@agent-native/dispatch 0.29.5 → 0.30.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/dispatch",
-  "version": "0.29.5",
+  "version": "0.30.1",
   "description": "Dispatch — workspace control plane for agent-native apps. Vault, integrations, destinations, scheduled jobs, and cross-app delegation, shipped as a single drop-in package.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -87,7 +87,7 @@
     "tailwind-merge": "^3.5.0",
     "vaul": "^1.1.2",
     "zod": "^4.3.6",
-    "@agent-native/toolkit": "0.16.5"
+    "@agent-native/toolkit": "0.16.6"
   },
   "devDependencies": {
     "@react-router/dev": "^8.1.0",
@@ -101,7 +101,7 @@
     "typescript-7": "npm:typescript@^7.0.2",
     "vite": "8.1.0",
     "vitest": "^4.1.5",
-    "@agent-native/core": "0.162.0"
+    "@agent-native/core": "0.164.1"
   },
   "peerDependencies": {
     "@agent-native/core": ">=0.8.0",

package/src/components/dispatch-control-plane.spec.tsx

@@ -1,4 +1,5 @@
 // @vitest-environment happy-dom
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
 import React, { act } from "react";
 import { createRoot, type Root } from "react-dom/client";
 import { MemoryRouter } from "react-router";
@@ -99,6 +100,7 @@ vi.mock("./create-app-popover", () => ({
 describe("DispatchControlPlane", () => {
   let container: HTMLDivElement;
   let root: Root;
+  let queryClient: QueryClient;
 
   beforeEach(() => {
     vi.stubGlobal("IS_REACT_ACT_ENVIRONMENT", true);
@@ -109,6 +111,12 @@ describe("DispatchControlPlane", () => {
     clientState.connectedApps = [];
     clientState.curatedTemplates = [];
     clientState.useChatModels.mockClear();
+    queryClient = new QueryClient({
+      defaultOptions: {
+        queries: { retry: false },
+        mutations: { retry: false },
+      },
+    });
     container = document.createElement("div");
     document.body.appendChild(container);
     root = createRoot(container);
@@ -125,7 +133,9 @@ describe("DispatchControlPlane", () => {
       root.render(
         <MemoryRouter initialEntries={["/overview"]}>
           <TooltipProvider>
-            <DispatchControlPlane />
+            <QueryClientProvider client={queryClient}>
+              <DispatchControlPlane />
+            </QueryClientProvider>
           </TooltipProvider>
         </MemoryRouter>,
       );
@@ -189,7 +199,9 @@ describe("DispatchControlPlane", () => {
       root.render(
         <MemoryRouter initialEntries={["/overview"]}>
           <TooltipProvider>
-            <DispatchControlPlane />
+            <QueryClientProvider client={queryClient}>
+              <DispatchControlPlane />
+            </QueryClientProvider>
           </TooltipProvider>
         </MemoryRouter>,
       );
@@ -279,7 +291,9 @@ describe("DispatchControlPlane", () => {
       root.render(
         <MemoryRouter initialEntries={["/overview"]}>
           <TooltipProvider>
-            <DispatchControlPlane />
+            <QueryClientProvider client={queryClient}>
+              <DispatchControlPlane />
+            </QueryClientProvider>
           </TooltipProvider>
         </MemoryRouter>,
       );

package/src/components/workspace-app-card.spec.tsx

@@ -7,6 +7,15 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import { TooltipProvider } from "./ui/tooltip";
 import { WorkspaceAppCard } from "./workspace-app-card";
 
+vi.mock("@agent-native/core/client/sharing", () => ({
+  ShareButton: ({ resourceTitle }: { resourceTitle?: string }) =>
+    React.createElement(
+      "button",
+      { type: "button", "aria-label": `Share ${resourceTitle ?? "app"}` },
+      "Share",
+    ),
+}));
+
 vi.mock("@agent-native/core/client/hooks", () => ({
   useActionMutation: () => ({ mutate: vi.fn(), isPending: false }),
   useActionQuery: () => ({
@@ -26,11 +35,18 @@ vi.mock("@agent-native/core/client/i18n", () => ({
     String(values?.defaultValue ?? key),
 }));
 
