@agent-native/dispatch 0.40.30-nightly-20261021093329 → 0.40.31

package/dist/server/lib/connect-apps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-apps.js","sourceRoot":"","sources":["../../../src/server/lib/connect-apps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AAEzE,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,GAGtB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,qBAAqB,GAAG,SAAS,CAAC;AACxC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AACrC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAEtC,KAAK,UAAU,eAAe,CAC5B,QAAkB,EAClB,QAAgB,EAChB,KAAa;IAEb,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,QAAQ,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,UAAU,GAAG,QAAQ,EAAE,CAAC;gBAC1B,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAW,EACX,QAAgB,EAChB,KAAa,EACb,gBAAwC;IAExC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,GAAG,EACH;QACE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC;KACtD,EACD;QACE,YAAY,EAAE,CAAC;QACf,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,IAAI;QACf,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,OAAO,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc;IAEd,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,aAAa,CAC9B,OAAO,CAAC,QAAQ,EAAE,EAClB,oBAAoB,EACpB,YAAY,EACZ,CAAC,GAAG,EAAE,EAAE;QACN,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IACE,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAClC,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EACtC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CACF,CAAC;IACF,MAAM,IAAI,GAAG,qBAAqB,CAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAChB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAChB,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAO,GAAG,wCAAwC;IAElD,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAC9B,IAAI,CAAC,QAAQ,EAAE,EACf,qBAAqB,EACrB,kBAAkB,CACnB,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI;SAC5B,MAAM,CAAC,CAAC,KAAK,EAA2B,EAAE;QACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,GAAG,GACP,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,OAAO,CACL,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;YAC1B,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAC5B,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;YACnC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;YACzC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAC/B,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CACvE,CAAC;IACJ,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CACvC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC,CAAC,CACH,CAAC;IACF,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACjC,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CACpE,CAAC;AACJ,CAAC","sourcesContent":["import { ssrfSafeFetch } from \"@agent-native/core/extensions/url-safety\";\n\nimport {\n  buildAgentCardUrl,\n  normalizeConnectUrl,\n  parseConnectAgentCard,\n  type ConnectAgentCard,\n  type MarketplaceApp,\n} from \"../../lib/connect-apps.js\";\n\nconst CONNECT_FETCH_TIMEOUT_MS = 5_000;\nconst MARKETPLACE_MAX_BYTES = 1_000_000;\nconst AGENT_CARD_MAX_BYTES = 256_000;\nconst MAX_MARKETPLACE_CANDIDATES = 50;\n\nasync function readLimitedText(\n  response: Response,\n  maxBytes: number,\n  label: string,\n): Promise<string> {\n  const declaredLength = Number(response.headers.get(\"content-length\"));\n  if (Number.isFinite(declaredLength) && declaredLength > maxBytes) {\n    throw new Error(`${label} is too large`);\n  }\n\n  if (!response.body) return \"\";\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder();\n  let totalBytes = 0;\n  let body = \"\";\n  try {\n    while (true) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      totalBytes += value.byteLength;\n      if (totalBytes > maxBytes) {\n        await reader.cancel();\n        throw new Error(`${label} is too large`);\n      }\n      body += decoder.decode(value, { stream: true });\n    }\n    return body + decoder.decode();\n  } finally {\n    reader.releaseLock();\n  }\n}\n\nasync function fetchJsonText(\n  url: string,\n  maxBytes: number,\n  label: string,\n  assertUrlAllowed?: (url: string) => void,\n) {\n  const response = await ssrfSafeFetch(\n    url,\n    {\n      headers: { accept: \"application/json\" },\n      signal: AbortSignal.timeout(CONNECT_FETCH_TIMEOUT_MS),\n    },\n    {\n      maxRedirects: 3,\n      requireDispatcher: true,\n      httpsOnly: true,\n      ...(assertUrlAllowed ? { assertUrlAllowed } : {}),\n    },\n  );\n  if (!response.ok) throw new Error(`${label} returned ${response.status}`);\n  return readLimitedText(response, maxBytes, label);\n}\n\nexport async function fetchConnectAgentCard(\n  appUrl: string,\n): Promise<ConnectAgentCard> {\n  const target = normalizeConnectUrl(appUrl);\n  if (!target || target.protocol !== \"https:\") {\n    throw new Error(\"Enter a secure app URL.\");\n  }\n\n  const cardUrl = new URL(buildAgentCardUrl(target.toString()));\n  const body = await fetchJsonText(\n    cardUrl.toString(),\n    AGENT_CARD_MAX_BYTES,\n    \"Agent card\",\n    (url) => {\n      const redirect = new URL(url);\n      if (\n        redirect.origin !== cardUrl.origin ||\n        redirect.pathname !== cardUrl.pathname\n      ) {\n        throw new Error(\"Agent card redirects must stay on the requested URL.\");\n      }\n    },\n  );\n  const card = parseConnectAgentCard(\n    JSON.parse(body),\n    target.origin,\n    target.pathname,\n  );\n  if (!card) {\n    throw new Error(\"This app has an invalid or incompatible agent card.\");\n  }\n  return card;\n}\n\nexport async function fetchMarketplaceApps(\n  feedUrl = \"https://www.agent-native.com/apps.json\",\n): Promise<MarketplaceApp[]> {\n  const feed = normalizeConnectUrl(feedUrl);\n  if (!feed || feed.protocol !== \"https:\") {\n    throw new Error(\"Marketplace feed URL must use HTTPS.\");\n  }\n\n  const body = await fetchJsonText(\n    feed.toString(),\n    MARKETPLACE_MAX_BYTES,\n    \"Marketplace feed\",\n  );\n  const payload = JSON.parse(body) as { apps?: unknown };\n  if (!Array.isArray(payload.apps)) {\n    throw new Error(\"Marketplace feed is invalid\");\n  }\n\n  const candidates = payload.apps\n    .filter((entry): entry is MarketplaceApp => {\n      if (!entry || typeof entry !== \"object\") return false;\n      const app = entry as Record<string, unknown>;\n      const url =\n        typeof app.url === \"string\" ? normalizeConnectUrl(app.url) : null;\n      return (\n        typeof app.id === \"string\" &&\n        typeof app.name === \"string\" &&\n        typeof app.description === \"string\" &&\n        Boolean(url && url.protocol === \"https:\") &&\n        Array.isArray(app.capabilities) &&\n        app.capabilities.every((capability) => typeof capability === \"string\")\n      );\n    })\n    .slice(0, MAX_MARKETPLACE_CANDIDATES);\n\n  const verified = await Promise.allSettled(\n    candidates.map(async (app) => {\n      const card = await fetchConnectAgentCard(app.url);\n      return card.connect ? { ...app, capabilities: [\"connect\"] } : null;\n    }),\n  );\n  return verified.flatMap((result) =>\n    result.status === \"fulfilled\" && result.value ? [result.value] : [],\n  );\n}\n"]}

