@agent-native/dispatch 0.0.0-beta-20260819155526

package/dist/actions/send-platform-message.js

@@ -0,0 +1,96 @@
+import { defineAction } from "@agent-native/core";
+import { listIntegrationInstallations, resolveIntegrationTokenBundle, } from "@agent-native/core/integrations";
+import { getRequestOrgId, getRequestUserEmail, slackAdapter, telegramAdapter, emailAdapter, isEmailConfigured, resolveSecret, } from "@agent-native/core/server";
+import { z } from "zod";
+import { getDestinationById } from "../server/lib/dispatch-store.js";
+function getAdapter(platform, slackToken) {
+    if (platform === "email")
+        return emailAdapter();
+    return platform === "slack"
+        ? slackAdapter({ resolveBotToken: async () => slackToken })
+        : telegramAdapter();
+}
+async function assertOutboundConfigured(platform, tenantId) {
+    if (platform === "slack") {
+        const userEmail = getRequestUserEmail();
+        if (!userEmail)
+            throw new Error("An authenticated user is required");
+        const installations = tenantId
+            ? await listIntegrationInstallations({ userEmail, orgId: getRequestOrgId() ?? null }, "slack")
+            : [];
+        const installation = installations.find((candidate) => candidate.teamId === tenantId || candidate.enterpriseId === tenantId) ?? null;
+        const managed = installation
+            ? await resolveIntegrationTokenBundle("slack", installation.installationKey)
+            : null;
+        const token = tenantId
+            ? managed?.accessToken
+            : (managed?.accessToken ?? (await resolveSecret("SLACK_BOT_TOKEN")));
+        if (!token) {
+            throw new Error(tenantId
+                ? "That Slack workspace is not connected"
+                : "Select a Slack workspace for managed outbound messaging");
+        }
+        return token;
+    }
+    if (platform === "telegram" && !(await resolveSecret("TELEGRAM_BOT_TOKEN"))) {
+        throw new Error("Telegram outbound messaging is not configured");
+    }
+    if (platform === "email") {
+        if (!(await resolveSecret("EMAIL_AGENT_ADDRESS")) ||
+            !(await isEmailConfigured())) {
+            throw new Error("Email outbound messaging is not configured");
+        }
+    }
+}
+export default defineAction({
+    description: "Send a proactive message to a saved Slack, Telegram, or email destination.",
+    schema: z.object({
+        platform: z.enum(["slack", "telegram", "email"]).optional(),
+        destinationId: z.string().optional().describe("Saved destination id"),
+        destination: z.string().optional().describe("Raw platform destination id"),
+        threadRef: z.string().optional().describe("Optional thread reference"),
+        tenantId: z
+            .string()
+            .optional()
+            .describe("Slack workspace/team id for managed installations"),
+        text: z.string().describe("Message to send"),
+    }),
+    audit: {
+        recordInputs: false,
+        target: (args) => ({
+            type: "destination",
+            id: args.destinationId || args.destination || "unknown",
+            visibility: "private",
+        }),
+        summary: (args) => `Sent proactive ${args.platform || "saved"} message`,
+    },
+    run: async ({ platform, destinationId, destination, threadRef, tenantId, text, }) => {
+        const saved = destinationId
+            ? await getDestinationById(destinationId)
+            : null;
+        const resolvedPlatform = (saved?.platform || platform);
+        const resolvedDestination = saved?.destination || destination;
+        const resolvedThreadRef = saved?.threadRef || threadRef || null;
+        if (!resolvedPlatform || !resolvedDestination) {
+            throw new Error("A platform and destination are required");
+        }
+        const slackToken = await assertOutboundConfigured(resolvedPlatform, tenantId);
+        const adapter = getAdapter(resolvedPlatform, slackToken);
+        if (!adapter.sendMessageToTarget) {
+            throw new Error(`Platform ${resolvedPlatform} does not support proactive outbound messaging`);
+        }
+        await adapter.sendMessageToTarget(adapter.formatAgentResponse(text), {
+            destination: resolvedDestination,
+            threadRef: resolvedThreadRef,
+            label: saved?.name || undefined,
+            tenantId,
+        });
+        return {
+            ok: true,
+            platform: resolvedPlatform,
+            destination: resolvedDestination,
+            threadRef: resolvedThreadRef,
+        };
+    },
+});
+//# sourceMappingURL=send-platform-message.js.map

