Sharing & collaboration

Two levels of access

Choose Share in a workspace to invite people or create a share link. Each person gets one level:

Access	What they can do
Workspace	Edit apps, use chat with the agent and manage access. Nearly the same as the owner, but they can’t delete the workspace.
Gadget only	Open and use apps’ interfaces, without agent chat or editing.

You can’t grant more access than you have.

Collaborators use their own models and accounts

When a Workspace collaborator chats with the agent, the model comes from their account, and connections they add go through their third-party accounts. Collaborators can’t reach anything in your accounts beyond what the app is already granted.

Inviting people

• Add directly: enter their username (email). They need a Gosper account. There’s no in-app notification, so send them the link yourself.
• Share link: anyone who opens it becomes a collaborator. You can name, copy again or revoke a link.
  • Each copy mints a new key; earlier copies keep working;
  • revoking a link invalidates every key copied from it;
  • the server stores only a hash of each key and can’t rebuild a link.

Sharing doesn’t leak data

Data an app has read shouldn’t reach someone who couldn’t see it before. So:

1. The Share dialog lists the connections recipients must prove access to (“Recipients must prove their own account can reach …”).
2. When they open the app they connect those services with their own accounts. Each connector checks that their account can directly read everything the app has read through it. If not, they can’t open it.
3. From then on, every new read the app makes is checked against all recipients. If one of them lacks access, that read is blocked, and you can choose to remove that person.
4. Access is re-checked every time they open the app.

If a workspace has read sensitive data only you can access, it shows “This workspace can’t be shared”. To share something similar, turn the app into a blueprint so others can create their own copy with their own data.

Removing access

Remove people under People with access. You can only remove people you added; if someone also has access through another person or link, they keep it, and the dialog says so.