package/dist/server/lib/org-apps-directory-cache.d.ts

@@ -0,0 +1,20 @@
+export interface CachedOrgDirectoryAgent {
+    id: string;
+    name: string;
+    description?: string;
+    whenToUse?: string[];
+    url: string;
+    source?: "workspace" | "org-directory" | "remote-agent" | "builtin";
+}
+export interface OrgDirectorySuccessCache<T> {
+    get(key: string, load: () => Promise<T>): Promise<T>;
+    clear(): void;
+}
+export declare function createOrgDirectorySuccessCache<T>(input?: {
+    ttlMs?: number;
+    now?: () => number;
+}): OrgDirectorySuccessCache<T>;
+export declare const orgAppsDirectoryCache: OrgDirectorySuccessCache<CachedOrgDirectoryAgent[]>;
+export declare const orgAppsDirectoryAccessCache: OrgDirectorySuccessCache<Set<string>>;
+export declare function invalidateOrgAppsDirectoryCache(): void;
+//# sourceMappingURL=org-apps-directory-cache.d.ts.map

package/dist/server/lib/org-apps-directory-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-apps-directory-cache.d.ts","sourceRoot":"","sources":["../../../src/server/lib/org-apps-directory-cache.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,WAAW,GAAG,eAAe,GAAG,cAAc,GAAG,SAAS,CAAC;CACrE;AAED,MAAM,WAAW,wBAAwB,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACrD,KAAK,IAAI,IAAI,CAAC;CACf;AAED,wBAAgB,8BAA8B,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAoC9B;AAED,eAAO,MAAM,qBAAqB,qDAC2B,CAAC;AAE9D,eAAO,MAAM,2BAA2B,uCAEpB,CAAC;AAErB,wBAAgB,+BAA+B,IAAI,IAAI,CAGtD"}

package/dist/server/lib/org-apps-directory-cache.js

@@ -0,0 +1,44 @@
+export function createOrgDirectorySuccessCache(input) {
+    const ttlMs = input?.ttlMs ?? 60_000;
+    const now = input?.now ?? Date.now;
+    const values = new Map();
+    const inFlight = new Map();
+    let generation = 0;
+    return {
+        async get(key, load) {
+            const cached = values.get(key);
+            if (cached && cached.expiresAt > now())
+                return cached.value;
+            values.delete(key);
+            const pending = inFlight.get(key);
+            if (pending)
+                return pending;
+            const loadGeneration = generation;
+            const refresh = load()
+                .then((value) => {
+                if (loadGeneration === generation) {
+                    values.set(key, { value, expiresAt: now() + ttlMs });
+                }
+                return value;
+            })
+                .finally(() => {
+                if (inFlight.get(key) === refresh)
+                    inFlight.delete(key);
+            });
+            inFlight.set(key, refresh);
+            return refresh;
+        },
+        clear() {
+            generation += 1;
+            values.clear();
+            inFlight.clear();
+        },
+    };
+}
+export const orgAppsDirectoryCache = createOrgDirectorySuccessCache();
+export const orgAppsDirectoryAccessCache = createOrgDirectorySuccessCache({ ttlMs: 15_000 });
+export function invalidateOrgAppsDirectoryCache() {
+    orgAppsDirectoryCache.clear();
+    orgAppsDirectoryAccessCache.clear();
+}
+//# sourceMappingURL=org-apps-directory-cache.js.map

package/dist/server/lib/org-apps-directory-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-apps-directory-cache.js","sourceRoot":"","sources":["../../../src/server/lib/org-apps-directory-cache.ts"],"names":[],"mappings":"AAcA,MAAM,UAAU,8BAA8B,CAAI,KAGjD;IACC,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,MAAM,CAAC;IACrC,MAAM,GAAG,GAAG,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2C,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC/C,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAEnB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAE5B,MAAM,cAAc,GAAG,UAAU,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,EAAE;iBACnB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,IAAI,cAAc,KAAK,UAAU,EAAE,CAAC;oBAClC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;gBACvD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;oBAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;YACL,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK;YACH,UAAU,IAAI,CAAC,CAAC;YAChB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAChC,8BAA8B,EAA6B,CAAC;AAE9D,MAAM,CAAC,MAAM,2BAA2B,GAAG,8BAA8B,CAEvE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAErB,MAAM,UAAU,+BAA+B;IAC7C,qBAAqB,CAAC,KAAK,EAAE,CAAC;IAC9B,2BAA2B,CAAC,KAAK,EAAE,CAAC;AACtC,CAAC","sourcesContent":["export interface CachedOrgDirectoryAgent {\n  id: string;\n  name: string;\n  description?: string;\n  whenToUse?: string[];\n  url: string;\n  source?: \"workspace\" | \"org-directory\" | \"remote-agent\" | \"builtin\";\n}\n\nexport interface OrgDirectorySuccessCache<T> {\n  get(key: string, load: () => Promise<T>): Promise<T>;\n  clear(): void;\n}\n\nexport function createOrgDirectorySuccessCache<T>(input?: {\n  ttlMs?: number;\n  now?: () => number;\n}): OrgDirectorySuccessCache<T> {\n  const ttlMs = input?.ttlMs ?? 60_000;\n  const now = input?.now ?? Date.now;\n  const values = new Map<string, { value: T; expiresAt: number }>();\n  const inFlight = new Map<string, Promise<T>>();\n  let generation = 0;\n\n  return {\n    async get(key, load) {\n      const cached = values.get(key);\n      if (cached && cached.expiresAt > now()) return cached.value;\n      values.delete(key);\n\n      const pending = inFlight.get(key);\n      if (pending) return pending;\n\n      const loadGeneration = generation;\n      const refresh = load()\n        .then((value) => {\n          if (loadGeneration === generation) {\n            values.set(key, { value, expiresAt: now() + ttlMs });\n          }\n          return value;\n        })\n        .finally(() => {\n          if (inFlight.get(key) === refresh) inFlight.delete(key);\n        });\n      inFlight.set(key, refresh);\n      return refresh;\n    },\n    clear() {\n      generation += 1;\n      values.clear();\n      inFlight.clear();\n    },\n  };\n}\n\nexport const orgAppsDirectoryCache =\n  createOrgDirectorySuccessCache<CachedOrgDirectoryAgent[]>();\n\nexport const orgAppsDirectoryAccessCache = createOrgDirectorySuccessCache<\n  Set<string>\n>({ ttlMs: 15_000 });\n\nexport function invalidateOrgAppsDirectoryCache(): void {\n  orgAppsDirectoryCache.clear();\n  orgAppsDirectoryAccessCache.clear();\n}\n"]}

package/dist/server/plugins/integrations.js

@@ -13,9 +13,9 @@ const DISPATCH_INTEGRATION_SYSTEM_PROMPT = `You are the central dispatch for thi
 
