@agent-native/dispatch 0.27.6 → 0.27.8

package/dist/actions/create_workspace_app_embed_session.d.ts

@@ -1,3 +1,9 @@
+/**
+ * Browser callers must come from the Dispatch parent surface. Native callers
+ * carry the parent bearer explicitly; direct in-process action calls have no
+ * request headers and are already inside the server authorization boundary.
+ */
+export declare function assertWorkspaceEmbedSessionCaller(headers: Headers | undefined): Promise<void>;
 declare const _default: import("@agent-native/core").ActionDefinition<{
     app?: string | undefined;
     url?: string | undefined;

package/dist/actions/create_workspace_app_embed_session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create_workspace_app_embed_session.d.ts","sourceRoot":"","sources":["../../src/actions/create_workspace_app_embed_session.ts"],"names":[],"mappings":""}
+{"version":3,"file":"create_workspace_app_embed_session.d.ts","sourceRoot":"","sources":["../../src/actions/create_workspace_app_embed_session.ts"],"names":[],"mappings":"AAcA;;;;GAIG;AACH,wBAAsB,iCAAiC,CACrD,OAAO,EAAE,OAAO,GAAG,SAAS,GAC3B,OAAO,CAAC,IAAI,CAAC,CAsCf"}

package/dist/actions/create_workspace_app_embed_session.js

@@ -1,6 +1,51 @@
 import { defineAction } from "@agent-native/core";
+import { getRequestContext } from "@agent-native/core/server";
 import { z } from "zod";
+import { listWorkspaceApps } from "../server/lib/app-creation-store.js";
 import { createWorkspaceSsoEmbedSession } from "../server/lib/mcp-gateway.js";
+function isPathWithinApp(pathname, appPath) {
+    const normalized = appPath.replace(/\/+$/, "") || "/";
+    return normalized === "/"
+        ? pathname.startsWith("/")
+        : pathname === normalized || pathname.startsWith(`${normalized}/`);
+}
+/**
+ * Browser callers must come from the Dispatch parent surface. Native callers
+ * carry the parent bearer explicitly; direct in-process action calls have no
+ * request headers and are already inside the server authorization boundary.
+ */
+export async function assertWorkspaceEmbedSessionCaller(headers) {
+    if (!headers)
+        return;
+    const authorization = headers.get("authorization")?.trim();
+    if (authorization?.toLowerCase().startsWith("bearer "))
+        return;
+    if (headers.get("sec-fetch-site")?.toLowerCase() === "cross-site") {
+        throw new Error("Workspace app sessions must be requested by Dispatch.");
+    }
+    const referer = headers.get("referer");
+    const requestOrigin = getRequestContext()?.requestOrigin;
+    if (!referer || !requestOrigin) {
+        throw new Error("Workspace app sessions must be requested by Dispatch.");
+    }
+    let refererUrl;
+    try {
+        refererUrl = new URL(referer);
+    }
+    catch {
+        throw new Error("Workspace app sessions must be requested by Dispatch.");
+    }
+    if (refererUrl.origin !== requestOrigin) {
+        throw new Error("Workspace app sessions must be requested by Dispatch.");
+    }
+    const apps = await listWorkspaceApps({
+        includeAgentCards: false,
+        audience: "all",
+    });
+    if (apps.some((app) => !app.isDispatch && isPathWithinApp(refererUrl.pathname, app.path))) {
+        throw new Error("Workspace apps cannot mint sessions for themselves.");
+    }
+}
 export default defineAction({
     description: "Create a one-time app-scoped embed session for a workspace app opened inside Dispatch. This browser-only path is rollout-gated and never exposes an app's reusable session to another app.",
     schema: z.object({
@@ -25,6 +70,9 @@ export default defineAction({
     parallelSafe: false,
     agentTool: false,
     toolCallable: false,
-    run: async (args) => createWorkspaceSsoEmbedSession(args),
+    run: async (args, context) => {
+        await assertWorkspaceEmbedSessionCaller(context?.requestHeaders);
+        return createWorkspaceSsoEmbedSession(args);
+    },
 });
 //# sourceMappingURL=create_workspace_app_embed_session.js.map

package/dist/actions/create_workspace_app_embed_session.js.map

@@ -1 +1 @@
-{"version":3,"file":"create_workspace_app_embed_session.js","sourceRoot":"","sources":["../../src/actions/create_workspace_app_embed_session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAE9E,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,4LAA4L;IAC9L,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,wCAAwC,CAAC;QACrD,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,2DAA2D,CAAC;QACxE,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;aACzB,QAAQ,EAAE;aACV,QAAQ,CAAC,4CAA4C,CAAC;KAC1D,CAAC;IACF,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC;CAC1D,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\n\nimport { createWorkspaceSsoEmbedSession } from \"../server/lib/mcp-gateway.js\";\n\nexport default defineAction({\n  description:\n    \"Create a one-time app-scoped embed session for a workspace app opened inside Dispatch. This browser-only path is rollout-gated and never exposes an app's reusable session to another app.\",\n  schema: z.object({\n    app: z\n      .string()\n      .optional()\n      .describe(\"Workspace app id when path is app-relative.\"),\n    url: z\n      .string()\n      .optional()\n      .describe(\"Absolute app URL or app-relative path.\"),\n    path: z\n      .string()\n      .optional()\n      .describe(\"App-relative path. Requires app when url is not provided.\"),\n    chrome: z\n      .enum([\"full\", \"minimal\"])\n      .optional()\n      .describe(\"Embed chrome preference. Defaults to full.\"),\n  }),\n  readOnly: false,\n  parallelSafe: false,\n  agentTool: false,\n  toolCallable: false,\n  run: async (args) => createWorkspaceSsoEmbedSession(args),\n});\n"]}
+{"version":3,"file":"create_workspace_app_embed_session.js","sourceRoot":"","sources":["../../src/actions/create_workspace_app_embed_session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAE9E,SAAS,eAAe,CAAC,QAAgB,EAAE,OAAe;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IACtD,OAAO,UAAU,KAAK,GAAG;QACvB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1B,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,OAA4B;IAE5B,IAAI,CAAC,OAAO;QAAE,OAAO;IAErB,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,aAAa,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO;IAE/D,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,iBAAiB,EAAE,EAAE,aAAa,CAAC;IACzD,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,UAAe,CAAC;IACpB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;QACnC,iBAAiB,EAAE,KAAK;QACxB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,IACE,IAAI,CAAC,IAAI,CACP,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,GAAG,CAAC,UAAU,IAAI,eAAe,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CACpE,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,4LAA4L;IAC9L,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,wCAAwC,CAAC;QACrD,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,2DAA2D,CAAC;QACxE,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;aACzB,QAAQ,EAAE;aACV,QAAQ,CAAC,4CAA4C,CAAC;KAC1D,CAAC;IACF,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC3B,MAAM,iCAAiC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACjE,OAAO,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { getRequestContext } from \"@agent-native/core/server\";\nimport { z } from \"zod\";\n\nimport { listWorkspaceApps } from \"../server/lib/app-creation-store.js\";\nimport { createWorkspaceSsoEmbedSession } from \"../server/lib/mcp-gateway.js\";\n\nfunction isPathWithinApp(pathname: string, appPath: string): boolean {\n  const normalized = appPath.replace(/\\/+$/, \"\") || \"/\";\n  return normalized === \"/\"\n    ? pathname.startsWith(\"/\")\n    : pathname === normalized || pathname.startsWith(`${normalized}/`);\n}\n\n/**\n * Browser callers must come from the Dispatch parent surface. Native callers\n * carry the parent bearer explicitly; direct in-process action calls have no\n * request headers and are already inside the server authorization boundary.\n */\nexport async function assertWorkspaceEmbedSessionCaller(\n  headers: Headers | undefined,\n): Promise<void> {\n  if (!headers) return;\n\n  const authorization = headers.get(\"authorization\")?.trim();\n  if (authorization?.toLowerCase().startsWith(\"bearer \")) return;\n\n  if (headers.get(\"sec-fetch-site\")?.toLowerCase() === \"cross-site\") {\n    throw new Error(\"Workspace app sessions must be requested by Dispatch.\");\n  }\n\n  const referer = headers.get(\"referer\");\n  const requestOrigin = getRequestContext()?.requestOrigin;\n  if (!referer || !requestOrigin) {\n    throw new Error(\"Workspace app sessions must be requested by Dispatch.\");\n  }\n\n  let refererUrl: URL;\n  try {\n    refererUrl = new URL(referer);\n  } catch {\n    throw new Error(\"Workspace app sessions must be requested by Dispatch.\");\n  }\n  if (refererUrl.origin !== requestOrigin) {\n    throw new Error(\"Workspace app sessions must be requested by Dispatch.\");\n  }\n\n  const apps = await listWorkspaceApps({\n    includeAgentCards: false,\n    audience: \"all\",\n  });\n  if (\n    apps.some(\n      (app) =>\n        !app.isDispatch && isPathWithinApp(refererUrl.pathname, app.path),\n    )\n  ) {\n    throw new Error(\"Workspace apps cannot mint sessions for themselves.\");\n  }\n}\n\nexport default defineAction({\n  description:\n    \"Create a one-time app-scoped embed session for a workspace app opened inside Dispatch. This browser-only path is rollout-gated and never exposes an app's reusable session to another app.\",\n  schema: z.object({\n    app: z\n      .string()\n      .optional()\n      .describe(\"Workspace app id when path is app-relative.\"),\n    url: z\n      .string()\n      .optional()\n      .describe(\"Absolute app URL or app-relative path.\"),\n    path: z\n      .string()\n      .optional()\n      .describe(\"App-relative path. Requires app when url is not provided.\"),\n    chrome: z\n      .enum([\"full\", \"minimal\"])\n      .optional()\n      .describe(\"Embed chrome preference. Defaults to full.\"),\n  }),\n  readOnly: false,\n  parallelSafe: false,\n  agentTool: false,\n  toolCallable: false,\n  run: async (args, context) => {\n    await assertWorkspaceEmbedSessionCaller(context?.requestHeaders);\n    return createWorkspaceSsoEmbedSession(args);\n  },\n});\n"]}

package/dist/actions/delete-destination.d.ts

@@ -1,18 +1,6 @@
 declare const _default: import("@agent-native/core").ActionDefinition<{
     id: string;
 }, {
-    id: string;
-    ownerEmail: string;
-    orgId: string | null;
-    name: string;
-    platform: string;
-    destination: string;
-    threadRef: string | null;
-    notes: string | null;
-    createdBy: string;
-    createdAt: number;
-    updatedAt: number;
-} | {
     id: string;
     ownerEmail: string;
     orgId: string | null;
@@ -29,6 +17,18 @@ declare const _default: import("@agent-native/core").ActionDefinition<{
     reviewedAt: number | null;
     createdAt: number;
     updatedAt: number;
+} | {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    name: string;
+    platform: string;
+    destination: string;
+    threadRef: string | null;
+    notes: string | null;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
 }>;
 export default _default;
 //# sourceMappingURL=delete-destination.d.ts.map

