@spinabot/brigade 1.13.0 → 1.14.0

package/dist/core/pairing-ops.js

@@ -0,0 +1,78 @@
+/**
+ * Channel pairing operations behind the `pairing.*` gateway RPCs — the
+ * `brigade pairing <list|approve|revoke>` surface, reachable from a remote
+ * client.
+ *
+ * OPERATOR-SCOPED channel access control (approve/deny strangers who DM the
+ * bot). Per-channel, never a per-session target, so no per-session guard. The
+ * RPCs REQUIRE an explicit `channel` (no CLI-style auto-pick) — a client knows
+ * the channel from `system.capabilities`. Reuses the SAME access-control
+ * primitives the CLI calls, including the owner-bootstrap + in-channel notify
+ * on approve.
+ */
+import { approvePairingCode, readChannelOwner, readPendingPairings, revokePairingCode, setChannelOwner, } from "../agents/channels/access-control/index.js";
+import { BUNDLED_MODULES, loadModules } from "../agents/extensions/index.js";
+import { DEFAULT_AGENT_ID, resolveAgentWorkspaceDir } from "../config/paths.js";
+import { loadConfig } from "./config.js";
+/** Best-effort adapter lookup — only `approve` needs it (owner-bootstrap + notify). */
+async function resolveAdapter(channel) {
+    try {
+        const config = loadConfig();
+        const workspaceDir = resolveAgentWorkspaceDir(DEFAULT_AGENT_ID);
+        const registry = await loadModules({
+            modules: BUNDLED_MODULES,
+            meta: { agentId: DEFAULT_AGENT_ID, workspaceDir, cwd: workspaceDir, config: config },
+        });
+        return registry.channels.find((c) => c.id === channel);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function handlePairingList(params) {
+    const p = (params ?? {});
+    const channel = (p.channel ?? "").trim();
+    if (!channel)
+        throw new Error("pairing.list: missing 'channel'");
+    return { channel, pending: readPendingPairings(channel) };
+}
+export async function handlePairingApprove(params) {
+    const p = (params ?? {});
+    const channel = (p.channel ?? "").trim();
+    const code = (p.code ?? "").trim();
+    if (!channel || !code)
+        return { ok: false, channel, reason: "missing 'channel' or 'code'" };
+    const approved = approvePairingCode(channel, code);
+    if (!approved)
+        return { ok: false, channel, reason: "unknown or expired pairing code" };
+    // Owner bootstrap (bot-separate channels like Telegram): the first approved
+    // sender becomes the recorded owner so they can run admin commands. Reaching
+    // this RPC already proves operator access. Never overwrites an existing owner.
+    let becameOwner = false;
+    const adapter = await resolveAdapter(channel);
+    if (adapter?.pairing?.botIsSeparateFromOperator && !readChannelOwner(channel)) {
+        becameOwner = setChannelOwner(channel, approved.senderId);
+    }
+    // Best-effort in-channel "you're approved" reply when the adapter wires it.
+    const notify = adapter?.pairing?.notifyApproval;
+    if (notify) {
+        try {
+            await notify({ senderId: approved.senderId, senderName: approved.senderName });
+        }
+        catch {
+            /* non-fatal — the approval already landed in the allow-list */
+        }
+    }
+    return { ok: true, channel, sender: approved.senderId, owner: becameOwner };
+}
+export function handlePairingRevoke(params) {
+    const p = (params ?? {});
+    const channel = (p.channel ?? "").trim();
+    const code = (p.code ?? "").trim();
+    if (!channel || !code)
+        return { ok: false, channel, reason: "missing 'channel' or 'code'" };
+    return revokePairingCode(channel, code)
+        ? { ok: true, channel }
+        : { ok: false, channel, reason: "no matching pending code" };
+}
+//# sourceMappingURL=pairing-ops.js.map

