@agent-native/dispatch 0.8.26 → 0.8.28

package/dist/lib/catch-all-target.d.ts

@@ -1,2 +1,17 @@
-export declare function resolveCatchAllTarget(appId: string): string | null;
+interface WorkspaceAppManifestEntry {
+    id?: string;
+    path?: unknown;
+    url?: unknown;
+}
+interface BuiltinAgentEntry {
+    id: string;
+    url?: string | null;
+}
+interface ResolveCatchAllTargetOptions {
+    workspaceApps?: WorkspaceAppManifestEntry[] | null;
+    builtinAgents?: BuiltinAgentEntry[] | null;
+}
+export declare function resolveCatchAllTarget(appId: string, options?: ResolveCatchAllTargetOptions): string | null;
+export declare function resolveServerCatchAllTarget(appId: string): Promise<string | null>;
+export {};
 //# sourceMappingURL=catch-all-target.d.ts.map

package/dist/lib/catch-all-target.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catch-all-target.d.ts","sourceRoot":"","sources":["../../src/lib/catch-all-target.ts"],"names":[],"mappings":"AAoDA,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA8ClE"}
+{"version":3,"file":"catch-all-target.d.ts","sourceRoot":"","sources":["../../src/lib/catch-all-target.ts"],"names":[],"mappings":"AAAA,UAAU,yBAAyB;IACjC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,UAAU,iBAAiB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,UAAU,4BAA4B;IACpC,aAAa,CAAC,EAAE,yBAAyB,EAAE,GAAG,IAAI,CAAC;IACnD,aAAa,CAAC,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;CAC5C;AAiDD,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,4BAAiC,GACzC,MAAM,GAAG,IAAI,CA8Cf;AAED,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQxB"}

package/dist/lib/catch-all-target.js

@@ -1,4 +1,3 @@
-import { getBuiltinAgents, loadWorkspaceAppsManifest, } from "@agent-native/core/server/agent-discovery";
 /**
  * Resolve where `/dispatch/<appId>` should bounce to when it doesn't match
  * an explicit dispatch route. Used by the `$appId` catch-all route loader.
@@ -11,7 +10,7 @@ import { getBuiltinAgents, loadWorkspaceAppsManifest, } from "@agent-native/core
  *      present.
  *    - Otherwise the `app.path` mounted under the workspace gateway is
  *      used. Path is normalized to a leading slash if missing
- *      (e.g. manifest entry `path: "my-forms"` → `/my-forms`), so an app
+ *      (e.g. manifest entry `path: "my-forms"` -> `/my-forms`), so an app
  *      whose mounted path differs from its id ends up at the right place
  *      instead of being silently rewritten to `/${appId}`.
  *    - Bare entry with no path / url falls back to `/${appId}`.
@@ -47,8 +46,8 @@ function validatedAbsoluteUrl(value) {
         return undefined;
     }
 }
-export function resolveCatchAllTarget(appId) {
-    const apps = loadWorkspaceAppsManifest();
+export function resolveCatchAllTarget(appId, options = {}) {
+    const apps = options.workspaceApps;
     if (apps) {
         const app = apps.find((entry) => entry?.id === appId);
         if (app) {
@@ -78,7 +77,7 @@ export function resolveCatchAllTarget(appId) {
             //   `\/evil.example`   — same idea, leading-backslash variant.
             //
             // The manifest parser only checks `startsWith("/")` for the first
-            // case, and even that allows `//evil…`. Defend in depth here by
+            // case, and even that allows `//evil...`. Defend in depth here by
             // collapsing any run of leading slashes-or-backslashes to one
             // forward slash. Same phishing vector that `validatedAbsoluteUrl`
             // closes for `app.url`.
@@ -89,7 +88,16 @@ export function resolveCatchAllTarget(appId) {
             return `/${appId}`;
         }
     }
-    const builtin = getBuiltinAgents("dispatch").find((agent) => agent.id === appId);
+    const builtin = (options.builtinAgents ?? []).find((agent) => agent.id === appId);
     return builtin?.url ?? null;
 }
+export async function resolveServerCatchAllTarget(appId) {
+    if (!import.meta.env.SSR)
+        return null;
+    const { getBuiltinAgents, loadWorkspaceAppsManifest } = await import("@agent-native/core/server/agent-discovery");
+    return resolveCatchAllTarget(appId, {
+        workspaceApps: loadWorkspaceAppsManifest(),
+        builtinAgents: getBuiltinAgents("dispatch"),
+    });
+}
 //# sourceMappingURL=catch-all-target.js.map

