@agent-native/dispatch 0.14.2 → 0.14.4

package/README.md

@@ -1,140 +1,132 @@
-# Agent-Native
+# @agent-native/dispatch
+
+Workspace control plane for agent-native apps — vault, integrations,
+destinations, cross-app workspace resources, recurring "dream" report jobs,
+and cross-app delegation, shipped as a single drop-in package.
+
+Powers the `dispatch` template. Provides:
+
+- **Drizzle schemas** — destinations, identity links, link tokens, approval
+  requests, audit events, dream reports/proposals, vault secrets/grants/
+  requests/audit, workspace resources/grants
+- **Server layer** — `setupDispatch(config)` plus Nitro plugins for auth,
+  integrations, agent chat, DB, and core routes
+- **Actions** — ~90 `defineAction` modules (vault grants/requests, workspace
+  resource grants, destinations, dream jobs, provider-api catalog/docs/
+  request, connected-agent discovery, audit/approvals, platform messaging,
+  and more) consumed as agent tools + HTTP endpoints
+- **Routes** — a full React Router 7 `RouteConfig[]` (chat, overview, apps,
+  vault, integrations, agents, workspace, messaging, destinations,
+  identities, approvals, automations, audit, settings, dreams, extensions,
+  ...) to splat into a consumer's `app/routes.ts`
+- **React components** — `DispatchShell`, `Layout`/`NavContent`,
+  `CreateAppPopover`/`CreateAppFlow`, `AppKeysPopover`, plus a full
+  shadcn/ui-based `components/ui/*` primitive set
+- **Styles** — `dispatch.css` Tailwind layer
+
+## Install
 
-## The framework for agentic apps
-
-Agent-Native is an open-source framework for rapidly building robust applications with agents at their core.
-
-```ts
-// One action powers every app surface: UI, agent, HTTP, MCP, A2A, and CLI.
-export default defineAction({
-  schema: z.object({
-    emailId: z.string(),
-    body: z.string(),
-  }),
-  run: async ({ emailId, body }) => {
-    await db.insert(replies).values({ emailId, body });
-  },
-});
+```bash
+pnpm add @agent-native/dispatch
 ```
 
-- **[Actions](https://agent-native.com/docs/actions)**: Define work once. Use it from every app surface: UI, agent, HTTP, MCP, A2A, and CLI.
-- **[Agent runtime](https://agent-native.com/docs/agent-surfaces)**: Chat, tools, skills, memory, jobs, observability, and handoffs ship together.
-- **[Backend agnostic](https://agent-native.com/docs/database)**: Plug in any Drizzle-supported SQL database and Nitro-compatible host.
-- **[Toolkits](https://agent-native.com/docs/agent-native-toolkit)**: Reusable building blocks for collaboration, sharing, settings, teams, and observability.
-
-## Don't pick between apps or agents.
-
-Agent-native apps are both
-
-|                   | SaaS Tools         | Raw AI Agents           | Internal Tools             | Agent-Native App        |
-| ----------------- | ------------------ | ----------------------- | -------------------------- | ----------------------- |
-| **UI**            | Polished but rigid | None                    | Mixed quality              | Full UI, fork & go      |
-| **AI**            | Bolted on          | Powerful                | Shallowly connected        | Agent-first, integrated |
-| **Customization** | Can't              | Instructions and skills | Full, but high maintenance | Agent modifies the app  |
-| **Ownership**     | Rented             | Somewhat yours          | You own the code           | You own the code        |
-
-## Try an Agent-Native app
-
-Fork a working app and let the agent evolve it. **You can customize everything.**
-
-<table>
-<tr>
-<td width="33%" align="center" valign="top">
-
-**Clips**
-
-<a href="https://agent-native.com/templates/clips"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F189ebd9b2f2b4f0ead3b33138d4e4c10?format=webp&width=800" alt="Clips app" width="100%" /></a>
-
-**Agent-Native Loom**
-
-Record your screen with auto-transcripts and captured browser debug logs, share a link, and let an agent read the transcript, see timestamped frames, and fix the bug.
-
-</td>
-<td width="33%" align="center" valign="top">
-
-**Plans**
-
-<a href="https://agent-native.com/templates/plan"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2Fefc6a3ac908149fa92e2b9392c0bb372?format=webp&width=800" alt="Plans app" width="100%" /></a>
-
-**Visual plan mode for coding agents**
-
-Install `/visual-plan` and `/visual-recap` so your coding agent can plan before it builds and recap changes after they land. High-level code reviews with diagrams, wireframes, annotations, and review links.
-
-</td>
-<td width="33%" align="center" valign="top">
-
-**Design**
-
-<a href="https://agent-native.com/templates/design"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2Fe2c86908c2fa4f119ee4aa90b4823944?format=webp&width=800" alt="Design app" width="100%" /></a>
+Peer-depends on `@agent-native/core` (`>=0.8.0`), `react`/`react-dom`
+(`>=19.2.7`), and `react-router` (`>=8`).
 
-**Agent-Native Figma**
+## Compose
 
-Generate interactive HTML prototypes, compare variants, refine controls, and export the result.
+Template's `app/routes.ts`:
 
-</td>
-</tr>
-<tr>
-<td width="33%" align="center" valign="top">
-
-**Content**
-
-<a href="https://agent-native.com/templates/content"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F89bcfc6106304bfbaf8ec8a7ccd721eb?format=webp&width=800" alt="Content app" width="100%" /></a>
-
-**Agent-Native Notion/Obsidian**
-
-Edit local Markdown/MDX files, generate rich interactive custom blocks, and draft, rewrite, or publish with an agent.
-
-</td>
-<td width="33%" align="center" valign="top">
-
-**Analytics**
-
-<a href="https://agent-native.com/templates/analytics"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F4933a80cc3134d7e874631f688be828a?format=webp&width=800" alt="Analytics app" width="100%" /></a>
-
-**Agent-Native Amplitude, Fullstory**
-
-Connect analytics data sources, prompt for real charts, and build reusable dashboards.
-
-</td>
-<td width="33%" align="center" valign="top">
-
-**Chat**
+```ts
+import { type RouteConfig } from "@react-router/dev/routes";
+import { dispatchRoutes } from "@agent-native/dispatch/routes";
 
-<a href="https://agent-native.com/templates/chat"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F6b36dc596fca4799815fa34c31e1c406?format=webp&width=800" alt="Chat app" width="100%" /></a>
+export default [
+  ...localRoutes, // consumer's own routes win on collision
+  ...dispatchRoutes, // dispatch fills in everything else
+] satisfies RouteConfig;
+```
 
-**A minimal ChatGPT-style app for your own agent**
+Template's `server/plugins/*.ts` (each export lives in its own file so Nitro
+auto-loads it):
 
-Chat-first app scaffold with durable threads, actions, auth, live sync, and a clean path to add screens or plug in your own agent backend.
+```ts
+// server/plugins/setup-dispatch.ts
+import { setupDispatch } from "@agent-native/dispatch/server";
+export default setupDispatch({ auth: { googleOnly: true } });
 
-</td>
-</tr>
-</table>
+// server/plugins/auth.ts
+export { dispatchAuthPlugin as default } from "@agent-native/dispatch/server";
 
-View the full app gallery at **[agent-native.com/apps](https://agent-native.com/apps)**, or build from scratch with the **[framework guide](https://agent-native.com/docs/getting-started)**.
+// server/plugins/integrations.ts
+export { dispatchIntegrationsPlugin as default } from "@agent-native/dispatch/server";
 
-## Quick Start
+// server/plugins/agent-chat.ts
+export { dispatchAgentChatPlugin as default } from "@agent-native/dispatch/server";
 
-One command to start a new app locally.
+// server/plugins/db.ts
+export { dispatchDbPlugin as default } from "@agent-native/dispatch/server";
 
-```bash
-npx @agent-native/core@latest create my-app
-cd my-app
-pnpm install
-pnpm dev
+// server/plugins/core-routes.ts
+export { dispatchCoreRoutesPlugin as default } from "@agent-native/dispatch/server";
 ```
 
