@spinabot/brigade 0.1.1 → 1.0.0

package/dist/agents/tools/manage-access-tool.js

@@ -0,0 +1,188 @@
+/**
+ * `manage_access` tool — owner-only agent-to-agent access control.
+ *
+ * Why this tool exists (production, 2026-06-11)
+ * ---------------------------------------------
+ * Asked to message another agent, the model correctly found A2A blocked,
+ * then had NO sanctioned way to change the knobs that gate it
+ * (`session.sessionTools.visibility`, `session.agentToAgent.enabled/allow`,
+ * `org.a2a.mode`). The `org` tool only edits department/reportsTo/role/bio;
+ * `manage_agent` only does agents. So the model fell back to "hand-edit
+ * brigade.json" — which the path-write / config-write guards correctly
+ * refuse. The result: blocked both ways, dead end. This tool closes that
+ * gap with the SAME atomic-config write the org/manage_agent tools use, so
+ * "let main message marketing-lead" is one validated call instead of an
+ * impossible hand-edit.
+ *
+ * Owner-only by design: only an operator-driven turn can widen who-can-talk-
+ * to-whom; a channel peer can never escalate its own reach. The model should
+ * call this ONLY when the operator explicitly asks to change A2A access, and
+ * should report exactly what changed (like `manage_provider`).
+ *
+ * The three knobs and how they interact (cross-agent `sessions_send`):
+ *   - `visibility` (session.sessionTools.visibility): "self" (default) hides
+ *     other agents' sessions entirely; "all" is required for ANY cross-agent
+ *     reach. The first gate.
+ *   - `a2aEnabled` (session.agentToAgent.enabled): the second gate. With it
+ *     off, cross-agent send is refused even under visibility "all".
+ *   - `a2aMode` (org.a2a.mode, only when an org is configured): "derived"
+ *     (default) restricts reach to org-graph edges (escalate up / assign
+ *     down / same-dept / top↔all); "explicit" ignores the graph and uses the
+ *     flat `agentToAgent.allow` matrix; "open" = everyone↔everyone. A
+ *     non-org orchestrator like `main` that isn't a graph member can only
+ *     reach others under "explicit" (+ an allow rule) or "open".
+ */
+import { Type } from "typebox";
+import { loadConfig } from "../../core/config.js";
+import { mutateConfigAtomic } from "../../config/io.js";
+import { jsonResult } from "./common.js";
+const VISIBILITIES = ["self", "tree", "agent", "all"];
+const A2A_MODES = ["derived", "explicit", "open"];
+const WIDE_OPEN_ALLOW = [{ from: "*", to: "*" }];
+const ManageAccessParams = Type.Object({
+    action: Type.Union([Type.Literal("show"), Type.Literal("set")], {
+        description: "show: print the current agent-to-agent access settings. set: change one or more of them (pass only what you want to change).",
+    }),
+    visibility: Type.Optional(Type.Union(VISIBILITIES.map((v) => Type.Literal(v)), {
+        description: 'session.sessionTools.visibility. "all" is required for ANY cross-agent reach; "self" (default) hides other agents.',
+    })),
+    a2aEnabled: Type.Optional(Type.Boolean({
+        description: "session.agentToAgent.enabled — the master switch for cross-agent messaging.",
+    })),
+    a2aMode: Type.Optional(Type.Union(A2A_MODES.map((m) => Type.Literal(m)), {
+        description: 'org.a2a.mode (only when an org is configured). "derived" = org-graph edges only; "explicit" = flat agentToAgent.allow matrix; "open" = everyone. A non-org orchestrator (e.g. main) needs "explicit" or "open" to reach org members.',
+    })),
+    allowAll: Type.Optional(Type.Boolean({
+        description: 'Convenience: set session.agentToAgent.allow to the wide-open [{from:"*",to:"*"}] matrix (every agent may message every agent). Auto-applied when a2aEnabled is turned on and no allow list exists yet.',
+    })),
+});
+export function makeManageAccessTool() {
+    return {
+        name: "manage_access",
+        label: "Manage Access",
+        displaySummary: "managing agent-to-agent access",
+        ownerOnly: true,
+        description: [
+            "Owner-only agent-to-agent access control. Use this to read or change who-can-message-whom — NEVER hand-edit brigade.json (the guards refuse it).",
+            "WHEN cross-agent sessions_send is refused and the OPERATOR asks you to enable it: call manage_access set with the knob(s) the refusal named (visibility / a2aEnabled / a2aMode). Then report exactly what changed.",
+            'show: returns {visibility, a2aEnabled, a2aAllow, orgConfigured, a2aMode}.',
+            'set: change any of visibility ("all" for cross-agent reach), a2aEnabled (master switch), a2aMode ("explicit" lets a non-org agent like main reach org members; only valid when an org exists), allowAll (wide-open allow matrix). Pass only what changes.',
+            "Do NOT call this proactively to widen your own reach — only on explicit operator request.",
+        ].join(" "),
+        parameters: ManageAccessParams,
+        execute: async (_toolCallId, args) => {
+            if (args.action === "show") {
+                const snap = readAccessSnapshot(loadConfig());
+                return jsonResult({
+                    action: "show",
+                    ok: true,
+                    settings: snap,
+                    message: describeSnapshot(snap),
+                });
+            }
+            // action === "set"
+            const wantsVisibility = args.visibility !== undefined;
+            const wantsEnabled = args.a2aEnabled !== undefined;
+            const wantsMode = args.a2aMode !== undefined;
+            const wantsAllowAll = args.allowAll === true;
+            if (!wantsVisibility && !wantsEnabled && !wantsMode && !wantsAllowAll) {
+                return jsonResult({
+                    action: "set",
+                    ok: false,
+                    message: "manage_access set: nothing to change — pass at least one of visibility / a2aEnabled / a2aMode / allowAll.",
+                });
+            }
+            const before = readAccessSnapshot(loadConfig());
+            // a2aMode lives under org — refuse cleanly when no org exists rather
+            // than writing an org block the rest of the system doesn't expect.