 Default posture:
 - Treat Slack, Telegram, and email as shared entrypoints into the workspace.
-- Heavily delegate domain work to specialized agents through A2A (call-agent) when another app owns the job. Apps you can delegate to include slides (decks/presentations), analytics (data/dashboards), content (docs/articles), forms (form builder), clips (screen recordings), design (visual designs), and assets (brand libraries plus generated images/videos).
-- Use the available-apps prompt context first, then list-connected-agents when you need fresh details, to see what agents are available before assuming a request must be handled locally.
-- Hosted/connected A2A neighbors such as Analytics and Content come from the available-apps context or list-connected-agents. list-workspace-apps only inventories apps mounted inside this workspace deployment; never use a missing row there to conclude that a connected agent is unavailable.
+- Heavily delegate domain work to specialized agents through A2A (call-agent) when another app owns the job.
+- Use relevant-apps prompt profiles first, then list-connected-agents when you need fresh details. If that context is absent or does not list the needed capability, search with describe-workspace-apps query="<capability>" before assuming a request must be handled locally.
+- Hosted/connected A2A neighbors such as Analytics and Content come from the relevant-apps context or list-connected-agents. If neither identifies the needed capability, use describe-workspace-apps before concluding a connected agent is unavailable. list-workspace-apps only inventories apps mounted inside this workspace deployment; never use a missing row there to conclude that a connected agent is unavailable.
 - When asked whether a mounted workspace app exposes an agent card or A2A endpoint, call list-workspace-apps with includeAgentCards=true. Without that probe, missing agent-card fields mean unchecked, not unavailable.
 - Treat first-party apps such as Mail, Calendar, Analytics, Brain, Assets, and Dispatch as existing hosted/connected neighbors available through links and A2A/default connected agents. Do not create wrapper apps, child apps, nested routes, or cloned template copies just to give a new app access to them; build only the genuinely new workflow and delegate cross-app work to those existing apps.
 - Integration grants are not provider capability limits. For ad hoc provider inspection, querying, reporting, or troubleshooting, call provider-api-catalog/provider-api-docs, then provider-api-request against the provider's real HTTP API. Use connectionId for a specific shared grant and accountId for a specific OAuth account. Never expose secret values or silently widen app access while doing this.