package/dist/actions/delete-workspace-resource.d.ts

@@ -1,6 +1,19 @@
 declare const _default: import("@agent-native/core").ActionDefinition<{
     id: string;
 }, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    kind: string;
+    name: string;
+    description: string | null;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+} | {
     id: string;
     ownerEmail: string;
     orgId: string | null;
@@ -17,19 +30,6 @@ declare const _default: import("@agent-native/core").ActionDefinition<{
     reviewedAt: number | null;
     createdAt: number;
     updatedAt: number;
-} | {
-    id: string;
-    ownerEmail: string;
-    orgId: string | null;
-    kind: string;
-    name: string;
-    description: string | null;
-    path: string;
-    content: string;
-    scope: string;
-    createdBy: string;
-    createdAt: number;
-    updatedAt: number;
 }>;
 export default _default;
 //# sourceMappingURL=delete-workspace-resource.d.ts.map

package/dist/actions/update-workspace-resource.d.ts

@@ -5,6 +5,19 @@ declare const _default: import("@agent-native/core").ActionDefinition<{
     content?: string | undefined;
     scope?: "all" | "selected" | undefined;
 }, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    kind: string;
+    name: string;
+    description: string | null;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+} | {
     id: string;
     ownerEmail: string;
     orgId: string | null;
@@ -21,19 +34,6 @@ declare const _default: import("@agent-native/core").ActionDefinition<{
     reviewedAt: number | null;
     createdAt: number;
     updatedAt: number;
-} | {
-    id: string;
-    ownerEmail: string;
-    orgId: string | null;
-    kind: string;
-    name: string;
-    description: string | null;
-    path: string;
-    content: string;
-    scope: string;
-    createdBy: string;
-    createdAt: number;
-    updatedAt: number;
 }>;
 export default _default;
 //# sourceMappingURL=update-workspace-resource.d.ts.map

package/dist/components/workspace-app-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-app-host.d.ts","sourceRoot":"","sources":["../../src/components/workspace-app-host.tsx"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,sCAAsC,CAAC;AAoC9C,UAAU,iBAAiB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,CAAC;CACnB;AA8CD,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,iBAAiB,CAEnB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,UAAU,sBAAsB;IAC9B,GAAG,EAAE,oBAAoB,CAAC;IAC1B,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE,aAAa,CAAC;CACtB;AAED,wBAAgB,iBAAiB,CAAC,EAChC,GAAG,EACH,SAAS,EACT,WAAmB,EACnB,IAA2B,GAC5B,EAAE,sBAAsB,mDA2NxB;AAED,wBAAgB,gBAAgB,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,mDA2J7D;AAID,wBAAgB,qBAAqB,CAAC,EACpC,WAAW,GACZ,EAAE;IACD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,mDAwCA"}
+{"version":3,"file":"workspace-app-host.d.ts","sourceRoot":"","sources":["../../src/components/workspace-app-host.tsx"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,sCAAsC,CAAC;AA+B9C,UAAU,iBAAiB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,CAAC;CACnB;AAqBD,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,iBAAiB,CAEnB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,UAAU,sBAAsB;IAC9B,GAAG,EAAE,oBAAoB,CAAC;IAC1B,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE,aAAa,CAAC;CACtB;AAED,wBAAgB,iBAAiB,CAAC,EAChC,GAAG,EACH,SAAS,EACT,WAAmB,EACnB,IAA2B,GAC5B,EAAE,sBAAsB,mDAuLxB;AAED,wBAAgB,gBAAgB,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,mDA2J7D;AAID,wBAAgB,qBAAqB,CAAC,EACpC,WAAW,GACZ,EAAE;IACD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,mDAwCA"}

package/dist/components/workspace-app-host.js

@@ -5,7 +5,7 @@ import { useFeatureFlag } from "@agent-native/core/client/feature-flags";
 import { useActionMutation, useActionQuery, } from "@agent-native/core/client/hooks";
 import { useT } from "@agent-native/core/client/i18n";
 import { withBuilderUtmTrackingParams } from "@agent-native/core/shared/builder-link-tracking";
-import { IconArrowLeft, IconArrowUpRight, IconClockHour4, IconLock, } from "@tabler/icons-react";
+import { IconArrowLeft, IconClockHour4 } from "@tabler/icons-react";
 import { useTheme } from "next-themes";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { Link } from "react-router";
@@ -16,26 +16,6 @@ import { ActionQueryError } from "./action-query-error.js";
 import { Badge } from "./ui/badge.js";
 import { Button } from "./ui/button.js";
 import { Skeleton } from "./ui/skeleton.js";
-function resolveWorkspaceAppAuthState(rawUrl) {
-    if (!rawUrl)
-        return "unknown";
-    try {
-        const lastSegment = new URL(rawUrl, window.location.origin).pathname
-            .split("/")
-            .filter(Boolean)
-            .at(-1)
-            ?.toLowerCase();
-        if (lastSegment === "sign-in" ||
-            lastSegment === "login" ||
-            lastSegment === "signup") {
-            return "unauthenticated";
-        }
-        return "authenticated";
-    }
-    catch {
-        return "unknown";
-    }
-}
 function buildWorkspaceAppThemeUpdate(theme) {
     return {
         type: "agent-native-theme-update",
@@ -58,7 +38,6 @@ export function WorkspaceAppFrame({ app, embedPath, chatSidebar = false, copy =
     const [embedError, setEmbedError] = useState(null);
     const [isDirectFallback, setIsDirectFallback] = useState(false);
     const [embedAttempt, setEmbedAttempt] = useState(0);
-    const [authState, setAuthState] = useState("unknown");
     const embedFrameRef = useRef(null);
     const postThemeToFrame = useCallback(() => {
         embedFrameRef.current?.contentWindow?.postMessage(buildWorkspaceAppThemeUpdate(theme), "*");
@@ -67,19 +46,7 @@ export function WorkspaceAppFrame({ app, embedPath, chatSidebar = false, copy =
         postThemeToFrame();
         if (isDirectFallback)
             setEmbedError(null);
-        const frame = embedFrameRef.current;
-        let frameUrl = embedUrl;
-        try {
-            frameUrl = frame?.contentWindow?.location.href ?? frameUrl;
-            // coercion-ok: Cross-origin frames cannot expose location; their auth state arrives by message.
-        }
-        catch {
-            // Cross-origin app frames report their auth state through postMessage.
-        }
-        const nextAuthState = resolveWorkspaceAppAuthState(frameUrl);
-        if (nextAuthState !== "unknown")
-            setAuthState(nextAuthState);
-    }, [embedUrl, isDirectFallback, postThemeToFrame]);
+    }, [isDirectFallback, postThemeToFrame]);
     const workspaceSsoEnabled = useFeatureFlag(DISPATCH_WORKSPACE_SSO_FLAG.key);
     const createEmbedSession = useActionMutation("create_embed_session", {
         skipActionQueryInvalidation: true,
@@ -112,7 +79,6 @@ export function WorkspaceAppFrame({ app, embedPath, chatSidebar = false, copy =
         setEmbedUrl(null);
         setEmbedError(null);
         setIsDirectFallback(false);
-        setAuthState("unknown");
         const createSession = workspaceSsoEnabled
             ? createWorkspaceSsoEmbedSession
             : createEmbedSession;
@@ -125,9 +91,20 @@ export function WorkspaceAppFrame({ app, embedPath, chatSidebar = false, copy =
             .catch((cause) => {
             if (cancelled)
                 return;
+            const error = cause instanceof Error ? cause : new Error(String(cause));
+            if (workspaceSsoEnabled) {
+                // An SSO-enabled pane must never fall back to the child app's
+                // unauthenticated shell. Keep the parent-owned retry surface in
+                // place so a transient exchange failure cannot expose another
+                // login form.
+                setIsDirectFallback(false);
+                setEmbedUrl(null);
+                setEmbedError(error);
+                return;
+            }
             setIsDirectFallback(true);
             setEmbedUrl(workspaceAppDirectHref({ path: app.path ?? "", url: app.url }, embedPath ?? "/"));
-            setEmbedError(cause instanceof Error ? cause : new Error(String(cause)));
+            setEmbedError(error);
         });
         return () => {
             cancelled = true;
@@ -153,21 +130,6 @@ export function WorkspaceAppFrame({ app, embedPath, chatSidebar = false, copy =
         window.addEventListener("message", handleEmbedSessionExpired);
         return () => window.removeEventListener("message", handleEmbedSessionExpired);
     }, [embedUrl]);
-    useEffect(() => {
-        const handleAuthState = (event) => {
-            const frame = embedFrameRef.current;
-            if (!frame || event.source !== frame.contentWindow)
-                return;
-            if (event.data?.type !== "agentNative.authState")
-                return;
-            const status = event.data.data?.status;
-            if (status === "authenticated" || status === "unauthenticated") {
-                setAuthState(status);
-            }
-        };
-        window.addEventListener("message", handleAuthState);
-        return () => window.removeEventListener("message", handleAuthState);
-    }, []);
     useEffect(() => {
         postThemeToFrame();
     }, [embedUrl, postThemeToFrame]);
@@ -185,7 +147,7 @@ export function WorkspaceAppFrame({ app, embedPath, chatSidebar = false, copy =
             id: app.id,
             label: app.name,
             contextKey: `workspace-app:${app.id}`,
-        }, agentChatSurface: "app", showTabBar: true, suppressInlineOpenApp: true, dynamicSuggestions: false, suggestions: [], emptyStateText: `Ask about ${app.name}`, composerSlot: authState === "unauthenticated" ? (_jsx("div", { className: "flex shrink-0 items-center px-3 pb-1", children: _jsxs("button", { type: "button", "data-dispatch-app-sign-in": true, "aria-label": `Sign in to ${app.name} on the right`, title: `Sign in to ${app.name} on the right`, onClick: () => embedFrameRef.current?.focus(), className: "inline-flex h-6 shrink-0 items-center gap-1 rounded-full border border-border/70 bg-background/60 px-2 text-[11px] font-medium text-muted-foreground transition-colors hover:bg-accent hover:text-foreground", children: [_jsx(IconLock, { size: 12, stroke: 1.8 }), _jsx("span", { children: "Sign in on the right" }), _jsx(IconArrowUpRight, { size: 12, stroke: 1.8 })] }) })) : null, children: appPane }));
+        }, agentChatSurface: "app", showTabBar: true, suppressInlineOpenApp: true, dynamicSuggestions: false, suggestions: [], emptyStateText: `Ask about ${app.name}`, children: appPane }));
 }
 export function WorkspaceAppHost({ appId }) {
     const t = useT();

