@stigmer/react 3.1.7 → 3.1.8

package/sharing/useUpdateAgentSharing.d.ts

@@ -0,0 +1,86 @@
+import type { Agent } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import { AgentSharingAudience } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/spec_pb";
+/**
+ * Who can chat with a shared agent over its hosted link.
+ *
+ * - `"public"` — anyone with the link; visitors are anonymous guests.
+ * - `"org"` — signed-in members of the owning organization only.
+ *   Membership is checked on every conversation turn, so access ends the
+ *   moment a member leaves the org.
+ */
+export type SharingAudience = "public" | "org";
+/**
+ * A complete sharing configuration to persist.
+ *
+ * Every field is required by design: the `updateSharing` RPC **replaces**
+ * the agent's whole `spec.sharing` block, so a caller must always supply
+ * the full configuration. A partial type here would let a toggle change
+ * silently wipe `allowedOrigins`, `messages`, or the `audience` — the
+ * required shape makes that mistake unrepresentable.
+ */
+export interface AgentSharingDraft {
+    /** Whether hosted-chat access for the configured audience is enabled. */
+    readonly enabled: boolean;
+    /** Who can chat: anyone with the link, or org members only. */
+    readonly audience: SharingAudience;
+    /**
+     * Exact web origins allowed to embed the shared agent
+     * (e.g. `https://example.com`). Stored now; enforced by the embed
+     * widget's Origin check. Embedding is public-audience only.
+     */
+    readonly allowedOrigins: readonly string[];
+    /** Owner-customized visitor refusal copy. Empty strings mean platform defaults. */
+    readonly messages: {
+        /** Shown when a visitor exceeds the message rate limit. */
+        readonly rateLimited: string;
+        /** Shown when the org's credits are exhausted (sharing fails closed). */
+        readonly unavailable: string;
+        /** Shown when a conversation hits its turn limit or inactivity timeout. */
+        readonly conversationEnded: string;
+    };
+}
+/**
+ * Maps a proto {@link AgentSharingAudience} to the SDK's string union.
+ * Unspecified means public by contract (pre-audience shares keep their
+ * anyone-with-link behavior).
+ */
+export declare function sharingAudienceFromProto(audience: AgentSharingAudience | undefined): SharingAudience;
+/** Return value of {@link useUpdateAgentSharing}. */
+export interface UseUpdateAgentSharingReturn {
+    /**
+     * Persist the complete sharing configuration via the `updateSharing`
+     * RPC. Resolves with the updated agent.
+     */
+    readonly updateSharing: (draft: AgentSharingDraft) => Promise<Agent | undefined>;
+    /** `true` while the RPC is in flight. */
+    readonly isPending: boolean;
+    /** The last error from the RPC, or `null`. */
+    readonly error: Error | null;
+}
+/**
+ * Behavior hook that updates an agent's sharing configuration.
+ *
+ * Wraps the targeted `stigmer.agent.updateSharing()` RPC (authorized by
+ * `can_edit`) with loading and error state management. The hook is
+ * stateless with respect to the agent — the caller refreshes the resource
+ * after a successful update (e.g. via `refetch` from `useAgent`), matching
+ * the {@link useUpdateVisibility} convention.
+ *
+ * Pass `null` for `agentId` to produce a stable no-op (useful while the
+ * agent is still loading).
+ *
+ * @example
+ * ```tsx
+ * const { updateSharing, isPending } = useUpdateAgentSharing(agent.metadata.id);
+ *
+ * await updateSharing({
+ *   enabled: true,
+ *   audience: "public",
+ *   allowedOrigins: ["https://example.com"],
+ *   messages: { rateLimited: "", unavailable: "", conversationEnded: "" },
+ * });
+ * refetch();
+ * ```
+ */
+export declare function useUpdateAgentSharing(agentId: string | null): UseUpdateAgentSharingReturn;
+//# sourceMappingURL=useUpdateAgentSharing.d.ts.map

