@jami-studio/dispatch 0.13.14

package/dist/actions/create-pylon-ticket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-pylon-ticket.js","sourceRoot":"","sources":["../../src/actions/create-pylon-ticket.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAE9D,MAAM,cAAc,GAClB,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,0BAA0B,CAAC;AAE/D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,mNAAmN;IACrN,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACvD,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,8CAA8C,CAAC;QAC3D,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,KAAK,EAAE;aACP,QAAQ,EAAE;aACV,QAAQ,CAAC,gDAAgD,CAAC;QAC7D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,kFAAkF,CACnF;QACH,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,eAAe,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAA4B;YACvC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,QAAQ;SAC1B,CAAC;QACF,IAAI,KAAK,CAAC,SAAS;YAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QAC1D,IAAI,KAAK,CAAC,cAAc;YAAE,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC,cAAc,CAAC;QACzE,IAAI,KAAK,CAAC,aAAa;YAAE,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC,aAAa,CAAC;QACtE,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACtD,IAAI,KAAK,CAAC,IAAI,EAAE,MAAM;YAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAClD,IAAI,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;QAEjD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,cAAc,SAAS,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5F,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAGxC,CAAC;QACT,MAAM,KAAK,GACT,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI;YACjD,CAAC,CAAC,CAAE,IAA4C,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7D,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACnB,MAAM,QAAQ,GACZ,KAAK,IAAI,OAAQ,KAA0B,CAAC,EAAE,KAAK,QAAQ;YACzD,CAAC,CAAE,KAAwB,CAAC,EAAE;YAC9B,CAAC,CAAC,EAAE,CAAC;QAET,MAAM,WAAW,CAAC;YAChB,MAAM,EAAE,sBAAsB;YAC9B,UAAU,EAAE,cAAc;YAC1B,QAAQ,EAAE,QAAQ,IAAI,IAAI;YAC1B,OAAO,EAAE,yBAAyB,KAAK,CAAC,KAAK,EAAE;YAC/C,QAAQ,EAAE;gBACR,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,QAAQ;aACT;SACF,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAa;YACjB,QAAQ;YACR,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport { resolveSecret } from \"@agent-native/core/server\";\r\nimport { z } from \"zod\";\r\n\r\nimport { recordAudit } from \"../server/lib/dispatch-store.js\";\r\n\r\nconst PYLON_API_BASE =\r\n  process.env.PYLON_API_BASE_URL || \"https://api.usepylon.com\";\r\n\r\nexport default defineAction({\r\n  description:\r\n    \"Create a Pylon ticket. Use to escalate blockers from client meetings, route unmatched #customer-* posts that have no Slack channel, or open a follow-up that needs tracking. Requires PYLON_API_KEY in the Vault.\",\r\n  schema: z.object({\r\n    title: z.string().min(1).describe(\"Short ticket title\"),\r\n    bodyHtml: z\r\n      .string()\r\n      .min(1)\r\n      .describe(\"HTML body — Pylon renders this in the ticket\"),\r\n    requesterEmail: z\r\n      .string()\r\n      .email()\r\n      .optional()\r\n      .describe(\"Email of the person the ticket is on behalf of\"),\r\n    requesterName: z.string().optional(),\r\n    accountId: z\r\n      .string()\r\n      .optional()\r\n      .describe(\r\n        \"Pylon account ID — provide either this OR requesterEmail to identify the subject\",\r\n      ),\r\n    priority: z.enum([\"urgent\", \"high\", \"medium\", \"low\"]).optional(),\r\n    tags: z.array(z.string()).optional(),\r\n    assigneeId: z.string().optional(),\r\n    teamId: z.string().optional(),\r\n  }),\r\n  run: async (input) => {\r\n    const apiKey = await resolveSecret(\"PYLON_API_KEY\");\r\n    if (!apiKey) {\r\n      throw new Error(\r\n        \"PYLON_API_KEY is not set. Add it to the Dispatch Vault.\",\r\n      );\r\n    }\r\n    if (!input.accountId && !input.requesterEmail) {\r\n      throw new Error(\r\n        \"Pylon requires either accountId or requesterEmail to identify the ticket subject.\",\r\n      );\r\n    }\r\n\r\n    const payload: Record<string, unknown> = {\r\n      title: input.title,\r\n      body_html: input.bodyHtml,\r\n    };\r\n    if (input.accountId) payload.account_id = input.accountId;\r\n    if (input.requesterEmail) payload.requester_email = input.requesterEmail;\r\n    if (input.requesterName) payload.requester_name = input.requesterName;\r\n    if (input.priority) payload.priority = input.priority;\r\n    if (input.tags?.length) payload.tags = input.tags;\r\n    if (input.assigneeId) payload.assignee_id = input.assigneeId;\r\n    if (input.teamId) payload.team_id = input.teamId;\r\n\r\n    const res = await fetch(`${PYLON_API_BASE}/issues`, {\r\n      method: \"POST\",\r\n      headers: {\r\n        Authorization: `Bearer ${apiKey}`,\r\n        \"Content-Type\": \"application/json\",\r\n      },\r\n      body: JSON.stringify(payload),\r\n    });\r\n\r\n    if (!res.ok) {\r\n      const text = await res.text().catch(() => \"\");\r\n      throw new Error(\r\n        `Pylon ticket creation failed (HTTP ${res.status})${text ? `: ${text.slice(0, 500)}` : \"\"}`,\r\n      );\r\n    }\r\n\r\n    const data = (await res.json().catch(() => null)) as Record<\r\n      string,\r\n      unknown\r\n    > | null;\r\n    const issue =\r\n      data && typeof data === \"object\" && \"issue\" in data\r\n        ? ((data as { issue?: Record<string, unknown> }).issue ?? {})\r\n        : (data ?? {});\r\n    const ticketId =\r\n      issue && typeof (issue as { id?: unknown }).id === \"string\"\r\n        ? (issue as { id: string }).id\r\n        : \"\";\r\n\r\n    await recordAudit({\r\n      action: \"pylon.ticket.created\",\r\n      targetType: \"pylon-ticket\",\r\n      targetId: ticketId || null,\r\n      summary: `Created Pylon ticket: ${input.title}`,\r\n      metadata: {\r\n        title: input.title,\r\n        priority: input.priority,\r\n        tags: input.tags,\r\n        accountId: input.accountId,\r\n        requesterEmail: input.requesterEmail,\r\n        ticketId,\r\n      },\r\n    });\r\n\r\n    return {\r\n      ok: true as const,\r\n      ticketId,\r\n      ticket: issue,\r\n    };\r\n  },\r\n});\r\n"]}

