@agent-native/dispatch 0.0.0-beta-20260819155526

package/dist/actions/create_embed_session.d.ts

@@ -0,0 +1,13 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    app?: string | undefined;
+    url?: string | undefined;
+    path?: string | undefined;
+    chrome?: "full" | "minimal" | undefined;
+}, {
+    startUrl: string;
+    targetPath?: string;
+    expiresAt?: number;
+    app: string;
+}>;
+export default _default;
+//# sourceMappingURL=create_embed_session.d.ts.map

package/dist/actions/create_embed_session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_embed_session.d.ts","sourceRoot":"","sources":["../../src/actions/create_embed_session.ts"],"names":[],"mappings":""}

package/dist/actions/create_embed_session.js

@@ -0,0 +1,28 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createGrantedDispatchMcpEmbedSession } from "../server/lib/mcp-gateway.js";
+export default defineAction({
+    description: "MCP Apps helper: create a browser embed session for a Dispatch-granted app URL. Usually called by an MCP App iframe, not directly by the model.",
+    schema: z.object({
+        app: z
+            .string()
+            .optional()
+            .describe("Optional granted app id when path is app-relative."),
+        url: z
+            .string()
+            .optional()
+            .describe("Absolute URL returned by open_app, or app-relative path."),
+        path: z
+            .string()
+            .optional()
+            .describe("App-relative path. Requires app when url is not provided."),
+        chrome: z
+            .enum(["full", "minimal"])
+            .optional()
+            .describe("Embed chrome preference. Defaults to full."),
+    }),
+    readOnly: false,
+    parallelSafe: true,
+    run: async (args) => createGrantedDispatchMcpEmbedSession(args),
+});
+//# sourceMappingURL=create_embed_session.js.map

package/dist/actions/create_embed_session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_embed_session.js","sourceRoot":"","sources":["../../src/actions/create_embed_session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oCAAoC,EAAE,MAAM,8BAA8B,CAAC;AAEpF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,iJAAiJ;IACnJ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,oDAAoD,CAAC;QACjE,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;QACvE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,2DAA2D,CAAC;QACxE,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;aACzB,QAAQ,EAAE;aACV,QAAQ,CAAC,4CAA4C,CAAC;KAC1D,CAAC;IACF,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,oCAAoC,CAAC,IAAI,CAAC;CAChE,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { createGrantedDispatchMcpEmbedSession } from \"../server/lib/mcp-gateway.js\";\n\nexport default defineAction({\n  description:\n    \"MCP Apps helper: create a browser embed session for a Dispatch-granted app URL. Usually called by an MCP App iframe, not directly by the model.\",\n  schema: z.object({\n    app: z\n      .string()\n      .optional()\n      .describe(\"Optional granted app id when path is app-relative.\"),\n    url: z\n      .string()\n      .optional()\n      .describe(\"Absolute URL returned by open_app, or app-relative path.\"),\n    path: z\n      .string()\n      .optional()\n      .describe(\"App-relative path. Requires app when url is not provided.\"),\n    chrome: z\n      .enum([\"full\", \"minimal\"])\n      .optional()\n      .describe(\"Embed chrome preference. Defaults to full.\"),\n  }),\n  readOnly: false,\n  parallelSafe: true,\n  run: async (args) => createGrantedDispatchMcpEmbedSession(args),\n});\n"]}

package/dist/actions/create_workspace_app_embed_session.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Browser callers must come from the Dispatch parent surface. Native callers
+ * carry the parent bearer explicitly; direct in-process action calls have no
+ * request headers and are already inside the server authorization boundary.
+ */
+export declare function assertWorkspaceEmbedSessionCaller(headers: Headers | undefined): Promise<void>;
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    app?: string | undefined;
+    url?: string | undefined;
+    path?: string | undefined;
+    chrome?: "full" | "minimal" | undefined;
+}, {
+    startUrl: string;
+    targetPath?: string;
+    expiresAt?: number;
+    app: string;
+}>;
+export default _default;
+//# sourceMappingURL=create_workspace_app_embed_session.d.ts.map

