@agent-native/dispatch 0.40.33 → 0.40.36

package/CHANGELOG.md

@@ -1,5 +1,43 @@
 # @agent-native/dispatch
 
+## 0.40.36
+
+### Patch Changes
+
+- Release all public npm packages with a patch version bump.
+- Updated dependencies
+- Updated dependencies [31a1f1e]
+  - @agent-native/toolkit@0.216.0
+
+## 0.40.35
+
+### Patch Changes
+
+- 32ecc17: Refresh the curated community QR file pin to match the tracked template.
+- Release all public npm packages with a patch version bump.
+- 985e9de: Refresh the curated QR template pin after the Core 0.214.0 release.
+- 7d32864: Refresh the QR community app file pins during release versioning so they match the current template.
+- 5f880cd: Keep the QR community app package pin aligned with its current manifest.
+- 7ba1d99: Keep the curated QR app installer pinned to the current reviewed template manifest.
+- 0aa618c: Fix workspace app embeds when the target returns its start URL through MCP metadata.
+- 4b0bb1e: Usage metrics tools now say they only cover this organization's members and return a typed error pointing to the owning app when asked about an external customer's usage.
+- Updated dependencies [f8f4b9e]
+- Updated dependencies [0b58010]
+- Updated dependencies
+- Updated dependencies [4fd6b35]
+- Updated dependencies [11a11d9]
+- Updated dependencies [aa79d54]
+  - @agent-native/toolkit@0.215.0
+
+## 0.40.34
+
+### Patch Changes
+
+- Release all public npm packages with a patch version bump.
+- Updated dependencies
+- Updated dependencies [05d1481]
+  - @agent-native/toolkit@0.214.0
+
 ## 0.40.33
 
 ### Patch Changes
@@ -1291,23 +1329,4 @@
 
 - a688849: Add organization groups and privacy controls for workspace apps. New apps use the organization default (organization-wide by default), while creators and organization admins can manage individual, group, and organization access from the shared popover.
 
-## 0.29.5
-
-### Patch Changes
-
-- Updated dependencies [0b57293]
-  - @agent-native/toolkit@0.16.5
-
-## 0.29.4
-
-### Patch Changes
-
-- 0b0085f: Fix workspace app sign-in continuation and mounted-app launches.
-
-## 0.29.3
-
-### Patch Changes
-
-- 8cab236: Speed up workspace app opens in Dispatch by reusing the app catalog cache and deferring granted-app discovery until needed.
-
 For the full list of releases, see the [changelog archive](./changelog/archive/CHANGELOG.md).

package/dist/actions/list-dispatch-usage-metrics.js

@@ -2,7 +2,7 @@ import { defineAction } from "@agent-native/core/action";
 import { z } from "zod";
 import { listDispatchUsageMetrics } from "../server/lib/usage-metrics-store.js";
 export default defineAction({
-    description: "Get personal or workspace-member agent usage and spend, or aggregate app adoption metrics for Dispatch. Workspace results do not include customer/account/company usage or product data; use the relevant workspace app for those. Results may include active users, tracked app actions, app attribution, prompt previews, and recent activity. billing.unit is unknown when historical usage lacks engine metadata or mixes billing sources; monthlyByUser credits are null in that case. Workspace results also include monthlyByUser credit rows and workspaceAppCreationsByUserMonth rows from the shared token_usage and Dispatch audit tables. App scope is aggregate-only and returns daily/weekly active users plus tracked action counts for the selected app.",
+    description: "Reports agent/LLM usage and spend for members of this organization (personal or workspace-wide) plus aggregate app adoption for Dispatch; it does NOT cover usage, credits, or activity of external customers, accounts, companies, or product usage, which belong to the app that owns that data (see <relevant-apps>, or search with describe-workspace-apps). Results may include active users, tracked app actions, app attribution, prompt previews, and recent activity. billing.unit is unknown when historical usage lacks engine metadata or mixes billing sources; monthlyByUser credits are null in that case. Workspace results also include monthlyByUser credit rows and workspaceAppCreationsByUserMonth rows from the shared token_usage and Dispatch audit tables. App scope is aggregate-only and returns daily/weekly active users plus tracked action counts for the selected app.",
     schema: z.object({
         sinceDays: z.coerce
             .number()
@@ -20,7 +20,7 @@ export default defineAction({
             .trim()
             .min(1)
             .optional()
-            .describe("Optional workspace member email to filter all usage to."),
+            .describe("Optional email of a member of this organization to filter all usage to. Not for customers or other external accounts."),
         appId: z
             .string()
             .trim()

