@agent-native/dispatch 0.0.0-beta-20260819155526

package/dist/shared/chat-first-pane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-first-pane.d.ts","sourceRoot":"","sources":["../../src/shared/chat-first-pane.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,oBAAoB,CAAC"}

package/dist/shared/chat-first-pane.js

@@ -0,0 +1,8 @@
+/**
+ * Application-state key holding the workspace app the chat-first shell has on
+ * screen. In chat-first mode the app opens as a surface tab while the route
+ * stays on /chat, so this key is the only signal that names the open app.
+ * Written by the layout, read by view-screen — keep them on this one constant.
+ */
+export const CHAT_FIRST_PANE_STATE_KEY = "chat-first-pane";
+//# sourceMappingURL=chat-first-pane.js.map

package/dist/shared/chat-first-pane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-first-pane.js","sourceRoot":"","sources":["../../src/shared/chat-first-pane.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,iBAAiB,CAAC","sourcesContent":["/**\n * Application-state key holding the workspace app the chat-first shell has on\n * screen. In chat-first mode the app opens as a surface tab while the route\n * stays on /chat, so this key is the only signal that names the open app.\n * Written by the layout, read by view-screen — keep them on this one constant.\n */\nexport const CHAT_FIRST_PANE_STATE_KEY = \"chat-first-pane\";\n"]}

package/dist/shared/feature-flags.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Browser-only rollout for app-scoped sessions in Dispatch panes. The server
+ * action checks this flag too; the client hook only selects the presentation
+ * path and keeps the legacy embed route available while the flag is off.
+ */
+export declare const DISPATCH_WORKSPACE_SSO_FLAG: import("@agent-native/core/feature-flags/registry").FeatureFlagDefinition;
+export declare const DISPATCH_WORKSPACE_APP_LIST_FLAG: import("@agent-native/core/feature-flags/registry").FeatureFlagDefinition;
+//# sourceMappingURL=feature-flags.d.ts.map

package/dist/shared/feature-flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-flags.d.ts","sourceRoot":"","sources":["../../src/shared/feature-flags.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,2EAKtC,CAAC;AAEH,eAAO,MAAM,gCAAgC,2EAK3C,CAAC"}

package/dist/shared/feature-flags.js

@@ -0,0 +1,17 @@
+import { defineFeatureFlag } from "@agent-native/core/feature-flags/registry";
+/**
+ * Browser-only rollout for app-scoped sessions in Dispatch panes. The server
+ * action checks this flag too; the client hook only selects the presentation
+ * path and keeps the legacy embed route available while the flag is off.
+ */
+export const DISPATCH_WORKSPACE_SSO_FLAG = defineFeatureFlag({
+    key: "dispatch.workspace-sso",
+    displayName: "Dispatch workspace sign-in",
+    description: "Let Dispatch use the signed-in workspace identity for exact registered app panes.",
+});
+export const DISPATCH_WORKSPACE_APP_LIST_FLAG = defineFeatureFlag({
+    key: "dispatch.workspace-app-list",
+    displayName: "Workspace app list",
+    description: "Show apps from the signed-in workspace in native desktop and mobile app lists.",
+});
+//# sourceMappingURL=feature-flags.js.map

package/dist/shared/feature-flags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-flags.js","sourceRoot":"","sources":["../../src/shared/feature-flags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,iBAAiB,CAAC;IAC3D,GAAG,EAAE,wBAAwB;IAC7B,WAAW,EAAE,4BAA4B;IACzC,WAAW,EACT,mFAAmF;CACtF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,iBAAiB,CAAC;IAChE,GAAG,EAAE,6BAA6B;IAClC,WAAW,EAAE,oBAAoB;IACjC,WAAW,EACT,gFAAgF;CACnF,CAAC,CAAC","sourcesContent":["import { defineFeatureFlag } from \"@agent-native/core/feature-flags/registry\";\n\n/**\n * Browser-only rollout for app-scoped sessions in Dispatch panes. The server\n * action checks this flag too; the client hook only selects the presentation\n * path and keeps the legacy embed route available while the flag is off.\n */\nexport const DISPATCH_WORKSPACE_SSO_FLAG = defineFeatureFlag({\n  key: \"dispatch.workspace-sso\",\n  displayName: \"Dispatch workspace sign-in\",\n  description:\n    \"Let Dispatch use the signed-in workspace identity for exact registered app panes.\",\n});\n\nexport const DISPATCH_WORKSPACE_APP_LIST_FLAG = defineFeatureFlag({\n  key: \"dispatch.workspace-app-list\",\n  displayName: \"Workspace app list\",\n  description:\n    \"Show apps from the signed-in workspace in native desktop and mobile app lists.\",\n});\n"]}

