runwork 0.24.0 → 0.24.1

package/bundled-types/core-agent.d.ts

@@ -81,6 +81,16 @@ export interface AgentDefinition {
     integrations?: string[];
     /** Entity names the agent can read/write */
     entities?: string[];
+    /**
+     * Endpoints on OTHER apps in this workspace that the agent may call, as
+     * `'<app>:<METHOD>:<path>'` — e.g. `'labcrm:GET:/v1/portal/catalog'`.
+     * `<app>` is the target app's slug; `<path>` is the path exactly as registered,
+     * `:param` placeholders included.
+     *
+     * Declared explicitly, like `entities` and `integrations`: an agent can only
+     * call what the app author listed, never an arbitrary endpoint.
+     */
+    appEndpoints?: string[];
     /** Memory strategy */
     memoryStrategy?: MemoryStrategy;
     /** Custom tools for this agent */
@@ -90,6 +100,27 @@ export interface AgentDefinition {
     /** Cost/time limits for task agent sandbox execution. Optional overrides. */
     executionLimits?: ExecutionLimits;
 }
+/** A parsed `'<app>:<METHOD>:<path>'` agent endpoint reference. */
+export interface AppEndpointRef {
+    app: string;
+    method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+    path: string;
+}
+/**
+ * Parse `'labcrm:GET:/v1/portal/invite/:token'`.
+ *
+ * Split on the first two colons only: the path itself contains colons for its
+ * `:param` segments, so a naive split would mangle every parameterized endpoint.
+ * Returns null for anything malformed rather than throwing, so one bad entry in an
+ * agent definition costs that one tool instead of the whole agent.
+ */
+export declare function parseAppEndpointRef(ref: string): AppEndpointRef | null;
+/**
+ * Stable, model-friendly tool name for an endpoint reference, e.g.
+ * `call_labcrm_get_v1_portal_invite`. Param segments are dropped so the name
+ * stays readable; the full path is in the tool description.
+ */
+export declare function appEndpointToolName(ref: AppEndpointRef): string;
 /**
  * Custom tool definition for agents
  */

package/bundled-types/core-base-agent.d.ts

@@ -64,6 +64,13 @@ export declare class BaseAgent extends AIChatAgent<Env> {
      * Build tools for accessing entities using AI SDK tool() helper
      * Uses entity classes directly with EntityContext
      */
+    /**
+     * One tool per endpoint the agent is allowed to call on another app.
+     *
+     * Routed through `callAppEndpoint`, so it works in preview and production
+     * alike: a production app cannot HTTP-fetch a sibling's public URL.
+     */
+    private buildAppEndpointTools;
     private buildEntityTools;
     /**
      * Build tools for running complex tasks via a sandboxed AI sub-agent

package/bundled-types/core-endpoints.d.ts

@@ -15,11 +15,16 @@ type ZodSchema = z.ZodType<any, any, any>;
 export type EndpointAuthType = 'apiKey' | 'public';
 /**
  * Caller principal type resolved by the platform and passed via the
- * `X-Public-Endpoint-Auth-Type` header. `user` and `workspace_key` are
+ * `X-Public-Endpoint-Auth-Type` header. `user`, `workspace_key` and `app` are
  * authenticated principals the platform has already authorized; `api_key`
  * additionally carries a validated key id; `none` is unauthenticated.
+ *
+ * `app` means a sibling app in the same workspace called this endpoint through
+ * the platform (see `callAppEndpoint`). The platform records which app made the
+ * call, but does not forward that id here: it is self-asserted by the caller and
+ * must not be used for authorization until app identity is verifiable.
  */
-export type EndpointPrincipalType = 'none' | 'api_key' | 'workspace_key' | 'user';
+export type EndpointPrincipalType = 'none' | 'api_key' | 'workspace_key' | 'user' | 'app';
 /**
  * HTTP methods supported by endpoints
  */
@@ -62,7 +67,7 @@ export interface EndpointContext<TQuery = Record<string, unknown>, TBody = unkno
 export interface EndpointAuthInfo {
     /** Authentication requirement declared by the endpoint */
     type: EndpointAuthType;
-    /** Resolved caller principal type (api_key, workspace_key, user, none) */
+    /** Resolved caller principal type (api_key, workspace_key, user, app, none) */
     principalType?: EndpointPrincipalType;
     /** API key ID (if authenticated with an API key) */
     apiKeyId?: string;

package/bundled-types/core-workspace.d.ts

@@ -162,6 +162,34 @@ export interface RegisterAgentRequest extends Record<string, unknown> {
  * WorkspaceContext - Helper for cross-app data queries
  * Provides methods to query entities from other apps in the same workspace
  */
+/**
+ * Options for calling a public endpoint on another app in the workspace.
