@agent-native/dispatch 0.42.0-nightly-20261104194955 → 0.42.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/dispatch",
-  "version": "0.42.0-nightly-20261104194955",
+  "version": "0.42.0",
   "description": "Dispatch — workspace control plane for agent-native apps. Vault, integrations, destinations, scheduled jobs, and cross-app delegation, shipped as a single drop-in package.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -90,7 +90,7 @@
     "tailwind-merge": "^3.5.0",
     "vaul": "^1.1.2",
     "zod": "^4.3.6",
-    "@agent-native/toolkit": "0.224.0-nightly-20261104194955"
+    "@agent-native/toolkit": "0.224.0"
   },
   "devDependencies": {
     "@react-router/dev": "^8.1.0",
@@ -104,10 +104,10 @@
     "typescript-7": "npm:typescript@^7.0.2",
     "vite": "8.1.0",
     "vitest": "^4.1.5",
-    "@agent-native/core": "0.224.0-nightly-20261104194955"
+    "@agent-native/core": "0.224.0"
   },
   "peerDependencies": {
-    "@agent-native/core": "0.224.0-nightly-20261104194955",
+    "@agent-native/core": ">=0.224.0-0",
     "react": ">=19.2.7",
     "react-dom": ">=19.2.7",
     "react-router": ">=8"

package/src/db/index.spec.ts

@@ -62,6 +62,15 @@ describe("Dispatch workspace app share access", () => {
     ).resolves.toBe(false);
   });
 
+  it("shares one manager answer across a request org's apps", () => {
+    const key = mocks.getRegisteredResource().canManageAccessKey as (resource: {
+      orgId?: string | null;
+    }) => string | undefined;
+
+    expect(key({ orgId: "org-a" })).toBe("org-a");
+    expect(key({ orgId: null })).toBeUndefined();
+  });
+
   it("does not resolve a role for a resource outside the request org", async () => {
     await expect(
       canManageAccess()(

package/src/db/index.ts

@@ -21,6 +21,7 @@ registerShareableResource({
   allowPublic: false,
   requireOrgMemberForUserShares: true,
   supportsGroupShares: true,
+  canManageAccessKey: (resource) => resource.orgId ?? undefined,
   canManageAccess: async (resource, ctx) => {
     if (!ctx.userEmail || !ctx.orgId || resource?.orgId !== ctx.orgId) {
       return false;

package/src/server/lib/app-creation-store.spec.ts

@@ -209,6 +209,20 @@ vi.mock("@agent-native/core/sharing", async (importOriginal) => {
   return {
     ...actual,
     resolveAccess: (...args: any[]) => mocks.resolveAccess(...args),
+    // core's own tests prove resolveAccessMany agrees with resolveAccess, so
+    // this double answers through the same per-app mock the cases configure.
+    resolveAccessMany: async (
+      resourceType: string,
+      resourceIds: string[],
+      ...rest: any[]
+    ) => {
+      const access = new Map<string, unknown>();
+      for (const id of resourceIds) {
+        const resolved = await mocks.resolveAccess(resourceType, id, ...rest);
+        if (resolved) access.set(id, resolved);
+      }
+      return access;
+    },
   };
 });
 

package/src/server/lib/app-creation-store.ts

@@ -56,7 +56,7 @@ import {
   parseAgentProfileMetadata,
   type ConnectRequiredCard,
 } from "@agent-native/core/shared";
-import { resolveAccess } from "@agent-native/core/sharing";
+import { resolveAccessMany } from "@agent-native/core/sharing";
 
 import { getDb } from "../../db/index.js";
 import { workspaceAppRoute } from "../../shared/workspace-app-route.js";
@@ -96,7 +96,6 @@ const WORKSPACE_APPS_ENV_KEY = "AGENT_NATIVE_WORKSPACE_APPS_JSON";
 const WORKSPACE_APPS_MANIFEST_FILE = "workspace-apps.json";
 const WORKSPACE_APPS_GATEWAY_PATH = "/_workspace/apps";
 const WORKSPACE_APPS_GATEWAY_TIMEOUT_MS = 2_500;
-const WORKSPACE_APP_ACCESS_CONCURRENCY = 8;
 const MAX_PENDING_APPS = 50;
 const PENDING_WORKSPACE_APP_TTL_MS = 30 * 24 * 60 * 60 * 1_000;
 const AGENT_CARD_PATH = "/.well-known/agent-card.json";
@@ -1890,33 +1889,17 @@ async function filterWorkspaceAppsByAccess(
     candidates.push(app);
   }
 
-  for (
-    let start = 0;
-    start < candidates.length;
-    start += WORKSPACE_APP_ACCESS_CONCURRENCY
-  ) {
-    const batch = candidates.slice(
-      start,
-      start + WORKSPACE_APP_ACCESS_CONCURRENCY,
-    );
-    const decisions = await Promise.all(
-      batch.map(async (app) => {
-        try {
-          const access = await resolveAccess(
-            "workspace-app",
-            app.id,
-            { userEmail, orgId },
-            { skipResourceBody: true },
-          );
-          return { app, allowed: Boolean(access) };
-        } catch (error) {
-          console.warn("[dispatch] workspace app access lookup failed", error);
-          return { app, allowed: false };
-        }
-      }),
-    );
-    for (const decision of decisions) {
-      if (decision.allowed) visibleIds.add(decision.app.id);
+  if (candidates.length > 0) {
+    try {
+      const access = await resolveAccessMany(
+        "workspace-app",
+        candidates.map((app) => app.id),
+        { userEmail, ...(orgId ? { orgId } : {}) },
+        { skipResourceBody: true },
+      );
+      for (const id of access.keys()) visibleIds.add(id);
+    } catch (error) {
+      console.warn("[dispatch] workspace app access lookup failed", error);
     }
   }