@stigmer/react 3.1.8 → 3.1.10

package/sharing/useShareToolReadiness.js

@@ -1,73 +1,65 @@
 "use client";
-import { useEffect, useState } from "react";
+import { useEffect, useMemo, useState } from "react";
 import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
 import { useStigmer } from "../hooks.js";
 import { useDeploymentMode } from "../deployment-mode.js";
 const NA = { status: "na" };
+const NEEDS_CREDENTIALS = { status: "needs-credentials" };
 /**
  * Data hook that checks whether a tool-using shared agent's credentials
- * will work for visitors — i.e. whether the environments bound to its
- * default instance are shared with the organization (`visibility_org`).
+ * will work for visitors — i.e. whether the share binds environments
+ * (`environment_refs`) and each one is shared with the organization
+ * (`visibility_org`).
  *
- * Guest and teammate executions can only use org-shared environments;
- * a private environment's secrets are creator-only and silently
- * unavailable to them, so the agent's tools would fail at runtime. This
- * hook powers the Share dialog's pre-flight hint, catching the
- * misconfiguration at share time instead of at the visitor's first
- * message.
+ * Guest executions receive credentials exclusively from the share's own
+ * `environment_refs`, resolved through the org-shared environment seam
+ * (decision 011 — the agent's default instance stays pristine and is
+ * never consulted). So a tool-using agent with an empty binding list is
+ * *guaranteed* broken for visitors, and this hook says so explicitly
+ * (`needs-credentials`) instead of staying silent — the gap that made
+ * session 12's misconfiguration invisible until a visitor's first
+ * message failed.
  *
- * Scope note: environments bound via `environment_refs` are the
- * supported credential path for shared agents. Credentials that only
- * exist in the owner's personal environment are also invisible to
- * guests, but are not detectable from the instance binding — the
- * runtime's enriched FAILED_PRECONDITION error covers that case.
- *
- * The check runs only when `enabled` is true, the deployment is cloud
- * (local mode has no guest runtime or secret gating), and the agent
- * declares MCP server usages. All lookups run as the owner viewing the
- * dialog, who can read the bound environments.
+ * The check runs only when the share is enabled with a public audience
+ * (org-audience shares reject bindings at the proto boundary), the
+ * deployment is cloud (local mode has no guest runtime or secret
+ * gating), and the agent declares MCP server usages. All lookups run as
+ * the owner viewing the dialog, who can read the bound environments.
  */
-export function useShareToolReadiness(agent, enabled) {
+export function useShareToolReadiness(agent, draft) {
     const stigmer = useStigmer();
     const deploymentMode = useDeploymentMode();
-    const [readiness, setReadiness] = useState(NA);
-    const agentId = agent.metadata?.id ?? "";
+    const [checked, setChecked] = useState(NA);
     const hasMcpTools = (agent.spec?.mcpServerUsages?.length ?? 0) > 0;
-    const defaultInstanceId = agent.status?.defaultInstanceId ?? "";
-    const shouldCheck = enabled &&
+    const applicable = draft.enabled &&
+        draft.audience === "public" &&
         deploymentMode === "cloud" &&
-        hasMcpTools &&
-        defaultInstanceId !== "";
+        hasMcpTools;
+    // Stable key for the effect: the visibility lookups depend only on
+    // which environments are bound, not on the array's identity.
+    const refsKey = useMemo(() => draft.environmentRefs.map((ref) => `${ref.org}/${ref.slug}`).join(","), [draft.environmentRefs]);
+    const shouldFetch = applicable && refsKey !== "";
     useEffect(() => {
-        if (!shouldCheck) {
-            setReadiness(NA);
+        if (!shouldFetch) {
+            setChecked(NA);
             return;
         }
         let cancelled = false;
-        setReadiness({ status: "checking" });
+        setChecked({ status: "checking" });
         (async () => {
-            const instance = await stigmer.agentInstance.get(defaultInstanceId);
-            const refs = instance.spec?.environmentRefs ?? [];
-            if (refs.length === 0) {
-                // No bound environments to assess. The tools may need no
-                // credentials at all — do not warn on a guess.
-                return NA;
-            }
             const privateRefs = [];
-            for (const ref of refs) {
+            for (const ref of refsKey.split(",")) {
+                const [org, slug] = ref.split("/");
                 try {
-                    const env = await stigmer.environment.getByReference({
-                        org: ref.org,
-                        slug: ref.slug,
-                    });
+                    const env = await stigmer.environment.getByReference({ org, slug });
                     if (env.metadata?.visibility !== ApiResourceVisibility.visibility_org) {
-                        privateRefs.push(`${ref.org}/${ref.slug}`);
+                        privateRefs.push(ref);
                     }
                 }
                 catch {
-                    // Unreadable ref (deleted, foreign): the runtime will skip it
-                    // for visitors too — surface it as blocking.
-                    privateRefs.push(`${ref.org}/${ref.slug}`);
+                    // Unreadable ref (deleted, foreign): the runtime's merge will
+                    // skip it for visitors too — surface it as blocking.
+                    privateRefs.push(ref);
                 }
             }
             return privateRefs.length === 0
@@ -75,19 +67,23 @@ export function useShareToolReadiness(agent, enabled) {
                 : { status: "blocked", privateEnvironments: privateRefs };
         })().then((result) => {
             if (!cancelled)
-                setReadiness(result);
+                setChecked(result);
         }, () => {
             // The hint is best-effort pre-flight advice — a failed check must
             // never block the dialog. The runtime error path still diagnoses.
             if (!cancelled)
-                setReadiness(NA);
+                setChecked(NA);
         });
         return () => {
             cancelled = true;
         };
-        // agentId stands in for the agent object identity: the inputs that
-        // matter (instance id, MCP usage presence) are covered explicitly.
-    }, [shouldCheck, defaultInstanceId, agentId, stigmer]);
-    return readiness;
+    }, [shouldFetch, refsKey, stigmer]);
+    if (!applicable)
+        return NA;
+    // Zero bindings needs no lookup: a tool-using agent without bound
+    // credentials is broken for visitors by construction.
+    if (refsKey === "")
+        return NEEDS_CREDENTIALS;
+    return checked;
 }
 //# sourceMappingURL=useShareToolReadiness.js.map

