@agent-native/dispatch 0.8.27 → 0.8.29

package/dist/server/lib/thread-link-preview.js.map

@@ -1 +1 @@
-{"version":3,"file":"thread-link-preview.js","sourceRoot":"","sources":["../../../src/server/lib/thread-link-preview.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAQzE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,YAAY;IACZ,cAAc;IACd,UAAU;IACV,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,gBAAgB;IAChB,sBAAsB;IACtB,cAAc;IACd,sBAAsB;CACvB,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,IAAI,EAAE;SACN,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;SAC3B,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CACL,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7D,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC9D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,GAAY;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,UAAkB;IAElB,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,QAAQ,GAAI,MAAiC,CAAC,QAAQ,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,KACE,IAAI,YAAY,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EACtC,YAAY,IAAI,CAAC,EACjB,YAAY,EAAE,EACd,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QAEtC,KAAK,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAA4B,CAAC;YAC3D,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAAE,SAAS;YAE7B,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,YAAY,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxD,MAAM,UAAU,GAAG,2BAA2B,CAAC,YAAY,CAAC,CAAC;gBAC7D,IAAI,UAAU;oBAAE,OAAO,UAAU,CAAC;YACpC,CAAC;YAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAkB;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,4CAA4C,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAmC;IAEnC,MAAM,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,MAAM,WAAW,GAAG,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,qBAAqB,CAAC;IAC3D,OAAO;QACL,KAAK;QACL,WAAW,EAAE,kBAAkB,CAAC,MAAM,CAAC;QACvC,QAAQ,EAAE,4BAA4B,CAAC,MAAM,CAAC,UAAU,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAiC;IAC1E,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC;IAC1E,MAAM,WAAW,GACf,OAAO,EAAE,WAAW;QACpB,0DAA0D,CAAC;IAC7D,MAAM,KAAK,GAAG,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;IACxC,OAAO;QACL,EAAE,KAAK,EAAE;QACT,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE;QAC7C,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE;QACxC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE;QACpD,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;QAC3C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D;YACE,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;SACnD;QACD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE;QACzC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,WAAW,EAAE;QACrD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC","sourcesContent":["import type { ChatThread } from \"@agent-native/core/server\";\nimport { getRequestContext, getThread } from \"@agent-native/core/server\";\n\nexport interface ThreadLinkPreview {\n  title: string;\n  description: string;\n  imageUrl: string | null;\n}\n\nconst IMAGE_URL_KEYS = new Set([\n  \"previewUrl\",\n  \"thumbnailUrl\",\n  \"imageUrl\",\n  \"image\",\n  \"downloadUrl\",\n]);\n\nconst GENERATION_TOOL_NAMES = new Set([\n  \"generate-image\",\n  \"generate-image-batch\",\n  \"refine-image\",\n  \"rerun-generation-run\",\n]);\n\nfunction safeJsonParse(value: string): unknown {\n  try {\n    return JSON.parse(value);\n  } catch {\n    return null;\n  }\n}\n\nfunction cleanUrlCandidate(value: string): string {\n  return value\n    .trim()\n    .replace(/[),.;\\]}]+$/g, \"\")\n    .replace(/^[\"'(<]+/g, \"\");\n}\n\nfunction isAbsoluteHttpUrl(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return url.protocol === \"https:\" || url.protocol === \"http:\";\n  } catch {\n    return false;\n  }\n}\n\nfunction isImageLikeUrl(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return (\n      /\\.(?:png|jpe?g|webp|gif|avif)(?:$|[?#])/i.test(url.pathname) ||\n      /\\/api\\/assets\\/[^/]+\\/content(?:$|[?#])/i.test(url.pathname)\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction validPreviewImageUrl(value: unknown, key?: string): string | null {\n  if (typeof value !== \"string\") return null;\n  const candidate = cleanUrlCandidate(value);\n  if (!isAbsoluteHttpUrl(candidate)) return null;\n  if (key && IMAGE_URL_KEYS.has(key)) return candidate;\n  return isImageLikeUrl(candidate) ? candidate : null;\n}\n\nfunction imageUrlFromStructuredValue(value: unknown): string | null {\n  if (!value || typeof value !