnD,YAEA,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,GAClC,CACV,IACc,EACjB,KAAC,cAAc,IAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAC,YAAY,YAC1E,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EACnC,SAAS,EAAE,EAAE,CACX,uCAAuC,EACvC,8CAA8C,EAC9C,iDAAiD,CAClD,uBAGM,GACM,IACb,GACH,IACF,CACN,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,SAAS,eAAe,CAAC,EACvB,SAAS,EACT,aAAa,GAId;IACC,OAAO,CACL,KAAC,UAAU,IACT,OAAO,EAAC,WAAW,EACnB,IAAI,EAAE,KAAC,SAAS,IAAC,SAAS,EAAC,SAAS,GAAG,EACvC,KAAK,EAAC,eAAe,EACrB,WAAW,EACT,sEAAsE;YACtE,sEAAsE;YACtE,uBAAuB,EAEzB,MAAM,EACJ,SAAS;YACP,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,KAAC,QAAQ,KAAG,EAAE;YACvE,CAAC,CAAC,SAAS,GAEf,CACH,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,SAAS,eAAe;IACtB,OAAO,CACL,cAAK,SAAS,EAAC,gBAAgB,YAC5B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACpB,cAAa,SAAS,EAAC,8CAA8C,IAA3D,CAAC,CAA6D,CACzE,CAAC,GACE,CACP,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CACL,cAAK,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,iBAAa,MAAM,YAC5E,eAAM,CAAC,EAAC,cAAc,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,KAAK,EAAC,aAAa,EAAC,OAAO,GAAG,GACnF,CACP,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CACL,eAAK,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,KAAK,EAAC,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,iBAAa,MAAM,aACjK,eAAM,CAAC,EAAC,KAAK,EAAC,CAAC,EAAC,KAAK,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,EAAE,EAAC,KAAK,GAAG,EACtD,eAAM,CAAC,EAAC,+DAA+D,GAAG,IACtE,CACP,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,EAAE,SAAS,EAAmC;IAC/D,OAAO,CACL,eACE,SAAS,EAAE,SAAS,EACpB,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,KAAK,EACjB,aAAa,EAAC,OAAO,EACrB,cAAc,EAAC,OAAO,iBACV,MAAM,aAElB,iBAAQ,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,EAAC,CAAC,EAAC,GAAG,GAAG,EAC9B,iBAAQ,EAAE,EAAC,IAAI,EAAC,EAAE,EAAC,GAAG,EAAC,CAAC,EAAC,GAAG,GAAG,EAC/B,iBAAQ,EAAE,EAAC,IAAI,EAAC,EAAE,EAAC,IAAI,EAAC,CAAC,EAAC,GAAG,GAAG,EAChC,eAAM,CAAC,EAAC,kCAAkC,GAAG,IACzC,CACP,CAAC;AACJ,CAAC"}

package/sharing/ShareAgentDialog.d.ts

@@ -1,4 +1,5 @@
 import type { Agent } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import type { AgentShare } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/api_pb";
 /** Props for {@link ShareAgentDialog}. */
 export interface ShareAgentDialogProps {
     /** Whether the dialog is open. */
@@ -7,6 +8,24 @@ export interface ShareAgentDialogProps {
     readonly onOpenChange: (open: boolean) => void;
     /** The agent whose sharing is managed. */
     readonly agent: Agent;
+    /**
+     * The exact share to edit. When omitted, the dialog opens in **create
+     * mode**: a name/slug step creates a new share in `shareOrg`, then the
+     * dialog becomes its editor. The share's identity is immutable once
+     * created (decision 011 D2) — edit mode never renames.
+     */
+    readonly share?: AgentShare | null;
+    /**
+     * The org that owns (and pays for) a share created by this dialog.
+     * Defaults to the agent's own org — the owner's channel. Pass the
+     * viewer's org to create a **cross-org share** of another org's
+     * marketplace-public agent (decision 013): the share, its billing,
+     * its credentials, and its hosted URL all belong to this org, while
+     * the agent stays live in its own. Cross-org shares are
+     * public-audience only, so the audience selector is hidden in that
+     * mode. Ignored in edit mode — an existing share knows its org.
+     */
+    readonly shareOrg?: string;
     /**
      * Builds the absolute public chat URL for the shared agent. The host
      * application owns URL construction (its configured public origin may
@@ -16,19 +35,9 @@ export interface ShareAgentDialogProps {
     readonly buildShareUrl?: (org: string, slug: string) => string;
     /**
      * Called after any sharing change is persisted. Hosts typically pass
-     * the agent data hook's `refetch`.
