@agent-native/dispatch 0.6.1 → 0.8.0

package/README.md

@@ -98,7 +98,7 @@ Connect any data source, prompt for any chart. Build reusable dashboards, not th
 
 **Clips**
 
-<a href="https://agent-native.com/templates/clips"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F7366585df5a545e697e254bb0138182d?format=webp&width=800" alt="Clips template" width="100%" /></a>
+<a href="https://agent-native.com/templates/clips"><img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F678be5a501a14ab8a508e5f7bc92c468?format=webp&width=800" alt="Clips template" width="100%" /></a>
 
 **Agent-Native Loom**
 
@@ -164,6 +164,43 @@ Want a single app, no monorepo? Use `--standalone`:
 npx @agent-native/core create my-app --standalone --template mail
 ```
 
+Need a coding agent workspace? `agent-native` or `agent-native code` opens an open-source Claude Code/Codex-like Code workspace with no prompt required. From there, type a task, run slash goals interactively, or call them directly from your shell:
+
+```bash
+npx @agent-native/core@latest
+npx @agent-native/core@latest "fix the failing auth tests"
+npx @agent-native/core@latest code
+npx @agent-native/core@latest code "fix the failing auth tests"
+npx @agent-native/core@latest code exec "fix the failing auth tests"
+npx @agent-native/core@latest code -p "fix the failing auth tests"
+npx @agent-native/core@latest code --plan "explain the auth test failures"
+npx @agent-native/core@latest code --auto "fix the failing auth tests"
+npx @agent-native/core@latest code /migrate ./my-next-app --out ../migrated-app
+npx @agent-native/core@latest code /migrate ./my-next-app --emit ../migration-dossier
+npx @agent-native/core@latest code list
+npx @agent-native/core@latest code attach --last
+npx @agent-native/core@latest code logs --last
+npx @agent-native/core@latest code approve --last
+npx @agent-native/core@latest code resume --last
+npx @agent-native/core@latest code --continue "check the auth edge cases next"
+npx @agent-native/core@latest code resume --last "check the auth edge cases next"
+```
+
+Slash goals can run from the interactive shell or directly from the command line, and `agent-native code goals` shows the goals registered in your checkout. A bare prompt starts a local coding-agent session, streams work, records transcript/status/tool events, and accepts follow-up prompts; `/migrate` is one specialized capability inside that general Code workspace. Project-specific slash commands live in `.agents/commands/*.md`, so teams can add prompts such as `/release-check` or `/migrate-commerce` without changing the framework. Bare `agent-native` launches the Code workspace in builds with the top-level entrypoint, while a bare prompt such as `agent-native "fix tests"` starts an Agent-Native Code task directly.
+
+The Code workspace is adding the familiar Codex/Claude-style session loop: pick a previous session, list runs, attach to live output, print logs, resume with context, and continue the same run from Desktop or CLI. The primary modes are intentionally simple:
+
+- **Plan mode** (`--plan`) inspects, explains, and proposes without writing files.
+- **Auto mode** (`--auto`, default) edits files, runs checks, and only pauses for genuinely destructive file, git, publish, or data operations.
+
+`agent-native migrate` still works as a direct shortcut; `code /migrate` is the Agent-Native Code entrypoint for the migration goal. By default it creates an Agent-Native Code session and portable migration dossier, not a scaffolded app/template. `resume --last` reopens the latest run handoff; adding a quoted prompt records it as a follow-up transcript event for that run so the next active coding agent can pick it up. If a high-risk command is paused for approval, `code approve --last` runs that one pending command and then points you back to resume the session. Use `--app-surface` only when you want the legacy hidden migration detail app for assessment, approval, tasks, artifacts, and verification.
+Use `--emit` when you want only the portable dossier for Codex, Claude Code, Cursor, or another coding agent.
+Agent-Native Code also includes lightweight goals such as `/audit`:
+
+```bash
+npx @agent-native/core@latest code /audit --url https://example.com
+```
+
 ## Workspaces (Monorepo)
 
 A workspace is the default shape of an agent-native project. Every app sits under `apps/`, and `packages/shared/` is available for the small amount of code, instructions, skills, or branding that should truly apply to every app.

