tbenandClaude Opus 5.5
fefc295d15
- Coordinator tools in its own chat (super admin only): list_extensions,
set_extension_access, delete_extension, and update_skill /
update_mcp_server / update_custom_tool for what can't change where
anything is sent (on/off, names, arguments, left-out tools)
- Adding a skill, MCP server or tool, or changing a skill's words, a
server's URL or headers or a tool's kind or config, goes through
propose_skill / propose_mcp_server / propose_custom_tool: stored in
extension_proposals with the bot's background check, shown as a
[proposal:ID] chip that opens a card with Confirm and Reject
- The card's facts are worked out by the app from what Confirm saves: the
host, every {{env.KEY}} and whether it's saved, the config; for a skill
its links, hosts, tool names, mentions of secrets and a diff against
the saved runbook
- Confirming decides once and checks again; a server or tool missing a key
is saved switched off, and the outcome is posted to the bot in chat
- Never from a bot: stdio servers, a URL whose host a template decides,
envs in a prompt tool, a key's value
Co-Authored-By: Claude Opus 5.5 <[email protected]>
29 lines
892 B
TypeScript
29 lines
892 B
TypeScript
import BunSQLite from "@moduletrace/bun-sqlite";
|
|
import type { BUN_SQLITE_COBBLE_EXTENSION_PROPOSALS } from "@/db/types/db";
|
|
import AppError from "@/src/utils/app-error";
|
|
import parseProposalRow from "./parse-proposal-row";
|
|
|
|
type Params = {
|
|
proposal_id: number | string;
|
|
/**
|
|
* The super admin it was proposed to: nobody else reads it.
|
|
*/
|
|
user_id: number | string;
|
|
};
|
|
|
|
/**
|
|
* One proposal made to this user, or an `AppError`.
|
|
*/
|
|
export default async function grabExtensionProposal({ proposal_id, user_id }: Params) {
|
|
const row = (
|
|
await BunSQLite.sql<BUN_SQLITE_COBBLE_EXTENSION_PROPOSALS>({
|
|
sql: `SELECT * FROM extension_proposals WHERE id = ? AND user_id = ?`,
|
|
values: [proposal_id, user_id],
|
|
})
|
|
).payload?.[0];
|
|
|
|
if (!row) throw new AppError(`That proposal doesn't exist.`);
|
|
|
|
return parseProposalRow({ row });
|
|
}
|