@agent-native/dispatch 0.0.0-beta-20260819155526

package/dist/actions/create-browser-chat-session.js

@@ -0,0 +1,75 @@
+import { defineAction } from "@agent-native/core";
+import { createRemoteDevice } from "@agent-native/core/integrations";
+import { buildEmbedStartPath, createEmbedSessionTicket, getRequestContext, getRequestUserEmail, withConfiguredAppBasePath, } from "@agent-native/core/server";
+import { z } from "zod";
+import { BROWSER_CHAT_NONCE_QUERY_PARAM, BROWSER_CHAT_PARENT_ORIGIN_QUERY_PARAM, browserChatExtensionIdSchema, browserChatNonceSchema, } from "../lib/browser-chat-protocol.js";
+import { isBrowserExtensionIdAllowed } from "../server/lib/browser-extension-allowlist.js";
+export default defineAction({
+    description: "Create a one-time authenticated Dispatch browser-chat embed session for an approved Agent-Native Chrome extension.",
+    schema: z
+        .object({
+        nonce: browserChatNonceSchema,
+        extensionId: browserChatExtensionIdSchema,
+    })
+        .strict(),
+    readOnly: false,
+    parallelSafe: true,
+    agentTool: false,
+    toolCallable: false,
+    run: async ({ nonce, extensionId }) => {
+        const ownerEmail = getRequestUserEmail()?.trim();
+        if (!ownerEmail) {
+            throw new Error("Sign in to Dispatch before connecting the browser extension.");
+        }
+        const requestContext = getRequestContext();
+        const { browserExtensionIds } = await import("../server/index.js").then((module) => module.getDispatchConfig());
+        if (!isBrowserExtensionIdAllowed({
+            extensionId,
+            configIds: browserExtensionIds,
+            nodeEnv: process.env.NODE_ENV,
+            requestOrigin: requestContext?.requestOrigin,
+        })) {
+            throw new Error("This browser extension is not allowed to connect to Dispatch.");
+        }
+        const parentOrigin = `chrome-extension://${extensionId}`;
+        const requestOrigin = requestContext?.requestOrigin;
+        if (!requestOrigin) {
+            throw new Error("Dispatch could not resolve its browser relay URL.");
+        }
+        const query = new URLSearchParams({
+            [BROWSER_CHAT_NONCE_QUERY_PARAM]: nonce,
+            [BROWSER_CHAT_PARENT_ORIGIN_QUERY_PARAM]: parentOrigin,
+        });
+        const session = await createEmbedSessionTicket({
+            ownerEmail,
+            orgId: requestContext?.orgId ?? null,
+            targetPath: `/browser-chat?${query}`,
+            scope: "browser-chat",
+            ttlSeconds: 60,
+        });
+        const remote = await createRemoteDevice({
+            ownerEmail,
+            orgId: requestContext?.orgId ?? null,
+            label: "Agent Native for Chrome",
+            platform: "chrome-extension",
+            metadata: {
+                browserExtension: { extensionId },
+                computerCapabilities: {
+                    browser: {
+                        observe: true,
+                        control: true,
+                        provider: "agent-native-chrome-extension",
+                    },
+                },
+            },
+        });
+        return {
+            startPath: buildEmbedStartPath(session.ticket),
+            expiresAt: session.expiresAt,
+            parentOrigin,
+            remoteDevice: { id: remote.device.id, token: remote.token },
+            relayBaseUrl: withConfiguredAppBasePath(requestOrigin),
+        };
+    },
+});
+//# sourceMappingURL=create-browser-chat-session.js.map

