davidmckayv · Oct 8, 2026 · Oct 7, 2026 · Oct 7, 2026 · Oct 7, 2026 · Oct 7, 2026
@@ -8,6 +8,22 @@ Newest first. `Unreleased` is what is on `main` and not yet tagged.
 
 ## Unreleased
 
+**Before upgrading.** Two things change for an existing deployment:
+- Migration `0052_shared_brokered_accounts` copies every Composio connection into a new
+  `brokered_connections` table and leaves `composio_connections` in place, unwritten. Rolling back to
+  0.1.2 works, but accounts connected after the upgrade are invisible to it.
+- A handoff now records what started the run it came from. Older remote Bots' signed runs carry no
+  such record for up to ten minutes after the upgrade, and calls they make to a Shared app in that
+  window are refused.
+
+### An app's account can belong to the team
+
+An administrator can make a Composio app Shared: one account, connected once, that every Bot granted
+the app acts as. Who may use it through each Bot is approved per Bot — owner only, named people and
+groups, or everyone, and separately whether email, Slack or webhook input may — and checked on every
+call. Requests to widen it wait in the Approvals inbox. Writes through a Shared app ask the person
+first.
+
 ### A new deployment starts with two coworkers, not twelve
 
 The example package loaded every coworker in `examples/fintech/agents/`, so a fresh deployment opened

@@ -1,5 +1,6 @@
 import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 import { useState } from "react";
+import { SharedUseRequests } from "@/components/approvals/shared-use-requests";
 import { Button } from "@/components/ui/button";
 import { Switch } from "@/components/ui/switch";
 import { Textarea } from "@/components/ui/textarea";
@@ -331,6 +332,7 @@ export function ApprovalInbox() {
           ))
         )}
       </div>
+      <SharedUseRequests />
       <div className="space-y-3">
         <h2 className="font-medium">Rules</h2>
         <p className="text-sm text-muted-foreground">

@@ -0,0 +1,75 @@
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { Button } from "@/components/ui/button";
+import { currentUserQueryOptions } from "@/lib/auth/queries";
+import {
+  decideSharedUseMutationOptions,
+  describeApproval,
+  type SharedUseRequestReason,
+  sharedUseRequestsQueryOptions,
+} from "@/lib/plugins/shared-use";
+
+const WHY: Record<SharedUseRequestReason, string> = {
+  refused_call:
+    "A call was refused because this Bot reaches more people than approved.",
+  publish: "Its owner widened who can reach it.",
+  trigger: "Its owner added a trigger that lets outside input steer it.",
+  grant: "It was granted the app's actions.",
+};
+
+export function SharedUseRequests() {
+  const queryClient = useQueryClient();
+  const me = useQuery(currentUserQueryOptions()).data;
+  const isAdmin = me?.role === "admin";
+  const requests = useQuery(sharedUseRequestsQueryOptions(isAdmin));
+  const decide = useMutation(decideSharedUseMutationOptions(queryClient));
+  if (!isAdmin || !requests.data?.length) return null;
+
+  return (
+    <div className="space-y-3">
+      <h2 className="font-medium">Shared account requests</h2>
+      {decide.error ? (
+        <p className="text-destructive text-sm" role="alert">
+          {decide.error.message}
+        </p>
+      ) : null}
+      {requests.data.map((request) => (
+        <article className="space-y-2 rounded-lg border p-4" key={request.id}>
+          <h3 className="font-medium text-sm">
+            {request.botName} wants the shared {request.title} account
+          </h3>
+          <p className="text-muted-foreground text-sm">
+            {WHY[request.reason as SharedUseRequestReason] ?? request.reason}
+          </p>
+          <p className="text-sm">
+            Now:{" "}
+            {request.current
+              ? describeApproval(request.current)
+              : "Not approved"}
+          </p>
+          <p className="text-sm">Asked: {describeApproval(request.proposed)}</p>
+          <div className="flex gap-2">
+            <Button
+              disabled={decide.isPending}
+              onClick={() =>
+                decide.mutate({ id: request.id, decision: "approve" })
+              }
+              size="sm"
+            >
+              Approve
+            </Button>
+            <Button
+              disabled={decide.isPending}
+              onClick={() =>
+                decide.mutate({ id: request.id, decision: "decline" })
+              }
+              size="sm"
+              variant="outline"
+            >
+              Decline
+            </Button>
+          </div>
+        </article>
+      ))}
+    </div>
+  );
+}
@@ -10,6 +10,7 @@ import { Link } from "@tanstack/react-router";
 import { Fragment, useState } from "react";
 import { AbstractAvatar } from "@/components/agents/abstract-avatar";
 import { PageRows, PageSection } from "@/components/layout/page-shell";
+import { SharedAppNotice } from "@/components/plugins/shared-app-notice";
 import { Button } from "@/components/ui/button";
 import {
   Dialog,
@@ -290,6 +291,9 @@ export function BotProfile({ agent }: { agent: AgentProfile }) {
       </div>
 
       <PageSection title="For you">
+        {agent.canManage ? (
+          <SharedAppNotice botId={agent.id} reason="publish" />
+        ) : null}
         {lifecycle.isPending ? null : lifecycle.error ? (
           <p className="mt-4 text-destructive text-sm" role="alert">
             Could not load this Bot's state.

