@agent-native/dispatch 0.40.30-nightly-20261021093329 → 0.40.30

package/dist/server/lib/community-apps.d.ts

@@ -0,0 +1,45 @@
+import type { StartWorkspaceAppCreationResult, WorkspaceAppSummary } from "./app-creation-store.js";
+import { type PinnedCommunitySource } from "./community-source.js";
+export interface CuratedCommunityAppSource extends PinnedCommunitySource {
+    id: string;
+    name: string;
+    description: string;
+    appId: string;
+    license: string;
+    provenance: string;
+}
+export interface CuratedCommunityApp extends CuratedCommunityAppSource {
+    installed: boolean;
+    pending: boolean;
+    installable: boolean;
+    installUnavailableReason?: "workspace-required" | "app-id-conflict" | "builder-install-unverified";
+}
+export declare const CURATED_COMMUNITY_APP_SOURCES: readonly CuratedCommunityAppSource[];
+export declare function listCuratedCommunityApps(): Promise<CuratedCommunityApp[]>;
+declare function existingInstallResult(source: CuratedCommunityAppSource, app: WorkspaceAppSummary): {
+    mode: "already-installed" | "pending";
+    source: CuratedCommunityAppSource;
+    app: {
+        id: string;
+        name: string;
+        path: string;
+        url: string | null;
+        status: "pending" | "ready";
+        statusLabel: string | null;
+        builderUrl: string | null;
+        branchName: string | null;
+    };
+};
+export declare function installCuratedCommunityApp(input: {
+    sourceId: string;
+    appId?: string;
+}): Promise<ReturnType<typeof existingInstallResult> | (StartWorkspaceAppCreationResult & {
+    mode: Exclude<StartWorkspaceAppCreationResult["mode"], "app-id-taken">;
+    source: CuratedCommunityAppSource;
+}) | (Extract<StartWorkspaceAppCreationResult, {
+    mode: "app-id-taken";
+}> & {
+    source: CuratedCommunityAppSource;
+})>;
+export {};
+//# sourceMappingURL=community-apps.d.ts.map

package/dist/server/lib/community-apps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"community-apps.d.ts","sourceRoot":"","sources":["../../../src/server/lib/community-apps.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,+BAA+B,EAC/B,mBAAmB,EACpB,MAAM,yBAAyB,CAAC;AAQjC,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,uBAAuB,CAAC;AAQ/B,MAAM,WAAW,yBAA0B,SAAQ,qBAAqB;IACtE,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAoB,SAAQ,yBAAyB;IACpE,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,wBAAwB,CAAC,EACrB,oBAAoB,GACpB,iBAAiB,GACjB,4BAA4B,CAAC;CAClC;AAED,eAAO,MAAM,6BAA6B,EAAE,SAAS,yBAAyB,EAgE3E,CAAC;AAsEJ,wBAAsB,wBAAwB,IAAI,OAAO,CACvD,mBAAmB,EAAE,CACtB,CA8BA;AASD,iBAAS,qBAAqB,CAC5B,MAAM,EAAE,yBAAyB,EACjC,GAAG,EAAE,mBAAmB;;;;QASpB,EAAE;QACF,IAAI;QACJ,IAAI;QACJ,GAAG;QACH,MAAM;QACN,WAAW;QACX,UAAU;QACV,UAAU;;EAGf;AAgBD,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CACP,UAAU,CAAC,OAAO,qBAAqB,CAAC,GACxC,CAAC,+BAA+B,GAAG;IACjC,IAAI,EAAE,OAAO,CAAC,+BAA+B,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC;IACvE,MAAM,EAAE,yBAAyB,CAAC;CACnC,CAAC,GACF,CAAC,OAAO,CAAC,+BAA+B,EAAE;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC,GAAG;IACpE,MAAM,EAAE,yBAAyB,CAAC;CACnC,CAAC,CACL,CA8FA"}

