@agent-native/dispatch 0.40.41-same-host-mcp-20261027-20261027081850 → 0.40.41

package/dist/server/lib/mcp-gateway.d.ts

@@ -81,6 +81,10 @@ export declare function createGrantedDispatchMcpEmbedSession(input: {
     expiresAt?: number;
     app: string;
 }>;
+export declare function createGrantedDispatchMcpEmbedSessionForWorkspaceAppChat(appId: string): Promise<{
+    startUrl: string;
+    appBaseUrl: string;
+}>;
 export declare function createWorkspaceSsoEmbedSession(input: {
     app?: string;
     url?: string;
@@ -92,5 +96,9 @@ export declare function createWorkspaceSsoEmbedSession(input: {
     expiresAt?: number;
     app: string;
 }>;
+export declare function createWorkspaceSsoEmbedSessionForWorkspaceAppChat(appId: string): Promise<{
+    startUrl: string;
+    appBaseUrl: string;
+}>;
 export {};
 //# sourceMappingURL=mcp-gateway.d.ts.map

package/dist/server/lib/mcp-gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-gateway.d.ts","sourceRoot":"","sources":["../../../src/server/lib/mcp-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EASL,KAAK,2BAA2B,EAChC,KAAK,IAAI,EACV,MAAM,wBAAwB,CAAC;AAkChC,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,uBAAuB,CAAC;AA8B/B,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AA2DD,KAAK,uBAAuB,GAAG,2BAA2B,CAAC;AAiC3D,KAAK,iCAAiC,GAClC,WAAW,GACX,SAAS,GACT,cAAc,GACd,cAAc,CAAC;AAEnB,KAAK,wBAAwB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,KAAK,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,aAAa,CAAC,EAAE,iCAAiC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,SAAS,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,iBAAS,wBAAwB,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE;IACR,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GACA,wBAAwB,CA8C1B;AAieD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC;IACnD,QAAQ,EAAE,4BAA4B,CAAC;IACvC,IAAI,EAAE,wBAAwB,EAAE,CAAC;CAClC,CAAC,CAcD;AAED,wBAAsB,0BAA0B,IAAI,OAAO,CACzD,wBAAwB,EAAE,CAC3B,CAGA;AAED,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAG1E;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,wBAAwB,CAAC,CAwBnC;AAuFD,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD,OAAO,CAAC,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAqDtD;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAoEnC;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC,CAkDD;AAqYD,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAWD;AAuHD,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAwCD"}
+{"version":3,"file":"mcp-gateway.d.ts","sourceRoot":"","sources":["../../../src/server/lib/mcp-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EASL,KAAK,2BAA2B,EAChC,KAAK,IAAI,EACV,MAAM,wBAAwB,CAAC;AAoChC,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,uBAAuB,CAAC;AA8B/B,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AA2DD,KAAK,uBAAuB,GAAG,2BAA2B,CAAC;AAiC3D,KAAK,iCAAiC,GAClC,WAAW,GACX,SAAS,GACT,cAAc,GACd,cAAc,CAAC;AAEnB,KAAK,wBAAwB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,KAAK,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,aAAa,CAAC,EAAE,iCAAiC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,SAAS,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,iBAAS,wBAAwB,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE;IACR,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GACA,wBAAwB,CA8C1B;AA6fD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC;IACnD,QAAQ,EAAE,4BAA4B,CAAC;IACvC,IAAI,EAAE,wBAAwB,EAAE,CAAC;CAClC,CAAC,CAcD;AAED,wBAAsB,0BAA0B,IAAI,OAAO,CACzD,wBAAwB,EAAE,CAC3B,CAGA;AAED,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAG1E;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,wBAAwB,CAAC,CAwBnC;AAuFD,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD,OAAO,CAAC,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAqDtD;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAoEnC;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC,CAkDD;AA6aD,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAID;AAED,wBAAsB,uDAAuD,CAC3E,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAOnD;AA4KD,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAED;AAED,wBAAsB,iDAAiD,CACrE,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAOnD"}