package/dist/actions/create-browser-chat-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-browser-chat-session.js","sourceRoot":"","sources":["../../src/actions/create-browser-chat-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,8BAA8B,EAC9B,sCAAsC,EACtC,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,2BAA2B,EAAE,MAAM,8CAA8C,CAAC;AAE3F,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,oHAAoH;IACtH,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,4BAA4B;KAC1C,CAAC;SACD,MAAM,EAAE;IACX,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,IAAI;IAClB,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE;QACpC,MAAM,UAAU,GAAG,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;QAC3C,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,CACrE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE,CACvC,CAAC;QACF,IACE,CAAC,2BAA2B,CAAC;YAC3B,WAAW;YACX,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ;YAC7B,aAAa,EAAE,cAAc,EAAE,aAAa;SAC7C,CAAC,EACF,CAAC;YACD,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,sBAAsB,WAAW,EAAE,CAAC;QACzD,MAAM,aAAa,GAAG,cAAc,EAAE,aAAa,CAAC;QACpD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;YAChC,CAAC,8BAA8B,CAAC,EAAE,KAAK;YACvC,CAAC,sCAAsC,CAAC,EAAE,YAAY;SACvD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC;YAC7C,UAAU;YACV,KAAK,EAAE,cAAc,EAAE,KAAK,IAAI,IAAI;YACpC,UAAU,EAAE,iBAAiB,KAAK,EAAE;YACpC,KAAK,EAAE,cAAc;YACrB,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;YACtC,UAAU;YACV,KAAK,EAAE,cAAc,EAAE,KAAK,IAAI,IAAI;YACpC,KAAK,EAAE,yBAAyB;YAChC,QAAQ,EAAE,kBAAkB;YAC5B,QAAQ,EAAE;gBACR,gBAAgB,EAAE,EAAE,WAAW,EAAE;gBACjC,oBAAoB,EAAE;oBACpB,OAAO,EAAE;wBACP,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,+BAA+B;qBAC1C;iBACF;aACF;SACF,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9C,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY;YACZ,YAAY,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;YAC3D,YAAY,EAAE,yBAAyB,CAAC,aAAa,CAAC;SACvD,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { createRemoteDevice } from \"@agent-native/core/integrations\";\nimport {\n  buildEmbedStartPath,\n  createEmbedSessionTicket,\n  getRequestContext,\n  getRequestUserEmail,\n  withConfiguredAppBasePath,\n} from \"@agent-native/core/server\";\nimport { z } from \"zod\";\n\nimport {\n  BROWSER_CHAT_NONCE_QUERY_PARAM,\n  BROWSER_CHAT_PARENT_ORIGIN_QUERY_PARAM,\n  browserChatExtensionIdSchema,\n  browserChatNonceSchema,\n} from \"../lib/browser-chat-protocol.js\";\nimport { isBrowserExtensionIdAllowed } from \"../server/lib/browser-extension-allowlist.js\";\n\nexport default defineAction({\n  description:\n    \"Create a one-time authenticated Dispatch browser-chat embed session for an approved Agent-Native Chrome extension.\",\n  schema: z\n    .object({\n      nonce: browserChatNonceSchema,\n      extensionId: browserChatExtensionIdSchema,\n    })\n    .strict(),\n  readOnly: false,\n  parallelSafe: true,\n  agentTool: false,\n  toolCallable: false,\n  run: async ({ nonce, extensionId }) => {\n    const ownerEmail = getRequestUserEmail()?.trim();\n    if (!ownerEmail) {\n      throw new Error(\n        \"Sign in to Dispatch before connecting the browser extension.\",\n      );\n    }\n\n    const requestContext = getRequestContext();\n    const { browserExtensionIds } = await import(\"../server/index.js\").then(\n      (module) => module.getDispatchConfig(),\n    );\n    if (\n      !isBrowserExtensionIdAllowed({\n        extensionId,\n        configIds: browserExtensionIds,\n        nodeEnv: process.env.NODE_ENV,\n        requestOrigin: requestContext?.requestOrigin,\n      })\n    ) {\n      throw new Error(\n        \"This browser extension is not allowed to connect to Dispatch.\",\n      );\n    }\n\n    const parentOrigin = `chrome-extension://${extensionId}`;\n    const requestOrigin = requestContext?.requestOrigin;\n    if (!requestOrigin) {\n      throw new Error(\"Dispatch could not resolve its browser relay URL.\");\n    }\n    const query = new URLSearchParams({\n      [BROWSER_CHAT_NONCE_QUERY_PARAM]: nonce,\n      [BROWSER_CHAT_PARENT_ORIGIN_QUERY_PARAM]: parentOrigin,\n    });\n    const session = await createEmbedSessionTicket({\n      ownerEmail,\n      orgId: requestContext?.orgId ?? null,\n      targetPath: `/browser-chat?${query}`,\n      scope: \"browser-chat\",\n      ttlSeconds: 60,\n    });\n    const remote = await createRemoteDevice({\n      ownerEmail,\n      orgId: requestContext?.orgId ?? null,\n      label: \"Agent Native for Chrome\",\n      platform: \"chrome-extension\",\n      metadata: {\n        browserExtension: { extensionId },\n        computerCapabilities: {\n          browser: {\n            observe: true,\n            control: true,\n            provider: \"agent-native-chrome-extension\",\n          },\n        },\n      },\n    });\n\n    return {\n      startPath: buildEmbedStartPath(session.ticket),\n      expiresAt: session.expiresAt,\n      parentOrigin,\n      remoteDevice: { id: remote.device.id, token: remote.token },\n      relayBaseUrl: withConfiguredAppBasePath(requestOrigin),\n    };\n  },\n});\n"]}

package/dist/actions/create-dream-report.d.ts

@@ -0,0 +1,59 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    sourceId?: string | undefined;
+    sourceIds?: string[] | undefined;
+    allSources?: unknown;
+    query?: string | undefined;
+    ownerEmail?: string | undefined;
+    limit?: unknown;
+    sourceTimeoutMs?: unknown;
+    sourceConcurrency?: unknown;
+    sourceStartStaggerMs?: unknown;
+    threadConcurrency?: unknown;
+    threadTimeoutMs?: unknown;
+    title?: string | undefined;
+}, {
+    dream: {
+        sourceHealth: import("../server/lib/dreams-store.js").DreamSourceHealth[];
+        candidateCount: number;
+        completedAt: number | null;
+        createdAt: number;
+        createdBy: string;
+        error: string | null;
+        id: string;
+        inspectedThreadCount: number;
+        orgId: string | null;
+        ownerEmail: string;
+        query: string | null;
+        report: string | null;
+        sourceId: string;
+        startedAt: number;
+        status: string;
+        summary: string | null;
+        title: string;
+        updatedAt: number;
+    };
+    proposals: {
+        evidence: import("../server/lib/dreams-store.js").DreamEvidence[];
+        appliedAt: number | null;
+        appliedBy: string | null;
+        confidence: number;
+        content: string;
+        createdAt: number;
+        dreamId: string;
+        id: string;
+        orgId: string | null;
+        ownerEmail: string;
+        rationale: string;
+        rejectedAt: number | null;
+        rejectedBy: string | null;
+        risk: string;
+        status: string;
+        summary: string;
+        targetPath: string;
+        targetType: string;
+        title: string;
+        updatedAt: number;
+    }[];
+}>;
+export default _default;
+//# sourceMappingURL=create-dream-report.d.ts.map

