@agent-native/dispatch 0.0.0-beta-20260819155526

package/dist/lib/workspace-app-layout.js

@@ -0,0 +1,75 @@
+import { orderChatFirstAppIds, readChatFirstAppLayout, writeChatFirstAppLayout, } from "@agent-native/core/client/agent-chat";
+import { readClientAppState, writeClientAppState, } from "@agent-native/core/client/application-state";
+import { useCallback, useEffect, useRef, useState } from "react";
+export const WORKSPACE_APP_LAYOUT_STATE_KEY = "chat-first-app-layout";
+export function normalizeWorkspaceAppLayout(value) {
+    if (!value || typeof value !== "object") {
+        return { pinnedIds: [], orderedIds: [] };
+    }
+    const candidate = value;
+    const ids = (input) => Array.isArray(input)
+        ? input.filter((id) => typeof id === "string" && id.trim().length > 0)
+        : [];
+    return {
+        pinnedIds: [...new Set(ids(candidate.pinnedIds))],
+        orderedIds: [...new Set(ids(candidate.orderedIds))],
+    };
+}
+export function orderWorkspaceApps(apps, layout) {
+    const appsById = new Map(apps.map((app) => [app.id, app]));
+    return orderChatFirstAppIds(apps.map((app) => app.id), layout)
+        .map((id) => appsById.get(id))
+        .filter((app) => Boolean(app));
+}
+export function workspaceAppMatchesQuery(app, query) {
+    const normalizedQuery = query.trim().toLowerCase();
+    if (!normalizedQuery)
+        return true;
+    return `${app.name} ${app.description ?? ""}`
+        .toLowerCase()
+        .includes(normalizedQuery);
+}
+export function toggleWorkspaceAppPinned(layout, appId) {
+    const pinnedIds = layout.pinnedIds.includes(appId)
+        ? layout.pinnedIds.filter((id) => id !== appId)
+        : [appId, ...layout.pinnedIds];
+    return { ...layout, pinnedIds };
+}
+export function useWorkspaceAppLayout() {
+    const [layout, setLayout] = useState(() => readChatFirstAppLayout());
+    const [persistenceError, setPersistenceError] = useState(null);
+    const hydratedRef = useRef(false);
+    const localChangeRef = useRef(false);
+    useEffect(() => {
+        if (hydratedRef.current)
+            return;
+        hydratedRef.current = true;
+        void readClientAppState(WORKSPACE_APP_LAYOUT_STATE_KEY)
+            .then((value) => {
+            if (value !== null && !localChangeRef.current) {
+                setLayout(normalizeWorkspaceAppLayout(value));
+            }
+        })
+            .catch(() => {
+            // Device-local preferences remain usable when workspace state is unavailable.
+        });
+    }, []);
+    const persistLayout = useCallback((next) => {
+        localChangeRef.current = true;
+        setLayout(next);
+        const deviceResult = writeChatFirstAppLayout(next);
+        const deviceFailed = !deviceResult.ok;
+        void writeClientAppState(WORKSPACE_APP_LAYOUT_STATE_KEY, next)
+            .then(() => {
+            setPersistenceError(deviceFailed ? "device" : null);
+        })
+            .catch(() => {
+            setPersistenceError(deviceFailed ? "both" : "workspace");
+        });
+    }, []);
+    const togglePinned = useCallback((appId) => {
+        persistLayout(toggleWorkspaceAppPinned(layout, appId));
+    }, [layout, persistLayout]);
+    return { layout, persistenceError, persistLayout, togglePinned };
+}
+//# sourceMappingURL=workspace-app-layout.js.map

