@agent-native/dispatch 0.10.2 → 0.10.4

package/dist/server/lib/provider-api.js

@@ -1,5 +1,6 @@
 import { PROVIDER_API_IDS, createProviderApiRuntime, listCustomProviders, } from "@agent-native/core/provider-api";
 import { getCredentialContext } from "@agent-native/core/server";
+export const DISPATCH_APP_ID = "dispatch";
 export const DISPATCH_PROVIDER_API_IDS = PROVIDER_API_IDS;
 function requireCtx(action) {
     const ctx = getCredentialContext();
@@ -9,7 +10,7 @@ function requireCtx(action) {
     return ctx;
 }
 const runtime = createProviderApiRuntime({
-    appId: "dispatch",
+    appId: DISPATCH_APP_ID,
     localCredentialSource: "dispatch_local",
     getCredentialContext: () => requireCtx("requests"),
     getCustomProviders: async () => {

package/dist/server/lib/provider-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-api.js","sourceRoot":"","sources":["../../../src/server/lib/provider-api.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,GAIpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC;AAI1D,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,6CAA6C,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,GAAG,wBAAwB,CAAC;IACvC,KAAK,EAAE,UAAU;IACjB,qBAAqB,EAAE,gBAAgB;IACvC,oBAAoB,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;IAClD,kBAAkB,EAAE,KAAK,IAAI,EAAE;QAC7B,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,2DAA2D;QAC3D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;YACvC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC;YAC1C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;SACxE,CAAC,CAAC;QACH,MAAM,aAAa,GACjB,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,YAAY,GAChB,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,2EAA2E;QAC3E,iDAAiD;QACjD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,gBAAuC,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,sBAAsB,CAAC,QAAiB;IACtD,OAAO,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAIpC;IACC,OAAO,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAA4B;IACpE,OAAO,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC","sourcesContent":["import {\n  PROVIDER_API_IDS,\n  createProviderApiRuntime,\n  listCustomProviders,\n  type ProviderApiId,\n  type ProviderApiMethod,\n  type ProviderApiRequestArgs,\n} from \"@agent-native/core/provider-api\";\nimport { getCredentialContext } from \"@agent-native/core/server\";\n\nexport const DISPATCH_PROVIDER_API_IDS = PROVIDER_API_IDS;\nexport type DispatchProviderApiId = ProviderApiId;\nexport type { ProviderApiMethod, ProviderApiRequestArgs };\n\nfunction requireCtx(action: string) {\n  const ctx = getCredentialContext();\n  if (!ctx) {\n    throw new Error(\n      `Dispatch provider API ${action} requires an authenticated request context.`,\n    );\n  }\n  return ctx;\n}\n\nconst runtime = createProviderApiRuntime({\n  appId: \"dispatch\",\n  localCredentialSource: \"dispatch_local\",\n  getCredentialContext: () => requireCtx(\"requests\"),\n  getCustomProviders: async () => {\n    const ctx = getCredentialContext();\n    if (!ctx) return [];\n    // Load custom providers for both user scope and org scope.\n    const results = await Promise.allSettled([\n      listCustomProviders(\"user\", ctx.userEmail),\n      ctx.orgId ? listCustomProviders(\"org\", ctx.orgId) : Promise.resolve([]),\n    ]);\n    const userProviders =\n      results[0].status === \"fulfilled\" ? results[0].value : [];\n    const orgProviders =\n      results[1].status === \"fulfilled\" ? results[1].value : [];\n    // Merge: user-scope providers take precedence over org-scope ones with the\n    // same id, and neither can shadow a built-in id.\n    const seen = new Set<string>(PROVIDER_API_IDS as unknown as string[]);\n    const merged = [];\n    for (const p of [...userProviders, ...orgProviders]) {\n      if (!seen.has(p.id)) {\n        seen.add(p.id);\n        merged.push(p);\n      }\n    }\n    return merged;\n  },\n});\n\nexport function listProviderApiCatalog(provider?: string) {\n  return runtime.listCatalog(provider);\n}\n\nexport function fetchProviderApiDocs(options: {\n  provider: string;\n  url?: string;\n  maxBytes?: number;\n}) {\n  return runtime.fetchDocs(options);\n}\n\nexport function executeProviderApiRequest(args: ProviderApiRequestArgs) {\n  return runtime.executeRequest(args);\n}\n"]}
+{"version":3,"file":"provider-api.js","sourceRoot":"","sources":["../../../src/server/lib/provider-api.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,GAIpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;AAC1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC;AAI1D,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,6CAA6C,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,GAAG,wBAAwB,CAAC;IACvC,KAAK,EAAE,eAAe;IACtB,qBAAqB,EAAE,gBAAgB;IACvC,oBAAoB,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;IAClD,kBAAkB,EAAE,KAAK,IAAI,EAAE;QAC7B,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,2DAA2D;QAC3D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;YACvC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC;YAC1C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;SACxE,CAAC,CAAC;QACH,MAAM,aAAa,GACjB,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,YAAY,GAChB,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,2EAA2E;QAC3E,iDAAiD;QACjD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,gBAAuC,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,sBAAsB,CAAC,QAAiB;IACtD,OAAO,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAIpC;IACC,OAAO,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAA4B;IACpE,OAAO,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC","sourcesContent":["import {\n  PROVIDER_API_IDS,\n  createProviderApiRuntime,\n  listCustomProviders,\n  type ProviderApiId,\n  type ProviderApiMethod,\n  type ProviderApiRequestArgs,\n} from \"@agent-native/core/provider-api\";\nimport { getCredentialContext } from \"@agent-native/core/server\";\n\nexport const DISPATCH_APP_ID = \"dispatch\";\nexport const DISPATCH_PROVIDER_API_IDS = PROVIDER_API_IDS;\nexport type DispatchProviderApiId = ProviderApiId;\nexport type { ProviderApiMethod, ProviderApiRequestArgs };\n\nfunction requireCtx(action: string) {\n  const ctx = getCredentialContext();\n  if (!ctx) {\n    throw new Error(\n      `Dispatch provider API ${action} requires an authenticated request context.`,\n    );\n  }\n  return ctx;\n}\n\nconst runtime = createProviderApiRuntime({\n  appId: DISPATCH_APP_ID,\n  localCredentialSource: \"dispatch_local\",\n  getCredentialContext: () => requireCtx(\"requests\"),\n  getCustomProviders: async () => {\n    const ctx = getCredentialContext();\n    if (!ctx) return [];\n    // Load custom providers for both user scope and org scope.\n    const results = await Promise.allSettled([\n      listCustomProviders(\"user\", ctx.userEmail),\n      ctx.orgId ? listCustomProviders(\"org\", ctx.orgId) : Promise.resolve([]),\n    ]);\n    const userProviders =\n      results[0].status === \"fulfilled\" ? results[0].value : [];\n    const orgProviders =\n      results[1].status === \"fulfilled\" ? results[1].value : [];\n    // Merge: user-scope providers take precedence over org-scope ones with the\n    // same id, and neither can shadow a built-in id.\n    const seen = new Set<string>(PROVIDER_API_IDS as unknown as string[]);\n    const merged = [];\n    for (const p of [...userProviders, ...orgProviders]) {\n      if (!seen.has(p.id)) {\n        seen.add(p.id);\n        merged.push(p);\n      }\n    }\n    return merged;\n  },\n});\n\nexport function listProviderApiCatalog(provider?: string) {\n  return runtime.listCatalog(provider);\n}\n\nexport function fetchProviderApiDocs(options: {\n  provider: string;\n  url?: string;\n  maxBytes?: number;\n}) {\n  return runtime.fetchDocs(options);\n}\n\nexport function executeProviderApiRequest(args: ProviderApiRequestArgs) {\n  return runtime.executeRequest(args);\n}\n"]}