package/dist/actions/create-vault-grant.d.ts

@@ -0,0 +1,17 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    secretId: string;
+    appId: string;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    secretId: string;
+    appId: string;
+    grantedBy: string;
+    status: string;
+    syncedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=create-vault-grant.d.ts.map

package/dist/actions/create-vault-grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-vault-grant.d.ts","sourceRoot":"","sources":["../../src/actions/create-vault-grant.ts"],"names":[],"mappings":""}

package/dist/actions/create-vault-grant.js

@@ -0,0 +1,14 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createGrant } from "../server/lib/vault-store.js";
+export default defineAction({
+    description: "Grant an app access to a vault secret in manual vault access mode. Admin only.",
+    schema: z.object({
+        secretId: z.string().describe("ID of the secret to grant"),
+        appId: z
+            .string()
+            .describe("App ID to grant access to, e.g. mail, calendar"),
+    }),
+    run: async (args) => createGrant(args.secretId, args.appId),
+});
+//# sourceMappingURL=create-vault-grant.js.map

package/dist/actions/create-vault-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-vault-grant.js","sourceRoot":"","sources":["../../src/actions/create-vault-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gFAAgF;IAClF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC1D,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,CAAC,gDAAgD,CAAC;KAC9D,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC;CAC5D,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport { z } from \"zod\";\r\n\r\nimport { createGrant } from \"../server/lib/vault-store.js\";\r\n\r\nexport default defineAction({\r\n  description:\r\n    \"Grant an app access to a vault secret in manual vault access mode. Admin only.\",\r\n  schema: z.object({\r\n    secretId: z.string().describe(\"ID of the secret to grant\"),\r\n    appId: z\r\n      .string()\r\n      .describe(\"App ID to grant access to, e.g. mail, calendar\"),\r\n  }),\r\n  run: async (args) => createGrant(args.secretId, args.appId),\r\n});\r\n"]}

