@stigmer/react 3.1.8 → 3.1.9

package/sharing/useRotateShareLink.d.ts

@@ -1,42 +1,45 @@
-import type { Agent } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import type { AgentShare } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/api_pb";
 /** Return value of {@link useRotateShareLink}. */
 export interface UseRotateShareLinkReturn {
     /**
-     * Rotate the agent's share-link token via the `rotateShareLink` RPC.
-     * Resolves with the updated agent, whose `status.shareLinkToken`
+     * Rotate the share's link token via the `rotateShareLink` RPC.
+     * Resolves with the updated share, whose `status.shareLinkToken`
      * carries the new token for building the fresh share URL.
      */
-    readonly rotateShareLink: () => Promise<Agent | undefined>;
+    readonly rotateShareLink: () => Promise<AgentShare | undefined>;
     /** `true` while the RPC is in flight. */
     readonly isPending: boolean;
     /** The last error from the RPC, or `null`. */
     readonly error: Error | null;
 }
 /**
- * Behavior hook that rotates an agent's share-link token.
+ * Behavior hook that rotates a share's link token.
  *
- * Wraps the `stigmer.agent.rotateShareLink()` RPC (authorized by
- * `can_edit`) with loading and error state management. The server
- * generates the token — there is nothing to supply — and the previous
- * link stops working the moment the call resolves, including for
- * visitors mid-conversation. The token lives in `status.shareLinkToken`
- * (server-owned), so it is never part of a sharing draft and survives
- * manifest applies.
+ * Wraps the `stigmer.agentShare.rotateShareLink()` RPC (authorized by
+ * the share's `can_edit`) with loading and error state management. The
+ * server generates the token — there is nothing to supply — and the
+ * previous link stops working the moment the call resolves, including
+ * for visitors mid-conversation. The token lives in
+ * `status.shareLinkToken` (server-owned; this RPC is its sole writer),
+ * so it is never part of a share draft and survives every apply.
  *
- * The hook is stateless with respect to the agent — adopt the returned
- * agent (or refetch) so the UI shows the new tokened link, matching the
- * {@link useUpdateAgentSharing} convention.
+ * The hook is stateless with respect to the share — adopt the returned
+ * share (or refetch) so the UI shows the new tokened link, matching the
+ * {@link useSaveAgentShare} convention.
  *
- * Pass `null` for `agentId` to produce a stable no-op (useful while the
- * agent is still loading).
+ * Pass `null` for `shareId` to produce a stable no-op (useful while the
+ * share is still loading, or before the agent has ever been shared —
+ * there is no token to rotate until a share exists).
  *
  * @example
  * ```tsx
- * const { rotateShareLink, isPending } = useRotateShareLink(agent.metadata.id);
+ * const { rotateShareLink, isPending } = useRotateShareLink(
+ *   share?.metadata?.id ?? null,
+ * );
  *
  * const updated = await rotateShareLink();
  * // updated.status.shareLinkToken is the new token
  * ```
  */
-export declare function useRotateShareLink(agentId: string | null): UseRotateShareLinkReturn;
+export declare function useRotateShareLink(shareId: string | null): UseRotateShareLinkReturn;
 //# sourceMappingURL=useRotateShareLink.d.ts.map

package/sharing/useRotateShareLink.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useRotateShareLink.d.ts","sourceRoot":"","sources":["../../src/sharing/useRotateShareLink.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAKhF,kDAAkD;AAClD,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC;IAC3D,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,wBAAwB,CAwB1B"}
+{"version":3,"file":"useRotateShareLink.d.ts","sourceRoot":"","sources":["../../src/sharing/useRotateShareLink.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yDAAyD,CAAC;AAK1F,kDAAkD;AAClD,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IAChE,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,wBAAwB,CA0B1B"}