+            if (wantsMode && !before.orgConfigured) {
+                return jsonResult({
+                    action: "set",
+                    ok: false,
+                    before,
+                    message: "manage_access set: a2aMode lives under the org config, but no org is configured. Run org({action:'init', template:'…'}) first, or change visibility / a2aEnabled instead.",
+                });
+            }
+            const next = await mutateConfigAtomic((current) => {
+                const merged = { ...current };
+                const session = {
+                    ...(merged.session ?? {}),
+                };
+                if (wantsVisibility) {
+                    session.sessionTools = {
+                        ...(session.sessionTools ?? {}),
+                        visibility: args.visibility,
+                    };
+                }
+                if (wantsEnabled || wantsAllowAll) {
+                    const a2a = {
+                        ...(session.agentToAgent ?? {}),
+                    };
+                    if (wantsEnabled)
+                        a2a.enabled = args.a2aEnabled;
+                    const hasAllow = Array.isArray(a2a.allow) && a2a.allow.length > 0;
+                    // Seed the wide-open matrix when explicitly asked, OR when
+                    // enabling A2A with no allow list yet (else "enabled" does
+                    // nothing — every pair is denied by an empty matrix).
+                    if (wantsAllowAll || (args.a2aEnabled === true && !hasAllow)) {
+                        a2a.allow = [...WIDE_OPEN_ALLOW];
+                    }
+                    session.agentToAgent = a2a;
+                }
+                merged.session = session;
+                if (wantsMode) {
+                    const org = {
+                        ...(merged.org ?? {}),
+                    };
+                    org.a2a = {
+                        ...(org.a2a ?? {}),
+                        mode: args.a2aMode,
+                    };
+                    // The set guard above already refused a2aMode when no org
+                    // exists, so by here `org` carries the real block (topOrder +
+                    // a2a) — cast through unknown since we built it structurally.
+                    merged.org = org;
+                }
+                return merged;
+            });
+            const after = readAccessSnapshot(next);
+            return jsonResult({
+                action: "set",
+                ok: true,
+                before,
+                after,
+                message: `Updated agent-to-agent access. ${describeSnapshot(after)} This is LIVE — no gateway restart needed. If you were blocked reaching another agent, retry that sessions_send now (this same turn); it re-checks against the new setting.`,
+            });
+        },
+    };
+}
+/* ───────────────────────── helpers ───────────────────────── */
+function readAccessSnapshot(cfg) {
+    const session = cfg.session;
+    const org = cfg.org;
+    const allow = Array.isArray(session?.agentToAgent?.allow)
+        ? session?.agentToAgent?.allow
+        : [];
+    return {
+        visibility: session?.sessionTools?.visibility ?? "self",
+        a2aEnabled: session?.agentToAgent?.enabled === true,
+        a2aAllow: allow,
+        orgConfigured: org !== undefined && org !== null,
+        a2aMode: org?.a2a?.mode ?? null,
+    };
+}
+function describeSnapshot(s) {
+    const parts = [
+        `visibility=${s.visibility}`,
+        `a2aEnabled=${s.a2aEnabled}`,
+        `allow=${s.a2aAllow.length === 1 && s.a2aAllow[0]?.from === "*" && s.a2aAllow[0]?.to === "*" ? "everyone" : `${s.a2aAllow.length} rule(s)`}`,
+    ];
+    if (s.orgConfigured)
+        parts.push(`orgA2aMode=${s.a2aMode}`);
+    const crossAgentOk = s.visibility === "all" &&
+        s.a2aEnabled &&
+        (!s.orgConfigured || s.a2aMode === "explicit" || s.a2aMode === "open" || s.a2aMode === "derived");
