@agent-native/dispatch 0.0.0-beta-20260819155526

package/README.md

@@ -0,0 +1,146 @@
+# @agent-native/dispatch
+
+Dispatch is the Agent-Native workspace control plane and a separate product.
+It is not a Toolkit capability module.
+
+Workspace control plane for agent-native apps — vault, integrations,
+destinations, cross-app workspace resources, recurring "dream" report jobs,
+and cross-app delegation, shipped as a single drop-in package.
+
+Powers the `dispatch` template. Provides:
+
+- **Drizzle schemas** — destinations, identity links, link tokens, approval
+  requests, audit events, dream reports/proposals, vault secrets/grants/
+  requests/audit, workspace resources/grants
+- **Server layer** — `setupDispatch(config)` plus Nitro plugins for auth,
+  integrations, agent chat, DB, and core routes
+- **Actions** — ~90 `defineAction` modules (vault grants/requests, workspace
+  resource grants, destinations, dream jobs, provider-api catalog/docs/
+  request, Slack thread context, connected-agent discovery, audit/approvals,
+  platform messaging, and more) consumed as agent tools + HTTP endpoints
+- **Routes** — a full React Router 7 `RouteConfig[]` (chat, overview, apps,
+  vault, integrations, agents, workspace, messaging, destinations,
+  identities, approvals, automations, audit, settings, dreams, extensions,
+  ...) to splat into a consumer's `app/routes.ts`
+- **React components** — `DispatchShell`, `Layout`/`NavContent`,
+  `CreateAppPopover`/`CreateAppFlow`, `AppKeysPopover`, plus a full
+  shadcn/ui-based `components/ui/*` primitive set. `SimpleAgentsPanel` is
+  also exported for embedding the shared agent manager in another workspace UI.
+- **Styles** — `dispatch.css` Tailwind layer
+
+## Install
+
+```bash
+pnpm add @agent-native/dispatch
+```
+
+Peer-depends on `@agent-native/core` (`>=0.8.0`), `react`/`react-dom`
+(`>=19.2.7`), and `react-router` (`>=8`).
+
+## Compose
+
+Template's `app/routes.ts`:
+
+```ts
+import { type RouteConfig } from "@react-router/dev/routes";
+import { dispatchRoutes } from "@agent-native/dispatch/routes";
+
+export default [
+  ...localRoutes, // consumer's own routes win on collision
+  ...dispatchRoutes, // dispatch fills in everything else
+] satisfies RouteConfig;
+```
+
+Template's `server/plugins/*.ts` (each export lives in its own file so Nitro
+auto-loads it):
+
+```ts
+// server/plugins/setup-dispatch.ts
+import { setupDispatch } from "@agent-native/dispatch/server";
+export default setupDispatch({ auth: { googleOnly: true } });
+
+// server/plugins/auth.ts
+export { dispatchAuthPlugin as default } from "@agent-native/dispatch/server";
+
+// server/plugins/integrations.ts
+export { dispatchIntegrationsPlugin as default } from "@agent-native/dispatch/server";
+
+// server/plugins/agent-chat.ts
+export { dispatchAgentChatPlugin as default } from "@agent-native/dispatch/server";
+
+// server/plugins/db.ts
+export { dispatchDbPlugin as default } from "@agent-native/dispatch/server";
+
+// server/plugins/core-routes.ts
+export { dispatchCoreRoutesPlugin as default } from "@agent-native/dispatch/server";
+```
+
+Template's `server/db/schema.ts`:
+
+```ts
+export * from "@agent-native/dispatch/db";
+```
+
+`@agent-native/dispatch/actions` doesn't need a manual import for most
+consumers: `import "@agent-native/dispatch/server"` (pulled in by the plugin
+wiring above) side-effect-registers every Dispatch action via
+`registerPackageActions`, and the framework's `autoDiscoverActions` merges
+them in after the consumer's local `actions/` directory. Drop a same-named
+file in the consumer's own `actions/` to override any single action.
+
+## Exports
+
+| Subpath                            | What it is                                                                                                                                                                                                                                                                                                                                                                               |
+| ---------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `.`                                | Shared config types only — `DispatchConfig`, `DispatchAuthConfig`, `DispatchIntegrationsConfig`. Import this where a type is needed without pulling in server/client code.                                                                                                                                                                                                               |
+| `./routes`                         | `dispatchRoutes` — a programmatic `RouteConfig[]` covering every Dispatch page (chat, overview, metrics, operations, apps, vault, integrations, agents, workspace, messaging, destinations, identities, approvals, automations, audit, settings, dreams, extensions, thread-debug, team, and a workspace-app catch-all route).                                                           |
+| `./routes/pages/*`                 | Individual compiled page modules the routes above point at (e.g. `./routes/pages/vault.js`). Not normally imported directly.                                                                                                                                                                                                                                                             |
+| `./server`                         | `setupDispatch(config)` plus the Nitro plugin set: `dispatchAuthPlugin`, `dispatchIntegrationsPlugin`, `dispatchAgentChatPlugin`, `dispatchDbPlugin`, `dispatchCoreRoutesPlugin`. Importing this module also side-effect-registers all Dispatch actions.                                                                                                                                 |
