@spinabot/brigade 1.1.0 → 1.2.1

package/dist/agents/tools/connect-channel-tool.js

@@ -0,0 +1,398 @@
+/**
+ * `connect_channel` — let the crew connect / disconnect a messaging channel
+ * from chat, LIVE, without a gateway restart.
+ *
+ * This is the marquee of the channel-foundation work: the operator can say
+ * "connect Telegram, here's the token from @BotFather" and the agent runs ONE
+ * grounded tool call that (1) seals the token as a `${VAR}` secret-ref in config
+ * (never the raw value on disk), (2) flips `channels.<channel>.enabled = true`
+ * via `mutateConfigAtomic`, and (3) starts the channel adapter live through the
+ * channel manager (`getActiveChannelManager().startChannel(id)`). No
+ * hand-editing brigade.json, no `brigade gateway restart`.
+ *
+ * GATING — per-call `senderIsOwner` (the cron-tool doctrine, NOT blanket
+ * ownerOnly):
+ *   - `list` / `status` are READ-ONLY and safe for anyone (peers can see what's
+ *     connected + each channel's health).
+ *   - `connect` / `disconnect` MOVE A SECURITY BOUNDARY (they wire up / tear
+ *     down a live messaging surface and persist credentials). A channel peer
+ *     must NEVER do this, so those actions are refused unless the turn is
+ *     owner-routed. `senderIsOwner` defaults to TRUE so the TUI / direct-RPC /
+ *     test paths keep full access; the gateway threads `false` for
+ *     approved-non-owner channel peers.
+ *
+ * SECRET HANDLING — durable seal + live env ref (two layers):
+ *   - DURABLE: the token is written to Brigade's encrypted credential store via
+ *     `sealChannelToken` (atomic 0600 JSON on disk; AES-256-GCM sealed in convex
+ *     mode). This is the source of truth ACROSS a gateway reboot — the channel
+ *     reads it back at start even after the process (and its env) is gone. This
+ *     closes the gap where an env-only token evaporated on restart and the
+ *     channel silently failed to authenticate.
+ *   - LIVE: the raw token is also set into `process.env[BRIGADE_<CHANNEL>_TOKEN]`
+ *     and the config stores ONLY the literal ref `"${BRIGADE_<CHANNEL>_TOKEN}"`
+ *     so the just-started adapter resolves it immediately this process.
+ *   - The resolved token NEVER touches brigade.json (only the `${VAR}` ref), and
+ *     the tool result masks it.
+ */
+import { Type } from "typebox";
+import { loadConfig } from "../../core/config.js";
+import { mutateConfigAtomic } from "../../config/io.js";
+import { getActiveChannelManager } from "../channels/active-manager.js";
+import { sealChannelToken } from "../channels/channel-secrets.js";
+import { getActiveRegistry } from "../extensions/active-registry.js";
+import { createSubsystemLogger } from "../../logging/subsystem-logger.js";
+import { jsonResult } from "./common.js";
+const log = createSubsystemLogger("tools/connect-channel");
+const ConnectChannelParams = Type.Object({
+    action: Type.Union([
+        Type.Literal("list"),
+        Type.Literal("status"),
+        Type.Literal("connect"),
+        Type.Literal("disconnect"),
+    ], {
+        description: "list/status: report available + connected channels and their health (read-only, safe). connect: enable a channel + (when needed) store its token + start it LIVE. disconnect: stop + disable a channel at runtime.",
+    }),
+    channel: Type.Optional(Type.String({
+        description: 'Channel id under config.channels (e.g. "telegram", "whatsapp"). Required for connect / disconnect; for status, narrows to one channel.',
+        minLength: 1,
+        maxLength: 64,
+    })),
+    token: Type.Optional(Type.String({
+        description: "Secret/credential to connect a TOKEN-based channel (e.g. the Telegram bot token from @BotFather). Stored as a `${VAR}` secret-ref — NEVER persisted raw. Omit for channels that pair another way (WhatsApp uses a QR link, not a token — point the operator at `brigade channels link --channel whatsapp`).",
+        maxLength: 8192,
+    })),
+});
+export function makeConnectChannelTool(opts = {}) {
+    // Default to owner-access when omitted so legacy paths (TUI / tests) keep
+    // the previous full-access behaviour (same convention as cron-tool).