+    parts.push(crossAgentOk ? "→ cross-agent messaging is ON" : "→ cross-agent messaging is OFF");
+    return parts.join(", ") + ".";
+}
+//# sourceMappingURL=manage-access-tool.js.map

package/dist/agents/tools/manage-access-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-access-tool.js","sourceRoot":"","sources":["../../../src/agents/tools/manage-access-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAsB,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAU,CAAC;AAC/D,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC;AAC3D,MAAM,eAAe,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AAEjD,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE;QAC/D,WAAW,EACV,8HAA8H;KAC/H,CAAC;IACF,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,KAAK,CACT,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EACxC;QACC,WAAW,EACV,oHAAoH;KACrH,CACD,CACD;IACD,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,OAAO,CAAC;QACZ,WAAW,EAAE,6EAA6E;KAC1F,CAAC,CACF;IACD,OAAO,EAAE,IAAI,CAAC,QAAQ,CACrB,IAAI,CAAC,KAAK,CACT,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EACrC;QACC,WAAW,EACV,sOAAsO;KACvO,CACD,CACD;IACD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CACtB,IAAI,CAAC,OAAO,CAAC;QACZ,WAAW,EACV,wMAAwM;KACzM,CAAC,CACF;CACD,CAAC,CAAC;AAmBH,MAAM,UAAU,oBAAoB;IAInC,OAAO;QACN,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,eAAe;QACtB,cAAc,EAAE,gCAAgC;QAChD,SAAS,EAAE,IAAI;QACf,WAAW,EAAE;YACZ,kJAAkJ;YAClJ,oNAAoN;YACpN,2EAA2E;YAC3E,2PAA2P;YAC3P,2FAA2F;SAC3F,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,UAAU,EAAE,kBAAkB;QAC9B,OAAO,EAAE,KAAK,EACb,WAAW,EACX,IAAI,EAC2C,EAAE;YACjD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,EAAmB,CAAC,CAAC;gBAC/D,OAAO,UAAU,CAAC;oBACjB,MAAM,EAAE,MAAM;oBACd,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC;iBACF,CAAwC,CAAC;YACxE,CAAC;YAED,mBAAmB;YACnB,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;YACtD,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;YAC7C,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;YAC7C,IAAI,CAAC,eAAe,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvE,OAAO,UAAU,CAAC;oBACjB,MAAM,EAAE,KAAK;oBACb,EAAE,EAAE,KAAK;oBACT,OAAO,EACN,2GAA2G;iBAC/E,CAAwC,CAAC;YACxE,CAAC;YAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,EAAmB,CAAC,CAAC;YAEjE,qEAAqE;YACrE,mEAAmE;YACnE,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBACxC,OAAO,UAAU,CAAC;oBACjB,MAAM,EAAE,KAAK;oBACb,EAAE,EAAE,KAAK;oBACT,MAAM;oBACN,OAAO,EACN,2KAA2K;iBAC/I,CAAwC,CAAC;YACxE,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,CAAC,OAAsB,EAAE,EAAE;gBAChE,MAAM,MAAM,GAAkB,EAAE,GAAG,OAAO,EAAE,CAAC;gBAC7C,MAAM,OAAO,GAAG;oBACf,GAAG,CAAE,MAAM,CAAC,OAA+C,IAAI,EAAE,CAAC;iBACvC,CAAC;gBAE7B,IAAI,eAAe,EAAE,CAAC;oBACrB,OAAO,CAAC,YAAY,GAAG;wBACtB,GAAG,CAAE,OAAO,CAAC,YAAoD,IAAI,EAAE,CAAC;wBACxE,UAAU,EAAE,IAAI,CAAC,UAAU;qBAC3B,CAAC;gBACH,CAAC;gBAED,IAAI,YAAY,IAAI,aAAa,EAAE,CAAC;oBACnC,MAAM,GAAG,GAAG;wBACX,GAAG,CAAE,OAAO,CAAC,YAAoD,IAAI,EAAE,CAAC;qBACF,CAAC;oBACxE,IAAI,YAAY;wBAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC;oBAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;oBAClE,2DAA2D;oBAC3D,2DAA2D;oBAC3D,sDAAsD;oBACtD,IAAI,aAAa,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC9D,GAAG,CAAC,KAAK,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC;oBAClC,CAAC;oBACD,OAAO,CAAC,YAAY,GAAG,GAAG,CAAC;gBAC5B,CAAC;gBAED,MAAM,CAAC,OAAO,GAAG,OAAmC,CAAC;gBAErD,IAAI,SAAS,EAAE,CAAC;oBACf,MAAM,GAAG,GAAG;wBACX,GAAG,CAAE,MAAM,CAAC,GAA2C,IAAI,EAAE,CAAC;qBACnC,CAAC;oBAC7B,GAAG,CAAC,GAAG,GAAG;wBACT,GAAG,CAAE,GAAG,CAAC,GAA2C,IAAI,EAAE,CAAC;wBAC3D,IAAI,EAAE,IAAI,CAAC,OAAO;qBAClB,CAAC;oBACF,0DAA0D;oBAC1D,8DAA8D;oBAC9D,8DAA8D;oBAC9D,MAAM,CAAC,GAAG,GAAG,GAAsC,CAAC;gBACrD,CAAC;gBAED,OAAO,MAAM,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACvC,OAAO,UAAU,CAAC;gBACjB,MAAM,EAAE,KAAK;gBACb,EAAE,EAAE,IAAI;gBACR,MAAM;gBACN,KAAK;gBACL,OAAO,EAAE,kCAAkC,gBAAgB,CAAC,KAAK,CAAC,6KAA6K;aAClN,CAAwC,CAAC;QACxE,CAAC;KACD,CAAC;AACH,CAAC;AAED,iEAAiE;AAEjE,SAAS,kBAAkB,CAAC,GAAkB;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