+| `./shared/feature-flags`           | The default-off `DISPATCH_WORKSPACE_SSO_FLAG` definition used to target browser workspace sign-in safely.                                                                                                                                                                                                                                                                                |
+| `./shared/workspace-sso`           | Exact first-party workspace SSO origins and the additive custom registration parser shared by Dispatch and the identity hub.                                                                                                                                                                                                                                                             |
+| `./server/lib/thread-link-preview` | `loadThreadLinkPreview(threadId)` — server-only helper (reads request context and checks thread ownership) that builds link-preview metadata for shared thread URLs.                                                                                                                                                                                                                     |
+| `./actions`                        | `dispatchActions` — the flat name → `ActionEntry` map of every Dispatch action (vault, workspace resources, destinations, dream jobs, provider-api catalog/docs/request, connected agents, audit, approvals, platform messaging, and more).                                                                                                                                              |
+| `./db`                             | `getDb()` / `db()`, the Drizzle `schema` namespace, the Dispatch table exports (`dispatchDestinations`, `dispatchIdentityLinks`, `dispatchLinkTokens`, `dispatchApprovalRequests`, `dispatchAuditEvents`, `dispatchDreams`, `dispatchDreamProposals`, `vaultSecrets`, `vaultGrants`, `vaultRequests`, `vaultAuditLog`, `workspaceResources`, `workspaceResourceGrants`), and migrations. |
+| `./lib/thread-link-preview`        | Isomorphic helpers behind the server one above — `extractThreadPreviewImageUrl`, `buildThreadLinkPreviewMeta`, and the `ThreadLinkPreview` type. Safe to import from client code.                                                                                                                                                                                                        |
+| `./components`                     | Escape-hatch UI pieces for custom layouts: `DispatchShell`, `Layout`/`NavContent` (plus `DispatchExtensionConfig`/`DispatchNavIcon`/`DispatchNavItem`/`DispatchNavSection` types), `CreateAppPopover`/`CreateAppFlow`, `AppKeysPopover`. Most consumers only need `dispatchRoutes` and never import from here directly.                                                                  |
+| `./components/ui/*`                | The shadcn/ui primitive set Dispatch's own UI is built on (`button`, `dialog`, `dropdown-menu`, `card`, `command`, `calendar`, `chart`, ...), exported per-file so a consumer can reuse one primitive without pulling in the rest.                                                                                                                                                       |
+| `./styles/dispatch.css`            | Tailwind layer with Dispatch-specific styles. Import once in the consumer's global CSS entry.                                                                                                                                                                                                                                                                                            |
+
+## What it's for
+
+Dispatch is the workspace control plane sitting above individual template
+apps:
+
+- **Vault** — shared workspace secrets with a request → grant → audit flow,
+  scoped per app.
+- **Workspace resources** — cross-app resources (e.g. shared instructions or
+  data) with explicit per-app grants and effective-context resolution.
+- **Simple agents and agent packs** — reusable agents keep a Claude-compatible
+  Markdown/JSON profile at `agents/<slug>.md` and can own sibling files under
+  `agents/<slug>/context/`, `references/`, and `skills/<name>/SKILL.md`. The
+  `import-agent-pack` and `list-agent-pack` actions create/read the whole pack;
+  `import-agent` remains the fast single-file path. Unsafe capabilities such as
+  credentials, hooks, shell commands, and local environment settings are
+  stripped or reported as warnings. Pack files are text resources, not an
+  execution grant.
+- **Integrations & destinations** — outbound messaging channel setup (Slack,
+  Teams, Discord, Telegram, WhatsApp, email, and more) and a destinations
+  queue for delivering agent output.
+- **Dream jobs** — a recurring background job (`ensure-dream-job`) that scans
+  agent thread-debug history across connected sources and produces pending,
+  evidence-backed proposals (`create-dream-report`, `list-dream-candidates`,
+  `apply-dream-proposal` / `reject-dream-proposal`) without an extra LLM call.
+- **Connected agents & provider APIs** — discovery of other workspace apps
+  (`list-connected-agents`, `open_app`, `ask_app`) and a generic provider-api
+  catalog/docs/request surface for calling third-party APIs through stored
+  credentials.
+- **Approvals & audit** — a shared approval-request/audit-event model used
+  across the above surfaces.
+
+## Eject
+
+There is no `agent-native.package.json` / CLI package-lifecycle wiring for
+this package yet (unlike `@agent-native/scheduling`). To customize beyond the
+`setupDispatch` config surface, copy the files you want to own out of
+`node_modules/@agent-native/dispatch/src` into your own package and swap the
+dependency manually.

