agor-live 0.23.1 → 0.23.2

package/dist/daemon/mcp/tools/users.js

@@ -65,7 +65,7 @@ var init_executor_read_impersonation = __esm({
 });
 
 // src/mcp/tools/users.ts
-import { ROLES as ROLES4 } from "@agor/core/types";
+import { ROLES as ROLES6 } from "@agor/core/types";
 
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -14750,11 +14750,15 @@ import {
   ThreadSessionMapRepository
 } from "@agor/core/db";
 import {
-  getConnector
+  buildSlackManifest,
+  getConnector,
+  requiredBotEvents,
+  requiredBotScopes
 } from "@agor/core/gateway";
 import {
   GATEWAY_REDACTED_SENTINEL,
   GATEWAY_SENSITIVE_CONFIG_FIELDS,
+  getRequiredSecretFields,
   hasMinimumRole as hasMinimumRole2,
   ROLES as ROLES2
 } from "@agor/core/types";
@@ -14814,44 +14818,48 @@ var gatewayChannelCreateSchema = external_exports.strictObject({
   agenticConfig: agenticConfigSchema.optional()
 }).superRefine((value, issue2) => {
   const config2 = value.config ?? {};
-  if (value.channelType === "slack") {
-    if (!config2.bot_token) {
-      issue2.addIssue({
-        code: "custom",
-        path: ["config", "bot_token"],
-        message: "config.bot_token is required for Slack. Prefer a bot token stored outside the transcript when possible."
-      });
-    }
-    if (config2.connection_mode === "socket" && !config2.app_token) {
-      issue2.addIssue({
-        code: "custom",
-        path: ["config", "app_token"],
-        message: "config.app_token is required for Slack Socket Mode."
-      });
-    }
-  }
-  if (value.channelType === "github") {
-    for (const field of ["app_id", "private_key", "installation_id", "watch_repos"]) {
+  if (value.enabled !== false) {
+    const requiredSecretMessages = {
+      bot_token: "config.bot_token is required for Slack. Prefer a bot token stored outside the transcript when possible.",
+      app_token: "config.app_token is required for Slack Socket Mode.",
+      private_key: "config.private_key is required for GitHub gateway channels.",
+      app_password: "config.app_password is required for Teams gateway channels."
+    };
+    for (const field of getRequiredSecretFields(value.channelType, config2)) {
       if (!config2[field]) {
         issue2.addIssue({
           code: "custom",
           path: ["config", field],
-          message: `config.${field} is required for GitHub gateway channels.`
+          message: requiredSecretMessages[field] ?? `config.${field} is required for ${value.channelType} gateway channels.`
         });
       }
     }
   }
-  if (value.channelType === "teams") {
-    for (const field of ["app_id", "app_password"]) {
+  if (value.channelType === "github") {
+    for (const field of ["app_id", "installation_id", "watch_repos"]) {
       if (!config2[field]) {
         issue2.addIssue({
           code: "custom",
           path: ["config", field],
-          message: `config.${field} is required for Teams gateway channels.`
+          message: `config.${field} is required for GitHub gateway channels.`
         });
       }
     }
   }
+  if (value.channelType === "teams" && !config2.app_id) {
+    issue2.addIssue({
+      code: "custom",
+      path: ["config", "app_id"],
+      message: "config.app_id is required for Teams gateway channels."
+    });
+  }
+  if (value.channelType === "slack" && config2.align_slack_users !== true && !value.agorUserId) {
+    issue2.addIssue({
+      code: "custom",
+      path: ["agorUserId"],
+      message: "Run-as-selected-user needs agorUserId \u2014 set config.align_slack_users:true to align by email, or pass agorUserId."
+    });
+  }
 });
 var slackThreadHistorySchema = external_exports.strictObject({
   sessionId: mcpOptionalId(
@@ -14915,6 +14923,23 @@ var gatewayChannelUpdateSchema = external_exports.strictObject({
   ),
   agenticConfig: agenticConfigSchema.nullable().optional().describe("Replace agent/session defaults. null clears the gateway agentic config.")
 });
+var slackManifestGenerateSchema = external_exports.strictObject({
+  appName: mcpRequiredString("appName", 'Slack app display name, e.g. "Agor".'),
+  botDisplayName: mcpOptionalNonEmptyString(
+    "botDisplayName",
+    "Bot user display name. Defaults to appName."
+  ),
+  publicChannels: external_exports.boolean().default(false).describe("Listen in public channels (#channel) via @mention."),
+  privateChannels: external_exports.boolean().default(false).describe("Listen in private channels (groups) via @mention."),
+  groupDms: external_exports.boolean().default(false).describe("Listen in group DMs (multi-person IMs) via @mention."),
+  alignUsers: external_exports.boolean().default(true).describe(
+    "Resolve Slack user email \u2192 Agor user (adds the users:read.email scope). Defaults to true: each Slack user runs as their matched Agor account and unmatched users are rejected, so no fixed run-as user is needed. Set false to run every message as one fixed Agor user (then pass agorUserId to agor_gateway_channels_create)."
+  ),
+  outbound: external_exports.boolean().default(false).describe("Proactive outbound: post to channels by name and DM users by email."),
+  restrictToChannelIds: external_exports.array(external_exports.string().min(1)).optional().describe(
+    "Slack channel ID whitelist. Maps to config.allowed_channel_ids when you call agor_gateway_channels_create; it does NOT change the manifest scopes or events."
+  )
+});
 