package/dist/actions/create-dream-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-dream-report.d.ts","sourceRoot":"","sources":["../../src/actions/create-dream-report.ts"],"names":[],"mappings":""}

package/dist/actions/create-dream-report.js

@@ -0,0 +1,67 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createDreamReport } from "../server/lib/dreams-store.js";
+export default defineAction({
+    description: "Create a Dispatch dream report from existing thread-debug records and produce pending, evidence-backed memory proposals without calling an LLM.",
+    schema: z.object({
+        sourceId: z
+            .string()
+            .default("current")
+            .describe("Thread debug source id from list-agent-thread-sources. Use 'all' to scan every connected source."),
+        sourceIds: z
+            .array(z.string().min(1))
+            .optional()
+            .describe("Optional explicit source ids to scan together. When provided, sourceId is treated as aggregate."),
+        allSources: z.coerce
+            .boolean()
+            .default(false)
+            .describe("Scan every connected thread-debug source with partial results."),
+        query: z
+            .string()
+            .optional()
+            .describe("Optional search term to focus dream candidate discovery."),
+        ownerEmail: z
+            .string()
+            .optional()
+            .describe("Optional owner email filter. Admins may pass '*' or omit to use their admin-visible scope."),
+        limit: z.coerce.number().int().min(1).max(50).default(20),
+        sourceTimeoutMs: z.coerce
+            .number()
+            .int()
+            .min(1000)
+            .max(60000)
+            .default(15000)
+            .describe("Per-source timeout in milliseconds for partial scans."),
+        sourceConcurrency: z.coerce
+            .number()
+            .int()
+            .min(1)
+            .max(8)
+            .default(2)
+            .describe("How many thread-debug sources to scan at once."),
+        sourceStartStaggerMs: z.coerce
+            .number()
+            .int()
+            .min(0)
+            .max(5000)
+            .default(250)
+            .describe("Delay between source starts within a scan batch."),
+        threadConcurrency: z.coerce
+            .number()
+            .int()
+            .min(1)
+            .max(10)
+            .default(3)
+            .describe("How many threads to inspect at once within each source."),
+        threadTimeoutMs: z.coerce
+            .number()
+            .int()
+            .min(1000)
+            .max(30000)
+            .default(8000)
+            .describe("Per-thread debug timeout in milliseconds."),
+        title: z.string().optional().describe("Optional title for the dream pass."),
+    }),
+    run: async (input) => createDreamReport(input),
+});
+//# sourceMappingURL=create-dream-report.js.map

