@agent-native/dispatch 0.6.1 → 0.8.0

package/src/actions/create-pylon-ticket.ts

@@ -0,0 +1,109 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { recordAudit } from "../server/lib/dispatch-store.js";
+
+const PYLON_API_BASE =
+  process.env.PYLON_API_BASE_URL || "https://api.usepylon.com";
+
+export default defineAction({
+  description:
+    "Create a Pylon ticket. Use to escalate blockers from client meetings, route unmatched #customer-* posts that have no Slack channel, or open a follow-up that needs tracking. Requires PYLON_API_KEY in the Vault.",
+  schema: z.object({
+    title: z.string().min(1).describe("Short ticket title"),
+    bodyHtml: z
+      .string()
+      .min(1)
+      .describe("HTML body — Pylon renders this in the ticket"),
+    requesterEmail: z
+      .string()
+      .email()
+      .optional()
+      .describe("Email of the person the ticket is on behalf of"),
+    requesterName: z.string().optional(),
+    accountId: z
+      .string()
+      .optional()
+      .describe(
+        "Pylon account ID — provide either this OR requesterEmail to identify the subject",
+      ),
+    priority: z.enum(["urgent", "high", "medium", "low"]).optional(),
+    tags: z.array(z.string()).optional(),
+    assigneeId: z.string().optional(),
+    teamId: z.string().optional(),
+  }),
+  run: async (input) => {
+    const apiKey = process.env.PYLON_API_KEY;
+    if (!apiKey) {
+      throw new Error(
+        "PYLON_API_KEY is not set. Add it to the Dispatch Vault.",
+      );
+    }
+    if (!input.accountId && !input.requesterEmail) {
+      throw new Error(
+        "Pylon requires either accountId or requesterEmail to identify the ticket subject.",
+      );
+    }
+
+    const payload: Record<string, unknown> = {
+      title: input.title,
+      body_html: input.bodyHtml,
+    };
+    if (input.accountId) payload.account_id = input.accountId;
+    if (input.requesterEmail) payload.requester_email = input.requesterEmail;
+    if (input.requesterName) payload.requester_name = input.requesterName;
+    if (input.priority) payload.priority = input.priority;
+    if (input.tags?.length) payload.tags = input.tags;
+    if (input.assigneeId) payload.assignee_id = input.assigneeId;
+    if (input.teamId) payload.team_id = input.teamId;
+
+    const res = await fetch(`${PYLON_API_BASE}/issues`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify(payload),
+    });
+
+    if (!res.ok) {
+      const text = await res.text().catch(() => "");
+      throw new Error(
+        `Pylon ticket creation failed (HTTP ${res.status})${text ? `: ${text.slice(0, 500)}` : ""}`,
+      );
+    }
+
+    const data = (await res.json().catch(() => null)) as Record<
+      string,
+      unknown
+    > | null;
+    const issue =
+      data && typeof data === "object" && "issue" in data
+        ? ((data as { issue?: Record<string, unknown> }).issue ?? {})
+        : (data ?? {});
+    const ticketId =
+      issue && typeof (issue as { id?: unknown }).id === "string"
+        ? (issue as { id: string }).id
+        : "";
+
+    await recordAudit({
+      action: "pylon.ticket.created",
+      targetType: "pylon-ticket",
+      targetId: ticketId || null,
+      summary: `Created Pylon ticket: ${input.title}`,
+      metadata: {
+        title: input.title,
+        priority: input.priority,
+        tags: input.tags,
+        accountId: input.accountId,
+        requesterEmail: input.requesterEmail,
+        ticketId,
+      },
+    });
+
+    return {
+      ok: true as const,
+      ticketId,
+      ticket: issue,
+    };
+  },
+});

package/src/actions/create-vault-grant.ts

@@ -4,7 +4,7 @@ import { createGrant } from "../server/lib/vault-store.js";
 
 export default defineAction({
   description:
-    "Grant an app access to a vault secret. The secret can then be synced to the app. Admin only.",
+    "Grant an app access to a vault secret in manual vault access mode. Admin only.",
   schema: z.object({
     secretId: z.string().describe("ID of the secret to grant"),
     appId: z

