@agent-native/dispatch 0.40.28 → 0.40.29

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @agent-native/dispatch
 
+## 0.40.29
+
+### Patch Changes
+
+- f60152f: Require approval for `needsApproval` actions on every surface. HTTP action routes and generated Workers entries now run an approval-gated call only for the signed-in app UI (or its MCP directory widget); a bearer token, MCP OAuth token, org service token, A2A peer, or other HTTP caller gets `409 approval_required`, and an unproven browser call gets `403 ui_capability_required`. The app's client now presents its UI capability with every write from a signed-in session, so the 403 and one retry are only the fallback for an expired or rejected capability. `revoke-org-service-token` and the credential, membership, and app-access actions in core, Dispatch, and Scheduling now ask for approval on every call, with "always allow" off.
+- Release all public npm packages with a patch version bump.
+- Updated dependencies [4fdf78c]
+- Updated dependencies [ab1a9e8]
+- Updated dependencies [67514ae]
+- Updated dependencies [b451cb2]
+- Updated dependencies
+  - @agent-native/toolkit@0.211.0
+
 ## 0.40.28
 
 ### Patch Changes
@@ -1283,17 +1296,4 @@
 
 - 2107a36: Retry cross-app embed session authentication with the shared A2A secret when a workspace target rejects an unsynchronized organization secret.
 
-## 0.28.0
-
-### Minor Changes
-
-- d3702a5: Point the chat beside an open workspace app at that app's own agent. Dispatch now proxies `/_agent-native/workspace-app-chat/<appId>/**` to the app's `/_agent-native/agent-chat`, authenticated with the app's own embed session, so the rail has the app's tools, AGENTS.md, skills, app-scoped resources, and dev-mode surface instead of Dispatch's. When the proxy cannot be established the rail shows a retryable error rather than silently answering from Dispatch's agent, and workspace-level chat with no app open is unchanged.
-
-### Patch Changes
-
-- d3702a5: Allow workspace members to update mounted app names and descriptions from Dispatch.
-- d3702a5: Report the embedded workspace app to the Dispatch agent as structured context. `/apps/<id>` now resolves to a `workspace-app` navigation view that keeps the app id and in-app path instead of collapsing to the apps list, and `view-screen` emits an `embeddedApp` block for both that route and chat-first mode, where the route stays on `/chat` and the open app is named only by `chat-first-pane` state. An app that is open but cannot be identified reports `status: "unknown"` rather than a default or an omitted field.
-- d3702a5: Share the canonical localized authentication copy with native sign-in surfaces
-  and allow authenticated packaged callers to mint workspace embed sessions.
-
 For the full list of releases, see the [changelog archive](./changelog/archive/CHANGELOG.md).

package/dist/actions/approve-vault-request.js

@@ -11,6 +11,10 @@ export default defineAction({
             .optional()
             .describe("Human-readable name for the secret"),
     }),
+    // It creates, changes, or revokes a credential or who may use one: every
+    // call needs the user's approval, and "always allow" is not offered.
+    needsApproval: true,
+    allowPersistentApproval: false,
     run: async (args) => approveRequest(args.id, args.secretValue, args.secretName, requireVaultCtx()),
 });
 //# sourceMappingURL=approve-vault-request.js.map

package/dist/actions/approve-vault-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"approve-vault-request.js","sourceRoot":"","sources":["../../src/actions/approve-vault-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/E,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,mIAAmI;IACrI,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC7D,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,oCAAoC,CAAC;KAClD,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAClB,cAAc,CACZ,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,UAAU,EACf,eAAe,EAAE,CAClB;CACJ,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { approveRequest, requireVaultCtx } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Approve a pending vault secret request. Creates the secret (if it doesn't exist) and grants it to the requesting app. Admin only.\",\n  schema: z.object({\n    id: z.string().describe(\"Request ID to approve\"),\n    secretValue: z.string().describe(\"The secret value to store\"),\n    secretName: z\n      .string()\n      .optional()\n      .describe(\"Human-readable name for the secret\"),\n  }),\n  run: async (args) =>\n    approveRequest(\n      args.id,\n      args.secretValue,\n      args.secretName,\n      requireVaultCtx(),\n    ),\n});\n"]}
+{"version":3,"file":"approve-vault-request.js","sourceRoot":"","sources":["../../src/actions/approve-vault-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/E,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,mIAAmI;IACrI,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC7D,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,oCAAoC,CAAC;KAClD,CAAC;IACF,yEAAyE;IACzE,qEAAqE;IACrE,aAAa,EAAE,IAAI;IACnB,uBAAuB,EAAE,KAAK;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAClB,cAAc,CACZ,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,UAAU,EACf,eAAe,EAAE,CAClB;CACJ,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { approveRequest, requireVaultCtx } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Approve a pending vault secret request. Creates the secret (if it doesn't exist) and grants it to the requesting app. Admin only.\",\n  schema: z.object({\n    id: z.string().describe(\"Request ID to approve\"),\n    secretValue: z.string().describe(\"The secret value to store\"),\n    secretName: z\n      .string()\n      .optional()\n      .describe(\"Human-readable name for the secret\"),\n  }),\n  // It creates, changes, or revokes a credential or who may use one: every\n  // call needs the user's approval, and \"always allow\" is not offered.\n  needsApproval: true,\n  allowPersistentApproval: false,\n  run: async (args) =>\n    approveRequest(\n      args.id,\n      args.secretValue,\n      args.secretName,\n      requireVaultCtx(),\n    ),\n});\n"]}

package/dist/actions/create-link-token.js

@@ -6,6 +6,10 @@ export default defineAction({
     schema: z.object({
         platform: z.enum(["slack", "telegram"]),
     }),
+    // It creates, changes, or revokes a credential or who may use one: every
+    // call needs the user's approval, and "always allow" is not offered.
+    needsApproval: true,
+    allowPersistentApproval: false,
     run: async ({ platform }) => createLinkToken(platform),
 });
 //# sourceMappingURL=create-link-token.js.map