+ */
+export interface CallAppEndpointOptions {
+    /**
+     * Target app, normally its slug as shown in the dashboard (e.g. 'labcrm').
+     * An app id or worker name also resolves. If the slug is wrong, the error
+     * response lists the slugs available in this workspace.
+     */
+    app: string;
+    method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+    /** Endpoint path exactly as registered, path params included: '/v1/orders/:id'. */
+    path: string;
+    /** Values for the `:param` segments in `path`. */
+    pathParams?: Record<string, string>;
+    queryParams?: Record<string, string>;
+    /** JSON body. Ignored for GET and HEAD. */
+    body?: unknown;
+}
+/**
+ * Result of a cross-app endpoint call. `ok` and `status` are the target
+ * endpoint's own response status, not the transport's.
+ */
+export interface CallAppEndpointResult<T = unknown> {
+    ok: boolean;
+    status: number;
+    data: T;
+}
 export declare class WorkspaceContext {
     private env;
     private workspaceId;
@@ -198,6 +226,45 @@ export declare class WorkspaceContext {
      * Delete an entity in another app in the workspace
      */
     deleteEntity(entityName: string, id: string): Promise<void>;
+    /**
+     * Transport for cross-app endpoint calls.
+     *
+     * Deliberately NOT `workspaceFetch`, for two reasons:
+     *
+     * 1. `workspaceFetch` retries over HTTP whenever the Durable Object returns a
+     *    non-2xx. That is right for entity CRUD, where a non-2xx means the DO
+     *    itself failed. Here a non-2xx is the TARGET ENDPOINT'S OWN ANSWER, so
+     *    retrying would re-send the request — duplicating POSTs — and in production
+     *    the retry goes to the platform's own domain, which a Workers for Platforms
+     *    worker cannot fetch: it hangs until timeout, the very failure this function
+     *    exists to avoid. A status is a result, never a transport error.
+     *
+     * 2. Production therefore uses the DO binding ONLY, mirroring `workspaceApiFetch`
+     *    in core-utils.ts, which is the proven path for every other platform call
+     *    made from a deployed app. Preview and sandbox keep the HTTP path, where the
+     *    app is reached over a tunnel rather than the dispatch namespace.
+     */
+    private endpointCallFetch;
+    /**
+     * Call a public endpoint on another app in this workspace.
+     *
+     * Production apps run in a Workers for Platforms dispatch namespace and cannot
+     * HTTP-fetch the platform's app domain, so a direct `fetch()` to a sibling app's
+     * public URL hangs until it times out. This routes through the workspace instead,
+     * which reaches the target app via the dispatcher.
+     *
+     * The call arrives at the target as an `app` principal, which satisfies endpoints
+     * declared `auth: 'apiKey'`. No API key is needed or sent.
+     *
+     * @example
+     * const invite = await callAppEndpoint(env, {
+     *   app: 'labcrm',
+     *   method: 'GET',
+     *   path: '/v1/portal/invite/:token',
+     *   pathParams: { token },
+     * });
+     */
+    callAppEndpoint<T = unknown>(options: CallAppEndpointOptions): Promise<CallAppEndpointResult<T>>;
     /**
      * Register an entity with the workspace so other apps can query it
      */
@@ -430,6 +497,22 @@ export declare function listWorkspaceEntity<T = unknown>(env: Env, entityName: s
  * @example
  * const contact = await getWorkspaceEntity<Contact>(env, 'Contact', 'contact-123');
  */
+/**
+ * Call a public endpoint on ANOTHER app in this workspace.
+ *
+ * Use this instead of `fetch()` against a sibling app's public URL: production apps
+ * cannot HTTP-fetch the platform's app domain and such a fetch hangs until timeout.