package/dist/server/plugins/agent-chat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-chat.d.ts","sourceRoot":"","sources":["../../../src/server/plugins/agent-chat.ts"],"names":[],"mappings":";AAIA,wBAoCG"}
+{"version":3,"file":"agent-chat.d.ts","sourceRoot":"","sources":["../../../src/server/plugins/agent-chat.ts"],"names":[],"mappings":";AAIA,wBAsCG"}

package/dist/server/plugins/agent-chat.js

@@ -14,6 +14,7 @@ export default createAgentChatPlugin({
     // a build-time-generated `.generated/actions-registry.ts` (the latter is a
     // template-only construct that the Vite plugin emits next to actions/).
     actions: dispatchActions,
+    codeExecution: { production: "sandboxed" },
     systemPrompt: `You are the central dispatch for this workspace.
 
 Default posture:
@@ -32,6 +33,7 @@ Use the standard workspace primitives:
 - If the starter template is used, treat it as scaffolding only: the finished app must be branded as the requested app with its own home screen/navigation/package metadata/manifest, and must not leave visible "Starter", "Blank app", or "New app" UI behind.
 - Treat first-party apps such as Mail, Calendar, Analytics, Brain, Assets, and Dispatch as existing hosted/connected neighbors available through links and A2A/default connected agents. Do not create wrapper apps, child apps, nested routes, or cloned template copies just to give a new app access to them; build only the genuinely new workflow and delegate cross-app work to those existing apps.
 - Integration grants are not provider capability limits. For ad hoc provider inspection, querying, reporting, or troubleshooting, call provider-api-catalog/provider-api-docs, then provider-api-request against the provider's real HTTP API. Use connectionId for a specific shared grant and accountId for a specific OAuth account. Never expose secret values or silently widen app access while doing this.
+- For broad provider searches, joins, classification, corpus counts, or absence claims, fetch every relevant page or an explicitly bounded cohort, stage/save large responses with stageAs/saveToFile/fetchAllPages, and reduce them with query-staged-dataset or run-code. Report source, filters, row counts, pagination, truncation, failed pages, and uncovered gaps.
 