package/dist/components/workspace-app-host.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-app-host.js","sourceRoot":"","sources":["../../src/components/workspace-app-host.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACpE,OAAO,EACL,gBAAgB,EAChB,oBAAoB,GAErB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EACL,iBAAiB,EACjB,cAAc,GACf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,gCAAgC,CAAC;AACtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAC/F,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,QAAQ,GACT,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,GAEjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AA0BzC,SAAS,4BAA4B,CACnC,MAAqB;IAErB,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ;aACjE,KAAK,CAAC,GAAG,CAAC;aACV,MAAM,CAAC,OAAO,CAAC;aACf,EAAE,CAAC,CAAC,CAAC,CAAC;YACP,EAAE,WAAW,EAAE,CAAC;QAClB,IACE,WAAW,KAAK,SAAS;YACzB,WAAW,KAAK,OAAO;YACvB,WAAW,KAAK,QAAQ,EACxB,CAAC;YACD,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAwB;IAC5D,OAAO;QACL,IAAI,EAAE,2BAAoC;QAC1C,KAAK;QACL,MAAM,EAAE,KAAK,KAAK,MAAM;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,KAAa,EACb,IAAY;IAEZ,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC;AAkBD,MAAM,UAAU,iBAAiB,CAAC,EAChC,GAAG,EACH,SAAS,EACT,WAAW,GAAG,KAAK,EACnB,IAAI,GAAG,oBAAoB,GACJ;IACvB,MAAM,EAAE,aAAa,EAAE,GAAG,QAAQ,EAAE,CAAC;IACrC,MAAM,KAAK,GACT,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,OAAO;QACnD,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,OAAO,QAAQ,KAAK,WAAW;YAC7B,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YACrD,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,OAAO,CAAC;IAChB,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IACjE,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAwB,SAAS,CAAC,CAAC;IAC7E,MAAM,aAAa,GAAG,MAAM,CAAoB,IAAI,CAAC,CAAC;IACtD,MAAM,gBAAgB,GAAG,WAAW,CAAC,GAAG,EAAE;QACxC,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAC/C,4BAA4B,CAAC,KAAK,CAAC,EACnC,GAAG,CACJ,CAAC;IACJ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACZ,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;QACvC,gBAAgB,EAAE,CAAC;QACnB,IAAI,gBAAgB;YAAE,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC;QACpC,IAAI,QAAQ,GAAG,QAAQ,CAAC;QACxB,IAAI,CAAC;YACH,QAAQ,GAAG,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC;YAC3D,gGAAgG;QAClG,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;QACD,MAAM,aAAa,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,aAAa,KAAK,SAAS;YAAE,YAAY,CAAC,aAAa,CAAC,CAAC;IAC/D,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACnD,MAAM,mBAAmB,GAAG,cAAc,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,kBAAkB,GAAG,iBAAiB,CAG1C,sBAAsB,EAAE;QACxB,2BAA2B,EAAE,IAAI;KAClC,CAAC,CAAC;IACH,MAAM,8BAA8B,GAAG,iBAAiB,CAGtD,oCAAoC,EAAE;QACtC,2BAA2B,EAAE,IAAI;KAClC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,gBAAgB,CAAC;QAC/B,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;QACpB,GAAG,EAAE,GAAG,CAAC,GAAG;KACb,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,OAAO,CAA2B,GAAG,EAAE;QACxD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,+BAA+B,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO;YACL,GAAG,EAAE,GAAG,CAAC,EAAE;YACX,GAAG,uBAAuB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;YAClE,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAEpD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,WAAW,CAAC,IAAI,CAAC,CAAC;QAClB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3B,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,aAAa,GAAG,mBAAmB;YACvC,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,kBAAkB,CAAC;QACvB,KAAK,aAAa;aACf,WAAW,CAAC,UAAU,CAAC;aACvB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,CAAC,SAAS;gBAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,SAAS;gBAAE,OAAO;YACtB,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1B,WAAW,CACT,sBAAsB,CACpB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,EACtC,SAAS,IAAI,GAAG,CACjB,CACF,CAAC;YACF,aAAa,CACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;QACJ,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC,EAAE;QACD,GAAG,CAAC,EAAE;QACN,GAAG,CAAC,IAAI;QACR,GAAG,CAAC,GAAG;QACP,kBAAkB,CAAC,WAAW;QAC9B,8BAA8B,CAAC,WAAW;QAC1C,UAAU;QACV,SAAS;QACT,YAAY;QACZ,mBAAmB;KACpB,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,yBAAyB,GAAG,CAAC,KAAmB,EAAE,EAAE;YACxD,IACE,CAAC,4BAA4B,CAAC,KAAK,EAAE,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,EACrE,CAAC;gBACD,OAAO;YACT,CAAC;YACD,eAAe,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;QAC9D,OAAO,GAAG,EAAE,CACV,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IACrE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,eAAe,GAAG,CAAC,KAAmB,EAAE,EAAE;YAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC;YACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,aAAa;gBAAE,OAAO;YAC3D,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,uBAAuB;gBAAE,OAAO;YACzD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;YACvC,IAAI,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;gBAC/D,YAAY,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACpD,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACtE,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,SAAS,CAAC,GAAG,EAAE;QACb,gBAAgB,EAAE,CAAC;IACrB,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAEjC,MAAM,OAAO,GAAG,CACd,KAAC,gBAAgB,IACf,GAAG,EAAE,GAAG,EACR,MAAM,EACJ,QAAQ;YACN,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,UAAU;gBACV,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,UAAU;oBACV,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,YAAY,EAEtB,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,UAAU,EAAE,OAAO,EACjC,OAAO,EACL,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAE1E,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAC/B,4DAGE,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,KAAK,IAAI,GAAG,CAAC,IAAI,EACxB,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,eAAe,EACvB,cAAc,EAAC,aAAa,EAC5B,KAAK,EAAC,iCAAiC,EACvC,SAAS,EAAC,sCAAsC,IAR3C,GAAG,GAAG,GAAG,GAAG,YAAY,CAS7B,CACH,EACD,IAAI,EAAE,IAAI,GACV,CACH,CAAC;IAEF,IAAI,CAAC,WAAW;QAAE,OAAO,OAAO,CAAC;IAEjC,OAAO,CACL,KAAC,YAAY,IACX,QAAQ,EAAC,MAAM,EACf,WAAW,QACX,cAAc,EAAC,mBAAmB,EAClC,UAAU,EAAE,qBAAqB,GAAG,CAAC,EAAE,EAAE,EACzC,KAAK,EAAE;YACL,IAAI,EAAE,eAAe;YACrB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,GAAG,CAAC,IAAI;YACf,UAAU,EAAE,iBAAiB,GAAG,CAAC,EAAE,EAAE;SACtC,EACD,gBAAgB,EAAC,KAAK,EACtB,UAAU,QACV,qBAAqB,QACrB,kBAAkB,EAAE,KAAK,EACzB,WAAW,EAAE,EAAE,EACf,cAAc,EAAE,aAAa,GAAG,CAAC,IAAI,EAAE,EACvC,YAAY,EACV,SAAS,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAChC,cAAK,SAAS,EAAC,sCAAsC,YACnD,kBACE,IAAI,EAAC,QAAQ,mDAED,cAAc,GAAG,CAAC,IAAI,eAAe,EACjD,KAAK,EAAE,cAAc,GAAG,CAAC,IAAI,eAAe,EAC5C,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,EAC7C,SAAS,EAAC,8MAA8M,aAExN,KAAC,QAAQ,IAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAI,EACnC,kDAAiC,EACjC,KAAC,gBAAgB,IAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAI,IACpC,GACL,CACP,CAAC,CAAC,CAAC,IAAI,YAGT,OAAO,GACK,CAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAE,KAAK,EAAsB;IAC5D,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IACjB,MAAM,kBAAkB,GAAG,cAAc,CACvC,qBAAqB,EACrB,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAC7B,CAAC;IACF,MAAM,gBAAgB,GAAG,cAAc,CACrC,WAAW,EACX,EAAE,CACH,CAAC;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;QACxB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;QAEtD,KAAK,MAAM,GAAG,IAAI,2BAA2B,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;gBAAE,SAAS;YAClD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE;gBAC3B,EAAE;gBACF,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;gBAC3B,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI;gBAC5B,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9B,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,OAAO,CACjB,GAAG,EAAE,CACH,IAAI,CAAC,IAAI,CACP,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CACvE,IAAI,IAAI,EACX,CAAC,KAAK,EAAE,IAAI,CAAC,CACd,CAAC;IACF,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,IAAI,gBAAgB,CAAC,SAAS,CAAC;IAC7E,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO;QAC3C,CAAC,CAAC,kBAAkB,CAAC,KAAK;QAC1B,CAAC,CAAC,gBAAgB,CAAC,OAAO;YACxB,CAAC,CAAC,gBAAgB,CAAC,KAAK;YACxB,CAAC,CAAC,IAAI,CAAC;IAEX,IAAI,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,CACL,cAAK,SAAS,EAAC,qDAAqD,YAClE,cAAK,SAAS,EAAC,kBAAkB,YAC/B,KAAC,gBAAgB,IACf,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,GAAG,EAAE;wBACZ,KAAK,kBAAkB,CAAC,OAAO,EAAE,CAAC;wBAClC,KAAK,gBAAgB,CAAC,OAAO,EAAE,CAAC;oBAClC,CAAC,GACD,GACE,GACF,CACP,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,OAAO,CACL,cAAK,SAAS,EAAC,qDAAqD,YAClE,eAAK,SAAS,EAAC,0DAA0D,aACvE,KAAC,QAAQ,IAAC,SAAS,EAAC,UAAU,GAAG,EACjC,KAAC,QAAQ,IAAC,SAAS,EAAC,YAAY,GAAG,EACnC,KAAC,QAAQ,IAAC,SAAS,EAAC,WAAW,GAAG,IAC9B,GACF,CACP,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CACL,cAAK,SAAS,EAAC,qDAAqD,YAClE,eAAK,SAAS,EAAC,gDAAgD,aAC7D,KAAC,MAAM,IAAC,OAAO,QAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,OAAO,EAAC,SAAS,EAAC,YAAY,YAC9D,MAAC,IAAI,IAAC,EAAE,EAAC,OAAO,aACd,KAAC,aAAa,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,QAAQ,GAAG,EAC7C,CAAC,CAAC,mBAAmB,CAAC,IAClB,GACA,EACT,eAAK,SAAS,EAAC,WAAW,aACxB,aAAI,SAAS,EAAC,yCAAyC,YACpD,CAAC,CAAC,4BAA4B,CAAC,GAC7B,EACL,YAAG,SAAS,EAAC,+BAA+B,YACzC,CAAC,CAAC,wCAAwC,CAAC,GAC1C,IACA,IACF,GACF,CACP,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CACL,cAAK,SAAS,EAAC,qDAAqD,YAClE,eAAK,SAAS,EAAC,gDAAgD,aAC7D,KAAC,MAAM,IAAC,OAAO,QAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,OAAO,EAAC,SAAS,EAAC,YAAY,YAC9D,MAAC,IAAI,IAAC,EAAE,EAAC,OAAO,aACd,KAAC,aAAa,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,QAAQ,GAAG,EAC7C,CAAC,CAAC,mBAAmB,CAAC,IAClB,GACA,EACT,eAAK,SAAS,EAAC,WAAW,aACxB,eAAK,SAAS,EAAC,mCAAmC,aAChD,aAAI,SAAS,EAAC,yCAAyC,YACpD,GAAG,CAAC,IAAI,GACN,EACL,MAAC,KAAK,IACJ,OAAO,EAAC,SAAS,EACjB,SAAS,EAAC,8EAA8E,aAExF,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,GAAI,EAC3B,CAAC,CAAC,yBAAyB,CAAC,IACvB,IACJ,EACN,aAAG,SAAS,EAAC,+BAA+B,aACzC,CAAC,CAAC,kCAAkC,CAAC,EAAE,GAAG,EAC3C,eAAM,SAAS,EAAC,2BAA2B,YAAE,GAAG,CAAC,IAAI,GAAQ,EAAC,GAAG,EAChE,CAAC,CAAC,kCAAkC,CAAC,IACpC,EACH,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAChB,KAAC,MAAM,IAAC,OAAO,kBACb,YACE,IAAI,EAAE,4BAA4B,CAAC,GAAG,CAAC,UAAU,EAAE;wCACjD,QAAQ,EAAE,SAAS;wCACnB,OAAO,EAAE,iBAAiB;qCAC3B,CAAC,EACF,MAAM,EAAC,QAAQ,EACf,GAAG,EAAC,YAAY,YAEf,CAAC,CAAC,kCAAkC,EAAE;wCACrC,YAAY,EAAE,iBAAiB;qCAChC,CAAC,GACA,GACG,CACV,CAAC,CAAC,CAAC,IAAI,IACJ,IACF,GACF,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,wDAEE,SAAS,EAAC,4CAA4C,YAEtD,cAAK,SAAS,EAAC,4BAA4B,YACzC,KAAC,iBAAiB,IAAC,GAAG,EAAE,GAAG,GAAI,GAC3B,GACF,CACP,CAAC;AACJ,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,MAAM,UAAU,qBAAqB,CAAC,EACpC,WAAW,GAGZ;IACC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAW,GAAG,EAAE,CAChE,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CACjC,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,gBAAgB,CAAC,CAAC,OAAO,EAAE,EAAE,CAC3B,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CACtE,CAAC,EACD,mBAAmB,CACpB,CACF,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAElB,MAAM,cAAc,GAClB,WAAW,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC;QACjD,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,aAAa,CAAC;QACjC,CAAC,CAAC,aAAa,CAAC;IAEpB,OAAO,CACL,yDAEE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,QAAQ,YAErE,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC5B,MAAM,MAAM,GAAG,KAAK,KAAK,WAAW,CAAC;YACrC,OAAO,CACL,yDAE2C,KAAK,iBACjC,CAAC,MAAM,EACpB,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,YAE/C,KAAC,gBAAgB,IAAC,KAAK,EAAE,KAAK,GAAI,IAL7B,KAAK,CAMN,CACP,CAAC;QACJ,CAAC,CAAC,GACE,CACP,CAAC;AACJ,CAAC","sourcesContent":["import { AgentSidebar } from \"@agent-native/core/client/agent-chat\";\nimport {\n  ChatFirstAppPane,\n  defaultChatFirstCopy,\n  type ChatFirstCopy,\n} from \"@agent-native/core/client/chat-first\";\nimport { useFeatureFlag } from \"@agent-native/core/client/feature-flags\";\nimport {\n  useActionMutation,\n  useActionQuery,\n} from \"@agent-native/core/client/hooks\";\nimport { useT } from \"@agent-native/core/client/i18n\";\nimport { withBuilderUtmTrackingParams } from \"@agent-native/core/shared/builder-link-tracking\";\nimport {\n  IconArrowLeft,\n  IconArrowUpRight,\n  IconClockHour4,\n  IconLock,\n} from \"@tabler/icons-react\";\nimport { useTheme } from \"next-themes\";\nimport { useCallback, useEffect, useMemo, useRef, useState } from \"react\";\nimport { Link } from \"react-router\";\n\nimport { isEmbedSessionExpiredMessage } from \"../lib/embed-session-recovery\";\nimport {\n  mergeChatFirstWorkspaceApps,\n  workspaceAppDirectHref,\n  workspaceAppEmbedTarget,\n  workspaceAppHref,\n  type WorkspaceAppSummary,\n} from \"../lib/workspace-apps\";\nimport { DISPATCH_WORKSPACE_SSO_FLAG } from \"../shared/feature-flags\";\nimport { ActionQueryError } from \"./action-query-error\";\nimport { Badge } from \"./ui/badge\";\nimport { Button } from \"./ui/button\";\nimport { Skeleton } from \"./ui/skeleton\";\n\ninterface EmbedSessionResult {\n  startUrl: string;\n}\n\ninterface EmbedSessionInput {\n  app?: string;\n  path?: string;\n  url?: string;\n  chrome: \"minimal\";\n}\n\ninterface GrantedWorkspaceAppSummary {\n  id: string;\n  name: string;\n  url?: string | null;\n}\n\ninterface GrantedWorkspaceAppsResult {\n  apps: GrantedWorkspaceAppSummary[];\n}\n\ntype WorkspaceAppTheme = \"light\" | \"dark\";\ntype WorkspaceAppAuthState = \"unknown\" | \"authenticated\" | \"unauthenticated\";\n\nfunction resolveWorkspaceAppAuthState(\n  rawUrl: string | null,\n): WorkspaceAppAuthState {\n  if (!rawUrl) return \"unknown\";\n  try {\n    const lastSegment = new URL(rawUrl, window.location.origin).pathname\n      .split(\"/\")\n      .filter(Boolean)\n      .at(-1)\n      ?.toLowerCase();\n    if (\n      lastSegment === \"sign-in\" ||\n      lastSegment === \"login\" ||\n      lastSegment === \"signup\"\n    ) {\n      return \"unauthenticated\";\n    }\n    return \"authenticated\";\n  } catch {\n    return \"unknown\";\n  }\n}\n\nfunction buildWorkspaceAppThemeUpdate(theme: WorkspaceAppTheme) {\n  return {\n    type: \"agent-native-theme-update\" as const,\n    theme,\n    isDark: theme === \"dark\",\n  };\n}\n\nexport function buildChatFirstEmbedSessionInput(\n  appId: string,\n  path: string,\n): EmbedSessionInput {\n  return { app: appId, path, chrome: \"minimal\" };\n}\n\nexport interface WorkspaceAppFrameApp {\n  id: string;\n  name: string;\n  path?: string | null;\n  url?: string | null;\n}\n\ninterface WorkspaceAppFrameProps {\n  app: WorkspaceAppFrameApp;\n  /** Chat-first app tabs use their own route while standalone hosts use app metadata. */\n  embedPath?: string;\n  /** Chat-first app surfaces own the parent chat rail around the iframe. */\n  chatSidebar?: boolean;\n  copy?: ChatFirstCopy;\n}\n\nexport function WorkspaceAppFrame({\n  app,\n  embedPath,\n  chatSidebar = false,\n  copy = defaultChatFirstCopy,\n}: WorkspaceAppFrameProps) {\n  const { resolvedTheme } = useTheme();\n  const theme: WorkspaceAppTheme =\n    resolvedTheme === \"dark\" || resolvedTheme === \"light\"\n      ? resolvedTheme\n      : typeof document !== \"undefined\" &&\n          document.documentElement.classList.contains(\"dark\")\n        ? \"dark\"\n        : \"light\";\n  const [embedUrl, setEmbedUrl] = useState<string | null>(null);\n  const [embedError, setEmbedError] = useState<Error | null>(null);\n  const [isDirectFallback, setIsDirectFallback] = useState(false);\n  const [embedAttempt, setEmbedAttempt] = useState(0);\n  const [authState, setAuthState] = useState<WorkspaceAppAuthState>(\"unknown\");\n  const embedFrameRef = useRef<HTMLIFrameElement>(null);\n  const postThemeToFrame = useCallback(() => {\n    embedFrameRef.current?.contentWindow?.postMessage(\n      buildWorkspaceAppThemeUpdate(theme),\n      \"*\",\n    );\n  }, [theme]);\n  const handleFrameLoad = useCallback(() => {\n    postThemeToFrame();\n    if (isDirectFallback) setEmbedError(null);\n    const frame = embedFrameRef.current;\n    let frameUrl = embedUrl;\n    try {\n      frameUrl = frame?.contentWindow?.location.href ?? frameUrl;\n      // coercion-ok: Cross-origin frames cannot expose location; their auth state arrives by message.\n    } catch {\n      // Cross-origin app frames report their auth state through postMessage.\n    }\n    const nextAuthState = resolveWorkspaceAppAuthState(frameUrl);\n    if (nextAuthState !== \"unknown\") setAuthState(nextAuthState);\n  }, [embedUrl, isDirectFallback, postThemeToFrame]);\n  const workspaceSsoEnabled = useFeatureFlag(DISPATCH_WORKSPACE_SSO_FLAG.key);\n  const createEmbedSession = useActionMutation<\n    EmbedSessionResult,\n    EmbedSessionInput\n  >(\"create_embed_session\", {\n    skipActionQueryInvalidation: true,\n  });\n  const createWorkspaceSsoEmbedSession = useActionMutation<\n    EmbedSessionResult,\n    EmbedSessionInput\n  >(\"create-workspace-app-embed-session\", {\n    skipActionQueryInvalidation: true,\n  });\n  const appHref = workspaceAppHref({\n    id: app.id,\n    name: app.name,\n    path: app.path ?? \"\",\n    url: app.url,\n  });\n  const embedInput = useMemo<EmbedSessionInput | null>(() => {\n    if (embedPath !== undefined) {\n      return buildChatFirstEmbedSessionInput(app.id, embedPath);\n    }\n    if (!appHref) return null;\n    return {\n      app: app.id,\n      ...workspaceAppEmbedTarget({ path: app.path ?? \"\", url: app.url }),\n      chrome: \"minimal\",\n    };\n  }, [app.id, app.path, app.url, appHref, embedPath]);\n\n  useEffect(() => {\n    if (!embedInput) return;\n    let cancelled = false;\n    setEmbedUrl(null);\n    setEmbedError(null);\n    setIsDirectFallback(false);\n    setAuthState(\"unknown\");\n    const createSession = workspaceSsoEnabled\n      ? createWorkspaceSsoEmbedSession\n      : createEmbedSession;\n    void createSession\n      .mutateAsync(embedInput)\n      .then((result) => {\n        if (!cancelled) setEmbedUrl(result.startUrl);\n      })\n      .catch((cause: unknown) => {\n        if (cancelled) return;\n        setIsDirectFallback(true);\n        setEmbedUrl(\n          workspaceAppDirectHref(\n            { path: app.path ?? \"\", url: app.url },\n            embedPath ?? \"/\",\n          ),\n        );\n        setEmbedError(\n          cause instanceof Error ? cause : new Error(String(cause)),\n        );\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, [\n    app.id,\n    app.path,\n    app.url,\n    createEmbedSession.mutateAsync,\n    createWorkspaceSsoEmbedSession.mutateAsync,\n    embedInput,\n    embedPath,\n    embedAttempt,\n    workspaceSsoEnabled,\n  ]);\n\n  useEffect(() => {\n    const handleEmbedSessionExpired = (event: MessageEvent) => {\n      if (\n        !isEmbedSessionExpiredMessage(event, embedFrameRef.current, embedUrl)\n      ) {\n        return;\n      }\n      setEmbedAttempt((attempt) => attempt + 1);\n    };\n\n    window.addEventListener(\"message\", handleEmbedSessionExpired);\n    return () =>\n      window.removeEventListener(\"message\", handleEmbedSessionExpired);\n  }, [embedUrl]);\n\n  useEffect(() => {\n    const handleAuthState = (event: MessageEvent) => {\n      const frame = embedFrameRef.current;\n      if (!frame || event.source !== frame.contentWindow) return;\n      if (event.data?.type !== \"agentNative.authState\") return;\n      const status = event.data.data?.status;\n      if (status === \"authenticated\" || status === \"unauthenticated\") {\n        setAuthState(status);\n      }\n    };\n\n    window.addEventListener(\"message\", handleAuthState);\n    return () => window.removeEventListener(\"message\", handleAuthState);\n  }, []);\n\n  useEffect(() => {\n    postThemeToFrame();\n  }, [embedUrl, postThemeToFrame]);\n\n  const appPane = (\n    <ChatFirstAppPane\n      app={app}\n      status={\n        embedUrl\n          ? \"ready\"\n          : embedError\n            ? \"error\"\n            : embedInput\n              ? \"loading\"\n              : \"unresolved\"\n      }\n      embedUrl={embedUrl}\n      errorMessage={embedError?.message}\n      onRetry={\n        embedInput ? () => setEmbedAttempt((attempt) => attempt + 1) : undefined\n      }\n      renderEmbed={({ url, title }) => (\n        <iframe\n          key={url + \":\" + embedAttempt}\n          data-dispatch-workspace-app-frame\n          src={url}\n          title={title ?? app.name}\n          ref={embedFrameRef}\n          onLoad={handleFrameLoad}\n          referrerPolicy=\"no-referrer\"\n          allow=\"clipboard-read; clipboard-write\"\n          className=\"h-full w-full border-0 bg-background\"\n        />\n      )}\n      copy={copy}\n    />\n  );\n\n  if (!chatSidebar) return appPane;\n\n  return (\n    <AgentSidebar\n      position=\"left\"\n      defaultOpen\n      openStorageKey=\"dispatch-app-chat\"\n      storageKey={`dispatch-app-chat:${app.id}`}\n      scope={{\n        type: \"workspace-app\",\n        id: app.id,\n        label: app.name,\n        contextKey: `workspace-app:${app.id}`,\n      }}\n      agentChatSurface=\"app\"\n      showTabBar\n      suppressInlineOpenApp\n      dynamicSuggestions={false}\n      suggestions={[]}\n      emptyStateText={`Ask about ${app.name}`}\n      composerSlot={\n        authState === \"unauthenticated\" ? (\n          <div className=\"flex shrink-0 items-center px-3 pb-1\">\n            <button\n              type=\"button\"\n              data-dispatch-app-sign-in\n              aria-label={`Sign in to ${app.name} on the right`}\n              title={`Sign in to ${app.name} on the right`}\n              onClick={() => embedFrameRef.current?.focus()}\n              className=\"inline-flex h-6 shrink-0 items-center gap-1 rounded-full border border-border/70 bg-background/60 px-2 text-[11px] font-medium text-muted-foreground transition-colors hover:bg-accent hover:text-foreground\"\n            >\n              <IconLock size={12} stroke={1.8} />\n              <span>Sign in on the right</span>\n              <IconArrowUpRight size={12} stroke={1.8} />\n            </button>\n          </div>\n        ) : null\n      }\n    >\n      {appPane}\n    </AgentSidebar>\n  );\n}\n\nexport function WorkspaceAppHost({ appId }: { appId?: string }) {\n  const t = useT();\n  const workspaceAppsQuery = useActionQuery<WorkspaceAppSummary[]>(\n    \"list-workspace-apps\",\n    { includeAgentCards: false },\n  );\n  const grantedAppsQuery = useActionQuery<GrantedWorkspaceAppsResult>(\n    \"list_apps\",\n    {},\n  );\n  const apps = useMemo(() => {\n    const merged = new Map<string, WorkspaceAppSummary>();\n\n    for (const app of mergeChatFirstWorkspaceApps(workspaceAppsQuery.data)) {\n      merged.set(app.id.trim().toLowerCase(), app);\n    }\n    for (const app of grantedAppsQuery.data?.apps ?? []) {\n      const id = app.id.trim();\n      if (!id || merged.has(id.toLowerCase())) continue;\n      merged.set(id.toLowerCase(), {\n        id,\n        name: app.name.trim() || id,\n        path: \"\",\n        url: app.url?.trim() || null,\n        status: \"ready\",\n      });\n    }\n\n    return [...merged.values()];\n  }, [grantedAppsQuery.data?.apps, workspaceAppsQuery.data]);\n  const app = useMemo(\n    () =>\n      apps.find(\n        (item) => item.id.trim().toLowerCase() === appId?.trim().toLowerCase(),\n      ) ?? null,\n    [appId, apps],\n  );\n  const isLoading = workspaceAppsQuery.isLoading || grantedAppsQuery.isLoading;\n  const queryError = workspaceAppsQuery.isError\n    ? workspaceAppsQuery.error\n    : grantedAppsQuery.isError\n      ? grantedAppsQuery.error\n      : null;\n\n  if (queryError && !app) {\n    return (\n      <div className=\"flex h-full min-h-0 items-center justify-center p-6\">\n        <div className=\"w-full max-w-2xl\">\n          <ActionQueryError\n            error={queryError}\n            onRetry={() => {\n              void workspaceAppsQuery.refetch();\n              void grantedAppsQuery.refetch();\n            }}\n          />\n        </div>\n      </div>\n    );\n  }\n\n  if (isLoading && !app) {\n    return (\n      <div className=\"flex h-full min-h-0 items-center justify-center p-6\">\n        <div className=\"w-full max-w-2xl space-y-3 rounded-xl border bg-card p-6\">\n          <Skeleton className=\"h-5 w-48\" />\n          <Skeleton className=\"h-4 w-full\" />\n          <Skeleton className=\"h-4 w-2/3\" />\n        </div>\n      </div>\n    );\n  }\n\n  if (!app) {\n    return (\n      <div className=\"flex h-full min-h-0 items-center justify-center p-6\">\n        <div className=\"w-full max-w-2xl rounded-xl border bg-card p-6\">\n          <Button asChild size=\"sm\" variant=\"ghost\" className=\"-ml-2 mb-4\">\n            <Link to=\"/apps\">\n              <IconArrowLeft size={15} className=\"mr-1.5\" />\n              {t(\"dispatch.nav.apps\")}\n            </Link>\n          </Button>\n          <div className=\"space-y-3\">\n            <h2 className=\"text-base font-semibold text-foreground\">\n              {t(\"dispatch.pages.appNotFound\")}\n            </h2>\n            <p className=\"text-sm text-muted-foreground\">\n              {t(\"dispatch.pages.pageNotFoundDescription\")}\n            </p>\n          </div>\n        </div>\n      </div>\n    );\n  }\n\n  if (app.status === \"pending\") {\n    return (\n      <div className=\"flex h-full min-h-0 items-center justify-center p-6\">\n        <div className=\"w-full max-w-2xl rounded-xl border bg-card p-6\">\n          <Button asChild size=\"sm\" variant=\"ghost\" className=\"-ml-2 mb-4\">\n            <Link to=\"/apps\">\n              <IconArrowLeft size={15} className=\"mr-1.5\" />\n              {t(\"dispatch.nav.apps\")}\n            </Link>\n          </Button>\n          <div className=\"space-y-4\">\n            <div className=\"flex flex-wrap items-center gap-2\">\n              <h2 className=\"text-base font-semibold text-foreground\">\n                {app.name}\n              </h2>\n              <Badge\n                variant=\"outline\"\n                className=\"gap-1 border-amber-500/30 bg-amber-500/10 text-amber-700 dark:text-amber-300\"\n              >\n                <IconClockHour4 size={12} />\n                {t(\"dispatch.pages.building\")}\n              </Badge>\n            </div>\n            <p className=\"text-sm text-muted-foreground\">\n              {t(\"dispatch.pages.appBuildingPrefix\")}{\" \"}\n              <span className=\"font-mono text-foreground\">{app.path}</span>{\" \"}\n              {t(\"dispatch.pages.appBuildingSuffix\")}\n            </p>\n            {app.builderUrl ? (\n              <Button asChild>\n                <a\n                  href={withBuilderUtmTrackingParams(app.builderUrl, {\n                    campaign: \"product\",\n                    content: \"dispatch_branch\",\n                  })}\n                  target=\"_blank\"\n                  rel=\"noreferrer\"\n                >\n                  {t(\"dispatch.pages.openBuilderBranch\", {\n                    defaultValue: \"Open in Builder\",\n                  })}\n                </a>\n              </Button>\n            ) : null}\n          </div>\n        </div>\n      </div>\n    );\n  }\n\n  return (\n    <div\n      data-dispatch-workspace-app-host\n      className=\"flex h-full min-h-0 flex-col bg-background\"\n    >\n      <div className=\"min-h-0 flex-1 bg-muted/20\">\n        <WorkspaceAppFrame app={app} />\n      </div>\n    </div>\n  );\n}\n\nconst MAX_KEEP_ALIVE_APPS = 3;\n\nexport function WorkspaceAppKeepAlive({\n  activeAppId,\n}: {\n  activeAppId: string | null;\n}) {\n  const [visitedAppIds, setVisitedAppIds] = useState<string[]>(() =>\n    activeAppId ? [activeAppId] : [],\n  );\n\n  useEffect(() => {\n    if (!activeAppId) return;\n    setVisitedAppIds((current) =>\n      [activeAppId, ...current.filter((appId) => appId !== activeAppId)].slice(\n        0,\n        MAX_KEEP_ALIVE_APPS,\n      ),\n    );\n  }, [activeAppId]);\n\n  const renderedAppIds =\n    activeAppId && !visitedAppIds.includes(activeAppId)\n      ? [activeAppId, ...visitedAppIds]\n      : visitedAppIds;\n\n  return (\n    <div\n      data-dispatch-workspace-app-cache\n      className={activeAppId ? \"absolute inset-0 overflow-hidden\" : \"hidden\"}\n    >\n      {renderedAppIds.map((appId) => {\n        const active = appId === activeAppId;\n        return (\n          <div\n            key={appId}\n            data-dispatch-workspace-app-cache-entry={appId}\n            aria-hidden={!active}\n            className={active ? \"h-full min-h-0\" : \"hidden\"}\n          >\n            <WorkspaceAppHost appId={appId} />\n          </div>\n        );\n      })}\n    </div>\n  );\n}\n"]}
+{"version":3,"file":"workspace-app-host.js","sourceRoot":"","sources":["../../src/components/workspace-app-host.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACpE,OAAO,EACL,gBAAgB,EAChB,oBAAoB,GAErB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EACL,iBAAiB,EACjB,cAAc,GACf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,gCAAgC,CAAC;AACtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,GAEjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAwBzC,SAAS,4BAA4B,CAAC,KAAwB;IAC5D,OAAO;QACL,IAAI,EAAE,2BAAoC;QAC1C,KAAK;QACL,MAAM,EAAE,KAAK,KAAK,MAAM;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,KAAa,EACb,IAAY;IAEZ,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC;AAkBD,MAAM,UAAU,iBAAiB,CAAC,EAChC,GAAG,EACH,SAAS,EACT,WAAW,GAAG,KAAK,EACnB,IAAI,GAAG,oBAAoB,GACJ;IACvB,MAAM,EAAE,aAAa,EAAE,GAAG,QAAQ,EAAE,CAAC;IACrC,MAAM,KAAK,GACT,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,OAAO;QACnD,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,OAAO,QAAQ,KAAK,WAAW;YAC7B,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YACrD,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,OAAO,CAAC;IAChB,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IACjE,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,MAAM,CAAoB,IAAI,CAAC,CAAC;IACtD,MAAM,gBAAgB,GAAG,WAAW,CAAC,GAAG,EAAE;QACxC,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAC/C,4BAA4B,CAAC,KAAK,CAAC,EACnC,GAAG,CACJ,CAAC;IACJ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACZ,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;QACvC,gBAAgB,EAAE,CAAC;QACnB,IAAI,gBAAgB;YAAE,aAAa,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACzC,MAAM,mBAAmB,GAAG,cAAc,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,kBAAkB,GAAG,iBAAiB,CAG1C,sBAAsB,EAAE;QACxB,2BAA2B,EAAE,IAAI;KAClC,CAAC,CAAC;IACH,MAAM,8BAA8B,GAAG,iBAAiB,CAGtD,oCAAoC,EAAE;QACtC,2BAA2B,EAAE,IAAI;KAClC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,gBAAgB,CAAC;QAC/B,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;QACpB,GAAG,EAAE,GAAG,CAAC,GAAG;KACb,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,OAAO,CAA2B,GAAG,EAAE;QACxD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,+BAA+B,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO;YACL,GAAG,EAAE,GAAG,CAAC,EAAE;YACX,GAAG,uBAAuB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;YAClE,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAEpD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,WAAW,CAAC,IAAI,CAAC,CAAC;QAClB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,aAAa,GAAG,mBAAmB;YACvC,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,kBAAkB,CAAC;QACvB,KAAK,aAAa;aACf,WAAW,CAAC,UAAU,CAAC;aACvB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,CAAC,SAAS;gBAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,SAAS;gBAAE,OAAO;YACtB,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACxE,IAAI,mBAAmB,EAAE,CAAC;gBACxB,8DAA8D;gBAC9D,gEAAgE;gBAChE,8DAA8D;gBAC9D,cAAc;gBACd,mBAAmB,CAAC,KAAK,CAAC,CAAC;gBAC3B,WAAW,CAAC,IAAI,CAAC,CAAC;gBAClB,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1B,WAAW,CACT,sBAAsB,CACpB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,EACtC,SAAS,IAAI,GAAG,CACjB,CACF,CAAC;YACF,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC,EAAE;QACD,GAAG,CAAC,EAAE;QACN,GAAG,CAAC,IAAI;QACR,GAAG,CAAC,GAAG;QACP,kBAAkB,CAAC,WAAW;QAC9B,8BAA8B,CAAC,WAAW;QAC1C,UAAU;QACV,SAAS;QACT,YAAY;QACZ,mBAAmB;KACpB,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,yBAAyB,GAAG,CAAC,KAAmB,EAAE,EAAE;YACxD,IACE,CAAC,4BAA4B,CAAC,KAAK,EAAE,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,EACrE,CAAC;gBACD,OAAO;YACT,CAAC;YACD,eAAe,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;QAC9D,OAAO,GAAG,EAAE,CACV,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IACrE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,SAAS,CAAC,GAAG,EAAE;QACb,gBAAgB,EAAE,CAAC;IACrB,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAEjC,MAAM,OAAO,GAAG,CACd,KAAC,gBAAgB,IACf,GAAG,EAAE,GAAG,EACR,MAAM,EACJ,QAAQ;YACN,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,UAAU;gBACV,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,UAAU;oBACV,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,YAAY,EAEtB,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,UAAU,EAAE,OAAO,EACjC,OAAO,EACL,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAE1E,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAC/B,4DAGE,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,KAAK,IAAI,GAAG,CAAC,IAAI,EACxB,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,eAAe,EACvB,cAAc,EAAC,aAAa,EAC5B,KAAK,EAAC,iCAAiC,EACvC,SAAS,EAAC,sCAAsC,IAR3C,GAAG,GAAG,GAAG,GAAG,YAAY,CAS7B,CACH,EACD,IAAI,EAAE,IAAI,GACV,CACH,CAAC;IAEF,IAAI,CAAC,WAAW;QAAE,OAAO,OAAO,CAAC;IAEjC,OAAO,CACL,KAAC,YAAY,IACX,QAAQ,EAAC,MAAM,EACf,WAAW,QACX,cAAc,EAAC,mBAAmB,EAClC,UAAU,EAAE,qBAAqB,GAAG,CAAC,EAAE,EAAE,EACzC,KAAK,EAAE;YACL,IAAI,EAAE,eAAe;YACrB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,GAAG,CAAC,IAAI;YACf,UAAU,EAAE,iBAAiB,GAAG,CAAC,EAAE,EAAE;SACtC,EACD,gBAAgB,EAAC,KAAK,EACtB,UAAU,QACV,qBAAqB,QACrB,kBAAkB,EAAE,KAAK,EACzB,WAAW,EAAE,EAAE,EACf,cAAc,EAAE,aAAa,GAAG,CAAC,IAAI,EAAE,YAEtC,OAAO,GACK,CAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAE,KAAK,EAAsB;IAC5D,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IACjB,MAAM,kBAAkB,GAAG,cAAc,CACvC,qBAAqB,EACrB,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAC7B,CAAC;IACF,MAAM,gBAAgB,GAAG,cAAc,CACrC,WAAW,EACX,EAAE,CACH,CAAC;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;QACxB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;QAEtD,KAAK,MAAM,GAAG,IAAI,2BAA2B,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;gBAAE,SAAS;YAClD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE;gBAC3B,EAAE;gBACF,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;gBAC3B,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI;gBAC5B,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9B,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,OAAO,CACjB,GAAG,EAAE,CACH,IAAI,CAAC,IAAI,CACP,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CACvE,IAAI,IAAI,EACX,CAAC,KAAK,EAAE,IAAI,CAAC,CACd,CAAC;IACF,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,IAAI,gBAAgB,CAAC,SAAS,CAAC;IAC7E,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO;QAC3C,CAAC,CAAC,kBAAkB,CAAC,KAAK;QAC1B,CAAC,CAAC,gBAAgB,CAAC,OAAO;YACxB,CAAC,CAAC,gBAAgB,CAAC,KAAK;YACxB,CAAC,CAAC,IAAI,CAAC;IAEX,IAAI,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,CACL,cAAK,SAAS,EAAC,qDAAqD,YAClE,cAAK,SAAS,EAAC,kBAAkB,YAC/B,KAAC,gBAAgB,IACf,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,GAAG,EAAE;wBACZ,KAAK,kBAAkB,CAAC,OAAO,EAAE,CAAC;wBAClC,KAAK,gBAAgB,CAAC,OAAO,EAAE,CAAC;oBAClC,CAAC,GACD,GACE,GACF,CACP,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,OAAO,CACL,cAAK,SAAS,EAAC,qDAAqD,YAClE,eAAK,SAAS,EAAC,0DAA0D,aACvE,KAAC,QAAQ,IAAC,SAAS,EAAC,UAAU,GAAG,EACjC,KAAC,QAAQ,IAAC,SAAS,EAAC,YAAY,GAAG,EACnC,KAAC,QAAQ,IAAC,SAAS,EAAC,WAAW,GAAG,IAC9B,GACF,CACP,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CACL,cAAK,SAAS,EAAC,qDAAqD,YAClE,eAAK,SAAS,EAAC,gDAAgD,aAC7D,KAAC,MAAM,IAAC,OAAO,QAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,OAAO,EAAC,SAAS,EAAC,YAAY,YAC9D,MAAC,IAAI,IAAC,EAAE,EAAC,OAAO,aACd,KAAC,aAAa,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,QAAQ,GAAG,EAC7C,CAAC,CAAC,mBAAmB,CAAC,IAClB,GACA,EACT,eAAK,SAAS,EAAC,WAAW,aACxB,aAAI,SAAS,EAAC,yCAAyC,YACpD,CAAC,CAAC,4BAA4B,CAAC,GAC7B,EACL,YAAG,SAAS,EAAC,+BAA+B,YACzC,CAAC,CAAC,wCAAwC,CAAC,GAC1C,IACA,IACF,GACF,CACP,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CACL,cAAK,SAAS,EAAC,qDAAqD,YAClE,eAAK,SAAS,EAAC,gDAAgD,aAC7D,KAAC,MAAM,IAAC,OAAO,QAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,OAAO,EAAC,SAAS,EAAC,YAAY,YAC9D,MAAC,IAAI,IAAC,EAAE,EAAC,OAAO,aACd,KAAC,aAAa,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,QAAQ,GAAG,EAC7C,CAAC,CAAC,mBAAmB,CAAC,IAClB,GACA,EACT,eAAK,SAAS,EAAC,WAAW,aACxB,eAAK,SAAS,EAAC,mCAAmC,aAChD,aAAI,SAAS,EAAC,yCAAyC,YACpD,GAAG,CAAC,IAAI,GACN,EACL,MAAC,KAAK,IACJ,OAAO,EAAC,SAAS,EACjB,SAAS,EAAC,8EAA8E,aAExF,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,GAAI,EAC3B,CAAC,CAAC,yBAAyB,CAAC,IACvB,IACJ,EACN,aAAG,SAAS,EAAC,+BAA+B,aACzC,CAAC,CAAC,kCAAkC,CAAC,EAAE,GAAG,EAC3C,eAAM,SAAS,EAAC,2BAA2B,YAAE,GAAG,CAAC,IAAI,GAAQ,EAAC,GAAG,EAChE,CAAC,CAAC,kCAAkC,CAAC,IACpC,EACH,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAChB,KAAC,MAAM,IAAC,OAAO,kBACb,YACE,IAAI,EAAE,4BAA4B,CAAC,GAAG,CAAC,UAAU,EAAE;wCACjD,QAAQ,EAAE,SAAS;wCACnB,OAAO,EAAE,iBAAiB;qCAC3B,CAAC,EACF,MAAM,EAAC,QAAQ,EACf,GAAG,EAAC,YAAY,YAEf,CAAC,CAAC,kCAAkC,EAAE;wCACrC,YAAY,EAAE,iBAAiB;qCAChC,CAAC,GACA,GACG,CACV,CAAC,CAAC,CAAC,IAAI,IACJ,IACF,GACF,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,wDAEE,SAAS,EAAC,4CAA4C,YAEtD,cAAK,SAAS,EAAC,4BAA4B,YACzC,KAAC,iBAAiB,IAAC,GAAG,EAAE,GAAG,GAAI,GAC3B,GACF,CACP,CAAC;AACJ,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,MAAM,UAAU,qBAAqB,CAAC,EACpC,WAAW,GAGZ;IACC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAW,GAAG,EAAE,CAChE,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CACjC,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,gBAAgB,CAAC,CAAC,OAAO,EAAE,EAAE,CAC3B,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CACtE,CAAC,EACD,mBAAmB,CACpB,CACF,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAElB,MAAM,cAAc,GAClB,WAAW,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC;QACjD,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,aAAa,CAAC;QACjC,CAAC,CAAC,aAAa,CAAC;IAEpB,OAAO,CACL,yDAEE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,QAAQ,YAErE,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC5B,MAAM,MAAM,GAAG,KAAK,KAAK,WAAW,CAAC;YACrC,OAAO,CACL,yDAE2C,KAAK,iBACjC,CAAC,MAAM,EACpB,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,YAE/C,KAAC,gBAAgB,IAAC,KAAK,EAAE,KAAK,GAAI,IAL7B,KAAK,CAMN,CACP,CAAC;QACJ,CAAC,CAAC,GACE,CACP,CAAC;AACJ,CAAC","sourcesContent":["import { AgentSidebar } from \"@agent-native/core/client/agent-chat\";\nimport {\n  ChatFirstAppPane,\n  defaultChatFirstCopy,\n  type ChatFirstCopy,\n} from \"@agent-native/core/client/chat-first\";\nimport { useFeatureFlag } from \"@agent-native/core/client/feature-flags\";\nimport {\n  useActionMutation,\n  useActionQuery,\n} from \"@agent-native/core/client/hooks\";\nimport { useT } from \"@agent-native/core/client/i18n\";\nimport { withBuilderUtmTrackingParams } from \"@agent-native/core/shared/builder-link-tracking\";\nimport { IconArrowLeft, IconClockHour4 } from \"@tabler/icons-react\";\nimport { useTheme } from \"next-themes\";\nimport { useCallback, useEffect, useMemo, useRef, useState } from \"react\";\nimport { Link } from \"react-router\";\n\nimport { isEmbedSessionExpiredMessage } from \"../lib/embed-session-recovery\";\nimport {\n  mergeChatFirstWorkspaceApps,\n  workspaceAppDirectHref,\n  workspaceAppEmbedTarget,\n  workspaceAppHref,\n  type WorkspaceAppSummary,\n} from \"../lib/workspace-apps\";\nimport { DISPATCH_WORKSPACE_SSO_FLAG } from \"../shared/feature-flags\";\nimport { ActionQueryError } from \"./action-query-error\";\nimport { Badge } from \"./ui/badge\";\nimport { Button } from \"./ui/button\";\nimport { Skeleton } from \"./ui/skeleton\";\n\ninterface EmbedSessionResult {\n  startUrl: string;\n}\n\ninterface EmbedSessionInput {\n  app?: string;\n  path?: string;\n  url?: string;\n  chrome: \"minimal\";\n}\n\ninterface GrantedWorkspaceAppSummary {\n  id: string;\n  name: string;\n  url?: string | null;\n}\n\ninterface GrantedWorkspaceAppsResult {\n  apps: GrantedWorkspaceAppSummary[];\n}\n\ntype WorkspaceAppTheme = \"light\" | \"dark\";\nfunction buildWorkspaceAppThemeUpdate(theme: WorkspaceAppTheme) {\n  return {\n    type: \"agent-native-theme-update\" as const,\n    theme,\n    isDark: theme === \"dark\",\n  };\n}\n\nexport function buildChatFirstEmbedSessionInput(\n  appId: string,\n  path: string,\n): EmbedSessionInput {\n  return { app: appId, path, chrome: \"minimal\" };\n}\n\nexport interface WorkspaceAppFrameApp {\n  id: string;\n  name: string;\n  path?: string | null;\n  url?: string | null;\n}\n\ninterface WorkspaceAppFrameProps {\n  app: WorkspaceAppFrameApp;\n  /** Chat-first app tabs use their own route while standalone hosts use app metadata. */\n  embedPath?: string;\n  /** Chat-first app surfaces own the parent chat rail around the iframe. */\n  chatSidebar?: boolean;\n  copy?: ChatFirstCopy;\n}\n\nexport function WorkspaceAppFrame({\n  app,\n  embedPath,\n  chatSidebar = false,\n  copy = defaultChatFirstCopy,\n}: WorkspaceAppFrameProps) {\n  const { resolvedTheme } = useTheme();\n  const theme: WorkspaceAppTheme =\n    resolvedTheme === \"dark\" || resolvedTheme === \"light\"\n      ? resolvedTheme\n      : typeof document !== \"undefined\" &&\n          document.documentElement.classList.contains(\"dark\")\n        ? \"dark\"\n        : \"light\";\n  const [embedUrl, setEmbedUrl] = useState<string | null>(null);\n  const [embedError, setEmbedError] = useState<Error | null>(null);\n  const [isDirectFallback, setIsDirectFallback] = useState(false);\n  const [embedAttempt, setEmbedAttempt] = useState(0);\n  const embedFrameRef = useRef<HTMLIFrameElement>(null);\n  const postThemeToFrame = useCallback(() => {\n    embedFrameRef.current?.contentWindow?.postMessage(\n      buildWorkspaceAppThemeUpdate(theme),\n      \"*\",\n    );\n  }, [theme]);\n  const handleFrameLoad = useCallback(() => {\n    postThemeToFrame();\n    if (isDirectFallback) setEmbedError(null);\n  }, [isDirectFallback, postThemeToFrame]);\n  const workspaceSsoEnabled = useFeatureFlag(DISPATCH_WORKSPACE_SSO_FLAG.key);\n  const createEmbedSession = useActionMutation<\n    EmbedSessionResult,\n    EmbedSessionInput\n  >(\"create_embed_session\", {\n    skipActionQueryInvalidation: true,\n  });\n  const createWorkspaceSsoEmbedSession = useActionMutation<\n    EmbedSessionResult,\n    EmbedSessionInput\n  >(\"create-workspace-app-embed-session\", {\n    skipActionQueryInvalidation: true,\n  });\n  const appHref = workspaceAppHref({\n    id: app.id,\n    name: app.name,\n    path: app.path ?? \"\",\n    url: app.url,\n  });\n  const embedInput = useMemo<EmbedSessionInput | null>(() => {\n    if (embedPath !