package/dist/actions/create_workspace_app_embed_session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_workspace_app_embed_session.d.ts","sourceRoot":"","sources":["../../src/actions/create_workspace_app_embed_session.ts"],"names":[],"mappings":"AAcA;;;;GAIG;AACH,wBAAsB,iCAAiC,CACrD,OAAO,EAAE,OAAO,GAAG,SAAS,GAC3B,OAAO,CAAC,IAAI,CAAC,CAiDf"}

package/dist/actions/create_workspace_app_embed_session.js

@@ -0,0 +1,89 @@
+import { defineAction } from "@agent-native/core";
+import { getRequestContext } from "@agent-native/core/server";
+import { z } from "zod";
+import { listWorkspaceApps } from "../server/lib/app-creation-store.js";
+import { createWorkspaceSsoEmbedSession } from "../server/lib/mcp-gateway.js";
+function isPathWithinApp(pathname, appPath) {
+    const normalized = appPath.replace(/\/+$/, "") || "/";
+    return normalized === "/"
+        ? pathname.startsWith("/")
+        : pathname === normalized || pathname.startsWith(`${normalized}/`);
+}
+/**
+ * Browser callers must come from the Dispatch parent surface. Native callers
+ * carry the parent bearer explicitly; direct in-process action calls have no
+ * request headers and are already inside the server authorization boundary.
+ */
+export async function assertWorkspaceEmbedSessionCaller(headers) {
+    if (!headers)
+        return;
+    const fetchSite = headers.get("sec-fetch-site")?.trim().toLowerCase();
+    // Electron's Chromium fetch adds Sec-Fetch-Site even for the native broker's
+    // server request. The custom header is not sendable by a cross-origin page
+    // without a successful CORS preflight, so it is the native CSRF marker.
+    if (fetchSite &&
+        fetchSite !== "same-origin" &&
+        headers.get("x-agent-native-csrf")?.trim() === "1") {
+        return;
+    }
+    // Browsers always send Sec-Fetch-Site and page scripts cannot forge or strip
+    // this forbidden header. Native clients without fetch metadata authenticate
+    // through the normal action request context below.
+    if (!fetchSite)
+        return;
+    if (fetchSite !== "same-origin") {
+        throw new Error("Workspace app sessions must be requested by Dispatch.");
+    }
+    const referer = headers.get("referer");
+    const requestOrigin = getRequestContext()?.requestOrigin;
+    if (!referer || !requestOrigin) {
+        throw new Error("Workspace app sessions must be requested by Dispatch.");
+    }
+    let refererUrl;
+    try {
+        refererUrl = new URL(referer);
+    }
+    catch {
+        throw new Error("Workspace app sessions must be requested by Dispatch.");
+    }
+    if (refererUrl.origin !== requestOrigin) {
+        throw new Error("Workspace app sessions must be requested by Dispatch.");
+    }
+    const apps = await listWorkspaceApps({
+        includeAgentCards: false,
+        audience: "all",
+    });
+    if (apps.some((app) => !app.isDispatch && isPathWithinApp(refererUrl.pathname, app.path))) {
+        throw new Error("Workspace apps cannot mint sessions for themselves.");
+    }
+}
+export default defineAction({
+    description: "Create a one-time app-scoped embed session for a workspace app opened inside Dispatch. This browser-only path is rollout-gated and never exposes an app's reusable session to another app.",
+    schema: z.object({
+        app: z
+            .string()
+            .optional()
+            .describe("Workspace app id when path is app-relative."),
+        url: z
+            .string()
+            .optional()
+            .describe("Absolute app URL or app-relative path."),
+        path: z
+            .string()
+            .optional()
+            .describe("App-relative path. Requires app when url is not provided."),
+        chrome: z
+            .enum(["full", "minimal"])
+            .optional()
+            .describe("Embed chrome preference. Defaults to full."),
+    }),
+    readOnly: false,
+    parallelSafe: false,
+    agentTool: false,
+    toolCallable: false,
+    run: async (args, context) => {
+        await assertWorkspaceEmbedSessionCaller(context?.requestHeaders);
+        return createWorkspaceSsoEmbedSession(args);
+    },
+});
+//# sourceMappingURL=create_workspace_app_embed_session.js.map