package/sharing/useUpdateAgentSharing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useUpdateAgentSharing.d.ts","sourceRoot":"","sources":["../../src/sharing/useUpdateAgentSharing.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAEhF,OAAO,EACL,oBAAoB,EAGrB,MAAM,qDAAqD,CAAC;AAI7D;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE/C;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,mFAAmF;IACnF,QAAQ,CAAC,QAAQ,EAAE;QACjB,2DAA2D;QAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,yEAAyE;QACzE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,2EAA2E;QAC3E,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;KACpC,CAAC;CACH;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,oBAAoB,GAAG,SAAS,GACzC,eAAe,CAEjB;AAQD,qDAAqD;AACrD,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC;IACjF,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,2BAA2B,CAsC7B"}

package/sharing/useUpdateAgentSharing.js

@@ -0,0 +1,81 @@
+"use client";
+import { useCallback, useState } from "react";
+import { create } from "@bufbuild/protobuf";
+import { UpdateAgentSharingInputSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/io_pb";
+import { AgentSharingAudience, AgentSharingSchema, AgentSharingMessagesSchema, } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/spec_pb";
+import { useStigmer } from "../hooks.js";
+import { toError } from "../internal/toError.js";
+/**
+ * Maps a proto {@link AgentSharingAudience} to the SDK's string union.
+ * Unspecified means public by contract (pre-audience shares keep their
+ * anyone-with-link behavior).
+ */
+export function sharingAudienceFromProto(audience) {
+    return audience === AgentSharingAudience.org ? "org" : "public";
+}
+function sharingAudienceToProto(audience) {
+    return audience === "org"
+        ? AgentSharingAudience.org
+        : AgentSharingAudience.public;
+}
+/**
+ * Behavior hook that updates an agent's sharing configuration.
+ *
+ * Wraps the targeted `stigmer.agent.updateSharing()` RPC (authorized by
+ * `can_edit`) with loading and error state management. The hook is
+ * stateless with respect to the agent — the caller refreshes the resource
+ * after a successful update (e.g. via `refetch` from `useAgent`), matching
+ * the {@link useUpdateVisibility} convention.
+ *
+ * Pass `null` for `agentId` to produce a stable no-op (useful while the
+ * agent is still loading).
+ *
+ * @example
+ * ```tsx
+ * const { updateSharing, isPending } = useUpdateAgentSharing(agent.metadata.id);
+ *
+ * await updateSharing({
+ *   enabled: true,
+ *   audience: "public",
+ *   allowedOrigins: ["https://example.com"],
+ *   messages: { rateLimited: "", unavailable: "", conversationEnded: "" },
+ * });
+ * refetch();
+ * ```
+ */
+export function useUpdateAgentSharing(agentId) {
+    const stigmer = useStigmer();
+    const [isPending, setIsPending] = useState(false);
+    const [error, setError] = useState(null);
+    const updateSharing = useCallback(async (draft) => {
+        if (!agentId)
+            return undefined;
+        setIsPending(true);
+        setError(null);
+        try {
+            const input = create(UpdateAgentSharingInputSchema, {
+                resourceId: agentId,
+                sharing: create(AgentSharingSchema, {
+                    enabled: draft.enabled,
+                    audience: sharingAudienceToProto(draft.audience),
+                    allowedOrigins: [...draft.allowedOrigins],
+                    messages: create(AgentSharingMessagesSchema, {
+                        rateLimited: draft.messages.rateLimited,
+                        unavailable: draft.messages.unavailable,
+                        conversationEnded: draft.messages.conversationEnded,
+                    }),
+                }),
+            });
+            return await stigmer.agent.updateSharing(input);
+        }
+        catch (err) {
+            setError(toError(err));
+            throw err;
+        }
+        finally {
+            setIsPending(false);
+        }
+    }, [agentId, stigmer]);
+    return { updateSharing, isPending, error };
+}
+//# sourceMappingURL=useUpdateAgentSharing.js.map

