@agent-native/core 0.154.4 → 0.155.0

package/corpus/templates/design/shared/html-integrity.ts

@@ -34,6 +34,7 @@ export type DesignHtmlIntegrityIssue =
   | "runtime-missing"
   | "runtime-alpine-missing"
   | "runtime-cloak-missing"
+  | "runtime-overlay-unhidden"
   | "url-backed-screen-replaced";
 
 /**
@@ -153,6 +154,14 @@ export function describeDesignHtmlIntegrityIssue(
         `but no script source contains Alpine.js. The element will remain ` +
         `hidden forever; load Alpine.js before relying on x-cloak.`
       );
+    case "runtime-overlay-unhidden":
+      return (
+        `<${detail.tag ?? "element"}> at ${at} covers the whole frame and is ` +
+        `shown by Alpine (${detail.attribute ?? "x-show"}), but nothing hides ` +
+        `it before Alpine starts. It paints over the design on first render. ` +
+        `Add x-cloak plus [x-cloak] { display: none !important; }, or an ` +
+        `inline style="display:none".`
+      );
     case "runtime-cloak-missing":
       return (
         `the document uses x-cloak on <${detail.tag ?? "element"}> at ${at}, ` +
@@ -1175,6 +1184,53 @@ function collectInteractiveRuntimeIssues(
   ];
 }
 
+/**
+ * Covers the frame when it is taken out of flow AND stretched to every edge.
+ * `fixed` alone is a toolbar; `inset-0` alone is a normal filled parent.
+ */
+function coversViewport(className: string): boolean {
+  const classes = new Set(className.split(/\s+/));
+  const positioned = classes.has("fixed") || classes.has("absolute");
+  const fullBleed =
+    classes.has("inset-0") ||
+    (classes.has("w-screen") && classes.has("h-screen"));
+  return positioned && fullBleed;
+}
+
+/**
+ * The shape the `x-cloak` checks above cannot see. An overlay toggled by
+ * `x-show` with no `x-cloak` at all paints over the design until Alpine
+ * evaluates the expression — the same symptom, minus the attribute that makes
+ * it detectable. Advisory rather than blocking: with Alpine healthy this is one
+ * frame, and a genuinely broken runtime is already caught above.
+ *
+ * `<template x-if>` is deliberately not checked: template content is inert
+ * until Alpine clones it, so it cannot paint early.
+ */
+function collectOverlayAdvisory(
+  parsed: ParsedDocument,
+  locate: Locator,
+): DesignHtmlIntegrityIssueDetail[] {
+  for (const element of parsed.elements) {
+    const names = new Set(
+      element.attrs.map((attribute) => attribute.name.toLowerCase()),
+    );
+    if (names.has("x-cloak") || !names.has("x-show")) continue;
+    if (!coversViewport(attributeOf(element, "class") ?? "")) continue;
+    if (INLINE_PRE_HIDE.test(attributeOf(element, "style") ?? "")) continue;
+
+    return [
+      {
+        issue: "runtime-overlay-unhidden",
+        ...locate(locationOf(element)?.startOffset ?? 0),
+        tag: element.tagName,
+        attribute: "x-show",
+      },
+    ];
+  }
+  return [];
+}
+
 /**
  * Reported, never enforced: legitimate fragments and token-only screens carry no
  * runtime of their own, so blocking here would reject valid work.
@@ -1182,6 +1238,16 @@ function collectInteractiveRuntimeIssues(
 function collectAdvisoryIssues(
   parsed: ParsedDocument,
   locate: Locator,
+): DesignHtmlIntegrityIssueDetail[] {
+  return [
+    ...collectOverlayAdvisory(parsed, locate),
+    ...collectTailwindRuntimeAdvisory(parsed, locate),
+  ];
+}
+
+function collectTailwindRuntimeAdvisory(
+  parsed: ParsedDocument,
+  locate: Locator,
 ): DesignHtmlIntegrityIssueDetail[] {
   // Only documents that actually depend on utility classes can be broken by a
   // missing runtime. A screen styled entirely through its own CSS needs no

package/corpus/templates/dispatch/.env.example

@@ -43,6 +43,11 @@
 # App URL (used for webhook callback construction)
 # APP_URL=https://your-app.example.com
 