package/dist/core/pairing-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing-ops.js","sourceRoot":"","sources":["../../src/core/pairing-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACN,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,GACf,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE7E,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,uFAAuF;AACvF,KAAK,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC;YAClC,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,MAAe,EAAE;SAC7F,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAMD,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAChD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAyB,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACjE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC3D,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAe;IACzD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAwC,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC5F,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAExF,4EAA4E;IAC5E,6EAA6E;IAC7E,+EAA+E;IAC/E,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,OAAO,EAAE,OAAO,EAAE,yBAAyB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,WAAW,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IACD,4EAA4E;IAC5E,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC;IAChD,IAAI,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACR,+DAA+D;QAChE,CAAC;IACF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAC7E,CAAC;AAOD,MAAM,UAAU,mBAAmB,CAAC,MAAe;IAClD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAwC,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC5F,OAAO,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC;QACtC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACvB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;AAC/D,CAAC"}

package/dist/core/provider-ops.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Provider-key removal behind the `provider.remove` gateway RPC.
+ *
+ * The genuine gap: `add-provider` adds a key, but there was NO way to REMOVE one
+ * over the gateway — keys live in `auth-profiles.json` (not config, so config.set
+ * can't reach them) and no tool exposes removal. This closes it. Operator-scoped
+ * per-agent (no per-session guard — allowlisted).
+ */
+export interface ProviderRemoveResult {
+    ok: boolean;
+    providerId: string;
+    agentId: string;
+    removed: number;
+    reason?: string;
+}
+export declare function handleProviderRemove(params: unknown): ProviderRemoveResult;
+//# sourceMappingURL=provider-ops.d.ts.map

package/dist/core/provider-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-ops.d.ts","sourceRoot":"","sources":["../../src/core/provider-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,oBAAoB,CAe1E"}

package/dist/core/provider-ops.js

@@ -0,0 +1,29 @@
+/**
+ * Provider-key removal behind the `provider.remove` gateway RPC.
+ *
+ * The genuine gap: `add-provider` adds a key, but there was NO way to REMOVE one
+ * over the gateway — keys live in `auth-profiles.json` (not config, so config.set
+ * can't reach them) and no tool exposes removal. This closes it. Operator-scoped
+ * per-agent (no per-session guard — allowlisted).
+ */
+import { readProfiles, writeProfiles } from "../auth/profiles.js";
+import { DEFAULT_AGENT_ID } from "../config/paths.js";
+export function handleProviderRemove(params) {
+    const p = (params ?? {});
+    const providerId = (p.providerId ?? "").trim().toLowerCase();
+    const agentId = (p.agentId ?? "").trim() || DEFAULT_AGENT_ID;
+    if (!providerId)
+        return { ok: false, providerId, agentId, removed: 0, reason: "missing 'providerId'" };
+    const file = readProfiles(agentId);
+    let removed = 0;
+    for (const [key, profile] of Object.entries(file.profiles)) {
+        if ((profile.provider ?? "").trim().toLowerCase() === providerId) {
+            delete file.profiles[key];
+            removed++;
+        }
+    }
+    if (removed > 0)
+        writeProfiles(agentId, file);
+    return { ok: removed > 0, providerId, agentId, removed, ...(removed === 0 ? { reason: "no key found for that provider" } : {}) };
+}
+//# sourceMappingURL=provider-ops.js.map

package/dist/core/provider-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-ops.js","sourceRoot":"","sources":["../../src/core/provider-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAStD,MAAM,UAAU,oBAAoB,CAAC,MAAe;IACnD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA8C,CAAC;IACtE,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;IAC7D,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACvG,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC;QAAE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAClI,CAAC"}

package/dist/core/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/core/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AA2QH,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAUzD,MAAM,WAAW,aAAa;IAC7B,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AA8FD,wBAAsB,WAAW,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAwKjF"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/core/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAySH,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAUzD,MAAM,WAAW,aAAa;IAC7B,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AA8FD,wBAAsB,WAAW,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAwKjF"}