+     * the share list's `refetch`.
      */
     readonly onSharingChanged?: () => void;
-    /**
-     * The org that owns (and pays for) the share. Defaults to the agent's
-     * own org — the owner's channel. Pass the viewer's org to manage a
-     * **cross-org share** of another org's marketplace-public agent
-     * (decision 013): the share, its billing, its credentials, and its
-     * hosted URL all belong to this org, while the agent stays live in its
-     * own. Cross-org shares are public-audience only, so the audience
-     * selector is hidden in that mode.
-     */
-    readonly shareOrg?: string;
     /**
      * When `false`, renders as an in-flow open dialog instead of a
      * top-layer modal — no `showModal()`, no backdrop, no focus trap.
@@ -39,29 +48,33 @@ export interface ShareAgentDialogProps {
     readonly modal?: boolean;
 }
 /**
- * The Share dialog for an agent: toggle sharing, copy the hosted chat
- * link, copy an embeddable snippet, manage allowed embed origins, bind
- * tool credentials for visitors, customize visitor refusal messages,
- * and discover the PlatformClient SDK path.
+ * The Share dialog for one agent share: create it (name/slug step), then
+ * toggle serving, copy the hosted chat link, copy an embeddable snippet,
+ * manage allowed embed origins, bind tool credentials for visitors,
+ * customize visitor refusal messages, and discover the PlatformClient
+ * SDK path.
  *
  * Sharing is a distinct consent from marketplace visibility: visibility
  * governs who can *read* the blueprint; sharing governs who can *chat*
- * with the running agent — billed to the owning org. The dialog states
- * who pays next to the toggle so enabling sharing never surprises.
+ * with the running agent — billed to the org that owns the share. The
+ * dialog states who pays before creation and next to the toggle, so
+ * sharing never surprises.
  *
- * Sharing lives in its own **AgentShare resource** (decision 011), so
- * the dialog loads the agent's canonical share when it opens and every
- * save is an idempotent `apply` of the complete configuration — the
- * first enable creates the share, later edits update it, one code path
- * (see {@link useSaveAgentShare}). The local draft is refreshed from
- * every returned share, so the dialog never drifts from the server.
+ * Sharing lives in its own **AgentShare resource** (decision 011), and
+ * an agent can carry N shares — each its own channel with its own URL,
+ * audience, origins, credentials, and link token (D3). The dialog edits
+ * exactly the share it is given; it never resolves "the" share of an
+ * agent. Every save is an idempotent `apply` of the complete
+ * configuration ({@link useSaveAgentShare}), and the local draft is
+ * refreshed from every returned share, so the dialog never drifts from
+ * the server.
  *
  * Built on the native `<dialog>` element for focus trapping and escape
  * handling, matching the SDK's modal convention ({@link ManageAccessDialog}).
  * All visual properties flow through `--stgm-*` design tokens.
  *
- * Most hosts mount it via {@link useShareAgent} (a kebab-menu action).
+ * Most hosts mount it via {@link AgentShareList} (the Shares tab).
  * Render it directly only when you own the open-state.
