@agent-native/dispatch 0.36.0-nightly-20260909183543 → 0.36.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/dispatch",
-  "version": "0.36.0-nightly-20260909183543",
+  "version": "0.36.0",
   "description": "Dispatch — workspace control plane for agent-native apps. Vault, integrations, destinations, scheduled jobs, and cross-app delegation, shipped as a single drop-in package.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -88,7 +88,7 @@
     "tailwind-merge": "^3.5.0",
     "vaul": "^1.1.2",
     "zod": "^4.3.6",
-    "@agent-native/toolkit": "0.19.6-nightly-20260909183543"
+    "@agent-native/toolkit": "0.19.6"
   },
   "devDependencies": {
     "@react-router/dev": "^8.1.0",
@@ -102,10 +102,10 @@
     "typescript-7": "npm:typescript@^7.0.2",
     "vite": "8.1.0",
     "vitest": "^4.1.5",
-    "@agent-native/core": "0.178.0-nightly-20260909183543"
+    "@agent-native/core": "0.178.0"
   },
   "peerDependencies": {
-    "@agent-native/core": "0.178.0-nightly-20260909183543",
+    "@agent-native/core": ">=0.8.0",
     "react": ">=19.2.7",
     "react-dom": ">=19.2.7",
     "react-router": ">=8"

package/src/actions/apply-dream-proposal.ts

@@ -1,11 +1,15 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
-import { applyDreamProposal } from "../server/lib/dreams-store.js";
+import {
+  applyDreamProposal,
+  authorizeDreamProposalMutation,
+} from "../server/lib/dreams-store.js";
 
 export default defineAction({
   description:
     "Apply one pending Dispatch dream proposal. Personal memory applies directly; shared LEARNINGS.md and workspace resource proposals queue an approval request when approval policy is enabled.",
+  authorize: authorizeDreamProposalMutation,
   schema: z.object({
     id: z.string().min(1).describe("Dream proposal id."),
   }),

package/src/actions/approve-dispatch-change.ts

@@ -1,10 +1,12 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { approveRequest } from "../server/lib/dispatch-store.js";
 
 export default defineAction({
   description: "Approve a pending dispatch change request and apply it.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     id: z.string().describe("Approval request id"),
   }),

package/src/actions/create-pylon-ticket.ts

@@ -2,6 +2,7 @@ import { defineAction } from "@agent-native/core/action";
 import { resolveSecret } from "@agent-native/core/server";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { recordAudit } from "../server/lib/dispatch-store.js";
 
 const PYLON_API_BASE =
@@ -10,6 +11,7 @@ const PYLON_API_BASE =
 export default defineAction({
   description:
     "Create a Pylon ticket. Use to escalate blockers from client meetings, route unmatched #customer-* posts that have no Slack channel, or open a follow-up that needs tracking. Requires PYLON_API_KEY in the Vault.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     title: z.string().min(1).describe("Short ticket title"),
     bodyHtml: z

package/src/actions/create-workspace-resource-grant.ts

@@ -1,11 +1,13 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { createResourceGrant } from "../server/lib/workspace-resources-store.js";
 
 export default defineAction({
   description:
     "Grant an app access to a workspace resource (skill, instruction, agent, knowledge pack, or MCP server). Admin only.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     resourceId: z.string().describe("Workspace resource ID"),
     appId: z

package/src/actions/create-workspace-resource.ts

@@ -1,11 +1,13 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { createWorkspaceResource } from "../server/lib/workspace-resources-store.js";
 
 export default defineAction({
   description:
     'Create a workspace-wide skill, instruction, agent profile, reference resource, or MCP server. Set scope to "all" for runtime inheritance by every app, or "selected" to grant per-app. When Dispatch approval policy is enabled, All-app creates queue an approval request before taking effect.',
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     kind: z
       .enum([

package/src/actions/delete-destination.ts

@@ -1,10 +1,12 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { deleteDestination } from "../server/lib/dispatch-store.js";
 
 export default defineAction({
   description: "Delete a saved dispatch destination.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     id: z.string().describe("Destination id"),
   }),

package/src/actions/delete-workspace-resource.ts

@@ -1,11 +1,13 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { deleteWorkspaceResource } from "../server/lib/workspace-resources-store.js";
 
 export default defineAction({
   description:
     "Delete a workspace resource and revoke all its grants. When Dispatch approval policy is enabled, deleting an All-app resource queues an approval request before taking effect.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     id: z.string().describe("Resource ID to delete"),
   }),