package/dist/actions/create-link-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-link-token.js","sourceRoot":"","sources":["../../src/actions/create-link-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gGAAgG;IAClG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;KACxC,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC;CACvD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { createLinkToken } from \"../server/lib/dispatch-store.js\";\n\nexport default defineAction({\n  description:\n    \"Create a /link token so a Slack or Telegram user can bind to their personal dispatch identity.\",\n  schema: z.object({\n    platform: z.enum([\"slack\", \"telegram\"]),\n  }),\n  run: async ({ platform }) => createLinkToken(platform),\n});\n"]}
+{"version":3,"file":"create-link-token.js","sourceRoot":"","sources":["../../src/actions/create-link-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gGAAgG;IAClG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;KACxC,CAAC;IACF,yEAAyE;IACzE,qEAAqE;IACrE,aAAa,EAAE,IAAI;IACnB,uBAAuB,EAAE,KAAK;IAC9B,GAAG,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC;CACvD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { createLinkToken } from \"../server/lib/dispatch-store.js\";\n\nexport default defineAction({\n  description:\n    \"Create a /link token so a Slack or Telegram user can bind to their personal dispatch identity.\",\n  schema: z.object({\n    platform: z.enum([\"slack\", \"telegram\"]),\n  }),\n  // It creates, changes, or revokes a credential or who may use one: every\n  // call needs the user's approval, and \"always allow\" is not offered.\n  needsApproval: true,\n  allowPersistentApproval: false,\n  run: async ({ platform }) => createLinkToken(platform),\n});\n"]}

package/dist/actions/create-vault-grant.js

@@ -9,6 +9,10 @@ export default defineAction({
             .string()
             .describe("App ID to grant access to, e.g. mail, calendar"),
     }),
+    // It creates, changes, or revokes a credential or who may use one: every
+    // call needs the user's approval, and "always allow" is not offered.
+    needsApproval: true,
+    allowPersistentApproval: false,
     run: async (args) => createGrant(args.secretId, args.appId),
 });
 //# sourceMappingURL=create-vault-grant.js.map

package/dist/actions/create-vault-grant.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-vault-grant.js","sourceRoot":"","sources":["../../src/actions/create-vault-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gFAAgF;IAClF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC1D,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,CAAC,gDAAgD,CAAC;KAC9D,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC;CAC5D,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { createGrant } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Grant an app access to a vault secret in manual vault access mode. Admin only.\",\n  schema: z.object({\n    secretId: z.string().describe(\"ID of the secret to grant\"),\n    appId: z\n      .string()\n      .describe(\"App ID to grant access to, e.g. mail, calendar\"),\n  }),\n  run: async (args) => createGrant(args.secretId, args.appId),\n});\n"]}
+{"version":3,"file":"create-vault-grant.js","sourceRoot":"","sources":["../../src/actions/create-vault-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gFAAgF;IAClF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC1D,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,CAAC,gDAAgD,CAAC;KAC9D,CAAC;IACF,yEAAyE;IACzE,qEAAqE;IACrE,aAAa,EAAE,IAAI;IACnB,uBAAuB,EAAE,KAAK;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC;CAC5D,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { createGrant } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Grant an app access to a vault secret in manual vault access mode. Admin only.\",\n  schema: z.object({\n    secretId: z.string().describe(\"ID of the secret to grant\"),\n    appId: z\n      .string()\n      .describe(\"App ID to grant access to, e.g. mail, calendar\"),\n  }),\n  // It creates, changes, or revokes a credential or who may use one: every\n  // call needs the user's approval, and \"always allow\" is not offered.\n  needsApproval: true,\n  allowPersistentApproval: false,\n  run: async (args) => createGrant(args.secretId, args.appId),\n});\n"]}

package/dist/actions/create-vault-secret.js

@@ -21,6 +21,10 @@ export default defineAction({
     // the value. Opt out of input capture so the trail can't become a second
     // durable credential store.
     audit: { recordInputs: false },
+    // It creates, changes, or revokes a credential or who may use one: every
+    // call needs the user's approval, and "always allow" is not offered.
+    needsApproval: true,
+    allowPersistentApproval: false,
     run: async (args) => toVaultSecretMetadata(await createSecret(args)),
 });
 //# sourceMappingURL=create-vault-secret.js.map

