agor-live 0.22.0 → 0.23.2

package/dist/daemon/mcp/tools/widgets.js

@@ -65,70 +65,7 @@ var init_executor_read_impersonation = __esm({
 });
 
 // src/mcp/tools/widgets.ts
-import { MessageRole as MessageRole2 } from "@agor/core/types";
-
-// src/utils/append-system-message.ts
-import { generateId, SessionRepository } from "@agor/core/db";
-import { MessageRole } from "@agor/core/types";
-async function appendSystemMessage(opts) {
-  const {
-    app,
-    db,
-    sessionId,
-    taskId,
-    content,
-    contentPreview,
-    type = "system",
-    role = MessageRole.SYSTEM,
-    metadata,
-    params
-  } = opts;
-  const index = await new SessionRepository(db).countMessages(sessionId);
-  const preview = contentPreview ?? (typeof content === "string" ? content.substring(0, 200) : "");
-  const message = {
-    message_id: generateId(),
-    session_id: sessionId,
-    task_id: taskId,
-    type,
-    role,
-    index,
-    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    content_preview: preview,
-    content,
-    ...metadata ? { metadata } : {}
-  };
-  const created = await app.service("messages").create(message, params ?? {});
-  return created;
-}
-
-// src/utils/session-tasks.ts
-import { EXECUTING_TASK_STATUSES, isTaskExecuting } from "@agor/core/types";
-function recencyKey(t) {
-  return new Date(t.started_at || t.created_at).getTime();
-}
-async function findTasksForSession(app, sessionId, params) {
-  const result = await app.service("tasks").find({
-    ...params ?? {},
-    // Merge defensively: spread params first, then force session_id so a
-    // caller-supplied params.query can never silently overwrite the filter.
-    query: {
-      ...params?.query,
-      session_id: sessionId,
-      $limit: params?.query?.$limit ?? 1e3
-    }
-  });
-  const tasks = Array.isArray(result) ? result : result.data;
-  return [...tasks].sort((a, b) => recencyKey(b) - recencyKey(a));
-}
-async function findHostTaskForSession(app, sessionId, params) {
-  const all = await findTasksForSession(app, sessionId, params);
-  if (all.length === 0) return void 0;
-  return all.find((t) => isTaskExecuting(t)) ?? all[0];
-}
-
-// src/widgets/env-vars/index.ts
-import { ENV_VAR_CONSTRAINTS, isEnvVarAllowed, validateEnvVar } from "@agor/core/config";
-import { BadRequest } from "@agor/core/feathers";
+import { getRequiredSecretFields as getRequiredSecretFields2, hasMinimumRole as hasMinimumRole5, MessageRole as MessageRole2, ROLES as ROLES6 } from "@agor/core/types";
 
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -14644,8 +14581,98 @@ function date4(params) {
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 config(en_default());
 
+// src/utils/append-system-message.ts
+import { generateId, SessionRepository } from "@agor/core/db";
+import { MessageRole } from "@agor/core/types";
+async function appendSystemMessage(opts) {
+  const {
+    app,
+    db,
+    sessionId,
+    taskId,
+    content,
+    contentPreview,
+    type = "system",
+    role = MessageRole.SYSTEM,
+    metadata,
+    params
+  } = opts;
+  const index = await new SessionRepository(db).countMessages(sessionId);
+  const preview = contentPreview ?? (typeof content === "string" ? content.substring(0, 200) : "");
+  const message = {
+    message_id: generateId(),
+    session_id: sessionId,
+    task_id: taskId,
+    type,
+    role,
+    index,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    content_preview: preview,
+    content,
+    ...metadata ? { metadata } : {}
+  };
+  const created = await app.service("messages").create(message, params ?? {});
+  return created;
+}
+
+// src/utils/session-tasks.ts
+import { EXECUTING_TASK_STATUSES, isTaskExecuting } from "@agor/core/types";
+function recencyKey(t) {
+  return new Date(t.started_at || t.created_at).getTime();
+}
+async function findTasksForSession(app, sessionId, params) {
+  const result = await app.service("tasks").find({
+    ...params ?? {},
+    // Merge defensively: spread params first, then force session_id so a
+    // caller-supplied params.query can never silently overwrite the filter.
+    query: {
+      ...params?.query,
+      session_id: sessionId,
+      $limit: params?.query?.$limit ?? 1e3
+    }
+  });
+  const tasks = Array.isArray(result) ? result : result.data;
+  return [...tasks].sort((a, b) => recencyKey(b) - recencyKey(a));
+}
+async function findHostTaskForSession(app, sessionId, params) {
+  const all = await findTasksForSession(app, sessionId, params);
+  if (all.length === 0) return void 0;
+  return all.find((t) => isTaskExecuting(t)) ?? all[0];
+}
+
 // src/widgets/env-vars/index.ts
+import {
+  ENV_VAR_CONSTRAINTS,
+  isEnvVarAllowed,
+  validateEnvVar
+} from "@agor/core/config";
+import { SessionEnvSelectionRepository } from "@agor/core/db";
+import { BadRequest } from "@agor/core/feathers";
 var ENV_VAR_NAME_REGEX = ENV_VAR_CONSTRAINTS.NAME_PATTERN;
+function orderedEnvVarNames(names) {
+  return [...names].sort();
+}
+var envVarFieldMetadataSchema = external_exports.object({
+  description: external_exports.string().max(200).optional(),
+  placeholder: external_exports.string().max(120).optional(),
+  format_hint: external_exports.string().max(80).optional(),
+  input_type: external_exports.enum(["password", "text", "textarea"]).default("password").optional()
+}).strict();
+function orderedRecord(record2) {
+  if (!record2) return void 0;
+  const out = {};
+  for (const key of orderedEnvVarNames(Object.keys(record2))) {
+    out[key] = record2[key];
+  }
+  return out;
+}
+function normalizeEnvVarsParams(params) {
+  return {
+    ...params,
+    names: orderedEnvVarNames(params.names),
+    variable_metadata: orderedRecord(params.variable_metadata)
+  };
+}
 var envVarsParamsSchema = external_exports.object({
   names: external_exports.array(external_exports.string().regex(ENV_VAR_NAME_REGEX)).min(1).max(10).refine((names) => new Set(names).size === names.length, {
     message: "Env var names must be unique"
@@ -14653,20 +14680,90 @@ var envVarsParamsSchema = external_exports.object({
   reason: external_exports.string().min(1).max(200).describe(
     "One sentence explaining why you need the value(s). Keep it tight \u2014 this renders in a small muted line under the input. NOT a place to restate what the widget does."
   ),
+  variable_metadata: external_exports.record(external_exports.string().regex(ENV_VAR_NAME_REGEX), envVarFieldMetadataSchema).optional().describe(
+    "Optional per-variable display metadata keyed by requested name. Allowed keys per variable: description, placeholder, format_hint, input_type (password|text|textarea). Do not include values, defaults, examples containing secrets, or anything secret-like."
+  ),
   auto_resume: external_exports.boolean().default(true).describe(
     "When true (default), a system-authored prompt is auto-queued back into the agent on submit/dismiss."
   )
+}).superRefine((params, ctx) => {
+  const requested = new Set(params.names);
+  for (const key of Object.keys(params.variable_metadata ?? {})) {
+    if (!requested.has(key)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["variable_metadata", key],
+        message: `Metadata key ${key} must match a requested env var name`
+      });
+    }
+  }
 });
 var envVarsSubmitSchema = external_exports.object({
   values: external_exports.record(
     external_exports.string().regex(ENV_VAR_NAME_REGEX),
     external_exports.string().min(1).max(ENV_VAR_CONSTRAINTS.MAX_VALUE_LENGTH)
-  ).refine((v) => Object.keys(v).length >= 1 && Object.keys(v).length <= 10, {
-    message: "Must submit between 1 and 10 env vars"
-  }),
+  ).default({}),
+  use_existing: external_exports.array(external_exports.string().regex(ENV_VAR_NAME_REGEX)).max(10).default([]).describe("Requested names whose already-saved global values should be used."),
   scope: external_exports.enum(["global", "session"])
+}).superRefine((submit, ctx) => {
+  const valueNames = Object.keys(submit.values);
+  const existingNames = submit.use_existing;
+  const total = valueNames.length + existingNames.length;
+  if (total < 1 || total > 10) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "Must submit between 1 and 10 env vars"
+    });
+  }
+  const duplicates = existingNames.filter((name) => valueNames.includes(name));
+  for (const name of duplicates) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["use_existing"],
+      message: `Cannot both submit and use existing value for ${name}`
+    });
+  }
+  if (new Set(existingNames).size !== existingNames.length) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["use_existing"],
+      message: "use_existing names must be unique"
+    });
+  }
 });
 