package/dist/lib/catch-all-target.js.map

@@ -1 +1 @@
-{"version":3,"file":"catch-all-target.js","sourceRoot":"","sources":["../../src/lib/catch-all-target.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,2CAA2C,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,IAAI,GAAG,yBAAyB,EAAE,CAAC;IACzC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,KAAK,CAAC,CAAC;QACtD,IAAI,GAAG,EAAE,CAAC;YACR,kEAAkE;YAClE,iEAAiE;YACjE,iEAAiE;YACjE,kEAAkE;YAClE,+DAA+D;YAC/D,mEAAmE;YACnE,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,GAAG,CAAC;YACb,CAAC;YACD,kEAAkE;YAClE,4DAA4D;YAC5D,iEAAiE;YACjE,mEAAmE;YACnE,EAAE;YACF,kEAAkE;YAClE,6DAA6D;YAC7D,iCAAiC;YACjC,EAAE;YACF,mEAAmE;YACnE,0DAA0D;YAC1D,mEAAmE;YACnE,kEAAkE;YAClE,+DAA+D;YAC/D,EAAE;YACF,kEAAkE;YAClE,gEAAgE;YAChE,8DAA8D;YAC9D,kEAAkE;YAClE,wBAAwB;YACxB,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBACpD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBAC3D,OAAO,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC;YACpE,CAAC;YACD,OAAO,IAAI,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC,IAAI,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAC9B,CAAC;IACF,OAAO,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC;AAC9B,CAAC","sourcesContent":["import {\n  getBuiltinAgents,\n  loadWorkspaceAppsManifest,\n} from \"@agent-native/core/server/agent-discovery\";\n\n/**\n * Resolve where `/dispatch/<appId>` should bounce to when it doesn't match\n * an explicit dispatch route. Used by the `$appId` catch-all route loader.\n *\n * Resolution order:\n *\n * 1. Workspace apps manifest (env, .agent-native/workspace-apps.json, or a\n *    filesystem scan of `apps/`).\n *    - `app.url` (absolute URL — externally hosted workspace app) wins if\n *      present.\n *    - Otherwise the `app.path` mounted under the workspace gateway is\n *      used. Path is normalized to a leading slash if missing\n *      (e.g. manifest entry `path: \"my-forms\"` → `/my-forms`), so an app\n *      whose mounted path differs from its id ends up at the right place\n *      instead of being silently rewritten to `/${appId}`.\n *    - Bare entry with no path / url falls back to `/${appId}`.\n * 2. First-party template registry. When no workspace manifest matches\n *    (framework dev with each template on its own port, hosted dispatch\n *    with no sibling apps), return the matching template's deploy URL —\n *    dev URL in development (e.g. http://localhost:8084 for forms), prod\n *    URL in production (e.g. https://forms.agent-native.com).\n *\n * Returns `null` if neither lookup matches, letting the route render its\n * \"Page not found\" pane.\n */\n/**\n * Validate `app.url` is an absolute http(s) URL before we trust it as a\n * redirect target. A bare hostname (`\"forms.example.com\"`) or a\n * `javascript:` scheme would otherwise get returned verbatim from\n * `resolveCatchAllTarget` and produce a broken redirect (or a phishing\n * vector). Mirrors `normalizeWorkspaceAppUrl` in\n * `packages/core/src/deploy/workspace-deploy.ts` — but inlined to avoid\n * pulling the deploy CLI module into a runtime path.\n */\nfunction validatedAbsoluteUrl(value: unknown): string | undefined {\n  if (typeof value !== \"string\" || !value.trim()) return undefined;\n  try {\n    const parsed = new URL(value.trim());\n    if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n      return undefined;\n    }\n    return parsed.toString().replace(/\\/$/, \"\");\n  } catch {\n    return undefined;\n  }\n}\n\nexport function resolveCatchAllTarget(appId: string): string | null {\n  const apps = loadWorkspaceAppsManifest();\n  if (apps) {\n    const app = apps.find((entry) => entry?.id === appId);\n    if (app) {\n      // Explicit externally-hosted URL wins. Workspaces that point at a\n      // remote deploy (e.g. a sibling app on Netlify) set `url` and we\n      // should bounce the user there rather than mounting a local path\n      // that doesn't exist inside the gateway. Validate the URL first —\n      // a bare hostname or non-http(s) scheme would produce a broken\n      // redirect (and a `javascript:` value would be a phishing vector).\n      const url = validatedAbsoluteUrl(app.url);\n      if (url) {\n        return url;\n      }\n      // Fall back to the mounted path. Normalize to leading slash so an\n      // entry whose path differs from its id (e.g. `id: \"forms\"`,\n      // `path: \"my-forms\"`) still lands on the correct gateway mount —\n      // not on `/${appId}`, which would silently route to the wrong app.\n      //\n      // Reject scheme-relative paths. Three variants reach this point —\n      // all of them get collapsed to a single leading slash so the\n      // redirect stays on the gateway:\n      //\n      //   `//evil.example`   — network-path reference, browser treats as\n      //                        absolute (https://evil.example).\n      //   `/\\evil.example`   — browsers normalize backslashes to forward\n      //                        slashes during URL parsing, same result.\n      //   `\\/evil.example`   — same idea, leading-backslash variant.\n      //\n      // The manifest parser only checks `startsWith(\"/\")` for the first\n      // case, and even that allows `//evil…`. Defend in depth here by\n      // collapsing any run of leading slashes-or-backslashes to one\n      // forward slash. Same phishing vector that `validatedAbsoluteUrl`\n      // closes for `app.url`.\n      if (typeof app.path === \"string\" && app.path.trim()) {\n        const normalized = app.path.trim().replace(/^[/\\\\]+/, \"/\");\n        return normalized.startsWith(\"/\") ? normalized : `/${normalized}`;\n      }\n      return `/${appId}`;\n    }\n  }\n  const builtin = getBuiltinAgents(\"dispatch\").find(\n    (agent) => agent.id === appId,\n  );\n  return builtin?.url ?? null;\n}\n"]}
+{"version":3,"file":"catch-all-target.js","sourceRoot":"","sources":["../../src/lib/catch-all-target.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAa,EACb,UAAwC,EAAE;IAE1C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC;IACnC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,KAAK,CAAC,CAAC;QACtD,IAAI,GAAG,EAAE,CAAC;YACR,kEAAkE;YAClE,iEAAiE;YACjE,iEAAiE;YACjE,kEAAkE;YAClE,+DAA+D;YAC/D,mEAAmE;YACnE,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,GAAG,CAAC;YACb,CAAC;YACD,kEAAkE;YAClE,4DAA4D;YAC5D,iEAAiE;YACjE,mEAAmE;YACnE,EAAE;YACF,kEAAkE;YAClE,6DAA6D;YAC7D,iCAAiC;YACjC,EAAE;YACF,mEAAmE;YACnE,0DAA0D;YAC1D,mEAAmE;YACnE,kEAAkE;YAClE,+DAA+D;YAC/D,EAAE;YACF,kEAAkE;YAClE,kEAAkE;YAClE,8DAA8D;YAC9D,kEAAkE;YAClE,wBAAwB;YACxB,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBACpD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBAC3D,OAAO,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC;YACpE,CAAC;YACD,OAAO,IAAI,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CAChD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAC9B,CAAC;IACF,OAAO,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAa;IAEb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,GACnD,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;IAC5D,OAAO,qBAAqB,CAAC,KAAK,EAAE;QAClC,aAAa,EAAE,yBAAyB,EAAE;QAC1C,aAAa,EAAE,gBAAgB,CAAC,UAAU,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC","sourcesContent":["interface WorkspaceAppManifestEntry {\n  id?: string;\n  path?: unknown;\n  url?: unknown;\n}\n\ninterface BuiltinAgentEntry {\n  id: string;\n  url?: string | null;\n}\n\ninterface ResolveCatchAllTargetOptions {\n  workspaceApps?: WorkspaceAppManifestEntry[] | null;\n  builtinAgents?: BuiltinAgentEntry[] | null;\n}\n\n/**\n * Resolve where `/dispatch/<appId>` should bounce to when it doesn't match\n * an explicit dispatch route. Used by the `$appId` catch-all route loader.\n *\n * Resolution order:\n *\n * 1. Workspace apps manifest (env, .agent-native/workspace-apps.json, or a\n *    filesystem scan of `apps/`).\n *    - `app.url` (absolute URL — externally hosted workspace app) wins if\n *      present.\n *    - Otherwise the `app.path` mounted under the workspace gateway is\n *      used. Path is normalized to a leading slash if missing\n *      (e.g. manifest entry `path: \"my-forms\"` -> `/my-forms`), so an app\n *      whose mounted path differs from its id ends up at the right place\n *      instead of being silently rewritten to `/${appId}`.\n *    - Bare entry with no path / url falls back to `/${appId}`.\n * 2. First-party template registry. When no workspace manifest matches\n *    (framework dev with each template on its own port, hosted dispatch\n *    with no sibling apps), return the matching template's deploy URL —\n *    dev URL in development (e.g. http://localhost:8084 for forms), prod\n *    URL in production (e.g. https://forms.agent-native.com).\n *\n * Returns `null` if neither lookup matches, letting the route render its\n * \"Page not found\" pane.\n */\n/**\n * Validate `app.url` is an absolute http(s) URL before we trust it as a\n * redirect target. A bare hostname (`\"forms.example.com\"`) or a\n * `javascript:` scheme would otherwise get returned verbatim from\n * `resolveCatchAllTarget` and produce a broken redirect (or a phishing\n * vector). Mirrors `normalizeWorkspaceAppUrl` in\n * `packages/core/src/deploy/workspace-deploy.ts` — but inlined to avoid\n * pulling the deploy CLI module into a runtime path.\n */\nfunction validatedAbsoluteUrl(value: unknown): string | undefined {\n  if (typeof value !== \"string\" || !value.trim()) return undefined;\n  try {\n    const parsed = new URL(value.trim());\n    if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n      return undefined;\n    }\n    return parsed.toString().replace(/\\/$/, \"\");\n  } catch {\n    return undefined;\n  }\n}\n\nexport function resolveCatchAllTarget(\n  appId: string,\n  options: ResolveCatchAllTargetOptions = {},\n): string | null {\n  const apps = options.workspaceApps;\n  if (apps) {\n    const app = apps.find((entry) => entry?.id === appId);\n    if (app) {\n      // Explicit externally-hosted URL wins. Workspaces that point at a\n      // remote deploy (e.g. a sibling app on Netlify) set `url` and we\n      // should bounce the user there rather than mounting a local path\n      // that doesn't exist inside the gateway. Validate the URL first —\n      // a bare hostname or non-http(s) scheme would produce a broken\n      // redirect (and a `javascript:` value would be a phishing vector).\n      const url = validatedAbsoluteUrl(app.url);\n      if (url) {\n        return url;\n      }\n      // Fall back to the mounted path. Normalize to leading slash so an\n      // entry whose path differs from its id (e.g. `id: \"forms\"`,\n      // `path: \"my-forms\"`) still lands on the correct gateway mount —\n      // not on `/${appId}`, which would silently route to the wrong app.\n      //\n      // Reject scheme-relative paths. Three variants reach this point —\n      // all of them get collapsed to a single leading slash so the\n      // redirect stays on the gateway:\n      //\n      //   `//evil.example`   — network-path reference, browser treats as\n      //                        absolute (https://evil.example).\n      //   `/\\evil.example`   — browsers normalize backslashes to forward\n      //                        slashes during URL parsing, same result.\n      //   `\\/evil.example`   — same idea, leading-backslash variant.\n      //\n      // The manifest parser only checks `startsWith(\"/\")` for the first\n      // case, and even that allows `//evil...`. Defend in depth here by\n      // collapsing any run of leading slashes-or-backslashes to one\n      // forward slash. Same phishing vector that `validatedAbsoluteUrl`\n      // closes for `app.url`.\n      if (typeof app.path === \"string\" && app.path.trim()) {\n        const normalized = app.path.trim().replace(/^[/\\\\]+/, \"/\");\n        return normalized.startsWith(\"/\") ? normalized : `/${normalized}`;\n      }\n      return `/${appId}`;\n    }\n  }\n  const builtin = (options.builtinAgents ?? []).find(\n    (agent) => agent.id === appId,\n  );\n  return builtin?.url ?? null;\n}\n\nexport async function resolveServerCatchAllTarget(\n  appId: string,\n): Promise<string | null> {\n  if (!import.meta.env.SSR) return null;\n  const { getBuiltinAgents, loadWorkspaceAppsManifest } =\n    await import(\"@agent-native/core/server/agent-discovery\");\n  return resolveCatchAllTarget(appId, {\n    workspaceApps: loadWorkspaceAppsManifest(),\n    builtinAgents: getBuiltinAgents(\"dispatch\"),\n  });\n}\n"]}

package/dist/routes/pages/$appId.d.ts

@@ -2,7 +2,7 @@ import { type ClientLoaderFunctionArgs, type LoaderFunctionArgs } from "react-ro
 export declare function meta(): {
     title: string;
 }[];
-export declare function loader({ params }: LoaderFunctionArgs): any;
+export declare function loader({ params }: LoaderFunctionArgs): Promise<any>;
 export declare function clientLoader({ params, serverLoader, }: ClientLoaderFunctionArgs): Promise<unknown>;
 export default function WorkspaceAppCatchAllRoute(): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=$appId.d.ts.map