+# Optional exact registry for custom workspace apps that opt into Desktop SSO.
+# Each entry must declare appId, clientId, an exact HTTPS origin, callbackPath
+# "/_agent-native/identity/callback", and the "identity-sso" capability.
+# IDENTITY_SSO_APP_REGISTRY_JSON=
+
 # Builder-backed app creation in production
 # DISPATCH_BUILDER_PROJECT_ID=   # Default Builder project for new app branches
 # BUILDER_PUBLIC_KEY=            # Builder space/public key

package/corpus/templates/dispatch/AGENTS.md

@@ -13,10 +13,9 @@ Read the relevant skill before deeper work:
 
 ## Core Rules
 
-- Store large file/blob payloads in configured file/blob storage, not SQL: no
-  base64, `data:` URLs, images, video/audio, PDFs, ZIPs, screenshots,
-  thumbnails, or replay chunks in app tables, `application_state`, `settings`,
-  or `resources`; persist URLs, ids, or handles instead.
+- Store large file/blob payloads in configured file/blob storage, not SQL:
+  persist URLs, ids, or handles instead of base64, media, documents, archives,
+  screenshots, thumbnails, or replay chunks.
 - Never hardcode API keys, tokens, webhook URLs, signing secrets, private Builder/internal data, customer data, or credential-looking literals. Use secrets/OAuth/runtime configuration and obvious placeholders in examples.
 - Treat Dispatch as workspace infrastructure. Prefer actions over raw SQL for
   vault, integrations, resource grants, messaging, routing, and approvals.
@@ -32,13 +31,22 @@ Read the relevant skill before deeper work:
   values or silently widen app access while doing this.
 - Use `view-screen` when the current integration, resource, approval, route, or
   setup item is unclear.
-- Dispatch keeps its primary navigation focused on Overview, Chat, Apps, and
-  the workspace app rail. Workspace management and operator tools live under
-  the top-level `/admin` control plane, which uses grouped navigation for
-  `/admin/operations`, `/admin/metrics`, `/admin/integrations`, `/admin/vault`,
-  `/admin/automations`, `/admin/approvals`, `/admin/destinations`,
-  `/admin/agents`, `/admin/workspace`, `/admin/messaging`, `/admin/identities`,
-  `/admin/audit`, `/admin/dreams`, and `/admin/thread-debug`.
+- Use `import-agent` to normalize safe Claude Markdown or JSON into an
+  `agents/<slug>.md` profile; it skips credentials, hooks, shell, and local env.
+- Use `import-agent-pack` for a Claude Project/Cowork-style folder. It keeps the
+  runnable profile at `agents/<slug>.md` and stores text references, context,
+  and agent-owned skills below `agents/<slug>/`. Use `list-agent-pack` to
+  inspect the files and the shared agent pack UI to edit them.
+- Use `connect-external-agent` for public HTTP/A2A metadata; authenticate through
+  the normal connection flow.
+- Dispatch's primary nav is Overview, Chat, Apps, Agents, and the app rail.
+  `/agents` creates/imports reusable profiles, opens per-agent chat, and can
+  hand a profile off to app creation; `/admin/agents` manages technical MCP/A2A
+  connections; other workspace/operator tools live under `/admin`.
+- Agent profiles and agentic apps are also managed from Factory's top-level
+  Agents tab. Factory embeds the same agent actions and pack editor and reads
+  mounted app metadata through the shared Dispatch database; it does not create
+  a second agent registry.
 - Keep approval and routing behavior explicit. Never silently widen access to
   secrets, apps, integrations, or workspace resources.
 - Curated workspace templates are private app sources. Use
@@ -65,15 +73,12 @@ Read the relevant skill before deeper work:
   preserve the returned per-source health instead of treating an unavailable
   source as zero failures.
 - For a Slack-linked issue, call `read-slack-thread-context` with the exact
-  permalink before diagnosing it. It resolves child links to the parent thread,
-  preserves attachments and related URLs, and reports whether pagination is
-  complete. Never treat an unreadable Slack thread as an empty one.
+  permalink before diagnosing it; preserve its pagination and readability
+  status instead of treating an unreadable thread as empty.
 - For usage investigations, use `list-dispatch-usage-metrics` with the smallest
-  useful scope (`me` or `workspace`), lookback, and optional `userEmail` filter.
-  Treat prompt attribution as evidence with gaps: `not-captured` and
-  `unavailable` are not zero usage or a reason to guess. Use `view-screen` on
-  `/admin/metrics` to keep the agent's analysis aligned with the visible scope
-  and selected user.
+  useful scope and lookback. Treat `not-captured` and `unavailable` attribution
+  as gaps, not zero usage; use `view-screen` on `/admin/metrics` to align with
+  the visible scope and selected user.
 