package/dist/actions/list-dispatch-usage-metrics.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-dispatch-usage-metrics.js","sourceRoot":"","sources":["../../src/actions/list-dispatch-usage-metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAEhF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,0uBAA0uB;IAC5uB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,CAAC,CAAC,MAAM;aAChB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,GAAG,CAAC;aACR,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CAAC,0CAA0C,CAAC;QACvD,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;aAChC,OAAO,CAAC,WAAW,CAAC;aACpB,QAAQ,CACP,wFAAwF,CACzF;QACH,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,yDAAyD,CAAC;QACtE,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CACP,+GAA+G,CAChH;KACJ,CAAC;IACF,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,WAAW,EAAE;QACX,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;KACvB;IACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;CACpD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { listDispatchUsageMetrics } from \"../server/lib/usage-metrics-store.js\";\n\nexport default defineAction({\n  description:\n    \"Get personal or workspace-member agent usage and spend, or aggregate app adoption metrics for Dispatch. Workspace results do not include customer/account/company usage or product data; use the relevant workspace app for those. Results may include active users, tracked app actions, app attribution, prompt previews, and recent activity. billing.unit is unknown when historical usage lacks engine metadata or mixes billing sources; monthlyByUser credits are null in that case. Workspace results also include monthlyByUser credit rows and workspaceAppCreationsByUserMonth rows from the shared token_usage and Dispatch audit tables. App scope is aggregate-only and returns daily/weekly active users plus tracked action counts for the selected app.\",\n  schema: z.object({\n    sinceDays: z.coerce\n      .number()\n      .int()\n      .min(1)\n      .max(365)\n      .default(30)\n      .describe(\"Lookback window in days. Defaults to 30.\"),\n    scope: z\n      .enum([\"me\", \"workspace\", \"app\"])\n      .default(\"workspace\")\n      .describe(\n        \"Whether to inspect your account, the whole workspace, or one app's aggregate adoption.\",\n      ),\n    userEmail: z\n      .string()\n      .trim()\n      .min(1)\n      .optional()\n      .describe(\"Optional workspace member email to filter all usage to.\"),\n    appId: z\n      .string()\n      .trim()\n      .min(1)\n      .optional()\n      .describe(\n        \"Workspace app id for scope=app. The app owner or an organization owner/admin can view its aggregate adoption.\",\n      ),\n  }),\n  http: { method: \"GET\" },\n  readOnly: true,\n  parallelSafe: true,\n  publicAgent: {\n    expose: true,\n    readOnly: true,\n    requiresAuth: true,\n    isConsequential: false,\n  },\n  run: async (args) => listDispatchUsageMetrics(args),\n});\n"]}
+{"version":3,"file":"list-dispatch-usage-metrics.js","sourceRoot":"","sources":["../../src/actions/list-dispatch-usage-metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAEhF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,w2BAAw2B;IAC12B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,CAAC,CAAC,MAAM;aAChB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,GAAG,CAAC;aACR,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CAAC,0CAA0C,CAAC;QACvD,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;aAChC,OAAO,CAAC,WAAW,CAAC;aACpB,QAAQ,CACP,wFAAwF,CACzF;QACH,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CACP,uHAAuH,CACxH;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CACP,+GAA+G,CAChH;KACJ,CAAC;IACF,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,WAAW,EAAE;QACX,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;KACvB;IACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;CACpD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core/action\";\nimport { z } from \"zod\";\n\nimport { listDispatchUsageMetrics } from \"../server/lib/usage-metrics-store.js\";\n\nexport default defineAction({\n  description:\n    \"Reports agent/LLM usage and spend for members of this organization (personal or workspace-wide) plus aggregate app adoption for Dispatch; it does NOT cover usage, credits, or activity of external customers, accounts, companies, or product usage, which belong to the app that owns that data (see <relevant-apps>, or search with describe-workspace-apps). Results may include active users, tracked app actions, app attribution, prompt previews, and recent activity. billing.unit is unknown when historical usage lacks engine metadata or mixes billing sources; monthlyByUser credits are null in that case. Workspace results also include monthlyByUser credit rows and workspaceAppCreationsByUserMonth rows from the shared token_usage and Dispatch audit tables. App scope is aggregate-only and returns daily/weekly active users plus tracked action counts for the selected app.\",\n  schema: z.object({\n    sinceDays: z.coerce\n      .number()\n      .int()\n      .min(1)\n      .max(365)\n      .default(30)\n      .describe(\"Lookback window in days. Defaults to 30.\"),\n    scope: z\n      .enum([\"me\", \"workspace\", \"app\"])\n      .default(\"workspace\")\n      .describe(\n        \"Whether to inspect your account, the whole workspace, or one app's aggregate adoption.\",\n      ),\n    userEmail: z\n      .string()\n      .trim()\n      .min(1)\n      .optional()\n      .describe(\n        \"Optional email of a member of this organization to filter all usage to. Not for customers or other external accounts.\",\n      ),\n    appId: z\n      .string()\n      .trim()\n      .min(1)\n      .optional()\n      .describe(\n        \"Workspace app id for scope=app. The app owner or an organization owner/admin can view its aggregate adoption.\",\n      ),\n  }),\n  http: { method: \"GET\" },\n  readOnly: true,\n  parallelSafe: true,\n  publicAgent: {\n    expose: true,\n    readOnly: true,\n    requiresAuth: true,\n    isConsequential: false,\n  },\n  run: async (args) => listDispatchUsageMetrics(args),\n});\n"]}

package/dist/actions/provider-api-register.d.ts

@@ -47,7 +47,10 @@ declare const _default: import("node_modules/@agent-native/core/dist").ActionDef
     notes?: string | undefined;
     scope?: "org" | "user" | undefined;
 }, {
-    message?: undefined;
+    id?: undefined;
+    deleted?: undefined;
+    provider?: undefined;
+    found?: undefined;
     providers: {
         id: string;
         label: string;
@@ -58,48 +61,45 @@ declare const _default: import("node_modules/@agent-native/core/dist").ActionDef
         updatedAt: number;
     }[];
     count: number;
-    provider?: undefined;
-    found?: undefined;
-    deleted?: undefined;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
-} | {
     message?: undefined;
-    providers?: undefined;
+} | {
+    id?: undefined;
+    deleted?: undefined;
     count?: undefined;
+    providers?: undefined;
     found: boolean;
     provider: import("node_modules/@agent-native/core/dist/provider-api").CustomProviderConfig;
-    deleted?: undefined;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
-} | {
     message?: undefined;
-    providers?: undefined;
-    count?: undefined;
+} | {
+    deleted?: undefined;
     provider?: undefined;
+    count?: undefined;
+    providers?: undefined;
     found: boolean;
     id: string;
-    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
-} | {
     message?: undefined;
-    providers?: undefined;
-    count?: undefined;
+} | {
     provider?: undefined;
+    count?: undefined;
     found?: undefined;
+    providers?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
+    message?: undefined;
 } | {
-    providers?: undefined;
-    count?: undefined;
+    deleted?: undefined;
     provider?: undefined;
+    count?: undefined;
     found?: undefined;
-    deleted?: undefined;
+    providers?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/server/lib/community-apps.js

@@ -49,7 +49,7 @@ export const CURATED_COMMUNITY_APP_SOURCES = [
             },
             {
                 path: "package.json",
-                blobSha: "de917f7c794eceef303bb6f5a434ece39a6ab6fd",
+                blobSha: "da9e7b9eb37664a191dfde80406c7d5b350bfe0b",
             },
             {
                 path: "server/db/index.ts",