 When a user asks for something like a digest, reminder, routing rule, or saved behavior:
 - First decide whether it should be a resource, a recurring job, a destination, or a delegated task.

package/dist/server/plugins/agent-chat.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-chat.js","sourceRoot":"","sources":["../../../src/server/plugins/agent-chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,eAAe,qBAAqB,CAAC;IACnC,KAAK,EAAE,UAAU;IACjB,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,OAAO,EAAE,eAAe;IACxB,YAAY,EAAE;;;;;;;;;;;;;;;;;;;;;;4EAsB4D;CAC3E,CAAC,CAAC","sourcesContent":["import { createAgentChatPlugin } from \"@agent-native/core/server\";\nimport { getOrgContext } from \"@agent-native/core/org\";\nimport { dispatchActions } from \"../../actions/index.js\";\n\nexport default createAgentChatPlugin({\n  appId: \"dispatch\",\n  // Without this, AGENT_ORG_ID is never set on agent action calls and every\n  // row written through the frontend (vault secrets, destinations, workspace\n  // resources) lands with org_id=NULL — breaking data isolation across orgs.\n  resolveOrgId: async (event) => {\n    const ctx = await getOrgContext(event);\n    return ctx.orgId;\n  },\n  // Read actions directly from the package's own action map rather than from\n  // a build-time-generated `.generated/actions-registry.ts` (the latter is a\n  // template-only construct that the Vite plugin emits next to actions/).\n  actions: dispatchActions,\n  systemPrompt: `You are the central dispatch for this workspace.\n\nDefault posture:\n- Treat Slack and Telegram as shared entrypoints into the workspace.\n- Heavily delegate domain work to specialized agents through A2A when another app owns the job.\n- Keep durable memory and operating instructions in resources rather than ephemeral chat.\n- Prefer replying in the current external thread unless the user explicitly asks you to send to a saved destination.\n\nUse the standard workspace primitives:\n- Read and update resources like AGENTS.md, LEARNINGS.md, jobs/*.md, agents/*.md, and remote-agents/*.json when appropriate.\n- Use recurring jobs for scheduled behavior.\n- Use custom agent profiles in agents/*.md for local spawned work and remote-agents/*.json for remote A2A apps.\n- You receive a compact available-apps block with sibling workspace app names and descriptions. Use it to pick the right A2A target, and call list-connected-agents or tool-search only when you need fresh details.\n- When answering whether workspace apps expose agent cards or A2A endpoints, call list-workspace-apps with includeAgentCards=true. If you have not requested that probe, absence of agent-card fields means unchecked, not unavailable.\n- When creating a new workspace app, create a separate app under apps/<app-id> with apps/<app-id>/package.json including a concise generated description, mount it at /<app-id>, use relative /<app-id> links, never hardcode localhost or dev ports, use shadcn/ui with @tabler/icons-react rather than lucide-react, and ensure the React Router client entry preserves APP_BASE_PATH/VITE_APP_BASE_PATH via appBasePath(). There is no separate workspace app registry to edit.\n- If the starter template is used, treat it as scaffolding only: the finished app must be branded as the requested app with its own home screen/navigation/package metadata/manifest, and must not leave visible \"Starter\", \"Blank app\", or \"New app\" UI behind.\n- Treat first-party apps such as Mail, Calendar, Analytics, Brain, Assets, and Dispatch as existing hosted/connected neighbors available through links and A2A/default connected agents. Do not create wrapper apps, child apps, nested routes, or cloned template copies just to give a new app access to them; build only the genuinely new workflow and delegate cross-app work to those existing apps.\n- Integration grants are not provider capability limits. For ad hoc provider inspection, querying, reporting, or troubleshooting, call provider-api-catalog/provider-api-docs, then provider-api-request against the provider's real HTTP API. Use connectionId for a specific shared grant and accountId for a specific OAuth account. Never expose secret values or silently widen app access while doing this.\n\nWhen a user asks for something like a digest, reminder, routing rule, or saved behavior:\n- First decide whether it should be a resource, a recurring job, a destination, or a delegated task.\n- Keep responses concise and operational.\n- Avoid inventing integrations or destinations that are not configured yet.`,\n});\n"]}
+{"version":3,"file":"agent-chat.js","sourceRoot":"","sources":["../../../src/server/plugins/agent-chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,eAAe,qBAAqB,CAAC;IACnC,KAAK,EAAE,UAAU;IACjB,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,OAAO,EAAE,eAAe;IACxB,aAAa,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE;IAC1C,YAAY,EAAE;;;;;;;;;;;;;;;;;;;;;;;4EAuB4D;CAC3E,CAAC,CAAC","sourcesContent":["import { createAgentChatPlugin } from \"@agent-native/core/server\";\nimport { getOrgContext } from \"@agent-native/core/org\";\nimport { dispatchActions } from \"../../actions/index.js\";\n\nexport default createAgentChatPlugin({\n  appId: \"dispatch\",\n  // Without this, AGENT_ORG_ID is never set on agent action calls and every\n  // row written through the frontend (vault secrets, destinations, workspace\n  // resources) lands with org_id=NULL — breaking data isolation across orgs.\n  resolveOrgId: async (event) => {\n    const ctx = await getOrgContext(event);\n    return ctx.orgId;\n  },\n  // Read actions directly from the package's own action map rather than from\n  // a build-time-generated `.generated/actions-registry.ts` (the latter is a\n  // template-only construct that the Vite plugin emits next to actions/).\n  actions: dispatchActions,\n  codeExecution: { production: \"sandboxed\" },\n  systemPrompt: `You are the central dispatch for this workspace.\n\nDefault posture:\n- Treat Slack and Telegram as shared entrypoints into the workspace.\n- Heavily delegate domain work to specialized agents through A2A when another app owns the job.\n- Keep durable memory and operating instructions in resources rather than ephemeral chat.\n- Prefer replying in the current external thread unless the user explicitly asks you to send to a saved destination.\n\nUse the standard workspace primitives:\n- Read and update resources like AGENTS.md, LEARNINGS.md, jobs/*.md, agents/*.md, and remote-agents/*.json when appropriate.\n- Use recurring jobs for scheduled behavior.\n- Use custom agent profiles in agents/*.md for local spawned work and remote-agents/*.json for remote A2A apps.\n- You receive a compact available-apps block with sibling workspace app names and descriptions. Use it to pick the right A2A target, and call list-connected-agents or tool-search only when you need fresh details.\n- When answering whether workspace apps expose agent cards or A2A endpoints, call list-workspace-apps with includeAgentCards=true. If you have not requested that probe, absence of agent-card fields means unchecked, not unavailable.\n- When creating a new workspace app, create a separate app under apps/<app-id> with apps/<app-id>/package.json including a concise generated description, mount it at /<app-id>, use relative /<app-id> links, never hardcode localhost or dev ports, use shadcn/ui with @tabler/icons-react rather than lucide-react, and ensure the React Router client entry preserves APP_BASE_PATH/VITE_APP_BASE_PATH via appBasePath(). There is no separate workspace app registry to edit.\n- If the starter template is used, treat it as scaffolding only: the finished app must be branded as the requested app with its own home screen/navigation/package metadata/manifest, and must not leave visible \"Starter\", \"Blank app\", or \"New app\" UI behind.\n- Treat first-party apps such as Mail, Calendar, Analytics, Brain, Assets, and Dispatch as existing hosted/connected neighbors available through links and A2A/default connected agents. Do not create wrapper apps, child apps, nested routes, or cloned template copies just to give a new app access to them; build only the genuinely new workflow and delegate cross-app work to those existing apps.\n- Integration grants are not provider capability limits. For ad hoc provider inspection, querying, reporting, or troubleshooting, call provider-api-catalog/provider-api-docs, then provider-api-request against the provider's real HTTP API. Use connectionId for a specific shared grant and accountId for a specific OAuth account. Never expose secret values or silently widen app access while doing this.\n- For broad provider searches, joins, classification, corpus counts, or absence claims, fetch every relevant page or an explicitly bounded cohort, stage/save large responses with stageAs/saveToFile/fetchAllPages, and reduce them with query-staged-dataset or run-code. Report source, filters, row counts, pagination, truncation, failed pages, and uncovered gaps.\n\nWhen a user asks for something like a digest, reminder, routing rule, or saved behavior:\n- First decide whether it should be a resource, a recurring job, a destination, or a delegated task.\n- Keep responses concise and operational.\n- Avoid inventing integrations or destinations that are not configured yet.`,\n});\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/dispatch",
-  "version": "0.10.2",
+  "version": "0.10.4",
   "type": "module",
   "description": "Dispatch — workspace control plane for agent-native apps. Vault, integrations, destinations, scheduled jobs, and cross-app delegation, shipped as a single drop-in package.",
   "license": "MIT",