+ *
+ * @example
+ * const result = await callAppEndpoint(env, {
+ *   app: 'labcrm',
+ *   method: 'POST',
+ *   path: '/v1/portal/orders',
+ *   body: { items },
+ * });
+ * if (!result.ok) throw new Error(`CRM rejected the order: ${result.status}`);
+ */
+export declare function callAppEndpoint<T = unknown>(env: Env, options: CallAppEndpointOptions): Promise<CallAppEndpointResult<T>>;
 export declare function getWorkspaceEntity<T = unknown>(env: Env, entityName: string, id: string): Promise<T | null>;
 /**
  * Create an entity in ANOTHER app in the workspace (cross-app ONLY)

package/bundled-types/workspace.d.ts

@@ -1,2 +1,2 @@
-export { WorkspaceContext, getWorkspaceContext, listWorkspaceEntity, getWorkspaceEntity, createWorkspaceEntity, updateWorkspaceEntity, deleteWorkspaceEntity, initializeWorkspace, } from './core-workspace';
-export type { WorkspaceUser, ListUsersOptions, ListUsersResponse, NotifyUserParams, NotifyUserResult, ListEntityRequest, ListEntityResponse, GetEntityRequest, CreateEntityRequest, UpdateEntityRequest, DeleteEntityRequest, RegisterEntityRequest, RegisterAppRequest, RegisterComponentRequest, RegisterScheduleRequest, RegisterWorkflowRequest, RegisterEndpointRequest, RegisterIntegrationRequest, RegisterAgentRequest as WorkspaceRegisterAgentRequest, } from './core-workspace';
+export { WorkspaceContext, getWorkspaceContext, listWorkspaceEntity, getWorkspaceEntity, createWorkspaceEntity, updateWorkspaceEntity, deleteWorkspaceEntity, callAppEndpoint, initializeWorkspace, } from './core-workspace';
+export type { WorkspaceUser, ListUsersOptions, ListUsersResponse, NotifyUserParams, NotifyUserResult, ListEntityRequest, ListEntityResponse, GetEntityRequest, CreateEntityRequest, UpdateEntityRequest, DeleteEntityRequest, RegisterEntityRequest, RegisterAppRequest, RegisterComponentRequest, RegisterScheduleRequest, RegisterWorkflowRequest, RegisterEndpointRequest, RegisterIntegrationRequest, CallAppEndpointOptions, CallAppEndpointResult, RegisterAgentRequest as WorkspaceRegisterAgentRequest, } from './core-workspace';

package/dist/index.js

@@ -5100,8 +5100,8 @@ export declare function componentRoutes(app: Hono<{
     Bindings: Env;
 }>): void;
 `,
-    "workspace.d.ts": `export { WorkspaceContext, getWorkspaceContext, listWorkspaceEntity, getWorkspaceEntity, createWorkspaceEntity, updateWorkspaceEntity, deleteWorkspaceEntity, initializeWorkspace, } from './core-workspace';
-export type { WorkspaceUser, ListUsersOptions, ListUsersResponse, NotifyUserParams, NotifyUserResult, ListEntityRequest, ListEntityResponse, GetEntityRequest, CreateEntityRequest, UpdateEntityRequest, DeleteEntityRequest, RegisterEntityRequest, RegisterAppRequest, RegisterComponentRequest, RegisterScheduleRequest, RegisterWorkflowRequest, RegisterEndpointRequest, RegisterIntegrationRequest, RegisterAgentRequest as WorkspaceRegisterAgentRequest, } from './core-workspace';
+    "workspace.d.ts": `export { WorkspaceContext, getWorkspaceContext, listWorkspaceEntity, getWorkspaceEntity, createWorkspaceEntity, updateWorkspaceEntity, deleteWorkspaceEntity, callAppEndpoint, initializeWorkspace, } from './core-workspace';
+export type { WorkspaceUser, ListUsersOptions, ListUsersResponse, NotifyUserParams, NotifyUserResult, ListEntityRequest, ListEntityResponse, GetEntityRequest, CreateEntityRequest, UpdateEntityRequest, DeleteEntityRequest, RegisterEntityRequest, RegisterAppRequest, RegisterComponentRequest, RegisterScheduleRequest, RegisterWorkflowRequest, RegisterEndpointRequest, RegisterIntegrationRequest, CallAppEndpointOptions, CallAppEndpointResult, RegisterAgentRequest as WorkspaceRegisterAgentRequest, } from './core-workspace';
 `,
     "core-scheduler.d.ts": `/**
  * Core Scheduled Jobs Framework
@@ -5443,11 +5443,16 @@ type ZodSchema = z.ZodType<any, any, any>;
 export type EndpointAuthType = 'apiKey' | 'public';
 /**
  * Caller principal type resolved by the platform and passed via the
- * \`X-Public-Endpoint-Auth-Type\` header. \`user\` and \`workspace_key\` are
+ * \`X-Public-Endpoint-Auth-Type\` header. \`user\`, \`workspace_key\` and \`app\` are
  * authenticated principals the platform has already authorized; \`api_key\`
  * additionally carries a validated key id; \`none\` is unauthenticated.
