@ashx-j/lunr 0.1.0

package/dist/gateway/index.js

@@ -0,0 +1,233 @@
+/**
+ * lunR: gateway daemon entry (Phase 2a skeleton; Phase 2b registered the
+ * Telegram adapter, Phase 3 the Discord adapter — both via ADAPTER_FACTORIES).
+ *
+ * `lunr gateway` runs the daemon: load gateway.json, instantiate every
+ * enabled platform that has a registered adapter factory AND a resolvable
+ * token, connect, route messages, and stay alive until SIGINT/SIGTERM.
+ * With no runnable adapters it prints per-platform setup instructions and
+ * exits 1.
+ *
+ * Sub-commands:
+ *   lunr gateway pair approve <platform> <code>   approve a pairing code
+ *   lunr gateway pair list                        show pending + paired
+ *   lunr gateway status                           config/token/session summary
+ */
+import { isFeatureEnabled } from "../core/install-features.js";
+import { DiscordAdapter } from "./adapters/discord.js";
+import { TelegramAdapter } from "./adapters/telegram.js";
+import { AgentBridge } from "./agent-bridge.js";
+import { handleApprovalCallback } from "./approval.js";
+import { addAllowedUser } from "./authz.js";
+import { handleCallback, startButtonSweeper, stopButtonSweeper } from "./buttons.js";
+import { botCommandSpecs } from "./commands.js";
+import { loadGatewayConfig, platformConfigFor, resolvePlatformToken, } from "./config.js";
+import { startGatewayCron } from "./cron.js";
+import { createPairingStore } from "./pairing.js";
+import { createRouter } from "./router.js";
+import { listSessions } from "./store.js";
+/**
+ * Adapter registry — the seam adapters plug into:
+ *
+ *   ADAPTER_FACTORIES.<platform> = (cfg) => new SomeAdapter(cfg);
+ *
+ * A factory receives the sanitized platform config with the token already
+ * resolved into cfg.token (env beats file — see resolvePlatformToken and
+ * runDaemon below). The registry type is the PlatformConfig base; adapters
+ * with extra fields (Discord) narrow with a cast — the daemon always passes
+ * the full sanitized per-platform object.
+ */
+export const ADAPTER_FACTORIES = {
+    telegram: (cfg) => new TelegramAdapter(cfg),
+    discord: (cfg) => new DiscordAdapter(cfg),
+};
+const KNOWN_PLATFORMS = ["telegram", "discord"];
+const SETUP_INSTRUCTIONS = {
+    telegram: [
+        "Telegram: talk to @BotFather → /newbot → copy the token into",
+        "  <agentDir>/gateway.json (telegram.token) or export LUNR_TELEGRAM_BOT_TOKEN,",
+        "  then set telegram.enabled = true.",
+    ],
+    discord: [
+        "Discord: discord.com/developers → New Application → Bot → copy the token into",
+        "  <agentDir>/gateway.json (discord.token) or export LUNR_DISCORD_BOT_TOKEN,",
+        "  enable the MESSAGE CONTENT intent, then set discord.enabled = true.",
+    ],
+};
+function printSetupInstructions(enabledButUnrunnable) {
+    console.log("lunR gateway: no runnable platforms configured.");
+    for (const platform of enabledButUnrunnable) {
+        console.log(`  (platform "${platform}" is enabled but has no registered adapter or resolvable token)`);
+    }
+    for (const platform of KNOWN_PLATFORMS) {
+        for (const line of SETUP_INSTRUCTIONS[platform]) {
+            console.log(line);
+        }
+    }
+}
+async function runPairApprove(platform, code) {
+    if (!code) {
+        console.error("Usage: lunr gateway pair approve <platform> <code>");
+        return 1;
+    }
+    const pairing = createPairingStore();
+    const userId = pairing.approve(platform, code);
+    if (userId === null) {
+        console.error(`Pairing failed: no valid pending code "${code}" for ${platform} (wrong, expired, or locked out).`);
+        return 1;
+    }
+    try {
+        addAllowedUser(platform, userId);
+    }
+    catch (err) {
+        console.error(`Paired ${platform} user ${userId}, but could not persist allowedUsers: ${err}`);
+        return 1;
+    }
+    console.log(`Approved ${platform} user ${userId} (added to ${platform}.allowedUsers in gateway.json).`);
+    return 0;
+}
+function runPairList() {
+    const pairing = createPairingStore();
+    const pending = pairing.listPending();
+    const approved = pairing.listApproved();