package/dist/actions/send-platform-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-platform-message.js","sourceRoot":"","sources":["../../src/actions/send-platform-message.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,aAAa,GACd,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,SAAS,UAAU,CACjB,QAAwC,EACxC,UAAmB;IAEnB,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,YAAY,EAAE,CAAC;IAChD,OAAO,QAAQ,KAAK,OAAO;QACzB,CAAC,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;QAC3D,CAAC,CAAC,eAAe,EAAE,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,QAAwC,EACxC,QAAiB;IAEjB,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;QACxC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACrE,MAAM,aAAa,GAAG,QAAQ;YAC5B,CAAC,CAAC,MAAM,4BAA4B,CAChC,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,IAAI,EAAE,EAC/C,OAAO,CACR;YACH,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,YAAY,GAChB,aAAa,CAAC,IAAI,CAChB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,YAAY,KAAK,QAAQ,CACvE,IAAI,IAAI,CAAC;QACZ,MAAM,OAAO,GAAG,YAAY;YAC1B,CAAC,CAAC,MAAM,6BAA6B,CACjC,OAAO,EACP,YAAY,CAAC,eAAe,CAC7B;YACH,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,KAAK,GAAG,QAAQ;YACpB,CAAC,CAAC,OAAO,EAAE,WAAW;YACtB,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC,MAAM,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,QAAQ;gBACN,CAAC,CAAC,uCAAuC;gBACzC,CAAC,CAAC,yDAAyD,CAC9D,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IACE,CAAC,CAAC,MAAM,aAAa,CAAC,qBAAqB,CAAC,CAAC;YAC7C,CAAC,CAAC,MAAM,iBAAiB,EAAE,CAAC,EAC5B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;AACH,CAAC;AAED,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,4EAA4E;IAC9E,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC3D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QACrE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAC1E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QACtE,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,mDAAmD,CAAC;QAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;KAC7C,CAAC;IACF,KAAK,EAAE;QACL,YAAY,EAAE,KAAK;QACnB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjB,IAAI,EAAE,aAAa;YACnB,EAAE,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,IAAI,SAAS;YACvD,UAAU,EAAE,SAAS;SACtB,CAAC;QACF,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,IAAI,CAAC,QAAQ,IAAI,OAAO,UAAU;KACxE;IACD,GAAG,EAAE,KAAK,EAAE,EACV,QAAQ,EACR,aAAa,EACb,WAAW,EACX,SAAS,EACT,QAAQ,EACR,IAAI,GACL,EAAE,EAAE;QACH,MAAM,KAAK,GAAG,aAAa;YACzB,CAAC,CAAC,MAAM,kBAAkB,CAAC,aAAa,CAAC;YACzC,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,QAAQ,IAAI,QAAQ,CAIxC,CAAC;QACd,MAAM,mBAAmB,GAAG,KAAK,EAAE,WAAW,IAAI,WAAW,CAAC;QAC9D,MAAM,iBAAiB,GAAG,KAAK,EAAE,SAAS,IAAI,SAAS,IAAI,IAAI,CAAC;QAEhE,IAAI,CAAC,gBAAgB,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAC/C,gBAAgB,EAChB,QAAQ,CACT,CAAC;QAEF,MAAM,OAAO,GAAG,UAAU,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,YAAY,gBAAgB,gDAAgD,CAC7E,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE;YACnE,WAAW,EAAE,mBAAmB;YAChC,SAAS,EAAE,iBAAiB;YAC5B,KAAK,EAAE,KAAK,EAAE,IAAI,IAAI,SAAS;YAC/B,QAAQ;SACT,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,gBAAgB;YAC1B,WAAW,EAAE,mBAAmB;YAChC,SAAS,EAAE,iBAAiB;SAC7B,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport {\n  listIntegrationInstallations,\n  resolveIntegrationTokenBundle,\n} from \"@agent-native/core/integrations\";\nimport {\n  getRequestOrgId,\n  getRequestUserEmail,\n  slackAdapter,\n  telegramAdapter,\n  emailAdapter,\n  isEmailConfigured,\n  resolveSecret,\n} from \"@agent-native/core/server\";\nimport { z } from \"zod\";\n\nimport { getDestinationById } from \"../server/lib/dispatch-store.js\";\n\nfunction getAdapter(\n  platform: \"slack\" | \"telegram\" | \"email\",\n  slackToken?: string,\n) {\n  if (platform === \"email\") return emailAdapter();\n  return platform === \"slack\"\n    ? slackAdapter({ resolveBotToken: async () => slackToken })\n    : telegramAdapter();\n}\n\nasync function assertOutboundConfigured(\n  platform: \"slack\" | \"telegram\" | \"email\",\n  tenantId?: string,\n): Promise<string | undefined> {\n  if (platform === \"slack\") {\n    const userEmail = getRequestUserEmail();\n    if (!userEmail) throw new Error(\"An authenticated user is required\");\n    const installations = tenantId\n      ? await listIntegrationInstallations(\n          { userEmail, orgId: getRequestOrgId() ?? null },\n          \"slack\",\n        )\n      : [];\n    const installation =\n      installations.find(\n        (candidate) =>\n          candidate.teamId === tenantId || candidate.enterpriseId === tenantId,\n      ) ?? null;\n    const managed = installation\n      ? await resolveIntegrationTokenBundle(\n          \"slack\",\n          installation.installationKey,\n        )\n      : null;\n    const token = tenantId\n      ? managed?.accessToken\n      : (managed?.accessToken ?? (await resolveSecret(\"SLACK_BOT_TOKEN\")));\n    if (!token) {\n      throw new Error(\n        tenantId\n          ? \"That Slack workspace is not connected\"\n          : \"Select a Slack workspace for managed outbound messaging\",\n      );\n    }\n    return token;\n  }\n  if (platform === \"telegram\" && !(await resolveSecret(\"TELEGRAM_BOT_TOKEN\"))) {\n    throw new Error(\"Telegram outbound messaging is not configured\");\n  }\n  if (platform === \"email\") {\n    if (\n      !(await resolveSecret(\"EMAIL_AGENT_ADDRESS\")) ||\n      !(await isEmailConfigured())\n    ) {\n      throw new Error(\"Email outbound messaging is not configured\");\n    }\n  }\n}\n\nexport default defineAction({\n  description:\n    \"Send a proactive message to a saved Slack, Telegram, or email destination.\",\n  schema: z.object({\n    platform: z.enum([\"slack\", \"telegram\", \"email\"]).optional(),\n    destinationId: z.string().optional().describe(\"Saved destination id\"),\n    destination: z.string().optional().describe(\"Raw platform destination id\"),\n    threadRef: z.string().optional().describe(\"Optional thread reference\"),\n    tenantId: z\n      .string()\n      .optional()\n      .describe(\"Slack workspace/team id for managed installations\"),\n    text: z.string().describe(\"Message to send\"),\n  }),\n  audit: {\n    recordInputs: false,\n    target: (args) => ({\n      type: \"destination\",\n      id: args.destinationId || args.destination || \"unknown\",\n      visibility: \"private\",\n    }),\n    summary: (args) => `Sent proactive ${args.platform || \"saved\"} message`,\n  },\n  run: async ({\n    platform,\n    destinationId,\n    destination,\n    threadRef,\n    tenantId,\n    text,\n  }) => {\n    const saved = destinationId\n      ? await getDestinationById(destinationId)\n      : null;\n    const resolvedPlatform = (saved?.platform || platform) as\n      | \"slack\"\n      | \"telegram\"\n      | \"email\"\n      | undefined;\n    const resolvedDestination = saved?.destination || destination;\n    const resolvedThreadRef = saved?.threadRef || threadRef || null;\n\n    if (!resolvedPlatform || !resolvedDestination) {\n      throw new Error(\"A platform and destination are required\");\n    }\n\n    const slackToken = await assertOutboundConfigured(\n      resolvedPlatform,\n      tenantId,\n    );\n\n    const adapter = getAdapter(resolvedPlatform, slackToken);\n    if (!adapter.sendMessageToTarget) {\n      throw new Error(\n        `Platform ${resolvedPlatform} does not support proactive outbound messaging`,\n      );\n    }\n\n    await adapter.sendMessageToTarget(adapter.formatAgentResponse(text), {\n      destination: resolvedDestination,\n      threadRef: resolvedThreadRef,\n      label: saved?.name || undefined,\n      tenantId,\n    });\n\n    return {\n      ok: true,\n      platform: resolvedPlatform,\n      destination: resolvedDestination,\n      threadRef: resolvedThreadRef,\n    };\n  },\n});\n"]}