package/dist/server/lib/community-apps.js

@@ -0,0 +1,267 @@
+import { fail } from "@agent-native/core/action";
+import { getUserLabEnabled } from "@agent-native/core/labs/server";
+import { getWorkspaceAppIdValidationError, normalizeWorkspaceAppId, } from "@agent-native/core/shared";
+import { BUILTIN_AGENT_CATALOG_IDS, HIDDEN_FIRST_PARTY_AGENT_IDS, } from "@agent-native/core/shared/first-party-agents";
+import { COMMUNITY_APPS_LAB } from "../../shared/labs.js";
+import { getAppCreationSettings, getWorkspaceInfo, isLocalAppCreationRuntime, listWorkspaceApps, startWorkspaceAppCreation, } from "./app-creation-store.js";
+import { loadPinnedCommunitySourceAttachments, } from "./community-source.js";
+import { CURATED_WORKSPACE_TEMPLATES } from "./curated-workspace-templates.js";
+import { currentOrgId, currentOwnerEmail, recordAudit, } from "./dispatch-store.js";
+export const CURATED_COMMUNITY_APP_SOURCES = [
+    {
+        id: "community-qr",
+        name: "QR",
+        description: "Generate public PNG or SVG QR images from links or text.",
+        appId: "community-qr",
+        repo: "BuilderIO/agent-native",
+        ref: "main",
+        license: "MIT",
+        provenance: "Reviewed Agent-Native Framework template, sanitized for independent installation.",
+        templatePath: "templates/community/qr",
+        files: [
+            {
+                path: "AGENTS.md",
+                blobSha: "7dc9e18bc426dfd21526f91225cc615759450816",
+            },
+            {
+                path: "LICENSE",
+                blobSha: "69c7182efb3eb1a8b7f6fd5989f3e4fd737d0645",
+            },
+            {
+                path: "README.md",
+                blobSha: "e05e72bb9213732f56ccbc96f7dcb1c3a064cb19",
+            },
+            {
+                path: "actions/generate-qr-code.spec.ts",
+                blobSha: "3459217b7252c6ee0076c68cfdb83001cc74f29e",
+            },
+            {
+                path: "actions/generate-qr-code.ts",
+                blobSha: "98d30e218bfed796d5e402d5ce19a8626d8da0cf",
+            },
+            {
+                path: "actions/run.ts",
+                blobSha: "b46ab15b667c34741364ba08f010f7aca9d0f02e",
+            },
+            {
+                path: "agent-native.json",
+                blobSha: "accc32476792b84557f69e2b48b317c27b5546dc",
+            },
+            {
+                path: "package.json",
+                blobSha: "c7803d346368f927621329b2acbf5f6cc744dc18",
+            },
+            {
+                path: "server/db/index.ts",
+                blobSha: "17007b456530f75a72e7209bdfe9f4bd4c9224e0",
+            },
+            {
+                path: "server/db/schema.ts",
+                blobSha: "2e4cd01c5f46463e78bc7beb6e954f3e526c0b57",
+            },
+            {
+                path: "server/plugins/db.ts",
+                blobSha: "78a5b431c1ad1ea14f593123c090f5376a36df10",
+            },
+            {
+                path: "tsconfig.json",
+                blobSha: "5267473a32dcab8e5dc2c9d9a720afed7f40174c",
+            },
+        ],
+    },
+];
+const communitySourceById = new Map(CURATED_COMMUNITY_APP_SOURCES.map((source) => [source.id, source]));
+function requireCommunitySource(sourceId) {
+    const source = communitySourceById.get(sourceId.trim());
+    if (!source) {
+        fail("That community app is not in Dispatch's reviewed install catalog.", {
+            errorCode: "unknown_community_app_source",
+            statusCode: 404,
+        });
+    }
+    return source;
+}
+function communitySourceFailureKind(error) {
+    if (!(error instanceof Error) || !("failureKind" in error)) {
+        return "unavailable";
+    }
+    return error.failureKind === "integrity" ? "integrity" : "unavailable";
+}
+function requireNonShadowingCommunityAppId(appId) {
+    const error = getWorkspaceAppIdValidationError(appId);
+    if (error) {
+        fail(error, { errorCode: "invalid_community_app_id", statusCode: 400 });
+    }
+    if (CURATED_WORKSPACE_TEMPLATES.some((template) => template.id === appId) ||
+        BUILTIN_AGENT_CATALOG_IDS.includes(appId) ||
+        HIDDEN_FIRST_PARTY_AGENT_IDS.has(appId)) {
+        fail("Community apps cannot use a first-party template app id.", {
+            errorCode: "community_app_id_shadows_first_party",
+            statusCode: 409,
+        });
+    }
+}
+async function requireCommunityAppsLab() {
+    const userEmail = currentOwnerEmail().trim();
+    const orgId = currentOrgId();
+    if (!userEmail || !orgId) {
+        fail("Sign in to an organization to browse community apps.", {
+            errorCode: "community_apps_identity_required",
+            statusCode: 403,
+        });
+    }
+    const enabled = await getUserLabEnabled(userEmail, COMMUNITY_APPS_LAB, {
+        orgId,
+    });
+    if (!enabled) {
+        fail("Community app catalog and installs are disabled for this account.", {
+            errorCode: "community_apps_lab_disabled",
+            statusCode: 403,
+        });
+    }
+}
+async function hasAssociatedWorkspace(localRuntime = isLocalAppCreationRuntime()) {
+    if (localRuntime)
+        return Boolean(getWorkspaceInfo().rootPath);
+    return Boolean((await getAppCreationSettings()).builderProjectId);
+}
+export async function listCuratedCommunityApps() {
+    await requireCommunityAppsLab();
+    const localRuntime = isLocalAppCreationRuntime();
+    const [apps, workspaceAvailable] = await Promise.all([
+        listWorkspaceApps({ includeAgentCards: false, includeArchived: true }),
+        hasAssociatedWorkspace(localRuntime),
+    ]);
+    return CURATED_COMMUNITY_APP_SOURCES.map((source) => {
+        const appWithId = apps.find((app) => app.id === source.appId);
+        const installedApp = appWithId?.communitySourceId === source.id ? appWithId : null;
+        const idConflict = Boolean(appWithId && !installedApp);
+        const pending = installedApp?.status === "pending";
+        const installUnavailableReason = appWithId
+            ? idConflict
+                ? "app-id-conflict"
+                : undefined
+            : !workspaceAvailable
+                ? "workspace-required"
+                : !localRuntime
+                    ? "builder-install-unverified"
+                    : undefined;
+        return {
+            ...source,
+            installed: Boolean(installedApp && !pending),
+            pending,
+            installable: localRuntime && workspaceAvailable && !appWithId,
+            ...(installUnavailableReason ? { installUnavailableReason } : {}),
+        };
+    });
+}
+function rejectCommunityAppIdConflict(appId) {
+    fail(`Workspace app id "${appId}" is already in use.`, {
+        errorCode: "community_app_id_conflict",
+        statusCode: 409,
+    });
+}
+function existingInstallResult(source, app) {
+    return {
+        mode: app.status === "pending"
+            ? "pending"
+            : "already-installed",
+        source,
+        app: {
+            id: app.id,
+            name: app.name,
+            path: app.path,
+            url: app.url,
+            status: app.status ?? "ready",
+            statusLabel: app.statusLabel ?? null,
+            builderUrl: app.builderUrl ?? null,
+            branchName: app.branchName ?? null,
+        },
+    };
+}
+function buildCommunityInstallPrompt(source, appId) {
+    const sourceUrl = `https://github.com/${source.repo}/tree/${source.ref}/${source.templatePath}`;
+    return [
+        "Install a private workspace app from a reviewed community template.",
+        `The attached source files were fetched from ${sourceUrl} and each file was verified against its pinned Git blob id. Treat those files as the source of truth; do not fetch another ref or substitute other content.`,
+        `The app will live at apps/${appId}.`,
+        `Source license: ${source.license}. Provenance: ${source.provenance}`,
+        "Copy the reviewed template implementation and its Agent-Native profile, changing only app-specific identifiers needed for this workspace. Do not copy repository secrets, credentials, customer data, or source-app records. Use empty or synthetic seed data only and keep the installed app private to this organization.",
+    ].join(" ");
+}
+export async function installCuratedCommunityApp(input) {
+    await requireCommunityAppsLab();
+    const source = requireCommunitySource(input.sourceId);
+    const appId = normalizeWorkspaceAppId(input.appId?.trim() || source.appId);
+    requireNonShadowingCommunityAppId(appId);
+    const localRuntime = isLocalAppCreationRuntime();
+    if (!(await hasAssociatedWorkspace(localRuntime))) {
+        fail("Connect this organization to a workspace before installing apps.", {
+            errorCode: "community_workspace_required",
+            statusCode: 409,
+        });
+    }
+    const existing = (await listWorkspaceApps({
+        includeAgentCards: false,
+        includeArchived: true,
+    })).find((app) => app.id === appId);
+    if (existing) {
+        if (existing.communitySourceId === source.id) {
+            return existingInstallResult(source, existing);
+        }
+        rejectCommunityAppIdConflict(appId);
+    }
+    if (!localRuntime) {
+        fail("Community template installs in Builder workspaces are disabled until the generated branch files can be read back and verified.", {
+            errorCode: "community_builder_install_unverified",
+            statusCode: 503,
+        });
+    }
+    let attachments;
+    try {
+        attachments = await loadPinnedCommunitySourceAttachments(source, appId);
+    }
+    catch (error) {
+        fail("Dispatch could not verify the pinned community template source. Try again later.", {
+            errorCode: communitySourceFailureKind(error) === "integrity"
+                ? "community_source_integrity_failed"
+                : "community_source_unavailable",
+            statusCode: 503,
+        });
+    }
+    const result = await startWorkspaceAppCreation({
+        prompt: buildCommunityInstallPrompt(source, appId),
+        appId,
+        description: source.description,
+        template: source.id,
+        communitySourceId: source.id,
+        attachments,
+    });
+    if (result.mode === "app-id-taken") {
+        const raced = (await listWorkspaceApps({
+            includeAgentCards: false,
+            includeArchived: true,
+        })).find((app) => app.id === appId);
+        if (raced?.communitySourceId === source.id) {
+            return existingInstallResult(source, raced);
+        }
+        if (raced)
+            rejectCommunityAppIdConflict(appId);
+        return { ...result, source };
+    }
+    await recordAudit({
+        action: "workspace-app.community-install-requested",
+        targetType: "workspace-app",
+        targetId: appId,
+        summary: `Requested ${source.name} community app installation`,
+        metadata: {
+            sourceId: source.id,
+            repo: source.repo,
+            ref: source.ref,
+            blobShas: source.files.map((file) => file.blobSha),
+            license: source.license,
+        },
+    });
+    return { ...result, source };
+}
+//# sourceMappingURL=community-apps.js.map