+    console.log("Pending pairing codes:");
+    if (pending.length === 0) {
+        console.log("  (none)");
+    }
+    else {
+        for (const p of pending) {
+            console.log(`  ${p.platform} ${p.code}  user=${p.userId}  expires ${new Date(p.expiresAt).toISOString()}`);
+        }
+    }
+    console.log("Paired users:");
+    if (approved.length === 0) {
+        console.log("  (none)");
+    }
+    else {
+        for (const u of approved) {
+            console.log(`  ${u.platform} ${u.userId}  approved ${new Date(u.approvedAt).toISOString()}`);
+        }
+    }
+    return 0;
+}
+function runStatus() {
+    const cfg = loadGatewayConfig();
+    console.log(`chat-platforms: ${isFeatureEnabled("chat-platforms") ? "enabled" : "disabled"} (install-features.json)`);
+    console.log("lunR gateway status:");
+    for (const platform of KNOWN_PLATFORMS) {
+        const platformCfg = platformConfigFor(cfg, platform);
+        if (!platformCfg)
+            continue;
+        const token = resolvePlatformToken(platform, platformCfg);
+        const adapter = ADAPTER_FACTORIES[platform] === undefined ? "no adapter" : "adapter registered";
+        console.log(`  ${platform}: ${platformCfg.enabled ? "enabled" : "disabled"} · token ${token ? "resolved" : "missing"} · ${adapter}`);
+    }
+    const sessions = listSessions();
+    console.log(`  sessions: ${Object.keys(sessions).length} stored`);
+    return 0;
+}
+async function runDaemon() {
+    if (!isFeatureEnabled("chat-platforms")) {
+        console.error("lunR gateway: chat platforms are not enabled.");
+        console.error("Enable with: lunr features enable chat-platforms");
+        return 1;
+    }
+    const cfg = loadGatewayConfig();
+    const adapters = new Map();
+    const skipped = [];
+    for (const platform of KNOWN_PLATFORMS) {
+        const platformCfg = platformConfigFor(cfg, platform);
+        if (!platformCfg?.enabled)
+            continue;
+        const factory = ADAPTER_FACTORIES[platform];
+        if (factory === undefined) {
+            skipped.push(platform);
+            continue;
+        }
+        const token = resolvePlatformToken(platform, platformCfg);
+        if (!token) {
+            skipped.push(platform);
+            continue;
+        }
+        adapters.set(platform, factory({ ...platformCfg, token }));
+    }
+    if (adapters.size === 0) {
+        printSetupInstructions(skipped);
+        return 1;
+    }
+    const pairing = createPairingStore();
+    const bridge = new AgentBridge();
+    const router = createRouter({ adapters, cfg, pairing, bridge, reloadConfig: true });
+    const connected = [];
+    startButtonSweeper();
+    for (const [platform, adapter] of adapters) {
+        try {
+            const ok = await adapter.connect();
+            if (!ok) {
+                console.error(`[gateway] ${platform}: connect() reported failure; skipping`);
+                continue;
+            }
+            adapter.onMessage((event) => {
+                void router.handleEvent(event);
+            });
+            adapter.onCallback(async (event) => {
+                const consumed = await handleApprovalCallback(event, adapter);
+                if (!consumed) {
+                    void handleCallback(event, { adapters, cfg, pairing, bridge, adapter });
+                }
+            });
+            try {
+                await adapter.registerCommands?.(botCommandSpecs());
+            }
+            catch (err) {
+                console.error(`[gateway] ${platform}: command menu registration failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+            connected.push(adapter);
+            console.log(`lunR gateway: ${platform} connected`);
+        }
+        catch (err) {
+            console.error(`[gateway] ${platform}: connect failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    if (connected.length === 0) {
+        console.error("lunR gateway: every configured platform failed to connect.");
+        stopButtonSweeper();
+        return 1;
+    }
+    // Phase 4: cron jobs fire inside the daemon and deliver back to chats.