package/dist/actions/apply-dream-proposal.d.ts

@@ -0,0 +1,3 @@
+declare const _default: any;
+export default _default;
+//# sourceMappingURL=apply-dream-proposal.d.ts.map

package/dist/actions/apply-dream-proposal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-dream-proposal.d.ts","sourceRoot":"","sources":["../../src/actions/apply-dream-proposal.ts"],"names":[],"mappings":";AAIA,wBAOG"}

package/dist/actions/apply-dream-proposal.js

@@ -0,0 +1,11 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { applyDreamProposal } from "../server/lib/dreams-store.js";
+export default defineAction({
+    description: "Apply one pending Dispatch dream proposal. Personal memory applies directly; shared LEARNINGS.md and workspace resource proposals queue an approval request when approval policy is enabled.",
+    schema: z.object({
+        id: z.string().min(1).describe("Dream proposal id."),
+    }),
+    run: async ({ id }) => applyDreamProposal(id),
+});
+//# sourceMappingURL=apply-dream-proposal.js.map

package/dist/actions/apply-dream-proposal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-dream-proposal.js","sourceRoot":"","sources":["../../src/actions/apply-dream-proposal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,8LAA8L;IAChM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;KACrD,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { applyDreamProposal } from \"../server/lib/dreams-store.js\";\n\nexport default defineAction({\n  description:\n    \"Apply one pending Dispatch dream proposal. Personal memory applies directly; shared LEARNINGS.md and workspace resource proposals queue an approval request when approval policy is enabled.\",\n  schema: z.object({\n    id: z.string().min(1).describe(\"Dream proposal id.\"),\n  }),\n  run: async ({ id }) => applyDreamProposal(id),\n});\n"]}

package/dist/actions/create-dream-report.d.ts

@@ -0,0 +1,3 @@
+declare const _default: any;
+export default _default;
+//# sourceMappingURL=create-dream-report.d.ts.map

package/dist/actions/create-dream-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-dream-report.d.ts","sourceRoot":"","sources":["../../src/actions/create-dream-report.ts"],"names":[],"mappings":";AAIA,wBAuEG"}

package/dist/actions/create-dream-report.js

@@ -0,0 +1,67 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createDreamReport } from "../server/lib/dreams-store.js";
+export default defineAction({
+    description: "Create a Dispatch dream report from existing thread-debug records and produce pending, evidence-backed memory proposals without calling an LLM.",
+    schema: z.object({
+        sourceId: z
+            .string()
+            .default("current")
+            .describe("Thread debug source id from list-agent-thread-sources. Use 'all' to scan every connected source."),
+        sourceIds: z
+            .array(z.string().min(1))
+            .optional()
+            .describe("Optional explicit source ids to scan together. When provided, sourceId is treated as aggregate."),
+        allSources: z.coerce
+            .boolean()
+            .default(false)
+            .describe("Scan every connected thread-debug source with partial results."),
+        query: z
+            .string()
+            .optional()
+            .describe("Optional search term to focus dream candidate discovery."),
+        ownerEmail: z
+            .string()
+            .optional()
+            .describe("Optional owner email filter. Admins may pass '*' or omit to use their admin-visible scope."),
+        limit: z.coerce.number().int().min(1).max(50).default(20),
+        sourceTimeoutMs: z.coerce
+            .number()
+            .int()
+            .min(1000)
+            .max(60000)
+            .default(15000)
+            .describe("Per-source timeout in milliseconds for partial scans."),
+        sourceConcurrency: z.coerce
+            .number()
+            .int()
+            .min(1)
+            .max(8)
+            .default(2)
+            .describe("How many thread-debug sources to scan at once."),
+        sourceStartStaggerMs: z.coerce
+            .number()
+            .int()
+            .min(0)
+            .max(5000)
+            .default(250)
+            .describe("Delay between source starts within a scan batch."),
+        threadConcurrency: z.coerce
+            .number()
+            .int()
+            .min(1)
+            .max(10)
+            .default(3)
+            .describe("How many threads to inspect at once within each source."),
+        threadTimeoutMs: z.coerce
+            .number()
+            .int()
+            .min(1000)
+            .max(30000)
+            .default(8000)
+            .describe("Per-thread debug timeout in milliseconds."),
+        title: z.string().optional().describe("Optional title for the dream pass."),
+    }),
+    run: async (input) => createDreamReport(input),
+});
+//# sourceMappingURL=create-dream-report.js.map

package/dist/actions/create-dream-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-dream-report.js","sourceRoot":"","sources":["../../src/actions/create-dream-report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,iJAAiJ;IACnJ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,OAAO,CAAC,SAAS,CAAC;aAClB,QAAQ,CACP,kGAAkG,CACnG;QACH,SAAS,EAAE,CAAC;aACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACxB,QAAQ,EAAE;aACV,QAAQ,CACP,iGAAiG,CAClG;QACH,UAAU,EAAE,CAAC,CAAC,MAAM;aACjB,OAAO,EAAE;aACT,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CACP,gEAAgE,CACjE;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;QACvE,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,4FAA4F,CAC7F;QACH,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,eAAe,EAAE,CAAC,CAAC,MAAM;aACtB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,IAAI,CAAC;aACT,GAAG,CAAC,KAAK,CAAC;aACV,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CAAC,uDAAuD,CAAC;QACpE,iBAAiB,EAAE,CAAC,CAAC,MAAM;aACxB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,CAAC,CAAC;aACN,OAAO,CAAC,CAAC,CAAC;aACV,QAAQ,CAAC,gDAAgD,CAAC;QAC7D,oBAAoB,EAAE,CAAC,CAAC,MAAM;aAC3B,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,IAAI,CAAC;aACT,OAAO,CAAC,GAAG,CAAC;aACZ,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,iBAAiB,EAAE,CAAC,CAAC,MAAM;aACxB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,OAAO,CAAC,CAAC,CAAC;aACV,QAAQ,CAAC,yDAAyD,CAAC;QACtE,eAAe,EAAE,CAAC,CAAC,MAAM;aACtB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,IAAI,CAAC;aACT,GAAG,CAAC,KAAK,CAAC;aACV,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,2CAA2C,CAAC;QACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;KAC5E,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC;CAC/C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { createDreamReport } from \"../server/lib/dreams-store.js\";\n\nexport default defineAction({\n  description:\n    \"Create a Dispatch dream report from existing thread-debug records and produce pending, evidence-backed memory proposals without calling an LLM.