 // src/mcp/tools/knowledge.ts
 import { createHash, randomUUID } from "crypto";
@@ -15450,7 +15475,7 @@ var modelConfigInputSchema = external_exports.union([
 );
 
 // src/mcp/tools/widgets.ts
-import { MessageRole as MessageRole2 } from "@agor/core/types";
+import { getRequiredSecretFields as getRequiredSecretFields2, hasMinimumRole as hasMinimumRole5, MessageRole as MessageRole2, ROLES as ROLES5 } from "@agor/core/types";
 
 // src/utils/append-system-message.ts
 import { generateId as generateId2, SessionRepository as SessionRepository3 } from "@agor/core/db";
@@ -15533,6 +15558,30 @@ var envVarsSubmitSchema = external_exports.object({
   }
 });
 
+// src/widgets/gateway-token/index.ts
+import { Forbidden as Forbidden2 } from "@agor/core/feathers";
+import {
+  GATEWAY_SENSITIVE_CONFIG_FIELDS as GATEWAY_SENSITIVE_CONFIG_FIELDS2,
+  hasMinimumRole as hasMinimumRole4,
+  ROLES as ROLES4
+} from "@agor/core/types";
+var MAX_TOKEN_LENGTH = 8192;
+var gatewayTokenParamsSchema = external_exports.object({
+  gatewayChannelId: external_exports.string().min(1).describe("Gateway channel whose credentials are being set."),
+  channelType: external_exports.enum(["slack", "discord", "whatsapp", "telegram", "github", "teams"]).describe("Platform type of the channel; drives per-field placeholders."),
+  channelName: external_exports.string().min(1).max(200).describe("Human-readable channel name for the form heading and prompts."),
+  fields: external_exports.array(external_exports.enum(GATEWAY_SENSITIVE_CONFIG_FIELDS2)).min(1).max(GATEWAY_SENSITIVE_CONFIG_FIELDS2.length).refine((fields) => new Set(fields).size === fields.length, {
+    message: "Token field names must be unique"
+  }).describe("Secret config field names to collect (subset of the sensitive fields)."),
+  reason: external_exports.string().min(1).max(200).describe("One sentence explaining why the tokens are needed. Renders as a muted line.")
+}).strict();
+var gatewayTokenSubmitSchema = external_exports.object({
+  tokens: external_exports.partialRecord(
+    external_exports.enum(GATEWAY_SENSITIVE_CONFIG_FIELDS2),
+    external_exports.string().min(1).max(MAX_TOKEN_LENGTH)
+  ).describe("Map of sensitive field name \u2192 credential value.")
+}).strict();
+
 // src/mcp/server.ts
 var DEBUG_MCP_REQUESTS = process.env.AGOR_DEBUG_MCP_REQUESTS === "1" || process.env.DEBUG?.includes("mcp-requests");
 function textResult(data) {
@@ -15745,7 +15794,7 @@ function registerUserTools(server, ctx) {
         email: mcpOptionalString("email", "New email address (optional)"),
         name: mcpOptionalString("name", "New display name (optional)"),
         password: mcpOptionalString("password", "New password (optional, will be hashed)"),
-        role: external_exports.enum([ROLES4.SUPERADMIN, ROLES4.ADMIN, ROLES4.MEMBER, ROLES4.VIEWER]).optional().describe(
+        role: external_exports.enum([ROLES6.SUPERADMIN, ROLES6.ADMIN, ROLES6.MEMBER, ROLES6.VIEWER]).optional().describe(
           "New user role (optional). superadmin=full system access + branch RBAC bypass, admin=manage resources, member=standard user, viewer=read-only"
         ),
         unix_username: mcpOptionalString(
@@ -15798,7 +15847,7 @@ function registerUserTools(server, ctx) {
           "Unix username for shell access (optional, defaults to email prefix if not specified)"
         ),
         must_change_password: external_exports.boolean().optional().describe("Force user to change password on first login (optional, defaults to false)"),
-        role: external_exports.enum([ROLES4.SUPERADMIN, ROLES4.ADMIN, ROLES4.MEMBER, ROLES4.VIEWER]).optional().describe(