-Prefer flags? `create my-app --template mail`, `--headless`, or `--standalone` skip the prompt.
-
-See the full [getting started docs](https://agent-native.com/docs).
-
-## Community
+Template's `server/db/schema.ts`:
 
-Join the **[Discord](https://discord.gg/qm82StQ2NC)** to ask questions, share what you're building, and get help.
-
-## Docs
-
-Full documentation at **[agent-native.com](https://agent-native.com)**.
-
-## License
+```ts
+export * from "@agent-native/dispatch/db";
+```
 
-MIT
+`@agent-native/dispatch/actions` doesn't need a manual import for most
+consumers: `import "@agent-native/dispatch/server"` (pulled in by the plugin
+wiring above) side-effect-registers every Dispatch action via
+`registerPackageActions`, and the framework's `autoDiscoverActions` merges
+them in after the consumer's local `actions/` directory. Drop a same-named
+file in the consumer's own `actions/` to override any single action.
+
+## Exports
+
+| Subpath                            | What it is                                                                                                                                                                                                                                                                                                                                                                               |
+| ---------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `.`                                | Shared config types only — `DispatchConfig`, `DispatchAuthConfig`, `DispatchIntegrationsConfig`. Import this where a type is needed without pulling in server/client code.                                                                                                                                                                                                               |
+| `./routes`                         | `dispatchRoutes` — a programmatic `RouteConfig[]` covering every Dispatch page (chat, overview, metrics, operations, apps, vault, integrations, agents, workspace, messaging, destinations, identities, approvals, automations, audit, settings, dreams, extensions, thread-debug, team, and a workspace-app catch-all route).                                                           |
+| `./routes/pages/*`                 | Individual compiled page modules the routes above point at (e.g. `./routes/pages/vault.js`). Not normally imported directly.                                                                                                                                                                                                                                                             |
+| `./server`                         | `setupDispatch(config)` plus the Nitro plugin set: `dispatchAuthPlugin`, `dispatchIntegrationsPlugin`, `dispatchAgentChatPlugin`, `dispatchDbPlugin`, `dispatchCoreRoutesPlugin`. Importing this module also side-effect-registers all Dispatch actions.                                                                                                                                 |
+| `./server/lib/thread-link-preview` | `loadThreadLinkPreview(threadId)` — server-only helper (reads request context and checks thread ownership) that builds link-preview metadata for shared thread URLs.                                                                                                                                                                                                                     |
+| `./actions`                        | `dispatchActions` — the flat name → `ActionEntry` map of every Dispatch action (vault, workspace resources, destinations, dream jobs, provider-api catalog/docs/request, connected agents, audit, approvals, platform messaging, and more).                                                                                                                                              |
+| `./db`                             | `getDb()` / `db()`, the Drizzle `schema` namespace, the Dispatch table exports (`dispatchDestinations`, `dispatchIdentityLinks`, `dispatchLinkTokens`, `dispatchApprovalRequests`, `dispatchAuditEvents`, `dispatchDreams`, `dispatchDreamProposals`, `vaultSecrets`, `vaultGrants`, `vaultRequests`, `vaultAuditLog`, `workspaceResources`, `workspaceResourceGrants`), and migrations. |
+| `./lib/thread-link-preview`        | Isomorphic helpers behind the server one above — `extractThreadPreviewImageUrl`, `buildThreadLinkPreviewMeta`, and the `ThreadLinkPreview` type. Safe to import from client code.                                                                                                                                                                                                        |
+| `./components`                     | Escape-hatch UI pieces for custom layouts: `DispatchShell`, `Layout`/`NavContent` (plus `DispatchExtensionConfig`/`DispatchNavIcon`/`DispatchNavItem`/`DispatchNavSection` types), `CreateAppPopover`/`CreateAppFlow`, `AppKeysPopover`. Most consumers only need `dispatchRoutes` and never import from here directly.                                                                  |
+| `./components/ui/*`                | The shadcn/ui primitive set Dispatch's own UI is built on (`button`, `dialog`, `dropdown-menu`, `card`, `command`, `calendar`, `chart`, ...), exported per-file so a consumer can reuse one primitive without pulling in the rest.                                                                                                                                                       |
+| `./styles/dispatch.css`            | Tailwind layer with Dispatch-specific styles. Import once in the consumer's global CSS entry.                                                                                                                                                                                                                                                                                            |
+
+## What it's for
+
+Dispatch is the workspace control plane sitting above individual template
+apps:
+
+- **Vault** — shared workspace secrets with a request → grant → audit flow,
+  scoped per app.
+- **Workspace resources** — cross-app resources (e.g. shared instructions or
+  data) with explicit per-app grants and effective-context resolution.
+- **Integrations & destinations** — outbound messaging channel setup (Slack,
+  Teams, Discord, Telegram, WhatsApp, email, and more) and a destinations
+  queue for delivering agent output.
+- **Dream jobs** — a recurring background job (`ensure-dream-job`) that scans
+  agent thread-debug history across connected sources and produces pending,
+  evidence-backed proposals (`create-dream-report`, `list-dream-candidates`,
+  `apply-dream-proposal` / `reject-dream-proposal`) without an extra LLM call.
+- **Connected agents & provider APIs** — discovery of other workspace apps
+  (`list-connected-agents`, `open_app`, `ask_app`) and a generic provider-api
+  catalog/docs/request surface for calling third-party APIs through stored
+  credentials.
+- **Approvals & audit** — a shared approval-request/audit-event model used
+  across the above surfaces.
+
+## Eject
+
+There is no `agent-native.package.json` / CLI package-lifecycle wiring for
+this package yet (unlike `@agent-native/scheduling`). To customize beyond the
+`setupDispatch` config surface, copy the files you want to own out of
+`node_modules/@agent-native/dispatch/src` into your own package and swap the
+dependency manually.