,OAKR,CAAC;IACb,MAAM,GAAG,GAAG,GAAG,CAAC,GAA8C,CAAC;IAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC;QACxD,CAAC,CAAE,OAAO,EAAE,YAAY,EAAE,KAA6C;QACvE,CAAC,CAAC,EAAE,CAAC;IACN,OAAO;QACN,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,IAAI,MAAM;QACvD,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,KAAK,IAAI;QACnD,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAChD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;KAC/B,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAiB;IAC1C,MAAM,KAAK,GAAG;QACb,cAAc,CAAC,CAAC,UAAU,EAAE;QAC5B,cAAc,CAAC,CAAC,UAAU,EAAE;QAC5B,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,UAAU,EAAE;KAC5I,CAAC;IACF,IAAI,CAAC,CAAC,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3D,MAAM,YAAY,GACjB,CAAC,CAAC,UAAU,KAAK,KAAK;QACtB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;IACnG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC;IAC9F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;AAC/B,CAAC"}

package/dist/agents/tools/manage-agent-tool.d.ts

@@ -0,0 +1,50 @@
+/**
+ * `manage_agent` tool — owner-only LLM-driven agent CRUD.
+ *
+ * Mirrors the reference codebase's posture: the owner-via-LLM can mutate
+ * the agent catalog (the reference does this via its generic `gateway`
+ * tool + `config.patch`). Brigade chooses a safer, more specific shape:
+ * a dedicated tool with `action: add | delete | set-identity` that wraps
+ * Brigade's existing CRUD helpers (`runAgentsAdd` / `runAgentsDelete` /
+ * `runAgentsSetIdentity`) so the model gets atomic workspace seeding,
+ * validation, rollback on partial failure, and soft-delete to
+ * `.brigade-trash/` — all of which a generic `config.patch` would skip.
+ *
+ * `ownerOnly: true` — the session-wiring wrapper refuses the tool when
+ * the caller is not the workspace owner. In Brigade's single-user setup
+ * the operator IS always the owner, so the tool is effectively always
+ * available to YOU but never to a sub-agent or channel-routed turn from
+ * an external sender.
+ *
+ * Output capture: each CRUD helper writes to stdout/stderr; we redirect
+ * those streams into in-memory buffers so the tool result carries the
+ * exact CLI output the operator would see.
+ */
+import { Type } from "typebox";
+import type { BrigadeTool } from "./types.js";
+declare const ManageAgentParams: Type.TObject<{
+    action: Type.TUnion<[Type.TLiteral<"add">, Type.TLiteral<"delete">, Type.TLiteral<"set-identity">]>;
+    id: Type.TString;
+    workspace: Type.TOptional<Type.TString>;
+    provider: Type.TOptional<Type.TString>;
+    model: Type.TOptional<Type.TString>;
+    name: Type.TOptional<Type.TString>;
+    emoji: Type.TOptional<Type.TString>;
+    theme: Type.TOptional<Type.TString>;
+    avatar: Type.TOptional<Type.TString>;
+    department: Type.TOptional<Type.TString>;
+    reportsTo: Type.TOptional<Type.TUnion<[Type.TString, Type.TNull]>>;
+    role: Type.TOptional<Type.TString>;
+    bio: Type.TOptional<Type.TString>;
+}>;
+interface ManageAgentResult {
+    action: "add" | "delete" | "set-identity";
+    id: string;
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    ok: boolean;
+}
+export declare function makeManageAgentTool(): BrigadeTool<typeof ManageAgentParams, ManageAgentResult>;
+export {};
+//# sourceMappingURL=manage-agent-tool.d.ts.map

package/dist/agents/tools/manage-agent-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-agent-tool.d.ts","sourceRoot":"","sources":["../../../src/agents/tools/manage-agent-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAG/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,QAAA,MAAM,iBAAiB;;;;;;;;;;;;;;EAoErB,CAAC;AAEH,UAAU,iBAAiB;IAC1B,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,cAAc,CAAC;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,OAAO,CAAC;CACZ;AAED,wBAAgB,mBAAmB,IAAI,WAAW,CAAC,OAAO,iBAAiB,EAAE,iBAAiB,CAAC,CAmH9F"}

package/dist/agents/tools/manage-agent-tool.js

@@ -0,0 +1,232 @@
+/**
+ * `manage_agent` tool — owner-only LLM-driven agent CRUD.