+    // Starts even with zero stored jobs — jobs can be created later from chats.
+    const cron = startGatewayCron({ adapters, cfg });
+    console.log(`lunR gateway: cron scheduler started (${cron.intervalMs / 1000}s interval)`);
+    const shutdown = () => {
+        cron.stop();
+        stopButtonSweeper();
+        void Promise.all(connected.map((adapter) => adapter.disconnect().catch(() => { }))).finally(() => {
+            process.exit(0);
+        });
+    };
+    process.on("SIGINT", shutdown);
+    process.on("SIGTERM", shutdown);
+    await new Promise(() => {
+        // Keep the process alive until SIGINT/SIGTERM.
+    });
+    return 0;
+}
+export async function runGateway(args) {
+    const [sub, ...rest] = args;
+    if (sub === "pair") {
+        const [action, platform, code] = rest;
+        if (action === "approve" && platform)
+            return runPairApprove(platform, code);
+        if (action === "list")
+            return runPairList();
+        console.error("Usage: lunr gateway pair approve <platform> <code> | lunr gateway pair list");
+        return 1;
+    }
+    if (sub === "status")
+        return runStatus();
+    if (sub === undefined)
+        return runDaemon();
+    console.error(`Unknown gateway sub-command "${sub}". Expected: pair approve | pair list | status`);
+    return 1;
+}
+//# sourceMappingURL=index.js.map

package/dist/gateway/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/gateway/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAEN,iBAAiB,EAEjB,iBAAiB,EACjB,oBAAoB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA6D;IAC1F,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC;IAC3C,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,cAAc,CAAC,GAAoB,CAAC;CAC1D,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,SAAS,CAAU,CAAC;AAEzD,MAAM,kBAAkB,GAA6B;IACpD,QAAQ,EAAE;QACT,kEAA8D;QAC9D,+EAA+E;QAC/E,qCAAqC;KACrC;IACD,OAAO,EAAE;QACR,qFAA+E;QAC/E,6EAA6E;QAC7E,uEAAuE;KACvE;CACD,CAAC;AAEF,SAAS,sBAAsB,CAAC,oBAA8B,EAAQ;IACrE,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IAC/D,KAAK,MAAM,QAAQ,IAAI,oBAAoB,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,gBAAgB,QAAQ,iEAAiE,CAAC,CAAC;IACxG,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;AAAA,CACD;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAwB,EAAmB;IAC1F,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC;IACV,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,CAAC,0CAA0C,IAAI,SAAS,QAAQ,mCAAmC,CAAC,CAAC;QAClH,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,CAAC;QACJ,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,UAAU,QAAQ,SAAS,MAAM,yCAAyC,GAAG,EAAE,CAAC,CAAC;QAC/F,OAAO,CAAC,CAAC;IACV,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,SAAS,MAAM,cAAc,QAAQ,iCAAiC,CAAC,CAAC;IACxG,OAAO,CAAC,CAAC;AAAA,CACT;AAED,SAAS,WAAW,GAAW;IAC9B,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;SAAM,CAAC;QACP,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,MAAM,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC5G,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;SAAM,CAAC;QACP,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC9F,CAAC;IACF,CAAC;IACD,OAAO,CAAC,CAAC;AAAA,CACT;AAED,SAAS,SAAS,GAAW;IAC5B,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,OAAO,CAAC,GAAG,CACV,mBAAmB,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,0BAA0B,CACxG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAChG,OAAO,CAAC,GAAG,CACV,KAAK,QAAQ,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,aAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,OAAM,OAAO,EAAE,CACvH,