package/dist/actions/approve-dispatch-change.d.ts

@@ -1,21 +1,21 @@
 declare const _default: import("@agent-native/core").ActionDefinition<{
     id: string;
 }, {
+    afterValue: string | null;
+    beforeValue: string | null;
+    changeType: string;
+    createdAt: number;
     id: string;
-    ownerEmail: string;
     orgId: string | null;
-    changeType: string;
-    targetType: string;
-    targetId: string | null;
-    status: string;
-    summary: string;
+    ownerEmail: string;
     payload: string;
-    beforeValue: string | null;
-    afterValue: string | null;
     requestedBy: string;
-    reviewedBy: string | null;
     reviewedAt: number | null;
-    createdAt: number;
+    reviewedBy: string | null;
+    status: string;
+    summary: string;
+    targetId: string | null;
+    targetType: string;
     updatedAt: number;
 }>;
 export default _default;

package/dist/actions/list_apps.d.ts

@@ -9,6 +9,7 @@ declare const _default: import("@agent-native/core").ActionDefinition<Record<str
         running: boolean;
         source: string;
     }[];
+    message: string;
 }>;
 export default _default;
 //# sourceMappingURL=list_apps.d.ts.map

package/dist/actions/list_apps.js

@@ -9,17 +9,25 @@ export default defineAction({
     parallelSafe: true,
     run: async () => {
         const apps = await listGrantedDispatchMcpApps();
+        const appSummaries = apps.map((app) => ({
+            id: app.id,
+            name: app.name,
+            description: app.description,
+            url: app.url,
+            running: true,
+            source: "dispatch-mcp-grant",
+        }));
         return {
             workspace: true,
             gateway: "dispatch",
-            apps: apps.map((app) => ({
-                id: app.id,
-                name: app.name,
-                description: app.description,
-                url: app.url,
-                running: true,
-                source: "dispatch-mcp-grant",
-            })),
+            apps: appSummaries,
+            // MCP model-visible results are deliberately text-only unless a tool is
+            // app-only or opens an MCP App. Supplying a compact, valid JSON message
+            // keeps large app catalogs machine-readable instead of letting the
+            // generic text limiter cut the full result into invalid JSON.
+            message: JSON.stringify({
+                apps: appSummaries.map(({ id, name }) => ({ id, name })),
+            }),
         };
     },
 });

package/dist/actions/list_apps.js.map

@@ -1 +1 @@
-{"version":3,"file":"list_apps.js","sourceRoot":"","sources":["../../src/actions/list_apps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,6LAA6L;IAC/L,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,IAAI,EAAE;QACd,MAAM,IAAI,GAAG,MAAM,0BAA0B,EAAE,CAAC;QAChD,OAAO;YACL,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACvB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,oBAAoB;aAC7B,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { listGrantedDispatchMcpApps } from \"../server/lib/mcp-gateway.js\";\n\nexport default defineAction({\n  description:\n    'List the apps this Dispatch MCP gateway can route to, including \"dispatch\" itself for Dispatch-owned pages such as extensions. The result is filtered by Dispatch\\'s MCP app access policy.',\n  schema: z.object({}),\n  http: { method: \"GET\" },\n  readOnly: true,\n  parallelSafe: true,\n  run: async () => {\n    const apps = await listGrantedDispatchMcpApps();\n    return {\n      workspace: true,\n      gateway: \"dispatch\",\n      apps: apps.map((app) => ({\n        id: app.id,\n        name: app.name,\n        description: app.description,\n        url: app.url,\n        running: true,\n        source: \"dispatch-mcp-grant\",\n      })),\n    };\n  },\n});\n"]}
+{"version":3,"file":"list_apps.js","sourceRoot":"","sources":["../../src/actions/list_apps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,6LAA6L;IAC/L,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,IAAI,EAAE;QACd,MAAM,IAAI,GAAG,MAAM,0BAA0B,EAAE,CAAC;QAChD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtC,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,oBAAoB;SAC7B,CAAC,CAAC,CAAC;QACJ,OAAO;YACL,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,YAAY;YAClB,wEAAwE;YACxE,wEAAwE;YACxE,mEAAmE;YACnE,8DAA8D;YAC9D,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtB,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;aACzD,CAAC;SACH,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { listGrantedDispatchMcpApps } from \"../server/lib/mcp-gateway.js\";\n\nexport default defineAction({\n  description:\n    'List the apps this Dispatch MCP gateway can route to, including \"dispatch\" itself for Dispatch-owned pages such as extensions. The result is filtered by Dispatch\\'s MCP app access policy.',\n  schema: z.object({}),\n  http: { method: \"GET\" },\n  readOnly: true,\n  parallelSafe: true,\n  run: async () => {\n    const apps = await listGrantedDispatchMcpApps();\n    const appSummaries = apps.map((app) => ({\n      id: app.id,\n      name: app.name,\n      description: app.description,\n      url: app.url,\n      running: true,\n      source: \"dispatch-mcp-grant\",\n    }));\n    return {\n      workspace: true,\n      gateway: \"dispatch\",\n      apps: appSummaries,\n      // MCP model-visible results are deliberately text-only unless a tool is\n      // app-only or opens an MCP App. Supplying a compact, valid JSON message\n      // keeps large app catalogs machine-readable instead of letting the\n      // generic text limiter cut the full result into invalid JSON.\n      message: JSON.stringify({\n        apps: appSummaries.map(({ id, name }) => ({ id, name })),\n      }),\n    };\n  },\n});\n"]}

package/dist/actions/provider-api-register.js

@@ -1,7 +1,42 @@
 import { defineAction } from "@agent-native/core";
-import { upsertCustomProvider, deleteCustomProvider, listCustomProviders, getCustomProvider, } from "@agent-native/core/provider-api";
+import { getDbExec } from "@agent-native/core/db";
+import { upsertCustomProvider, deleteCustomProvider, listCustomProviders, getCustomProvider, assertCanMutateCustomProviderScope, } from "@agent-native/core/provider-api";
 import { getCredentialContext } from "@agent-native/core/server";
 import { z } from "zod";
+/**
+ * Resolve the caller's role in a specific org, straight from `org_members`.
+ *
+ * `getCredentialContext()` (from `@agent-native/core/server`) only exposes
+ * `{ userEmail, orgId }` — no role. `getOrgContext()` (from
+ * `@agent-native/core/org`) resolves role but requires an `H3Event`, which
+ * `defineAction` handlers are not given. This mirrors the established
+ * no-event role-lookup idiom already used for org-admin gating inside
+ * agent-callable/background code (see `isCurrentUserOrgAdmin` in
+ * `packages/core/src/jobs/tools.ts`, `getViewerOrgRole` in
+ * `packages/dispatch/src/server/lib/usage-metrics-store.ts`, and the same
+ * query in `packages/core/src/mcp/actions/service-token-access.ts`) — same
+ * SQL, same fail-closed-to-null-on-error semantics. Returns null (never an
+ * org role) on any lookup error or when the caller has no membership row in
+ * this org.
+ */
+async function resolveCallerOrgRole(orgId, email) {
+    if (!orgId)
+        return null;
+    try {
+        const client = getDbExec();
+        const { rows } = await client.execute({
+            sql: `SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,
+            args: [orgId, email.toLowerCase()],
+        });
+        if (rows.length === 0)
+            return null;
+        const role = rows[0].role;
+        return typeof role === "string" && role ? role : null;
+    }
+    catch {
+        return null;
+    }
+}
 const AuthSchema = z.discriminatedUnion("type", [
     z.object({
         type: z.literal("none"),
@@ -98,6 +133,32 @@ After registration the provider appears in provider-api-catalog and can be used
             throw new Error("provider-api-register requires an authenticated request context.");
         }
         const scopeId = scope === "org" ? (ctx.orgId ?? ctx.userEmail) : ctx.userEmail;
+        // Only upsert/delete mutate state; list/get remain readable by any org
+        // member (scoping org-scoped reads is left as a follow-up — see plan
+        // 014). Resolve the caller's role in the *target* org (`scopeId`, which
+        // for scope === "org" is exactly `ctx.orgId`) and enforce owner/admin
+        // before allowing an org-scoped write. `assertCanMutateCustomProviderScope`
+        // is the single source of truth for this check and is also enforced a
+        // second time inside `upsertCustomProvider`/`deleteCustomProvider`
+        // themselves (defense in depth) — calling it here too gives a clear,
+        // early error before any other work happens.
+        //
+        // When the caller has no active org (`ctx.orgId` is null — a solo user,
+        // or an app that hasn't wired `resolveOrgId` at all), `scopeId` above
+        // already collapsed to `ctx.userEmail`: there is no shared org resource
+        // to protect, and no *other* caller can ever address that same scopeId
+        // (every other request's fallback is scoped to *its own* email). Treat
+        // that case like sole ownership of a personal bucket — consistent with
+        // `org/context.ts`'s auto-created personal org, which also assigns the
+        // user role "owner" — rather than hard-rejecting scope: "org" (the
+        // action's own default) for every solo user or org-less app.
+        let orgRole = null;
+        if ((operation === "upsert" || operation === "delete") && scope === "org") {
+            orgRole = ctx.orgId
+                ? await resolveCallerOrgRole(ctx.orgId, ctx.userEmail)
+                : "owner";
+            assertCanMutateCustomProviderScope(scope, scopeId, orgRole);
+        }
         if (operation === "list") {
             const providers = await listCustomProviders(scope, scopeId);
             return {
@@ -125,7 +186,7 @@ After registration the provider appears in provider-api-catalog and can be used
         if (operation === "delete") {
             if (!id)
                 throw new Error("id is required for delete operation.");
-            const deleted = await deleteCustomProvider(scope, scopeId, id);
+            const deleted = await deleteCustomProvider(scope, scopeId, id, orgRole);
             return { deleted, id };
         }
         // upsert
@@ -148,6 +209,7 @@ After registration the provider appears in provider-api-catalog and can be used
             allowedHostSuffixes,
             defaultHeaders,
             notes,
+            orgRole,
         });
         return {
             registered: true,