+ *
+ * \`app\` means a sibling app in the same workspace called this endpoint through
+ * the platform (see \`callAppEndpoint\`). The platform records which app made the
+ * call, but does not forward that id here: it is self-asserted by the caller and
+ * must not be used for authorization until app identity is verifiable.
  */
-export type EndpointPrincipalType = 'none' | 'api_key' | 'workspace_key' | 'user';
+export type EndpointPrincipalType = 'none' | 'api_key' | 'workspace_key' | 'user' | 'app';
 /**
  * HTTP methods supported by endpoints
  */
@@ -5490,7 +5495,7 @@ export interface EndpointContext<TQuery = Record<string, unknown>, TBody = unkno
 export interface EndpointAuthInfo {
     /** Authentication requirement declared by the endpoint */
     type: EndpointAuthType;
-    /** Resolved caller principal type (api_key, workspace_key, user, none) */
+    /** Resolved caller principal type (api_key, workspace_key, user, app, none) */
     principalType?: EndpointPrincipalType;
     /** API key ID (if authenticated with an API key) */
     apiKeyId?: string;
@@ -6319,6 +6324,34 @@ export interface RegisterAgentRequest extends Record<string, unknown> {
  * WorkspaceContext - Helper for cross-app data queries
  * Provides methods to query entities from other apps in the same workspace
  */
+/**
+ * Options for calling a public endpoint on another app in the workspace.
+ */
+export interface CallAppEndpointOptions {
+    /**
+     * Target app, normally its slug as shown in the dashboard (e.g. 'labcrm').
+     * An app id or worker name also resolves. If the slug is wrong, the error
+     * response lists the slugs available in this workspace.
+     */
+    app: string;
+    method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+    /** Endpoint path exactly as registered, path params included: '/v1/orders/:id'. */
+    path: string;
+    /** Values for the \`:param\` segments in \`path\`. */
+    pathParams?: Record<string, string>;
+    queryParams?: Record<string, string>;
+    /** JSON body. Ignored for GET and HEAD. */
+    body?: unknown;
+}
+/**
+ * Result of a cross-app endpoint call. \`ok\` and \`status\` are the target
+ * endpoint's own response status, not the transport's.
+ */
+export interface CallAppEndpointResult<T = unknown> {
+    ok: boolean;
+    status: number;
+    data: T;
+}
 export declare class WorkspaceContext {
     private env;
     private workspaceId;
@@ -6355,6 +6388,45 @@ export declare class WorkspaceContext {
      * Delete an entity in another app in the workspace
      */
     deleteEntity(entityName: string, id: string): Promise<void>;
+    /**
+     * Transport for cross-app endpoint calls.
+     *
+     * Deliberately NOT \`workspaceFetch\`, for two reasons:
+     *
+     * 1. \`workspaceFetch\` retries over HTTP whenever the Durable Object returns a
+     *    non-2xx. That is right for entity CRUD, where a non-2xx means the DO
+     *    itself failed. Here a non-2xx is the TARGET ENDPOINT'S OWN ANSWER, so
+     *    retrying would re-send the request — duplicating POSTs — and in production
+     *    the retry goes to the platform's own domain, which a Workers for Platforms
+     *    worker cannot fetch: it hangs until timeout, the very failure this function
+     *    exists to avoid. A status is a result, never a transport error.
+     *
+     * 2. Production therefore uses the DO binding ONLY, mirroring \`workspaceApiFetch\`
+     *    in core-utils.ts, which is the proven path for every other platform call
+     *    made from a deployed app. Preview and sandbox keep the HTTP path, where the
+     *    app is reached over a tunnel rather than the dispatch namespace.