package/dist/actions/create-vault-secret.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-vault-secret.js","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,YAAY,EACZ,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AAEtC,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,8LAA8L;IAChM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACxE,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,qDAAqD,CAAC;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KACpE,CAAC;IACF,2EAA2E;IAC3E,8EAA8E;IAC9E,yEAAyE;IACzE,4BAA4B;IAC5B,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;CACrE,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport {\n  createSecret,\n  toVaultSecretMetadata,\n} from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Store a secret in the workspace vault. Admin only. Existing credential keys are updated. By default, saved vault keys are available to every workspace app; manual mode uses per-app grants.\",\n  schema: z.object({\n    credentialKey: z\n      .string()\n      .min(1)\n      .describe(\"Environment variable name, e.g. GOOGLE_CLIENT_ID\"),\n    value: z.string().min(1).describe(\"The secret value\"),\n    name: z.string().min(1).describe(\"Human-readable label for this secret\"),\n    provider: z\n      .string()\n      .optional()\n      .describe(\"Provider grouping tag, e.g. google, sendgrid, slack\"),\n    description: z.string().optional().describe(\"Optional description\"),\n  }),\n  // This action's whole purpose is to carry a secret `value`. The vault owns\n  // secret storage; the audit log must record THAT a secret was created — never\n  // the value. Opt out of input capture so the trail can't become a second\n  // durable credential store.\n  audit: { recordInputs: false },\n  run: async (args) => toVaultSecretMetadata(await createSecret(args)),\n});\n"]}
+{"version":3,"file":"create-vault-secret.js","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,YAAY,EACZ,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AAEtC,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,8LAA8L;IAChM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACxE,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,qDAAqD,CAAC;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KACpE,CAAC;IACF,2EAA2E;IAC3E,8EAA8E;IAC9E,yEAAyE;IACzE,4BAA4B;IAC5B,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;IAC9B,yEAAyE;IACzE,qEAAqE;IACrE,aAAa,EAAE,IAAI;IACnB,uBAAuB,EAAE,KAAK;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;CACrE,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport {\n  createSecret,\n  toVaultSecretMetadata,\n} from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Store a secret in the workspace vault. Admin only. Existing credential keys are updated. By default, saved vault keys are available to every workspace app; manual mode uses per-app grants.\",\n  schema: z.object({\n    credentialKey: z\n      .string()\n      .min(1)\n      .describe(\"Environment variable name, e.g. GOOGLE_CLIENT_ID\"),\n    value: z.string().min(1).describe(\"The secret value\"),\n    name: z.string().min(1).describe(\"Human-readable label for this secret\"),\n    provider: z\n      .string()\n      .optional()\n      .describe(\"Provider grouping tag, e.g. google, sendgrid, slack\"),\n    description: z.string().optional().describe(\"Optional description\"),\n  }),\n  // This action's whole purpose is to carry a secret `value`. The vault owns\n  // secret storage; the audit log must record THAT a secret was created — never\n  // the value. Opt out of input capture so the trail can't become a second\n  // durable credential store.\n  audit: { recordInputs: false },\n  // It creates, changes, or revokes a credential or who may use one: every\n  // call needs the user's approval, and \"always allow\" is not offered.\n  needsApproval: true,\n  allowPersistentApproval: false,\n  run: async (args) => toVaultSecretMetadata(await createSecret(args)),\n});\n"]}

package/dist/actions/create-workspace-resource.d.ts

@@ -6,19 +6,6 @@ declare const _default: import("@agent-native/core/action").ActionDefinition<{
     content: string;
     scope: "all" | "selected";
 }, {
-    id: string;
-    ownerEmail: string;
-    orgId: string | null;
-    kind: string;
-    name: string;
-    description: string | null;
-    path: string;
-    content: string;
-    scope: string;
-    createdBy: string;
-    createdAt: number;
-    updatedAt: number;
-} | {
     id: string;
     ownerEmail: string;
     orgId: string | null;
@@ -35,6 +22,19 @@ declare const _default: import("@agent-native/core/action").ActionDefinition<{
     reviewedAt: number | null;
     createdAt: number;
     updatedAt: number;
+} | {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    kind: string;
+    name: string;
+    description: string | null;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
 }>;
 export default _default;
 //# sourceMappingURL=create-workspace-resource.d.ts.map

package/dist/actions/delete-destination.d.ts

@@ -1,6 +1,18 @@
 declare const _default: import("@agent-native/core/action").ActionDefinition<{
     id: string;
 }, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    name: string;
+    platform: string;
+    destination: string;
+    threadRef: string | null;
+    notes: string | null;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+} | {
     id: string;
     ownerEmail: string;
     orgId: string | null;
@@ -17,18 +29,6 @@ declare const _default: import("@agent-native/core/action").ActionDefinition<{
     reviewedAt: number | null;
     createdAt: number;
     updatedAt: number;
-} | {
-    id: string;
-    ownerEmail: string;
-    orgId: string | null;
-    name: string;
-    platform: string;
-    destination: string;
-    threadRef: string | null;
-    notes: string | null;
-    createdBy: string;
-    createdAt: number;
-    updatedAt: number;
 }>;
 export default _default;
 //# sourceMappingURL=delete-destination.d.ts.map

package/dist/actions/delete-vault-secret.js

@@ -6,6 +6,10 @@ export default defineAction({
     schema: z.object({
         id: z.string().describe("Secret ID to delete"),
     }),
+    // It creates, changes, or revokes a credential or who may use one: every
+    // call needs the user's approval, and "always allow" is not offered.
+    needsApproval: true,
+    allowPersistentApproval: false,
     run: async ({ id }) => {
         await deleteSecret(id);
         return { deleted: true, id };

package/dist/actions/delete-vault-secret.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete-vault-secret.js","sourceRoot":"","sources":["../../src/actions/delete-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;KAC/C,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACpB,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC/B,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { deleteSecret } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Delete a secret from the workspace vault. Also revokes all active grants for this secret. Admin only.\",\n  schema: z.object({\n    id: z.string().describe(\"Secret ID to delete\"),\n  }),\n  run: async ({ id }) => {\n    await deleteSecret(id);\n    return { deleted: true, id };\n  },\n});\n"]}
+{"version":3,"file":"delete-vault-secret.js","sourceRoot":"","sources":["../../src/actions/delete-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;KAC/C,CAAC;IACF,yEAAyE;IACzE,qEAAqE;IACrE,aAAa,EAAE,IAAI;IACnB,uBAAuB,EAAE,KAAK;IAC9B,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACpB,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC/B,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { deleteSecret } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Delete a secret from the workspace vault. Also revokes all active grants for this secret. Admin only.\",\n  schema: z.object({\n    id: z.string().describe(\"Secret ID to delete\"),\n  }),\n  // It creates, changes, or revokes a credential or who may use one: every\n  // call needs the user's approval, and \"always allow\" is not offered.\n  needsApproval: true,\n  allowPersistentApproval: false,\n  run: async ({ id }) => {\n    await deleteSecret(id);\n    return { deleted: true, id };\n  },\n});\n"]}

package/dist/actions/delete-workspace-resource.d.ts

@@ -1,6 +1,19 @@
 declare const _default: import("@agent-native/core/action").ActionDefinition<{
     id: string;
 }, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    kind: string;
+    name: string;
+    description: string | null;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+} | {
     id: string;
     ownerEmail: string;
     orgId: string | null;
@@ -17,19 +30,6 @@ declare const _default: import("@agent-native/core/action").ActionDefinition<{
     reviewedAt: number | null;
     createdAt: number;
     updatedAt: number;
-} | {
-    id: string;
-    ownerEmail: string;
-    orgId: string | null;
-    kind: string;
-    name: string;
-    description: string | null;
-    path: string;
-    content: string;
-    scope: string;
-    createdBy: string;
-    createdAt: number;
-    updatedAt: number;
 }>;
 export default _default;
 //# sourceMappingURL=delete-workspace-resource.d.ts.map

