@spinabot/brigade 1.12.0 → 1.14.0

package/dist/core/agents-ops.js

@@ -0,0 +1,117 @@
+/**
+ * Agent routing-binding operations behind the `agents.*` gateway RPCs — the
+ * `brigade agents <bindings|bind|unbind>` surface, reachable from a remote
+ * client.
+ *
+ * These are the genuine no-other-path gap: agent ADD/DELETE/SET-IDENTITY are
+ * already reachable over the gateway via the `manage_agent` tool (a prompt), but
+ * routing bindings (which agent owns which channel/account) had no remote path
+ * at all. This module closes that.
+ *
+ * OPERATOR-SCOPED config mutations (which agent routes which channel) — not
+ * session-targeted, so no per-session access guard (allowlisted by name in the
+ * guard-sweep). Reuses the SAME binding domain primitives the CLI calls, so
+ * `brigade agents bind` and `agents.bind` over the wire behave identically,
+ * including conflict detection (a slot already owned by another agent).
+ */
+import { applyAgentBindings, describeBinding, listRouteBindings, parseBindingSpecs, removeAgentBindings, } from "../cli/commands/agents-bindings.js";
+import { DEFAULT_AGENT_ID, normalizeAgentId } from "../agents/routing/session-key.js";
+import { loadConfig, saveConfig } from "./config.js";
+/** Lightweight existence check — `main` always exists; otherwise a configured entry. */
+function hasAgent(cfg, agentId) {
+    if (agentId === DEFAULT_AGENT_ID)
+        return true;
+    const agents = (cfg.agents ?? {});
+    return agentId !== "defaults" && agentId in agents;
+}
+function conflictLines(conflicts) {
+    return conflicts.map((c) => `${describeBinding(c.binding)} (owned by ${c.existingAgentId})`);
+}
+export function handleAgentsBindings(params) {
+    const p = (params ?? {});
+    const cfg = loadConfig();
+    const filter = p.agentId?.trim() ? normalizeAgentId(p.agentId) : null;
+    const bindings = listRouteBindings(cfg)
+        .filter((b) => !filter || normalizeAgentId(b.agentId) === filter)
+        .map((b) => ({ agentId: normalizeAgentId(b.agentId), description: describeBinding(b) }));
+    return { bindings };
+}
+export function handleAgentsBind(params) {
+    const p = (params ?? {});
+    const cfg = loadConfig();
+    const agentId = normalizeAgentId(p.agentId ?? DEFAULT_AGENT_ID);
+    const fail = (errors) => ({
+        ok: false,
+        agentId,
+        added: [],
+        updated: [],
+        skipped: [],
+        conflicts: [],
+        errors,
+    });
+    if (!hasAgent(cfg, agentId))
+        return fail([`agent "${agentId}" not found`]);
+    const specs = (p.specs ?? []).map((s) => String(s).trim()).filter(Boolean);
+    if (specs.length === 0)
+        return fail(["provide at least one binding spec, e.g. \"whatsapp\" or \"slack:T123\""]);
+    // channels omitted → skip channel-name validation (an operator RPC; a client
+    // can validate against `system.capabilities`). An unknown channel just yields
+    // an inert binding rather than a hard error.
+    const parsed = parseBindingSpecs({ agentId, specs, config: cfg });
+    if (parsed.errors.length > 0)
+        return fail(parsed.errors);
+    const result = applyAgentBindings(cfg, parsed.bindings);
+    if (result.added.length > 0 || result.updated.length > 0)
+        saveConfig(result.config);
+    return {
+        ok: result.conflicts.length === 0,
+        agentId,
+        added: result.added.map(describeBinding),
+        updated: result.updated.map(describeBinding),
+        skipped: result.skipped.map(describeBinding),
+        conflicts: conflictLines(result.conflicts),
+    };
+}
+export function handleAgentsUnbind(params) {
+    const p = (params ?? {});
+    const cfg = loadConfig();
+    const agentId = normalizeAgentId(p.agentId ?? DEFAULT_AGENT_ID);
+    const fail = (errors) => ({
+        ok: false,
+        agentId,
+        removed: [],
+        missing: [],
+        conflicts: [],
+        errors,
+    });
+    if (!hasAgent(cfg, agentId))
+        return fail([`agent "${agentId}" not found`]);
+    if (p.all) {
+        const existing = listRouteBindings(cfg);
+        const removed = existing.filter((b) => normalizeAgentId(b.agentId) === agentId);
+        const kept = existing.filter((b) => normalizeAgentId(b.agentId) !== agentId);
+        if (removed.length > 0)
+            saveConfig({ ...cfg, bindings: { entries: kept } });
+        return { ok: true, agentId, removed: removed.map(describeBinding), missing: [], conflicts: [] };
+    }
+    const specs = (p.specs ?? []).map((s) => String(s).trim()).filter(Boolean);
+    if (specs.length === 0)
+        return fail(["provide at least one binding spec, or pass all:true"]);
+    // channels omitted → skip channel-name validation (an operator RPC; a client
+    // can validate against `system.capabilities`). An unknown channel just yields
+    // an inert binding rather than a hard error.
+    const parsed = parseBindingSpecs({ agentId, specs, config: cfg });
+    if (parsed.errors.length > 0)
+        return fail(parsed.errors);
+    const result = removeAgentBindings(cfg, parsed.bindings);
+    if (result.removed.length > 0)
+        saveConfig(result.config);
+    return {
+        ok: result.conflicts.length === 0,
+        agentId,
+        removed: result.removed.map(describeBinding),
+        missing: result.missing.map(describeBinding),
+        conflicts: conflictLines(result.conflicts),
+    };
+}
+//# sourceMappingURL=agents-ops.js.map