package/dist/actions/set-app-creation-settings.d.ts

@@ -0,0 +1,5 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    builderProjectId?: string | null | undefined;
+}, import("../server/lib/app-creation-store.js").AppCreationSettings>;
+export default _default;
+//# sourceMappingURL=set-app-creation-settings.d.ts.map

package/dist/actions/set-app-creation-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-app-creation-settings.d.ts","sourceRoot":"","sources":["../../src/actions/set-app-creation-settings.ts"],"names":[],"mappings":""}

package/dist/actions/set-app-creation-settings.js

@@ -0,0 +1,18 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { setAppCreationSettings } from "../server/lib/app-creation-store.js";
+export default defineAction({
+    description: "Set Dispatch settings for creating new workspace apps, and the Builder project this organization uses for cloud code changes. Organization owners and admins only. Stores the project id as an organization-scoped credential; does not write env vars or files.",
+    schema: z.object({
+        builderProjectId: z
+            .string()
+            .trim()
+            .min(1)
+            .max(128)
+            .optional()
+            .nullable()
+            .describe("Builder project ID used for app-creation branches and for cloud code-change branches across this organization's workspace apps. Pass null to clear it and return those apps to the connect/waitlist prompt."),
+    }),
+    run: async (args) => setAppCreationSettings(args),
+});
+//# sourceMappingURL=set-app-creation-settings.js.map

package/dist/actions/set-app-creation-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-app-creation-settings.js","sourceRoot":"","sources":["../../src/actions/set-app-creation-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,kQAAkQ;IACpQ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,gBAAgB,EAAE,CAAC;aAChB,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CACP,6MAA6M,CAC9M;KACJ,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC;CAClD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { setAppCreationSettings } from \"../server/lib/app-creation-store.js\";\n\nexport default defineAction({\n  description:\n    \"Set Dispatch settings for creating new workspace apps, and the Builder project this organization uses for cloud code changes. Organization owners and admins only. Stores the project id as an organization-scoped credential; does not write env vars or files.\",\n  schema: z.object({\n    builderProjectId: z\n      .string()\n      .trim()\n      .min(1)\n      .max(128)\n      .optional()\n      .nullable()\n      .describe(\n        \"Builder project ID used for app-creation branches and for cloud code-change branches across this organization's workspace apps. Pass null to clear it and return those apps to the connect/waitlist prompt.\",\n      ),\n  }),\n  run: async (args) => setAppCreationSettings(args),\n});\n"]}

package/dist/actions/set-dispatch-approval-policy.d.ts

@@ -0,0 +1,23 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    enabled: boolean;
+    approverEmails?: string[] | undefined;
+}, import("../server/lib/dispatch-store.js").DispatchApprovalPolicy | {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    changeType: string;
+    targetType: string;
+    targetId: string | null;
+    status: string;
+    summary: string;
+    payload: string;
+    beforeValue: string | null;
+    afterValue: string | null;
+    requestedBy: string;
+    reviewedBy: string | null;
+    reviewedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=set-dispatch-approval-policy.d.ts.map

package/dist/actions/set-dispatch-approval-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-dispatch-approval-policy.d.ts","sourceRoot":"","sources":["../../src/actions/set-dispatch-approval-policy.ts"],"names":[],"mappings":""}