package/dist/routes/pages/$appId.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"$appId.d.ts","sourceRoot":"","sources":["../../../src/routes/pages/$appId.tsx"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACxB,MAAM,cAAc,CAAC;AAiBtB,wBAAgB,IAAI;;IAEnB;AA2CD,wBAAgB,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,kBAAkB,OAQpD;AAED,wBAAsB,YAAY,CAAC,EACjC,MAAM,EACN,YAAY,GACb,EAAE,wBAAwB,oBAS1B;AAED,MAAM,CAAC,OAAO,UAAU,yBAAyB,4CAgGhD"}
+{"version":3,"file":"$appId.d.ts","sourceRoot":"","sources":["../../../src/routes/pages/$appId.tsx"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACxB,MAAM,cAAc,CAAC;AAiBtB,wBAAgB,IAAI;;IAEnB;AA2CD,wBAAsB,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,kBAAkB,gBAQ1D;AAED,wBAAsB,YAAY,CAAC,EACjC,MAAM,EACN,YAAY,GACb,EAAE,wBAAwB,oBAS1B;AAED,MAAM,CAAC,OAAO,UAAU,yBAAyB,4CAgGhD"}

package/dist/routes/pages/$appId.js

@@ -7,7 +7,7 @@ import { DispatchShell } from "../../components/dispatch-shell.js";
 import { Spinner } from "../../components/ui/spinner.js";
 import { Badge } from "../../components/ui/badge.js";
 import { Button } from "../../components/ui/button.js";
-import { resolveCatchAllTarget } from "../../lib/catch-all-target.js";
+import { resolveServerCatchAllTarget } from "../../lib/catch-all-target.js";
 import { workspaceAppHref, } from "../../lib/workspace-apps.js";
 export function meta() {
     return [{ title: "Workspace app - Dispatch" }];
@@ -53,14 +53,14 @@ function dispatchSelfRedirect(appId) {
         return appPath("/overview");
     return null;
 }
-export function loader({ params }) {
+export async function loader({ params }) {
     const appId = params.appId;
     if (!appId)
         return null;
     const selfTarget = dispatchSelfRedirect(appId);
     if (selfTarget)
         throw redirect(selfTarget);
-    const target = resolveCatchAllTarget(appId);
+    const target = await resolveServerCatchAllTarget(appId);
     if (target)
         throw redirect(target);
     return null;

