@agent-native/dispatch 0.24.6 → 0.25.0

package/README.md

@@ -24,7 +24,8 @@ Powers the `dispatch` template. Provides:
   ...) to splat into a consumer's `app/routes.ts`
 - **React components** — `DispatchShell`, `Layout`/`NavContent`,
   `CreateAppPopover`/`CreateAppFlow`, `AppKeysPopover`, plus a full
-  shadcn/ui-based `components/ui/*` primitive set
+  shadcn/ui-based `components/ui/*` primitive set. `SimpleAgentsPanel` is
+  also exported for embedding the shared agent manager in another workspace UI.
 - **Styles** — `dispatch.css` Tailwind layer
 
 ## Install
@@ -95,6 +96,8 @@ file in the consumer's own `actions/` to override any single action.
 | `./routes`                         | `dispatchRoutes` — a programmatic `RouteConfig[]` covering every Dispatch page (chat, overview, metrics, operations, apps, vault, integrations, agents, workspace, messaging, destinations, identities, approvals, automations, audit, settings, dreams, extensions, thread-debug, team, and a workspace-app catch-all route).                                                           |
 | `./routes/pages/*`                 | Individual compiled page modules the routes above point at (e.g. `./routes/pages/vault.js`). Not normally imported directly.                                                                                                                                                                                                                                                             |
 | `./server`                         | `setupDispatch(config)` plus the Nitro plugin set: `dispatchAuthPlugin`, `dispatchIntegrationsPlugin`, `dispatchAgentChatPlugin`, `dispatchDbPlugin`, `dispatchCoreRoutesPlugin`. Importing this module also side-effect-registers all Dispatch actions.                                                                                                                                 |
+| `./shared/feature-flags`           | The default-off `DISPATCH_WORKSPACE_SSO_FLAG` definition used to target browser workspace sign-in safely.                                                                                                                                                                                                                                                                                |
+| `./shared/workspace-sso`           | Exact first-party workspace SSO origins and the additive custom registration parser shared by Dispatch and the identity hub.                                                                                                                                                                                                                                                             |
 | `./server/lib/thread-link-preview` | `loadThreadLinkPreview(threadId)` — server-only helper (reads request context and checks thread ownership) that builds link-preview metadata for shared thread URLs.                                                                                                                                                                                                                     |
 | `./actions`                        | `dispatchActions` — the flat name → `ActionEntry` map of every Dispatch action (vault, workspace resources, destinations, dream jobs, provider-api catalog/docs/request, connected agents, audit, approvals, platform messaging, and more).                                                                                                                                              |
 | `./db`                             | `getDb()` / `db()`, the Drizzle `schema` namespace, the Dispatch table exports (`dispatchDestinations`, `dispatchIdentityLinks`, `dispatchLinkTokens`, `dispatchApprovalRequests`, `dispatchAuditEvents`, `dispatchDreams`, `dispatchDreamProposals`, `vaultSecrets`, `vaultGrants`, `vaultRequests`, `vaultAuditLog`, `workspaceResources`, `workspaceResourceGrants`), and migrations. |
@@ -112,6 +115,14 @@ apps:
   scoped per app.
 - **Workspace resources** — cross-app resources (e.g. shared instructions or
   data) with explicit per-app grants and effective-context resolution.
+- **Simple agents and agent packs** — reusable agents keep a Claude-compatible
+  Markdown/JSON profile at `agents/<slug>.md` and can own sibling files under
+  `agents/<slug>/context/`, `references/`, and `skills/<name>/SKILL.md`. The
+  `import-agent-pack` and `list-agent-pack` actions create/read the whole pack;
+  `import-agent` remains the fast single-file path. Unsafe capabilities such as
+  credentials, hooks, shell commands, and local environment settings are
+  stripped or reported as warnings. Pack files are text resources, not an
+  execution grant.
 - **Integrations & destinations** — outbound messaging channel setup (Slack,
   Teams, Discord, Telegram, WhatsApp, email, and more) and a destinations
   queue for delivering agent output.

package/dist/actions/connect-external-agent.d.ts

@@ -0,0 +1,18 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    url: string;
+    name?: string | undefined;
+    description?: string | undefined;
+    scope?: "personal" | "shared" | undefined;
+}, {
+    status: "created";
+    resource: import("@agent-native/core/resources/store").Resource;
+    agent: {
+        id: string;
+        name: string;
+        description?: string | undefined;
+        url: string;
+    };
+    scope: "personal" | "shared";
+}>;
+export default _default;
+//# sourceMappingURL=connect-external-agent.d.ts.map

package/dist/actions/connect-external-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-external-agent.d.ts","sourceRoot":"","sources":["../../src/actions/connect-external-agent.ts"],"names":[],"mappings":";;;;;;YAyFqB,SAAS"}