package/dist/actions/apply-dream-proposal.d.ts

@@ -0,0 +1,29 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    id: string;
+}, {
+    proposal: {
+        evidence: import("../server/lib/dreams-store.js").DreamEvidence[];
+        appliedAt: number | null;
+        appliedBy: string | null;
+        confidence: number;
+        content: string;
+        createdAt: number;
+        dreamId: string;
+        id: string;
+        orgId: string | null;
+        ownerEmail: string;
+        rationale: string;
+        rejectedAt: number | null;
+        rejectedBy: string | null;
+        risk: string;
+        status: string;
+        summary: string;
+        targetPath: string;
+        targetType: string;
+        title: string;
+        updatedAt: number;
+    };
+    result: unknown;
+}>;
+export default _default;
+//# sourceMappingURL=apply-dream-proposal.d.ts.map

package/dist/actions/apply-dream-proposal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-dream-proposal.d.ts","sourceRoot":"","sources":["../../src/actions/apply-dream-proposal.ts"],"names":[],"mappings":""}

package/dist/actions/apply-dream-proposal.js

@@ -0,0 +1,11 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { applyDreamProposal } from "../server/lib/dreams-store.js";
+export default defineAction({
+    description: "Apply one pending Dispatch dream proposal. Personal memory applies directly; shared LEARNINGS.md and workspace resource proposals queue an approval request when approval policy is enabled.",
+    schema: z.object({
+        id: z.string().min(1).describe("Dream proposal id."),
+    }),
+    run: async ({ id }) => applyDreamProposal(id),
+});
+//# sourceMappingURL=apply-dream-proposal.js.map

package/dist/actions/apply-dream-proposal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-dream-proposal.js","sourceRoot":"","sources":["../../src/actions/apply-dream-proposal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,8LAA8L;IAChM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;KACrD,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { applyDreamProposal } from \"../server/lib/dreams-store.js\";\n\nexport default defineAction({\n  description:\n    \"Apply one pending Dispatch dream proposal. Personal memory applies directly; shared LEARNINGS.md and workspace resource proposals queue an approval request when approval policy is enabled.\",\n  schema: z.object({\n    id: z.string().min(1).describe(\"Dream proposal id.\"),\n  }),\n  run: async ({ id }) => applyDreamProposal(id),\n});\n"]}