package/dist/actions/create_workspace_app_embed_session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_workspace_app_embed_session.js","sourceRoot":"","sources":["../../src/actions/create_workspace_app_embed_session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAE9E,SAAS,eAAe,CAAC,QAAgB,EAAE,OAAe;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IACtD,OAAO,UAAU,KAAK,GAAG;QACvB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1B,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,OAA4B;IAE5B,IAAI,CAAC,OAAO;QAAE,OAAO;IAErB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtE,6EAA6E;IAC7E,2EAA2E;IAC3E,wEAAwE;IACxE,IACE,SAAS;QACT,SAAS,KAAK,aAAa;QAC3B,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG,EAClD,CAAC;QACD,OAAO;IACT,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,mDAAmD;IACnD,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,iBAAiB,EAAE,EAAE,aAAa,CAAC;IACzD,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,UAAe,CAAC;IACpB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;QACnC,iBAAiB,EAAE,KAAK;QACxB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,IACE,IAAI,CAAC,IAAI,CACP,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,GAAG,CAAC,UAAU,IAAI,eAAe,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CACpE,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,4LAA4L;IAC9L,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,wCAAwC,CAAC;QACrD,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,2DAA2D,CAAC;QACxE,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;aACzB,QAAQ,EAAE;aACV,QAAQ,CAAC,4CAA4C,CAAC;KAC1D,CAAC;IACF,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC3B,MAAM,iCAAiC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACjE,OAAO,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { getRequestContext } from \"@agent-native/core/server\";\nimport { z } from \"zod\";\n\nimport { listWorkspaceApps } from \"../server/lib/app-creation-store.js\";\nimport { createWorkspaceSsoEmbedSession } from \"../server/lib/mcp-gateway.js\";\n\nfunction isPathWithinApp(pathname: string, appPath: string): boolean {\n  const normalized = appPath.replace(/\\/+$/, \"\") || \"/\";\n  return normalized === \"/\"\n    ? pathname.startsWith(\"/\")\n    : pathname === normalized || pathname.startsWith(`${normalized}/`);\n}\n\n/**\n * Browser callers must come from the Dispatch parent surface. Native callers\n * carry the parent bearer explicitly; direct in-process action calls have no\n * request headers and are already inside the server authorization boundary.\n */\nexport async function assertWorkspaceEmbedSessionCaller(\n  headers: Headers | undefined,\n): Promise<void> {\n  if (!headers) return;\n\n  const fetchSite = headers.get(\"sec-fetch-site\")?.trim().toLowerCase();\n  // Electron's Chromium fetch adds Sec-Fetch-Site even for the native broker's\n  // server request. The custom header is not sendable by a cross-origin page\n  // without a successful CORS preflight, so it is the native CSRF marker.\n  if (\n    fetchSite &&\n    fetchSite !== \"same-origin\" &&\n    headers.get(\"x-agent-native-csrf\")?.trim() === \"1\"\n  ) {\n    return;\n  }\n  // Browsers always send Sec-Fetch-Site and page scripts cannot forge or strip\n  // this forbidden header. Native clients without fetch metadata authenticate\n  // through the normal action request context below.\n  if (!fetchSite) return;\n  if (fetchSite !== \"same-origin\") {\n    throw new Error(\"Workspace app sessions must be requested by Dispatch.\");\n  }\n\n  const referer = headers.get(\"referer\");\n  const requestOrigin = getRequestContext()?.requestOrigin;\n  if (!referer || !requestOrigin) {\n    throw new Error(\"Workspace app sessions must be requested by Dispatch.\");\n  }\n\n  let refererUrl: URL;\n  try {\n    refererUrl = new URL(referer);\n  } catch {\n    throw new Error(\"Workspace app sessions must be requested by Dispatch.\");\n  }\n  if (refererUrl.origin !== requestOrigin) {\n    throw new Error(\"Workspace app sessions must be requested by Dispatch.\");\n  }\n  const apps = await listWorkspaceApps({\n    includeAgentCards: false,\n    audience: \"all\",\n  });\n  if (\n    apps.some(\n      (app) =>\n        !app.isDispatch && isPathWithinApp(refererUrl.pathname, app.path),\n    )\n  ) {\n    throw new Error(\"Workspace apps cannot mint sessions for themselves.\");\n  }\n}\n\nexport default defineAction({\n  description:\n    \"Create a one-time app-scoped embed session for a workspace app opened inside Dispatch. This browser-only path is rollout-gated and never exposes an app's reusable session to another app.\",\n  schema: z.object({\n    app: z\n      .string()\n      .optional()\n      .describe(\"Workspace app id when path is app-relative.\"),\n    url: z\n      .string()\n      .optional()\n      .describe(\"Absolute app URL or app-relative path.\"),\n    path: z\n      .string()\n      .optional()\n      .describe(\"App-relative path. Requires app when url is not provided.\"),\n    chrome: z\n      .enum([\"full\", \"minimal\"])\n      .optional()\n      .describe(\"Embed chrome preference. Defaults to full.\"),\n  }),\n  readOnly: false,\n  parallelSafe: false,\n  agentTool: false,\n  toolCallable: false,\n  run: async (args, context) => {\n    await assertWorkspaceEmbedSessionCaller(context?.requestHeaders);\n    return createWorkspaceSsoEmbedSession(args);\n  },\n});\n"]}