+// src/widgets/gateway-token/index.ts
+import { Forbidden } from "@agor/core/feathers";
+import {
+  GATEWAY_SENSITIVE_CONFIG_FIELDS,
+  hasMinimumRole,
+  ROLES
+} from "@agor/core/types";
+var SUPPORTED_CHANNEL_TYPES = [
+  "slack",
+  "github",
+  "teams"
+];
+function isSupportedGatewayTokenChannelType(channelType) {
+  return SUPPORTED_CHANNEL_TYPES.includes(channelType);
+}
+var MAX_TOKEN_LENGTH = 8192;
+var gatewayTokenParamsSchema = external_exports.object({
+  gatewayChannelId: external_exports.string().min(1).describe("Gateway channel whose credentials are being set."),
+  channelType: external_exports.enum(["slack", "discord", "whatsapp", "telegram", "github", "teams"]).describe("Platform type of the channel; drives per-field placeholders."),
+  channelName: external_exports.string().min(1).max(200).describe("Human-readable channel name for the form heading and prompts."),
+  fields: external_exports.array(external_exports.enum(GATEWAY_SENSITIVE_CONFIG_FIELDS)).min(1).max(GATEWAY_SENSITIVE_CONFIG_FIELDS.length).refine((fields) => new Set(fields).size === fields.length, {
+    message: "Token field names must be unique"
+  }).describe("Secret config field names to collect (subset of the sensitive fields)."),
+  reason: external_exports.string().min(1).max(200).describe("One sentence explaining why the tokens are needed. Renders as a muted line.")
+}).strict();
+var gatewayTokenSubmitSchema = external_exports.object({
+  tokens: external_exports.partialRecord(
+    external_exports.enum(GATEWAY_SENSITIVE_CONFIG_FIELDS),
+    external_exports.string().min(1).max(MAX_TOKEN_LENGTH)
+  ).describe("Map of sensitive field name \u2192 credential value.")
+}).strict();
+
 // src/mcp/server.ts
 import { randomUUID as randomUUID2 } from "crypto";
 import { shortId as shortId6, UserApiKeysRepository } from "@agor/core/db";
@@ -14678,7 +14775,11 @@ import { ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
 