package/dist/actions/grant-vault-secrets-to-app.js

@@ -14,6 +14,10 @@ export default defineAction({
             .max(100)
             .describe("Vault secret IDs to grant to the app"),
     }),
+    // It creates, changes, or revokes a credential or who may use one: every
+    // call needs the user's approval, and "always allow" is not offered.
+    needsApproval: true,
+    allowPersistentApproval: false,
     run: async (args) => grantSecretsToApp(args.secretIds, args.appId),
 });
 //# sourceMappingURL=grant-vault-secrets-to-app.js.map

package/dist/actions/grant-vault-secrets-to-app.js.map

@@ -1 +1 @@
-{"version":3,"file":"grant-vault-secrets-to-app.js","sourceRoot":"","sources":["../../src/actions/grant-vault-secrets-to-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEjE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,uIAAuI;IACzI,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,KAAK,CAAC,wBAAwB,CAAC;aAC/B,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,SAAS,EAAE,CAAC;aACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,CAAC,sCAAsC,CAAC;KACpD,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;CACnE,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { grantSecretsToApp } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Grant multiple Dispatch vault secrets to a workspace app in manual vault access mode. Admin only. Existing active grants are skipped.\",\n  http: { method: \"POST\" },\n  schema: z.object({\n    appId: z\n      .string()\n      .regex(/^[a-z][a-z0-9-]{0,63}$/)\n      .describe(\"Workspace app id/path, e.g. customer-health\"),\n    secretIds: z\n      .array(z.string())\n      .max(100)\n      .describe(\"Vault secret IDs to grant to the app\"),\n  }),\n  run: async (args) => grantSecretsToApp(args.secretIds, args.appId),\n});\n"]}
+{"version":3,"file":"grant-vault-secrets-to-app.js","sourceRoot":"","sources":["../../src/actions/grant-vault-secrets-to-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEjE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,uIAAuI;IACzI,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,KAAK,CAAC,wBAAwB,CAAC;aAC/B,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,SAAS,EAAE,CAAC;aACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,CAAC,sCAAsC,CAAC;KACpD,CAAC;IACF,yEAAyE;IACzE,qEAAqE;IACrE,aAAa,EAAE,IAAI;IACnB,uBAAuB,EAAE,KAAK;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;CACnE,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { grantSecretsToApp } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Grant multiple Dispatch vault secrets to a workspace app in manual vault access mode. Admin only. Existing active grants are skipped.\",\n  http: { method: \"POST\" },\n  schema: z.object({\n    appId: z\n      .string()\n      .regex(/^[a-z][a-z0-9-]{0,63}$/)\n      .describe(\"Workspace app id/path, e.g. customer-health\"),\n    secretIds: z\n      .array(z.string())\n      .max(100)\n      .describe(\"Vault secret IDs to grant to the app\"),\n  }),\n  // It creates, changes, or revokes a credential or who may use one: every\n  // call needs the user's approval, and \"always allow\" is not offered.\n  needsApproval: true,\n  allowPersistentApproval: false,\n  run: async (args) => grantSecretsToApp(args.secretIds, args.appId),\n});\n"]}

package/dist/actions/import-agent.d.ts

@@ -23,6 +23,19 @@ declare const _default: import("@agent-native/core/action").ActionDefinition<{
 } | {
     status: "created";
     resource: {
+        id: string;
+        ownerEmail: string;
+        orgId: string | null;
+        kind: string;
+        name: string;
+        description: string | null;
+        path: string;
+        content: string;
+        scope: string;
+        createdBy: string;
+        createdAt: number;
+        updatedAt: number;
+    } | {
         id: string;
         ownerEmail: string;
         orgId: string | null;
@@ -39,19 +52,6 @@ declare const _default: import("@agent-native/core/action").ActionDefinition<{
         reviewedAt: number | null;
         createdAt: number;
         updatedAt: number;
-    } | {
-        id: string;
-        ownerEmail: string;
-        orgId: string | null;
-        kind: string;
-        name: string;
-        description: string | null;
-        path: string;
-        content: string;
-        scope: string;
-        createdBy: string;
-        createdAt: number;
-        updatedAt: number;
     };
     source: "claude" | "json" | "markdown";
     warnings: string[];

package/dist/actions/provider-api-register.d.ts

@@ -47,10 +47,8 @@ declare const _default: import("node_modules/@agent-native/core/dist").ActionDef
     notes?: string | undefined;
     scope?: "org" | "user" | undefined;
 }, {
-    provider?: undefined;
+    message?: undefined;
     id?: undefined;
-    deleted?: undefined;
-    found?: undefined;
     providers: {
         id: string;
         label: string;
@@ -61,45 +59,47 @@ declare const _default: import("node_modules/@agent-native/core/dist").ActionDef
         updatedAt: number;
     }[];
     count: number;
+    provider?: undefined;
+    found?: undefined;
+    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
+    message?: undefined;
     id?: undefined;
-    count?: undefined;
-    deleted?: undefined;
     providers?: undefined;
+    count?: undefined;
     found: boolean;
     provider: import("node_modules/@agent-native/core/dist/provider-api").CustomProviderConfig;
+    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
-    provider?: undefined;
-    count?: undefined;
-    deleted?: undefined;
+    message?: undefined;
     providers?: undefined;
+    count?: undefined;
+    provider?: undefined;
     found: boolean;
     id: string;
+    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
-    provider?: undefined;
+    message?: undefined;
+    providers?: undefined;
     count?: undefined;
+    provider?: undefined;
     found?: undefined;
-    providers?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
-    provider?: undefined;
+    providers?: undefined;
     count?: undefined;
-    deleted?: undefined;
+    provider?: undefined;
     found?: undefined;
-    providers?: undefined;
+    deleted?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/actions/revoke-vault-grant.js