package/src/actions/create-vault-secret.ts

@@ -4,13 +4,14 @@ import { createSecret } from "../server/lib/vault-store.js";
 
 export default defineAction({
   description:
-    "Store a new secret in the workspace vault. Admin only. The secret can then be granted to specific apps.",
+    "Store a secret in the workspace vault. Admin only. Existing credential keys are updated. By default, saved vault keys are available to every workspace app; manual mode uses per-app grants.",
   schema: z.object({
     credentialKey: z
       .string()
+      .min(1)
       .describe("Environment variable name, e.g. GOOGLE_CLIENT_ID"),
-    value: z.string().describe("The secret value"),
-    name: z.string().describe("Human-readable label for this secret"),
+    value: z.string().min(1).describe("The secret value"),
+    name: z.string().min(1).describe("Human-readable label for this secret"),
     provider: z
       .string()
       .optional()

package/src/actions/create-workspace-resource.ts

@@ -4,7 +4,7 @@ import { createWorkspaceResource } from "../server/lib/workspace-resources-store
 
 export default defineAction({
   description:
-    'Create a workspace-wide skill, instruction, agent profile, or knowledge pack. Set scope to "all" to push to every app, or "selected" to grant per-app.',
+    'Create a workspace-wide skill, instruction, agent profile, or reference resource. Set scope to "all" for runtime inheritance by every app, or "selected" to grant per-app. When Dispatch approval policy is enabled, All-app creates queue an approval request before taking effect.',
   schema: z.object({
     kind: z
       .enum(["skill", "instruction", "agent", "knowledge"])
@@ -14,7 +14,7 @@ export default defineAction({
     path: z
       .string()
       .describe(
-        'Resource path, e.g. "skills/designer.md", "agents/researcher.md", "context/gtm-messaging.md", or "remote-agents/researcher.json"',
+        'Resource path in target apps. Use "skills/<name>/SKILL.md" for skills, "AGENTS.md" or "instructions/<name>.md" for always-on guardrails, "context/<name>.md" for reference resources, and "agents/<name>.md" for custom agents.',
       ),
     content: z
       .string()
@@ -22,7 +22,7 @@ export default defineAction({
     scope: z
       .enum(["all", "selected"])
       .describe(
-        '"all" = push to every app, "selected" = only apps with explicit grants',
+        '"all" = inherited by every app at runtime, "selected" = only apps with explicit grants',
       ),
   }),
   run: async (args) => createWorkspaceResource(args),

package/src/actions/delete-workspace-resource.ts

@@ -4,7 +4,7 @@ import { deleteWorkspaceResource } from "../server/lib/workspace-resources-store
 
 export default defineAction({
   description:
-    "Delete a workspace resource and revoke all its grants. Admin only.",
+    "Delete a workspace resource and revoke all its grants. When Dispatch approval policy is enabled, deleting an All-app resource queues an approval request before taking effect.",
   schema: z.object({
     id: z.string().describe("Resource ID to delete"),
   }),