package/src/actions/dispatch-admin-authorization.spec.ts

@@ -0,0 +1,114 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const mocks = vi.hoisted(() => ({
+  assertAny: vi.fn(),
+  deleteDestination: vi.fn(),
+  getDestinationById: vi.fn(),
+  resolveSecret: vi.fn(),
+  upsertDestination: vi.fn(),
+  validateFederatedOrganizationMembershipForCurrentRequest: vi.fn(),
+}));
+
+vi.mock("@agent-native/core/org", () => ({
+  defineAppRoles: () => ({ assertAny: mocks.assertAny }),
+  validateFederatedOrganizationMembershipForCurrentRequest:
+    mocks.validateFederatedOrganizationMembershipForCurrentRequest,
+}));
+
+vi.mock("@agent-native/core/server", () => ({
+  getRequestOrgId: () => "org-a",
+  getRequestUserEmail: () => "member@example.com",
+  resolveSecret: mocks.resolveSecret,
+}));
+
+vi.mock("@agent-native/core/integrations", () => ({
+  listIntegrationInstallations: vi.fn(),
+  resolveIntegrationTokenBundle: vi.fn(),
+}));
+
+vi.mock("../server/lib/dispatch-store.js", () => ({
+  deleteDestination: mocks.deleteDestination,
+  getDestinationById: mocks.getDestinationById,
+  recordAudit: vi.fn(),
+  upsertDestination: mocks.upsertDestination,
+}));
+
+import { ForbiddenError } from "@agent-native/core/sharing";
+
+const sendPlatformMessage = (await import("./send-platform-message.js"))
+  .default;
+const createPylonTicket = (await import("./create-pylon-ticket.js")).default;
+const deleteDestination = (await import("./delete-destination.js")).default;
+const upsertDestination = (await import("./upsert-destination.js")).default;
+
+const memberContext = {
+  caller: "http" as const,
+  orgId: "org-a",
+  userEmail: "member@example.com",
+};
+
+describe("Dispatch admin authorization", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    mocks.validateFederatedOrganizationMembershipForCurrentRequest.mockResolvedValue(
+      { active: true, role: "member" },
+    );
+    mocks.assertAny.mockRejectedValue(
+      new ForbiddenError("Requires dispatch role admin"),
+    );
+  });
+
+  it("denies organization members before sending a platform message", async () => {
+    await expect(
+      sendPlatformMessage.run(
+        {
+          platform: "slack",
+          destination: "C1",
+          text: "hello",
+        },
+        memberContext,
+      ),
+    ).rejects.toThrow("Requires dispatch role admin");
+
+    expect(mocks.getDestinationById).not.toHaveBeenCalled();
+    expect(mocks.resolveSecret).not.toHaveBeenCalled();
+  });
+
+  it("denies organization members before creating a Pylon ticket", async () => {
+    await expect(
+      createPylonTicket.run(
+        {
+          title: "Follow-up",
+          bodyHtml: "<p>hello</p>",
+          requesterEmail: "requester@example.com",
+        },
+        memberContext,
+      ),
+    ).rejects.toThrow("Requires dispatch role admin");
+
+    expect(mocks.resolveSecret).not.toHaveBeenCalled();
+  });
+
+  it("denies organization members before changing a destination", async () => {
+    await expect(
+      upsertDestination.run(
+        {
+          name: "Support",
+          platform: "slack",
+          destination: "C1",
+        },
+        memberContext,
+      ),
+    ).rejects.toThrow("Requires dispatch role admin");
+
+    expect(mocks.upsertDestination).not.toHaveBeenCalled();
+  });
+
+  it("denies organization members before deleting a destination", async () => {
+    await expect(
+      deleteDestination.run({ id: "destination-1" }, memberContext),
+    ).rejects.toThrow("Requires dispatch role admin");
+
+    expect(mocks.deleteDestination).not.toHaveBeenCalled();
+  });
+});

package/src/actions/ensure-dream-job.ts

@@ -1,11 +1,13 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { ensureDreamJob } from "../server/lib/dreams-store.js";
 
 export default defineAction({
   description:
     "Create or update the personal recurring Dispatch dream job resource at jobs/dispatch-dream.md.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     schedule: z
       .string()

package/src/actions/grant-workspace-resources-to-app.ts

@@ -1,11 +1,13 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { grantWorkspaceResourcesToApp } from "../server/lib/workspace-resources-store.js";
 
