@jami-studio/dispatch 0.13.14

package/src/actions/apply-dream-proposal.ts

@@ -0,0 +1,13 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { applyDreamProposal } from "../server/lib/dreams-store.js";
+
+export default defineAction({
+  description:
+    "Apply one pending Dispatch dream proposal. Personal memory applies directly; shared LEARNINGS.md and workspace resource proposals queue an approval request when approval policy is enabled.",
+  schema: z.object({
+    id: z.string().min(1).describe("Dream proposal id."),
+  }),
+  run: async ({ id }) => applyDreamProposal(id),
+});

package/src/actions/approve-dispatch-change.ts

@@ -0,0 +1,12 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { approveRequest } from "../server/lib/dispatch-store.js";
+
+export default defineAction({
+  description: "Approve a pending dispatch change request and apply it.",
+  schema: z.object({
+    id: z.string().describe("Approval request id"),
+  }),
+  run: async ({ id }) => approveRequest(id),
+});

package/src/actions/approve-vault-request.ts

@@ -0,0 +1,24 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { approveRequest, requireVaultCtx } from "../server/lib/vault-store.js";
+
+export default defineAction({
+  description:
+    "Approve a pending vault secret request. Creates the secret (if it doesn't exist) and grants it to the requesting app. Admin only.",
+  schema: z.object({
+    id: z.string().describe("Request ID to approve"),
+    secretValue: z.string().describe("The secret value to store"),
+    secretName: z
+      .string()
+      .optional()
+      .describe("Human-readable name for the secret"),
+  }),
+  run: async (args) =>
+    approveRequest(
+      args.id,
+      args.secretValue,
+      args.secretName,
+      requireVaultCtx(),
+    ),
+});

package/src/actions/archive-workspace-app.ts

@@ -0,0 +1,17 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { archiveWorkspaceApp } from "../server/lib/app-creation-store.js";
+
+export default defineAction({
+  description:
+    "Hide a workspace app from the Apps list for the current viewer. The app's files and database stay intact; this is a per-user/org visibility flag stored in dispatch settings. Pair with unarchive-workspace-app to restore.",
+  schema: z.object({
+    appId: z
+      .string()
+      .min(1)
+      .max(64)
+      .describe("Workspace app id (matches the apps/<id>/ folder)"),
+  }),
+  run: async (input) => archiveWorkspaceApp({ appId: input.appId }),
+});

package/src/actions/ask_app.ts

@@ -0,0 +1,14 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { askGrantedDispatchMcpApp } from "../server/lib/mcp-gateway.js";
+
+export default defineAction({
+  description:
+    "Send a natural-language request to an app available through Dispatch MCP. Use list_apps first to see which apps are granted.",
+  schema: z.object({
+    app: z.string().describe("Granted app id, e.g. mail or calendar."),
+    message: z.string().describe("The request to send to that app's agent."),
+  }),
+  run: async ({ app, message }) => askGrantedDispatchMcpApp(app, message),
+});

package/src/actions/create-dream-report.ts

@@ -0,0 +1,77 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { createDreamReport } from "../server/lib/dreams-store.js";
+
+export default defineAction({
+  description:
+    "Create a Dispatch dream report from existing thread-debug records and produce pending, evidence-backed memory proposals without calling an LLM.",
+  schema: z.object({
+    sourceId: z
+      .string()
+      .default("current")
+      .describe(
+        "Thread debug source id from list-agent-thread-sources. Use 'all' to scan every connected source.",
+      ),
+    sourceIds: z
+      .array(z.string().min(1))
+      .optional()
+      .describe(
+        "Optional explicit source ids to scan together. When provided, sourceId is treated as aggregate.",
+      ),
+    allSources: z.coerce
+      .boolean()
+      .default(false)
+      .describe(
+        "Scan every connected thread-debug source with partial results.",
+      ),
+    query: z
+      .string()
+      .optional()
+      .describe("Optional search term to focus dream candidate discovery."),
+    ownerEmail: z
+      .string()
+      .optional()
+      .describe(
+        "Optional owner email filter. Admins may pass '*' or omit to use their admin-visible scope.",
+      ),
+    limit: z.coerce.number().int().min(1).max(50).default(20),
+    sourceTimeoutMs: z.coerce
+      .number()
+      .int()
+      .min(1000)
+      .max(60000)
+      .default(15000)
+      .describe("Per-source timeout in milliseconds for partial scans."),
+    sourceConcurrency: z.coerce
+      .number()
+      .int()
+      .min(1)
+      .max(8)
+      .default(2)
+      .describe("How many thread-debug sources to scan at once."),
+    sourceStartStaggerMs: z.coerce
+      .number()
+      .int()
+      .min(0)
+      .max(5000)
+      .default(250)
+      .describe("Delay between source starts within a scan batch."),
+    threadConcurrency: z.coerce
+      .number()
+      .int()
+      .min(1)
+      .max(10)
+      .default(3)
+      .describe("How many threads to inspect at once within each source."),
+    threadTimeoutMs: z.coerce
+      .number()
+      .int()
+      .min(1000)
+      .max(30000)
+      .default(8000)
+      .describe("Per-thread debug timeout in milliseconds."),
+    title: z.string().optional().describe("Optional title for the dream pass."),
+  }),
+  run: async (input) => createDreamReport(input),
+});