 // src/mcp/tokens.ts
 import { MCP_TOKEN } from "@agor/core/config";
-import { generateId as generateId2, SessionRepository as SessionRepository2, shortId } from "@agor/core/db";
+import {
+  generateId as generateId2,
+  SessionRepository as SessionRepository2,
+  shortId
+} from "@agor/core/db";
 import {
   MCP_TOKEN_AUDIENCE,
   MCP_TOKEN_ISSUER
@@ -14699,6 +14800,7 @@ var DOMAIN_DESCRIPTIONS = {
   users: "User accounts, profiles, preferences, and administration",
   analytics: "Usage and cost tracking leaderboard",
   "mcp-servers": "External MCP server configuration and OAuth management",
+  gateway: "Gateway channels for Slack, GitHub, Teams, and other message integrations",
   proxies: "Configured HTTP proxies for third-party APIs (Shortcut, Linear, Jira, etc.)",
   widgets: "In-conversation interactive widgets \u2014 agents render small forms/buttons inline in the transcript to capture user input that never enters the LLM context",
   knowledge: "DB-backed markdown knowledge documents, version history, search, and graph links",
@@ -14722,6 +14824,11 @@ function mcpOptionalString(fieldName, description) {
     error: `${fieldName} must be a string when provided.`
   }).optional().describe(description);
 }
+function mcpOptionalNonEmptyString(fieldName, description) {
+  return external_exports.string({
+    error: `${fieldName} must be a string when provided.`
+  }).min(1, `${fieldName} cannot be empty when provided.`).optional().describe(description);
+}
 function mcpOptionalNonBlankString(fieldName, description) {
   return external_exports.string({
     error: `${fieldName} must be a string when provided.`
@@ -14742,6 +14849,14 @@ function mcpRequiredPositiveInt(fieldName, description) {
     error: `${fieldName} is required and must be a positive integer.`
   }).int(`${fieldName} must be an integer.`).positive(`${fieldName} must be greater than 0.`).describe(description);
 }
+function mcpOptionalPositiveInt(fieldName, description) {
+  return external_exports.number({
+    error: `${fieldName} must be a positive integer when provided.`
+  }).int(`${fieldName} must be an integer.`).positive(`${fieldName} must be greater than 0.`).optional().describe(description);
+}
+function mcpLimit(defaultValue = 50) {
+  return mcpOptionalPositiveInt("limit", `Maximum number of results (default: ${defaultValue})`);
+}
 
 // src/mcp/tools/artifacts.ts
 import path from "path";
@@ -14750,8 +14865,8 @@ import { NotFoundError } from "@agor/core/utils/errors";
 
 // src/utils/branch-authorization.ts
 import { shortId as shortId2 } from "@agor/core/db";
-import { Forbidden, NotAuthenticated, NotFound } from "@agor/core/feathers";
-import { BRANCH_PERMISSION_LEVELS, hasMinimumRole, ROLES } from "@agor/core/types";
+import { Forbidden as Forbidden2, NotAuthenticated, NotFound } from "@agor/core/feathers";
+import { BRANCH_PERMISSION_LEVELS, hasMinimumRole as hasMinimumRole2, ROLES as ROLES2 } from "@agor/core/types";
 var PERMISSION_RANK = Object.fromEntries(
   BRANCH_PERMISSION_LEVELS.map((level, i) => [level, i - 1])
 );
@@ -14801,7 +14916,7 @@ var AgorRuntimeSchema = external_exports.object({
 
 // src/mcp/tools/branches.ts
 import { existsSync } from "fs";
-import { isBranchRbacEnabled } from "@agor/core/config";
+import { isBranchRbacEnabled, loadConfig } from "@agor/core/config";
 import { BranchRepository as BranchRepository2, shortId as shortId3 } from "@agor/core/db";
 import { BRANCH_PERMISSION_LEVELS as BRANCH_PERMISSION_LEVELS2, getAssistantConfig, isAssistant } from "@agor/core/types";
 import { computeZoneRelativePosition } from "@agor/core/utils/board-placement";
@@ -14810,12 +14925,211 @@ import { normalizeOptionalHttpUrl } from "@agor/core/utils/url";
 // src/mcp/tools/cards.ts
 import { BoardObjectRepository } from "@agor/core/db";
 