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC;AAAA,CACT;AAED,KAAK,UAAU,SAAS,GAAoB;IAC3C,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/D,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC;IACV,CAAC;IACD,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,EAAE,OAAO;YAAE,SAAS;QACpC,MAAM,OAAO,GAA2D,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACpG,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,SAAS;QACV,CAAC;QACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,SAAS;QACV,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC;IACV,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpF,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,kBAAkB,EAAE,CAAC;IACrB,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC5C,IAAI,CAAC;YACJ,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACT,OAAO,CAAC,KAAK,CAAC,aAAa,QAAQ,wCAAwC,CAAC,CAAC;gBAC7E,SAAS;YACV,CAAC;YACD,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC5B,KAAK,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAAA,CAC/B,CAAC,CAAC;YACH,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACf,KAAK,cAAc,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBACzE,CAAC;YAAA,CACD,CAAC,CAAC;YACH,IAAI,CAAC;gBACJ,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CACZ,aAAa,QAAQ,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9G,CAAC;YACH,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,YAAY,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,aAAa,QAAQ,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7G,CAAC;IACF,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC5E,iBAAiB,EAAE,CAAC;QACpB,OAAO,CAAC,CAAC;IACV,CAAC;IAED,uEAAuE;IACvE,8EAA4E;IAC5E,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,yCAAyC,IAAI,CAAC,UAAU,GAAG,IAAI,aAAa,CAAC,CAAC;IAE1F,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,iBAAiB,EAAE,CAAC;QACpB,KAAK,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAA,CAChB,CAAC,CAAC;IAAA,CACH,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEhC,MAAM,IAAI,OAAO,CAAO,GAAG,EAAE,CAAC;QAC7B,+CAA+C;IADjB,CAE9B,CAAC,CAAC;IACH,OAAO,CAAC,CAAC;AAAA,CACT;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc,EAAmB;IACjE,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5B,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS,IAAI,QAAQ;YAAE,OAAO,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5E,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,WAAW,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;QAC7F,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,EAAE,CAAC;IACzC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,EAAE,CAAC;IAC1C,OAAO,CAAC,KAAK,CAAC,gCAAgC,GAAG,gDAAgD,CAAC,CAAC;IACnG,OAAO,CAAC,CAAC;AAAA,CACT","sourcesContent":["/**\n * lunR: gateway daemon entry (Phase 2a skeleton; Phase 2b registered the\n * Telegram adapter, Phase 3 the Discord adapter — both via ADAPTER_FACTORIES).\n *\n * `lunr gateway` runs the daemon: load gateway.json, instantiate every\n * enabled platform that has a registered adapter factory AND a resolvable\n * token, connect, route messages, and stay alive until SIGINT/SIGTERM.\n * With no runnable adapters it prints per-platform setup instructions and\n * exits 1.