+    const senderIsOwner = opts.senderIsOwner !== false;
+    return {
+        name: "connect_channel",
+        label: "Connect Channel",
+        displaySummary: "connecting a messaging channel",
+        // NOTE: deliberately NOT `ownerOnly: true`. list/status are safe for
+        // peers; the per-call gate below refuses ONLY the mutating actions.
+        description: [
+            "Connect or disconnect a messaging channel (Telegram, WhatsApp, …) from chat, live, without a gateway restart.",
+            "list / status: report available + connected channels and their health (read-only — anyone can call).",
+            "connect {channel, token?}: OWNER-ONLY. Enables the channel, seals a provided token as a `${VAR}` secret-ref (never stored raw), and starts it LIVE via the channel manager. For token channels (Telegram) pass `token`; for QR channels (WhatsApp) omit it and tell the operator to run `brigade channels link --channel whatsapp`.",
+            "disconnect {channel}: OWNER-ONLY. Stops + disables the channel at runtime.",
+            "Call connect/disconnect ONLY on explicit operator request; report exactly what changed. Never hand-edit brigade.json — the config-write guard refuses it.",
+        ].join(" "),
+        parameters: ConnectChannelParams,
+        execute: async (_toolCallId, args) => {
+            const action = args.action;
+            // READ-ONLY actions — safe for anyone.
+            if (action === "list" || action === "status") {
+                const wantChannel = (args.channel ?? "").trim().toLowerCase();
+                const views = buildChannelViews(wantChannel || undefined);
+                if (action === "status" && wantChannel) {
+                    const view = views.find((v) => v.channel === wantChannel);
+                    if (!view) {
+                        return jsonResult({
+                            action,
+                            ok: false,
+                            message: `No channel adapter registered with id "${wantChannel}". Available: ${listAvailableIds().join(", ") || "none"}.`,
+                        });
+                    }
+                    return jsonResult({
+                        action,
+                        ok: true,
+                        channelState: view,
+                        message: describeView(view),
+                    });
+                }
+                return jsonResult({
+                    action,
+                    ok: true,
+                    channels: views,
+                    message: summarizeViews(views),
+                });
+            }
+            // MUTATING actions — owner-gated (per-call).
+            if (!senderIsOwner) {
+                return jsonResult({
+                    action,
+                    ok: false,
+                    message: "connect_channel: connecting or disconnecting a channel is owner-only — a channel peer cannot alter the operator's channels. Ask the operator to do this from the TUI.",
+                });
+            }
+            const channel = (args.channel ?? "").trim().toLowerCase();
+            if (!channel) {
+                return jsonResult({
+                    action,
+                    ok: false,
+                    message: `connect_channel ${action}: a channel id is required (e.g. "telegram").`,
+                });
+            }
+            // The adapter must be a registered, bundled channel — refuse arbitrary ids.
+            const known = listAvailableIds();
+            if (!known.includes(channel)) {
+                return jsonResult({
+                    action,
+                    ok: false,
+                    message: `connect_channel ${action}: no channel adapter registered with id "${channel}". Available: ${known.join(", ") || "none"}.`,
+                });
+            }
+            if (action === "connect")
+                return connectChannel(channel, args.token);
+            return disconnectChannel(channel);
+        },
+    };
+}
+/* ───────────────────────────── connect ───────────────────────────── */
+async function connectChannel(channel, rawToken) {
+    const token = (rawToken ?? "").trim();
+    // 1) Persist: enable the channel + (when a token was supplied) seal it.
+    //    Two-layer seal so the token survives BOTH this process and a reboot:
+    //      (a) DURABLE: write the token to the encrypted credential store
+    //          (`sealChannelToken`) — atomic 0600 on disk, AES-256-GCM in convex
+    //          mode. This is what the channel reads back at start AFTER a gateway
+    //          restart (env is gone by then). Source of truth across reboots.
+    //      (b) LIVE: set `process.env[VAR]` + a `${VAR}` ref in brigade.json so
+    //          the just-started adapter resolves the token immediately this
+    //          process without re-reading the sealed store.
+    //    The raw token NEVER lands in brigade.json (only the `${VAR}` ref) and
+    //    the tool result masks it.
+    let envVarName;
+    if (token) {
+        // (a) durable encrypted seal — survives the reboot.
+        try {
+            sealChannelToken(channel, token);
+        }
+        catch (err) {
+            log.warn("connect_channel: durable token seal failed (continuing with env ref)", {
+                channel,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+        // (b) live env for immediate resolution this process.