\",\n  schema: z.object({\n    sourceId: z\n      .string()\n      .default(\"current\")\n      .describe(\n        \"Thread debug source id from list-agent-thread-sources. Use 'all' to scan every connected source.\",\n      ),\n    sourceIds: z\n      .array(z.string().min(1))\n      .optional()\n      .describe(\n        \"Optional explicit source ids to scan together. When provided, sourceId is treated as aggregate.\",\n      ),\n    allSources: z.coerce\n      .boolean()\n      .default(false)\n      .describe(\n        \"Scan every connected thread-debug source with partial results.\",\n      ),\n    query: z\n      .string()\n      .optional()\n      .describe(\"Optional search term to focus dream candidate discovery.\"),\n    ownerEmail: z\n      .string()\n      .optional()\n      .describe(\n        \"Optional owner email filter. Admins may pass '*' or omit to use their admin-visible scope.\",\n      ),\n    limit: z.coerce.number().int().min(1).max(50).default(20),\n    sourceTimeoutMs: z.coerce\n      .number()\n      .int()\n      .min(1000)\n      .max(60000)\n      .default(15000)\n      .describe(\"Per-source timeout in milliseconds for partial scans.\"),\n    sourceConcurrency: z.coerce\n      .number()\n      .int()\n      .min(1)\n      .max(8)\n      .default(2)\n      .describe(\"How many thread-debug sources to scan at once.\"),\n    sourceStartStaggerMs: z.coerce\n      .number()\n      .int()\n      .min(0)\n      .max(5000)\n      .default(250)\n      .describe(\"Delay between source starts within a scan batch.\"),\n    threadConcurrency: z.coerce\n      .number()\n      .int()\n      .min(1)\n      .max(10)\n      .default(3)\n      .describe(\"How many threads to inspect at once within each source.\"),\n    threadTimeoutMs: z.coerce\n      .number()\n      .int()\n      .min(1000)\n      .max(30000)\n      .default(8000)\n      .describe(\"Per-thread debug timeout in milliseconds.\"),\n    title: z.string().optional().describe(\"Optional title for the dream pass.\"),\n  }),\n  run: async (input) => createDreamReport(input),\n});\n"]}

package/dist/actions/create-pylon-ticket.d.ts

@@ -0,0 +1,3 @@
+declare const _default: any;
+export default _default;
+//# sourceMappingURL=create-pylon-ticket.d.ts.map

package/dist/actions/create-pylon-ticket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-pylon-ticket.d.ts","sourceRoot":"","sources":["../../src/actions/create-pylon-ticket.ts"],"names":[],"mappings":";AAOA,wBAqGG"}

package/dist/actions/create-pylon-ticket.js

@@ -0,0 +1,94 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { recordAudit } from "../server/lib/dispatch-store.js";
+const PYLON_API_BASE = process.env.PYLON_API_BASE_URL || "https://api.usepylon.com";
+export default defineAction({
+    description: "Create a Pylon ticket. Use to escalate blockers from client meetings, route unmatched #customer-* posts that have no Slack channel, or open a follow-up that needs tracking. Requires PYLON_API_KEY in the Vault.",
+    schema: z.object({
+        title: z.string().min(1).describe("Short ticket title"),
+        bodyHtml: z
+            .string()
+            .min(1)
+            .describe("HTML body — Pylon renders this in the ticket"),
+        requesterEmail: z
+            .string()
+            .email()
+            .optional()
+            .describe("Email of the person the ticket is on behalf of"),
+        requesterName: z.string().optional(),
+        accountId: z
+            .string()
+            .optional()
+            .describe("Pylon account ID — provide either this OR requesterEmail to identify the subject"),
+        priority: z.enum(["urgent", "high", "medium", "low"]).optional(),
+        tags: z.array(z.string()).optional(),
+        assigneeId: z.string().optional(),
+        teamId: z.string().optional(),
+    }),
+    run: async (input) => {
+        const apiKey = process.env.PYLON_API_KEY;
+        if (!apiKey) {
+            throw new Error("PYLON_API_KEY is not set. Add it to the Dispatch Vault.");
+        }
+        if (!input.accountId && !input.requesterEmail) {
+            throw new Error("Pylon requires either accountId or requesterEmail to identify the ticket subject.");
+        }
+        const payload = {
+            title: input.title,
+            body_html: input.bodyHtml,
+        };
+        if (input.accountId)
+            payload.account_id = input.accountId;
+        if (input.requesterEmail)
+            payload.requester_email = input.requesterEmail;
+        if (input.requesterName)
+            payload.requester_name = input.requesterName;
+        if (input.priority)
+            payload.priority = input.priority;
+        if (input.tags?.length)
+            payload.tags = input.tags;
+        if (input.assigneeId)
+            payload.assignee_id = input.assigneeId;
+        if (input.teamId)
+            payload.team_id = input.teamId;
+        const res = await fetch(`${PYLON_API_BASE}/issues`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${apiKey}`,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify(payload),
+        });
+        if (!res.ok) {
+            const text = await res.text().catch(() => "");
+            throw new Error(`Pylon ticket creation failed (HTTP ${res.status})${text ? `: ${text.slice(0, 500)}` : ""}`);
+        }
+        const data = (await res.json().catch(() => null));
+        const issue = data && typeof data === "object" && "issue" in data
+            ? (data.issue ?? {})
+            : (data ?? {});
+        const ticketId = issue && typeof issue.id === "string"
+            ? issue.id
+            : "";
+        await recordAudit({
+            action: "pylon.ticket.created",
+            targetType: "pylon-ticket",
+            targetId: ticketId || null,
+            summary: `Created Pylon ticket: ${input.title}`,
+            metadata: {
+                title: input.title,
+                priority: input.priority,
+                tags: input.tags,
+                accountId: input.accountId,
+                requesterEmail: input.requesterEmail,