== \"object\") return null;\n  if (Array.isArray(value)) {\n    for (let i = value.length - 1; i >= 0; i--) {\n      const found = imageUrlFromStructuredValue(value[i]);\n      if (found) return found;\n    }\n    return null;\n  }\n\n  const record = value as Record<string, unknown>;\n  for (const key of IMAGE_URL_KEYS) {\n    const found = validPreviewImageUrl(record[key], key);\n    if (found) return found;\n  }\n  for (const [key, child] of Object.entries(record).reverse()) {\n    const direct = validPreviewImageUrl(child, key);\n    if (direct) return direct;\n    if (child && typeof child === \"object\") {\n      const nested = imageUrlFromStructuredValue(child);\n      if (nested) return nested;\n    }\n  }\n  return null;\n}\n\nfunction imageUrlFromText(value: string): string | null {\n  const matches = value.match(/https?:\\/\\/[^\\s<>\"']+/g);\n  if (!matches) return null;\n  for (let i = matches.length - 1; i >= 0; i--) {\n    const candidate = validPreviewImageUrl(matches[i]);\n    if (candidate) return candidate;\n  }\n  return null;\n}\n\nexport function extractThreadPreviewImageUrl(\n  threadData: string,\n): string | null {\n  const parsed = safeJsonParse(threadData);\n  if (!parsed || typeof parsed !== \"object\") return null;\n  const messages = (parsed as { messages?: unknown }).messages;\n  if (!Array.isArray(messages)) return null;\n\n  for (\n    let messageIndex = messages.length - 1;\n    messageIndex >= 0;\n    messageIndex--\n  ) {\n    const entry = messages[messageIndex] as any;\n    const message = entry?.message ?? entry;\n    const content = message?.content;\n    if (!Array.isArray(content)) continue;\n\n    for (let partIndex = content.length - 1; partIndex >= 0; partIndex--) {\n      const part = content[partIndex] as Record<string, unknown>;\n      const result = typeof part.result === \"string\" ? part.result : \"\";\n      if (!result.trim()) continue;\n\n      const toolName = typeof part.toolName === \"string\" ? part.toolName : \"\";\n      const parsedResult = safeJsonParse(result);\n      if (parsedResult && GENERATION_TOOL_NAMES.has(toolName)) {\n        const structured = imageUrlFromStructuredValue(parsedResult);\n        if (structured) return structured;\n      }\n\n      const fromText = imageUrlFromText(result);\n      if (fromText) return fromText;\n    }\n  }\n  return null;\n}\n\nfunction previewDescription(thread: ChatThread): string {\n  const preview = thread.preview.trim();\n  if (preview) return preview.slice(0, 180);\n  return \"Open this Agent-Native thread in Dispatch.\";\n}\n\nexport async function loadThreadLinkPreview(\n  threadId: string | null | undefined,\n): Promise<ThreadLinkPreview | null> {\n  const id = threadId?.trim();\n  if (!id) return null;\n  const viewerEmail = getRequestContext()?.userEmail?.trim();\n  if (!viewerEmail) return null;\n  const thread = await getThread(id).catch(() => null);\n  if (!thread) return null;\n  if (thread.ownerEmail !== viewerEmail) return null;\n  const title = thread.title.trim() || \"Agent-Native thread\";\n  return {\n    title,\n    description: previewDescription(thread),\n    imageUrl: extractThreadPreviewImageUrl(thread.threadData),\n  };\n}\n\nexport function buildThreadLinkPreviewMeta(preview: ThreadLinkPreview | null) {\n  const title = preview?.title ? `${preview.title} - Dispatch` : \"Dispatch\";\n  const description =\n    preview?.description ||\n    \"Open this Agent-Native thread in the Dispatch workspace.\";\n  const image = preview?.imageUrl ?? null;\n  return [\n    { title },\n    { name: \"description\", content: description },\n    { property: \"og:title\", content: title },\n    { property: \"og:description\", content: description },\n    { property: \"og:type\", content: \"website\" },\n    ...(image ? [{ property: \"og:image\", content: image }] : []),\n    {\n      name: \"twitter:card\",\n      content: image ? \"summary_large_image\" : \"summary\",\n    },\n    { name: \"twitter:title\", content: title },\n    { name: \"twitter:description\", content: description },\n    ...(image ? [{ name: \"twitter:image\", content: image }] : []),\n  ];\n}\n"]}
