@agent-native/core 0.152.1 → 0.153.0

package/corpus/templates/dispatch/actions/upsert-workspace-connection.ts

@@ -3,12 +3,17 @@ import {
   getWorkspaceConnectionProvider,
   type WorkspaceConnectionProvider,
 } from "@agent-native/core/connections";
+import { isOrgMember } from "@agent-native/core/org";
 import {
+  assertWorkspaceUserGroupIds,
+  normalizeWorkspaceConnectionAllowedUsers,
   upsertWorkspaceConnection,
   type WorkspaceConnectionStatus,
 } from "@agent-native/core/workspace-connections";
 import { z } from "zod";
 
+import { assertWorkspaceConnectionManager } from "./connection-permissions.js";
+
 const statusSchema = z.enum([
   "connected",
   "checking",
@@ -57,6 +62,42 @@ function normalizeCredentialRefs(
     });
 }
 
+export async function assertWorkspaceConnectionAllowedUsers(
+  allowedUsers: string[] | undefined,
+  orgId: string | null | undefined,
+): Promise<string[] | undefined> {
+  if (allowedUsers === undefined) return undefined;
+
+  const normalized = normalizeWorkspaceConnectionAllowedUsers(allowedUsers);
+  if (normalized.length === 0) return normalized;
+  if (!orgId?.trim()) {
+    throw new Error(
+      "Selected people require a workspace connection. Personal connections are only available to you.",
+    );
+  }
+
+  const missing = (
+    await Promise.all(
+      normalized.map(async (email) =>
+        (await isOrgMember(orgId, email)) ? null : email,
+      ),
+    )
+  ).filter((email): email is string => Boolean(email));
+  if (missing.length > 0) {
+    throw new Error(
+      `Selected people must be members of this workspace: ${missing.join(", ")}.`,
+    );
+  }
+  return normalized;
+}
+
+export async function assertWorkspaceConnectionAllowedUserGroups(
+  allowedUserGroups: string[] | undefined,
+  orgId: string | null | undefined,
+): Promise<string[] | undefined> {
+  return assertWorkspaceUserGroupIds(allowedUserGroups, orgId);
+}
+
 export default defineAction({
   description:
     "Create or update a shared workspace integration connection and its app access list.",
@@ -91,6 +132,18 @@ export default defineAction({
       .array(z.string())
       .default([])
       .describe("App IDs that may use this connection. Empty means all apps."),
+    allowedUsers: z
+      .array(z.string())
+      .optional()
+      .describe(
+        "Workspace member email addresses that may use this connection. Empty means all workspace members.",
+      ),
+    allowedUserGroups: z
+      .array(z.string())
+      .optional()
+      .describe(
+        "Workspace user group IDs that may use this connection. Groups are unioned with selected people.",
+      ),
     credentialRefs: z
       .array(credentialRefSchema)
       .default([])
@@ -99,7 +152,8 @@ export default defineAction({
       ),
     lastError: z.string().nullable().optional(),
   }),
-  run: async (args) => {
+  run: async (args, ctx) => {
+    await assertWorkspaceConnectionManager(ctx, args.allowedApps);
     const provider = getWorkspaceConnectionProvider(args.provider);
     if (!provider) {
       throw new Error(
@@ -107,9 +161,20 @@ export default defineAction({
       );
     }
 
+    const allowedUsers = await assertWorkspaceConnectionAllowedUsers(
+      args.allowedUsers,
+      ctx?.orgId,
+    );
+    const allowedUserGroups = await assertWorkspaceConnectionAllowedUserGroups(
+      args.allowedUserGroups,
+      ctx?.orgId,
+    );
+
     return upsertWorkspaceConnection({
       ...args,
       status: args.status as WorkspaceConnectionStatus,
+      allowedUsers,
+      allowedUserGroups,
       credentialRefs: normalizeCredentialRefs(args.credentialRefs, provider),
     });
   },

package/corpus/templates/dispatch/actions/upsert-workspace-user-group.ts

@@ -0,0 +1,27 @@
+import { defineAction } from "@agent-native/core";
+import {
+  assertWorkspaceUserGroupManager,
+  upsertWorkspaceUserGroup,
+} from "@agent-native/core/workspace-connections";
+import { z } from "zod";
+
+export default defineAction({
+  description:
+    "Create or update a reusable workspace user group and its member list.",
+  schema: z.object({
+    id: z.string().optional().describe("Existing user group ID to update."),
+    name: z.string().describe("Group name, such as Rev Ops."),
+    memberEmails: z
+      .array(z.string())
+      .default([])
+      .describe("Workspace member email addresses in this group."),
+  }),
+  run: async (args, ctx) => {
+    await assertWorkspaceUserGroupManager(ctx?.orgId, ctx?.userEmail);
+    return upsertWorkspaceUserGroup({
+      ...args,
+      orgId: ctx?.orgId,
+      createdByEmail: ctx?.userEmail,
+    });
+  },
+});