package/dist/actions/provider-api-register.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-api-register.js","sourceRoot":"","sources":["../../src/actions/provider-api-register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,UAAU,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9C,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;KACxB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CACP,kIAAkI,CACnI;KACJ,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,8CAA8C,CAAC;KAC5D,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACjC,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,4CAA4C,CAAC;QACzD,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,uDAAuD,CAAC;KACrE,CAAC;CACH,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE;;;;;;;;2GAQ4F;IACzG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,CAAC;aACT,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;aACzC,OAAO,CAAC,QAAQ,CAAC;aACjB,QAAQ,CACP,4GAA4G,CAC7G;QACH,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,EAAE;aACV,QAAQ,CACP,uGAAuG,CACxG;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,qEAAqE,CACtE;QACH,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CACP,+GAA+G,CAChH;QACH,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAClC,2EAA2E,CAC5E;QACD,QAAQ,EAAE,CAAC;aACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;aACvB,QAAQ,EAAE;aACV,QAAQ,CAAC,wDAAwD,CAAC;QACrE,mBAAmB,EAAE,CAAC;aACnB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,kHAAkH,CACnH;QACH,cAAc,EAAE,CAAC;aACd,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9B,QAAQ,EAAE;aACV,QAAQ,CACP,uFAAuF,CACxF;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,IAAI,CAAC;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;QACvE,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;aACrB,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CACP,sGAAsG,CACvG;KACJ,CAAC;IACF,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,KAAK,EAAE,EACV,SAAS,EACT,EAAE,EACF,KAAK,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,mBAAmB,EACnB,cAAc,EACd,KAAK,EACL,KAAK,GACN,EAAE,EAAE;QACH,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GACX,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;QAEjE,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC5D,OAAO;gBACL,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC/B,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;oBACrB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,SAAS,EAAE,CAAC,CAAC,SAAS;iBACvB,CAAC,CAAC;gBACH,KAAK,EAAE,SAAS,CAAC,MAAM;aACxB,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC9B,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACnC,CAAC;QAED,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC/D,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACzB,CAAC;QAED,SAAS;QACT,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAErE,MAAM,oBAAoB,CAAC;YACzB,KAAK;YACL,OAAO;YACP,EAAE;YACF,KAAK;YACL,OAAO;YACP,IAAI;YACJ,QAAQ;YACR,mBAAmB;YACnB,cAAc;YACd,KAAK;SACN,CAAC,CAAC;QAEH,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,EAAE;YACF,KAAK;YACL,OAAO,EAAE,oBAAoB,EAAE,2FAA2F;SAC3H,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport {\n  upsertCustomProvider,\n  deleteCustomProvider,\n  listCustomProviders,\n  getCustomProvider,\n} from \"@agent-native/core/provider-api\";\nimport { getCredentialContext } from \"@agent-native/core/server\";\nimport { z } from \"zod\";\n\nconst AuthSchema = z.discriminatedUnion(\"type\", [\n  z.object({\n    type: z.literal(\"none\"),\n  }),\n  z.object({\n    type: z.literal(\"bearer\"),\n    credentialKey: z\n      .string()\n      .min(1)\n      .describe(\n        \"Name of the credential key (e.g. MY_API_TOKEN). Must already be saved via app secrets — this action never accepts secret values.\",\n      ),\n  }),\n  z.object({\n    type: z.literal(\"basic\"),\n    usernameKey: z\n      .string()\n      .min(1)\n      .describe(\"Credential key name for the username/login.\"),\n    passwordKey: z\n      .string()\n      .min(1)\n      .describe(\"Credential key name for the password/secret.\"),\n  }),\n  z.object({\n    type: z.literal(\"api-key-header\"),\n    credentialKey: z\n      .string()\n      .min(1)\n      .describe(\"Credential key name for the API key value.\"),\n    headerName: z\n      .string()\n      .min(1)\n      .describe(\"HTTP header name to send the key in (e.g. X-Api-Key).\"),\n  }),\n]);\n\nexport default defineAction({\n  description: `Register or update a custom API provider so the agent can call it via provider-api-request and look up its docs via provider-api-docs.\n\nIMPORTANT — credentials:\n- This action stores only credential KEY NAMES, never secret values.\n- If the required API key is not yet saved, instruct the user to add it via app Settings → Keys, or use the create-vault-secret action, before calling this action.\n- Supported auth kinds: none, bearer, basic, api-key-header.\n  google-service-account and oauth-bearer are NOT supported for custom providers.\n\nAfter registration the provider appears in provider-api-catalog and can be used with provider-api-request.`,\n  schema: z.object({\n    operation: z\n      .enum([\"upsert\", \"delete\", \"list\", \"get\"])\n      .default(\"upsert\")\n      .describe(\n        \"Operation: upsert (create or update), delete (remove), list (all custom providers), get (single provider).\",\n      ),\n    id: z\n      .string()\n      .min(1)\n      .max(64)\n      .optional()\n      .describe(\n        \"Provider slug (e.g. my-api). Lowercase letters, digits, hyphens only. Required for upsert/delete/get.\",\n      ),\n    label: z\n      .string()\n      .min(1)\n      .max(200)\n      .optional()\n      .describe(\n        \"Human-readable name (e.g. 'My Analytics API'). Required for upsert.\",\n      ),\n    baseUrl: z\n      .string()\n      .url()\n      .optional()\n      .describe(\n        \"Base URL for the API (e.g. https://api.example.com/v1). Required for upsert. Must be a public https/http URL.\",\n      ),\n    auth: AuthSchema.optional().describe(\n      \"Auth configuration. Required for upsert. Use type 'none' for public APIs.\",\n    ),\n    docsUrls: z\n      .array(z.string().url())\n      .optional()\n      .describe(\"Optional list of documentation URLs for this provider.\"),\n    allowedHostSuffixes: z\n      .array(z.string())\n      .optional()\n      .describe(\n        \"Optional list of additional host suffixes requests may target beyond the base URL origin (e.g. ['example.com']).\",\n      ),\n    defaultHeaders: z\n      .record(z.string(), z.string())\n      .optional()\n      .describe(\n        \"Optional headers to include on every request (e.g. { 'Accept': 'application/json' }).\",\n      ),\n    notes: z\n      .string()\n      .max(1000)\n      .optional()\n      .describe(\"Optional notes about this provider shown in the catalog.\"),\n    scope: z\n      .enum([\"user\", \"org\"])\n      .default(\"org\")\n      .describe(\n        \"Whether to store the provider for the current user only ('user') or for the whole workspace ('org').\",\n      ),\n  }),\n  http: false,\n  run: async ({\n    operation,\n    id,\n    label,\n    baseUrl,\n    auth,\n    docsUrls,\n    allowedHostSuffixes,\n    defaultHeaders,\n    notes,\n    scope,\n  }) => {\n    const ctx = getCredentialContext();\n    if (!ctx) {\n      throw new Error(\n        \"provider-api-register requires an authenticated request context.