package/dist/routes/pages/$appId.js.map

@@ -1 +1 @@
-{"version":3,"file":"$appId.js","sourceRoot":"","sources":["../../../src/routes/pages/$appId.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,SAAS,GAGV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EACL,gBAAgB,GAEjB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,UAAU,IAAI;IAClB,OAAO,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,SAAS,oBAAoB,CAAC,KAAyB;IACrD,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,EAAE,MAAM,EAAsB;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,UAAU;QAAE,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,MAAM;QAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,MAAM,EACN,YAAY,GACa;IACzB,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,UAAU;QAAE,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3C,uEAAuE;IACvE,oEAAoE;IACpE,yEAAyE;IACzE,wEAAwE;IACxE,oDAAoD;IACpD,OAAO,YAAY,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,yBAAyB;IAC/C,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC;IAC9B,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,cAAc,CACnD,qBAAqB,EACrB,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAC5B,EAAE,eAAe,EAAE,KAAK,EAAE,CAC3B,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CACjB,GAAG,EAAE,CACF,IAA8B,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI,IAAI,EAC3E,CAAC,KAAK,EAAE,IAAI,CAAC,CACd,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,MAAM,eAAe,GAAG,KAAK,KAAK,UAAU,CAAC;IAE7C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,eAAe;YAAE,OAAO;QAC5B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI;YAAE,OAAO;QACtD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;IAEjC,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,SAAG,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CACL,cAAK,SAAS,EAAC,kDAAkD,YAC/D,KAAC,OAAO,IAAC,SAAS,EAAC,QAAQ,GAAG,GAC1B,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,KAAC,aAAa,IACZ,KAAK,EAAE,GAAG,EAAE,IAAI,IAAI,gBAAgB,EACpC,WAAW,EAAC,kDAAkD,YAE9D,eAAK,SAAS,EAAC,yCAAyC,aACtD,KAAC,MAAM,IAAC,OAAO,QAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,OAAO,EAAC,SAAS,EAAC,YAAY,YAC9D,MAAC,IAAI,IAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,aAC5B,KAAC,aAAa,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,QAAQ,GAAG,gBAEzC,GACA,EAER,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAC3B,eAAK,SAAS,EAAC,WAAW,aACxB,eAAK,SAAS,EAAC,mCAAmC,aAChD,aAAI,SAAS,EAAC,yCAAyC,YACpD,GAAG,CAAC,IAAI,GACN,EACL,MAAC,KAAK,IACJ,OAAO,EAAC,SAAS,EACjB,SAAS,EAAC,8EAA8E,aAExF,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,GAAI,gBAEtB,IACJ,EACN,aAAG,SAAS,EAAC,+BAA+B,mEACS,GAAG,EACtD,eAAM,SAAS,EAAC,2BAA2B,YAAE,GAAG,CAAC,IAAI,GAAQ,EAAC,GAAG,qEAE/D,EACH,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAChB,aAAG,SAAS,EAAC,+BAA+B,yBACjC,GAAG,CAAC,UAAU,IACrB,CACL,CAAC,CAAC,CAAC,IAAI,EACP,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAChB,KAAC,MAAM,IAAC,OAAO,kBACb,aAAG,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,YAAY,oCAEvD,KAAC,gBAAgB,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,QAAQ,GAAG,IAC/C,GACG,CACV,CAAC,CAAC,CAAC,IAAI,IACJ,CACP,CAAC,CAAC,CAAC,CACF,eAAK,SAAS,EAAC,WAAW,aACxB,aAAI,SAAS,EAAC,yCAAyC,+BAElD,EACL,aAAG,SAAS,EAAC,+BAA+B,aAC1C,gBAAM,SAAS,EAAC,2BAA2B,kBAAG,KAAK,IAAQ,mEAEzD,EACJ,KAAC,MAAM,IAAC,OAAO,kBACb,KAAC,IAAI,IAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,4BAAoB,GACvC,IACL,CACP,IACG,GACQ,CACjB,CAAC;AACJ,CAAC","sourcesContent":["import { useEffect, useMemo } from \"react\";\nimport {\n  Link,\n  Navigate,\n  redirect,\n  useParams,\n  type ClientLoaderFunctionArgs,\n  type LoaderFunctionArgs,\n} from \"react-router\";\nimport { useActionQuery, appPath } from \"@agent-native/core/client\";\nimport {\n  IconArrowLeft,\n  IconArrowUpRight,\n  IconClockHour4,\n} from \"@tabler/icons-react\";\nimport { DispatchShell } from \"@/components/dispatch-shell\";\nimport { Spinner } from \"@/components/ui/spinner\";\nimport { Badge } from \"@/components/ui/badge\";\nimport { Button } from \"@/components/ui/button\";\nimport { resolveCatchAllTarget } from \"@/lib/catch-all-target\";\nimport {\n  workspaceAppHref,\n  type WorkspaceAppSummary,\n} from \"@/lib/workspace-apps\";\n\nexport function meta() {\n  return [{ title: \"Workspace app - Dispatch\" }];\n}\n\n/**\n * Catch-all for `/dispatch/<segment>` paths that don't match an explicit\n * Dispatch route. When `<segment>` is the id of a workspace app sibling\n * (e.g. `/dispatch/todo` after Builder.io routes a \"navigate to /todo\"\n * call through Dispatch's mount point), bounce to the absolute `/<appId>`\n * so the user lands on the actual app instead of a 404 inside Dispatch.\n *\n * Server-side redirect: we resolve the workspace app manifest via the\n * shared `loadWorkspaceAppsManifest()` helper, which checks the\n * `AGENT_NATIVE_WORKSPACE_APPS_JSON` env var, then the\n * `.agent-native/workspace-apps.json` file written by `workspace-deploy.ts`,\n * then a live filesystem scan of `apps/` for local dev. We then throw\n * `redirect(\"/<appId>\")`. React Router 7 does not prepend the basename to\n * absolute paths returned from a loader, so the redirect escapes Dispatch's\n * `/dispatch` mount cleanly.\n *\n * Why a catch-all instead of fixing the agent prompt: Builder.io currently\n * resolves \"navigate to /todo\" relative to Dispatch's mount, sending the\n * user to /dispatch/todo. The same wrong path then gets captured as the\n * OAuth callbackURL, so Google sign-in completes back at /dispatch/todo\n * and looks broken. This route fixes both the post-creation navigation\n * and the OAuth round-trip from a single place.\n *\n * Built-in template fallback: when no workspace manifest is available\n * (framework dev with each template on its own port, hosted dispatch with\n * no sibling apps), redirect to the matching first-party template's deploy\n * URL — `http://localhost:<devPort>` in dev, `https://<id>.agent-native.com`\n * in production. Without this, a user visiting `/forms` on dispatch is\n * forced to sign in (auth guard) and then lands on this route's \"Page not\n * found\" pane after the post-login reload.\n *\n * `appId === \"dispatch\"` short-circuit: when the segment matches Dispatch\n * itself (e.g. `/dispatch/dispatch`), we go straight to the overview rather\n * than chaining through `/dispatch` (which polled `useActionQuery` re-fired\n * `window.location.assign` against and looped forever in production).\n */\nfunction dispatchSelfRedirect(appId: string | undefined): string | null {\n  if (appId === \"dispatch\") return appPath(\"/overview\");\n  return null;\n}\n\nexport function loader({ params }: LoaderFunctionArgs) {\n  const appId = params.appId;\n  if (!appId) return null;\n  const selfTarget = dispatchSelfRedirect(appId);\n  if (selfTarget) throw redirect(selfTarget);\n  const target = resolveCatchAllTarget(appId);\n  if (target) throw redirect(target);\n  return null;\n}\n\nexport async function clientLoader({\n  params,\n  serverLoader,\n}: ClientLoaderFunctionArgs) {\n  const selfTarget = dispatchSelfRedirect(params.appId);\n  if (selfTarget) throw redirect(selfTarget);\n  // Defer to the server loader so the built-in template fallback runs on\n  // SPA navigations too (e.g. clicking a `/<template-id>` link inside\n  // dispatch). Without this the client side would only check the workspace\n  // apps query, which never lists the static first-party templates and so\n  // the user would land on the \"Page not found\" pane.\n  return serverLoader();\n}\n\nexport default function WorkspaceAppCatchAllRoute() {\n  const { appId } = useParams();\n  const { data: apps = [], isLoading } = useActionQuery(\n    \"list-workspace-apps\",\n    { includeAgentCards: false },\n    { refetchInterval: 2_000 },\n  );\n  const app = useMemo(\n    () =>\n      (apps as WorkspaceAppSummary[]).find((item) => item.id === appId) ?? null,\n    [appId, apps],\n  );\n  const href = app ? workspaceAppHref(app) : null;\n  const isSelfReference = appId === \"dispatch\";\n\n  useEffect(() => {\n    if (isSelfReference) return;\n    if (!app || app.status === \"pending\" || !href) return;\n    window.location.assign(href);\n  }, [app, href, isSelfReference]);\n\n  if (isSelfReference) {\n    return <Navigate to={appPath(\"/overview\")} replace />;\n  }\n\n  if ((isLoading && !app) || (app && app.status !== \"pending\" && href)) {\n    return (\n      <div className=\"flex h-screen w-full items-center justify-center\">\n        <Spinner className=\"size-8\" />\n      </div>\n    );\n  }\n\n  return (\n    <DispatchShell\n      title={app?.name || \"Page not found\"}\n      description=\"This route is not in the workspace app list yet.\"\n    >\n      <div className=\"max-w-2xl rounded-lg border bg-card p-5\">\n        <Button asChild size=\"sm\" variant=\"ghost\" className=\"-ml-2 mb-4\">\n          <Link to={appPath(\"/overview\")}>\n            <IconArrowLeft size={15} className=\"mr-1.5\" />\n            Overview\n          </Link>\n        </Button>\n\n        {app?.status === \"pending\" ? (\n          <div className=\"space-y-4\">\n            <div className=\"flex flex-wrap items-center gap-2\">\n              <h2 className=\"text-base font-semibold text-foreground\">\n                {app.name}\n              </h2>\n              <Badge\n                variant=\"outline\"\n                className=\"gap-1 border-amber-500/30 bg-amber-500/10 text-amber-700 dark:text-amber-300\"\n              >\n                <IconClockHour4 size={12} />\n                Building\n              </Badge>\n            </div>\n            <p className=\"text-sm text-muted-foreground\">\n              This app is being created. It will be available at{\" \"}\n              <span className=\"font-mono text-foreground\">{app.path}</span>{\" \"}\n              after its branch is merged and the workspace deploy finishes.\n            </p>\n            {app.branchName ? (\n              <p className=\"text-xs text-muted-foreground\">\n                Branch: {app.branchName}\n              </p>\n            ) : null}\n            {app.builderUrl ? (\n              <Button asChild>\n                <a href={app.builderUrl} target=\"_blank\" rel=\"noreferrer\">\n                  Open Builder branch\n                  <IconArrowUpRight size={15} className=\"ml-1.5\" />\n                </a>\n              </Button>\n            ) : null}\n          </div>\n        ) : (\n          <div className=\"space-y-3\">\n            <h2 className=\"text-base font-semibold text-foreground\">\n              Page not found\n            </h2>\n            <p className=\"text-sm text-muted-foreground\">\n              <span className=\"font-mono text-foreground\">/{appId}</span> isn't\n              a Dispatch tab or a workspace app in this workspace.\n            </p>\n            <Button asChild>\n              <Link to={appPath(\"/apps\")}>Browse apps</Link>\n            </Button>\n          </div>\n        )}\n      </div>\n    </DispatchShell>\n  );\n}\n"]}
+{"version":3,"file":"$appId.js","sourceRoot":"","sources":["../../../src/routes/pages/$appId.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,SAAS,GAGV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EACL,gBAAgB,GAEjB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,UAAU,IAAI;IAClB,OAAO,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,SAAS,oBAAoB,CAAC,KAAyB;IACrD,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,EAAE,MAAM,EAAsB;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,UAAU;QAAE,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,MAAM;QAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,MAAM,EACN,YAAY,GACa;IACzB,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,UAAU;QAAE,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3C,uEAAuE;IACvE,oEAAoE;IACpE,yEAAyE;IACzE,wEAAwE;IACxE,oDAAoD;IACpD,OAAO,YAAY,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,yBAAyB;IAC/C,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC;IAC9B,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,cAAc,CACnD,qBAAqB,EACrB,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAC5B,EAAE,eAAe,EAAE,KAAK,EAAE,CAC3B,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CACjB,GAAG,EAAE,CACF,IAA8B,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI,IAAI,EAC3E,CAAC,KAAK,EAAE,IAAI,CAAC,CACd,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,MAAM,eAAe,GAAG,KAAK,KAAK,UAAU,CAAC;IAE7C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,eAAe;YAAE,OAAO;QAC5B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI;YAAE,OAAO;QACtD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;IAEjC,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,SAAG,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CACL,cAAK,SAAS,EAAC,kDAAkD,YAC/D,KAAC,OAAO,IAAC,SAAS,EAAC,QAAQ,GAAG,GAC1B,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,KAAC,aAAa,IACZ,KAAK,EAAE,GAAG,EAAE,IAAI,IAAI,gBAAgB,EACpC,WAAW,EAAC,kDAAkD,YAE9D,eAAK,SAAS,EAAC,yCAAyC,aACtD,KAAC,MAAM,IAAC,OAAO,QAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,OAAO,EAAC,SAAS,EAAC,YAAY,YAC9D,MAAC,IAAI,IAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,aAC5B,KAAC,aAAa,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,QAAQ,GAAG,gBAEzC,GACA,EAER,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAC3B,eAAK,SAAS,EAAC,WAAW,aACxB,eAAK,SAAS,EAAC,mCAAmC,aAChD,aAAI,SAAS,EAAC,yCAAyC,YACpD,GAAG,CAAC,IAAI,GACN,EACL,MAAC,KAAK,IACJ,OAAO,EAAC,SAAS,EACjB,SAAS,EAAC,8EAA8E,aAExF,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,GAAI,gBAEtB,IACJ,EACN,aAAG,SAAS,EAAC,+BAA+B,mEACS,GAAG,EACtD,eAAM,SAAS,EAAC,2BAA2B,YAAE,GAAG,CAAC,IAAI,GAAQ,EAAC,GAAG,qEAE/D,EACH,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAChB,aAAG,SAAS,EAAC,+BAA+B,yBACjC,GAAG,CAAC,UAAU,IACrB,CACL,CAAC,CAAC,CAAC,IAAI,EACP,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAChB,KAAC,MAAM,IAAC,OAAO,kBACb,aAAG,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,YAAY,oCAEvD,KAAC,gBAAgB,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,QAAQ,GAAG,IAC/C,GACG,CACV,CAAC,CAAC,CAAC,IAAI,IACJ,CACP,CAAC,CAAC,CAAC,CACF,eAAK,SAAS,EAAC,WAAW,aACxB,aAAI,SAAS,EAAC,yCAAyC,+BAElD,EACL,aAAG,SAAS,EAAC,+BAA+B,aAC1C,gBAAM,SAAS,EAAC,2BAA2B,kBAAG,KAAK,IAAQ,mEAEzD,EACJ,KAAC,MAAM,IAAC,OAAO,kBACb,KAAC,IAAI,IAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,4BAAoB,GACvC,IACL,CACP,IACG,GACQ,CACjB,CAAC;AACJ,CAAC","sourcesContent":["import { useEffect, useMemo } from \"react\";\nimport {\n  Link,\n  Navigate,\n  redirect,\n  useParams,\n  type ClientLoaderFunctionArgs,\n  type LoaderFunctionArgs,\n} from \"react-router\";\nimport { useActionQuery, appPath } from \"@agent-native/core/client\";\nimport {\n  IconArrowLeft,\n  IconArrowUpRight,\n  IconClockHour4,\n} from \"@tabler/icons-react\";\nimport { DispatchShell } from \"@/components/dispatch-shell\";\nimport { Spinner } from \"@/components/ui/spinner\";\nimport { Badge } from \"@/components/ui/badge\";\nimport { Button } from \"@/components/ui/button\";\nimport { resolveServerCatchAllTarget } from \"@/lib/catch-all-target\";\nimport {\n  workspaceAppHref,\n  type WorkspaceAppSummary,\n} from \"@/lib/workspace-apps\";\n\nexport function meta() {\n  return [{ title: \"Workspace app - Dispatch\" }];\n}\n\n/**\n * Catch-all for `/dispatch/<segment>` paths that don't match an explicit\n * Dispatch route. When `<segment>` is the id of a workspace app sibling\n * (e.g. `/dispatch/todo` after Builder.io routes a \"navigate to /todo\"\n * call through Dispatch's mount point), bounce to the absolute `/<appId>`\n * so the user lands on the actual app instead of a 404 inside Dispatch.\n *\n * Server-side redirect: we resolve the workspace app manifest via the\n * shared `loadWorkspaceAppsManifest()` helper, which checks the\n * `AGENT_NATIVE_WORKSPACE_APPS_JSON` env var, then the\n * `.agent-native/workspace-apps.json` file written by `workspace-deploy.ts`,\n * then a live filesystem scan of `apps/` for local dev. We then throw\n * `redirect(\"/<appId>\")`. React Router 7 does not prepend the basename to\n * absolute paths returned from a loader, so the redirect escapes Dispatch's\n * `/dispatch` mount cleanly.\n *\n * Why a catch-all instead of fixing the agent prompt: Builder.io currently\n * resolves \"navigate to /todo\" relative to Dispatch's mount, sending the\n * user to /dispatch/todo. The same wrong path then gets captured as the\n * OAuth callbackURL, so Google sign-in completes back at /dispatch/todo\n * and looks broken. This route fixes both the post-creation navigation\n * and the OAuth round-trip from a single place.\n *\n * Built-in template fallback: when no workspace manifest is available\n * (framework dev with each template on its own port, hosted dispatch with\n * no sibling apps), redirect to the matching first-party template's deploy\n * URL — `http://localhost:<devPort>` in dev, `https://<id>.agent-native.com`\n * in production. Without this, a user visiting `/forms` on dispatch is\n * forced to sign in (auth guard) and then lands on this route's \"Page not\n * found\" pane after the post-login reload.\n *\n * `appId === \"dispatch\"` short-circuit: when the segment matches Dispatch\n * itself (e.g. `/dispatch/dispatch`), we go straight to the overview rather\n * than chaining through `/dispatch` (which polled `useActionQuery` re-fired\n * `window.location.assign` against and looped forever in production).\n */\nfunction dispatchSelfRedirect(appId: string | undefined): string | null {\n  if (appId === \"dispatch\") return appPath(\"/overview\");\n  return null;\n}\n\nexport async function loader({ params }: LoaderFunctionArgs) {\n  const appId = params.appId;\n  if (!appId) return null;\n  const selfTarget = dispatchSelfRedirect(appId);\n  if (selfTarget) throw redirect(selfTarget);\n  const target = await resolveServerCatchAllTarget(appId);\n  if (target) throw redirect(target);\n  return null;\n}\n\nexport async function clientLoader({\n  params,\n  serverLoader,\n}: ClientLoaderFunctionArgs) {\n  const selfTarget = dispatchSelfRedirect(params.appId);\n  if (selfTarget) throw redirect(selfTarget);\n  // Defer to the server loader so the built-in template fallback runs on\n  // SPA navigations too (e.g. clicking a `/<template-id>` link inside\n  // dispatch). Without this the client side would only check the workspace\n  // apps query, which never lists the static first-party templates and so\n  // the user would land on the \"Page not found\" pane.\n  return serverLoader();\n}\n\nexport default function WorkspaceAppCatchAllRoute() {\n  const { appId } = useParams();\n  const { data: apps = [], isLoading } = useActionQuery(\n    \"list-workspace-apps\",\n    { includeAgentCards: false },\n    { refetchInterval: 2_000 },\n  );\n  const app = useMemo(\n    () =>\n      (apps as WorkspaceAppSummary[]).find((item) => item.id === appId) ?? null,\n    [appId, apps],\n  );\n  const href = app ? workspaceAppHref(app) : null;\n  const isSelfReference = appId === \"dispatch\";\n\n  useEffect(() => {\n    if (isSelfReference) return;\n    if (!app || app.status === \"pending\" || !href) return;\n    window.location.assign(href);\n  }, [app, href, isSelfReference]);\n\n  if (isSelfReference) {\n    return <Navigate to={appPath(\"/overview\")} replace />;\n  }\n\n  if ((isLoading && !app) || (app && app.status !== \"pending\" && href)) {\n    return (\n      <div className=\"flex h-screen w-full items-center justify-center\">\n        <Spinner className=\"size-8\" />\n      </div>\n    );\n  }\n\n  return (\n    <DispatchShell\n      title={app?.name || \"Page not found\"}\n      description=\"This route is not in the workspace app list yet.\"\n    >\n      <div className=\"max-w-2xl rounded-lg border bg-card p-5\">\n        <Button asChild size=\"sm\" variant=\"ghost\" className=\"-ml-2 mb-4\">\n          <Link to={appPath(\"/overview\")}>\n            <IconArrowLeft size={15} className=\"mr-1.5\" />\n            Overview\n          </Link>\n        </Button>\n\n        {app?.status === \"pending\" ? (\n          <div className=\"space-y-4\">\n            <div className=\"flex flex-wrap items-center gap-2\">\n              <h2 className=\"text-base font-semibold text-foreground\">\n                {app.name}\n              </h2>\n              <Badge\n                variant=\"outline\"\n                className=\"gap-1 border-amber-500/30 bg-amber-500/10 text-amber-700 dark:text-amber-300\"\n              >\n                <IconClockHour4 size={12} />\n                Building\n              </Badge>\n            </div>\n            <p className=\"text-sm text-muted-foreground\">\n              This app is being created. It will be available at{\" \"}\n              <span className=\"font-mono text-foreground\">{app.path}</span>{\" \"}\n              after its branch is merged and the workspace deploy finishes.\n            </p>\n            {app.branchName ? (\n              <p className=\"text-xs text-muted-foreground\">\n                Branch: {app.branchName}\n              </p>\n            ) : null}\n            {app.builderUrl ? (\n              <Button asChild>\n                <a href={app.builderUrl} target=\"_blank\" rel=\"noreferrer\">\n                  Open Builder branch\n                  <IconArrowUpRight size={15} className=\"ml-1.5\" />\n                </a>\n              </Button>\n            ) : null}\n          </div>\n        ) : (\n          <div className=\"space-y-3\">\n            <h2 className=\"text-base font-semibold text-foreground\">\n              Page not found\n            </h2>\n            <p className=\"text-sm text-muted-foreground\">\n              <span className=\"font-mono text-foreground\">/{appId}</span> isn't\n              a Dispatch tab or a workspace app in this workspace.\n            </p>\n            <Button asChild>\n              <Link to={appPath(\"/apps\")}>Browse apps</Link>\n            </Button>\n          </div>\n        )}\n      </div>\n    </DispatchShell>\n  );\n}\n"]}

