@spinabot/brigade 1.13.0 → 1.15.0

package/dist/core/integrations-ops.js

@@ -0,0 +1,40 @@
+/**
+ * Integration control behind the `composio` and `oauth` gateway RPCs — the
+ * Composio connector (1,000+ apps) and the DIY OAuth-2 authorize flow, reachable
+ * from a remote client.
+ *
+ * Both reuse the owner-scoped tools (ctx-free execute; owner-gating is a session
+ * wrapper). Operator-scoped (allowlisted in the guard-sweep). Action-based,
+ * mirroring the tools 1:1.
+ *
+ * REMOTE NOTES:
+ *  - `composio` is fully remote-capable: Composio HOSTS the OAuth callback, so
+ *    `connect` returns a click-link the operator opens anywhere and the gateway
+ *    just polls `status` — no gateway loopback involved.
+ *  - `oauth` is the DIY loopback flow: `start` opens a 127.0.0.1 listener ON THE
+ *    GATEWAY HOST with a loopback redirect_uri, so the round-trip only completes
+ *    when the operator's browser can reach the GATEWAY's loopback (local to the
+ *    gateway, or tunneled). A pure-remote browser would hit its OWN loopback.
+ *    `status`/`token` work remotely. For remote app integrations prefer
+ *    `composio`.
+ */
+import { DEFAULT_AGENT_ID } from "../agents/routing/session-key.js";
+import { makeComposioTool } from "../agents/tools/composio-tool.js";
+import { makeOAuthAuthorizeTool } from "../agents/tools/oauth-authorize-tool.js";
+/** `composio` — Composio connector: set-key/apps/connect/status/search/execute/disconnect/refresh. */
+export async function handleComposio(params) {
+    const p = (params ?? {});
+    const agentId = (p.agentId ?? "").trim() || DEFAULT_AGENT_ID;
+    const tool = makeComposioTool({ agentId });
+    const res = await tool.execute("gateway", params);
+    return res.details;
+}
+/** `oauth` — DIY OAuth-2 authorize: start/await/cancel/status/token (see loopback caveat above). */
+export async function handleOauth(params) {
+    const p = (params ?? {});
+    const agentId = (p.agentId ?? "").trim() || DEFAULT_AGENT_ID;
+    const tool = makeOAuthAuthorizeTool({ agentId });
+    const res = await tool.execute("gateway", params);
+    return res.details;
+}
+//# sourceMappingURL=integrations-ops.js.map

package/dist/core/integrations-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations-ops.js","sourceRoot":"","sources":["../../src/core/integrations-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAEjF,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAe;IACnD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAyB,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;IAC7D,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAe,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC,OAAO,CAAC;AACpB,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAe;IAChD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAyB,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;IAC7D,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAe,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC,OAAO,CAAC;AACpB,CAAC"}

package/dist/core/memory-ops.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Memory (Tideline) write + governance behind the `memory.*` gateway RPCs — the
+ * write_memory + manage_memory surface, reachable from a remote client.
+ *
+ * Memory lives in `facts.jsonl` (a store, NOT brigade.json), so `config.set`
+ * cannot reach it — these RPCs are the only typed remote path to MUTATE memory.
+ * READ is already covered by the `memory-query` (list/search/inspect/stats) and
+ * `memory-graph` RPCs.
+ *
+ * OPERATOR-SCOPED: operates on the OWNER origin over the agent's workspace,
+ * exactly like the tools (filesystem AND Convex modes). Reuses the SAME
+ * write_memory / manage_memory tool logic — their `execute()` is pure (owner-
+ * gating is a session wrapper, not inside execute), so invoking them with an
+ * owner scope from the gateway is correct and byte-identical to a turn.
+ */
+/** `memory.write` — persist a durable fact. Params mirror the write_memory tool. */
+export declare function handleMemoryWrite(params: unknown): Promise<unknown>;
+/** `memory.manage` — dream/purge/inspect/export/retention/vault/retract/restore/relink. */
+export declare function handleMemoryManage(params: unknown): Promise<unknown>;
+//# sourceMappingURL=memory-ops.d.ts.map