\",\n      );\n    }\n    const scopeId =\n      scope === \"org\" ? (ctx.orgId ?? ctx.userEmail) : ctx.userEmail;\n\n    if (operation === \"list\") {\n      const providers = await listCustomProviders(scope, scopeId);\n      return {\n        providers: providers.map((p) => ({\n          id: p.id,\n          label: p.label,\n          baseUrl: p.baseUrl,\n          authType: p.auth.type,\n          docsUrls: p.docsUrls,\n          notes: p.notes,\n          updatedAt: p.updatedAt,\n        })),\n        count: providers.length,\n      };\n    }\n\n    if (operation === \"get\") {\n      if (!id) throw new Error(\"id is required for get operation.\");\n      const provider = await getCustomProvider(scope, scopeId, id);\n      if (!provider) {\n        return { found: false, id };\n      }\n      return { found: true, provider };\n    }\n\n    if (operation === \"delete\") {\n      if (!id) throw new Error(\"id is required for delete operation.\");\n      const deleted = await deleteCustomProvider(scope, scopeId, id);\n      return { deleted, id };\n    }\n\n    // upsert\n    if (!id) throw new Error(\"id is required for upsert operation.\");\n    if (!label) throw new Error(\"label is required for upsert operation.\");\n    if (!baseUrl) throw new Error(\"baseUrl is required for upsert operation.\");\n    if (!auth) throw new Error(\"auth is required for upsert operation.\");\n\n    await upsertCustomProvider({\n      scope,\n      scopeId,\n      id,\n      label,\n      baseUrl,\n      auth,\n      docsUrls,\n      allowedHostSuffixes,\n      defaultHeaders,\n      notes,\n    });\n\n    return {\n      registered: true,\n      id,\n      label,\n      message: `Custom provider \"${id}\" registered. Use provider-api-catalog to inspect it and provider-api-request to call it.`,\n    };\n  },\n});\n"]}
+{"version":3,"file":"provider-api-register.js","sourceRoot":"","sources":["../../src/actions/provider-api-register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,kCAAkC,GACnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,oBAAoB,CACjC,KAAoB,EACpB,KAAa;IAEb,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,4EAA4E;YACjF,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACnC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,IAAI,GAAI,IAAI,CAAC,CAAC,CAAwB,CAAC,IAAI,CAAC;QAClD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9C,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;KACxB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CACP,kIAAkI,CACnI;KACJ,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,8CAA8C,CAAC;KAC5D,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACjC,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,4CAA4C,CAAC;QACzD,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,uDAAuD,CAAC;KACrE,CAAC;CACH,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE;;;;;;;;2GAQ4F;IACzG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,CAAC;aACT,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;aACzC,OAAO,CAAC,QAAQ,CAAC;aACjB,QAAQ,CACP,4GAA4G,CAC7G;QACH,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,EAAE;aACV,QAAQ,CACP,uGAAuG,CACxG;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,qEAAqE,CACtE;QACH,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CACP,+GAA+G,CAChH;QACH,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAClC,2EAA2E,CAC5E;QACD,QAAQ,EAAE,CAAC;aACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;aACvB,QAAQ,EAAE;aACV,QAAQ,CAAC,wDAAwD,CAAC;QACrE,mBAAmB,EAAE,CAAC;aACnB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,kHAAkH,CACnH;QACH,cAAc,EAAE,CAAC;aACd,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9B,QAAQ,EAAE;aACV,QAAQ,CACP,uFAAuF,CACxF;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,IAAI,CAAC;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;QACvE,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;aACrB,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CACP,sGAAsG,CACvG;KACJ,CAAC;IACF,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,KAAK,EAAE,EACV,SAAS,EACT,EAAE,EACF,KAAK,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,mBAAmB,EACnB,cAAc,EACd,KAAK,EACL,KAAK,GACN,EAAE,EAAE;QACH,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GACX,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;QAEjE,uEAAuE;QACvE,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,4EAA4E;QAC5E,sEAAsE;QACtE,mEAAmE;QACnE,qEAAqE;QACrE,6CAA6C;QAC7C,EAAE;QACF,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,6DAA6D;QAC7D,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,QAAQ,CAAC,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YAC1E,OAAO,GAAG,GAAG,CAAC,KAAK;gBACjB,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC;gBACtD,CAAC,CAAC,OAAO,CAAC;YACZ,kCAAkC,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC5D,OAAO;gBACL,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC/B,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;oBACrB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,SAAS,EAAE,CAAC,CAAC,SAAS;iBACvB,CAAC,CAAC;gBACH,KAAK,EAAE,SAAS,CAAC,MAAM;aACxB,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC9B,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACnC,CAAC;QAED,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;YACxE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACzB,CAAC;QAED,SAAS;QACT,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAErE,MAAM,oBAAoB,CAAC;YACzB,KAAK;YACL,OAAO;YACP,EAAE;YACF,KAAK;YACL,OAAO;YACP,IAAI;YACJ,QAAQ;YACR,mBAAmB;YACnB,cAAc;YACd,KAAK;YACL,OAAO;SACR,CAAC,CAAC;QAEH,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,EAAE;YACF,KAAK;YACL,OAAO,EAAE,oBAAoB,EAAE,2FAA2F;SAC3H,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { getDbExec } from \"@agent-native/core/db\";\nimport {\n  upsertCustomProvider,\n  deleteCustomProvider,\n  listCustomProviders,\n  getCustomProvider,\n  assertCanMutateCustomProviderScope,\n} from \"@agent-native/core/provider-api\";\nimport { getCredentialContext } from \"@agent-native/core/server\";\nimport { z } from \"zod\";\n\n/**\n * Resolve the caller's role in a specific org, straight from `org_members`.\n *\n * `getCredentialContext()` (from `@agent-native/core/server`) only exposes\n * `{ userEmail, orgId }` — no role. `getOrgContext()` (from\n * `@agent-native/core/org`) resolves role but requires an `H3Event`, which\n * `defineAction` handlers are not given. This mirrors the established\n * no-event role-lookup idiom already used for org-admin gating inside\n * agent-callable/background code (see `isCurrentUserOrgAdmin` in\n * `packages/core/src/jobs/tools.ts`, `getViewerOrgRole` in\n * `packages/dispatch/src/server/lib/usage-metrics-store.ts`, and the same\n * query in `packages/core/src/mcp/actions/service-token-access.ts`) — same\n * SQL, same fail-closed-to-null-on-error semantics. Returns null (never an\n * org role) on any lookup error or when the caller has no membership row in\n * this org.\n */\nasync function resolveCallerOrgRole(\n  orgId: string | null,\n  email: string,\n): Promise<string | null> {\n  if (!orgId) return null;\n  try {\n    const client = getDbExec();\n    const { rows } = await client.execute({\n      sql: `SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,\n      args: [orgId, email.toLowerCase()],\n    });\n    if (rows.length === 0) return null;\n    const role = (rows[0] as { role?: unknown }).role;\n    return typeof role === \"string\" && role ? role : null;\n  } catch {\n    return null;\n  }\n}\n\nconst AuthSchema = z.discriminatedUnion(\"type\", [\n  z.object({\n    type: z.literal(\"none\"),\n  }),\n  z.object({\n    type: z.literal(\"bearer\"),\n    credentialKey: z\n      .string()\n      .min(1)\n      .describe(\n        \"Name of the credential key (e.g. MY_API_TOKEN). Must already be saved via app secrets — this action never accepts secret values.