package/dist/server/lib/thread-link-preview.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"thread-link-preview.d.ts","sourceRoot":"","sources":["../../../src/server/lib/thread-link-preview.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAiGD,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,IAAI,CAiCf;AAQD,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAClC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAcnC;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;;;;;;;;;;;;;;;KAqB3E"}
+{"version":3,"file":"thread-link-preview.d.ts","sourceRoot":"","sources":["../../../src/server/lib/thread-link-preview.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAiGD,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,IAAI,CAiCf;AAQD,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAClC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAiBnC;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;;;;;;;;;;;;;;;KAqB3E"}

package/dist/server/lib/thread-link-preview.js

@@ -1,4 +1,3 @@
-import { getRequestContext, getThread } from "@agent-native/core/server";
 const IMAGE_URL_KEYS = new Set([
     "previewUrl",
     "thumbnailUrl",
@@ -134,9 +133,12 @@ function previewDescription(thread) {
     return "Open this Agent-Native thread in Dispatch.";
 }
 export async function loadThreadLinkPreview(threadId) {
+    if (!import.meta.env.SSR)
+        return null;
     const id = threadId?.trim();
     if (!id)
         return null;
+    const { getRequestContext, getThread } = await import("@agent-native/core/server");
     const viewerEmail = getRequestContext()?.userEmail?.trim();
     if (!viewerEmail)
         return null;