+ *
+ * Mirrors the reference codebase's posture: the owner-via-LLM can mutate
+ * the agent catalog (the reference does this via its generic `gateway`
+ * tool + `config.patch`). Brigade chooses a safer, more specific shape:
+ * a dedicated tool with `action: add | delete | set-identity` that wraps
+ * Brigade's existing CRUD helpers (`runAgentsAdd` / `runAgentsDelete` /
+ * `runAgentsSetIdentity`) so the model gets atomic workspace seeding,
+ * validation, rollback on partial failure, and soft-delete to
+ * `.brigade-trash/` — all of which a generic `config.patch` would skip.
+ *
+ * `ownerOnly: true` — the session-wiring wrapper refuses the tool when
+ * the caller is not the workspace owner. In Brigade's single-user setup
+ * the operator IS always the owner, so the tool is effectively always
+ * available to YOU but never to a sub-agent or channel-routed turn from
+ * an external sender.
+ *
+ * Output capture: each CRUD helper writes to stdout/stderr; we redirect
+ * those streams into in-memory buffers so the tool result carries the
+ * exact CLI output the operator would see.
+ */
+import { Type } from "typebox";
+import { jsonResult } from "./common.js";
+const ManageAgentParams = Type.Object({
+    action: Type.Union([Type.Literal("add"), Type.Literal("delete"), Type.Literal("set-identity")], {
+        description: "add: create a new agent. delete: remove an agent (soft — moves to .brigade-trash/). set-identity: update name/emoji/theme/avatar.",
+    }),
+    id: Type.String({
+        description: "Agent id. For `add` this is the new agent's name (will be normalised). For `delete`/`set-identity` this is the existing agent id.",
+        minLength: 1,
+        maxLength: 64,
+    }),
+    // `add` params
+    workspace: Type.Optional(Type.String({
+        description: "Optional custom workspace dir for the new agent. Defaults to `~/.brigade/agents/<id>/workspace/`. Only used when action=add.",
+    })),
+    provider: Type.Optional(Type.String({
+        description: "Provider id (anthropic / openrouter / etc.). Defaults to cfg.agents.defaults.provider. Only used when action=add.",
+    })),
+    model: Type.Optional(Type.String({
+        description: "Model id. Defaults to cfg.agents.defaults.model.primary. Only used when action=add.",
+    })),
+    // `set-identity` params
+    name: Type.Optional(Type.String({ description: "Display name (set-identity only)." })),
+    emoji: Type.Optional(Type.String({ description: "Emoji (set-identity only)." })),
+    theme: Type.Optional(Type.String({ description: "Theme tag (set-identity only)." })),
+    avatar: Type.Optional(Type.String({ description: "Avatar path / URL (set-identity only)." })),
+    // `add`-time ORG-position params (Pride hierarchy, optional). When ANY
+    // of these is set on action=add AND cfg.org is absent, Brigade auto-
+    // initialises a minimal cfg.org so the operator never has to run
+    // `brigade org init` separately. "Create a CEO" / "create eng-lead
+    // reporting to main" / "set up a strategy department" all just work
+    // from chat. See `applyAutoEnableOrgOnHierarchicalAdd`.
+    department: Type.Optional(Type.String({
+        description: "Org department slug (e.g. \"engineering\", \"strategy\", \"executive\"). Setting this on action=add auto-initialises cfg.org if absent — no separate `brigade org init` needed.",
+    })),
+    reportsTo: Type.Optional(Type.Union([Type.String(), Type.Null()], {
+        description: "Org parent agent id. Pass null to make the NEW agent the top-of-org (Higher Office); pass an existing agent id to place the new agent under it. Setting this on action=add auto-initialises cfg.org if absent.",
+    })),
+    role: Type.Optional(Type.String({
+        description: "Org role title (e.g. \"Chief of Staff\", \"Engineering Lead\", \"Inventory Specialist\"). Used in the Pride chart anchor + ## Org block. Setting this on action=add auto-initialises cfg.org if absent.",
+    })),
+    bio: Type.Optional(Type.String({
+        description: "Optional 1-line org-position description (\"Routes work across the org.\", \"Reviews diffs for correctness.\"). Setting this on action=add auto-initialises cfg.org if absent.",
+    })),
+});
+export function makeManageAgentTool() {
+    return {
+        name: "manage_agent",
+        label: "Manage Agent",
+        ownerOnly: true,
+        description: [
+            "Owner-only LLM-driven agent CRUD. Wraps the same code as `brigade agents add/delete/set-identity`.",
+            "Use this when the user asks you to create, delete, or rename a peer agent.",
+            "action=add creates a new agent with its workspace (all 7 persona files seeded) + brigade.json entry, atomically with rollback on failure.",
+            "action=delete soft-deletes — the workspace moves to `.brigade-trash/<id>-<timestamp>/` so the user can recover.",
+            "action=set-identity updates display name/emoji/theme/avatar without touching workspace files.",
+            "Returns {action, id, exitCode, stdout, stderr, ok}. Relay the CLI output back to the user.",
+            "After action=add the gateway hot-reload watcher picks up the new agent automatically within ~500ms — no restart needed for it to appear in `agents_list`.",
+        ].join(" "),
+        parameters: ManageAgentParams,
+        execute: async (_toolCallId, args) => {
+            // SERIALIZE concurrent manage_agent calls. The CLI helpers (runAgents*)
+            // each replace `process.stdout.write` to capture human-readable output,
+            // then restore in `finally`. With N parallel invocations, the second
+            // capture saves the FIRST capture's hook (not the real stdout) — and
+            // the restore order corrupts process.stdout for the rest of the
+            // process lifetime. Also, runAgentsAdd performs read-modify-write on
+            // brigade.json; concurrent mutations race even with atomic file
+            // writes. Serialising both stdio capture AND the underlying CLI helper
+            // removes both races in one place.