package/dist/shared/workspace-app-chat.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Route contract for the Dispatch → workspace app agent-chat proxy.
+ *
+ * When an app is open in Dispatch, its chat rail must talk to that app's own
+ * agent (its tools, its AGENTS.md and skills, its org resources, its dev-mode
+ * surface) instead of to Dispatch's agent. The rail points `apiUrl` at this
+ * Dispatch-side prefix and the server forwards the whole agent-chat subtree to
+ * the app's `/_agent-native/agent-chat`, exactly as the Desktop loopback relay
+ * does. Shared so the browser can build the URL without importing server code.
+ */
+export declare const WORKSPACE_APP_CHAT_PROXY_PREFIX = "/_agent-native/workspace-app-chat";
+/** Dispatch-relative base URL the chat rail uses as its `apiUrl`. */
+export declare function workspaceAppChatProxyPath(appId: string): string;
+/**
+ * Split `/<appId>[/rest]` off a request that already matched the prefix.
+ * Returns null when there is no app segment, so the route fails loudly instead
+ * of proxying to an unresolved target.
+ */
+export declare function parseWorkspaceAppChatProxyPath(pathname: string): {
+    appId: string;
+    targetSubPath: string;
+} | null;
+//# sourceMappingURL=workspace-app-chat.d.ts.map

package/dist/shared/workspace-app-chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-app-chat.d.ts","sourceRoot":"","sources":["../../src/shared/workspace-app-chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,eAAO,MAAM,+BAA+B,sCACP,CAAC;AAEtC,qEAAqE;AACrE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,GACf;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAkBjD"}

package/dist/shared/workspace-app-chat.js

@@ -0,0 +1,45 @@
+/**
+ * Route contract for the Dispatch → workspace app agent-chat proxy.
+ *
+ * When an app is open in Dispatch, its chat rail must talk to that app's own
+ * agent (its tools, its AGENTS.md and skills, its org resources, its dev-mode
+ * surface) instead of to Dispatch's agent. The rail points `apiUrl` at this
+ * Dispatch-side prefix and the server forwards the whole agent-chat subtree to
+ * the app's `/_agent-native/agent-chat`, exactly as the Desktop loopback relay
+ * does. Shared so the browser can build the URL without importing server code.
+ */
+export const WORKSPACE_APP_CHAT_PROXY_PREFIX = "/_agent-native/workspace-app-chat";
+/** Dispatch-relative base URL the chat rail uses as its `apiUrl`. */
+export function workspaceAppChatProxyPath(appId) {
+    return `${WORKSPACE_APP_CHAT_PROXY_PREFIX}/${encodeURIComponent(appId.trim())}`;
+}
+/**
+ * Split `/<appId>[/rest]` off a request that already matched the prefix.
+ * Returns null when there is no app segment, so the route fails loudly instead
+ * of proxying to an unresolved target.
+ */
+export function parseWorkspaceAppChatProxyPath(pathname) {
+    const index = pathname.indexOf(WORKSPACE_APP_CHAT_PROXY_PREFIX);
+    if (index < 0)
+        return null;
+    const rest = pathname.slice(index + WORKSPACE_APP_CHAT_PROXY_PREFIX.length);
+    if (!rest.startsWith("/"))
+        return null;
+    const segments = rest.slice(1).split("/");
+    const rawAppId = segments.shift() ?? "";
+    let appId;
+    try {
+        appId = decodeURIComponent(rawAppId).trim();
+    }
+    catch {
+        // coercion-ok: malformed percent-encoding names no workspace app.
+        return null;
+    }
+    if (!appId)
+        return null;
+    const targetSubPath = segments.length > 0 ? `/${segments.join("/")}` : "";
+    if (targetSubPath.includes(".."))
+        return null;
+    return { appId, targetSubPath };
+}
+//# sourceMappingURL=workspace-app-chat.js.map