+        role: external_exports.enum([ROLES6.SUPERADMIN, ROLES6.ADMIN, ROLES6.MEMBER, ROLES6.VIEWER]).optional().describe(
           'User role (optional, defaults to "member"). Roles: superadmin=full system access + branch RBAC bypass, admin=manage resources, member=standard user, viewer=read-only'
         )
       })

package/dist/daemon/mcp/tools/widgets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"widgets.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/widgets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAaH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAQzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAiC/C,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,CAqJ5E"}
+{"version":3,"file":"widgets.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/widgets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAeH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAczE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAuC/C,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,CAqR5E"}

package/dist/daemon/mcp/tools/widgets.js

@@ -65,75 +65,7 @@ var init_executor_read_impersonation = __esm({
 });
 
 // src/mcp/tools/widgets.ts
-import { MessageRole as MessageRole2 } from "@agor/core/types";
-
-// src/utils/append-system-message.ts
-import { generateId, SessionRepository } from "@agor/core/db";
-import { MessageRole } from "@agor/core/types";
-async function appendSystemMessage(opts) {
-  const {
-    app,
-    db,
-    sessionId,
-    taskId,
-    content,
-    contentPreview,
-    type = "system",
-    role = MessageRole.SYSTEM,
-    metadata,
-    params
-  } = opts;
-  const index = await new SessionRepository(db).countMessages(sessionId);
-  const preview = contentPreview ?? (typeof content === "string" ? content.substring(0, 200) : "");
-  const message = {
-    message_id: generateId(),
-    session_id: sessionId,
-    task_id: taskId,
-    type,
-    role,
-    index,
-    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    content_preview: preview,
-    content,
-    ...metadata ? { metadata } : {}
-  };
-  const created = await app.service("messages").create(message, params ?? {});
-  return created;
-}
-
-// src/utils/session-tasks.ts
-import { EXECUTING_TASK_STATUSES, isTaskExecuting } from "@agor/core/types";
-function recencyKey(t) {
-  return new Date(t.started_at || t.created_at).getTime();
-}
-async function findTasksForSession(app, sessionId, params) {
-  const result = await app.service("tasks").find({
-    ...params ?? {},
-    // Merge defensively: spread params first, then force session_id so a
-    // caller-supplied params.query can never silently overwrite the filter.
-    query: {
-      ...params?.query,
-      session_id: sessionId,
-      $limit: params?.query?.$limit ?? 1e3
-    }
-  });
-  const tasks = Array.isArray(result) ? result : result.data;
-  return [...tasks].sort((a, b) => recencyKey(b) - recencyKey(a));
-}
-async function findHostTaskForSession(app, sessionId, params) {
-  const all = await findTasksForSession(app, sessionId, params);
-  if (all.length === 0) return void 0;
-  return all.find((t) => isTaskExecuting(t)) ?? all[0];
-}
-
-// src/widgets/env-vars/index.ts
-import {
-  ENV_VAR_CONSTRAINTS,
-  isEnvVarAllowed,
-  validateEnvVar
-} from "@agor/core/config";
-import { SessionEnvSelectionRepository } from "@agor/core/db";
-import { BadRequest } from "@agor/core/feathers";
+import { getRequiredSecretFields as getRequiredSecretFields2, hasMinimumRole as hasMinimumRole5, MessageRole as MessageRole2, ROLES as ROLES6 } from "@agor/core/types";
 
