@agent-native/dispatch 0.11.4 → 0.11.6

package/README.md

@@ -1,33 +1,8 @@
 # Agent-Native
 
-### Open-source framework for agentic applications you own.
-
-Don't choose between rich user interfaces and autonomous agents. Every Agent-Native app is both.
-
-## Agents and UIs — Fully Connected
-
-The agent and the UI are equal citizens of the same system. Every action works both ways — click it or ask for it.
-
-![Agents and UIs fully connected](https://cdn.builder.io/api/v1/file/assets%2FYJIGb4i01jvw0SRdL5Bt%2Fadc1e9e9368e4a8cb1b4dbb5aae5aaa2)
-
-- **Everything syncs** — Agent and UI share one database and one state. Changes from either side show up instantly on the other.
-- **Real-time multiplayer** — Humans and agents collaborate in the same document simultaneously: CRDT merging, live presence (cursors, selection rings, who's on which slide), and the agent as a first-class peer editor. Works on any SQL database and any host, including serverless.
-- **Context-aware** — The agent knows what you're looking at. Select text, hit Cmd+I, and tell it what to do.
-- **Per-user workspace** — Skills, memory, instructions, sub-agents, and MCP servers — SQL-backed, customizable per user. Claude-Code-level flexibility, SaaS-grade economics.
-- **Agents call agents** — Tag another agent from any app. They discover each other over A2A and take action across your stack.
-- **Reusable integrations** — Connect a provider once in Dispatch, keep secret values in the vault, then grant apps like Brain, Analytics, Mail, and Dispatch access to the shared account metadata and credential refs.
-- **Three shapes** — Build the same agent as a headless API, a rich chat experience, or a full application where agent and UI stay in sync.
-- **Apps that improve themselves** — Your apps get better on their own. The agent can add features, fix bugs, and refine the UI over time.
-- **Any database, any host** — Any SQL database Drizzle supports. Any hosting target Nitro supports. No lock-in.
-- **Bring the agent surface you need** — MCP-compatible hosts can call your apps, coding agents can install skills, native chat renders reusable app outputs, and BYO agent runtimes can stream into the Agent-Native chat shell.
-
 ## The framework for agent-native apps
 
-Agent-Native is an open-source framework for building robust agents that can act inside real apps, not just chat next to them.
-
-It gives you primitives for product-grade agentic software: shared actions, SQL-backed state, identity, tools, skills, jobs, observability, and UI surfaces that all work together.
-
-Backend agnostic: bring your own database, hosting provider, model stack, and app code.
+Agent-Native is an open-source framework for building robust agents that act inside real apps, not just chat next to them. It gives you primitives for product-grade agentic software: shared actions, SQL-backed state, identity, tools, skills, jobs, observability, and UI surfaces that all work together. Bring your own database, hosting provider, model stack, and app code.
 
 ```ts
 // One action powers UI, agent, HTTP, MCP, A2A, and CLI.
@@ -42,58 +17,51 @@ export default defineAction({
 });
 ```
 
-- **Actions** — Define work once. Use it from UI, agent, API, MCP, A2A, and CLI.
-- **Agent runtime** — Chat, tools, skills, memory, jobs, observability, and handoffs ship together.
-- **Backend agnostic** — Plug in any Drizzle-supported SQL database and Nitro-compatible host.
+- **Actions**: Define work once. Use it from UI, agent, API, MCP, A2A, and CLI.
+- **Agent runtime**: Chat, tools, skills, memory, jobs, observability, and handoffs ship together.
+- **Backend agnostic**: Plug in any Drizzle-supported SQL database and Nitro-compatible host.
 
-## One agent, three product shapes
-
-Agent-Native primitives let you choose how much UI to put around an agent without rebuilding the agent contract:
-
-| Shape         | What you ship                                                                                             | Same primitives underneath                                                  |
-| ------------- | --------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------- |
-| **Headless**  | Call the agent and actions from code, CLI, HTTP, MCP, or A2A.                                             | `defineAction`, auth, skills, memory, jobs, observability                   |
-| **Rich chat** | A standalone or embedded chat with native tables, charts, approvals, setup flows, and tool results.       | Shared chat runtime, BYO runtime adapters, action-declared native renderers |
-| **Whole app** | A full SaaS/product UI where chat can start central, move to the sidebar, and stay synced with app state. | SQL state, actions, context awareness, deep links, live sync                |
+## Templates
 
-Protocols come with the framework instead of becoming separate integrations per feature. Today that means A2A, MCP, MCP Apps, standard remote MCP OAuth, MCP clients, HTTP/CLI action calls, native chat widgets, `AgentChatRuntime` adapters, standard OpenAI, AG-UI, Claude Agent SDK, and Vercel AI SDK chat runtime connectors, and deep links all hang off the same action surface. ACP is best understood as the coding-agent/editor interoperability protocol, not the general BYO app-chat runtime.
+Start with a full featured template. Each one is a complete, 100% free and open-source SaaS app: cloneable, not scaffolded, except you own the code and can customize everything.
 