package/dist/server/lib/community-apps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"community-apps.js","sourceRoot":"","sources":["../../../src/server/lib/community-apps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EACL,gCAAgC,EAChC,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAK1D,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,yBAAyB,EACzB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oCAAoC,GAErC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAqB7B,MAAM,CAAC,MAAM,6BAA6B,GACxC;IACE;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,0DAA0D;QACvE,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,wBAAwB;QAC9B,GAAG,EAAE,MAAM;QACX,OAAO,EAAE,KAAK;QACd,UAAU,EACR,mFAAmF;QACrF,YAAY,EAAE,wBAAwB;QACtC,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,kCAAkC;gBACxC,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,6BAA6B;gBACnC,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,0CAA0C;aACpD;SACF;KACF;CACF,CAAC;AAEJ,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,6BAA6B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CACnE,CAAC;AAEF,SAAS,sBAAsB,CAAC,QAAgB;IAC9C,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,mEAAmE,EAAE;YACxE,SAAS,EAAE,8BAA8B;YACzC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAc;IAEd,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,IAAI,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;AACzE,CAAC;AAED,SAAS,iCAAiC,CAAC,KAAa;IACtD,MAAM,KAAK,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,0BAA0B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IACE,2BAA2B,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC;QACrE,yBAAyB,CAAC,QAAQ,CAAC,KAAK,CAAC;QACzC,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,EACvC,CAAC;QACD,IAAI,CAAC,0DAA0D,EAAE;YAC/D,SAAS,EAAE,sCAAsC;YACjD,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB;IACpC,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,sDAAsD,EAAE;YAC3D,SAAS,EAAE,kCAAkC;YAC7C,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,kBAAkB,EAAE;QACrE,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,CAAC,mEAAmE,EAAE;YACxE,SAAS,EAAE,6BAA6B;YACxC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,YAAY,GAAG,yBAAyB,EAAE;IAE1C,IAAI,YAAY;QAAE,OAAO,OAAO,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO,OAAO,CAAC,CAAC,MAAM,sBAAsB,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAG5C,MAAM,uBAAuB,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,yBAAyB,EAAE,CAAC;IACjD,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QACtE,sBAAsB,CAAC,YAAY,CAAC;KACrC,CAAC,CAAC;IACH,OAAO,6BAA6B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,YAAY,GAChB,SAAS,EAAE,iBAAiB,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,YAAY,EAAE,MAAM,KAAK,SAAS,CAAC;QACnD,MAAM,wBAAwB,GAAG,SAAS;YACxC,CAAC,CAAC,UAAU;gBACV,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,SAAS;YACb,CAAC,CAAC,CAAC,kBAAkB;gBACnB,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,CAAC,YAAY;oBACb,CAAC,CAAC,4BAA4B;oBAC9B,CAAC,CAAC,SAAS,CAAC;QAClB,OAAO;YACL,GAAG,MAAM;YACT,SAAS,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC;YAC5C,OAAO;YACP,WAAW,EAAE,YAAY,IAAI,kBAAkB,IAAI,CAAC,SAAS;YAC7D,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAa;IACjD,IAAI,CAAC,qBAAqB,KAAK,sBAAsB,EAAE;QACrD,SAAS,EAAE,2BAA2B;QACtC,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAiC,EACjC,GAAwB;IAExB,OAAO;QACL,IAAI,EACF,GAAG,CAAC,MAAM,KAAK,SAAS;YACtB,CAAC,CAAE,SAAmB;YACtB,CAAC,CAAE,mBAA6B;QACpC,MAAM;QACN,GAAG,EAAE;YACH,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,OAAO;YAC7B,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;YACpC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;YAClC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;SACnC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,MAAiC,EACjC,KAAa;IAEb,MAAM,SAAS,GAAG,sBAAsB,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;IAChG,OAAO;QACL,qEAAqE;QACrE,+CAA+C,SAAS,6JAA6J;QACrN,6BAA6B,KAAK,GAAG;QACrC,mBAAmB,MAAM,CAAC,OAAO,iBAAiB,MAAM,CAAC,UAAU,EAAE;QACrE,6TAA6T;KAC9T,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAGhD;IAUC,MAAM,uBAAuB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3E,iCAAiC,CAAC,KAAK,CAAC,CAAC;IAEzC,MAAM,YAAY,GAAG,yBAAyB,EAAE,CAAC;IACjD,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,kEAAkE,EAAE;YACvE,SAAS,EAAE,8BAA8B;YACzC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,CACf,MAAM,iBAAiB,CAAC;QACtB,iBAAiB,EAAE,KAAK;QACxB,eAAe,EAAE,IAAI;KACtB,CAAC,CACH,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;IAClC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,iBAAiB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;YAC7C,OAAO,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QACD,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,IAAI,CACF,gIAAgI,EAChI;YACE,SAAS,EAAE,sCAAsC;YACjD,UAAU,EAAE,GAAG;SAChB,CACF,CAAC;IACJ,CAAC;IAED,IAAI,WAEH,CAAC;IACF,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,oCAAoC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CACF,kFAAkF,EAClF;YACE,SAAS,EACP,0BAA0B,CAAC,KAAK,CAAC,KAAK,WAAW;gBAC/C,CAAC,CAAC,mCAAmC;gBACrC,CAAC,CAAC,8BAA8B;YACpC,UAAU,EAAE,GAAG;SAChB,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC;QAC7C,MAAM,EAAE,2BAA2B,CAAC,MAAM,EAAE,KAAK,CAAC;QAClD,KAAK;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,iBAAiB,EAAE,MAAM,CAAC,EAAE;QAC5B,WAAW;KACZ,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,CACZ,MAAM,iBAAiB,CAAC;YACtB,iBAAiB,EAAE,KAAK;YACxB,eAAe,EAAE,IAAI;SACtB,CAAC,CACH,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,iBAAiB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;YAC3C,OAAO,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,KAAK;YAAE,4BAA4B,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,2CAA2C;QACnD,UAAU,EAAE,eAAe;QAC3B,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,aAAa,MAAM,CAAC,IAAI,6BAA6B;QAC9D,QAAQ,EAAE;YACR,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;YAClD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB;KACF,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAEzB,CAAC;AACJ,CAAC","sourcesContent":["import { fail } from \"@agent-native/core/action\";\nimport { getUserLabEnabled } from \"@agent-native/core/labs/server\";\nimport {\n  getWorkspaceAppIdValidationError,\n  normalizeWorkspaceAppId,\n} from \"@agent-native/core/shared\";\nimport {\n  BUILTIN_AGENT_CATALOG_IDS,\n  HIDDEN_FIRST_PARTY_AGENT_IDS,\n} from \"@agent-native/core/shared/first-party-agents\";\n\nimport { COMMUNITY_APPS_LAB } from \"../../shared/labs.js\";\nimport type {\n  StartWorkspaceAppCreationResult,\n  WorkspaceAppSummary,\n} from \"./app-creation-store.js\";\nimport {\n  getAppCreationSettings,\n  getWorkspaceInfo,\n  isLocalAppCreationRuntime,\n  listWorkspaceApps,\n  startWorkspaceAppCreation,\n} from \"./app-creation-store.js\";\nimport {\n  loadPinnedCommunitySourceAttachments,\n  type PinnedCommunitySource,\n} from \"./community-source.js\";\nimport { CURATED_WORKSPACE_TEMPLATES } from \"./curated-workspace-templates.js\";\nimport {\n  currentOrgId,\n  currentOwnerEmail,\n  recordAudit,\n} from \"./dispatch-store.js\";\n\nexport interface CuratedCommunityAppSource extends PinnedCommunitySource {\n  id: string;\n  name: string;\n  description: string;\n  appId: string;\n  license: string;\n  provenance: string;\n}\n\nexport interface CuratedCommunityApp extends CuratedCommunityAppSource {\n  installed: boolean;\n  pending: boolean;\n  installable: boolean;\n  installUnavailableReason?:\n    | \"workspace-required\"\n    | \"app-id-conflict\"\n    | \"builder-install-unverified\";\n}\n\nexport const CURATED_COMMUNITY_APP_SOURCES: readonly CuratedCommunityAppSource[] =\n  [\n    {\n      id: \"community-qr\",\n      name: \"QR\",\n      description: \"Generate public PNG or SVG QR images from links or text.\",\n      appId: \"community-qr\",\n      repo: \"BuilderIO/agent-native\",\n      ref: \"main\",\n      license: \"MIT\",\n      provenance:\n        \"Reviewed Agent-Native Framework template, sanitized for independent installation.\",\n      templatePath: \"templates/community/qr\",\n      files: [\n        {\n          path: \"AGENTS.md\",\n          blobSha: \"7dc9e18bc426dfd21526f91225cc615759450816\",\n        },\n        {\n          path: \"LICENSE\",\n          blobSha: \"69c7182efb3eb1a8b7f6fd5989f3e4fd737d0645\",\n        },\n        {\n          path: \"README.md\",\n          blobSha: \"e05e72bb9213732f56ccbc96f7dcb1c3a064cb19\",\n        },\n        {\n          path: \"actions/generate-qr-code.spec.ts\",\n          blobSha: \"3459217b7252c6ee0076c68cfdb83001cc74f29e\",\n        },\n        {\n          path: \"actions/generate-qr-code.ts\",\n          blobSha: \"98d30e218bfed796d5e402d5ce19a8626d8da0cf\",\n        },\n        {\n          path: \"actions/run.ts\",\n          blobSha: \"b46ab15b667c34741364ba08f010f7aca9d0f02e\",\n        },\n        {\n          path: \"agent-native.json\",\n          blobSha: \"accc32476792b84557f69e2b48b317c27b5546dc\",\n        },\n        {\n          path: \"package.json\",\n          blobSha: \"c7803d346368f927621329b2acbf5f6cc744dc18\",\n        },\n        {\n          path: \"server/db/index.ts\",\n          blobSha: \"17007b456530f75a72e7209bdfe9f4bd4c9224e0\",\n        },\n        {\n          path: \"server/db/schema.ts\",\n          blobSha: \"2e4cd01c5f46463e78bc7beb6e954f3e526c0b57\",\n        },\n        {\n          path: \"server/plugins/db.ts\",\n          blobSha: \"78a5b431c1ad1ea14f593123c090f5376a36df10\",\n        },\n        {\n          path: \"tsconfig.json\",\n          blobSha: \"5267473a32dcab8e5dc2c9d9a720afed7f40174c\",\n        },\n      ],\n    },\n  ];\n\nconst communitySourceById = new Map(\n  CURATED_COMMUNITY_APP_SOURCES.map((source) => [source.id, source]),\n);\n\nfunction requireCommunitySource(sourceId: string): CuratedCommunityAppSource {\n  const source = communitySourceById.get(sourceId.trim());\n  if (!source) {\n    fail(\"That community app is not in Dispatch's reviewed install catalog.\", {\n      errorCode: \"unknown_community_app_source\",\n      statusCode: 404,\n    });\n  }\n  return source;\n}\n\nfunction communitySourceFailureKind(\n  error: unknown,\n): \"unavailable\" | \"integrity\" {\n  if (!(error instanceof Error) || !(\"failureKind\" in error)) {\n    return \"unavailable\";\n  }\n  return error.failureKind === \"integrity\" ? \"integrity\" : \"unavailable\";\n}\n\nfunction requireNonShadowingCommunityAppId(appId: string): void {\n  const error = getWorkspaceAppIdValidationError(appId);\n  if (error) {\n    fail(error, { errorCode: \"invalid_community_app_id\", statusCode: 400 });\n  }\n  if (\n    CURATED_WORKSPACE_TEMPLATES.some((template) => template.id === appId) ||\n    BUILTIN_AGENT_CATALOG_IDS.includes(appId) ||\n    HIDDEN_FIRST_PARTY_AGENT_IDS.has(appId)\n  ) {\n    fail(\"Community apps cannot use a first-party template app id.\", {\n      errorCode: \"community_app_id_shadows_first_party\",\n      statusCode: 409,\n    });\n  }\n}\n\nasync function requireCommunityAppsLab(): Promise<void> {\n  const userEmail = currentOwnerEmail().trim();\n  const orgId = currentOrgId();\n  if (!userEmail || !orgId) {\n    fail(\"Sign in to an organization to browse community apps.\", {\n      errorCode: \"community_apps_identity_required\",\n      statusCode: 403,\n    });\n  }\n  const enabled = await getUserLabEnabled(userEmail, COMMUNITY_APPS_LAB, {\n    orgId,\n  });\n  if (!enabled) {\n    fail(\"Community app catalog and installs are disabled for this account.