+// src/mcp/tools/gateway-channels.ts
+import {
+  BranchRepository as BranchRepository3,
+  GatewayChannelRepository,
+  SessionRepository as SessionRepository3,
+  ThreadSessionMapRepository
+} from "@agor/core/db";
+import {
+  buildSlackManifest,
+  getConnector,
+  requiredBotEvents,
+  requiredBotScopes
+} from "@agor/core/gateway";
+import {
+  GATEWAY_REDACTED_SENTINEL,
+  GATEWAY_SENSITIVE_CONFIG_FIELDS as GATEWAY_SENSITIVE_CONFIG_FIELDS2,
+  getRequiredSecretFields,
+  hasMinimumRole as hasMinimumRole3,
+  ROLES as ROLES3
+} from "@agor/core/types";
+var configSchema = external_exports.record(external_exports.string(), external_exports.unknown()).describe(
+  "Platform-specific gateway configuration. Secrets are stored encrypted and returned redacted. Prefer env/template references for shared credentials where the connector supports them."
+);
+var outboundTargetSchema = external_exports.string().trim().regex(
+  /^(channel:[^:\s]+|channel_name:[^\s]+|#[^\s]+|(?:email:|user_email:)?[^@\s]+@[^@\s]+\.[^@\s]+)$/
+).describe(
+  "Slack outbound target for v0: channel:C123, #project-updates, channel_name:project-updates, or user@example.com. Thread targets are intentionally not supported."
+);
+var envVarSchema = external_exports.strictObject({
+  key: mcpRequiredString("agenticConfig.envVars[].key", "Environment variable name"),
+  value: mcpRequiredString(
+    "agenticConfig.envVars[].value",
+    `Environment variable value. Prefer references/templates over raw secrets. Existing redacted values may be passed as '${GATEWAY_REDACTED_SENTINEL}' on update to preserve them.`
+  ),
+  forceOverride: external_exports.boolean().optional().describe("When true, channel value wins over user env vars. Defaults to false.")
+});
+var agenticConfigSchema = external_exports.strictObject({
+  agent: external_exports.enum(["claude-code", "claude-code-cli", "codex", "gemini", "opencode", "copilot", "cursor"]).describe("Agent used for sessions created from this gateway channel."),
+  permissionMode: external_exports.enum([
+    "default",
+    "acceptEdits",
+    "bypassPermissions",
+    "plan",
+    "dontAsk",
+    "autoEdit",
+    "yolo",
+    "ask",
+    "auto",
+    "on-failure",
+    "allow-all"
+  ]).optional().describe("Permission mode for spawned sessions."),
+  modelConfig: external_exports.record(external_exports.string(), external_exports.unknown()).optional().describe("Agent model configuration."),
+  mcpServerIds: external_exports.array(external_exports.string().min(1)).optional().describe("MCP server IDs to attach to gateway-created sessions."),
+  codexSandboxMode: external_exports.enum(["read-only", "workspace-write", "danger-full-access"]).optional().describe("Codex sandbox mode for Codex gateway sessions."),
+  codexApprovalPolicy: external_exports.enum(["untrusted", "on-failure", "on-request", "never"]).optional().describe("Codex approval policy for Codex gateway sessions."),
+  codexNetworkAccess: external_exports.boolean().optional().describe("Allow Codex network access."),
+  envVars: external_exports.array(envVarSchema).optional().describe("Gateway-level env vars. Values are redacted in responses.")
+}).describe("Agent/session defaults for conversations created through this gateway channel.");
+var gatewayChannelCreateSchema = external_exports.strictObject({
+  name: mcpRequiredString("name", 'Human-readable channel name, e.g. "Engineering Slack".'),
+  channelType: external_exports.enum(["slack", "github", "teams", "discord", "whatsapp", "telegram"]).default("slack").describe("Gateway platform type. Current active connectors are slack, github, and teams."),
+  targetBranchId: mcpRequiredId(
+    "targetBranchId",
+    "Branch",
+    "Branch/worktree ID that this gateway channel prompts."
+  ),
+  agorUserId: mcpOptionalId(
+    "agorUserId",
+    "User",
+    "Agor user ID whose identity is used when platform-user alignment is disabled."
+  ),
+  enabled: external_exports.boolean().optional().describe("Whether the channel is active. Defaults to true."),
+  config: configSchema,
+  agenticConfig: agenticConfigSchema.optional()
+}).superRefine((value, issue2) => {
+  const config2 = value.config ?? {};
+  if (value.enabled !== false) {
+    const requiredSecretMessages = {
+      bot_token: "config.bot_token is required for Slack. Prefer a bot token stored outside the transcript when possible.",
+      app_token: "config.app_token is required for Slack Socket Mode.",
+      private_key: "config.private_key is required for GitHub gateway channels.",
+      app_password: "config.app_password is required for Teams gateway channels."
+    };
+    for (const field of getRequiredSecretFields(value.channelType, config2)) {
+      if (!config2[field]) {
+        issue2.addIssue({
+          code: "custom",
+          path: ["config", field],
+          message: requiredSecretMessages[field] ?? `config.${field} is required for ${value.channelType} gateway channels.`
+        });
+      }
+    }
+  }
+  if (value.channelType === "github") {
+    for (const field of ["app_id", "installation_id", "watch_repos"]) {
+      if (!config2[field]) {
+        issue2.addIssue({
+          code: "custom",
+          path: ["config", field],
+          message: `config.${field} is required for GitHub gateway channels.`
+        });
+      }
+    }
+  }
+  if (value.channelType === "teams" && !config2.app_id) {
+    issue2.addIssue({
+      code: "custom",
+      path: ["config", "app_id"],
+      message: "config.app_id is required for Teams gateway channels."
+    });
+  }
+  if (value.channelType === "slack" && config2.align_slack_users !== true && !value.agorUserId) {
+    issue2.addIssue({
+      code: "custom",
+      path: ["agorUserId"],
+      message: "Run-as-selected-user needs agorUserId \u2014 set config.align_slack_users:true to align by email, or pass agorUserId."
+    });
+  }
+});
+var slackThreadHistorySchema = external_exports.strictObject({
+  sessionId: mcpOptionalId(
+    "sessionId",
+    "Session",
+    "Preferred: resolve the Slack thread mapping from an accessible Agor session ID (UUIDv7 or short ID). If provided, gatewayChannelId/threadId are ignored."
+  ),
+  gatewayChannelId: mcpOptionalId(
+    "gatewayChannelId",
+    "Gateway channel",
+    "Explicit Slack gateway channel ID (UUIDv7 or short ID). Required when sessionId is omitted."
+  ),
+  threadId: mcpOptionalNonEmptyString(
+    "threadId",
+    "Explicit Slack thread ID in Agor gateway format, e.g. C123-171234.000100. Required when sessionId is omitted."
+  ),
+  oldestTs: mcpOptionalNonEmptyString(
+    "oldestTs",
+    "Optional Slack oldest timestamp bound, e.g. 171234.000100."
+  ),
+  latestTs: mcpOptionalNonEmptyString(
+    "latestTs",
+    "Optional Slack latest timestamp bound, e.g. 171235.000200."
+  ),
+  inclusive: external_exports.boolean().optional().describe("Whether Slack should include messages exactly at oldest/latest bounds."),
+  limit: mcpLimit(50).describe("Maximum Slack messages to request (default: 50, max: 200)."),
+  includeBotMessages: external_exports.boolean().optional().describe("Include Slack bot messages in the returned history. Defaults to false."),
+  format: external_exports.enum(["messages", "markdown"]).optional().describe(
+    'Response body format. "messages" returns normalized JSON; "markdown" returns a transcript string.'
+  )
+}).superRefine((value, issue2) => {
+  if (value.sessionId) return;
+  if (!value.gatewayChannelId) {
+    issue2.addIssue({
+      code: "custom",
+      path: ["gatewayChannelId"],
+      message: "gatewayChannelId is required when sessionId is omitted."
+    });
+  }
+  if (!value.threadId) {
+    issue2.addIssue({
+      code: "custom",
+      path: ["threadId"],
+      message: "threadId is required when sessionId is omitted."
+    });
+  }
+});
+var gatewayChannelUpdateSchema = external_exports.strictObject({
+  gatewayChannelId: mcpRequiredId(
+    "gatewayChannelId",
+    "Gateway channel",
+    "Gateway channel ID (UUIDv7 or short ID)"
+  ),
+  name: mcpOptionalNonEmptyString("name", "New human-readable channel name."),
+  channelType: external_exports.enum(["slack", "github", "teams", "discord", "whatsapp", "telegram"]).optional().describe("Gateway platform type. Changing this should include compatible config."),
+  targetBranchId: mcpOptionalId("targetBranchId", "Branch", "New target branch/worktree ID."),
+  agorUserId: mcpOptionalId("agorUserId", "User", "New run-as Agor user ID."),
+  enabled: external_exports.boolean().optional().describe("Enable/disable the channel."),
+  config: configSchema.optional().describe(
+    `Partial platform config to merge. Send '${GATEWAY_REDACTED_SENTINEL}' or omit sensitive fields to preserve existing secrets; send a new value to rotate.`
+  ),
+  agenticConfig: agenticConfigSchema.nullable().optional().describe("Replace agent/session defaults. null clears the gateway agentic config.")
+});
+var slackManifestGenerateSchema = external_exports.strictObject({
+  appName: mcpRequiredString("appName", 'Slack app display name, e.g. "Agor".'),
+  botDisplayName: mcpOptionalNonEmptyString(
+    "botDisplayName",
+    "Bot user display name. Defaults to appName."
+  ),
+  publicChannels: external_exports.boolean().default(false).describe("Listen in public channels (#channel) via @mention."),
+  privateChannels: external_exports.boolean().default(false).describe("Listen in private channels (groups) via @mention."),
+  groupDms: external_exports.boolean().default(false).describe("Listen in group DMs (multi-person IMs) via @mention."),
+  alignUsers: external_exports.boolean().default(true).describe(
+    "Resolve Slack user email \u2192 Agor user (adds the users:read.email scope). Defaults to true: each Slack user runs as their matched Agor account and unmatched users are rejected, so no fixed run-as user is needed. Set false to run every message as one fixed Agor user (then pass agorUserId to agor_gateway_channels_create)."
+  ),
+  outbound: external_exports.boolean().default(false).describe("Proactive outbound: post to channels by name and DM users by email."),
+  restrictToChannelIds: external_exports.array(external_exports.string().min(1)).optional().describe(
+    "Slack channel ID whitelist. Maps to config.allowed_channel_ids when you call agor_gateway_channels_create; it does NOT change the manifest scopes or events."
+  )
+});
+
 // src/mcp/tools/knowledge.ts
 import { createHash, randomUUID } from "crypto";
 import fs2 from "fs";
 import { mkdir, readFile, writeFile } from "fs/promises";
 import path3 from "path";
-import { BranchRepository as BranchRepository4, KnowledgeNamespaceRepository as KnowledgeNamespaceRepository2 } from "@agor/core/db";
+import { BranchRepository as BranchRepository5, KnowledgeNamespaceRepository as KnowledgeNamespaceRepository2 } from "@agor/core/db";
 import { NotFound as NotFound2 } from "@agor/core/feathers";
 import {
   buildKnowledgeDocumentUri,
@@ -14841,14 +15155,14 @@ import { unified } from "unified";
 