package/dist/server/lib/mcp-gateway.js

@@ -3,7 +3,7 @@ import { getAppConfig } from "@agent-native/core/app-config";
 import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
 import { buildMcpToolName, McpClientManager, } from "@agent-native/core/mcp-client";
 import { getOrgA2ASecret, getOrgDomain } from "@agent-native/core/org";
-import { buildDeepLink, buildEmbedStartPath, createEmbedSessionTicket, getConfiguredAppBasePath, getRequestContext, getRequestOrgId, getRequestUserEmail, } from "@agent-native/core/server";
+import { buildDeepLink, buildEmbedStartPath, createEmbedSessionTicket, getAppProductionUrl, getConfiguredAppBasePath, getRequestContext, getRequestOrgId, getRequestUserEmail, resolveAppRuntimeUrl, } from "@agent-native/core/server";
 import { discoverAgents, getBuiltinAgents, } from "@agent-native/core/server/agent-discovery";
 import { EMBED_START_PATH } from "@agent-native/core/shared";
 import { DESKTOP_WORKSPACE_SSO_FLAG } from "../../shared/feature-flags.js";
@@ -326,8 +326,9 @@ function withConfiguredBasePath(baseUrl) {
 }
 function dispatchSelfBaseUrl() {
     const requestOrigin = normalizeBaseUrl(getRequestContext()?.requestOrigin);
-    if (requestOrigin)
+    if (requestOrigin && isTrustedRequestOrigin(requestOrigin)) {
         return withConfiguredBasePath(requestOrigin);
+    }
     const configured = normalizeBaseUrl(process.env.WORKSPACE_GATEWAY_URL) ??
         normalizeBaseUrl(process.env.APP_URL) ??
         normalizeBaseUrl(process.env.URL) ??
@@ -339,6 +340,24 @@ function dispatchSelfBaseUrl() {
         ? "https://dispatch.agent-native.com"
         : "http://localhost:8092";
 }
+function isTrustedRequestOrigin(value) {
+    // An embed ticket is fetched from this origin and becomes a bearer token.
+    const origin = new URL(value).origin;
+    const candidates = [
+        { source: "production", value: getAppProductionUrl() },
+        { source: "runtime", value: resolveAppRuntimeUrl() },
+    ];
+    return candidates.some(({ source, value }) => {
+        if (!value)
+            return false;
+        const url = normalizeBaseUrl(value);
+        if (!url) {
+            console.warn("[dispatch] invalid configured request origin", { source });
+            return false;
+        }
+        return new URL(url).origin === origin;
+    });
+}
 function dispatchSelfApp(settings) {
     return {
         id: DISPATCH_APP_ID,
@@ -478,6 +497,13 @@ function appMcpBaseUrl(app) {
     url.hash = "";
     return url.toString().replace(/\/$/, "");
 }
+function appChatBaseUrl(app) {
+    const homeUrl = new URL(appHomeBaseUrl(app));
+    if (homeUrl.pathname !== "/") {
+        return homeUrl.toString().replace(/\/+$/, "");
+    }
+    return appMcpBaseUrl(app);
+}
 function resolveGrantedAppEmbedStartUrl(app, startUrl) {
     try {
         const baseUrl = appMcpBaseUrl(app);
@@ -1103,7 +1129,15 @@ async function createDispatchSelfEmbedSession(input) {
         app: DISPATCH_APP_ID,
     };
 }
-export async function createGrantedDispatchMcpEmbedSession(input) {
+function publicEmbedSession({ startUrl, targetPath, expiresAt, app, }) {
+    return {
+        startUrl,
+        ...(targetPath ? { targetPath } : {}),
+        ...(typeof expiresAt === "number" ? { expiresAt } : {}),
+        app,
+    };
+}
+async function createGrantedDispatchMcpEmbedSessionResult(input) {
     const userEmail = getRequestUserEmail();
     if (!userEmail)
         throw new Error("no authenticated user");
@@ -1115,16 +1149,30 @@ export async function createGrantedDispatchMcpEmbedSession(input) {
         chrome: input.chrome,
     });
 }
+export async function createGrantedDispatchMcpEmbedSession(input) {
+    return publicEmbedSession(await createGrantedDispatchMcpEmbedSessionResult(input));
+}
+export async function createGrantedDispatchMcpEmbedSessionForWorkspaceAppChat(appId) {
+    const session = await createGrantedDispatchMcpEmbedSessionResult({
+        app: appId,
+        path: "/",
+        chrome: "minimal",
+    });
+    return { startUrl: session.startUrl, appBaseUrl: session.appBaseUrl };
+}
 async function createEmbedSessionForResolvedApp(input) {
     const { ownerEmail, orgId, target, chrome } = input;
     if (target.app.id === DISPATCH_APP_ID) {
-        return createDispatchSelfEmbedSession({
-            ownerEmail,
-            orgId,
-            path: target.path,
-            baseUrl: appBaseUrl(target.app),
-            chrome,
-        });
+        return {
+            ...(await createDispatchSelfEmbedSession({
+                ownerEmail,
+                ...(orgId !== undefined ? { orgId } : {}),
+                path: target.path,
+                baseUrl: appBaseUrl(target.app),
+                ...(chrome !== undefined ? { chrome } : {}),
+            })),
+            appBaseUrl: appBaseUrl(target.app),
+        };
     }
     const targetMcpUrl = appMcpUrl(target.app);
     const targetCredentials = await createTargetMcpUserCredentials({
@@ -1197,6 +1245,7 @@ async function createEmbedSessionForResolvedApp(input) {
     const output = {
         startUrl,
         app: target.app.id,
+        appBaseUrl: appChatBaseUrl(target.app),
     };
     if (parsed.targetPath)
         output.targetPath = parsed.targetPath;
@@ -1204,7 +1253,7 @@ async function createEmbedSessionForResolvedApp(input) {
         output.expiresAt = parsed.expiresAt;
     return output;
 }
-export async function createWorkspaceSsoEmbedSession(input) {
+async function createWorkspaceSsoEmbedSessionResult(input) {
     const ownerEmail = getRequestUserEmail();
     if (!ownerEmail) {
         console.warn("[dispatch] workspace embed mint rejected", {
@@ -1243,4 +1292,15 @@ export async function createWorkspaceSsoEmbedSession(input) {
         chrome: input.chrome,
     });
 }
+export async function createWorkspaceSsoEmbedSession(input) {
+    return publicEmbedSession(await createWorkspaceSsoEmbedSessionResult(input));
+}
+export async function createWorkspaceSsoEmbedSessionForWorkspaceAppChat(appId) {
+    const session = await createWorkspaceSsoEmbedSessionResult({
+        app: appId,
+        path: "/",
+        chrome: "minimal",
+    });
+    return { startUrl: session.startUrl, appBaseUrl: session.appBaseUrl };
+}
 //# sourceMappingURL=mcp-gateway.js.map