\n *\n * Sub-commands:\n *   lunr gateway pair approve <platform> <code>   approve a pairing code\n *   lunr gateway pair list                        show pending + paired\n *   lunr gateway status                           config/token/session summary\n */\n\nimport { isFeatureEnabled } from \"../core/install-features.ts\";\nimport { DiscordAdapter } from \"./adapters/discord.ts\";\nimport { TelegramAdapter } from \"./adapters/telegram.ts\";\nimport { AgentBridge } from \"./agent-bridge.ts\";\nimport { handleApprovalCallback } from \"./approval.ts\";\nimport { addAllowedUser } from \"./authz.ts\";\nimport { handleCallback, startButtonSweeper, stopButtonSweeper } from \"./buttons.ts\";\nimport { botCommandSpecs } from \"./commands.ts\";\nimport {\n\ttype DiscordConfig,\n\tloadGatewayConfig,\n\ttype PlatformConfig,\n\tplatformConfigFor,\n\tresolvePlatformToken,\n} from \"./config.ts\";\nimport { startGatewayCron } from \"./cron.ts\";\nimport { createPairingStore } from \"./pairing.ts\";\nimport { createRouter } from \"./router.ts\";\nimport { listSessions } from \"./store.ts\";\nimport type { PlatformAdapter } from \"./types.ts\";\n\n/**\n * Adapter registry — the seam adapters plug into:\n *\n *   ADAPTER_FACTORIES.<platform> = (cfg) => new SomeAdapter(cfg);\n *\n * A factory receives the sanitized platform config with the token already\n * resolved into cfg.token (env beats file — see resolvePlatformToken and\n * runDaemon below). The registry type is the PlatformConfig base; adapters\n * with extra fields (Discord) narrow with a cast — the daemon always passes\n * the full sanitized per-platform object.\n */\nexport const ADAPTER_FACTORIES: Record<string, (cfg: PlatformConfig) => PlatformAdapter> = {\n\ttelegram: (cfg) => new TelegramAdapter(cfg),\n\tdiscord: (cfg) => new DiscordAdapter(cfg as DiscordConfig),\n};\n\nconst KNOWN_PLATFORMS = [\"telegram\", \"discord\"] as const;\n\nconst SETUP_INSTRUCTIONS: Record<string, string[]> = {\n\ttelegram: [\n\t\t\"Telegram: talk to @BotFather → /newbot → copy the token into\",\n\t\t\"  <agentDir>/gateway.json (telegram.token) or export LUNR_TELEGRAM_BOT_TOKEN,\",\n\t\t\"  then set telegram.enabled = true.\",\n\t],\n\tdiscord: [\n\t\t\"Discord: discord.com/developers → New Application → Bot → copy the token into\",\n\t\t\"  <agentDir>/gateway.json (discord.token) or export LUNR_DISCORD_BOT_TOKEN,\",\n\t\t\"  enable the MESSAGE CONTENT intent, then set discord.enabled = true.\",\n\t],\n};\n\nfunction printSetupInstructions(enabledButUnrunnable: string[]): void {\n\tconsole.log(\"lunR gateway: no runnable platforms configured.\");\n\tfor (const platform of enabledButUnrunnable) {\n\t\tconsole.log(`  (platform \"${platform}\" is enabled but has no registered adapter or resolvable token)`);\n\t}\n\tfor (const platform of KNOWN_PLATFORMS) {\n\t\tfor (const line of SETUP_INSTRUCTIONS[platform]) {\n\t\t\tconsole.log(line);\n\t\t}\n\t}\n}\n\nasync function runPairApprove(platform: string, code: string | undefined): Promise<number> {\n\tif (!code) {\n\t\tconsole.error(\"Usage: lunr gateway pair approve <platform> <code>\");\n\t\treturn 1;\n\t}\n\tconst pairing = createPairingStore();\n\tconst userId = pairing.approve(platform, code);\n\tif (userId === null) {\n\t\tconsole.error(`Pairing failed: no valid pending code \"${code}\" for ${platform} (wrong, expired, or locked out).`);\n\t\treturn 1;\n\t}\n\ttry {\n\t\taddAllowedUser(platform, userId);\n\t} catch (err) {\n\t\tconsole.error(`Paired ${platform} user ${userId}, but could not persist allowedUsers: ${err}`);\n\t\treturn 1;\n\t}\n\tconsole.log(`Approved ${platform} user ${userId} (added to ${platform}.allowedUsers in gateway.json).