@@ -0,0 +1,125 @@
+// app/src/components/plugins/account-mode-dialog.tsx
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { Button } from "@/components/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from "@/components/ui/dialog";
+import {
+  accountModePreview,
+  setAccountModeMutationOptions,
+} from "@/lib/plugins/mutations";
+import { describeApproval } from "@/lib/plugins/shared-use";
+
+/**
+ * The one moment an administrator decides between people's own accounts and one shared account.
+ *
+ * WHAT GOES IS NAMED BEFORE THE BUTTON, from the server's own dry run, so the count on screen is the
+ * count that will be revoked — and each Bot's approval is listed as it will be written, because that
+ * is the decision being made on their behalf, not a detail of it.
+ */
+export function AccountModeDialog({
+  serverId,
+  title,
+  target,
+  open,
+  onOpenChange,
+  names = {},
+}: {
+  serverId: string;
+  title: string;
+  target: "personal" | "shared";
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  names?: Record<string, string>;
+}) {
+  const queryClient = useQueryClient();
+  /**
+   * Kept out of the `["plugins", …]` family on purpose. `invalidatePlugins` — which every plugin
+   * write, including the switch below, runs `onSettled` — invalidates by that prefix, and this
+   * dialog stays mounted and enabled through its own confirm. Sharing the prefix would have the
+   * switch's own settle re-fire this dry run a moment after the real write, so the last request the
+   * dialog sent would read as a second preview rather than the switch that just happened.
+   */
+  const preview = useQuery({
+    queryKey: ["account-mode", serverId, target],
+    queryFn: () => accountModePreview(serverId, target),
+    enabled: open,
+  });
+  const change = useMutation({
+    ...setAccountModeMutationOptions(queryClient),
+    onSuccess: () => onOpenChange(false),
+  });
+  const count = preview.data?.wouldRevoke.count ?? 0;
+  const goes =
+    preview.data?.wouldRevoke.holder === "deployment"
+      ? count > 0
+        ? "The shared account will be disconnected."
+        : "No shared account is connected."
+      : `${count} personal ${count === 1 ? "account" : "accounts"} will be disconnected.`;
+  const action =
+    target === "shared" ? `Make ${title} shared` : `Make ${title} personal`;
+
+  return (
+    <Dialog onOpenChange={onOpenChange} open={open}>
+      <DialogContent className="max-w-md">
+        <DialogHeader>
+          <DialogTitle>
+            {target === "shared"
+              ? `Share one ${title} account?`
+              : `Give everyone their own ${title} account?`}
+          </DialogTitle>
+          <DialogDescription>
+            {preview.data ? goes : "Checking what this would change…"}
+          </DialogDescription>
+        </DialogHeader>
+        {target === "shared" ? (
+          <div className="mt-4 space-y-3 text-sm">
+            <p>
+              Everyone who can use a Bot granted this app will act as this one
+              account.
+            </p>
+            {preview.data?.bots.length ? (
+              <ul className="space-y-1">
+                {preview.data.bots.map((bot) => (
+                  <li key={bot.botId}>
+                    <span className="font-medium">
+                      {names[bot.botId] ?? bot.botId}
+                    </span>
+                    : {describeApproval(bot.exposure)}
+                  </li>
+                ))}
+              </ul>
+            ) : null}
+          </div>
+        ) : null}
+        {preview.error || change.error ? (
+          <p className="mt-4 text-destructive text-sm" role="alert">
+            {(change.error ?? preview.error)?.message}
+          </p>
+        ) : null}
+        <DialogFooter className="mt-4">
+          <Button
+            onClick={() => onOpenChange(false)}
+            size="sm"
+            variant="outline"
+          >
+            Cancel
+          </Button>
+          <Button
+            disabled={!preview.data || change.isPending}
+            onClick={() => change.mutate({ serverId, mode: target })}
+            size="sm"
+            variant="destructive"
+          >
+            {action}
+          </Button>
+        </DialogFooter>
+      </DialogContent>
+    </Dialog>
+  );
+}
@@ -816,6 +816,8 @@ export function BrokeredAccountRow({
   connectedDescription,
   disconnectedDescription,
   disconnectedReassurance,
+  heading,
+  notice,
   title,
 }: {
   account: BrokeredAccount;
@@ -832,6 +834,21 @@ export function BrokeredAccountRow({
    * right for both. A screen with nothing of the second kind to say passes nothing.
    */
   disconnectedReassurance?: string;
+  /**
+   * The row's own title, where "Your account" is wrong for it.
+   *
+   * A shared app is nobody's own account, so the screen that draws one passes its own heading
+   * rather than live with the row's default sense of ownership.
+   */
+  heading?: string;
+  /**
+   * A sentence beneath the row's description, for what the description itself is not about.
+   *
+   * Separate from `connectedDescription`/`disconnectedDescription` because those two already carry
+   * everything the connection state decides; a notice is the screen's own fact about the row —
+   * that it is shared, say — which holds regardless of which of those two is showing.
+   */
+  notice?: string;
   /**
    * The app's own name, for the sentences that name it.
    *
@@ -868,7 +885,7 @@ export function BrokeredAccountRow({
         <ItemContent>
           {/* Not "Connect your account": the row is also the connected state, and a title has to
               read for both. */}
-          <ItemTitle>Your account</ItemTitle>
+          <ItemTitle>{heading ?? "Your account"}</ItemTitle>
           {/* Unclamped where the key is missing: that sentence is the only place the setting is
               named, so it is the point rather than a hint. */}
           <ItemDescription
@@ -882,6 +899,13 @@ export function BrokeredAccountRow({
               title,
             })}
           </ItemDescription>
+          {/* A fact about the row itself rather than about the connection, so it holds under
+              either of the sentences above and is never clamped away. */}
+          {notice ? (
+            <ItemDescription className="line-clamp-none">
+              {notice}
+            </ItemDescription>
+          ) : null}
         </ItemContent>
         {/*
          * AN APP THAT NEEDS NO ACCOUNT HAS NOTHING HERE AT ALL — no Connect, and not a disabled one