package/dist/server/lib/community-apps.js.map

@@ -1 +1 @@
-{"version":3,"file":"community-apps.js","sourceRoot":"","sources":["../../../src/server/lib/community-apps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EACL,gCAAgC,EAChC,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAK1D,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,yBAAyB,EACzB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oCAAoC,GAErC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAqB7B,MAAM,CAAC,MAAM,6BAA6B,GACxC;IACE;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,0DAA0D;QACvE,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,wBAAwB;QAC9B,GAAG,EAAE,MAAM;QACX,OAAO,EAAE,KAAK;QACd,UAAU,EACR,mFAAmF;QACrF,YAAY,EAAE,wBAAwB;QACtC,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,kCAAkC;gBACxC,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,6BAA6B;gBACnC,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,0CAA0C;aACpD;SACF;KACF;CACF,CAAC;AAEJ,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,6BAA6B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CACnE,CAAC;AAEF,SAAS,sBAAsB,CAAC,QAAgB;IAC9C,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,mEAAmE,EAAE;YACxE,SAAS,EAAE,8BAA8B;YACzC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAc;IAEd,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,IAAI,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;AACzE,CAAC;AAED,SAAS,iCAAiC,CAAC,KAAa;IACtD,MAAM,KAAK,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,0BAA0B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IACE,2BAA2B,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC;QACrE,yBAAyB,CAAC,QAAQ,CAAC,KAAK,CAAC;QACzC,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,EACvC,CAAC;QACD,IAAI,CAAC,0DAA0D,EAAE;YAC/D,SAAS,EAAE,sCAAsC;YACjD,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB;IACpC,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,sDAAsD,EAAE;YAC3D,SAAS,EAAE,kCAAkC;YAC7C,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,kBAAkB,EAAE;QACrE,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,CAAC,mEAAmE,EAAE;YACxE,SAAS,EAAE,6BAA6B;YACxC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,YAAY,GAAG,yBAAyB,EAAE;IAE1C,IAAI,YAAY;QAAE,OAAO,OAAO,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO,OAAO,CAAC,CAAC,MAAM,sBAAsB,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAG5C,MAAM,uBAAuB,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,yBAAyB,EAAE,CAAC;IACjD,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QACtE,sBAAsB,CAAC,YAAY,CAAC;KACrC,CAAC,CAAC;IACH,OAAO,6BAA6B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,YAAY,GAChB,SAAS,EAAE,iBAAiB,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,YAAY,EAAE,MAAM,KAAK,SAAS,CAAC;QACnD,MAAM,wBAAwB,GAAG,SAAS;YACxC,CAAC,CAAC,UAAU;gBACV,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,SAAS;YACb,CAAC,CAAC,CAAC,kBAAkB;gBACnB,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,CAAC,YAAY;oBACb,CAAC,CAAC,4BAA4B;oBAC9B,CAAC,CAAC,SAAS,CAAC;QAClB,OAAO;YACL,GAAG,MAAM;YACT,SAAS,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC;YAC5C,OAAO;YACP,WAAW,EAAE,YAAY,IAAI,kBAAkB,IAAI,CAAC,SAAS;YAC7D,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAa;IACjD,IAAI,CAAC,qBAAqB,KAAK,sBAAsB,EAAE;QACrD,SAAS,EAAE,2BAA2B;QACtC,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAiC,EACjC,GAAwB;IAExB,OAAO;QACL,IAAI,EACF,GAAG,CAAC,MAAM,KAAK,SAAS;YACtB,CAAC,CAAE,SAAmB;YACtB,CAAC,CAAE,mBAA6B;QACpC,MAAM;QACN,GAAG,EAAE;YACH,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,OAAO;YAC7B,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;YACpC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;YAClC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;SACnC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,MAAiC,EACjC,KAAa;IAEb,MAAM,SAAS,GAAG,sBAAsB,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;IAChG,OAAO;QACL,qEAAqE;QACrE,+CAA+C,SAAS,6JAA6J;QACrN,6BAA6B,KAAK,GAAG;QACrC,mBAAmB,MAAM,CAAC,OAAO,iBAAiB,MAAM,CAAC,UAAU,EAAE;QACrE,6TAA6T;KAC9T,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAGhD;IAUC,MAAM,uBAAuB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3E,iCAAiC,CAAC,KAAK,CAAC,CAAC;IAEzC,MAAM,YAAY,GAAG,yBAAyB,EAAE,CAAC;IACjD,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,kEAAkE,EAAE;YACvE,SAAS,EAAE,8BAA8B;YACzC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,CACf,MAAM,iBAAiB,CAAC;QACtB,iBAAiB,EAAE,KAAK;QACxB,eAAe,EAAE,IAAI;KACtB,CAAC,CACH,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;IAClC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,iBAAiB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;YAC7C,OAAO,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QACD,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,IAAI,CACF,gIAAgI,EAChI;YACE,SAAS,EAAE,sCAAsC;YACjD,UAAU,EAAE,GAAG;SAChB,CACF,CAAC;IACJ,CAAC;IAED,IAAI,WAEH,CAAC;IACF,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,oCAAoC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CACF,kFAAkF,EAClF;YACE,SAAS,EACP,0BAA0B,CAAC,KAAK,CAAC,KAAK,WAAW;gBAC/C,CAAC,CAAC,mCAAmC;gBACrC,CAAC,CAAC,8BAA8B;YACpC,UAAU,EAAE,GAAG;SAChB,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC;QAC7C,MAAM,EAAE,2BAA2B,CAAC,MAAM,EAAE,KAAK,CAAC;QAClD,KAAK;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,iBAAiB,EAAE,MAAM,CAAC,EAAE;QAC5B,WAAW;KACZ,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,CACZ,MAAM,iBAAiB,CAAC;YACtB,iBAAiB,EAAE,KAAK;YACxB,eAAe,EAAE,IAAI;SACtB,CAAC,CACH,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,iBAAiB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;YAC3C,OAAO,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,KAAK;YAAE,4BAA4B,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,2CAA2C;QACnD,UAAU,EAAE,eAAe;QAC3B,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,aAAa,MAAM,CAAC,IAAI,6BAA6B;QAC9D,QAAQ,EAAE;YACR,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;YAClD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB;KACF,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAEzB,CAAC;AACJ,CAAC","sourcesContent":["import { fail } from \"@agent-native/core/action\";\nimport { getUserLabEnabled } from \"@agent-native/core/labs/server\";\nimport {\n  getWorkspaceAppIdValidationError,\n  normalizeWorkspaceAppId,\n} from \"@agent-native/core/shared\";\nimport {\n  BUILTIN_AGENT_CATALOG_IDS,\n  HIDDEN_FIRST_PARTY_AGENT_IDS,\n} from \"@agent-native/core/shared/first-party-agents\";\n\nimport { COMMUNITY_APPS_LAB } from \"../../shared/labs.js\";\nimport type {\n  StartWorkspaceAppCreationResult,\n  WorkspaceAppSummary,\n} from \"./app-creation-store.js\";\nimport {\n  getAppCreationSettings,\n  getWorkspaceInfo,\n  isLocalAppCreationRuntime,\n  listWorkspaceApps,\n  startWorkspaceAppCreation,\n} from \"./app-creation-store.js\";\nimport {\n  loadPinnedCommunitySourceAttachments,\n  type PinnedCommunitySource,\n} from \"./community-source.js\";\nimport { CURATED_WORKSPACE_TEMPLATES } from \"./curated-workspace-templates.js\";\nimport {\n  currentOrgId,\n  currentOwnerEmail,\n  recordAudit,\n} from \"./dispatch-store.js\";\n\nexport interface CuratedCommunityAppSource extends PinnedCommunitySource {\n  id: string;\n  name: string;\n  description: string;\n  appId: string;\n  license: string;\n  provenance: string;\n}\n\nexport interface CuratedCommunityApp extends CuratedCommunityAppSource {\n  installed: boolean;\n  pending: boolean;\n  installable: boolean;\n  installUnavailableReason?:\n    | \"workspace-required\"\n    | \"app-id-conflict\"\n    | \"builder-install-unverified\";\n}\n\nexport const CURATED_COMMUNITY_APP_SOURCES: readonly CuratedCommunityAppSource[] =\n  [\n    {\n      id: \"community-qr\",\n      name: \"QR\",\n      description: \"Generate public PNG or SVG QR images from links or text.\",\n      appId: \"community-qr\",\n      repo: \"BuilderIO/agent-native\",\n      ref: \"main\",\n      license: \"MIT\",\n      provenance:\n        \"Reviewed Agent-Native Framework template, sanitized for independent installation.\",\n      templatePath: \"templates/community/qr\",\n      files: [\n        {\n          path: \"AGENTS.md\",\n          blobSha: \"7dc9e18bc426dfd21526f91225cc615759450816\",\n        },\n        {\n          path: \"LICENSE\",\n          blobSha: \"69c7182efb3eb1a8b7f6fd5989f3e4fd737d0645\",\n        },\n        {\n          path: \"README.md\",\n          blobSha: \"e05e72bb9213732f56ccbc96f7dcb1c3a064cb19\",\n        },\n        {\n          path: \"actions/generate-qr-code.spec.ts\",\n          blobSha: \"3459217b7252c6ee0076c68cfdb83001cc74f29e\",\n        },\n        {\n          path: \"actions/generate-qr-code.ts\",\n          blobSha: \"98d30e218bfed796d5e402d5ce19a8626d8da0cf\",\n        },\n        {\n          path: \"actions/run.ts\",\n          blobSha: \"b46ab15b667c34741364ba08f010f7aca9d0f02e\",\n        },\n        {\n          path: \"agent-native.json\",\n          blobSha: \"accc32476792b84557f69e2b48b317c27b5546dc\",\n        },\n        {\n          path: \"package.json\",\n          blobSha: \"de917f7c794eceef303bb6f5a434ece39a6ab6fd\",\n        },\n        {\n          path: \"server/db/index.ts\",\n          blobSha: \"17007b456530f75a72e7209bdfe9f4bd4c9224e0\",\n        },\n        {\n          path: \"server/db/schema.ts\",\n          blobSha: \"2e4cd01c5f46463e78bc7beb6e954f3e526c0b57\",\n        },\n        {\n          path: \"server/plugins/db.ts\",\n          blobSha: \"78a5b431c1ad1ea14f593123c090f5376a36df10\",\n        },\n        {\n          path: \"tsconfig.json\",\n          blobSha: \"5267473a32dcab8e5dc2c9d9a720afed7f40174c\",\n        },\n      ],\n    },\n  ];\n\nconst communitySourceById = new Map(\n  CURATED_COMMUNITY_APP_SOURCES.map((source) => [source.id, source]),\n);\n\nfunction requireCommunitySource(sourceId: string): CuratedCommunityAppSource {\n  const source = communitySourceById.get(sourceId.trim());\n  if (!source) {\n    fail(\"That community app is not in Dispatch's reviewed install catalog.