package/dist/core/agents-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents-ops.js","sourceRoot":"","sources":["../../src/core/agents-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAEN,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,GACnB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,wFAAwF;AACxF,SAAS,QAAQ,CAAC,GAAkB,EAAE,OAAe;IACpD,IAAI,OAAO,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IAC7D,OAAO,OAAO,KAAK,UAAU,IAAI,OAAO,IAAI,MAAM,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CAAC,SAAiF;IACvG,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;AAC9F,CAAC;AAKD,MAAM,UAAU,oBAAoB,CAAC,MAAe;IACnD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAyB,CAAC;IACjD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC;SAChE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1F,OAAO,EAAE,QAAQ,EAAE,CAAC;AACrB,CAAC;AAWD,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC/C,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA2C,CAAC;IACnE,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,CAAC,MAAgB,EAAoB,EAAE,CAAC,CAAC;QACrD,EAAE,EAAE,KAAK;QACT,OAAO;QACP,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,EAAE;QACb,MAAM;KACN,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,UAAU,OAAO,aAAa,CAAC,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,wEAAwE,CAAC,CAAC,CAAC;IAChH,6EAA6E;IAC7E,8EAA8E;IAC9E,6CAA6C;IAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpF,OAAO;QACN,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QACjC,OAAO;QACP,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC;QACxC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QAC5C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QAC5C,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;KAC1C,CAAC;AACH,CAAC;AAUD,MAAM,UAAU,kBAAkB,CAAC,MAAe;IACjD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA0D,CAAC;IAClF,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,CAAC,MAAgB,EAAsB,EAAE,CAAC,CAAC;QACvD,EAAE,EAAE,KAAK;QACT,OAAO;QACP,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,EAAE;QACb,MAAM;KACN,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,UAAU,OAAO,aAAa,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,UAAU,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACjG,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC;IAC7F,6EAA6E;IAC7E,8EAA8E;IAC9E,6CAA6C;IAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO;QACN,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QACjC,OAAO;QACP,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QAC5C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QAC5C,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;KAC1C,CAAC;AACH,CAAC"}