package/sharing/useRotateShareLink.js

@@ -1,46 +1,49 @@
 "use client";
 import { useCallback, useState } from "react";
 import { create } from "@bufbuild/protobuf";
-import { RotateShareLinkInputSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/io_pb";
+import { RotateShareLinkInputSchema } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/io_pb";
 import { useStigmer } from "../hooks.js";
 import { toError } from "../internal/toError.js";
 /**
- * Behavior hook that rotates an agent's share-link token.
+ * Behavior hook that rotates a share's link token.
  *
- * Wraps the `stigmer.agent.rotateShareLink()` RPC (authorized by
- * `can_edit`) with loading and error state management. The server
- * generates the token — there is nothing to supply — and the previous
- * link stops working the moment the call resolves, including for
- * visitors mid-conversation. The token lives in `status.shareLinkToken`
- * (server-owned), so it is never part of a sharing draft and survives
- * manifest applies.
+ * Wraps the `stigmer.agentShare.rotateShareLink()` RPC (authorized by
+ * the share's `can_edit`) with loading and error state management. The
+ * server generates the token — there is nothing to supply — and the
+ * previous link stops working the moment the call resolves, including
+ * for visitors mid-conversation. The token lives in
+ * `status.shareLinkToken` (server-owned; this RPC is its sole writer),
+ * so it is never part of a share draft and survives every apply.
  *
- * The hook is stateless with respect to the agent — adopt the returned
- * agent (or refetch) so the UI shows the new tokened link, matching the
- * {@link useUpdateAgentSharing} convention.
+ * The hook is stateless with respect to the share — adopt the returned
+ * share (or refetch) so the UI shows the new tokened link, matching the
+ * {@link useSaveAgentShare} convention.
  *
- * Pass `null` for `agentId` to produce a stable no-op (useful while the
- * agent is still loading).
+ * Pass `null` for `shareId` to produce a stable no-op (useful while the
+ * share is still loading, or before the agent has ever been shared —
+ * there is no token to rotate until a share exists).
  *
  * @example
  * ```tsx
- * const { rotateShareLink, isPending } = useRotateShareLink(agent.metadata.id);
+ * const { rotateShareLink, isPending } = useRotateShareLink(
+ *   share?.metadata?.id ?? null,
+ * );
  *
  * const updated = await rotateShareLink();
  * // updated.status.shareLinkToken is the new token
  * ```
  */
-export function useRotateShareLink(agentId) {
+export function useRotateShareLink(shareId) {
     const stigmer = useStigmer();
     const [isPending, setIsPending] = useState(false);
     const [error, setError] = useState(null);
     const rotateShareLink = useCallback(async () => {
-        if (!agentId)
+        if (!shareId)
             return undefined;
         setIsPending(true);
         setError(null);
         try {
-            return await stigmer.agent.rotateShareLink(create(RotateShareLinkInputSchema, { resourceId: agentId }));
+            return await stigmer.agentShare.rotateShareLink(create(RotateShareLinkInputSchema, { resourceId: shareId }));
         }
         catch (err) {
             setError(toError(err));
@@ -49,7 +52,7 @@ export function useRotateShareLink(agentId) {
         finally {
             setIsPending(false);
         }
-    }, [agentId, stigmer]);
+    }, [shareId, stigmer]);
     return { rotateShareLink, isPending, error };
 }
 //# sourceMappingURL=useRotateShareLink.js.map

package/sharing/useRotateShareLink.js.map

@@ -1 +1 @@
-{"version":3,"file":"useRotateShareLink.js","sourceRoot":"","sources":["../../src/sharing/useRotateShareLink.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAgBjD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAsB;IAEtB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,eAAe,GAAG,WAAW,CAAC,KAAK,IAAgC,EAAE;QACzE,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,eAAe,CACxC,MAAM,CAAC,0BAA0B,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAC5D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAEvB,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"useRotateShareLink.js","sourceRoot":"","sources":["../../src/sharing/useRotateShareLink.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAgBjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAsB;IAEtB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,eAAe,GAAG,WAAW,CAAC,KAAK,IAEvC,EAAE;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,UAAU,CAAC,eAAe,CAC7C,MAAM,CAAC,0BAA0B,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAC5D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAEvB,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC/C,CAAC"}