+            return runSerial(async () => {
+                const action = args.action;
+                const id = args.id.trim();
+                const capture = captureStdio();
+                let exitCode = 0;
+                try {
+                    if (action === "add") {
+                        const { runAgentsAdd } = await import("../../cli/commands/agents-cmd.js");
+                        // Org-position params are threaded through to runAgentsAdd
+                        // so the underlying mutateConfigAtomic callback can
+                        // (a) seed the new agent's cfg.agents.<id>.org block AND
+                        // (b) auto-init cfg.org when it's absent — both atomic
+                        // with the agent creation itself. See
+                        // `applyAutoEnableOrgOnHierarchicalAdd` in agents-cmd.ts.
+                        const orgFields = {};
+                        // Normalise the LLM's freeform inputs:
+                        //   - department/role/bio: trim, treat "" as omitted
+                        //   - reportsTo: special-case — TypeBox accepts the
+                        //     union (string | null) and LLMs sometimes pass
+                        //     ""  meaning "no parent" instead of `null`. Coerce
+                        //     empty/whitespace strings → null so the agent
+                        //     becomes the top-of-org (matching the LLM's
+                        //     intent) rather than producing a corrupt
+                        //     `agents.<id>.org.reportsTo: ""` block that
+                        //     fails validation and bricks every subsequent
+                        //     turn.
+                        if (args.department !== undefined) {
+                            const d = args.department.trim();
+                            if (d.length > 0)
+                                orgFields.department = d;
+                        }
+                        if (args.reportsTo !== undefined) {
+                            if (args.reportsTo === null) {
+                                orgFields.reportsTo = null;
+                            }
+                            else if (typeof args.reportsTo === "string") {
+                                const rt = args.reportsTo.trim();
+                                orgFields.reportsTo = rt.length > 0 ? rt : null;
+                            }
+                        }
+                        if (args.role !== undefined) {
+                            const r = args.role.trim();
+                            if (r.length > 0)
+                                orgFields.role = r;
+                        }
+                        if (args.bio !== undefined) {
+                            const b = args.bio.trim();
+                            if (b.length > 0)
+                                orgFields.bio = b;
+                        }
+                        exitCode = await runAgentsAdd({
+                            name: id,
+                            nonInteractive: true,
+                            ...(args.workspace !== undefined ? { workspace: args.workspace } : {}),
+                            ...(args.provider !== undefined ? { provider: args.provider } : {}),
+                            ...(args.model !== undefined ? { model: args.model } : {}),
+                            ...(Object.keys(orgFields).length > 0 ? { org: orgFields } : {}),
+                        });
+                    }
+                    else if (action === "delete") {
+                        const { runAgentsDelete } = await import("../../cli/commands/agents-cmd.js");
+                        exitCode = await runAgentsDelete({ id, force: true });
+                    }
+                    else {
+                        const { runAgentsSetIdentity } = await import("../../cli/commands/agents-cmd.js");
+                        exitCode = await runAgentsSetIdentity({
+                            agent: id,
+                            ...(args.name !== undefined ? { name: args.name } : {}),
+                            ...(args.emoji !== undefined ? { emoji: args.emoji } : {}),
+                            ...(args.theme !== undefined ? { theme: args.theme } : {}),
+                            ...(args.avatar !== undefined ? { avatar: args.avatar } : {}),
+                        });
+                    }
+                }
+                finally {
+                    capture.restore();
+                }
+                const result = {
+                    action,
+                    id,
+                    exitCode,
+                    stdout: capture.stdout(),
+                    stderr: capture.stderr(),
+                    ok: exitCode === 0,
+                };
+                return jsonResult(result);
+            });
+        },
+    };
+}
+/**
+ * Process-wide serial queue for stdio-capturing CLI calls.
+ *
+ * Two operations protected by this:
+ *   - `captureStdio()` — replaces `process.stdout.write` for the call
+ *     duration. Concurrent callers would save each other's hooks and
+ *     corrupt `process.stdout` permanently when they restore in `finally`.
+ *   - `runAgents{Add,Delete,SetIdentity}` — read-modify-write on
+ *     `brigade.json`. Concurrent mutations race even with atomic writes.
