@agent-native/dispatch 0.27.3 → 0.27.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/actions/create-workspace-resource.d.ts +13 -13
- package/dist/actions/delete-destination.d.ts +12 -12
- package/dist/actions/import-agent.d.ts +13 -13
- package/dist/server/lib/app-creation-store.d.ts.map +1 -1
- package/dist/server/lib/app-creation-store.js +86 -5
- package/dist/server/lib/app-creation-store.js.map +1 -1
- package/dist/server/lib/mcp-gateway.d.ts.map +1 -1
- package/dist/server/lib/mcp-gateway.js +42 -10
- package/dist/server/lib/mcp-gateway.js.map +1 -1
- package/dist/server/lib/workspace-app-action-auth.d.ts +9 -0
- package/dist/server/lib/workspace-app-action-auth.d.ts.map +1 -0
- package/dist/server/lib/workspace-app-action-auth.js +87 -0
- package/dist/server/lib/workspace-app-action-auth.js.map +1 -0
- package/dist/server/plugins/agent-chat.js +3 -0
- package/dist/server/plugins/agent-chat.js.map +1 -1
- package/package.json +2 -2
- package/src/server/lib/app-creation-store.spec.ts +86 -0
- package/src/server/lib/app-creation-store.ts +98 -9
- package/src/server/lib/mcp-gateway.spec.ts +49 -0
- package/src/server/lib/mcp-gateway.ts +34 -5
- package/src/server/lib/workspace-app-action-auth.spec.ts +212 -0
- package/src/server/lib/workspace-app-action-auth.ts +105 -0
- package/src/server/plugins/agent-chat.spec.ts +4 -0
- package/src/server/plugins/agent-chat.ts +6 -0
|
@@ -6,19 +6,6 @@ declare const _default: import("@agent-native/core").ActionDefinition<{
|
|
|
6
6
|
content: string;
|
|
7
7
|
scope: "all" | "selected";
|
|
8
8
|
}, {
|
|
9
|
-
id: string;
|
|
10
|
-
ownerEmail: string;
|
|
11
|
-
orgId: string | null;
|
|
12
|
-
kind: string;
|
|
13
|
-
name: string;
|
|
14
|
-
description: string | null;
|
|
15
|
-
path: string;
|
|
16
|
-
content: string;
|
|
17
|
-
scope: string;
|
|
18
|
-
createdBy: string;
|
|
19
|
-
createdAt: number;
|
|
20
|
-
updatedAt: number;
|
|
21
|
-
} | {
|
|
22
9
|
id: string;
|
|
23
10
|
ownerEmail: string;
|
|
24
11
|
orgId: string | null;
|
|
@@ -35,6 +22,19 @@ declare const _default: import("@agent-native/core").ActionDefinition<{
|
|
|
35
22
|
reviewedAt: number | null;
|
|
36
23
|
createdAt: number;
|
|
37
24
|
updatedAt: number;
|
|
25
|
+
} | {
|
|
26
|
+
id: string;
|
|
27
|
+
ownerEmail: string;
|
|
28
|
+
orgId: string | null;
|
|
29
|
+
kind: string;
|
|
30
|
+
name: string;
|
|
31
|
+
description: string | null;
|
|
32
|
+
path: string;
|
|
33
|
+
content: string;
|
|
34
|
+
scope: string;
|
|
35
|
+
createdBy: string;
|
|
36
|
+
createdAt: number;
|
|
37
|
+
updatedAt: number;
|
|
38
38
|
}>;
|
|
39
39
|
export default _default;
|
|
40
40
|
//# sourceMappingURL=create-workspace-resource.d.ts.map
|
|
@@ -1,6 +1,18 @@
|
|
|
1
1
|
declare const _default: import("@agent-native/core").ActionDefinition<{
|
|
2
2
|
id: string;
|
|
3
3
|
}, {
|
|
4
|
+
id: string;
|
|
5
|
+
ownerEmail: string;
|
|
6
|
+
orgId: string | null;
|
|
7
|
+
name: string;
|
|
8
|
+
platform: string;
|
|
9
|
+
destination: string;
|
|
10
|
+
threadRef: string | null;
|
|
11
|
+
notes: string | null;
|
|
12
|
+
createdBy: string;
|
|
13
|
+
createdAt: number;
|
|
14
|
+
updatedAt: number;
|
|
15
|
+
} | {
|
|
4
16
|
id: string;
|
|
5
17
|
ownerEmail: string;
|
|
6
18
|
orgId: string | null;
|
|
@@ -17,18 +29,6 @@ declare const _default: import("@agent-native/core").ActionDefinition<{
|
|
|
17
29
|
reviewedAt: number | null;
|
|
18
30
|
createdAt: number;
|
|
19
31
|
updatedAt: number;
|
|
20
|
-
} | {
|
|
21
|
-
id: string;
|
|
22
|
-
ownerEmail: string;
|
|
23
|
-
orgId: string | null;
|
|