  */
-export declare function ShareAgentDialog({ open, onOpenChange, agent, buildShareUrl, onSharingChanged, shareOrg, modal, }: ShareAgentDialogProps): import("react/jsx-runtime").JSX.Element;
+export declare function ShareAgentDialog({ open, onOpenChange, agent, share, shareOrg, buildShareUrl, onSharingChanged, modal, }: ShareAgentDialogProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=ShareAgentDialog.d.ts.map

package/sharing/ShareAgentDialog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ShareAgentDialog.d.ts","sourceRoot":"","sources":["../../src/sharing/ShareAgentDialog.tsx"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAkChF,0CAA0C;AAC1C,MAAM,WAAW,qBAAqB;IACpC,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,mDAAmD;IACnD,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/D;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IACvC;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,IAAI,EACJ,YAAY,EACZ,KAAK,EACL,aAAa,EACb,gBAAgB,EAChB,QAAQ,EACR,KAAY,GACb,EAAE,qBAAqB,2CAiDvB"}
+{"version":3,"file":"ShareAgentDialog.d.ts","sourceRoot":"","sources":["../../src/sharing/ShareAgentDialog.tsx"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yDAAyD,CAAC;AAmC1F,0CAA0C;AAC1C,MAAM,WAAW,qBAAqB;IACpC,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,mDAAmD;IACnD,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IACnC;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/D;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IACvC;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,IAAI,EACJ,YAAY,EACZ,KAAK,EACL,KAAK,EACL,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,KAAY,GACb,EAAE,qBAAqB,2CAkDvB"}

package/sharing/ShareAgentDialog.js

@@ -2,8 +2,10 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useCallback, useMemo, useRef, useState } from "react";
 import { cn } from "@stigmer/theme";
-import { MAX_ALLOWED_ORIGINS, appendLinkToken, buildEmbedSnippet, chatPath, getUserMessage, validateOrigin, } from "@stigmer/sdk";
+import { MAX_ALLOWED_ORIGINS, StigmerError, appendLinkToken, buildEmbedSnippet, chatPath, getUserMessage, validateOrigin, } from "@stigmer/sdk";
+import { create as createMessage } from "@bufbuild/protobuf";
 import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
+import { ApiResourceMetadataSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/metadata_pb";
 import { Switch } from "../switch/Switch.js";
 import { Tabs } from "../tabs/Tabs.js";
 import { toast } from "../feedback/toast.js";
@@ -12,8 +14,9 @@ import { useDeploymentMode } from "../deployment-mode.js";
 import { useBillingAccount } from "../billing/useBillingAccount.js";
 import { formatCreditBalance } from "../billing/format.js";
 import { EnvironmentPicker } from "../environment/EnvironmentPicker.js";
-import { useAgentShare } from "./useAgentShare.js";
-import { sharingAudienceFromProto, useSaveAgentShare, } from "./useSaveAgentShare.js";
+import { generateSlug } from "../internal/slug.js";
+import { getFieldError, validateMessage } from "../internal/validate.js";
+import { draftFromShare, useSaveAgentShare, } from "./useSaveAgentShare.js";
 import { useRotateShareLink } from "./useRotateShareLink.js";
 import { useShareToolReadiness } from "./useShareToolReadiness.js";
 /** Maximum length of each visitor message (proto: `string.max_len = 300`). */
@@ -25,31 +28,35 @@ const SHARE_TABS = [
 ];
 const PLATFORM_CLIENT_DOCS_URL = "https://docs.stigmer.ai/guides/authentication/platform-client/overview";
 /**
- * The Share dialog for an agent: toggle sharing, copy the hosted chat
- * link, copy an embeddable snippet, manage allowed embed origins, bind
- * tool credentials for visitors, customize visitor refusal messages,
- * and discover the PlatformClient SDK path.
+ * The Share dialog for one agent share: create it (name/slug step), then
+ * toggle serving, copy the hosted chat link, copy an embeddable snippet,
+ * manage allowed embed origins, bind tool credentials for visitors,
+ * customize visitor refusal messages, and discover the PlatformClient
+ * SDK path.
  *
  * Sharing is a distinct consent from marketplace visibility: visibility
  * governs who can *read* the blueprint; sharing governs who can *chat*
- * with the running agent — billed to the owning org. The dialog states
- * who pays next to the toggle so enabling sharing never surprises.
+ * with the running agent — billed to the org that owns the share. The
+ * dialog states who pays before creation and next to the toggle, so
+ * sharing never surprises.
  *
- * Sharing lives in its own **AgentShare resource** (decision 011), so
- * the dialog loads the agent's canonical share when it opens and every
- * save is an idempotent `apply` of the complete configuration — the
- * first enable creates the share, later edits update it, one code path
- * (see {@link useSaveAgentShare}). The local draft is refreshed from
- * every returned share, so the dialog never drifts from the server.
+ * Sharing lives in its own **AgentShare resource** (decision 011), and
+ * an agent can carry N shares — each its own channel with its own URL,
+ * audience, origins, credentials, and link token (D3). The dialog edits
+ * exactly the share it is given; it never resolves "the" share of an
+ * agent. Every save is an idempotent `apply` of the complete
+ * configuration ({@link useSaveAgentShare}), and the local draft is
+ * refreshed from every returned share, so the dialog never drifts from
+ * the server.
  *
  * Built on the native `<dialog>` element for focus trapping and escape
  * handling, matching the SDK's modal convention ({@link ManageAccessDialog}).
  * All visual properties flow through `--stgm-*` design tokens.