package/dist/actions/set-dispatch-approval-policy.js

@@ -0,0 +1,19 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { getApprovalPolicy, setApprovalPolicy, } from "../server/lib/dispatch-store.js";
+export default defineAction({
+    description: "Enable or disable dispatch approval flow for durable changes.",
+    schema: z.object({
+        enabled: z.boolean(),
+        approverEmails: z.array(z.string().email()).default([]),
+    }),
+    run: async ({ enabled, approverEmails }) => {
+        const current = await getApprovalPolicy();
+        if (current.enabled === enabled &&
+            JSON.stringify(current.approverEmails) === JSON.stringify(approverEmails)) {
+            return current;
+        }
+        return setApprovalPolicy({ enabled, approverEmails });
+    },
+});
+//# sourceMappingURL=set-dispatch-approval-policy.js.map

package/dist/actions/set-dispatch-approval-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-dispatch-approval-policy.js","sourceRoot":"","sources":["../../src/actions/set-dispatch-approval-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,iCAAiC,CAAC;AAEzC,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,+DAA+D;IAC5E,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACxD,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAC1C,IACE,OAAO,CAAC,OAAO,KAAK,OAAO;YAC3B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EACzE,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IACxD,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport {\n  getApprovalPolicy,\n  setApprovalPolicy,\n} from \"../server/lib/dispatch-store.js\";\n\nexport default defineAction({\n  description: \"Enable or disable dispatch approval flow for durable changes.\",\n  schema: z.object({\n    enabled: z.boolean(),\n    approverEmails: z.array(z.string().email()).default([]),\n  }),\n  run: async ({ enabled, approverEmails }) => {\n    const current = await getApprovalPolicy();\n    if (\n      current.enabled === enabled &&\n      JSON.stringify(current.approverEmails) === JSON.stringify(approverEmails)\n    ) {\n      return current;\n    }\n    return setApprovalPolicy({ enabled, approverEmails });\n  },\n});\n"]}

package/dist/actions/set-dream-settings.d.ts

@@ -0,0 +1,17 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    enabled?: boolean | undefined;
+    schedule?: string | undefined;
+    sourceId?: string | undefined;
+    sourceIds?: string[] | undefined;
+    allSources?: unknown;
+    query?: string | undefined;
+    limit?: unknown;
+    sourceTimeoutMs?: unknown;
+    sourceConcurrency?: unknown;
+    sourceStartStaggerMs?: unknown;
+    threadConcurrency?: unknown;
+    threadTimeoutMs?: unknown;
+    minCandidateCount?: unknown;
+}, import("../server/lib/dreams-store.js").DreamSettings>;
+export default _default;
+//# sourceMappingURL=set-dream-settings.d.ts.map

package/dist/actions/set-dream-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-dream-settings.d.ts","sourceRoot":"","sources":["../../src/actions/set-dream-settings.ts"],"names":[],"mappings":""}

package/dist/actions/set-dream-settings.js

@@ -0,0 +1,41 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { setDreamSettings } from "../server/lib/dreams-store.js";
+export default defineAction({
+    description: "Update recurring Dispatch dream settings without immediately running or applying a dream pass.",
+    schema: z.object({
+        enabled: z
+            .boolean()
+            .optional()
+            .describe("Whether recurring dreams are on."),
+        schedule: z
+            .string()
+            .optional()
+            .describe('Five-field cron schedule, for example "0 9 * * 1".'),
+        sourceId: z
+            .string()
+            .optional()
+            .describe("Thread debug source id. Use 'all' for every connected source."),
+        sourceIds: z
+            .array(z.string().min(1))
+            .optional()
+            .describe("Optional explicit source ids to scan together."),
+        allSources: z.coerce
+            .boolean()
+            .optional()
+            .describe("Scan every connected thread-debug source."),
+        query: z
+            .string()
+            .optional()
+            .describe("Optional search term for recurring dream passes."),
+        limit: z.coerce.number().int().min(1).max(50).optional(),
+        sourceTimeoutMs: z.coerce.number().int().min(1000).max(60000).optional(),
+        sourceConcurrency: z.coerce.number().int().min(1).max(8).optional(),
+        sourceStartStaggerMs: z.coerce.number().int().min(0).max(5000).optional(),
+        threadConcurrency: z.coerce.number().int().min(1).max(10).optional(),
+        threadTimeoutMs: z.coerce.number().int().min(1000).max(30000).optional(),
+        minCandidateCount: z.coerce.number().int().min(0).max(50).optional(),
+    }),
+    run: async (input) => setDreamSettings(input),
+});
+//# sourceMappingURL=set-dream-settings.js.map