+const frameState = vi.hoisted(() => ({ inBuilderFrame: false }));
+
+vi.mock("@agent-native/core/client/host", () => ({
+  isInBuilderFrame: () => frameState.inBuilderFrame,
+}));
+
 describe("WorkspaceAppCard", () => {
   let container: HTMLDivElement;
   let root: Root;
 
   beforeEach(() => {
+    frameState.inBuilderFrame = false;
     vi.stubGlobal("IS_REACT_ACT_ENVIRONMENT", true);
     container = document.createElement("div");
     document.body.appendChild(container);
@@ -118,6 +134,7 @@ describe("WorkspaceAppCard", () => {
   });
 
   it("opens mounted workspace apps at their published URL", async () => {
+    frameState.inBuilderFrame = true;
     const originalParent = window.parent;
     const originalTop = window.top;
     const topWindow = { location: { href: "" } } as unknown as Window;

package/src/components/workspace-app-card.tsx

@@ -4,6 +4,7 @@ import {
   useActionQuery,
 } from "@agent-native/core/client/hooks";
 import { useT } from "@agent-native/core/client/i18n";
+import { ShareButton } from "@agent-native/core/client/sharing";
 import {
   IconChevronDown,
   IconChevronRight,
@@ -210,6 +211,17 @@ export function WorkspaceAppCard({
             pendingOpenLabel={pendingOpenLabel}
             onTogglePinned={onTogglePinned}
           />
+          {!isPending ? (
+            <div className="pointer-events-auto">
+              <ShareButton
+                resourceType="workspace-app"
+                resourceId={app.id}
+                resourceTitle={app.name}
+                trigger="icon"
+                triggerClassName={APP_CARD_ACTION_CLASS}
+              />
+            </div>
+          ) : null}
           <WorkspaceAppSettings
             app={app}
             isArchived={isArchived}

package/src/components/workspace-app-host.spec.tsx

@@ -382,8 +382,9 @@ describe("WorkspaceAppKeepAlive", () => {
     expect(clientState.workspaceSsoMutateAsync).not.toHaveBeenCalled();
   });
 
-  it("mints custom SSO before navigating an embedded Dispatch surface", async () => {
+  it("mints custom SSO before navigating a Builder-hosted surface", async () => {
     clientState.workspaceSsoEnabled = true;
+    clientState.inBuilderFrame = true;
     const navigateToTopWindow = vi.fn(() => true);
     Object.defineProperty(window, "parent", {
       configurable: true,
@@ -535,9 +536,8 @@ describe("WorkspaceAppKeepAlive", () => {
     ).toBe("Workspace SSO is temporarily unavailable");
   });
 
-  it("opens the app in the top window when Dispatch is inside an iframe", async () => {
+  it("keeps a normal iframe app inline", async () => {
     const topWindow = { location: { href: "" } } as unknown as Window;
-    const expectedUrl = new URL("/mail", window.location.href).href;
     Object.defineProperty(window, "parent", {
       configurable: true,
       value: {},
@@ -552,15 +552,22 @@ describe("WorkspaceAppKeepAlive", () => {
         <WorkspaceAppFrame app={{ id: "mail", name: "Mail", path: "/mail" }} />,
       );
       await Promise.resolve();
+      await Promise.resolve();
+      await Promise.resolve();
     });
 