+     */
+    private endpointCallFetch;
+    /**
+     * Call a public endpoint on another app in this workspace.
+     *
+     * Production apps run in a Workers for Platforms dispatch namespace and cannot
+     * HTTP-fetch the platform's app domain, so a direct \`fetch()\` to a sibling app's
+     * public URL hangs until it times out. This routes through the workspace instead,
+     * which reaches the target app via the dispatcher.
+     *
+     * The call arrives at the target as an \`app\` principal, which satisfies endpoints
+     * declared \`auth: 'apiKey'\`. No API key is needed or sent.
+     *
+     * @example
+     * const invite = await callAppEndpoint(env, {
+     *   app: 'labcrm',
+     *   method: 'GET',
+     *   path: '/v1/portal/invite/:token',
+     *   pathParams: { token },
+     * });
+     */
+    callAppEndpoint<T = unknown>(options: CallAppEndpointOptions): Promise<CallAppEndpointResult<T>>;
     /**
      * Register an entity with the workspace so other apps can query it
      */
@@ -6587,6 +6659,22 @@ export declare function listWorkspaceEntity<T = unknown>(env: Env, entityName: s
  * @example
  * const contact = await getWorkspaceEntity<Contact>(env, 'Contact', 'contact-123');
  */
+/**
+ * Call a public endpoint on ANOTHER app in this workspace.
+ *
+ * Use this instead of \`fetch()\` against a sibling app's public URL: production apps
+ * cannot HTTP-fetch the platform's app domain and such a fetch hangs until timeout.
+ *
+ * @example
+ * const result = await callAppEndpoint(env, {
+ *   app: 'labcrm',
+ *   method: 'POST',
+ *   path: '/v1/portal/orders',
+ *   body: { items },
+ * });
+ * if (!result.ok) throw new Error(\`CRM rejected the order: \${result.status}\`);
+ */
+export declare function callAppEndpoint<T = unknown>(env: Env, options: CallAppEndpointOptions): Promise<CallAppEndpointResult<T>>;
 export declare function getWorkspaceEntity<T = unknown>(env: Env, entityName: string, id: string): Promise<T | null>;
 /**
  * Create an entity in ANOTHER app in the workspace (cross-app ONLY)
@@ -6914,6 +7002,13 @@ export declare class BaseAgent extends AIChatAgent<Env> {
      * Build tools for accessing entities using AI SDK tool() helper
      * Uses entity classes directly with EntityContext
      */
+    /**
+     * One tool per endpoint the agent is allowed to call on another app.
+     *
+     * Routed through \`callAppEndpoint\`, so it works in preview and production
+     * alike: a production app cannot HTTP-fetch a sibling's public URL.
+     */
+    private buildAppEndpointTools;
     private buildEntityTools;
     /**
      * Build tools for running complex tasks via a sandboxed AI sub-agent
@@ -7353,6 +7448,16 @@ export interface AgentDefinition {
     integrations?: string[];
     /** Entity names the agent can read/write */
     entities?: string[];
+    /**
+     * Endpoints on OTHER apps in this workspace that the agent may call, as
+     * \`'<app>:<METHOD>:<path>'\` — e.g. \`'labcrm:GET:/v1/portal/catalog'\`.
+     * \`<app>\` is the target app's slug; \`<path>\` is the path exactly as registered,
+     * \`:param\` placeholders included.
+     *
+     * Declared explicitly, like \`entities\` and \`integrations\`: an agent can only
+     * call what the app author listed, never an arbitrary endpoint.
+     */
+    appEndpoints?: string[];
     /** Memory strategy */
     memoryStrategy?: MemoryStrategy;
     /** Custom tools for this agent */
@@ -7362,6 +7467,27 @@ export interface AgentDefinition {
     /** Cost/time limits for task agent sandbox execution. Optional overrides. */
     executionLimits?: ExecutionLimits;
 }
+/** A parsed \`'<app>:<METHOD>:<path>'\` agent endpoint reference. */
+export interface AppEndpointRef {
+    app: string;
+    method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+    path: string;
+}
+/**
+ * Parse \`'labcrm:GET:/v1/portal/invite/:token'\`.
+ *
+ * Split on the first two colons only: the path itself contains colons for its
+ * \`:param\` segments, so a naive split would mangle every parameterized endpoint.