 ## Application State
 

package/corpus/templates/dispatch/app/i18n-data.ts

@@ -327,6 +327,8 @@ const enUS = {
     },
     pages: {
       adminDescription: "Workspace controls and operations",
+      simpleAgentsDescription:
+        "Create reusable agents in minutes, or import a setup you already made in Claude or another agent tool.",
       adminNavigation: "Admin navigation",
       adminWelcome: "Workspace control plane",
       adminChooseArea:
@@ -1209,6 +1211,8 @@ export const messagesByLocale = {
         pages: {
           ...chatFirstPageTranslations["zh-CN"],
           adminDescription: "工作区控制与运营",
+          simpleAgentsDescription:
+            "几分钟内创建可复用的代理，或导入你已在 Claude 或其他代理工具中创建的设置。",
           adminNavigation: "管理导航",
           adminWelcome: "工作区控制中心",
           adminChooseArea: "在一个地方管理应用、连接、自动化和运营工具。",
@@ -1623,6 +1627,8 @@ export const messagesByLocale = {
         pages: {
           ...chatFirstPageTranslations["es-ES"],
           adminDescription: "Controles y operaciones del espacio de trabajo",
+          simpleAgentsDescription:
+            "Crea agentes reutilizables en minutos o importa una configuración que ya hayas creado en Claude u otra herramienta de agentes.",
           adminNavigation: "Navegación de administración",
           adminWelcome: "Panel de control del espacio de trabajo",
           adminChooseArea:
@@ -2048,6 +2054,8 @@ export const messagesByLocale = {
         pages: {
           ...chatFirstPageTranslations["fr-FR"],
           adminDescription: "Contrôles et opérations de l’espace de travail",
+          simpleAgentsDescription:
+            "Créez des agents réutilisables en quelques minutes ou importez une configuration déjà créée dans Claude ou un autre outil d’agents.",
           adminNavigation: "Navigation d’administration",
           adminWelcome: "Centre de contrôle de l’espace de travail",
           adminChooseArea:
@@ -2463,6 +2471,8 @@ export const messagesByLocale = {
         pages: {
           ...chatFirstPageTranslations["de-DE"],
           adminDescription: "Arbeitsbereichssteuerung und -betrieb",
+          simpleAgentsDescription:
+            "Erstelle in wenigen Minuten wiederverwendbare Agents oder importiere eine Konfiguration, die du bereits in Claude oder einem anderen Agent-Tool erstellt hast.",
           adminNavigation: "Administrationsnavigation",
           adminWelcome: "Arbeitsbereichsleitstelle",
           adminChooseArea:
@@ -2873,6 +2883,8 @@ export const messagesByLocale = {
         pages: {
           ...chatFirstPageTranslations["ja-JP"],
           adminDescription: "ワークスペースの管理と運用",
+          simpleAgentsDescription:
+            "数分で再利用可能なエージェントを作成するか、Claude などのエージェントツールで作成済みの設定をインポートします。",
           adminNavigation: "管理ナビゲーション",
           adminWelcome: "ワークスペースのコントロールプレーン",
           adminChooseArea:
@@ -3277,6 +3289,8 @@ export const messagesByLocale = {
         pages: {
           ...chatFirstPageTranslations["ko-KR"],
           adminDescription: "워크스페이스 제어 및 운영",
+          simpleAgentsDescription:
+            "몇 분 만에 재사용 가능한 에이전트를 만들거나 Claude 또는 다른 에이전트 도구에서 만든 설정을 가져오세요.",
           adminNavigation: "관리 탐색",
           adminWelcome: "워크스페이스 제어 센터",
           adminChooseArea:
@@ -3691,6 +3705,8 @@ export const messagesByLocale = {
         pages: {
           ...chatFirstPageTranslations["pt-BR"],
           adminDescription: "Controles e operações do espaço de trabalho",
+          simpleAgentsDescription:
+            "Crie agentes reutilizáveis em minutos ou importe uma configuração que você já criou no Claude ou em outra ferramenta de agentes.",
           adminNavigation: "Navegação de administração",
           adminWelcome: "Central de controle do espaço de trabalho",
           adminChooseArea:
@@ -4096,6 +4112,8 @@ export const messagesByLocale = {
         pages: {
           ...chatFirstPageTranslations["hi-IN"],
           adminDescription: "वर्कस्पेस नियंत्रण और संचालन",
+          simpleAgentsDescription:
+            "कुछ ही मिनटों में दोबारा इस्तेमाल किए जा सकने वाले एजेंट बनाएं, या Claude या किसी अन्य एजेंट टूल में पहले से बनाई गई सेटअप इंपोर्ट करें।",
           adminNavigation: "व्यवस्थापक नेविगेशन",
           adminWelcome: "वर्कस्पेस नियंत्रण केंद्र",
           adminChooseArea:
@@ -4529,6 +4547,8 @@ export const messagesByLocale = {
         pages: {
           ...chatFirstPageTranslations["ar-SA"],
           adminDescription: "عناصر التحكم في مساحة العمل وعملياتها",
+          simpleAgentsDescription:
+            "أنشئ وكلاء قابلين لإعادة الاستخدام خلال دقائق، أو استورد إعدادًا أنشأته بالفعل في Claude أو أداة وكلاء أخرى.",
           adminNavigation: "تنقل الإدارة",
           adminWelcome: "مركز التحكم في مساحة العمل",
           adminChooseArea:

package/corpus/templates/dispatch/server/lib/identity-sso.ts

@@ -14,7 +14,15 @@
 
 import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
 
-import { getDbExec, intType } from "@agent-native/core/db";
+import {
+  getDbExec,
+  intType,
+  isProductionServerlessFunctionRuntime,
+} from "@agent-native/core/db";
+import {
+  CANONICAL_WORKSPACE_SSO_APP_ORIGINS,
+  parseWorkspaceSsoAppRegistrations,
+} from "@agent-native/dispatch/shared/workspace-sso";
 
 const CONTROL_CHARS = /[\u0000-\u001f\u007f]/;
 const APP_ID = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
@@ -62,22 +70,7 @@ export function normalizeIdentityAuthority(raw: unknown): string | null {
 
 /** Exact first-party app origins. Never replace this with a suffix check. */
 export const CANONICAL_IDENTITY_SSO_APP_ORIGINS = {
-  analytics: "https://analytics.agent-native.com",
-  assets: "https://assets.agent-native.com",
-  brain: "https://brain.agent-native.com",
-  calendar: "https://calendar.agent-native.com",
-  chat: "https://chat.agent-native.com",
-  clips: "https://clips.agent-native.com",
-  content: "https://content.agent-native.com",
-  crm: "https://crm.agent-native.com",
-  design: "https://design.agent-native.com",
-  dispatch: "https://dispatch.agent-native.com",
-  forms: "https://forms.agent-native.com",
-  macros: "https://macros.agent-native.com",
-  mail: "https://mail.agent-native.com",
-  plan: "https://plan.agent-native.com",
-  slides: "https://slides.agent-native.com",
-  tasks: "https://tasks.agent-native.com",
+  ...CANONICAL_WORKSPACE_SSO_APP_ORIGINS,
 } as const;
 
 export const DEFAULT_ALLOWED_ORIGINS: readonly string[] = Object.values(
@@ -102,82 +95,17 @@ function canonicalRegistrations(): IdentitySsoAppRegistration[] {
   );
 }
 