 export default defineAction({
   description:
     "Grant several selected workspace resources, knowledge packs, or MCP servers to an app, skipping existing active grants.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     appId: z.string().describe("App ID receiving the resources"),
     resourceIds: z

package/src/actions/import-agent-pack.ts

@@ -13,6 +13,7 @@ import {
 } from "../lib/agent-pack.js";
 import { validateImportedAgentTools } from "../lib/simple-agent-profile.js";
 import { applyAgentPackCreate } from "../server/lib/agent-pack-store.js";
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import {
   createApprovalRequest,
   getApprovalPolicy,
@@ -60,6 +61,7 @@ function availableToolNames(dispatchToolNames: string[]): Set<string> {
 export default defineAction({
   description:
     "Import a folder-backed agent pack from Claude, Cowork, or another agent tool. The pack can include a Markdown/JSON profile, context, references, and skills. Credentials, hooks, shell commands, and local environment settings are never imported.",
+  authorize: authorizeDispatchAdmin,
   schema,
   run: async ({ files, scope }) => {
     const normalized = normalizeAgentPack(files as AgentPackFileInput[]);

package/src/actions/import-agent.ts

@@ -8,6 +8,7 @@ import {
   normalizeImportedAgent,
   validateImportedAgentTools,
 } from "../lib/simple-agent-profile.js";
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import {
   createWorkspaceResource,
   listWorkspaceResources,
@@ -16,6 +17,7 @@ import {
 export default defineAction({
   description:
     "Import a Claude-style Markdown agent or a generic JSON agent definition into a reusable Dispatch agent profile. Credentials, shell commands, hooks, and local environment settings are never imported. Use connect-external-agent for an HTTP/A2A endpoint.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     source: z
       .string()

package/src/actions/reject-dispatch-change.ts

@@ -1,10 +1,12 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { rejectRequest } from "../server/lib/dispatch-store.js";
 
 export default defineAction({
   description: "Reject a pending dispatch change request.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     id: z.string().describe("Approval request id"),
     reason: z.string().optional().describe("Optional rejection reason"),

package/src/actions/reject-dream-proposal.ts

@@ -1,10 +1,14 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
-import { rejectDreamProposal } from "../server/lib/dreams-store.js";
+import {
+  authorizeDreamProposalMutation,
+  rejectDreamProposal,
+} from "../server/lib/dreams-store.js";
 
 export default defineAction({
   description: "Reject one pending Dispatch dream proposal.",
+  authorize: authorizeDreamProposalMutation,
   schema: z.object({
     id: z.string().min(1).describe("Dream proposal id."),
     reason: z.string().optional().describe("Optional rejection reason."),

package/src/actions/restore-starter-workspace-resources.ts

@@ -1,11 +1,13 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { restoreStarterWorkspaceResources } from "../server/lib/workspace-resources-store.js";
 
 export default defineAction({
   description:
     "Restore missing starter global workspace resources such as company, brand, messaging, guardrails, and company voice. Existing resources are left unchanged.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     paths: z
       .array(z.string())

package/src/actions/revoke-workspace-resource-grant.ts

@@ -1,6 +1,7 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import {
   requireWorkspaceResourceCtx,
   revokeResourceGrant,
@@ -8,6 +9,7 @@ import {
 
 export default defineAction({
   description: "Revoke an app's access to a workspace resource. Admin only.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     grantId: z.string().describe("Grant ID to revoke"),
   }),

package/src/actions/send-platform-message.spec.ts

@@ -28,6 +28,10 @@ vi.mock("../server/lib/dispatch-store.js", () => ({
   getDestinationById: mocks.getDestinationById,
 }));
 
+vi.mock("../server/lib/app-roles.js", () => ({
+  authorizeDispatchAdmin: vi.fn(),
+}));
+
 const action = (await import("./send-platform-message.js")).default;
 
 describe("send-platform-message tenant scoping", () => {

package/src/actions/send-platform-message.ts

@@ -14,6 +14,7 @@ import {
 } from "@agent-native/core/server";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { getDestinationById } from "../server/lib/dispatch-store.js";
 
 function getAdapter(
@@ -78,6 +79,7 @@ async function assertOutboundConfigured(
 export default defineAction({
   description:
     "Send a proactive message to a saved Slack, Telegram, or email destination.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     platform: z.enum(["slack", "telegram", "email"]).optional(),
     destinationId: z.string().optional().describe("Saved destination id"),