package/dist/actions/delete-destination.d.ts

@@ -0,0 +1,34 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    id: string;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    changeType: string;
+    targetType: string;
+    targetId: string | null;
+    status: string;
+    summary: string;
+    payload: string;
+    beforeValue: string | null;
+    afterValue: string | null;
+    requestedBy: string;
+    reviewedBy: string | null;
+    reviewedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+} | {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    name: string;
+    platform: string;
+    destination: string;
+    threadRef: string | null;
+    notes: string | null;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=delete-destination.d.ts.map

package/dist/actions/delete-destination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-destination.d.ts","sourceRoot":"","sources":["../../src/actions/delete-destination.ts"],"names":[],"mappings":""}

package/dist/actions/delete-destination.js

@@ -0,0 +1,11 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { deleteDestination } from "../server/lib/dispatch-store.js";
+export default defineAction({
+    description: "Delete a saved dispatch destination.",
+    schema: z.object({
+        id: z.string().describe("Destination id"),
+    }),
+    run: async ({ id }) => deleteDestination(id),
+});
+//# sourceMappingURL=delete-destination.js.map

package/dist/actions/delete-destination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-destination.js","sourceRoot":"","sources":["../../src/actions/delete-destination.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAEpE,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,sCAAsC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;KAC1C,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;CAC7C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { deleteDestination } from \"../server/lib/dispatch-store.js\";\n\nexport default defineAction({\n  description: \"Delete a saved dispatch destination.\",\n  schema: z.object({\n    id: z.string().describe(\"Destination id\"),\n  }),\n  run: async ({ id }) => deleteDestination(id),\n});\n"]}

package/dist/actions/delete-staged-dataset.d.ts

@@ -0,0 +1,10 @@
+declare const _default: import("node_modules/@agent-native/core/dist/action.js").ActionDefinition<{
+    datasetId: string;
+} | {
+    datasetId: string;
+}, {
+    deleted: boolean;
+    datasetId: string;
+}>;
+export default _default;
+//# sourceMappingURL=delete-staged-dataset.d.ts.map

package/dist/actions/delete-staged-dataset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-staged-dataset.d.ts","sourceRoot":"","sources":["../../src/actions/delete-staged-dataset.ts"],"names":[],"mappings":""}

package/dist/actions/delete-staged-dataset.js

@@ -0,0 +1,8 @@
+import { createDeleteStagedDatasetAction } from "@agent-native/core/provider-api/actions/staged-datasets";
+import { DISPATCH_APP_ID } from "../server/lib/provider-api.js";
+export default createDeleteStagedDatasetAction({
+    appId: DISPATCH_APP_ID,
+    description: "Delete a staged dataset by id, freeing its scratch storage. Use after analysis is complete or before re-staging under the same name. Only the owner who staged the dataset can delete it.",
+    http: false,
+});
+//# sourceMappingURL=delete-staged-dataset.js.map