package/src/actions/ensure-dream-job.ts

@@ -0,0 +1,76 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { ensureDreamJob } from "../server/lib/dreams-store.js";
+
+export default defineAction({
+  description:
+    "Create or update the personal recurring Dispatch dream job resource at jobs/dispatch-dream.md.",
+  schema: z.object({
+    schedule: z
+      .string()
+      .optional()
+      .describe(
+        'Optional five-field cron schedule. Defaults to weekly: "0 9 * * 1".',
+      ),
+    sourceId: z
+      .string()
+      .default("all")
+      .describe("Thread debug source id for the recurring dream pass."),
+    sourceIds: z
+      .array(z.string().min(1))
+      .optional()
+      .describe("Optional explicit source ids for recurring dream passes."),
+    allSources: z.coerce
+      .boolean()
+      .default(true)
+      .describe("Scan every connected source for recurring dream passes."),
+    query: z
+      .string()
+      .optional()
+      .describe("Optional search term to focus recurring dream passes."),
+    limit: z.coerce.number().int().min(1).max(50).default(8),
+    sourceTimeoutMs: z.coerce
+      .number()
+      .int()
+      .min(1000)
+      .max(60000)
+      .default(30000)
+      .describe("Per-source timeout in milliseconds."),
+    sourceConcurrency: z.coerce
+      .number()
+      .int()
+      .min(1)
+      .max(8)
+      .default(2)
+      .describe("How many sources to scan at once."),
+    sourceStartStaggerMs: z.coerce
+      .number()
+      .int()
+      .min(0)
+      .max(5000)
+      .default(250)
+      .describe("Delay between source starts within each scan batch."),
+    threadConcurrency: z.coerce
+      .number()
+      .int()
+      .min(1)
+      .max(10)
+      .default(3)
+      .describe("How many threads to inspect at once within each source."),
+    threadTimeoutMs: z.coerce
+      .number()
+      .int()
+      .min(1000)
+      .max(30000)
+      .default(8000)
+      .describe("Per-thread debug timeout in milliseconds."),
+    minCandidateCount: z.coerce
+      .number()
+      .int()
+      .min(0)
+      .max(50)
+      .default(1)
+      .describe("Skip recurring report creation below this candidate count."),
+  }),
+  run: async (input) => ensureDreamJob(input),
+});

package/src/actions/get-dream-settings.ts

@@ -0,0 +1,12 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { getDreamSettings } from "../server/lib/dreams-store.js";
+
+export default defineAction({
+  description:
+    "Read recurring Dispatch dream settings, including schedule, source scope, timeout, and minimum candidate threshold.",
+  schema: z.object({}),
+  http: { method: "GET" },
+  readOnly: true,
+  run: async () => getDreamSettings(),
+});

package/src/actions/get-dream.ts

@@ -0,0 +1,14 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { getDream } from "../server/lib/dreams-store.js";
+
+export default defineAction({
+  description:
+    "Get one Dispatch dream report and its evidence-backed proposals.",
+  schema: z.object({
+    id: z.string().min(1).describe("Dream id."),
+  }),
+  http: { method: "GET" },
+  readOnly: true,
+  run: async ({ id }) => getDream(id),
+});

package/src/actions/get-vault-access-settings.ts

@@ -0,0 +1,11 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { getVaultAccessSettings } from "../server/lib/vault-store.js";
+
+export default defineAction({
+  description:
+    "Get the Dispatch vault access mode. Defaults to all-apps, where every workspace app can use every vault key.",
+  schema: z.object({}),
+  http: { method: "GET" },
+  run: async () => getVaultAccessSettings(),
+});

package/src/actions/get-workspace-resource-effective-context.ts

@@ -0,0 +1,34 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { getWorkspaceResourceEffectiveContext } from "../server/lib/workspace-resources-store.js";
+
+export default defineAction({
+  description:
+    "Preview how a Dispatch workspace resource resolves for an app/user at runtime: workspace default, organization/app override, and personal override, plus whether the resource is all-app or selected-only.",
+  schema: z.object({
+    resourceId: z
+      .string()
+      .optional()
+      .describe("Workspace resource id to inspect."),
+    path: z
+      .string()
+      .optional()
+      .describe(
+        "Resource path to inspect, such as context/brand.md. Optional when resourceId is provided.",
+      ),
+    appId: z
+      .string()
+      .optional()
+      .describe(
+        "Workspace app id to preview. All-app resources are inherited by every app; selected-only resources require a grant.",
+      ),
+    userEmail: z
+      .string()
+      .optional()
+      .describe(
+        "User email for personal overrides. Defaults to the current Dispatch user.",
+      ),
+  }),
+  http: { method: "GET" },
+  run: async (args) => getWorkspaceResourceEffectiveContext(args),
+});

package/src/actions/grant-vault-secrets-to-app.ts

@@ -4,7 +4,7 @@ import { grantSecretsToApp } from "../server/lib/vault-store.js";
 