package/sharing/useSaveAgentShare.d.ts

@@ -0,0 +1,105 @@
+import type { Agent } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import type { AgentShare } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/api_pb";
+import { AgentShareAudience } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/spec_pb";
+import type { ResourceRef } from "@stigmer/sdk";
+/**
+ * Who can chat with a shared agent over its hosted link.
+ *
+ * - `"public"` — anyone with the link; visitors are anonymous guests.
+ * - `"org"` — signed-in members of the owning organization only.
+ *   Membership is checked on every conversation turn, so access ends the
+ *   moment a member leaves the org.
+ */
+export type SharingAudience = "public" | "org";
+/**
+ * A complete share configuration to persist.
+ *
+ * Every field is required by design: saving **replaces the share's whole
+ * spec**, so a caller must always supply the full configuration. A
+ * partial type here would let a toggle change silently wipe
+ * `allowedOrigins`, `messages`, `environmentRefs`, or the `audience` —
+ * the required shape makes that mistake unrepresentable. (The rotatable
+ * link token is exempt: it is server-owned `status`, which survives
+ * every save verbatim.)
+ */
+export interface AgentShareDraft {
+    /** Whether hosted-chat access for the configured audience is enabled. */
+    readonly enabled: boolean;
+    /** Who can chat: anyone with the link, or org members only. */
+    readonly audience: SharingAudience;
+    /**
+     * Exact web origins allowed to embed the shared agent
+     * (e.g. `https://example.com`). Empty list = embeddable anywhere.
+     * Embedding is public-audience only.
+     */
+    readonly allowedOrigins: readonly string[];
+    /** Owner-customized visitor refusal copy. Empty strings mean platform defaults. */
+    readonly messages: {
+        /** Shown when a visitor exceeds the message rate limit. */
+        readonly rateLimited: string;
+        /** Shown when the org's credits are exhausted (sharing fails closed). */
+        readonly unavailable: string;
+        /** Shown when a conversation hits its turn limit or inactivity timeout. */
+        readonly conversationEnded: string;
+    };
+    /**
+     * Org-shared environments whose values guest conversations receive —
+     * how a tool-using agent becomes chattable over a share link without
+     * touching its pristine default instance. Public-audience only (the
+     * proto CEL rule rejects bindings on org-audience shares, whose member
+     * sessions carry no share linkage in Phase A — decision 011 addendum).
+     */
+    readonly environmentRefs: readonly ResourceRef[];
+}
+/**
+ * Maps a proto {@link AgentShareAudience} to the SDK's string union.
+ * Unspecified means public by contract (a share created without an
+ * explicit audience is an anyone-with-link share).
+ */
+export declare function sharingAudienceFromProto(audience: AgentShareAudience | undefined): SharingAudience;
+/** Return value of {@link useSaveAgentShare}. */
+export interface UseSaveAgentShareReturn {
+    /**
+     * Persist the complete share configuration. Resolves with the
+     * persisted {@link AgentShare} — adopt it as the new baseline (its
+     * `status.shareLinkToken` carries the live link token).
+     *
+     * `current` is the share being edited, or `null` when the agent has
+     * never been shared — the save then creates the canonical share.
+     */
+    readonly save: (draft: AgentShareDraft, current: AgentShare | null) => Promise<AgentShare | undefined>;
+    /** `true` while the RPC is in flight. */
+    readonly isPending: boolean;
+    /** The last error from the RPC, or `null`. */
+    readonly error: Error | null;
+}
+/**
+ * Behavior hook that persists an agent's canonical share configuration.
+ *
+ * Commits via `stigmer.agentShare.apply()` — an idempotent upsert keyed
+ * on the share's `(org, slug)` identity — so one code path serves both
+ * the first enable (creates the share; the server authorizes on the
+ * referenced agent's `can_edit`) and every later edit. There is
+ * deliberately no create/update branching: the share slug is unique per
+ * org and defaults to the agent's slug, which makes apply-by-identity
+ * exact, and the generated `AgentShareInput` carries no `metadata.id`
+ * for an update to route by anyway.
+ *
+ * Disabling is a save with `enabled: false` — a config-preserving pause
+ * (decision 011 D1). Deleting the share is a separate, destructive
+ * operation this hook does not perform.
+ *
+ * Pass `null` for `agent` to produce a stable no-op (useful while the
+ * agent is still loading).
+ *
+ * @example
+ * ```tsx
+ * const { share } = useAgentShare(agent);
+ * const { save, isPending } = useSaveAgentShare(agent);
+ *
+ * const persisted = await save({ ...draft, enabled: true }, share);
+ * // persisted.status.shareLinkToken is the live link token
+ * ```
+ */
+export declare function useSaveAgentShare(agent: Agent | null): UseSaveAgentShareReturn;
+//# sourceMappingURL=useSaveAgentShare.d.ts.map