package/dist/actions/delete-staged-dataset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-staged-dataset.js","sourceRoot":"","sources":["../../src/actions/delete-staged-dataset.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,yDAAyD,CAAC;AAE1G,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,eAAe,+BAA+B,CAAC;IAC7C,KAAK,EAAE,eAAe;IACtB,WAAW,EACT,2LAA2L;IAC7L,IAAI,EAAE,KAAK;CACZ,CAAC,CAAC","sourcesContent":["import { createDeleteStagedDatasetAction } from \"@agent-native/core/provider-api/actions/staged-datasets\";\n\nimport { DISPATCH_APP_ID } from \"../server/lib/provider-api.js\";\n\nexport default createDeleteStagedDatasetAction({\n  appId: DISPATCH_APP_ID,\n  description:\n    \"Delete a staged dataset by id, freeing its scratch storage. Use after analysis is complete or before re-staging under the same name. Only the owner who staged the dataset can delete it.\",\n  http: false,\n});\n"]}

package/dist/actions/delete-vault-secret.d.ts

@@ -0,0 +1,17 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    id: string;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    name: string;
+    credentialKey: string;
+    value: string;
+    provider: string | null;
+    description: string | null;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=delete-vault-secret.d.ts.map

package/dist/actions/delete-vault-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-vault-secret.d.ts","sourceRoot":"","sources":["../../src/actions/delete-vault-secret.ts"],"names":[],"mappings":""}

package/dist/actions/delete-vault-secret.js

@@ -0,0 +1,11 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { deleteSecret } from "../server/lib/vault-store.js";
+export default defineAction({
+    description: "Delete a secret from the workspace vault. Also revokes all active grants for this secret. Admin only.",
+    schema: z.object({
+        id: z.string().describe("Secret ID to delete"),
+    }),
+    run: async (args) => deleteSecret(args.id),
+});
+//# sourceMappingURL=delete-vault-secret.js.map

package/dist/actions/delete-vault-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-vault-secret.js","sourceRoot":"","sources":["../../src/actions/delete-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;KAC/C,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;CAC3C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { deleteSecret } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Delete a secret from the workspace vault. Also revokes all active grants for this secret. Admin only.\",\n  schema: z.object({\n    id: z.string().describe(\"Secret ID to delete\"),\n  }),\n  run: async (args) => deleteSecret(args.id),\n});\n"]}

package/dist/actions/delete-workspace-resource.d.ts

@@ -0,0 +1,35 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    id: string;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    changeType: string;
+    targetType: string;
+    targetId: string | null;
+    status: string;
+    summary: string;
+    payload: string;
+    beforeValue: string | null;
+    afterValue: string | null;
+    requestedBy: string;
+    reviewedBy: string | null;
+    reviewedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+} | {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    kind: string;
+    name: string;
+    description: string | null;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=delete-workspace-resource.d.ts.map

package/dist/actions/delete-workspace-resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-workspace-resource.d.ts","sourceRoot":"","sources":["../../src/actions/delete-workspace-resource.ts"],"names":[],"mappings":""}

package/dist/actions/delete-workspace-resource.js

@@ -0,0 +1,11 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { deleteWorkspaceResource } from "../server/lib/workspace-resources-store.js";
+export default defineAction({
+    description: "Delete a workspace resource and revoke all its grants. When Dispatch approval policy is enabled, deleting an All-app resource queues an approval request before taking effect.",
+    schema: z.object({
+        id: z.string().describe("Resource ID to delete"),
+    }),
+    run: async (args) => deleteWorkspaceResource(args.id),
+});
+//# sourceMappingURL=delete-workspace-resource.js.map

package/dist/actions/delete-workspace-resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-workspace-resource.js","sourceRoot":"","sources":["../../src/actions/delete-workspace-resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gLAAgL;IAClL,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KACjD,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;CACtD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { deleteWorkspaceResource } from \"../server/lib/workspace-resources-store.js\";\n\nexport default defineAction({\n  description:\n    \"Delete a workspace resource and revoke all its grants. When Dispatch approval policy is enabled, deleting an All-app resource queues an approval request before taking effect.\",\n  schema: z.object({\n    id: z.string().describe(\"Resource ID to delete\"),\n  }),\n  run: async (args) => deleteWorkspaceResource(args.id),\n});\n"]}