-    expect(topWindow.location.href).toBe(expectedUrl);
-    expect(clientState.legacyMutateAsync).not.toHaveBeenCalled();
-    expect(container.querySelector("iframe")).toBeNull();
+    expect(topWindow.location.href).toBe("");
+    expect(clientState.legacyMutateAsync).toHaveBeenCalledWith({
+      app: "mail",
+      path: "/mail",
+      chrome: "minimal",
+    });
+    expect(container.querySelector("iframe")).not.toBeNull();
   });
 
   it("falls back to the embedded app when top-window navigation is blocked", async () => {
     const navigateToTopWindow = vi.fn(() => false);
+    clientState.inBuilderFrame = true;
     Object.defineProperty(window, "parent", {
       configurable: true,
       value: {},
@@ -594,6 +601,7 @@ describe("WorkspaceAppKeepAlive", () => {
       "/mail/emails?status=failed#latest",
       window.location.href,
     ).href;
+    clientState.inBuilderFrame = true;
     Object.defineProperty(window, "parent", {
       configurable: true,
       value: {},

package/src/db/index.ts

@@ -1,9 +1,36 @@
-import { createGetDb } from "@agent-native/core/db";
+import { createGetDb, getDbExec } from "@agent-native/core/db";
+import { registerShareableResource } from "@agent-native/core/sharing";
 
 import * as schema from "./schema.js";
 
 export const getDb = createGetDb(schema);
 
+registerShareableResource({
+  type: "workspace-app",
+  resourceTable: schema.workspaceApps,
+  sharesTable: schema.workspaceAppShares,
+  displayName: "Workspace app",
+  titleColumn: "name",
+  getResourcePath: (resource) =>
+    typeof resource?.path === "string" ? resource.path : undefined,
+  getDb,
+  allowPublic: false,
+  requireOrgMemberForUserShares: true,
+  supportsGroupShares: true,
+  canManageAccess: async (resource, ctx) => {
+    if (!ctx.userEmail || !ctx.orgId || resource?.orgId !== ctx.orgId) {
+      return false;
+    }
+    const result = await getDbExec().execute({
+      sql: `SELECT 1 FROM org_members
+            WHERE org_id = ? AND LOWER(email) = LOWER(?)
+              AND role IN ('owner', 'admin') LIMIT 1`,
+      args: [ctx.orgId, ctx.userEmail],
+    });
+    return result.rows.length > 0;
+  },
+});
+
 export function db() {
   return getDb();
 }

package/src/db/schema.ts

@@ -1,5 +1,10 @@
 import { table, text, integer } from "@agent-native/core/db/schema";
 
+// Workspace app ownership/sharing lives in core so every mounted app can
+// enforce the same access record. Re-exporting these tables keeps Dispatch's
+// Drizzle accessor aware of them for the generic share actions.
+export { workspaceApps, workspaceAppShares } from "@agent-native/core/org";
+
 export const dispatchDestinations = table("dispatch_destinations", {
   id: text("id").primaryKey(),
   ownerEmail: text("owner_email").notNull(),

package/src/lib/workspace-apps.test.ts

@@ -1,8 +1,9 @@
 // @vitest-environment happy-dom
-import { afterEach, describe, expect, it } from "vitest";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
 
 import {
   navigateToWorkspaceApp,
+  shouldOpenWorkspaceAppInTopWindow,
   workspaceAppDirectHref,
   workspaceAppEmbedTarget,
 } from "./workspace-apps";
@@ -66,7 +67,12 @@ describe("workspaceAppDirectHref", () => {
 });
 
 describe("navigateToWorkspaceApp", () => {
+  beforeEach(() => {
+    window.history.replaceState({}, "", "/");
+  });
+
   afterEach(() => {
+    window.history.replaceState({}, "", "/");
     Object.defineProperty(window, "parent", {
       configurable: true,
       value: window,
@@ -77,8 +83,18 @@ describe("navigateToWorkspaceApp", () => {
     });
   });
 
