@spinabot/brigade 1.12.0 → 1.14.0

package/dist/core/memory-ops.js

@@ -0,0 +1,40 @@
+/**
+ * Memory (Tideline) write + governance behind the `memory.*` gateway RPCs — the
+ * write_memory + manage_memory surface, reachable from a remote client.
+ *
+ * Memory lives in `facts.jsonl` (a store, NOT brigade.json), so `config.set`
+ * cannot reach it — these RPCs are the only typed remote path to MUTATE memory.
+ * READ is already covered by the `memory-query` (list/search/inspect/stats) and
+ * `memory-graph` RPCs.
+ *
+ * OPERATOR-SCOPED: operates on the OWNER origin over the agent's workspace,
+ * exactly like the tools (filesystem AND Convex modes). Reuses the SAME
+ * write_memory / manage_memory tool logic — their `execute()` is pure (owner-
+ * gating is a session wrapper, not inside execute), so invoking them with an
+ * owner scope from the gateway is correct and byte-identical to a turn.
+ */
+import { FactStore } from "../agents/memory/records.js";
+import { makeManageMemoryTool } from "../agents/tools/manage-memory-tool.js";
+import { makeWriteMemoryTool } from "../agents/tools/memory-tools.js";
+import { DEFAULT_AGENT_ID, resolveAgentWorkspaceDir } from "../config/paths.js";
+function workspaceFor(agentId) {
+    const id = (agentId ?? "").trim() || DEFAULT_AGENT_ID;
+    return resolveAgentWorkspaceDir(id);
+}
+/** `memory.write` — persist a durable fact. Params mirror the write_memory tool. */
+export async function handleMemoryWrite(params) {
+    const p = (params ?? {});
+    const store = new FactStore(workspaceFor(p.agentId));
+    const tool = makeWriteMemoryTool(store, { senderIsOwner: true });
+    const res = await tool.execute("gateway", params);
+    return res.details;
+}
+/** `memory.manage` — dream/purge/inspect/export/retention/vault/retract/restore/relink. */
+export async function handleMemoryManage(params) {
+    const p = (params ?? {});
+    const agentId = (p.agentId ?? "").trim() || DEFAULT_AGENT_ID;
+    const tool = makeManageMemoryTool(workspaceFor(agentId), { agentId });
+    const res = await tool.execute("gateway", params);
+    return res.details;
+}
+//# sourceMappingURL=memory-ops.js.map

package/dist/core/memory-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-ops.js","sourceRoot":"","sources":["../../src/core/memory-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAEhF,SAAS,YAAY,CAAC,OAAgB;IACrC,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;IACtD,OAAO,wBAAwB,CAAC,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAe;IACtD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAyB,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAe,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC,OAAO,CAAC;AACpB,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAe;IACvD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAyB,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;IAC7D,MAAM,IAAI,GAAG,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAe,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC,OAAO,CAAC;AACpB,CAAC"}

package/dist/core/pairing-ops.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Channel pairing operations behind the `pairing.*` gateway RPCs — the
+ * `brigade pairing <list|approve|revoke>` surface, reachable from a remote
+ * client.
+ *
+ * OPERATOR-SCOPED channel access control (approve/deny strangers who DM the
+ * bot). Per-channel, never a per-session target, so no per-session guard. The
+ * RPCs REQUIRE an explicit `channel` (no CLI-style auto-pick) — a client knows
+ * the channel from `system.capabilities`. Reuses the SAME access-control
+ * primitives the CLI calls, including the owner-bootstrap + in-channel notify
+ * on approve.
+ */
+import { readPendingPairings } from "../agents/channels/access-control/index.js";
+export type PairingListResult = {
+    channel: string;
+    pending: ReturnType<typeof readPendingPairings>;
+};
+export declare function handlePairingList(params: unknown): PairingListResult;
+export interface PairingApproveResult {
+    ok: boolean;
+    channel: string;
+    sender?: string;
+    owner?: boolean;
+    reason?: string;
+}
+export declare function handlePairingApprove(params: unknown): Promise<PairingApproveResult>;
+export interface PairingRevokeResult {
+    ok: boolean;
+    channel: string;
+    reason?: string;
+}
+export declare function handlePairingRevoke(params: unknown): PairingRevokeResult;
+//# sourceMappingURL=pairing-ops.d.ts.map