\", {\n      errorCode: \"unknown_community_app_source\",\n      statusCode: 404,\n    });\n  }\n  return source;\n}\n\nfunction communitySourceFailureKind(\n  error: unknown,\n): \"unavailable\" | \"integrity\" {\n  if (!(error instanceof Error) || !(\"failureKind\" in error)) {\n    return \"unavailable\";\n  }\n  return error.failureKind === \"integrity\" ? \"integrity\" : \"unavailable\";\n}\n\nfunction requireNonShadowingCommunityAppId(appId: string): void {\n  const error = getWorkspaceAppIdValidationError(appId);\n  if (error) {\n    fail(error, { errorCode: \"invalid_community_app_id\", statusCode: 400 });\n  }\n  if (\n    CURATED_WORKSPACE_TEMPLATES.some((template) => template.id === appId) ||\n    BUILTIN_AGENT_CATALOG_IDS.includes(appId) ||\n    HIDDEN_FIRST_PARTY_AGENT_IDS.has(appId)\n  ) {\n    fail(\"Community apps cannot use a first-party template app id.\", {\n      errorCode: \"community_app_id_shadows_first_party\",\n      statusCode: 409,\n    });\n  }\n}\n\nasync function requireCommunityAppsLab(): Promise<void> {\n  const userEmail = currentOwnerEmail().trim();\n  const orgId = currentOrgId();\n  if (!userEmail || !orgId) {\n    fail(\"Sign in to an organization to browse community apps.\", {\n      errorCode: \"community_apps_identity_required\",\n      statusCode: 403,\n    });\n  }\n  const enabled = await getUserLabEnabled(userEmail, COMMUNITY_APPS_LAB, {\n    orgId,\n  });\n  if (!enabled) {\n    fail(\"Community app catalog and installs are disabled for this account.\", {\n      errorCode: \"community_apps_lab_disabled\",\n      statusCode: 403,\n    });\n  }\n}\n\nasync function hasAssociatedWorkspace(\n  localRuntime = isLocalAppCreationRuntime(),\n): Promise<boolean> {\n  if (localRuntime) return Boolean(getWorkspaceInfo().rootPath);\n  return Boolean((await getAppCreationSettings()).builderProjectId);\n}\n\nexport async function listCuratedCommunityApps(): Promise<\n  CuratedCommunityApp[]\n> {\n  await requireCommunityAppsLab();\n  const localRuntime = isLocalAppCreationRuntime();\n  const [apps, workspaceAvailable] = await Promise.all([\n    listWorkspaceApps({ includeAgentCards: false, includeArchived: true }),\n    hasAssociatedWorkspace(localRuntime),\n  ]);\n  return CURATED_COMMUNITY_APP_SOURCES.map((source) => {\n    const appWithId = apps.find((app) => app.id === source.appId);\n    const installedApp =\n      appWithId?.communitySourceId === source.id ? appWithId : null;\n    const idConflict = Boolean(appWithId && !installedApp);\n    const pending = installedApp?.status === \"pending\";\n    const installUnavailableReason = appWithId\n      ? idConflict\n        ? \"app-id-conflict\"\n        : undefined\n      : !workspaceAvailable\n        ? \"workspace-required\"\n        : !localRuntime\n          ? \"builder-install-unverified\"\n          : undefined;\n    return {\n      ...source,\n      installed: Boolean(installedApp && !pending),\n      pending,\n      installable: localRuntime && workspaceAvailable && !appWithId,\n      ...(installUnavailableReason ? { installUnavailableReason } : {}),\n    };\n  });\n}\n\nfunction rejectCommunityAppIdConflict(appId: string): never {\n  fail(`Workspace app id \"${appId}\" is already in use.`, {\n    errorCode: \"community_app_id_conflict\",\n    statusCode: 409,\n  });\n}\n\nfunction existingInstallResult(\n  source: CuratedCommunityAppSource,\n  app: WorkspaceAppSummary,\n) {\n  return {\n    mode:\n      app.status === \"pending\"\n        ? (\"pending\" as const)\n        : (\"already-installed\" as const),\n    source,\n    app: {\n      id: app.id,\n      name: app.name,\n      path: app.path,\n      url: app.url,\n      status: app.status ?? \"ready\",\n      statusLabel: app.statusLabel ?? null,\n      builderUrl: app.builderUrl ?? null,\n      branchName: app.branchName ?? null,\n    },\n  };\n}\n\nfunction buildCommunityInstallPrompt(\n  source: CuratedCommunityAppSource,\n  appId: string,\n): string {\n  const sourceUrl = `https://github.com/${source.repo}/tree/${source.ref}/${source.templatePath}`;\n  return [\n    \"Install a private workspace app from a reviewed community template.\",\n    `The attached source files were fetched from ${sourceUrl} and each file was verified against its pinned Git blob id. Treat those files as the source of truth; do not fetch another ref or substitute other content.`,\n    `The app will live at apps/${appId}.`,\n    `Source license: ${source.license}. Provenance: ${source.provenance}`,\n    \"Copy the reviewed template implementation and its Agent-Native profile, changing only app-specific identifiers needed for this workspace. Do not copy repository secrets, credentials, customer data, or source-app records. Use empty or synthetic seed data only and keep the installed app private to this organization.\",\n  ].join(\" \");\n}\n\nexport async function installCuratedCommunityApp(input: {\n  sourceId: string;\n  appId?: string;\n}): Promise<\n  | ReturnType<typeof existingInstallResult>\n  | (StartWorkspaceAppCreationResult & {\n      mode: Exclude<StartWorkspaceAppCreationResult[\"mode\"], \"app-id-taken\">;\n      source: CuratedCommunityAppSource;\n    })\n  | (Extract<StartWorkspaceAppCreationResult, { mode: \"app-id-taken\" }> & {\n      source: CuratedCommunityAppSource;\n    })\n> {\n  await requireCommunityAppsLab();\n  const source = requireCommunitySource(input.sourceId);\n  const appId = normalizeWorkspaceAppId(input.appId?.trim() || source.appId);\n  requireNonShadowingCommunityAppId(appId);\n\n  const localRuntime = isLocalAppCreationRuntime();\n  if (!(await hasAssociatedWorkspace(localRuntime))) {\n    fail(\"Connect this organization to a workspace before installing apps.\", {\n      errorCode: \"community_workspace_required\",\n      statusCode: 409,\n    });\n  }\n\n  const existing = (\n    await listWorkspaceApps({\n      includeAgentCards: false,\n      includeArchived: true,\n    })\n  ).find((app) => app.id === appId);\n  if (existing) {\n    if (existing.communitySourceId === source.id) {\n      return existingInstallResult(source, existing);\n    }\n    rejectCommunityAppIdConflict(appId);\n  }\n\n  if (!localRuntime) {\n    fail(\n      \"Community template installs in Builder workspaces are disabled until the generated branch files can be read back and verified.\",\n      {\n        errorCode: \"community_builder_install_unverified\",\n        statusCode: 503,\n      },\n    );\n  }\n\n  let attachments: Awaited<\n    ReturnType<typeof loadPinnedCommunitySourceAttachments>\n  >;\n  try {\n    attachments = await loadPinnedCommunitySourceAttachments(source, appId);\n  } catch (error) {\n    fail(\n      \"Dispatch could not verify the pinned community template source. Try again later.\",\n      {\n        errorCode:\n          communitySourceFailureKind(error) === \"integrity\"\n            ? \"community_source_integrity_failed\"\n            : \"community_source_unavailable\",\n        statusCode: 503,\n      },\n    );\n  }\n\n  const result = await startWorkspaceAppCreation({\n    prompt: buildCommunityInstallPrompt(source, appId),\n    appId,\n    description: source.description,\n    template: source.id,\n    communitySourceId: source.id,\n    attachments,\n  });\n\n  if (result.mode === \"app-id-taken\") {\n    const raced = (\n      await listWorkspaceApps({\n        includeAgentCards: false,\n        includeArchived: true,\n      })\n    ).find((app) => app.id === appId);\n    if (raced?.communitySourceId === source.id) {\n      return existingInstallResult(source, raced);\n    }\n    if (raced) rejectCommunityAppIdConflict(appId);\n    return { ...result, source };\n  }\n\n  await recordAudit({\n    action: \"workspace-app.community-install-requested\",\n    targetType: \"workspace-app\",\n    targetId: appId,\n    summary: `Requested ${source.name} community app installation`,\n    metadata: {\n      sourceId: source.id,\n      repo: source.repo,\n      ref: source.ref,\n      blobShas: source.files.map((file) => file.blobSha),\n      license: source.license,\n    },\n  });\n  return { ...result, source } as typeof result & {\n    source: CuratedCommunityAppSource;\n  };\n}\n"]}