package/sharing/useSaveAgentShare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useSaveAgentShare.d.ts","sourceRoot":"","sources":["../../src/sharing/useSaveAgentShare.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yDAAyD,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,0DAA0D,CAAC;AAC9F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAIhD;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE/C;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,mFAAmF;IACnF,QAAQ,CAAC,QAAQ,EAAE;QACjB,2DAA2D;QAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,yEAAyE;QACzE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,2EAA2E;QAC3E,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;KACpC,CAAC;IACF;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS,WAAW,EAAE,CAAC;CAClD;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,kBAAkB,GAAG,SAAS,GACvC,eAAe,CAEjB;AAQD,iDAAiD;AACjD,MAAM,WAAW,uBAAuB;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,EAAE,CACb,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,UAAU,GAAG,IAAI,KACvB,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACrC,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,KAAK,GAAG,IAAI,GAClB,uBAAuB,CAyDzB"}

package/sharing/useSaveAgentShare.js

@@ -0,0 +1,97 @@
+"use client";
+import { useCallback, useState } from "react";
+import { AgentShareAudience } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/spec_pb";
+import { useStigmer } from "../hooks.js";
+import { toError } from "../internal/toError.js";
+/**
+ * Maps a proto {@link AgentShareAudience} to the SDK's string union.
+ * Unspecified means public by contract (a share created without an
+ * explicit audience is an anyone-with-link share).
+ */
+export function sharingAudienceFromProto(audience) {
+    return audience === AgentShareAudience.org ? "org" : "public";
+}
+function sharingAudienceToProto(audience) {
+    return audience === "org"
+        ? AgentShareAudience.org
+        : AgentShareAudience.public;
+}
+/**
+ * Behavior hook that persists an agent's canonical share configuration.
+ *
+ * Commits via `stigmer.agentShare.apply()` — an idempotent upsert keyed
+ * on the share's `(org, slug)` identity — so one code path serves both
+ * the first enable (creates the share; the server authorizes on the
+ * referenced agent's `can_edit`) and every later edit. There is
+ * deliberately no create/update branching: the share slug is unique per
+ * org and defaults to the agent's slug, which makes apply-by-identity
+ * exact, and the generated `AgentShareInput` carries no `metadata.id`
+ * for an update to route by anyway.
+ *
+ * Disabling is a save with `enabled: false` — a config-preserving pause
+ * (decision 011 D1). Deleting the share is a separate, destructive
+ * operation this hook does not perform.
+ *
+ * Pass `null` for `agent` to produce a stable no-op (useful while the
+ * agent is still loading).
+ *
+ * @example
+ * ```tsx
+ * const { share } = useAgentShare(agent);
+ * const { save, isPending } = useSaveAgentShare(agent);
+ *
+ * const persisted = await save({ ...draft, enabled: true }, share);
+ * // persisted.status.shareLinkToken is the live link token
+ * ```
+ */
+export function useSaveAgentShare(agent) {
+    const stigmer = useStigmer();
+    const [isPending, setIsPending] = useState(false);
+    const [error, setError] = useState(null);
+    const agentOrg = agent?.metadata?.org ?? "";
+    const agentSlug = agent?.metadata?.slug ?? "";
+    const agentName = agent?.metadata?.name ?? "";
+    const save = useCallback(async (draft, current) => {
+        if (!agentOrg || !agentSlug)
+            return undefined;
+        setIsPending(true);
+        setError(null);
+        try {
+            return await stigmer.agentShare.apply({
+                // Identity: the existing share's org/slug when editing (a
+                // manifest-created share may carry a non-default slug — apply
+                // with the agent's slug would create a SECOND share), the
+                // agent's when creating (the server's own D2 default, made
+                // explicit).
+                org: current?.metadata?.org || agentOrg,
+                slug: current?.metadata?.slug || agentSlug,
+                name: current?.metadata?.name || agentName || agentSlug,
+                agentRef: { org: agentOrg, slug: agentSlug },
+                enabled: draft.enabled,
+                // Written as the explicit enum value, never left unspecified —
+                // a share persisted as "public" can't be silently downgraded
+                // by tooling that relies on the unspecified-means-public rule.
+                audience: sharingAudienceToProto(draft.audience),
+                allowedOrigins: [...draft.allowedOrigins],
+                messages: {
+                    rateLimited: draft.messages.rateLimited,
+                    unavailable: draft.messages.unavailable,
+                    conversationEnded: draft.messages.conversationEnded,
+                },
+                environmentRefs: draft.environmentRefs.map((ref) => ({
+                    org: ref.org,
+                    slug: ref.slug,
+                })),
+            });
+        }
+        catch (err) {
+            setError(toError(err));
+            throw err;
+        }
+        finally {
+            setIsPending(false);
+        }
+    }, [agentOrg, agentSlug, agentName, stigmer]);
+    return { save, isPending, error };
+}
+//# sourceMappingURL=useSaveAgentShare.js.map

