Let the coordinator manage skills, MCP servers and tools, behind a confirm card

- Coordinator tools in its own chat (super admin only): list_extensions,
  set_extension_access, delete_extension, and update_skill /
  update_mcp_server / update_custom_tool for what can't change where
  anything is sent (on/off, names, arguments, left-out tools)
- Adding a skill, MCP server or tool, or changing a skill's words, a
  server's URL or headers or a tool's kind or config, goes through
  propose_skill / propose_mcp_server / propose_custom_tool: stored in
  extension_proposals with the bot's background check, shown as a
  [proposal:ID] chip that opens a card with Confirm and Reject
- The card's facts are worked out by the app from what Confirm saves: the
  host, every {{env.KEY}} and whether it's saved, the config; for a skill
  its links, hosts, tool names, mentions of secrets and a diff against
  the saved runbook
- Confirming decides once and checks again; a server or tool missing a key
  is saved switched off, and the outcome is posted to the bot in chat
- Never from a bot: stdio servers, a URL whose host a template decides,
  envs in a prompt tool, a key's value

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/bots-queue/run-bot-reply.ts

@@ -132,6 +132,11 @@ export default async function runBotReply({
     }).catch(() => "");
 
     const take_overs: string[] = [];
+    /**
+     * The MCP servers and tools the coordinator proposed: their cards need
+     * the user just like a take-over.
+     */
+    const proposals: string[] = [];
     /**
      * Files the bot wrote and asked to send with its reply.
      */
@@ -161,6 +166,7 @@ export default async function runBotReply({
         scopes,
         message_id: job.message_id || undefined,
         onTakeOver: ({ ref }) => take_overs.push(ref),
+        onPropose: ({ ref }) => proposals.push(ref),
     });
 
     const extensions = await openBotExtensions({
@@ -234,7 +240,7 @@ export default async function runBotReply({
         }
 
         return {
-            ...withTakeOverRefs({ text: result.text, refs: take_overs }),
+            ...withTakeOverRefs({ text: result.text, refs: [...take_overs, ...proposals] }),
             attachments: attachments.length ? attachments : undefined,
         };
     } finally {