  *
- * Most hosts mount it via {@link useShareAgent} (a kebab-menu action).
+ * Most hosts mount it via {@link AgentShareList} (the Shares tab).
  * Render it directly only when you own the open-state.
  */
-export function ShareAgentDialog({ open, onOpenChange, agent, buildShareUrl, onSharingChanged, shareOrg, modal = true, }) {
+export function ShareAgentDialog({ open, onOpenChange, agent, share, shareOrg, buildShareUrl, onSharingChanged, modal = true, }) {
     const dialogRef = useRef(null);
     const handleClose = useCallback(() => {
         dialogRef.current?.close();
@@ -72,68 +79,130 @@ export function ShareAgentDialog({ open, onOpenChange, agent, buildShareUrl, onS
             dialogRef.current.close();
         }
     }
-    return (_jsx("dialog", { ref: dialogRef, open: modal ? undefined : open, onClose: handleClose, className: cn("w-full max-w-lg rounded-xl border border-border bg-popover p-0 shadow-xl", modal ? "fixed inset-0 m-auto backdrop:bg-black/50" : "relative"), "aria-labelledby": "share-agent-title", children: open && (_jsx(ShareAgentDialogBody, { agent: agent, buildShareUrl: buildShareUrl, onSharingChanged: onSharingChanged, shareOrg: shareOrg, onClose: handleClose })) }));
+    return (_jsx("dialog", { ref: dialogRef, open: modal ? undefined : open, onClose: handleClose, className: cn("w-full max-w-lg rounded-xl border border-border bg-popover p-0 shadow-xl", modal ? "fixed inset-0 m-auto backdrop:bg-black/50" : "relative"), "aria-labelledby": "share-agent-title", children: open && (_jsx(ShareAgentDialogBody, { agent: agent, share: share ?? null, shareOrg: shareOrg, buildShareUrl: buildShareUrl, onSharingChanged: onSharingChanged, onClose: handleClose })) }));
 }
 // ---------------------------------------------------------------------------
-// Dialog body — resolves the canonical share, then hands off to the form
+// Dialog body — create step or editor, depending on the share it was given
 // ---------------------------------------------------------------------------
 /**
- * Loads the agent's canonical share and mounts the form once resolved.
- * The split keeps the form's draft seeding synchronous (`useState`
- * initializer from the loaded share) — no hydrate-on-effect, no window
- * where the switch shows a state the server never had.
+ * Renders the create step (no share yet) or the editor (share in hand).
+ * A share persisted by the create step is adopted locally, so one dialog
+ * session flows create → edit without remounting — and the editor's
+ * draft seeding stays synchronous (`useState` initializer from the
+ * share): no hydrate-on-effect, no window where the switch shows a state
+ * the server never had.
  */
-function ShareAgentDialogBody({ agent, buildShareUrl, onSharingChanged, shareOrg, onClose, }) {
-    const { share, isLoading, error, refetch } = useAgentShare(agent, shareOrg);
-    const isCrossOrg = !!shareOrg && shareOrg !== (agent.metadata?.org ?? "");
-    return (_jsxs("div", { className: "flex flex-col", children: [_jsxs("div", { className: "flex items-start justify-between border-b border-border px-6 py-4", children: [_jsxs("div", { className: "min-w-0", children: [_jsx("h2", { id: "share-agent-title", className: "text-base font-semibold text-foreground", children: "Share" }), _jsx("p", { className: "mt-0.5 truncate text-xs text-muted-foreground", children: isCrossOrg
+function ShareAgentDialogBody({ agent, share, shareOrg, buildShareUrl, onSharingChanged, onClose, }) {
+    const [created, setCreated] = useState(null);
+    const activeShare = share ?? created;
+    const isCreating = activeShare === null;
+    const resolvedShareOrg = activeShare?.metadata?.org || shareOrg || (agent.metadata?.org ?? "");
+    const isCrossOrg = resolvedShareOrg !== (agent.metadata?.org ?? "");
+    return (_jsxs("div", { className: "flex flex-col", children: [_jsxs("div", { className: "flex items-start justify-between border-b border-border px-6 py-4", children: [_jsxs("div", { className: "min-w-0", children: [_jsx("h2", { id: "share-agent-title", className: "text-base font-semibold text-foreground", children: isCreating ? "Create share" : "Share" }), _jsx("p", { className: "mt-0.5 truncate text-xs text-muted-foreground", children: isCrossOrg