package/sharing/useSaveAgentShare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useSaveAgentShare.js","sourceRoot":"","sources":["../../src/sharing/useSaveAgentShare.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAG9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,0DAA0D,CAAC;AAE9F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAqDjD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAwC;IAExC,OAAO,QAAQ,KAAK,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AAChE,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAyB;IACvD,OAAO,QAAQ,KAAK,KAAK;QACvB,CAAC,CAAC,kBAAkB,CAAC,GAAG;QACxB,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC;AAChC,CAAC;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAmB;IAEnB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;IAE9C,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EACH,KAAsB,EACtB,OAA0B,EACO,EAAE;QACnC,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QAE9C,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;gBACpC,0DAA0D;gBAC1D,8DAA8D;gBAC9D,0DAA0D;gBAC1D,2DAA2D;gBAC3D,aAAa;gBACb,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,QAAQ;gBACvC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,SAAS;gBAC1C,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,SAAS,IAAI,SAAS;gBACvD,QAAQ,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC5C,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,+DAA+D;gBAC/D,6DAA6D;gBAC7D,+DAA+D;gBAC/D,QAAQ,EAAE,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAChD,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;gBACzC,QAAQ,EAAE;oBACR,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;oBACvC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;oBACvC,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,iBAAiB;iBACpD;gBACD,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACnD,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;iBACf,CAAC,CAAC;aACJ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EACD,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAC1C,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC"}