package/dist/shared/workspace-app-chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-app-chat.js","sourceRoot":"","sources":["../../src/shared/workspace-app-chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAC1C,mCAAmC,CAAC;AAEtC,qEAAqE;AACrE,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,OAAO,GAAG,+BAA+B,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAAgB;IAEhB,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAChE,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AAClC,CAAC","sourcesContent":["/**\n * Route contract for the Dispatch → workspace app agent-chat proxy.\n *\n * When an app is open in Dispatch, its chat rail must talk to that app's own\n * agent (its tools, its AGENTS.md and skills, its org resources, its dev-mode\n * surface) instead of to Dispatch's agent. The rail points `apiUrl` at this\n * Dispatch-side prefix and the server forwards the whole agent-chat subtree to\n * the app's `/_agent-native/agent-chat`, exactly as the Desktop loopback relay\n * does. Shared so the browser can build the URL without importing server code.\n */\n\nexport const WORKSPACE_APP_CHAT_PROXY_PREFIX =\n  \"/_agent-native/workspace-app-chat\";\n\n/** Dispatch-relative base URL the chat rail uses as its `apiUrl`. */\nexport function workspaceAppChatProxyPath(appId: string): string {\n  return `${WORKSPACE_APP_CHAT_PROXY_PREFIX}/${encodeURIComponent(appId.trim())}`;\n}\n\n/**\n * Split `/<appId>[/rest]` off a request that already matched the prefix.\n * Returns null when there is no app segment, so the route fails loudly instead\n * of proxying to an unresolved target.\n */\nexport function parseWorkspaceAppChatProxyPath(\n  pathname: string,\n): { appId: string; targetSubPath: string } | null {\n  const index = pathname.indexOf(WORKSPACE_APP_CHAT_PROXY_PREFIX);\n  if (index < 0) return null;\n  const rest = pathname.slice(index + WORKSPACE_APP_CHAT_PROXY_PREFIX.length);\n  if (!rest.startsWith(\"/\")) return null;\n  const segments = rest.slice(1).split(\"/\");\n  const rawAppId = segments.shift() ?? \"\";\n  let appId: string;\n  try {\n    appId = decodeURIComponent(rawAppId).trim();\n  } catch {\n    // coercion-ok: malformed percent-encoding names no workspace app.\n    return null;\n  }\n  if (!appId) return null;\n  const targetSubPath = segments.length > 0 ? `/${segments.join(\"/\")}` : \"\";\n  if (targetSubPath.includes(\"..\")) return null;\n  return { appId, targetSubPath };\n}\n"]}

package/dist/shared/workspace-sso.d.ts

@@ -0,0 +1,48 @@
+import { DISPATCH_WORKSPACE_SSO_FLAG } from "./feature-flags.js";
+export { DISPATCH_WORKSPACE_SSO_FLAG };
+/** Exact first-party origins. Never replace this with a suffix or wildcard. */
+export declare const CANONICAL_WORKSPACE_SSO_APP_ORIGINS: {
+    readonly analytics: "https://analytics.agent-native.com";
+    readonly assets: "https://assets.agent-native.com";
+    readonly brain: "https://brain.agent-native.com";
+    readonly calendar: "https://calendar.agent-native.com";
+    readonly chat: "https://chat.agent-native.com";
+    readonly clips: "https://clips.agent-native.com";
+    readonly content: "https://content.agent-native.com";
+    readonly crm: "https://crm.agent-native.com";
+    readonly design: "https://design.agent-native.com";
+    readonly dispatch: "https://dispatch.agent-native.com";
+    readonly forms: "https://forms.agent-native.com";
+    readonly macros: "https://macros.agent-native.com";
+    readonly mail: "https://mail.agent-native.com";
+    readonly plan: "https://plan.agent-native.com";
+    readonly slides: "https://slides.agent-native.com";
+    readonly tasks: "https://tasks.agent-native.com";
+};
+export declare const WORKSPACE_SSO_CALLBACK_PATH: "/_agent-native/identity/callback";
+export interface WorkspaceSsoAppRegistration {
+    appId: string;
+    clientId: string;
+    origin: string;
+    callbackPath: typeof WORKSPACE_SSO_CALLBACK_PATH;
+}
+export declare function exactWorkspaceSsoOrigin(raw: unknown): string | null;
+/**
+ * Parse the same additive custom registry used by browser identity SSO. The
+ * raw value is passed in so this shared module stays safe to import in the
+ * browser bundle.
+ */
+export declare function parseWorkspaceSsoAppRegistrations(raw: unknown): WorkspaceSsoAppRegistration[];
+/**
+ * Keep the server-side app catalog and the browser's action choice on the
+ * same exact-origin rules. `registryRaw` is deliberately supplied by the
+ * caller so this shared module never reads process or browser environment.
+ */
+export declare function isWorkspaceSsoAppUrl(app: {
+    id: string;
+    url?: unknown;
+}, options?: {
+    nodeEnv?: string;
+    registryRaw?: unknown;
+}): boolean;
+//# sourceMappingURL=workspace-sso.d.ts.map

package/dist/shared/workspace-sso.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-sso.d.ts","sourceRoot":"","sources":["../../src/shared/workspace-sso.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAEjE,OAAO,EAAE,2BAA2B,EAAE,CAAC;AAEvC,+EAA+E;AAC/E,eAAO,MAAM,mCAAmC;aAC9C,SAAS,EAAE,oCAAoC;aAC/C,MAAM,EAAE,iCAAiC;aACzC,KAAK,EAAE,gCAAgC;aACvC,QAAQ,EAAE,mCAAmC;aAC7C,IAAI,EAAE,+BAA+B;aACrC,KAAK,EAAE,gCAAgC;aACvC,OAAO,EAAE,kCAAkC;aAC3C,GAAG,EAAE,8BAA8B;aACnC,MAAM,EAAE,iCAAiC;aACzC,QAAQ,EAAE,mCAAmC;aAC7C,KAAK,EAAE,gCAAgC;aACvC,MAAM,EAAE,iCAAiC;aACzC,IAAI,EAAE,+BAA+B;aACrC,IAAI,EAAE,+BAA+B;aACrC,MAAM,EAAE,iCAAiC;aACzC,KAAK,EAAE,gCAAgC;CAC/B,CAAC;AAEX,eAAO,MAAM,2BAA2B,EACtC,kCAA2C,CAAC;AAO9C,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,2BAA2B,CAAC;CAClD;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAwBnE;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,OAAO,GACX,2BAA2B,EAAE,CA6C/B;AAwBD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,EAClC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GACxD,OAAO,CAuBT"}