package/dist/core/pairing-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing-ops.d.ts","sourceRoot":"","sources":["../../src/core/pairing-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAGN,mBAAmB,EAGnB,MAAM,4CAA4C,CAAC;AAqBpD,MAAM,MAAM,iBAAiB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CAChD,CAAC;AACF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,iBAAiB,CAKpE;AAED,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA0BzF;AAED,MAAM,WAAW,mBAAmB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,mBAAmB,CAQxE"}

package/dist/core/pairing-ops.js

@@ -0,0 +1,78 @@
+/**
+ * Channel pairing operations behind the `pairing.*` gateway RPCs — the
+ * `brigade pairing <list|approve|revoke>` surface, reachable from a remote
+ * client.
+ *
+ * OPERATOR-SCOPED channel access control (approve/deny strangers who DM the
+ * bot). Per-channel, never a per-session target, so no per-session guard. The
+ * RPCs REQUIRE an explicit `channel` (no CLI-style auto-pick) — a client knows
+ * the channel from `system.capabilities`. Reuses the SAME access-control
+ * primitives the CLI calls, including the owner-bootstrap + in-channel notify
+ * on approve.
+ */
+import { approvePairingCode, readChannelOwner, readPendingPairings, revokePairingCode, setChannelOwner, } from "../agents/channels/access-control/index.js";
+import { BUNDLED_MODULES, loadModules } from "../agents/extensions/index.js";
+import { DEFAULT_AGENT_ID, resolveAgentWorkspaceDir } from "../config/paths.js";
+import { loadConfig } from "./config.js";
+/** Best-effort adapter lookup — only `approve` needs it (owner-bootstrap + notify). */
+async function resolveAdapter(channel) {
+    try {
+        const config = loadConfig();
+        const workspaceDir = resolveAgentWorkspaceDir(DEFAULT_AGENT_ID);
+        const registry = await loadModules({
+            modules: BUNDLED_MODULES,
+            meta: { agentId: DEFAULT_AGENT_ID, workspaceDir, cwd: workspaceDir, config: config },
+        });
+        return registry.channels.find((c) => c.id === channel);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function handlePairingList(params) {
+    const p = (params ?? {});
+    const channel = (p.channel ?? "").trim();
+    if (!channel)
+        throw new Error("pairing.list: missing 'channel'");
+    return { channel, pending: readPendingPairings(channel) };
+}
+export async function handlePairingApprove(params) {
+    const p = (params ?? {});
+    const channel = (p.channel ?? "").trim();
+    const code = (p.code ?? "").trim();
+    if (!channel || !code)
+        return { ok: false, channel, reason: "missing 'channel' or 'code'" };
+    const approved = approvePairingCode(channel, code);
+    if (!approved)
+        return { ok: false, channel, reason: "unknown or expired pairing code" };
+    // Owner bootstrap (bot-separate channels like Telegram): the first approved
+    // sender becomes the recorded owner so they can run admin commands. Reaching
+    // this RPC already proves operator access. Never overwrites an existing owner.
+    let becameOwner = false;
+    const adapter = await resolveAdapter(channel);
+    if (adapter?.pairing?.botIsSeparateFromOperator && !readChannelOwner(channel)) {
+        becameOwner = setChannelOwner(channel, approved.senderId);
+    }
+    // Best-effort in-channel "you're approved" reply when the adapter wires it.
+    const notify = adapter?.pairing?.notifyApproval;
+    if (notify) {
+        try {
+            await notify({ senderId: approved.senderId, senderName: approved.senderName });
+        }
+        catch {
+            /* non-fatal — the approval already landed in the allow-list */
+        }
+    }
+    return { ok: true, channel, sender: approved.senderId, owner: becameOwner };
+}
+export function handlePairingRevoke(params) {
+    const p = (params ?? {});
+    const channel = (p.channel ?? "").trim();
+    const code = (p.code ?? "").trim();
+    if (!channel || !code)
+        return { ok: false, channel, reason: "missing 'channel' or 'code'" };
+    return revokePairingCode(channel, code)
+        ? { ok: true, channel }
+        : { ok: false, channel, reason: "no matching pending code" };
+}
+//# sourceMappingURL=pairing-ops.js.map