package/dist/actions/deny-vault-request.d.ts

@@ -0,0 +1,19 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    id: string;
+    reason?: string | undefined;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    credentialKey: string;
+    appId: string;
+    reason: string | null;
+    requestedBy: string;
+    status: string;
+    reviewedBy: string | null;
+    reviewedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=deny-vault-request.d.ts.map

package/dist/actions/deny-vault-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deny-vault-request.d.ts","sourceRoot":"","sources":["../../src/actions/deny-vault-request.ts"],"names":[],"mappings":""}

package/dist/actions/deny-vault-request.js

@@ -0,0 +1,12 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { denyRequest, requireVaultCtx } from "../server/lib/vault-store.js";
+export default defineAction({
+    description: "Deny a pending vault secret request. Admin only.",
+    schema: z.object({
+        id: z.string().describe("Request ID to deny"),
+        reason: z.string().optional().describe("Reason for denial"),
+    }),
+    run: async (args) => denyRequest(args.id, args.reason, requireVaultCtx()),
+});
+//# sourceMappingURL=deny-vault-request.js.map

package/dist/actions/deny-vault-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deny-vault-request.js","sourceRoot":"","sources":["../../src/actions/deny-vault-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE5E,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,kDAAkD;IAC/D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;KAC5D,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;CAC1E,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { denyRequest, requireVaultCtx } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description: \"Deny a pending vault secret request. Admin only.\",\n  schema: z.object({\n    id: z.string().describe(\"Request ID to deny\"),\n    reason: z.string().optional().describe(\"Reason for denial\"),\n  }),\n  run: async (args) => denyRequest(args.id, args.reason, requireVaultCtx()),\n});\n"]}

package/dist/actions/ensure-dream-job.d.ts

@@ -0,0 +1,33 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    schedule?: string | undefined;
+    sourceId?: string | undefined;
+    sourceIds?: string[] | undefined;
+    allSources?: unknown;
+    query?: string | undefined;
+    limit?: unknown;
+    sourceTimeoutMs?: unknown;
+    sourceConcurrency?: unknown;
+    sourceStartStaggerMs?: unknown;
+    threadConcurrency?: unknown;
+    threadTimeoutMs?: unknown;
+    minCandidateCount?: unknown;
+}, {
+    path: string;
+    owner: string;
+    schedule: string;
+    enabled: boolean;
+    runAs: string;
+    sourceId: string;
+    sourceIds: string[];
+    allSources: boolean;
+    query: string | null;
+    limit: number;
+    sourceTimeoutMs: number;
+    sourceConcurrency: number;
+    sourceStartStaggerMs: number;
+    threadConcurrency: number;
+    threadTimeoutMs: number;
+    minCandidateCount: number;
+}>;
+export default _default;
+//# sourceMappingURL=ensure-dream-job.d.ts.map

package/dist/actions/ensure-dream-job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-dream-job.d.ts","sourceRoot":"","sources":["../../src/actions/ensure-dream-job.ts"],"names":[],"mappings":""}