package/sharing/useUpdateAgentSharing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useUpdateAgentSharing.js","sourceRoot":"","sources":["../../src/sharing/useUpdateAgentSharing.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAClG,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AA2CjD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAA0C;IAE1C,OAAO,QAAQ,KAAK,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AAClE,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAyB;IACvD,OAAO,QAAQ,KAAK,KAAK;QACvB,CAAC,CAAC,oBAAoB,CAAC,GAAG;QAC1B,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAClC,CAAC;AAeD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAsB;IAEtB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,aAAa,GAAG,WAAW,CAC/B,KAAK,EAAE,KAAwB,EAA8B,EAAE;QAC7D,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,6BAA6B,EAAE;gBAClD,UAAU,EAAE,OAAO;gBACnB,OAAO,EAAE,MAAM,CAAC,kBAAkB,EAAE;oBAClC,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,QAAQ,EAAE,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC;oBAChD,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;oBACzC,QAAQ,EAAE,MAAM,CAAC,0BAA0B,EAAE;wBAC3C,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;wBACvC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;wBACvC,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,iBAAiB;qBACpD,CAAC;iBACH,CAAC;aACH,CAAC,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,OAAO,CAAC,CACnB,CAAC;IAEF,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC7C,CAAC"}

package/src/agent/AgentDetailView.tsx

@@ -17,6 +17,7 @@ import { agentToInput } from "./internal/agentToInput.js";
 import { ErrorMessage } from "../error/ErrorMessage.js";
 import { VisibilityBadge } from "../library/VisibilitySelector.js";
 import { useManageAccess } from "../access/useManageAccess.js";
+import { useShareAgent } from "../sharing/useShareAgent.js";
 import { ResourceDetailShell } from "../resource-detail/ResourceDetailShell.js";
 import { Section } from "../resource-detail/Section.js";
 import { useDetailTabs } from "../resource-detail/useDetailTabs.js";
@@ -127,6 +128,14 @@ export interface AgentDetailViewProps {
    * Opens the create instance dialog.
    */
   readonly onCreateInstanceClick?: () => void;
+  /**
+   * Builds the absolute public chat URL shown in the Share dialog.
+   * The host application owns URL construction — its configured public
+   * origin may differ from the rendering origin (e.g. the desktop app).
+   * When omitted, the dialog falls back to the relative
+   * `/chat/<org>/<slug>` path.
+   */
+  readonly buildShareUrl?: (org: string, slug: string) => string;
   /**
    * Called when the user clicks an instance row in the Instances tab.
    * Typically opens an instance detail panel.
@@ -204,6 +213,7 @@ export function AgentDetailView({
   defaultTab,
   editable = false,
   onResourceUpdated,
+  buildShareUrl,
   onCreateInstanceClick,
   onInstanceClick,
   onInstanceStartSessionClick,
@@ -306,6 +316,15 @@ export function AgentDetailView({
       : undefined,
   });
 
+  // Share — the sibling consent to Manage access: visibility governs who
+  // can read the blueprint; sharing governs who can chat with the running
+  // agent (billed to the owning org). Same null-until-ready contract.
+  const share = useShareAgent({
+    agent,
+    buildShareUrl,
+    onSharingChanged: refetch,
+  });
+
   if (isLoading) return <LoadingSkeleton className={className} />;
   if (error)
     return <ErrorMessage error={error} retry={refetch} className={className} />;
@@ -344,9 +363,14 @@ export function AgentDetailView({
     <VisibilityBadge visibility={meta.visibility} />
   ) : undefined;
 
-  const mergedActions = access.action
-    ? [...(actions ?? []), access.action]
-    : actions;
+  // Share precedes Manage access within the "sharing" group.
+  const injectedActions = [share.action, access.action].filter(
+    (a): a is NonNullable<typeof a> => a != null,
+  );
+  const mergedActions =
+    injectedActions.length > 0
+      ? [...(actions ?? []), ...injectedActions]
+      : actions;
 
   let tabContent: React.ReactNode;
   if (activeAdditionalTab) {
@@ -402,6 +426,7 @@ export function AgentDetailView({
         {tabContent}
       </ResourceDetailShell>
       {access.dialog}
+      {share.dialog}
     </>
   );
 }

package/src/environment/EnvironmentListPanel.tsx

@@ -4,8 +4,11 @@ import { useCallback, useMemo, useState } from "react";
 import { cn } from "@stigmer/theme";
 import { getUserMessage } from "@stigmer/sdk";
 import type { Environment } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/api_pb";
+import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
+import { ResourceVisibilityControl } from "../library/ResourceVisibilityControl.js";
 import { useEnvironmentList } from "./useEnvironmentList.js";
 import { EnvironmentVariableEditor } from "./EnvironmentVariableEditor.js";
+import { isShareRestrictedEnvironment } from "./shareRestriction.js";
 