package/dist/core/channels-ops.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Channel runtime + DM-allow control behind the `channels.*` gateway RPCs —
+ * reachable from a remote client.
+ *
+ * Channel *config* (enable/disable, group policy) is already config.set-
+ * reachable. These close the genuine gaps: LIVE connect/disconnect (a runtime
+ * adapter op, not config) and the DM allow-from store (a per-channel file, not
+ * brigade.json). Operator-scoped (no per-session guard — allowlisted).
+ *
+ * connect/disconnect reuse the owner-scoped `connect_channel` tool (its execute
+ * is ctx-free; the manager comes from the global `getActiveChannelManager()`).
+ * allow-add/remove/list call the access-control store directly.
+ */
+export declare function handleChannelsConnect(params: unknown): Promise<unknown>;
+export declare function handleChannelsDisconnect(params: unknown): Promise<unknown>;
+export interface ChannelsAllowResult {
+    ok: boolean;
+    channel: string;
+    senderId: string;
+    changed: boolean;
+    reason?: string;
+}
+export declare function handleChannelsAllowAdd(params: unknown): ChannelsAllowResult;
+export declare function handleChannelsAllowRemove(params: unknown): ChannelsAllowResult;
+export interface ChannelsAllowListResult {
+    channel: string;
+    senders: string[];
+}
+export declare function handleChannelsAllowList(params: unknown): ChannelsAllowListResult;
+//# sourceMappingURL=channels-ops.d.ts.map

package/dist/core/channels-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels-ops.d.ts","sourceRoot":"","sources":["../../src/core/channels-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAWH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAE7E;AACD,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAEhF;AAED,MAAM,WAAW,mBAAmB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,OAAO,GAAG,mBAAmB,CAO3E;AACD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,OAAO,GAAG,mBAAmB,CAO9E;AAED,MAAM,WAAW,uBAAuB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;CAClB;AACD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,OAAO,GAAG,uBAAuB,CAKhF"}

package/dist/core/channels-ops.js

@@ -0,0 +1,52 @@
+/**
+ * Channel runtime + DM-allow control behind the `channels.*` gateway RPCs —
+ * reachable from a remote client.
+ *
+ * Channel *config* (enable/disable, group policy) is already config.set-
+ * reachable. These close the genuine gaps: LIVE connect/disconnect (a runtime
+ * adapter op, not config) and the DM allow-from store (a per-channel file, not
+ * brigade.json). Operator-scoped (no per-session guard — allowlisted).
+ *
+ * connect/disconnect reuse the owner-scoped `connect_channel` tool (its execute
+ * is ctx-free; the manager comes from the global `getActiveChannelManager()`).
+ * allow-add/remove/list call the access-control store directly.
+ */
+import { addAllowFrom, readAllowFrom, removeAllowFrom } from "../agents/channels/access-control/store.js";
+import { makeConnectChannelTool } from "../agents/tools/connect-channel-tool.js";
+async function runConnectChannel(args) {
+    const tool = makeConnectChannelTool({ senderIsOwner: true });
+    const res = await tool.execute("gateway", args);
+    return res.details;
+}
+export async function handleChannelsConnect(params) {
+    return runConnectChannel({ ...(params ?? {}), action: "connect" });
+}
+export async function handleChannelsDisconnect(params) {
+    return runConnectChannel({ ...(params ?? {}), action: "disconnect" });
+}
+export function handleChannelsAllowAdd(params) {
+    const p = (params ?? {});
+    const channel = (p.channel ?? "").trim();
+    const senderId = (p.senderId ?? "").trim();
+    if (!channel || !senderId)
+        return { ok: false, channel, senderId, changed: false, reason: "missing 'channel' or 'senderId'" };
+    const added = addAllowFrom(channel, senderId, p.accountId ?? null);
+    return { ok: true, channel, senderId, changed: added };
+}
+export function handleChannelsAllowRemove(params) {
+    const p = (params ?? {});
+    const channel = (p.channel ?? "").trim();
+    const senderId = (p.senderId ?? "").trim();
+    if (!channel || !senderId)
+        return { ok: false, channel, senderId, changed: false, reason: "missing 'channel' or 'senderId'" };
+    const removed = removeAllowFrom(channel, senderId, p.accountId ?? null);
+    return { ok: removed, channel, senderId, changed: removed, ...(removed ? {} : { reason: "sender not on the allow-from list" }) };
+}
+export function handleChannelsAllowList(params) {
+    const p = (params ?? {});
+    const channel = (p.channel ?? "").trim();
+    if (!channel)
+        throw new Error("channels.allow-list: missing 'channel'");
+    return { channel, senders: readAllowFrom(channel, p.accountId ?? null) };
+}
+//# sourceMappingURL=channels-ops.js.map