package/src/actions/delete-staged-dataset.ts

@@ -0,0 +1,39 @@
+import { defineAction } from "@agent-native/core";
+import { deleteStagedDataset } from "@agent-native/core/provider-api/staged-datasets-store";
+import { getCredentialContext } from "@agent-native/core/server/request-context";
+import { z } from "zod";
+import { DISPATCH_APP_ID } from "../server/lib/provider-api.js";
+
+export default defineAction({
+  description:
+    "Delete a staged dataset by id, freeing its scratch storage. Use after analysis is complete or before re-staging under the same name. Only the owner who staged the dataset can delete it.",
+  schema: z.object({
+    datasetId: z
+      .string()
+      .min(1)
+      .describe(
+        "Dataset id to delete (from list-staged-datasets or provider-api-request stageAs result).",
+      ),
+  }),
+  http: false,
+  run: async (args) => {
+    const ctx = getCredentialContext();
+    if (!ctx) {
+      throw new Error("No authenticated context for delete-staged-dataset.");
+    }
+
+    const deleted = await deleteStagedDataset({
+      id: args.datasetId,
+      appId: DISPATCH_APP_ID,
+      ownerEmail: ctx.userEmail,
+    });
+
+    if (!deleted) {
+      throw new Error(
+        `Dataset ${args.datasetId} not found (or belongs to a different owner/app).`,
+      );
+    }
+
+    return { deleted: true, datasetId: args.datasetId };
+  },
+});