package/dist/actions/create-vault-secret.d.ts

@@ -0,0 +1,21 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    credentialKey: string;
+    value: string;
+    name: string;
+    provider?: string | undefined;
+    description?: string | undefined;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    name: string;
+    credentialKey: string;
+    value: string;
+    provider: string | null;
+    description: string | null;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=create-vault-secret.d.ts.map

package/dist/actions/create-vault-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-vault-secret.d.ts","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":""}

package/dist/actions/create-vault-secret.js

@@ -0,0 +1,26 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createSecret } from "../server/lib/vault-store.js";
+export default defineAction({
+    description: "Store a secret in the workspace vault. Admin only. Existing credential keys are updated. By default, saved vault keys are available to every workspace app; manual mode uses per-app grants.",
+    schema: z.object({
+        credentialKey: z
+            .string()
+            .min(1)
+            .describe("Environment variable name, e.g. GOOGLE_CLIENT_ID"),
+        value: z.string().min(1).describe("The secret value"),
+        name: z.string().min(1).describe("Human-readable label for this secret"),
+        provider: z
+            .string()
+            .optional()
+            .describe("Provider grouping tag, e.g. google, sendgrid, slack"),
+        description: z.string().optional().describe("Optional description"),
+    }),
+    // This action's whole purpose is to carry a secret `value`. The vault owns
+    // secret storage; the audit log must record THAT a secret was created — never
+    // the value. Opt out of input capture so the trail can't become a second
+    // durable credential store.
+    audit: { recordInputs: false },
+    run: async (args) => createSecret(args),
+});
+//# sourceMappingURL=create-vault-secret.js.map

package/dist/actions/create-vault-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-vault-secret.js","sourceRoot":"","sources":["../../src/actions/create-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,8LAA8L;IAChM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACxE,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,qDAAqD,CAAC;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KACpE,CAAC;IACF,2EAA2E;IAC3E,8EAA8E;IAC9E,yEAAyE;IACzE,4BAA4B;IAC5B,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;IAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;CACxC,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport { z } from \"zod\";\r\n\r\nimport { createSecret } from \"../server/lib/vault-store.js\";\r\n\r\nexport default defineAction({\r\n  description:\r\n    \"Store a secret in the workspace vault. Admin only. Existing credential keys are updated. By default, saved vault keys are available to every workspace app; manual mode uses per-app grants.\",\r\n  schema: z.object({\r\n    credentialKey: z\r\n      .string()\r\n      .min(1)\r\n      .describe(\"Environment variable name, e.g. GOOGLE_CLIENT_ID\"),\r\n    value: z.string().min(1).describe(\"The secret value\"),\r\n    name: z.string().min(1).describe(\"Human-readable label for this secret\"),\r\n    provider: z\r\n      .string()\r\n      .optional()\r\n      .describe(\"Provider grouping tag, e.g. google, sendgrid, slack\"),\r\n    description: z.string().optional().describe(\"Optional description\"),\r\n  }),\r\n  // This action's whole purpose is to carry a secret `value`. The vault owns\r\n  // secret storage; the audit log must record THAT a secret was created — never\r\n  // the value. Opt out of input capture so the trail can't become a second\r\n  // durable credential store.\r\n  audit: { recordInputs: false },\r\n  run: async (args) => createSecret(args),\r\n});\r\n"]}

package/dist/actions/create-workspace-resource-grant.d.ts

@@ -0,0 +1,16 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    resourceId: string;
+    appId: string;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    resourceId: string;
+    appId: string;
+    status: string;
+    syncedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=create-workspace-resource-grant.d.ts.map

package/dist/actions/create-workspace-resource-grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-workspace-resource-grant.d.ts","sourceRoot":"","sources":["../../src/actions/create-workspace-resource-grant.ts"],"names":[],"mappings":""}

package/dist/actions/create-workspace-resource-grant.js

@@ -0,0 +1,14 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createResourceGrant } from "../server/lib/workspace-resources-store.js";
+export default defineAction({
+    description: "Grant an app access to a workspace resource (skill, instruction, agent, knowledge pack, or MCP server). Admin only.",
+    schema: z.object({
+        resourceId: z.string().describe("Workspace resource ID"),
+        appId: z
+            .string()
+            .describe("App ID to grant access to, e.g. mail, analytics"),
+    }),
+    run: async (args) => createResourceGrant(args.resourceId, args.appId),
+});
+//# sourceMappingURL=create-workspace-resource-grant.js.map