package/dist/core/server.js

@@ -135,6 +135,17 @@ import { mutateConfigAtomic } from "../config/io.js";
 import { acquireGatewayLock } from "./gateway-lock.js";
 import { clearHeartbeatFile, clearPidFile, writeHeartbeatFile, writePidFile } from "./gateway-probe.js";
 import { extractToken, matchesAnyToken, resolveGatewayAuth } from "./gateway-auth.js";
+import { handleConfigGet, handleConfigList, handleConfigSchema, handleConfigSet, handleConfigUnset, handleConfigValidate, } from "./config-ops.js";
+import { handleExecAllow, handleExecAllowPattern, handleExecDenyTest, handleExecList, handleExecRemove, } from "./exec-ops.js";
+import { handleAgentsBind, handleAgentsBindings, handleAgentsUnbind } from "./agents-ops.js";
+import { handlePairingApprove, handlePairingList, handlePairingRevoke } from "./pairing-ops.js";
+import { handleSessionsCleanup } from "./sessions-ops.js";
+import { handleMemoryManage, handleMemoryWrite } from "./memory-ops.js";
+import { handleAgentsAdd, handleAgentsDelete, handleAgentsSetIdentity } from "./agents-crud-ops.js";
+import { handleSkillsCreate, handleSkillsDelete, handleSkillsWriteFile } from "./skills-ops.js";
+import { handleChannelsAllowAdd, handleChannelsAllowList, handleChannelsAllowRemove, handleChannelsConnect, handleChannelsDisconnect, } from "./channels-ops.js";
+import { handleProviderRemove } from "./provider-ops.js";
+import { handleComposio, handleOauth } from "./integrations-ops.js";
 // Persist a model selection to brigade.json's new wizard-shape (the lifted
 // code expected the older flat `defaultProvider`/`defaultModelId` fields).
 // Writes through the same `agents.defaults.{provider, model.primary}` path
@@ -4093,6 +4104,86 @@ async function continueBoot(args) {
     disposeHandlers.push(registerGatewayHandler("org.snapshot", (_params) => handleOrgSnapshot(undefined, {
         loadConfig: () => loadConfig(),
     })));
+    // `config.*` — operator-level config CRUD over the wire (the `brigade
+    // config` CLI, reachable from a remote client). Path/value/redact shape:
+    // never session-targeted, so the guard-sweep correctly needs no per-session
+    // access check. Reads/writes go through the mode-aware loadConfig/saveConfig,
+    // so this works in filesystem AND Convex mode.
+    disposeHandlers.push(registerGatewayHandler("config.get", handleConfigGet));
+    disposeHandlers.push(registerGatewayHandler("config.set", handleConfigSet));
+    disposeHandlers.push(registerGatewayHandler("config.unset", handleConfigUnset));
+    disposeHandlers.push(registerGatewayHandler("config.list", handleConfigList));
+    disposeHandlers.push(registerGatewayHandler("config.schema", handleConfigSchema));
+    disposeHandlers.push(registerGatewayHandler("config.validate", handleConfigValidate));
+    // `exec.*` — operator-level exec-approval allowlist CRUD (the `brigade exec`
+    // CLI over the wire). Per-agent + operator-scoped (the operator manages
+    // their OWN agents' bash-approval allowlist), the same posture as the
+    // allowlisted exec-allow-all / exec-grant-skill RPCs — no per-session guard
+    // (see ALLOWLIST_NO_GUARD_NEEDED in server.guard-sweep.test.ts). The
+    // hard-deny safety net in exec-approvals.ts still applies on every allow.
+    disposeHandlers.push(registerGatewayHandler("exec.list", handleExecList));
+    disposeHandlers.push(registerGatewayHandler("exec.allow", handleExecAllow));
+    disposeHandlers.push(registerGatewayHandler("exec.allow-pattern", handleExecAllowPattern));
+    disposeHandlers.push(registerGatewayHandler("exec.remove", handleExecRemove));
+    disposeHandlers.push(registerGatewayHandler("exec.deny-test", handleExecDenyTest));
+    // `agents.*` — operator-level routing-binding management (which agent owns
+    // which channel/account). The genuine no-other-path gap: agent add/delete/
+    // set-identity are already reachable via the `manage_agent` tool, but
+    // bindings had no remote path. Operator-scoped config mutation, no per-
+    // session guard (allowlisted in server.guard-sweep.test.ts).
+    disposeHandlers.push(registerGatewayHandler("agents.bindings", handleAgentsBindings));
+    disposeHandlers.push(registerGatewayHandler("agents.bind", handleAgentsBind));
+    disposeHandlers.push(registerGatewayHandler("agents.unbind", handleAgentsUnbind));