package/src/actions/index.ts

@@ -11,6 +11,7 @@ import createWorkspaceResourceGrant from "./create-workspace-resource-grant.js";
 import createWorkspaceResource from "./create-workspace-resource.js";
 import createDreamReport from "./create-dream-report.js";
 import createEmbedSession from "./create_embed_session.js";
+import deleteStagedDataset from "./delete-staged-dataset.js";
 import deleteDestination from "./delete-destination.js";
 import deleteVaultSecret from "./delete-vault-secret.js";
 import deleteWorkspaceResource from "./delete-workspace-resource.js";
@@ -40,6 +41,7 @@ import listIntegrationsCatalog from "./list-integrations-catalog.js";
 import listLinkedIdentities from "./list-linked-identities.js";
 import listMcpAppAccess from "./list-mcp-app-access.js";
 import listApps from "./list_apps.js";
+import listStagedDatasets from "./list-staged-datasets.js";
 import listVaultAudit from "./list-vault-audit.js";
 import listVaultGrants from "./list-vault-grants.js";
 import listVaultRequests from "./list-vault-requests.js";
@@ -59,6 +61,7 @@ import providerApiCatalog from "./provider-api-catalog.js";
 import providerApiDocs from "./provider-api-docs.js";
 import providerApiRegister from "./provider-api-register.js";
 import providerApiRequest from "./provider-api-request.js";
+import queryStagedDataset from "./query-staged-dataset.js";
 import rejectDispatchChange from "./reject-dispatch-change.js";
 import rejectDreamProposal from "./reject-dream-proposal.js";
 import removePendingWorkspaceApp from "./remove-pending-workspace-app.js";
@@ -103,6 +106,7 @@ export const dispatchActions: Record<string, ActionEntry> = {
   "create-workspace-resource": createWorkspaceResource,
   "create-dream-report": createDreamReport,
   create_embed_session: createEmbedSession,
+  "delete-staged-dataset": deleteStagedDataset,
   "delete-destination": deleteDestination,
   "delete-vault-secret": deleteVaultSecret,
   "delete-workspace-resource": deleteWorkspaceResource,
@@ -133,6 +137,7 @@ export const dispatchActions: Record<string, ActionEntry> = {
   "list-linked-identities": listLinkedIdentities,
   "list-mcp-app-access": listMcpAppAccess,
   list_apps: listApps,
+  "list-staged-datasets": listStagedDatasets,
   "list-vault-audit": listVaultAudit,
   "list-vault-grants": listVaultGrants,
   "list-vault-requests": listVaultRequests,
@@ -152,6 +157,7 @@ export const dispatchActions: Record<string, ActionEntry> = {
   "provider-api-docs": providerApiDocs,
   "provider-api-register": providerApiRegister,
   "provider-api-request": providerApiRequest,
+  "query-staged-dataset": queryStagedDataset,
   "reject-dispatch-change": rejectDispatchChange,
   "reject-dream-proposal": rejectDreamProposal,
   "remove-pending-workspace-app": removePendingWorkspaceApp,

package/src/actions/list-staged-datasets.ts

@@ -0,0 +1,36 @@
+import { defineAction } from "@agent-native/core";
+import { listStagedDatasets } from "@agent-native/core/provider-api/staged-datasets-store";
+import { getCredentialContext } from "@agent-native/core/server/request-context";
+import { z } from "zod";
+import { DISPATCH_APP_ID } from "../server/lib/provider-api.js";
+
+export default defineAction({
+  description:
+    "List staged datasets stored by provider-api-request (stageAs) for the current user. Returns dataset ids, names, row counts, columns, and sizes. Use dataset ids with query-staged-dataset to aggregate, or with delete-staged-dataset to free scratch storage.",
+  schema: z.object({}),
+  http: { method: "GET" },
+  readOnly: true,
+  run: async () => {
+    const ctx = getCredentialContext();
+    if (!ctx) {
+      throw new Error("No authenticated context for list-staged-datasets.");
+    }
+
+    const datasets = await listStagedDatasets({
+      appId: DISPATCH_APP_ID,
+      ownerEmail: ctx.userEmail,
+    });
+
+    return {
+      datasets: datasets.map((d) => ({
+        id: d.id,
+        name: d.name,
+        rowCount: d.rowCount,
+        columns: d.columns,
+        byteSize: d.byteSize,
+        updatedAt: new Date(d.updatedAt).toISOString(),
+      })),
+      total: datasets.length,
+    };
+  },
+});

package/src/actions/provider-api-catalog.ts

@@ -20,7 +20,7 @@ export default defineAction({
     return {
       providers,
       guidance:
-        "Workspace integrations and grants are not capability limits. When a provider can answer a question through its HTTP API, inspect docs/spec URLs here and call provider-api-request with the exact provider API method/path/query/body instead of adding a rigid one-off action. Custom providers registered via provider-api-register also appear here.",
+        "Workspace integrations and grants are not capability limits. When a provider can answer a question through its HTTP API, inspect docs/spec URLs here and call provider-api-request with the exact provider API method/path/query/body instead of adding a rigid one-off action. For broad searches, joins, classification, or absence claims, stage or save the full bounded corpus and reduce it with query-staged-dataset or run-code. Custom providers registered via provider-api-register also appear here.",
     };
   },
 });

package/src/actions/provider-api-request.ts

@@ -1,9 +1,69 @@
 import { defineAction } from "@agent-native/core";
+import { stagingExecuteRequest } from "@agent-native/core/provider-api/staging";
+import { getCredentialContext } from "@agent-native/core/server/request-context";
 import { z } from "zod";
-import { executeProviderApiRequest } from "../server/lib/provider-api.js";
+import {
+  DISPATCH_APP_ID,
+  executeProviderApiRequest,
+} from "../server/lib/provider-api.js";
 
 const MethodSchema = z.enum(["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD"]);
 