-  it("uses the top window when Dispatch is embedded", () => {
+  it("keeps a normal iframe inline", () => {
+    Object.defineProperty(window, "parent", {
+      configurable: true,
+      value: {},
+    });
+
+    expect(shouldOpenWorkspaceAppInTopWindow()).toBe(false);
+  });
+
+  it("uses the top window when Dispatch is inside a Builder webview", () => {
     const topWindow = { location: { href: "" } } as unknown as Window;
+    window.history.replaceState({}, "", "/?builder.preview=interact");
     Object.defineProperty(window, "parent", {
       configurable: true,
       value: {},
@@ -88,6 +104,7 @@ describe("navigateToWorkspaceApp", () => {
       value: topWindow,
     });
 
+    expect(shouldOpenWorkspaceAppInTopWindow()).toBe(true);
     navigateToWorkspaceApp("/mail");
 
     expect(topWindow.location.href).toBe(
@@ -104,6 +121,7 @@ describe("navigateToWorkspaceApp", () => {
       },
     });
     const topWindow = { location } as unknown as Window;
+    window.history.replaceState({}, "", "/?builder.preview=interact");
     Object.defineProperty(window, "parent", {
       configurable: true,
       value: {},

package/src/lib/workspace-apps.ts

@@ -15,6 +15,7 @@ export interface WorkspaceAppSummary {
   url?: string | null;
   isDispatch?: boolean;
   audience?: "internal" | "public";
+  visibility?: "private" | "org";
   publicPaths?: string[];
   protectedPaths?: string[];
   status?: "ready" | "pending";
@@ -255,7 +256,9 @@ export function isPendingBuilderHref(app: WorkspaceAppSummary): boolean {
 
 export function shouldOpenWorkspaceAppInTopWindow(): boolean {
   if (typeof window === "undefined") return false;
-  return isInBuilderFrame() || window.parent !== window;
+  // A generic iframe is an inline host by design. Only Builder owns the
+  // parent navigation contract for workspace apps.
+  return isInBuilderFrame();
 }
 
 export function navigateToWorkspaceApp(href: string): boolean {

package/src/server/lib/app-creation-store.spec.ts

@@ -26,6 +26,11 @@ const mocks = vi.hoisted(() => {
     putSetting: vi.fn(async (key: string, value: unknown) => {
       settings.set(key, value);
     }),
+    getOrgSetting: vi.fn(async () => null),
+    resolveAccess: vi.fn(async () => ({
+      role: "viewer",
+      resource: {},
+    })),
     getDbExec: vi.fn(() => ({
       execute: vi.fn(async () => ({
         rows: state.orgRole ? [{ role: state.orgRole }] : [],
@@ -74,8 +79,18 @@ vi.mock("@agent-native/core/db", async (importOriginal) => {
 vi.mock("@agent-native/core/settings", () => ({
   getSetting: (...args: any[]) => mocks.getSetting(...args),
   putSetting: (...args: any[]) => mocks.putSetting(...args),
+  getOrgSetting: (...args: any[]) => mocks.getOrgSetting(...args),
 }));
 
+vi.mock("@agent-native/core/sharing", async (importOriginal) => {
+  const actual =
+    await importOriginal<typeof import("@agent-native/core/sharing")>();
+  return {
+    ...actual,
+    resolveAccess: (...args: any[]) => mocks.resolveAccess(...args),
+  };
+});
+
 vi.mock("@agent-native/core/server", async (importOriginal) => {
   const actual =
     await importOriginal<typeof import("@agent-native/core/server")>();
@@ -105,6 +120,14 @@ afterEach(() => {
   vi.clearAllMocks();
   mocks.settings.clear();
   mocks.state.orgRole = "admin";
+  mocks.getDbExec.mockReset();
+  mocks.getDbExec.mockImplementation(() => ({
+    execute: vi.fn(async () => ({
+      rows: mocks.state.orgRole ? [{ role: mocks.state.orgRole }] : [],
+    })),
+  }));
+  mocks.resolveAccess.mockReset();
+  mocks.resolveAccess.mockResolvedValue({ role: "viewer", resource: {} });
   mocks.resolveBuilderCredentialsDetailed.mockResolvedValue({
     privateKey: null,
     publicKey: null,
@@ -345,6 +368,103 @@ describe("listWorkspaceApps", () => {
     expect(apps.map((app) => app.id)).toEqual(["dispatch"]);
   });
 