package/dist/server/plugins/integrations.js.map

@@ -1 +1 @@
-{"version":3,"file":"integrations.js","sourceRoot":"","sources":["../../../src/server/plugins/integrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,qBAAqB,EACrB,+BAA+B,GAChC,MAAM,iCAAiC,CAAC;AAEzC,MAAM,0BAA0B,GAAG;IACjC,GAAG,eAAe;IAClB,OAAO,EAAE;QACP,GAAG,eAAe,CAAC,OAAO;QAC1B,SAAS,EAAE,KAAK;KACjB;CACF,CAAC;AAEF,MAAM,kCAAkC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4FA6BiD,CAAC;AAE7F,MAAM,0BAA0B,GAAG,KAAK,EAAE,QAAa,EAAE,EAAE;IACzD,MAAM,EAAE,YAAY,GAAG,EAAE,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAClD,MAAM,cAAc,GAAG,YAAY,CAAC,YAAY,CAAC;IACjD,MAAM,YAAY,GAChB,OAAO,cAAc,KAAK,QAAQ;QAChC,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,OAAO,cAAc,KAAK,UAAU;YACpC,CAAC,CAAC,cAAc,CAAC,kCAAkC,CAAC;YACpD,CAAC,CAAC,kCAAkC,CAAC;IAE3C,MAAM,MAAM,GAAG,wBAAwB,CAAC;QACtC,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,0BAA0B;QACnC,uBAAuB,EAAE,+BAA+B;QACxD,aAAa,EAAE,qBAAqB;QACpC,YAAY;QACZ,wDAAwD;QACxD,yEAAyE;QACzE,+DAA+D;QAC/D,6EAA6E;KAC9E,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,eAAe,0BAA0B,CAAC","sourcesContent":["import { createIntegrationsPlugin } from \"@agent-native/core/server\";\n\nimport { dispatchActions } from \"../../actions/index.js\";\nimport { getDispatchConfig } from \"../index.js\";\nimport {\n  beforeDispatchProcess,\n  resolveDispatchExecutionContext,\n} from \"../lib/dispatch-integrations.js\";\n\nconst dispatchIntegrationActions = {\n  ...dispatchActions,\n  ask_app: {\n    ...dispatchActions.ask_app,\n    agentTool: false,\n  },\n};\n\nconst DISPATCH_INTEGRATION_SYSTEM_PROMPT = `You are the central dispatch for this workspace, responding via a messaging platform integration (Slack, Telegram, email, etc.).\n\nDefault posture:\n- Treat Slack, Telegram, and email as shared entrypoints into the workspace.\n- Heavily delegate domain work to specialized agents through A2A (call-agent) when another app owns the job. Apps you can delegate to include slides (decks/presentations), analytics (data/dashboards), content (docs/articles), forms (form builder), clips (screen recordings), design (visual designs), and assets (brand libraries plus generated images/videos).\n- Use the available-apps prompt context first, then list-connected-agents when you need fresh details, to see what agents are available before assuming a request must be handled locally.\n- Hosted/connected A2A neighbors such as Analytics and Content come from the available-apps context or list-connected-agents. list-workspace-apps only inventories apps mounted inside this workspace deployment; never use a missing row there to conclude that a connected agent is unavailable.\n- When asked whether a mounted workspace app exposes an agent card or A2A endpoint, call list-workspace-apps with includeAgentCards=true. Without that probe, missing agent-card fields mean unchecked, not unavailable.\n- Treat first-party apps such as Mail, Calendar, Analytics, Brain, Assets, and Dispatch as existing hosted/connected neighbors available through links and A2A/default connected agents. Do not create wrapper apps, child apps, nested routes, or cloned template copies just to give a new app access to them; build only the genuinely new workflow and delegate cross-app work to those existing apps.\n- Integration grants are not provider capability limits. For ad hoc provider inspection, querying, reporting, or troubleshooting, call provider-api-catalog/provider-api-docs, then provider-api-request against the provider's real HTTP API. Use connectionId for a specific shared grant and accountId for a specific OAuth account. Never expose secret values or silently widen app access while doing this.\n- Keep durable memory and operating instructions in resources rather than ephemeral chat.\n- Reply in the originating thread unless the user explicitly asks you to send to a saved destination.\n\nWhen a user asks for something:\n- If it belongs to analytics, content, slides, clips, assets, etc., delegate via call-agent — do not re-implement the domain logic in dispatch.\n- Synthetic uptime, health-check, and URL-availability monitors belong to Analytics, even when the monitored target is another app such as Clips. Delegate creation to Analytics and relay its exact monitor URL. Dispatch-native recurring jobs are for reminders, digests, and agent workflows, not HTTP uptime probes.\n- Route by the requested artifact type, not by organization-specific names stored in code. For structured records, databases, tables, queues, boards, and intake forms, resolve the owning app and canonical destination from loaded workspace instructions/resources plus discovered app capabilities; do not assume Content, a database ID, schema, owner, or required fields. Visual designs, mockups, wireframes, screens, and interfaces belong to Design. A trusted Required target agent hint in integration context is authoritative.\n- When delegating structured intake to the resolved owning app, preserve the exact Source thread URL and the workspace instruction context, inspect the destination's current required fields, ask only for missing values, submit once, verify the saved record, and return the exact link.\n- In messaging integrations, use call-agent for cross-app delegation; do not use ask_app.\n- After call-agent returns an answer, RELAY IT DIRECTLY to the user with at most a one-line preface — do not rephrase, summarize, or add commentary. The downstream agent already crafted the answer; your job is delivery, not editing. This minimizes round-trips and keeps the user-visible reply fast.\n- Exception: if the downstream agent reports a missing model/provider credential, do not name exact env vars, Vault keys, tokens, or secrets. Say the target app needs an LLM connection and recommend using Builder/managed LLM for that app; keep bring-your-own provider keys as a secondary option only if the user asks.\n- If the user asks to create, build, make, scaffold, or generate an \"agent\" from Dispatch chat or by tagging @agent-native in Slack, email, or Telegram, first classify the ask. If it is a simple Dispatch-native behavior like a reminder, digest, monitor, routing rule, saved instruction, or recurring workflow, create or update the recurring job/resource/destination in Dispatch. If it is a robust unique product or teammate that needs its own UI, data model, actions, integrations, or domain workflow, treat it as a new workspace app and call start-workspace-app-creation.\n- If a user asks to rename an existing workspace app or change its Dispatch title/description, call update-workspace-app-metadata with the existing appId from list-workspace-apps. Do not call start-workspace-app-creation for a metadata-only edit because that starts a new app and Builder branch.\n- If a new-app prompt asks for access to Mail, Calendar, Analytics, Brain, Assets, or similar first-party app data/agents, keep using the existing hosted/connected app and A2A path. Do not ask Builder to scaffold those apps as children of the new app unless the user explicitly asks for a customized app from that template.\n- If the chat template is used, treat it as scaffolding only: the finished app must be branded as the requested app with its own home screen/navigation/package metadata/manifest, and must not leave visible \"Chat\", \"Starter\", \"Blank app\", or \"New app\" UI behind.\n- If the user explicitly asks for a new app or workspace app, call start-workspace-app-creation with their prompt and include a concise generated description by default. Do not satisfy a new-app request by adding a route, page, component, or file inside apps/chat or another existing app unless the user explicitly asks to modify that existing app. When the prompt contains a source brief or concrete repeatable workflow, choose recommended defaults and do not ask non-blocking product or UX questions; ask only for authorization, credentials, a destructive action, an ambiguous target workspace, or a genuinely missing workflow. If the request is too vague to classify, ask one concise follow-up. If the action returns mode \"builder\", reply with the Builder branch URL; Builder is responsible for creating the separate workspace app under apps/<app-id>, mounting it at /<app-id>, ensuring apps/<app-id>/package.json exists with name/displayName and description so Dispatch discovers it, using relative /<app-id> links instead of hardcoded localhost/dev ports, and preserving APP_BASE_PATH/VITE_APP_BASE_PATH in the React Router client entry. The new app lives at the workspace root /<app-id>, NOT under /dispatch/<app-id>, /apps/<app-id>, or any other Dispatch tab — when telling the user where to find it, link to /<app-id> only. There is no separate workspace app registry to edit. If it returns mode \"local-agent\", tell the user it is ready for the local code agent and include the returned app path/prompt summary. Dispatch reuses the connected workspace Builder project or provisions it through the Builder Projects API when an organization owner/admin starts the first app; members need an owner/admin to configure the project first. Do not ask the user to use Builder org/beta settings. If it returns mode \"builder-unavailable\", the action also returns a \\`reason\\` code plus a user-facing \\`message\\` and (for some reasons) an operator-facing \\`detail\\`. Relay the \\`message\\` to the user as-is; only surface \\`detail\\` when the user is clearly an operator debugging the deployment (e.g. troubleshooting a broken Builder connection for the workspace), never as routine detail for an end user. If it returns mode \"app-id-taken\", the app id is already in use: \\`conflict\\` is \"registered\" for a live app or \"pending\" for a creation in flight, and \\`owner\\` names who started it. Relay the \\`message\\` and propose a different app id; never retry the same id.\n- For digests, reminders, or saved behavior, prefer recurring jobs, resources, or destinations over chat replies.\n- Keep responses concise and operational — messaging platforms have character limits.\n- Use markdown sparingly (bold and lists are fine, avoid complex formatting).\n- If a task requires many steps, summarize what you did rather than streaming every detail.`;\n\nconst dispatchIntegrationsPlugin = async (nitroApp: any) => {\n  const { integrations = {} } = getDispatchConfig();\n  const promptOverride = integrations.systemPrompt;\n  const systemPrompt =\n    typeof promptOverride === \"string\"\n      ? promptOverride\n      : typeof promptOverride === \"function\"\n        ? promptOverride(DISPATCH_INTEGRATION_SYSTEM_PROMPT)\n        : DISPATCH_INTEGRATION_SYSTEM_PROMPT;\n\n  const plugin = createIntegrationsPlugin({\n    appId: \"dispatch\",\n    actions: dispatchIntegrationActions,\n    resolveExecutionContext: resolveDispatchExecutionContext,\n    beforeProcess: beforeDispatchProcess,\n    systemPrompt,\n    // Inherit the framework default (claude-sonnet-4-6 from\n    // packages/core/src/integrations/plugin.ts). Haiku was tried for latency\n    // but hallucinated URLs/IDs after delegated call-agent results\n    // (e.g. inventing `https://slides.workspace.com/deck/builder-io-deck-2024`).\n  });\n\n  return plugin(nitroApp);\n};\n\nexport default dispatchIntegrationsPlugin;\n"]}