package/sharing/useShareToolReadiness.js.map

@@ -1 +1 @@
-{"version":3,"file":"useShareToolReadiness.js","sourceRoot":"","sources":["../../src/sharing/useShareToolReadiness.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAE5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAoB1D,MAAM,EAAE,GAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAY,EACZ,OAAgB;IAEhB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAC3C,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAqB,EAAE,CAAC,CAAC;IAEnE,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC;IAEhE,MAAM,WAAW,GACf,OAAO;QACP,cAAc,KAAK,OAAO;QAC1B,WAAW;QACX,iBAAiB,KAAK,EAAE,CAAC;IAE3B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,YAAY,CAAC,EAAE,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAErC,CAAC,KAAK,IAAiC,EAAE;YACvC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,eAAe,IAAI,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,yDAAyD;gBACzD,+CAA+C;gBAC/C,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,cAAc,CAAC;wBACnD,GAAG,EAAE,GAAG,CAAC,GAAG;wBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;qBACf,CAAC,CAAC;oBACH,IACE,GAAG,CAAC,QAAQ,EAAE,UAAU,KAAK,qBAAqB,CAAC,cAAc,EACjE,CAAC;wBACD,WAAW,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC7C,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,8DAA8D;oBAC9D,6CAA6C;oBAC7C,WAAW,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAED,OAAO,WAAW,CAAC,MAAM,KAAK,CAAC;gBAC7B,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE;gBACrB,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC;QAC9D,CAAC,CAAC,EAAE,CAAC,IAAI,CACP,CAAC,MAAM,EAAE,EAAE;YACT,IAAI,CAAC,SAAS;gBAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC,EACD,GAAG,EAAE;YACH,kEAAkE;YAClE,kEAAkE;YAClE,IAAI,CAAC,SAAS;gBAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC,CACF,CAAC;QAEF,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC;QACF,mEAAmE;QACnE,mEAAmE;IACrE,CAAC,EAAE,CAAC,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAEvD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"useShareToolReadiness.js","sourceRoot":"","sources":["../../src/sharing/useShareToolReadiness.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAErD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAyB1D,MAAM,EAAE,GAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAChD,MAAM,iBAAiB,GAAuB,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;AAE9E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAY,EACZ,KAAsB;IAEtB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAC3C,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAqB,EAAE,CAAC,CAAC;IAE/D,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnE,MAAM,UAAU,GACd,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAC3B,cAAc,KAAK,OAAO;QAC1B,WAAW,CAAC;IAEd,mEAAmE;IACnE,6DAA6D;IAC7D,MAAM,OAAO,GAAG,OAAO,CACrB,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAC5E,CAAC,KAAK,CAAC,eAAe,CAAC,CACxB,CAAC;IAEF,MAAM,WAAW,GAAG,UAAU,IAAI,OAAO,KAAK,EAAE,CAAC;IAEjD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAEnC,CAAC,KAAK,IAAiC,EAAE;YACvC,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;oBACpE,IACE,GAAG,CAAC,QAAQ,EAAE,UAAU,KAAK,qBAAqB,CAAC,cAAc,EACjE,CAAC;wBACD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACxB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,8DAA8D;oBAC9D,qDAAqD;oBACrD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;YAED,OAAO,WAAW,CAAC,MAAM,KAAK,CAAC;gBAC7B,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE;gBACrB,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC;QAC9D,CAAC,CAAC,EAAE,CAAC,IAAI,CACP,CAAC,MAAM,EAAE,EAAE;YACT,IAAI,CAAC,SAAS;gBAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,EACD,GAAG,EAAE;YACH,kEAAkE;YAClE,kEAAkE;YAClE,IAAI,CAAC,SAAS;gBAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC,CACF,CAAC;QAEF,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAC3B,kEAAkE;IAClE,sDAAsD;IACtD,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,iBAAiB,CAAC;IAC7C,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/sharing/useSharedAgentProfile.d.ts