package/dist/actions/create-workspace-resource-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-workspace-resource-grant.js","sourceRoot":"","sources":["../../src/actions/create-workspace-resource-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAEjF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,qHAAqH;IACvH,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QACxD,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,CAAC,iDAAiD,CAAC;KAC/D,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC;CACtE,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport { z } from \"zod\";\r\n\r\nimport { createResourceGrant } from \"../server/lib/workspace-resources-store.js\";\r\n\r\nexport default defineAction({\r\n  description:\r\n    \"Grant an app access to a workspace resource (skill, instruction, agent, knowledge pack, or MCP server). Admin only.\",\r\n  schema: z.object({\r\n    resourceId: z.string().describe(\"Workspace resource ID\"),\r\n    appId: z\r\n      .string()\r\n      .describe(\"App ID to grant access to, e.g. mail, analytics\"),\r\n  }),\r\n  run: async (args) => createResourceGrant(args.resourceId, args.appId),\r\n});\r\n"]}

package/dist/actions/create-workspace-resource.d.ts

@@ -0,0 +1,40 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    kind: "agent" | "instruction" | "knowledge" | "mcp-server" | "skill";
+    name: string;
+    description?: string | undefined;
+    path: string;
+    content: string;
+    scope: "all" | "selected";
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    kind: string;
+    name: string;
+    description: string | null;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+} | {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    changeType: string;
+    targetType: string;
+    targetId: string | null;
+    status: string;
+    summary: string;
+    payload: string;
+    beforeValue: string | null;
+    afterValue: string | null;
+    requestedBy: string;
+    reviewedBy: string | null;
+    reviewedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=create-workspace-resource.d.ts.map

package/dist/actions/create-workspace-resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-workspace-resource.d.ts","sourceRoot":"","sources":["../../src/actions/create-workspace-resource.ts"],"names":[],"mappings":""}

package/dist/actions/create-workspace-resource.js

@@ -0,0 +1,22 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createWorkspaceResource } from "../server/lib/workspace-resources-store.js";
+export default defineAction({
+    description: 'Create a workspace-wide skill, instruction, agent profile, reference resource, or MCP server. Set scope to "all" for runtime inheritance by every app, or "selected" to grant per-app. When Dispatch approval policy is enabled, All-app creates queue an approval request before taking effect.',
+    schema: z.object({
+        kind: z
+            .enum(["skill", "instruction", "agent", "knowledge", "mcp-server"])
+            .describe("Resource kind: skill, instruction, agent, knowledge, or mcp-server"),
+        name: z.string().describe("Human-readable name"),
+        description: z.string().optional().describe("Short description"),
+        path: z
+            .string()
+            .describe('Resource path in target apps. Use "skills/<name>/SKILL.md" for skills, "AGENTS.md" or "instructions/<name>.md" for always-on guardrails, "context/<name>.md" for reference resources, "agents/<name>.md" for custom agents, and "mcp-servers/<name>.json" for HTTP MCP servers.'),
+        content: z.string().describe("Full resource content (markdown or JSON)"),
+        scope: z
+            .enum(["all", "selected"])
+            .describe('"all" = inherited by every app at runtime, "selected" = only apps with explicit grants'),
+    }),
+    run: async (args) => createWorkspaceResource(args),
+});
+//# sourceMappingURL=create-workspace-resource.js.map