\", {\n      errorCode: \"community_apps_lab_disabled\",\n      statusCode: 403,\n    });\n  }\n}\n\nasync function hasAssociatedWorkspace(\n  localRuntime = isLocalAppCreationRuntime(),\n): Promise<boolean> {\n  if (localRuntime) return Boolean(getWorkspaceInfo().rootPath);\n  return Boolean((await getAppCreationSettings()).builderProjectId);\n}\n\nexport async function listCuratedCommunityApps(): Promise<\n  CuratedCommunityApp[]\n> {\n  await requireCommunityAppsLab();\n  const localRuntime = isLocalAppCreationRuntime();\n  const [apps, workspaceAvailable] = await Promise.all([\n    listWorkspaceApps({ includeAgentCards: false, includeArchived: true }),\n    hasAssociatedWorkspace(localRuntime),\n  ]);\n  return CURATED_COMMUNITY_APP_SOURCES.map((source) => {\n    const appWithId = apps.find((app) => app.id === source.appId);\n    const installedApp =\n      appWithId?.communitySourceId === source.id ? appWithId : null;\n    const idConflict = Boolean(appWithId && !installedApp);\n    const pending = installedApp?.status === \"pending\";\n    const installUnavailableReason = appWithId\n      ? idConflict\n        ? \"app-id-conflict\"\n        : undefined\n      : !workspaceAvailable\n        ? \"workspace-required\"\n        : !localRuntime\n          ? \"builder-install-unverified\"\n          : undefined;\n    return {\n      ...source,\n      installed: Boolean(installedApp && !pending),\n      pending,\n      installable: localRuntime && workspaceAvailable && !appWithId,\n      ...(installUnavailableReason ? { installUnavailableReason } : {}),\n    };\n  });\n}\n\nfunction rejectCommunityAppIdConflict(appId: string): never {\n  fail(`Workspace app id \"${appId}\" is already in use.`, {\n    errorCode: \"community_app_id_conflict\",\n    statusCode: 409,\n  });\n}\n\nfunction existingInstallResult(\n  source: CuratedCommunityAppSource,\n  app: WorkspaceAppSummary,\n) {\n  return {\n    mode:\n      app.status === \"pending\"\n        ? (\"pending\" as const)\n        : (\"already-installed\" as const),\n    source,\n    app: {\n      id: app.id,\n      name: app.name,\n      path: app.path,\n      url: app.url,\n      status: app.status ?? \"ready\",\n      statusLabel: app.statusLabel ?? null,\n      builderUrl: app.builderUrl ?? null,\n      branchName: app.branchName ?? null,\n    },\n  };\n}\n\nfunction buildCommunityInstallPrompt(\n  source: CuratedCommunityAppSource,\n  appId: string,\n): string {\n  const sourceUrl = `https://github.com/${source.repo}/tree/${source.ref}/${source.templatePath}`;\n  return [\n    \"Install a private workspace app from a reviewed community template.\",\n    `The attached source files were fetched from ${sourceUrl} and each file was verified against its pinned Git blob id. Treat those files as the source of truth; do not fetch another ref or substitute other content.`,\n    `The app will live at apps/${appId}.`,\n    `Source license: ${source.license}. Provenance: ${source.provenance}`,\n    \"Copy the reviewed template implementation and its Agent-Native profile, changing only app-specific identifiers needed for this workspace. Do not copy repository secrets, credentials, customer data, or source-app records. Use empty or synthetic seed data only and keep the installed app private to this organization.\",\n  ].join(\" \");\n}\n\nexport async function installCuratedCommunityApp(input: {\n  sourceId: string;\n  appId?: string;\n}): Promise<\n  | ReturnType<typeof existingInstallResult>\n  | (StartWorkspaceAppCreationResult & {\n      mode: Exclude<StartWorkspaceAppCreationResult[\"mode\"], \"app-id-taken\">;\n      source: CuratedCommunityAppSource;\n    })\n  | (Extract<StartWorkspaceAppCreationResult, { mode: \"app-id-taken\" }> & {\n      source: CuratedCommunityAppSource;\n    })\n> {\n  await requireCommunityAppsLab();\n  const source = requireCommunitySource(input.sourceId);\n  const appId = normalizeWorkspaceAppId(input.appId?.trim() || source.appId);\n  requireNonShadowingCommunityAppId(appId);\n\n  const localRuntime = isLocalAppCreationRuntime();\n  if (!(await hasAssociatedWorkspace(localRuntime))) {\n    fail(\"Connect this organization to a workspace before installing apps.\", {\n      errorCode: \"community_workspace_required\",\n      statusCode: 409,\n    });\n  }\n\n  const existing = (\n    await listWorkspaceApps({\n      includeAgentCards: false,\n      includeArchived: true,\n    })\n  ).find((app) => app.id === appId);\n  if (existing) {\n    if (existing.communitySourceId === source.id) {\n      return existingInstallResult(source, existing);\n    }\n    rejectCommunityAppIdConflict(appId);\n  }\n\n  if (!localRuntime) {\n    fail(\n      \"Community template installs in Builder workspaces are disabled until the generated branch files can be read back and verified.\",\n      {\n        errorCode: \"community_builder_install_unverified\",\n        statusCode: 503,\n      },\n    );\n  }\n\n  let attachments: Awaited<\n    ReturnType<typeof loadPinnedCommunitySourceAttachments>\n  >;\n  try {\n    attachments = await loadPinnedCommunitySourceAttachments(source, appId);\n  } catch (error) {\n    fail(\n      \"Dispatch could not verify the pinned community template source. Try again later.\",\n      {\n        errorCode:\n          communitySourceFailureKind(error) === \"integrity\"\n            ? \"community_source_integrity_failed\"\n            : \"community_source_unavailable\",\n        statusCode: 503,\n      },\n    );\n  }\n\n  const result = await startWorkspaceAppCreation({\n    prompt: buildCommunityInstallPrompt(source, appId),\n    appId,\n    description: source.description,\n    template: source.id,\n    communitySourceId: source.id,\n    attachments,\n  });\n\n  if (result.mode === \"app-id-taken\") {\n    const raced = (\n      await listWorkspaceApps({\n        includeAgentCards: false,\n        includeArchived: true,\n      })\n    ).find((app) => app.id === appId);\n    if (raced?.communitySourceId === source.id) {\n      return existingInstallResult(source, raced);\n    }\n    if (raced) rejectCommunityAppIdConflict(appId);\n    return { ...result, source };\n  }\n\n  await recordAudit({\n    action: \"workspace-app.community-install-requested\",\n    targetType: \"workspace-app\",\n    targetId: appId,\n    summary: `Requested ${source.name} community app installation`,\n    metadata: {\n      sourceId: source.id,\n      repo: source.repo,\n      ref: source.ref,\n      blobShas: source.files.map((file) => file.blobSha),\n      license: source.license,\n    },\n  });\n  return { ...result, source } as typeof result & {\n    source: CuratedCommunityAppSource;\n  };\n}\n"]}