package/dist/core/memory-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-ops.d.ts","sourceRoot":"","sources":["../../src/core/memory-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAYH,oFAAoF;AACpF,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAMzE;AAED,2FAA2F;AAC3F,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAM1E"}

package/dist/core/memory-ops.js

@@ -0,0 +1,40 @@
+/**
+ * Memory (Tideline) write + governance behind the `memory.*` gateway RPCs — the
+ * write_memory + manage_memory surface, reachable from a remote client.
+ *
+ * Memory lives in `facts.jsonl` (a store, NOT brigade.json), so `config.set`
+ * cannot reach it — these RPCs are the only typed remote path to MUTATE memory.
+ * READ is already covered by the `memory-query` (list/search/inspect/stats) and
+ * `memory-graph` RPCs.
+ *
+ * OPERATOR-SCOPED: operates on the OWNER origin over the agent's workspace,
+ * exactly like the tools (filesystem AND Convex modes). Reuses the SAME
+ * write_memory / manage_memory tool logic — their `execute()` is pure (owner-
+ * gating is a session wrapper, not inside execute), so invoking them with an
+ * owner scope from the gateway is correct and byte-identical to a turn.
+ */
+import { FactStore } from "../agents/memory/records.js";
+import { makeManageMemoryTool } from "../agents/tools/manage-memory-tool.js";
+import { makeWriteMemoryTool } from "../agents/tools/memory-tools.js";
+import { DEFAULT_AGENT_ID, resolveAgentWorkspaceDir } from "../config/paths.js";
+function workspaceFor(agentId) {
+    const id = (agentId ?? "").trim() || DEFAULT_AGENT_ID;
+    return resolveAgentWorkspaceDir(id);
+}
+/** `memory.write` — persist a durable fact. Params mirror the write_memory tool. */
+export async function handleMemoryWrite(params) {
+    const p = (params ?? {});
+    const store = new FactStore(workspaceFor(p.agentId));
+    const tool = makeWriteMemoryTool(store, { senderIsOwner: true });
+    const res = await tool.execute("gateway", params);
+    return res.details;
+}
+/** `memory.manage` — dream/purge/inspect/export/retention/vault/retract/restore/relink. */
+export async function handleMemoryManage(params) {
+    const p = (params ?? {});
+    const agentId = (p.agentId ?? "").trim() || DEFAULT_AGENT_ID;
+    const tool = makeManageMemoryTool(workspaceFor(agentId), { agentId });
+    const res = await tool.execute("gateway", params);
+    return res.details;
+}
+//# sourceMappingURL=memory-ops.js.map

package/dist/core/memory-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-ops.js","sourceRoot":"","sources":["../../src/core/memory-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAEhF,SAAS,YAAY,CAAC,OAAgB;IACrC,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;IACtD,OAAO,wBAAwB,CAAC,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAe;IACtD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAyB,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAe,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC,OAAO,CAAC;AACpB,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAe;IACvD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAyB,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;IAC7D,MAAM,IAAI,GAAG,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAe,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC,OAAO,CAAC;AACpB,CAAC"}

package/dist/core/pairing-ops.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Channel pairing operations behind the `pairing.*` gateway RPCs — the
+ * `brigade pairing <list|approve|revoke>` surface, reachable from a remote
+ * client.
+ *
+ * OPERATOR-SCOPED channel access control (approve/deny strangers who DM the
+ * bot). Per-channel, never a per-session target, so no per-session guard. The
+ * RPCs REQUIRE an explicit `channel` (no CLI-style auto-pick) — a client knows
+ * the channel from `system.capabilities`. Reuses the SAME access-control
+ * primitives the CLI calls, including the owner-bootstrap + in-channel notify
+ * on approve.
+ */
+import { readPendingPairings } from "../agents/channels/access-control/index.js";
+export type PairingListResult = {
+    channel: string;
+    pending: ReturnType<typeof readPendingPairings>;
+};
+export declare function handlePairingList(params: unknown): PairingListResult;
+export interface PairingApproveResult {
+    ok: boolean;
+    channel: string;
+    sender?: string;
+    owner?: boolean;
+    reason?: string;
+}
+export declare function handlePairingApprove(params: unknown): Promise<PairingApproveResult>;
+export interface PairingRevokeResult {
+    ok: boolean;
+    channel: string;
+    reason?: string;
+}
+export declare function handlePairingRevoke(params: unknown): PairingRevokeResult;
+//# sourceMappingURL=pairing-ops.d.ts.map

