@agent-native/dispatch 0.40.41-nightly-20261027212258 → 0.40.41

package/CHANGELOG.md

@@ -1,6 +1,6 @@
 # @agent-native/dispatch
 
-## 0.40.41-nightly-20261027212258
+## 0.40.41
 
 ### Patch Changes
 
@@ -10,6 +10,7 @@
 - e086032: Apps that Dispatch creates keep first-run onboarding off in development, like the first-party templates, so a local run opens straight into the app.
 - e548712: Embed a workspace app by its own path when its registry `url` is this Dispatch's page for it. The embed request was rejected and the fallback framed Dispatch inside Dispatch, so apps with a home page of `/` rendered blank and apps with another home page returned 404.
 - 0ab7e59: Chat history row menus in the Dispatch sidebar now use text-only menu items that join arrow-key navigation and typeahead, so Copy session ID and Watch session are reachable from the keyboard. Archiving a chat from that menu is no longer styled as a destructive action, since archived chats can be restored.
+- Release all public npm packages with a patch version bump.
 - 12a91c6: Show MCP approval reviews inside the app, in its own theme and components. When a signed-in reader opens a review link, an app that opts in now sends them to its home page, with the grant id in the URL fragment (`#mcpApproval=<id>`). The fragment survives the redirects that apps' home routes often make. `AppProviders` then shows the review in place of the app: who the call reaches, every argument, times in the reader's time zone, the client that asked and when it was connected, and a warning when the identical call already ran. It leads with who asks and for what ("Claude Code wants to create event"), and after a decision it keeps one line naming the request. Email addresses wrap only after their "@", never inside a name. Approve and Deny go through the same framework route and token as before, and a decision whose answer is lost is checked against the grant's state before the review says it wasn't saved. At a pending or approved review's deadline, the review asks the server for its state, timing the deadline on the server's clock, so a device clock that runs fast or slow doesn't end the review early or leave it showing "approved" late. The review is shown only in a top-level window, never under `sessionBypass`, on a public page or in another app's document. It sits outside the phone hand-off and first-run onboarding. Sign-in still happens at the link itself, so the link works after sign-in. An app whose shell renders `AppProviders` opts in with `createAgentChatPlugin({ mcp: { appApprovalPage: true } })`, or `appApprovalPage: true` on `mountMCP`; every bundled template and Dispatch do. Without it, a review link keeps the framework's plain page, which works in any app. In an app whose custom authentication has no `getBrowserSession` hook, the review says the app can't confirm the reader's sign-in instead of asking them to sign in, and the route's `401` carries `reason: "sign-in-unavailable"` to tell the two apart. The review's JSON now includes `locale` and `servedAt`, and `@agent-native/core/client/mcp-approval` exports the browser helpers that read and decide a review. On every approval surface (this page, the plain page and the in-client form), a field the summary already shows is left out of the field list but kept in the details: the call's one recipient argument when it holds only addresses (a call that names people under several, such as `to` and `bcc`, keeps each, so the reader sees who is copied how), and a time zone that a time in the summary already shows. A value the schema lists as a choice, including a boolean, reads in words (its `oneOf` or `anyOf` title, or else the enum value split into words, so `externalOnly` reads "External only", while a value that isn't an identifier, such as `America/New_York`, stays as written), and a time zone field reads by name ("Pacific Time"). A time whose zone shares the reader's offset but is another zone, such as London and Lagos in October, also shows the call's own time, naming its zone in full ("United Kingdom Time"), since that zone's own row is left out. `mountMCP` refuses `appApprovalPage` with a route prefix other than `/_agent-native`, the only one the app's review reads.
 - f635856: Allow Dispatch to pair with the next Core prerelease series.
 - a6e38cf: Preserve trusted request origins and mounted app paths when proxying embedded Workspace chat.
@@ -50,6 +51,7 @@
 - Updated dependencies [ee67a21]
 - Updated dependencies [ef8111a]
 - Updated dependencies [0ab7e59]
+- Updated dependencies
 - Updated dependencies [7199312]
 - Updated dependencies [12a91c6]
 - Updated dependencies [8254996]
@@ -67,7 +69,7 @@
 - Updated dependencies [2e8f454]
 - Updated dependencies [90395b3]
 - Updated dependencies [7ee0542]
-  - @agent-native/toolkit@0.221.0-nightly-20261027212258
+  - @agent-native/toolkit@0.221.0
 
 ## 0.40.40
 
@@ -1413,11 +1415,4 @@
 
 - 8e51925: Fix Electron chat feedback around app visibility, local development tools, and run recovery.
 
-## 0.30.4
-
-### Patch Changes
-
-- Updated dependencies [fc85cb2]
-  - @agent-native/toolkit@0.16.7
-
 For the full list of releases, see the [changelog archive](./changelog/archive/CHANGELOG.md).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/dispatch",
-  "version": "0.40.41-nightly-20261027212258",
+  "version": "0.40.41",
   "description": "Dispatch — workspace control plane for agent-native apps. Vault, integrations, destinations, scheduled jobs, and cross-app delegation, shipped as a single drop-in package.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -90,7 +90,7 @@
     "tailwind-merge": "^3.5.0",
     "vaul": "^1.1.2",
     "zod": "^4.3.6",
-    "@agent-native/toolkit": "0.221.0-nightly-20261027212258"
+    "@agent-native/toolkit": "0.221.0"
   },
   "devDependencies": {
     "@react-router/dev": "^8.1.0",
@@ -104,7 +104,7 @@
     "typescript-7": "npm:typescript@^7.0.2",
     "vite": "8.1.0",
     "vitest": "^4.1.5",
-    "@agent-native/core": "0.221.0-nightly-20261027212258"
+    "@agent-native/core": "0.221.0"
   },
   "peerDependencies": {
     "@agent-native/core": ">=0.220.1-0 || >=0.221.0-0",