package/dist/actions/create-workspace-resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-workspace-resource.js","sourceRoot":"","sources":["../../src/actions/create-workspace-resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,kSAAkS;IACpS,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;aAClE,QAAQ,CACP,oEAAoE,CACrE;QACH,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAChE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,CACP,iRAAiR,CAClR;QACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACxE,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;aACzB,QAAQ,CACP,wFAAwF,CACzF;KACJ,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC;CACnD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport { z } from \"zod\";\r\n\r\nimport { createWorkspaceResource } from \"../server/lib/workspace-resources-store.js\";\r\n\r\nexport default defineAction({\r\n  description:\r\n    'Create a workspace-wide skill, instruction, agent profile, reference resource, or MCP server. Set scope to \"all\" for runtime inheritance by every app, or \"selected\" to grant per-app. When Dispatch approval policy is enabled, All-app creates queue an approval request before taking effect.',\r\n  schema: z.object({\r\n    kind: z\r\n      .enum([\"skill\", \"instruction\", \"agent\", \"knowledge\", \"mcp-server\"])\r\n      .describe(\r\n        \"Resource kind: skill, instruction, agent, knowledge, or mcp-server\",\r\n      ),\r\n    name: z.string().describe(\"Human-readable name\"),\r\n    description: z.string().optional().describe(\"Short description\"),\r\n    path: z\r\n      .string()\r\n      .describe(\r\n        'Resource path in target apps. Use \"skills/<name>/SKILL.md\" for skills, \"AGENTS.md\" or \"instructions/<name>.md\" for always-on guardrails, \"context/<name>.md\" for reference resources, \"agents/<name>.md\" for custom agents, and \"mcp-servers/<name>.json\" for HTTP MCP servers.',\r\n      ),\r\n    content: z.string().describe(\"Full resource content (markdown or JSON)\"),\r\n    scope: z\r\n      .enum([\"all\", \"selected\"])\r\n      .describe(\r\n        '\"all\" = inherited by every app at runtime, \"selected\" = only apps with explicit grants',\r\n      ),\r\n  }),\r\n  run: async (args) => createWorkspaceResource(args),\r\n});\r\n"]}

package/dist/actions/create_embed_session.d.ts

@@ -0,0 +1,13 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    app?: string | undefined;
+    url?: string | undefined;
+    path?: string | undefined;
+    chrome?: "full" | "minimal" | undefined;
+}, {
+    startUrl: string;
+    targetPath?: string;
+    expiresAt?: number;
+    app: string;
+}>;
+export default _default;
+//# sourceMappingURL=create_embed_session.d.ts.map

package/dist/actions/create_embed_session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_embed_session.d.ts","sourceRoot":"","sources":["../../src/actions/create_embed_session.ts"],"names":[],"mappings":""}

package/dist/actions/create_embed_session.js

@@ -0,0 +1,28 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { createGrantedDispatchMcpEmbedSession } from "../server/lib/mcp-gateway.js";
+export default defineAction({
+    description: "MCP Apps helper: create a browser embed session for a Dispatch-granted app URL. Usually called by an MCP App iframe, not directly by the model.",
+    schema: z.object({
+        app: z
+            .string()
+            .optional()
+            .describe("Optional granted app id when path is app-relative."),
+        url: z
+            .string()
+            .optional()
+            .describe("Absolute URL returned by open_app, or app-relative path."),
+        path: z
+            .string()
+            .optional()
+            .describe("App-relative path. Requires app when url is not provided."),
+        chrome: z
+            .enum(["full", "minimal"])
+            .optional()
+            .describe("Embed chrome preference. Defaults to full."),
+    }),
+    readOnly: false,
+    parallelSafe: true,
+    run: async (args) => createGrantedDispatchMcpEmbedSession(args),
+});
+//# sourceMappingURL=create_embed_session.js.map

package/dist/actions/create_embed_session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_embed_session.js","sourceRoot":"","sources":["../../src/actions/create_embed_session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oCAAoC,EAAE,MAAM,8BAA8B,CAAC;AAEpF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,iJAAiJ;IACnJ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,oDAAoD,CAAC;QACjE,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;QACvE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,2DAA2D,CAAC;QACxE,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;aACzB,QAAQ,EAAE;aACV,QAAQ,CAAC,4CAA4C,CAAC;KAC1D,CAAC;IACF,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,oCAAoC,CAAC,IAAI,CAAC;CAChE,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport { z } from \"zod\";\r\n\r\nimport { createGrantedDispatchMcpEmbedSession } from \"../server/lib/mcp-gateway.js\";\r\n\r\nexport default defineAction({\r\n  description:\r\n    \"MCP Apps helper: create a browser embed session for a Dispatch-granted app URL. Usually called by an MCP App iframe, not directly by the model.\",\r\n  schema: z.object({\r\n    app: z\r\n      .string()\r\n      .optional()\r\n      .describe(\"Optional granted app id when path is app-relative.\"),\r\n    url: z\r\n      .string()\r\n      .optional()\r\n      .describe(\"Absolute URL returned by open_app, or app-relative path.\"),\r\n    path: z\r\n      .string()\r\n      .optional()\r\n      .describe(\"App-relative path. Requires app when url is not provided.\"),\r\n    chrome: z\r\n      .enum([\"full\", \"minimal\"])\r\n      .optional()\r\n      .describe(\"Embed chrome preference. Defaults to full.\"),\r\n  }),\r\n  readOnly: false,\r\n  parallelSafe: true,\r\n  run: async (args) => createGrantedDispatchMcpEmbedSession(args),\r\n});\r\n"]}