package/src/actions/create-link-token.ts

@@ -0,0 +1,13 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { createLinkToken } from "../server/lib/dispatch-store.js";
+
+export default defineAction({
+  description:
+    "Create a /link token so a Slack or Telegram user can bind to their personal dispatch identity.",
+  schema: z.object({
+    platform: z.enum(["slack", "telegram"]),
+  }),
+  run: async ({ platform }) => createLinkToken(platform),
+});

package/src/actions/create-pylon-ticket.ts

@@ -0,0 +1,111 @@
+import { defineAction } from "@agent-native/core";
+import { resolveSecret } from "@agent-native/core/server";
+import { z } from "zod";
+
+import { recordAudit } from "../server/lib/dispatch-store.js";
+
+const PYLON_API_BASE =
+  process.env.PYLON_API_BASE_URL || "https://api.usepylon.com";
+
+export default defineAction({
+  description:
+    "Create a Pylon ticket. Use to escalate blockers from client meetings, route unmatched #customer-* posts that have no Slack channel, or open a follow-up that needs tracking. Requires PYLON_API_KEY in the Vault.",
+  schema: z.object({
+    title: z.string().min(1).describe("Short ticket title"),
+    bodyHtml: z
+      .string()
+      .min(1)
+      .describe("HTML body — Pylon renders this in the ticket"),
+    requesterEmail: z
+      .string()
+      .email()
+      .optional()
+      .describe("Email of the person the ticket is on behalf of"),
+    requesterName: z.string().optional(),
+    accountId: z
+      .string()
+      .optional()
+      .describe(
+        "Pylon account ID — provide either this OR requesterEmail to identify the subject",
+      ),
+    priority: z.enum(["urgent", "high", "medium", "low"]).optional(),
+    tags: z.array(z.string()).optional(),
+    assigneeId: z.string().optional(),
+    teamId: z.string().optional(),
+  }),
+  run: async (input) => {
+    const apiKey = await resolveSecret("PYLON_API_KEY");
+    if (!apiKey) {
+      throw new Error(
+        "PYLON_API_KEY is not set. Add it to the Dispatch Vault.",
+      );
+    }
+    if (!input.accountId && !input.requesterEmail) {
+      throw new Error(
+        "Pylon requires either accountId or requesterEmail to identify the ticket subject.",
+      );
+    }
+
+    const payload: Record<string, unknown> = {
+      title: input.title,
+      body_html: input.bodyHtml,
+    };
+    if (input.accountId) payload.account_id = input.accountId;
+    if (input.requesterEmail) payload.requester_email = input.requesterEmail;
+    if (input.requesterName) payload.requester_name = input.requesterName;
+    if (input.priority) payload.priority = input.priority;
+    if (input.tags?.length) payload.tags = input.tags;
+    if (input.assigneeId) payload.assignee_id = input.assigneeId;
+    if (input.teamId) payload.team_id = input.teamId;
+
+    const res = await fetch(`${PYLON_API_BASE}/issues`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify(payload),
+    });
+
+    if (!res.ok) {
+      const text = await res.text().catch(() => "");
+      throw new Error(
+        `Pylon ticket creation failed (HTTP ${res.status})${text ? `: ${text.slice(0, 500)}` : ""}`,
+      );
+    }
+
+    const data = (await res.json().catch(() => null)) as Record<
+      string,
+      unknown
+    > | null;
+    const issue =
+      data && typeof data === "object" && "issue" in data
+        ? ((data as { issue?: Record<string, unknown> }).issue ?? {})
+        : (data ?? {});
+    const ticketId =
+      issue && typeof (issue as { id?: unknown }).id === "string"
+        ? (issue as { id: string }).id
+        : "";
+
+    await recordAudit({
+      action: "pylon.ticket.created",
+      targetType: "pylon-ticket",
+      targetId: ticketId || null,
+      summary: `Created Pylon ticket: ${input.title}`,
+      metadata: {
+        title: input.title,
+        priority: input.priority,
+        tags: input.tags,
+        accountId: input.accountId,
+        requesterEmail: input.requesterEmail,
+        ticketId,
+      },
+    });
+
+    return {
+      ok: true as const,
+      ticketId,
+      ticket: issue,
+    };
+  },
+});