package/dist/core/pairing-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing-ops.js","sourceRoot":"","sources":["../../src/core/pairing-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACN,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,GACf,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE7E,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,uFAAuF;AACvF,KAAK,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC;YAClC,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,MAAe,EAAE;SAC7F,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAMD,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAChD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAyB,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACjE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC3D,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAe;IACzD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAwC,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC5F,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAExF,4EAA4E;IAC5E,6EAA6E;IAC7E,+EAA+E;IAC/E,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,OAAO,EAAE,OAAO,EAAE,yBAAyB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,WAAW,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IACD,4EAA4E;IAC5E,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC;IAChD,IAAI,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACR,+DAA+D;QAChE,CAAC;IACF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAC7E,CAAC;AAOD,MAAM,UAAU,mBAAmB,CAAC,MAAe;IAClD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAwC,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC5F,OAAO,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC;QACtC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACvB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;AAC/D,CAAC"}

package/dist/core/provider-ops.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Provider-key removal behind the `provider.remove` gateway RPC.
+ *
+ * The genuine gap: `add-provider` adds a key, but there was NO way to REMOVE one
+ * over the gateway — keys live in `auth-profiles.json` (not config, so config.set
+ * can't reach them) and no tool exposes removal. This closes it. Operator-scoped
+ * per-agent (no per-session guard — allowlisted).
+ */
+export interface ProviderRemoveResult {
+    ok: boolean;
+    providerId: string;
+    agentId: string;
+    removed: number;
+    reason?: string;
+}
+export declare function handleProviderRemove(params: unknown): ProviderRemoveResult;
+//# sourceMappingURL=provider-ops.d.ts.map

package/dist/core/provider-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-ops.d.ts","sourceRoot":"","sources":["../../src/core/provider-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,oBAAoB,CAe1E"}

package/dist/core/provider-ops.js

@@ -0,0 +1,29 @@
+/**
+ * Provider-key removal behind the `provider.remove` gateway RPC.
+ *
+ * The genuine gap: `add-provider` adds a key, but there was NO way to REMOVE one
+ * over the gateway — keys live in `auth-profiles.json` (not config, so config.set
+ * can't reach them) and no tool exposes removal. This closes it. Operator-scoped
+ * per-agent (no per-session guard — allowlisted).
+ */
+import { readProfiles, writeProfiles } from "../auth/profiles.js";
+import { DEFAULT_AGENT_ID } from "../config/paths.js";
+export function handleProviderRemove(params) {
+    const p = (params ?? {});
+    const providerId = (p.providerId ?? "").trim().toLowerCase();
+    const agentId = (p.agentId ?? "").trim() || DEFAULT_AGENT_ID;
+    if (!providerId)
+        return { ok: false, providerId, agentId, removed: 0, reason: "missing 'providerId'" };
+    const file = readProfiles(agentId);
+    let removed = 0;
+    for (const [key, profile] of Object.entries(file.profiles)) {
+        if ((profile.provider ?? "").trim().toLowerCase() === providerId) {
+            delete file.profiles[key];
+            removed++;
+        }
+    }
+    if (removed > 0)
+        writeProfiles(agentId, file);
+    return { ok: removed > 0, providerId, agentId, removed, ...(removed === 0 ? { reason: "no key found for that provider" } : {}) };
+}
+//# sourceMappingURL=provider-ops.js.map