package/dist/server/lib/thread-link-preview.js.map

@@ -1 +1 @@
-{"version":3,"file":"thread-link-preview.js","sourceRoot":"","sources":["../../../src/server/lib/thread-link-preview.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAQzE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,YAAY;IACZ,cAAc;IACd,UAAU;IACV,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,gBAAgB;IAChB,sBAAsB;IACtB,cAAc;IACd,sBAAsB;CACvB,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,IAAI,EAAE;SACN,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;SAC3B,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CACL,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7D,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC9D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,GAAY;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,UAAkB;IAElB,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,QAAQ,GAAI,MAAiC,CAAC,QAAQ,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,KACE,IAAI,YAAY,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EACtC,YAAY,IAAI,CAAC,EACjB,YAAY,EAAE,EACd,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QAEtC,KAAK,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAA4B,CAAC;YAC3D,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAAE,SAAS;YAE7B,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,YAAY,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxD,MAAM,UAAU,GAAG,2BAA2B,CAAC,YAAY,CAAC,CAAC;gBAC7D,IAAI,UAAU;oBAAE,OAAO,UAAU,CAAC;YACpC,CAAC;YAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAkB;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,4CAA4C,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAmC;IAEnC,MAAM,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,MAAM,WAAW,GAAG,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,qBAAqB,CAAC;IAC3D,OAAO;QACL,KAAK;QACL,WAAW,EAAE,kBAAkB,CAAC,MAAM,CAAC;QACvC,QAAQ,EAAE,4BAA4B,CAAC,MAAM,CAAC,UAAU,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAiC;IAC1E,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC;IAC1E,MAAM,WAAW,GACf,OAAO,EAAE,WAAW;QACpB,0DAA0D,CAAC;IAC7D,MAAM,KAAK,GAAG,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;IACxC,OAAO;QACL,EAAE,KAAK,EAAE;QACT,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE;QAC7C,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE;QACxC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE;QACpD,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;QAC3C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D;YACE,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;SACnD;QACD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE;QACzC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,WAAW,EAAE;QACrD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC","sourcesContent":["import type { ChatThread } from \"@agent-native/core/server\";\nimport { getRequestContext, getThread } from \"@agent-native/core/server\";\n\nexport interface ThreadLinkPreview {\n  title: string;\n  description: string;\n  imageUrl: string | null;\n}\n\nconst IMAGE_URL_KEYS = new Set([\n  \"previewUrl\",\n  \"thumbnailUrl\",\n  \"imageUrl\",\n  \"image\",\n  \"downloadUrl\",\n]);\n\nconst GENERATION_TOOL_NAMES = new Set([\n  \"generate-image\",\n  \"generate-image-batch\",\n  \"refine-image\",\n  \"rerun-generation-run\",\n]);\n\nfunction safeJsonParse(value: string): unknown {\n  try {\n    return JSON.parse(value);\n  } catch {\n    return null;\n  }\n}\n\nfunction cleanUrlCandidate(value: string): string {\n  return value\n    .trim()\n    .replace(/[),.;\\]}]+$/g, \"\")\n    .replace(/^[\"'(<]+/g, \"\");\n}\n\nfunction isAbsoluteHttpUrl(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return url.protocol === \"https:\" || url.protocol === \"http:\";\n  } catch {\n    return false;\n  }\n}\n\nfunction isImageLikeUrl(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return (\n      /\\.(?:png|jpe?g|webp|gif|avif)(?:$|[?#])/i.test(url.pathname) ||\n      /\\/api\\/assets\\/[^/]+\\/content(?:$|[?#])/i.test(url.pathname)\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction validPreviewImageUrl(value: unknown, key?: string): string | null {\n  if (typeof value !== \"string\") return null;\n  const candidate = cleanUrlCandidate(value);\n  if (!isAbsoluteHttpUrl(candidate)) return null;\n  if (key && IMAGE_URL_KEYS.has(key)) return candidate;\n  return isImageLikeUrl(candidate) ? candidate : null;\n}\n\nfunction imageUrlFromStructuredValue(value: unknown): string | null {\n  if (!value || typeof value !== \"object\") return null;\n  if (Array.isArray(value)) {\n    for (let i = value.length - 1; i >= 0; i--) {\n      const found = imageUrlFromStructuredValue(value[i]);\n      if (found) return found;\n    }\n    return null;\n  }\n\n  const record = value as Record<string, unknown>;\n  for (const key of IMAGE_URL_KEYS) {\n    const found = validPreviewImageUrl(record[key], key);\n    if (found) return found;\n  }\n  for (const [key, child] of Object.entries(record).reverse()) {\n    const direct = validPreviewImageUrl(child, key);\n    if (direct) return direct;\n    if (child && typeof child === \"object\") {\n      const nested = imageUrlFromStructuredValue(child);\n      if (nested) return nested;\n    }\n  }\n  return null;\n}\n\nfunction imageUrlFromText(value: string): string | null {\n  const matches = value.match(/https?:\\/\\/[^\\s<>\"']+/g);\n  if (!matches) return null;\n  for (let i = matches.length - 1; i >= 0; i--) {\n    const candidate = validPreviewImageUrl(matches[i]);\n    if (candidate) return candidate;\n  }\n  return null;\n}\n\nexport function extractThreadPreviewImageUrl(\n  threadData: string,\n): string | null {\n  const parsed = safeJsonParse(threadData);\n  if (!parsed || typeof parsed !== \"object\") return null;\n  const messages = (parsed as { messages?: unknown }).messages;\n  if (!Array.isArray(messages)) return null;\n\n  for (\n    let messageIndex = messages.length - 1;\n    messageIndex >= 0;\n    messageIndex--\n  ) {\n    const entry = messages[messageIndex] as any;\n    const message = entry?.message ?? entry;\n    const content = message?.content;\n    if (!Array.isArray(content)) continue;\n\n    for (let partIndex = content.length - 1; partIndex >= 0; partIndex--) {\n      const part = content[partIndex] as Record<string, unknown>;\n      const result = typeof part.result === \"string\" ? part.result : \"\";\n      if (!result.trim()) continue;\n\n      const toolName = typeof part.toolName === \"string\" ? part.toolName : \"\";\n      const parsedResult = safeJsonParse(result);\n      if (parsedResult && GENERATION_TOOL_NAMES.has(toolName)) {\n        const structured = imageUrlFromStructuredValue(parsedResult);\n        if (structured) return structured;\n      }\n\n      const fromText = imageUrlFromText(result);\n      if (fromText) return fromText;\n    }\n  }\n  return null;\n}\n\nfunction previewDescription(thread: ChatThread): string {\n  const preview = thread.preview.trim();\n  if (preview) return preview.slice(0, 180);\n  return \"Open this Agent-Native thread in Dispatch.\";\n}\n\nexport async function loadThreadLinkPreview(\n  threadId: string | null | undefined,\n): Promise<ThreadLinkPreview | null> {\n  const id = threadId?.trim();\n  if (!id) return null;\n  const viewerEmail = getRequestContext()?.userEmail?.trim();\n  if (!viewerEmail) return null;\n  const thread = await getThread(id).catch(() => null);\n  if (!thread) return null;\n  if (thread.ownerEmail !== viewerEmail) return null;\n  const title = thread.title.trim() || \"Agent-Native thread\";\n  return {\n    title,\n    description: previewDescription(thread),\n    imageUrl: extractThreadPreviewImageUrl(thread.threadData),\n  };\n}\n\nexport function buildThreadLinkPreviewMeta(preview: ThreadLinkPreview | null) {\n  const title = preview?.title ? `${preview.title} - Dispatch` : \"Dispatch\";\n  const description =\n    preview?.description ||\n    \"Open this Agent-Native thread in the Dispatch workspace.\";\n  const image = preview?.imageUrl ?? null;\n  return [\n    { title },\n    { name: \"description\", content: description },\n    { property: \"og:title\", content: title },\n    { property: \"og:description\", content: description },\n    { property: \"og:type\", content: \"website\" },\n    ...(image ? [{ property: \"og:image\", content: image }] : []),\n    {\n      name: \"twitter:card\",\n      content: image ? \"summary_large_image\" : \"summary\",\n    },\n    { name: \"twitter:title\", content: title },\n    { name: \"twitter:description\", content: description },\n    ...(image ? [{ name: \"twitter:image\", content: image }] : []),\n  ];\n}\n"]}
+{"version":3,"file":"thread-link-preview.js","sourceRoot":"","sources":["../../../src/server/lib/thread-link-preview.ts"],"names":[],"mappings":"AAQA,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,YAAY;IACZ,cAAc;IACd,UAAU;IACV,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,gBAAgB;IAChB,sBAAsB;IACtB,cAAc;IACd,sBAAsB;CACvB,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,IAAI,EAAE;SACN,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;SAC3B,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CACL,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7D,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC9D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,GAAY;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,UAAkB;IAElB,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,QAAQ,GAAI,MAAiC,CAAC,QAAQ,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,KACE,IAAI,YAAY,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EACtC,YAAY,IAAI,CAAC,EACjB,YAAY,EAAE,EACd,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QAEtC,KAAK,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAA4B,CAAC;YAC3D,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAAE,SAAS;YAE7B,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,YAAY,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxD,MAAM,UAAU,GAAG,2BAA2B,CAAC,YAAY,CAAC,CAAC;gBAC7D,IAAI,UAAU;oBAAE,OAAO,UAAU,CAAC;YACpC,CAAC;YAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAkB;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,4CAA4C,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAmC;IAEnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,GACpC,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,qBAAqB,CAAC;IAC3D,OAAO;QACL,KAAK;QACL,WAAW,EAAE,kBAAkB,CAAC,MAAM,CAAC;QACvC,QAAQ,EAAE,4BAA4B,CAAC,MAAM,CAAC,UAAU,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAiC;IAC1E,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC;IAC1E,MAAM,WAAW,GACf,OAAO,EAAE,WAAW;QACpB,0DAA0D,CAAC;IAC7D,MAAM,KAAK,GAAG,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;IACxC,OAAO;QACL,EAAE,KAAK,EAAE;QACT,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE;QAC7C,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE;QACxC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE;QACpD,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;QAC3C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D;YACE,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;SACnD;QACD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE;QACzC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,WAAW,EAAE;QACrD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC","sourcesContent":["import type { ChatThread } from \"@agent-native/core/server\";\n\nexport interface ThreadLinkPreview {\n  title: string;\n  description: string;\n  imageUrl: string | null;\n}\n\nconst IMAGE_URL_KEYS = new Set([\n  \"previewUrl\",\n  \"thumbnailUrl\",\n  \"imageUrl\",\n  \"image\",\n  \"downloadUrl\",\n]);\n\nconst GENERATION_TOOL_NAMES = new Set([\n  \"generate-image\",\n  \"generate-image-batch\",\n  \"refine-image\",\n  \"rerun-generation-run\",\n]);\n\nfunction safeJsonParse(value: string): unknown {\n  try {\n    return JSON.parse(value);\n  } catch {\n    return null;\n  }\n}\n\nfunction cleanUrlCandidate(value: string): string {\n  return value\n    .trim()\n    .replace(/[),.;\\]}]+$/g, \"\")\n    .replace(/^[\"'(<]+/g, \"\");\n}\n\nfunction isAbsoluteHttpUrl(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return url.protocol === \"https:\" || url.protocol === \"http:\";\n  } catch {\n    return false;\n  }\n}\n\nfunction isImageLikeUrl(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return (\n      /\\.(?:png|jpe?g|webp|gif|avif)(?:$|[?#])/i.test(url.pathname) ||\n      /\\/api\\/assets\\/[^/]+\\/content(?:$|[?#])/i.test(url.pathname)\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction validPreviewImageUrl(value: unknown, key?: string): string | null {\n  if (typeof value !== \"string\") return null;\n  const candidate = cleanUrlCandidate(value);\n  if (!isAbsoluteHttpUrl(candidate)) return null;\n  if (key && IMAGE_URL_KEYS.has(key)) return candidate;\n  return isImageLikeUrl(candidate) ? candidate : null;\n}\n\nfunction imageUrlFromStructuredValue(value: unknown): string | null {\n  if (!value || typeof value !== \"object\") return null;\n  if (Array.isArray(value)) {\n    for (let i = value.length - 1; i >= 0; i--) {\n      const found = imageUrlFromStructuredValue(value[i]);\n      if (found) return found;\n    }\n    return null;\n  }\n\n  const record = value as Record<string, unknown>;\n  for (const key of IMAGE_URL_KEYS) {\n    const found = validPreviewImageUrl(record[key], key);\n    if (found) return found;\n  }\n  for (const [key, child] of Object.entries(record).reverse()) {\n    const direct = validPreviewImageUrl(child, key);\n    if (direct) return direct;\n    if (child && typeof child === \"object\") {\n      const nested = imageUrlFromStructuredValue(child);\n      if (nested) return nested;\n    }\n  }\n  return null;\n}\n\nfunction imageUrlFromText(value: string): string | null {\n  const matches = value.match(/https?:\\/\\/[^\\s<>\"']+/g);\n  if (!matches) return null;\n  for (let i = matches.length - 1; i >= 0; i--) {\n    const candidate = validPreviewImageUrl(matches[i]);\n    if (candidate) return candidate;\n  }\n  return null;\n}\n\nexport function extractThreadPreviewImageUrl(\n  threadData: string,\n): string | null {\n  const parsed = safeJsonParse(threadData);\n  if (!parsed || typeof parsed !== \"object\") return null;\n  const messages = (parsed as { messages?: unknown }).messages;\n  if (!Array.isArray(messages)) return null;\n\n  for (\n    let messageIndex = messages.length - 1;\n    messageIndex >= 0;\n    messageIndex--\n  ) {\n    const entry = messages[messageIndex] as any;\n    const message = entry?.message ?? entry;\n    const content = message?.content;\n    if (!Array.isArray(content)) continue;\n\n    for (let partIndex = content.length - 1; partIndex >= 0; partIndex--) {\n      const part = content[partIndex] as Record<string, unknown>;\n      const result = typeof part.result === \"string\" ? part.result : \"\";\n      if (!result.trim()) continue;\n\n      const toolName = typeof part.toolName === \"string\" ? part.toolName : \"\";\n      const parsedResult = safeJsonParse(result);\n      if (parsedResult && GENERATION_TOOL_NAMES.has(toolName)) {\n        const structured = imageUrlFromStructuredValue(parsedResult);\n        if (structured) return structured;\n      }\n\n      const fromText = imageUrlFromText(result);\n      if (fromText) return fromText;\n    }\n  }\n  return null;\n}\n\nfunction previewDescription(thread: ChatThread): string {\n  const preview = thread.preview.trim();\n  if (preview) return preview.slice(0, 180);\n  return \"Open this Agent-Native thread in Dispatch.\";\n}\n\nexport async function loadThreadLinkPreview(\n  threadId: string | null | undefined,\n): Promise<ThreadLinkPreview | null> {\n  if (!import.meta.env.SSR) return null;\n  const id = threadId?.trim();\n  if (!id) return null;\n  const { getRequestContext, getThread } =\n    await import(\"@agent-native/core/server\");\n  const viewerEmail = getRequestContext()?.userEmail?.trim();\n  if (!viewerEmail) return null;\n  const thread = await getThread(id).catch(() => null);\n  if (!thread) return null;\n  if (thread.ownerEmail !== viewerEmail) return null;\n  const title = thread.title.trim() || \"Agent-Native thread\";\n  return {\n    title,\n    description: previewDescription(thread),\n    imageUrl: extractThreadPreviewImageUrl(thread.threadData),\n  };\n}\n\nexport function buildThreadLinkPreviewMeta(preview: ThreadLinkPreview | null) {\n  const title = preview?.title ? `${preview.title} - Dispatch` : \"Dispatch\";\n  const description =\n    preview?.description ||\n    \"Open this Agent-Native thread in the Dispatch workspace.\";\n  const image = preview?.imageUrl ?? null;\n  return [\n    { title },\n    { name: \"description\", content: description },\n    { property: \"og:title\", content: title },\n    { property: \"og:description\", content: description },\n    { property: \"og:type\", content: \"website\" },\n    ...(image ? [{ property: \"og:image\", content: image }] : []),\n    {\n      name: \"twitter:card\",\n      content: image ? \"summary_large_image\" : \"summary\",\n    },\n    { name: \"twitter:title\", content: title },\n    { name: \"twitter:description\", content: description },\n    ...(image ? [{ name: \"twitter:image\", content: image }] : []),\n  ];\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/dispatch",
-  "version": "0.8.26",
+  "version": "0.8.28",
   "type": "module",
   "description": "Dispatch — workspace control plane for agent-native apps. Vault, integrations, destinations, scheduled jobs, and cross-app delegation, shipped as a single drop-in package.",
   "license": "MIT",