+    // `pairing.*` — operator-level channel pairing (approve/revoke strangers who
+    // DM the bot). Per-channel + operator-scoped, no per-session guard. The RPCs
+    // require an explicit channel (a client gets the channel list from
+    // system.capabilities), unlike the CLI's single-channel auto-pick.
+    disposeHandlers.push(registerGatewayHandler("pairing.list", handlePairingList));
+    disposeHandlers.push(registerGatewayHandler("pairing.approve", handlePairingApprove));
+    disposeHandlers.push(registerGatewayHandler("pairing.revoke", handlePairingRevoke));
+    // `sessions.cleanup` — operator maintenance: delete an agent's stale idle
+    // transcript files (the gateway regenerates the store entry on next access).
+    // NOT session-content access (unlike sessions.list/history), so no per-
+    // session guard (allowlisted in server.guard-sweep.test.ts).
+    disposeHandlers.push(registerGatewayHandler("sessions.cleanup", handleSessionsCleanup));
+    // `memory.*` — Tideline write + governance (write_memory / manage_memory).
+    // Memory lives in facts.jsonl (NOT config), so config.set can't reach it;
+    // these are the only typed remote path to MUTATE memory (read is covered by
+    // memory-query / memory-graph). Operator-scoped owner origin, no per-session
+    // guard (allowlisted in server.guard-sweep.test.ts).
+    disposeHandlers.push(registerGatewayHandler("memory.write", handleMemoryWrite));
+    disposeHandlers.push(registerGatewayHandler("memory.manage", handleMemoryManage));
+    // agents.add/delete/set-identity — agent CRUD (reuses the manage_agent tool,
+    // which wraps `brigade agents add/delete/set-identity`). Seeds/soft-deletes a
+    // workspace, so config.set alone can't do it. Operator-scoped (allowlisted).
+    disposeHandlers.push(registerGatewayHandler("agents.add", handleAgentsAdd));
+    disposeHandlers.push(registerGatewayHandler("agents.delete", handleAgentsDelete));
+    disposeHandlers.push(registerGatewayHandler("agents.set-identity", handleAgentsSetIdentity));
+    // skills.create/delete/write-file — skill authoring (reuses the manage_skill
+    // tool). SKILL.md files on disk, not config. (status/install/update already
+    // cover read/install/enable.) Operator-scoped (allowlisted).
+    disposeHandlers.push(registerGatewayHandler("skills.create", handleSkillsCreate));
+    disposeHandlers.push(registerGatewayHandler("skills.delete", handleSkillsDelete));
+    disposeHandlers.push(registerGatewayHandler("skills.write-file", handleSkillsWriteFile));
+    // channels.* — LIVE connect/disconnect (runtime adapter via the global
+    // channel manager) + DM allow-from (a per-channel file store, not config).
+    // Channel enable/disable/policy are already config.set-reachable. Operator-
+    // scoped (allowlisted). connect reuses the owner-scoped connect_channel tool.
+    disposeHandlers.push(registerGatewayHandler("channels.connect", handleChannelsConnect));
+    disposeHandlers.push(registerGatewayHandler("channels.disconnect", handleChannelsDisconnect));
+    disposeHandlers.push(registerGatewayHandler("channels.allow-add", handleChannelsAllowAdd));
+    disposeHandlers.push(registerGatewayHandler("channels.allow-remove", handleChannelsAllowRemove));
+    disposeHandlers.push(registerGatewayHandler("channels.allow-list", handleChannelsAllowList));
+    // provider.remove — delete a provider key (auth-profiles.json, not config;
+    // add-provider exists, removal had no gateway path). Operator-scoped.
+    disposeHandlers.push(registerGatewayHandler("provider.remove", handleProviderRemove));
+    // composio + oauth — integrations. `composio` is remote-clean (Composio
+    // hosts the OAuth callback; the gateway hands over a click-link + polls).
+    // `oauth` is the DIY loopback flow (callback on the gateway host — completes
+    // only for a local/tunneled operator; status/token work remotely). Both
+    // reuse the owner-scoped tools. Operator-scoped (allowlisted).
+    disposeHandlers.push(registerGatewayHandler("composio", handleComposio));
+    disposeHandlers.push(registerGatewayHandler("oauth", handleOauth));
     // Wave O0.8 GAP 11 — opt the session inbox into JSONL persistence at
     // gateway boot. The disk write surface defaults off so the existing
     // unit-test fleet (which doesn't tempdir-isolate ~/.brigade) keeps