+{"version":3,"file":"integrations.js","sourceRoot":"","sources":["../../../src/server/plugins/integrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,qBAAqB,EACrB,+BAA+B,GAChC,MAAM,iCAAiC,CAAC;AAEzC,MAAM,0BAA0B,GAAG;IACjC,GAAG,eAAe;IAClB,OAAO,EAAE;QACP,GAAG,eAAe,CAAC,OAAO;QAC1B,SAAS,EAAE,KAAK;KACjB;CACF,CAAC;AAEF,MAAM,kCAAkC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4FA6BiD,CAAC;AAE7F,MAAM,0BAA0B,GAAG,KAAK,EAAE,QAAa,EAAE,EAAE;IACzD,MAAM,EAAE,YAAY,GAAG,EAAE,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAClD,MAAM,cAAc,GAAG,YAAY,CAAC,YAAY,CAAC;IACjD,MAAM,YAAY,GAChB,OAAO,cAAc,KAAK,QAAQ;QAChC,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,OAAO,cAAc,KAAK,UAAU;YACpC,CAAC,CAAC,cAAc,CAAC,kCAAkC,CAAC;YACpD,CAAC,CAAC,kCAAkC,CAAC;IAE3C,MAAM,MAAM,GAAG,wBAAwB,CAAC;QACtC,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,0BAA0B;QACnC,uBAAuB,EAAE,+BAA+B;QACxD,aAAa,EAAE,qBAAqB;QACpC,YAAY;QACZ,wDAAwD;QACxD,yEAAyE;QACzE,+DAA+D;QAC/D,6EAA6E;KAC9E,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,eAAe,0BAA0B,CAAC","sourcesContent":["import { createIntegrationsPlugin } from \"@agent-native/core/server\";\n\nimport { dispatchActions } from \"../../actions/index.js\";\nimport { getDispatchConfig } from \"../index.js\";\nimport {\n  beforeDispatchProcess,\n  resolveDispatchExecutionContext,\n} from \"../lib/dispatch-integrations.js\";\n\nconst dispatchIntegrationActions = {\n  ...dispatchActions,\n  ask_app: {\n    ...dispatchActions.ask_app,\n    agentTool: false,\n  },\n};\n\nconst DISPATCH_INTEGRATION_SYSTEM_PROMPT = `You are the central dispatch for this workspace, responding via a messaging platform integration (Slack, Telegram, email, etc.).\n\nDefault posture:\n- Treat Slack, Telegram, and email as shared entrypoints into the workspace.\n- Heavily delegate domain work to specialized agents through A2A (call-agent) when another app owns the job.\n- Use relevant-apps prompt profiles first, then list-connected-agents when you need fresh details. If that context is absent or does not list the needed capability, search with describe-workspace-apps query=\"<capability>\" before assuming a request must be handled locally.\n- Hosted/connected A2A neighbors such as Analytics and Content come from the relevant-apps context or list-connected-agents. If neither identifies the needed capability, use describe-workspace-apps before concluding a connected agent is unavailable. list-workspace-apps only inventories apps mounted inside this workspace deployment; never use a missing row there to conclude that a connected agent is unavailable.\n- When asked whether a mounted workspace app exposes an agent card or A2A endpoint, call list-workspace-apps with includeAgentCards=true. Without that probe, missing agent-card fields mean unchecked, not unavailable.\n- Treat first-party apps such as Mail, Calendar, Analytics, Brain, Assets, and Dispatch as existing hosted/connected neighbors available through links and A2A/default connected agents. Do not create wrapper apps, child apps, nested routes, or cloned template copies just to give a new app access to them; build only the genuinely new workflow and delegate cross-app work to those existing apps.\n- Integration grants are not provider capability limits. For ad hoc provider inspection, querying, reporting, or troubleshooting, call provider-api-catalog/provider-api-docs, then provider-api-request against the provider's real HTTP API. Use connectionId for a specific shared grant and accountId for a specific OAuth account. Never expose secret values or silently widen app access while doing this.\n- Keep durable memory and operating instructions in resources rather than ephemeral chat.\n- Reply in the originating thread unless the user explicitly asks you to send to a saved destination.\n\nWhen a user asks for something:\n- If it belongs to analytics, content, slides, clips, assets, etc., delegate via call-agent — do not re-implement the domain logic in dispatch.\n- Synthetic uptime, health-check, and URL-availability monitors belong to Analytics, even when the monitored target is another app such as Clips. Delegate creation to Analytics and relay its exact monitor URL. Dispatch-native recurring jobs are for reminders, digests, and agent workflows, not HTTP uptime probes.\n- Route by the requested artifact type, not by organization-specific names stored in code. For structured records, databases, tables, queues, boards, and intake forms, resolve the owning app and canonical destination from loaded workspace instructions/resources plus discovered app capabilities; do not assume Content, a database ID, schema, owner, or required fields. Visual designs, mockups, wireframes, screens, and interfaces belong to Design. A trusted Required target agent hint in integration context is authoritative.\n- When delegating structured intake to the resolved owning app, preserve the exact Source thread URL and the workspace instruction context, inspect the destination's current required fields, ask only for missing values, submit once, verify the saved record, and return the exact link.\n- In messaging integrations, use call-agent for cross-app delegation; do not use ask_app.\n- After call-agent returns an answer, RELAY IT DIRECTLY to the user with at most a one-line preface — do not rephrase, summarize, or add commentary. The downstream agent already crafted the answer; your job is delivery, not editing. This minimizes round-trips and keeps the user-visible reply fast.\n- Exception: if the downstream agent reports a missing model/provider credential, do not name exact env vars, Vault keys, tokens, or secrets. Say the target app needs an LLM connection and recommend using Builder/managed LLM for that app; keep bring-your-own provider keys as a secondary option only if the user asks.\n- If the user asks to create, build, make, scaffold, or generate an \"agent\" from Dispatch chat or by tagging @agent-native in Slack, email, or Telegram, first classify the ask. If it is a simple Dispatch-native behavior like a reminder, digest, monitor, routing rule, saved instruction, or recurring workflow, create or update the recurring job/resource/destination in Dispatch. If it is a robust unique product or teammate that needs its own UI, data model, actions, integrations, or domain workflow, treat it as a new workspace app and call start-workspace-app-creation.\n- If a user asks to rename an existing workspace app or change its Dispatch title/description, call update-workspace-app-metadata with the existing appId from list-workspace-apps. Do not call start-workspace-app-creation for a metadata-only edit because that starts a new app and Builder branch.\n- If a new-app prompt asks for access to Mail, Calendar, Analytics, Brain, Assets, or similar first-party app data/agents, keep using the existing hosted/connected app and A2A path. Do not ask Builder to scaffold those apps as children of the new app unless the user explicitly asks for a customized app from that template.\n- If the chat template is used, treat it as scaffolding only: the finished app must be branded as the requested app with its own home screen/navigation/package metadata/manifest, and must not leave visible \"Chat\", \"Starter\", \"Blank app\", or \"New app\" UI behind.\n- If the user explicitly asks for a new app or workspace app, call start-workspace-app-creation with their prompt and include a concise generated description by default. Do not satisfy a new-app request by adding a route, page, component, or file inside apps/chat or another existing app unless the user explicitly asks to modify that existing app. When the prompt contains a source brief or concrete repeatable workflow, choose recommended defaults and do not ask non-blocking product or UX questions; ask only for authorization, credentials, a destructive action, an ambiguous target workspace, or a genuinely missing workflow. If the request is too vague to classify, ask one concise follow-up. If the action returns mode \"builder\", reply with the Builder branch URL; Builder is responsible for creating the separate workspace app under apps/<app-id>, mounting it at /<app-id>, ensuring apps/<app-id>/package.json exists with name/displayName and description so Dispatch discovers it, using relative /<app-id> links instead of hardcoded localhost/dev ports, and preserving APP_BASE_PATH/VITE_APP_BASE_PATH in the React Router client entry. The new app lives at the workspace root /<app-id>, NOT under /dispatch/<app-id>, /apps/<app-id>, or any other Dispatch tab — when telling the user where to find it, link to /<app-id> only. There is no separate workspace app registry to edit. If it returns mode \"local-agent\", tell the user it is ready for the local code agent and include the returned app path/prompt summary. Dispatch reuses the connected workspace Builder project or provisions it through the Builder Projects API when an organization owner/admin starts the first app; members need an owner/admin to configure the project first. Do not ask the user to use Builder org/beta settings. If it returns mode \"builder-unavailable\", the action also returns a \\`reason\\` code plus a user-facing \\`message\\` and (for some reasons) an operator-facing \\`detail\\`. Relay the \\`message\\` to the user as-is; only surface \\`detail\\` when the user is clearly an operator debugging the deployment (e.g. troubleshooting a broken Builder connection for the workspace), never as routine detail for an end user. If it returns mode \"app-id-taken\", the app id is already in use: \\`conflict\\` is \"registered\" for a live app or \"pending\" for a creation in flight, and \\`owner\\` names who started it. Relay the \\`message\\` and propose a different app id; never retry the same id.\n- For digests, reminders, or saved behavior, prefer recurring jobs, resources, or destinations over chat replies.\n- Keep responses concise and operational — messaging platforms have character limits.\n- Use markdown sparingly (bold and lists are fine, avoid complex formatting).\n- If a task requires many steps, summarize what you did rather than streaming every detail.`;\n\nconst dispatchIntegrationsPlugin = async (nitroApp: any) => {\n  const { integrations = {} } = getDispatchConfig();\n  const promptOverride = integrations.systemPrompt;\n  const systemPrompt =\n    typeof promptOverride === \"string\"\n      ? promptOverride\n      : typeof promptOverride === \"function\"\n        ? promptOverride(DISPATCH_INTEGRATION_SYSTEM_PROMPT)\n        : DISPATCH_INTEGRATION_SYSTEM_PROMPT;\n\n  const plugin = createIntegrationsPlugin({\n    appId: \"dispatch\",\n    actions: dispatchIntegrationActions,\n    resolveExecutionContext: resolveDispatchExecutionContext,\n    beforeProcess: beforeDispatchProcess,\n    systemPrompt,\n    // Inherit the framework default (claude-sonnet-4-6 from\n    // packages/core/src/integrations/plugin.ts). Haiku was tried for latency\n    // but hallucinated URLs/IDs after delegated call-agent results\n    // (e.g. inventing `https://slides.workspace.com/deck/builder-io-deck-2024`).\n  });\n\n  return plugin(nitroApp);\n};\n\nexport default dispatchIntegrationsPlugin;\n"]}