package/dist/actions/set-dream-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-dream-settings.js","sourceRoot":"","sources":["../../src/actions/set-dream-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gGAAgG;IAClG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,OAAO,EAAE,CAAC;aACP,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,kCAAkC,CAAC;QAC/C,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,oDAAoD,CAAC;QACjE,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,+DAA+D,CAChE;QACH,SAAS,EAAE,CAAC;aACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACxB,QAAQ,EAAE;aACV,QAAQ,CAAC,gDAAgD,CAAC;QAC7D,UAAU,EAAE,CAAC,CAAC,MAAM;aACjB,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,2CAA2C,CAAC;QACxD,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxD,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;QACxE,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACnE,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QACzE,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACpE,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;QACxE,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KACrE,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC;CAC9C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { setDreamSettings } from \"../server/lib/dreams-store.js\";\n\nexport default defineAction({\n  description:\n    \"Update recurring Dispatch dream settings without immediately running or applying a dream pass.\",\n  schema: z.object({\n    enabled: z\n      .boolean()\n      .optional()\n      .describe(\"Whether recurring dreams are on.\"),\n    schedule: z\n      .string()\n      .optional()\n      .describe('Five-field cron schedule, for example \"0 9 * * 1\".'),\n    sourceId: z\n      .string()\n      .optional()\n      .describe(\n        \"Thread debug source id. Use 'all' for every connected source.\",\n      ),\n    sourceIds: z\n      .array(z.string().min(1))\n      .optional()\n      .describe(\"Optional explicit source ids to scan together.\"),\n    allSources: z.coerce\n      .boolean()\n      .optional()\n      .describe(\"Scan every connected thread-debug source.\"),\n    query: z\n      .string()\n      .optional()\n      .describe(\"Optional search term for recurring dream passes.\"),\n    limit: z.coerce.number().int().min(1).max(50).optional(),\n    sourceTimeoutMs: z.coerce.number().int().min(1000).max(60000).optional(),\n    sourceConcurrency: z.coerce.number().int().min(1).max(8).optional(),\n    sourceStartStaggerMs: z.coerce.number().int().min(0).max(5000).optional(),\n    threadConcurrency: z.coerce.number().int().min(1).max(10).optional(),\n    threadTimeoutMs: z.coerce.number().int().min(1000).max(30000).optional(),\n    minCandidateCount: z.coerce.number().int().min(0).max(50).optional(),\n  }),\n  run: async (input) => setDreamSettings(input),\n});\n"]}

package/dist/actions/set-mcp-app-access.d.ts

@@ -0,0 +1,17 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    mode: "all-apps" | "selected-apps";
+    selectedAppIds?: string[] | undefined;
+}, {
+    mode: import("../server/lib/mcp-access-store.js").DispatchMcpAppAccessMode;
+    selectedAppIds: string[];
+    updatedAt: string | undefined;
+    updatedBy: string | undefined;
+    apps: import("../server/lib/mcp-gateway.js").DispatchMcpAccessibleApp[];
+    grantedApps: import("../server/lib/mcp-gateway.js").DispatchMcpAccessibleApp[];
+    counts: {
+        apps: number;
+        granted: number;
+    };
+}>;
+export default _default;
+//# sourceMappingURL=set-mcp-app-access.d.ts.map

package/dist/actions/set-mcp-app-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-mcp-app-access.d.ts","sourceRoot":"","sources":["../../src/actions/set-mcp-app-access.ts"],"names":[],"mappings":""}

package/dist/actions/set-mcp-app-access.js

@@ -0,0 +1,43 @@
+import { defineAction } from "@agent-native/core";
+import { discoverAgents } from "@agent-native/core/server/agent-discovery";
+import { z } from "zod";
+import { recordAudit } from "../server/lib/dispatch-store.js";
+import { setDispatchMcpAppAccessSettings } from "../server/lib/mcp-access-store.js";
+import listMcpAppAccess from "./list-mcp-app-access.js";
+const modeSchema = z.enum(["all-apps", "selected-apps"]);
+export default defineAction({
+    description: "Set which apps are available through Dispatch's unified MCP gateway.",
+    schema: z.object({
+        mode: modeSchema.describe("Use all-apps to expose every discovered app, or selected-apps to allow only selectedAppIds."),
+        selectedAppIds: z
+            .array(z.string())
+            .default([])
+            .describe("App IDs to expose when mode is selected-apps."),
+    }),
+    run: async (args) => {
+        const agents = await discoverAgents("dispatch");
+        const knownIds = new Set(["dispatch", ...agents.map((agent) => agent.id)]);
+        const selectedAppIds = Array.from(new Set(args.selectedAppIds
+            .map((id) => id.trim().toLowerCase())
+            .filter(Boolean)));
+        const unknown = selectedAppIds.filter((id) => !knownIds.has(id));
+        if (unknown.length > 0) {
+            throw new Error(`Unknown app(s): ${unknown.join(", ")}. Use list-mcp-app-access to see available app IDs.`);
+        }
+        await setDispatchMcpAppAccessSettings({
+            mode: args.mode,
+            selectedAppIds,
+        });
+        await recordAudit({
+            action: "mcp-access.updated",
+            targetType: "dispatch-mcp-access",
+            targetId: "unified-mcp",
+            summary: args.mode === "all-apps"
+                ? "Allowed Dispatch MCP access to all apps"
+                : `Allowed Dispatch MCP access to ${selectedAppIds.length} selected app(s)`,
+            metadata: { mode: args.mode, selectedAppIds },
+        }).catch(() => { });
+        return listMcpAppAccess.run({});
+    },
+});
+//# sourceMappingURL=set-mcp-app-access.js.map