package/dist/actions/approve-dispatch-change.d.ts

@@ -0,0 +1,22 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    id: string;
+}, {
+    afterValue: string | null;
+    beforeValue: string | null;
+    changeType: string;
+    createdAt: number;
+    id: string;
+    orgId: string | null;
+    ownerEmail: string;
+    payload: string;
+    requestedBy: string;
+    reviewedAt: number | null;
+    reviewedBy: string | null;
+    status: string;
+    summary: string;
+    targetId: string | null;
+    targetType: string;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=approve-dispatch-change.d.ts.map

package/dist/actions/approve-dispatch-change.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve-dispatch-change.d.ts","sourceRoot":"","sources":["../../src/actions/approve-dispatch-change.ts"],"names":[],"mappings":""}

package/dist/actions/approve-dispatch-change.js

@@ -0,0 +1,11 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { approveRequest } from "../server/lib/dispatch-store.js";
+export default defineAction({
+    description: "Approve a pending dispatch change request and apply it.",
+    schema: z.object({
+        id: z.string().describe("Approval request id"),
+    }),
+    run: async ({ id }) => approveRequest(id),
+});
+//# sourceMappingURL=approve-dispatch-change.js.map

package/dist/actions/approve-dispatch-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve-dispatch-change.js","sourceRoot":"","sources":["../../src/actions/approve-dispatch-change.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEjE,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,yDAAyD;IACtE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;KAC/C,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;CAC1C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { approveRequest } from \"../server/lib/dispatch-store.js\";\n\nexport default defineAction({\n  description: \"Approve a pending dispatch change request and apply it.\",\n  schema: z.object({\n    id: z.string().describe(\"Approval request id\"),\n  }),\n  run: async ({ id }) => approveRequest(id),\n});\n"]}

package/dist/actions/approve-vault-request.d.ts

@@ -0,0 +1,20 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    id: string;
+    secretValue: string;
+    secretName?: string | undefined;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    credentialKey: string;
+    appId: string;
+    reason: string | null;
+    requestedBy: string;
+    status: string;
+    reviewedBy: string | null;
+    reviewedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=approve-vault-request.d.ts.map

package/dist/actions/approve-vault-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve-vault-request.d.ts","sourceRoot":"","sources":["../../src/actions/approve-vault-request.ts"],"names":[],"mappings":""}

package/dist/actions/approve-vault-request.js

@@ -0,0 +1,16 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { approveRequest, requireVaultCtx } from "../server/lib/vault-store.js";
+export default defineAction({
+    description: "Approve a pending vault secret request. Creates the secret (if it doesn't exist) and grants it to the requesting app. Admin only.",
+    schema: z.object({
+        id: z.string().describe("Request ID to approve"),
+        secretValue: z.string().describe("The secret value to store"),
+        secretName: z
+            .string()
+            .optional()
+            .describe("Human-readable name for the secret"),
+    }),
+    run: async (args) => approveRequest(args.id, args.secretValue, args.secretName, requireVaultCtx()),
+});
+//# sourceMappingURL=approve-vault-request.js.map

package/dist/actions/approve-vault-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve-vault-request.js","sourceRoot":"","sources":["../../src/actions/approve-vault-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/E,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,mIAAmI;IACrI,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC7D,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,oCAAoC,CAAC;KAClD,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAClB,cAAc,CACZ,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,UAAU,EACf,eAAe,EAAE,CAClB;CACJ,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { approveRequest, requireVaultCtx } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Approve a pending vault secret request. Creates the secret (if it doesn't exist) and grants it to the requesting app. Admin only.\",\n  schema: z.object({\n    id: z.string().describe(\"Request ID to approve\"),\n    secretValue: z.string().describe(\"The secret value to store\"),\n    secretName: z\n      .string()\n      .optional()\n      .describe(\"Human-readable name for the secret\"),\n  }),\n  run: async (args) =>\n    approveRequest(\n      args.id,\n      args.secretValue,\n      args.secretName,\n      requireVaultCtx(),\n    ),\n});\n"]}

package/dist/actions/archive-workspace-app.d.ts

@@ -0,0 +1,7 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    appId: string;
+}, {
+    archivedAppIds: string[];
+}>;
+export default _default;
+//# sourceMappingURL=archive-workspace-app.d.ts.map