+const PaginationSchema = z
+  .object({
+    nextCursorPath: z
+      .string()
+      .optional()
+      .describe(
+        "Dot-path in the response JSON where the next cursor/token lives, e.g. 'next_cursor', 'meta.next', or 'nextPageToken'.",
+      ),
+    cursorParam: z
+      .string()
+      .optional()
+      .describe(
+        "Query parameter name to inject the cursor into the next request. Use cursorBodyPath for APIs that page through POST bodies.",
+      ),
+    cursorBodyPath: z
+      .string()
+      .optional()
+      .describe(
+        "Dot-path in the JSON request body to set to the next cursor. Use this for POST-body pagination.",
+      ),
+    pageParam: z
+      .string()
+      .optional()
+      .describe(
+        "Use page-number mode: this query param is incremented on each page.",
+      ),
+    startPage: z.coerce
+      .number()
+      .int()
+      .optional()
+      .describe("Starting page number for pageParam mode (default 1)."),
+    offsetParam: z
+      .string()
+      .optional()
+      .describe(
+        "Use offset mode: this query param is incremented by pageSize on each request.",
+      ),
+    pageSize: z.coerce
+      .number()
+      .int()
+      .min(1)
+      .optional()
+      .describe(
+        "Expected page size for offset increments. Defaults to the actual item count of the first page.",
+      ),
+    maxPages: z.coerce
+      .number()
+      .int()
+      .min(1)
+      .max(200)
+      .optional()
+      .describe("Maximum pages to fetch server-side (default 50, max 200)."),
+  })
+  .optional();
+
 export default defineAction({
   description:
     "Make an arbitrary authenticated HTTP request to a shared workspace integration, configured provider API, or custom provider registered via provider-api-register. Use this as the flexible escape hatch when Dispatch needs a provider endpoint, filter, pagination mode, payload, or API version that no canned action models. The request is constrained to the provider host, uses configured credentials automatically, blocks private/internal URLs, and redacts secrets from responses.",
@@ -77,8 +137,24 @@ export default defineAction({
       .string()
       .optional()
       .describe(
-        "Workspace file path to save the full response body to instead of returning it in context (e.g. 'analysis/hubspot-deals.json'). When set, returns only a compact summary {savedTo, status, bytes, preview} and allows up to 20MB response. Useful for large datasets that would overflow context.",
+        "Workspace file path to save the full response body to instead of returning it in context (e.g. 'analysis/provider-response.json'). When set, returns only a compact summary {savedTo, status, bytes, preview} and allows up to 20MB response. Useful for large datasets that would overflow context.",
+      ),
+    stageAs: z
+      .string()
+      .min(1)
+      .optional()
+      .describe(
+        "When set, parse the response as an array of records and write them into a staged dataset with this name. Returns a compact summary instead of the raw body. Re-staging the same name replaces the previous dataset.",
+      ),
+    itemsPath: z
+      .string()
+      .optional()
+      .describe(
+        "Dot-path to the items array in the response JSON, e.g. 'items', 'results', or 'data'. Omit for auto-detection.",
       ),
+    pagination: PaginationSchema.describe(
+      "Pagination config for server-side fetchAll when stageAs is set. Supports cursor (nextCursorPath + cursorParam or cursorBodyPath), page, and offset modes.",
+    ),
     fetchAllPages: z
       .object({
         cursorPath: z
@@ -88,8 +164,15 @@ export default defineAction({
           ),
         cursorParam: z
           .string()
+          .optional()
+          .describe(
+            "Query parameter name to pass the cursor on subsequent pages, e.g. 'cursor' or 'page_token'. Use cursorBodyPath instead for APIs that put cursors in POST bodies.",
+          ),
+        cursorBodyPath: z
+          .string()
+          .optional()
           .describe(
-            "Query parameter name to pass the cursor on subsequent pages, e.g. 'cursor' or 'page_token'.",
+            "Dot-path in the JSON request body to set to the next cursor. Use for POST-body pagination.",
           ),
         itemsPath: z
           .string()
@@ -109,9 +192,39 @@ export default defineAction({
       })
       .optional()
       .describe(
-        "Enable cursor-based pagination. After each response, reads cursorPath from the JSON body and re-issues the request with cursorParam set, accumulating items from itemsPath (or whole bodies) until cursor is empty or maxPages is reached. Combine with saveToFile to write the full dataset to a workspace file.",
+        "Enable cursor-based pagination. After each response, reads cursorPath from the JSON body and re-issues the request with cursorParam or cursorBodyPath set, accumulating items from itemsPath (or whole bodies) until cursor is empty or maxPages is reached. Combine with saveToFile to write the full dataset to a workspace file.",
       ),
   }),
   http: false,
-  run: async (args) => executeProviderApiRequest(args),
+  run: async (args) => {
+    if (args.stageAs) {
+      const ctx = getCredentialContext();
+      if (!ctx) {
+        throw new Error("No authenticated context for provider API staging.");
+      }
+      return stagingExecuteRequest(
+        {
+          provider: args.provider,
+          method: args.method,
+          path: args.path,
+          query: args.query,
+          headers: args.headers,
+          body: args.body,
+          auth: args.auth,
+          connectionId: args.connectionId,
+          accountId: args.accountId,
+          timeoutMs: args.timeoutMs,
+          maxBytes: args.maxBytes,
+          stageAs: args.stageAs,
+          itemsPath: args.itemsPath,
+          pagination: args.pagination,
+        },
+        (reqArgs) => executeProviderApiRequest(reqArgs),
+        { appId: DISPATCH_APP_ID, ownerEmail: ctx.userEmail },
+      );
+    }
+    return executeProviderApiRequest(
+      args as unknown as Parameters<typeof executeProviderApiRequest>[0],
+    );
+  },
 });