-For the full decision guide — headless, rich chat on the built-in agent, rich chat on your own agent, embedded sidecar, or full app — see [Agent Surfaces](https://agent-native.com/docs/agent-surfaces).
+<table>
+<tr>
+<td width="33%" align="center" valign="top">
 
-To connect Claude, ChatGPT, Codex, Cursor, OpenCode, GitHub Copilot / VS Code, or another MCP host to your hosted app, see the [External Agents guide](https://agent-native.com/docs/external-agents).
+**Clips**
 
-## Try it with a skill
+<a href="https://agent-native.com/templates/clips"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F189ebd9b2f2b4f0ead3b33138d4e4c10?format=webp&width=800" alt="Clips template" width="100%" /></a>
 
-Don't want to scaffold a whole app yet? Add visual planning and PR recaps to Claude Code, Codex, Cursor, Pi, OpenCode, GitHub Copilot / VS Code, and similar agents with one command:
+**Agent-Native Loom + Jam**
 
-```bash
-npx @agent-native/core@latest skills add visual-plan
-```
+Record your screen with auto-transcripts and captured browser debug logs, share a link, and let an agent read the transcript, see timestamped frames, and fix the bug.
 
-You get two slash commands that upgrade how your agent plans and reports its work:
+</td>
+<td width="33%" align="center" valign="top">
 
-- **`/visual-plan`** — before the agent writes code, it opens a structured, reviewable plan document instead of a wall of text: inline diagrams, UI wireframes and prototypes, file-by-file implementation maps, and annotations you can comment on and approve.
-- **`/visual-recap`** — after changes land, it turns a PR or git diff into a high-altitude visual recap: schema, API, and file changes rendered as grounded before/after blocks with a shareable review link, instead of scrolling a raw diff.
+**Plans**
 
-See the **[Skills Guide](https://agent-native.com/docs/skills-guide#app-backed-skills)** for more skills and local installs.
+<a href="https://agent-native.com/templates/plan"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2Fb6f4213ac7cc42eeb10c12e8ccda8936?format=webp&width=800" alt="Plans template" width="100%" /></a>
 
-## Templates
+**Visual plan mode for coding agents**
 
-Start with a full featured template. Each one is a complete, 100% free and open-source SaaS app — cloneable, not scaffolded — except you own the code and can customize everything.
+Install `/visual-plan` and `/visual-recap` so your coding agent can plan before it builds and recap changes after they land. High-level code reviews with diagrams, wireframes, annotations, and review links.
 
-<table>
-<tr>
+</td>
 <td width="33%" align="center" valign="top">
 
-**Calendar**
+**Design**
 
-<a href="https://agent-native.com/templates/calendar"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2Ffb6c3b483ca24ab3b6c3a758aeceef4c?format=webp&width=800" alt="Calendar template" width="100%" /></a>
+<a href="https://agent-native.com/templates/design"><img src="https://cdn.builder.io/api/v1/image/assets%2F348da13fcd8b414c87de9066196f7266%2F961bedb713a94463b834c1f2f4643bcf?format=webp&width=800" alt="Design template" width="100%" /></a>
 
-**Agent-Native Google Calendar, Calendly**
+**Agent-Native design prototyping**
 
-Manage events, sync with Google Calendar, and share a public booking page with AI scheduling.
+Generate interactive HTML prototypes, compare variants, refine controls, and export the result.
 
 </td>
+</tr>
+<tr>
 <td width="33%" align="center" valign="top">
 
 **Content**
@@ -107,19 +75,6 @@ Edit local Markdown/MDX files, generate rich interactive custom blocks, and draf
 </td>
 <td width="33%" align="center" valign="top">
 
-**Plans**
-
-<a href="https://agent-native.com/templates/plan"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2Fb6f4213ac7cc42eeb10c12e8ccda8936?format=webp&width=800" alt="Plans template" width="100%" /></a>
-
-**Visual plan mode for coding agents**
-
-Install `/visual-plan` and `/visual-recap` so your coding agent can plan before it builds and recap changes after they land — high-level code reviews with diagrams, wireframes, annotations, and review links.
-
-</td>
-</tr>
-<tr>
-<td width="33%" align="center" valign="top">
-
 **Slides**
 
 <a href="https://agent-native.com/templates/slides"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F2c09b451d40c4a74a89a38d69170c2d8?format=webp&width=800" alt="Slides template" width="100%" /></a>
@@ -137,79 +92,61 @@ Generate and edit React-based presentations via prompt or point-and-click.
 
 **Agent-Native Amplitude, Mixpanel**
 
-Connect analytics data sources, prompt for real charts, and build reusable dashboards. Shared workspace connections can provide provider credentials, while Analytics still owns metrics, source-of-truth choices, and saved analyses.
-
-</td>
-<td width="33%" align="center" valign="top">
-
-**Clips**
-
-<a href="https://agent-native.com/templates/clips"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F678be5a501a14ab8a508e5f7bc92c468?format=webp&width=800" alt="Clips template" width="100%" /></a>
-
-**Agent-Native Loom**
-
-Record your screen with auto-transcripts, shareable links, and an agent that summarizes, captions, and edits clips on demand.
+Connect analytics data sources, prompt for real charts, and build reusable dashboards.
 