package/dist/actions/archive-workspace-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-workspace-app.d.ts","sourceRoot":"","sources":["../../src/actions/archive-workspace-app.ts"],"names":[],"mappings":""}

package/dist/actions/archive-workspace-app.js

@@ -0,0 +1,15 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { archiveWorkspaceApp } from "../server/lib/app-creation-store.js";
+export default defineAction({
+    description: "Hide a workspace app from the Apps list for the current viewer. The app's files and database stay intact; this is a per-user/org visibility flag stored in dispatch settings. Pair with unarchive-workspace-app to restore.",
+    schema: z.object({
+        appId: z
+            .string()
+            .min(1)
+            .max(64)
+            .describe("Workspace app id (matches the apps/<id>/ folder)"),
+    }),
+    run: async (input) => archiveWorkspaceApp({ appId: input.appId }),
+});
+//# sourceMappingURL=archive-workspace-app.js.map

package/dist/actions/archive-workspace-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-workspace-app.js","sourceRoot":"","sources":["../../src/actions/archive-workspace-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,6NAA6N;IAC/N,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,CAAC,kDAAkD,CAAC;KAChE,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;CAClE,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { archiveWorkspaceApp } from \"../server/lib/app-creation-store.js\";\n\nexport default defineAction({\n  description:\n    \"Hide a workspace app from the Apps list for the current viewer. The app's files and database stay intact; this is a per-user/org visibility flag stored in dispatch settings. Pair with unarchive-workspace-app to restore.\",\n  schema: z.object({\n    appId: z\n      .string()\n      .min(1)\n      .max(64)\n      .describe(\"Workspace app id (matches the apps/<id>/ folder)\"),\n  }),\n  run: async (input) => archiveWorkspaceApp({ appId: input.appId }),\n});\n"]}

package/dist/actions/ask_app.d.ts

@@ -0,0 +1,29 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    app: string;
+    message: string;
+    async?: boolean | undefined;
+    maxWaitMs?: number | undefined;
+}, {
+    app: string;
+    routedVia: "a2a";
+    taskId: string;
+    status: string;
+    response?: string;
+    error?: string;
+    inputRequired?: string;
+    statusRead?: "unavailable";
+    retryable?: true;
+    errorCategory?: "rate_limited" | "timeout" | "transport" | "upstream_5xx";
+    attempts?: number;
+    pollAfterMs?: number;
+    poll?: {
+        tool: "ask_app_status";
+        arguments: {
+            app: string;
+            taskId: string;
+        };
+    };
+    message?: string;
+}>;
+export default _default;
+//# sourceMappingURL=ask_app.d.ts.map

package/dist/actions/ask_app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask_app.d.ts","sourceRoot":"","sources":["../../src/actions/ask_app.ts"],"names":[],"mappings":""}

package/dist/actions/ask_app.js

@@ -0,0 +1,23 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { askGrantedDispatchMcpApp } from "../server/lib/mcp-gateway.js";
+export default defineAction({
+    description: "Send a natural-language request to an app available through Dispatch MCP. Use list_apps first to see which apps are granted.",
+    schema: z.object({
+        app: z.string().describe("Granted app id, e.g. mail or calendar."),
+        message: z.string().describe("The request to send to that app's agent."),
+        async: z
+            .boolean()
+            .optional()
+            .describe("Start a durable task and return immediately with a taskId."),
+        maxWaitMs: z
+            .number()
+            .int()
+            .min(0)
+            .max(25_000)
+            .optional()
+            .describe("Maximum inline wait in milliseconds."),
+    }),
+    run: async ({ app, message, async, maxWaitMs }) => askGrantedDispatchMcpApp(app, message, { async, maxWaitMs }),
+});
+//# sourceMappingURL=ask_app.js.map