@@ -1,5 +1,5 @@
-import { type SharedAgentProfile } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/io_pb";
-import type { SharingAudience } from "./useUpdateAgentSharing.js";
+import { type SharedAgentProfile } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/io_pb";
+import type { SharingAudience } from "./useSaveAgentShare.js";
 /** Options for {@link useSharedAgentProfile}. */
 export interface UseSharedAgentProfileOptions {
     /**
@@ -40,8 +40,9 @@ export interface UseSharedAgentProfileReturn {
     readonly refetch: () => void;
 }
 /**
- * Data hook that fetches a shared agent's public profile by
- * organization and agent slug.
+ * Data hook that fetches a shared agent's public profile by the org and
+ * slug from the share URL (the share's slug — it defaults to the
+ * agent's, so existing links resolve unchanged).
  *
  * By default this hook calls the `getSharedProfile` endpoint, which is
  * **public** — it requires no authentication. The server returns a

package/sharing/useSharedAgentProfile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useSharedAgentProfile.d.ts","sourceRoot":"","sources":["../../src/sharing/useSharedAgentProfile.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,mDAAmD,CAAC;AAI3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAElE,iDAAiD;AACjD,MAAM,WAAW,4BAA4B;IAC3C;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAEpC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,qDAAqD;AACrD,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC5C,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,IAAI,EAAE,MAAM,GAAG,IAAI,EACnB,OAAO,CAAC,EAAE,4BAA4B,GACrC,2BAA2B,CA+B7B"}
+{"version":3,"file":"useSharedAgentProfile.d.ts","sourceRoot":"","sources":["../../src/sharing/useSharedAgentProfile.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,wDAAwD,CAAC;AAIhE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,iDAAiD;AACjD,MAAM,WAAW,4BAA4B;IAC3C;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAEpC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,qDAAqD;AACrD,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC5C,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,IAAI,EAAE,MAAM,GAAG,IAAI,EACnB,OAAO,CAAC,EAAE,4BAA4B,GACrC,2BAA2B,CA+B7B"}

package/sharing/useSharedAgentProfile.js

@@ -1,12 +1,13 @@
 "use client";
 import { create } from "@bufbuild/protobuf";
-import { GetSharedProfileRequestSchema, } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/io_pb";
+import { GetSharedProfileRequestSchema, } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/io_pb";
 import { isNotFound } from "@stigmer/sdk";
 import { useStigmer } from "../hooks.js";
 import { useFetch } from "../internal/useFetch.js";
 /**
- * Data hook that fetches a shared agent's public profile by
- * organization and agent slug.
+ * Data hook that fetches a shared agent's public profile by the org and
+ * slug from the share URL (the share's slug — it defaults to the
+ * agent's, so existing links resolve unchanged).
  *
  * By default this hook calls the `getSharedProfile` endpoint, which is
  * **public** — it requires no authentication. The server returns a
@@ -56,8 +57,8 @@ export function useSharedAgentProfile(org, slug, options) {
                 // is gated by live membership, and token-locked public shares
                 // deliberately refuse there (see getSharedProfileForMember).
                 return audience === "org"
-                    ? await stigmer.agent.getSharedProfileForMember({ org, slug })
-                    : await stigmer.agent.getSharedProfile(create(GetSharedProfileRequestSchema, { org, slug, linkToken }));
+                    ? await stigmer.agentShare.getSharedProfileForMember({ org, slug })
+                    : await stigmer.agentShare.getSharedProfile(create(GetSharedProfileRequestSchema, { org, slug, linkToken }));
             }
             catch (err) {
                 if (isNotFound(err))