package/dist/lib/workspace-app-layout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-app-layout.js","sourceRoot":"","sources":["../../src/lib/workspace-app-layout.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,GAExB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjE,MAAM,CAAC,MAAM,8BAA8B,GAAG,uBAAuB,CAAC;AAOtE,MAAM,UAAU,2BAA2B,CACzC,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,SAAS,GAAG,KAA8C,CAAC;IACjE,MAAM,GAAG,GAAG,CAAC,KAAc,EAAY,EAAE,CACvC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAClB,CAAC,CAAC,KAAK,CAAC,MAAM,CACV,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CACrE;QACH,CAAC,CAAC,EAAE,CAAC;IAET,OAAO;QACL,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAkB,EAClB,MAAoC;IAEpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,oBAAoB,CACzB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EACzB,MAAM,CACP;SACE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;SAC7B,MAAM,CAAC,CAAC,GAAG,EAAY,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,GAA2C,EAC3C,KAAa;IAEb,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE;SAC1C,WAAW,EAAE;SACb,QAAQ,CAAC,eAAe,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAoC,EACpC,KAAa;IAEb,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,KAAK,CAAC;QAC/C,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAA+B,GAAG,EAAE,CACtE,sBAAsB,EAAE,CACzB,CAAC;IACF,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAC3C,QAAQ,CAA4C,IAAI,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAErC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,WAAW,CAAC,OAAO;YAAE,OAAO;QAChC,WAAW,CAAC,OAAO,GAAG,IAAI,CAAC;QAC3B,KAAK,kBAAkB,CAAU,8BAA8B,CAAC;aAC7D,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACd,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC9C,SAAS,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,8EAA8E;QAChF,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,IAAkC,EAAE,EAAE;QACvE,cAAc,CAAC,OAAO,GAAG,IAAI,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAEtC,KAAK,mBAAmB,CAAC,8BAA8B,EAAE,IAAI,CAAC;aAC3D,IAAI,CAAC,GAAG,EAAE;YACT,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,YAAY,GAAG,WAAW,CAC9B,CAAC,KAAa,EAAE,EAAE;QAChB,aAAa,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACzD,CAAC,EACD,CAAC,MAAM,EAAE,aAAa,CAAC,CACxB,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AACnE,CAAC","sourcesContent":["import {\n  orderChatFirstAppIds,\n  readChatFirstAppLayout,\n  writeChatFirstAppLayout,\n  type ChatFirstAppLayoutPreference,\n} from \"@agent-native/core/client/agent-chat\";\nimport {\n  readClientAppState,\n  writeClientAppState,\n} from \"@agent-native/core/client/application-state\";\nimport { useCallback, useEffect, useRef, useState } from \"react\";\n\nexport const WORKSPACE_APP_LAYOUT_STATE_KEY = \"chat-first-app-layout\";\n\nexport type WorkspaceAppLayoutPersistenceError =\n  | \"device\"\n  | \"workspace\"\n  | \"both\";\n\nexport function normalizeWorkspaceAppLayout(\n  value: unknown,\n): ChatFirstAppLayoutPreference {\n  if (!value || typeof value !== \"object\") {\n    return { pinnedIds: [], orderedIds: [] };\n  }\n\n  const candidate = value as Partial<ChatFirstAppLayoutPreference>;\n  const ids = (input: unknown): string[] =>\n    Array.isArray(input)\n      ? input.filter(\n          (id): id is string => typeof id === \"string\" && id.trim().length > 0,\n        )\n      : [];\n\n  return {\n    pinnedIds: [...new Set(ids(candidate.pinnedIds))],\n    orderedIds: [...new Set(ids(candidate.orderedIds))],\n  };\n}\n\nexport function orderWorkspaceApps<T extends { id: string }>(\n  apps: readonly T[],\n  layout: ChatFirstAppLayoutPreference,\n): T[] {\n  const appsById = new Map(apps.map((app) => [app.id, app]));\n  return orderChatFirstAppIds(\n    apps.map((app) => app.id),\n    layout,\n  )\n    .map((id) => appsById.get(id))\n    .filter((app): app is T => Boolean(app));\n}\n\nexport function workspaceAppMatchesQuery(\n  app: { name: string; description?: string },\n  query: string,\n): boolean {\n  const normalizedQuery = query.trim().toLowerCase();\n  if (!normalizedQuery) return true;\n  return `${app.name} ${app.description ?? \"\"}`\n    .toLowerCase()\n    .includes(normalizedQuery);\n}\n\nexport function toggleWorkspaceAppPinned(\n  layout: ChatFirstAppLayoutPreference,\n  appId: string,\n): ChatFirstAppLayoutPreference {\n  const pinnedIds = layout.pinnedIds.includes(appId)\n    ? layout.pinnedIds.filter((id) => id !