+ * Returns null for anything malformed rather than throwing, so one bad entry in an
+ * agent definition costs that one tool instead of the whole agent.
+ */
+export declare function parseAppEndpointRef(ref: string): AppEndpointRef | null;
+/**
+ * Stable, model-friendly tool name for an endpoint reference, e.g.
+ * \`call_labcrm_get_v1_portal_invite\`. Param segments are dropped so the name
+ * stays readable; the full path is in the tool description.
+ */
+export declare function appEndpointToolName(ref: AppEndpointRef): string;
 /**
  * Custom tool definition for agents
  */
@@ -7713,7 +7839,7 @@ function createKeyboardListener() {
 }
 
 // src/generated/version.ts
-var VERSION = "0.24.0";
+var VERSION = "0.24.1";
 
 // src/commands/dev.ts
 var exports_dev = {};
@@ -8762,10 +8888,19 @@ function saveDefaultWorkspace(workspaceId, workspaceName) {
 function hasProjectConfig() {
   return existsSync21(".runwork.json");
 }
+function matchAppRef(apps, ref) {
+  return apps.find((a) => a.id === ref || a.name === ref || a.slug === ref);
+}
+function filterRowsByApp(rows, appRef, apps) {
+  const match = matchAppRef(apps, appRef);
+  if (!match)
+    return null;
+  return rows.filter((row) => row.appId === match.id);
+}
 async function resolveApp2(client, workspaceId, options = {}) {
   if (options.app) {
     const apps = await client.listApps(workspaceId);
-    const match = apps.find((a) => a.id === options.app || a.name === options.app || a.slug === options.app);
+    const match = matchAppRef(apps, options.app);
     if (!match) {
       console.error(`App "${options.app}" not found in workspace.`);
       process.exit(1);
@@ -19327,17 +19462,22 @@ function toRunworkInventory(ctx) {
     mcpServerCount: ctx.mcpServerCount
   };
 }
-function buildAppSkillDescription(appName, registries) {
+function buildAppSkillDescription(skill, registries) {
+  const appName = skill.name;
+  const fallback = `${appName} - Runwork workspace application`;
   if (!registries)
-    return `${appName} - Runwork workspace application`;
+    return fallback;
+  if (!skill.appId)
+    return fallback;
+  const appId = skill.appId;
   const parts = [];
-  const appEntities = registries.entities.filter((e) => e.appName === appName);
-  const appSchedules = registries.schedules.filter((s) => s.appName === appName);
-  const appWorkflows = registries.workflows.filter((w) => w.appName === appName);
-  const appAgents = registries.agents.filter((a) => a.appName === appName);
-  const appEndpoints = registries.endpoints.filter((e) => e.appName === appName);
-  const appFileStorages = registries.fileStorages.filter((f) => f.appName === appName);
-  const appComponents = registries.components.filter((c) => c.appName === appName);
+  const appEntities = registries.entities.filter((e) => e.appId === appId);
+  const appSchedules = registries.schedules.filter((s) => s.appId === appId);
+  const appWorkflows = registries.workflows.filter((w) => w.appId === appId);
+  const appAgents = registries.agents.filter((a) => a.appId === appId);
+  const appEndpoints = registries.endpoints.filter((e) => e.appId === appId);
+  const appFileStorages = registries.fileStorages.filter((f) => f.appId === appId);
+  const appComponents = registries.components.filter((c) => c.appId === appId);
   if (appEntities.length > 0)
     parts.push(`entities (${appEntities.map((e) => e.entityName).join(", ")})`);
   if (appFileStorages.length > 0)
@@ -19353,7 +19493,7 @@ function buildAppSkillDescription(appName, registries) {
   if (appComponents.length > 0)
     parts.push(`components (${appComponents.map((c) => c.componentName).join(", ")})`);
   if (parts.length === 0)
-    return `${appName} - Runwork workspace application`;
+    return fallback;
   return `${appName} - Runwork workspace app with ${parts.join(", ")}. Use this skill when you need data or capabilities from this app.`;
 }
 function generateIntroSkill(ctx) {
@@ -19877,7 +20017,12 @@ var listCommand3 = new Command17("list").description("List entities registered i
   try {
     let entities = await client.listEntities(workspaceId);
     if (opts.app) {
-      entities = entities.filter((e) => e.appId === opts.app || e.appName === opts.app);