package/dist/shared/labs.d.ts

@@ -0,0 +1,2 @@
+export declare const COMMUNITY_APPS_LAB: import("@agent-native/core/labs/registry").LabDefinition;
+//# sourceMappingURL=labs.d.ts.map

package/dist/shared/labs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"labs.d.ts","sourceRoot":"","sources":["../../src/shared/labs.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB,0DAM7B,CAAC"}

package/dist/shared/labs.js

@@ -0,0 +1,8 @@
+import { defineLab } from "@agent-native/core/labs/registry";
+export const COMMUNITY_APPS_LAB = defineLab({
+    key: "dispatch.community-apps",
+    displayName: "Community apps",
+    description: "Connect trusted remote agents and install reviewed, pinned community app templates.",
+    keywords: "community apps templates connect install",
+});
+//# sourceMappingURL=labs.js.map

package/dist/shared/labs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"labs.js","sourceRoot":"","sources":["../../src/shared/labs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAE7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC;IAC1C,GAAG,EAAE,yBAAyB;IAC9B,WAAW,EAAE,gBAAgB;IAC7B,WAAW,EACT,qFAAqF;IACvF,QAAQ,EAAE,0CAA0C;CACrD,CAAC,CAAC","sourcesContent":["import { defineLab } from \"@agent-native/core/labs/registry\";\n\nexport const COMMUNITY_APPS_LAB = defineLab({\n  key: \"dispatch.community-apps\",\n  displayName: \"Community apps\",\n  description:\n    \"Connect trusted remote agents and install reviewed, pinned community app templates.\",\n  keywords: \"community apps templates connect install\",\n});\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/dispatch",
-  "version": "0.40.30-nightly-20261021093329",
+  "version": "0.40.31",
   "description": "Dispatch — workspace control plane for agent-native apps. Vault, integrations, destinations, scheduled jobs, and cross-app delegation, shipped as a single drop-in package.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -31,6 +31,7 @@
     "./server": "./dist/server/index.js",
     "./shared/app-roles": "./dist/shared/app-roles.js",
     "./shared/feature-flags": "./dist/shared/feature-flags.js",
+    "./shared/labs": "./dist/shared/labs.js",
     "./shared/workspace-sso": "./dist/shared/workspace-sso.js",
     "./server/lib/thread-link-preview": "./dist/server/lib/thread-link-preview.js",
     "./actions": "./dist/actions/index.js",
@@ -89,7 +90,7 @@
     "tailwind-merge": "^3.5.0",
     "vaul": "^1.1.2",
     "zod": "^4.3.6",
-    "@agent-native/toolkit": "0.212.0-nightly-20261021093329"
+    "@agent-native/toolkit": "0.212.1"
   },
   "devDependencies": {
     "@react-router/dev": "^8.1.0",
@@ -103,10 +104,10 @@
     "typescript-7": "npm:typescript@^7.0.2",
     "vite": "8.1.0",
     "vitest": "^4.1.5",
-    "@agent-native/core": "0.212.0-nightly-20261021093329"
+    "@agent-native/core": "0.212.1"
   },
   "peerDependencies": {
-    "@agent-native/core": "0.212.0-nightly-20261021093329",
+    "@agent-native/core": ">=0.209.1",
     "react": ">=19.2.7",
     "react-dom": ">=19.2.7",
     "react-router": ">=8"

package/src/actions/connect-external-agent.spec.ts

@@ -29,10 +29,13 @@ import action from "./connect-external-agent.js";
 describe("connect-external-agent action", () => {
   beforeEach(() => {
     vi.clearAllMocks();
-    mocks.currentOrgId.mockReturnValue(null);
+    mocks.currentOrgId.mockReturnValue("org_1");
     mocks.currentOwnerEmail.mockReturnValue("owner@example.com");
     mocks.sharedResourceOwner.mockReturnValue("shared-owner");
     mocks.resourcePutIfAbsent.mockResolvedValue({ id: "resource_1" });
+    mocks.getDbExec.mockReturnValue({
+      execute: vi.fn().mockResolvedValue({ rows: [{ role: "owner" }] }),
+    });
   });
 
   it("rejects a malformed endpoint URL with a clean validation error instead of an unhandled throw", async () => {
@@ -46,7 +49,7 @@ describe("connect-external-agent action", () => {
     }
 
     expect(isActionContractError(caught)).toBe(true);
-    expect((caught as Error).message).toMatch(/valid url/i);
+    expect((caught as Error).message).toMatch(/https/i);
     expect(mocks.resourcePutIfAbsent).not.toHaveBeenCalled();
   });
 