+{"version":3,"file":"thread-link-preview.js","sourceRoot":"","sources":["../../../src/server/lib/thread-link-preview.ts"],"names":[],"mappings":"AAQA,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,YAAY;IACZ,cAAc;IACd,UAAU;IACV,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,gBAAgB;IAChB,sBAAsB;IACtB,cAAc;IACd,sBAAsB;CACvB,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,IAAI,EAAE;SACN,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;SAC3B,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CACL,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7D,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC9D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,GAAY;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,UAAkB;IAElB,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,QAAQ,GAAI,MAAiC,CAAC,QAAQ,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,KACE,IAAI,YAAY,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EACtC,YAAY,IAAI,CAAC,EACjB,YAAY,EAAE,EACd,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QAEtC,KAAK,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAA4B,CAAC;YAC3D,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAAE,SAAS;YAE7B,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,YAAY,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxD,MAAM,UAAU,GAAG,2BAA2B,CAAC,YAAY,CAAC,CAAC;gBAC7D,IAAI,UAAU;oBAAE,OAAO,UAAU,CAAC;YACpC,CAAC;YAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAkB;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,4CAA4C,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAmC;IAEnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,GACpC,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,qBAAqB,CAAC;IAC3D,OAAO;QACL,KAAK;QACL,WAAW,EAAE,kBAAkB,CAAC,MAAM,CAAC;QACvC,QAAQ,EAAE,4BAA4B,CAAC,MAAM,CAAC,UAAU,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAiC;IAC1E,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC;IAC1E,MAAM,WAAW,GACf,OAAO,EAAE,WAAW;QACpB,0DAA0D,CAAC;IAC7D,MAAM,KAAK,GAAG,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;IACxC,OAAO;QACL,EAAE,KAAK,EAAE;QACT,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE;QAC7C,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE;QACxC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE;QACpD,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;QAC3C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D;YACE,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;SACnD;QACD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE;QACzC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,WAAW,EAAE;QACrD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC","sourcesContent":["import type { ChatThread } from \"@agent-native/core/server\";\n\nexport interface ThreadLinkPreview {\n  title: string;\n  description: string;\n  imageUrl: string | null;\n}\n\nconst IMAGE_URL_KEYS = new Set([\n  \"previewUrl\",\n  \"thumbnailUrl\",\n  \"imageUrl\",\n  \"image\",\n  \"downloadUrl\",\n]);\n\nconst GENERATION_TOOL_NAMES = new Set([\n  \"generate-image\",\n  \"generate-image-batch\",\n  \"refine-image\",\n  \"rerun-generation-run\",\n]);\n\nfunction safeJsonParse(value: string): unknown {\n  try {\n    return JSON.parse(value);\n  } catch {\n    return null;\n  }\n}\n\nfunction cleanUrlCandidate(value: string): string {\n  return value\n    .trim()\n    .replace(/[),.;\\]}]+$/g, \"\")\n    .replace(/^[\"'(<]+/g, \"\");\n}\n\nfunction isAbsoluteHttpUrl(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return url.protocol === \"https:\" || url.protocol === \"http:\";\n  } catch {\n    return false;\n  }\n}\n\nfunction isImageLikeUrl(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return (\n      /\\.(?:png|jpe?g|webp|gif|avif)(?:$|[?#])/i.test(url.pathname) ||\n      /\\/api\\/assets\\/[^/]+\\/content(?:$|[?#])/i.test(url.pathname)\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction validPreviewImageUrl(value: unknown, key?: string): string | null {\n  if (typeof value !== \"string\") return null;\n  const candidate = cleanUrlCandidate(value);\n  if (!isAbsoluteHttpUrl(candidate)) return null;\n  if (key && IMAGE_URL_KEYS.has(key)) return candidate;\n  return isImageLikeUrl(candidate) ? candidate : null;\n}\n\nfunction imageUrlFromStructuredValue(value: unknown): string | null {\n  if (!value || typeof value !