package/dist/actions/connect-external-agent.js

@@ -0,0 +1,68 @@
+import { defineAction } from "@agent-native/core";
+import { getDbExec } from "@agent-native/core/db";
+import { resourceGetByPath, resourcePut, sharedResourceOwner, } from "@agent-native/core/resources/store";
+import { z } from "zod";
+import { currentOrgId, currentOwnerEmail, } from "../server/lib/dispatch-store.js";
+function slugify(value) {
+    return (value
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "") || "agent");
+}
+async function assertCanManageSharedAgent() {
+    const orgId = currentOrgId();
+    if (!orgId)
+        return;
+    const actor = currentOwnerEmail().trim().toLowerCase();
+    const result = await getDbExec().execute({
+        sql: "SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1",
+        args: [orgId, actor],
+    });
+    const role = result.rows[0]?.role;
+    if (role !== "owner" && role !== "admin") {
+        throw new Error("Only organization owners and admins can connect shared agents.");
+    }
+}
+export default defineAction({
+    description: "Connect an existing HTTP/A2A agent to Dispatch. This stores only its public endpoint and metadata; authentication remains in the normal A2A/MCP connection flow.",
+    schema: z.object({
+        url: z.string().min(1).describe("HTTP or HTTPS agent endpoint"),
+        name: z.string().max(160).optional().describe("Agent name"),
+        description: z.string().max(500).optional().describe("Short description"),
+        scope: z
+            .enum(["shared", "personal"])
+            .default("shared")
+            .describe("Share with the workspace or keep the connection personal"),
+    }),
+    run: async ({ url, name, description, scope }) => {
+        const parsed = new URL(url.trim());
+        if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+            throw new Error("Use an http:// or https:// endpoint URL.");
+        }
+        if (parsed.username || parsed.password) {
+            throw new Error("Do not include credentials in the endpoint URL.");
+        }
+        if (scope === "shared")
+            await assertCanManageSharedAgent();
+        const agentName = name?.trim() || parsed.hostname.replace(/^www\./, "");
+        const id = slugify(agentName);
+        const path = `remote-agents/${id}.json`;
+        const owner = scope === "shared"
+            ? sharedResourceOwner(currentOrgId())
+            : currentOwnerEmail();
+        const existing = await resourceGetByPath(owner, path);
+        if (existing) {
+            throw new Error(`An external agent already exists at ${path}. Rename it before connecting again.`);
+        }
+        const manifest = {
+            id,
+            name: agentName,
+            ...(description?.trim() ? { description: description.trim() } : {}),
+            url: parsed.toString(),
+        };
+        const resource = await resourcePut(owner, path, JSON.stringify(manifest, null, 2), "application/json");
+        return { status: "created", resource, agent: manifest, scope };
+    },
+});
+//# sourceMappingURL=connect-external-agent.js.map