package/dist/actions/create-dream-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-dream-report.js","sourceRoot":"","sources":["../../src/actions/create-dream-report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,iJAAiJ;IACnJ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,OAAO,CAAC,SAAS,CAAC;aAClB,QAAQ,CACP,kGAAkG,CACnG;QACH,SAAS,EAAE,CAAC;aACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACxB,QAAQ,EAAE;aACV,QAAQ,CACP,iGAAiG,CAClG;QACH,UAAU,EAAE,CAAC,CAAC,MAAM;aACjB,OAAO,EAAE;aACT,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CACP,gEAAgE,CACjE;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;QACvE,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,4FAA4F,CAC7F;QACH,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,eAAe,EAAE,CAAC,CAAC,MAAM;aACtB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,IAAI,CAAC;aACT,GAAG,CAAC,KAAK,CAAC;aACV,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CAAC,uDAAuD,CAAC;QACpE,iBAAiB,EAAE,CAAC,CAAC,MAAM;aACxB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,CAAC,CAAC;aACN,OAAO,CAAC,CAAC,CAAC;aACV,QAAQ,CAAC,gDAAgD,CAAC;QAC7D,oBAAoB,EAAE,CAAC,CAAC,MAAM;aAC3B,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,IAAI,CAAC;aACT,OAAO,CAAC,GAAG,CAAC;aACZ,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,iBAAiB,EAAE,CAAC,CAAC,MAAM;aACxB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,OAAO,CAAC,CAAC,CAAC;aACV,QAAQ,CAAC,yDAAyD,CAAC;QACtE,eAAe,EAAE,CAAC,CAAC,MAAM;aACtB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,IAAI,CAAC;aACT,GAAG,CAAC,KAAK,CAAC;aACV,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,2CAA2C,CAAC;QACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;KAC5E,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC;CAC/C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { createDreamReport } from \"../server/lib/dreams-store.js\";\n\nexport default defineAction({\n  description:\n    \"Create a Dispatch dream report from existing thread-debug records and produce pending, evidence-backed memory proposals without calling an LLM.\",\n  schema: z.object({\n    sourceId: z\n      .string()\n      .default(\"current\")\n      .describe(\n        \"Thread debug source id from list-agent-thread-sources. Use 'all' to scan every connected source.\",\n      ),\n    sourceIds: z\n      .array(z.string().min(1))\n      .optional()\n      .describe(\n        \"Optional explicit source ids to scan together. When provided, sourceId is treated as aggregate.\",\n      ),\n    allSources: z.coerce\n      .boolean()\n      .default(false)\n      .describe(\n        \"Scan every connected thread-debug source with partial results.\",\n      ),\n    query: z\n      .string()\n      .optional()\n      .describe(\"Optional search term to focus dream candidate discovery.\"),\n    ownerEmail: z\n      .string()\n      .optional()\n      .describe(\n        \"Optional owner email filter. Admins may pass '*' or omit to use their admin-visible scope.\",\n      ),\n    limit: z.coerce.number().int().min(1).max(50).default(20),\n    sourceTimeoutMs: z.coerce\n      .number()\n      .int()\n      .min(1000)\n      .max(60000)\n      .default(15000)\n      .describe(\"Per-source timeout in milliseconds for partial scans.\"),\n    sourceConcurrency: z.coerce\n      .number()\n      .int()\n      .min(1)\n      .max(8)\n      .default(2)\n      .describe(\"How many thread-debug sources to scan at once.\"),\n    sourceStartStaggerMs: z.coerce\n      .number()\n      .int()\n      .min(0)\n      .max(5000)\n      .default(250)\n      .describe(\"Delay between source starts within a scan batch.\"),\n    threadConcurrency: z.coerce\n      .number()\n      .int()\n      .min(1)\n      .max(10)\n      .default(3)\n      .describe(\"How many threads to inspect at once within each source.\"),\n    threadTimeoutMs: z.coerce\n      .number()\n      .int()\n      .min(1000)\n      .max(30000)\n      .default(8000)\n      .describe(\"Per-thread debug timeout in milliseconds.\"),\n    title: z.string().optional().describe(\"Optional title for the dream pass.\"),\n  }),\n  run: async (input) => createDreamReport(input),\n});\n"]}

package/dist/actions/create-link-token.d.ts

@@ -0,0 +1,10 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    platform: "slack" | "telegram";
+}, {
+    token: string;
+    command: string;
+    platform: string;
+    expiresAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=create-link-token.d.ts.map

package/dist/actions/create-link-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-link-token.d.ts","sourceRoot":"","sources":["../../src/actions/create-link-token.ts"],"names":[],"mappings":""}

package/dist/actions/create-link-token.js

@@ -0,0 +1,11 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createLinkToken } from "../server/lib/dispatch-store.js";
+export default defineAction({
+    description: "Create a /link token so a Slack or Telegram user can bind to their personal dispatch identity.",
+    schema: z.object({
+        platform: z.enum(["slack", "telegram"]),
+    }),
+    run: async ({ platform }) => createLinkToken(platform),
+});
+//# sourceMappingURL=create-link-token.js.map

package/dist/actions/create-link-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-link-token.js","sourceRoot":"","sources":["../../src/actions/create-link-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gGAAgG;IAClG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;KACxC,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC;CACvD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { createLinkToken } from \"../server/lib/dispatch-store.js\";\n\nexport default defineAction({\n  description:\n    \"Create a /link token so a Slack or Telegram user can bind to their personal dispatch identity.\",\n  schema: z.object({\n    platform: z.enum([\"slack\", \"telegram\"]),\n  }),\n  run: async ({ platform }) => createLinkToken(platform),\n});\n"]}

package/dist/actions/create-pylon-ticket.d.ts

@@ -0,0 +1,17 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    title: string;
+    bodyHtml: string;
+    requesterEmail?: string | undefined;
+    requesterName?: string | undefined;
+    accountId?: string | undefined;
+    priority?: "high" | "low" | "medium" | "urgent" | undefined;
+    tags?: string[] | undefined;
+    assigneeId?: string | undefined;
+    teamId?: string | undefined;
+}, {
+    ok: true;
+    ticketId: string;
+    ticket: Record<string, unknown>;
+}>;
+export default _default;
+//# sourceMappingURL=create-pylon-ticket.d.ts.map

package/dist/actions/create-pylon-ticket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-pylon-ticket.d.ts","sourceRoot":"","sources":["../../src/actions/create-pylon-ticket.ts"],"names":[],"mappings":""}