                                     ? `${agent.metadata?.org}/${agent.metadata?.slug}`
-                                    : agent.metadata?.name || agent.metadata?.slug })] }), _jsx("button", { type: "button", onClick: onClose, "aria-label": "Close", className: cn("rounded-md p-1 text-muted-foreground", "hover:text-foreground hover:bg-accent-hover", "focus:outline-none focus:ring-2 focus:ring-ring"), children: _jsx(CloseIcon, {}) })] }), isLoading ? (_jsxs("div", { className: "px-6 py-10 text-center", "aria-busy": "true", "aria-label": "Loading sharing settings", children: [_jsx("div", { className: "mx-auto h-4 w-2/3 animate-pulse rounded bg-muted" }), _jsx("div", { className: "mx-auto mt-2 h-3 w-1/2 animate-pulse rounded bg-muted" })] })) : error ? (_jsxs("div", { className: "px-6 py-8 text-center", role: "alert", children: [_jsx("p", { className: "text-sm text-foreground", children: "Couldn't load this agent's sharing settings." }), _jsx("p", { className: "mt-1 text-xs text-muted-foreground", children: getUserMessage(error) }), _jsx("button", { type: "button", onClick: refetch, className: cn("mt-3 rounded-md px-3 py-1.5 text-xs font-medium", "border border-border text-foreground hover:bg-accent-hover", "focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"), children: "Try again" })] })) : (_jsx(ShareAgentForm, { agent: agent, initialShare: share, buildShareUrl: buildShareUrl, onSharingChanged: onSharingChanged, shareOrg: shareOrg })), _jsx("div", { className: "flex items-center justify-end border-t border-border px-6 py-3", children: _jsx("button", { type: "button", onClick: onClose, className: cn("rounded-md px-3 py-1.5 text-sm font-medium", "bg-primary text-primary-foreground hover:bg-primary-hover", "focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2"), children: "Done" }) })] }));
+                                    : agent.metadata?.name || agent.metadata?.slug })] }), _jsx("button", { type: "button", onClick: onClose, "aria-label": "Close", className: cn("rounded-md p-1 text-muted-foreground", "hover:text-foreground hover:bg-accent-hover", "focus:outline-none focus:ring-2 focus:ring-ring"), children: _jsx(CloseIcon, {}) })] }), isCreating ? (_jsx(CreateShareForm, { agent: agent, shareOrg: resolvedShareOrg, onCreated: (persisted) => {
+                    setCreated(persisted);
+                    onSharingChanged?.();
+                } })) : (_jsx(ShareAgentForm, { agent: agent, initialShare: activeShare, buildShareUrl: buildShareUrl, onSharingChanged: onSharingChanged })), _jsx("div", { className: "flex items-center justify-end border-t border-border px-6 py-3", children: _jsx("button", { type: "button", onClick: onClose, className: cn("rounded-md px-3 py-1.5 text-sm font-medium", isCreating
+                        ? "border border-border text-foreground hover:bg-accent-hover"
+                        : "bg-primary text-primary-foreground hover:bg-primary-hover", "focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2"), children: isCreating ? "Cancel" : "Done" }) })] }));
 }
 // ---------------------------------------------------------------------------
-// Form — owns the share draft for the session
+// Create step — the new share's identity and cost, before any channel exists
 // ---------------------------------------------------------------------------
 /**
- * The dialog's editable projection of a share. `null` (never shared)
- * seeds the same defaults the server would apply on first create, so
- * the form needs no "no share yet" special case beyond the disabled
- * copy fields that `enabled: false` already produces.
+ * Names the new share and creates it live (`enabled: true`, public
+ * audience — the server's own defaults). Identity is set here because it
+ * is immutable afterward (decision 011 D2): the slug becomes the hosted
+ * URL `/chat/<org>/<slug>` in the sharing org's namespace.
+ *
+ * The slug auto-derives from the name until the user edits it (the
+ * {@link CreateOrganizationForm} pattern), validated by the same
+ * protovalidate rules the server enforces. An `(org, slug)` collision —
+ * the server's ALREADY_EXISTS — surfaces inline on the slug field with a
+ * pick-another-slug remedy instead of a generic failure toast.