package/corpus/templates/dispatch/app/chat-first-pages.ts

@@ -4,6 +4,14 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
   {
     "zh-TW": {
       chatFirstWorkspaceApps: "工作區應用程式",
+      searchApps: "搜尋應用程式",
+      searchAppsPlaceholder: "依名稱或描述搜尋",
+      clearAppSearch: "清除搜尋",
+      noAppsMatch: "沒有符合搜尋條件的應用程式",
+      pinApp: "釘選 {{name}}",
+      unpinApp: "取消釘選 {{name}}",
+      appPinSaveFailed: "無法儲存應用程式釘選。",
+      appPinSavedLocally: "應用程式釘選只儲存在此裝置上。",
       chatFirstCreateWorkspaceApp: "建立工作區應用程式",
       chatFirstOpenApp: "開啟 {{name}}",
       chatFirstAppsLoadError: "無法載入工作區應用程式",
@@ -73,6 +81,14 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
     },
     "zh-CN": {
       chatFirstWorkspaceApps: "工作区应用",
+      searchApps: "搜索应用",
+      searchAppsPlaceholder: "按名称或描述搜索",
+      clearAppSearch: "清除搜索",
+      noAppsMatch: "没有匹配搜索的应用",
+      pinApp: "固定 {{name}}",
+      unpinApp: "取消固定 {{name}}",
+      appPinSaveFailed: "无法保存应用固定设置。",
+      appPinSavedLocally: "应用固定设置仅保存在此设备上。",
       chatFirstCreateWorkspaceApp: "创建工作区应用",
       chatFirstOpenApp: "打开 {{name}}",
       chatFirstAppsLoadError: "无法加载工作区应用",
@@ -142,6 +158,15 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
     },
     "es-ES": {
       chatFirstWorkspaceApps: "Apps del espacio de trabajo",
+      searchApps: "Buscar apps",
+      searchAppsPlaceholder: "Buscar por nombre o descripción",
+      clearAppSearch: "Borrar búsqueda",
+      noAppsMatch: "Ninguna app coincide con tu búsqueda",
+      pinApp: "Fijar {{name}}",
+      unpinApp: "Desfijar {{name}}",
+      appPinSaveFailed: "No se pudieron guardar las apps fijadas.",
+      appPinSavedLocally:
+        "Las apps fijadas solo se guardan en este dispositivo.",
       chatFirstCreateWorkspaceApp: "Crear app del espacio de trabajo",
       chatFirstOpenApp: "Abrir {{name}}",
       chatFirstAppsLoadError:
@@ -219,6 +244,15 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
     },
     "fr-FR": {
       chatFirstWorkspaceApps: "Applications de l’espace de travail",
+      searchApps: "Rechercher des applications",
+      searchAppsPlaceholder: "Rechercher par nom ou description",
+      clearAppSearch: "Effacer la recherche",
+      noAppsMatch: "Aucune application ne correspond à votre recherche",
+      pinApp: "Épingler {{name}}",
+      unpinApp: "Désépingler {{name}}",
+      appPinSaveFailed: "Impossible d’enregistrer les applications épinglées.",
+      appPinSavedLocally:
+        "Les applications épinglées sont enregistrées uniquement sur cet appareil.",
       chatFirstCreateWorkspaceApp: "Créer une application d’espace de travail",
       chatFirstOpenApp: "Ouvrir {{name}}",
       chatFirstAppsLoadError:
@@ -298,6 +332,15 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
     },
     "de-DE": {
       chatFirstWorkspaceApps: "Arbeitsbereich-Apps",
+      searchApps: "Apps durchsuchen",
+      searchAppsPlaceholder: "Nach Name oder Beschreibung suchen",
+      clearAppSearch: "Suche löschen",
+      noAppsMatch: "Keine Apps entsprechen deiner Suche",
+      pinApp: "{{name}} anheften",
+      unpinApp: "{{name}} loslösen",
+      appPinSaveFailed: "App-Anheftungen konnten nicht gespeichert werden.",
+      appPinSavedLocally:
+        "App-Anheftungen werden nur auf diesem Gerät gespeichert.",
       chatFirstCreateWorkspaceApp: "Arbeitsbereich-App erstellen",