package/dist/actions/create-pylon-ticket.js

@@ -0,0 +1,95 @@
+import { defineAction } from "@agent-native/core";
+import { resolveSecret } from "@agent-native/core/server";
+import { z } from "zod";
+import { recordAudit } from "../server/lib/dispatch-store.js";
+const PYLON_API_BASE = process.env.PYLON_API_BASE_URL || "https://api.usepylon.com";
+export default defineAction({
+    description: "Create a Pylon ticket. Use to escalate blockers from client meetings, route unmatched #customer-* posts that have no Slack channel, or open a follow-up that needs tracking. Requires PYLON_API_KEY in the Vault.",
+    schema: z.object({
+        title: z.string().min(1).describe("Short ticket title"),
+        bodyHtml: z
+            .string()
+            .min(1)
+            .describe("HTML body — Pylon renders this in the ticket"),
+        requesterEmail: z
+            .string()
+            .email()
+            .optional()
+            .describe("Email of the person the ticket is on behalf of"),
+        requesterName: z.string().optional(),
+        accountId: z
+            .string()
+            .optional()
+            .describe("Pylon account ID — provide either this OR requesterEmail to identify the subject"),
+        priority: z.enum(["urgent", "high", "medium", "low"]).optional(),
+        tags: z.array(z.string()).optional(),
+        assigneeId: z.string().optional(),
+        teamId: z.string().optional(),
+    }),
+    run: async (input) => {
+        const apiKey = await resolveSecret("PYLON_API_KEY");
+        if (!apiKey) {
+            throw new Error("PYLON_API_KEY is not set. Add it to the Dispatch Vault.");
+        }
+        if (!input.accountId && !input.requesterEmail) {
+            throw new Error("Pylon requires either accountId or requesterEmail to identify the ticket subject.");
+        }
+        const payload = {
+            title: input.title,
+            body_html: input.bodyHtml,
+        };
+        if (input.accountId)
+            payload.account_id = input.accountId;
+        if (input.requesterEmail)
+            payload.requester_email = input.requesterEmail;
+        if (input.requesterName)
+            payload.requester_name = input.requesterName;
+        if (input.priority)
+            payload.priority = input.priority;
+        if (input.tags?.length)
+            payload.tags = input.tags;
+        if (input.assigneeId)
+            payload.assignee_id = input.assigneeId;
+        if (input.teamId)
+            payload.team_id = input.teamId;
+        const res = await fetch(`${PYLON_API_BASE}/issues`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${apiKey}`,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify(payload),
+        });
+        if (!res.ok) {
+            const text = await res.text().catch(() => "");
+            throw new Error(`Pylon ticket creation failed (HTTP ${res.status})${text ? `: ${text.slice(0, 500)}` : ""}`);
+        }
+        const data = (await res.json().catch(() => null));
+        const issue = data && typeof data === "object" && "issue" in data
+            ? (data.issue ?? {})
+            : (data ?? {});
+        const ticketId = issue && typeof issue.id === "string"
+            ? issue.id
+            : "";
+        await recordAudit({
+            action: "pylon.ticket.created",
+            targetType: "pylon-ticket",
+            targetId: ticketId || null,
+            summary: `Created Pylon ticket: ${input.title}`,
+            metadata: {
+                title: input.title,
+                priority: input.priority,
+                tags: input.tags,
+                accountId: input.accountId,
+                requesterEmail: input.requesterEmail,
+                ticketId,
+            },
+        });
+        return {
+            ok: true,
+            ticketId,
+            ticket: issue,
+        };
+    },
+});
+//# sourceMappingURL=create-pylon-ticket.js.map