 // src/services/assistant-knowledge.ts
 import {
-  BranchRepository as BranchRepository3,
+  BranchRepository as BranchRepository4,
   KnowledgeNamespaceRepository,
   shortId as shortId4
 } from "@agor/core/db";
 import { getAssistantConfig as getAssistantConfig2, isAssistant as isAssistant2 } from "@agor/core/types";
 
 // src/services/knowledge-access.ts
-import { hasMinimumRole as hasMinimumRole2, ROLES as ROLES2 } from "@agor/core/types";
+import { hasMinimumRole as hasMinimumRole4, ROLES as ROLES4 } from "@agor/core/types";
 
 // src/utils/branch-workspace-path.ts
 import fs from "fs";
@@ -14990,6 +15304,261 @@ var KnowledgeNodeRefSchema = external_exports.object(
   "Reference to an existing or creatable knowledge graph node. Prefer nodeId or uri; use typed IDs for links to Agor core objects."
 );
 
+// src/mcp/tools/mcp-servers.ts
+import {
+  isReservedMCPCustomHeaderName,
+  isValidMCPHeaderName
+} from "@agor/core/tools/mcp/http-headers";
+var mcpNameSchema = external_exports.string({
+  error: 'name is required and must be a string. Example: { "name": "context7" }'
+}).regex(
+  /^[a-z][a-z0-9_-]{0,63}$/,
+  'name must start with a lowercase letter and contain only lowercase letters, digits, "_" or "-" (max 64 chars).'
+).describe('Stable internal ID, e.g. "context7", "github", "datadog". Cannot be changed later.');
+var stringMapSchema = external_exports.record(external_exports.string(), external_exports.string()).describe(
+  "JSON object of string keys/values. Values may use templates like {{ user.env.API_TOKEN }}."
+);
+var mcpAuthInputSchema = external_exports.strictObject({
+  type: external_exports.enum(["none", "bearer", "jwt", "oauth"]).describe(
+    "Authentication mode. OAuth tip: start with { type: 'oauth' } plus the MCP server URL; only add endpoint/client fields if discovery/DCR fails."
+  ),
+  token: mcpOptionalString(
+    "auth.token",
+    "Bearer token. Prefer {{ user.env.MCP_TOKEN }} templates; raw secrets will be stored redacted but are still visible in this MCP call transcript."
+  ),
+  api_url: mcpOptionalString("auth.api_url", "JWT auth API URL."),
+  api_token: mcpOptionalString(
+    "auth.api_token",
+    "JWT API token. Prefer {{ user.env.JWT_TOKEN }} templates."
+  ),
+  api_secret: mcpOptionalString(
+    "auth.api_secret",
+    "JWT API secret. Prefer {{ user.env.JWT_SECRET }} templates."
+  ),
+  oauth_authorization_url: mcpOptionalString(
+    "auth.oauth_authorization_url",
+    "Optional OAuth authorization endpoint override. Leave blank for discovery."
+  ),
+  oauth_token_url: mcpOptionalString(
+    "auth.oauth_token_url",
+    "Optional OAuth token endpoint override. Leave blank for discovery."
+  ),
+  oauth_client_id: mcpOptionalString(
+    "auth.oauth_client_id",
+    "Optional OAuth client ID for providers that require a pre-registered app. Leave blank for Dynamic Client Registration where supported."
+  ),
+  oauth_client_secret: mcpOptionalString(
+    "auth.oauth_client_secret",
+    "Optional OAuth client secret. Prefer {{ user.env.OAUTH_CLIENT_SECRET }} templates; raw secrets are not returned by this tool."
+  ),
+  oauth_scope: mcpOptionalString("auth.oauth_scope", "Optional OAuth scopes, space-separated."),
+  oauth_grant_type: external_exports.enum(["client_credentials", "authorization_code"]).optional().describe(
+    "OAuth grant type hint. Defaults to 'client_credentials' for legacy token testing; browser OAuth uses authorization code with PKCE."
+  ),
+  oauth_mode: external_exports.enum(["per_user", "shared"]).optional().describe("OAuth token ownership. Defaults to 'per_user' (recommended)."),
+  insecure: external_exports.boolean().optional().describe("Allow insecure auth behavior if supported.")
+}).superRefine((auth, issue2) => {
+  if (auth.type === "bearer" && !auth.token) {
+    issue2.addIssue({
+      code: "custom",
+      path: ["token"],
+      message: "auth.token is required when auth.type is 'bearer'."
+    });
+  }
+  const fieldsByType = {
+    none: [],
+    bearer: ["token"],
+    jwt: ["api_url", "api_token", "api_secret"],
+    oauth: [
+      "oauth_authorization_url",
+      "oauth_token_url",
+      "oauth_client_id",
+      "oauth_client_secret",
+      "oauth_scope",
+      "oauth_grant_type",
+      "oauth_mode",
+      "insecure"
+    ]
+  };
+  const allowed = /* @__PURE__ */ new Set(["type", ...fieldsByType[auth.type]]);
+  for (const key of Object.keys(auth)) {
+    if (!allowed.has(key)) {
+      issue2.addIssue({
+        code: "custom",
+        path: [key],
+        message: `auth.${key} does not apply when auth.type is '${auth.type}'.`
+      });
+    }
+  }
+  if (auth.type === "jwt") {
+    for (const field of ["api_url", "api_token", "api_secret"]) {
+      if (!auth[field]) {
+        issue2.addIssue({
+          code: "custom",
+          path: [field],
+          message: `auth.${field} is required when auth.type is 'jwt'.`
+        });
+      }
+    }
+  }
+}).describe(
+  "Auth config. Common OAuth path: { type: 'oauth' } plus url; leave OAuth URLs/client fields blank first so metadata discovery/DCR can do the work."
+);
+var toolPermissionsSchema = external_exports.record(external_exports.string(), external_exports.enum(["ask", "allow", "deny"])).describe("Optional per-tool permissions, e.g. { 'list_files': 'allow', 'write_file': 'ask' }.");
+var mcpServerCreateSchema = external_exports.strictObject({
+  name: mcpNameSchema,
+  displayName: mcpOptionalNonEmptyString(
+    "displayName",
+    'Human-friendly display name, e.g. "Context7 MCP".'
+  ),
+  description: mcpOptionalString("description", "Optional description."),
+  transport: external_exports.enum(["stdio", "http", "sse"]).optional().describe(
+    "Transport. Defaults to 'http' when url is provided, otherwise 'stdio'. Most remote OAuth MCP servers use 'http'."
+  ),
+  url: mcpOptionalString(
+    "url",
+    "Remote MCP server URL for http/sse transports. Supports templates like {{ user.env.MCP_URL }}."
+  ),
+  command: mcpOptionalString("command", 'Local command for stdio transport, e.g. "npx".'),
+  args: external_exports.array(external_exports.string()).optional().describe(