package/dist/actions/connect-external-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-external-agent.js","sourceRoot":"","sources":["../../src/actions/connect-external-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,YAAY,EACZ,iBAAiB,GAClB,MAAM,iCAAiC,CAAC;AAEzC,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,CACL,KAAK;SACF,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CACtC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B;IACvC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,GAAG,EAAE,4EAA4E;QACjF,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;KACrB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IAClC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,kKAAkK;IACpK,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QAC/D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC3D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACzE,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;aAC5B,OAAO,CAAC,QAAQ,CAAC;aACjB,QAAQ,CAAC,0DAA0D,CAAC;KACxE,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE;QAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,KAAK,KAAK,QAAQ;YAAE,MAAM,0BAA0B,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,iBAAiB,EAAE,OAAO,CAAC;QACxC,MAAM,KAAK,GACT,KAAK,KAAK,QAAQ;YAChB,CAAC,CAAC,mBAAmB,CAAC,YAAY,EAAE,CAAC;YACrC,CAAC,CAAC,iBAAiB,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,uCAAuC,IAAI,sCAAsC,CAClF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG;YACf,EAAE;YACF,IAAI,EAAE,SAAS;YACf,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE;SACvB,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAChC,KAAK,EACL,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EACjC,kBAAkB,CACnB,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { getDbExec } from \"@agent-native/core/db\";\nimport {\n  resourceGetByPath,\n  resourcePut,\n  sharedResourceOwner,\n} from \"@agent-native/core/resources/store\";\nimport { z } from \"zod\";\n\nimport {\n  currentOrgId,\n  currentOwnerEmail,\n} from \"../server/lib/dispatch-store.js\";\n\nfunction slugify(value: string): string {\n  return (\n    value\n      .trim()\n      .toLowerCase()\n      .replace(/[^a-z0-9]+/g, \"-\")\n      .replace(/^-+|-+$/g, \"\") || \"agent\"\n  );\n}\n\nasync function assertCanManageSharedAgent() {\n  const orgId = currentOrgId();\n  if (!orgId) return;\n  const actor = currentOwnerEmail().trim().toLowerCase();\n  const result = await getDbExec().execute({\n    sql: \"SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1\",\n    args: [orgId, actor],\n  });\n  const role = result.rows[0]?.role;\n  if (role !== \"owner\" && role !== \"admin\") {\n    throw new Error(\n      \"Only organization owners and admins can connect shared agents.\",\n    );\n  }\n}\n\nexport default defineAction({\n  description:\n    \"Connect an existing HTTP/A2A agent to Dispatch. This stores only its public endpoint and metadata; authentication remains in the normal A2A/MCP connection flow.\",\n  schema: z.object({\n    url: z.string().min(1).describe(\"HTTP or HTTPS agent endpoint\"),\n    name: z.string().max(160).optional().describe(\"Agent name\"),\n    description: z.string().max(500).optional().describe(\"Short description\"),\n    scope: z\n      .enum([\"shared\", \"personal\"])\n      .default(\"shared\")\n      .describe(\"Share with the workspace or keep the connection personal\"),\n  }),\n  run: async ({ url, name, description, scope }) => {\n    const parsed = new URL(url.trim());\n    if (parsed.protocol !== \"https:\" && parsed.protocol !== \"http:\") {\n      throw new Error(\"Use an http:// or https:// endpoint URL.\");\n    }\n    if (parsed.username || parsed.password) {\n      throw new Error(\"Do not include credentials in the endpoint URL.\");\n    }\n\n    if (scope === \"shared\") await assertCanManageSharedAgent();\n    const agentName = name?.trim() || parsed.hostname.replace(/^www\\./, \"\");\n    const id = slugify(agentName);\n    const path = `remote-agents/${id}.json`;\n    const owner =\n      scope === \"shared\"\n        ? sharedResourceOwner(currentOrgId())\n        : currentOwnerEmail();\n    const existing = await resourceGetByPath(owner, path);\n    if (existing) {\n      throw new Error(\n        `An external agent already exists at ${path}. Rename it before connecting again.`,\n      );\n    }\n\n    const manifest = {\n      id,\n      name: agentName,\n      ...(description?.trim() ? { description: description.trim() } : {}),\n      url: parsed.toString(),\n    };\n    const resource = await resourcePut(\n      owner,\n      path,\n      JSON.stringify(manifest, null, 2),\n      \"application/json\",\n    );\n\n    return { status: \"created\" as const, resource, agent: manifest, scope };\n  },\n});\n"]}

package/dist/actions/create-workspace-resource.d.ts

@@ -1,11 +1,24 @@
 declare const _default: import("@agent-native/core").ActionDefinition<{
-    kind: "agent" | "instruction" | "knowledge" | "mcp-server" | "skill";
+    kind: "agent" | "agent-file" | "instruction" | "knowledge" | "mcp-server" | "skill";
     name: string;
     description?: string | undefined;
     path: string;
     content: string;
     scope: "all" | "selected";
 }, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    kind: string;
+    name: string;
+    description: string | null;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+} | {
     id: string;
     ownerEmail: string;
     orgId: string | null;
@@ -22,19 +35,6 @@ declare const _default: import("@agent-native/core").ActionDefinition<{
     reviewedAt: number | null;
     createdAt: number;
     updatedAt: number;
-} | {
-    id: string;
-    ownerEmail: string;
-    orgId: string | null;
-    kind: string;
-    name: string;
-    description: string | null;
-    path: string;
-    content: string;
-    scope: string;
-    createdBy: string;
-    createdAt: number;
-    updatedAt: number;
 }>;
 export default _default;
 //# sourceMappingURL=create-workspace-resource.d.ts.map

package/dist/actions/create-workspace-resource.js

@@ -5,8 +5,15 @@ export default defineAction({
     description: 'Create a workspace-wide skill, instruction, agent profile, reference resource, or MCP server. Set scope to "all" for runtime inheritance by every app, or "selected" to grant per-app. When Dispatch approval policy is enabled, All-app creates queue an approval request before taking effect.',
     schema: z.object({
         kind: z
-            .enum(["skill", "instruction", "agent", "knowledge", "mcp-server"])
-            .describe("Resource kind: skill, instruction, agent, knowledge, or mcp-server"),
+            .enum([
+            "skill",
+            "instruction",
+            "agent",
+            "agent-file",
+            "knowledge",
+            "mcp-server",
+        ])
+            .describe("Resource kind: skill, instruction, agent, agent-file, knowledge, or mcp-server"),
         name: z.string().describe("Human-readable name"),
         description: z.string().optional().describe("Short description"),
         path: z