 </td>
 </tr>
 </table>
 
-Every template is a complete cloneable SaaS — fork it, customize it with the agent, own it. Try them with example data before connecting your own sources.
-
 View the full template gallery at **[agent-native.com/templates](https://agent-native.com/templates)**.
 
-## Quick Start
+## Agents and UIs, Fully Connected
 
-One command to fork a template and start building locally.
+The agent and the UI are equal citizens of one system. Every action works both ways: click it or ask for it.
 
-```bash
-npx @agent-native/core@latest create my-platform
-cd my-platform
-pnpm install
-pnpm dev
-```
+![Agents and UIs fully connected](https://cdn.builder.io/api/v1/file/assets%2FYJIGb4i01jvw0SRdL5Bt%2Fadc1e9e9368e4a8cb1b4dbb5aae5aaa2)
 
-The CLI shows a multi-select picker so you can include as many templates as you want in one workspace. Pick Mail + Calendar + Forms and you get all three apps wired up and sharing auth in one go. Or browse the **[template gallery](https://agent-native.com/templates)** for live demos.
+- **Everything syncs**: One database, one state. Changes from either side show up instantly on the other.
+- **Real-time multiplayer**: Humans and agents edit the same document together, with the agent as a first-class peer.
+- **Context-aware**: The agent knows what you're looking at. Select text, hit Cmd+I, and tell it what to do.
+- **Agents call agents**: Tag another agent from any app and they coordinate over A2A.
+- **Self-improving**: The agent can add features, fix bugs, and refine the UI over time.
 
-Want a single app, no monorepo? Use `--standalone`:
+## Try it with a skill
+
+Don't want to scaffold a whole app yet? Add visual planning and PR recaps to Claude Code, Codex, Cursor, Pi, OpenCode, GitHub Copilot / VS Code, and similar agents with one command:
 
 ```bash
-npx @agent-native/core@latest create my-app --standalone --template mail
+npx @agent-native/core@latest skills add visual-plan
 ```
 
-## Workspaces (Monorepo)
+![Visual plan and recap in action](https://raw.githubusercontent.com/builderio/skills/main/media/visual-recap.gif)
 
-A workspace is the default shape of an agent-native project. Every app sits under `apps/`, and `packages/shared/` is available for the small amount of code, instructions, skills, or branding that should truly apply to every app.
+You get two slash commands:
 
-```
-my-platform/
-├── package.json                   # declares `agent-native.workspaceCore`
-├── pnpm-workspace.yaml
-├── .env                           # shared secrets: ANTHROPIC_API_KEY, BUILDER_PRIVATE_KEY, A2A_SECRET, ...
-├── packages/
-│   └── shared/                    # optional shared custom code
-└── apps/
-    ├── mail/
-    ├── calendar/
-    └── forms/
-```
+- **`/visual-plan`**: before the agent writes code, it opens a structured, reviewable plan with inline diagrams, UI wireframes, file-by-file implementation maps, and annotations you can comment on and approve.
+- **`/visual-recap`**: after changes land, it turns a PR or git diff into a high-altitude visual recap with a shareable review link instead of a raw diff.
 
-Add another app later:
+See the **[Skills Guide](https://agent-native.com/docs/skills-guide#app-backed-skills)** for more.
 
-```bash
-npx @agent-native/core@latest add-app notes --template content
-```
+## Quick Start
 
-Deploy every app behind one origin:
+One command to start a new project locally.
 
 ```bash
-npx @agent-native/core@latest deploy
-# https://your-agents.com/mail/*       → mail
-# https://your-agents.com/calendar/*   → calendar
-# https://your-agents.com/forms/*      → forms
+npx @agent-native/core@latest create my-app
+cd my-app
+pnpm install
+pnpm dev
 ```
 
-Same-origin deploy means a **shared login session** across every app and **zero-config cross-app A2A** — tag `@mail` from the calendar's agent chat and it just works (no JWT signing, no CORS). Full details at **[agent-native.com/docs/multi-app-workspace](https://agent-native.com/docs/multi-app-workspace)**.
+`create` first asks how you want to start:
+
+- **Full template(s)**: clone one or more complete apps into a workspace. Pick Mail + Calendar + Forms and you get all three wired up and sharing auth.
+- **Chat**: a single app with a minimal chat UI and the browser shell already wired, the simplest way to get a UI.
+- **Headless**: a single action-first app with no UI shell. The CLI walks you through calling your first action and agent, and you can add a UI later.
+
+Prefer flags? `create my-app --template mail`, `--headless`, or `--standalone` skip the prompt.
 