package/dist/core/channels-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels-ops.js","sourceRoot":"","sources":["../../src/core/channels-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC1G,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAEjF,KAAK,UAAU,iBAAiB,CAAC,IAA6B;IAC7D,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAa,CAAC,CAAC;IACzD,OAAO,GAAG,CAAC,OAAO,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAe;IAC1D,OAAO,iBAAiB,CAAC,EAAE,GAAI,CAAC,MAAM,IAAI,EAAE,CAA6B,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AACjG,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAe;IAC7D,OAAO,iBAAiB,CAAC,EAAE,GAAI,CAAC,MAAM,IAAI,EAAE,CAA6B,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;AACpG,CAAC;AASD,MAAM,UAAU,sBAAsB,CAAC,MAAe;IACrD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAgE,CAAC;IACxF,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAC9H,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IACnE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACxD,CAAC;AACD,MAAM,UAAU,yBAAyB,CAAC,MAAe;IACxD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAgE,CAAC;IACxF,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAC9H,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IACxE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC,EAAE,CAAC;AAClI,CAAC;AAMD,MAAM,UAAU,uBAAuB,CAAC,MAAe;IACtD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA6C,CAAC;IACrE,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACxE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,CAAC;AAC1E,CAAC"}

package/dist/core/config-ops.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Config path operations — the pure logic behind `brigade config <get|set|
+ * unset|list|schema|validate>` AND the `config.*` gateway RPCs.
+ *
+ * Extracted from `cli/commands/config-cmd.ts` so the CLI and the gateway speak
+ * to ONE implementation: a remote client (web console) doing `config.set` and
+ * an operator doing `brigade config set` parse paths, redact secrets, and
+ * mutate brigade.json identically.
+ *
+ * The path helpers are pure (no I/O). The `handle*` functions are the gateway
+ * handlers: they read/write through the mode-aware `loadConfig`/`saveConfig`
+ * (filesystem OR Convex), so `config.*` works in both storage modes.
+ *
+ * Secret handling mirrors the CLI: any segment matching SENSITIVE_SEGMENT
+ * renders as `__BRIGADE_REDACTED__` in get/list output. Writes are NOT
+ * redacted (you can set a key you can't read back in plaintext), and the
+ * on-disk `${VAR}` restoration in `saveConfig` keeps resolved secrets off disk.
+ */
+export declare const REDACTED_SENTINEL = "__BRIGADE_REDACTED__";
+/**
+ * Parse a config path into segments. Supports dot-notation
+ * (`agents.defaults.provider`), escaped dots (`keys.foo\.bar`), bracket array
+ * indices (`a.b[0]`), and bracket literal keys (`a["my.key"]`).
+ */
+export declare function parsePath(raw: string): string[];
+export declare function getNested(root: unknown, segments: string[]): unknown;
+export declare function setNested(root: Record<string, unknown>, segments: string[], value: unknown): void;
+export declare function deleteNested(root: Record<string, unknown>, segments: string[]): boolean;
+/** JSON5-parse a CLI string value, falling back to the raw string. */
+export declare function parseConfigValue(raw: string, opts?: {
+    strictJson?: boolean;
+}): unknown;
+/** Deep-redact any string value whose key looks secret. */
+export declare function redactDeep(value: unknown): unknown;
+/** Read a redacted value at `rawPath`. `found:false` when the key is absent. */
+export declare function configGetValue(cfg: unknown, rawPath: string): {
+    found: boolean;
+    value?: unknown;
+};
+/** Mutate `cfg` in place: set `rawPath` to `value`. */
+export declare function configSetValue(cfg: Record<string, unknown>, rawPath: string, value: unknown): void;
+/** Mutate `cfg` in place: remove `rawPath`. Returns whether anything was removed. */
+export declare function configUnsetValue(cfg: Record<string, unknown>, rawPath: string): boolean;
+export interface ConfigGetResult {
+    found: boolean;
+    value?: unknown;
+}
+export interface ConfigSetResult {
+    ok: boolean;
+    path: string;
+    value: unknown;
+}
+export interface ConfigUnsetResult {
+    ok: boolean;
+    path: string;
+    removed: boolean;
+}
+export interface ConfigListResult {
+    config: unknown;
+}
+export interface ConfigSchemaResult {
+    schema: unknown;
+}
+export interface ConfigValidateResult {
+    valid: boolean;
+    issues: Array<{
+        path: string;
+        message: string;
+    }>;
+}
+export declare function handleConfigGet(params: unknown): ConfigGetResult;
+export declare function handleConfigSet(params: unknown): ConfigSetResult;
+export declare function handleConfigUnset(params: unknown): ConfigUnsetResult;
+export declare function handleConfigList(params: unknown): ConfigListResult;
+export declare function handleConfigSchema(_params?: unknown): ConfigSchemaResult;
+export declare function handleConfigValidate(_params?: unknown): ConfigValidateResult;
+//# sourceMappingURL=config-ops.d.ts.map