package/dist/actions/ensure-dream-job.js

@@ -0,0 +1,73 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { ensureDreamJob } from "../server/lib/dreams-store.js";
+export default defineAction({
+    description: "Create or update the personal recurring Dispatch dream job resource at jobs/dispatch-dream.md.",
+    schema: z.object({
+        schedule: z
+            .string()
+            .optional()
+            .describe('Optional five-field cron schedule. Defaults to weekly: "0 9 * * 1".'),
+        sourceId: z
+            .string()
+            .default("all")
+            .describe("Thread debug source id for the recurring dream pass."),
+        sourceIds: z
+            .array(z.string().min(1))
+            .optional()
+            .describe("Optional explicit source ids for recurring dream passes."),
+        allSources: z.coerce
+            .boolean()
+            .default(true)
+            .describe("Scan every connected source for recurring dream passes."),
+        query: z
+            .string()
+            .optional()
+            .describe("Optional search term to focus recurring dream passes."),
+        limit: z.coerce.number().int().min(1).max(50).default(8),
+        sourceTimeoutMs: z.coerce
+            .number()
+            .int()
+            .min(1000)
+            .max(60000)
+            .default(30000)
+            .describe("Per-source timeout in milliseconds."),
+        sourceConcurrency: z.coerce
+            .number()
+            .int()
+            .min(1)
+            .max(8)
+            .default(2)
+            .describe("How many sources to scan at once."),
+        sourceStartStaggerMs: z.coerce
+            .number()
+            .int()
+            .min(0)
+            .max(5000)
+            .default(250)
+            .describe("Delay between source starts within each scan batch."),
+        threadConcurrency: z.coerce
+            .number()
+            .int()
+            .min(1)
+            .max(10)
+            .default(3)
+            .describe("How many threads to inspect at once within each source."),
+        threadTimeoutMs: z.coerce
+            .number()
+            .int()
+            .min(1000)
+            .max(30000)
+            .default(8000)
+            .describe("Per-thread debug timeout in milliseconds."),
+        minCandidateCount: z.coerce
+            .number()
+            .int()
+            .min(0)
+            .max(50)
+            .default(1)
+            .describe("Skip recurring report creation below this candidate count."),
+    }),
+    run: async (input) => ensureDreamJob(input),
+});
+//# sourceMappingURL=ensure-dream-job.js.map

package/dist/actions/ensure-dream-job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-dream-job.js","sourceRoot":"","sources":["../../src/actions/ensure-dream-job.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gGAAgG;IAClG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,qEAAqE,CACtE;QACH,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CAAC,sDAAsD,CAAC;QACnE,SAAS,EAAE,CAAC;aACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACxB,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;QACvE,UAAU,EAAE,CAAC,CAAC,MAAM;aACjB,OAAO,EAAE;aACT,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,yDAAyD,CAAC;QACtE,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,uDAAuD,CAAC;QACpE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACxD,eAAe,EAAE,CAAC,CAAC,MAAM;aACtB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,IAAI,CAAC;aACT,GAAG,CAAC,KAAK,CAAC;aACV,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CAAC,qCAAqC,CAAC;QAClD,iBAAiB,EAAE,CAAC,CAAC,MAAM;aACxB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,CAAC,CAAC;aACN,OAAO,CAAC,CAAC,CAAC;aACV,QAAQ,CAAC,mCAAmC,CAAC;QAChD,oBAAoB,EAAE,CAAC,CAAC,MAAM;aAC3B,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,IAAI,CAAC;aACT,OAAO,CAAC,GAAG,CAAC;aACZ,QAAQ,CAAC,qDAAqD,CAAC;QAClE,iBAAiB,EAAE,CAAC,CAAC,MAAM;aACxB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,OAAO,CAAC,CAAC,CAAC;aACV,QAAQ,CAAC,yDAAyD,CAAC;QACtE,eAAe,EAAE,CAAC,CAAC,MAAM;aACtB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,IAAI,CAAC;aACT,GAAG,CAAC,KAAK,CAAC;aACV,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,2CAA2C,CAAC;QACxD,iBAAiB,EAAE,CAAC,CAAC,MAAM;aACxB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,OAAO,CAAC,CAAC,CAAC;aACV,QAAQ,CAAC,4DAA4D,CAAC;KAC1E,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC;CAC5C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { ensureDreamJob } from \"../server/lib/dreams-store.js\";\n\nexport default defineAction({\n  description:\n    \"Create or update the personal recurring Dispatch dream job resource at jobs/dispatch-dream.md.\",\n  schema: z.object({\n    schedule: z\n      .string()\n      .optional()\n      .describe(\n        'Optional five-field cron schedule. Defaults to weekly: \"0 9 * * 1\".',\n      ),\n    sourceId: z\n      .string()\n      .default(\"all\")\n      .describe(\"Thread debug source id for the recurring dream pass.\"),\n    sourceIds: z\n      .array(z.string().min(1))\n      .optional()\n      .describe(\"Optional explicit source ids for recurring dream passes.\"),\n    allSources: z.coerce\n      .boolean()\n      .default(true)\n      .describe(\"Scan every connected source for recurring dream passes.\"),\n    query: z\n      .string()\n      .optional()\n      .describe(\"Optional search term to focus recurring dream passes.\"),\n    limit: z.coerce.number().int().min(1).max(50).default(8),\n    sourceTimeoutMs: z.coerce\n      .number()\n      .int()\n      .min(1000)\n      .max(60000)\n      .default(30000)\n      .describe(\"Per-source timeout in milliseconds.\"),\n    sourceConcurrency: z.coerce\n      .number()\n      .int()\n      .min(1)\n      .max(8)\n      .default(2)\n      .describe(\"How many sources to scan at once.\"),\n    sourceStartStaggerMs: z.coerce\n      .number()\n      .int()\n      .min(0)\n      .max(5000)\n      .default(250)\n      .describe(\"Delay between source starts within each scan batch.\"),\n    threadConcurrency: z.coerce\n      .number()\n      .int()\n      .min(1)\n      .max(10)\n      .default(3)\n      .describe(\"How many threads to inspect at once within each source.\"),\n    threadTimeoutMs: z.coerce\n      .number()\n      .int()\n      .min(1000)\n      .max(30000)\n      .default(8000)\n      .describe(\"Per-thread debug timeout in milliseconds.\"),\n    minCandidateCount: z.coerce\n      .number()\n      .int()\n      .min(0)\n      .max(50)\n      .default(1)\n      .describe(\"Skip recurring report creation below this candidate count.\"),\n  }),\n  run: async (input) => ensureDreamJob(input),\n});\n"]}