 ## The Best of Both Worlds
 

package/dist/actions/create-vault-secret.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-vault-secret.d.ts","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAIA,wBAiBG"}
+{"version":3,"file":"create-vault-secret.d.ts","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAIA,wBAsBG"}

package/dist/actions/create-vault-secret.js

@@ -16,6 +16,11 @@ export default defineAction({
             .describe("Provider grouping tag, e.g. google, sendgrid, slack"),
         description: z.string().optional().describe("Optional description"),
     }),
+    // This action's whole purpose is to carry a secret `value`. The vault owns
+    // secret storage; the audit log must record THAT a secret was created — never
+    // the value. Opt out of input capture so the trail can't become a second
+    // durable credential store.
+    audit: { recordInputs: false },
     run: async (args) => createSecret(args),
 });
 //# sourceMappingURL=create-vault-secret.js.map

package/dist/actions/create-vault-secret.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-vault-secret.js","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,8LAA8L;IAChM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACxE,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,qDAAqD,CAAC;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KACpE,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;CACxC,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { createSecret } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Store a secret in the workspace vault. Admin only. Existing credential keys are updated. By default, saved vault keys are available to every workspace app; manual mode uses per-app grants.\",\n  schema: z.object({\n    credentialKey: z\n      .string()\n      .min(1)\n      .describe(\"Environment variable name, e.g. GOOGLE_CLIENT_ID\"),\n    value: z.string().min(1).describe(\"The secret value\"),\n    name: z.string().min(1).describe(\"Human-readable label for this secret\"),\n    provider: z\n      .string()\n      .optional()\n      .describe(\"Provider grouping tag, e.g. google, sendgrid, slack\"),\n    description: z.string().optional().describe(\"Optional description\"),\n  }),\n  run: async (args) => createSecret(args),\n});\n"]}
+{"version":3,"file":"create-vault-secret.js","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,8LAA8L;IAChM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACxE,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,qDAAqD,CAAC;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KACpE,CAAC;IACF,2EAA2E;IAC3E,8EAA8E;IAC9E,yEAAyE;IACzE,4BAA4B;IAC5B,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;CACxC,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { createSecret } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Store a secret in the workspace vault. Admin only. Existing credential keys are updated. By default, saved vault keys are available to every workspace app; manual mode uses per-app grants.\",\n  schema: z.object({\n    credentialKey: z\n      .string()\n      .min(1)\n      .describe(\"Environment variable name, e.g. GOOGLE_CLIENT_ID\"),\n    value: z.string().min(1).describe(\"The secret value\"),\n    name: z.string().min(1).describe(\"Human-readable label for this secret\"),\n    provider: z\n      .string()\n      .optional()\n      .describe(\"Provider grouping tag, e.g. google, sendgrid, slack\"),\n    description: z.string().optional().describe(\"Optional description\"),\n  }),\n  // This action's whole purpose is to carry a secret `value`. The vault owns\n  // secret storage; the audit log must record THAT a secret was created — never\n  // the value. Opt out of input capture so the trail can't become a second\n  // durable credential store.\n  audit: { recordInputs: false },\n  run: async (args) => createSecret(args),\n});\n"]}

package/dist/actions/update-vault-secret.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-vault-secret.d.ts","sourceRoot":"","sources":["../../src/actions/update-vault-secret.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAIA,wBAwCG"}
+{"version":3,"file":"update-vault-secret.d.ts","sourceRoot":"","sources":["../../src/actions/update-vault-secret.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAIA,wBA2CG"}

package/dist/actions/update-vault-secret.js

@@ -35,6 +35,9 @@ export default defineAction({
         name !== undefined ||
         provider !== undefined ||
         description !== undefined, "At least one secret field must be updated"),
+    // Carries a secret `value`. Record THAT the secret changed, never the value —
+    // keep the audit trail from becoming a second credential store.
+    audit: { recordInputs: false },
     run: async (args) => updateSecret(args.id, args),
 });
 //# sourceMappingURL=update-vault-secret.js.map