package/src/actions/set-dispatch-approval-policy.ts

@@ -1,6 +1,7 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import {
   getApprovalPolicy,
   setApprovalPolicy,
@@ -8,6 +9,7 @@ import {
 
 export default defineAction({
   description: "Enable or disable dispatch approval flow for durable changes.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     enabled: z.boolean(),
     approverEmails: z.array(z.string().email()).default([]),

package/src/actions/set-dream-settings.spec.ts

@@ -1,9 +1,14 @@
 import { beforeEach, describe, expect, it, vi } from "vitest";
 
 const mocks = vi.hoisted(() => ({
+  authorizeDispatchAdmin: vi.fn(),
   setDreamSettings: vi.fn(),
 }));
 
+vi.mock("../server/lib/app-roles.js", () => ({
+  authorizeDispatchAdmin: mocks.authorizeDispatchAdmin,
+}));
+
 vi.mock("../server/lib/dreams-store.js", () => ({
   setDreamSettings: mocks.setDreamSettings,
 }));

package/src/actions/set-dream-settings.ts

@@ -1,11 +1,13 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { setDreamSettings } from "../server/lib/dreams-store.js";
 
 export default defineAction({
   description:
     "Update recurring Dispatch dream settings without immediately running or applying a dream pass.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     enabled: z
       .boolean()

package/src/actions/update-workspace-resource.ts

@@ -1,11 +1,13 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { updateWorkspaceResource } from "../server/lib/workspace-resources-store.js";
 
 export default defineAction({
   description:
     "Update a workspace resource's name, description, content, or scope. When Dispatch approval policy is enabled, changes that affect All-app resources queue an approval request before taking effect.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     id: z.string().describe("Resource ID"),
     name: z.string().optional().describe("New name"),

package/src/actions/upsert-destination.ts

@@ -1,11 +1,13 @@
 import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { authorizeDispatchAdmin } from "../server/lib/app-roles.js";
 import { upsertDestination } from "../server/lib/dispatch-store.js";
 
 export default defineAction({
   description:
     "Create or update a saved messaging destination for proactive Slack, Telegram, or email sends.",
+  authorize: authorizeDispatchAdmin,
   schema: z.object({
     id: z.string().optional(),
     name: z.string().describe("Friendly destination name"),

package/src/components/dispatch-access.spec.tsx

@@ -4,19 +4,6 @@ import React, { act } from "react";
 import { createRoot, type Root } from "react-dom/client";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
-const mocks = vi.hoisted(() => ({
-  useOrgRole: vi.fn(),
-}));
-
-vi.mock("@agent-native/core/client/org", async (importOriginal) => {
-  const actual =
-    await importOriginal<typeof import("@agent-native/core/client/org")>();
-  return {
-    ...actual,
-    useOrgRole: mocks.useOrgRole,
-  };
-});
-
 import { RequireDispatchAccess } from "./dispatch-access.js";
 
 describe("RequireDispatchAccess", () => {
@@ -33,40 +20,10 @@ describe("RequireDispatchAccess", () => {
   afterEach(() => {
     act(() => root.unmount());
     container.remove();
-    mocks.useOrgRole.mockReset();
     vi.unstubAllGlobals();
   });
 
-  it.each(["owner", "admin"] as const)(
-    "renders the Dispatch shell for an organization %s",
-    (role) => {
-      mocks.useOrgRole.mockReturnValue({
-        org: { orgId: "org-1" },
-        role,
-        isLoading: false,
-        error: null,
-      });
-
-      act(() => {
-        root.render(
-          <RequireDispatchAccess>
-            <div data-dispatch-shell>Dispatch shell</div>
-          </RequireDispatchAccess>,
-        );
-      });
-
-      expect(container.querySelector("[data-dispatch-shell]")).not.toBeNull();
-    },
-  );
-
-  it("renders the Dispatch shell without an active organization", () => {
-    mocks.useOrgRole.mockReturnValue({
-      org: undefined,
-      role: null,
-      isLoading: false,
-      error: null,
-    });
-
+  it("renders the Dispatch shell for every authenticated user", () => {
     act(() => {
       root.render(
         <RequireDispatchAccess>
@@ -77,23 +34,4 @@ describe("RequireDispatchAccess", () => {
 