\",\n      ),\n  }),\n  z.object({\n    type: z.literal(\"basic\"),\n    usernameKey: z\n      .string()\n      .min(1)\n      .describe(\"Credential key name for the username/login.\"),\n    passwordKey: z\n      .string()\n      .min(1)\n      .describe(\"Credential key name for the password/secret.\"),\n  }),\n  z.object({\n    type: z.literal(\"api-key-header\"),\n    credentialKey: z\n      .string()\n      .min(1)\n      .describe(\"Credential key name for the API key value.\"),\n    headerName: z\n      .string()\n      .min(1)\n      .describe(\"HTTP header name to send the key in (e.g. X-Api-Key).\"),\n  }),\n]);\n\nexport default defineAction({\n  description: `Register or update a custom API provider so the agent can call it via provider-api-request and look up its docs via provider-api-docs.\n\nIMPORTANT — credentials:\n- This action stores only credential KEY NAMES, never secret values.\n- If the required API key is not yet saved, instruct the user to add it via app Settings → Keys, or use the create-vault-secret action, before calling this action.\n- Supported auth kinds: none, bearer, basic, api-key-header.\n  google-service-account and oauth-bearer are NOT supported for custom providers.\n\nAfter registration the provider appears in provider-api-catalog and can be used with provider-api-request.`,\n  schema: z.object({\n    operation: z\n      .enum([\"upsert\", \"delete\", \"list\", \"get\"])\n      .default(\"upsert\")\n      .describe(\n        \"Operation: upsert (create or update), delete (remove), list (all custom providers), get (single provider).\",\n      ),\n    id: z\n      .string()\n      .min(1)\n      .max(64)\n      .optional()\n      .describe(\n        \"Provider slug (e.g. my-api). Lowercase letters, digits, hyphens only. Required for upsert/delete/get.\",\n      ),\n    label: z\n      .string()\n      .min(1)\n      .max(200)\n      .optional()\n      .describe(\n        \"Human-readable name (e.g. 'My Analytics API'). Required for upsert.\",\n      ),\n    baseUrl: z\n      .string()\n      .url()\n      .optional()\n      .describe(\n        \"Base URL for the API (e.g. https://api.example.com/v1). Required for upsert. Must be a public https/http URL.\",\n      ),\n    auth: AuthSchema.optional().describe(\n      \"Auth configuration. Required for upsert. Use type 'none' for public APIs.\",\n    ),\n    docsUrls: z\n      .array(z.string().url())\n      .optional()\n      .describe(\"Optional list of documentation URLs for this provider.\"),\n    allowedHostSuffixes: z\n      .array(z.string())\n      .optional()\n      .describe(\n        \"Optional list of additional host suffixes requests may target beyond the base URL origin (e.g. ['example.com']).\",\n      ),\n    defaultHeaders: z\n      .record(z.string(), z.string())\n      .optional()\n      .describe(\n        \"Optional headers to include on every request (e.g. { 'Accept': 'application/json' }).\",\n      ),\n    notes: z\n      .string()\n      .max(1000)\n      .optional()\n      .describe(\"Optional notes about this provider shown in the catalog.\"),\n    scope: z\n      .enum([\"user\", \"org\"])\n      .default(\"org\")\n      .describe(\n        \"Whether to store the provider for the current user only ('user') or for the whole workspace ('org').\",\n      ),\n  }),\n  http: false,\n  run: async ({\n    operation,\n    id,\n    label,\n    baseUrl,\n    auth,\n    docsUrls,\n    allowedHostSuffixes,\n    defaultHeaders,\n    notes,\n    scope,\n  }) => {\n    const ctx = getCredentialContext();\n    if (!ctx) {\n      throw new Error(\n        \"provider-api-register requires an authenticated request context.\",\n      );\n    }\n    const scopeId =\n      scope === \"org\" ? (ctx.orgId ?? ctx.userEmail) : ctx.userEmail;\n\n    // Only upsert/delete mutate state; list/get remain readable by any org\n    // member (scoping org-scoped reads is left as a follow-up — see plan\n    // 014). Resolve the caller's role in the *target* org (`scopeId`, which\n    // for scope === \"org\" is exactly `ctx.orgId`) and enforce owner/admin\n    // before allowing an org-scoped write. `assertCanMutateCustomProviderScope`\n    // is the single source of truth for this check and is also enforced a\n    // second time inside `upsertCustomProvider`/`deleteCustomProvider`\n    // themselves (defense in depth) — calling it here too gives a clear,\n    // early error before any other work happens.\n    //\n    // When the caller has no active org (`ctx.orgId` is null — a solo user,\n    // or an app that hasn't wired `resolveOrgId` at all), `scopeId` above\n    // already collapsed to `ctx.userEmail`: there is no shared org resource\n    // to protect, and no *other* caller can ever address that same scopeId\n    // (every other request's fallback is scoped to *its own* email). Treat\n    // that case like sole ownership of a personal bucket — consistent with\n    // `org/context.ts`'s auto-created personal org, which also assigns the\n    // user role \"owner\" — rather than hard-rejecting scope: \"org\" (the\n    // action's own default) for every solo user or org-less app.\n    let orgRole: string | null = null;\n    if ((operation === \"upsert\" || operation === \"delete\") && scope === \"org\") {\n      orgRole = ctx.orgId\n        ? await resolveCallerOrgRole(ctx.orgId, ctx.userEmail)\n        : \"owner\";\n      assertCanMutateCustomProviderScope(scope, scopeId, orgRole);\n    }\n\n    if (operation === \"list\") {\n      const providers = await listCustomProviders(scope, scopeId);\n      return {\n        providers: providers.map((p) => ({\n          id: p.id,\n          label: p.label,\n          baseUrl: p.baseUrl,\n          authType: p.auth.type,\n          docsUrls: p.docsUrls,\n          notes: p.notes,\n          updatedAt: p.updatedAt,\n        })),\n        count: providers.length,\n      };\n    }\n\n    if (operation === \"get\") {\n      if (!id) throw new Error(\"id is required for get operation.\");\n      const provider = await getCustomProvider(scope, scopeId, id);\n      if (!provider) {\n        return { found: false, id };\n      }\n      return { found: true, provider };\n    }\n\n    if (operation === \"delete\") {\n      if (!id) throw new Error(\"id is required for delete operation.\");\n      const deleted = await deleteCustomProvider(scope, scopeId, id, orgRole);\n      return { deleted, id };\n    }\n\n    // upsert\n    if (!id) throw new Error(\"id is required for upsert operation.\");\n    if (!label) throw new Error(\"label is required for upsert operation.\");\n    if (!baseUrl) throw new Error(\"baseUrl is required for upsert operation.\");\n    if (!auth) throw new Error(\"auth is required for upsert operation.\");\n\n    await upsertCustomProvider({\n      scope,\n      scopeId,\n      id,\n      label,\n      baseUrl,\n      auth,\n      docsUrls,\n      allowedHostSuffixes,\n      defaultHeaders,\n      notes,\n      orgRole,\n    });\n\n    return {\n      registered: true,\n      id,\n      label,\n      message: `Custom provider \"${id}\" registered. Use provider-api-catalog to inspect it and provider-api-request to call it.`,\n    };\n  },\n});\n"]}