package/dist/actions/set-mcp-app-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-mcp-app-access.js","sourceRoot":"","sources":["../../src/actions/set-mcp-app-access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,gBAAgB,MAAM,0BAA0B,CAAC;AAExD,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;AAEzD,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,sEAAsE;IACxE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,UAAU,CAAC,QAAQ,CACvB,6FAA6F,CAC9F;QACD,cAAc,EAAE,CAAC;aACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CAAC,+CAA+C,CAAC;KAC7D,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAC/B,IAAI,GAAG,CACL,IAAI,CAAC,cAAc;aAChB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aACpC,MAAM,CAAC,OAAO,CAAC,CACnB,CACF,CAAC;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qDAAqD,CAC3F,CAAC;QACJ,CAAC;QACD,MAAM,+BAA+B,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc;SACf,CAAC,CAAC;QACH,MAAM,WAAW,CAAC;YAChB,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,qBAAqB;YACjC,QAAQ,EAAE,aAAa;YACvB,OAAO,EACL,IAAI,CAAC,IAAI,KAAK,UAAU;gBACtB,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,kCAAkC,cAAc,CAAC,MAAM,kBAAkB;YAC/E,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE;SAC9C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEnB,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { discoverAgents } from \"@agent-native/core/server/agent-discovery\";\nimport { z } from \"zod\";\n\nimport { recordAudit } from \"../server/lib/dispatch-store.js\";\nimport { setDispatchMcpAppAccessSettings } from \"../server/lib/mcp-access-store.js\";\nimport listMcpAppAccess from \"./list-mcp-app-access.js\";\n\nconst modeSchema = z.enum([\"all-apps\", \"selected-apps\"]);\n\nexport default defineAction({\n  description:\n    \"Set which apps are available through Dispatch's unified MCP gateway.\",\n  schema: z.object({\n    mode: modeSchema.describe(\n      \"Use all-apps to expose every discovered app, or selected-apps to allow only selectedAppIds.\",\n    ),\n    selectedAppIds: z\n      .array(z.string())\n      .default([])\n      .describe(\"App IDs to expose when mode is selected-apps.\"),\n  }),\n  run: async (args) => {\n    const agents = await discoverAgents(\"dispatch\");\n    const knownIds = new Set([\"dispatch\", ...agents.map((agent) => agent.id)]);\n    const selectedAppIds = Array.from(\n      new Set(\n        args.selectedAppIds\n          .map((id) => id.trim().toLowerCase())\n          .filter(Boolean),\n      ),\n    );\n    const unknown = selectedAppIds.filter((id) => !knownIds.has(id));\n    if (unknown.length > 0) {\n      throw new Error(\n        `Unknown app(s): ${unknown.join(\", \")}. Use list-mcp-app-access to see available app IDs.`,\n      );\n    }\n    await setDispatchMcpAppAccessSettings({\n      mode: args.mode,\n      selectedAppIds,\n    });\n    await recordAudit({\n      action: \"mcp-access.updated\",\n      targetType: \"dispatch-mcp-access\",\n      targetId: \"unified-mcp\",\n      summary:\n        args.mode === \"all-apps\"\n          ? \"Allowed Dispatch MCP access to all apps\"\n          : `Allowed Dispatch MCP access to ${selectedAppIds.length} selected app(s)`,\n      metadata: { mode: args.mode, selectedAppIds },\n    }).catch(() => {});\n\n    return listMcpAppAccess.run({});\n  },\n});\n"]}

package/dist/actions/set-vault-access-settings.d.ts

@@ -0,0 +1,5 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    mode: "all-apps" | "manual";
+}, import("../server/lib/vault-store.js").VaultAccessSettings>;
+export default _default;
+//# sourceMappingURL=set-vault-access-settings.d.ts.map

package/dist/actions/set-vault-access-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-vault-access-settings.d.ts","sourceRoot":"","sources":["../../src/actions/set-vault-access-settings.ts"],"names":[],"mappings":""}

package/dist/actions/set-vault-access-settings.js

@@ -0,0 +1,13 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { setVaultAccessSettings } from "../server/lib/vault-store.js";
+export default defineAction({
+    description: "Set the Dispatch vault access mode. Admin only. Use all-apps for the default workspace-wide mode or manual to require explicit per-app grants.",
+    schema: z.object({
+        mode: z
+            .enum(["all-apps", "manual"])
+            .describe("all-apps shares every vault key with every app; manual requires grants"),
+    }),
+    run: async (args) => setVaultAccessSettings(args),
+});
+//# sourceMappingURL=set-vault-access-settings.js.map

package/dist/actions/set-vault-access-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-vault-access-settings.js","sourceRoot":"","sources":["../../src/actions/set-vault-access-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gJAAgJ;IAClJ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;aAC5B,QAAQ,CACP,wEAAwE,CACzE;KACJ,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC;CAClD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { setVaultAccessSettings } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Set the Dispatch vault access mode. Admin only. Use all-apps for the default workspace-wide mode or manual to require explicit per-app grants.\",\n  schema: z.object({\n    mode: z\n      .enum([\"all-apps\", \"manual\"])\n      .describe(\n        \"all-apps shares every vault key with every app; manual requires grants\",\n      ),\n  }),\n  run: async (args) => setVaultAccessSettings(args),\n});\n"]}

package/dist/actions/start-workspace-app-creation.d.ts

@@ -0,0 +1,10 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    prompt: string;
+    appId?: string | null | undefined;
+    template?: string | null | undefined;
+    description?: string | null | undefined;
+    secretIds?: string[] | undefined;
+    resourceIds?: string[] | undefined;
+}, import("../server/lib/app-creation-store.js").StartWorkspaceAppCreationResult>;
+export default _default;
+//# sourceMappingURL=start-workspace-app-creation.d.ts.map

package/dist/actions/start-workspace-app-creation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-workspace-app-creation.d.ts","sourceRoot":"","sources":["../../src/actions/start-workspace-app-creation.ts"],"names":[],"mappings":""}