package/src/actions/query-staged-dataset.ts

@@ -0,0 +1,125 @@
+import { defineAction } from "@agent-native/core";
+import { runAggregateQuery } from "@agent-native/core/provider-api/staged-datasets-aggregate";
+import {
+  getStagedDatasetMeta,
+  getStagedDatasetRows,
+} from "@agent-native/core/provider-api/staged-datasets-store";
+import { getCredentialContext } from "@agent-native/core/server/request-context";
+import { z } from "zod";
+import { DISPATCH_APP_ID } from "../server/lib/provider-api.js";
+
+const WhereSchema = z.object({
+  column: z.string().min(1),
+  op: z.enum([
+    "equals",
+    "not_equals",
+    "contains",
+    "not_contains",
+    "gt",
+    "gte",
+    "lt",
+    "lte",
+    "exists",
+    "not_exists",
+  ]),
+  value: z.unknown().optional(),
+});
+
+const AggregateFieldSchema = z.object({
+  column: z.string().min(1).describe("Column to aggregate."),
+  op: z
+    .enum(["sum", "avg", "count", "min", "max", "count_distinct"])
+    .describe("Aggregation function."),
+  as: z
+    .string()
+    .optional()
+    .describe("Output column name. Default: {op}_{column}."),
+});
+
+export default defineAction({
+  description:
+    "Run a filter/aggregate/project query over a staged dataset previously written by provider-api-request (stageAs). Use after staging provider records, messages, documents, issues, events, or search results to count, group, filter, or project rows without re-fetching provider APIs.",
+  schema: z.object({
+    datasetId: z
+      .string()
+      .min(1)
+      .describe(
+        "Dataset id from provider-api-request stageAs result, or from list-staged-datasets.",
+      ),
+    where: z
+      .array(WhereSchema)
+      .optional()
+      .describe(
+        "Row-level filters (AND). Ops: equals, not_equals, contains, not_contains, gt, gte, lt, lte, exists, not_exists.",
+      ),
+    groupBy: z
+      .array(z.string().min(1))
+      .optional()
+      .describe(
+        "Column(s) to group by. Omit for a single aggregate over all rows.",
+      ),
+    aggregate: z
+      .array(AggregateFieldSchema)
+      .optional()
+      .describe(
+        "Aggregation operations. When set, non-group columns are aggregated. Omit to return raw rows.",
+      ),
+    select: z
+      .array(z.string().min(1))
+      .optional()
+      .describe("Column projection when aggregate is empty."),
+    orderBy: z.string().optional().describe("Sort output by this column."),
+    orderDir: z
+      .enum(["asc", "desc"])
+      .optional()
+      .describe("Sort direction (default asc)."),
+    limit: z.coerce
+      .number()
+      .int()
+      .min(1)
+      .max(10_000)
+      .optional()
+      .describe("Maximum rows to return (default all, max 10000)."),
+  }),
+  http: false,
+  readOnly: true,
+  run: async (args) => {
+    const ctx = getCredentialContext();
+    if (!ctx) {
+      throw new Error("No authenticated context for query-staged-dataset.");
+    }
+
+    const meta = await getStagedDatasetMeta({
+      id: args.datasetId,
+      appId: DISPATCH_APP_ID,
+      ownerEmail: ctx.userEmail,
+    });
+    if (!meta) {
+      throw new Error(
+        `Dataset ${args.datasetId} not found (or belongs to a different owner/app).`,
+      );
+    }
+
+    const rows = await getStagedDatasetRows({
+      id: args.datasetId,
+      appId: DISPATCH_APP_ID,
+      ownerEmail: ctx.userEmail,
+    });
+
+    const result = runAggregateQuery(rows, {
+      where: args.where,
+      groupBy: args.groupBy,
+      aggregate: args.aggregate,
+      select: args.select,
+      orderBy: args.orderBy,
+      orderDir: args.orderDir,
+      limit: args.limit,
+    });
+
+    return {
+      dataset: { id: meta.id, name: meta.name, totalRows: meta.rowCount },
+      rowCount: result.length,
+      rows: result,
+    };
+  },
+});

package/src/actions/scaffold-workspace-app.spec.ts

@@ -0,0 +1,33 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const mocks = vi.hoisted(() => ({
+  scaffoldWorkspaceAppFromTemplate: vi.fn(),
+}));
+
+vi.mock("../server/lib/app-creation-store.js", () => ({
+  scaffoldWorkspaceAppFromTemplate: mocks.scaffoldWorkspaceAppFromTemplate,
+}));
+
+import action from "./scaffold-workspace-app.js";
+
+describe("scaffold-workspace-app action", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it("surfaces scaffold failures as user-facing action errors", async () => {
+    mocks.scaffoldWorkspaceAppFromTemplate.mockRejectedValueOnce(
+      new Error(
+        "Scaffolding from Dispatch is only available in local development.",
+      ),
+    );
+
+    await expect(
+      action.run({ template: "brain", appId: null }),
+    ).rejects.toMatchObject({
+      message:
+        "Scaffolding from Dispatch is only available in local development.",
+      statusCode: 400,
+    });
+  });
+});

package/src/actions/scaffold-workspace-app.ts

@@ -3,6 +3,16 @@ import { getWorkspaceAppIdValidationError } from "@agent-native/core/shared";
 import { z } from "zod";
 import { scaffoldWorkspaceAppFromTemplate } from "../server/lib/app-creation-store.js";
 