 // ---------------------------------------------------------------------------
 // Public API
@@ -175,6 +178,7 @@ export function EnvironmentListPanel({
             isExpanded={isExpanded}
             onToggle={() => handleToggle(env)}
             readOnly={readOnly}
+            onVisibilityChanged={refetch}
           />
         );
       })}
@@ -191,11 +195,13 @@ function EnvironmentCard({
   isExpanded,
   onToggle,
   readOnly,
+  onVisibilityChanged,
 }: {
   environment: Environment;
   isExpanded: boolean;
   onToggle: () => void;
   readOnly: boolean;
+  onVisibilityChanged: () => void;
 }) {
   const name =
     environment.metadata?.name || environment.metadata?.slug || "Unnamed";
@@ -203,6 +209,12 @@ function EnvironmentCard({
   const variableCount = Object.keys(environment.spec?.data ?? {}).length;
   const environmentId = environment.metadata?.id ?? "";
 
+  // Personal and OAuth-managed environments are never org-shareable
+  // (the backend rejects the transition) — offering the control would
+  // be an error trap, so it is structurally absent for them.
+  const showVisibilityControl =
+    !readOnly && environmentId !== "" && !isShareRestrictedEnvironment(environment);
+
   return (
     <div
       role="listitem"
@@ -213,30 +225,47 @@ function EnvironmentCard({
           : "border-border-muted hover:border-border",
       )}
     >
-      {/* Header — always visible */}
-      <button
-        type="button"
-        onClick={onToggle}
-        aria-expanded={isExpanded}
-        className="flex w-full items-center gap-3 px-3 py-2.5 text-left"
-      >
-        <ChevronIcon expanded={isExpanded} />
+      {/* Header — always visible. The expand toggle and the visibility
+          control are sibling interactive elements (nesting the selector
+          inside the toggle button would be invalid markup). */}
+      <div className="flex w-full items-center gap-3 px-3 py-2.5">
+        <button
+          type="button"
+          onClick={onToggle}
+          aria-expanded={isExpanded}
+          className="flex min-w-0 flex-1 items-center gap-3 text-left"
+        >
+          <ChevronIcon expanded={isExpanded} />
 
-        <div className="min-w-0 flex-1">
-          <span className="block truncate text-sm font-medium text-foreground">
-            {name}
-          </span>
-          {description && (
-            <span className="block truncate text-xs text-muted-foreground">
-              {description}
+          <div className="min-w-0 flex-1">
+            <span className="block truncate text-sm font-medium text-foreground">
+              {name}
             </span>
-          )}
-        </div>
+            {description && (
+              <span className="block truncate text-xs text-muted-foreground">
+                {description}
+              </span>
+            )}
+          </div>
+        </button>
+
+        {showVisibilityControl && (
+          <ResourceVisibilityControl
+            kind="environment"
+            resourceId={environmentId}
+            visibility={
+              environment.metadata?.visibility ??
+              ApiResourceVisibility.visibility_private
+            }
+            onChanged={onVisibilityChanged}
+            className="shrink-0"
+          />
+        )}
 
         <span className="shrink-0 text-xs text-muted-foreground">
           {variableCount} {variableCount === 1 ? "variable" : "variables"}
         </span>
-      </button>
+      </div>
 