package/src/actions/create-vault-grant.ts

@@ -0,0 +1,16 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { createGrant } from "../server/lib/vault-store.js";
+
+export default defineAction({
+  description:
+    "Grant an app access to a vault secret in manual vault access mode. Admin only.",
+  schema: z.object({
+    secretId: z.string().describe("ID of the secret to grant"),
+    appId: z
+      .string()
+      .describe("App ID to grant access to, e.g. mail, calendar"),
+  }),
+  run: async (args) => createGrant(args.secretId, args.appId),
+});

package/src/actions/create-vault-secret.ts

@@ -0,0 +1,28 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { createSecret } from "../server/lib/vault-store.js";
+
+export default defineAction({
+  description:
+    "Store a secret in the workspace vault. Admin only. Existing credential keys are updated. By default, saved vault keys are available to every workspace app; manual mode uses per-app grants.",
+  schema: z.object({
+    credentialKey: z
+      .string()
+      .min(1)
+      .describe("Environment variable name, e.g. GOOGLE_CLIENT_ID"),
+    value: z.string().min(1).describe("The secret value"),
+    name: z.string().min(1).describe("Human-readable label for this secret"),
+    provider: z
+      .string()
+      .optional()
+      .describe("Provider grouping tag, e.g. google, sendgrid, slack"),
+    description: z.string().optional().describe("Optional description"),
+  }),
+  // This action's whole purpose is to carry a secret `value`. The vault owns
+  // secret storage; the audit log must record THAT a secret was created — never
+  // the value. Opt out of input capture so the trail can't become a second
+  // durable credential store.
+  audit: { recordInputs: false },
+  run: async (args) => createSecret(args),
+});

package/src/actions/create-workspace-resource-grant.ts

@@ -0,0 +1,16 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { createResourceGrant } from "../server/lib/workspace-resources-store.js";
+
+export default defineAction({
+  description:
+    "Grant an app access to a workspace resource (skill, instruction, agent, knowledge pack, or MCP server). Admin only.",
+  schema: z.object({
+    resourceId: z.string().describe("Workspace resource ID"),
+    appId: z
+      .string()
+      .describe("App ID to grant access to, e.g. mail, analytics"),
+  }),
+  run: async (args) => createResourceGrant(args.resourceId, args.appId),
+});

package/src/actions/create-workspace-resource.ts

@@ -0,0 +1,30 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { createWorkspaceResource } from "../server/lib/workspace-resources-store.js";
+
+export default defineAction({
+  description:
+    'Create a workspace-wide skill, instruction, agent profile, reference resource, or MCP server. Set scope to "all" for runtime inheritance by every app, or "selected" to grant per-app. When Dispatch approval policy is enabled, All-app creates queue an approval request before taking effect.',
+  schema: z.object({
+    kind: z
+      .enum(["skill", "instruction", "agent", "knowledge", "mcp-server"])
+      .describe(
+        "Resource kind: skill, instruction, agent, knowledge, or mcp-server",
+      ),
+    name: z.string().describe("Human-readable name"),
+    description: z.string().optional().describe("Short description"),
+    path: z
+      .string()
+      .describe(
+        'Resource path in target apps. Use "skills/<name>/SKILL.md" for skills, "AGENTS.md" or "instructions/<name>.md" for always-on guardrails, "context/<name>.md" for reference resources, "agents/<name>.md" for custom agents, and "mcp-servers/<name>.json" for HTTP MCP servers.',
+      ),
+    content: z.string().describe("Full resource content (markdown or JSON)"),
+    scope: z
+      .enum(["all", "selected"])
+      .describe(
+        '"all" = inherited by every app at runtime, "selected" = only apps with explicit grants',
+      ),
+  }),
+  run: async (args) => createWorkspaceResource(args),
+});

