@agent-native/dispatch 0.27.8 → 0.27.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/dispatch",
-  "version": "0.27.8",
+  "version": "0.27.9",
   "description": "Dispatch — workspace control plane for agent-native apps. Vault, integrations, destinations, scheduled jobs, and cross-app delegation, shipped as a single drop-in package.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -101,7 +101,7 @@
     "typescript-7": "npm:typescript@^7.0.2",
     "vite": "8.1.0",
     "vitest": "^4.1.5",
-    "@agent-native/core": "0.157.19"
+    "@agent-native/core": "0.157.20"
   },
   "peerDependencies": {
     "@agent-native/core": ">=0.8.0",

package/src/actions/create_workspace_app_embed_session.spec.ts

@@ -0,0 +1,94 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const server = vi.hoisted(() => ({
+  getRequestContext: vi.fn(),
+}));
+const apps = vi.hoisted(() => ({
+  listWorkspaceApps: vi.fn(),
+}));
+
+vi.mock("@agent-native/core/server", () => ({
+  getRequestContext: server.getRequestContext,
+}));
+vi.mock("../server/lib/app-creation-store.js", () => ({
+  listWorkspaceApps: apps.listWorkspaceApps,
+}));
+vi.mock("../server/lib/mcp-gateway.js", () => ({
+  createWorkspaceSsoEmbedSession: vi.fn(),
+}));
+
+import { assertWorkspaceEmbedSessionCaller } from "./create_workspace_app_embed_session.js";
+
+describe("assertWorkspaceEmbedSessionCaller", () => {
+  beforeEach(() => {
+    server.getRequestContext.mockReturnValue({
+      requestOrigin: "https://dispatch.agent-native.com",
+    });
+    apps.listWorkspaceApps.mockResolvedValue([
+      {
+        id: "custom-app",
+        path: "/apps/custom-app",
+        isDispatch: false,
+      },
+    ]);
+  });
+
+  it("allows direct in-process calls and native parent bearer calls", async () => {
+    await expect(
+      assertWorkspaceEmbedSessionCaller(undefined),
+    ).resolves.toBeUndefined();
+    await expect(
+      assertWorkspaceEmbedSessionCaller(
+        new Headers({
+          Authorization: "Bearer parent-session",
+          "Sec-Fetch-Site": "cross-site",
+        }),
+      ),
+    ).resolves.toBeUndefined();
+    expect(apps.listWorkspaceApps).not.toHaveBeenCalled();
+  });
+
+  it("allows a same-origin Dispatch browser caller", async () => {
+    await expect(
+      assertWorkspaceEmbedSessionCaller(
+        new Headers({
+          Referer: "https://dispatch.agent-native.com/",
+          "Sec-Fetch-Site": "same-origin",
+        }),
+      ),
+    ).resolves.toBeUndefined();
+    expect(apps.listWorkspaceApps).toHaveBeenCalledWith({
+      includeAgentCards: false,
+      audience: "all",
+    });
+  });
+
+  it("rejects cross-site and child-app browser callers", async () => {
+    await expect(
+      assertWorkspaceEmbedSessionCaller(
+        new Headers({
+          Referer: "https://evil.example/",
+          "Sec-Fetch-Site": "cross-site",
+        }),
+      ),
+    ).rejects.toThrow("requested by Dispatch");
+
+    await expect(
+      assertWorkspaceEmbedSessionCaller(
+        new Headers({
+          Referer: "https://dispatch.agent-native.com/apps/custom-app/",
+          "Sec-Fetch-Site": "same-origin",
+        }),
+      ),
+    ).rejects.toThrow("cannot mint sessions for themselves");
+  });
+
+  it("fails closed when the browser caller has no trustworthy parent context", async () => {
+    server.getRequestContext.mockReturnValue(undefined);
+    await expect(
+      assertWorkspaceEmbedSessionCaller(
+        new Headers({ Referer: "https://dispatch.agent-native.com/" }),
+      ),
+    ).rejects.toThrow("requested by Dispatch");
+  });
+});