package/dist/server/lib/community-source.d.ts

@@ -0,0 +1,19 @@
+import { ssrfSafeFetch } from "@agent-native/core/extensions/url-safety";
+import type { BuilderAgentAttachment } from "@agent-native/core/server";
+export interface PinnedCommunitySource {
+    id: string;
+    repo: string;
+    ref: string;
+    templatePath: string;
+    files: readonly {
+        path: string;
+        blobSha: string;
+    }[];
+}
+export type PinnedCommunitySourceFailureKind = "unavailable" | "integrity";
+export declare class PinnedCommunitySourceError extends Error {
+    readonly failureKind: PinnedCommunitySourceFailureKind;
+    constructor(failureKind: PinnedCommunitySourceFailureKind, message: string);
+}
+export declare function loadPinnedCommunitySourceAttachments(source: PinnedCommunitySource, appId: string, fetchSource?: typeof ssrfSafeFetch): Promise<BuilderAgentAttachment[]>;
+//# sourceMappingURL=community-source.d.ts.map

package/dist/server/lib/community-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"community-source.d.ts","sourceRoot":"","sources":["../../../src/server/lib/community-source.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AACzE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAExE,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACrD;AAED,MAAM,MAAM,gCAAgC,GAAG,aAAa,GAAG,WAAW,CAAC;AAE3E,qBAAa,0BAA2B,SAAQ,KAAK;IAEjD,QAAQ,CAAC,WAAW,EAAE,gCAAgC;IADxD,YACW,WAAW,EAAE,gCAAgC,EACtD,OAAO,EAAE,MAAM,EAIhB;CACF;AAyID,wBAAsB,oCAAoC,CACxD,MAAM,EAAE,qBAAqB,EAC7B,KAAK,EAAE,MAAM,EACb,WAAW,GAAE,OAAO,aAA6B,GAChD,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAqBnC"}

package/dist/server/lib/community-source.js

@@ -0,0 +1,118 @@
+import { createHash } from "node:crypto";
+import { ssrfSafeFetch } from "@agent-native/core/extensions/url-safety";
+export class PinnedCommunitySourceError extends Error {
+    failureKind;
+    constructor(failureKind, message) {
+        super(message);
+        this.failureKind = failureKind;
+        this.name = "PinnedCommunitySourceError";
+    }
+}
+const SOURCE_FILE_MAX_BYTES = 128 * 1024;
+const SOURCE_TOTAL_MAX_BYTES = 64 * 1024;
+const SOURCE_FETCH_TIMEOUT_MS = 10_000;
+async function readSourceResponse(response) {
+    const contentLength = Number(response.headers.get("content-length"));
+    if (Number.isFinite(contentLength) && contentLength > SOURCE_FILE_MAX_BYTES) {
+        throw new PinnedCommunitySourceError("integrity", "Pinned community source file exceeds the size limit.");
+    }
+    if (!response.body)
+        return Buffer.alloc(0);
+    const reader = response.body.getReader();
+    const chunks = [];
+    let size = 0;
+    while (true) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        size += value.byteLength;
+        if (size > SOURCE_FILE_MAX_BYTES) {
+            await reader.cancel();
+            throw new PinnedCommunitySourceError("integrity", "Pinned community source file exceeds the size limit.");
+        }
+        chunks.push(Buffer.from(value));
+    }
+    return Buffer.concat(chunks, size);
+}
+async function readPinnedSourceFile(source, file, appId, fetchSource) {
+    // Blob hashes pin the content, so source commits need not survive squash merges.
+    if (!/^[a-f0-9]{40}$/i.test(file.blobSha) ||
+        source.ref !== "main" ||
+        file.path.startsWith("/") ||
+        file.path.split("/").some((part) => !part || part === "." || part === "..")) {
+        throw new PinnedCommunitySourceError("integrity", "Curated community source contains an invalid file pin.");
+    }
+    const fileUrl = `https://raw.githubusercontent.com/${source.repo}/${source.ref}/${source.templatePath}/${file.path
+        .split("/")
+        .map(encodeURIComponent)
+        .join("/")}`;
+    let response;
+    try {
+        response = await fetchSource(fileUrl, {
+            headers: { Accept: "text/plain" },
+            signal: AbortSignal.timeout(SOURCE_FETCH_TIMEOUT_MS),
+        }, {
+            followRedirects: false,
+            maxRedirects: 0,
+            httpsOnly: true,
+            assertUrlAllowed: (candidate) => {
+                if (new URL(candidate).hostname !== "raw.githubusercontent.com") {
+                    throw new Error("Curated community source redirected to an untrusted host.");
+                }
+            },
+        });
+    }
+    catch {
+        throw new PinnedCommunitySourceError("unavailable", "Pinned community source network request failed.");
+    }
+    if (!response.ok) {
+        throw new PinnedCommunitySourceError("unavailable", `Pinned community source file could not be loaded (${response.status}).`);
+    }
+    let bytes;
+    let content;
+    try {
+        bytes = await readSourceResponse(response);
+    }
+    catch (error) {
+        if (error instanceof PinnedCommunitySourceError)
+            throw error;
+        throw new PinnedCommunitySourceError("unavailable", "Pinned community source response could not be read.");
+    }
+    try {
+        content = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    }
+    catch {
+        throw new PinnedCommunitySourceError("integrity", "Pinned community source file is not valid UTF-8.");
+    }
+    const blobSha = createHash("sha1")
+        .update(`blob ${bytes.byteLength}\0`)
+        .update(bytes)
+        .digest("hex");
+    if (blobSha !== file.blobSha) {
+        throw new PinnedCommunitySourceError("integrity", "Pinned community source file failed its Git blob check.");
+    }
+    return {
+        size: bytes.byteLength,
+        attachment: {
+            type: "upload",
+            contentType: file.path.endsWith(".json")
+                ? "application/json"
+                : "text/plain",
+            name: `${appId}/${file.path}`,
+            text: content,
+            dataUrl: "",
+            id: `${source.id}:${file.path}`,
+        },
+    };
+}
+export async function loadPinnedCommunitySourceAttachments(source, appId, fetchSource = ssrfSafeFetch) {
+    if (source.ref !== "main" || source.files.length === 0) {
+        throw new PinnedCommunitySourceError("integrity", "Curated community source has no valid pinned file set.");
+    }
+    const files = await Promise.all(source.files.map((file) => readPinnedSourceFile(source, file, appId, fetchSource)));
+    if (files.reduce((total, file) => total + file.size, 0) > SOURCE_TOTAL_MAX_BYTES) {
+        throw new PinnedCommunitySourceError("integrity", "Pinned community template exceeds the total size limit.");
+    }
+    return files.map(({ attachment }) => attachment);
+}
+//# sourceMappingURL=community-source.js.map