  */
-function draftFromShare(share) {
-    const spec = share?.spec;
-    return {
-        enabled: spec?.enabled ?? false,
-        audience: sharingAudienceFromProto(spec?.audience),
-        allowedOrigins: spec?.allowedOrigins ?? [],
-        messages: {
-            rateLimited: spec?.messages?.rateLimited ?? "",
-            unavailable: spec?.messages?.unavailable ?? "",
-            conversationEnded: spec?.messages?.conversationEnded ?? "",
-        },
-        environmentRefs: (spec?.environmentRefs ?? []).map((ref) => ({
-            org: ref.org,
-            slug: ref.slug,
-        })),
-    };
+function CreateShareForm({ agent, shareOrg, onCreated, }) {
+    const agentName = agent.metadata?.name || (agent.metadata?.slug ?? "");
+    const isCrossOrg = shareOrg !== (agent.metadata?.org ?? "");
+    const [name, setName] = useState(agentName);
+    const [slug, setSlug] = useState(agent.metadata?.slug ?? "");
+    // Once the user manually edits the slug field, stop auto-deriving.
+    const slugTouchedRef = useRef(false);
+    // A server-side (org, slug) collision pins to the slug field until the
+    // slug changes — the remedy is picking another slug.
+    const [collisionError, setCollisionError] = useState(null);
+    const [submitError, setSubmitError] = useState(null);
+    const { save, isPending } = useSaveAgentShare(agent, shareOrg);
+    const trimmedName = name.trim();
+    const violations = slug.length > 0 || trimmedName.length > 0
+        ? validateMessage(ApiResourceMetadataSchema, createMessage(ApiResourceMetadataSchema, {
+            ...(slug.length > 0 && { slug }),
+            ...(trimmedName.length > 0 && { name: trimmedName }),
+        }))
+        : [];
+    const slugError = collisionError ?? (slug.length > 0 ? getFieldError(violations, "slug") : null);
+    const nameError = trimmedName.length > 0 ? getFieldError(violations, "name") : null;
+    const canSubmit = trimmedName !== "" && slug.length > 0 && slugError === null &&
+        nameError === null && !isPending;
+    const handleNameChange = useCallback((value) => {
+        setName(value);
+        if (!slugTouchedRef.current) {
+            setSlug(generateSlug(value.trim()));
+            setCollisionError(null);
+        }
+    }, []);
+    const handleSlugChange = useCallback((value) => {
+        slugTouchedRef.current = true;
+        setSlug(value);
+        setCollisionError(null);
+    }, []);
+    const handleSubmit = useCallback(async (e) => {
+        e.preventDefault();
+        if (!canSubmit)
+            return;
+        setSubmitError(null);
+        try {
+            const persisted = await save(
+            // The server's create defaults, made explicit: live from the
+            // start (the user's one intent-click is "share it"), public
+            // audience, nothing else configured yet.
+            { ...draftFromShare(null), enabled: true }, null, { name: trimmedName, slug });
+            if (persisted) {
+                toast.success("Share created — the link is live");
+                onCreated(persisted);
+            }
+        }
+        catch (err) {
+            if (err instanceof StigmerError && err.code === "already-exists") {
+                setCollisionError(`"${slug}" is already used by another share or resource in ${shareOrg} — pick a different slug`);
+            }
+            else {
+                // e.g. the cross-org FAILED_PRECONDITION naming non-public
+                // dependencies (decision 013 D5) — show the server's words.