== \"object\") return null;\n  if (Array.isArray(value)) {\n    for (let i = value.length - 1; i >= 0; i--) {\n      const found = imageUrlFromStructuredValue(value[i]);\n      if (found) return found;\n    }\n    return null;\n  }\n\n  const record = value as Record<string, unknown>;\n  for (const key of IMAGE_URL_KEYS) {\n    const found = validPreviewImageUrl(record[key], key);\n    if (found) return found;\n  }\n  for (const [key, child] of Object.entries(record).reverse()) {\n    const direct = validPreviewImageUrl(child, key);\n    if (direct) return direct;\n    if (child && typeof child === \"object\") {\n      const nested = imageUrlFromStructuredValue(child);\n      if (nested) return nested;\n    }\n  }\n  return null;\n}\n\nfunction imageUrlFromText(value: string): string | null {\n  const matches = value.match(/https?:\\/\\/[^\\s<>\"']+/g);\n  if (!matches) return null;\n  for (let i = matches.length - 1; i >= 0; i--) {\n    const candidate = validPreviewImageUrl(matches[i]);\n    if (candidate) return candidate;\n  }\n  return null;\n}\n\nexport function extractThreadPreviewImageUrl(\n  threadData: string,\n): string | null {\n  const parsed = safeJsonParse(threadData);\n  if (!parsed || typeof parsed !== \"object\") return null;\n  const messages = (parsed as { messages?: unknown }).messages;\n  if (!Array.isArray(messages)) return null;\n\n  for (\n    let messageIndex = messages.length - 1;\n    messageIndex >= 0;\n    messageIndex--\n  ) {\n    const entry = messages[messageIndex] as any;\n    const message = entry?.message ?? entry;\n    const content = message?.content;\n    if (!Array.isArray(content)) continue;\n\n    for (let partIndex = content.length - 1; partIndex >= 0; partIndex--) {\n      const part = content[partIndex] as Record<string, unknown>;\n      const result = typeof part.result === \"string\" ? part.result : \"\";\n      if (!result.trim()) continue;\n\n      const toolName = typeof part.toolName === \"string\" ? part.toolName : \"\";\n      const parsedResult = safeJsonParse(result);\n      if (parsedResult && GENERATION_TOOL_NAMES.has(toolName)) {\n        const structured = imageUrlFromStructuredValue(parsedResult);\n        if (structured) return structured;\n      }\n\n      const fromText = imageUrlFromText(result);\n      if (fromText) return fromText;\n    }\n  }\n  return null;\n}\n\nfunction previewDescription(thread: ChatThread): string {\n  const preview = thread.preview.trim();\n  if (preview) return preview.slice(0, 180);\n  return \"Open this Agent-Native thread in Dispatch.\";\n}\n\nexport async function loadThreadLinkPreview(\n  threadId: string | null | undefined,\n): Promise<ThreadLinkPreview | null> {\n  if (!import.meta.env.SSR) return null;\n  const id = threadId?.trim();\n  if (!id) return null;\n  const { getRequestContext, getThread } =\n    await import(\"@agent-native/core/server\");\n  const viewerEmail = getRequestContext()?.userEmail?.trim();\n  if (!viewerEmail) return null;\n  const thread = await getThread(id).catch(() => null);\n  if (!thread) return null;\n  if (thread.ownerEmail !== viewerEmail) return null;\n  const title = thread.title.trim() || \"Agent-Native thread\";\n  return {\n    title,\n    description: previewDescription(thread),\n    imageUrl: extractThreadPreviewImageUrl(thread.threadData),\n  };\n}\n\nexport function buildThreadLinkPreviewMeta(preview: ThreadLinkPreview | null) {\n  const title = preview?.title ? `${preview.title} - Dispatch` : \"Dispatch\";\n  const description =\n    preview?.description ||\n    \"Open this Agent-Native thread in the Dispatch workspace.\";\n  const image = preview?.imageUrl ?? null;\n  return [\n    { title },\n    { name: \"description\", content: description },\n    { property: \"og:title\", content: title },\n    { property: \"og:description\", content: description },\n    { property: \"og:type\", content: \"website\" },\n    ...(image ? [{ property: \"og:image\", content: image }] : []),\n    {\n      name: \"twitter:card\",\n      content: image ? \"summary_large_image\" : \"summary\",\n    },\n    { name: \"twitter:title\", content: title },\n    { name: \"twitter:description\", content: description },\n    ...(image ? [{ name: \"twitter:image\", content: image }] : []),\n  ];\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/dispatch",
-  "version": "0.8.27",
+  "version": "0.8.29",
   "type": "module",
   "description": "Dispatch — workspace control plane for agent-native apps. Vault, integrations, destinations, scheduled jobs, and cross-app delegation, shipped as a single drop-in package.",
   "license": "MIT",