+        envVarName = secretEnvVarName(channel);
+        process.env[envVarName] = token;
+    }
+    const next = await mutateConfigAtomic((current) => {
+        const merged = { ...current };
+        const channels = {
+            ...(merged.channels ?? {}),
+        };
+        const entry = { ...(channels[channel] ?? {}) };
+        entry.enabled = true;
+        if (envVarName) {
+            // Store the literal ref string — a brand-new field is written verbatim
+            // by restoreEnvVarRefsRecursive, so `${VAR}` lands on disk (NOT the
+            // resolved token). For Telegram this is the canonical `botToken` slot.
+            entry[tokenConfigKey(channel)] = `\${${envVarName}}`;
+        }
+        channels[channel] = entry;
+        merged.channels = channels;
+        return merged;
+    });
+    // 2) Start it LIVE through the channel manager (no gateway restart). Pass the
+    //    freshly-written config so isConfigured + start() see enabled + the token.
+    const manager = getActiveChannelManager();
+    if (!manager) {
+        // Honest fallback — config is written, but no live manager to start it.
+        log.info("connect_channel: config written but no live channel manager", { channel });
+        return jsonResult({
+            action: "connect",
+            ok: true,
+            started: false,
+            channelState: viewFor(channel, next),
+            message: `Configured "${channel}" (enabled${token ? " + token sealed" : ""}). The gateway isn't running, so it will connect on next start. Run \`brigade gateway\` (or restart it) to connect now.`,
+        });
+    }
+    const result = await manager.startChannel(channel, next);
+    const view = viewFor(channel, next);
+    if (result.ok) {
+        return jsonResult({
+            action: "connect",
+            ok: true,
+            started: result.started,
+            channelState: view,
+            message: result.started
+                ? `Connected "${channel}" — it's live now${token ? " (token sealed as a secret ref)" : ""}. ${describeView(view)}`
+                : `"${channel}" is already connected. ${describeView(view)}`,
+        });
+    }
+    // Config is written but the live start didn't take (e.g. still not
+    // configured, or the adapter's start threw). Be HONEST: report it and give
+    // the restart fallback.
+    return jsonResult({
+        action: "connect",
+        ok: false,
+        started: false,
+        channelState: view,
+        message: `Saved config for "${channel}" but couldn't start it live: ${result.message ?? result.reason ?? "unknown error"}. ${remediationFor(channel)}`,
+    });
+}
+/* ───────────────────────────── disconnect ───────────────────────────── */
+async function disconnectChannel(channel) {
+    // 1) Stop it live (if a manager is running + it's started).
+    const manager = getActiveChannelManager();
+    let stopped = false;
+    if (manager) {
+        const res = await manager.stopChannel(channel);
+        stopped = res.stopped;
+    }
+    // 2) Disable it in config so it doesn't come back on the next boot.
+    const next = await mutateConfigAtomic((current) => {
+        const merged = { ...current };
+        const channels = {
+            ...(merged.channels ?? {}),
+        };
+        const entry = { ...(channels[channel] ?? {}) };
+        entry.enabled = false;
+        channels[channel] = entry;
+        merged.channels = channels;
+        return merged;
+    });
+    const view = viewFor(channel, next);
+    return jsonResult({
+        action: "disconnect",
+        ok: true,
+        stopped,
+        channelState: view,
+        message: stopped
+            ? `Disconnected "${channel}" — stopped it live and disabled it in config (won't reconnect on restart).`
+            : `Disabled "${channel}" in config. It wasn't running, so nothing to stop.`,
+    });
+}
+/* ───────────────────────────── helpers ───────────────────────────── */
+/**
+ * Env var that backs a channel's sealed token. `telegram` →
+ * `BRIGADE_TELEGRAM_TOKEN`. Uppercased + non-alnum→`_` so any channel id
+ * yields a legal env name (and matches the `${VAR}` SECRET_REF_PATTERN, which
+ * requires `[A-Z_][A-Z0-9_]*`).
+ */
+function secretEnvVarName(channel) {
+    const slug = channel.toUpperCase().replace(/[^A-Z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+    return `BRIGADE_${slug || "CHANNEL"}_TOKEN`;
+}
+/**
+ * Which config key under `channels.<id>` holds the token. Telegram's adapter
+ * reads `botToken`; default to that name for unknown token channels too (it's
+ * the established convention).