package/dist/actions/create-workspace-resource.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-workspace-resource.js","sourceRoot":"","sources":["../../src/actions/create-workspace-resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,kSAAkS;IACpS,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;aAClE,QAAQ,CACP,oEAAoE,CACrE;QACH,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAChE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,CACP,iRAAiR,CAClR;QACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACxE,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;aACzB,QAAQ,CACP,wFAAwF,CACzF;KACJ,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC;CACnD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { createWorkspaceResource } from \"../server/lib/workspace-resources-store.js\";\n\nexport default defineAction({\n  description:\n    'Create a workspace-wide skill, instruction, agent profile, reference resource, or MCP server. Set scope to \"all\" for runtime inheritance by every app, or \"selected\" to grant per-app. When Dispatch approval policy is enabled, All-app creates queue an approval request before taking effect.',\n  schema: z.object({\n    kind: z\n      .enum([\"skill\", \"instruction\", \"agent\", \"knowledge\", \"mcp-server\"])\n      .describe(\n        \"Resource kind: skill, instruction, agent, knowledge, or mcp-server\",\n      ),\n    name: z.string().describe(\"Human-readable name\"),\n    description: z.string().optional().describe(\"Short description\"),\n    path: z\n      .string()\n      .describe(\n        'Resource path in target apps. Use \"skills/<name>/SKILL.md\" for skills, \"AGENTS.md\" or \"instructions/<name>.md\" for always-on guardrails, \"context/<name>.md\" for reference resources, \"agents/<name>.md\" for custom agents, and \"mcp-servers/<name>.json\" for HTTP MCP servers.',\n      ),\n    content: z.string().describe(\"Full resource content (markdown or JSON)\"),\n    scope: z\n      .enum([\"all\", \"selected\"])\n      .describe(\n        '\"all\" = inherited by every app at runtime, \"selected\" = only apps with explicit grants',\n      ),\n  }),\n  run: async (args) => createWorkspaceResource(args),\n});\n"]}
+{"version":3,"file":"create-workspace-resource.js","sourceRoot":"","sources":["../../src/actions/create-workspace-resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,kSAAkS;IACpS,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC;YACJ,OAAO;YACP,aAAa;YACb,OAAO;YACP,YAAY;YACZ,WAAW;YACX,YAAY;SACb,CAAC;aACD,QAAQ,CACP,gFAAgF,CACjF;QACH,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAChE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,CACP,iRAAiR,CAClR;QACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACxE,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;aACzB,QAAQ,CACP,wFAAwF,CACzF;KACJ,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC;CACnD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { createWorkspaceResource } from \"../server/lib/workspace-resources-store.js\";\n\nexport default defineAction({\n  description:\n    'Create a workspace-wide skill, instruction, agent profile, reference resource, or MCP server. Set scope to \"all\" for runtime inheritance by every app, or \"selected\" to grant per-app. When Dispatch approval policy is enabled, All-app creates queue an approval request before taking effect.',\n  schema: z.object({\n    kind: z\n      .enum([\n        \"skill\",\n        \"instruction\",\n        \"agent\",\n        \"agent-file\",\n        \"knowledge\",\n        \"mcp-server\",\n      ])\n      .describe(\n        \"Resource kind: skill, instruction, agent, agent-file, knowledge, or mcp-server\",\n      ),\n    name: z.string().describe(\"Human-readable name\"),\n    description: z.string().optional().describe(\"Short description\"),\n    path: z\n      .string()\n      .describe(\n        'Resource path in target apps. Use \"skills/<name>/SKILL.md\" for skills, \"AGENTS.md\" or \"instructions/<name>.md\" for always-on guardrails, \"context/<name>.md\" for reference resources, \"agents/<name>.md\" for custom agents, and \"mcp-servers/<name>.json\" for HTTP MCP servers.',\n      ),\n    content: z.string().describe(\"Full resource content (markdown or JSON)\"),\n    scope: z\n      .enum([\"all\", \"selected\"])\n      .describe(\n        '\"all\" = inherited by every app at runtime, \"selected\" = only apps with explicit grants',\n      ),\n  }),\n  run: async (args) => createWorkspaceResource(args),\n});\n"]}

package/dist/actions/create_workspace_app_embed_session.d.ts

@@ -0,0 +1,13 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    app?: string | undefined;
+    url?: string | undefined;
+    path?: string | undefined;
+    chrome?: "full" | "minimal" | undefined;
+}, {
+    startUrl: string;
+    targetPath?: string;
+    expiresAt?: number;
+    app: string;
+}>;
+export default _default;
+//# sourceMappingURL=create_workspace_app_embed_session.d.ts.map

package/dist/actions/create_workspace_app_embed_session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_workspace_app_embed_session.d.ts","sourceRoot":"","sources":["../../src/actions/create_workspace_app_embed_session.ts"],"names":[],"mappings":""}