+      const filtered = filterRowsByApp(entities, opts.app, await client.listApps(workspaceId));
+      if (filtered === null) {
+        console.error(`App "${opts.app}" not found in this workspace.`);
+        process.exit(1);
+      }
+      entities = filtered;
     }
     if (opts.preview) {
       entities = entities.filter((e) => e.deploymentMode === "preview");
@@ -20226,7 +20371,12 @@ var listCommand4 = new Command18("list").description("List workflows in a worksp
   try {
     let workflows = await client.listWorkflows(workspaceId);
     if (opts.app) {
-      workflows = workflows.filter((w) => w.appId === opts.app || w.appName === opts.app);
+      const filtered = filterRowsByApp(workflows, opts.app, await client.listApps(workspaceId));
+      if (filtered === null) {
+        console.error(`App "${opts.app}" not found in this workspace.`);
+        process.exit(1);
+      }
+      workflows = filtered;
     }
     if (useJson) {
       jsonOut({ workflows });
@@ -20585,7 +20735,10 @@ function truncate3(text2, max) {
     return first;
   return first.slice(0, max - 3) + "...";
 }
-var listCommand6 = new Command20("list").description("List workspace public endpoints").option("--workspace <name-or-id>", "Workspace name or ID").option("--app <name>", "Filter by app name or ID").action(async (opts, command) => {
+function filterEndpointsByApp(endpoints, appRef, apps) {
+  return filterRowsByApp(endpoints, appRef, apps);
+}
+var listCommand6 = new Command20("list").description("List workspace public endpoints").option("--workspace <name-or-id>", "Workspace name or ID").option("--app <slug>", "Filter by app slug, name, or ID").action(async (opts, command) => {
   const useJson = shouldOutputJson(command.optsWithGlobals().json);
   const credentials = requireAuth();
   const client = new ApiClient(credentials);
@@ -20593,7 +20746,12 @@ var listCommand6 = new Command20("list").description("List workspace public endp
   try {
     let endpoints = await client.listEndpoints(workspaceId);
     if (opts.app) {
-      endpoints = endpoints.filter((e) => e.appId === opts.app || e.appName === opts.app);
+      const filtered = filterEndpointsByApp(endpoints, opts.app, await client.listApps(workspaceId));
+      if (filtered === null) {
+        console.error(`App "${opts.app}" not found in this workspace.`);
+        process.exit(1);
+      }
+      endpoints = filtered;
     }
     if (useJson) {
       jsonOut({ endpoints });
@@ -20623,7 +20781,11 @@ Workspace: ${workspaceName || workspaceId}
     process.exit(1);
   }
 });
-var callCommand2 = new Command20("call").description("Call a workspace endpoint directly").argument("<method>", "HTTP method (GET, POST, PUT, DELETE, etc.)").argument("<path>", "Endpoint path (e.g. /my-endpoint)").option("--workspace <name-or-id>", "Workspace name or ID").option("--app <name>", "App name or ID (narrows endpoint lookup)").option("--body <json>", "Request body as JSON string").option("--header <header>", 'Request header (format: "Key: Value", repeatable)', (val, prev) => [...prev, val], []).option("--query <string>", 'Query string to append to the URL (e.g. "foo=bar&baz=1")').option("--api-key <key>", "API key for Authorization: Bearer header").action(async (method, path4, opts, command) => {
+function methodsForPath(endpoints, path4) {
+  const methods = endpoints.filter((e) => e.endpointPath === path4).map((e) => e.method.toUpperCase());
+  return [...new Set(methods)].sort();
+}
+var callCommand2 = new Command20("call").description("Call a workspace endpoint directly").argument("<method>", "HTTP method (GET, POST, PUT, DELETE, etc.)").argument("<path>", "Endpoint path (e.g. /my-endpoint)").option("--workspace <name-or-id>", "Workspace name or ID").option("--app <slug>", "App slug, name, or ID (narrows endpoint lookup)").option("--body <json>", "Request body as JSON string").option("--header <header>", 'Request header (format: "Key: Value", repeatable)', (val, prev) => [...prev, val], []).option("--query <string>", 'Query string to append to the URL (e.g. "foo=bar&baz=1")').option("--api-key <key>", "API key for Authorization: Bearer header").action(async (method, path4, opts, command) => {
   const useJson = shouldOutputJson(command.optsWithGlobals().json);
   const credentials = requireAuth();