package/src/lib/catch-all-target.spec.ts

@@ -1,80 +1,40 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-
-const loadWorkspaceAppsManifestMock = vi.hoisted(() => vi.fn());
-const getBuiltinAgentsMock = vi.hoisted(() => vi.fn());
-
-vi.mock("@agent-native/core/server/agent-discovery", () => ({
-  loadWorkspaceAppsManifest: loadWorkspaceAppsManifestMock,
-  getBuiltinAgents: getBuiltinAgentsMock,
-}));
-
+import { describe, expect, it } from "vitest";
 import { resolveCatchAllTarget } from "./catch-all-target.js";
 
-beforeEach(() => {
-  vi.clearAllMocks();
-});
-
-afterEach(() => {
-  vi.clearAllMocks();
-});
-
 describe("resolveCatchAllTarget", () => {
   it("prefers the workspace manifest entry when one matches", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "todo", name: "Todo", path: "/todo" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([
-      {
-        id: "todo",
-        name: "Todo",
-        description: "",
-        url: "https://todo.example.com",
-        color: "#000",
-      },
-    ]);
-
-    expect(resolveCatchAllTarget("todo")).toBe("/todo");
+    expect(
+      resolveCatchAllTarget("todo", {
+        workspaceApps: [{ id: "todo", path: "/todo" }],
+        builtinAgents: [{ id: "todo", url: "https://todo.example.com" }],
+      }),
+    ).toBe("/todo");
   });
 
   it("falls back to the built-in template URL when no workspace manifest exists", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue(null);
-    getBuiltinAgentsMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        description: "",
-        url: "http://localhost:8084",
-        color: "#06B6D4",
-      },
-    ]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("http://localhost:8084");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: null,
+        builtinAgents: [{ id: "forms", url: "http://localhost:8084" }],
+      }),
+    ).toBe("http://localhost:8084");
   });
 
   it("falls back to the built-in template URL when the workspace manifest does not include the app", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "dispatch", name: "Dispatch", path: "/dispatch" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        description: "",
-        url: "http://localhost:8084",
-        color: "#06B6D4",
-      },
-    ]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("http://localhost:8084");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [{ id: "dispatch", path: "/dispatch" }],
+        builtinAgents: [{ id: "forms", url: "http://localhost:8084" }],
+      }),
+    ).toBe("http://localhost:8084");
   });
 
   it("normalizes a manifest entry without a leading slash", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "todo", name: "Todo", path: "todo" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("todo")).toBe("/todo");
+    expect(
+      resolveCatchAllTarget("todo", {
+        workspaceApps: [{ id: "todo", path: "todo" }],
+      }),
+    ).toBe("/todo");
   });
 
   it("uses app.path when id !== path (not /${appId})", () => {
@@ -83,29 +43,28 @@ describe("resolveCatchAllTarget", () => {
     // silently rewritten to `/forms` (the appId) and routed to the wrong
     // app. The normalizer now keeps the manifest path and only prepends
     // the missing slash.
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "forms", name: "Forms", path: "my-forms" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/my-forms");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [{ id: "forms", path: "my-forms" }],
+      }),
+    ).toBe("/my-forms");
   });
 
   it("prefers app.url when the manifest entry has an externally-hosted URL", () => {
     // Workspaces can point at remote deploys. The catch-all should bounce
     // to the absolute URL instead of mounting a local path that doesn't
     // exist inside the gateway.
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        path: "/forms",
-        url: "https://forms.example.com",
-      },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("https://forms.example.com");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [
+          {
+            id: "forms",
+            path: "/forms",
+            url: "https://forms.example.com",
+          },
+        ],
+      }),
+    ).toBe("https://forms.example.com");
   });
 
   it("ignores app.url that isn't an absolute http(s) URL and falls back to path", () => {
@@ -114,73 +73,54 @@ describe("resolveCatchAllTarget", () => {
     // this, the catch-all would `throw redirect("forms.example.com")`
     // and the browser would treat the value as a relative path inside the
     // gateway, producing a broken redirect.
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        path: "/forms",
-        url: "forms.example.com",
-      },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/forms");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [
+          { id: "forms", path: "/forms", url: "forms.example.com" },
+        ],
+      }),
+    ).toBe("/forms");
   });
 
   it("rejects non-http(s) URL schemes (e.g. javascript:) and falls back to path", () => {
     // Defense in depth — a hostile manifest entry can't produce a
     // `javascript:` redirect target. Validation enforces http(s) only.
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        path: "/forms",
-        url: "javascript:alert(1)",
-      },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/forms");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [
+          { id: "forms", path: "/forms", url: "javascript:alert(1)" },
+        ],
+      }),
+    ).toBe("/forms");
   });
 