+ */
+function tokenConfigKey(_channel) {
+    return "botToken";
+}
+/** All registered channel ids (bundled + user). Empty when no registry mounted. */
+function listAvailableIds() {
+    const registry = getActiveRegistry();
+    if (!registry)
+        return [];
+    return registry.channels.map((a) => a.id);
+}
+/** Set of channel ids currently started in this gateway process. */
+function connectedIdSet() {
+    const manager = getActiveChannelManager();
+    return new Set(manager ? manager.started : []);
+}
+/** Build a view for every registered channel (or just one when `only` is set). */
+function buildChannelViews(only) {
+    const registry = getActiveRegistry();
+    if (!registry)
+        return [];
+    const cfg = loadConfig();
+    const connected = connectedIdSet();
+    const manager = getActiveChannelManager();
+    const out = [];
+    for (const adapter of registry.channels) {
+        if (only && adapter.id !== only)
+            continue;
+        const enabled = cfg.channels?.[adapter.id]?.enabled === true;
+        let configured = false;
+        try {
+            configured = adapter.isConfigured(cfg);
+        }
+        catch {
+            /* adapters shouldn't throw here, but be safe */
+        }
+        const isConnected = connected.has(adapter.id);
+        const view = {
+            channel: adapter.id,
+            label: adapter.label,
+            enabled,
+            configured,
+            connected: isConnected,
+        };
+        // Health only meaningful for a started adapter exposing health().
+        if (isConnected && manager) {
+            const live = manager.adapter(adapter.id);
+            if (live && typeof live.health === "function") {
+                const h = live.health();
+                view.health = {
+                    ok: h.ok,
+                    ...(!h.ok && h.reason ? { reason: h.reason } : {}),
+                    ...(!h.ok && h.remediation ? { remediation: h.remediation } : {}),
+                };
+            }
+        }
+        out.push(view);
+    }
+    return out;
+}
+/** Single-channel view from a specific config snapshot (post-write). */
+function viewFor(channel, cfg) {
+    const registry = getActiveRegistry();
+    const adapter = registry?.channels.find((a) => a.id === channel);
+    const enabled = cfg.channels?.[channel]?.enabled === true;
+    const connected = connectedIdSet().has(channel);
+    let configured = false;
+    if (adapter) {
+        try {
+            configured = adapter.isConfigured(cfg);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    const view = {
+        channel,
+        label: adapter?.label ?? channel,
+        enabled,
+        configured,
+        connected,
+    };
+    const manager = getActiveChannelManager();
+    if (connected && manager) {
+        const live = manager.adapter(channel);
+        if (live && typeof live.health === "function") {
+            const h = live.health();
+            view.health = {
+                ok: h.ok,
+                ...(!h.ok && h.reason ? { reason: h.reason } : {}),
+                ...(!h.ok && h.remediation ? { remediation: h.remediation } : {}),
+            };
+        }
+    }
+    return view;
+}
+function describeView(v) {
+    const state = v.connected
+        ? v.health && !v.health.ok
+            ? `connected but degraded (${v.health.reason ?? "unknown"})`
+            : "connected"
+        : v.enabled
+            ? "enabled but not connected"
+            : "not connected";
+    return `${v.label}: ${state}.`;
+}
+function summarizeViews(views) {
+    if (views.length === 0)
+        return "No channels are registered.";
+    const connected = views.filter((v) => v.connected).map((v) => v.label);
+    const available = views.filter((v) => !v.connected).map((v) => v.label);
+    const parts = [];
+    parts.push(connected.length > 0 ? `Connected: ${connected.join(", ")}.` : "No channels connected.");
+    if (available.length > 0)
+        parts.push(`Available to connect: ${available.join(", ")}.`);
+    return parts.join(" ");
+}
+function remediationFor(channel) {
+    if (channel === "whatsapp") {
+        return "WhatsApp links via QR, not a token — run `brigade channels link --channel whatsapp` (gateway stopped), then it connects on next start.";
+    }
+    return `Check the token/settings, then retry — or restart the gateway with \`brigade gateway\` to pick up the saved config.`;
+}
+//# sourceMappingURL=connect-channel-tool.js.map