+function userFacingActionError(err: unknown): Error & { statusCode: number } {
+  const message =
+    err instanceof Error && err.message ? err.message : String(err);
+  const error = new Error(
+    message || "Could not scaffold workspace app.",
+  ) as Error & { statusCode: number };
+  error.statusCode = 400;
+  return error;
+}
+
 export default defineAction({
   description:
     "Scaffold a first-party template (mail, calendar, slides, etc.) into apps/<id>/ in the current workspace. Local-dev only — runs `agent-native add-app` as a subprocess. The workspace gateway picks the new app up automatically and serves it at /<id>. For natural-language app creation, call start-workspace-app-creation instead.",
@@ -26,9 +36,14 @@ export default defineAction({
         "Optional override for the apps/<id>/ directory name; defaults to the template name",
       ),
   }),
-  run: async (input) =>
-    scaffoldWorkspaceAppFromTemplate({
-      template: input.template,
-      appId: input.appId ?? null,
-    }),
+  run: async (input) => {
+    try {
+      return await scaffoldWorkspaceAppFromTemplate({
+        template: input.template,
+        appId: input.appId ?? null,
+      });
+    } catch (err) {
+      throw userFacingActionError(err);
+    }
+  },
 });

package/src/server/lib/app-creation-store.spec.ts

@@ -362,4 +362,17 @@ describe("listWorkspaceApps", () => {
       expect.arrayContaining(["brain", "assets"]),
     );
   });
+
+  it("hides local scaffold templates in hosted runtimes", async () => {
+    stubNoPendingContext();
+    vi.stubEnv("NETLIFY", "1");
+    stubManifest([{ id: "dispatch", name: "Dispatch", path: "/dispatch" }]);
+
+    const templates = await runWithRequestContext(
+      { userEmail: "dev@example.test" },
+      () => listAvailableWorkspaceTemplates(),
+    );
+
+    expect(templates).toEqual([]);
+  });
 });

package/src/server/lib/app-creation-store.ts

@@ -1364,6 +1364,8 @@ const ADDABLE_TEMPLATES: AvailableWorkspaceTemplate[] = [
 export async function listAvailableWorkspaceTemplates(): Promise<
   AvailableWorkspaceTemplate[]
 > {
+  if (!isLocalAppCreationRuntime()) return [];
+
   const installed = new Set(
     (await listWorkspaceApps({ includeArchived: true })).map((app) => app.id),
   );

package/src/server/lib/provider-api.ts

@@ -8,6 +8,7 @@ import {
 } from "@agent-native/core/provider-api";
 import { getCredentialContext } from "@agent-native/core/server";
 
+export const DISPATCH_APP_ID = "dispatch";
 export const DISPATCH_PROVIDER_API_IDS = PROVIDER_API_IDS;
 export type DispatchProviderApiId = ProviderApiId;
 export type { ProviderApiMethod, ProviderApiRequestArgs };
@@ -23,7 +24,7 @@ function requireCtx(action: string) {
 }
 
 const runtime = createProviderApiRuntime({
-  appId: "dispatch",
+  appId: DISPATCH_APP_ID,
   localCredentialSource: "dispatch_local",
   getCredentialContext: () => requireCtx("requests"),
   getCustomProviders: async () => {

package/src/server/plugins/agent-chat.ts

@@ -15,6 +15,7 @@ export default createAgentChatPlugin({
   // a build-time-generated `.generated/actions-registry.ts` (the latter is a
   // template-only construct that the Vite plugin emits next to actions/).
   actions: dispatchActions,
+  codeExecution: { production: "sandboxed" },
   systemPrompt: `You are the central dispatch for this workspace.
 
 Default posture:
@@ -33,6 +34,7 @@ Use the standard workspace primitives:
 - If the starter template is used, treat it as scaffolding only: the finished app must be branded as the requested app with its own home screen/navigation/package metadata/manifest, and must not leave visible "Starter", "Blank app", or "New app" UI behind.
 - Treat first-party apps such as Mail, Calendar, Analytics, Brain, Assets, and Dispatch as existing hosted/connected neighbors available through links and A2A/default connected agents. Do not create wrapper apps, child apps, nested routes, or cloned template copies just to give a new app access to them; build only the genuinely new workflow and delegate cross-app work to those existing apps.
 - Integration grants are not provider capability limits. For ad hoc provider inspection, querying, reporting, or troubleshooting, call provider-api-catalog/provider-api-docs, then provider-api-request against the provider's real HTTP API. Use connectionId for a specific shared grant and accountId for a specific OAuth account. Never expose secret values or silently widen app access while doing this.
+- For broad provider searches, joins, classification, corpus counts, or absence claims, fetch every relevant page or an explicitly bounded cohort, stage/save large responses with stageAs/saveToFile/fetchAllPages, and reduce them with query-staged-dataset or run-code. Report source, filters, row counts, pagination, truncation, failed pages, and uncovered gaps.
 
 When a user asks for something like a digest, reminder, routing rule, or saved behavior:
 - First decide whether it should be a resource, a recurring job, a destination, or a delegated task.