   it("strips a trailing slash from app.url", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        path: "/forms",
-        url: "https://forms.example.com/",
-      },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("https://forms.example.com");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [
+          { id: "forms", path: "/forms", url: "https://forms.example.com/" },
+        ],
+      }),
+    ).toBe("https://forms.example.com");
   });
 
   it("ignores an empty/whitespace app.url and falls back to path", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      {
-        id: "forms",
-        name: "Forms",
-        path: "/forms",
-        url: "   ",
-      },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/forms");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [{ id: "forms", path: "/forms", url: "   " }],
+      }),
+    ).toBe("/forms");
   });
 
   it("collapses leading slashes/backslashes in app.path so `/\\evil.example` can't redirect off-origin", () => {
     // Browsers normalize backslashes to forward slashes during URL
     // parsing, so `throw redirect("/\\evil.example")` would resolve to
     // `https://evil.example`. The regex covers both slash types.
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "forms", name: "Forms", path: "/\\evil.example" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/evil.example");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [{ id: "forms", path: "/\\evil.example" }],
+      }),
+    ).toBe("/evil.example");
   });
 
   it("collapses leading double slashes in app.path so `//evil.example` can't redirect off-origin", () => {
@@ -190,29 +130,26 @@ describe("resolveCatchAllTarget", () => {
     // to `https://evil.example` — the same phishing vector the `app.url`
     // validator closes. Collapse the leading slashes so the redirect
     // stays on the gateway.
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "forms", name: "Forms", path: "//evil.example" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/evil.example");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [{ id: "forms", path: "//evil.example" }],
+      }),
+    ).toBe("/evil.example");
   });
 
   it("falls back to /${appId} when the manifest entry has neither path nor url", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "forms", name: "Forms", path: "" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("forms")).toBe("/forms");
+    expect(
+      resolveCatchAllTarget("forms", {
+        workspaceApps: [{ id: "forms", path: "" }],
+      }),
+    ).toBe("/forms");
   });
 
   it("returns null when nothing matches", () => {
-    loadWorkspaceAppsManifestMock.mockReturnValue([
-      { id: "dispatch", name: "Dispatch", path: "/dispatch" },
-    ]);
-    getBuiltinAgentsMock.mockReturnValue([]);
-
-    expect(resolveCatchAllTarget("unknown-app")).toBeNull();
+    expect(
+      resolveCatchAllTarget("unknown-app", {
+        workspaceApps: [{ id: "dispatch", path: "/dispatch" }],
+      }),
+    ).toBeNull();
   });
 });

package/src/lib/catch-all-target.ts

@@ -1,7 +1,18 @@
-import {
-  getBuiltinAgents,
-  loadWorkspaceAppsManifest,
-} from "@agent-native/core/server/agent-discovery";
+interface WorkspaceAppManifestEntry {
+  id?: string;
+  path?: unknown;
+  url?: unknown;
+}
+
+interface BuiltinAgentEntry {
+  id: string;
+  url?: string | null;
+}
+
+interface ResolveCatchAllTargetOptions {
+  workspaceApps?: WorkspaceAppManifestEntry[] | null;
+  builtinAgents?: BuiltinAgentEntry[] | null;
+}
 
 /**
  * Resolve where `/dispatch/<appId>` should bounce to when it doesn't match
@@ -15,7 +26,7 @@ import {
  *      present.
  *    - Otherwise the `app.path` mounted under the workspace gateway is
  *      used. Path is normalized to a leading slash if missing
- *      (e.g. manifest entry `path: "my-forms"` → `/my-forms`), so an app
+ *      (e.g. manifest entry `path: "my-forms"` -> `/my-forms`), so an app
  *      whose mounted path differs from its id ends up at the right place
  *      instead of being silently rewritten to `/${appId}`.
  *    - Bare entry with no path / url falls back to `/${appId}`.
@@ -50,8 +61,11 @@ function validatedAbsoluteUrl(value: unknown): string | undefined {
   }
 }
 