+{"version":3,"file":"community-apps.js","sourceRoot":"","sources":["../../../src/server/lib/community-apps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EACL,gCAAgC,EAChC,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAK1D,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,yBAAyB,EACzB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oCAAoC,GAErC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAqB7B,MAAM,CAAC,MAAM,6BAA6B,GACxC;IACE;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,0DAA0D;QACvE,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,wBAAwB;QAC9B,GAAG,EAAE,MAAM;QACX,OAAO,EAAE,KAAK;QACd,UAAU,EACR,mFAAmF;QACrF,YAAY,EAAE,wBAAwB;QACtC,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,kCAAkC;gBACxC,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,6BAA6B;gBACnC,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,0CAA0C;aACpD;SACF;KACF;CACF,CAAC;AAEJ,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,6BAA6B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CACnE,CAAC;AAEF,SAAS,sBAAsB,CAAC,QAAgB;IAC9C,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,mEAAmE,EAAE;YACxE,SAAS,EAAE,8BAA8B;YACzC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAc;IAEd,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,IAAI,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;AACzE,CAAC;AAED,SAAS,iCAAiC,CAAC,KAAa;IACtD,MAAM,KAAK,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,0BAA0B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IACE,2BAA2B,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC;QACrE,yBAAyB,CAAC,QAAQ,CAAC,KAAK,CAAC;QACzC,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,EACvC,CAAC;QACD,IAAI,CAAC,0DAA0D,EAAE;YAC/D,SAAS,EAAE,sCAAsC;YACjD,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB;IACpC,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,sDAAsD,EAAE;YAC3D,SAAS,EAAE,kCAAkC;YAC7C,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,kBAAkB,EAAE;QACrE,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,CAAC,mEAAmE,EAAE;YACxE,SAAS,EAAE,6BAA6B;YACxC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,YAAY,GAAG,yBAAyB,EAAE;IAE1C,IAAI,YAAY;QAAE,OAAO,OAAO,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO,OAAO,CAAC,CAAC,MAAM,sBAAsB,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAG5C,MAAM,uBAAuB,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,yBAAyB,EAAE,CAAC;IACjD,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QACtE,sBAAsB,CAAC,YAAY,CAAC;KACrC,CAAC,CAAC;IACH,OAAO,6BAA6B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,YAAY,GAChB,SAAS,EAAE,iBAAiB,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,YAAY,EAAE,MAAM,KAAK,SAAS,CAAC;QACnD,MAAM,wBAAwB,GAAG,SAAS;YACxC,CAAC,CAAC,UAAU;gBACV,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,SAAS;YACb,CAAC,CAAC,CAAC,kBAAkB;gBACnB,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,CAAC,YAAY;oBACb,CAAC,CAAC,4BAA4B;oBAC9B,CAAC,CAAC,SAAS,CAAC;QAClB,OAAO;YACL,GAAG,MAAM;YACT,SAAS,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC;YAC5C,OAAO;YACP,WAAW,EAAE,YAAY,IAAI,kBAAkB,IAAI,CAAC,SAAS;YAC7D,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAa;IACjD,IAAI,CAAC,qBAAqB,KAAK,sBAAsB,EAAE;QACrD,SAAS,EAAE,2BAA2B;QACtC,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAiC,EACjC,GAAwB;IAExB,OAAO;QACL,IAAI,EACF,GAAG,CAAC,MAAM,KAAK,SAAS;YACtB,CAAC,CAAE,SAAmB;YACtB,CAAC,CAAE,mBAA6B;QACpC,MAAM;QACN,GAAG,EAAE;YACH,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,OAAO;YAC7B,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;YACpC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;YAClC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;SACnC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,MAAiC,EACjC,KAAa;IAEb,MAAM,SAAS,GAAG,sBAAsB,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;IAChG,OAAO;QACL,qEAAqE;QACrE,+CAA+C,SAAS,6JAA6J;QACrN,6BAA6B,KAAK,GAAG;QACrC,mBAAmB,MAAM,CAAC,OAAO,iBAAiB,MAAM,CAAC,UAAU,EAAE;QACrE,6TAA6T;KAC9T,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAGhD;IAUC,MAAM,uBAAuB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3E,iCAAiC,CAAC,KAAK,CAAC,CAAC;IAEzC,MAAM,YAAY,GAAG,yBAAyB,EAAE,CAAC;IACjD,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,kEAAkE,EAAE;YACvE,SAAS,EAAE,8BAA8B;YACzC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,CACf,MAAM,iBAAiB,CAAC;QACtB,iBAAiB,EAAE,KAAK;QACxB,eAAe,EAAE,IAAI;KACtB,CAAC,CACH,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;IAClC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,iBAAiB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;YAC7C,OAAO,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QACD,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,IAAI,CACF,gIAAgI,EAChI;YACE,SAAS,EAAE,sCAAsC;YACjD,UAAU,EAAE,GAAG;SAChB,CACF,CAAC;IACJ,CAAC;IAED,IAAI,WAEH,CAAC;IACF,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,oCAAoC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CACF,kFAAkF,EAClF;YACE,SAAS,EACP,0BAA0B,CAAC,KAAK,CAAC,KAAK,WAAW;gBAC/C,CAAC,CAAC,mCAAmC;gBACrC,CAAC,CAAC,8BAA8B;YACpC,UAAU,EAAE,GAAG;SAChB,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC;QAC7C,MAAM,EAAE,2BAA2B,CAAC,MAAM,EAAE,KAAK,CAAC;QAClD,KAAK;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,iBAAiB,EAAE,MAAM,CAAC,EAAE;QAC5B,WAAW;KACZ,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,CACZ,MAAM,iBAAiB,CAAC;YACtB,iBAAiB,EAAE,KAAK;YACxB,eAAe,EAAE,IAAI;SACtB,CAAC,CACH,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,iBAAiB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;YAC3C,OAAO,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,KAAK;YAAE,4BAA4B,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,2CAA2C;QACnD,UAAU,EAAE,eAAe;QAC3B,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,aAAa,MAAM,CAAC,IAAI,6BAA6B;QAC9D,QAAQ,EAAE;YACR,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;YAClD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB;KACF,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAEzB,CAAC;AACJ,CAAC","sourcesContent":["import { fail } from \"@agent-native/core/action\";\nimport { getUserLabEnabled } from \"@agent-native/core/labs/server\";\nimport {\n  getWorkspaceAppIdValidationError,\n  normalizeWorkspaceAppId,\n} from \"@agent-native/core/shared\";\nimport {\n  BUILTIN_AGENT_CATALOG_IDS,\n  HIDDEN_FIRST_PARTY_AGENT_IDS,\n} from \"@agent-native/core/shared/first-party-agents\";\n\nimport { COMMUNITY_APPS_LAB } from \"../../shared/labs.js\";\nimport type {\n  StartWorkspaceAppCreationResult,\n  WorkspaceAppSummary,\n} from \"./app-creation-store.js\";\nimport {\n  getAppCreationSettings,\n  getWorkspaceInfo,\n  isLocalAppCreationRuntime,\n  listWorkspaceApps,\n  startWorkspaceAppCreation,\n} from \"./app-creation-store.js\";\nimport {\n  loadPinnedCommunitySourceAttachments,\n  type PinnedCommunitySource,\n} from \"./community-source.js\";\nimport { CURATED_WORKSPACE_TEMPLATES } from \"./curated-workspace-templates.js\";\nimport {\n  currentOrgId,\n  currentOwnerEmail,\n  recordAudit,\n} from \"./dispatch-store.js\";\n\nexport interface CuratedCommunityAppSource extends PinnedCommunitySource {\n  id: string;\n  name: string;\n  description: string;\n  appId: string;\n  license: string;\n  provenance: string;\n}\n\nexport interface CuratedCommunityApp extends CuratedCommunityAppSource {\n  installed: boolean;\n  pending: boolean;\n  installable: boolean;\n  installUnavailableReason?:\n    | \"workspace-required\"\n    | \"app-id-conflict\"\n    | \"builder-install-unverified\";\n}\n\nexport const CURATED_COMMUNITY_APP_SOURCES: readonly CuratedCommunityAppSource[] =\n  [\n    {\n      id: \"community-qr\",\n      name: \"QR\",\n      description: \"Generate public PNG or SVG QR images from links or text.\",\n      appId: \"community-qr\",\n      repo: \"BuilderIO/agent-native\",\n      ref: \"main\",\n      license: \"MIT\",\n      provenance:\n        \"Reviewed Agent-Native Framework template, sanitized for independent installation.\",\n      templatePath: \"templates/community/qr\",\n      files: [\n        {\n          path: \"AGENTS.md\",\n          blobSha: \"7dc9e18bc426dfd21526f91225cc615759450816\",\n        },\n        {\n          path: \"LICENSE\",\n          blobSha: \"69c7182efb3eb1a8b7f6fd5989f3e4fd737d0645\",\n        },\n        {\n          path: \"README.md\",\n          blobSha: \"e05e72bb9213732f56ccbc96f7dcb1c3a064cb19\",\n        },\n        {\n          path: \"actions/generate-qr-code.spec.ts\",\n          blobSha: \"3459217b7252c6ee0076c68cfdb83001cc74f29e\",\n        },\n        {\n          path: \"actions/generate-qr-code.ts\",\n          blobSha: \"98d30e218bfed796d5e402d5ce19a8626d8da0cf\",\n        },\n        {\n          path: \"actions/run.ts\",\n          blobSha: \"b46ab15b667c34741364ba08f010f7aca9d0f02e\",\n        },\n        {\n          path: \"agent-native.json\",\n          blobSha: \"accc32476792b84557f69e2b48b317c27b5546dc\",\n        },\n        {\n          path: \"package.json\",\n          blobSha: \"da9e7b9eb37664a191dfde80406c7d5b350bfe0b\",\n        },\n        {\n          path: \"server/db/index.ts\",\n          blobSha: \"17007b456530f75a72e7209bdfe9f4bd4c9224e0\",\n        },\n        {\n          path: \"server/db/schema.ts\",\n          blobSha: \"2e4cd01c5f46463e78bc7beb6e954f3e526c0b57\",\n        },\n        {\n          path: \"server/plugins/db.ts\",\n          blobSha: \"78a5b431c1ad1ea14f593123c090f5376a36df10\",\n        },\n        {\n          path: \"tsconfig.json\",\n          blobSha: \"5267473a32dcab8e5dc2c9d9a720afed7f40174c\",\n        },\n      ],\n    },\n  ];\n\nconst communitySourceById = new Map(\n  CURATED_COMMUNITY_APP_SOURCES.map((source) => [source.id, source]),\n);\n\nfunction requireCommunitySource(sourceId: string): CuratedCommunityAppSource {\n  const source = communitySourceById.get(sourceId.trim());\n  if (!source) {\n    fail(\"That community app is not in Dispatch's reviewed install catalog.