package/sharing/useShareAgent.d.ts

@@ -47,10 +47,11 @@ export interface UseShareAgentReturn {
  * the running agent (billed to the owning org).
  *
  * Owns the open-state and the `can_edit` gate — the same permission the
- * `updateSharing` RPC enforces, so the action never appears to a user
- * whose changes would be rejected. Returns a `null` action while the
- * agent is loading or the user cannot edit, so the host can
- * unconditionally fold `action` into its actions array.
+ * AgentShare create/apply handlers enforce on the referenced agent, so
+ * the action never appears to a user whose changes would be rejected.
+ * Returns a `null` action while the agent is loading or the user cannot
+ * edit, so the host can unconditionally fold `action` into its actions
+ * array.
  *
  * @example
  * ```tsx

package/sharing/useShareAgent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useShareAgent.d.ts","sourceRoot":"","sources":["../../src/sharing/useShareAgent.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAyB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAEhF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,2CAA2C;AAC3C,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/D;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IACvC,wCAAwC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,6CAA6C;AAC7C,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IACrC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;IAC1B,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,aAAa,CAAC,EAC5B,KAAK,EACL,aAAa,EACb,gBAAgB,EAChB,KAAe,GAChB,EAAE,iBAAiB,GAAG,mBAAmB,CA2BzC"}
+{"version":3,"file":"useShareAgent.d.ts","sourceRoot":"","sources":["../../src/sharing/useShareAgent.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAyB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAEhF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,2CAA2C;AAC3C,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/D;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IACvC,wCAAwC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,6CAA6C;AAC7C,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IACrC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;IAC1B,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,aAAa,CAAC,EAC5B,KAAK,EACL,aAAa,EACb,gBAAgB,EAChB,KAAe,GAChB,EAAE,iBAAiB,GAAG,mBAAmB,CA2BzC"}

package/sharing/useShareAgent.js

@@ -10,10 +10,11 @@ import { ShareAgentDialog } from "./ShareAgentDialog.js";
  * the running agent (billed to the owning org).
  *
  * Owns the open-state and the `can_edit` gate — the same permission the
- * `updateSharing` RPC enforces, so the action never appears to a user
- * whose changes would be rejected. Returns a `null` action while the
- * agent is loading or the user cannot edit, so the host can
- * unconditionally fold `action` into its actions array.
+ * AgentShare create/apply handlers enforce on the referenced agent, so
+ * the action never appears to a user whose changes would be rejected.
+ * Returns a `null` action while the agent is loading or the user cannot
+ * edit, so the host can unconditionally fold `action` into its actions
+ * array.
  *
  * @example
  * ```tsx

package/sharing/useShareAgent.js.map

@@ -1 +1 @@
-{"version":3,"file":"useShareAgent.js","sourceRoot":"","sources":["../../src/sharing/useShareAgent.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AA2CzD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,aAAa,CAAC,EAC5B,KAAK,EACL,aAAa,EACb,gBAAgB,EAChB,KAAK,GAAG,OAAO,GACG;IAClB,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE5C,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;IAC5C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAC7C,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,EAC/C,UAAU,CACX,CAAC;IAEF,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAEpD,MAAM,MAAM,GACV,KAAK,IAAI,OAAO;QACd,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC1D,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CACrB,KAAC,gBAAgB,IACf,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,SAAS,EACvB,KAAK,EAAE,KAAK,EACZ,aAAa,EAAE,aAAa,EAC5B,gBAAgB,EAAE,gBAAgB,GAClC,CACH,CAAC,CAAC,CAAC,IAAI,CAAC;IAET,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"useShareAgent.js","sourceRoot":"","sources":["../../src/sharing/useShareAgent.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AA2CzD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,aAAa,CAAC,EAC5B,KAAK,EACL,aAAa,EACb,gBAAgB,EAChB,KAAK,GAAG,OAAO,GACG;IAClB,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE5C,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;IAC5C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAC7C,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,EAC/C,UAAU,CACX,CAAC;IAEF,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAEpD,MAAM,MAAM,GACV,KAAK,IAAI,OAAO;QACd,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC1D,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CACrB,KAAC,gBAAgB,IACf,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,SAAS,EACvB,KAAK,EAAE,KAAK,EACZ,aAAa,EAAE,aAAa,EAC5B,gBAAgB,EAAE,gBAAgB,GAClC,CACH,CAAC,CAAC,CAAC,IAAI,CAAC;IAET,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC"}