== appId)\n    : [appId, ...layout.pinnedIds];\n  return { ...layout, pinnedIds };\n}\n\nexport function useWorkspaceAppLayout() {\n  const [layout, setLayout] = useState<ChatFirstAppLayoutPreference>(() =>\n    readChatFirstAppLayout(),\n  );\n  const [persistenceError, setPersistenceError] =\n    useState<WorkspaceAppLayoutPersistenceError | null>(null);\n  const hydratedRef = useRef(false);\n  const localChangeRef = useRef(false);\n\n  useEffect(() => {\n    if (hydratedRef.current) return;\n    hydratedRef.current = true;\n    void readClientAppState<unknown>(WORKSPACE_APP_LAYOUT_STATE_KEY)\n      .then((value) => {\n        if (value !== null && !localChangeRef.current) {\n          setLayout(normalizeWorkspaceAppLayout(value));\n        }\n      })\n      .catch(() => {\n        // Device-local preferences remain usable when workspace state is unavailable.\n      });\n  }, []);\n\n  const persistLayout = useCallback((next: ChatFirstAppLayoutPreference) => {\n    localChangeRef.current = true;\n    setLayout(next);\n    const deviceResult = writeChatFirstAppLayout(next);\n    const deviceFailed = !deviceResult.ok;\n\n    void writeClientAppState(WORKSPACE_APP_LAYOUT_STATE_KEY, next)\n      .then(() => {\n        setPersistenceError(deviceFailed ? \"device\" : null);\n      })\n      .catch(() => {\n        setPersistenceError(deviceFailed ? \"both\" : \"workspace\");\n      });\n  }, []);\n\n  const togglePinned = useCallback(\n    (appId: string) => {\n      persistLayout(toggleWorkspaceAppPinned(layout, appId));\n    },\n    [layout, persistLayout],\n  );\n\n  return { layout, persistenceError, persistLayout, togglePinned };\n}\n"]}

package/dist/lib/workspace-apps.d.ts

@@ -0,0 +1,72 @@
+export interface WorkspaceAppSummary {
+    id: string;
+    name: string;
+    description?: string;
+    path: string;
+    url?: string | null;
+    isDispatch?: boolean;
+    audience?: "internal" | "public";
+    visibility?: "private" | "org";
+    publicPaths?: string[];
+    protectedPaths?: string[];
+    status?: "ready" | "pending";
+    statusLabel?: string;
+    builderUrl?: string | null;
+    branchName?: string | null;
+    createdAt?: string | null;
+    createdBy?: string | null;
+    owner?: string | null;
+    teams?: string[];
+    agentCardUrl?: string | null;
+    agentCardReachable?: boolean;
+    a2aEndpointUrl?: string | null;
+    agentName?: string | null;
+    agentSkillsCount?: number | null;
+    archived?: boolean;
+    workspaceSso?: boolean;
+}
+interface WorkspaceAppHrefSource {
+    path?: string | null;
+    url?: string | null;
+    workspaceSso?: boolean;
+}
+export declare function isDispatchWorkspaceAppId(appId: string): boolean;
+/**
+ * The workspace SSO action only accepts an exact registered app identity and
+ * origin. The catalog's boolean is a server-derived projection for custom
+ * registrations; the URL check keeps malformed metadata out of the action.
+ */
+export declare function isWorkspaceSsoApp(app: WorkspaceAppHrefSource & {
+    id: string;
+}): boolean;
+/**
+ * A mounted app URL leaves Dispatch's `/apps/:id` host route. Canonical
+ * first-party origins can stay inline even at `/`, while external published
+ * apps must open at their own origin regardless of their path.
+ */
+export declare function isPathMountedWorkspaceApp(app: WorkspaceAppHrefSource): boolean;
+export declare function isDefaultWorkspaceAppHiddenId(appId: string): boolean;
+export declare function isWorkspaceAppVisibleInDefaultLaunchers(app: Pick<WorkspaceAppSummary, "id" | "isDispatch">): boolean;
+export declare function workspaceAppRoute(appId: string): string;
+export declare function workspaceAppIdFromRoute(pathname: string): string | null;
+export declare function workspaceAppHref(app: WorkspaceAppSummary): string | null;
+export declare function workspaceAppEmbedTarget(app: Pick<WorkspaceAppSummary, "path" | "url">): {
+    path?: string;
+    url?: string;
+};
+/**
+ * Resolve an app route without an embed ticket so the target can render its
+ * own error document when session setup fails.
+ */
+export declare function workspaceAppDirectHref(app: WorkspaceAppHrefSource, targetPath: string): string | null;
+export declare function isPendingBuilderHref(app: WorkspaceAppSummary): boolean;
+export declare function shouldOpenWorkspaceAppInTopWindow(): boolean;
+export declare function navigateToWorkspaceApp(href: string): boolean;
+/**
+ * Keep the chat-first rail useful before a workspace manifest is populated.
+ * Mounted workspace rows still win, so custom names and routes remain the
+ * source of truth once an app exists in the workspace.
+ */
+export declare function mergeChatFirstWorkspaceApps(apps: readonly WorkspaceAppSummary[] | undefined): WorkspaceAppSummary[];
+export {};
+//# sourceMappingURL=workspace-apps.d.ts.map