package/dist/actions/ask_app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask_app.js","sourceRoot":"","sources":["../../src/actions/ask_app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,8HAA8H;IAChI,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QAClE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACxE,KAAK,EAAE,CAAC;aACL,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,4DAA4D,CAAC;QACzE,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,MAAM,CAAC;aACX,QAAQ,EAAE;aACV,QAAQ,CAAC,sCAAsC,CAAC;KACpD,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAChD,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;CAC/D,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { askGrantedDispatchMcpApp } from \"../server/lib/mcp-gateway.js\";\n\nexport default defineAction({\n  description:\n    \"Send a natural-language request to an app available through Dispatch MCP. Use list_apps first to see which apps are granted.\",\n  schema: z.object({\n    app: z.string().describe(\"Granted app id, e.g. mail or calendar.\"),\n    message: z.string().describe(\"The request to send to that app's agent.\"),\n    async: z\n      .boolean()\n      .optional()\n      .describe(\"Start a durable task and return immediately with a taskId.\"),\n    maxWaitMs: z\n      .number()\n      .int()\n      .min(0)\n      .max(25_000)\n      .optional()\n      .describe(\"Maximum inline wait in milliseconds.\"),\n  }),\n  run: async ({ app, message, async, maxWaitMs }) =>\n    askGrantedDispatchMcpApp(app, message, { async, maxWaitMs }),\n});\n"]}

package/dist/actions/ask_app_status.d.ts

@@ -0,0 +1,27 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    app: string;
+    taskId: string;
+}, {
+    app: string;
+    routedVia: "a2a";
+    taskId: string;
+    status: string;
+    response?: string;
+    error?: string;
+    inputRequired?: string;
+    statusRead?: "unavailable";
+    retryable?: true;
+    errorCategory?: "rate_limited" | "timeout" | "transport" | "upstream_5xx";
+    attempts?: number;
+    pollAfterMs?: number;
+    poll?: {
+        tool: "ask_app_status";
+        arguments: {
+            app: string;
+            taskId: string;
+        };
+    };
+    message?: string;
+}>;
+export default _default;
+//# sourceMappingURL=ask_app_status.d.ts.map

package/dist/actions/ask_app_status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask_app_status.d.ts","sourceRoot":"","sources":["../../src/actions/ask_app_status.ts"],"names":[],"mappings":""}

package/dist/actions/ask_app_status.js

@@ -0,0 +1,14 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { getGrantedDispatchMcpAppTask } from "../server/lib/mcp-gateway.js";
+export default defineAction({
+    description: "Poll a durable Dispatch ask_app task and return its current status or final response.",
+    schema: z.object({
+        app: z.string().describe("Granted app id returned by ask_app."),
+        taskId: z.string().describe("The durable task id returned by ask_app."),
+    }),
+    readOnly: true,
+    parallelSafe: true,
+    run: async ({ app, taskId }) => getGrantedDispatchMcpAppTask(app, taskId),
+});
+//# sourceMappingURL=ask_app_status.js.map

package/dist/actions/ask_app_status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask_app_status.js","sourceRoot":"","sources":["../../src/actions/ask_app_status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAE5E,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,uFAAuF;IACzF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QAC/D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;KACxE,CAAC;IACF,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,4BAA4B,CAAC,GAAG,EAAE,MAAM,CAAC;CAC1E,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { getGrantedDispatchMcpAppTask } from \"../server/lib/mcp-gateway.js\";\n\nexport default defineAction({\n  description:\n    \"Poll a durable Dispatch ask_app task and return its current status or final response.\",\n  schema: z.object({\n    app: z.string().describe(\"Granted app id returned by ask_app.\"),\n    taskId: z.string().describe(\"The durable task id returned by ask_app.\"),\n  }),\n  readOnly: true,\n  parallelSafe: true,\n  run: async ({ app, taskId }) => getGrantedDispatchMcpAppTask(app, taskId),\n});\n"]}

package/dist/actions/connect-external-agent.d.ts

@@ -0,0 +1,18 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    url: string;
+    name?: string | undefined;
+    description?: string | undefined;
+    scope?: "personal" | "shared" | undefined;
+}, {
+    status: "created";
+    resource: import("@agent-native/core/resources/store").Resource;
+    agent: {
+        id: string;
+        name: string;
+        description?: string | undefined;
+        url: string;
+    };
+    scope: "personal" | "shared";
+}>;
+export default _default;
+//# sourceMappingURL=connect-external-agent.d.ts.map