+                ticketId,
+            },
+        });
+        return {
+            ok: true,
+            ticketId,
+            ticket: issue,
+        };
+    },
+});
+//# sourceMappingURL=create-pylon-ticket.js.map

package/dist/actions/create-pylon-ticket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-pylon-ticket.js","sourceRoot":"","sources":["../../src/actions/create-pylon-ticket.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAE9D,MAAM,cAAc,GAClB,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,0BAA0B,CAAC;AAE/D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,mNAAmN;IACrN,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACvD,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,8CAA8C,CAAC;QAC3D,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,KAAK,EAAE;aACP,QAAQ,EAAE;aACV,QAAQ,CAAC,gDAAgD,CAAC;QAC7D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,kFAAkF,CACnF;QACH,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAA4B;YACvC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,QAAQ;SAC1B,CAAC;QACF,IAAI,KAAK,CAAC,SAAS;YAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QAC1D,IAAI,KAAK,CAAC,cAAc;YAAE,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC,cAAc,CAAC;QACzE,IAAI,KAAK,CAAC,aAAa;YAAE,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC,aAAa,CAAC;QACtE,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACtD,IAAI,KAAK,CAAC,IAAI,EAAE,MAAM;YAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAClD,IAAI,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;QAEjD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,cAAc,SAAS,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5F,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAGxC,CAAC;QACT,MAAM,KAAK,GACT,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI;YACjD,CAAC,CAAC,CAAE,IAA4C,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7D,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACnB,MAAM,QAAQ,GACZ,KAAK,IAAI,OAAQ,KAA0B,CAAC,EAAE,KAAK,QAAQ;YACzD,CAAC,CAAE,KAAwB,CAAC,EAAE;YAC9B,CAAC,CAAC,EAAE,CAAC;QAET,MAAM,WAAW,CAAC;YAChB,MAAM,EAAE,sBAAsB;YAC9B,UAAU,EAAE,cAAc;YAC1B,QAAQ,EAAE,QAAQ,IAAI,IAAI;YAC1B,OAAO,EAAE,yBAAyB,KAAK,CAAC,KAAK,EAAE;YAC/C,QAAQ,EAAE;gBACR,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,QAAQ;aACT;SACF,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAa;YACjB,QAAQ;YACR,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { recordAudit } from \"../server/lib/dispatch-store.js\";\n\nconst PYLON_API_BASE =\n  process.env.PYLON_API_BASE_URL || \"https://api.usepylon.com\";\n\nexport default defineAction({\n  description:\n    \"Create a Pylon ticket. Use to escalate blockers from client meetings, route unmatched #customer-* posts that have no Slack channel, or open a follow-up that needs tracking. Requires PYLON_API_KEY in the Vault.\",\n  schema: z.object({\n    title: z.string().min(1).describe(\"Short ticket title\"),\n    bodyHtml: z\n      .string()\n      .min(1)\n      .describe(\"HTML body — Pylon renders this in the ticket\"),\n    requesterEmail: z\n      .string()\n      .email()\n      .optional()\n      .describe(\"Email of the person the ticket is on behalf of\"),\n    requesterName: z.string().optional(),\n    accountId: z\n      .string()\n      .optional()\n      .describe(\n        \"Pylon account ID — provide either this OR requesterEmail to identify the subject\",\n      ),\n    priority: z.enum([\"urgent\", \"high\", \"medium\", \"low\"]).optional(),\n    tags: z.array(z.string()).optional(),\n    assigneeId: z.string().optional(),\n    teamId: z.string().optional(),\n  }),\n  run: async (input) => {\n    const apiKey = process.env.PYLON_API_KEY;\n    if (!apiKey) {\n      throw new Error(\n        \"PYLON_API_KEY is not set. Add it to the Dispatch Vault.\",\n      );\n    }\n    if (!input.accountId && !input.requesterEmail) {\n      throw new Error(\n        \"Pylon requires either accountId or requesterEmail to identify the ticket subject.\",\n      );\n    }\n\n    const payload: Record<string, unknown> = {\n      title: input.title,\n      body_html: input.bodyHtml,\n    };\n    if (input.accountId) payload.account_id = input.accountId;\n    if (input.requesterEmail) payload.requester_email = input.requesterEmail;\n    if (input.requesterName) payload.requester_name = input.requesterName;\n    if (input.priority) payload.priority = input.priority;\n    if (input.tags?.length) payload.tags = input.tags;\n    if (input.assigneeId) payload.assignee_id = input.assigneeId;\n    if (input.teamId) payload.team_id = input.teamId;\n\n    const res = await fetch(`${PYLON_API_BASE}/issues`, {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${apiKey}`,\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify(payload),\n    });\n\n    if (!res.ok) {\n      const text = await res.text().catch(() => \"\");\n      throw new Error(\n        `Pylon ticket creation failed (HTTP ${res.status})${text ? `: ${text.slice(0, 500)}` : \"\"}`,\n      );\n    }\n\n    const data = (await res.json().catch(() => null)) as Record<\n      string,\n      unknown\n    > | null;\n    const issue =\n      data && typeof data === \"object\" && \"issue\" in data\n        ? ((data as { issue?: Record<string, unknown> }).issue ?? {})\n        : (data ?? {});\n    const ticketId =\n      issue && typeof (issue as { id?: unknown }).id === \"string\"\n        ? (issue as { id: string }).id\n        : \"\";\n\n    await recordAudit({\n      action: \"pylon.ticket.created\",\n      targetType: \"pylon-ticket\",\n      targetId: ticketId || null,\n      summary: `Created Pylon ticket: ${input.title}`,\n      metadata: {\n        title: input.title,\n        priority: input.priority,\n        tags: input.tags,\n        accountId: input.accountId,\n        requesterEmail: input.requesterEmail,\n        ticketId,\n      },\n    });\n\n    return {\n      ok: true as const,\n      ticketId,\n      ticket: issue,\n    };\n  },\n});\n"]}

package/dist/actions/create-vault-grant.js

@@ -2,7 +2,7 @@ import { defineAction } from "@agent-native/core";
 import { z } from "zod";
 import { createGrant } from "../server/lib/vault-store.js";
 export default defineAction({
-    description: "Grant an app access to a vault secret. The secret can then be synced to the app. Admin only.",
+    description: "Grant an app access to a vault secret in manual vault access mode. Admin only.",
     schema: z.object({
         secretId: z.string().describe("ID of the secret to grant"),
         appId: z