package/dist/agents/tools/connect-channel-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-channel-tool.js","sourceRoot":"","sources":["../../../src/agents/tools/connect-channel-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAsB,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,GAAG,GAAG,qBAAqB,CAAC,uBAAuB,CAAC,CAAC;AAE3D,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,IAAI,CAAC,KAAK,CACjB;QACC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;KAC1B,EACD;QACC,WAAW,EACV,oNAAoN;KACrN,CACD;IACD,OAAO,EAAE,IAAI,CAAC,QAAQ,CACrB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,wIAAwI;QACzI,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,EAAE;KACb,CAAC,CACF;IACD,KAAK,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,6SAA6S;QAC9S,SAAS,EAAE,IAAI;KACf,CAAC,CACF;CACD,CAAC,CAAC;AAyCH,MAAM,UAAU,sBAAsB,CACrC,OAAsC,EAAE;IAExC,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC;IAEnD,OAAO;QACN,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,iBAAiB;QACxB,cAAc,EAAE,gCAAgC;QAChD,qEAAqE;QACrE,oEAAoE;QACpE,WAAW,EAAE;YACZ,+GAA+G;YAC/G,sGAAsG;YACtG,qUAAqU;YACrU,4EAA4E;YAC5E,2JAA2J;SAC3J,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAkD,EAAE;YACpF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAE3B,uCAAuC;YACvC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC9C,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC9D,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,IAAI,SAAS,CAAC,CAAC;gBAC1D,IAAI,MAAM,KAAK,QAAQ,IAAI,WAAW,EAAE,CAAC;oBACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC;oBAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;wBACX,OAAO,UAAU,CAAC;4BACjB,MAAM;4BACN,EAAE,EAAE,KAAK;4BACT,OAAO,EAAE,0CAA0C,WAAW,iBAAiB,gBAAgB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;yBAC1F,CAA0C,CAAC;oBAC5E,CAAC;oBACD,OAAO,UAAU,CAAC;wBACjB,MAAM;wBACN,EAAE,EAAE,IAAI;wBACR,YAAY,EAAE,IAAI;wBAClB,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC;qBACI,CAA0C,CAAC;gBAC5E,CAAC;gBACD,OAAO,UAAU,CAAC;oBACjB,MAAM;oBACN,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC;iBACC,CAA0C,CAAC;YAC5E,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC,aAAa,EAAE,CAAC;gBACpB,OAAO,UAAU,CAAC;oBACjB,MAAM;oBACN,EAAE,EAAE,KAAK;oBACT,OAAO,EACN,uKAAuK;iBACzI,CAA0C,CAAC;YAC5E,CAAC;YAED,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO,UAAU,CAAC;oBACjB,MAAM;oBACN,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,mBAAmB,MAAM,+CAA+C;iBAClD,CAA0C,CAAC;YAC5E,CAAC;YAED,4EAA4E;YAC5E,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,OAAO,UAAU,CAAC;oBACjB,MAAM;oBACN,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,mBAAmB,MAAM,4CAA4C,OAAO,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;iBACpG,CAA0C,CAAC;YAC5E,CAAC;YAED,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACrE,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;KACD,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,KAAK,UAAU,cAAc,CAC5B,OAAe,EACf,QAA4B;IAE5B,MAAM,KAAK,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtC,wEAAwE;IACxE,0EAA0E;IAC1E,sEAAsE;IACtE,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,wDAAwD;IACxD,2EAA2E;IAC3E,+BAA+B;IAC/B,IAAI,UAA8B,CAAC;IACnC,IAAI,KAAK,EAAE,CAAC;QACX,oDAAoD;QACpD,IAAI,CAAC;YACJ,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,sEAAsE,EAAE;gBAChF,OAAO;gBACP,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC,CAAC;QACJ,CAAC;QACD,sDAAsD;QACtD,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,CAAC,OAAsB,EAAE,EAAE;QAChE,MAAM,MAAM,GAAkB,EAAE,GAAG,OAAO,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG;YAChB,GAAG,CAAE,MAAiD,CAAC,QAAQ,IAAI,EAAE,CAAC;SAC3B,CAAC;QAC7C,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAA6B,CAAC;QAC1E,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,IAAI,UAAU,EAAE,CAAC;YAChB,uEAAuE;YACvE,oEAAoE;YACpE,uEAAuE;YACvE,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,MAAM,UAAU,GAAG,CAAC;QACtD,CAAC;QACD,QAAQ,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACzB,MAAkC,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACxD,OAAO,MAAM,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,+EAA+E;IAC/E,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAC;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,wEAAwE;QACxE,GAAG,CAAC,IAAI,CAAC,6DAA6D,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACrF,OAAO,UAAU,CAAC;YACjB,MAAM,EAAE,SAAS;YACjB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,OAAO,CAAC,OAAO,EAAE,IAAqB,CAAC;YACrD,OAAO,EAAE,eAAe,OAAO,aAAa,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,yHAAyH;SACpK,CAA0C,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,IAAqB,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,IAAqB,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,UAAU,CAAC;YACjB,MAAM,EAAE,