package/src/actions/create_embed_session.ts

@@ -0,0 +1,30 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { createGrantedDispatchMcpEmbedSession } from "../server/lib/mcp-gateway.js";
+
+export default defineAction({
+  description:
+    "MCP Apps helper: create a browser embed session for a Dispatch-granted app URL. Usually called by an MCP App iframe, not directly by the model.",
+  schema: z.object({
+    app: z
+      .string()
+      .optional()
+      .describe("Optional granted app id when path is app-relative."),
+    url: z
+      .string()
+      .optional()
+      .describe("Absolute URL returned by open_app, or app-relative path."),
+    path: z
+      .string()
+      .optional()
+      .describe("App-relative path. Requires app when url is not provided."),
+    chrome: z
+      .enum(["full", "minimal"])
+      .optional()
+      .describe("Embed chrome preference. Defaults to full."),
+  }),
+  readOnly: false,
+  parallelSafe: true,
+  run: async (args) => createGrantedDispatchMcpEmbedSession(args),
+});

package/src/actions/delete-destination.ts

@@ -0,0 +1,12 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { deleteDestination } from "../server/lib/dispatch-store.js";
+
+export default defineAction({
+  description: "Delete a saved dispatch destination.",
+  schema: z.object({
+    id: z.string().describe("Destination id"),
+  }),
+  run: async ({ id }) => deleteDestination(id),
+});

package/src/actions/delete-staged-dataset.ts

@@ -0,0 +1,40 @@
+import { defineAction } from "@agent-native/core";
+import { deleteStagedDataset } from "@agent-native/core/provider-api/staged-datasets-store";
+import { getCredentialContext } from "@agent-native/core/server/request-context";
+import { z } from "zod";
+
+import { DISPATCH_APP_ID } from "../server/lib/provider-api.js";
+
+export default defineAction({
+  description:
+    "Delete a staged dataset by id, freeing its scratch storage. Use after analysis is complete or before re-staging under the same name. Only the owner who staged the dataset can delete it.",
+  schema: z.object({
+    datasetId: z
+      .string()
+      .min(1)
+      .describe(
+        "Dataset id to delete (from list-staged-datasets or provider-api-request stageAs result).",
+      ),
+  }),
+  http: false,
+  run: async (args) => {
+    const ctx = getCredentialContext();
+    if (!ctx) {
+      throw new Error("No authenticated context for delete-staged-dataset.");
+    }
+
+    const deleted = await deleteStagedDataset({
+      id: args.datasetId,
+      appId: DISPATCH_APP_ID,
+      ownerEmail: ctx.userEmail,
+    });
+
+    if (!deleted) {
+      throw new Error(
+        `Dataset ${args.datasetId} not found (or belongs to a different owner/app).`,
+      );
+    }
+
+    return { deleted: true, datasetId: args.datasetId };
+  },
+});

package/src/actions/delete-vault-secret.ts

@@ -0,0 +1,13 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { deleteSecret } from "../server/lib/vault-store.js";
+
+export default defineAction({
+  description:
+    "Delete a secret from the workspace vault. Also revokes all active grants for this secret. Admin only.",
+  schema: z.object({
+    id: z.string().describe("Secret ID to delete"),
+  }),
+  run: async (args) => deleteSecret(args.id),
+});

package/src/actions/delete-workspace-resource.ts

@@ -0,0 +1,13 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { deleteWorkspaceResource } from "../server/lib/workspace-resources-store.js";
+
+export default defineAction({
+  description:
+    "Delete a workspace resource and revoke all its grants. When Dispatch approval policy is enabled, deleting an All-app resource queues an approval request before taking effect.",
+  schema: z.object({
+    id: z.string().describe("Resource ID to delete"),
+  }),
+  run: async (args) => deleteWorkspaceResource(args.id),
+});

package/src/actions/deny-vault-request.ts

@@ -0,0 +1,13 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { denyRequest, requireVaultCtx } from "../server/lib/vault-store.js";
+
+export default defineAction({
+  description: "Deny a pending vault secret request. Admin only.",
+  schema: z.object({
+    id: z.string().describe("Request ID to deny"),
+    reason: z.string().optional().describe("Reason for denial"),
+  }),
+  run: async (args) => denyRequest(args.id, args.reason, requireVaultCtx()),
+});