package/dist/actions/create-vault-grant.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-vault-grant.js","sourceRoot":"","sources":["../../src/actions/create-vault-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,8FAA8F;IAChG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC1D,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,CAAC,gDAAgD,CAAC;KAC9D,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC;CAC5D,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { createGrant } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Grant an app access to a vault secret. The secret can then be synced to the app. Admin only.\",\n  schema: z.object({\n    secretId: z.string().describe(\"ID of the secret to grant\"),\n    appId: z\n      .string()\n      .describe(\"App ID to grant access to, e.g. mail, calendar\"),\n  }),\n  run: async (args) => createGrant(args.secretId, args.appId),\n});\n"]}
+{"version":3,"file":"create-vault-grant.js","sourceRoot":"","sources":["../../src/actions/create-vault-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gFAAgF;IAClF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC1D,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,CAAC,gDAAgD,CAAC;KAC9D,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC;CAC5D,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { createGrant } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Grant an app access to a vault secret in manual vault access mode. Admin only.\",\n  schema: z.object({\n    secretId: z.string().describe(\"ID of the secret to grant\"),\n    appId: z\n      .string()\n      .describe(\"App ID to grant access to, e.g. mail, calendar\"),\n  }),\n  run: async (args) => createGrant(args.secretId, args.appId),\n});\n"]}

package/dist/actions/create-vault-secret.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-vault-secret.d.ts","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":";AAIA,wBAgBG"}
+{"version":3,"file":"create-vault-secret.d.ts","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":";AAIA,wBAiBG"}

package/dist/actions/create-vault-secret.js

@@ -2,13 +2,14 @@ import { defineAction } from "@agent-native/core";
 import { z } from "zod";
 import { createSecret } from "../server/lib/vault-store.js";
 export default defineAction({
-    description: "Store a new secret in the workspace vault. Admin only. The secret can then be granted to specific apps.",
+    description: "Store a secret in the workspace vault. Admin only. Existing credential keys are updated. By default, saved vault keys are available to every workspace app; manual mode uses per-app grants.",
     schema: z.object({
         credentialKey: z
             .string()
+            .min(1)
             .describe("Environment variable name, e.g. GOOGLE_CLIENT_ID"),
-        value: z.string().describe("The secret value"),
-        name: z.string().describe("Human-readable label for this secret"),
+        value: z.string().min(1).describe("The secret value"),
+        name: z.string().min(1).describe("Human-readable label for this secret"),
         provider: z
             .string()
             .optional()

package/dist/actions/create-vault-secret.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-vault-secret.js","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,yGAAyG;IAC3G,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACjE,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,qDAAqD,CAAC;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KACpE,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;CACxC,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { createSecret } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Store a new secret in the workspace vault. Admin only. The secret can then be granted to specific apps.\",\n  schema: z.object({\n    credentialKey: z\n      .string()\n      .describe(\"Environment variable name, e.g. GOOGLE_CLIENT_ID\"),\n    value: z.string().describe(\"The secret value\"),\n    name: z.string().describe(\"Human-readable label for this secret\"),\n    provider: z\n      .string()\n      .optional()\n      .describe(\"Provider grouping tag, e.g. google, sendgrid, slack\"),\n    description: z.string().optional().describe(\"Optional description\"),\n  }),\n  run: async (args) => createSecret(args),\n});\n"]}
+{"version":3,"file":"create-vault-secret.js","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,8LAA8L;IAChM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACxE,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,qDAAqD,CAAC;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KACpE,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;CACxC,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { createSecret } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Store a secret in the workspace vault. Admin only. Existing credential keys are updated. By default, saved vault keys are available to every workspace app; manual mode uses per-app grants.\",\n  schema: z.object({\n    credentialKey: z\n      .string()\n      .min(1)\n      .describe(\"Environment variable name, e.g. GOOGLE_CLIENT_ID\"),\n    value: z.string().min(1).describe(\"The secret value\"),\n    name: z.string().min(1).describe(\"Human-readable label for this secret\"),\n    provider: z\n      .string()\n      .optional()\n      .describe(\"Provider grouping tag, e.g. google, sendgrid, slack\"),\n    description: z.string().optional().describe(\"Optional description\"),\n  }),\n  run: async (args) => createSecret(args),\n});\n"]}

package/dist/actions/create-workspace-resource.js

@@ -2,7 +2,7 @@ import { defineAction } from "@agent-native/core";
 import { z } from "zod";
 import { createWorkspaceResource } from "../server/lib/workspace-resources-store.js";
 export default defineAction({
-    description: 'Create a workspace-wide skill, instruction, agent profile, or knowledge pack. Set scope to "all" to push to every app, or "selected" to grant per-app.',
+    description: 'Create a workspace-wide skill, instruction, agent profile, or reference resource. Set scope to "all" for runtime inheritance by every app, or "selected" to grant per-app. When Dispatch approval policy is enabled, All-app creates queue an approval request before taking effect.',
     schema: z.object({
         kind: z
             .enum(["skill", "instruction", "agent", "knowledge"])
@@ -11,13 +11,13 @@ export default defineAction({
         description: z.string().optional().describe("Short description"),
         path: z
             .string()