package/dist/shared/workspace-sso.js

@@ -0,0 +1,142 @@
+import { DISPATCH_WORKSPACE_SSO_FLAG } from "./feature-flags.js";
+export { DISPATCH_WORKSPACE_SSO_FLAG };
+/** Exact first-party origins. Never replace this with a suffix or wildcard. */
+export const CANONICAL_WORKSPACE_SSO_APP_ORIGINS = {
+    analytics: "https://analytics.agent-native.com",
+    assets: "https://assets.agent-native.com",
+    brain: "https://brain.agent-native.com",
+    calendar: "https://calendar.agent-native.com",
+    chat: "https://chat.agent-native.com",
+    clips: "https://clips.agent-native.com",
+    content: "https://content.agent-native.com",
+    crm: "https://crm.agent-native.com",
+    design: "https://design.agent-native.com",
+    dispatch: "https://dispatch.agent-native.com",
+    forms: "https://forms.agent-native.com",
+    macros: "https://macros.agent-native.com",
+    mail: "https://mail.agent-native.com",
+    plan: "https://plan.agent-native.com",
+    slides: "https://slides.agent-native.com",
+    tasks: "https://tasks.agent-native.com",
+};
+export const WORKSPACE_SSO_CALLBACK_PATH = "/_agent-native/identity/callback";
+const CONTROL_CHARS = /[\u0000-\u001f\u007f]/;
+const APP_ID = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
+const CLIENT_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
+const LOCALHOST_HOSTS = new Set(["localhost", "127.0.0.1", "[::1]", "::1"]);
+export function exactWorkspaceSsoOrigin(raw) {
+    if (typeof raw !== "string" || !raw || CONTROL_CHARS.test(raw))
+        return null;
+    try {
+        const url = new URL(raw);
+        if (url.protocol !== "https:" &&
+            !(url.protocol === "http:" && LOCALHOST_HOSTS.has(url.hostname))) {
+            return null;
+        }
+        if (url.username ||
+            url.password ||
+            url.pathname !== "/" ||
+            url.search ||
+            url.hash) {
+            return null;
+        }
+        return url.origin;
+    }
+    catch {
+        // coercion-ok: malformed registry origins are rejected as absent.
+        return null;
+    }
+}
+/**
+ * Parse the same additive custom registry used by browser identity SSO. The
+ * raw value is passed in so this shared module stays safe to import in the
+ * browser bundle.
+ */
+export function parseWorkspaceSsoAppRegistrations(raw) {
+    if (typeof raw !== "string" || !raw.trim())
+        return [];
+    let value;
+    try {
+        value = JSON.parse(raw);
+    }
+    catch {
+        // coercion-ok: malformed custom registry data must fail closed.
+        return [];
+    }
+    if (!Array.isArray(value))
+        return [];
+    const registrations = [];
+    const seen = new Set();
+    for (const entry of value) {
+        if (!entry || typeof entry !== "object")
+            continue;
+        const candidate = entry;
+        const appId = candidate.appId;
+        const clientId = candidate.clientId;
+        const origin = exactWorkspaceSsoOrigin(candidate.origin);
+        if (typeof appId !== "string" ||
+            !APP_ID.test(appId) ||
+            typeof clientId !== "string" ||
+            !CLIENT_ID.test(clientId) ||
+            !origin ||
+            candidate.callbackPath !== WORKSPACE_SSO_CALLBACK_PATH ||
+            !Array.isArray(candidate.capabilities) ||
+            !candidate.capabilities.includes("identity-sso") ||
+            seen.has(appId) ||
+            Object.prototype.hasOwnProperty.call(CANONICAL_WORKSPACE_SSO_APP_ORIGINS, appId)) {
+            continue;
+        }
+        seen.add(appId);
+        registrations.push({
+            appId,
+            clientId,
+            origin,
+            callbackPath: WORKSPACE_SSO_CALLBACK_PATH,
+        });
+    }
+    return registrations;
+}
+function appOrigin(rawUrl) {
+    if (typeof rawUrl !== "string" || !rawUrl.trim())
+        return null;
+    try {
+        const url = new URL(rawUrl.trim());
+        return url.protocol === "http:" || url.protocol === "https:"
+            ? url.origin
+            : null;
+    }
+    catch {
+        // coercion-ok: malformed app metadata is not eligible for workspace SSO.
+        return null;
+    }
+}
+function isLoopbackOrigin(origin) {
+    try {
+        return LOCALHOST_HOSTS.has(new URL(origin).hostname);
+    }
+    catch {
+        // coercion-ok: only a previously parsed origin reaches this helper.
+        return false;
+    }
+}
+/**
+ * Keep the server-side app catalog and the browser's action choice on the
+ * same exact-origin rules. `registryRaw` is deliberately supplied by the
+ * caller so this shared module never reads process or browser environment.
+ */
+export function isWorkspaceSsoAppUrl(app, options = {}) {
+    const origin = appOrigin(app.url);
+    if (!origin)
+        return false;
+    const appId = app.id.trim().toLowerCase();
+    const canonicalOrigin = CANONICAL_WORKSPACE_SSO_APP_ORIGINS[appId];
+    if (canonicalOrigin === origin)
+        return true;
+    if (options.nodeEnv !== "production" &&
+        canonicalOrigin &&
+        isLoopbackOrigin(origin)) {
+        return true;
+    }
+    return parseWorkspaceSsoAppRegistrations(options.registryRaw).some((registration) => registration.appId === appId && registration.origin === origin);
+}
+//# sourceMappingURL=workspace-sso.js.map