-function exactOrigin(raw: unknown): string | null {
-  if (typeof raw !== "string" || !raw || CONTROL_CHARS.test(raw)) return null;
-  try {
-    const url = new URL(raw);
-    if (
-      url.protocol !== "https:" &&
-      !(url.protocol === "http:" && LOCALHOST_HOSTS.has(url.hostname))
-    ) {
-      return null;
-    }
-    if (
-      url.username ||
-      url.password ||
-      url.pathname !== "/" ||
-      url.search ||
-      url.hash
-    ) {
-      return null;
-    }
-    return url.origin;
-  } catch (error) {
-    void error;
-    return null;
-  }
-}
-
 function parseCustomRegistrations(
   env: NodeJS.ProcessEnv,
 ): IdentitySsoAppRegistration[] {
-  const raw = env.IDENTITY_SSO_APP_REGISTRY_JSON?.trim();
-  if (!raw) return [];
-  let value: unknown;
-  try {
-    value = JSON.parse(raw);
-  } catch (error) {
-    void error;
-    return [];
-  }
-  if (!Array.isArray(value)) return [];
-
-  const registrations: IdentitySsoAppRegistration[] = [];
-  const seen = new Set<string>();
-  for (const entry of value) {
-    if (!entry || typeof entry !== "object") continue;
-    const candidate = entry as Record<string, unknown>;
-    const appId = candidate.appId;
-    const clientId = candidate.clientId;
-    const origin = exactOrigin(candidate.origin);
-    const callbackPath = candidate.callbackPath;
-    const capabilities = candidate.capabilities;
-    if (
-      typeof appId !== "string" ||
-      !APP_ID.test(appId) ||
-      typeof clientId !== "string" ||
-      !CLIENT_ID.test(clientId) ||
-      !origin ||
-      callbackPath !== IDENTITY_SSO_CALLBACK_PATH ||
-      !Array.isArray(capabilities) ||
-      !capabilities.includes("identity-sso") ||
-      seen.has(appId) ||
-      Object.prototype.hasOwnProperty.call(
-        CANONICAL_IDENTITY_SSO_APP_ORIGINS,
-        appId,
-      )
-    ) {
-      continue;
-    }
-    seen.add(appId);
-    registrations.push({
-      appId,
-      clientId,
-      origin,
-      callbackPath: IDENTITY_SSO_CALLBACK_PATH,
-    });
-  }
-  return registrations;
+  return parseWorkspaceSsoAppRegistrations(
+    env.IDENTITY_SSO_APP_REGISTRY_JSON,
+  ).map((registration) => ({
+    appId: registration.appId,
+    clientId: registration.clientId,
+    origin: registration.origin,
+    callbackPath: IDENTITY_SSO_CALLBACK_PATH,
+  }));
 }
 
 /**
@@ -390,6 +318,9 @@ function buildCodeTableSql(): string {
 }
 
 async function ensureCodeTable(): Promise<void> {
+  // The Dispatch release migration owns this table in production serverless
+  // deployments. Do not turn a missing release migration into request-time DDL.
+  if (isProductionServerlessFunctionRuntime()) return;
   if (!codeTableInitPromise) {
     codeTableInitPromise = getDbExec()
       .execute(buildCodeTableSql())

package/corpus/templates/dispatch/server/plugins/identity-sso.ts

@@ -17,9 +17,8 @@
 
 import { signA2AToken } from "@agent-native/core/a2a";
 import {
-  getFeatureFlagRules,
+  hasActiveFeatureFlagRollout,
   isFeatureFlagEnabled,
-  normalizeFeatureFlagRules,
 } from "@agent-native/core/feature-flags";
 import { getOrgDomain } from "@agent-native/core/org";
 import { getH3App, getSession } from "@agent-native/core/server";
@@ -103,16 +102,8 @@ async function resolveOrgDomain(
 }
 
 export async function canAttemptWorkspaceSso(): Promise<boolean> {
-  const stored = await getFeatureFlagRules(
-    DESKTOP_WORKSPACE_SSO_FLAG.key,
-    {},
-  ).catch(() => null);
-  if (!stored) return false;
-  const rules = normalizeFeatureFlagRules(stored);
-  if (rules.mode === "off") return false;
-  if (rules.mode === "on") return true;
-  return (
-    rules.emails.length > 0 || rules.orgIds.length > 0 || rules.percentage > 0
+  return hasActiveFeatureFlagRollout(DESKTOP_WORKSPACE_SSO_FLAG.key).catch(
+    () => false,
   );
 }
 

package/corpus/templates/dispatch/shared/feature-flags.ts

@@ -2,6 +2,9 @@ import {
   defineFeatureFlag,
   defineFeatureFlags,
 } from "@agent-native/core/feature-flags";
+import { DISPATCH_WORKSPACE_SSO_FLAG } from "@agent-native/dispatch/shared/feature-flags";
+
+export { DISPATCH_WORKSPACE_SSO_FLAG };
 
 export const DESKTOP_WORKSPACE_SSO_FLAG = defineFeatureFlag({
   key: "desktop.workspace-sso",
@@ -12,4 +15,5 @@ export const DESKTOP_WORKSPACE_SSO_FLAG = defineFeatureFlag({
 
 export const DISPATCH_FEATURE_FLAGS = defineFeatureFlags([
   DESKTOP_WORKSPACE_SSO_FLAG,
+  DISPATCH_WORKSPACE_SSO_FLAG,
 ]);

package/corpus/templates/factory/AGENTS.md

@@ -37,7 +37,7 @@ decisions, feedback, agent runs, and provider audit records.
 