package/dist/core/config-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-ops.d.ts","sourceRoot":"","sources":["../../src/core/config-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,eAAO,MAAM,iBAAiB,yBAAyB,CAAC;AAKxD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAoD/C;AAOD,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAYpE;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CA0BjG;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAuBvF;AAED,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAS1F;AAED,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAYlD;AAID,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAIjG;AAED,uDAAuD;AACvD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAElG;AAED,qFAAqF;AACrF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAEvF;AAUD,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AACD,MAAM,WAAW,eAAe;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CACf;AACD,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CACjB;AACD,MAAM,WAAW,gBAAgB;IAChC,MAAM,EAAE,OAAO,CAAC;CAChB;AACD,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,OAAO,CAAC;CAChB;AACD,MAAM,WAAW,oBAAoB;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,CAKhE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,CAQhE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,iBAAiB,CAQpE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG,gBAAgB,CAIlE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,kBAAkB,CAExE;AAED,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,oBAAoB,CAG5E"}

package/dist/core/config-ops.js

@@ -0,0 +1,241 @@
+/**
+ * Config path operations — the pure logic behind `brigade config <get|set|
+ * unset|list|schema|validate>` AND the `config.*` gateway RPCs.
+ *
+ * Extracted from `cli/commands/config-cmd.ts` so the CLI and the gateway speak
+ * to ONE implementation: a remote client (web console) doing `config.set` and
+ * an operator doing `brigade config set` parse paths, redact secrets, and
+ * mutate brigade.json identically.
+ *
+ * The path helpers are pure (no I/O). The `handle*` functions are the gateway
+ * handlers: they read/write through the mode-aware `loadConfig`/`saveConfig`
+ * (filesystem OR Convex), so `config.*` works in both storage modes.
+ *
+ * Secret handling mirrors the CLI: any segment matching SENSITIVE_SEGMENT
+ * renders as `__BRIGADE_REDACTED__` in get/list output. Writes are NOT
+ * redacted (you can set a key you can't read back in plaintext), and the
+ * on-disk `${VAR}` restoration in `saveConfig` keeps resolved secrets off disk.
+ */
+import JSON5 from "json5";
+import { BrigadeConfigSchema, collectBrigadeConfigErrors } from "./brigade-config.js";
+import { loadConfig, saveConfig } from "./config.js";
+export const REDACTED_SENTINEL = "__BRIGADE_REDACTED__";
+const SENSITIVE_SEGMENT = /^(key|apikey|token|secret|password|refreshtoken|accesstoken)$/i;
+/* ───────────────────────── path helpers ───────────────────────── */
+/**
+ * Parse a config path into segments. Supports dot-notation
+ * (`agents.defaults.provider`), escaped dots (`keys.foo\.bar`), bracket array
+ * indices (`a.b[0]`), and bracket literal keys (`a["my.key"]`).
+ */
+export function parsePath(raw) {
+    const trimmed = raw.trim();
+    if (trimmed.length === 0) {
+        throw new Error("config path is empty");
+    }
+    const segments = [];
+    let buf = "";
+    for (let i = 0; i < trimmed.length; i++) {
+        const ch = trimmed[i];
+        if (ch === "\\" && trimmed[i + 1] === ".") {
+            buf += ".";
+            i++;
+            continue;
+        }
+        if (ch === ".") {
+            if (buf.length === 0) {
+                throw new Error(`empty segment in config path "${raw}"`);
+            }
+            segments.push(buf);
+            buf = "";
+            continue;
+        }
+        if (ch === "[") {
+            if (buf.length > 0) {
+                segments.push(buf);
+                buf = "";
+            }
+            const close = trimmed.indexOf("]", i);
+            if (close === -1) {
+                throw new Error(`unclosed "[" in config path "${raw}"`);
+            }
+            let inside = trimmed.slice(i + 1, close).trim();
+            if ((inside.startsWith('"') && inside.endsWith('"')) ||
+                (inside.startsWith("'") && inside.endsWith("'"))) {
+                inside = inside.slice(1, -1);
+            }
+            if (inside.length === 0) {
+                throw new Error(`empty bracket segment in config path "${raw}"`);
+            }
+            segments.push(inside);
+            i = close;
+            continue;
+        }
+        buf += ch;
+    }
+    if (buf.length > 0)
+        segments.push(buf);
+    if (segments.length === 0) {
+        throw new Error(`unable to parse config path "${raw}"`);
+    }
+    return segments;
+}
+/** True iff the segment looks like a non-negative integer (array index). */
+function isIndexSegment(seg) {
+    return /^[0-9]+$/.test(seg);
+}
+export function getNested(root, segments) {
+    let cur = root;
+    for (const seg of segments) {
+        if (cur === null || cur === undefined)
+            return undefined;
+        if (Array.isArray(cur) && isIndexSegment(seg)) {