package/dist/actions/create_workspace_app_embed_session.js

@@ -0,0 +1,30 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createWorkspaceSsoEmbedSession } from "../server/lib/mcp-gateway.js";
+export default defineAction({
+    description: "Create a one-time app-scoped embed session for a workspace app opened inside Dispatch. This browser-only path is rollout-gated and never exposes an app's reusable session to another app.",
+    schema: z.object({
+        app: z
+            .string()
+            .optional()
+            .describe("Workspace app id when path is app-relative."),
+        url: z
+            .string()
+            .optional()
+            .describe("Absolute app URL or app-relative path."),
+        path: z
+            .string()
+            .optional()
+            .describe("App-relative path. Requires app when url is not provided."),
+        chrome: z
+            .enum(["full", "minimal"])
+            .optional()
+            .describe("Embed chrome preference. Defaults to full."),
+    }),
+    readOnly: false,
+    parallelSafe: false,
+    agentTool: false,
+    toolCallable: false,
+    run: async (args) => createWorkspaceSsoEmbedSession(args),
+});
+//# sourceMappingURL=create_workspace_app_embed_session.js.map

package/dist/actions/create_workspace_app_embed_session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_workspace_app_embed_session.js","sourceRoot":"","sources":["../../src/actions/create_workspace_app_embed_session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAE9E,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,4LAA4L;IAC9L,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,wCAAwC,CAAC;QACrD,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,2DAA2D,CAAC;QACxE,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;aACzB,QAAQ,EAAE;aACV,QAAQ,CAAC,4CAA4C,CAAC;KAC1D,CAAC;IACF,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC;CAC1D,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { createWorkspaceSsoEmbedSession } from \"../server/lib/mcp-gateway.js\";\n\nexport default defineAction({\n  description:\n    \"Create a one-time app-scoped embed session for a workspace app opened inside Dispatch. This browser-only path is rollout-gated and never exposes an app's reusable session to another app.\",\n  schema: z.object({\n    app: z\n      .string()\n      .optional()\n      .describe(\"Workspace app id when path is app-relative.\"),\n    url: z\n      .string()\n      .optional()\n      .describe(\"Absolute app URL or app-relative path.\"),\n    path: z\n      .string()\n      .optional()\n      .describe(\"App-relative path. Requires app when url is not provided.\"),\n    chrome: z\n      .enum([\"full\", \"minimal\"])\n      .optional()\n      .describe(\"Embed chrome preference. Defaults to full.\"),\n  }),\n  readOnly: false,\n  parallelSafe: false,\n  agentTool: false,\n  toolCallable: false,\n  run: async (args) => createWorkspaceSsoEmbedSession(args),\n});\n"]}

package/dist/actions/import-agent-pack.d.ts

@@ -0,0 +1,96 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    files: {
+        path: string;
+        content: string;
+    }[];
+    scope?: "all" | "selected" | undefined;
+}, {
+    status: "unchanged";
+    resource: {
+        id: string;
+        ownerEmail: string;
+        orgId: string | null;
+        kind: string;
+        name: string;
+        description: string | null;
+        path: string;
+        content: string;
+        scope: string;
+        createdBy: string;
+        createdAt: number;
+        updatedAt: number;
+    };
+    files: {
+        id: string;
+        ownerEmail: string;
+        orgId: string | null;
+        kind: string;
+        name: string;
+        description: string | null;
+        path: string;
+        content: string;
+        scope: string;
+        createdBy: string;
+        createdAt: number;
+        updatedAt: number;
+    }[];
+    warnings: string[];
+    approval?: undefined;
+} | {
+    status: "pending-approval";
+    approval: {
+        id: string;
+        ownerEmail: string;
+        orgId: string | null;
+        changeType: string;
+        targetType: string;
+        targetId: string | null;
+        status: string;
+        summary: string;
+        payload: string;
+        beforeValue: string | null;
+        afterValue: string | null;
+        requestedBy: string;
+        reviewedBy: string | null;
+        reviewedAt: number | null;
+        createdAt: number;
+        updatedAt: number;
+    };
+    warnings: string[];
+    resource?: undefined;
+    files?: undefined;
+} | {
+    approval?: undefined;
+    status: "created";
+    resource: {
+        id: string;
+        ownerEmail: string;
+        orgId: string | null;
+        kind: string;
+        name: string;
+        description: string | null;
+        path: string;
+        content: string;
+        scope: string;
+        createdBy: string;
+        createdAt: number;
+        updatedAt: number;
+    };
+    files: {
+        id: string;
+        ownerEmail: string;
+        orgId: string | null;
+        kind: string;
+        name: string;
+        description: string | null;
+        path: string;
+        content: string;
+        scope: string;
+        createdBy: string;
+        createdAt: number;
+        updatedAt: number;
+    }[];
+    warnings: string[];
+}>;
+export default _default;
+//# sourceMappingURL=import-agent-pack.d.ts.map