== undefined) {\n      return buildChatFirstEmbedSessionInput(app.id, embedPath);\n    }\n    if (!appHref) return null;\n    return {\n      app: app.id,\n      ...workspaceAppEmbedTarget({ path: app.path ?? \"\", url: app.url }),\n      chrome: \"minimal\",\n    };\n  }, [app.id, app.path, app.url, appHref, embedPath]);\n\n  useEffect(() => {\n    if (!embedInput) return;\n    let cancelled = false;\n    setEmbedUrl(null);\n    setEmbedError(null);\n    setIsDirectFallback(false);\n    const createSession = workspaceSsoEnabled\n      ? createWorkspaceSsoEmbedSession\n      : createEmbedSession;\n    void createSession\n      .mutateAsync(embedInput)\n      .then((result) => {\n        if (!cancelled) setEmbedUrl(result.startUrl);\n      })\n      .catch((cause: unknown) => {\n        if (cancelled) return;\n        const error = cause instanceof Error ? cause : new Error(String(cause));\n        if (workspaceSsoEnabled) {\n          // An SSO-enabled pane must never fall back to the child app's\n          // unauthenticated shell. Keep the parent-owned retry surface in\n          // place so a transient exchange failure cannot expose another\n          // login form.\n          setIsDirectFallback(false);\n          setEmbedUrl(null);\n          setEmbedError(error);\n          return;\n        }\n        setIsDirectFallback(true);\n        setEmbedUrl(\n          workspaceAppDirectHref(\n            { path: app.path ?? \"\", url: app.url },\n            embedPath ?? \"/\",\n          ),\n        );\n        setEmbedError(error);\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, [\n    app.id,\n    app.path,\n    app.url,\n    createEmbedSession.mutateAsync,\n    createWorkspaceSsoEmbedSession.mutateAsync,\n    embedInput,\n    embedPath,\n    embedAttempt,\n    workspaceSsoEnabled,\n  ]);\n\n  useEffect(() => {\n    const handleEmbedSessionExpired = (event: MessageEvent) => {\n      if (\n        !isEmbedSessionExpiredMessage(event, embedFrameRef.current, embedUrl)\n      ) {\n        return;\n      }\n      setEmbedAttempt((attempt) => attempt + 1);\n    };\n\n    window.addEventListener(\"message\", handleEmbedSessionExpired);\n    return () =>\n      window.removeEventListener(\"message\", handleEmbedSessionExpired);\n  }, [embedUrl]);\n\n  useEffect(() => {\n    postThemeToFrame();\n  }, [embedUrl, postThemeToFrame]);\n\n  const appPane = (\n    <ChatFirstAppPane\n      app={app}\n      status={\n        embedUrl\n          ? \"ready\"\n          : embedError\n            ? \"error\"\n            : embedInput\n              ? \"loading\"\n              : \"unresolved\"\n      }\n      embedUrl={embedUrl}\n      errorMessage={embedError?.message}\n      onRetry={\n        embedInput ? () => setEmbedAttempt((attempt) => attempt + 1) : undefined\n      }\n      renderEmbed={({ url, title }) => (\n        <iframe\n          key={url + \":\" + embedAttempt}\n          data-dispatch-workspace-app-frame\n          src={url}\n          title={title ?? app.name}\n          ref={embedFrameRef}\n          onLoad={handleFrameLoad}\n          referrerPolicy=\"no-referrer\"\n          allow=\"clipboard-read; clipboard-write\"\n          className=\"h-full w-full border-0 bg-background\"\n        />\n      )}\n      copy={copy}\n    />\n  );\n\n  if (!chatSidebar) return appPane;\n\n  return (\n    <AgentSidebar\n      position=\"left\"\n      defaultOpen\n      openStorageKey=\"dispatch-app-chat\"\n      storageKey={`dispatch-app-chat:${app.id}`}\n      scope={{\n        type: \"workspace-app\",\n        id: app.id,\n        label: app.name,\n        contextKey: `workspace-app:${app.id}`,\n      }}\n      agentChatSurface=\"app\"\n      showTabBar\n      suppressInlineOpenApp\n      dynamicSuggestions={false}\n      suggestions={[]}\n      emptyStateText={`Ask about ${app.name}`}\n    >\n      {appPane}\n    </AgentSidebar>\n  );\n}\n\nexport function WorkspaceAppHost({ appId }: { appId?: string }) {\n  const t = useT();\n  const workspaceAppsQuery = useActionQuery<WorkspaceAppSummary[]>(\n    \"list-workspace-apps\",\n    { includeAgentCards: false },\n  );\n  const grantedAppsQuery = useActionQuery<GrantedWorkspaceAppsResult>(\n    \"list_apps\",\n    {},\n  );\n  const apps = useMemo(() => {\n    const merged = new Map<string, WorkspaceAppSummary>();\n\n    for (const app of mergeChatFirstWorkspaceApps(workspaceAppsQuery.data)) {\n      merged.set(app.id.trim().toLowerCase(), app);\n    }\n    for (const app of grantedAppsQuery.data?.apps ?? []) {\n      const id = app.id.trim();\n      if (!id || merged.has(id.toLowerCase())) continue;\n      merged.set(id.toLowerCase(), {\n        id,\n        name: app.name.trim() || id,\n        path: \"\",\n        url: app.url?.trim() || null,\n        status: \"ready\",\n      });\n    }\n\n    return [...merged.values()];\n  }, [grantedAppsQuery.data?.apps, workspaceAppsQuery.data]);\n  const app = useMemo(\n    () =>\n      apps.find(\n        (item) => item.id.trim().toLowerCase() === appId?.trim().toLowerCase(),\n      ) ?? null,\n    [appId, apps],\n  );\n  const isLoading = workspaceAppsQuery.isLoading || grantedAppsQuery.isLoading;\n  const queryError = workspaceAppsQuery.isError\n    ? workspaceAppsQuery.error\n    : grantedAppsQuery.isError\n      ? grantedAppsQuery.error\n      : null;\n\n  if (queryError && !app) {\n    return (\n      <div className=\"flex h-full min-h-0 items-center justify-center p-6\">\n        <div className=\"w-full max-w-2xl\">\n          <ActionQueryError\n            error={queryError}\n            onRetry={() => {\n              void workspaceAppsQuery.refetch();\n              void grantedAppsQuery.refetch();\n            }}\n          />\n        </div>\n      </div>\n    );\n  }\n\n  if (isLoading && !app) {\n    return (\n      <div className=\"flex h-full min-h-0 items-center justify-center p-6\">\n        <div className=\"w-full max-w-2xl space-y-3 rounded-xl border bg-card p-6\">\n          <Skeleton className=\"h-5 w-48\" />\n          <Skeleton className=\"h-4 w-full\" />\n          <Skeleton className=\"h-4 w-2/3\" />\n        </div>\n      </div>\n    );\n  }\n\n  if (!app) {\n    return (\n      <div className=\"flex h-full min-h-0 items-center justify-center p-6\">\n        <div className=\"w-full max-w-2xl rounded-xl border bg-card p-6\">\n          <Button asChild size=\"sm\" variant=\"ghost\" className=\"-ml-2 mb-4\">\n            <Link to=\"/apps\">\n              <IconArrowLeft size={15} className=\"mr-1.5\" />\n              {t(\"dispatch.nav.apps\")}\n            </Link>\n          </Button>\n          <div className=\"space-y-3\">\n            <h2 className=\"text-base font-semibold text-foreground\">\n              {t(\"dispatch.pages.appNotFound\")}\n            </h2>\n            <p className=\"text-sm text-muted-foreground\">\n              {t(\"dispatch.pages.pageNotFoundDescription\")}\n            </p>\n          </div>\n        </div>\n      </div>\n    );\n  }\n\n  if (app.status === \"pending\") {\n    return (\n      <div className=\"flex h-full min-h-0 items-center justify-center p-6\">\n        <div className=\"w-full max-w-2xl rounded-xl border bg-card p-6\">\n          <Button asChild size=\"sm\" variant=\"ghost\" className=\"-ml-2 mb-4\">\n            <Link to=\"/apps\">\n              <IconArrowLeft size={15} className=\"mr-1.5\" />\n              {t(\"dispatch.nav.apps\")}\n            </Link>\n          </Button>\n          <div className=\"space-y-4\">\n            <div className=\"flex flex-wrap items-center gap-2\">\n              <h2 className=\"text-base font-semibold text-foreground\">\n                {app.name}\n              </h2>\n              <Badge\n                variant=\"outline\"\n                className=\"gap-1 border-amber-500/30 bg-amber-500/10 text-amber-700 dark:text-amber-300\"\n              >\n                <IconClockHour4 size={12} />\n                {t(\"dispatch.pages.building\")}\n              </Badge>\n            </div>\n            <p className=\"text-sm text-muted-foreground\">\n              {t(\"dispatch.pages.appBuildingPrefix\")}{\" \"}\n              <span className=\"font-mono text-foreground\">{app.path}</span>{\" \"}\n              {t(\"dispatch.pages.appBuildingSuffix\")}\n            </p>\n            {app.builderUrl ? (\n              <Button asChild>\n                <a\n                  href={withBuilderUtmTrackingParams(app.builderUrl, {\n                    campaign: \"product\",\n                    content: \"dispatch_branch\",\n                  })}\n                  target=\"_blank\"\n                  rel=\"noreferrer\"\n                >\n                  {t(\"dispatch.pages.openBuilderBranch\", {\n                    defaultValue: \"Open in Builder\",\n                  })}\n                </a>\n              </Button>\n            ) : null}\n          </div>\n        </div>\n      </div>\n    );\n  }\n\n  return (\n    <div\n      data-dispatch-workspace-app-host\n      className=\"flex h-full min-h-0 flex-col bg-background\"\n    >\n      <div className=\"min-h-0 flex-1 bg-muted/20\">\n        <WorkspaceAppFrame app={app} />\n      </div>\n    </div>\n  );\n}\n\nconst MAX_KEEP_ALIVE_APPS = 3;\n\nexport function WorkspaceAppKeepAlive({\n  activeAppId,\n}: {\n  activeAppId: string | null;\n}) {\n  const [visitedAppIds, setVisitedAppIds] = useState<string[]>(() =>\n    activeAppId ? [activeAppId] : [],\n  );\n\n  useEffect(() => {\n    if (!activeAppId) return;\n    setVisitedAppIds((current) =>\n      [activeAppId, ...current.filter((appId) => appId !== activeAppId)].slice(\n        0,\n        MAX_KEEP_ALIVE_APPS,\n      ),\n    );\n  }, [activeAppId]);\n\n  const renderedAppIds =\n    activeAppId && !visitedAppIds.includes(activeAppId)\n      ? [activeAppId, ...visitedAppIds]\n      : visitedAppIds;\n\n  return (\n    <div\n      data-dispatch-workspace-app-cache\n      className={activeAppId ? \"absolute inset-0 overflow-hidden\" : \"hidden\"}\n    >\n      {renderedAppIds.map((appId) => {\n        const active = appId === activeAppId;\n        return (\n          <div\n            key={appId}\n            data-dispatch-workspace-app-cache-entry={appId}\n            aria-hidden={!active}\n            className={active ? \"h-full min-h-0\" : \"hidden\"}\n          >\n            <WorkspaceAppHost appId={appId} />\n          </div>\n        );\n      })}\n    </div>\n  );\n}\n"]}