package/dist/server/lib/community-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"community-source.js","sourceRoot":"","sources":["../../../src/server/lib/community-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AAazE,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAExC,WAAW;IADtB,YACW,WAA6C,EACtD,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;2BAHN,WAAW;QAIpB,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAC;AACzC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC,KAAK,UAAU,kBAAkB,CAAC,QAAkB;IAClD,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC5E,MAAM,IAAI,0BAA0B,CAClC,WAAW,EACX,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,IAAI,GAAG,qBAAqB,EAAE,CAAC;YACjC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,0BAA0B,CAClC,WAAW,EACX,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,MAA6B,EAC7B,IAA4C,EAC5C,KAAa,EACb,WAAiC;IAEjC,iFAAiF;IACjF,IACE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QACrC,MAAM,CAAC,GAAG,KAAK,MAAM;QACrB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAC3E,CAAC;QACD,MAAM,IAAI,0BAA0B,CAClC,WAAW,EACX,wDAAwD,CACzD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,qCAAqC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI;SAC/G,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,kBAAkB,CAAC;SACvB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACf,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,WAAW,CAC1B,OAAO,EACP;YACE,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;YACjC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,uBAAuB,CAAC;SACrD,EACD;YACE,eAAe,EAAE,KAAK;YACtB,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,IAAI;YACf,gBAAgB,EAAE,CAAC,SAAS,EAAE,EAAE;gBAC9B,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,KAAK,2BAA2B,EAAE,CAAC;oBAChE,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;gBACJ,CAAC;YACH,CAAC;SACF,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,0BAA0B,CAClC,aAAa,EACb,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,0BAA0B,CAClC,aAAa,EACb,qDAAqD,QAAQ,CAAC,MAAM,IAAI,CACzE,CAAC;IACJ,CAAC;IAED,IAAI,KAAa,CAAC;IAClB,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAC;QAC7D,MAAM,IAAI,0BAA0B,CAClC,aAAa,EACb,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,0BAA0B,CAClC,WAAW,EACX,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC;SAC/B,MAAM,CAAC,QAAQ,KAAK,CAAC,UAAU,IAAI,CAAC;SACpC,MAAM,CAAC,KAAK,CAAC;SACb,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,0BAA0B,CAClC,WAAW,EACX,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,UAAU;QACtB,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACtC,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,YAAY;YAChB,IAAI,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE;YAC7B,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE;SAChC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,MAA6B,EAC7B,KAAa,EACb,WAAW,GAAyB,aAAa;IAEjD,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,0BAA0B,CAClC,WAAW,EACX,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACxB,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CACvD,CACF,CAAC;IACF,IACE,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,sBAAsB,EAC5E,CAAC;QACD,MAAM,IAAI,0BAA0B,CAClC,WAAW,EACX,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;AACnD,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\n\nimport { ssrfSafeFetch } from \"@agent-native/core/extensions/url-safety\";\nimport type { BuilderAgentAttachment } from \"@agent-native/core/server\";\n\nexport interface PinnedCommunitySource {\n  id: string;\n  repo: string;\n  ref: string;\n  templatePath: string;\n  files: readonly { path: string; blobSha: string }[];\n}\n\nexport type PinnedCommunitySourceFailureKind = \"unavailable\" | \"integrity\";\n\nexport class PinnedCommunitySourceError extends Error {\n  constructor(\n    readonly failureKind: PinnedCommunitySourceFailureKind,\n    message: string,\n  ) {\n    super(message);\n    this.name = \"PinnedCommunitySourceError\";\n  }\n}\n\nconst SOURCE_FILE_MAX_BYTES = 128 * 1024;\nconst SOURCE_TOTAL_MAX_BYTES = 64 * 1024;\nconst SOURCE_FETCH_TIMEOUT_MS = 10_000;\n\nasync function readSourceResponse(response: Response): Promise<Buffer> {\n  const contentLength = Number(response.headers.get(\"content-length\"));\n  if (Number.isFinite(contentLength) && contentLength > SOURCE_FILE_MAX_BYTES) {\n    throw new PinnedCommunitySourceError(\n      \"integrity\",\n      \"Pinned community source file exceeds the size limit.\",\n    );\n  }\n  if (!response.body) return Buffer.alloc(0);\n\n  const reader = response.body.getReader();\n  const chunks: Buffer[] = [];\n  let size = 0;\n  while (true) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    size += value.byteLength;\n    if (size > SOURCE_FILE_MAX_BYTES) {\n      await reader.cancel();\n      throw new PinnedCommunitySourceError(\n        \"integrity\",\n        \"Pinned community source file exceeds the size limit.\",\n      );\n    }\n    chunks.push(Buffer.from(value));\n  }\n  return Buffer.concat(chunks, size);\n}\n\nasync function readPinnedSourceFile(\n  source: PinnedCommunitySource,\n  file: PinnedCommunitySource[\"files\"][number],\n  appId: string,\n  fetchSource: typeof ssrfSafeFetch,\n): Promise<{ attachment: BuilderAgentAttachment; size: number }> {\n  // Blob hashes pin the content, so source commits need not survive squash merges.\n  if (\n    !/^[a-f0-9]{40}$/i.test(file.blobSha) ||\n    source.ref !== \"main\" ||\n    file.path.startsWith(\"/\") ||\n    file.path.split(\"/\").some((part) => !part || part === \".\" || part === \"..\")\n  ) {\n    throw new PinnedCommunitySourceError(\n      \"integrity\",\n      \"Curated community source contains an invalid file pin.\",\n    );\n  }\n\n  const fileUrl = `https://raw.githubusercontent.com/${source.repo}/${source.ref}/${source.templatePath}/${file.path\n    .split(\"/\")\n    .map(encodeURIComponent)\n    .join(\"/\")}`;\n  let response: Response;\n  try {\n    response = await fetchSource(\n      fileUrl,\n      {\n        headers: { Accept: \"text/plain\" },\n        signal: AbortSignal.timeout(SOURCE_FETCH_TIMEOUT_MS),\n      },\n      {\n        followRedirects: false,\n        maxRedirects: 0,\n        httpsOnly: true,\n        assertUrlAllowed: (candidate) => {\n          if (new URL(candidate).hostname !== \"raw.githubusercontent.com\") {\n            throw new Error(\n              \"Curated community source redirected to an untrusted host.\",\n            );\n          }\n        },\n      },\n    );\n  } catch {\n    throw new PinnedCommunitySourceError(\n      \"unavailable\",\n      \"Pinned community source network request failed.\",\n    );\n  }\n  if (!response.ok) {\n    throw new PinnedCommunitySourceError(\n      \"unavailable\",\n      `Pinned community source file could not be loaded (${response.status}).`,\n    );\n  }\n\n  let bytes: Buffer;\n  let content: string;\n  try {\n    bytes = await readSourceResponse(response);\n  } catch (error) {\n    if (error instanceof PinnedCommunitySourceError) throw error;\n    throw new PinnedCommunitySourceError(\n      \"unavailable\",\n      \"Pinned community source response could not be read.\",\n    );\n  }\n  try {\n    content = new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes);\n  } catch {\n    throw new PinnedCommunitySourceError(\n      \"integrity\",\n      \"Pinned community source file is not valid UTF-8.\",\n    );\n  }\n  const blobSha = createHash(\"sha1\")\n    .update(`blob ${bytes.byteLength}\\0`)\n    .update(bytes)\n    .digest(\"hex\");\n  if (blobSha !== file.blobSha) {\n    throw new PinnedCommunitySourceError(\n      \"integrity\",\n      \"Pinned community source file failed its Git blob check.\",\n    );\n  }\n\n  return {\n    size: bytes.byteLength,\n    attachment: {\n      type: \"upload\",\n      contentType: file.path.endsWith(\".json\")\n        ? \"application/json\"\n        : \"text/plain\",\n      name: `${appId}/${file.path}`,\n      text: content,\n      dataUrl: \"\",\n      id: `${source.id}:${file.path}`,\n    },\n  };\n}\n\nexport async function loadPinnedCommunitySourceAttachments(\n  source: PinnedCommunitySource,\n  appId: string,\n  fetchSource: typeof ssrfSafeFetch = ssrfSafeFetch,\n): Promise<BuilderAgentAttachment[]> {\n  if (source.ref !== \"main\" || source.files.length === 0) {\n    throw new PinnedCommunitySourceError(\n      \"integrity\",\n      \"Curated community source has no valid pinned file set.\",\n    );\n  }\n  const files = await Promise.all(\n    source.files.map((file) =>\n      readPinnedSourceFile(source, file, appId, fetchSource),\n    ),\n  );\n  if (\n    files.reduce((total, file) => total + file.size, 0) > SOURCE_TOTAL_MAX_BYTES\n  ) {\n    throw new PinnedCommunitySourceError(\n      \"integrity\",\n      \"Pinned community template exceeds the total size limit.\",\n    );\n  }\n  return files.map(({ attachment }) => attachment);\n}\n"]}