package/dist/actions/import-agent-pack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-agent-pack.d.ts","sourceRoot":"","sources":["../../src/actions/import-agent-pack.ts"],"names":[],"mappings":";;;;;;;YA0GgB,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YA4BJ,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;YAK3B,SAAS"}

package/dist/actions/import-agent-pack.js

@@ -0,0 +1,116 @@
+import crypto from "node:crypto";
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { AGENT_PACK_MAX_FILE_BYTES, AGENT_PACK_MAX_FILES, agentPackProfileContent, agentPackRoot, normalizeAgentPack, } from "../lib/agent-pack.js";
+import { validateImportedAgentTools } from "../lib/simple-agent-profile.js";
+import { applyAgentPackCreate } from "../server/lib/agent-pack-store.js";
+import { createApprovalRequest, getApprovalPolicy, } from "../server/lib/dispatch-store.js";
+import { listWorkspaceResources, } from "../server/lib/workspace-resources-store.js";
+const packFileSchema = z.object({
+    path: z.string().trim().min(1).max(240),
+    content: z.string().max(AGENT_PACK_MAX_FILE_BYTES),
+});
+const schema = z.object({
+    files: z
+        .array(packFileSchema)
+        .min(1)
+        .max(AGENT_PACK_MAX_FILES)
+        .describe("Text files from an agent folder, including its profile"),
+    scope: z
+        .enum(["all", "selected"])
+        .default("all")
+        .describe("Make the pack available to all apps or selected apps"),
+});
+function availableToolNames(dispatchToolNames) {
+    return new Set([
+        ...dispatchToolNames,
+        "agent-teams",
+        "bash",
+        "call-agent",
+        "db-query",
+        "db-schema",
+        "refresh-screen",
+        "resources",
+        "set-search-params",
+        "set-url-path",
+        "tool-search",
+        "web-request",
+        "web-search",
+    ]);
+}
+export default defineAction({
+    description: "Import a folder-backed agent pack from Claude, Cowork, or another agent tool. The pack can include a Markdown/JSON profile, context, references, and skills. Credentials, hooks, shell commands, and local environment settings are never imported.",
+    schema,
+    run: async ({ files, scope }) => {
+        const normalized = normalizeAgentPack(files);
+        const { dispatchActions } = await import("./index.js");
+        const toolValidation = validateImportedAgentTools(normalized.profile.tools, availableToolNames(Object.keys(dispatchActions)));
+        const warnings = [...normalized.warnings, ...toolValidation.warnings];
+        const sourceHash = crypto
+            .createHash("sha256")
+            .update(JSON.stringify(files))
+            .digest("hex");
+        const profileContent = agentPackProfileContent({
+            profile: normalized.profile,
+            tools: toolValidation.tools,
+            sourceHash,
+            importedAt: new Date().toISOString(),
+        });
+        const root = agentPackRoot(normalized.profile.slug);
+        const inputs = [
+            {
+                kind: "agent",
+                name: normalized.profile.name,
+                description: normalized.profile.description,
+                path: `${root}.md`,
+                content: profileContent,
+                scope,
+            },
+            ...normalized.files.map((file) => ({
+                kind: file.kind,
+                name: file.name,
+                description: file.description,
+                path: `${root}/${file.path}`,
+                content: file.content,
+                scope,
+            })),
+        ];
+        const existing = await listWorkspaceResources();
+        const existingProfile = existing.find((resource) => resource.path === `${root}.md`);
+        if (existingProfile?.content.includes(`source-hash: ${sourceHash}`)) {
+            return {
+                status: "unchanged",
+                resource: existingProfile,
+                files: existing.filter((resource) => resource.path.startsWith(`${root}/`)),
+                warnings,
+            };
+        }
+        if (existingProfile) {
+            throw new Error(`An agent already exists at ${root}. Rename the source before importing it.`);
+        }
+        const policy = await getApprovalPolicy();
+        if (scope === "all" && policy.enabled) {
+            const approval = await createApprovalRequest({
+                changeType: "workspace-agent-pack.create",
+                targetType: "workspace-agent-pack",
+                summary: `Import All-app agent pack "${normalized.profile.name}"`,
+                payload: { inputs },
+                beforeValue: null,
+                afterValue: {
+                    name: normalized.profile.name,
+                    path: `${root}.md`,
+                    fileCount: inputs.length,
+                },
+            });
+            return { status: "pending-approval", approval, warnings };
+        }
+        const created = await applyAgentPackCreate(inputs);
+        return {
+            status: "created",
+            resource: created[0] ?? null,
+            files: created.slice(1),
+            warnings,
+        };
+    },
+});
+//# sourceMappingURL=import-agent-pack.js.map