package/dist/actions/create-pylon-ticket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-pylon-ticket.js","sourceRoot":"","sources":["../../src/actions/create-pylon-ticket.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAE9D,MAAM,cAAc,GAClB,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,0BAA0B,CAAC;AAE/D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,mNAAmN;IACrN,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACvD,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,8CAA8C,CAAC;QAC3D,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,KAAK,EAAE;aACP,QAAQ,EAAE;aACV,QAAQ,CAAC,gDAAgD,CAAC;QAC7D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,kFAAkF,CACnF;QACH,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,eAAe,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAA4B;YACvC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,QAAQ;SAC1B,CAAC;QACF,IAAI,KAAK,CAAC,SAAS;YAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QAC1D,IAAI,KAAK,CAAC,cAAc;YAAE,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC,cAAc,CAAC;QACzE,IAAI,KAAK,CAAC,aAAa;YAAE,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC,aAAa,CAAC;QACtE,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACtD,IAAI,KAAK,CAAC,IAAI,EAAE,MAAM;YAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAClD,IAAI,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;QAEjD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,cAAc,SAAS,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5F,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAGxC,CAAC;QACT,MAAM,KAAK,GACT,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI;YACjD,CAAC,CAAC,CAAE,IAA4C,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7D,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACnB,MAAM,QAAQ,GACZ,KAAK,IAAI,OAAQ,KAA0B,CAAC,EAAE,KAAK,QAAQ;YACzD,CAAC,CAAE,KAAwB,CAAC,EAAE;YAC9B,CAAC,CAAC,EAAE,CAAC;QAET,MAAM,WAAW,CAAC;YAChB,MAAM,EAAE,sBAAsB;YAC9B,UAAU,EAAE,cAAc;YAC1B,QAAQ,EAAE,QAAQ,IAAI,IAAI;YAC1B,OAAO,EAAE,yBAAyB,KAAK,CAAC,KAAK,EAAE;YAC/C,QAAQ,EAAE;gBACR,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,QAAQ;aACT;SACF,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAa;YACjB,QAAQ;YACR,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { resolveSecret } from \"@agent-native/core/server\";\nimport { z } from \"zod\";\n\nimport { recordAudit } from \"../server/lib/dispatch-store.js\";\n\nconst PYLON_API_BASE =\n  process.env.PYLON_API_BASE_URL || \"https://api.usepylon.com\";\n\nexport default defineAction({\n  description:\n    \"Create a Pylon ticket. Use to escalate blockers from client meetings, route unmatched #customer-* posts that have no Slack channel, or open a follow-up that needs tracking. Requires PYLON_API_KEY in the Vault.\",\n  schema: z.object({\n    title: z.string().min(1).describe(\"Short ticket title\"),\n    bodyHtml: z\n      .string()\n      .min(1)\n      .describe(\"HTML body — Pylon renders this in the ticket\"),\n    requesterEmail: z\n      .string()\n      .email()\n      .optional()\n      .describe(\"Email of the person the ticket is on behalf of\"),\n    requesterName: z.string().optional(),\n    accountId: z\n      .string()\n      .optional()\n      .describe(\n        \"Pylon account ID — provide either this OR requesterEmail to identify the subject\",\n      ),\n    priority: z.enum([\"urgent\", \"high\", \"medium\", \"low\"]).optional(),\n    tags: z.array(z.string()).optional(),\n    assigneeId: z.string().optional(),\n    teamId: z.string().optional(),\n  }),\n  run: async (input) => {\n    const apiKey = await resolveSecret(\"PYLON_API_KEY\");\n    if (!apiKey) {\n      throw new Error(\n        \"PYLON_API_KEY is not set. Add it to the Dispatch Vault.\",\n      );\n    }\n    if (!input.accountId && !input.requesterEmail) {\n      throw new Error(\n        \"Pylon requires either accountId or requesterEmail to identify the ticket subject.\",\n      );\n    }\n\n    const payload: Record<string, unknown> = {\n      title: input.title,\n      body_html: input.bodyHtml,\n    };\n    if (input.accountId) payload.account_id = input.accountId;\n    if (input.requesterEmail) payload.requester_email = input.requesterEmail;\n    if (input.requesterName) payload.requester_name = input.requesterName;\n    if (input.priority) payload.priority = input.priority;\n    if (input.tags?.length) payload.tags = input.tags;\n    if (input.assigneeId) payload.assignee_id = input.assigneeId;\n    if (input.teamId) payload.team_id = input.teamId;\n\n    const res = await fetch(`${PYLON_API_BASE}/issues`, {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${apiKey}`,\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify(payload),\n    });\n\n    if (!res.ok) {\n      const text = await res.text().catch(() => \"\");\n      throw new Error(\n        `Pylon ticket creation failed (HTTP ${res.status})${text ? `: ${text.slice(0, 500)}` : \"\"}`,\n      );\n    }\n\n    const data = (await res.json().catch(() => null)) as Record<\n      string,\n      unknown\n    > | null;\n    const issue =\n      data && typeof data === \"object\" && \"issue\" in data\n        ? ((data as { issue?: Record<string, unknown> }).issue ?? {})\n        : (data ?? {});\n    const ticketId =\n      issue && typeof (issue as { id?: unknown }).id === \"string\"\n        ? (issue as { id: string }).id\n        : \"\";\n\n    await recordAudit({\n      action: \"pylon.ticket.created\",\n      targetType: \"pylon-ticket\",\n      targetId: ticketId || null,\n      summary: `Created Pylon ticket: ${input.title}`,\n      metadata: {\n        title: input.title,\n        priority: input.priority,\n        tags: input.tags,\n        accountId: input.accountId,\n        requesterEmail: input.requesterEmail,\n        ticketId,\n      },\n    });\n\n    return {\n      ok: true as const,\n      ticketId,\n      ticket: issue,\n    };\n  },\n});\n"]}

package/dist/actions/create-vault-grant.d.ts

@@ -0,0 +1,17 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    secretId: string;
+    appId: string;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    secretId: string;
+    appId: string;
+    grantedBy: string;
+    status: string;
+    syncedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=create-vault-grant.d.ts.map

package/dist/actions/create-vault-grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-vault-grant.d.ts","sourceRoot":"","sources":["../../src/actions/create-vault-grant.ts"],"names":[],"mappings":""}

package/dist/actions/create-vault-grant.js

@@ -0,0 +1,14 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createGrant } from "../server/lib/vault-store.js";
+export default defineAction({
+    description: "Grant an app access to a vault secret in manual vault access mode. Admin only.",
+    schema: z.object({
+        secretId: z.string().describe("ID of the secret to grant"),
+        appId: z
+            .string()
+            .describe("App ID to grant access to, e.g. mail, calendar"),
+    }),
+    run: async (args) => createGrant(args.secretId, args.appId),
+});
+//# sourceMappingURL=create-vault-grant.js.map