 export default defineAction({
   description:
-    "Grant multiple Dispatch vault secrets to a workspace app. Existing active grants are skipped.",
+    "Grant multiple Dispatch vault secrets to a workspace app in manual vault access mode. Existing active grants are skipped.",
   http: { method: "POST" },
   schema: z.object({
     appId: z

package/src/actions/index.spec.ts

@@ -0,0 +1,26 @@
+import { describe, expect, it } from "vitest";
+
+import { dispatchActions } from "./index.js";
+
+describe("dispatch action registry", () => {
+  it("keeps workspace resources runtime-inherited instead of exposing sync actions", () => {
+    expect(dispatchActions).toHaveProperty("list-workspace-resources-for-app");
+    expect(dispatchActions).toHaveProperty(
+      "get-workspace-resource-effective-context",
+    );
+    expect(dispatchActions).toHaveProperty("grant-workspace-resources-to-app");
+    expect(dispatchActions).toHaveProperty("sync-vault-to-app");
+
+    expect(dispatchActions).not.toHaveProperty(
+      "sync-workspace-resources-to-app",
+    );
+    expect(dispatchActions).not.toHaveProperty(
+      "sync-workspace-resources-to-all",
+    );
+    expect(
+      Object.keys(dispatchActions).filter((name) =>
+        name.startsWith("sync-workspace-resources"),
+      ),
+    ).toEqual([]);
+  });
+});