package/dist/shared/workspace-sso.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-sso.js","sourceRoot":"","sources":["../../src/shared/workspace-sso.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAEjE,OAAO,EAAE,2BAA2B,EAAE,CAAC;AAEvC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,SAAS,EAAE,oCAAoC;IAC/C,MAAM,EAAE,iCAAiC;IACzC,KAAK,EAAE,gCAAgC;IACvC,QAAQ,EAAE,mCAAmC;IAC7C,IAAI,EAAE,+BAA+B;IACrC,KAAK,EAAE,gCAAgC;IACvC,OAAO,EAAE,kCAAkC;IAC3C,GAAG,EAAE,8BAA8B;IACnC,MAAM,EAAE,iCAAiC;IACzC,QAAQ,EAAE,mCAAmC;IAC7C,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,iCAAiC;IACzC,IAAI,EAAE,+BAA+B;IACrC,IAAI,EAAE,+BAA+B;IACrC,MAAM,EAAE,iCAAiC;IACzC,KAAK,EAAE,gCAAgC;CAC/B,CAAC;AAEX,MAAM,CAAC,MAAM,2BAA2B,GACtC,kCAA2C,CAAC;AAE9C,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAC9C,MAAM,MAAM,GAAG,mCAAmC,CAAC;AACnD,MAAM,SAAS,GAAG,qCAAqC,CAAC;AACxD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAS5E,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACzB,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAChE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IACE,GAAG,CAAC,QAAQ;YACZ,GAAG,CAAC,QAAQ;YACZ,GAAG,CAAC,QAAQ,KAAK,GAAG;YACpB,GAAG,CAAC,MAAM;YACV,GAAG,CAAC,IAAI,EACR,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAC/C,GAAY;IAEZ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IACtD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;QAChE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,aAAa,GAAkC,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QAClD,MAAM,SAAS,GAAG,KAAgC,CAAC;QACnD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QAC9B,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QACpC,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzD,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YACnB,OAAO,QAAQ,KAAK,QAAQ;YAC5B,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;YACzB,CAAC,MAAM;YACP,SAAS,CAAC,YAAY,KAAK,2BAA2B;YACtD,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;YACtC,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YACf,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAClC,mCAAmC,EACnC,KAAK,CACN,EACD,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,aAAa,CAAC,IAAI,CAAC;YACjB,KAAK;YACL,QAAQ;YACR,MAAM;YACN,YAAY,EAAE,2BAA2B;SAC1C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,SAAS,CAAC,MAAe;IAChC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM;YACZ,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAkC,EAClC,OAAO,GAAgD,EAAE;IAEzD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,eAAe,GACnB,mCAAmC,CACjC,KAAyD,CAC1D,CAAC;IACJ,IAAI,eAAe,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAE5C,IACE,OAAO,CAAC,OAAO,KAAK,YAAY;QAChC,eAAe;QACf,gBAAgB,CAAC,MAAM,CAAC,EACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,iCAAiC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAChE,CAAC,YAAY,EAAE,EAAE,CACf,YAAY,CAAC,KAAK,KAAK,KAAK,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM,CACjE,CAAC;AACJ,CAAC","sourcesContent":["import { DISPATCH_WORKSPACE_SSO_FLAG } from \"./feature-flags.js\";\n\nexport { DISPATCH_WORKSPACE_SSO_FLAG };\n\n/** Exact first-party origins. Never replace this with a suffix or wildcard. */\nexport const CANONICAL_WORKSPACE_SSO_APP_ORIGINS = {\n  analytics: \"https://analytics.agent-native.com\",\n  assets: \"https://assets.agent-native.com\",\n  brain: \"https://brain.agent-native.com\",\n  calendar: \"https://calendar.agent-native.com\",\n  chat: \"https://chat.agent-native.com\",\n  clips: \"https://clips.agent-native.com\",\n  content: \"https://content.agent-native.com\",\n  crm: \"https://crm.agent-native.com\",\n  design: \"https://design.agent-native.com\",\n  dispatch: \"https://dispatch.agent-native.com\",\n  forms: \"https://forms.agent-native.com\",\n  macros: \"https://macros.agent-native.com\",\n  mail: \"https://mail.agent-native.com\",\n  plan: \"https://plan.agent-native.com\",\n  slides: \"https://slides.agent-native.com\",\n  tasks: \"https://tasks.agent-native.com\",\n} as const;\n\nexport const WORKSPACE_SSO_CALLBACK_PATH =\n  \"/_agent-native/identity/callback\" as const;\n\nconst CONTROL_CHARS = /[\\u0000-\\u001f\\u007f]/;\nconst APP_ID = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;\nconst CLIENT_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;\nconst LOCALHOST_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"[::1]\", \"::1\"]);\n\nexport interface WorkspaceSsoAppRegistration {\n  appId: string;\n  clientId: string;\n  origin: string;\n  callbackPath: typeof WORKSPACE_SSO_CALLBACK_PATH;\n}\n\nexport function exactWorkspaceSsoOrigin(raw: unknown): string | null {\n  if (typeof raw !