package/dist/core/provider-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-ops.js","sourceRoot":"","sources":["../../src/core/provider-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAStD,MAAM,UAAU,oBAAoB,CAAC,MAAe;IACnD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA8C,CAAC;IACtE,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;IAC7D,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACvG,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC;QAAE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAClI,CAAC"}

package/dist/core/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/core/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AA0QH,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAUzD,MAAM,WAAW,aAAa;IAC7B,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AA8FD,wBAAsB,WAAW,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAwKjF"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/core/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAySH,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAUzD,MAAM,WAAW,aAAa;IAC7B,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AA8FD,wBAAsB,WAAW,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAwKjF"}

package/dist/core/server.js

@@ -134,6 +134,18 @@ import { getBrigadeWorkspaceDir, loadConfig, saveConfig } from "./config.js";
 import { mutateConfigAtomic } from "../config/io.js";
 import { acquireGatewayLock } from "./gateway-lock.js";
 import { clearHeartbeatFile, clearPidFile, writeHeartbeatFile, writePidFile } from "./gateway-probe.js";
+import { extractToken, matchesAnyToken, resolveGatewayAuth } from "./gateway-auth.js";
+import { handleConfigGet, handleConfigList, handleConfigSchema, handleConfigSet, handleConfigUnset, handleConfigValidate, } from "./config-ops.js";
+import { handleExecAllow, handleExecAllowPattern, handleExecDenyTest, handleExecList, handleExecRemove, } from "./exec-ops.js";
+import { handleAgentsBind, handleAgentsBindings, handleAgentsUnbind } from "./agents-ops.js";
+import { handlePairingApprove, handlePairingList, handlePairingRevoke } from "./pairing-ops.js";
+import { handleSessionsCleanup } from "./sessions-ops.js";
+import { handleMemoryManage, handleMemoryWrite } from "./memory-ops.js";
+import { handleAgentsAdd, handleAgentsDelete, handleAgentsSetIdentity } from "./agents-crud-ops.js";
+import { handleSkillsCreate, handleSkillsDelete, handleSkillsWriteFile } from "./skills-ops.js";
+import { handleChannelsAllowAdd, handleChannelsAllowList, handleChannelsAllowRemove, handleChannelsConnect, handleChannelsDisconnect, } from "./channels-ops.js";
+import { handleProviderRemove } from "./provider-ops.js";
+import { handleComposio, handleOauth } from "./integrations-ops.js";
 // Persist a model selection to brigade.json's new wizard-shape (the lifted
 // code expected the older flat `defaultProvider`/`defaultModelId` fields).
 // Writes through the same `agents.defaults.{provider, model.primary}` path
@@ -1441,7 +1453,26 @@ async function continueBoot(args) {
     // value the handshake's `HelloOk.policy.maxBufferedBytes` field advertises;
     // at 2× the payload cap a client this far behind is a stuck/slow consumer.
     const MAX_WS_BUFFERED_BYTES = 64 * 1024 * 1024; // 64 MiB
-    const wss = new WebSocketServer({ server: httpServer, maxPayload: MAX_WS_PAYLOAD_BYTES });
+    // Optional, opt-in gateway authentication (see core/gateway-auth.ts).
+    // DEFAULT — no tokens configured — resolves to `required:false`, so the
+    // gateway stays unauthenticated + localhost-only exactly as before; this
+    // feature NEVER changes behaviour until the operator sets
+    // `gateway.auth.tokens` (or the BRIGADE_GATEWAY_TOKENS env var). When tokens
+    // ARE present we install a `verifyClient` gate that rejects the WS upgrade
+    // with 401 unless a valid token rides in via `Authorization: Bearer`,
+    // `x-brigade-token`, or `?token=`. We gate ONLY the WS control surface (every