package/dist/lib/workspace-apps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-apps.d.ts","sourceRoot":"","sources":["../../src/lib/workspace-apps.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IACjC,UAAU,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,UAAU,sBAAsB;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/D;AAiCD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,sBAAsB,GAAG;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAeT;AAcD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAaT;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAGpE;AAED,wBAAgB,uCAAuC,CACrD,GAAG,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,GAAG,YAAY,CAAC,GAClD,OAAO,CAET;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUvE;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,CAUxE;AAED,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,IAAI,CAAC,mBAAmB,EAAE,MAAM,GAAG,KAAK,CAAC,GAC7C;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAMjC;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,sBAAsB,EAC3B,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,IAAI,CA0Df;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAEtE;AAED,wBAAgB,iCAAiC,IAAI,OAAO,CAK3D;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAgB5D;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,GAC/C,mBAAmB,EAAE,CAiBvB"}

package/dist/lib/workspace-apps.js

@@ -0,0 +1,228 @@
+import { CHAT_FIRST_DEFAULT_APP_IDS } from "@agent-native/core/client/chat-first";
+import { isInBuilderFrame } from "@agent-native/core/client/host";
+import { withBuilderUtmTrackingParams } from "@agent-native/core/shared/builder-link-tracking";
+import { CANONICAL_WORKSPACE_SSO_APP_ORIGINS, isWorkspaceSsoAppUrl, } from "../shared/workspace-sso.js";
+export function isDispatchWorkspaceAppId(appId) {
+    return appId.trim().toLowerCase() === "dispatch";
+}
+function clientRuntimeEnvironment() {
+    const importMetaEnv = import.meta.env;
+    const processEnv = globalThis.process?.env;
+    const env = { ...processEnv, ...importMetaEnv };
+    if (env.PROD === true ||
+        env.MODE === "production" ||
+        env.NODE_ENV === "production") {
+        return "production";
+    }
+    if (env.DEV === true ||
+        env.MODE === "development" ||
+        env.MODE === "test" ||
+        env.NODE_ENV === "development" ||
+        env.NODE_ENV === "test") {
+        return "development";
+    }
+    return "production";
+}
+/**
+ * The workspace SSO action only accepts an exact registered app identity and
+ * origin. The catalog's boolean is a server-derived projection for custom
+ * registrations; the URL check keeps malformed metadata out of the action.
+ */
+export function isWorkspaceSsoApp(app) {
+    const rawUrl = app.url?.trim();
+    if (!rawUrl)
+        return false;
+    try {
+        const url = new URL(rawUrl);
+        if (url.protocol !== "http:" && url.protocol !== "https:")
+            return false;
+        if (app.workspaceSso === true)
+            return true;
+        return isWorkspaceSsoAppUrl({ id: app.id, url: rawUrl }, { nodeEnv: clientRuntimeEnvironment() });
+        // coercion-ok: malformed app metadata is not eligible for workspace SSO.
+    }
+    catch {
+        return false;
+    }
+}
+function isCanonicalWorkspaceSsoOrigin(rawUrl) {
+    try {
+        const origin = new URL(rawUrl).origin;
+        return Object.values(CANONICAL_WORKSPACE_SSO_APP_ORIGINS).some((canonicalOrigin) => canonicalOrigin === origin);
+    }
+    catch {
+        // coercion-ok: malformed app metadata is not a canonical first-party app.
+        return false;
+    }
+}
+/**
+ * A mounted app URL leaves Dispatch's `/apps/:id` host route. Canonical
+ * first-party origins can stay inline even at `/`, while external published
+ * apps must open at their own origin regardless of their path.
+ */
+export function isPathMountedWorkspaceApp(app) {
+    const rawUrl = app.url?.trim();
+    if (rawUrl) {
+        try {
+            const pathname = new URL(rawUrl).pathname.replace(/\/+$/, "") || "/";
+            return pathname !== "/" || !isCanonicalWorkspaceSsoOrigin(rawUrl);
+            // coercion-ok: invalid absolute URLs use the mounted path fallback.
+        }
+        catch {
+            // Fall through to the mounted path for relative manifest values.
+        }
+    }
+    const path = app.path?.trim().replace(/\/+$/, "") || "/";
+    return path !== "/";
+}
+export function isDefaultWorkspaceAppHiddenId(appId) {
+    const normalized = appId.trim().toLowerCase();
+    return normalized === "chat" || isDispatchWorkspaceAppId(normalized);
+}
+export function isWorkspaceAppVisibleInDefaultLaunchers(app) {
+    return !app.isDispatch && !isDefaultWorkspaceAppHiddenId(app.id);
+}
+export function workspaceAppRoute(appId) {
+    return `/apps/${encodeURIComponent(appId)}`;
+}
+export function workspaceAppIdFromRoute(pathname) {
+    const match = pathname.match(/^\/apps\/([^/]+)(?:\/|$)/);
+    if (!match)
+        return null;
+    try {
+        const appId = decodeURIComponent(match[1]).trim();
+        return appId || null;
+    }
+    catch {
+        // coercion-ok: malformed app routes are inactive, not app ids.
+        return null;
+    }
+}
+export function workspaceAppHref(app) {
+    if (app.status === "pending") {
+        return app.builderUrl
+            ? withBuilderUtmTrackingParams(app.builderUrl, {
+                campaign: "product",
+                content: "dispatch_branch",
+            })
+            : null;
+    }
+    return app.path || app.url || null;
+}
+export function workspaceAppEmbedTarget(app) {
+    const url = app.url?.trim();
+    if (url)
+        return { url };
+    const path = app.path.trim();
+    return path.startsWith("/") ? { path } : path ? { url: path } : {};
+}
+/**
+ * Resolve an app route without an embed ticket so the target can render its
+ * own error document when session setup fails.
+ */
+export function workspaceAppDirectHref(app, targetPath) {
+    const target = targetPath.trim();
+    if (!target || !target.startsWith("/") || target.startsWith("//")) {
+        return null;
+    }
+    let targetUrl;
+    try {
+        targetUrl = new URL(target, "https://agent-native.invalid");
+    }
+    catch {
+        // coercion-ok: invalid relative target input has no safe href.
+        return null;
+    }
+    const targetPathname = targetUrl.pathname || "/";
+    let absoluteBase = null;
+    const rawUrl = app.url?.trim();
+    if (rawUrl) {
+        try {
+            const parsedBase = new URL(rawUrl);
+            if (parsedBase.protocol === "http:" || parsedBase.protocol === "https:") {
+                absoluteBase = parsedBase;
+            }
+            // coercion-ok: invalid app URLs use the mounted path fallback below.
+        }
+        catch {
+            absoluteBase = null;
+        }
+    }
+    const mountedPath = app.path?.trim();
+    const basePath = absoluteBase
+        ? absoluteBase.pathname
+        : mountedPath
+            ? `/${mountedPath.replace(/^[/\\]+/, "").split(/[?#]/, 1)[0]}`
+            : null;
+    if (!basePath)
+        return null;
+    const normalizedBasePath = basePath.replace(/\/+$/, "") || "/";
+    const targetIsMountedPath = normalizedBasePath !== "/" &&
+        (targetPathname === normalizedBasePath ||
+            targetPathname.startsWith(`${normalizedBasePath}/`));
+    const resolvedPath = targetIsMountedPath
+        ? targetPathname
+        : normalizedBasePath === "/"
+            ? targetPathname
+            : targetPathname === "/"
+                ? normalizedBasePath
+                : `${normalizedBasePath}/${targetPathname.replace(/^\/+/, "")}`;
+    if (absoluteBase) {
+        absoluteBase.pathname = resolvedPath;
+        absoluteBase.search = targetUrl.search;
+        absoluteBase.hash = targetUrl.hash;
+        return absoluteBase.toString();
+    }
+    return `${resolvedPath}${targetUrl.search}${targetUrl.hash}`;
+}
+export function isPendingBuilderHref(app) {
+    return app.status === "pending" && !!app.builderUrl;
+}
+export function shouldOpenWorkspaceAppInTopWindow() {
+    if (typeof window === "undefined")
+        return false;
+    // A generic iframe is an inline host by design. Only Builder owns the
+    // parent navigation contract for workspace apps.
+    return isInBuilderFrame();
+}
+export function navigateToWorkspaceApp(href) {
+    if (typeof window === "undefined")
+        return false;
+    try {
+        const targetUrl = new URL(href, window.location.href);
+        if (targetUrl.protocol !== "http:" && targetUrl.protocol !== "https:") {
+            return false;
+        }
+        const targetWindow = shouldOpenWorkspaceAppInTopWindow() && window.top ? window.top : window;
+        targetWindow.location.href = targetUrl.href;
+        return true;
+    }
+    catch {
+        // coercion-ok: a blocked top-window assignment is an expected fallback signal.
+        return false;
+    }
+}
+/**
+ * Keep the chat-first rail useful before a workspace manifest is populated.
+ * Mounted workspace rows still win, so custom names and routes remain the
+ * source of truth once an app exists in the workspace.
+ */
+export function mergeChatFirstWorkspaceApps(apps) {
+    const merged = new Map();
+    for (const id of CHAT_FIRST_DEFAULT_APP_IDS) {
+        merged.set(id, {
+            id,
+            name: id.charAt(0).toUpperCase() + id.slice(1),
+            // The five default rows are hosted sibling apps, not routes owned by
+            // Dispatch. Keep a mounted path for legacy callers, but give embed
+            // session resolution the exact canonical origin.
+            path: "/",
+            url: CANONICAL_WORKSPACE_SSO_APP_ORIGINS[id],
+            status: "ready",
+        });
+    }
+    for (const app of apps ?? [])
+        merged.set(app.id, app);
+    return [...merged.values()];
+}
+//# sourceMappingURL=workspace-apps.js.map