\", {\n      errorCode: \"unknown_community_app_source\",\n      statusCode: 404,\n    });\n  }\n  return source;\n}\n\nfunction communitySourceFailureKind(\n  error: unknown,\n): \"unavailable\" | \"integrity\" {\n  if (!(error instanceof Error) || !(\"failureKind\" in error)) {\n    return \"unavailable\";\n  }\n  return error.failureKind === \"integrity\" ? \"integrity\" : \"unavailable\";\n}\n\nfunction requireNonShadowingCommunityAppId(appId: string): void {\n  const error = getWorkspaceAppIdValidationError(appId);\n  if (error) {\n    fail(error, { errorCode: \"invalid_community_app_id\", statusCode: 400 });\n  }\n  if (\n    CURATED_WORKSPACE_TEMPLATES.some((template) => template.id === appId) ||\n    BUILTIN_AGENT_CATALOG_IDS.includes(appId) ||\n    HIDDEN_FIRST_PARTY_AGENT_IDS.has(appId)\n  ) {\n    fail(\"Community apps cannot use a first-party template app id.\", {\n      errorCode: \"community_app_id_shadows_first_party\",\n      statusCode: 409,\n    });\n  }\n}\n\nasync function requireCommunityAppsLab(): Promise<void> {\n  const userEmail = currentOwnerEmail().trim();\n  const orgId = currentOrgId();\n  if (!userEmail || !orgId) {\n    fail(\"Sign in to an organization to browse community apps.\", {\n      errorCode: \"community_apps_identity_required\",\n      statusCode: 403,\n    });\n  }\n  const enabled = await getUserLabEnabled(userEmail, COMMUNITY_APPS_LAB, {\n    orgId,\n  });\n  if (!enabled) {\n    fail(\"Community app catalog and installs are disabled for this account.\", {\n      errorCode: \"community_apps_lab_disabled\",\n      statusCode: 403,\n    });\n  }\n}\n\nasync function hasAssociatedWorkspace(\n  localRuntime = isLocalAppCreationRuntime(),\n): Promise<boolean> {\n  if (localRuntime) return Boolean(getWorkspaceInfo().rootPath);\n  return Boolean((await getAppCreationSettings()).builderProjectId);\n}\n\nexport async function listCuratedCommunityApps(): Promise<\n  CuratedCommunityApp[]\n> {\n  await requireCommunityAppsLab();\n  const localRuntime = isLocalAppCreationRuntime();\n  const [apps, workspaceAvailable] = await Promise.all([\n    listWorkspaceApps({ includeAgentCards: false, includeArchived: true }),\n    hasAssociatedWorkspace(localRuntime),\n  ]);\n  return CURATED_COMMUNITY_APP_SOURCES.map((source) => {\n    const appWithId = apps.find((app) => app.id === source.appId);\n    const installedApp =\n      appWithId?.communitySourceId === source.id ? appWithId : null;\n    const idConflict = Boolean(appWithId && !installedApp);\n    const pending = installedApp?.status === \"pending\";\n    const installUnavailableReason = appWithId\n      ? idConflict\n        ? \"app-id-conflict\"\n        : undefined\n      : !workspaceAvailable\n        ? \"workspace-required\"\n        : !localRuntime\n          ? \"builder-install-unverified\"\n          : undefined;\n    return {\n      ...source,\n      installed: Boolean(installedApp && !pending),\n      pending,\n      installable: localRuntime && workspaceAvailable && !appWithId,\n      ...(installUnavailableReason ? { installUnavailableReason } : {}),\n    };\n  });\n}\n\nfunction rejectCommunityAppIdConflict(appId: string): never {\n  fail(`Workspace app id \"${appId}\" is already in use.`, {\n    errorCode: \"community_app_id_conflict\",\n    statusCode: 409,\n  });\n}\n\nfunction existingInstallResult(\n  source: CuratedCommunityAppSource,\n  app: WorkspaceAppSummary,\n) {\n  return {\n    mode:\n      app.status === \"pending\"\n        ? (\"pending\" as const)\n        : (\"already-installed\" as const),\n    source,\n    app: {\n      id: app.id,\n      name: app.name,\n      path: app.path,\n      url: app.url,\n      status: app.status ?? \"ready\",\n      statusLabel: app.statusLabel ?? null,\n      builderUrl: app.builderUrl ?? null,\n      branchName: app.branchName ?? null,\n    },\n  };\n}\n\nfunction buildCommunityInstallPrompt(\n  source: CuratedCommunityAppSource,\n  appId: string,\n): string {\n  const sourceUrl = `https://github.com/${source.repo}/tree/${source.ref}/${source.templatePath}`;\n  return [\n    \"Install a private workspace app from a reviewed community template.\",\n    `The attached source files were fetched from ${sourceUrl} and each file was verified against its pinned Git blob id. Treat those files as the source of truth; do not fetch another ref or substitute other content.`,\n    `The app will live at apps/${appId}.`,\n    `Source license: ${source.license}. Provenance: ${source.provenance}`,\n    \"Copy the reviewed template implementation and its Agent-Native profile, changing only app-specific identifiers needed for this workspace. Do not copy repository secrets, credentials, customer data, or source-app records. Use empty or synthetic seed data only and keep the installed app private to this organization.\",\n  ].join(\" \");\n}\n\nexport async function installCuratedCommunityApp(input: {\n  sourceId: string;\n  appId?: string;\n}): Promise<\n  | ReturnType<typeof existingInstallResult>\n  | (StartWorkspaceAppCreationResult & {\n      mode: Exclude<StartWorkspaceAppCreationResult[\"mode\"], \"app-id-taken\">;\n      source: CuratedCommunityAppSource;\n    })\n  | (Extract<StartWorkspaceAppCreationResult, { mode: \"app-id-taken\" }> & {\n      source: CuratedCommunityAppSource;\n    })\n> {\n  await requireCommunityAppsLab();\n  const source = requireCommunitySource(input.sourceId);\n  const appId = normalizeWorkspaceAppId(input.appId?.trim() || source.appId);\n  requireNonShadowingCommunityAppId(appId);\n\n  const localRuntime = isLocalAppCreationRuntime();\n  if (!(await hasAssociatedWorkspace(localRuntime))) {\n    fail(\"Connect this organization to a workspace before installing apps.\", {\n      errorCode: \"community_workspace_required\",\n      statusCode: 409,\n    });\n  }\n\n  const existing = (\n    await listWorkspaceApps({\n      includeAgentCards: false,\n      includeArchived: true,\n    })\n  ).find((app) => app.id === appId);\n  if (existing) {\n    if (existing.communitySourceId === source.id) {\n      return existingInstallResult(source, existing);\n    }\n    rejectCommunityAppIdConflict(appId);\n  }\n\n  if (!localRuntime) {\n    fail(\n      \"Community template installs in Builder workspaces are disabled until the generated branch files can be read back and verified.\",\n      {\n        errorCode: \"community_builder_install_unverified\",\n        statusCode: 503,\n      },\n    );\n  }\n\n  let attachments: Awaited<\n    ReturnType<typeof loadPinnedCommunitySourceAttachments>\n  >;\n  try {\n    attachments = await loadPinnedCommunitySourceAttachments(source, appId);\n  } catch (error) {\n    fail(\n      \"Dispatch could not verify the pinned community template source. Try again later.\",\n      {\n        errorCode:\n          communitySourceFailureKind(error) === \"integrity\"\n            ? \"community_source_integrity_failed\"\n            : \"community_source_unavailable\",\n        statusCode: 503,\n      },\n    );\n  }\n\n  const result = await startWorkspaceAppCreation({\n    prompt: buildCommunityInstallPrompt(source, appId),\n    appId,\n    description: source.description,\n    template: source.id,\n    communitySourceId: source.id,\n    attachments,\n  });\n\n  if (result.mode === \"app-id-taken\") {\n    const raced = (\n      await listWorkspaceApps({\n        includeAgentCards: false,\n        includeArchived: true,\n      })\n    ).find((app) => app.id === appId);\n    if (raced?.communitySourceId === source.id) {\n      return existingInstallResult(source, raced);\n    }\n    if (raced) rejectCommunityAppIdConflict(appId);\n    return { ...result, source };\n  }\n\n  await recordAudit({\n    action: \"workspace-app.community-install-requested\",\n    targetType: \"workspace-app\",\n    targetId: appId,\n    summary: `Requested ${source.name} community app installation`,\n    metadata: {\n      sourceId: source.id,\n      repo: source.repo,\n      ref: source.ref,\n      blobShas: source.files.map((file) => file.blobSha),\n      license: source.license,\n    },\n  });\n  return { ...result, source } as typeof result & {\n    source: CuratedCommunityAppSource;\n  };\n}\n"]}