@@ -6,6 +6,10 @@ export default defineAction({
     schema: z.object({
         grantId: z.string().describe("Grant ID to revoke"),
     }),
+    // It creates, changes, or revokes a credential or who may use one: every
+    // call needs the user's approval, and "always allow" is not offered.
+    needsApproval: true,
+    allowPersistentApproval: false,
     run: async (args) => revokeGrant(args.grantId),
 });
 //# sourceMappingURL=revoke-vault-grant.js.map

package/dist/actions/revoke-vault-grant.js.map

@@ -1 +1 @@
-{"version":3,"file":"revoke-vault-grant.js","sourceRoot":"","sources":["../../src/actions/revoke-vault-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,uDAAuD;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;KACnD,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;CAC/C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { revokeGrant } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description: \"Revoke an app's access to a vault secret. Admin only.\",\n  schema: z.object({\n    grantId: z.string().describe(\"Grant ID to revoke\"),\n  }),\n  run: async (args) => revokeGrant(args.grantId),\n});\n"]}
+{"version":3,"file":"revoke-vault-grant.js","sourceRoot":"","sources":["../../src/actions/revoke-vault-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,uDAAuD;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;KACnD,CAAC;IACF,yEAAyE;IACzE,qEAAqE;IACrE,aAAa,EAAE,IAAI;IACnB,uBAAuB,EAAE,KAAK;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;CAC/C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { revokeGrant } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description: \"Revoke an app's access to a vault secret. Admin only.\",\n  schema: z.object({\n    grantId: z.string().describe(\"Grant ID to revoke\"),\n  }),\n  // It creates, changes, or revokes a credential or who may use one: every\n  // call needs the user's approval, and \"always allow\" is not offered.\n  needsApproval: true,\n  allowPersistentApproval: false,\n  run: async (args) => revokeGrant(args.grantId),\n});\n"]}

package/dist/actions/set-mcp-app-access.js

@@ -14,6 +14,10 @@ export default defineAction({
             .default([])
             .describe("App IDs to expose when mode is selected-apps."),
     }),
+    // It changes who may use an app or what they may do in it: every call
+    // needs the user's approval, and "always allow" is not offered.
+    needsApproval: true,
+    allowPersistentApproval: false,
     run: async (args) => {
         const agents = await discoverAgents("dispatch");
         const knownIds = new Set(["dispatch", ...agents.map((agent) => agent.id)]);