@@ -62,7 +65,102 @@ describe("connect-external-agent action", () => {
     }
 
     expect(isActionContractError(caught)).toBe(true);
-    expect((caught as Error).message).toMatch(/http:\/\/ or https:\/\//i);
+    expect((caught as Error).message).toMatch(/https/i);
+  });
+
+  it("rejects localhost HTTP endpoints", async () => {
+    let caught: unknown;
+    try {
+      await action.run({
+        url: "http://localhost:3000",
+        scope: "personal",
+      } as never);
+    } catch (err) {
+      caught = err;
+    }
+
+    expect(isActionContractError(caught)).toBe(true);
+    expect((caught as Error).message).toMatch(/https/i);
+    expect(mocks.resourcePutIfAbsent).not.toHaveBeenCalled();
+  });
+
+  it.each([
+    "https://127.0.0.1",
+    "https://10.0.0.8",
+    "https://192.168.1.2",
+    "https://[::1]",
+    "https://user:pass@agent.example.com",
+  ])("rejects unsafe endpoint %s without writing", async (url) => {
+    let caught: unknown;
+    try {
+      await action.run({ url, scope: "personal" } as never);
+    } catch (err) {
+      caught = err;
+    }
+
+    expect(isActionContractError(caught)).toBe(true);
+    expect(mocks.resourcePutIfAbsent).not.toHaveBeenCalled();
+  });
+
+  it("requires an active organization for shared agents before any writes", async () => {
+    mocks.currentOrgId.mockReturnValue(null);
+    let caught: unknown;
+    try {
+      await action.run({
+        url: "https://agent.example.com",
+        scope: "shared",
+      } as never);
+    } catch (err) {
+      caught = err;
+    }
+
+    expect(isActionContractError(caught)).toBe(true);
+    expect(mocks.getDbExec).not.toHaveBeenCalled();
+    expect(mocks.sharedResourceOwner).not.toHaveBeenCalled();
+    expect(mocks.resourcePutIfAbsent).not.toHaveBeenCalled();
+  });
+
+  it("requires an owner or admin actor for shared agents before writing", async () => {
+    mocks.currentOrgId.mockReturnValue("org_1");
+    mocks.getDbExec.mockReturnValue({
+      execute: vi.fn().mockResolvedValue({ rows: [{ role: "member" }] }),
+    });
+
+    let caught: unknown;
+    try {
+      await action.run({
+        url: "https://agent.example.com",
+        scope: "shared",
+      } as never);
+    } catch (err) {
+      caught = err;
+    }
+
+    expect(isActionContractError(caught)).toBe(true);
+    expect((caught as { statusCode?: number }).statusCode).toBe(403);
+    expect(mocks.sharedResourceOwner).not.toHaveBeenCalled();
+    expect(mocks.resourcePutIfAbsent).not.toHaveBeenCalled();
+  });
+
+  it("lets organization members create personal connections without shared-agent admin access", async () => {
+    mocks.currentOrgId.mockReturnValue("org_1");
+    mocks.currentOwnerEmail.mockReturnValue("member@example.com");
+
+    const result = await action.run({
+      url: "https://agent.example.com",
+      name: "Personal Agent",
+      scope: "personal",
+    } as never);
+
+    expect(result.status).toBe("created");
+    expect(result.scope).toBe("personal");
+    expect(mocks.getDbExec).not.toHaveBeenCalled();
+    expect(mocks.resourcePutIfAbsent).toHaveBeenCalledWith(
+      "member@example.com",
+      "remote-agents/personal-agent.json",
+      expect.any(String),
+      "application/json",
+    );
   });
 
   it("connects a well-formed https endpoint", async () => {

package/src/actions/connect-external-agent.ts

@@ -6,7 +6,7 @@ import {
 } from "@agent-native/core/resources/store";
 import { z } from "zod";
 
-import { parseAgentEndpointUrl } from "../lib/agent-endpoint-url.js";
+import { normalizeConnectUrl } from "../lib/connect-apps.js";
 import {
   currentOrgId,
   currentOwnerEmail,
@@ -24,7 +24,11 @@ function slugify(value: string): string {
 
 async function assertCanManageSharedAgent() {
   const orgId = currentOrgId();
-  if (!orgId) return;
+  if (!orgId) {
+    fail("An active organization is required to connect an agent.", {
+      statusCode: 403,
+    });
+  }
   const actor = currentOwnerEmail().trim().toLowerCase();
   const result = await getDbExec().execute({
     sql: `SELECT role FROM org_members
@@ -35,7 +39,7 @@ async function assertCanManageSharedAgent() {
   });
   const role = result.rows[0]?.role;
   if (role !== "owner" && role !== "admin") {
-    fail("Only organization owners and admins can connect shared agents.", {
+    fail("Only organization owners and admins can connect agents.", {
       statusCode: 403,
     });
   }
@@ -43,9 +47,9 @@ async function assertCanManageSharedAgent() {
 
 export default defineAction({
   description:
-    "Connect an existing HTTP/A2A agent to Dispatch. This stores only its public endpoint and metadata; authentication remains in the normal A2A/MCP connection flow.",
+    "Connect an existing HTTPS/A2A agent to Dispatch. This stores only its public endpoint and metadata; authentication remains in the normal A2A/MCP connection flow.",
   schema: z.object({
-    url: z.string().min(1).describe("HTTP or HTTPS agent endpoint"),
+    url: z.string().min(1).describe("HTTPS agent endpoint"),
     name: z.string().max(160).optional().describe("Agent name"),
     description: z.string().max(500).optional().describe("Short description"),
     scope: z
@@ -54,12 +58,9 @@ export default defineAction({
       .describe("Share with the workspace or keep the connection personal"),
   }),
   run: async ({ url, name, description, scope }) => {
-    let parsed: URL;
-    try {
-      parsed = parseAgentEndpointUrl(url);
-    } catch (err) {
-      fail(err instanceof Error ? err.message : "Enter a valid URL.");
-    }
+    const parsed = normalizeConnectUrl(url);
+    if (!parsed)
+      fail("Use an HTTPS URL without credentials or private addresses.");
 
     if (scope === "shared") await assertCanManageSharedAgent();
     const agentName = name?.trim() || parsed.hostname.replace(/^www\./, "");

package/src/actions/index.spec.ts

@@ -5,6 +5,8 @@ import { dispatchActions } from "./index.js";
 describe("dispatch action registry", () => {
   it("keeps workspace resources runtime-inherited instead of exposing sync actions", () => {
     expect(dispatchActions).toHaveProperty("list-workspace-resources-for-app");
+    expect(dispatchActions).toHaveProperty("list-connect-marketplace-apps");
+    expect(dispatchActions).toHaveProperty("inspect-connect-agent-card");
     expect(dispatchActions).toHaveProperty("connect-external-agent");
     expect(dispatchActions).toHaveProperty("import-agent");
     expect(dispatchActions).toHaveProperty("list-mcp-app-access");
@@ -60,6 +62,17 @@ describe("dispatch action registry", () => {
     );
   });
 
+  it("keeps Connect URL inspection UI-only", () => {
+    expect(dispatchActions["list-connect-marketplace-apps"].agentTool).toBe(
+      false,
+    );
+    expect(dispatchActions["list-connect-marketplace-apps"].mcpTool).toBe(
+      false,
+    );
+    expect(dispatchActions["inspect-connect-agent-card"].agentTool).toBe(false);
+    expect(dispatchActions["inspect-connect-agent-card"].mcpTool).toBe(false);
+  });
+
   it("teaches MCP hosts to route through their existing Dispatch connection", () => {
     expect(dispatchActions.ask_app.tool.description).toContain(
       "do not require a separate app MCP connection",