package/dist/actions/reject-dispatch-change.d.ts

@@ -2,21 +2,21 @@ declare const _default: import("@agent-native/core").ActionDefinition<{
     id: string;
     reason?: string | undefined;
 }, {
+    afterValue: string | null;
+    beforeValue: string | null;
+    changeType: string;
+    createdAt: number;
     id: string;
-    ownerEmail: string;
     orgId: string | null;
-    changeType: string;
-    targetType: string;
-    targetId: string | null;
-    status: string;
-    summary: string;
+    ownerEmail: string;
     payload: string;
-    beforeValue: string | null;
-    afterValue: string | null;
     requestedBy: string;
-    reviewedBy: string | null;
     reviewedAt: number | null;
-    createdAt: number;
+    reviewedBy: string | null;
+    status: string;
+    summary: string;
+    targetId: string | null;
+    targetType: string;
     updatedAt: number;
 }>;
 export default _default;

package/dist/actions/set-mcp-app-access.js

@@ -16,7 +16,7 @@ export default defineAction({
     }),
     run: async (args) => {
         const agents = await discoverAgents("dispatch");
-        const knownIds = new Set(agents.map((agent) => agent.id));
+        const knownIds = new Set(["dispatch", ...agents.map((agent) => agent.id)]);
         const selectedAppIds = Array.from(new Set(args.selectedAppIds
             .map((id) => id.trim().toLowerCase())
             .filter(Boolean)));
@@ -24,9 +24,6 @@ export default defineAction({
         if (unknown.length > 0) {
             throw new Error(`Unknown app(s): ${unknown.join(", ")}. Use list-mcp-app-access to see available app IDs.`);
         }
-        if (args.mode === "selected-apps" && selectedAppIds.length === 0) {
-            throw new Error("selected-apps mode requires at least one app ID.");
-        }
         await setDispatchMcpAppAccessSettings({
             mode: args.mode,
             selectedAppIds,

package/dist/actions/set-mcp-app-access.js.map

@@ -1 +1 @@
-{"version":3,"file":"set-mcp-app-access.js","sourceRoot":"","sources":["../../src/actions/set-mcp-app-access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,gBAAgB,MAAM,0BAA0B,CAAC;AAExD,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;AAEzD,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,sEAAsE;IACxE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,UAAU,CAAC,QAAQ,CACvB,6FAA6F,CAC9F;QACD,cAAc,EAAE,CAAC;aACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CAAC,+CAA+C,CAAC;KAC7D,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAC/B,IAAI,GAAG,CACL,IAAI,CAAC,cAAc;aAChB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aACpC,MAAM,CAAC,OAAO,CAAC,CACnB,CACF,CAAC;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qDAAqD,CAC3F,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,+BAA+B,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc;SACf,CAAC,CAAC;QACH,MAAM,WAAW,CAAC;YAChB,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,qBAAqB;YACjC,QAAQ,EAAE,aAAa;YACvB,OAAO,EACL,IAAI,CAAC,IAAI,KAAK,UAAU;gBACtB,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,kCAAkC,cAAc,CAAC,MAAM,kBAAkB;YAC/E,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE;SAC9C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEnB,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { discoverAgents } from \"@agent-native/core/server/agent-discovery\";\nimport { z } from \"zod\";\n\nimport { recordAudit } from \"../server/lib/dispatch-store.js\";\nimport { setDispatchMcpAppAccessSettings } from \"../server/lib/mcp-access-store.js\";\nimport listMcpAppAccess from \"./list-mcp-app-access.js\";\n\nconst modeSchema = z.enum([\"all-apps\", \"selected-apps\"]);\n\nexport default defineAction({\n  description:\n    \"Set which apps are available through Dispatch's unified MCP gateway.\",\n  schema: z.object({\n    mode: modeSchema.describe(\n      \"Use all-apps to expose every discovered app, or selected-apps to allow only selectedAppIds.\",\n    ),\n    selectedAppIds: z\n      .array(z.string())\n      .default([])\n      .describe(\"App IDs to expose when mode is selected-apps.\"),\n  }),\n  run: async (args) => {\n    const agents = await discoverAgents(\"dispatch\");\n    const knownIds = new Set(agents.map((agent) => agent.id));\n    const selectedAppIds = Array.from(\n      new Set(\n        args.selectedAppIds\n          .map((id) => id.trim().toLowerCase())\n          .filter(Boolean),\n      ),\n    );\n    const unknown = selectedAppIds.filter((id) => !knownIds.has(id));\n    if (unknown.length > 0) {\n      throw new Error(\n        `Unknown app(s): ${unknown.join(\", \")}. Use list-mcp-app-access to see available app IDs.`,\n      );\n    }\n    if (args.mode === \"selected-apps\" && selectedAppIds.length === 0) {\n      throw new Error(\"selected-apps mode requires at least one app ID.\");\n    }\n\n    await setDispatchMcpAppAccessSettings({\n      mode: args.mode,\n      selectedAppIds,\n    });\n    await recordAudit({\n      action: \"mcp-access.updated\",\n      targetType: \"dispatch-mcp-access\",\n      targetId: \"unified-mcp\",\n      summary:\n        args.mode === \"all-apps\"\n          ? \"Allowed Dispatch MCP access to all apps\"\n          : `Allowed Dispatch MCP access to ${selectedAppIds.length} selected app(s)`,\n      metadata: { mode: args.mode, selectedAppIds },\n    }).catch(() => {});\n\n    return listMcpAppAccess.run({});\n  },\n});\n"]}
+{"version":3,"file":"set-mcp-app-access.js","sourceRoot":"","sources":["../../src/actions/set-mcp-app-access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,gBAAgB,MAAM,0BAA0B,CAAC;AAExD,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;AAEzD,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,sEAAsE;IACxE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,UAAU,CAAC,QAAQ,CACvB,6FAA6F,CAC9F;QACD,cAAc,EAAE,CAAC;aACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CAAC,+CAA+C,CAAC;KAC7D,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAC/B,IAAI,GAAG,CACL,IAAI,CAAC,cAAc;aAChB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aACpC,MAAM,CAAC,OAAO,CAAC,CACnB,CACF,CAAC;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qDAAqD,CAC3F,CAAC;QACJ,CAAC;QACD,MAAM,+BAA+B,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc;SACf,CAAC,CAAC;QACH,MAAM,WAAW,CAAC;YAChB,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,qBAAqB;YACjC,QAAQ,EAAE,aAAa;YACvB,OAAO,EACL,IAAI,CAAC,IAAI,KAAK,UAAU;gBACtB,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,kCAAkC,cAAc,CAAC,MAAM,kBAAkB;YAC/E,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE;SAC9C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEnB,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { discoverAgents } from \"@agent-native/core/server/agent-discovery\";\nimport { z } from \"zod\";\n\nimport { recordAudit } from \"../server/lib/dispatch-store.js\";\nimport { setDispatchMcpAppAccessSettings } from \"../server/lib/mcp-access-store.js\";\nimport listMcpAppAccess from \"./list-mcp-app-access.js\";\n\nconst modeSchema = z.enum([\"all-apps\", \"selected-apps\"]);\n\nexport default defineAction({\n  description:\n    \"Set which apps are available through Dispatch's unified MCP gateway.\",\n  schema: z.object({\n    mode: modeSchema.describe(\n      \"Use all-apps to expose every discovered app, or selected-apps to allow only selectedAppIds.\",\n    ),\n    selectedAppIds: z\n      .array(z.string())\n      .default([])\n      .describe(\"App IDs to expose when mode is selected-apps.\"),\n  }),\n  run: async (args) => {\n    const agents = await discoverAgents(\"dispatch\");\n    const knownIds = new Set([\"dispatch\", ...agents.map((agent) => agent.id)]);\n    const selectedAppIds = Array.from(\n      new Set(\n        args.selectedAppIds\n          .map((id) => id.trim().toLowerCase())\n          .filter(Boolean),\n      ),\n    );\n    const unknown = selectedAppIds.filter((id) => !knownIds.has(id));\n    if (unknown.length > 0) {\n      throw new Error(\n        `Unknown app(s): ${unknown.join(\", \")}. Use list-mcp-app-access to see available app IDs.`,\n      );\n    }\n    await setDispatchMcpAppAccessSettings({\n      mode: args.mode,\n      selectedAppIds,\n    });\n    await recordAudit({\n      action: \"mcp-access.updated\",\n      targetType: \"dispatch-mcp-access\",\n      targetId: \"unified-mcp\",\n      summary:\n        args.mode === \"all-apps\"\n          ? \"Allowed Dispatch MCP access to all apps\"\n          : `Allowed Dispatch MCP access to ${selectedAppIds.length} selected app(s)`,\n      metadata: { mode: args.mode, selectedAppIds },\n    }).catch(() => {});\n\n    return listMcpAppAccess.run({});\n  },\n});\n"]}