package/dist/lib/workspace-apps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-apps.js","sourceRoot":"","sources":["../../src/lib/workspace-apps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAE/F,OAAO,EACL,mCAAmC,EACnC,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AAoCjC,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC;AACnD,CAAC;AAED,SAAS,wBAAwB;IAC/B,MAAM,aAAa,GACjB,OAAO,IAGR,CAAC,GAAG,CAAC;IACN,MAAM,UAAU,GACd,UAGD,CAAC,OAAO,EAAE,GAAG,CAAC;IACf,MAAM,GAAG,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,aAAa,EAAE,CAAC;IAChD,IACE,GAAG,CAAC,IAAI,KAAK,IAAI;QACjB,GAAG,CAAC,IAAI,KAAK,YAAY;QACzB,GAAG,CAAC,QAAQ,KAAK,YAAY,EAC7B,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IACE,GAAG,CAAC,GAAG,KAAK,IAAI;QAChB,GAAG,CAAC,IAAI,KAAK,aAAa;QAC1B,GAAG,CAAC,IAAI,KAAK,MAAM;QACnB,GAAG,CAAC,QAAQ,KAAK,aAAa;QAC9B,GAAG,CAAC,QAAQ,KAAK,MAAM,EACvB,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAA4C;IAE5C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,oBAAoB,CACzB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAC3B,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,CACxC,CAAC;QACF,yEAAyE;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CAAC,MAAc;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;QACtC,OAAO,MAAM,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC,IAAI,CAC5D,CAAC,eAAe,EAAE,EAAE,CAAC,eAAe,KAAK,MAAM,CAChD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAA2B;IAE3B,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;YACrE,OAAO,QAAQ,KAAK,GAAG,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC;YAClE,oEAAoE;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IACzD,OAAO,IAAI,KAAK,GAAG,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAa;IACzD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,UAAU,KAAK,MAAM,IAAI,wBAAwB,CAAC,UAAU,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,GAAmD;IAEnD,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,SAAS,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,OAAO,KAAK,IAAI,IAAI,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAwB;IACvD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC,UAAU;YACnB,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,UAAU,EAAE;gBAC3C,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,iBAAiB;aAC3B,CAAC;YACJ,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,GAA8C;IAE9C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAI,GAAG;QAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAExB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAA2B,EAC3B,UAAkB;IAElB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,SAAc,CAAC;IACnB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,IAAI,GAAG,CAAC;IAEjD,IAAI,YAAY,GAAe,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,UAAU,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACxE,YAAY,GAAG,UAAU,CAAC;YAC5B,CAAC;YACD,qEAAqE;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,YAAY;QAC3B,CAAC,CAAC,YAAY,CAAC,QAAQ;QACvB,CAAC,CAAC,WAAW;YACX,CAAC,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YAC9D,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IAC/D,MAAM,mBAAmB,GACvB,kBAAkB,KAAK,GAAG;QAC1B,CAAC,cAAc,KAAK,kBAAkB;YACpC,cAAc,CAAC,UAAU,CAAC,GAAG,kBAAkB,GAAG,CAAC,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,mBAAmB;QACtC,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,kBAAkB,KAAK,GAAG;YAC1B,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,cAAc,KAAK,GAAG;gBACtB,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,GAAG,kBAAkB,IAAI,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAEtE,IAAI,YAAY,EAAE,CAAC;QACjB,YAAY,CAAC,QAAQ,GAAG,YAAY,CAAC;QACrC,YAAY,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QACvC,YAAY,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACnC,OAAO,YAAY,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,OAAO,GAAG,YAAY,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAwB;IAC3D,OAAO,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAChD,sEAAsE;IACtE,iDAAiD;IACjD,OAAO,gBAAgB,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,YAAY,GAChB,iCAAiC,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1E,YAAY,CAAC,QAAQ,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAgD;IAEhD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,KAAK,MAAM,EAAE,IAAI,0BAA0B,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;YACb,EAAE;YACF,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9C,qEAAqE;YACrE,mEAAmE;YACnE,iDAAiD;YACjD,IAAI,EAAE,GAAG;YACT,GAAG,EAAE,mCAAmC,CAAC,EAAE,CAAC;YAC5C,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,IAAI,EAAE;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAEtD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC","sourcesContent":["import { CHAT_FIRST_DEFAULT_APP_IDS } from \"@agent-native/core/client/chat-first\";\nimport { isInBuilderFrame } from \"@agent-native/core/client/host\";\nimport { withBuilderUtmTrackingParams } from \"@agent-native/core/shared/builder-link-tracking\";\n\nimport {\n  CANONICAL_WORKSPACE_SSO_APP_ORIGINS,\n  isWorkspaceSsoAppUrl,\n} from \"../shared/workspace-sso\";\n\nexport interface WorkspaceAppSummary {\n  id: string;\n  name: string;\n  description?: string;\n  path: string;\n  url?: string | null;\n  isDispatch?: boolean;\n  audience?: \"internal\" | \"public\";\n  visibility?: \"private\" | \"org\";\n  publicPaths?: string[];\n  protectedPaths?: string[];\n  status?: \"ready\" | \"pending\";\n  statusLabel?: string;\n  builderUrl?: string | null;\n  branchName?: string | null;\n  createdAt?: string | null;\n  createdBy?: string | null;\n  owner?: string | null;\n  teams?: string[];\n  agentCardUrl?: string | null;\n  agentCardReachable?: boolean;\n  a2aEndpointUrl?: string | null;\n  agentName?: string | null;\n  agentSkillsCount?: number | null;\n  archived?: boolean;\n  workspaceSso?: boolean;\n}\n\ninterface WorkspaceAppHrefSource {\n  path?: string | null;\n  url?: string | null;\n  workspaceSso?: boolean;\n}\n\nexport function isDispatchWorkspaceAppId(appId: string): boolean {\n  return appId.trim().toLowerCase() === \"dispatch\";\n}\n\nfunction clientRuntimeEnvironment(): \"production\" | \"development\" {\n  const importMetaEnv = (\n    import.meta as unknown as {\n      env?: Record<string, string | boolean | undefined>;\n    }\n  ).env;\n  const processEnv = (\n    globalThis as typeof globalThis & {\n      process?: { env?: Record<string, string | boolean | undefined> };\n    }\n  ).process?.env;\n  const env = { ...processEnv, ...importMetaEnv };\n  if (\n    env.PROD === true ||\n    env.MODE === \"production\" ||\n    env.NODE_ENV === \"production\"\n  ) {\n    return \"production\";\n  }\n  if (\n    env.DEV === true ||\n    env.MODE === \"development\" ||\n    env.MODE === \"test\" ||\n    env.NODE_ENV === \"development\" ||\n    env.NODE_ENV === \"test\"\n  ) {\n    return \"development\";\n  }\n  return \"production\";\n}\n\n/**\n * The workspace SSO action only accepts an exact registered app identity and\n * origin. The catalog's boolean is a server-derived projection for custom\n * registrations; the URL check keeps malformed metadata out of the action.\n */\nexport function isWorkspaceSsoApp(\n  app: WorkspaceAppHrefSource & { id: string },\n): boolean {\n  const rawUrl = app.url?.trim();\n  if (!rawUrl) return false;\n  try {\n    const url = new URL(rawUrl);\n    if (url.protocol !