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -14649,7 +14581,73 @@ function date4(params) {
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 config(en_default());
 
+// src/utils/append-system-message.ts
+import { generateId, SessionRepository } from "@agor/core/db";
+import { MessageRole } from "@agor/core/types";
+async function appendSystemMessage(opts) {
+  const {
+    app,
+    db,
+    sessionId,
+    taskId,
+    content,
+    contentPreview,
+    type = "system",
+    role = MessageRole.SYSTEM,
+    metadata,
+    params
+  } = opts;
+  const index = await new SessionRepository(db).countMessages(sessionId);
+  const preview = contentPreview ?? (typeof content === "string" ? content.substring(0, 200) : "");
+  const message = {
+    message_id: generateId(),
+    session_id: sessionId,
+    task_id: taskId,
+    type,
+    role,
+    index,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    content_preview: preview,
+    content,
+    ...metadata ? { metadata } : {}
+  };
+  const created = await app.service("messages").create(message, params ?? {});
+  return created;
+}
+
+// src/utils/session-tasks.ts
+import { EXECUTING_TASK_STATUSES, isTaskExecuting } from "@agor/core/types";
+function recencyKey(t) {
+  return new Date(t.started_at || t.created_at).getTime();
+}
+async function findTasksForSession(app, sessionId, params) {
+  const result = await app.service("tasks").find({
+    ...params ?? {},
+    // Merge defensively: spread params first, then force session_id so a
+    // caller-supplied params.query can never silently overwrite the filter.
+    query: {
+      ...params?.query,
+      session_id: sessionId,
+      $limit: params?.query?.$limit ?? 1e3
+    }
+  });
+  const tasks = Array.isArray(result) ? result : result.data;
+  return [...tasks].sort((a, b) => recencyKey(b) - recencyKey(a));
+}
+async function findHostTaskForSession(app, sessionId, params) {
+  const all = await findTasksForSession(app, sessionId, params);
+  if (all.length === 0) return void 0;
+  return all.find((t) => isTaskExecuting(t)) ?? all[0];
+}
+
 // src/widgets/env-vars/index.ts
+import {
+  ENV_VAR_CONSTRAINTS,
+  isEnvVarAllowed,
+  validateEnvVar
+} from "@agor/core/config";
+import { SessionEnvSelectionRepository } from "@agor/core/db";
+import { BadRequest } from "@agor/core/feathers";
 var ENV_VAR_NAME_REGEX = ENV_VAR_CONSTRAINTS.NAME_PATTERN;
 function orderedEnvVarNames(names) {
   return [...names].sort();
@@ -14734,6 +14732,38 @@ var envVarsSubmitSchema = external_exports.object({
   }
 });
 