package/dist/actions/create-vault-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-vault-grant.js","sourceRoot":"","sources":["../../src/actions/create-vault-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gFAAgF;IAClF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC1D,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,CAAC,gDAAgD,CAAC;KAC9D,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC;CAC5D,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { createGrant } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Grant an app access to a vault secret in manual vault access mode. Admin only.\",\n  schema: z.object({\n    secretId: z.string().describe(\"ID of the secret to grant\"),\n    appId: z\n      .string()\n      .describe(\"App ID to grant access to, e.g. mail, calendar\"),\n  }),\n  run: async (args) => createGrant(args.secretId, args.appId),\n});\n"]}

package/dist/actions/create-vault-secret.d.ts

@@ -0,0 +1,21 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    credentialKey: string;
+    value: string;
+    name: string;
+    provider?: string | undefined;
+    description?: string | undefined;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    name: string;
+    credentialKey: string;
+    value: string;
+    provider: string | null;
+    description: string | null;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=create-vault-secret.d.ts.map

package/dist/actions/create-vault-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-vault-secret.d.ts","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":""}

package/dist/actions/create-vault-secret.js

@@ -0,0 +1,26 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createSecret } from "../server/lib/vault-store.js";
+export default defineAction({
+    description: "Store a secret in the workspace vault. Admin only. Existing credential keys are updated. By default, saved vault keys are available to every workspace app; manual mode uses per-app grants.",
+    schema: z.object({
+        credentialKey: z
+            .string()
+            .min(1)
+            .describe("Environment variable name, e.g. GOOGLE_CLIENT_ID"),
+        value: z.string().min(1).describe("The secret value"),
+        name: z.string().min(1).describe("Human-readable label for this secret"),
+        provider: z
+            .string()
+            .optional()
+            .describe("Provider grouping tag, e.g. google, sendgrid, slack"),
+        description: z.string().optional().describe("Optional description"),
+    }),
+    // This action's whole purpose is to carry a secret `value`. The vault owns
+    // secret storage; the audit log must record THAT a secret was created — never
+    // the value. Opt out of input capture so the trail can't become a second
+    // durable credential store.
+    audit: { recordInputs: false },
+    run: async (args) => createSecret(args),
+});
+//# sourceMappingURL=create-vault-secret.js.map

package/dist/actions/create-vault-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-vault-secret.js","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,8LAA8L;IAChM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACxE,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,qDAAqD,CAAC;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KACpE,CAAC;IACF,2EAA2E;IAC3E,8EAA8E;IAC9E,yEAAyE;IACzE,4BAA4B;IAC5B,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;CACxC,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { createSecret } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Store a secret in the workspace vault. Admin only. Existing credential keys are updated. By default, saved vault keys are available to every workspace app; manual mode uses per-app grants.\",\n  schema: z.object({\n    credentialKey: z\n      .string()\n      .min(1)\n      .describe(\"Environment variable name, e.g. GOOGLE_CLIENT_ID\"),\n    value: z.string().min(1).describe(\"The secret value\"),\n    name: z.string().min(1).describe(\"Human-readable label for this secret\"),\n    provider: z\n      .string()\n      .optional()\n      .describe(\"Provider grouping tag, e.g. google, sendgrid, slack\"),\n    description: z.string().optional().describe(\"Optional description\"),\n  }),\n  // This action's whole purpose is to carry a secret `value`. The vault owns\n  // secret storage; the audit log must record THAT a secret was created — never\n  // the value. Opt out of input capture so the trail can't become a second\n  // durable credential store.\n  audit: { recordInputs: false },\n  run: async (args) => createSecret(args),\n});\n"]}

package/dist/actions/create-workspace-resource-grant.d.ts

@@ -0,0 +1,16 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    resourceId: string;
+    appId: string;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    resourceId: string;
+    appId: string;
+    status: string;
+    syncedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=create-workspace-resource-grant.d.ts.map

package/dist/actions/create-workspace-resource-grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-workspace-resource-grant.d.ts","sourceRoot":"","sources":["../../src/actions/create-workspace-resource-grant.ts"],"names":[],"mappings":""}

package/dist/actions/create-workspace-resource-grant.js

@@ -0,0 +1,14 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createResourceGrant } from "../server/lib/workspace-resources-store.js";
+export default defineAction({
+    description: "Grant an app access to a workspace resource (skill, instruction, agent, knowledge pack, or MCP server). Admin only.",
+    schema: z.object({
+        resourceId: z.string().describe("Workspace resource ID"),
+        appId: z
+            .string()
+            .describe("App ID to grant access to, e.g. mail, analytics"),
+    }),
+    run: async (args) => createResourceGrant(args.resourceId, args.appId),
+});
+//# sourceMappingURL=create-workspace-resource-grant.js.map