+ *
+ * Shared across every `manage_agent` invocation (module-level Promise
+ * chain). The chain swallows rejections (`.catch(() => undefined)`) so
+ * a failed prior call doesn't poison the chain — subsequent calls still
+ * get to run.
+ */
+let manageAgentSerial = Promise.resolve();
+function runSerial(fn) {
+    const next = manageAgentSerial.then(() => fn(), () => fn());
+    manageAgentSerial = next.then(() => undefined, () => undefined);
+    return next;
+}
+/**
+ * Redirect process.stdout/stderr.write to in-memory buffers for the
+ * duration of a CLI helper call. The helpers write human-readable
+ * status to those streams; capturing lets us hand the output back to
+ * the model as part of the tool result.
+ */
+function captureStdio() {
+    const out = [];
+    const err = [];
+    const origOut = process.stdout.write.bind(process.stdout);
+    const origErr = process.stderr.write.bind(process.stderr);
+    process.stdout.write = ((chunk) => {
+        out.push(typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8"));
+        return true;
+    });
+    process.stderr.write = ((chunk) => {
+        err.push(typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8"));
+        return true;
+    });
+    return {
+        stdout: () => out.join(""),
+        stderr: () => err.join(""),
+        restore: () => {
+            process.stdout.write = origOut;
+            process.stderr.write = origErr;
+        },
+    };
+}
+//# sourceMappingURL=manage-agent-tool.js.map

package/dist/agents/tools/manage-agent-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-agent-tool.js","sourceRoot":"","sources":["../../../src/agents/tools/manage-agent-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,IAAI,CAAC,KAAK,CACjB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAC3E;QACC,WAAW,EACV,mIAAmI;KACpI,CACD;IACD,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC;QACf,WAAW,EACV,mIAAmI;QACpI,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,EAAE;KACb,CAAC;IACF,eAAe;IACf,SAAS,EAAE,IAAI,CAAC,QAAQ,CACvB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,8HAA8H;KAC/H,CAAC,CACF;IACD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CACtB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,mHAAmH;KACpH,CAAC,CACF;IACD,KAAK,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,qFAAqF;KACtF,CAAC,CACF;IACD,wBAAwB;IACxB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC,CAAC;IACtF,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC,CAAC;IAChF,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC,CAAC;IACpF,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC,CAAC;IAC7F,uEAAuE;IACvE,qEAAqE;IACrE,iEAAiE;IACjE,mEAAmE;IACnE,oEAAoE;IACpE,wDAAwD;IACxD,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,iLAAiL;KAClL,CAAC,CACF;IACD,SAAS,EAAE,IAAI,CAAC,QAAQ,CACvB,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE;QACxC,WAAW,EACV,gNAAgN;KACjN,CAAC,CACF;IACD,IAAI,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,yMAAyM;KAC1M,CAAC,CACF;IACD,GAAG,EAAE,IAAI,CAAC,QAAQ,CACjB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,gLAAgL;KACjL,CAAC,CACF;CACD,CAAC,CAAC;AAWH,MAAM,UAAU,mBAAmB;IAClC,OAAO;QACN,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,cAAc;QACrB,SAAS,EAAE,IAAI;QACf,WAAW,EAAE;YACZ,oGAAoG;YACpG,4EAA4E;YAC5E,2IAA2I;YAC3I,iHAAiH;YACjH,+FAA+F;YAC/F,4FAA4F;YAC5F,2JAA2J;SAC3J,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,KAAK,EACb,WAAmB,EACnB,IAAI,EAC0C,EAAE;YAChD,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,qEAAqE;YACrE,gEAAgE;YAChE,qEAAqE;YACrE,gEAAgE;YAChE,uEAAuE;YACvE,mCAAmC;YACnC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;gBAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;gBAC/B,IAAI,QAAQ,GAAG,CAAC,CAAC;gBACjB,IAAI,CAAC;oBACJ,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;wBACtB,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;wBAC1E,2DAA2D;wBAC3D,oDAAoD;wBACpD,yDAAyD;wBACzD,uDAAuD;wBACvD,sCAAsC;wBACtC,0DAA0D;wBAC1D,MAAM,SAAS,GAKX,EAAE,CAAC;wBACP,uCAAuC;wBACvC,qDAAqD;wBACrD,oDAAoD;wBACpD,oDAAoD;wBACpD,wDAAwD;wBACxD,mDAAmD;wBACnD,iDAAiD;wBACjD,8CAA8C;wBAC9C,iDAAiD;wBACjD,mDAAmD;wBACnD,YAAY;wBACZ,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;4BACnC,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;4BACjC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gCAAE,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC;wBAC5C,CAAC;wBACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;4BAClC,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gCAC7B,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC;4BAC5B,CAAC;iCAAM,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gCAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gCACjC,SAAS,CAAC,SAAS,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;4BACjD,CAAC;wBACF,CAAC;wBACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;4BAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;4BAC3B,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gCAAE,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC;wBACtC,CAAC;wBACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;4BAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;4BAC1B,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gCAAE,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC;wBACrC,CAAC;wBACD,QAAQ,GAAG,MAAM,YAAY,CAAC;4BAC7B,IAAI,EAAE,EAAE;4BACR,cAAc,EAAE,IAAI;4BACpB,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACtE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACnE,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC1D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAChE,CAAC,CAAC;oBACJ,CAAC;yBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;wBAChC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;wBAC7E,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACvD,CAAC;yBAAM,CAAC;wBACP,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;wBAClF,QAAQ,GAAG,MAAM,oBAAoB,CAAC;4BACrC,KAAK,EAAE,EAAE;4BACT,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACvD,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC1D,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC1D,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC7D,CAAC,CAAC;oBACJ,CAAC;gBACF,CAAC;wBAAS,CAAC;oBACV,OAAO,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC;gBACD,MAAM,MAAM,GAAsB;oBACjC,MAAM;oBACN,EAAE;oBACF,QAAQ;oBACR,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;oBACxB,EAAE,EAAE,QAAQ,KAAK,CAAC;iBAClB,CAAC;gBACF,OAAO,UAAU,CAAC,MAAM,CAAuC,CAAC;YACjE,CAAC,CAAC,CAAC;QACJ,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,IAAI,iBAAiB,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;AAE5D,SAAS,SAAS,CAAI,EAAoB;IACzC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAClC,GAAG,EAAE,CAAC,EAAE,EAAE,EACV,GAAG,EAAE,CAAC,EAAE,EAAE,CACV,CAAC;IACF,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAC5B,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CACf,CAAC;IACF,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY;IAKpB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAA0B,EAAW,EAAE;QAC/D,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACb,CAAC,CAAgC,CAAC;IAClC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAA0B,EAAW,EAAE;QAC/D,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACb,CAAC,CAAgC,CAAC;IAClC,OAAO;QACN,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,GAAG,EAAE;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC;QAChC,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/agents/tools/manage-channel-access-tool.d.ts

@@ -0,0 +1,44 @@
+/**
+ * `manage_channel_access` — owner-only channel GROUP access control.
+ *
+ * The sanctioned, model-agnostic path for changing who the crew answers in
+ * group chats (WhatsApp / Slack / …). It reads/writes the `channels.<channel>`
+ * slice of brigade.json — `groupPolicy`, `groupAllowFrom`, `groupAllowJids`,
+ * `groupFollowUpWindowMs` — so the operator can say "be live in this group" or
+ * "stop making me tag you" and the crew does it, instead of hand-editing
+ * brigade.json (which the config-write guard refuses).
+ *
+ * Owner-gated (`ownerOnly: true`) — only the operator can move a security
+ * boundary. Writes the CONFIG layer only (same scope as a manual edit); the
+ * runtime list is the union of this + the file store in access-control/store.
+ */
+import { Type } from "typebox";
+import type { BrigadeTool } from "./types.js";
+declare const ManageChannelAccessParams: Type.TObject<{
+    action: Type.TUnion<[Type.TLiteral<"show">, Type.TLiteral<"set">]>;
+    channel: Type.TOptional<Type.TString>;
+    groupPolicy: Type.TOptional<Type.TUnion<Type.TLiteral<"pairing" | "allowlist" | "open" | "disabled">[]>>;
+    addAllowFrom: Type.TOptional<Type.TString>;
+    removeAllowFrom: Type.TOptional<Type.TString>;
+    addAllowJid: Type.TOptional<Type.TString>;
+    removeAllowJid: Type.TOptional<Type.TString>;
+    groupFollowUpWindowMs: Type.TOptional<Type.TNumber>;
+}>;
+interface ChannelAccessSnapshot {
+    channel: string;
+    groupPolicy: string;
+    groupAllowFrom: string[];
+    groupAllowJids: string[];
+    groupFollowUpWindowMs: number;
+}
+interface ManageChannelAccessResult {
+    action: "show" | "set";
+    ok: boolean;
+    message: string;
+    before?: ChannelAccessSnapshot;
+    after?: ChannelAccessSnapshot;
+    settings?: ChannelAccessSnapshot;
+}
+export declare function makeManageChannelAccessTool(): BrigadeTool<typeof ManageChannelAccessParams, ManageChannelAccessResult>;
+export {};
+//# sourceMappingURL=manage-channel-access-tool.d.ts.map

package/dist/agents/tools/manage-channel-access-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-channel-access-tool.d.ts","sourceRoot":"","sources":["../../../src/agents/tools/manage-channel-access-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAK/B,OAAO,KAAK,EAAmB,WAAW,EAAE,MAAM,YAAY,CAAC;AAI/D,QAAA,MAAM,yBAAyB;;;;;;;;;EA0C7B,CAAC;AAEH,UAAU,qBAAqB;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,yBAAyB;IAClC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CACjC;AAED,wBAAgB,2BAA2B,IAAI,WAAW,CACzD,OAAO,yBAAyB,EAChC,yBAAyB,CACzB,CAuEA"}