SAAS;YACjB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACtB,CAAC,CAAC,cAAc,OAAO,oBAAoB,KAAK,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,IAAI,CAAC,EAAE;gBAClH,CAAC,CAAC,IAAI,OAAO,2BAA2B,YAAY,CAAC,IAAI,CAAC,EAAE;SAC9B,CAA0C,CAAC;IAC5E,CAAC;IAED,mEAAmE;IACnE,2EAA2E;IAC3E,wBAAwB;IACxB,OAAO,UAAU,CAAC;QACjB,MAAM,EAAE,SAAS;QACjB,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,qBAAqB,OAAO,iCAAiC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,IAAI,eAAe,KAAK,cAAc,CAAC,OAAO,CAAC,EAAE;KACvH,CAA0C,CAAC;AAC5E,CAAC;AAED,4EAA4E;AAE5E,KAAK,UAAU,iBAAiB,CAAC,OAAe;IAC/C,4DAA4D;IAC5D,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAC;IAC1C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC/C,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,oEAAoE;IACpE,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,CAAC,OAAsB,EAAE,EAAE;QAChE,MAAM,MAAM,GAAkB,EAAE,GAAG,OAAO,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG;YAChB,GAAG,CAAE,MAAiD,CAAC,QAAQ,IAAI,EAAE,CAAC;SAC3B,CAAC;QAC7C,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAA6B,CAAC;QAC1E,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;QACtB,QAAQ,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACzB,MAAkC,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACxD,OAAO,MAAM,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,IAAqB,CAAC,CAAC;IACrD,OAAO,UAAU,CAAC;QACjB,MAAM,EAAE,YAAY;QACpB,EAAE,EAAE,IAAI;QACR,OAAO;QACP,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,OAAO;YACf,CAAC,CAAC,iBAAiB,OAAO,6EAA6E;YACvG,CAAC,CAAC,aAAa,OAAO,qDAAqD;KAC7C,CAA0C,CAAC;AAC5E,CAAC;AAED,yEAAyE;AAEzE;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,OAAe;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACvF,OAAO,WAAW,IAAI,IAAI,SAAS,QAAQ,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAgB;IACvC,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,mFAAmF;AACnF,SAAS,gBAAgB;IACxB,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,oEAAoE;AACpE,SAAS,cAAc;IACtB,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAC;IAC1C,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,kFAAkF;AAClF,SAAS,iBAAiB,CAAC,IAAa;IACvC,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,UAAU,EAAmB,CAAC;IAC1C,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACzC,IAAI,IAAI,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI;YAAE,SAAS;QAC1C,MAAM,OAAO,GACX,GAA4D,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;QACxG,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC;YACJ,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACR,gDAAgD;QACjD,CAAC;QACD,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAgB;YACzB,OAAO,EAAE,OAAO,CAAC,EAAE;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO;YACP,UAAU;YACV,SAAS,EAAE,WAAW;SACtB,CAAC;QACF,kEAAkE;QAClE,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACzC,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,GAAG;oBACb,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjE,CAAC;YACH,CAAC;QACF,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,wEAAwE;AACxE,SAAS,OAAO,CAAC,OAAe,EAAE,GAAkB;IACnD,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IACjE,MAAM,OAAO,GACX,GAA4D,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACrG,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,OAAO,EAAE,CAAC;QACb,IAAI,CAAC;YACJ,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACR,YAAY;QACb,CAAC;IACF,CAAC;IACD,MAAM,IAAI,GAAgB;QACzB,OAAO;QACP,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,OAAO;QAChC,OAAO;QACP,UAAU;QACV,SAAS;KACT,CAAC;IACF,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAC;IAC1C,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,GAAG;gBACb,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjE,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,CAAc;IACnC,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS;QACxB,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE;YACzB,CAAC,CAAC,2BAA2B,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,SAAS,GAAG;YAC5D,CAAC,CAAC,WAAW;QACd,CAAC,CAAC,CAAC,CAAC,OAAO;YACV,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,eAAe,CAAC;IACpB,OAAO,GAAG,CAAC,CAAC,KAAK,KAAK,KAAK,GAAG,CAAC;AAChC,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,6BAA6B,CAAC;IAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;IACpG,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACtC,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC5B,OAAO,wIAAwI,CAAC;IACjJ,CAAC;IACD,OAAO,qHAAqH,CAAC;AAC9H,CAAC"}

package/dist/agents/tools/message-action-tool.d.ts

@@ -0,0 +1,67 @@
+/**
+ * `message_action` — agent-callable edit / delete / react on a channel message.