package/dist/actions/connect-external-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-external-agent.d.ts","sourceRoot":"","sources":["../../src/actions/connect-external-agent.ts"],"names":[],"mappings":";;;;;;YAyFqB,SAAS"}

package/dist/actions/connect-external-agent.js

@@ -0,0 +1,68 @@
+import { defineAction } from "@agent-native/core";
+import { getDbExec } from "@agent-native/core/db";
+import { resourceGetByPath, resourcePut, sharedResourceOwner, } from "@agent-native/core/resources/store";
+import { z } from "zod";
+import { currentOrgId, currentOwnerEmail, } from "../server/lib/dispatch-store.js";
+function slugify(value) {
+    return (value
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "") || "agent");
+}
+async function assertCanManageSharedAgent() {
+    const orgId = currentOrgId();
+    if (!orgId)
+        return;
+    const actor = currentOwnerEmail().trim().toLowerCase();
+    const result = await getDbExec().execute({
+        sql: "SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1",
+        args: [orgId, actor],
+    });
+    const role = result.rows[0]?.role;
+    if (role !== "owner" && role !== "admin") {
+        throw new Error("Only organization owners and admins can connect shared agents.");
+    }
+}
+export default defineAction({
+    description: "Connect an existing HTTP/A2A agent to Dispatch. This stores only its public endpoint and metadata; authentication remains in the normal A2A/MCP connection flow.",
+    schema: z.object({
+        url: z.string().min(1).describe("HTTP or HTTPS agent endpoint"),
+        name: z.string().max(160).optional().describe("Agent name"),
+        description: z.string().max(500).optional().describe("Short description"),
+        scope: z
+            .enum(["shared", "personal"])
+            .default("shared")
+            .describe("Share with the workspace or keep the connection personal"),
+    }),
+    run: async ({ url, name, description, scope }) => {
+        const parsed = new URL(url.trim());
+        if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+            throw new Error("Use an http:// or https:// endpoint URL.");
+        }
+        if (parsed.username || parsed.password) {
+            throw new Error("Do not include credentials in the endpoint URL.");
+        }
+        if (scope === "shared")
+            await assertCanManageSharedAgent();
+        const agentName = name?.trim() || parsed.hostname.replace(/^www\./, "");
+        const id = slugify(agentName);
+        const path = `remote-agents/${id}.json`;
+        const owner = scope === "shared"
+            ? sharedResourceOwner(currentOrgId())
+            : currentOwnerEmail();
+        const existing = await resourceGetByPath(owner, path);
+        if (existing) {
+            throw new Error(`An external agent already exists at ${path}. Rename it before connecting again.`);
+        }
+        const manifest = {
+            id,
+            name: agentName,
+            ...(description?.trim() ? { description: description.trim() } : {}),
+            url: parsed.toString(),
+        };
+        const resource = await resourcePut(owner, path, JSON.stringify(manifest, null, 2), "application/json");
+        return { status: "created", resource, agent: manifest, scope };
+    },
+});
+//# sourceMappingURL=connect-external-agent.js.map