+            cur = cur[Number(seg)];
+            continue;
+        }
+        if (typeof cur !== "object")
+            return undefined;
+        cur = cur[seg];
+    }
+    return cur;
+}
+export function setNested(root, segments, value) {
+    // biome-ignore lint/suspicious/noExplicitAny: walking an untyped config tree.
+    let cur = root;
+    for (let i = 0; i < segments.length - 1; i++) {
+        const seg = segments[i] ?? "";
+        const nextSeg = segments[i + 1] ?? "";
+        const wantArray = isIndexSegment(nextSeg);
+        const existing = Array.isArray(cur) && isIndexSegment(seg) ? cur[Number(seg)] : cur[seg];
+        if (existing === undefined || existing === null || typeof existing !== "object") {
+            const fresh = wantArray ? [] : {};
+            if (Array.isArray(cur) && isIndexSegment(seg)) {
+                cur[Number(seg)] = fresh;
+            }
+            else {
+                cur[seg] = fresh;
+            }
+            cur = fresh;
+        }
+        else {
+            cur = Array.isArray(cur) && isIndexSegment(seg) ? cur[Number(seg)] : cur[seg];
+        }
+    }
+    const tail = segments[segments.length - 1] ?? "";
+    if (Array.isArray(cur) && isIndexSegment(tail)) {
+        cur[Number(tail)] = value;
+    }
+    else {
+        cur[tail] = value;
+    }
+}
+export function deleteNested(root, segments) {
+    // biome-ignore lint/suspicious/noExplicitAny: walking an untyped config tree.
+    let cur = root;
+    for (let i = 0; i < segments.length - 1; i++) {
+        const seg = segments[i] ?? "";
+        const next = Array.isArray(cur) && isIndexSegment(seg) ? cur[Number(seg)] : cur?.[seg];
+        if (next === undefined || next === null || typeof next !== "object")
+            return false;
+        cur = next;
+    }
+    const tail = segments[segments.length - 1] ?? "";
+    if (Array.isArray(cur) && isIndexSegment(tail)) {
+        const idx = Number(tail);
+        if (idx < cur.length) {
+            cur.splice(idx, 1);
+            return true;
+        }
+        return false;
+    }
+    if (cur && typeof cur === "object" && tail in cur) {
+        delete cur[tail];
+        return true;
+    }
+    return false;
+}
+/** JSON5-parse a CLI string value, falling back to the raw string. */
+export function parseConfigValue(raw, opts = {}) {
+    if (opts.strictJson) {
+        return JSON.parse(raw);
+    }
+    try {
+        return JSON5.parse(raw);
+    }
+    catch {
+        return raw;
+    }
+}
+/** Deep-redact any string value whose key looks secret. */
+export function redactDeep(value) {
+    if (value === null || typeof value !== "object")
+        return value;
+    if (Array.isArray(value))
+        return value.map((v) => redactDeep(v));
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+        if (SENSITIVE_SEGMENT.test(k) && typeof v === "string" && v.length > 0) {
+            out[k] = REDACTED_SENTINEL;
+        }
+        else {
+            out[k] = redactDeep(v);
+        }
+    }
+    return out;
+}
+/* ───────────────────── structured operations ──────────────────── */
+/** Read a redacted value at `rawPath`. `found:false` when the key is absent. */
+export function configGetValue(cfg, rawPath) {
+    const value = getNested(cfg, parsePath(rawPath));
+    if (value === undefined)
+        return { found: false };
+    return { found: true, value: redactDeep(value) };
+}
+/** Mutate `cfg` in place: set `rawPath` to `value`. */
+export function configSetValue(cfg, rawPath, value) {
+    setNested(cfg, parsePath(rawPath), value);
+}
+/** Mutate `cfg` in place: remove `rawPath`. Returns whether anything was removed. */
+export function configUnsetValue(cfg, rawPath) {
+    return deleteNested(cfg, parsePath(rawPath));
+}
+export function handleConfigGet(params) {
+    const p = (params ?? {});
+    const rawPath = (p.path ?? "").trim();
+    if (!rawPath)
+        throw new Error("config.get: missing 'path'");
+    return configGetValue(loadConfig(), rawPath);
+}
+export function handleConfigSet(params) {
+    const p = (params ?? {});
+    const rawPath = (p.path ?? "").trim();
+    if (!rawPath)
+        throw new Error("config.set: missing 'path'");
+    const cfg = loadConfig();
+    configSetValue(cfg, rawPath, p.value);
+    saveConfig(cfg);
+    return { ok: true, path: rawPath, value: redactDeep(p.value) };
+}
+export function handleConfigUnset(params) {
+    const p = (params ?? {});
+    const rawPath = (p.path ?? "").trim();
+    if (!rawPath)
+        throw new Error("config.unset: missing 'path'");
+    const cfg = loadConfig();
+    const removed = configUnsetValue(cfg, rawPath);
+    if (removed)
+        saveConfig(cfg);
+    return { ok: removed, path: rawPath, removed };
+}
+export function handleConfigList(params) {
+    const p = (params ?? {});
+    const cfg = loadConfig();
+    return { config: p.redact === false ? cfg : redactDeep(cfg) };
+}
+export function handleConfigSchema(_params) {
+    return { schema: BrigadeConfigSchema };
+}
+export function handleConfigValidate(_params) {
+    const issues = collectBrigadeConfigErrors(loadConfig());
+    return { valid: issues.length === 0, issues };
+}
+//# sourceMappingURL=config-ops.js.map