 - `navigation.view`: `factory` when the workspace is open.
 - `navigation.factoryId`: selected Factory id when present.
-- `navigation.factoryTab`: `map` | `inbox` | `rules` | `automations` | `audit` | `settings`.
+- `navigation.factoryTab`: `map` | `inbox` | `rules` | `automations` | `agents` | `audit` | `settings`.
 - `navigation.factoryAuditRunId`: selected automation run in the audit view when present.
 - `navigation.factoryNodeId` / `navigation.factoryEdgeId`: selected graph item.
 - A selected graph node or edge is part of `navigation` context. Read
@@ -68,6 +68,10 @@ decisions, feedback, agent runs, and provider audit records.
 | `save-factory-graph` | Create or version a complete visual graph; never starts provider work. |
 | `list-factory-comments` / `add-factory-comment` | Read or attach comments to a canvas, node, or edge. |
 | `provider-api-catalog` / `provider-api-docs` / `provider-api-request` | Discover and use connected provider APIs with shared workspace credentials; never request raw keys. |
+| `list-workspace-apps` / `update-workspace-app-metadata` | Inventory and edit mounted agentic apps in the shared workspace. |
+| `list-workspace-resources` / `create-workspace-resource` / `update-workspace-resource` | Manage shared resource records used by agents and apps. |
+| `import-agent` / `import-agent-pack` / `list-agent-pack` | Import a simple profile or a Claude/Cowork-style folder-backed agent pack. |
+| `start-workspace-app-creation` | Promote an agent and all of its pack resource ids into an app-creation handoff. |
 
 Rules start in shadow mode; hard guards always apply. Organization automations
 execute stored prompts, and every external mutation needs a durable run,

package/corpus/templates/factory/README.md

@@ -74,6 +74,29 @@ signed callback secret belong in Dispatch workspace credentials and are
 resolved at runtime. The app remains observe-only until a human explicitly
 approves a Factory item.
 
+## Agents and agentic apps
+
+Factory's top-level Agents tab is a shared workspace surface, not a second
+registry. It reads mounted agentic apps and their editable Dispatch metadata,
+then embeds Dispatch's reusable-agent manager for create, chat, import, and
+folder-backed pack editing. A simple agent's profile lives at
+`agents/<slug>.md`; its optional context, references, and private skills live
+under `agents/<slug>/`. Use the folder import to bring in a Claude Project,
+Cowork-style folder, or another text-based agent setup. The importer strips
+credentials, hooks, shell commands, and local environment settings, and All-app
+imports remain subject to Dispatch approval policy.
+
+When editing a factory flow, an agent step can bind to either a shared reusable
+agent or a ready mounted agentic app from the same workspace database. The map
+stores the selected target type and id, while the graph remains a reviewable
+blueprint and does not silently change runtime routing.
+
+Use **Build app** on an agent row when the agent needs a full workspace face.
+The handoff carries the profile and every pack resource id into app creation;
+the original agent remains reusable after the app is created. Mounted apps and
+simple agents continue to use the same Dispatch actions, SQL resources, grants,
+and application-state navigation.
+
 ## Development
 
 ```bash

package/corpus/templates/factory/actions/view-screen.ts

@@ -9,6 +9,7 @@
 
 import { defineAction } from "@agent-native/core/action";
 import { readAppState } from "@agent-native/core/application-state";
+import { dispatchActions } from "@agent-native/dispatch/actions";
 import { z } from "zod";
 
 import {
@@ -22,6 +23,12 @@ import {
   workspaceMemberIdentityFromContext,
 } from "../server/lib/require-workspace-member.js";
 
+async function runDispatchAction(name: string, args: Record<string, unknown>) {
+  const action = dispatchActions[name];
+  if (!action) throw new Error(`Dispatch action not found: ${name}`);
+  return action.run(args);
+}
+
 export default defineAction({
   description:
     "See what the user is currently looking at on screen. Returns the current navigation state for chat or Factory. Always call this first when the visible selection matters.",
@@ -63,6 +70,16 @@ export default defineAction({
         selectedNode: graph.nodes.find((node) => node.id === selectedNodeId),
         selectedEdge: graph.edges.find((edge) => edge.id === selectedEdgeId),
       };
+
+      if (state.factoryTab === "agents") {
+        const [apps, agents] = await Promise.all([
+          runDispatchAction("list-workspace-apps", {
+            includeAgentCards: false,
+          }),
+          runDispatchAction("list-workspace-resources", { kind: "agent" }),
+        ]);
+        screen.factoryAgents = { apps, agents };
+      }
     }
 
     if (Object.keys(screen).length === 0) {