package/dist/actions/set-mcp-app-access.js.map

@@ -1 +1 @@
-{"version":3,"file":"set-mcp-app-access.js","sourceRoot":"","sources":["../../src/actions/set-mcp-app-access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,gBAAgB,MAAM,0BAA0B,CAAC;AAExD,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;AAEzD,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,sEAAsE;IACxE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,UAAU,CAAC,QAAQ,CACvB,6FAA6F,CAC9F;QACD,cAAc,EAAE,CAAC;aACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CAAC,+CAA+C,CAAC;KAC7D,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAC/B,IAAI,GAAG,CACL,IAAI,CAAC,cAAc;aAChB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aACpC,MAAM,CAAC,OAAO,CAAC,CACnB,CACF,CAAC;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qDAAqD,CAC3F,CAAC;QACJ,CAAC;QACD,MAAM,+BAA+B,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc;SACf,CAAC,CAAC;QACH,MAAM,WAAW,CAAC;YAChB,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,qBAAqB;YACjC,QAAQ,EAAE,aAAa;YACvB,OAAO,EACL,IAAI,CAAC,IAAI,KAAK,UAAU;gBACtB,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,kCAAkC,cAAc,CAAC,MAAM,kBAAkB;YAC/E,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE;SAC9C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEnB,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { discoverAgents } from \"@agent-native/core/server/agent-discovery\";\nimport { z } from \"zod\";\n\nimport { recordAudit } from \"../server/lib/dispatch-store.js\";\nimport { setDispatchMcpAppAccessSettings } from \"../server/lib/mcp-access-store.js\";\nimport listMcpAppAccess from \"./list-mcp-app-access.js\";\n\nconst modeSchema = z.enum([\"all-apps\", \"selected-apps\"]);\n\nexport default defineAction({\n  description:\n    \"Set which apps are available through Dispatch's unified MCP gateway.\",\n  schema: z.object({\n    mode: modeSchema.describe(\n      \"Use all-apps to expose every discovered app, or selected-apps to allow only selectedAppIds.\",\n    ),\n    selectedAppIds: z\n      .array(z.string())\n      .default([])\n      .describe(\"App IDs to expose when mode is selected-apps.\"),\n  }),\n  run: async (args) => {\n    const agents = await discoverAgents(\"dispatch\");\n    const knownIds = new Set([\"dispatch\", ...agents.map((agent) => agent.id)]);\n    const selectedAppIds = Array.from(\n      new Set(\n        args.selectedAppIds\n          .map((id) => id.trim().toLowerCase())\n          .filter(Boolean),\n      ),\n    );\n    const unknown = selectedAppIds.filter((id) => !knownIds.has(id));\n    if (unknown.length > 0) {\n      throw new Error(\n        `Unknown app(s): ${unknown.join(\", \")}. Use list-mcp-app-access to see available app IDs.`,\n      );\n    }\n    await setDispatchMcpAppAccessSettings({\n      mode: args.mode,\n      selectedAppIds,\n    });\n    await recordAudit({\n      action: \"mcp-access.updated\",\n      targetType: \"dispatch-mcp-access\",\n      targetId: \"unified-mcp\",\n      summary:\n        args.mode === \"all-apps\"\n          ? \"Allowed Dispatch MCP access to all apps\"\n          : `Allowed Dispatch MCP access to ${selectedAppIds.length} selected app(s)`,\n      metadata: { mode: args.mode, selectedAppIds },\n    }).catch(() => {});\n\n    return listMcpAppAccess.run({});\n  },\n});\n"]}
+{"version":3,"file":"set-mcp-app-access.js","sourceRoot":"","sources":["../../src/actions/set-mcp-app-access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,gBAAgB,MAAM,0BAA0B,CAAC;AAExD,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;AAEzD,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,sEAAsE;IACxE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,UAAU,CAAC,QAAQ,CACvB,6FAA6F,CAC9F;QACD,cAAc,EAAE,CAAC;aACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CAAC,+CAA+C,CAAC;KAC7D,CAAC;IACF,sEAAsE;IACtE,gEAAgE;IAChE,aAAa,EAAE,IAAI;IACnB,uBAAuB,EAAE,KAAK;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAC/B,IAAI,GAAG,CACL,IAAI,CAAC,cAAc;aAChB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aACpC,MAAM,CAAC,OAAO,CAAC,CACnB,CACF,CAAC;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qDAAqD,CAC3F,CAAC;QACJ,CAAC;QACD,MAAM,+BAA+B,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc;SACf,CAAC,CAAC;QACH,MAAM,WAAW,CAAC;YAChB,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,qBAAqB;YACjC,QAAQ,EAAE,aAAa;YACvB,OAAO,EACL,IAAI,CAAC,IAAI,KAAK,UAAU;gBACtB,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,kCAAkC,cAAc,CAAC,MAAM,kBAAkB;YAC/E,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE;SAC9C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEnB,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { discoverAgents } from \"@agent-native/core/server/agent-discovery\";\nimport { z } from \"zod\";\n\nimport { recordAudit } from \"../server/lib/dispatch-store.js\";\nimport { setDispatchMcpAppAccessSettings } from \"../server/lib/mcp-access-store.js\";\nimport listMcpAppAccess from \"./list-mcp-app-access.js\";\n\nconst modeSchema = z.enum([\"all-apps\", \"selected-apps\"]);\n\nexport default defineAction({\n  description:\n    \"Set which apps are available through Dispatch's unified MCP gateway.\",\n  schema: z.object({\n    mode: modeSchema.describe(\n      \"Use all-apps to expose every discovered app, or selected-apps to allow only selectedAppIds.\",\n    ),\n    selectedAppIds: z\n      .array(z.string())\n      .default([])\n      .describe(\"App IDs to expose when mode is selected-apps.\"),\n  }),\n  // It changes who may use an app or what they may do in it: every call\n  // needs the user's approval, and \"always allow\" is not offered.\n  needsApproval: true,\n  allowPersistentApproval: false,\n  run: async (args) => {\n    const agents = await discoverAgents(\"dispatch\");\n    const knownIds = new Set([\"dispatch\", ...agents.map((agent) => agent.id)]);\n    const selectedAppIds = Array.from(\n      new Set(\n        args.selectedAppIds\n          .map((id) => id.trim().toLowerCase())\n          .filter(Boolean),\n      ),\n    );\n    const unknown = selectedAppIds.filter((id) => !knownIds.has(id));\n    if (unknown.length > 0) {\n      throw new Error(\n        `Unknown app(s): ${unknown.join(\", \")}. Use list-mcp-app-access to see available app IDs.`,\n      );\n    }\n    await setDispatchMcpAppAccessSettings({\n      mode: args.mode,\n      selectedAppIds,\n    });\n    await recordAudit({\n      action: \"mcp-access.updated\",\n      targetType: \"dispatch-mcp-access\",\n      targetId: \"unified-mcp\",\n      summary:\n        args.mode === \"all-apps\"\n          ? \"Allowed Dispatch MCP access to all apps\"\n          : `Allowed Dispatch MCP access to ${selectedAppIds.length} selected app(s)`,\n      metadata: { mode: args.mode, selectedAppIds },\n    }).catch(() => {});\n\n    return listMcpAppAccess.run({});\n  },\n});\n"]}

package/dist/actions/set-vault-access-settings.js

@@ -8,6 +8,10 @@ export default defineAction({
             .enum(["all-apps", "manual"])
             .describe("all-apps shares every vault key with every app; manual requires grants"),
     }),
+    // It creates, changes, or revokes a credential or who may use one: every
+    // call needs the user's approval, and "always allow" is not offered.
+    needsApproval: true,
+    allowPersistentApproval: false,
     run: async (args) => setVaultAccessSettings(args),
 });
 //# sourceMappingURL=set-vault-access-settings.js.map

package/dist/actions/set-vault-access-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"set-vault-access-settings.js","sourceRoot":"","sources":["../../src/actions/set-vault-access-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gJAAgJ;IAClJ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;aAC5B,QAAQ,CACP,wEAAwE,CACzE;KACJ,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC;CAClD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { setVaultAccessSettings } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Set the Dispatch vault access mode. Admin only. Use all-apps for the default workspace-wide mode or manual to require explicit per-app grants.\",\n  schema: z.object({\n    mode: z\n      .enum([\"all-apps\", \"manual\"])\n      .describe(\n        \"all-apps shares every vault key with every app; manual requires grants\",\n      ),\n  }),\n  run: async (args) => setVaultAccessSettings(args),\n});\n"]}
+{"version":3,"file":"set-vault-access-settings.js","sourceRoot":"","sources":["../../src/actions/set-vault-access-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gJAAgJ;IAClJ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;aAC5B,QAAQ,CACP,wEAAwE,CACzE;KACJ,CAAC;IACF,yEAAyE;IACzE,qEAAqE;IACrE,aAAa,EAAE,IAAI;IACnB,uBAAuB,EAAE,KAAK;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC;CAClD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { setVaultAccessSettings } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Set the Dispatch vault access mode. Admin only. Use all-apps for the default workspace-wide mode or manual to require explicit per-app grants.\",\n  schema: z.object({\n    mode: z\n      .enum([\"all-apps\", \"manual\"])\n      .describe(\n        \"all-apps shares every vault key with every app; manual requires grants\",\n      ),\n  }),\n  // It creates, changes, or revokes a credential or who may use one: every\n  // call needs the user's approval, and \"always allow\" is not offered.\n  needsApproval: true,\n  allowPersistentApproval: false,\n  run: async (args) => setVaultAccessSettings(args),\n});\n"]}