-            .describe('Resource path, e.g. "skills/designer.md", "agents/researcher.md", "context/gtm-messaging.md", or "remote-agents/researcher.json"'),
+            .describe('Resource path in target apps. Use "skills/<name>/SKILL.md" for skills, "AGENTS.md" or "instructions/<name>.md" for always-on guardrails, "context/<name>.md" for reference resources, and "agents/<name>.md" for custom agents.'),
         content: z
             .string()
             .describe("Full resource content (markdown or remote-agent JSON)"),
         scope: z
             .enum(["all", "selected"])
-            .describe('"all" = push to every app, "selected" = only apps with explicit grants'),
+            .describe('"all" = inherited by every app at runtime, "selected" = only apps with explicit grants'),
     }),
     run: async (args) => createWorkspaceResource(args),
 });

package/dist/actions/create-workspace-resource.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-workspace-resource.js","sourceRoot":"","sources":["../../src/actions/create-workspace-resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,wJAAwJ;IAC1J,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;aACpD,QAAQ,CAAC,wDAAwD,CAAC;QACrE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAChE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,CACP,kIAAkI,CACnI;QACH,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,CAAC,uDAAuD,CAAC;QACpE,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;aACzB,QAAQ,CACP,wEAAwE,CACzE;KACJ,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC;CACnD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { createWorkspaceResource } from \"../server/lib/workspace-resources-store.js\";\n\nexport default defineAction({\n  description:\n    'Create a workspace-wide skill, instruction, agent profile, or knowledge pack. Set scope to \"all\" to push to every app, or \"selected\" to grant per-app.',\n  schema: z.object({\n    kind: z\n      .enum([\"skill\", \"instruction\", \"agent\", \"knowledge\"])\n      .describe(\"Resource kind: skill, instruction, agent, or knowledge\"),\n    name: z.string().describe(\"Human-readable name\"),\n    description: z.string().optional().describe(\"Short description\"),\n    path: z\n      .string()\n      .describe(\n        'Resource path, e.g. \"skills/designer.md\", \"agents/researcher.md\", \"context/gtm-messaging.md\", or \"remote-agents/researcher.json\"',\n      ),\n    content: z\n      .string()\n      .describe(\"Full resource content (markdown or remote-agent JSON)\"),\n    scope: z\n      .enum([\"all\", \"selected\"])\n      .describe(\n        '\"all\" = push to every app, \"selected\" = only apps with explicit grants',\n      ),\n  }),\n  run: async (args) => createWorkspaceResource(args),\n});\n"]}
+{"version":3,"file":"create-workspace-resource.js","sourceRoot":"","sources":["../../src/actions/create-workspace-resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,sRAAsR;IACxR,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;aACpD,QAAQ,CAAC,wDAAwD,CAAC;QACrE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAChE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,CACP,iOAAiO,CAClO;QACH,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,CAAC,uDAAuD,CAAC;QACpE,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;aACzB,QAAQ,CACP,wFAAwF,CACzF;KACJ,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC;CACnD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { createWorkspaceResource } from \"../server/lib/workspace-resources-store.js\";\n\nexport default defineAction({\n  description:\n    'Create a workspace-wide skill, instruction, agent profile, or reference resource. Set scope to \"all\" for runtime inheritance by every app, or \"selected\" to grant per-app. When Dispatch approval policy is enabled, All-app creates queue an approval request before taking effect.',\n  schema: z.object({\n    kind: z\n      .enum([\"skill\", \"instruction\", \"agent\", \"knowledge\"])\n      .describe(\"Resource kind: skill, instruction, agent, or knowledge\"),\n    name: z.string().describe(\"Human-readable name\"),\n    description: z.string().optional().describe(\"Short description\"),\n    path: z\n      .string()\n      .describe(\n        'Resource path in target apps. Use \"skills/<name>/SKILL.md\" for skills, \"AGENTS.md\" or \"instructions/<name>.md\" for always-on guardrails, \"context/<name>.md\" for reference resources, and \"agents/<name>.md\" for custom agents.',\n      ),\n    content: z\n      .string()\n      .describe(\"Full resource content (markdown or remote-agent JSON)\"),\n    scope: z\n      .enum([\"all\", \"selected\"])\n      .describe(\n        '\"all\" = inherited by every app at runtime, \"selected\" = only apps with explicit grants',\n      ),\n  }),\n  run: async (args) => createWorkspaceResource(args),\n});\n"]}

package/dist/actions/delete-workspace-resource.js

@@ -2,7 +2,7 @@ import { defineAction } from "@agent-native/core";
 import { z } from "zod";
 import { deleteWorkspaceResource } from "../server/lib/workspace-resources-store.js";
 export default defineAction({
-    description: "Delete a workspace resource and revoke all its grants. Admin only.",
+    description: "Delete a workspace resource and revoke all its grants. When Dispatch approval policy is enabled, deleting an All-app resource queues an approval request before taking effect.",
     schema: z.object({
         id: z.string().describe("Resource ID to delete"),
     }),

package/dist/actions/delete-workspace-resource.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete-workspace-resource.js","sourceRoot":"","sources":["../../src/actions/delete-workspace-resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,oEAAoE;IACtE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KACjD,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;CACtD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { deleteWorkspaceResource } from \"../server/lib/workspace-resources-store.js\";\n\nexport default defineAction({\n  description:\n    \"Delete a workspace resource and revoke all its grants. Admin only.\",\n  schema: z.object({\n    id: z.string().describe(\"Resource ID to delete\"),\n  }),\n  run: async (args) => deleteWorkspaceResource(args.id),\n});\n"]}