== \"http:\" && url.protocol !== \"https:\") return false;\n    if (app.workspaceSso === true) return true;\n    return isWorkspaceSsoAppUrl(\n      { id: app.id, url: rawUrl },\n      { nodeEnv: clientRuntimeEnvironment() },\n    );\n    // coercion-ok: malformed app metadata is not eligible for workspace SSO.\n  } catch {\n    return false;\n  }\n}\n\nfunction isCanonicalWorkspaceSsoOrigin(rawUrl: string): boolean {\n  try {\n    const origin = new URL(rawUrl).origin;\n    return Object.values(CANONICAL_WORKSPACE_SSO_APP_ORIGINS).some(\n      (canonicalOrigin) => canonicalOrigin === origin,\n    );\n  } catch {\n    // coercion-ok: malformed app metadata is not a canonical first-party app.\n    return false;\n  }\n}\n\n/**\n * A mounted app URL leaves Dispatch's `/apps/:id` host route. Canonical\n * first-party origins can stay inline even at `/`, while external published\n * apps must open at their own origin regardless of their path.\n */\nexport function isPathMountedWorkspaceApp(\n  app: WorkspaceAppHrefSource,\n): boolean {\n  const rawUrl = app.url?.trim();\n  if (rawUrl) {\n    try {\n      const pathname = new URL(rawUrl).pathname.replace(/\\/+$/, \"\") || \"/\";\n      return pathname !== \"/\" || !isCanonicalWorkspaceSsoOrigin(rawUrl);\n      // coercion-ok: invalid absolute URLs use the mounted path fallback.\n    } catch {\n      // Fall through to the mounted path for relative manifest values.\n    }\n  }\n  const path = app.path?.trim().replace(/\\/+$/, \"\") || \"/\";\n  return path !== \"/\";\n}\n\nexport function isDefaultWorkspaceAppHiddenId(appId: string): boolean {\n  const normalized = appId.trim().toLowerCase();\n  return normalized === \"chat\" || isDispatchWorkspaceAppId(normalized);\n}\n\nexport function isWorkspaceAppVisibleInDefaultLaunchers(\n  app: Pick<WorkspaceAppSummary, \"id\" | \"isDispatch\">,\n): boolean {\n  return !app.isDispatch && !isDefaultWorkspaceAppHiddenId(app.id);\n}\n\nexport function workspaceAppRoute(appId: string): string {\n  return `/apps/${encodeURIComponent(appId)}`;\n}\n\nexport function workspaceAppIdFromRoute(pathname: string): string | null {\n  const match = pathname.match(/^\\/apps\\/([^/]+)(?:\\/|$)/);\n  if (!match) return null;\n  try {\n    const appId = decodeURIComponent(match[1]).trim();\n    return appId || null;\n  } catch {\n    // coercion-ok: malformed app routes are inactive, not app ids.\n    return null;\n  }\n}\n\nexport function workspaceAppHref(app: WorkspaceAppSummary): string | null {\n  if (app.status === \"pending\") {\n    return app.builderUrl\n      ? withBuilderUtmTrackingParams(app.builderUrl, {\n          campaign: \"product\",\n          content: \"dispatch_branch\",\n        })\n      : null;\n  }\n  return app.path || app.url || null;\n}\n\nexport function workspaceAppEmbedTarget(\n  app: Pick<WorkspaceAppSummary, \"path\" | \"url\">,\n): { path?: string; url?: string } {\n  const url = app.url?.trim();\n  if (url) return { url };\n\n  const path = app.path.trim();\n  return path.startsWith(\"/\") ? { path } : path ? { url: path } : {};\n}\n\n/**\n * Resolve an app route without an embed ticket so the target can render its\n * own error document when session setup fails.\n */\nexport function workspaceAppDirectHref(\n  app: WorkspaceAppHrefSource,\n  targetPath: string,\n): string | null {\n  const target = targetPath.trim();\n  if (!target || !target.startsWith(\"/\") || target.startsWith(\"//\")) {\n    return null;\n  }\n\n  let targetUrl: URL;\n  try {\n    targetUrl = new URL(target, \"https://agent-native.invalid\");\n  } catch {\n    // coercion-ok: invalid relative target input has no safe href.\n    return null;\n  }\n  const targetPathname = targetUrl.pathname || \"/\";\n\n  let absoluteBase: URL | null = null;\n  const rawUrl = app.url?.trim();\n  if (rawUrl) {\n    try {\n      const parsedBase = new URL(rawUrl);\n      if (parsedBase.protocol === \"http:\" || parsedBase.protocol === \"https:\") {\n        absoluteBase = parsedBase;\n      }\n      // coercion-ok: invalid app URLs use the mounted path fallback below.\n    } catch {\n      absoluteBase = null;\n    }\n  }\n\n  const mountedPath = app.path?.trim();\n  const basePath = absoluteBase\n    ? absoluteBase.pathname\n    : mountedPath\n      ? `/${mountedPath.replace(/^[/\\\\]+/, \"\").split(/[?#]/, 1)[0]}`\n      : null;\n  if (!basePath) return null;\n\n  const normalizedBasePath = basePath.replace(/\\/+$/, \"\") || \"/\";\n  const targetIsMountedPath =\n    normalizedBasePath !== \"/\" &&\n    (targetPathname === normalizedBasePath ||\n      targetPathname.startsWith(`${normalizedBasePath}/`));\n  const resolvedPath = targetIsMountedPath\n    ? targetPathname\n    : normalizedBasePath === \"/\"\n      ? targetPathname\n      : targetPathname === \"/\"\n        ? normalizedBasePath\n        : `${normalizedBasePath}/${targetPathname.replace(/^\\/+/, \"\")}`;\n\n  if (absoluteBase) {\n    absoluteBase.pathname = resolvedPath;\n    absoluteBase.search = targetUrl.search;\n    absoluteBase.hash = targetUrl.hash;\n    return absoluteBase.toString();\n  }\n\n  return `${resolvedPath}${targetUrl.search}${targetUrl.hash}`;\n}\n\nexport function isPendingBuilderHref(app: WorkspaceAppSummary): boolean {\n  return app.status === \"pending\" && !!app.builderUrl;\n}\n\nexport function shouldOpenWorkspaceAppInTopWindow(): boolean {\n  if (typeof window === \"undefined\") return false;\n  // A generic iframe is an inline host by design. Only Builder owns the\n  // parent navigation contract for workspace apps.\n  return isInBuilderFrame();\n}\n\nexport function navigateToWorkspaceApp(href: string): boolean {\n  if (typeof window === \"undefined\") return false;\n\n  try {\n    const targetUrl = new URL(href, window.location.href);\n    if (targetUrl.protocol !== \"http:\" && targetUrl.protocol !== \"https:\") {\n      return false;\n    }\n    const targetWindow =\n      shouldOpenWorkspaceAppInTopWindow() && window.top ? window.top : window;\n    targetWindow.location.href = targetUrl.href;\n    return true;\n  } catch {\n    // coercion-ok: a blocked top-window assignment is an expected fallback signal.\n    return false;\n  }\n}\n\n/**\n * Keep the chat-first rail useful before a workspace manifest is populated.\n * Mounted workspace rows still win, so custom names and routes remain the\n * source of truth once an app exists in the workspace.\n */\nexport function mergeChatFirstWorkspaceApps(\n  apps: readonly WorkspaceAppSummary[] | undefined,\n): WorkspaceAppSummary[] {\n  const merged = new Map<string, WorkspaceAppSummary>();\n  for (const id of CHAT_FIRST_DEFAULT_APP_IDS) {\n    merged.set(id, {\n      id,\n      name: id.charAt(0).toUpperCase() + id.slice(1),\n      // The five default rows are hosted sibling apps, not routes owned by\n      // Dispatch. Keep a mounted path for legacy callers, but give embed\n      // session resolution the exact canonical origin.\n      path: \"/\",\n      url: CANONICAL_WORKSPACE_SSO_APP_ORIGINS[id],\n      status: \"ready\",\n    });\n  }\n  for (const app of apps ?? []) merged.set(app.id, app);\n\n  return [...merged.values()];\n}\n"]}