package/dist/actions/update-vault-secret.js

@@ -42,6 +42,10 @@ export default defineAction({
     // Carries a secret `value`. Record THAT the secret changed, never the value —
     // keep the audit trail from becoming a second credential store.
     audit: { recordInputs: false },
+    // It creates, changes, or revokes a credential or who may use one: every
+    // call needs the user's approval, and "always allow" is not offered.
+    needsApproval: true,
+    allowPersistentApproval: false,
     run: async (args) => toVaultSecretMetadata(await updateSecret(args.id, args)),
 });
 //# sourceMappingURL=update-vault-secret.js.map

package/dist/actions/update-vault-secret.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-vault-secret.js","sourceRoot":"","sources":["../../src/actions/update-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,qBAAqB,EACrB,YAAY,GACb,MAAM,8BAA8B,CAAC;AAEtC,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3C,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,mDAAmD,CAAC;QAChE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,sCAAsC,CAAC;QACnD,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,qDAAqD,CAAC;QAClE,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,sBAAsB,CAAC;KACpC,CAAC;SACD,MAAM,CACL,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,CACxD,aAAa,KAAK,SAAS;QAC3B,KAAK,KAAK,SAAS;QACnB,IAAI,KAAK,SAAS;QAClB,QAAQ,KAAK,SAAS;QACtB,WAAW,KAAK,SAAS,EAC3B,2CAA2C,CAC5C;IACH,8EAA8E;IAC9E,gEAAgE;IAChE,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;CAC9E,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport {\n  toVaultSecretMetadata,\n  updateSecret,\n} from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Update an existing vault secret's label, credential key, value, provider, or description. Admin only.\",\n  schema: z\n    .object({\n      id: z.string().min(1).describe(\"Secret ID\"),\n      credentialKey: z\n        .string()\n        .trim()\n        .min(1)\n        .optional()\n        .describe(\"Environment variable name, e.g. GOOGLE_CLIENT_ID\"),\n      value: z\n        .string()\n        .min(1)\n        .optional()\n        .describe(\"New secret value; omit to keep the existing value\"),\n      name: z\n        .string()\n        .trim()\n        .min(1)\n        .optional()\n        .describe(\"Human-readable label for this secret\"),\n      provider: z\n        .string()\n        .nullable()\n        .optional()\n        .describe(\"Provider grouping tag, e.g. google, sendgrid, slack\"),\n      description: z\n        .string()\n        .nullable()\n        .optional()\n        .describe(\"Optional description\"),\n    })\n    .refine(\n      ({ credentialKey, value, name, provider, description }) =>\n        credentialKey !== undefined ||\n        value !== undefined ||\n        name !== undefined ||\n        provider !== undefined ||\n        description !== undefined,\n      \"At least one secret field must be updated\",\n    ),\n  // Carries a secret `value`. Record THAT the secret changed, never the value —\n  // keep the audit trail from becoming a second credential store.\n  audit: { recordInputs: false },\n  run: async (args) => toVaultSecretMetadata(await updateSecret(args.id, args)),\n});\n"]}
+{"version":3,"file":"update-vault-secret.js","sourceRoot":"","sources":["../../src/actions/update-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,qBAAqB,EACrB,YAAY,GACb,MAAM,8BAA8B,CAAC;AAEtC,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3C,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,mDAAmD,CAAC;QAChE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,sCAAsC,CAAC;QACnD,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,qDAAqD,CAAC;QAClE,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,sBAAsB,CAAC;KACpC,CAAC;SACD,MAAM,CACL,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,CACxD,aAAa,KAAK,SAAS;QAC3B,KAAK,KAAK,SAAS;QACnB,IAAI,KAAK,SAAS;QAClB,QAAQ,KAAK,SAAS;QACtB,WAAW,KAAK,SAAS,EAC3B,2CAA2C,CAC5C;IACH,8EAA8E;IAC9E,gEAAgE;IAChE,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;IAC9B,yEAAyE;IACzE,qEAAqE;IACrE,aAAa,EAAE,IAAI;IACnB,uBAAuB,EAAE,KAAK;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;CAC9E,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport {\n  toVaultSecretMetadata,\n  updateSecret,\n} from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Update an existing vault secret's label, credential key, value, provider, or description. Admin only.\",\n  schema: z\n    .object({\n      id: z.string().min(1).describe(\"Secret ID\"),\n      credentialKey: z\n        .string()\n        .trim()\n        .min(1)\n        .optional()\n        .describe(\"Environment variable name, e.g. GOOGLE_CLIENT_ID\"),\n      value: z\n        .string()\n        .min(1)\n        .optional()\n        .describe(\"New secret value; omit to keep the existing value\"),\n      name: z\n        .string()\n        .trim()\n        .min(1)\n        .optional()\n        .describe(\"Human-readable label for this secret\"),\n      provider: z\n        .string()\n        .nullable()\n        .optional()\n        .describe(\"Provider grouping tag, e.g. google, sendgrid, slack\"),\n      description: z\n        .string()\n        .nullable()\n        .optional()\n        .describe(\"Optional description\"),\n    })\n    .refine(\n      ({ credentialKey, value, name, provider, description }) =>\n        credentialKey !== undefined ||\n        value !== undefined ||\n        name !== undefined ||\n        provider !== undefined ||\n        description !== undefined,\n      \"At least one secret field must be updated\",\n    ),\n  // Carries a secret `value`. Record THAT the secret changed, never the value —\n  // keep the audit trail from becoming a second credential store.\n  audit: { recordInputs: false },\n  // It creates, changes, or revokes a credential or who may use one: every\n  // call needs the user's approval, and \"always allow\" is not offered.\n  needsApproval: true,\n  allowPersistentApproval: false,\n  run: async (args) => toVaultSecretMetadata(await updateSecret(args.id, args)),\n});\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/dispatch",
-  "version": "0.40.28",
+  "version": "0.40.29",
   "description": "Dispatch — workspace control plane for agent-native apps. Vault, integrations, destinations, scheduled jobs, and cross-app delegation, shipped as a single drop-in package.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -89,7 +89,7 @@
     "tailwind-merge": "^3.5.0",
     "vaul": "^1.1.2",
     "zod": "^4.3.6",
-    "@agent-native/toolkit": "0.210.2"
+    "@agent-native/toolkit": "0.211.0"
   },
   "devDependencies": {
     "@react-router/dev": "^8.1.0",
@@ -103,7 +103,7 @@
     "typescript-7": "npm:typescript@^7.0.2",
     "vite": "8.1.0",
     "vitest": "^4.1.5",
-    "@agent-native/core": "0.210.2"
+    "@agent-native/core": "0.211.0"
   },
   "peerDependencies": {
     "@agent-native/core": ">=0.209.1",