       {/* Expanded content — variable editor */}
       {isExpanded && environmentId && (

package/src/environment/EnvironmentVariableEditor.tsx

@@ -12,6 +12,7 @@ import { getUserMessage, type EnvVarInput } from "@stigmer/sdk";
 import type { Environment } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/api_pb";
 import { useStigmer } from "../hooks.js";
 import { toError } from "../internal/toError.js";
+import { PermissionGate } from "../iam-policy/PermissionGate.js";
 import { useUpdateEnvironmentVariables } from "./useUpdateEnvironmentVariables.js";
 import { useRemoveEnvironmentVariables } from "./useRemoveEnvironmentVariables.js";
 import { useRevealSecretValue } from "./useRevealSecretValue.js";
@@ -438,24 +439,33 @@ function VariableRow({
           !readOnly && (
             <div className="flex shrink-0 items-center gap-0.5 opacity-0 transition-opacity group-hover:opacity-100 group-focus-within:opacity-100">
               {variable.isSecret && (
-                <ActionButton
-                  onClick={toggleReveal}
-                  disabled={isRevealing}
-                  label={
-                    revealedValue !== null
-                      ? `Hide ${variable.key}`
-                      : `Reveal ${variable.key}`
-                  }
-                  variant="muted"
+                /* Secret reveal is creator-only (can_read_secrets) at every
+                   visibility level — org sharing never widens it. Hide the
+                   affordance for everyone else instead of offering a button
+                   that is guaranteed to fail (error prevention). */
+                <PermissionGate
+                  resource={{ kind: "environment", id: environmentId }}
+                  relation="can_read_secrets"
                 >
-                  {isRevealing ? (
-                    <SpinnerIcon />
-                  ) : revealedValue !== null ? (
-                    <EyeOffIcon />
-                  ) : (
-                    <EyeIcon />
-                  )}
-                </ActionButton>
+                  <ActionButton
+                    onClick={toggleReveal}
+                    disabled={isRevealing}
+                    label={
+                      revealedValue !== null
+                        ? `Hide ${variable.key}`
+                        : `Reveal ${variable.key}`
+                    }
+                    variant="muted"
+                  >
+                    {isRevealing ? (
+                      <SpinnerIcon />
+                    ) : revealedValue !== null ? (
+                      <EyeOffIcon />
+                    ) : (
+                      <EyeIcon />
+                    )}
+                  </ActionButton>
+                </PermissionGate>
               )}
               <ActionButton
                 onClick={startEdit}

package/src/environment/__tests__/shareRestriction.test.ts

@@ -0,0 +1,35 @@
+import { describe, it, expect } from "vitest";
+import { create } from "@bufbuild/protobuf";
+import { EnvironmentSchema } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/api_pb";
+import { isShareRestrictedEnvironment } from "../shareRestriction";
+
+function env(labels: Record<string, string>) {
+  return create(EnvironmentSchema, {
+    metadata: { id: "env_1", org: "acme", labels },
+  });
+}
+
+describe("isShareRestrictedEnvironment", () => {
+  it("restricts personal environments", () => {
+    expect(
+      isShareRestrictedEnvironment(env({ "stigmer.ai/personal": "true" })),
+    ).toBe(true);
+  });
+
+  it("restricts OAuth-managed environments", () => {
+    expect(
+      isShareRestrictedEnvironment(env({ "stigmer.ai/managed": "true" })),
+    ).toBe(true);
+  });
+
+  it("does not restrict ordinary environments", () => {
+    expect(isShareRestrictedEnvironment(env({}))).toBe(false);
+    expect(isShareRestrictedEnvironment(env({ team: "payments" }))).toBe(false);
+  });
+
+  it("only the literal 'true' value restricts", () => {
+    expect(
+      isShareRestrictedEnvironment(env({ "stigmer.ai/personal": "false" })),
+    ).toBe(false);
+  });
+});

package/src/environment/index.ts

@@ -50,3 +50,8 @@ export {
 } from "./systemEnvVars.js";
 export { EnvironmentPicker } from "./EnvironmentPicker.js";
 export type { EnvironmentPickerProps } from "./EnvironmentPicker.js";
+export {
+  PERSONAL_ENV_LABEL,
+  MANAGED_ENV_LABEL,
+  isShareRestrictedEnvironment,
+} from "./shareRestriction.js";