== \"string\" || !raw || CONTROL_CHARS.test(raw)) return null;\n  try {\n    const url = new URL(raw);\n    if (\n      url.protocol !== \"https:\" &&\n      !(url.protocol === \"http:\" && LOCALHOST_HOSTS.has(url.hostname))\n    ) {\n      return null;\n    }\n    if (\n      url.username ||\n      url.password ||\n      url.pathname !== \"/\" ||\n      url.search ||\n      url.hash\n    ) {\n      return null;\n    }\n    return url.origin;\n  } catch {\n    // coercion-ok: malformed registry origins are rejected as absent.\n    return null;\n  }\n}\n\n/**\n * Parse the same additive custom registry used by browser identity SSO. The\n * raw value is passed in so this shared module stays safe to import in the\n * browser bundle.\n */\nexport function parseWorkspaceSsoAppRegistrations(\n  raw: unknown,\n): WorkspaceSsoAppRegistration[] {\n  if (typeof raw !== \"string\" || !raw.trim()) return [];\n  let value: unknown;\n  try {\n    value = JSON.parse(raw);\n  } catch {\n    // coercion-ok: malformed custom registry data must fail closed.\n    return [];\n  }\n  if (!Array.isArray(value)) return [];\n\n  const registrations: WorkspaceSsoAppRegistration[] = [];\n  const seen = new Set<string>();\n  for (const entry of value) {\n    if (!entry || typeof entry !== \"object\") continue;\n    const candidate = entry as Record<string, unknown>;\n    const appId = candidate.appId;\n    const clientId = candidate.clientId;\n    const origin = exactWorkspaceSsoOrigin(candidate.origin);\n    if (\n      typeof appId !== \"string\" ||\n      !APP_ID.test(appId) ||\n      typeof clientId !== \"string\" ||\n      !CLIENT_ID.test(clientId) ||\n      !origin ||\n      candidate.callbackPath !== WORKSPACE_SSO_CALLBACK_PATH ||\n      !Array.isArray(candidate.capabilities) ||\n      !candidate.capabilities.includes(\"identity-sso\") ||\n      seen.has(appId) ||\n      Object.prototype.hasOwnProperty.call(\n        CANONICAL_WORKSPACE_SSO_APP_ORIGINS,\n        appId,\n      )\n    ) {\n      continue;\n    }\n    seen.add(appId);\n    registrations.push({\n      appId,\n      clientId,\n      origin,\n      callbackPath: WORKSPACE_SSO_CALLBACK_PATH,\n    });\n  }\n  return registrations;\n}\n\nfunction appOrigin(rawUrl: unknown): string | null {\n  if (typeof rawUrl !== \"string\" || !rawUrl.trim()) return null;\n  try {\n    const url = new URL(rawUrl.trim());\n    return url.protocol === \"http:\" || url.protocol === \"https:\"\n      ? url.origin\n      : null;\n  } catch {\n    // coercion-ok: malformed app metadata is not eligible for workspace SSO.\n    return null;\n  }\n}\n\nfunction isLoopbackOrigin(origin: string): boolean {\n  try {\n    return LOCALHOST_HOSTS.has(new URL(origin).hostname);\n  } catch {\n    // coercion-ok: only a previously parsed origin reaches this helper.\n    return false;\n  }\n}\n\n/**\n * Keep the server-side app catalog and the browser's action choice on the\n * same exact-origin rules. `registryRaw` is deliberately supplied by the\n * caller so this shared module never reads process or browser environment.\n */\nexport function isWorkspaceSsoAppUrl(\n  app: { id: string; url?: unknown },\n  options: { nodeEnv?: string; registryRaw?: unknown } = {},\n): boolean {\n  const origin = appOrigin(app.url);\n  if (!origin) return false;\n\n  const appId = app.id.trim().toLowerCase();\n  const canonicalOrigin =\n    CANONICAL_WORKSPACE_SSO_APP_ORIGINS[\n      appId as keyof typeof CANONICAL_WORKSPACE_SSO_APP_ORIGINS\n    ];\n  if (canonicalOrigin === origin) return true;\n\n  if (\n    options.nodeEnv !== \"production\" &&\n    canonicalOrigin &&\n    isLoopbackOrigin(origin)\n  ) {\n    return true;\n  }\n\n  return parseWorkspaceSsoAppRegistrations(options.registryRaw).some(\n    (registration) =>\n      registration.appId === appId && registration.origin === origin,\n  );\n}\n"]}