package/dist/actions/update-vault-secret.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-vault-secret.js","sourceRoot":"","sources":["../../src/actions/update-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3C,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAChE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,sCAAsC,CAAC;QACnD,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,qDAAqD,CAAC;QAClE,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,sBAAsB,CAAC;KACpC,CAAC;SACD,MAAM,CACL,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,CACxD,aAAa,KAAK,SAAS;QAC3B,KAAK,KAAK,SAAS;QACnB,IAAI,KAAK,SAAS;QAClB,QAAQ,KAAK,SAAS;QACtB,WAAW,KAAK,SAAS,EAC3B,2CAA2C,CAC5C;IACH,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;CACjD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { updateSecret } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Update an existing vault secret's label, credential key, value, provider, or description. Admin only.\",\n  schema: z\n    .object({\n      id: z.string().min(1).describe(\"Secret ID\"),\n      credentialKey: z\n        .string()\n        .trim()\n        .min(1)\n        .optional()\n        .describe(\"Environment variable name, e.g. GOOGLE_CLIENT_ID\"),\n      value: z.string().min(1).optional().describe(\"New secret value\"),\n      name: z\n        .string()\n        .trim()\n        .min(1)\n        .optional()\n        .describe(\"Human-readable label for this secret\"),\n      provider: z\n        .string()\n        .nullable()\n        .optional()\n        .describe(\"Provider grouping tag, e.g. google, sendgrid, slack\"),\n      description: z\n        .string()\n        .nullable()\n        .optional()\n        .describe(\"Optional description\"),\n    })\n    .refine(\n      ({ credentialKey, value, name, provider, description }) =>\n        credentialKey !== undefined ||\n        value !== undefined ||\n        name !== undefined ||\n        provider !== undefined ||\n        description !== undefined,\n      \"At least one secret field must be updated\",\n    ),\n  run: async (args) => updateSecret(args.id, args),\n});\n"]}
+{"version":3,"file":"update-vault-secret.js","sourceRoot":"","sources":["../../src/actions/update-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3C,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAChE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,sCAAsC,CAAC;QACnD,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,qDAAqD,CAAC;QAClE,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,sBAAsB,CAAC;KACpC,CAAC;SACD,MAAM,CACL,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,CACxD,aAAa,KAAK,SAAS;QAC3B,KAAK,KAAK,SAAS;QACnB,IAAI,KAAK,SAAS;QAClB,QAAQ,KAAK,SAAS;QACtB,WAAW,KAAK,SAAS,EAC3B,2CAA2C,CAC5C;IACH,8EAA8E;IAC9E,gEAAgE;IAChE,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;CACjD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { updateSecret } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Update an existing vault secret's label, credential key, value, provider, or description. Admin only.\",\n  schema: z\n    .object({\n      id: z.string().min(1).describe(\"Secret ID\"),\n      credentialKey: z\n        .string()\n        .trim()\n        .min(1)\n        .optional()\n        .describe(\"Environment variable name, e.g. GOOGLE_CLIENT_ID\"),\n      value: z.string().min(1).optional().describe(\"New secret value\"),\n      name: z\n        .string()\n        .trim()\n        .min(1)\n        .optional()\n        .describe(\"Human-readable label for this secret\"),\n      provider: z\n        .string()\n        .nullable()\n        .optional()\n        .describe(\"Provider grouping tag, e.g. google, sendgrid, slack\"),\n      description: z\n        .string()\n        .nullable()\n        .optional()\n        .describe(\"Optional description\"),\n    })\n    .refine(\n      ({ credentialKey, value, name, provider, description }) =>\n        credentialKey !== undefined ||\n        value !== undefined ||\n        name !== undefined ||\n        provider !== undefined ||\n        description !== undefined,\n      \"At least one secret field must be updated\",\n    ),\n  // Carries a secret `value`. Record THAT the secret changed, never the value —\n  // keep the audit trail from becoming a second credential store.\n  audit: { recordInputs: false },\n  run: async (args) => updateSecret(args.id, args),\n});\n"]}

package/dist/routes/pages/_index.d.ts

@@ -3,10 +3,17 @@ export declare function meta(): ({
     title: string;
     name?: undefined;
     content?: undefined;
+    property?: undefined;
 } | {
     name: string;
     content: string;
     title?: undefined;
+    property?: undefined;
+} | {
+    property: string;
+    content: string;
+    title?: undefined;
+    name?: undefined;
 })[];
 export declare function loader({ request }: LoaderFunctionArgs): void;
 export declare function clientLoader({ request }: LoaderFunctionArgs): void;

package/dist/routes/pages/_index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_index.d.ts","sourceRoot":"","sources":["../../../src/routes/pages/_index.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAIjE,wBAAgB,IAAI;;;;;;;;KASnB;AAmBD,wBAAgB,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,kBAAkB,QAErD;AAED,wBAAgB,YAAY,CAAC,EAAE,OAAO,EAAE,EAAE,kBAAkB,QAE3D;AAED,wBAAgB,eAAe,4CAM9B;AAED,MAAM,CAAC,OAAO,UAAU,SAAS,SAEhC"}
+{"version":3,"file":"_index.d.ts","sourceRoot":"","sources":["../../../src/routes/pages/_index.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AASjE,wBAAgB,IAAI;;;;;;;;;;;;;;;KAanB;AAmBD,wBAAgB,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,kBAAkB,QAErD;AAED,wBAAgB,YAAY,CAAC,EAAE,OAAO,EAAE,EAAE,kBAAkB,QAE3D;AAED,wBAAgB,eAAe,4CAM9B;AAED,MAAM,CAAC,OAAO,UAAU,SAAS,SAEhC"}