package/src/lib/catch-all-target.spec.ts

@@ -1,80 +1,40 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-
-const loadWorkspaceAppsManifestMock = vi.hoisted(() => vi.fn());
-const getBuiltinAgentsMock = vi.hoisted(() => vi.fn());
-
-vi.mock("@agent-native/core/server/agent-discovery", () => ({
-  loadWorkspaceAppsManifest: loadWorkspaceAppsManifestMock,
-  getBuiltinAgents: getBuiltinAgentsMock,
-}));
-
+import { describe, expect, it } from "vitest";
 import { resolveCatchAllTarget } from "./catch-all-target.js";
 
-beforeEach(() => {
-  vi.clearAllMocks();
-});
-
-afterEach(() => {
-  vi.clearAllMocks();
-});
-
 describe("resolveCatchAllTarget", () => {
   it("prefers the workspace manifest entry when one matches", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "todo", name: "Todo", path: "/todo" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([
-      {
-        id: "todo",
-        name: "Todo",
-        description: "",
-        url: "https://todo.example.com",
-        color: "#000",
-      },
-    ]);
-
-    expect(resolveCatchAllTarget("todo")).toBe("/todo");
+    expect(
+      resolveCatchAllTarget("todo", {
+        workspaceApps: [{ id: "todo", path: "/todo" }],
+        builtinAgents: [{ id: "todo", url: "https://todo.example.com" }],
+      }),
+    ).toBe("/todo");
   });
 
   it("falls back to the built-in template URL when no workspace manifest exists", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue(null);
-    getBuiltinAgentsMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        description: "",
-        url: "http://localhost:8084",
-        color: "#06B6D4",
-      },
-    ]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("http://localhost:8084");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: null,
+        builtinAgents: [{ id: "forms", url: "http://localhost:8084" }],
+      }),
+    ).toBe("http://localhost:8084");
   });
 
   it("falls back to the built-in template URL when the workspace manifest does not include the app", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "dispatch", name: "Dispatch", path: "/dispatch" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        description: "",
-        url: "http://localhost:8084",
-        color: "#06B6D4",
-      },
-    ]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("http://localhost:8084");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [{ id: "dispatch", path: "/dispatch" }],
+        builtinAgents: [{ id: "forms", url: "http://localhost:8084" }],
+      }),
+    ).toBe("http://localhost:8084");
   });
 
   it("normalizes a manifest entry without a leading slash", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "todo", name: "Todo", path: "todo" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("todo")).toBe("/todo");
+    expect(
+      resolveCatchAllTarget("todo", {
+        workspaceApps: [{ id: "todo", path: "todo" }],
+      }),
+    ).toBe("/todo");
   });
 