+// src/widgets/gateway-token/index.ts
+import { Forbidden } from "@agor/core/feathers";
+import {
+  GATEWAY_SENSITIVE_CONFIG_FIELDS,
+  hasMinimumRole,
+  ROLES
+} from "@agor/core/types";
+var SUPPORTED_CHANNEL_TYPES = [
+  "slack",
+  "github",
+  "teams"
+];
+function isSupportedGatewayTokenChannelType(channelType) {
+  return SUPPORTED_CHANNEL_TYPES.includes(channelType);
+}
+var MAX_TOKEN_LENGTH = 8192;
+var gatewayTokenParamsSchema = external_exports.object({
+  gatewayChannelId: external_exports.string().min(1).describe("Gateway channel whose credentials are being set."),
+  channelType: external_exports.enum(["slack", "discord", "whatsapp", "telegram", "github", "teams"]).describe("Platform type of the channel; drives per-field placeholders."),
+  channelName: external_exports.string().min(1).max(200).describe("Human-readable channel name for the form heading and prompts."),
+  fields: external_exports.array(external_exports.enum(GATEWAY_SENSITIVE_CONFIG_FIELDS)).min(1).max(GATEWAY_SENSITIVE_CONFIG_FIELDS.length).refine((fields) => new Set(fields).size === fields.length, {
+    message: "Token field names must be unique"
+  }).describe("Secret config field names to collect (subset of the sensitive fields)."),
+  reason: external_exports.string().min(1).max(200).describe("One sentence explaining why the tokens are needed. Renders as a muted line.")
+}).strict();
+var gatewayTokenSubmitSchema = external_exports.object({
+  tokens: external_exports.partialRecord(
+    external_exports.enum(GATEWAY_SENSITIVE_CONFIG_FIELDS),
+    external_exports.string().min(1).max(MAX_TOKEN_LENGTH)
+  ).describe("Map of sensitive field name \u2192 credential value.")
+}).strict();
+
 // src/mcp/server.ts
 import { randomUUID as randomUUID2 } from "crypto";
 import { shortId as shortId6, UserApiKeysRepository } from "@agor/core/db";
@@ -14835,8 +14865,8 @@ import { NotFoundError } from "@agor/core/utils/errors";
 