   const client = new ApiClient(credentials);
@@ -20631,13 +20793,23 @@ var callCommand2 = new Command20("call").description("Call a workspace endpoint
   try {
     let endpoints = await client.listEndpoints(workspaceId);
     if (opts.app) {
-      endpoints = endpoints.filter((e) => e.appId === opts.app || e.appName === opts.app);
+      const filtered = filterEndpointsByApp(endpoints, opts.app, await client.listApps(workspaceId));
+      if (filtered === null) {
+        console.error(`App "${opts.app}" not found in this workspace.`);
+        process.exit(1);
+      }
+      endpoints = filtered;
     }
     const targetMethod = method.toUpperCase();
     const endpoint = endpoints.find((e) => e.method.toUpperCase() === targetMethod && e.endpointPath === path4);
     if (!endpoint) {
       console.error(`Endpoint not found: ${targetMethod} ${path4}`);
-      if (endpoints.length > 0) {
+      const otherMethods = methodsForPath(endpoints, path4);
+      if (otherMethods.length > 0) {
+        console.error(`
+${path4} is registered, but not for ${targetMethod}. Try: ${otherMethods.join(", ")}`);
+        console.error(`  runwork endpoints call ${otherMethods[0]} ${path4}`);
+      } else if (endpoints.length > 0) {
         console.error(`
 Available endpoints:`);
         for (const e of endpoints) {
@@ -20907,7 +21079,12 @@ var listCommand8 = new Command22("list").description("List components registered
   try {
     let components = await client.listComponents(workspaceId);
     if (opts.app) {
-      components = components.filter((c) => c.appId === opts.app || c.appName === opts.app);
+      const filtered = filterRowsByApp(components, opts.app, await client.listApps(workspaceId));
+      if (filtered === null) {
+        console.error(`App "${opts.app}" not found in this workspace.`);
+        process.exit(1);
+      }
+      components = filtered;
     }
     if (useJson) {
       jsonOut({ components });
@@ -21040,7 +21217,12 @@ var listCommand10 = new Command24("list").description("List agents in workspace"
   try {
     let agents = await client.listAgents(workspaceId);
     if (opts.app) {
-      agents = agents.filter((a) => a.appId === opts.app || a.appName === opts.app);
+      const filtered = filterRowsByApp(agents, opts.app, await client.listApps(workspaceId));
+      if (filtered === null) {
+        console.error(`App "${opts.app}" not found in this workspace.`);
+        process.exit(1);
+      }
+      agents = filtered;
     }
     if (useJson) {
       jsonOut({ agents });
@@ -22574,7 +22756,7 @@ This account is not a member of "${state.workspaceName || state.workspaceId}".`)
             name: s.name,
             filename: s.name.toLowerCase().replace(/[^a-z0-9]+/g, "-"),
             content: s.content,
-            description: s.source === "app" ? buildAppSkillDescription(s.name, registries) || `${s.name} - Runwork workspace application` : `${s.name} - Runwork workspace skill`
+            description: s.source === "app" ? buildAppSkillDescription(s, registries) || `${s.name} - Runwork workspace application` : `${s.name} - Runwork workspace skill`
           }));
           const allSkillFiles = [...builtInSkills, ...workspaceSkillFiles];
           const written = await adapter2.writeSkills(allSkillFiles, scope);
@@ -23337,7 +23519,7 @@ var buildPluginCommand = new Command29("build-plugin").description("Build an ins
       name: s.name,
       filename: s.name.toLowerCase().replace(/[^a-z0-9]+/g, "-"),
       content: s.content,
-      description: s.source === "app" ? buildAppSkillDescription(s.name, registries) || `${s.name} - Runwork workspace application` : `${s.name} - Runwork workspace skill`
+      description: s.source === "app" ? buildAppSkillDescription(s, registries) || `${s.name} - Runwork workspace application` : `${s.name} - Runwork workspace skill`
     }))
   ];
   const teamInstructions = onboardingConfig?.config?.teamInstructions;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "runwork",
-  "version": "0.24.0",
+  "version": "0.24.1",
   "description": "CLI for Runwork: develop, preview, and deploy Runwork apps from your local machine.",
   "license": "UNLICENSED",
   "author": "Runwork, Inc. <info@runwork.ai> (https://www.runwork.ai)",