   it("uses app.path when id !== path (not /${appId})", () => {
@@ -83,29 +43,28 @@ describe("resolveCatchAllTarget", () => {
     // silently rewritten to `/forms` (the appId) and routed to the wrong
     // app. The normalizer now keeps the manifest path and only prepends
     // the missing slash.
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "forms", name: "Forms", path: "my-forms" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/my-forms");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [{ id: "forms", path: "my-forms" }],
+      }),
+    ).toBe("/my-forms");
   });
 
   it("prefers app.url when the manifest entry has an externally-hosted URL", () => {
     // Workspaces can point at remote deploys. The catch-all should bounce
     // to the absolute URL instead of mounting a local path that doesn't
     // exist inside the gateway.
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        path: "/forms",
-        url: "https://forms.example.com",
-      },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("https://forms.example.com");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [
+          {
+            id: "forms",
+            path: "/forms",
+            url: "https://forms.example.com",
+          },
+        ],
+      }),
+    ).toBe("https://forms.example.com");
   });
 
   it("ignores app.url that isn't an absolute http(s) URL and falls back to path", () => {
@@ -114,73 +73,54 @@ describe("resolveCatchAllTarget", () => {
     // this, the catch-all would `throw redirect("forms.example.com")`
     // and the browser would treat the value as a relative path inside the
     // gateway, producing a broken redirect.
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        path: "/forms",
-        url: "forms.example.com",
-      },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/forms");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [
+          { id: "forms", path: "/forms", url: "forms.example.com" },
+        ],
+      }),
+    ).toBe("/forms");
   });
 
   it("rejects non-http(s) URL schemes (e.g. javascript:) and falls back to path", () => {
     // Defense in depth — a hostile manifest entry can't produce a
     // `javascript:` redirect target. Validation enforces http(s) only.
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        path: "/forms",
-        url: "javascript:alert(1)",
-      },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/forms");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [
+          { id: "forms", path: "/forms", url: "javascript:alert(1)" },
+        ],
+      }),
+    ).toBe("/forms");
   });
 
   it("strips a trailing slash from app.url", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        path: "/forms",
-        url: "https://forms.example.com/",
-      },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("https://forms.example.com");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [
+          { id: "forms", path: "/forms", url: "https://forms.example.com/" },
+        ],
+      }),
+    ).toBe("https://forms.example.com");
   });
 
   it("ignores an empty/whitespace app.url and falls back to path", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        path: "/forms",
-        url: "   ",
-      },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/forms");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [{ id: "forms", path: "/forms", url: "   " }],
+      }),
+    ).toBe("/forms");
   });
 
   it("collapses leading slashes/backslashes in app.path so `/\\evil.example` can't redirect off-origin", () => {
     // Browsers normalize backslashes to forward slashes during URL
     // parsing, so `throw redirect("/\\evil.example")` would resolve to
     // `https://evil.example`. The regex covers both slash types.
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "forms", name: "Forms", path: "/\\evil.example" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/evil.example");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [{ id: "forms", path: "/\\evil.example" }],
+      }),
+    ).toBe("/evil.example");
   });
 
   it("collapses leading double slashes in app.path so `//evil.example` can't redirect off-origin", () => {
@@ -190,29 +130,26 @@ describe("resolveCatchAllTarget", () => {
     // to `https://evil.example` — the same phishing vector the `app.url`
     // validator closes. Collapse the leading slashes so the redirect
     // stays on the gateway.
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "forms", name: "Forms", path: "//evil.example" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/evil.example");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [{ id: "forms", path: "//evil.example" }],
+      }),
+    ).toBe("/evil.example");
   });
 
   it("falls back to /${appId} when the manifest entry has neither path nor url", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "forms", name: "Forms", path: "" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/forms");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [{ id: "forms", path: "" }],
+      }),
+    ).toBe("/forms");
   });
 
   it("returns null when nothing matches", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "dispatch", name: "Dispatch", path: "/dispatch" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("unknown-app")).toBeNull();
+    expect(
+      resolveCatchAllTarget("unknown-app", {
+        workspaceApps: [{ id: "dispatch", path: "/dispatch" }],
+      }),
+    ).toBeNull();
   });
 });

package/src/lib/catch-all-target.ts

@@ -1,7 +1,18 @@
-import {
-  getBuiltinAgents,
-  loadWorkspaceAppsManifest,
-} from "@agent-native/core/server/agent-discovery";
+interface WorkspaceAppManifestEntry {
+  id?: string;
+  path?: unknown;
+  url?: unknown;
+}
+
+interface BuiltinAgentEntry {
+  id: string;
+  url?: string | null;
+}
+
+interface ResolveCatchAllTargetOptions {
+  workspaceApps?: WorkspaceAppManifestEntry[] | null;
+  builtinAgents?: BuiltinAgentEntry[] | null;
+}
 
 /**
  * Resolve where `/dispatch/<appId>` should bounce to when it doesn't match
@@ -15,7 +26,7 @@ import {
  *      present.
  *    - Otherwise the `app.path` mounted under the workspace gateway is
  *      used. Path is normalized to a leading slash if missing
- *      (e.g. manifest entry `path: "my-forms"` → `/my-forms`), so an app
+ *      (e.g. manifest entry `path: "my-forms"` -> `/my-forms`), so an app
  *      whose mounted path differs from its id ends up at the right place
  *      instead of being silently rewritten to `/${appId}`.
  *    - Bare entry with no path / url falls back to `/${appId}`.
@@ -50,8 +61,11 @@ function validatedAbsoluteUrl(value: unknown): string | undefined {
   }
 }
 
-export function resolveCatchAllTarget(appId: string): string | null {
-  const apps = loadWorkspaceAppsManifest();
+export function resolveCatchAllTarget(
+  appId: string,
+  options: ResolveCatchAllTargetOptions = {},
+): string | null {
+  const apps = options.workspaceApps;
   if (apps) {
     const app = apps.find((entry) => entry?.id === appId);
     if (app) {
@@ -81,7 +95,7 @@ export function resolveCatchAllTarget(appId: string): string | null {
       //   `\/evil.example`   — same idea, leading-backslash variant.
       //
       // The manifest parser only checks `startsWith("/")` for the first
-      // case, and even that allows `//evil…`. Defend in depth here by
+      // case, and even that allows `//evil...`. Defend in depth here by
       // collapsing any run of leading slashes-or-backslashes to one
       // forward slash. Same phishing vector that `validatedAbsoluteUrl`
       // closes for `app.url`.
@@ -92,8 +106,20 @@ export function resolveCatchAllTarget(appId: string): string | null {
       return `/${appId}`;
     }
   }
-  const builtin = getBuiltinAgents("dispatch").find(
+  const builtin = (options.builtinAgents ?? []).find(
     (agent) => agent.id === appId,
   );
   return builtin?.url ?? null;
 }
+
+export async function resolveServerCatchAllTarget(
+  appId: string,
+): Promise<string | null> {
+  if (!import.meta.env.SSR) return null;
+  const { getBuiltinAgents, loadWorkspaceAppsManifest } =
+    await import("@agent-native/core/server/agent-discovery");
+  return resolveCatchAllTarget(appId, {
+    workspaceApps: loadWorkspaceAppsManifest(),
+    builtinAgents: getBuiltinAgents("dispatch"),
+  });
+}

package/src/routes/pages/$appId.tsx

@@ -17,7 +17,7 @@ import { DispatchShell } from "@/components/dispatch-shell";
 import { Spinner } from "@/components/ui/spinner";
 import { Badge } from "@/components/ui/badge";
 import { Button } from "@/components/ui/button";
-import { resolveCatchAllTarget } from "@/lib/catch-all-target";
+import { resolveServerCatchAllTarget } from "@/lib/catch-all-target";
 import {
   workspaceAppHref,
   type WorkspaceAppSummary,
@@ -68,12 +68,12 @@ function dispatchSelfRedirect(appId: string | undefined): string | null {
   return null;
 }
 
-export function loader({ params }: LoaderFunctionArgs) {
+export async function loader({ params }: LoaderFunctionArgs) {
   const appId = params.appId;
   if (!appId) return null;
   const selfTarget = dispatchSelfRedirect(appId);
   if (selfTarget) throw redirect(selfTarget);
-  const target = resolveCatchAllTarget(appId);
+  const target = await resolveServerCatchAllTarget(appId);
   if (target) throw redirect(target);
   return null;
 }

package/src/server/lib/thread-link-preview.ts

@@ -1,5 +1,4 @@
 import type { ChatThread } from "@agent-native/core/server";
-import { getRequestContext, getThread } from "@agent-native/core/server";
 
 export interface ThreadLinkPreview {
   title: string;
@@ -148,8 +147,11 @@ function previewDescription(thread: ChatThread): string {
 export async function loadThreadLinkPreview(
   threadId: string | null | undefined,
 ): Promise<ThreadLinkPreview | null> {
+  if (!import.meta.env.SSR) return null;
   const id = threadId?.trim();
   if (!id) return null;
+  const { getRequestContext, getThread } =
+    await import("@agent-native/core/server");
   const viewerEmail = getRequestContext()?.userEmail?.trim();
   if (!viewerEmail) return null;
   const thread = await getThread(id).catch(() => null);