package/dist/actions/connect-external-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-external-agent.js","sourceRoot":"","sources":["../../src/actions/connect-external-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,YAAY,EACZ,iBAAiB,GAClB,MAAM,iCAAiC,CAAC;AAEzC,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,CACL,KAAK;SACF,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CACtC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B;IACvC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,GAAG,EAAE,4EAA4E;QACjF,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;KACrB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IAClC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,kKAAkK;IACpK,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QAC/D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC3D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACzE,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;aAC5B,OAAO,CAAC,QAAQ,CAAC;aACjB,QAAQ,CAAC,0DAA0D,CAAC;KACxE,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE;QAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,KAAK,KAAK,QAAQ;YAAE,MAAM,0BAA0B,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,iBAAiB,EAAE,OAAO,CAAC;QACxC,MAAM,KAAK,GACT,KAAK,KAAK,QAAQ;YAChB,CAAC,CAAC,mBAAmB,CAAC,YAAY,EAAE,CAAC;YACrC,CAAC,CAAC,iBAAiB,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,uCAAuC,IAAI,sCAAsC,CAClF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG;YACf,EAAE;YACF,IAAI,EAAE,SAAS;YACf,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE;SACvB,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAChC,KAAK,EACL,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EACjC,kBAAkB,CACnB,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { getDbExec } from \"@agent-native/core/db\";\nimport {\n  resourceGetByPath,\n  resourcePut,\n  sharedResourceOwner,\n} from \"@agent-native/core/resources/store\";\nimport { z } from \"zod\";\n\nimport {\n  currentOrgId,\n  currentOwnerEmail,\n} from \"../server/lib/dispatch-store.js\";\n\nfunction slugify(value: string): string {\n  return (\n    value\n      .trim()\n      .toLowerCase()\n      .replace(/[^a-z0-9]+/g, \"-\")\n      .replace(/^-+|-+$/g, \"\") || \"agent\"\n  );\n}\n\nasync function assertCanManageSharedAgent() {\n  const orgId = currentOrgId();\n  if (!orgId) return;\n  const actor = currentOwnerEmail().trim().toLowerCase();\n  const result = await getDbExec().execute({\n    sql: \"SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1\",\n    args: [orgId, actor],\n  });\n  const role = result.rows[0]?.role;\n  if (role !== \"owner\" && role !== \"admin\") {\n    throw new Error(\n      \"Only organization owners and admins can connect shared agents.\",\n    );\n  }\n}\n\nexport default defineAction({\n  description:\n    \"Connect an existing HTTP/A2A agent to Dispatch. This stores only its public endpoint and metadata; authentication remains in the normal A2A/MCP connection flow.\",\n  schema: z.object({\n    url: z.string().min(1).describe(\"HTTP or HTTPS agent endpoint\"),\n    name: z.string().max(160).optional().describe(\"Agent name\"),\n    description: z.string().max(500).optional().describe(\"Short description\"),\n    scope: z\n      .enum([\"shared\", \"personal\"])\n      .default(\"shared\")\n      .describe(\"Share with the workspace or keep the connection personal\"),\n  }),\n  run: async ({ url, name, description, scope }) => {\n    const parsed = new URL(url.trim());\n    if (parsed.protocol !== \"https:\" && parsed.protocol !== \"http:\") {\n      throw new Error(\"Use an http:// or https:// endpoint URL.\");\n    }\n    if (parsed.username || parsed.password) {\n      throw new Error(\"Do not include credentials in the endpoint URL.\");\n    }\n\n    if (scope === \"shared\") await assertCanManageSharedAgent();\n    const agentName = name?.trim() || parsed.hostname.replace(/^www\\./, \"\");\n    const id = slugify(agentName);\n    const path = `remote-agents/${id}.json`;\n    const owner =\n      scope === \"shared\"\n        ? sharedResourceOwner(currentOrgId())\n        : currentOwnerEmail();\n    const existing = await resourceGetByPath(owner, path);\n    if (existing) {\n      throw new Error(\n        `An external agent already exists at ${path}. Rename it before connecting again.`,\n      );\n    }\n\n    const manifest = {\n      id,\n      name: agentName,\n      ...(description?.trim() ? { description: description.trim() } : {}),\n      url: parsed.toString(),\n    };\n    const resource = await resourcePut(\n      owner,\n      path,\n      JSON.stringify(manifest, null, 2),\n      \"application/json\",\n    );\n\n    return { status: \"created\" as const, resource, agent: manifest, scope };\n  },\n});\n"]}

package/dist/actions/create-browser-chat-session.d.ts

@@ -0,0 +1,15 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    nonce: string;
+    extensionId: string;
+}, {
+    startPath: string;
+    expiresAt: number;
+    parentOrigin: string;
+    remoteDevice: {
+        id: string;
+        token: string;
+    };
+    relayBaseUrl: string;
+}>;
+export default _default;
+//# sourceMappingURL=create-browser-chat-session.d.ts.map

package/dist/actions/create-browser-chat-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-browser-chat-session.d.ts","sourceRoot":"","sources":["../../src/actions/create-browser-chat-session.ts"],"names":[],"mappings":";;;;;;;;QA8FsB,EAAE;QAAoB,KAAK"}