package/dist/lib/workspace-apps.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=workspace-apps.test.d.ts.map

package/dist/lib/workspace-apps.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-apps.test.d.ts","sourceRoot":"","sources":["../../src/lib/workspace-apps.test.ts"],"names":[],"mappings":""}

package/dist/lib/workspace-apps.test.js

@@ -0,0 +1,105 @@
+// @vitest-environment happy-dom
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { navigateToWorkspaceApp, shouldOpenWorkspaceAppInTopWindow, workspaceAppDirectHref, workspaceAppEmbedTarget, } from "./workspace-apps.js";
+describe("workspaceAppEmbedTarget", () => {
+    it("uses the app URL as the embed root when a mount path is also present", () => {
+        expect(workspaceAppEmbedTarget({
+            path: "/content",
+            url: "https://workspace.example.test/content",
+        })).toEqual({ url: "https://workspace.example.test/content" });
+    });
+    it("falls back to the mounted path when no app URL is available", () => {
+        expect(workspaceAppEmbedTarget({ path: "/content", url: null })).toEqual({
+            path: "/content",
+        });
+    });
+});
+describe("workspaceAppDirectHref", () => {
+    it("joins an app-relative route onto an absolute app URL", () => {
+        expect(workspaceAppDirectHref({ path: "/atlas", url: "https://workspace.example.test/atlas" }, "/emails?status=failed#latest")).toBe("https://workspace.example.test/atlas/emails?status=failed#latest");
+    });
+    it("does not duplicate a mount path already present in the target", () => {
+        expect(workspaceAppDirectHref({ path: "/atlas", url: "https://workspace.example.test/atlas" }, "/atlas")).toBe("https://workspace.example.test/atlas");
+    });
+    it("resolves a mounted relative app path", () => {
+        expect(workspaceAppDirectHref({ path: "/atlas" }, "/emails")).toBe("/atlas/emails");
+    });
+    it("falls back to a safe mount path when the app URL is invalid", () => {
+        expect(workspaceAppDirectHref({ path: "/atlas", url: "javascript:alert(1)" }, "/")).toBe("/atlas");
+    });
+    it("rejects an unsafe target path", () => {
+        expect(workspaceAppDirectHref({ path: "/atlas" }, "//evil.example")).toBe(null);
+    });
+});
+describe("navigateToWorkspaceApp", () => {
+    beforeEach(() => {
+        window.history.replaceState({}, "", "/");
+    });
+    afterEach(() => {
+        window.history.replaceState({}, "", "/");
+        Object.defineProperty(window, "parent", {
+            configurable: true,
+            value: window,
+        });
+        Object.defineProperty(window, "top", {
+            configurable: true,
+            value: window,
+        });
+    });
+    it("keeps a normal iframe inline", () => {
+        Object.defineProperty(window, "parent", {
+            configurable: true,
+            value: {},
+        });
+        expect(shouldOpenWorkspaceAppInTopWindow()).toBe(false);
+    });
+    it("uses the top window when Dispatch is inside a Builder webview", () => {
+        const topWindow = { location: { href: "" } };
+        window.history.replaceState({}, "", "/?builder.preview=interact");
+        Object.defineProperty(window, "parent", {
+            configurable: true,
+            value: {},
+        });
+        Object.defineProperty(window, "top", {
+            configurable: true,
+            value: topWindow,
+        });
+        expect(shouldOpenWorkspaceAppInTopWindow()).toBe(true);
+        navigateToWorkspaceApp("/mail");
+        expect(topWindow.location.href).toBe(new URL("/mail", window.location.href).href);
+    });
+    it("reports when the embedded top window rejects navigation", () => {
+        const location = {};
+        Object.defineProperty(location, "href", {
+            configurable: true,
+            set: () => {
+                throw new Error("Top navigation is blocked");
+            },
+        });
+        const topWindow = { location };
+        window.history.replaceState({}, "", "/?builder.preview=interact");
+        Object.defineProperty(window, "parent", {
+            configurable: true,
+            value: {},
+        });
+        Object.defineProperty(window, "top", {
+            configurable: true,
+            value: topWindow,
+        });
+        expect(navigateToWorkspaceApp("/mail")).toBe(false);
+    });
+    it("rejects non-http navigation targets", () => {
+        const topWindow = { location: { href: "" } };
+        Object.defineProperty(window, "parent", {
+            configurable: true,
+            value: {},
+        });
+        Object.defineProperty(window, "top", {
+            configurable: true,
+            value: topWindow,
+        });
+        expect(navigateToWorkspaceApp("javascript:alert(1)")).toBe(false);
+        expect(topWindow.location.href).toBe("");
+    });
+});
+//# sourceMappingURL=workspace-apps.test.js.map