24
|
-
name: string;
|
|
25
|
-
platform: string;
|
|
26
|
-
destination: string;
|
|
27
|
-
threadRef: string | null;
|
|
28
|
-
notes: string | null;
|
|
29
|
-
createdBy: string;
|
|
30
|
-
createdAt: number;
|
|
31
|
-
updatedAt: number;
|
|
32
32
|
}>;
|
|
33
33
|
export default _default;
|
|
34
34
|
//# sourceMappingURL=delete-destination.d.ts.map
|
|
@@ -23,6 +23,19 @@ declare const _default: import("@agent-native/core").ActionDefinition<{
|
|
|
23
23
|
} | {
|
|
24
24
|
status: "created";
|
|
25
25
|
resource: {
|
|
26
|
+
id: string;
|
|
27
|
+
ownerEmail: string;
|
|
28
|
+
orgId: string | null;
|
|
29
|
+
kind: string;
|
|
30
|
+
name: string;
|
|
31
|
+
description: string | null;
|
|
32
|
+
path: string;
|
|
33
|
+
content: string;
|
|
34
|
+
scope: string;
|
|
35
|
+
createdBy: string;
|
|
36
|
+
createdAt: number;
|
|
37
|
+
updatedAt: number;
|
|
38
|
+
} | {
|
|
26
39
|
id: string;
|
|
27
40
|
ownerEmail: string;
|
|
28
41
|
orgId: string | null;
|
|
@@ -39,19 +52,6 @@ declare const _default: import("@agent-native/core").ActionDefinition<{
|
|
|
39
52
|
reviewedAt: number | null;
|
|
40
53
|
createdAt: number;
|
|
41
54
|
updatedAt: number;
|
|
42
|
-
} | {
|
|
43
|
-
id: string;
|
|
44
|
-
ownerEmail: string;
|
|
45
|
-
orgId: string | null;
|
|
46
|
-
kind: string;
|
|
47
|
-
name: string;
|
|
48
|
-
description: string | null;
|
|
49
|
-
path: string;
|
|
50
|
-
content: string;
|
|
51
|
-
scope: string;
|
|
52
|
-
createdBy: string;
|
|
53
|
-
createdAt: number;
|
|
54
|
-
updatedAt: number;
|
|
55
55
|
};
|
|
56
56
|
source: "claude" | "json" | "markdown";
|
|
57
57
|
warnings: string[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"app-creation-store.d.ts","sourceRoot":"","sources":["../../../src/server/lib/app-creation-store.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"app-creation-store.d.ts","sourceRoot":"","sources":["../../../src/server/lib/app-creation-store.ts"],"names":[],"mappings":"AA+EA,KAAK,oBAAoB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAElD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,oBAAoB,GAAG,KAAK,CAAC;CACzC;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,sBAAsB,EAAE,KAAK,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;IACjE,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,uBAAuB,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,sFAAsF;IACtF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,qEAAqE;IACrE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,wDAAwD;IACxD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAmFD,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,CAcR;AA6hBD,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC;IAAE,cAAc,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAcxC;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC;IAAE,cAAc,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAexC;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAkBhC;AA+ZD,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAOtD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,CAiChD;AAyCD,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA+C/B;AAED,wBAAsB,iBAAiB,CACrC,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CA0DhC;AAwHD,wBAAsB,+BAA+B,IAAI,OAAO,CAC9D,0BAA0B,EAAE,CAC7B,CAOA;AAID,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAuC/D;AA6CD,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CA+B3E;AA6DD,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAgB/B;AAWD,wBAAgB,yBAAyB,IAAI,OAAO,CAcnD;AA8PD;;;GAGG;AACH,MAAM,MAAM,4BAA4B,GACpC,qBAAqB,GACrB,8BAA8B,GAC9B,uBAAuB,GACvB,8BAA8B,GAC9B,eAAe,CAAC;AAEpB,MAAM,WAAW,oCAAoC;IACnD,IAAI,EAAE,qBAAqB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,qBAAqB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mCAAmC;IAClD,IAAI,EAAE,qBAAqB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC,4BAA4B,EAAE,qBAAqB,CAAC,CAAC;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,+BAA+B,GACvC,oCAAoC,GACpC,mCAAmC,GACnC,2BAA2B,GAC3B,2BAA2B,GAC3B,wBAAwB,CAAC;AAE7B,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAmM3C"}