+    // connection is granted operator scope) — NOT the HTTP routes, which carry
+    // inbound channel webhooks that must stay reachable. Resolved once at boot;
+    // token changes take effect on the next gateway start.
+    const gatewayAuth = resolveGatewayAuth(loadConfig().gateway?.auth, process.env);
+    const wssOptions = { server: httpServer, maxPayload: MAX_WS_PAYLOAD_BYTES };
+    if (gatewayAuth.required) {
+        wssOptions.verifyClient = (info) => matchesAnyToken(gatewayAuth.tokens, extractToken(info.req.url, info.req.headers));
+    }
+    const wss = new WebSocketServer(wssOptions);
+    if (gatewayAuth.required) {
+        bootLog(`authentication enabled — clients must present a valid token (${gatewayAuth.tokens.length} configured)`);
+    }
     // `WebSocketServer` re-emits errors from the underlying httpServer (and
     // can emit its own — bad upgrade frame, etc). With NO 'error' listener on
     // wss, Node's EventEmitter throws the error, crashing the process with an
@@ -4073,6 +4104,86 @@ async function continueBoot(args) {
     disposeHandlers.push(registerGatewayHandler("org.snapshot", (_params) => handleOrgSnapshot(undefined, {
         loadConfig: () => loadConfig(),
     })));
+    // `config.*` — operator-level config CRUD over the wire (the `brigade
+    // config` CLI, reachable from a remote client). Path/value/redact shape:
+    // never session-targeted, so the guard-sweep correctly needs no per-session
+    // access check. Reads/writes go through the mode-aware loadConfig/saveConfig,
+    // so this works in filesystem AND Convex mode.
+    disposeHandlers.push(registerGatewayHandler("config.get", handleConfigGet));
+    disposeHandlers.push(registerGatewayHandler("config.set", handleConfigSet));
+    disposeHandlers.push(registerGatewayHandler("config.unset", handleConfigUnset));
+    disposeHandlers.push(registerGatewayHandler("config.list", handleConfigList));
+    disposeHandlers.push(registerGatewayHandler("config.schema", handleConfigSchema));
+    disposeHandlers.push(registerGatewayHandler("config.validate", handleConfigValidate));
+    // `exec.*` — operator-level exec-approval allowlist CRUD (the `brigade exec`
+    // CLI over the wire). Per-agent + operator-scoped (the operator manages
+    // their OWN agents' bash-approval allowlist), the same posture as the
+    // allowlisted exec-allow-all / exec-grant-skill RPCs — no per-session guard
+    // (see ALLOWLIST_NO_GUARD_NEEDED in server.guard-sweep.test.ts). The
+    // hard-deny safety net in exec-approvals.ts still applies on every allow.
+    disposeHandlers.push(registerGatewayHandler("exec.list", handleExecList));
+    disposeHandlers.push(registerGatewayHandler("exec.allow", handleExecAllow));
+    disposeHandlers.push(registerGatewayHandler("exec.allow-pattern", handleExecAllowPattern));
+    disposeHandlers.push(registerGatewayHandler("exec.remove", handleExecRemove));
+    disposeHandlers.push(registerGatewayHandler("exec.deny-test", handleExecDenyTest));
+    // `agents.*` — operator-level routing-binding management (which agent owns
+    // which channel/account). The genuine no-other-path gap: agent add/delete/
+    // set-identity are already reachable via the `manage_agent` tool, but
+    // bindings had no remote path. Operator-scoped config mutation, no per-
+    // session guard (allowlisted in server.guard-sweep.test.ts).
+    disposeHandlers.push(registerGatewayHandler("agents.bindings", handleAgentsBindings));
+    disposeHandlers.push(registerGatewayHandler("agents.bind", handleAgentsBind));
+    disposeHandlers.push(registerGatewayHandler("agents.unbind", handleAgentsUnbind));
+    // `pairing.*` — operator-level channel pairing (approve/revoke strangers who
+    // DM the bot). Per-channel + operator-scoped, no per-session guard. The RPCs
+    // require an explicit channel (a client gets the channel list from
+    // system.capabilities), unlike the CLI's single-channel auto-pick.
+    disposeHandlers.push(registerGatewayHandler("pairing.list", handlePairingList));