+  it("does not create or expose apps when the org visibility setting cannot be read", async () => {
+    stubManifest([
+      { id: "dispatch", name: "Dispatch", path: "/dispatch" },
+      { id: "private-app", name: "Private app", path: "/private-app" },
+    ]);
+    mocks.getOrgSetting.mockRejectedValueOnce(
+      new Error("settings store unavailable"),
+    );
+
+    await expect(
+      runWithRequestContext(
+        { userEmail: "dev@example.test", orgId: "org-123" },
+        () => listWorkspaceApps({ includeAgentCards: false }),
+      ),
+    ).rejects.toThrow("settings store unavailable");
+  });
+
+  it("fails closed when the workspace-app access schema is unavailable", async () => {
+    stubManifest([
+      { id: "dispatch", name: "Dispatch", path: "/dispatch" },
+      { id: "private-app", name: "Private app", path: "/private-app" },
+    ]);
+    mocks.resolveAccess.mockRejectedValueOnce(
+      new Error("no such table: workspace_app_shares"),
+    );
+
+    const apps = await runWithRequestContext(
+      { userEmail: "dev@example.test", orgId: "org-123" },
+      () => listWorkspaceApps({ includeAgentCards: false }),
+    );
+
+    expect(apps.map((app) => app.id)).toEqual(["dispatch"]);
+  });
+
+  it("does not expose the workspace app registry without an authenticated user", async () => {
+    stubNoPendingContext();
+    stubManifest([
+      { id: "dispatch", name: "Dispatch", path: "/dispatch" },
+      { id: "private-app", name: "Private app", path: "/private-app" },
+    ]);
+
+    const apps = await runWithRequestContext({ orgId: "org-123" }, () =>
+      listWorkspaceApps({ includeAgentCards: false }),
+    );
+
+    expect(apps).toEqual([]);
+    expect(mocks.resolveAccess).not.toHaveBeenCalled();
+  });
+
+  it("uses the organization default only for apps with trusted creation metadata", async () => {
+    stubNoPendingContext();
+    stubManifest([
+      {
+        id: "legacy-app",
+        name: "Legacy app",
+        path: "/legacy-app",
+      },
+      {
+        id: "new-app",
+        name: "New app",
+        path: "/new-app",
+        createdBy: "creator@example.test",
+      },
+    ]);
+    mocks.getOrgSetting.mockResolvedValueOnce({ visibility: "private" });
+    const execute = vi.fn(async (statement: unknown) => {
+      const sql =
+        typeof statement === "string"
+          ? statement
+          : String((statement as { sql?: unknown })?.sql ?? "");
+      if (sql.includes("SELECT id, owner_email, org_id, visibility")) {
+        return { rows: [], rowsAffected: 0 };
+      }
+      return { rows: [], rowsAffected: 1 };
+    });
+    mocks.getDbExec.mockReturnValue({ execute });
+
+    const apps = await runWithRequestContext(
+      { userEmail: "dev@example.test", orgId: "org-123" },
+      () => listWorkspaceApps({ includeAgentCards: false }),
+    );
+
+    expect(apps.find((app) => app.id === "legacy-app")?.visibility).toBe("org");
+    expect(apps.find((app) => app.id === "new-app")?.visibility).toBe(
+      "private",
+    );
+    const inserts = execute.mock.calls.filter(([statement]) =>
+      String((statement as { sql?: unknown })?.sql ?? "").includes(
+        "INSERT INTO workspace_apps",
+      ),
+    );
+    expect(inserts.map(([statement]) => (statement as any).args?.[3])).toEqual([
+      "org",
+      "private",
+    ]);
+  });
+
   it("projects exact custom SSO eligibility without exposing registry details", async () => {
     stubNoPendingContext();
     stubManifest([