package/dist/server/lib/mcp-gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-gateway.d.ts","sourceRoot":"","sources":["../../../src/server/lib/mcp-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAQL,KAAK,2BAA2B,EAChC,KAAK,IAAI,EACV,MAAM,wBAAwB,CAAC;AA+BhC,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,uBAAuB,CAAC;AA8B/B,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AA2DD,KAAK,uBAAuB,GAAG,2BAA2B,CAAC;AAiC3D,KAAK,iCAAiC,GAClC,WAAW,GACX,SAAS,GACT,cAAc,GACd,cAAc,CAAC;AAEnB,KAAK,wBAAwB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,KAAK,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,aAAa,CAAC,EAAE,iCAAiC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,SAAS,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,iBAAS,wBAAwB,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE;IACR,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GACA,wBAAwB,CA8C1B;AAiaD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC;IACnD,QAAQ,EAAE,4BAA4B,CAAC;IACvC,IAAI,EAAE,wBAAwB,EAAE,CAAC;CAClC,CAAC,CAcD;AAED,wBAAsB,0BAA0B,IAAI,OAAO,CACzD,wBAAwB,EAAE,CAC3B,CAGA;AAED,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAG1E;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,wBAAwB,CAAC,CAwBnC;AAqFD,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD,OAAO,CAAC,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAqDtD;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAoEnC;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC,CAkDD;AAkSD,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAWD;AA0FD,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAwCD"}
+{"version":3,"file":"mcp-gateway.d.ts","sourceRoot":"","sources":["../../../src/server/lib/mcp-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAQL,KAAK,2BAA2B,EAChC,KAAK,IAAI,EACV,MAAM,wBAAwB,CAAC;AA+BhC,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,uBAAuB,CAAC;AA8B/B,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AA2DD,KAAK,uBAAuB,GAAG,2BAA2B,CAAC;AAiC3D,KAAK,iCAAiC,GAClC,WAAW,GACX,SAAS,GACT,cAAc,GACd,cAAc,CAAC;AAEnB,KAAK,wBAAwB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,KAAK,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,aAAa,CAAC,EAAE,iCAAiC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,SAAS,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,iBAAS,wBAAwB,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE;IACR,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GACA,wBAAwB,CA8C1B;AAiaD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC;IACnD,QAAQ,EAAE,4BAA4B,CAAC;IACvC,IAAI,EAAE,wBAAwB,EAAE,CAAC;CAClC,CAAC,CAcD;AAED,wBAAsB,0BAA0B,IAAI,OAAO,CACzD,wBAAwB,EAAE,CAC3B,CAGA;AAED,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAG1E;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,wBAAwB,CAAC,CAwBnC;AAqFD,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD,OAAO,CAAC,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAqDtD;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAoEnC;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC,CAkDD;AAoTD,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAWD;AA0FD,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAwCD"}