package/package.json

@@ -0,0 +1,118 @@
+{
+  "name": "@agent-native/dispatch",
+  "version": "0.0.0-beta-20260819155526",
+  "description": "Dispatch — workspace control plane for agent-native apps. Vault, integrations, destinations, scheduled jobs, and cross-app delegation, shipped as a single drop-in package.",
+  "homepage": "https://github.com/BuilderIO/agent-native#readme",
+  "bugs": {
+    "url": "https://github.com/BuilderIO/agent-native/issues"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/BuilderIO/agent-native",
+    "directory": "packages/dispatch"
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "type": "module",
+  "sideEffects": [
+    "*.css",
+    "dist/server/index.js",
+    "dist/server/lib/usage-metrics-store.js",
+    "dist/server/plugins/core-routes.js"
+  ],
+  "exports": {
+    ".": "./dist/index.js",
+    "./routes": "./dist/routes/index.js",
+    "./routes/pages/*": "./dist/routes/pages/*.js",
+    "./server": "./dist/server/index.js",
+    "./shared/app-roles": "./dist/shared/app-roles.js",
+    "./shared/feature-flags": "./dist/shared/feature-flags.js",
+    "./shared/workspace-sso": "./dist/shared/workspace-sso.js",
+    "./server/lib/thread-link-preview": "./dist/server/lib/thread-link-preview.js",
+    "./actions": "./dist/actions/index.js",
+    "./db": "./dist/db/index.js",
+    "./lib/thread-link-preview": "./dist/lib/thread-link-preview.js",
+    "./components": "./dist/components/index.js",
+    "./components/ui/*": "./dist/components/ui/*.js",
+    "./styles/dispatch.css": "./src/styles/dispatch.css"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "dependencies": {
+    "@radix-ui/react-accordion": "^1.2.12",
+    "@radix-ui/react-alert-dialog": "^1.1.15",
+    "@radix-ui/react-aspect-ratio": "^1.1.8",
+    "@radix-ui/react-avatar": "^1.1.11",
+    "@radix-ui/react-checkbox": "^1.3.2",
+    "@radix-ui/react-collapsible": "^1.1.12",
+    "@radix-ui/react-context-menu": "^2.2.16",
+    "@radix-ui/react-dialog": "^1.1.14",
+    "@radix-ui/react-dropdown-menu": "^2.1.15",
+    "@radix-ui/react-hover-card": "^1.1.15",
+    "@radix-ui/react-label": "^2.1.7",
+    "@radix-ui/react-menubar": "^1.1.16",
+    "@radix-ui/react-navigation-menu": "^1.2.14",
+    "@radix-ui/react-popover": "^1.1.14",
+    "@radix-ui/react-progress": "^1.1.8",
+    "@radix-ui/react-radio-group": "^1.3.7",
+    "@radix-ui/react-scroll-area": "^1.2.9",
+    "@radix-ui/react-select": "^2.2.5",
+    "@radix-ui/react-separator": "^1.1.7",
+    "@radix-ui/react-slider": "^1.3.5",
+    "@radix-ui/react-slot": "^1.2.3",
+    "@radix-ui/react-switch": "^1.2.5",
+    "@radix-ui/react-tabs": "^1.1.12",
+    "@radix-ui/react-toast": "^1.2.15",
+    "@radix-ui/react-toggle": "^1.1.10",
+    "@radix-ui/react-toggle-group": "^1.1.11",
+    "@radix-ui/react-tooltip": "^1.2.7",
+    "@tabler/icons-react": "^3.40.0",
+    "@tanstack/react-query": "^5.99.2",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "cmdk": "^1.1.1",
+    "embla-carousel-react": "^8.6.0",
+    "input-otp": "^1.4.2",
+    "next-themes": "^0.4.6",
+    "react-day-picker": "^9.14.0",
+    "react-hook-form": "^7.71.2",
+    "react-resizable-panels": "^4.10.0",
+    "recharts": "^3.8.1",
+    "sonner": "^2.0.7",
+    "tailwind-merge": "^3.5.0",
+    "vaul": "^1.1.2",
+    "zod": "^4.3.6",
+    "@agent-native/toolkit": "0.16.6"
+  },
+  "devDependencies": {
+    "@react-router/dev": "^8.1.0",
+    "@types/node": "^24.2.1",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7",
+    "react-router": "^8.1.0",
+    "tsc-alias": "^1.8.10",
+    "typescript-7": "npm:typescript@^7.0.2",
+    "vite": "8.1.0",
+    "vitest": "^4.1.5",
+    "@agent-native/core": "0.0.0-beta-20260819155526"
+  },
+  "peerDependencies": {
+    "@agent-native/core": "0.0.0-beta-20260819155526",
+    "react": ">=19.2.7",
+    "react-dom": ">=19.2.7",
+    "react-router": ">=8"
+  },
+  "scripts": {
+    "build": "tsc && tsc-alias --resolve-full-paths",
+    "dev": "tsc --watch & tsc-alias --watch --resolve-full-paths",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest --run src --passWithNoTests"
+  }
+}