package/dist/lib/workspace-apps.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-apps.test.js","sourceRoot":"","sources":["../../src/lib/workspace-apps.test.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EACL,sBAAsB,EACtB,iCAAiC,EACjC,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAE1B,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CACJ,uBAAuB,CAAC;YACtB,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,wCAAwC;SAC9C,CAAC,CACH,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,wCAAwC,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACvE,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CACJ,sBAAsB,CACpB,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,sCAAsC,EAAE,EAC/D,8BAA8B,CAC/B,CACF,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CACJ,sBAAsB,CACpB,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,sCAAsC,EAAE,EAC/D,QAAQ,CACT,CACF,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAChE,eAAe,CAChB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CACJ,sBAAsB,CACpB,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,qBAAqB,EAAE,EAC9C,GAAG,CACJ,CACF,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CACvE,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE;YACtC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE;YACnC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE;YACtC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,iCAAiC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAuB,CAAC;QAClE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAClE,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE;YACtC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE;YACnC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QAEH,MAAM,CAAC,iCAAiC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAEhC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAClC,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,QAAQ,GAAG,EAAc,CAAC;QAChC,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE;YACtC,YAAY,EAAE,IAAI;YAClB,GAAG,EAAE,GAAG,EAAE;gBACR,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;SACF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAuB,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAClE,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE;YACtC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE;YACnC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QAEH,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAuB,CAAC;QAClE,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE;YACtC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE;YACnC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QAEH,MAAM,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// @vitest-environment happy-dom\nimport { afterEach, beforeEach, describe, expect, it } from \"vitest\";\n\nimport {\n  navigateToWorkspaceApp,\n  shouldOpenWorkspaceAppInTopWindow,\n  workspaceAppDirectHref,\n  workspaceAppEmbedTarget,\n} from \"./workspace-apps\";\n\ndescribe(\"workspaceAppEmbedTarget\", () => {\n  it(\"uses the app URL as the embed root when a mount path is also present\", () => {\n    expect(\n      workspaceAppEmbedTarget({\n        path: \"/content\",\n        url: \"https://workspace.example.test/content\",\n      }),\n    ).toEqual({ url: \"https://workspace.example.test/content\" });\n  });\n\n  it(\"falls back to the mounted path when no app URL is available\", () => {\n    expect(workspaceAppEmbedTarget({ path: \"/content\", url: null })).toEqual({\n      path: \"/content\",\n    });\n  });\n});\n\ndescribe(\"workspaceAppDirectHref\", () => {\n  it(\"joins an app-relative route onto an absolute app URL\", () => {\n    expect(\n      workspaceAppDirectHref(\n        { path: \"/atlas\", url: \"https://workspace.example.test/atlas\" },\n        \"/emails?status=failed#latest\",\n      ),\n    ).toBe(\"https://workspace.example.test/atlas/emails?status=failed#latest\");\n  });\n\n  it(\"does not duplicate a mount path already present in the target\", () => {\n    expect(\n      workspaceAppDirectHref(\n        { path: \"/atlas\", url: \"https://workspace.example.test/atlas\" },\n        \"/atlas\",\n      ),\n    ).toBe(\"https://workspace.example.test/atlas\");\n  });\n\n  it(\"resolves a mounted relative app path\", () => {\n    expect(workspaceAppDirectHref({ path: \"/atlas\" }, \"/emails\")).toBe(\n      \"/atlas/emails\",\n    );\n  });\n\n  it(\"falls back to a safe mount path when the app URL is invalid\", () => {\n    expect(\n      workspaceAppDirectHref(\n        { path: \"/atlas\", url: \"javascript:alert(1)\" },\n        \"/\",\n      ),\n    ).toBe(\"/atlas\");\n  });\n\n  it(\"rejects an unsafe target path\", () => {\n    expect(workspaceAppDirectHref({ path: \"/atlas\" }, \"//evil.example\")).toBe(\n      null,\n    );\n  });\n});\n\ndescribe(\"navigateToWorkspaceApp\", () => {\n  beforeEach(() => {\n    window.history.replaceState({}, \"\", \"/\");\n  });\n\n  afterEach(() => {\n    window.history.replaceState({}, \"\", \"/\");\n    Object.defineProperty(window, \"parent\", {\n      configurable: true,\n      value: window,\n    });\n    Object.defineProperty(window, \"top\", {\n      configurable: true,\n      value: window,\n    });\n  });\n\n  it(\"keeps a normal iframe inline\", () => {\n    Object.defineProperty(window, \"parent\", {\n      configurable: true,\n      value: {},\n    });\n\n    expect(shouldOpenWorkspaceAppInTopWindow()).toBe(false);\n  });\n\n  it(\"uses the top window when Dispatch is inside a Builder webview\", () => {\n    const topWindow = { location: { href: \"\" } } as unknown as Window;\n    window.history.replaceState({}, \"\", \"/?builder.preview=interact\");\n    Object.defineProperty(window, \"parent\", {\n      configurable: true,\n      value: {},\n    });\n    Object.defineProperty(window, \"top\", {\n      configurable: true,\n      value: topWindow,\n    });\n\n    expect(shouldOpenWorkspaceAppInTopWindow()).toBe(true);\n    navigateToWorkspaceApp(\"/mail\");\n\n    expect(topWindow.location.href).toBe(\n      new URL(\"/mail\", window.location.href).href,\n    );\n  });\n\n  it(\"reports when the embedded top window rejects navigation\", () => {\n    const location = {} as Location;\n    Object.defineProperty(location, \"href\", {\n      configurable: true,\n      set: () => {\n        throw new Error(\"Top navigation is blocked\");\n      },\n    });\n    const topWindow = { location } as unknown as Window;\n    window.history.replaceState({}, \"\", \"/?builder.preview=interact\");\n    Object.defineProperty(window, \"parent\", {\n      configurable: true,\n      value: {},\n    });\n    Object.defineProperty(window, \"top\", {\n      configurable: true,\n      value: topWindow,\n    });\n\n    expect(navigateToWorkspaceApp(\"/mail\")).toBe(false);\n  });\n\n  it(\"rejects non-http navigation targets\", () => {\n    const topWindow = { location: { href: \"\" } } as unknown as Window;\n    Object.defineProperty(window, \"parent\", {\n      configurable: true,\n      value: {},\n    });\n    Object.defineProperty(window, \"top\", {\n      configurable: true,\n      value: topWindow,\n    });\n\n    expect(navigateToWorkspaceApp(\"javascript:alert(1)\")).toBe(false);\n    expect(topWindow.location.href).toBe(\"\");\n  });\n});\n"]}

package/dist/routes/index.d.ts

@@ -0,0 +1,32 @@
+import { type RouteConfig } from "@react-router/dev/routes";
+/**
+ * Dispatch's routes as a programmatic `RouteConfig[]`. Splat into the
+ * consumer's `app/routes.ts`:
+ *
+ * ```ts
+ * import { type RouteConfig } from "@react-router/dev/routes";
+ * import { dispatchRoutes } from "@agent-native/dispatch/routes";
+ *
+ * export default [
+ *   ...localRoutes,    // consumer's own routes win on collision
+ *   ...dispatchRoutes, // dispatch fills in everything else
+ * ] satisfies RouteConfig;
+ * ```
+ *
+ * Route precedence: React Router 7 matches in declaration order, so
+ * placing `dispatchRoutes` LAST means consumer-defined routes with the
+ * same path take precedence. To override a single dispatch route, define
+ * it in your local routes; to keep it, omit it.
+ *
+ * The `file` paths below resolve relative to this file at runtime — they
+ * point into `packages/dispatch/dist/routes/pages/*.js` after build.
+ *
+ * Naming maps the original flatRoutes file conventions:
+ *   `_index.tsx`        → `index(...)`
+ *   `<name>.tsx`        → `route("<name>", ...)`
+ *   `<a>.$<param>.tsx`  → `route("<a>/:<param>", ...)`
+ *   `<a>._index.tsx`    → flattened as `route("<a>", ...)` (workspace
+ *      versions are bare and don't wrap a parent layout)
+ */
+export declare const dispatchRoutes: RouteConfig;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/routes/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,WAAW,EAAgB,MAAM,0BAA0B,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,cAAc,EAAE,WA+D5B,CAAC"}