package/sharing/useSharedAgentProfile.js.map

@@ -1 +1 @@
-{"version":3,"file":"useSharedAgentProfile.js","sourceRoot":"","sources":["../../src/sharing/useSharedAgentProfile.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EACL,6BAA6B,GAE9B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AA6CnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAkB,EAClB,IAAmB,EACnB,OAAsC;IAEtC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,QAAQ,CAAC;IAC/C,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;IAE3C,MAAM,OAAO,GACX,GAAG,IAAI,IAAI;QACT,CAAC,CAAC,KAAK,IAAI,EAAE;YACT,IAAI,CAAC;gBACH,gEAAgE;gBAChE,8DAA8D;gBAC9D,6DAA6D;gBAC7D,OAAO,QAAQ,KAAK,KAAK;oBACvB,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;oBAC9D,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAClC,MAAM,CAAC,6BAA6B,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAChE,CAAC;YACR,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACjC,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACH,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,QAAQ,CACzE,OAAO,EACP,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,EACzC,IAAiC,CAClC,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"useSharedAgentProfile.js","sourceRoot":"","sources":["../../src/sharing/useSharedAgentProfile.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EACL,6BAA6B,GAE9B,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AA6CnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAkB,EAClB,IAAmB,EACnB,OAAsC;IAEtC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,QAAQ,CAAC;IAC/C,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;IAE3C,MAAM,OAAO,GACX,GAAG,IAAI,IAAI;QACT,CAAC,CAAC,KAAK,IAAI,EAAE;YACT,IAAI,CAAC;gBACH,gEAAgE;gBAChE,8DAA8D;gBAC9D,6DAA6D;gBAC7D,OAAO,QAAQ,KAAK,KAAK;oBACvB,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;oBACnE,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,gBAAgB,CACvC,MAAM,CAAC,6BAA6B,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAChE,CAAC;YACR,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACjC,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACH,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,QAAQ,CACzE,OAAO,EACP,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,EACzC,IAAiC,CAClC,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC"}

package/src/environment/EnvironmentPicker.tsx

@@ -16,6 +16,21 @@ export interface EnvironmentPickerProps {
   readonly onChange: (refs: ResourceRef[]) => void;
   /** Disable all interactions. */
   readonly disabled?: boolean;
+  /**
+   * Restrict which environments are offered in the dropdown. Already
+   * selected references remain listed (and removable) even when they no
+   * longer pass the filter — hiding them would strand the binding.
+   * When omitted, every environment in the org is offered (the default
+   * behavior of every existing caller).
+   *
+   * @example Only org-shared environments (guest-usable credentials):
+   * ```tsx
+   * filterEnvironment={(env) =>
+   *   env.metadata?.visibility === ApiResourceVisibility.visibility_org
+   * }
+   * ```
+   */
+  readonly filterEnvironment?: (environment: Environment) => boolean;
   /** Additional CSS class names for the root container. */
   readonly className?: string;
 }
@@ -44,6 +59,7 @@ export function EnvironmentPicker({
   value,
   onChange,
   disabled = false,
+  filterEnvironment,
   className,
 }: EnvironmentPickerProps) {
   const { environments, isLoading } = useEnvironmentList(org);
@@ -55,8 +71,13 @@ export function EnvironmentPicker({
   );
 
   const availableEnvironments = useMemo(
-    () => environments.filter((env) => !selectedSlugs.has(env.metadata?.slug ?? "")),
-    [environments, selectedSlugs],
+    () =>
+      environments.filter(
+        (env) =>
+          !selectedSlugs.has(env.metadata?.slug ?? "") &&
+          (filterEnvironment?.(env) ?? true),
+      ),
+    [environments, selectedSlugs, filterEnvironment],
   );
 
   const handleAdd = useCallback(

package/src/index.ts

@@ -985,15 +985,17 @@ export type {
 } from "./invitation/index.js";
 
 // Sharing — shared-agent public profile, the anonymous-visitor chat organism,
-// and the owner-side Share experience (dialog, kebab hook, sharing mutation).
+// and the owner-side Share experience (dialog, kebab hook, AgentShare hooks).
 export {
   useSharedAgentProfile,
   SharedAgentChat,
   sharingAudienceFromProto,
-  useUpdateAgentSharing,
+  useAgentShare,
+  useSaveAgentShare,
   useRotateShareLink,
   ShareAgentDialog,
   useShareAgent,
+  useShareToolReadiness,
   validateOrigin,
   MAX_ALLOWED_ORIGINS,
 } from "./sharing/index.js";
@@ -1001,13 +1003,15 @@ export type {
   UseSharedAgentProfileOptions,
   UseSharedAgentProfileReturn,
   SharedAgentChatProps,
-  AgentSharingDraft,
+  AgentShareDraft,
   SharingAudience,
-  UseUpdateAgentSharingReturn,
+  UseAgentShareReturn,
+  UseSaveAgentShareReturn,
   UseRotateShareLinkReturn,
   ShareAgentDialogProps,
   UseShareAgentArgs,
   UseShareAgentReturn,
+  ShareToolReadiness,
 } from "./sharing/index.js";
 
 // Error — structured error display with classification, retry, and contextual guidance