       chatFirstOpenApp: "{{name}} öffnen",
       chatFirstAppsLoadError:
@@ -376,6 +419,14 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
     },
     "ja-JP": {
       chatFirstWorkspaceApps: "ワークスペースアプリ",
+      searchApps: "アプリを検索",
+      searchAppsPlaceholder: "名前または説明で検索",
+      clearAppSearch: "検索をクリア",
+      noAppsMatch: "検索に一致するアプリはありません",
+      pinApp: "{{name}}を固定",
+      unpinApp: "{{name}}の固定を解除",
+      appPinSaveFailed: "アプリの固定を保存できませんでした。",
+      appPinSavedLocally: "アプリの固定はこのデバイスにのみ保存されます。",
       chatFirstCreateWorkspaceApp: "ワークスペースアプリを作成",
       chatFirstOpenApp: "{{name}}を開く",
       chatFirstAppsLoadError: "ワークスペースアプリを読み込めませんでした",
@@ -453,6 +504,14 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
     },
     "ko-KR": {
       chatFirstWorkspaceApps: "워크스페이스 앱",
+      searchApps: "앱 검색",
+      searchAppsPlaceholder: "이름 또는 설명으로 검색",
+      clearAppSearch: "검색 지우기",
+      noAppsMatch: "검색 결과가 없습니다",
+      pinApp: "{{name}} 고정",
+      unpinApp: "{{name}} 고정 해제",
+      appPinSaveFailed: "앱 고정을 저장하지 못했습니다.",
+      appPinSavedLocally: "앱 고정은 이 기기에만 저장됩니다.",
       chatFirstCreateWorkspaceApp: "워크스페이스 앱 만들기",
       chatFirstOpenApp: "{{name}} 열기",
       chatFirstAppsLoadError: "워크스페이스 앱을 불러오지 못했습니다",
@@ -526,6 +585,15 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
     },
     "pt-BR": {
       chatFirstWorkspaceApps: "Apps do espaço de trabalho",
+      searchApps: "Pesquisar apps",
+      searchAppsPlaceholder: "Pesquisar por nome ou descrição",
+      clearAppSearch: "Limpar pesquisa",
+      noAppsMatch: "Nenhum app corresponde à sua pesquisa",
+      pinApp: "Fixar {{name}}",
+      unpinApp: "Desafixar {{name}}",
+      appPinSaveFailed: "Não foi possível salvar os apps fixados.",
+      appPinSavedLocally:
+        "Os apps fixados são salvos somente neste dispositivo.",
       chatFirstCreateWorkspaceApp: "Criar app do espaço de trabalho",
       chatFirstOpenApp: "Abrir {{name}}",
       chatFirstAppsLoadError:
@@ -603,6 +671,14 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
     },
     "hi-IN": {
       chatFirstWorkspaceApps: "वर्कस्पेस ऐप्स",
+      searchApps: "ऐप्स खोजें",
+      searchAppsPlaceholder: "नाम या विवरण से खोजें",
+      clearAppSearch: "खोज साफ़ करें",
+      noAppsMatch: "आपकी खोज से कोई ऐप मेल नहीं खाता",
+      pinApp: "{{name}} पिन करें",
+      unpinApp: "{{name}} अनपिन करें",
+      appPinSaveFailed: "ऐप पिन सहेजे नहीं जा सके।",
+      appPinSavedLocally: "ऐप पिन केवल इस डिवाइस पर सहेजे गए हैं।",
       chatFirstCreateWorkspaceApp: "वर्कस्पेस ऐप बनाएँ",
       chatFirstOpenApp: "{{name}} खोलें",
       chatFirstAppsLoadError: "वर्कस्पेस ऐप्स लोड नहीं हो सके",
@@ -674,6 +750,14 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
     },
     "ar-SA": {
       chatFirstWorkspaceApps: "تطبيقات مساحة العمل",
+      searchApps: "البحث عن التطبيقات",
+      searchAppsPlaceholder: "البحث بالاسم أو الوصف",
+      clearAppSearch: "مسح البحث",
+      noAppsMatch: "لا توجد تطبيقات تطابق بحثك",
+      pinApp: "تثبيت {{name}}",
+      unpinApp: "إلغاء تثبيت {{name}}",
+      appPinSaveFailed: "تعذر حفظ تثبيتات التطبيقات.",
+      appPinSavedLocally: "تُحفظ تثبيتات التطبيقات على هذا الجهاز فقط.",
       chatFirstCreateWorkspaceApp: "إنشاء تطبيق مساحة عمل",
       chatFirstOpenApp: "فتح {{name}}",
       chatFirstAppsLoadError: "تعذر تحميل تطبيقات مساحة العمل",