package/dist/routes/pages/_index.js

@@ -2,13 +2,20 @@ import { jsx as _jsx } from "react/jsx-runtime";
 import { redirect } from "react-router";
 import { appPath } from "@agent-native/core/client";
 import { Spinner } from "../../components/ui/spinner.js";
+const SEO_TITLE = "Agent-Native Dispatch - Open Source workspace control plane for AI agents";
+const SEO_DESCRIPTION = "Open Source workspace control plane for AI agents to manage apps, secrets, approvals, messages, jobs, and cross-app delegation.";
 export function meta() {
     return [
-        { title: "Agent-Native Dispatch" },
+        { title: SEO_TITLE },
         {
             name: "description",
-            content: "Your AI agent manages secrets, orchestrates other agents, and routes messages across your workspace.",
+            content: SEO_DESCRIPTION,
         },
+        { property: "og:title", content: SEO_TITLE },
+        { property: "og:description", content: SEO_DESCRIPTION },
+        { name: "twitter:card", content: "summary" },
+        { name: "twitter:title", content: SEO_TITLE },
+        { name: "twitter:description", content: SEO_DESCRIPTION },
     ];
 }
 /**

package/dist/routes/pages/_index.js.map

@@ -1 +1 @@
-{"version":3,"file":"_index.js","sourceRoot":"","sources":["../../../src/routes/pages/_index.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAA2B,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD,MAAM,UAAU,IAAI;IAClB,OAAO;QACL,EAAE,KAAK,EAAE,uBAAuB,EAAE;QAClC;YACE,IAAI,EAAE,aAAa;YACnB,OAAO,EACL,sGAAsG;SACzG;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,WAAW,CAAC,OAAgB;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,OAAO,CAAC,YAAY,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,EAAE,OAAO,EAAsB;IACpD,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAE,OAAO,EAAsB;IAC1D,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,CACL,cAAK,SAAS,EAAC,kDAAkD,YAC/D,KAAC,OAAO,IAAC,SAAS,EAAC,QAAQ,GAAG,GAC1B,CACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,SAAS;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { redirect, type LoaderFunctionArgs } from \"react-router\";\nimport { appPath } from \"@agent-native/core/client\";\nimport { Spinner } from \"@/components/ui/spinner\";\n\nexport function meta() {\n  return [\n    { title: \"Agent-Native Dispatch\" },\n    {\n      name: \"description\",\n      content:\n        \"Your AI agent manages secrets, orchestrates other agents, and routes messages across your workspace.\",\n    },\n  ];\n}\n\n/**\n * Run the redirect on both the server and the client. A client-only\n * `<Navigate>` can drop during hydration (before the route tree is fully\n * attached), leaving the user stranded on `/` with a blank main area while\n * the layout chrome around it still renders. A `loader` redirect runs as\n * part of the server response and the navigation completes before the app\n * hydrates; `clientLoader` covers SPA-style navigations to `/`.\n *\n * We preserve `?` and `#` so deep-links like `?thread=<id>` from a Slack\n * \"Open thread\" button survive the bounce — `useThreadDeepLink` in\n * `root.tsx` reads them after the redirect lands and opens `/chat`.\n */\nfunction buildTarget(request: Request): string {\n  const url = new URL(request.url);\n  return appPath(`/overview${url.search}${url.hash}`);\n}\n\nexport function loader({ request }: LoaderFunctionArgs) {\n  throw redirect(buildTarget(request));\n}\n\nexport function clientLoader({ request }: LoaderFunctionArgs) {\n  throw redirect(buildTarget(request));\n}\n\nexport function HydrateFallback() {\n  return (\n    <div className=\"flex items-center justify-center h-screen w-full\">\n      <Spinner className=\"size-8\" />\n    </div>\n  );\n}\n\nexport default function IndexPage() {\n  return null;\n}\n"]}
+{"version":3,"file":"_index.js","sourceRoot":"","sources":["../../../src/routes/pages/_index.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAA2B,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD,MAAM,SAAS,GACb,2EAA2E,CAAC;AAC9E,MAAM,eAAe,GACnB,iIAAiI,CAAC;AAEpI,MAAM,UAAU,IAAI;IAClB,OAAO;QACL,EAAE,KAAK,EAAE,SAAS,EAAE;QACpB;YACE,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,eAAe;SACzB;QACD,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE;QAC5C,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE;QACxD,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE;QAC5C,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;QAC7C,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,eAAe,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,WAAW,CAAC,OAAgB;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,OAAO,CAAC,YAAY,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,EAAE,OAAO,EAAsB;IACpD,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAE,OAAO,EAAsB;IAC1D,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,CACL,cAAK,SAAS,EAAC,kDAAkD,YAC/D,KAAC,OAAO,IAAC,SAAS,EAAC,QAAQ,GAAG,GAC1B,CACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,SAAS;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { redirect, type LoaderFunctionArgs } from \"react-router\";\nimport { appPath } from \"@agent-native/core/client\";\nimport { Spinner } from \"@/components/ui/spinner\";\n\nconst SEO_TITLE =\n  \"Agent-Native Dispatch - Open Source workspace control plane for AI agents\";\nconst SEO_DESCRIPTION =\n  \"Open Source workspace control plane for AI agents to manage apps, secrets, approvals, messages, jobs, and cross-app delegation.\";\n\nexport function meta() {\n  return [\n    { title: SEO_TITLE },\n    {\n      name: \"description\",\n      content: SEO_DESCRIPTION,\n    },\n    { property: \"og:title\", content: SEO_TITLE },\n    { property: \"og:description\", content: SEO_DESCRIPTION },\n    { name: \"twitter:card\", content: \"summary\" },\n    { name: \"twitter:title\", content: SEO_TITLE },\n    { name: \"twitter:description\", content: SEO_DESCRIPTION },\n  ];\n}\n\n/**\n * Run the redirect on both the server and the client. A client-only\n * `<Navigate>` can drop during hydration (before the route tree is fully\n * attached), leaving the user stranded on `/` with a blank main area while\n * the layout chrome around it still renders. A `loader` redirect runs as\n * part of the server response and the navigation completes before the app\n * hydrates; `clientLoader` covers SPA-style navigations to `/`.\n *\n * We preserve `?` and `#` so deep-links like `?thread=<id>` from a Slack\n * \"Open thread\" button survive the bounce — `useThreadDeepLink` in\n * `root.tsx` reads them after the redirect lands and opens `/chat`.\n */\nfunction buildTarget(request: Request): string {\n  const url = new URL(request.url);\n  return appPath(`/overview${url.search}${url.hash}`);\n}\n\nexport function loader({ request }: LoaderFunctionArgs) {\n  throw redirect(buildTarget(request));\n}\n\nexport function clientLoader({ request }: LoaderFunctionArgs) {\n  throw redirect(buildTarget(request));\n}\n\nexport function HydrateFallback() {\n  return (\n    <div className=\"flex items-center justify-center h-screen w-full\">\n      <Spinner className=\"size-8\" />\n    </div>\n  );\n}\n\nexport default function IndexPage() {\n  return null;\n}\n"]}