package/dist/actions/start-workspace-app-creation.js

@@ -0,0 +1,43 @@
+import { defineAction } from "@agent-native/core";
+import { getWorkspaceAppIdValidationError, normalizeWorkspaceAppId, } from "@agent-native/core/shared";
+import { z } from "zod";
+import { startWorkspaceAppCreation } from "../server/lib/app-creation-store.js";
+export default defineAction({
+    description: 'Start creating a new workspace app from Dispatch when the request truly needs its own app. For Claude Web, ChatGPT Web, or either host\'s web Project, this action is the Builder handoff: call it after forming a bounded source brief and do not scaffold or edit files in the host sandbox. This handoff is autonomous once the brief exists: do not ask the user for non-blocking product or UX choices; choose recommended defaults and let Builder record assumptions while it implements. Callers should include a concise generated description by default; Dispatch generates one from the prompt when omitted. In local dev this returns a code-agent prompt; in production it reuses the connected Agent-Native workspace project or, for an organization owner/admin, provisions it through the Builder Projects API before starting the Builder Cloud Agent branch. If no project is configured, organization members must ask an owner/admin to configure it first. The result must be a separate workspace app under apps/<app-id>, not a new route or file in apps/chat. If chat is used as the source template, the finished app must be branded as the requested app and must not leave visible "Chat", "Starter", "Blank app", or "New app" UI behind. If the request needs Mail, Calendar, Analytics, Brain, Assets, or another first-party app, use the existing hosted/connected app via links or A2A; do not wrap or nest those apps inside the new app unless the user explicitly asks for a customized app from that template.',
+    schema: z.object({
+        prompt: z.string().min(1).describe("The user's app creation request"),
+        appId: z
+            .string()
+            .max(64)
+            .transform(normalizeWorkspaceAppId)
+            .refine((appId) => !getWorkspaceAppIdValidationError(appId), {
+            message: "Use a non-reserved app id with lowercase letters, numbers, and hyphens.",
+        })
+            .optional()
+            .nullable()
+            .describe("Desired workspace app id/path or human-friendly name. Names are converted to lowercase, hyphenated ids."),
+        template: z
+            .string()
+            .optional()
+            .nullable()
+            .describe("Template to start from"),
+        description: z
+            .string()
+            .max(500)
+            .optional()
+            .nullable()
+            .describe("Concise AI-generated description of the app based on the user's prompt. Dispatch saves this while the app is being created."),
+        secretIds: z
+            .array(z.string())
+            .max(100)
+            .optional()
+            .describe("Dispatch vault secret IDs to grant to the app"),
+        resourceIds: z
+            .array(z.string())
+            .max(100)
+            .optional()
+            .describe("Dispatch workspace resource IDs or knowledge packs to grant to the app"),
+    }),
+    run: async (args) => startWorkspaceAppCreation(args),
+});
+//# sourceMappingURL=start-workspace-app-creation.js.map

package/dist/actions/start-workspace-app-creation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-workspace-app-creation.js","sourceRoot":"","sources":["../../src/actions/start-workspace-app-creation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,gCAAgC,EAChC,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAEhF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,y9CAAy9C;IAC39C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACrE,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,EAAE,CAAC;aACP,SAAS,CAAC,uBAAuB,CAAC;aAClC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gCAAgC,CAAC,KAAK,CAAC,EAAE;YAC3D,OAAO,EACL,yEAAyE;SAC5E,CAAC;aACD,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CACP,yGAAyG,CAC1G;QACH,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,wBAAwB,CAAC;QACrC,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CACP,6HAA6H,CAC9H;QACH,SAAS,EAAE,CAAC;aACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,+CAA+C,CAAC;QAC5D,WAAW,EAAE,CAAC;aACX,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,wEAAwE,CACzE;KACJ,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC;CACrD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport {\n  getWorkspaceAppIdValidationError,\n  normalizeWorkspaceAppId,\n} from \"@agent-native/core/shared\";\nimport { z } from \"zod\";\n\nimport { startWorkspaceAppCreation } from \"../server/lib/app-creation-store.js\";\n\nexport default defineAction({\n  description:\n    'Start creating a new workspace app from Dispatch when the request truly needs its own app. For Claude Web, ChatGPT Web, or either host\\'s web Project, this action is the Builder handoff: call it after forming a bounded source brief and do not scaffold or edit files in the host sandbox. This handoff is autonomous once the brief exists: do not ask the user for non-blocking product or UX choices; choose recommended defaults and let Builder record assumptions while it implements. Callers should include a concise generated description by default; Dispatch generates one from the prompt when omitted. In local dev this returns a code-agent prompt; in production it reuses the connected Agent-Native workspace project or, for an organization owner/admin, provisions it through the Builder Projects API before starting the Builder Cloud Agent branch. If no project is configured, organization members must ask an owner/admin to configure it first. The result must be a separate workspace app under apps/<app-id>, not a new route or file in apps/chat. If chat is used as the source template, the finished app must be branded as the requested app and must not leave visible \"Chat\", \"Starter\", \"Blank app\", or \"New app\" UI behind. If the request needs Mail, Calendar, Analytics, Brain, Assets, or another first-party app, use the existing hosted/connected app via links or A2A; do not wrap or nest those apps inside the new app unless the user explicitly asks for a customized app from that template.',\n  schema: z.object({\n    prompt: z.string().min(1).describe(\"The user's app creation request\"),\n    appId: z\n      .string()\n      .max(64)\n      .transform(normalizeWorkspaceAppId)\n      .refine((appId) => !getWorkspaceAppIdValidationError(appId), {\n        message:\n          \"Use a non-reserved app id with lowercase letters, numbers, and hyphens.\",\n      })\n      .optional()\n      .nullable()\n      .describe(\n        \"Desired workspace app id/path or human-friendly name. Names are converted to lowercase, hyphenated ids.\",\n      ),\n    template: z\n      .string()\n      .optional()\n      .nullable()\n      .describe(\"Template to start from\"),\n    description: z\n      .string()\n      .max(500)\n      .optional()\n      .nullable()\n      .describe(\n        \"Concise AI-generated description of the app based on the user's prompt. Dispatch saves this while the app is being created.\",\n      ),\n    secretIds: z\n      .array(z.string())\n      .max(100)\n      .optional()\n      .describe(\"Dispatch vault secret IDs to grant to the app\"),\n    resourceIds: z\n      .array(z.string())\n      .max(100)\n      .optional()\n      .describe(\n        \"Dispatch workspace resource IDs or knowledge packs to grant to the app\",\n      ),\n  }),\n  run: async (args) => startWorkspaceAppCreation(args),\n});\n"]}