package/src/actions/index.ts

@@ -3,17 +3,24 @@ import approveDispatchChange from "./approve-dispatch-change.js";
 import approveVaultRequest from "./approve-vault-request.js";
 import archiveWorkspaceApp from "./archive-workspace-app.js";
 import createLinkToken from "./create-link-token.js";
+import createPylonTicket from "./create-pylon-ticket.js";
 import createVaultGrant from "./create-vault-grant.js";
 import createVaultSecret from "./create-vault-secret.js";
 import createWorkspaceResourceGrant from "./create-workspace-resource-grant.js";
 import createWorkspaceResource from "./create-workspace-resource.js";
+import createDreamReport from "./create-dream-report.js";
 import deleteDestination from "./delete-destination.js";
 import deleteVaultSecret from "./delete-vault-secret.js";
 import deleteWorkspaceResource from "./delete-workspace-resource.js";
 import denyVaultRequest from "./deny-vault-request.js";
+import ensureDreamJob from "./ensure-dream-job.js";
 import getAppCreationSettings from "./get-app-creation-settings.js";
 import getAgentThreadDebug from "./get-agent-thread-debug.js";
+import getDream from "./get-dream.js";
+import getDreamSettings from "./get-dream-settings.js";
 import getDispatchSettings from "./get-dispatch-settings.js";
+import getVaultAccessSettings from "./get-vault-access-settings.js";
+import getWorkspaceResourceEffectiveContext from "./get-workspace-resource-effective-context.js";
 import getWorkspaceInfo from "./get-workspace-info.js";
 import grantWorkspaceResourcesToApp from "./grant-workspace-resources-to-app.js";
 import grantVaultSecretsToApp from "./grant-vault-secrets-to-app.js";
@@ -25,6 +32,8 @@ import listDispatchApprovals from "./list-dispatch-approvals.js";
 import listDispatchAudit from "./list-dispatch-audit.js";
 import listDispatchOverview from "./list-dispatch-overview.js";
 import listDispatchUsageMetrics from "./list-dispatch-usage-metrics.js";
+import listDreamCandidates from "./list-dream-candidates.js";
+import listDreams from "./list-dreams.js";
 import listIntegrationsCatalog from "./list-integrations-catalog.js";
 import listLinkedIdentities from "./list-linked-identities.js";
 import listVaultAudit from "./list-vault-audit.js";
@@ -35,23 +44,31 @@ import listVaultSecrets from "./list-vault-secrets.js";
 import listWorkspaceApps from "./list-workspace-apps.js";
 import listWorkspaceResourceOptions from "./list-workspace-resource-options.js";
 import listWorkspaceResourceGrants from "./list-workspace-resource-grants.js";
+import listWorkspaceResourcesForApp from "./list-workspace-resources-for-app.js";
 import listWorkspaceResources from "./list-workspace-resources.js";
 import navigate from "./navigate.js";
+import applyDreamProposal from "./apply-dream-proposal.js";
+import previewDreamProposal from "./preview-dream-proposal.js";
+import previewWorkspaceResourceChange from "./preview-workspace-resource-change.js";
 import rejectDispatchChange from "./reject-dispatch-change.js";
+import rejectDreamProposal from "./reject-dream-proposal.js";
 import removePendingWorkspaceApp from "./remove-pending-workspace-app.js";
 import requestVaultSecret from "./request-vault-secret.js";
 import revokeVaultGrant from "./revoke-vault-grant.js";
 import revokeWorkspaceResourceGrant from "./revoke-workspace-resource-grant.js";
+import restoreStarterWorkspaceResources from "./restore-starter-workspace-resources.js";
 import scaffoldWorkspaceApp from "./scaffold-workspace-app.js";
 import searchAgentThreads from "./search-agent-threads.js";
+import sendCodeAgentRemoteCommand from "./send-code-agent-remote-command.js";
 import sendPlatformMessage from "./send-platform-message.js";
 import setAppCreationSettings from "./set-app-creation-settings.js";
 import setDispatchApprovalPolicy from "./set-dispatch-approval-policy.js";
+import setDreamSettings from "./set-dream-settings.js";
+import setVaultAccessSettings from "./set-vault-access-settings.js";
 import startWorkspaceAppCreation from "./start-workspace-app-creation.js";
 import syncVaultToApp from "./sync-vault-to-app.js";
-import syncWorkspaceResourcesToAll from "./sync-workspace-resources-to-all.js";
-import syncWorkspaceResourcesToApp from "./sync-workspace-resources-to-app.js";
 import unarchiveWorkspaceApp from "./unarchive-workspace-app.js";
+import updateWorkspaceAppMetadata from "./update-workspace-app-metadata.js";
 import updateVaultSecret from "./update-vault-secret.js";
 import updateWorkspaceResource from "./update-workspace-resource.js";
 import upsertDestination from "./upsert-destination.js";
@@ -68,17 +85,25 @@ export const dispatchActions: Record<string, ActionEntry> = {
   "approve-vault-request": approveVaultRequest,
   "archive-workspace-app": archiveWorkspaceApp,
   "create-link-token": createLinkToken,
+  "create-pylon-ticket": createPylonTicket,
   "create-vault-grant": createVaultGrant,
   "create-vault-secret": createVaultSecret,
   "create-workspace-resource-grant": createWorkspaceResourceGrant,
   "create-workspace-resource": createWorkspaceResource,
+  "create-dream-report": createDreamReport,
   "delete-destination": deleteDestination,
   "delete-vault-secret": deleteVaultSecret,
   "delete-workspace-resource": deleteWorkspaceResource,
   "deny-vault-request": denyVaultRequest,
+  "ensure-dream-job": ensureDreamJob,
   "get-app-creation-settings": getAppCreationSettings,
   "get-agent-thread-debug": getAgentThreadDebug,
+  "get-dream": getDream,
+  "get-dream-settings": getDreamSettings,
   "get-dispatch-settings": getDispatchSettings,
+  "get-vault-access-settings": getVaultAccessSettings,
+  "get-workspace-resource-effective-context":
+    getWorkspaceResourceEffectiveContext,
   "get-workspace-info": getWorkspaceInfo,
   "grant-workspace-resources-to-app": grantWorkspaceResourcesToApp,
   "grant-vault-secrets-to-app": grantVaultSecretsToApp,
@@ -90,6 +115,8 @@ export const dispatchActions: Record<string, ActionEntry> = {
   "list-dispatch-audit": listDispatchAudit,
   "list-dispatch-overview": listDispatchOverview,
   "list-dispatch-usage-metrics": listDispatchUsageMetrics,
+  "list-dream-candidates": listDreamCandidates,
+  "list-dreams": listDreams,
   "list-integrations-catalog": listIntegrationsCatalog,
   "list-linked-identities": listLinkedIdentities,
   "list-vault-audit": listVaultAudit,
@@ -100,23 +127,31 @@ export const dispatchActions: Record<string, ActionEntry> = {
   "list-workspace-apps": listWorkspaceApps,
   "list-workspace-resource-options": listWorkspaceResourceOptions,
   "list-workspace-resource-grants": listWorkspaceResourceGrants,
+  "list-workspace-resources-for-app": listWorkspaceResourcesForApp,
   "list-workspace-resources": listWorkspaceResources,
   navigate: navigate,
+  "apply-dream-proposal": applyDreamProposal,
+  "preview-dream-proposal": previewDreamProposal,
+  "preview-workspace-resource-change": previewWorkspaceResourceChange,
   "reject-dispatch-change": rejectDispatchChange,
+  "reject-dream-proposal": rejectDreamProposal,
   "remove-pending-workspace-app": removePendingWorkspaceApp,
   "request-vault-secret": requestVaultSecret,
   "revoke-vault-grant": revokeVaultGrant,
   "revoke-workspace-resource-grant": revokeWorkspaceResourceGrant,
+  "restore-starter-workspace-resources": restoreStarterWorkspaceResources,
   "scaffold-workspace-app": scaffoldWorkspaceApp,
   "search-agent-threads": searchAgentThreads,
+  "send-code-agent-remote-command": sendCodeAgentRemoteCommand,
   "send-platform-message": sendPlatformMessage,
   "set-app-creation-settings": setAppCreationSettings,
   "set-dispatch-approval-policy": setDispatchApprovalPolicy,
+  "set-dream-settings": setDreamSettings,
+  "set-vault-access-settings": setVaultAccessSettings,
   "start-workspace-app-creation": startWorkspaceAppCreation,
   "sync-vault-to-app": syncVaultToApp,
-  "sync-workspace-resources-to-all": syncWorkspaceResourcesToAll,
-  "sync-workspace-resources-to-app": syncWorkspaceResourcesToApp,
   "unarchive-workspace-app": unarchiveWorkspaceApp,
+  "update-workspace-app-metadata": updateWorkspaceAppMetadata,
   "update-vault-secret": updateVaultSecret,
   "update-workspace-resource": updateWorkspaceResource,
   "upsert-destination": upsertDestination,