+                setSubmitError(getUserMessage(err));
+            }
+        }
+    }, [canSubmit, save, trimmedName, slug, shareOrg, onCreated]);
+    return (_jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col gap-4 px-6 py-4", children: [_jsxs("p", { className: "text-xs text-muted-foreground", children: ["A share is its own channel to this agent: a hosted chat link with its own audience, embed origins, tool credentials, and visitor messages.", " ", isCrossOrg && (_jsxs(_Fragment, { children: ["This one lives in your organization", " ", _jsx("span", { className: "font-medium", children: shareOrg }), " while the agent stays in ", _jsx("span", { className: "font-medium", children: agent.metadata?.org }), " ", "\u2014 updates to the agent apply live.", " "] })), "Visitors chat on ", _jsx("span", { className: "font-medium", children: shareOrg }), "'s credits."] }), _jsxs("div", { className: "space-y-1", children: [_jsx("label", { htmlFor: "stgm-new-share-name", className: "text-xs font-medium text-foreground", children: "Name" }), _jsx("input", { id: "stgm-new-share-name", type: "text", value: name, onChange: (e) => handleNameChange(e.target.value), disabled: isPending, required: true, maxLength: 63, className: cn("w-full rounded-md border bg-input-bg px-2.5 py-1.5 text-xs text-foreground", "placeholder:text-muted-foreground", "focus:outline-none focus:ring-2 focus:ring-ring", "disabled:pointer-events-none disabled:opacity-50", nameError ? "border-destructive" : "border-border") }), nameError ? (_jsx("p", { className: "text-[0.65rem] text-destructive", role: "alert", children: nameError })) : (_jsx("p", { className: "text-[0.65rem] text-muted-foreground", children: "A display name for this share \u2014 e.g. the site or campaign it serves." }))] }), _jsxs("div", { className: "space-y-1", children: [_jsx("label", { htmlFor: "stgm-new-share-slug", className: "text-xs font-medium text-foreground", children: "Slug" }), _jsx("input", { id: "stgm-new-share-slug", type: "text", value: slug, onChange: (e) => handleSlugChange(e.target.value), disabled: isPending, required: true, className: cn("w-full rounded-md border bg-input-bg px-2.5 py-1.5 font-mono text-xs text-foreground", "placeholder:text-muted-foreground", "focus:outline-none focus:ring-2 focus:ring-ring", "disabled:pointer-events-none disabled:opacity-50", slugError ? "border-destructive" : "border-border") }), slugError ? (_jsx("p", { className: "text-[0.65rem] text-destructive", role: "alert", children: slugError })) : (_jsxs("p", { className: "text-[0.65rem] text-muted-foreground", children: ["Becomes the share's address:", " ", _jsxs("code", { className: "font-mono", children: ["/chat/", shareOrg, "/", slug || "…"] }), ". Can't be changed later."] }))] }), submitError && (_jsx("p", { className: "text-xs text-destructive", role: "alert", children: submitError })), _jsx("div", { className: "flex items-center justify-end", children: _jsx("button", { type: "submit", disabled: !canSubmit, className: cn("rounded-md px-3 py-1.5 text-sm font-medium", "bg-primary text-primary-foreground hover:bg-primary-hover", "focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2", "disabled:pointer-events-none disabled:opacity-50"), children: isPending ? "Creating…" : "Create share" }) })] }));
 }
-function ShareAgentForm({ agent, initialShare, buildShareUrl, onSharingChanged, shareOrg, }) {
+// ---------------------------------------------------------------------------
+// Form — owns the share draft for the session
+// ---------------------------------------------------------------------------
+function ShareAgentForm({ agent, initialShare, buildShareUrl, onSharingChanged, }) {
     const agentName = agent.metadata?.name || (agent.metadata?.slug ?? "");
     // The latest server share is the single baseline: the draft, the link
-    // token, and the share id for rotation all derive from it. `null`
-    // until the first save creates the share.
+    // token, and the share id for rotation all derive from it.
     const [share, setShare] = useState(initialShare);
     const [draft, setDraft] = useState(() => draftFromShare(initialShare));
     const [activeTab, setActiveTab] = useState("link");
-    const { save, isPending } = useSaveAgentShare(agent, shareOrg);
-    const { rotateShareLink, isPending: isRotating } = useRotateShareLink(share?.metadata?.id ?? null);
-    // The share's own org/slug form the hosted URL. Before the first save
-    // the sharing org + the agent's slug stand in — exactly the identity
-    // the server will assign on create (D2: share slug defaults to the
-    // agent's; the org is the channel owner's, which for a cross-org share
-    // is the viewer's org, not the agent's — decision 013).
-    const org = share?.metadata?.org || shareOrg || (agent.metadata?.org ?? "");
-    const slug = share?.metadata?.slug || (agent.metadata?.slug ?? "");
-    const linkToken = share?.status?.shareLinkToken ?? "";
+    const { save, isPending } = useSaveAgentShare(agent);
+    const { rotateShareLink, isPending: isRotating } = useRotateShareLink(share.metadata?.id ?? null);
+    // The share's own org/slug are the hosted URL — for a cross-org share
+    // (decision 013) that org is the sharing org's, not the agent's.
+    const org = share.metadata?.org ?? "";
+    const slug = share.metadata?.slug ?? "";
+    const linkToken = share.status?.shareLinkToken ?? "";
     // Cross-org shares are public-audience only (decision 013 D3) — the
     // audience selector disappears rather than offering a choice the
     // server would refuse.