+{"version":3,"file":"delete-workspace-resource.js","sourceRoot":"","sources":["../../src/actions/delete-workspace-resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gLAAgL;IAClL,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KACjD,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;CACtD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { deleteWorkspaceResource } from \"../server/lib/workspace-resources-store.js\";\n\nexport default defineAction({\n  description:\n    \"Delete a workspace resource and revoke all its grants. When Dispatch approval policy is enabled, deleting an All-app resource queues an approval request before taking effect.\",\n  schema: z.object({\n    id: z.string().describe(\"Resource ID to delete\"),\n  }),\n  run: async (args) => deleteWorkspaceResource(args.id),\n});\n"]}

package/dist/actions/ensure-dream-job.d.ts

@@ -0,0 +1,3 @@
+declare const _default: any;
+export default _default;
+//# sourceMappingURL=ensure-dream-job.d.ts.map

package/dist/actions/ensure-dream-job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-dream-job.d.ts","sourceRoot":"","sources":["../../src/actions/ensure-dream-job.ts"],"names":[],"mappings":";AAIA,wBAuEG"}

package/dist/actions/ensure-dream-job.js

@@ -0,0 +1,73 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { ensureDreamJob } from "../server/lib/dreams-store.js";
+export default defineAction({
+    description: "Create or update the personal recurring Dispatch dream job resource at jobs/dispatch-dream.md.",
+    schema: z.object({
+        schedule: z
+            .string()
+            .optional()
+            .describe('Optional five-field cron schedule. Defaults to weekly: "0 9 * * 1".'),
+        sourceId: z
+            .string()
+            .default("all")
+            .describe("Thread debug source id for the recurring dream pass."),
+        sourceIds: z
+            .array(z.string().min(1))
+            .optional()
+            .describe("Optional explicit source ids for recurring dream passes."),
+        allSources: z.coerce
+            .boolean()
+            .default(true)
+            .describe("Scan every connected source for recurring dream passes."),
+        query: z
+            .string()
+            .optional()
+            .describe("Optional search term to focus recurring dream passes."),
+        limit: z.coerce.number().int().min(1).max(50).default(8),
+        sourceTimeoutMs: z.coerce
+            .number()
+            .int()
+            .min(1000)
+            .max(60000)
+            .default(30000)
+            .describe("Per-source timeout in milliseconds."),
+        sourceConcurrency: z.coerce
+            .number()
+            .int()
+            .min(1)
+            .max(8)
+            .default(2)
+            .describe("How many sources to scan at once."),
+        sourceStartStaggerMs: z.coerce
+            .number()
+            .int()
+            .min(0)
+            .max(5000)
+            .default(250)
+            .describe("Delay between source starts within each scan batch."),
+        threadConcurrency: z.coerce
+            .number()
+            .int()
+            .min(1)
+            .max(10)
+            .default(3)
+            .describe("How many threads to inspect at once within each source."),
+        threadTimeoutMs: z.coerce
+            .number()
+            .int()
+            .min(1000)
+            .max(30000)
+            .default(8000)
+            .describe("Per-thread debug timeout in milliseconds."),
+        minCandidateCount: z.coerce
+            .number()
+            .int()
+            .min(0)
+            .max(50)
+            .default(1)
+            .describe("Skip recurring report creation below this candidate count."),
+    }),
+    run: async (input) => ensureDreamJob(input),
+});
+//# sourceMappingURL=ensure-dream-job.js.map

package/dist/actions/ensure-dream-job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-dream-job.js","sourceRoot":"","sources":["../../src/actions/ensure-dream-job.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gGAAgG;IAClG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,qEAAqE,CACtE;QACH,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CAAC,sDAAsD,CAAC;QACnE,SAAS,EAAE,CAAC;aACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACxB,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;QACvE,UAAU,EAAE,CAAC,CAAC,MAAM;aACjB,OAAO,EAAE;aACT,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,yDAAyD,CAAC;QACtE,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,uDAAuD,CAAC;QACpE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACxD,eAAe,EAAE,CAAC,CAAC,MAAM;aACtB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,IAAI,CAAC;aACT,GAAG,CAAC,KAAK,CAAC;aACV,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CAAC,qCAAqC,CAAC;QAClD,iBAAiB,EAAE,CAAC,CAAC,MAAM;aACxB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,CAAC,CAAC;aACN,OAAO,CAAC,CAAC,CAAC;aACV,QAAQ,CAAC,mCAAmC,CAAC;QAChD,oBAAoB,EAAE,CAAC,CAAC,MAAM;aAC3B,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,IAAI,CAAC;aACT,OAAO,CAAC,GAAG,CAAC;aACZ,QAAQ,CAAC,qDAAqD,CAAC;QAClE,iBAAiB,EAAE,CAAC,CAAC,MAAM;aACxB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,OAAO,CAAC,CAAC,CAAC;aACV,QAAQ,CAAC,yDAAyD,CAAC;QACtE,eAAe,EAAE,CAAC,CAAC,MAAM;aACtB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,IAAI,CAAC;aACT,GAAG,CAAC,KAAK,CAAC;aACV,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,2CAA2C,CAAC;QACxD,iBAAiB,EAAE,CAAC,CAAC,MAAM;aACxB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,OAAO,CAAC,CAAC,CAAC;aACV,QAAQ,CAAC,4DAA4D,CAAC;KAC1E,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC;CAC5C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { ensureDreamJob } from \"../server/lib/dreams-store.js\";\n\nexport default defineAction({\n  description:\n    \"Create or update the personal recurring Dispatch dream job resource at jobs/dispatch-dream.md.\",\n  schema: z.object({\n    schedule: z\n      .string()\n      .optional()\n      .describe(\n        'Optional five-field cron schedule. Defaults to weekly: \"0 9 * * 1\".',\n      ),\n    sourceId: z\n      .string()\n      .default(\"all\")\n      .describe(\"Thread debug source id for the recurring dream pass.\"),\n    sourceIds: z\n      .array(z.string().min(1))\n      .optional()\n      .describe(\"Optional explicit source ids for recurring dream passes.\"),\n    allSources: z.coerce\n      .boolean()\n      .default(true)\n      .describe(\"Scan every connected source for recurring dream passes.\"),\n    query: z\n      .string()\n      .optional()\n      .describe(\"Optional search term to focus recurring dream passes.\"),\n    limit: z.coerce.number().int().min(1).max(50).default(8),\n    sourceTimeoutMs: z.coerce\n      .number()\n      .int()\n      .min(1000)\n      .max(60000)\n      .default(30000)\n      .describe(\"Per-source timeout in milliseconds.