 // src/utils/branch-authorization.ts
 import { shortId as shortId2 } from "@agor/core/db";
-import { Forbidden, NotAuthenticated, NotFound } from "@agor/core/feathers";
-import { BRANCH_PERMISSION_LEVELS, hasMinimumRole, ROLES } from "@agor/core/types";
+import { Forbidden as Forbidden2, NotAuthenticated, NotFound } from "@agor/core/feathers";
+import { BRANCH_PERMISSION_LEVELS, hasMinimumRole as hasMinimumRole2, ROLES as ROLES2 } from "@agor/core/types";
 var PERMISSION_RANK = Object.fromEntries(
   BRANCH_PERMISSION_LEVELS.map((level, i) => [level, i - 1])
 );
@@ -14903,13 +14933,17 @@ import {
   ThreadSessionMapRepository
 } from "@agor/core/db";
 import {
-  getConnector
+  buildSlackManifest,
+  getConnector,
+  requiredBotEvents,
+  requiredBotScopes
 } from "@agor/core/gateway";
 import {
   GATEWAY_REDACTED_SENTINEL,
-  GATEWAY_SENSITIVE_CONFIG_FIELDS,
-  hasMinimumRole as hasMinimumRole2,
-  ROLES as ROLES2
+  GATEWAY_SENSITIVE_CONFIG_FIELDS as GATEWAY_SENSITIVE_CONFIG_FIELDS2,
+  getRequiredSecretFields,
+  hasMinimumRole as hasMinimumRole3,
+  ROLES as ROLES3
 } from "@agor/core/types";
 var configSchema = external_exports.record(external_exports.string(), external_exports.unknown()).describe(
   "Platform-specific gateway configuration. Secrets are stored encrypted and returned redacted. Prefer env/template references for shared credentials where the connector supports them."
@@ -14967,44 +15001,48 @@ var gatewayChannelCreateSchema = external_exports.strictObject({
   agenticConfig: agenticConfigSchema.optional()
 }).superRefine((value, issue2) => {
   const config2 = value.config ?? {};
-  if (value.channelType === "slack") {
-    if (!config2.bot_token) {
-      issue2.addIssue({
-        code: "custom",
-        path: ["config", "bot_token"],
-        message: "config.bot_token is required for Slack. Prefer a bot token stored outside the transcript when possible."
-      });
-    }
-    if (config2.connection_mode === "socket" && !config2.app_token) {
-      issue2.addIssue({
-        code: "custom",
-        path: ["config", "app_token"],
-        message: "config.app_token is required for Slack Socket Mode."
-      });
-    }
-  }
-  if (value.channelType === "github") {
-    for (const field of ["app_id", "private_key", "installation_id", "watch_repos"]) {
+  if (value.enabled !== false) {
+    const requiredSecretMessages = {
+      bot_token: "config.bot_token is required for Slack. Prefer a bot token stored outside the transcript when possible.",
+      app_token: "config.app_token is required for Slack Socket Mode.",
+      private_key: "config.private_key is required for GitHub gateway channels.",
+      app_password: "config.app_password is required for Teams gateway channels."
+    };
+    for (const field of getRequiredSecretFields(value.channelType, config2)) {
       if (!config2[field]) {
         issue2.addIssue({
           code: "custom",
           path: ["config", field],
-          message: `config.${field} is required for GitHub gateway channels.`
+          message: requiredSecretMessages[field] ?? `config.${field} is required for ${value.channelType} gateway channels.`
         });
       }
     }
   }
-  if (value.channelType === "teams") {
-    for (const field of ["app_id", "app_password"]) {
+  if (value.channelType === "github") {
+    for (const field of ["app_id", "installation_id", "watch_repos"]) {
       if (!config2[field]) {
         issue2.addIssue({
           code: "custom",
           path: ["config", field],
-          message: `config.${field} is required for Teams gateway channels.`
+          message: `config.${field} is required for GitHub gateway channels.`
         });
       }
     }
   }
+  if (value.channelType === "teams" && !config2.app_id) {
+    issue2.addIssue({
+      code: "custom",
+      path: ["config", "app_id"],
+      message: "config.app_id is required for Teams gateway channels."
+    });
+  }
+  if (value.channelType === "slack" && config2.align_slack_users !== true && !value.agorUserId) {
+    issue2.addIssue({
+      code: "custom",
+      path: ["agorUserId"],
+      message: "Run-as-selected-user needs agorUserId \u2014 set config.align_slack_users:true to align by email, or pass agorUserId."
+    });
+  }
 });
 var slackThreadHistorySchema = external_exports.strictObject({
   sessionId: mcpOptionalId(
@@ -15068,6 +15106,23 @@ var gatewayChannelUpdateSchema = external_exports.strictObject({
   ),
   agenticConfig: agenticConfigSchema.nullable().optional().describe("Replace agent/session defaults. null clears the gateway agentic config.")
 });
+var slackManifestGenerateSchema = external_exports.strictObject({
+  appName: mcpRequiredString("appName", 'Slack app display name, e.g. "Agor".'),
+  botDisplayName: mcpOptionalNonEmptyString(
+    "botDisplayName",
+    "Bot user display name. Defaults to appName."
+  ),
+  publicChannels: external_exports.boolean().default(false).describe("Listen in public channels (#channel) via @mention."),
+  privateChannels: external_exports.boolean().default(false).describe("Listen in private channels (groups) via @mention."),
+  groupDms: external_exports.boolean().default(false).describe("Listen in group DMs (multi-person IMs) via @mention."),
+  alignUsers: external_exports.boolean().default(true).describe(
+    "Resolve Slack user email \u2192 Agor user (adds the users:read.email scope). Defaults to true: each Slack user runs as their matched Agor account and unmatched users are rejected, so no fixed run-as user is needed. Set false to run every message as one fixed Agor user (then pass agorUserId to agor_gateway_channels_create)."
+  ),
+  outbound: external_exports.boolean().default(false).describe("Proactive outbound: post to channels by name and DM users by email."),
+  restrictToChannelIds: external_exports.array(external_exports.string().min(1)).optional().describe(
+    "Slack channel ID whitelist. Maps to config.allowed_channel_ids when you call agor_gateway_channels_create; it does NOT change the manifest scopes or events."
+  )
+});
 