package/dist/actions/get-agent-thread-debug.d.ts

@@ -0,0 +1,72 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    sourceId?: string | undefined;
+    threadId?: string | undefined;
+    runId?: string | undefined;
+    ownerEmail?: string | undefined;
+    maxRuns?: unknown;
+    maxEvents?: unknown;
+    maxTraceSpans?: unknown;
+}, {
+    source: {
+        id: string;
+        label: string;
+        kind: "configured" | "current" | "env";
+        databaseUrlEnv: string | null;
+    };
+    access: {
+        viewerEmail: string;
+        scope: string;
+        canInspectAll: boolean;
+    };
+    thread: {
+        id: string;
+        ownerEmail: string;
+        title: string;
+        preview: string;
+        messageCount: number;
+        createdAt: number;
+        updatedAt: number;
+    };
+    lookup: {
+        requestedId: string;
+        threadId: string;
+        runId: string | null;
+    };
+    messages: any;
+    debug: any;
+    debugRuns: any;
+    queuedMessages: any;
+    threadData: Record<string, unknown>;
+    rawThreadData: string;
+    runs: {
+        id: string;
+        threadId: string;
+        turnId: string | null;
+        status: string;
+        abortReason: string | null;
+        errorCode: string | null;
+        errorDetail: string | null;
+        terminalReason: string | null;
+        startedAt: number;
+        completedAt: number | null;
+        heartbeatAt: number | null;
+        lastProgressAt: number | null;
+        dispatchMode: string | null;
+        workerStage: string | null;
+        diagStage: string | null;
+        peakRssMb: number | null;
+        inFlightSince: number | null;
+        hasDispatchPayload: boolean;
+        events: any[];
+    }[];
+    traces: {
+        summaries: Record<string, unknown>[];
+        spans: Record<string, unknown>[];
+    };
+    feedback: Record<string, unknown>[];
+    satisfaction: Record<string, unknown>[];
+    evals: Record<string, unknown>[];
+    checkpoints: Record<string, unknown>[];
+}>;
+export default _default;
+//# sourceMappingURL=get-agent-thread-debug.d.ts.map

package/dist/actions/get-agent-thread-debug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-agent-thread-debug.d.ts","sourceRoot":"","sources":["../../src/actions/get-agent-thread-debug.ts"],"names":[],"mappings":""}