package/dist/actions/import-agent-pack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-agent-pack.js","sourceRoot":"","sources":["../../src/actions/import-agent-pack.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,aAAa,EACb,kBAAkB,GAEnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EACL,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,sBAAsB,GAEvB,MAAM,4CAA4C,CAAC;AAEpD,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,yBAAyB,CAAC;CACnD,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,cAAc,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,oBAAoB,CAAC;SACzB,QAAQ,CAAC,wDAAwD,CAAC;IACrE,KAAK,EAAE,CAAC;SACL,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;SACzB,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,sDAAsD,CAAC;CACpE,CAAC,CAAC;AAEH,SAAS,kBAAkB,CAAC,iBAA2B;IACrD,OAAO,IAAI,GAAG,CAAC;QACb,GAAG,iBAAiB;QACpB,aAAa;QACb,MAAM;QACN,YAAY;QACZ,UAAU;QACV,WAAW;QACX,gBAAgB;QAChB,WAAW;QACX,mBAAmB;QACnB,cAAc;QACd,aAAa;QACb,aAAa;QACb,YAAY;KACb,CAAC,CAAC;AACL,CAAC;AAED,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,qPAAqP;IACvP,MAAM;IACN,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;QAC9B,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAA6B,CAAC,CAAC;QACrE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,cAAc,GAAG,0BAA0B,CAC/C,UAAU,CAAC,OAAO,CAAC,KAAK,EACxB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CACjD,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,MAAM;aACtB,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;aAC7B,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,MAAM,cAAc,GAAG,uBAAuB,CAAC;YAC7C,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,UAAU;YACV,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,MAAM,GAA6B;YACvC;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI;gBAC7B,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,WAAW;gBAC3C,IAAI,EAAE,GAAG,IAAI,KAAK;gBAClB,OAAO,EAAE,cAAc;gBACvB,KAAK;aACN;YACD,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACjC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,IAAI,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE;gBAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK;aACN,CAAC,CAAC;SACJ,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,sBAAsB,EAAE,CAAC;QAChD,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CACnC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,IAAI,KAAK,CAC7C,CAAC;QACF,IAAI,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,UAAU,EAAE,CAAC,EAAE,CAAC;YACpE,OAAO;gBACL,MAAM,EAAE,WAAoB;gBAC5B,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAClC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CACrC;gBACD,QAAQ;aACT,CAAC;QACJ,CAAC;QACD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,8BAA8B,IAAI,0CAA0C,CAC7E,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;QACzC,IAAI,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;gBAC3C,UAAU,EAAE,6BAA6B;gBACzC,UAAU,EAAE,sBAAsB;gBAClC,OAAO,EAAE,8BAA8B,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG;gBACjE,OAAO,EAAE,EAAE,MAAM,EAAE;gBACnB,WAAW,EAAE,IAAI;gBACjB,UAAU,EAAE;oBACV,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI;oBAC7B,IAAI,EAAE,GAAG,IAAI,KAAK;oBAClB,SAAS,EAAE,MAAM,CAAC,MAAM;iBACzB;aACF,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,kBAA2B,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,SAAkB;YAC1B,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,QAAQ;SACT,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import crypto from \"node:crypto\";\n\nimport { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport {\n  AGENT_PACK_MAX_FILE_BYTES,\n  AGENT_PACK_MAX_FILES,\n  agentPackProfileContent,\n  agentPackRoot,\n  normalizeAgentPack,\n  type AgentPackFileInput,\n} from \"../lib/agent-pack.js\";\nimport { validateImportedAgentTools } from \"../lib/simple-agent-profile.js\";\nimport { applyAgentPackCreate } from \"../server/lib/agent-pack-store.js\";\nimport {\n  createApprovalRequest,\n  getApprovalPolicy,\n} from \"../server/lib/dispatch-store.js\";\nimport {\n  listWorkspaceResources,\n  type WorkspaceResourceInput,\n} from \"../server/lib/workspace-resources-store.js\";\n\nconst packFileSchema = z.object({\n  path: z.string().trim().min(1).max(240),\n  content: z.string().max(AGENT_PACK_MAX_FILE_BYTES),\n});\n\nconst schema = z.object({\n  files: z\n    .array(packFileSchema)\n    .min(1)\n    .max(AGENT_PACK_MAX_FILES)\n    .describe(\"Text files from an agent folder, including its profile\"),\n  scope: z\n    .enum([\"all\", \"selected\"])\n    .default(\"all\")\n    .describe(\"Make the pack available to all apps or selected apps\"),\n});\n\nfunction availableToolNames(dispatchToolNames: string[]): Set<string> {\n  return new Set([\n    ...dispatchToolNames,\n    \"agent-teams\",\n    \"bash\",\n    \"call-agent\",\n    \"db-query\",\n    \"db-schema\",\n    \"refresh-screen\",\n    \"resources\",\n    \"set-search-params\",\n    \"set-url-path\",\n    \"tool-search\",\n    \"web-request\",\n    \"web-search\",\n  ]);\n}\n\nexport default defineAction({\n  description:\n    \"Import a folder-backed agent pack from Claude, Cowork, or another agent tool. The pack can include a Markdown/JSON profile, context, references, and skills. Credentials, hooks, shell commands, and local environment settings are never imported.\",\n  schema,\n  run: async ({ files, scope }) => {\n    const normalized = normalizeAgentPack(files as AgentPackFileInput[]);\n    const { dispatchActions } = await import(\"./index.js\");\n    const toolValidation = validateImportedAgentTools(\n      normalized.profile.tools,\n      availableToolNames(Object.keys(dispatchActions)),\n    );\n    const warnings = [...normalized.warnings, ...toolValidation.warnings];\n    const sourceHash = crypto\n      .createHash(\"sha256\")\n      .update(JSON.stringify(files))\n      .digest(\"hex\");\n    const profileContent = agentPackProfileContent({\n      profile: normalized.profile,\n      tools: toolValidation.tools,\n      sourceHash,\n      importedAt: new Date().toISOString(),\n    });\n    const root = agentPackRoot(normalized.profile.slug);\n    const inputs: WorkspaceResourceInput[] = [\n      {\n        kind: \"agent\",\n        name: normalized.profile.name,\n        description: normalized.profile.description,\n        path: `${root}.md`,\n        content: profileContent,\n        scope,\n      },\n      ...normalized.files.map((file) => ({\n        kind: file.kind,\n        name: file.name,\n        description: file.description,\n        path: `${root}/${file.path}`,\n        content: file.content,\n        scope,\n      })),\n    ];\n    const existing = await listWorkspaceResources();\n    const existingProfile = existing.find(\n      (resource) => resource.path === `${root}.md`,\n    );\n    if (existingProfile?.content.includes(`source-hash: ${sourceHash}`)) {\n      return {\n        status: \"unchanged\" as const,\n        resource: existingProfile,\n        files: existing.filter((resource) =>\n          resource.path.startsWith(`${root}/`),\n        ),\n        warnings,\n      };\n    }\n    if (existingProfile) {\n      throw new Error(\n        `An agent already exists at ${root}. Rename the source before importing it.`,\n      );\n    }\n\n    const policy = await getApprovalPolicy();\n    if (scope === \"all\" && policy.enabled) {\n      const approval = await createApprovalRequest({\n        changeType: \"workspace-agent-pack.create\",\n        targetType: \"workspace-agent-pack\",\n        summary: `Import All-app agent pack \"${normalized.profile.name}\"`,\n        payload: { inputs },\n        beforeValue: null,\n        afterValue: {\n          name: normalized.profile.name,\n          path: `${root}.md`,\n          fileCount: inputs.length,\n        },\n      });\n      return { status: \"pending-approval\" as const, approval, warnings };\n    }\n\n    const created = await applyAgentPackCreate(inputs);\n    return {\n      status: \"created\" as const,\n      resource: created[0] ?? null,\n      files: created.slice(1),\n      warnings,\n    };\n  },\n});\n"]}