package/dist/actions/delete-destination.d.ts

@@ -0,0 +1,34 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    id: string;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    changeType: string;
+    targetType: string;
+    targetId: string | null;
+    status: string;
+    summary: string;
+    payload: string;
+    beforeValue: string | null;
+    afterValue: string | null;
+    requestedBy: string;
+    reviewedBy: string | null;
+    reviewedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+} | {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    name: string;
+    platform: string;
+    destination: string;
+    threadRef: string | null;
+    notes: string | null;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=delete-destination.d.ts.map

package/dist/actions/delete-destination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-destination.d.ts","sourceRoot":"","sources":["../../src/actions/delete-destination.ts"],"names":[],"mappings":""}

package/dist/actions/delete-destination.js

@@ -0,0 +1,11 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { deleteDestination } from "../server/lib/dispatch-store.js";
+export default defineAction({
+    description: "Delete a saved dispatch destination.",
+    schema: z.object({
+        id: z.string().describe("Destination id"),
+    }),
+    run: async ({ id }) => deleteDestination(id),
+});
+//# sourceMappingURL=delete-destination.js.map

package/dist/actions/delete-destination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-destination.js","sourceRoot":"","sources":["../../src/actions/delete-destination.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAEpE,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,sCAAsC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;KAC1C,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;CAC7C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport { z } from \"zod\";\r\n\r\nimport { deleteDestination } from \"../server/lib/dispatch-store.js\";\r\n\r\nexport default defineAction({\r\n  description: \"Delete a saved dispatch destination.\",\r\n  schema: z.object({\r\n    id: z.string().describe(\"Destination id\"),\r\n  }),\r\n  run: async ({ id }) => deleteDestination(id),\r\n});\r\n"]}

package/dist/actions/delete-staged-dataset.d.ts

@@ -0,0 +1,8 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    datasetId: string;
+}, {
+    deleted: boolean;
+    datasetId: string;
+}>;
+export default _default;
+//# sourceMappingURL=delete-staged-dataset.d.ts.map

package/dist/actions/delete-staged-dataset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-staged-dataset.d.ts","sourceRoot":"","sources":["../../src/actions/delete-staged-dataset.ts"],"names":[],"mappings":""}

package/dist/actions/delete-staged-dataset.js

@@ -0,0 +1,31 @@
+import { defineAction } from "@agent-native/core";
+import { deleteStagedDataset } from "@agent-native/core/provider-api/staged-datasets-store";
+import { getCredentialContext } from "@agent-native/core/server/request-context";
+import { z } from "zod";
+import { DISPATCH_APP_ID } from "../server/lib/provider-api.js";
+export default defineAction({
+    description: "Delete a staged dataset by id, freeing its scratch storage. Use after analysis is complete or before re-staging under the same name. Only the owner who staged the dataset can delete it.",
+    schema: z.object({
+        datasetId: z
+            .string()
+            .min(1)
+            .describe("Dataset id to delete (from list-staged-datasets or provider-api-request stageAs result)."),
+    }),
+    http: false,
+    run: async (args) => {
+        const ctx = getCredentialContext();
+        if (!ctx) {
+            throw new Error("No authenticated context for delete-staged-dataset.");
+        }
+        const deleted = await deleteStagedDataset({
+            id: args.datasetId,
+            appId: DISPATCH_APP_ID,
+            ownerEmail: ctx.userEmail,
+        });
+        if (!deleted) {
+            throw new Error(`Dataset ${args.datasetId} not found (or belongs to a different owner/app).`);
+        }
+        return { deleted: true, datasetId: args.datasetId };
+    },
+});
+//# sourceMappingURL=delete-staged-dataset.js.map