 // src/mcp/tools/knowledge.ts
 import { createHash, randomUUID } from "crypto";
@@ -15107,7 +15162,7 @@ import {
 import { getAssistantConfig as getAssistantConfig2, isAssistant as isAssistant2 } from "@agor/core/types";
 
 // src/services/knowledge-access.ts
-import { hasMinimumRole as hasMinimumRole3, ROLES as ROLES3 } from "@agor/core/types";
+import { hasMinimumRole as hasMinimumRole4, ROLES as ROLES4 } from "@agor/core/types";
 
 // src/utils/branch-workspace-path.ts
 import fs from "fs";
@@ -15603,7 +15658,7 @@ var modelConfigInputSchema = external_exports.union([
 );
 
 // src/mcp/tools/users.ts
-import { ROLES as ROLES4 } from "@agor/core/types";
+import { ROLES as ROLES5 } from "@agor/core/types";
 
 // src/mcp/server.ts
 var DEBUG_MCP_REQUESTS = process.env.AGOR_DEBUG_MCP_REQUESTS === "1" || process.env.DEBUG?.includes("mcp-requests");
@@ -15650,6 +15705,11 @@ Continue or fork an existing session:
 Discover tools: search domains/summaries \u2192 get details for one tool \u2192 execute`;
 
 // src/mcp/tools/widgets.ts
+function requireAdmin(ctx, action) {
+  if (!hasMinimumRole5(ctx.authenticatedUser?.role, ROLES6.ADMIN)) {
+    throw new Error(`Access denied: admin role required to ${action}`);
+  }
+}
 function widgetContentPreview(params) {
   const list = params.names.join(", ");
   return params.names.length === 1 ? `Please provide ${list}: ${params.reason}` : `Please provide ${list}: ${params.reason}`;
@@ -15768,6 +15828,104 @@ function registerWidgetTools(server, ctx) {
       return textResult({ widget_id: widgetId, status: "requested" });
     }
   );
+  server.registerTool(
+    "agor_widgets_request_gateway_token",
+    {
+      description: "Ask an admin to securely provide a gateway channel's platform tokens (Slack bot/app tokens, GitHub private key, Teams app password) via a compact form that appears at the end of your message, so setup finishes without anyone pasting xoxb-/xapp- tokens into chat. FIRE-AND-FORGET: the widget renders inline at the end of your turn; end your turn after calling. You will receive a user-role message when it is resolved. Token values never enter your context \u2014 only the channel identity and field NAMES do. Admin-only: a non-admin agent cannot mint this widget. Keep `reason` to ONE short sentence (\u2264200 chars).",
+      annotations: { destructiveHint: false, openWorldHint: false },
+      inputSchema: external_exports.object({
+        gatewayChannelId: external_exports.string().min(1).describe("Gateway channel ID (UUIDv7 or short ID) whose tokens are being set."),
+        reason: external_exports.string().max(200).optional().describe("One short sentence explaining why the tokens are needed.")
+      })
+    },
+    async (args) => {
+      if (!ctx.sessionId) return sessionContextRequiredResult();
+      const currentSessionId = ctx.sessionId;
+      requireAdmin(ctx, "set gateway channel tokens");
+      const channel = await ctx.app.service("gateway-channels").get(args.gatewayChannelId, ctx.baseServiceParams);
+      const channelType = channel.channel_type;
+      if (!isSupportedGatewayTokenChannelType(channelType)) {
+        throw new Error(
+          `Gateway channel type "${channelType}" does not support token entry via this widget.`
+        );
+      }
+      const fields = getRequiredSecretFields2(channelType, channel.config);
+      if (fields.length === 0) {
+        throw new Error(
+          `Gateway channel "${channel.name}" has no required secret fields to collect.`
+        );
+      }
+      const params = gatewayTokenParamsSchema.parse({
+        gatewayChannelId: channel.id,
+        channelType,
+        channelName: channel.name,
+        fields,
+        reason: args.reason ?? `Provide the ${channelType} credentials to finish connecting "${channel.name}".`
+      });
+      const requestedAt = (/* @__PURE__ */ new Date()).toISOString();
+      const baseWidgetMeta = {
+        widget_type: "gateway_token",
+        schema_version: 1,
+        params,
+        status: "pending",
+        requested_at: requestedAt,
+        auto_resume: true
+      };
+      const hostTask = await findHostTaskForSession(
+        ctx.app,
+        currentSessionId,
+        ctx.baseServiceParams
+      );
+      const hostTaskId = hostTask?.task_id;
+      const created = await appendSystemMessage({
+        app: ctx.app,
+        db: ctx.db,
+        sessionId: currentSessionId,
+        taskId: hostTaskId,
+        content: `Please provide the ${channelType} tokens for "${channel.name}": ${params.reason}`,
+        contentPreview: `Widget: gateway_token (${channel.name})`,
+        type: "widget_request",
+        role: MessageRole2.SYSTEM,
+        metadata: {
+          widget: {
+            ...baseWidgetMeta,
+            widget_id: "pending"
+          }
+        }
+      });
+      const widgetId = created.message_id;
+      if (hostTask?.message_range) {
+        try {
+          await ctx.app.service("tasks").patch(
+            hostTask.task_id,
+            {
+              message_range: {
+                start_index: hostTask.message_range.start_index,
+                end_index: created.index
+              }
+            },
+            ctx.baseServiceParams
+          );
+        } catch (err) {
+          console.warn(
+            `[widgets] failed to extend task.message_range for widget ${widgetId}:`,
+            err
+          );
+        }
+      }
+      await ctx.app.service("messages").patch(
+        widgetId,
+        {
+          metadata: {
+            ...created.metadata ?? {},
+            widget: { ...baseWidgetMeta, widget_id: widgetId }
+          }
+        },
+        ctx.baseServiceParams
+      );
+      return textResult({ widget_id: widgetId, status: "requested" });
+    }
+  );
 }
 export {
   registerWidgetTools