package/sharing/useShareToolReadiness.d.ts

@@ -1,18 +1,24 @@
 import type { Agent } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import type { AgentShareDraft } from "./useSaveAgentShare.js";
 /**
- * Readiness of a shared agent's tool credentials for visitor (and
- * teammate) executions.
+ * Readiness of a share's tool credentials for visitor executions.
  *
- * - `na` — nothing to check: the agent uses no MCP tools, the check is
- *   disabled, or the deployment cannot serve guest chat (local mode).
+ * - `na` — nothing to check: the agent uses no MCP tools, sharing is
+ *   off, the audience is org (bindings are public-audience only), or
+ *   the deployment cannot serve guest chat (local mode).
+ * - `needs-credentials` — the agent uses MCP tools but the share has no
+ *   environments bound: visitors' tool calls will fail until the owner
+ *   binds credentials.
  * - `checking` — lookups in flight.
- * - `ready` — every environment bound to the agent's default instance is
- *   shared with the organization.
+ * - `ready` — every environment bound to the share is shared with the
+ *   organization.
  * - `blocked` — one or more bound environments are private; their
  *   `org/slug` references are listed for the hint copy.
  */
 export type ShareToolReadiness = {
     readonly status: "na";
+} | {
+    readonly status: "needs-credentials";
 } | {
     readonly status: "checking";
 } | {
@@ -23,26 +29,24 @@ export type ShareToolReadiness = {
 };
 /**
  * Data hook that checks whether a tool-using shared agent's credentials
- * will work for visitors — i.e. whether the environments bound to its
- * default instance are shared with the organization (`visibility_org`).
- *
- * Guest and teammate executions can only use org-shared environments;
- * a private environment's secrets are creator-only and silently
- * unavailable to them, so the agent's tools would fail at runtime. This
- * hook powers the Share dialog's pre-flight hint, catching the
- * misconfiguration at share time instead of at the visitor's first
- * message.
+ * will work for visitors — i.e. whether the share binds environments
+ * (`environment_refs`) and each one is shared with the organization
+ * (`visibility_org`).
  *
- * Scope note: environments bound via `environment_refs` are the
- * supported credential path for shared agents. Credentials that only
- * exist in the owner's personal environment are also invisible to
- * guests, but are not detectable from the instance binding — the
- * runtime's enriched FAILED_PRECONDITION error covers that case.
+ * Guest executions receive credentials exclusively from the share's own
+ * `environment_refs`, resolved through the org-shared environment seam
+ * (decision 011 — the agent's default instance stays pristine and is
+ * never consulted). So a tool-using agent with an empty binding list is
+ * *guaranteed* broken for visitors, and this hook says so explicitly
+ * (`needs-credentials`) instead of staying silent — the gap that made
+ * session 12's misconfiguration invisible until a visitor's first
+ * message failed.
  *
- * The check runs only when `enabled` is true, the deployment is cloud
- * (local mode has no guest runtime or secret gating), and the agent
- * declares MCP server usages. All lookups run as the owner viewing the
- * dialog, who can read the bound environments.
+ * The check runs only when the share is enabled with a public audience
+ * (org-audience shares reject bindings at the proto boundary), the
+ * deployment is cloud (local mode has no guest runtime or secret
+ * gating), and the agent declares MCP server usages. All lookups run as
+ * the owner viewing the dialog, who can read the bound environments.
  */
-export declare function useShareToolReadiness(agent: Agent, enabled: boolean): ShareToolReadiness;
+export declare function useShareToolReadiness(agent: Agent, draft: AgentShareDraft): ShareToolReadiness;
 //# sourceMappingURL=useShareToolReadiness.d.ts.map

package/sharing/useShareToolReadiness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useShareToolReadiness.d.ts","sourceRoot":"","sources":["../../src/sharing/useShareToolReadiness.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAKhF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAIpF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,OAAO,GACf,kBAAkB,CA0EpB"}
+{"version":3,"file":"useShareToolReadiness.d.ts","sourceRoot":"","sources":["../../src/sharing/useShareToolReadiness.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAIhF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,GACxC;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAKpF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,eAAe,GACrB,kBAAkB,CAwEpB"}