package/src/actions/index.ts

@@ -36,11 +36,15 @@ import grantVaultSecretsToApp from "./grant-vault-secrets-to-app.js";
 import grantWorkspaceResourcesToApp from "./grant-workspace-resources-to-app.js";
 import importAgentPack from "./import-agent-pack.js";
 import importAgent from "./import-agent.js";
+import inspectConnectAgentCard from "./inspect-connect-agent-card.js";
+import installCuratedCommunityApp from "./install-curated-community-app.js";
 import listAgentPack from "./list-agent-pack.js";
 import listAgentRunFailures from "./list-agent-run-failures.js";
 import listAgentThreadSources from "./list-agent-thread-sources.js";
 import listAvailableWorkspaceTemplates from "./list-available-workspace-templates.js";
+import listConnectMarketplaceApps from "./list-connect-marketplace-apps.js";
 import listConnectedAgents from "./list-connected-agents.js";
+import listCuratedCommunityApps from "./list-curated-community-apps.js";
 import listCuratedWorkspaceTemplates from "./list-curated-workspace-templates.js";
 import listDestinations from "./list-destinations.js";
 import listDispatchApprovals from "./list-dispatch-approvals.js";
@@ -140,7 +144,9 @@ export const dispatchActions: Record<string, ActionEntry> = {
   "list-agent-thread-sources": listAgentThreadSources,
   "list-agent-run-failures": listAgentRunFailures,
   "list-available-workspace-templates": listAvailableWorkspaceTemplates,
+  "list-curated-community-apps": listCuratedCommunityApps,
   "list-curated-workspace-templates": listCuratedWorkspaceTemplates,
+  "list-connect-marketplace-apps": listConnectMarketplaceApps,
   "list-connected-agents": listConnectedAgents,
   "list-destinations": listDestinations,
   "list-dispatch-approvals": listDispatchApprovals,
@@ -166,7 +172,9 @@ export const dispatchActions: Record<string, ActionEntry> = {
   "list-workspace-resources-for-app": listWorkspaceResourcesForApp,
   "list-workspace-resources": listWorkspaceResources,
   "import-agent": importAgent,
+  "inspect-connect-agent-card": inspectConnectAgentCard,
   "import-agent-pack": importAgentPack,
+  "install-curated-community-app": installCuratedCommunityApp,
   "list-agent-pack": listAgentPack,
   navigate: navigate,
   open_app: openApp,

package/src/actions/inspect-connect-agent-card.ts

@@ -0,0 +1,17 @@
+import { defineAction } from "@agent-native/core/action";
+import { z } from "zod";
+
+import { fetchConnectAgentCard } from "../server/lib/connect-apps.js";
+
+export default defineAction({
+  description:
+    "Inspect a user-entered Agent-Native app URL for a compatible connection card.",
+  schema: z.object({ url: z.string().trim().min(1).max(2048) }),
+  http: { method: "POST" },
+  readOnly: true,
+  parallelSafe: true,
+  agentTool: false,
+  mcpTool: false,
+  toolCallable: false,
+  run: async ({ url }) => fetchConnectAgentCard(url),
+});

package/src/actions/install-curated-community-app.ts

@@ -0,0 +1,32 @@
+import { defineAction } from "@agent-native/core/action";
+import {
+  getWorkspaceAppIdValidationError,
+  normalizeWorkspaceAppId,
+} from "@agent-native/core/shared";
+import { z } from "zod";
+
+import { installCuratedCommunityApp } from "../server/lib/community-apps.js";
+
+export default defineAction({
+  mcpAnnotations: {
+    readOnlyHint: false,
+    destructiveHint: false,
+    openWorldHint: false,
+  },
+  description:
+    "Install one reviewed, pinned community app template into the associated workspace. Select a sourceId from list-curated-community-apps; repository and revision are fixed by Dispatch and cannot be supplied by the caller.",
+  schema: z.object({
+    sourceId: z.string().min(1).max(100).describe("Curated source id"),
+    appId: z
+      .string()
+      .max(64)
+      .transform(normalizeWorkspaceAppId)
+      .refine((appId) => !getWorkspaceAppIdValidationError(appId), {
+        message:
+          "Use a non-reserved app id with lowercase letters, numbers, and hyphens.",
+      })
+      .optional()
+      .describe("Optional target app id; defaults to the template's app id"),
+  }),
+  run: async (input) => installCuratedCommunityApp(input),
+});

package/src/actions/list-connect-marketplace-apps.ts

@@ -0,0 +1,17 @@
+import { defineAction } from "@agent-native/core/action";
+import { z } from "zod";
+
+import { fetchMarketplaceApps } from "../server/lib/connect-apps.js";
+
+export default defineAction({
+  description:
+    "List verified Agent-Native marketplace apps that support connecting to a workspace.",
+  schema: z.object({}),
+  http: { method: "GET" },
+  readOnly: true,
+  parallelSafe: true,
+  agentTool: false,
+  mcpTool: false,
+  toolCallable: false,
+  run: async () => fetchMarketplaceApps(),
+});

package/src/actions/list-connected-agents.spec.ts

@@ -3,7 +3,9 @@ import { describe, expect, it, vi } from "vitest";
 const mocks = vi.hoisted(() => ({
   discoverAgents: vi.fn(),
   getBuiltinAgents: vi.fn(),
-  getRequestUserEmail: vi.fn(() => "owner@example.test"),
+  getRequestUserEmail: vi.fn<() => string | undefined>(
+    () => "owner@example.test",
+  ),
   resourceGet: vi.fn(),
   resourceListAccessible: vi.fn(async (): Promise<unknown[]> => []),
   parseRemoteAgentManifest: vi.fn(),
@@ -141,4 +143,18 @@ describe("list-connected-agents", () => {
     expect(entry).toMatchObject({ id: "mail", source: "workspace" });
     expect(entry).not.toHaveProperty("homeUrl");
   });
+
+  it("returns a typed authentication error when the session has no user email", async () => {
+    mocks.discoverAgents.mockResolvedValue([]);
+    mocks.getBuiltinAgents.mockReturnValue([]);
+    mocks.loadWorkspaceAppsManifest.mockResolvedValue(null);
+    mocks.getRequestUserEmail.mockReturnValueOnce(undefined);
+
+    const { default: action } = await import("./list-connected-agents.js");
+
+    await expect(action.run({})).rejects.toMatchObject({
+      statusCode: 401,
+      errorCode: "dispatch_user_identity_missing",
+    });
+  });
 });

package/src/actions/list-connected-agents.ts

@@ -1,4 +1,4 @@
-import { defineAction } from "@agent-native/core/action";
+import { defineAction, fail } from "@agent-native/core/action";
 import {
   REMOTE_AGENT_RESOURCE_PREFIXES,
   parseRemoteAgentManifest,
@@ -45,7 +45,12 @@ export default defineAction({
       builtins.map((agent) => [agent.id, agent.url]),
     );
     const ownerEmail = getRequestUserEmail();
-    if (!ownerEmail) throw new Error("no authenticated user");
+    if (!ownerEmail) {
+      fail("Sign in to list connected agents.", {
+        errorCode: "dispatch_user_identity_missing",
+        statusCode: 401,
+      });
+    }
     const resources: Array<{ id: string; path: string; owner: string }> = [];
     for (const prefix of [...REMOTE_AGENT_RESOURCE_PREFIXES].reverse()) {
       resources.push(...(await resourceListAccessible(ownerEmail, prefix)));

package/src/actions/list-curated-community-apps.ts

@@ -0,0 +1,12 @@
+import { defineAction } from "@agent-native/core/action";
+import { z } from "zod";
+
+import { listCuratedCommunityApps } from "../server/lib/community-apps.js";
+
+export default defineAction({
+  description:
+    "List reviewed, pinned community app templates that can be installed in the associated workspace. This catalog is separate from deployed agents in Connect.",
+  schema: z.object({}),
+  http: { method: "GET" },
+  run: async () => listCuratedCommunityApps(),
+});