package/dist/server/lib/mcp-gateway.js

@@ -763,19 +763,32 @@ export async function openGrantedDispatchMcpApp(input) {
 }
 function parseMcpToolTextResult(result) {
     if (result && typeof result === "object") {
-        const structured = result.structuredContent;
-        if (structured && typeof structured === "object")
-            return structured;
-        const parts = Array.isArray(result.content)
-            ? result.content
+        const response = result;
+        const meta = response._meta && typeof response._meta === "object"
+            ? response._meta
+            : undefined;
+        const embedStart = meta?.["agent-native/embedStart"] &&
+            typeof meta["agent-native/embedStart"] === "object"
+            ? meta["agent-native/embedStart"]
+            : undefined;
+        const withEmbedStart = (parsed) => typeof embedStart?.startUrl === "string"
+            ? { ...parsed, startUrl: embedStart.startUrl }
+            : parsed;
+        const structured = response.structuredContent;
+        if (structured && typeof structured === "object") {
+            return withEmbedStart(structured);
+        }
+        const parts = Array.isArray(response.content)
+            ? response.content
             : [];
         const text = parts.find((part) => part?.type === "text" && typeof part.text === "string")?.text;
         if (typeof text === "string" && text.trim()) {
-            if (result.isError)
+            if (response.isError)
                 throw new Error(text.trim());
             const parsed = JSON.parse(text);
-            if (parsed && typeof parsed === "object")
-                return parsed;
+            if (parsed && typeof parsed === "object") {
+                return withEmbedStart(parsed);
+            }
         }
     }
     throw new Error("Target app did not return an embed session.");