package/dist/routes/pages/overview.d.ts

@@ -1,5 +1,18 @@
-export declare function meta(): {
+export declare function meta(): ({
     title: string;
-}[];
+    name?: undefined;
+    content?: undefined;
+    property?: undefined;
+} | {
+    name: string;
+    content: string;
+    title?: undefined;
+    property?: undefined;
+} | {
+    property: string;
+    content: string;
+    title?: undefined;
+    name?: undefined;
+})[];
 export default function OverviewRoute(): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=overview.d.ts.map

package/dist/routes/pages/overview.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"overview.d.ts","sourceRoot":"","sources":["../../../src/routes/pages/overview.tsx"],"names":[],"mappings":"AAEA,wBAAgB,IAAI;;IAEnB;AAED,MAAM,CAAC,OAAO,UAAU,aAAa,4CAEpC"}
+{"version":3,"file":"overview.d.ts","sourceRoot":"","sources":["../../../src/routes/pages/overview.tsx"],"names":[],"mappings":"AAOA,wBAAgB,IAAI;;;;;;;;;;;;;;;KAUnB;AAED,MAAM,CAAC,OAAO,UAAU,aAAa,4CAEpC"}

package/dist/routes/pages/overview.js

@@ -1,7 +1,17 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import { DispatchControlPlane } from "../../components/dispatch-control-plane.js";
+const SEO_TITLE = "Agent-Native Dispatch - Open Source workspace control plane for AI agents";
+const SEO_DESCRIPTION = "Open Source workspace control plane for AI agents to manage apps, secrets, approvals, messages, jobs, and cross-app delegation.";
 export function meta() {
-    return [{ title: "Overview — Dispatch" }];
+    return [
+        { title: SEO_TITLE },
+        { name: "description", content: SEO_DESCRIPTION },
+        { property: "og:title", content: SEO_TITLE },
+        { property: "og:description", content: SEO_DESCRIPTION },
+        { name: "twitter:card", content: "summary" },
+        { name: "twitter:title", content: SEO_TITLE },
+        { name: "twitter:description", content: SEO_DESCRIPTION },
+    ];
 }
 export default function OverviewRoute() {
     return _jsx(DispatchControlPlane, {});