|
|
@@ -2,13 +2,16 @@ import { spawn } from "node:child_process";
|
|
|
2
2
|
import fs from "node:fs";
|
|
3
3
|
import path from "node:path";
|
|
4
4
|
import { fileURLToPath } from "node:url";
|
|
5
|
+
import { signA2AToken } from "@agent-native/core/a2a";
|
|
5
6
|
import { getDbExec } from "@agent-native/core/db";
|
|
7
|
+
import { getOrgA2ASecret, getOrgDomain } from "@agent-native/core/org";
|
|
6
8
|
import { ensureBuilderProject, getBuilderBranchProjectId, getRequestContext, isIntegrationCallerRequest, resolveBuilderCredentialsDetailed, runBuilderAgent, } from "@agent-native/core/server";
|
|
7
9
|
import { getSetting, putSetting } from "@agent-native/core/settings";
|
|
8
10
|
import { assertValidWorkspaceAppId } from "@agent-native/core/shared";
|
|
9
11
|
import { identityKeyForIncoming } from "./dispatch-integrations.js";
|
|
10
12
|
import { currentOrgId, currentOwnerEmail, recordAudit, resolveLinkedOwner, } from "./dispatch-store.js";
|
|
11
13
|
import { createRequest, listSecretOptions } from "./vault-store.js";
|
|
14
|
+
import { WORKSPACE_APPS_ACTION_PATH } from "./workspace-app-action-auth.js";
|
|
12
15
|
import { grantWorkspaceResourcesToApp, listWorkspaceResourceOptions, } from "./workspace-resources-store.js";
|
|
13
16
|
const SETTINGS_KEY = "dispatch-app-creation-settings";
|
|
14
17
|
const BUILDER_WORKSPACE_REPO_URL_ENV = "AGENT_NATIVE_WORKSPACE_REPO_URL";
|
|
@@ -20,7 +23,7 @@ const WORKSPACE_APP_METADATA_SETTINGS_KEY = "workspace-app-metadata";
|
|
|
20
23
|
const WORKSPACE_APPS_ENV_KEY = "AGENT_NATIVE_WORKSPACE_APPS_JSON";
|
|
21
24
|
const WORKSPACE_APPS_MANIFEST_FILE = "workspace-apps.json";
|
|
22
25
|
const WORKSPACE_APPS_GATEWAY_PATH = "/_workspace/apps";
|
|
23
|
-
const WORKSPACE_APPS_GATEWAY_TIMEOUT_MS =
|
|
26
|
+
const WORKSPACE_APPS_GATEWAY_TIMEOUT_MS = 2_500;
|
|
24
27
|
const MAX_PENDING_APPS = 50;
|
|
25
28
|
const PENDING_WORKSPACE_APP_TTL_MS = 7 * 24 * 60 * 60 * 1_000;
|
|
26
29
|
const AGENT_CARD_PATH = "/.well-known/agent-card.json";
|
|
@@ -787,16 +790,94 @@ async function readWorkspaceAppsFromGateway() {
|
|
|
787
790
|
const base = process.env.WORKSPACE_GATEWAY_URL;
|
|
788
791
|
if (!base)
|
|
789
792
|
return null;
|
|
793
|
+
let baseUrl;
|
|
794
|
+
try {
|
|
795
|
+
baseUrl = new URL(base);
|
|
796
|
+
}
|
|
797
|
+
catch {
|
|
798
|
+
// coercion-ok: malformed gateway configuration is an unavailable registry
|
|
799
|
+
// and falls back to local sources.
|
|
800
|
+
return null;
|
|
801
|
+
}
|
|
802
|
+
if (baseUrl.protocol !== "http:" && baseUrl.protocol !== "https:") {
|
|
803
|
+
return null;
|
|
804
|
+
}
|
|
790
805
|
const controller = new AbortController();
|
|
791
806
|
const timeout = setTimeout(() => controller.abort(), WORKSPACE_APPS_GATEWAY_TIMEOUT_MS);
|
|
807
|
+
const requestContext = getRequestContext();
|
|
808
|
+
const authHeaders = {};
|
|
809
|
+
if (requestContext?.userEmail) {
|
|
810
|
+
const [orgDomain, orgSecret] = requestContext.orgId
|
|
811
|
+
? await Promise.all([
|
|
812
|
+
// coercion-ok: an unavailable org row falls back to the deployment secret.