package/dist/actions/import-agent.d.ts

@@ -0,0 +1,60 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    source: string;
+    fileName?: string | undefined;
+    scope?: "all" | "selected" | undefined;
+}, {
+    status: "unchanged";
+    resource: {
+        id: string;
+        ownerEmail: string;
+        orgId: string | null;
+        kind: string;
+        name: string;
+        description: string | null;
+        path: string;
+        content: string;
+        scope: string;
+        createdBy: string;
+        createdAt: number;
+        updatedAt: number;
+    };
+    source: "claude" | "json" | "markdown";
+    warnings: string[];
+} | {
+    status: "created";
+    resource: {
+        id: string;
+        ownerEmail: string;
+        orgId: string | null;
+        changeType: string;
+        targetType: string;
+        targetId: string | null;
+        status: string;
+        summary: string;
+        payload: string;
+        beforeValue: string | null;
+        afterValue: string | null;
+        requestedBy: string;
+        reviewedBy: string | null;
+        reviewedAt: number | null;
+        createdAt: number;
+        updatedAt: number;
+    } | {
+        id: string;
+        ownerEmail: string;
+        orgId: string | null;
+        kind: string;
+        name: string;
+        description: string | null;
+        path: string;
+        content: string;
+        scope: string;
+        createdBy: string;
+        createdAt: number;
+        updatedAt: number;
+    };
+    source: "claude" | "json" | "markdown";
+    warnings: string[];
+}>;
+export default _default;
+//# sourceMappingURL=import-agent.d.ts.map

package/dist/actions/import-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-agent.d.ts","sourceRoot":"","sources":["../../src/actions/import-agent.ts"],"names":[],"mappings":";;;;;YA0EkB,WAAW;;;;;;;;;;;;;;;;;;YAqBf,SAAS"}