+    'Arguments for stdio command, e.g. ["-y", "@modelcontextprotocol/server-filesystem"].'
+  ),
+  headers: stringMapSchema.optional().describe(
+    "Custom HTTP headers for http/sse transports. Do not include Authorization; use auth instead. Prefer templates for secret values."
+  ),
+  env: stringMapSchema.optional().describe(
+    "Environment variables for the MCP process/config. Prefer {{ user.env.VAR }} templates for secrets."
+  ),
+  auth: mcpAuthInputSchema.optional(),
+  scope: external_exports.enum(["global", "session"]).optional().describe(
+    "Scope. Defaults to 'global' so it appears in agor_mcp_servers_list. 'session' is only for explicit session attachment workflows."
+  ),
+  enabled: external_exports.boolean().optional().describe("Whether the server is enabled. Defaults to true."),
+  attachToCurrentSession: external_exports.boolean().optional().describe(
+    `If true, also add a session-specific link after creating. Mostly useful for scope:"session" servers; global enabled servers are already in each session's effective MCP set.`
+  ),
+  attachToSessionId: mcpOptionalId(
+    "attachToSessionId",
+    "Session",
+    "Optional session ID (UUIDv7 or short ID) to attach after creating. Overrides attachToCurrentSession."
+  )
+}).superRefine((value, issue2) => validateMcpServerConfig(value, issue2, false));
+var mcpServerUpdateSchema = external_exports.strictObject({
+  mcpServerId: mcpRequiredId(
+    "mcpServerId",
+    "MCP server",
+    "MCP server ID to update (UUIDv7 or short ID)"
+  ),
+  displayName: mcpOptionalNonEmptyString("displayName", "New human-friendly display name."),
+  description: mcpOptionalString(
+    "description",
+    "New description. Pass an empty string to clear."
+  ),
+  transport: external_exports.enum(["stdio", "http", "sse"]).optional().describe("Transport to set."),
+  url: mcpOptionalString("url", "Remote MCP URL for http/sse transports."),
+  command: mcpOptionalString("command", "Local command for stdio transport."),
+  args: external_exports.array(external_exports.string()).optional().describe("Arguments for stdio command."),
+  headers: stringMapSchema.optional().describe(
+    "Replace custom HTTP headers. Redacted existing header values may be passed back unchanged by the UI; this tool should normally pass real template values or omit headers."
+  ),
+  env: stringMapSchema.optional().describe("Replace environment variables."),
+  auth: mcpAuthInputSchema.optional().describe(
+    "Replace auth config. Existing redacted secrets are preserved if their redacted placeholders are passed back; prefer omitting auth unless changing it. Use { type: 'none' } to clear auth."
+  ),
+  scope: external_exports.enum(["global", "session"]).optional().describe("Scope to set."),
+  enabled: external_exports.boolean().optional().describe("Enabled flag."),
+  toolPermissions: toolPermissionsSchema.optional()
+}).superRefine((value, issue2) => validateMcpServerConfig(value, issue2, true));
+function validateHeaders(headers, issue2) {
+  if (!headers) return;
+  for (const [key, value] of Object.entries(headers)) {
+    const name = key.trim();
+    if (!name) {
+      issue2.addIssue({
+        code: "custom",
+        path: ["headers", key],
+        message: "Header names cannot be empty."
+      });
+    } else if (!isValidMCPHeaderName(name)) {
+      issue2.addIssue({
+        code: "custom",
+        path: ["headers", key],
+        message: `Invalid HTTP header name: ${key}`
+      });
+    } else if (isReservedMCPCustomHeaderName(name)) {
+      issue2.addIssue({
+        code: "custom",
+        path: ["headers", key],
+        message: `Header ${name} is reserved; configure Authorization through auth instead.`
+      });
+    }
+    if (typeof value !== "string") {
+      issue2.addIssue({
+        code: "custom",
+        path: ["headers", key],
+        message: "Header values must be strings."
+      });
+    }
+  }
+}
+function validateMcpServerConfig(value, issue2, partial2) {
+  const transport = value.transport ?? (value.url ? "http" : "stdio");
+  validateHeaders(value.headers, issue2);
+  if (!partial2 || value.transport !== void 0 || value.url !== void 0 || value.command !== void 0) {
+    if (transport === "stdio") {
+      if (!partial2 && !value.command) {
+        issue2.addIssue({
+          code: "custom",
+          path: ["command"],
+          message: "command is required for stdio transport."
+        });
+      }
+      if (value.url) {
+        issue2.addIssue({
+          code: "custom",
+          path: ["url"],
+          message: "url only applies to http/sse transports, not stdio."
+        });
+      }
+      if (value.headers) {
+        issue2.addIssue({
+          code: "custom",
+          path: ["headers"],
+          message: "headers only apply to http/sse transports, not stdio."
+        });
+      }
+      if (value.auth && value.auth.type !== "none") {
+        issue2.addIssue({
+          code: "custom",
+          path: ["auth", "type"],
+          message: "Authentication config only applies to http/sse transports."
+        });
+      }
+    } else if (!partial2 && !value.url) {
+      issue2.addIssue({
+        code: "custom",
+        path: ["url"],
+        message: `url is required for ${transport} transport.`
+      });
+    } else {
+      if (value.command) {
+        issue2.addIssue({
+          code: "custom",
+          path: ["command"],
+          message: "command only applies to stdio transport, not http/sse."
+        });
+      }
+      if (value.args && value.args.length > 0) {
+        issue2.addIssue({
+          code: "custom",
+          path: ["args"],
+          message: "args only apply to stdio transport, not http/sse."
+        });
+      }
+    }
+  }
+}
+
 // src/mcp/tools/messages.ts
 import { isBranchRbacEnabled as isBranchRbacEnabled2 } from "@agor/core/config";
 import {
@@ -14997,16 +15566,18 @@ import {
   asc,
   desc,
   eq,
-  inArray,
+  gte,
+  lte,
   messages as messagesTable,
   or,
-  SessionRepository as SessionRepository3,
   select,
-  sql
+  sql,
+  visibleSessionReferenceAccessExists
 } from "@agor/core/db";
+var MAX_CROSS_SESSION_SEARCH_WINDOW_MS = 31 * 24 * 60 * 60 * 1e3;
 