package/src/actions/list-dream-candidates.ts

@@ -0,0 +1,77 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { listDreamCandidates } from "../server/lib/dreams-store.js";
+
+export default defineAction({
+  description:
+    "List recent agent threads worth reviewing in a Dispatch dream pass, scored from grounded signals like corrections, failures, tool errors, feedback, evals, and satisfaction.",
+  schema: z.object({
+    sourceId: z
+      .string()
+      .default("current")
+      .describe(
+        "Thread debug source id from list-agent-thread-sources. Use 'all' to scan every connected source.",
+      ),
+    sourceIds: z
+      .array(z.string().min(1))
+      .optional()
+      .describe(
+        "Optional explicit source ids to scan together. When provided, sourceId is treated as aggregate.",
+      ),
+    allSources: z.coerce
+      .boolean()
+      .default(false)
+      .describe(
+        "Scan every connected thread-debug source with partial results.",
+      ),
+    query: z
+      .string()
+      .optional()
+      .describe("Optional search term to focus candidate discovery."),
+    ownerEmail: z
+      .string()
+      .optional()
+      .describe(
+        "Optional owner email filter. Admins may pass '*' or omit to use their admin-visible scope.",
+      ),
+    limit: z.coerce.number().int().min(1).max(50).default(20),
+    sourceTimeoutMs: z.coerce
+      .number()
+      .int()
+      .min(1000)
+      .max(60000)
+      .default(15000)
+      .describe("Per-source timeout in milliseconds for partial scans."),
+    sourceConcurrency: z.coerce
+      .number()
+      .int()
+      .min(1)
+      .max(8)
+      .default(2)
+      .describe("How many thread-debug sources to scan at once."),
+    sourceStartStaggerMs: z.coerce
+      .number()
+      .int()
+      .min(0)
+      .max(5000)
+      .default(250)
+      .describe("Delay between source starts within a scan batch."),
+    threadConcurrency: z.coerce
+      .number()
+      .int()
+      .min(1)
+      .max(10)
+      .default(3)
+      .describe("How many threads to inspect at once within each source."),
+    threadTimeoutMs: z.coerce
+      .number()
+      .int()
+      .min(1000)
+      .max(30000)
+      .default(8000)
+      .describe("Per-thread debug timeout in milliseconds."),
+  }),
+  http: { method: "GET" },
+  readOnly: true,
+  run: async (input) => listDreamCandidates(input),
+});