package/dist/daemon/oauth-auth-helpers.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Shared OAuth authorization helpers.
+ *
+ * Extracted from register-services.ts and register-hooks.ts so both the
+ * tenant-scope wrapping and the forUserId authorization gate can be unit-tested
+ * without spinning up the full daemon.
+ */
+import type { TenantScopeAwareDatabase } from '@agor/core/db';
+/**
+ * Runs `work` inside a tenant database scope when `tenantId` is provided.
+ * When `tenantId` is undefined the work is executed directly (no scope change).
+ *
+ * Used by the OAuth callback and oauth-complete handlers to ensure token
+ * persistence writes to the correct tenant's DB partition in multi-tenant
+ * deployments.
+ */
+export declare function runInOAuthTenantScope<T>(db: TenantScopeAwareDatabase, tenantId: string | undefined, work: () => Promise<T>): Promise<T>;
+/**
+ * Resolves the effective user ID for per-user OAuth token injection.
+ *
+ * Service-account callers (`_isServiceAccount === true`) may request another
+ * user's token. Executor-session token holders
+ * (`authPayloadType === 'executor-session'`) may only preserve an explicit
+ * `forUserId` that matches their authenticated token subject. Arbitrary
+ * cross-user lookup stays reserved for service-account callers.
+ * All other callers — including regular authenticated members — are silently
+ * redirected to their own user ID to prevent privilege escalation.
+ */
+export declare function resolveForUserIdWithGate(opts: {
+    queryForUserId: string | undefined;
+    isServiceAccount: boolean | undefined;
+    authPayloadType: unknown;
+    callerUserId: string | undefined;
+}): string | undefined;
+//# sourceMappingURL=oauth-auth-helpers.d.ts.map

package/dist/daemon/oauth-auth-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-auth-helpers.d.ts","sourceRoot":"","sources":["../src/oauth-auth-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAG9D;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,EAC3C,EAAE,EAAE,wBAAwB,EAC5B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACrB,OAAO,CAAC,CAAC,CAAC,CAGZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,gBAAgB,EAAE,OAAO,GAAG,SAAS,CAAC;IACtC,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,GAAG,MAAM,GAAG,SAAS,CAKrB"}