package/src/actions/approve-vault-request.ts

@@ -14,6 +14,10 @@ export default defineAction({
       .optional()
       .describe("Human-readable name for the secret"),
   }),
+  // It creates, changes, or revokes a credential or who may use one: every
+  // call needs the user's approval, and "always allow" is not offered.
+  needsApproval: true,
+  allowPersistentApproval: false,
   run: async (args) =>
     approveRequest(
       args.id,

package/src/actions/create-link-token.ts

@@ -9,5 +9,9 @@ export default defineAction({
   schema: z.object({
     platform: z.enum(["slack", "telegram"]),
   }),
+  // It creates, changes, or revokes a credential or who may use one: every
+  // call needs the user's approval, and "always allow" is not offered.
+  needsApproval: true,
+  allowPersistentApproval: false,
   run: async ({ platform }) => createLinkToken(platform),
 });

package/src/actions/create-vault-grant.ts

@@ -12,5 +12,9 @@ export default defineAction({
       .string()
       .describe("App ID to grant access to, e.g. mail, calendar"),
   }),
+  // It creates, changes, or revokes a credential or who may use one: every
+  // call needs the user's approval, and "always allow" is not offered.
+  needsApproval: true,
+  allowPersistentApproval: false,
   run: async (args) => createGrant(args.secretId, args.appId),
 });

package/src/actions/create-vault-secret.ts

@@ -27,5 +27,9 @@ export default defineAction({
   // the value. Opt out of input capture so the trail can't become a second
   // durable credential store.
   audit: { recordInputs: false },
+  // It creates, changes, or revokes a credential or who may use one: every
+  // call needs the user's approval, and "always allow" is not offered.
+  needsApproval: true,
+  allowPersistentApproval: false,
   run: async (args) => toVaultSecretMetadata(await createSecret(args)),
 });

package/src/actions/delete-vault-secret.ts

@@ -9,6 +9,10 @@ export default defineAction({
   schema: z.object({
     id: z.string().describe("Secret ID to delete"),
   }),
+  // It creates, changes, or revokes a credential or who may use one: every
+  // call needs the user's approval, and "always allow" is not offered.
+  needsApproval: true,
+  allowPersistentApproval: false,
   run: async ({ id }) => {
     await deleteSecret(id);
     return { deleted: true, id };

package/src/actions/grant-vault-secrets-to-app.ts

@@ -17,5 +17,9 @@ export default defineAction({
       .max(100)
       .describe("Vault secret IDs to grant to the app"),
   }),
+  // It creates, changes, or revokes a credential or who may use one: every
+  // call needs the user's approval, and "always allow" is not offered.
+  needsApproval: true,
+  allowPersistentApproval: false,
   run: async (args) => grantSecretsToApp(args.secretIds, args.appId),
 });

package/src/actions/revoke-vault-grant.ts

@@ -8,5 +8,9 @@ export default defineAction({
   schema: z.object({
     grantId: z.string().describe("Grant ID to revoke"),
   }),
+  // It creates, changes, or revokes a credential or who may use one: every
+  // call needs the user's approval, and "always allow" is not offered.
+  needsApproval: true,
+  allowPersistentApproval: false,
   run: async (args) => revokeGrant(args.grantId),
 });

package/src/actions/set-mcp-app-access.ts

@@ -20,6 +20,10 @@ export default defineAction({
       .default([])
       .describe("App IDs to expose when mode is selected-apps."),
   }),
+  // It changes who may use an app or what they may do in it: every call
+  // needs the user's approval, and "always allow" is not offered.
+  needsApproval: true,
+  allowPersistentApproval: false,
   run: async (args) => {
     const agents = await discoverAgents("dispatch");
     const knownIds = new Set(["dispatch", ...agents.map((agent) => agent.id)]);

package/src/actions/set-vault-access-settings.ts

@@ -13,5 +13,9 @@ export default defineAction({
         "all-apps shares every vault key with every app; manual requires grants",
       ),
   }),
+  // It creates, changes, or revokes a credential or who may use one: every
+  // call needs the user's approval, and "always allow" is not offered.
+  needsApproval: true,
+  allowPersistentApproval: false,
   run: async (args) => setVaultAccessSettings(args),
 });

package/src/actions/update-vault-secret.ts

@@ -52,5 +52,9 @@ export default defineAction({
   // Carries a secret `value`. Record THAT the secret changed, never the value —
   // keep the audit trail from becoming a second credential store.
   audit: { recordInputs: false },
+  // It creates, changes, or revokes a credential or who may use one: every
+  // call needs the user's approval, and "always allow" is not offered.
+  needsApproval: true,
+  allowPersistentApproval: false,
   run: async (args) => toVaultSecretMetadata(await updateSecret(args.id, args)),
 });