package/dist/actions/sync-vault-to-app.d.ts

@@ -0,0 +1,32 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    appId: string;
+}, {
+    appId: string;
+    accessMode: import("../server/lib/vault-store.js").VaultAccessMode;
+    synced: number;
+    keys: never[];
+    credentialStores: never[];
+    envVars?: undefined;
+} | {
+    appId: string;
+    accessMode: import("../server/lib/vault-store.js").VaultAccessMode;
+    synced: number;
+    keys: string[];
+    credentialStores: {
+        scope: ReturnType<typeof import("../server/lib/vault-store.js").credentialStoreScopeForVaultCtx>["scope"];
+        scopeId: string;
+        synced: number;
+    }[];
+    envVars: {
+        status: "synced";
+        keys: string[];
+    } | {
+        status: "skipped";
+        reason: string;
+    } | {
+        status: "failed";
+        reason: string;
+    };
+}>;
+export default _default;
+//# sourceMappingURL=sync-vault-to-app.d.ts.map

package/dist/actions/sync-vault-to-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-vault-to-app.d.ts","sourceRoot":"","sources":["../../src/actions/sync-vault-to-app.ts"],"names":[],"mappings":""}

package/dist/actions/sync-vault-to-app.js

@@ -0,0 +1,13 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { syncGrantsToApp } from "../server/lib/vault-store.js";
+export default defineAction({
+    description: "Push vault secrets to an app by calling its env-vars endpoint. Admin only. In all-apps mode this syncs every vault key; in manual mode it syncs active grants.",
+    schema: z.object({
+        appId: z
+            .string()
+            .describe("App ID to sync secrets to, e.g. mail, calendar, analytics"),
+    }),
+    run: async (args) => syncGrantsToApp(args.appId),
+});
+//# sourceMappingURL=sync-vault-to-app.js.map

package/dist/actions/sync-vault-to-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-vault-to-app.js","sourceRoot":"","sources":["../../src/actions/sync-vault-to-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gKAAgK;IAClK,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,CAAC,2DAA2D,CAAC;KACzE,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;CACjD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { syncGrantsToApp } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Push vault secrets to an app by calling its env-vars endpoint. Admin only. In all-apps mode this syncs every vault key; in manual mode it syncs active grants.\",\n  schema: z.object({\n    appId: z\n      .string()\n      .describe(\"App ID to sync secrets to, e.g. mail, calendar, analytics\"),\n  }),\n  run: async (args) => syncGrantsToApp(args.appId),\n});\n"]}

package/dist/actions/unarchive-workspace-app.d.ts

@@ -0,0 +1,7 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    appId: string;
+}, {
+    archivedAppIds: string[];
+}>;
+export default _default;
+//# sourceMappingURL=unarchive-workspace-app.d.ts.map

package/dist/actions/unarchive-workspace-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unarchive-workspace-app.d.ts","sourceRoot":"","sources":["../../src/actions/unarchive-workspace-app.ts"],"names":[],"mappings":""}

package/dist/actions/unarchive-workspace-app.js

@@ -0,0 +1,15 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { unarchiveWorkspaceApp } from "../server/lib/app-creation-store.js";
+export default defineAction({
+    description: "Restore a previously archived workspace app to the Apps list for the current viewer.",
+    schema: z.object({
+        appId: z
+            .string()
+            .min(1)
+            .max(64)
+            .describe("Workspace app id (matches the apps/<id>/ folder)"),
+    }),
+    run: async (input) => unarchiveWorkspaceApp({ appId: input.appId }),
+});
+//# sourceMappingURL=unarchive-workspace-app.js.map

package/dist/actions/unarchive-workspace-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unarchive-workspace-app.js","sourceRoot":"","sources":["../../src/actions/unarchive-workspace-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAE5E,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,sFAAsF;IACxF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,CAAC,kDAAkD,CAAC;KAChE,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;CACpE,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { unarchiveWorkspaceApp } from \"../server/lib/app-creation-store.js\";\n\nexport default defineAction({\n  description:\n    \"Restore a previously archived workspace app to the Apps list for the current viewer.\",\n  schema: z.object({\n    appId: z\n      .string()\n      .min(1)\n      .max(64)\n      .describe(\"Workspace app id (matches the apps/<id>/ folder)\"),\n  }),\n  run: async (input) => unarchiveWorkspaceApp({ appId: input.appId }),\n});\n"]}

package/dist/actions/update-vault-secret.d.ts

@@ -0,0 +1,22 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    id: string;
+    credentialKey?: string | undefined;
+    value?: string | undefined;
+    name?: string | undefined;
+    provider?: string | null | undefined;
+    description?: string | null | undefined;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    name: string;
+    credentialKey: string;
+    value: string;
+    provider: string | null;
+    description: string | null;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=update-vault-secret.d.ts.map

package/dist/actions/update-vault-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-vault-secret.d.ts","sourceRoot":"","sources":["../../src/actions/update-vault-secret.ts"],"names":[],"mappings":""}