+    disposeHandlers.push(registerGatewayHandler("pairing.approve", handlePairingApprove));
+    disposeHandlers.push(registerGatewayHandler("pairing.revoke", handlePairingRevoke));
+    // `sessions.cleanup` — operator maintenance: delete an agent's stale idle
+    // transcript files (the gateway regenerates the store entry on next access).
+    // NOT session-content access (unlike sessions.list/history), so no per-
+    // session guard (allowlisted in server.guard-sweep.test.ts).
+    disposeHandlers.push(registerGatewayHandler("sessions.cleanup", handleSessionsCleanup));
+    // `memory.*` — Tideline write + governance (write_memory / manage_memory).
+    // Memory lives in facts.jsonl (NOT config), so config.set can't reach it;
+    // these are the only typed remote path to MUTATE memory (read is covered by
+    // memory-query / memory-graph). Operator-scoped owner origin, no per-session
+    // guard (allowlisted in server.guard-sweep.test.ts).
+    disposeHandlers.push(registerGatewayHandler("memory.write", handleMemoryWrite));
+    disposeHandlers.push(registerGatewayHandler("memory.manage", handleMemoryManage));
+    // agents.add/delete/set-identity — agent CRUD (reuses the manage_agent tool,
+    // which wraps `brigade agents add/delete/set-identity`). Seeds/soft-deletes a
+    // workspace, so config.set alone can't do it. Operator-scoped (allowlisted).
+    disposeHandlers.push(registerGatewayHandler("agents.add", handleAgentsAdd));
+    disposeHandlers.push(registerGatewayHandler("agents.delete", handleAgentsDelete));
+    disposeHandlers.push(registerGatewayHandler("agents.set-identity", handleAgentsSetIdentity));
+    // skills.create/delete/write-file — skill authoring (reuses the manage_skill
+    // tool). SKILL.md files on disk, not config. (status/install/update already
+    // cover read/install/enable.) Operator-scoped (allowlisted).
+    disposeHandlers.push(registerGatewayHandler("skills.create", handleSkillsCreate));
+    disposeHandlers.push(registerGatewayHandler("skills.delete", handleSkillsDelete));
+    disposeHandlers.push(registerGatewayHandler("skills.write-file", handleSkillsWriteFile));
+    // channels.* — LIVE connect/disconnect (runtime adapter via the global
+    // channel manager) + DM allow-from (a per-channel file store, not config).
+    // Channel enable/disable/policy are already config.set-reachable. Operator-
+    // scoped (allowlisted). connect reuses the owner-scoped connect_channel tool.
+    disposeHandlers.push(registerGatewayHandler("channels.connect", handleChannelsConnect));
+    disposeHandlers.push(registerGatewayHandler("channels.disconnect", handleChannelsDisconnect));
+    disposeHandlers.push(registerGatewayHandler("channels.allow-add", handleChannelsAllowAdd));
+    disposeHandlers.push(registerGatewayHandler("channels.allow-remove", handleChannelsAllowRemove));
+    disposeHandlers.push(registerGatewayHandler("channels.allow-list", handleChannelsAllowList));
+    // provider.remove — delete a provider key (auth-profiles.json, not config;
+    // add-provider exists, removal had no gateway path). Operator-scoped.
+    disposeHandlers.push(registerGatewayHandler("provider.remove", handleProviderRemove));
+    // composio + oauth — integrations. `composio` is remote-clean (Composio
+    // hosts the OAuth callback; the gateway hands over a click-link + polls).
+    // `oauth` is the DIY loopback flow (callback on the gateway host — completes
+    // only for a local/tunneled operator; status/token work remotely). Both
+    // reuse the owner-scoped tools. Operator-scoped (allowlisted).
+    disposeHandlers.push(registerGatewayHandler("composio", handleComposio));
+    disposeHandlers.push(registerGatewayHandler("oauth", handleOauth));
     // Wave O0.8 GAP 11 — opt the session inbox into JSONL persistence at
     // gateway boot. The disk write surface defaults off so the existing
     // unit-test fleet (which doesn't tempdir-isolate ~/.brigade) keeps