|
|
813
|
+
getOrgDomain(requestContext.orgId).catch(() => null),
|
|
814
|
+
// coercion-ok: an unavailable org row falls back to the deployment secret.
|
|
815
|
+
getOrgA2ASecret(requestContext.orgId).catch(() => null),
|
|
816
|
+
])
|
|
817
|
+
: [null, null];
|
|
818
|
+
const usableOrgSecret = typeof orgSecret === "string" && orgSecret.trim().length > 0;
|
|
819
|
+
const usableOrgDomain = typeof orgDomain === "string" && orgDomain.trim().length > 0;
|
|
820
|
+
try {
|
|
821
|
+
const token = await signA2AToken(requestContext.userEmail, usableOrgDomain ? orgDomain.trim() : undefined, usableOrgSecret ? orgSecret.trim() : undefined, {
|
|
822
|
+
expiresIn: "1m",
|
|
823
|
+
// The workspace registry is an authenticated read. Prefer the
|
|
824
|
+
// shared deployment secret so a registry read does not depend on
|
|
825
|
+
// every app having the same org row.
|
|
826
|
+
preferGlobalSecret: true,
|
|
827
|
+
// Keep the exact request scope even when the org-domain lookup is
|
|
828
|
+
// unavailable. The receiver must never infer a different org from
|
|
829
|
+
// the caller's email in that case.
|
|
830
|
+
...(requestContext.orgId
|
|
831
|
+
? { extraClaims: { org_id: requestContext.orgId } }
|
|
832
|
+
: {}),
|
|
833
|
+
});
|
|
834
|
+
authHeaders.Authorization = `Bearer ${token}`;
|
|
835
|
+
}
|
|
836
|
+
catch {
|
|
837
|
+
// coercion-ok: absent signing credentials keep local unauthenticated
|
|
838
|
+
// gateway discovery available and make hosted discovery fail closed.
|
|
839
|
+
// Keep the unauthenticated local-dev gateway path available. A hosted
|
|
840
|
+
// gateway will fail closed below when its action route needs identity.
|
|
841
|
+
}
|
|
842
|
+
}
|
|
843
|
+
const gatewayUrl = (pathname) => {
|
|
844
|
+
const url = new URL(baseUrl.toString());
|
|
845
|
+
const basePath = url.pathname.replace(/\/+$/, "");
|
|
846
|
+
url.pathname = `${basePath}${pathname}` || "/";
|
|
847
|
+
url.search = "";
|
|
848
|
+
url.hash = "";
|
|
849
|
+
return url;
|
|
850
|
+
};
|
|
851
|
+
const headers = {
|
|
852
|
+
accept: "application/json",
|
|
853
|
+
...authHeaders,
|
|
854
|
+
};
|
|
792
855
|
try {
|
|
793
|
-
const
|
|
794
|
-
headers
|
|
856
|
+
const localResponse = await fetch(gatewayUrl(WORKSPACE_APPS_GATEWAY_PATH), {
|
|
857
|
+
headers,
|
|
858
|
+
signal: controller.signal,
|
|
859
|
+
});
|
|
860
|
+
if (localResponse.ok) {
|
|
861
|
+
return parseWorkspaceAppsManifest(
|
|
862
|
+
// coercion-ok: malformed gateway JSON is an unavailable registry and
|
|
863
|
+
// must fall through to the local manifest sources.
|
|
864
|
+
await localResponse.json().catch(() => null));
|
|
865
|
+
}
|
|
866
|
+
if (!authHeaders.Authorization)
|
|
867
|
+
return null;
|
|
868
|
+
const actionUrl = gatewayUrl(WORKSPACE_APPS_ACTION_PATH);
|
|
869
|
+
actionUrl.searchParams.set("includeAgentCards", "false");
|
|
870
|
+
actionUrl.searchParams.set("audience", "all");
|
|
871
|
+
const actionResponse = await fetch(actionUrl, {
|
|
872
|
+
headers,
|
|
795
873
|
signal: controller.signal,
|
|
796
874
|
});
|
|
797
|
-
if (!
|
|
875
|
+
if (!actionResponse.ok)
|
|
798
876
|
return null;
|
|
799
|
-
return parseWorkspaceAppsManifest(
|
|
877
|
+
return parseWorkspaceAppsManifest(
|
|
878
|
+
// coercion-ok: malformed gateway JSON is an unavailable registry and
|
|
879
|
+
// must fall through to the local manifest sources.
|
|
880
|
+
await actionResponse.json().catch(() => null));
|
|
800
881
|
}
|
|
801
882
|
catch {
|
|
802
883
|
return null;
|