package/dist/core/pairing-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing-ops.d.ts","sourceRoot":"","sources":["../../src/core/pairing-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAGN,mBAAmB,EAGnB,MAAM,4CAA4C,CAAC;AAqBpD,MAAM,MAAM,iBAAiB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CAChD,CAAC;AACF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,iBAAiB,CAKpE;AAED,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA0BzF;AAED,MAAM,WAAW,mBAAmB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,mBAAmB,CAQxE"}

package/dist/core/pairing-ops.js

@@ -0,0 +1,78 @@
+/**
+ * Channel pairing operations behind the `pairing.*` gateway RPCs — the
+ * `brigade pairing <list|approve|revoke>` surface, reachable from a remote
+ * client.
+ *
+ * OPERATOR-SCOPED channel access control (approve/deny strangers who DM the
+ * bot). Per-channel, never a per-session target, so no per-session guard. The
+ * RPCs REQUIRE an explicit `channel` (no CLI-style auto-pick) — a client knows
+ * the channel from `system.capabilities`. Reuses the SAME access-control
+ * primitives the CLI calls, including the owner-bootstrap + in-channel notify
+ * on approve.
+ */
+import { approvePairingCode, readChannelOwner, readPendingPairings, revokePairingCode, setChannelOwner, } from "../agents/channels/access-control/index.js";
+import { BUNDLED_MODULES, loadModules } from "../agents/extensions/index.js";
+import { DEFAULT_AGENT_ID, resolveAgentWorkspaceDir } from "../config/paths.js";
+import { loadConfig } from "./config.js";
+/** Best-effort adapter lookup — only `approve` needs it (owner-bootstrap + notify). */
+async function resolveAdapter(channel) {
+    try {
+        const config = loadConfig();
+        const workspaceDir = resolveAgentWorkspaceDir(DEFAULT_AGENT_ID);
+        const registry = await loadModules({
+            modules: BUNDLED_MODULES,
+            meta: { agentId: DEFAULT_AGENT_ID, workspaceDir, cwd: workspaceDir, config: config },
+        });
+        return registry.channels.find((c) => c.id === channel);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function handlePairingList(params) {
+    const p = (params ?? {});
+    const channel = (p.channel ?? "").trim();
+    if (!channel)
+        throw new Error("pairing.list: missing 'channel'");
+    return { channel, pending: readPendingPairings(channel) };
+}
+export async function handlePairingApprove(params) {
+    const p = (params ?? {});
+    const channel = (p.channel ?? "").trim();
+    const code = (p.code ?? "").trim();
+    if (!channel || !code)
+        return { ok: false, channel, reason: "missing 'channel' or 'code'" };
+    const approved = approvePairingCode(channel, code);
+    if (!approved)
+        return { ok: false, channel, reason: "unknown or expired pairing code" };
+    // Owner bootstrap (bot-separate channels like Telegram): the first approved
+    // sender becomes the recorded owner so they can run admin commands. Reaching
+    // this RPC already proves operator access. Never overwrites an existing owner.
+    let becameOwner = false;
+    const adapter = await resolveAdapter(channel);
+    if (adapter?.pairing?.botIsSeparateFromOperator && !readChannelOwner(channel)) {
+        becameOwner = setChannelOwner(channel, approved.senderId);
+    }
+    // Best-effort in-channel "you're approved" reply when the adapter wires it.
+    const notify = adapter?.pairing?.notifyApproval;
+    if (notify) {
+        try {
+            await notify({ senderId: approved.senderId, senderName: approved.senderName });
+        }
+        catch {
+            /* non-fatal — the approval already landed in the allow-list */
+        }
+    }
+    return { ok: true, channel, sender: approved.senderId, owner: becameOwner };
+}
+export function handlePairingRevoke(params) {
+    const p = (params ?? {});
+    const channel = (p.channel ?? "").trim();
+    const code = (p.code ?? "").trim();
+    if (!channel || !code)
+        return { ok: false, channel, reason: "missing 'channel' or 'code'" };
+    return revokePairingCode(channel, code)
+        ? { ok: true, channel }
+        : { ok: false, channel, reason: "no matching pending code" };
+}
+//# sourceMappingURL=pairing-ops.js.map