 // src/mcp/tools/proxies.ts
-import { getBaseUrl, loadConfig, resolveProxies } from "@agor/core/config";
+import { getBaseUrl, loadConfig as loadConfig2, resolveProxies } from "@agor/core/config";
 
 // src/mcp/tools/repos.ts
 import { extractSlugFromUrl, isValidGitUrl, isValidSlug } from "@agor/core/config";
@@ -15018,7 +15589,7 @@ var agenticToolConfigSchema = external_exports.object({
   model_config: external_exports.object({
     mode: external_exports.enum(["alias", "exact"]).optional(),
     model: mcpOptionalString("model_config.model", "Model name override."),
-    effort: external_exports.enum(["low", "medium", "high", "max"]).optional(),
+    effort: external_exports.enum(["low", "medium", "high", "xhigh", "max"]).optional(),
     advisorModel: mcpOptionalString(
       "model_config.advisorModel",
       "Claude Code advisor model override (e.g. 'opus', 'sonnet', 'fable')."
@@ -15034,7 +15605,7 @@ var agenticToolConfigSchema = external_exports.object({
 
 // src/mcp/tools/sessions.ts
 import {
-  BranchRepository as BranchRepository5,
+  BranchRepository as BranchRepository6,
   SessionRelationshipRepository,
   shortId as shortId5
 } from "@agor/core/db";
@@ -15057,6 +15628,7 @@ import {
 } from "@agor/core/types";
 init_branch_inspect();
 init_executor_read_impersonation();
+init_spawn_executor();
 var modelConfigObjectSchema = external_exports.object({
   mode: external_exports.enum(["alias", "exact"]).optional().describe("Model selection mode (default: 'alias')"),
   // .min(1): reject empty-string model explicitly so callers don't silently
@@ -15065,7 +15637,7 @@ var modelConfigObjectSchema = external_exports.object({
     "modelConfig.model",
     "Model identifier (e.g. 'claude-opus-4-6', 'claude-sonnet-4-6')"
   ),
-  effort: external_exports.enum(["low", "medium", "high", "max"]).optional().describe("Reasoning effort level (default: high)"),
+  effort: external_exports.enum(["low", "medium", "high", "xhigh", "max"]).optional().describe("Reasoning effort level (default: high)"),
   advisorModel: mcpOptionalString(
     "modelConfig.advisorModel",
     "Claude Code advisor model override (e.g. 'opus', 'sonnet', 'fable', or a full model ID)."
@@ -15086,7 +15658,7 @@ var modelConfigInputSchema = external_exports.union([
 );
 