package/dist/core/config-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-ops.js","sourceRoot":"","sources":["../../src/core/config-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,CAAC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACxD,MAAM,iBAAiB,GAAG,gEAAgE,CAAC;AAE3F,sEAAsE;AAEtE;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACpC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,EAAE,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3C,GAAG,IAAI,GAAG,CAAC;YACX,CAAC,EAAE,CAAC;YACJ,SAAS;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAChB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,GAAG,CAAC,CAAC;YAC1D,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,GAAG,EAAE,CAAC;YACT,SAAS;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAChB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,GAAG,EAAE,CAAC;YACV,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACtC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,GAAG,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,IACC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAChD,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC/C,CAAC;gBACF,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,GAAG,CAAC,CAAC;YAClE,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC,GAAG,KAAK,CAAC;YACV,SAAS;QACV,CAAC;QACD,GAAG,IAAI,EAAE,CAAC;IACX,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,GAAG,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,4EAA4E;AAC5E,SAAS,cAAc,CAAC,GAAW;IAClC,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAa,EAAE,QAAkB;IAC1D,IAAI,GAAG,GAAY,IAAI,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,SAAS;QACV,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC9C,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAA6B,EAAE,QAAkB,EAAE,KAAc;IAC1F,8EAA8E;IAC9E,IAAI,GAAG,GAAQ,IAAI,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjF,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACP,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAClB,CAAC;YACD,GAAG,GAAG,KAAK,CAAC;QACb,CAAC;aAAM,CAAC;YACP,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/E,CAAC;IACF,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC;SAAM,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAA6B,EAAE,QAAkB;IAC7E,8EAA8E;IAC9E,IAAI,GAAG,GAAQ,IAAI,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QACvF,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAClF,GAAG,GAAG,IAAI,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;QACnD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,OAAiC,EAAE;IAChF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,GAAG,CAAC;IACZ,CAAC;AACF,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,UAAU,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC;QAC5B,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,sEAAsE;AAEtE,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,OAAe;IAC3D,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACjD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,cAAc,CAAC,GAA4B,EAAE,OAAe,EAAE,KAAc;IAC3F,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,gBAAgB,CAAC,GAA4B,EAAE,OAAe;IAC7E,OAAO,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9C,CAAC;AAmCD,MAAM,UAAU,eAAe,CAAC,MAAe;IAC9C,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAsB,CAAC;IAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5D,OAAO,cAAc,CAAC,UAAU,EAA6B,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAe;IAC9C,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAuC,CAAC;IAC/D,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,UAAU,EAA6B,CAAC;IACpD,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACtC,UAAU,CAAC,GAAY,CAAC,CAAC;IACzB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAChD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAsB,CAAC;IAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,UAAU,EAA6B,CAAC;IACpD,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,OAAO;QAAE,UAAU,CAAC,GAAY,CAAC,CAAC;IACtC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC/C,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAyB,CAAC;IACjD,MAAM,GAAG,GAAG,UAAU,EAA6B,CAAC;IACpD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAiB;IACnD,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAiB;IACrD,MAAM,MAAM,GAAG,0BAA0B,CAAC,UAAU,EAAE,CAAC,CAAC;IACxD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAC/C,CAAC"}