package/dist/actions/create-workspace-resource-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-workspace-resource-grant.js","sourceRoot":"","sources":["../../src/actions/create-workspace-resource-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAEjF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,qHAAqH;IACvH,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QACxD,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,CAAC,iDAAiD,CAAC;KAC/D,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC;CACtE,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { createResourceGrant } from \"../server/lib/workspace-resources-store.js\";\n\nexport default defineAction({\n  description:\n    \"Grant an app access to a workspace resource (skill, instruction, agent, knowledge pack, or MCP server). Admin only.\",\n  schema: z.object({\n    resourceId: z.string().describe(\"Workspace resource ID\"),\n    appId: z\n      .string()\n      .describe(\"App ID to grant access to, e.g. mail, analytics\"),\n  }),\n  run: async (args) => createResourceGrant(args.resourceId, args.appId),\n});\n"]}

package/dist/actions/create-workspace-resource.d.ts

@@ -0,0 +1,40 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    kind: "agent" | "agent-file" | "instruction" | "knowledge" | "mcp-server" | "skill";
+    name: string;
+    description?: string | undefined;
+    path: string;
+    content: string;
+    scope: "all" | "selected";
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    kind: string;
+    name: string;
+    description: string | null;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+} | {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    changeType: string;
+    targetType: string;
+    targetId: string | null;
+    status: string;
+    summary: string;
+    payload: string;
+    beforeValue: string | null;
+    afterValue: string | null;
+    requestedBy: string;
+    reviewedBy: string | null;
+    reviewedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=create-workspace-resource.d.ts.map

package/dist/actions/create-workspace-resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-workspace-resource.d.ts","sourceRoot":"","sources":["../../src/actions/create-workspace-resource.ts"],"names":[],"mappings":""}

package/dist/actions/create-workspace-resource.js

@@ -0,0 +1,29 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createWorkspaceResource } from "../server/lib/workspace-resources-store.js";
+export default defineAction({
+    description: 'Create a workspace-wide skill, instruction, agent profile, reference resource, or MCP server. Set scope to "all" for runtime inheritance by every app, or "selected" to grant per-app. When Dispatch approval policy is enabled, All-app creates queue an approval request before taking effect.',
+    schema: z.object({
+        kind: z
+            .enum([
+            "skill",
+            "instruction",
+            "agent",
+            "agent-file",
+            "knowledge",
+            "mcp-server",
+        ])
+            .describe("Resource kind: skill, instruction, agent, agent-file, knowledge, or mcp-server"),
+        name: z.string().describe("Human-readable name"),
+        description: z.string().optional().describe("Short description"),
+        path: z
+            .string()
+            .describe('Resource path in target apps. Use "skills/<name>/SKILL.md" for skills, "AGENTS.md" or "instructions/<name>.md" for always-on guardrails, "context/<name>.md" for reference resources, "agents/<name>.md" for custom agents, and "mcp-servers/<name>.json" for HTTP MCP servers.'),
+        content: z.string().describe("Full resource content (markdown or JSON)"),
+        scope: z
+            .enum(["all", "selected"])
+            .describe('"all" = inherited by every app at runtime, "selected" = only apps with explicit grants'),
+    }),
+    run: async (args) => createWorkspaceResource(args),
+});
+//# sourceMappingURL=create-workspace-resource.js.map

package/dist/actions/create-workspace-resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-workspace-resource.js","sourceRoot":"","sources":["../../src/actions/create-workspace-resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,kSAAkS;IACpS,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC;YACJ,OAAO;YACP,aAAa;YACb,OAAO;YACP,YAAY;YACZ,WAAW;YACX,YAAY;SACb,CAAC;aACD,QAAQ,CACP,gFAAgF,CACjF;QACH,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAChE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,CACP,iRAAiR,CAClR;QACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACxE,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;aACzB,QAAQ,CACP,wFAAwF,CACzF;KACJ,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC;CACnD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { createWorkspaceResource } from \"../server/lib/workspace-resources-store.js\";\n\nexport default defineAction({\n  description:\n    'Create a workspace-wide skill, instruction, agent profile, reference resource, or MCP server. Set scope to \"all\" for runtime inheritance by every app, or \"selected\" to grant per-app. When Dispatch approval policy is enabled, All-app creates queue an approval request before taking effect.',\n  schema: z.object({\n    kind: z\n      .enum([\n        \"skill\",\n        \"instruction\",\n        \"agent\",\n        \"agent-file\",\n        \"knowledge\",\n        \"mcp-server\",\n      ])\n      .describe(\n        \"Resource kind: skill, instruction, agent, agent-file, knowledge, or mcp-server\",\n      ),\n    name: z.string().describe(\"Human-readable name\"),\n    description: z.string().optional().describe(\"Short description\"),\n    path: z\n      .string()\n      .describe(\n        'Resource path in target apps. Use \"skills/<name>/SKILL.md\" for skills, \"AGENTS.md\" or \"instructions/<name>.md\" for always-on guardrails, \"context/<name>.md\" for reference resources, \"agents/<name>.md\" for custom agents, and \"mcp-servers/<name>.json\" for HTTP MCP servers.',\n      ),\n    content: z.string().describe(\"Full resource content (markdown or JSON)\"),\n    scope: z\n      .enum([\"all\", \"selected\"])\n      .describe(\n        '\"all\" = inherited by every app at runtime, \"selected\" = only apps with explicit grants',\n      ),\n  }),\n  run: async (args) => createWorkspaceResource(args),\n});\n"]}