\"),\n    sourceConcurrency: z.coerce\n      .number()\n      .int()\n      .min(1)\n      .max(8)\n      .default(2)\n      .describe(\"How many sources to scan at once.\"),\n    sourceStartStaggerMs: z.coerce\n      .number()\n      .int()\n      .min(0)\n      .max(5000)\n      .default(250)\n      .describe(\"Delay between source starts within each scan batch.\"),\n    threadConcurrency: z.coerce\n      .number()\n      .int()\n      .min(1)\n      .max(10)\n      .default(3)\n      .describe(\"How many threads to inspect at once within each source.\"),\n    threadTimeoutMs: z.coerce\n      .number()\n      .int()\n      .min(1000)\n      .max(30000)\n      .default(8000)\n      .describe(\"Per-thread debug timeout in milliseconds.\"),\n    minCandidateCount: z.coerce\n      .number()\n      .int()\n      .min(0)\n      .max(50)\n      .default(1)\n      .describe(\"Skip recurring report creation below this candidate count.\"),\n  }),\n  run: async (input) => ensureDreamJob(input),\n});\n"]}

package/dist/actions/get-dream-settings.d.ts

@@ -0,0 +1,3 @@
+declare const _default: any;
+export default _default;
+//# sourceMappingURL=get-dream-settings.d.ts.map

package/dist/actions/get-dream-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-dream-settings.d.ts","sourceRoot":"","sources":["../../src/actions/get-dream-settings.ts"],"names":[],"mappings":";AAIA,wBAOG"}

package/dist/actions/get-dream-settings.js

@@ -0,0 +1,11 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { getDreamSettings } from "../server/lib/dreams-store.js";
+export default defineAction({
+    description: "Read recurring Dispatch dream settings, including schedule, source scope, timeout, and minimum candidate threshold.",
+    schema: z.object({}),
+    http: { method: "GET" },
+    readOnly: true,
+    run: async () => getDreamSettings(),
+});
+//# sourceMappingURL=get-dream-settings.js.map

package/dist/actions/get-dream-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-dream-settings.js","sourceRoot":"","sources":["../../src/actions/get-dream-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,qHAAqH;IACvH,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,gBAAgB,EAAE;CACpC,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { getDreamSettings } from \"../server/lib/dreams-store.js\";\n\nexport default defineAction({\n  description:\n    \"Read recurring Dispatch dream settings, including schedule, source scope, timeout, and minimum candidate threshold.\",\n  schema: z.object({}),\n  http: { method: \"GET\" },\n  readOnly: true,\n  run: async () => getDreamSettings(),\n});\n"]}

package/dist/actions/get-dream.d.ts

@@ -0,0 +1,3 @@
+declare const _default: any;
+export default _default;
+//# sourceMappingURL=get-dream.d.ts.map

package/dist/actions/get-dream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-dream.d.ts","sourceRoot":"","sources":["../../src/actions/get-dream.ts"],"names":[],"mappings":";AAIA,wBASG"}

package/dist/actions/get-dream.js

@@ -0,0 +1,13 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { getDream } from "../server/lib/dreams-store.js";
+export default defineAction({
+    description: "Get one Dispatch dream report and its evidence-backed proposals.",
+    schema: z.object({
+        id: z.string().min(1).describe("Dream id."),
+    }),
+    http: { method: "GET" },
+    readOnly: true,
+    run: async ({ id }) => getDream(id),
+});
+//# sourceMappingURL=get-dream.js.map

package/dist/actions/get-dream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-dream.js","sourceRoot":"","sources":["../../src/actions/get-dream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAEzD,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,kEAAkE;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC5C,CAAC;IACF,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;CACpC,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { getDream } from \"../server/lib/dreams-store.js\";\n\nexport default defineAction({\n  description:\n    \"Get one Dispatch dream report and its evidence-backed proposals.\",\n  schema: z.object({\n    id: z.string().min(1).describe(\"Dream id.\"),\n  }),\n  http: { method: \"GET\" },\n  readOnly: true,\n  run: async ({ id }) => getDream(id),\n});\n"]}

package/dist/actions/get-vault-access-settings.d.ts

@@ -0,0 +1,3 @@
+declare const _default: any;
+export default _default;
+//# sourceMappingURL=get-vault-access-settings.d.ts.map

package/dist/actions/get-vault-access-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-vault-access-settings.d.ts","sourceRoot":"","sources":["../../src/actions/get-vault-access-settings.ts"],"names":[],"mappings":";AAIA,wBAMG"}

package/dist/actions/get-vault-access-settings.js

@@ -0,0 +1,10 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { getVaultAccessSettings } from "../server/lib/vault-store.js";
+export default defineAction({
+    description: "Get the Dispatch vault access mode. Defaults to all-apps, where every workspace app can use every vault key.",
+    schema: z.object({}),
+    http: { method: "GET" },
+    run: async () => getVaultAccessSettings(),
+});
+//# sourceMappingURL=get-vault-access-settings.js.map

package/dist/actions/get-vault-access-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-vault-access-settings.js","sourceRoot":"","sources":["../../src/actions/get-vault-access-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,8GAA8G;IAChH,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,sBAAsB,EAAE;CAC1C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { z } from \"zod\";\nimport { getVaultAccessSettings } from \"../server/lib/vault-store.js\";\n\nexport default defineAction({\n  description:\n    \"Get the Dispatch vault access mode. Defaults to all-apps, where every workspace app can use every vault key.\",\n  schema: z.object({}),\n  http: { method: \"GET\" },\n  run: async () => getVaultAccessSettings(),\n});\n"]}

package/dist/actions/get-workspace-resource-effective-context.d.ts

@@ -0,0 +1,3 @@
+declare const _default: any;
+export default _default;
+//# sourceMappingURL=get-workspace-resource-effective-context.d.ts.map

package/dist/actions/get-workspace-resource-effective-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-workspace-resource-effective-context.d.ts","sourceRoot":"","sources":["../../src/actions/get-workspace-resource-effective-context.ts"],"names":[],"mappings":";AAIA,wBA6BG"}