package/dist/components/action-query-error.d.ts

@@ -0,0 +1,8 @@
+interface ActionQueryErrorProps {
+    error?: unknown;
+    onRetry: () => unknown;
+    className?: string;
+}
+export declare function ActionQueryError({ onRetry, className, }: ActionQueryErrorProps): import("node_modules/@types/react").JSX.Element;
+export {};
+//# sourceMappingURL=action-query-error.d.ts.map

package/dist/components/action-query-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-query-error.d.ts","sourceRoot":"","sources":["../../src/components/action-query-error.tsx"],"names":[],"mappings":"AAMA,UAAU,qBAAqB;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,OAAO,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,gBAAgB,CAAC,EAC/B,OAAO,EACP,SAAS,GACV,EAAE,qBAAqB,mDAgBvB"}

package/dist/components/action-query-error.js

@@ -0,0 +1,10 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useT } from "@agent-native/core/client";
+import { IconAlertTriangle, IconRefresh } from "@tabler/icons-react";
+import { Alert, AlertDescription, AlertTitle } from "./ui/alert.js";
+import { Button } from "./ui/button.js";
+export function ActionQueryError({ onRetry, className, }) {
+    const t = useT();
+    return (_jsxs(Alert, { variant: "destructive", className: className, children: [_jsx(IconAlertTriangle, { className: "size-4" }), _jsx(AlertTitle, { children: t("dispatch.pages.dataLoadFailed") }), _jsxs(AlertDescription, { className: "flex flex-wrap items-center justify-between gap-3", children: [_jsx("span", { children: t("dispatch.pages.dataLoadFailedDescription") }), _jsxs(Button, { type: "button", variant: "outline", size: "sm", onClick: onRetry, children: [_jsx(IconRefresh, { className: "size-4" }), t("dispatch.pages.tryAgain")] })] })] }));
+}
+//# sourceMappingURL=action-query-error.js.map

package/dist/components/action-query-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-query-error.js","sourceRoot":"","sources":["../../src/components/action-query-error.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAErE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAQrC,MAAM,UAAU,gBAAgB,CAAC,EAC/B,OAAO,EACP,SAAS,GACa;IACtB,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IAEjB,OAAO,CACL,MAAC,KAAK,IAAC,OAAO,EAAC,aAAa,EAAC,SAAS,EAAE,SAAS,aAC/C,KAAC,iBAAiB,IAAC,SAAS,EAAC,QAAQ,GAAG,EACxC,KAAC,UAAU,cAAE,CAAC,CAAC,+BAA+B,CAAC,GAAc,EAC7D,MAAC,gBAAgB,IAAC,SAAS,EAAC,mDAAmD,aAC7E,yBAAO,CAAC,CAAC,0CAA0C,CAAC,GAAQ,EAC5D,MAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAE,OAAO,aAChE,KAAC,WAAW,IAAC,SAAS,EAAC,QAAQ,GAAG,EACjC,CAAC,CAAC,yBAAyB,CAAC,IACtB,IACQ,IACb,CACT,CAAC;AACJ,CAAC","sourcesContent":["import { useT } from \"@agent-native/core/client\";\nimport { IconAlertTriangle, IconRefresh } from \"@tabler/icons-react\";\n\nimport { Alert, AlertDescription, AlertTitle } from \"./ui/alert\";\nimport { Button } from \"./ui/button\";\n\ninterface ActionQueryErrorProps {\n  error?: unknown;\n  onRetry: () => unknown;\n  className?: string;\n}\n\nexport function ActionQueryError({\n  onRetry,\n  className,\n}: ActionQueryErrorProps) {\n  const t = useT();\n\n  return (\n    <Alert variant=\"destructive\" className={className}>\n      <IconAlertTriangle className=\"size-4\" />\n      <AlertTitle>{t(\"dispatch.pages.dataLoadFailed\")}</AlertTitle>\n      <AlertDescription className=\"flex flex-wrap items-center justify-between gap-3\">\n        <span>{t(\"dispatch.pages.dataLoadFailedDescription\")}</span>\n        <Button type=\"button\" variant=\"outline\" size=\"sm\" onClick={onRetry}>\n          <IconRefresh className=\"size-4\" />\n          {t(\"dispatch.pages.tryAgain\")}\n        </Button>\n      </AlertDescription>\n    </Alert>\n  );\n}\n"]}

package/dist/components/app-keys-popover.d.ts

@@ -7,5 +7,9 @@ interface AppKeysPopoverProps {
     side?: "top" | "right" | "bottom" | "left";
 }
 export declare function AppKeysPopover({ appId, appName, trigger, align, side, }: AppKeysPopoverProps): import("node_modules/@types/react").JSX.Element;
+export declare function AppKeysPanel({ appId, appName, }: {
+    appId: string;
+    appName: string;
+}): import("node_modules/@types/react").JSX.Element;
 export {};
 //# sourceMappingURL=app-keys-popover.d.ts.map