package/dist/routes/pages/overview.js.map

@@ -1 +1 @@
-{"version":3,"file":"overview.js","sourceRoot":"","sources":["../../../src/routes/pages/overview.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,MAAM,UAAU,IAAI;IAClB,OAAO,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,aAAa;IACnC,OAAO,KAAC,oBAAoB,KAAG,CAAC;AAClC,CAAC","sourcesContent":["import { DispatchControlPlane } from \"@/components/dispatch-control-plane\";\n\nexport function meta() {\n  return [{ title: \"Overview — Dispatch\" }];\n}\n\nexport default function OverviewRoute() {\n  return <DispatchControlPlane />;\n}\n"]}
+{"version":3,"file":"overview.js","sourceRoot":"","sources":["../../../src/routes/pages/overview.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,MAAM,SAAS,GACb,2EAA2E,CAAC;AAC9E,MAAM,eAAe,GACnB,iIAAiI,CAAC;AAEpI,MAAM,UAAU,IAAI;IAClB,OAAO;QACL,EAAE,KAAK,EAAE,SAAS,EAAE;QACpB,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,EAAE;QACjD,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE;QAC5C,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE;QACxD,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE;QAC5C,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;QAC7C,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,eAAe,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,aAAa;IACnC,OAAO,KAAC,oBAAoB,KAAG,CAAC;AAClC,CAAC","sourcesContent":["import { DispatchControlPlane } from \"@/components/dispatch-control-plane\";\n\nconst SEO_TITLE =\n  \"Agent-Native Dispatch - Open Source workspace control plane for AI agents\";\nconst SEO_DESCRIPTION =\n  \"Open Source workspace control plane for AI agents to manage apps, secrets, approvals, messages, jobs, and cross-app delegation.\";\n\nexport function meta() {\n  return [\n    { title: SEO_TITLE },\n    { name: \"description\", content: SEO_DESCRIPTION },\n    { property: \"og:title\", content: SEO_TITLE },\n    { property: \"og:description\", content: SEO_DESCRIPTION },\n    { name: \"twitter:card\", content: \"summary\" },\n    { name: \"twitter:title\", content: SEO_TITLE },\n    { name: \"twitter:description\", content: SEO_DESCRIPTION },\n  ];\n}\n\nexport default function OverviewRoute() {\n  return <DispatchControlPlane />;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/dispatch",
-  "version": "0.11.4",
+  "version": "0.11.6",
   "type": "module",
   "description": "Dispatch — workspace control plane for agent-native apps. Vault, integrations, destinations, scheduled jobs, and cross-app delegation, shipped as a single drop-in package.",
   "license": "MIT",
@@ -100,7 +100,7 @@
     "typescript": "^6.0.3",
     "vite": "8.0.3",
     "vitest": "^4.1.5",
-    "@agent-native/core": "0.63.1"
+    "@agent-native/core": "0.72.0"
   },
   "scripts": {
     "build": "tsc && tsc-alias --resolve-full-paths",

package/src/actions/create-vault-secret.ts

@@ -18,5 +18,10 @@ export default defineAction({
       .describe("Provider grouping tag, e.g. google, sendgrid, slack"),
     description: z.string().optional().describe("Optional description"),
   }),
+  // This action's whole purpose is to carry a secret `value`. The vault owns
+  // secret storage; the audit log must record THAT a secret was created — never
+  // the value. Opt out of input capture so the trail can't become a second
+  // durable credential store.
+  audit: { recordInputs: false },
   run: async (args) => createSecret(args),
 });

package/src/actions/update-vault-secret.ts

@@ -41,5 +41,8 @@ export default defineAction({
         description !== undefined,
       "At least one secret field must be updated",
     ),
+  // Carries a secret `value`. Record THAT the secret changed, never the value —
+  // keep the audit trail from becoming a second credential store.
+  audit: { recordInputs: false },
   run: async (args) => updateSecret(args.id, args),
 });

package/src/routes/pages/_index.tsx

@@ -2,14 +2,23 @@ import { redirect, type LoaderFunctionArgs } from "react-router";
 import { appPath } from "@agent-native/core/client";
 import { Spinner } from "@/components/ui/spinner";
 
+const SEO_TITLE =
+  "Agent-Native Dispatch - Open Source workspace control plane for AI agents";
+const SEO_DESCRIPTION =
+  "Open Source workspace control plane for AI agents to manage apps, secrets, approvals, messages, jobs, and cross-app delegation.";
+
 export function meta() {
   return [
-    { title: "Agent-Native Dispatch" },
+    { title: SEO_TITLE },
     {
       name: "description",
-      content:
-        "Your AI agent manages secrets, orchestrates other agents, and routes messages across your workspace.",
+      content: SEO_DESCRIPTION,
     },
+    { property: "og:title", content: SEO_TITLE },
+    { property: "og:description", content: SEO_DESCRIPTION },
+    { name: "twitter:card", content: "summary" },
+    { name: "twitter:title", content: SEO_TITLE },
+    { name: "twitter:description", content: SEO_DESCRIPTION },
   ];
 }
 

package/src/routes/pages/overview.tsx

@@ -1,7 +1,20 @@
 import { DispatchControlPlane } from "@/components/dispatch-control-plane";
 
+const SEO_TITLE =
+  "Agent-Native Dispatch - Open Source workspace control plane for AI agents";
+const SEO_DESCRIPTION =
+  "Open Source workspace control plane for AI agents to manage apps, secrets, approvals, messages, jobs, and cross-app delegation.";
+
 export function meta() {
-  return [{ title: "Overview — Dispatch" }];
+  return [
+    { title: SEO_TITLE },
+    { name: "description", content: SEO_DESCRIPTION },
+    { property: "og:title", content: SEO_TITLE },
+    { property: "og:description", content: SEO_DESCRIPTION },
+    { name: "twitter:card", content: "summary" },
+    { name: "twitter:title", content: SEO_TITLE },
+    { name: "twitter:description", content: SEO_DESCRIPTION },
+  ];
 }
 
 export default function OverviewRoute() {