package/dist/server/lib/mcp-gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-gateway.d.ts","sourceRoot":"","sources":["../../../src/server/lib/mcp-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,IAAI,EAAE,MAAM,wBAAwB,CAAC;AA6B5E,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,uBAAuB,CAAC;AA4B/B,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAkCD,KAAK,iCAAiC,GAClC,WAAW,GACX,SAAS,GACT,cAAc,GACd,cAAc,CAAC;AAEnB,KAAK,wBAAwB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,KAAK,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,aAAa,CAAC,EAAE,iCAAiC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,SAAS,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,iBAAS,wBAAwB,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,IAAI,GACT,wBAAwB,CAyC1B;AA+XD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC;IACnD,QAAQ,EAAE,4BAA4B,CAAC;IACvC,IAAI,EAAE,wBAAwB,EAAE,CAAC;CAClC,CAAC,CAcD;AAED,wBAAsB,0BAA0B,IAAI,OAAO,CACzD,wBAAwB,EAAE,CAC3B,CAGA;AAED,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAG1E;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,wBAAwB,CAAC,CAwBnC;AA6ID,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD,OAAO,CAAC,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAqCtD;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CA+DnC;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC,CAkDD;AA6MD,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAWD;AA8ED,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAmBD"}
+{"version":3,"file":"mcp-gateway.d.ts","sourceRoot":"","sources":["../../../src/server/lib/mcp-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,IAAI,EACV,MAAM,wBAAwB,CAAC;AA6BhC,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,uBAAuB,CAAC;AA4B/B,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAkCD,KAAK,iCAAiC,GAClC,WAAW,GACX,SAAS,GACT,cAAc,GACd,cAAc,CAAC;AAEnB,KAAK,wBAAwB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,KAAK,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,aAAa,CAAC,EAAE,iCAAiC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,SAAS,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,iBAAS,wBAAwB,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,IAAI,GACT,wBAAwB,CAyC1B;AA+XD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC;IACnD,QAAQ,EAAE,4BAA4B,CAAC;IACvC,IAAI,EAAE,wBAAwB,EAAE,CAAC;CAClC,CAAC,CAcD;AAED,wBAAsB,0BAA0B,IAAI,OAAO,CACzD,wBAAwB,EAAE,CAC3B,CAGA;AAED,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAG1E;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,wBAAwB,CAAC,CAwBnC;AA6ID,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD,OAAO,CAAC,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAqCtD;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CA+DnC;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC,CAkDD;AA6MD,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAWD;AA+ED,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAmBD"}

package/dist/server/lib/mcp-gateway.js

@@ -1,4 +1,4 @@
-import { A2AClient, signA2AToken } from "@agent-native/core/a2a";
+import { A2AClient, canonicalA2AAudience, signA2AToken, } from "@agent-native/core/a2a";
 import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
 import { buildMcpToolName, McpClientManager, } from "@agent-native/core/mcp-client";
 import { getOrgA2ASecret, getOrgDomain } from "@agent-native/core/org";
@@ -901,6 +901,7 @@ async function createEmbedSessionForResolvedApp(input) {
     const signedOrgDomain = usableOrgDomain ? orgDomain.trim() : undefined;
     const token = await signA2AToken(ownerEmail, signedOrgDomain, useOrgSigning ? orgSecret.trim() : undefined, {
         expiresIn: "5m",
+        audience: canonicalA2AAudience(appBaseUrl(target.app)),
         // Prefer the synced org A2A secret when present because first-party
         // production apps do not have to share the same deployment env secret.
         // Fall back to the global A2A_SECRET for orgs that have not synced yet.