package/dist/actions/delete-staged-dataset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-staged-dataset.js","sourceRoot":"","sources":["../../src/actions/delete-staged-dataset.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uDAAuD,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,2LAA2L;IAC7L,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CACP,0FAA0F,CAC3F;KACJ,CAAC;IACF,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;YACxC,EAAE,EAAE,IAAI,CAAC,SAAS;YAClB,KAAK,EAAE,eAAe;YACtB,UAAU,EAAE,GAAG,CAAC,SAAS;SAC1B,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,WAAW,IAAI,CAAC,SAAS,mDAAmD,CAC7E,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IACtD,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport { deleteStagedDataset } from \"@agent-native/core/provider-api/staged-datasets-store\";\r\nimport { getCredentialContext } from \"@agent-native/core/server/request-context\";\r\nimport { z } from \"zod\";\r\n\r\nimport { DISPATCH_APP_ID } from \"../server/lib/provider-api.js\";\r\n\r\nexport default defineAction({\r\n  description:\r\n    \"Delete a staged dataset by id, freeing its scratch storage. Use after analysis is complete or before re-staging under the same name. Only the owner who staged the dataset can delete it.\",\r\n  schema: z.object({\r\n    datasetId: z\r\n      .string()\r\n      .min(1)\r\n      .describe(\r\n        \"Dataset id to delete (from list-staged-datasets or provider-api-request stageAs result).\",\r\n      ),\r\n  }),\r\n  http: false,\r\n  run: async (args) => {\r\n    const ctx = getCredentialContext();\r\n    if (!ctx) {\r\n      throw new Error(\"No authenticated context for delete-staged-dataset.\");\r\n    }\r\n\r\n    const deleted = await deleteStagedDataset({\r\n      id: args.datasetId,\r\n      appId: DISPATCH_APP_ID,\r\n      ownerEmail: ctx.userEmail,\r\n    });\r\n\r\n    if (!deleted) {\r\n      throw new Error(\r\n        `Dataset ${args.datasetId} not found (or belongs to a different owner/app).`,\r\n      );\r\n    }\r\n\r\n    return { deleted: true, datasetId: args.datasetId };\r\n  },\r\n});\r\n"]}

package/dist/actions/delete-vault-secret.d.ts

@@ -0,0 +1,17 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    id: string;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    name: string;
+    credentialKey: string;
+    value: string;
+    provider: string | null;
+    description: string | null;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=delete-vault-secret.d.ts.map

package/dist/actions/delete-vault-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-vault-secret.d.ts","sourceRoot":"","sources":["../../src/actions/delete-vault-secret.ts"],"names":[],"mappings":""}

package/dist/actions/delete-vault-secret.js

@@ -0,0 +1,11 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { deleteSecret } from "../server/lib/vault-store.js";
+export default defineAction({
+    description: "Delete a secret from the workspace vault. Also revokes all active grants for this secret. Admin only.",
+    schema: z.object({
+        id: z.string().describe("Secret ID to delete"),
+    }),
+    run: async (args) => deleteSecret(args.id),
+});
+//# sourceMappingURL=delete-vault-secret.js.map

package/dist/actions/delete-vault-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-vault-secret.js","sourceRoot":"","sources":["../../src/actions/delete-vault-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;KAC/C,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;CAC3C,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport { z } from \"zod\";\r\n\r\nimport { deleteSecret } from \"../server/lib/vault-store.js\";\r\n\r\nexport default defineAction({\r\n  description:\r\n    \"Delete a secret from the workspace vault. Also revokes all active grants for this secret. Admin only.\",\r\n  schema: z.object({\r\n    id: z.string().describe(\"Secret ID to delete\"),\r\n  }),\r\n  run: async (args) => deleteSecret(args.id),\r\n});\r\n"]}

package/dist/actions/delete-workspace-resource.d.ts

@@ -0,0 +1,35 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    id: string;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    changeType: string;
+    targetType: string;
+    targetId: string | null;
+    status: string;
+    summary: string;
+    payload: string;
+    beforeValue: string | null;
+    afterValue: string | null;
+    requestedBy: string;
+    reviewedBy: string | null;
+    reviewedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+} | {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    kind: string;
+    name: string;
+    description: string | null;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=delete-workspace-resource.d.ts.map

package/dist/actions/delete-workspace-resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-workspace-resource.d.ts","sourceRoot":"","sources":["../../src/actions/delete-workspace-resource.ts"],"names":[],"mappings":""}

package/dist/actions/delete-workspace-resource.js

@@ -0,0 +1,11 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { deleteWorkspaceResource } from "../server/lib/workspace-resources-store.js";
+export default defineAction({
+    description: "Delete a workspace resource and revoke all its grants. When Dispatch approval policy is enabled, deleting an All-app resource queues an approval request before taking effect.",
+    schema: z.object({
+        id: z.string().describe("Resource ID to delete"),
+    }),
+    run: async (args) => deleteWorkspaceResource(args.id),
+});
+//# sourceMappingURL=delete-workspace-resource.js.map