-export function resolveCatchAllTarget(appId: string): string | null {
-  const apps = loadWorkspaceAppsManifest();
+export function resolveCatchAllTarget(
+  appId: string,
+  options: ResolveCatchAllTargetOptions = {},
+): string | null {
+  const apps = options.workspaceApps;
   if (apps) {
     const app = apps.find((entry) => entry?.id === appId);
     if (app) {
@@ -81,7 +95,7 @@ export function resolveCatchAllTarget(appId: string): string | null {
       //   `\/evil.example`   — same idea, leading-backslash variant.
       //
       // The manifest parser only checks `startsWith("/")` for the first
-      // case, and even that allows `//evil…`. Defend in depth here by
+      // case, and even that allows `//evil...`. Defend in depth here by
       // collapsing any run of leading slashes-or-backslashes to one
       // forward slash. Same phishing vector that `validatedAbsoluteUrl`
       // closes for `app.url`.
@@ -92,8 +106,20 @@ export function resolveCatchAllTarget(appId: string): string | null {
       return `/${appId}`;
     }
   }
-  const builtin = getBuiltinAgents("dispatch").find(
+  const builtin = (options.builtinAgents ?? []).find(
     (agent) => agent.id === appId,
   );
   return builtin?.url ?? null;
 }
+
+export async function resolveServerCatchAllTarget(
+  appId: string,
+): Promise<string | null> {
+  if (!import.meta.env.SSR) return null;
+  const { getBuiltinAgents, loadWorkspaceAppsManifest } =
+    await import("@agent-native/core/server/agent-discovery");
+  return resolveCatchAllTarget(appId, {
+    workspaceApps: loadWorkspaceAppsManifest(),
+    builtinAgents: getBuiltinAgents("dispatch"),
+  });
+}

package/src/routes/pages/$appId.tsx

@@ -17,7 +17,7 @@ import { DispatchShell } from "@/components/dispatch-shell";
 import { Spinner } from "@/components/ui/spinner";
 import { Badge } from "@/components/ui/badge";
 import { Button } from "@/components/ui/button";
-import { resolveCatchAllTarget } from "@/lib/catch-all-target";
+import { resolveServerCatchAllTarget } from "@/lib/catch-all-target";
 import {
   workspaceAppHref,
   type WorkspaceAppSummary,
@@ -68,12 +68,12 @@ function dispatchSelfRedirect(appId: string | undefined): string | null {
   return null;
 }
 
-export function loader({ params }: LoaderFunctionArgs) {
+export async function loader({ params }: LoaderFunctionArgs) {
   const appId = params.appId;
   if (!appId) return null;
   const selfTarget = dispatchSelfRedirect(appId);
   if (selfTarget) throw redirect(selfTarget);
-  const target = resolveCatchAllTarget(appId);
+  const target = await resolveServerCatchAllTarget(appId);
   if (target) throw redirect(target);
   return null;
 }

package/src/routes/pages/apps.tsx

@@ -8,6 +8,7 @@ import {
   IconChartBar,
   IconChevronDown,
   IconClipboardList,
+  IconContract,
   IconEyeOff,
   IconFileText,
   IconLoader2,
@@ -64,6 +65,7 @@ const TEMPLATE_ICONS: Record<string, typeof IconMail> = {
   Photo: IconPhoto,
   ChartBar: IconChartBar,
   ClipboardList: IconClipboardList,
+  Contract: IconContract,
   Brush: IconBrush,
   Video: IconVideo,
 };

package/src/server/lib/app-creation-store.ts

@@ -1329,6 +1329,15 @@ const ADDABLE_TEMPLATES: AvailableWorkspaceTemplate[] = [
     colorRgb: "6 182 212",
     core: true,
   },
+  {
+    name: "contracts",
+    label: "Contracts",
+    hint: "Review assumptions, feedback, and proof for coding-agent work",
+    icon: "Contract",
+    color: "#4F46E5",
+    colorRgb: "79 70 229",
+    core: false,
+  },
   {
     name: "design",
     label: "Design",

package/src/server/lib/thread-link-preview.ts

@@ -1,5 +1,4 @@
 import type { ChatThread } from "@agent-native/core/server";
-import { getRequestContext, getThread } from "@agent-native/core/server";
 
 export interface ThreadLinkPreview {
   title: string;
@@ -148,8 +147,11 @@ function previewDescription(thread: ChatThread): string {
 export async function loadThreadLinkPreview(
   threadId: string | null | undefined,
 ): Promise<ThreadLinkPreview | null> {
+  if (!import.meta.env.SSR) return null;
   const id = threadId?.trim();
   if (!id) return null;
+  const { getRequestContext, getThread } =
+    await import("@agent-native/core/server");
   const viewerEmail = getRequestContext()?.userEmail?.trim();
   if (!viewerEmail) return null;
   const thread = await getThread(id).catch(() => null);