+ *
+ * Companion to `send_message` (which creates messages) and `connect_channel`
+ * (which wires up channels). Where `send_message` sends NEW text, this tool acts
+ * on an EXISTING message the agent already sent or received: edit its text,
+ * delete it, react to it with an emoji, or pin/unpin it. It is the one central
+ * surface for every channel's message-action capability — a channel opts in by
+ * implementing `ChannelAdapter.handleAction` + advertising the matching
+ * `capabilities` flag; this tool dispatches through the active channel manager
+ * and PRE-CHECKS that flag so an unsupported action fails cleanly without ever
+ * touching the adapter.
+ *
+ * Ownership: BLANKET owner-only. Editing or deleting an arbitrary message is a
+ * privileged act — a channel-routed peer must NEVER reach into the operator's
+ * conversations and mutate or remove messages. Unlike `send_message` (which a
+ * peer may use to reply to their OWN chat), there is no safe peer subset here,
+ * so the whole tool is refused for non-owner turns via a per-call gate (kept as
+ * a per-call gate, not a registration-time `ownerOnly`, so the refusal carries
+ * a clear actionable message instead of the tool silently vanishing).
+ *
+ * Text safety: `edit` text is run through the central `sanitizeReplyForChannel`
+ * (the same reasoning-leak scrubber every outbound reply uses) before it reaches
+ * the adapter, so an edited message can't leak `<think>` content either.
+ */
+import { Type } from "typebox";
+import type { ChannelApprovalRoute } from "../channels/approval-router.js";
+import type { BrigadeTool } from "./types.js";
+declare const MessageActionParams: Type.TObject<{
+    channel: Type.TString;
+    to: Type.TString;
+    action: Type.TObject<{
+        kind: Type.TUnion<[Type.TLiteral<"edit">, Type.TLiteral<"delete">, Type.TLiteral<"react">, Type.TLiteral<"pin">, Type.TLiteral<"unpin">]>;
+        messageId: Type.TOptional<Type.TString>;
+        text: Type.TOptional<Type.TString>;
+        emoji: Type.TOptional<Type.TString>;
+    }>;
+    accountId: Type.TOptional<Type.TString>;
+}>;
+interface MessageActionDetails {
+    channel: string;
+    to: string;
+    kind: string;
+    ok: boolean;
+    messageId?: string;
+    error?: string;
+}
+export interface MakeMessageActionToolOptions {
+    /** Active channel context for this turn (unused for routing today; kept for parity + future auto-fill). */
+    channelContext?: ChannelApprovalRoute;
+    /**
+     * Whether the calling turn is the workspace owner. Defaults to `true` so
+     * legacy paths (TUI / tests) keep access. A non-owner turn is refused
+     * wholesale — there is no safe peer subset for message mutation.
+     */
+    senderIsOwner?: boolean;
+    /**
+     * The calling agent's id — used to resolve "my last message" when the
+     * action omits `messageId` (the pipeline records the agent's last sent id
+     * per conversation). When omitted, the last-sent fallback is unavailable
+     * and an action with no `messageId` is refused as before.
+     */
+    agentId?: string;
+}
+export declare function makeMessageActionTool(opts?: MakeMessageActionToolOptions): BrigadeTool<typeof MessageActionParams, MessageActionDetails>;
+export {};
+//# sourceMappingURL=message-action-tool.d.ts.map

package/dist/agents/tools/message-action-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-action-tool.d.ts","sourceRoot":"","sources":["../../../src/agents/tools/message-action-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAK/B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAU3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAkB9C,QAAA,MAAM,mBAAmB;;;;;;;;;;EAqCvB,CAAC;AAEH,UAAU,oBAAoB;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,4BAA4B;IAC5C,2GAA2G;IAC3G,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAiCD,wBAAgB,qBAAqB,CACpC,IAAI,GAAE,4BAAiC,GACrC,WAAW,CAAC,OAAO,mBAAmB,EAAE,oBAAoB,CAAC,CA+I/D"}