package/dist/server/lib/connect-apps.d.ts

@@ -0,0 +1,4 @@
+import { type ConnectAgentCard, type MarketplaceApp } from "../../lib/connect-apps.js";
+export declare function fetchConnectAgentCard(appUrl: string): Promise<ConnectAgentCard>;
+export declare function fetchMarketplaceApps(feedUrl?: string): Promise<MarketplaceApp[]>;
+//# sourceMappingURL=connect-apps.d.ts.map

package/dist/server/lib/connect-apps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-apps.d.ts","sourceRoot":"","sources":["../../../src/server/lib/connect-apps.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,2BAA2B,CAAC;AA8DnC,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,gBAAgB,CAAC,CA8B3B;AAED,wBAAsB,oBAAoB,CACxC,OAAO,SAA2C,GACjD,OAAO,CAAC,cAAc,EAAE,CAAC,CA0C3B"}

package/dist/server/lib/connect-apps.js

@@ -0,0 +1,99 @@
+import { ssrfSafeFetch } from "@agent-native/core/extensions/url-safety";
+import { buildAgentCardUrl, normalizeConnectUrl, parseConnectAgentCard, } from "../../lib/connect-apps.js";
+const CONNECT_FETCH_TIMEOUT_MS = 5_000;
+const MARKETPLACE_MAX_BYTES = 1_000_000;
+const AGENT_CARD_MAX_BYTES = 256_000;
+const MAX_MARKETPLACE_CANDIDATES = 50;
+async function readLimitedText(response, maxBytes, label) {
+    const declaredLength = Number(response.headers.get("content-length"));
+    if (Number.isFinite(declaredLength) && declaredLength > maxBytes) {
+        throw new Error(`${label} is too large`);
+    }
+    if (!response.body)
+        return "";
+    const reader = response.body.getReader();
+    const decoder = new TextDecoder();
+    let totalBytes = 0;
+    let body = "";
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            totalBytes += value.byteLength;
+            if (totalBytes > maxBytes) {
+                await reader.cancel();
+                throw new Error(`${label} is too large`);
+            }
+            body += decoder.decode(value, { stream: true });
+        }
+        return body + decoder.decode();
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+async function fetchJsonText(url, maxBytes, label, assertUrlAllowed) {
+    const response = await ssrfSafeFetch(url, {
+        headers: { accept: "application/json" },
+        signal: AbortSignal.timeout(CONNECT_FETCH_TIMEOUT_MS),
+    }, {
+        maxRedirects: 3,
+        requireDispatcher: true,
+        httpsOnly: true,
+        ...(assertUrlAllowed ? { assertUrlAllowed } : {}),
+    });
+    if (!response.ok)
+        throw new Error(`${label} returned ${response.status}`);
+    return readLimitedText(response, maxBytes, label);
+}
+export async function fetchConnectAgentCard(appUrl) {
+    const target = normalizeConnectUrl(appUrl);
+    if (!target || target.protocol !== "https:") {
+        throw new Error("Enter a secure app URL.");
+    }
+    const cardUrl = new URL(buildAgentCardUrl(target.toString()));
+    const body = await fetchJsonText(cardUrl.toString(), AGENT_CARD_MAX_BYTES, "Agent card", (url) => {
+        const redirect = new URL(url);
+        if (redirect.origin !== cardUrl.origin ||
+            redirect.pathname !== cardUrl.pathname) {
+            throw new Error("Agent card redirects must stay on the requested URL.");
+        }
+    });
+    const card = parseConnectAgentCard(JSON.parse(body), target.origin, target.pathname);
+    if (!card) {
+        throw new Error("This app has an invalid or incompatible agent card.");
+    }
+    return card;
+}
+export async function fetchMarketplaceApps(feedUrl = "https://www.agent-native.com/apps.json") {
+    const feed = normalizeConnectUrl(feedUrl);
+    if (!feed || feed.protocol !== "https:") {
+        throw new Error("Marketplace feed URL must use HTTPS.");
+    }
+    const body = await fetchJsonText(feed.toString(), MARKETPLACE_MAX_BYTES, "Marketplace feed");
+    const payload = JSON.parse(body);
+    if (!Array.isArray(payload.apps)) {
+        throw new Error("Marketplace feed is invalid");
+    }
+    const candidates = payload.apps
+        .filter((entry) => {
+        if (!entry || typeof entry !== "object")
+            return false;
+        const app = entry;
+        const url = typeof app.url === "string" ? normalizeConnectUrl(app.url) : null;
+        return (typeof app.id === "string" &&
+            typeof app.name === "string" &&
+            typeof app.description === "string" &&
+            Boolean(url && url.protocol === "https:") &&
+            Array.isArray(app.capabilities) &&
+            app.capabilities.every((capability) => typeof capability === "string"));
+    })
+        .slice(0, MAX_MARKETPLACE_CANDIDATES);
+    const verified = await Promise.allSettled(candidates.map(async (app) => {
+        const card = await fetchConnectAgentCard(app.url);
+        return card.connect ? { ...app, capabilities: ["connect"] } : null;
+    }));
+    return verified.flatMap((result) => result.status === "fulfilled" && result.value ? [result.value] : []);
+}
+//# sourceMappingURL=connect-apps.js.map