package/src/actions/list-dreams.ts

@@ -0,0 +1,17 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { listDreams } from "../server/lib/dreams-store.js";
+
+export default defineAction({
+  description: "List Dispatch dream reports with proposal status counts.",
+  schema: z.object({
+    limit: z.coerce.number().int().min(1).max(100).default(25),
+    status: z
+      .enum(["running", "completed", "failed", "all"])
+      .default("all")
+      .describe("Optional dream status filter."),
+  }),
+  http: { method: "GET" },
+  readOnly: true,
+  run: async (input) => listDreams(input),
+});

package/src/actions/list-integrations-catalog.ts

@@ -4,7 +4,7 @@ import { listIntegrationsCatalog } from "../server/lib/vault-store.js";
 
 export default defineAction({
   description:
-    "List all workspace apps and their credential/integration requirements. Shows which credentials are configured, which are granted from the vault, and which are missing.",
+    "List all workspace apps and their credential/integration requirements. Shows configured credentials and effective Dispatch vault access.",
   schema: z.object({}),
   http: { method: "GET" },
   run: async () => listIntegrationsCatalog(),

package/src/actions/list-vault-grants.ts

@@ -4,7 +4,7 @@ import { listGrants } from "../server/lib/vault-store.js";
 
 export default defineAction({
   description:
-    "List vault grants — which apps have access to which secrets. Optionally filter by app or secret.",
+    "List explicit vault grants used by manual vault access mode. Optionally filter by app or secret.",
   schema: z.object({
     appId: z.string().optional().describe("Filter by app ID"),
     secretId: z.string().optional().describe("Filter by secret ID"),

package/src/actions/list-workspace-apps.ts

@@ -12,13 +12,17 @@ const httpBoolean = z.preprocess((value) => {
 
 export default defineAction({
   description:
-    "List apps installed in this workspace, including mounted paths, absolute URLs, and agent-card/A2A metadata for ready apps by default. UI polling callers can pass includeAgentCards=false to skip network probes.",
+    "List apps installed in this workspace, including mounted paths, absolute URLs, audience (internal/public), page route access overrides, and agent-card/A2A metadata for ready apps by default. UI polling callers can pass includeAgentCards=false to skip network probes.",
   schema: z.object({
     includeAgentCards: httpBoolean
       .default(true)
       .describe(
         "Fetch each ready app's /.well-known/agent-card.json with a short non-throwing timeout and include agentCardUrl, agentCardReachable, a2aEndpointUrl, agentName, and agentSkillsCount. Defaults to true for agent calls; UI polling should pass false. Pending Builder apps are not probed.",
       ),
+    audience: z
+      .enum(["all", "internal", "public"])
+      .default("all")
+      .describe("Filter by workspace app audience."),
   }),
   http: { method: "GET" },
   run: async (input) => listWorkspaceApps(input),

package/src/actions/list-workspace-resources-for-app.ts

@@ -0,0 +1,13 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { listWorkspaceResourcesForApp } from "../server/lib/workspace-resources-store.js";
+
+export default defineAction({
+  description:
+    "List the inherited workspace and explicitly granted resources an app receives, including auto-loaded instructions.",
+  schema: z.object({
+    appId: z.string().describe("Workspace app ID"),
+  }),
+  http: { method: "GET" },
+  run: async (args) => listWorkspaceResourcesForApp(args.appId),
+});