package/dist/actions/delete-workspace-resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-workspace-resource.js","sourceRoot":"","sources":["../../src/actions/delete-workspace-resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gLAAgL;IAClL,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KACjD,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;CACtD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport { z } from \"zod\";\r\n\r\nimport { deleteWorkspaceResource } from \"../server/lib/workspace-resources-store.js\";\r\n\r\nexport default defineAction({\r\n  description:\r\n    \"Delete a workspace resource and revoke all its grants. When Dispatch approval policy is enabled, deleting an All-app resource queues an approval request before taking effect.\",\r\n  schema: z.object({\r\n    id: z.string().describe(\"Resource ID to delete\"),\r\n  }),\r\n  run: async (args) => deleteWorkspaceResource(args.id),\r\n});\r\n"]}

package/dist/actions/deny-vault-request.d.ts

@@ -0,0 +1,19 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    id: string;
+    reason?: string | undefined;
+}, {
+    id: string;
+    ownerEmail: string;
+    orgId: string | null;
+    credentialKey: string;
+    appId: string;
+    reason: string | null;
+    requestedBy: string;
+    status: string;
+    reviewedBy: string | null;
+    reviewedAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export default _default;
+//# sourceMappingURL=deny-vault-request.d.ts.map

package/dist/actions/deny-vault-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deny-vault-request.d.ts","sourceRoot":"","sources":["../../src/actions/deny-vault-request.ts"],"names":[],"mappings":""}

package/dist/actions/deny-vault-request.js

@@ -0,0 +1,12 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { denyRequest, requireVaultCtx } from "../server/lib/vault-store.js";
+export default defineAction({
+    description: "Deny a pending vault secret request. Admin only.",
+    schema: z.object({
+        id: z.string().describe("Request ID to deny"),
+        reason: z.string().optional().describe("Reason for denial"),
+    }),
+    run: async (args) => denyRequest(args.id, args.reason, requireVaultCtx()),
+});
+//# sourceMappingURL=deny-vault-request.js.map

package/dist/actions/deny-vault-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deny-vault-request.js","sourceRoot":"","sources":["../../src/actions/deny-vault-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE5E,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,kDAAkD;IAC/D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;KAC5D,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;CAC1E,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport { z } from \"zod\";\r\n\r\nimport { denyRequest, requireVaultCtx } from \"../server/lib/vault-store.js\";\r\n\r\nexport default defineAction({\r\n  description: \"Deny a pending vault secret request. Admin only.\",\r\n  schema: z.object({\r\n    id: z.string().describe(\"Request ID to deny\"),\r\n    reason: z.string().optional().describe(\"Reason for denial\"),\r\n  }),\r\n  run: async (args) => denyRequest(args.id, args.reason, requireVaultCtx()),\r\n});\r\n"]}

package/dist/actions/ensure-dream-job.d.ts

@@ -0,0 +1,33 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    schedule?: string | undefined;
+    sourceId?: string | undefined;
+    sourceIds?: string[] | undefined;
+    allSources?: unknown;
+    query?: string | undefined;
+    limit?: unknown;
+    sourceTimeoutMs?: unknown;
+    sourceConcurrency?: unknown;
+    sourceStartStaggerMs?: unknown;
+    threadConcurrency?: unknown;
+    threadTimeoutMs?: unknown;
+    minCandidateCount?: unknown;
+}, {
+    path: string;
+    owner: string;
+    schedule: string;
+    enabled: boolean;
+    runAs: string;
+    sourceId: string;
+    sourceIds: string[];
+    allSources: boolean;
+    query: string | null;
+    limit: number;
+    sourceTimeoutMs: number;
+    sourceConcurrency: number;
+    sourceStartStaggerMs: number;
+    threadConcurrency: number;
+    threadTimeoutMs: number;
+    minCandidateCount: number;
+}>;
+export default _default;
+//# sourceMappingURL=ensure-dream-job.d.ts.map

package/dist/actions/ensure-dream-job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-dream-job.d.ts","sourceRoot":"","sources":["../../src/actions/ensure-dream-job.ts"],"names":[],"mappings":""}