package/dist/core/exec-ops.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Exec-approval operations behind the `exec.*` gateway RPCs — the
+ * `brigade exec <list|allow|allow-pattern|remove|deny-test>` surface, reachable
+ * from a remote client.
+ *
+ * OPERATOR-SCOPED, per-agent: manages an agent's bash approval allowlist. NOT
+ * session-targeted — the operator manages exec trust for their OWN agents, the
+ * same posture as the already-allowlisted `exec-grant-skill` / `exec-allow-all`
+ * RPCs. No per-session access guard is needed (and the guard-sweep allowlists
+ * these by name for that reason).
+ *
+ * All structured returns (no console I/O) so the gateway can hand them straight
+ * back to a WS client. The underlying primitives in `exec-approvals.ts` are the
+ * SAME ones the CLI calls, so `brigade exec allow` and `exec.allow` over the
+ * wire behave identically — including the hard-deny safety net.
+ */
+import { type ApprovalDecision } from "./exec-approvals.js";
+export interface ExecListResult {
+    agentId: string;
+    filePath: string;
+    commands: string[];
+    patterns: string[];
+}
+export declare function handleExecList(params: unknown): ExecListResult;
+export interface ExecMutateResult {
+    ok: boolean;
+    agentId: string;
+    kind?: "exact" | "pattern";
+    value?: string;
+    reason?: string;
+}
+export declare function handleExecAllow(params: unknown): ExecMutateResult;
+export declare function handleExecAllowPattern(params: unknown): ExecMutateResult;
+export interface ExecRemoveResult {
+    ok: boolean;
+    agentId: string;
+    removedCommands: number;
+    removedPatterns: number;
+    reason?: string;
+}
+export declare function handleExecRemove(params: unknown): ExecRemoveResult;
+export interface ExecDenyTestResult {
+    agentId: string;
+    command: string;
+    decision: ApprovalDecision;
+}
+export declare function handleExecDenyTest(params: unknown): ExecDenyTestResult;
+//# sourceMappingURL=exec-ops.d.ts.map

package/dist/core/exec-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec-ops.d.ts","sourceRoot":"","sources":["../../src/core/exec-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EACN,KAAK,gBAAgB,EAOrB,MAAM,qBAAqB,CAAC;AAO7B,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AACD,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,cAAc,CAK9D;AAED,MAAM,WAAW,gBAAgB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG,gBAAgB,CAejE;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,OAAO,GAAG,gBAAgB,CAiBxE;AAED,MAAM,WAAW,gBAAgB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG,gBAAgB,CAsBlE;AAED,MAAM,WAAW,kBAAkB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,gBAAgB,CAAC;CAC3B;AACD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,kBAAkB,CAKtE"}