package/src/actions/apply-dream-proposal.ts

@@ -0,0 +1,13 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { applyDreamProposal } from "../server/lib/dreams-store.js";
+
+export default defineAction({
+  description:
+    "Apply one pending Dispatch dream proposal. Personal memory applies directly; shared LEARNINGS.md and workspace resource proposals queue an approval request when approval policy is enabled.",
+  schema: z.object({
+    id: z.string().min(1).describe("Dream proposal id."),
+  }),
+  run: async ({ id }) => applyDreamProposal(id),
+});

package/src/actions/approve-dispatch-change.ts

@@ -0,0 +1,12 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { approveRequest } from "../server/lib/dispatch-store.js";
+
+export default defineAction({
+  description: "Approve a pending dispatch change request and apply it.",
+  schema: z.object({
+    id: z.string().describe("Approval request id"),
+  }),
+  run: async ({ id }) => approveRequest(id),
+});

package/src/actions/approve-vault-request.ts

@@ -0,0 +1,24 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { approveRequest, requireVaultCtx } from "../server/lib/vault-store.js";
+
+export default defineAction({
+  description:
+    "Approve a pending vault secret request. Creates the secret (if it doesn't exist) and grants it to the requesting app. Admin only.",
+  schema: z.object({
+    id: z.string().describe("Request ID to approve"),
+    secretValue: z.string().describe("The secret value to store"),
+    secretName: z
+      .string()
+      .optional()
+      .describe("Human-readable name for the secret"),
+  }),
+  run: async (args) =>
+    approveRequest(
+      args.id,
+      args.secretValue,
+      args.secretName,
+      requireVaultCtx(),
+    ),
+});

package/src/actions/archive-workspace-app.ts

@@ -0,0 +1,17 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { archiveWorkspaceApp } from "../server/lib/app-creation-store.js";
+
+export default defineAction({
+  description:
+    "Hide a workspace app from the Apps list for the current viewer. The app's files and database stay intact; this is a per-user/org visibility flag stored in dispatch settings. Pair with unarchive-workspace-app to restore.",
+  schema: z.object({
+    appId: z
+      .string()
+      .min(1)
+      .max(64)
+      .describe("Workspace app id (matches the apps/<id>/ folder)"),
+  }),
+  run: async (input) => archiveWorkspaceApp({ appId: input.appId }),
+});

package/src/actions/ask_app.ts

@@ -0,0 +1,26 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { askGrantedDispatchMcpApp } from "../server/lib/mcp-gateway.js";
+
+export default defineAction({
+  description:
+    "Send a natural-language request to an app available through Dispatch MCP. Use list_apps first to see which apps are granted.",
+  schema: z.object({
+    app: z.string().describe("Granted app id, e.g. mail or calendar."),
+    message: z.string().describe("The request to send to that app's agent."),
+    async: z
+      .boolean()
+      .optional()
+      .describe("Start a durable task and return immediately with a taskId."),
+    maxWaitMs: z
+      .number()
+      .int()
+      .min(0)
+      .max(25_000)
+      .optional()
+      .describe("Maximum inline wait in milliseconds."),
+  }),
+  run: async ({ app, message, async, maxWaitMs }) =>
+    askGrantedDispatchMcpApp(app, message, { async, maxWaitMs }),
+});

package/src/actions/ask_app_status.ts

@@ -0,0 +1,16 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { getGrantedDispatchMcpAppTask } from "../server/lib/mcp-gateway.js";
+
+export default defineAction({
+  description:
+    "Poll a durable Dispatch ask_app task and return its current status or final response.",
+  schema: z.object({
+    app: z.string().describe("Granted app id returned by ask_app."),
+    taskId: z.string().describe("The durable task id returned by ask_app."),
+  }),
+  readOnly: true,
+  parallelSafe: true,
+  run: async ({ app, taskId }) => getGrantedDispatchMcpAppTask(app, taskId),
+});