package/src/actions/ensure-dream-job.ts

@@ -0,0 +1,77 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { ensureDreamJob } from "../server/lib/dreams-store.js";
+
+export default defineAction({
+  description:
+    "Create or update the personal recurring Dispatch dream job resource at jobs/dispatch-dream.md.",
+  schema: z.object({
+    schedule: z
+      .string()
+      .optional()
+      .describe(
+        'Optional five-field cron schedule. Defaults to weekly: "0 9 * * 1".',
+      ),
+    sourceId: z
+      .string()
+      .default("all")
+      .describe("Thread debug source id for the recurring dream pass."),
+    sourceIds: z
+      .array(z.string().min(1))
+      .optional()
+      .describe("Optional explicit source ids for recurring dream passes."),
+    allSources: z.coerce
+      .boolean()
+      .default(true)
+      .describe("Scan every connected source for recurring dream passes."),
+    query: z
+      .string()
+      .optional()
+      .describe("Optional search term to focus recurring dream passes."),
+    limit: z.coerce.number().int().min(1).max(50).default(8),
+    sourceTimeoutMs: z.coerce
+      .number()
+      .int()
+      .min(1000)
+      .max(60000)
+      .default(30000)
+      .describe("Per-source timeout in milliseconds."),
+    sourceConcurrency: z.coerce
+      .number()
+      .int()
+      .min(1)
+      .max(8)
+      .default(2)
+      .describe("How many sources to scan at once."),
+    sourceStartStaggerMs: z.coerce
+      .number()
+      .int()
+      .min(0)
+      .max(5000)
+      .default(250)
+      .describe("Delay between source starts within each scan batch."),
+    threadConcurrency: z.coerce
+      .number()
+      .int()
+      .min(1)
+      .max(10)
+      .default(3)
+      .describe("How many threads to inspect at once within each source."),
+    threadTimeoutMs: z.coerce
+      .number()
+      .int()
+      .min(1000)
+      .max(30000)
+      .default(8000)
+      .describe("Per-thread debug timeout in milliseconds."),
+    minCandidateCount: z.coerce
+      .number()
+      .int()
+      .min(0)
+      .max(50)
+      .default(1)
+      .describe("Skip recurring report creation below this candidate count."),
+  }),
+  run: async (input) => ensureDreamJob(input),
+});

package/src/actions/get-agent-thread-debug.ts

@@ -0,0 +1,26 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { getAgentThreadDebug } from "../server/lib/thread-debug-store.js";
+
+export default defineAction({
+  description:
+    "Get a full read-only debug snapshot for an agent chat thread, including persisted messages, raw thread_data, run events, traces, feedback, evals, and checkpoints when present.",
+  schema: z.object({
+    sourceId: z
+      .string()
+      .default("current")
+      .describe("Thread debug source id from list-agent-thread-sources."),
+    threadId: z.string().min(1).describe("Agent chat thread id to inspect."),
+    ownerEmail: z
+      .string()
+      .optional()
+      .describe("Optional owner email scope for admin cross-user lookups."),
+    maxRuns: z.coerce.number().int().min(1).max(50).default(20),
+    maxEvents: z.coerce.number().int().min(1).max(2000).default(600),
+    maxTraceSpans: z.coerce.number().int().min(1).max(2000).default(500),
+  }),
+  http: { method: "GET" },
+  readOnly: true,
+  run: async (input) => getAgentThreadDebug(input),
+});

package/src/actions/get-app-creation-settings.ts

@@ -0,0 +1,12 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { getAppCreationSettings } from "../server/lib/app-creation-store.js";
+
+export default defineAction({
+  description:
+    "Get Dispatch settings for creating new workspace apps, including the default Builder project.",
+  schema: z.object({}),
+  http: { method: "GET" },
+  run: async () => getAppCreationSettings(),
+});

package/src/actions/get-dispatch-settings.ts

@@ -0,0 +1,11 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { getApprovalPolicy } from "../server/lib/dispatch-store.js";
+
+export default defineAction({
+  description: "Get dispatch approval settings for the current organization.",
+  schema: z.object({}),
+  http: { method: "GET" },
+  run: async () => getApprovalPolicy(),
+});

package/src/actions/get-dream-settings.ts

@@ -0,0 +1,13 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+
+import { getDreamSettings } from "../server/lib/dreams-store.js";
+
+export default defineAction({
+  description:
+    "Read recurring Dispatch dream settings, including schedule, source scope, timeout, and minimum candidate threshold.",
+  schema: z.object({}),
+  http: { method: "GET" },
+  readOnly: true,
+  run: async () => getDreamSettings(),
+});