@@ -0,0 +1,82 @@
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { Button } from "@/components/ui/button";
+import { currentUserQueryOptions } from "@/lib/auth/queries";
+import {
+  botSharedAppsQueryOptions,
+  requestSharedUseMutationOptions,
+} from "@/lib/plugins/shared-use";
+
+/**
+ * What changing who can reach a Bot means for the shared accounts it uses, said BEFORE the change.
+ *
+ * An administrator's change is its own approval, so they are told that and nothing is asked of them.
+ * Anybody else is told plainly that the shared calls will be refused until an administrator agrees,
+ * and is given the one button that asks — the alternative being that the first person to find out
+ * is whoever the refused call was for.
+ */
+export function SharedAppNotice({
+  botId,
+  reason,
+}: {
+  botId: string;
+  reason: "publish" | "trigger";
+}) {
+  const queryClient = useQueryClient();
+  const me = useQuery(currentUserQueryOptions()).data;
+  const shared = useQuery(botSharedAppsQueryOptions(botId));
+  const ask = useMutation(requestSharedUseMutationOptions(queryClient));
+  const apps = shared.data?.apps ?? [];
+  if (apps.length === 0) return null;
+
+  if (me?.role === "admin") {
+    return (
+      <div className="space-y-1 text-sm">
+        {apps.map((app) => (
+          <p key={app.serverId}>
+            Saving also approves the shared {app.title} account for whoever can
+            reach this Bot.
+          </p>
+        ))}
+      </div>
+    );
+  }
+
+  const waiting = new Set(
+    (shared.data?.pending ?? []).map((request) => request.serverId),
+  );
+  return (
+    <div className="space-y-2 text-sm">
+      {apps.map((app) =>
+        waiting.has(app.serverId) ? (
+          <p className="text-muted-foreground" key={app.serverId}>
+            Waiting for an administrator: shared {app.title}
+          </p>
+        ) : app.covered ? null : (
+          <div className="flex flex-wrap items-center gap-2" key={app.serverId}>
+            <p className="text-amber-700 dark:text-amber-400">
+              {app.title} calls from this Bot are refused until an administrator
+              approves who can reach it.
+            </p>
+            <Button
+              aria-label={`Request approval for ${app.title}`}
+              disabled={ask.isPending}
+              onClick={() =>
+                ask.mutate({ botId, serverId: app.serverId, reason })
+              }
+              size="sm"
+              type="button"
+              variant="outline"
+            >
+              Request approval
+            </Button>
+          </div>
+        ),
+      )}
+      {ask.error ? (
+        <p className="text-destructive" role="alert">
+          {ask.error.message}
+        </p>
+      ) : null}
+    </div>
+  );
+}