Let bots manage their hooks, with the user confirming what widens them

Bots get list_hooks, pause_hook and delete_hook, which act directly since
they only take away. A new hook, or a new name, brief or filter, or
switching a paused one back on, goes through propose_hook: it stores a
hook_proposals row and puts a [hook-proposal:ID] card in the reply, which
the user it was proposed to confirms or rejects. The card is read from
what Confirm saves, with the bot's reason labelled as its own; confirming
checks everything again and saves through the Hooks modal's helpers. A
new hook's URL is shown on the card once, to the user only, never in the
outcome the bot is told. What calls a hook, its computers and its signing
are never proposed. Only chat replies propose, and a hook call's own run
gets no hook tools, so a caller's payload can't reach them.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/schemas/bot-hook-schema.ts

@@ -53,3 +53,28 @@ export const BotHookIdRequestSchema = z.object({
 });
 
 export type BotHookIdRequest = z.infer<typeof BotHookIdRequestSchema>;
+
+/**
+ * What a bot's hook proposal would save (`hook_proposals.data`): for a
+ * new hook its name, brief, source and computers; for a change only what
+ * changes. A bot never sets how calls are signed (the secret would pass
+ * through it), and can only switch a hook back on (`enabled: true`):
+ * pausing needs no proposal.
+ */
+export const HookProposalDataSchema = z.object({
+    title: TitleField.optional(),
+    instructions: InstructionsField.optional(),
+    source: SourceField.optional(),
+    computer_id: z.coerce.number().int().positive().nullable().optional(),
+    watch_computer_id: z.coerce.number().int().positive().nullable().optional(),
+    watch_filter: WatchFilterField.optional(),
+    enabled: z.literal(true).optional(),
+});
+
+export type HookProposalData = z.infer<typeof HookProposalDataSchema>;
+
+export const HookProposalIdRequestSchema = z.object({
+    proposal_id: z.coerce.number().int().positive("Pick a proposal"),
+});
+
+export type HookProposalIdRequest = z.infer<typeof HookProposalIdRequestSchema>;