package/src/environment/shareRestriction.ts

@@ -0,0 +1,22 @@
+import type { Environment } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/api_pb";
+
+/** Label marking a user's personal credential-fallback environment. */
+export const PERSONAL_ENV_LABEL = "stigmer.ai/personal";
+
+/** Label marking a system-managed environment holding per-user OAuth tokens. */
+export const MANAGED_ENV_LABEL = "stigmer.ai/managed";
+
+/**
+ * Whether an environment is share-restricted — personal and OAuth-managed
+ * environments must never carry org visibility, so surfaces hide the
+ * sharing control for them entirely (error prevention: the backend
+ * rejects the transition with FAILED_PRECONDITION in both editions).
+ */
+export function isShareRestrictedEnvironment(
+  environment: Environment,
+): boolean {
+  const labels = environment.metadata?.labels ?? {};
+  return (
+    labels[PERSONAL_ENV_LABEL] === "true" || labels[MANAGED_ENV_LABEL] === "true"
+  );
+}

package/src/execution/ToolCallItem.tsx

@@ -454,7 +454,7 @@ const REVIEW_BADGE: Record<FileReviewRowState, ApprovalBadgeInfo> = {
 // Status mapping
 // ---------------------------------------------------------------------------
 
-type ItemStatus = "running" | "waiting" | "failed" | "completed" | "pending";
+type ItemStatus = "running" | "waiting" | "failed" | "completed" | "pending" | "interrupted";
 
 function mapToolCallStatus(toolCall: ToolCall): ItemStatus {
   switch (toolCall.status) {
@@ -474,6 +474,12 @@ function mapToolCallStatus(toolCall: ToolCall): ItemStatus {
     case ToolCallStatus.TOOL_CALL_COMPLETED:
     case ToolCallStatus.TOOL_CALL_SKIPPED:
       return "completed";
+    // Platform-settled when the execution terminalized mid-call (issue #207).
+    // A settled, neutral state: not a spinner (nothing is running), not a
+    // failure (the tool never errored), not a grey pending dot (it will never
+    // start).
+    case ToolCallStatus.TOOL_CALL_INTERRUPTED:
+      return "interrupted";
     default:
       return "pending";
   }
@@ -485,6 +491,7 @@ const STATUS_COLOR: Record<ItemStatus, string> = {
   failed: "text-destructive",
   completed: "text-success",
   pending: "text-muted-foreground",
+  interrupted: "text-muted-foreground",
 };
 
 // ---------------------------------------------------------------------------
@@ -626,6 +633,7 @@ const STATUS_ICON: Record<ItemStatus, () => React.JSX.Element> = {
   failed: XCircleIcon,
   completed: CheckCircleIcon,
   pending: DotIcon,
+  interrupted: SlashCircleIcon,
 };
 
 function SpinnerIcon() {
@@ -671,6 +679,16 @@ function DotIcon() {
   );
 }
 
+/** Slashed circle for an interrupted call — settled, neutral, visibly "cut short". */
+function SlashCircleIcon() {
+  return (
+    <svg width="10" height="10" viewBox="0 0 12 12" fill="none" stroke="currentColor" strokeWidth="1.5" strokeLinecap="round">
+      <circle cx="6" cy="6" r="4.5" />
+      <path d="M2.8 9.2L9.2 2.8" />
+    </svg>
+  );
+}
+
 function InspectIcon() {
   return (
     <svg width="12" height="12" viewBox="0 0 12 12" fill="none" stroke="currentColor" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true">

package/src/execution/ToolRunGroup.tsx

@@ -202,6 +202,10 @@ function deriveAggregateStatus(toolCalls: readonly ToolCall[]): AggregateStatus
         break;
       case ToolCallStatus.TOOL_CALL_COMPLETED:
       case ToolCallStatus.TOOL_CALL_SKIPPED:
+      // INTERRUPTED is terminal (platform-settled when the execution
+      // terminalized mid-call, issue #207): the chip must settle, not pin to
+      // "pending" forever.
+      case ToolCallStatus.TOOL_CALL_INTERRUPTED:
         break;
       default:
         allTerminal = false;