 // src/mcp/tools/users.ts
-import { ROLES as ROLES3 } from "@agor/core/types";
+import { ROLES as ROLES5 } from "@agor/core/types";
 
 // src/mcp/server.ts
 var DEBUG_MCP_REQUESTS = process.env.AGOR_DEBUG_MCP_REQUESTS === "1" || process.env.DEBUG?.includes("mcp-requests");
@@ -15133,6 +15705,11 @@ Continue or fork an existing session:
 Discover tools: search domains/summaries \u2192 get details for one tool \u2192 execute`;
 
 // src/mcp/tools/widgets.ts
+function requireAdmin(ctx, action) {
+  if (!hasMinimumRole5(ctx.authenticatedUser?.role, ROLES6.ADMIN)) {
+    throw new Error(`Access denied: admin role required to ${action}`);
+  }
+}
 function widgetContentPreview(params) {
   const list = params.names.join(", ");
   return params.names.length === 1 ? `Please provide ${list}: ${params.reason}` : `Please provide ${list}: ${params.reason}`;
@@ -15156,10 +15733,11 @@ function registerWidgetTools(server, ctx) {
     async (args) => {
       if (!ctx.sessionId) return sessionContextRequiredResult();
       const currentSessionId = ctx.sessionId;
-      const params = args;
+      const toolParams = normalizeEnvVarsParams(envVarsParamsSchema.parse(args));
       const session = await ctx.app.service("sessions").get(currentSessionId, ctx.baseServiceParams);
       const sessionCreatorId = session.created_by;
       const creator = await ctx.app.service("users").get(sessionCreatorId, ctx.baseServiceParams);
+      const params = toolParams;
       const presentEverywhere = allNamesPresentInScope(
         creator.env_vars,
         params.names,
@@ -15250,6 +15828,104 @@ function registerWidgetTools(server, ctx) {
       return textResult({ widget_id: widgetId, status: "requested" });
     }
   );
+  server.registerTool(
+    "agor_widgets_request_gateway_token",
+    {
+      description: "Ask an admin to securely provide a gateway channel's platform tokens (Slack bot/app tokens, GitHub private key, Teams app password) via a compact form that appears at the end of your message, so setup finishes without anyone pasting xoxb-/xapp- tokens into chat. FIRE-AND-FORGET: the widget renders inline at the end of your turn; end your turn after calling. You will receive a user-role message when it is resolved. Token values never enter your context \u2014 only the channel identity and field NAMES do. Admin-only: a non-admin agent cannot mint this widget. Keep `reason` to ONE short sentence (\u2264200 chars).",
+      annotations: { destructiveHint: false, openWorldHint: false },
+      inputSchema: external_exports.object({
+        gatewayChannelId: external_exports.string().min(1).describe("Gateway channel ID (UUIDv7 or short ID) whose tokens are being set."),
+        reason: external_exports.string().max(200).optional().describe("One short sentence explaining why the tokens are needed.")
+      })
+    },
+    async (args) => {
+      if (!ctx.sessionId) return sessionContextRequiredResult();
+      const currentSessionId = ctx.sessionId;
+      requireAdmin(ctx, "set gateway channel tokens");
+      const channel = await ctx.app.service("gateway-channels").get(args.gatewayChannelId, ctx.baseServiceParams);
+      const channelType = channel.channel_type;
+      if (!isSupportedGatewayTokenChannelType(channelType)) {
+        throw new Error(
+          `Gateway channel type "${channelType}" does not support token entry via this widget.`
+        );
+      }
+      const fields = getRequiredSecretFields2(channelType, channel.config);
+      if (fields.length === 0) {
+        throw new Error(
+          `Gateway channel "${channel.name}" has no required secret fields to collect.`
+        );
+      }
+      const params = gatewayTokenParamsSchema.parse({
+        gatewayChannelId: channel.id,
+        channelType,
+        channelName: channel.name,
+        fields,
+        reason: args.reason ?? `Provide the ${channelType} credentials to finish connecting "${channel.name}".`
+      });
+      const requestedAt = (/* @__PURE__ */ new Date()).toISOString();
+      const baseWidgetMeta = {
+        widget_type: "gateway_token",
+        schema_version: 1,
+        params,
+        status: "pending",
+        requested_at: requestedAt,
+        auto_resume: true
+      };
+      const hostTask = await findHostTaskForSession(
+        ctx.app,
+        currentSessionId,
+        ctx.baseServiceParams
+      );
+      const hostTaskId = hostTask?.task_id;
+      const created = await appendSystemMessage({
+        app: ctx.app,
+        db: ctx.db,
+        sessionId: currentSessionId,
+        taskId: hostTaskId,
+        content: `Please provide the ${channelType} tokens for "${channel.name}": ${params.reason}`,
+        contentPreview: `Widget: gateway_token (${channel.name})`,
+        type: "widget_request",
+        role: MessageRole2.SYSTEM,
+        metadata: {
+          widget: {
+            ...baseWidgetMeta,
+            widget_id: "pending"
+          }
+        }
+      });
+      const widgetId = created.message_id;
+      if (hostTask?.message_range) {
+        try {
+          await ctx.app.service("tasks").patch(
+            hostTask.task_id,
+            {
+              message_range: {
+                start_index: hostTask.message_range.start_index,
+                end_index: created.index
+              }
+            },
+            ctx.baseServiceParams
+          );
+        } catch (err) {
+          console.warn(
+            `[widgets] failed to extend task.message_range for widget ${widgetId}:`,
+            err
+          );
+        }
+      }
+      await ctx.app.service("messages").patch(
+        widgetId,
+        {
+          metadata: {
+            ...created.metadata ?? {},
+            widget: { ...baseWidgetMeta, widget_id: widgetId }
+          }
+        },
+        ctx.baseServiceParams
+      );
+      return textResult({ widget_id: widgetId, status: "requested" });
+    }
+  );
 }
 export {
   registerWidgetTools