package/dist/core/pairing-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing-ops.js","sourceRoot":"","sources":["../../src/core/pairing-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACN,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,GACf,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE7E,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,uFAAuF;AACvF,KAAK,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC;YAClC,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,MAAe,EAAE;SAC7F,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAMD,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAChD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAyB,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACjE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC3D,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAe;IACzD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAwC,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC5F,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAExF,4EAA4E;IAC5E,6EAA6E;IAC7E,+EAA+E;IAC/E,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,OAAO,EAAE,OAAO,EAAE,yBAAyB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,WAAW,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IACD,4EAA4E;IAC5E,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC;IAChD,IAAI,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACR,+DAA+D;QAChE,CAAC;IACF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAC7E,CAAC;AAOD,MAAM,UAAU,mBAAmB,CAAC,MAAe;IAClD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAwC,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC5F,OAAO,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC;QACtC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACvB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;AAC/D,CAAC"}

package/dist/core/provider-ops.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Provider-key removal behind the `provider.remove` gateway RPC.
+ *
+ * The genuine gap: `add-provider` adds a key, but there was NO way to REMOVE one
+ * over the gateway — keys live in `auth-profiles.json` (not config, so config.set
+ * can't reach them) and no tool exposes removal. This closes it. Operator-scoped
+ * per-agent (no per-session guard — allowlisted).
+ */
+export interface ProviderRemoveResult {
+    ok: boolean;
+    providerId: string;
+    agentId: string;
+    removed: number;
+    reason?: string;
+}
+export declare function handleProviderRemove(params: unknown): ProviderRemoveResult;
+//# sourceMappingURL=provider-ops.d.ts.map

package/dist/core/provider-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-ops.d.ts","sourceRoot":"","sources":["../../src/core/provider-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,oBAAoB,CAe1E"}

package/dist/core/provider-ops.js

@@ -0,0 +1,29 @@
+/**
+ * Provider-key removal behind the `provider.remove` gateway RPC.
+ *
+ * The genuine gap: `add-provider` adds a key, but there was NO way to REMOVE one
+ * over the gateway — keys live in `auth-profiles.json` (not config, so config.set
+ * can't reach them) and no tool exposes removal. This closes it. Operator-scoped
+ * per-agent (no per-session guard — allowlisted).
+ */
+import { readProfiles, writeProfiles } from "../auth/profiles.js";
+import { DEFAULT_AGENT_ID } from "../config/paths.js";
+export function handleProviderRemove(params) {
+    const p = (params ?? {});
+    const providerId = (p.providerId ?? "").trim().toLowerCase();
+    const agentId = (p.agentId ?? "").trim() || DEFAULT_AGENT_ID;
+    if (!providerId)
+        return { ok: false, providerId, agentId, removed: 0, reason: "missing 'providerId'" };
+    const file = readProfiles(agentId);
+    let removed = 0;
+    for (const [key, profile] of Object.entries(file.profiles)) {
+        if ((profile.provider ?? "").trim().toLowerCase() === providerId) {
+            delete file.profiles[key];
+            removed++;
+        }
+    }
+    if (removed > 0)
+        writeProfiles(agentId, file);
+    return { ok: removed > 0, providerId, agentId, removed, ...(removed === 0 ? { reason: "no key found for that provider" } : {}) };
+}
+//# sourceMappingURL=provider-ops.js.map

package/dist/core/provider-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-ops.js","sourceRoot":"","sources":["../../src/core/provider-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAStD,MAAM,UAAU,oBAAoB,CAAC,MAAe;IACnD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA8C,CAAC;IACtE,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;IAC7D,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACvG,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC;QAAE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAClI,CAAC"}

package/dist/core/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/core/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AA2QH,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAUzD,MAAM,WAAW,aAAa;IAC7B,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AA8FD,wBAAsB,WAAW,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAwKjF"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/core/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AA8SH,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAUzD,MAAM,WAAW,aAAa;IAC7B,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AA8FD,wBAAsB,WAAW,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAwKjF"}