     expect(container.querySelector("[data-dispatch-shell]")).not.toBeNull();
   });
-
-  it("does not render the Dispatch shell for an organization member", () => {
-    mocks.useOrgRole.mockReturnValue({
-      org: { orgId: "org-1" },
-      role: "member",
-      isLoading: false,
-      error: null,
-    });
-
-    act(() => {
-      root.render(
-        <RequireDispatchAccess>
-          <div data-dispatch-shell>Dispatch shell</div>
-        </RequireDispatchAccess>,
-      );
-    });
-
-    expect(container.querySelector("[data-dispatch-shell]")).toBeNull();
-  });
 });

package/src/components/dispatch-access.tsx

@@ -1,13 +1,5 @@
-import { canManageOrg, useOrgRole } from "@agent-native/core/client/org";
-import { DefaultSpinner } from "@agent-native/core/client/ui";
 import { type ReactNode } from "react";
 
 export function RequireDispatchAccess({ children }: { children: ReactNode }) {
-  const { org, role, isLoading, error } = useOrgRole();
-
-  if (isLoading) return <DefaultSpinner />;
-  if (error) return null;
-  if (org?.orgId && !canManageOrg(role)) return null;
-
   return <>{children}</>;
 }

package/src/server/lib/app-creation-store.spec.ts

@@ -35,6 +35,7 @@ const mocks = vi.hoisted(() => {
       settings.set(key, value);
     }),
     getOrgSetting: vi.fn(async () => null),
+    isWorkspaceAppAccessAllowed: vi.fn(async () => true),
     resolveAccess: vi.fn(async () => ({
       role: "viewer",
       resource: {},
@@ -106,12 +107,8 @@ vi.mock("@agent-native/core/org", async (importOriginal) => {
     await importOriginal<typeof import("@agent-native/core/org")>();
   return {
     ...actual,
-    isWorkspaceAppAccessAllowed: vi.fn(
-      async (_appId: string, context: { orgId?: string | null } = {}) =>
-        !context.orgId ||
-        mocks.state.orgRole === "owner" ||
-        mocks.state.orgRole === "admin",
-    ),
+    isWorkspaceAppAccessAllowed: (...args: any[]) =>
+      mocks.isWorkspaceAppAccessAllowed(...args),
   };
 });
 
@@ -158,6 +155,8 @@ afterEach(() => {
   mocks.settings.clear();
   mocks.getOrgSetting.mockReset();
   mocks.getOrgSetting.mockResolvedValue(null);
+  mocks.isWorkspaceAppAccessAllowed.mockReset();
+  mocks.isWorkspaceAppAccessAllowed.mockResolvedValue(true);
   mocks.mutateSetting.mockReset();
   mocks.mutateSetting.mockImplementation(
     async (key: string, updater: (current: any) => any) => {
@@ -296,22 +295,6 @@ describe("listWorkspaceApps", () => {
     };
   }
 
-  it.each(["owner", "admin", "member"] as const)(
-    "applies the organization role gate to Dispatch registry links for %s",
-    async (role) => {
-      stubNoPendingContext();
-      stubManifest();
-      mocks.state.orgRole = role;
-
-      const apps = await runWithRequestContext(
-        { userEmail: `${role}@example.test`, orgId: "org-123" },
-        () => listWorkspaceApps({ includeAgentCards: false }),
-      );
-
-      expect(apps.some((app) => app.id === "dispatch")).toBe(role !== "member");
-    },
-  );
-
   it("prefers the live workspace gateway manifest when available", async () => {
     const fetchMock = vi.fn(async () => {
       return new Response(
@@ -598,6 +581,22 @@ describe("listWorkspaceApps", () => {
     expect(apps.map((app) => app.id)).toEqual(["dispatch"]);
   });
 
+  it("does not expose Dispatch after federated membership is revoked", async () => {
+    stubManifest();
+    mocks.isWorkspaceAppAccessAllowed.mockResolvedValueOnce(false);
+
+    const apps = await runWithRequestContext(
+      { userEmail: "member@example.test", orgId: "org-123" },
+      () => listWorkspaceApps({ includeAgentCards: false }),
+    );
+
+    expect(apps).toEqual([]);
+    expect(mocks.isWorkspaceAppAccessAllowed).toHaveBeenCalledWith("dispatch", {
+      email: "member@example.test",
+      orgId: "org-123",
+    });
+  });
+
   it("does not expose the workspace app registry without an authenticated user", async () => {
     stubNoPendingContext();
     stubManifest([