`);\n\treturn 0;\n}\n\nfunction runPairList(): number {\n\tconst pairing = createPairingStore();\n\tconst pending = pairing.listPending();\n\tconst approved = pairing.listApproved();\n\tconsole.log(\"Pending pairing codes:\");\n\tif (pending.length === 0) {\n\t\tconsole.log(\"  (none)\");\n\t} else {\n\t\tfor (const p of pending) {\n\t\t\tconsole.log(`  ${p.platform} ${p.code}  user=${p.userId}  expires ${new Date(p.expiresAt).toISOString()}`);\n\t\t}\n\t}\n\tconsole.log(\"Paired users:\");\n\tif (approved.length === 0) {\n\t\tconsole.log(\"  (none)\");\n\t} else {\n\t\tfor (const u of approved) {\n\t\t\tconsole.log(`  ${u.platform} ${u.userId}  approved ${new Date(u.approvedAt).toISOString()}`);\n\t\t}\n\t}\n\treturn 0;\n}\n\nfunction runStatus(): number {\n\tconst cfg = loadGatewayConfig();\n\tconsole.log(\n\t\t`chat-platforms: ${isFeatureEnabled(\"chat-platforms\") ? \"enabled\" : \"disabled\"} (install-features.json)`,\n\t);\n\tconsole.log(\"lunR gateway status:\");\n\tfor (const platform of KNOWN_PLATFORMS) {\n\t\tconst platformCfg = platformConfigFor(cfg, platform);\n\t\tif (!platformCfg) continue;\n\t\tconst token = resolvePlatformToken(platform, platformCfg);\n\t\tconst adapter = ADAPTER_FACTORIES[platform] === undefined ? \"no adapter\" : \"adapter registered\";\n\t\tconsole.log(\n\t\t\t`  ${platform}: ${platformCfg.enabled ? \"enabled\" : \"disabled\"} · token ${token ? \"resolved\" : \"missing\"} · ${adapter}`,\n\t\t);\n\t}\n\tconst sessions = listSessions();\n\tconsole.log(`  sessions: ${Object.keys(sessions).length} stored`);\n\treturn 0;\n}\n\nasync function runDaemon(): Promise<number> {\n\tif (!isFeatureEnabled(\"chat-platforms\")) {\n\t\tconsole.error(\"lunR gateway: chat platforms are not enabled.\");\n\t\tconsole.error(\"Enable with: lunr features enable chat-platforms\");\n\t\treturn 1;\n\t}\n\tconst cfg = loadGatewayConfig();\n\tconst adapters = new Map<string, PlatformAdapter>();\n\tconst skipped: string[] = [];\n\n\tfor (const platform of KNOWN_PLATFORMS) {\n\t\tconst platformCfg = platformConfigFor(cfg, platform);\n\t\tif (!platformCfg?.enabled) continue;\n\t\tconst factory: ((cfg: PlatformConfig) => PlatformAdapter) | undefined = ADAPTER_FACTORIES[platform];\n\t\tif (factory === undefined) {\n\t\t\tskipped.push(platform);\n\t\t\tcontinue;\n\t\t}\n\t\tconst token = resolvePlatformToken(platform, platformCfg);\n\t\tif (!token) {\n\t\t\tskipped.push(platform);\n\t\t\tcontinue;\n\t\t}\n\t\tadapters.set(platform, factory({ ...platformCfg, token }));\n\t}\n\n\tif (adapters.size === 0) {\n\t\tprintSetupInstructions(skipped);\n\t\treturn 1;\n\t}\n\n\tconst pairing = createPairingStore();\n\tconst bridge = new AgentBridge();\n\tconst router = createRouter({ adapters, cfg, pairing, bridge, reloadConfig: true });\n\n\tconst connected: PlatformAdapter[] = [];\n\tstartButtonSweeper();\n\tfor (const [platform, adapter] of adapters) {\n\t\ttry {\n\t\t\tconst ok = await adapter.connect();\n\t\t\tif (!ok) {\n\t\t\t\tconsole.error(`[gateway] ${platform}: connect() reported failure; skipping`);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tadapter.onMessage((event) => {\n\t\t\t\tvoid router.handleEvent(event);\n\t\t\t});\n\t\t\tadapter.onCallback(async (event) => {\n\t\t\t\tconst consumed = await handleApprovalCallback(event, adapter);\n\t\t\t\tif (!consumed) {\n\t\t\t\t\tvoid handleCallback(event, { adapters, cfg, pairing, bridge, adapter });\n\t\t\t\t}\n\t\t\t});\n\t\t\ttry {\n\t\t\t\tawait adapter.registerCommands?.(botCommandSpecs());\n\t\t\t} catch (err) {\n\t\t\t\tconsole.error(\n\t\t\t\t\t`[gateway] ${platform}: command menu registration failed: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconnected.push(adapter);\n\t\t\tconsole.log(`lunR gateway: ${platform} connected`);\n\t\t} catch (err) {\n\t\t\tconsole.error(`[gateway] ${platform}: connect failed: ${err instanceof Error ? err.message : String(err)}`);\n\t\t}\n\t}\n\n\tif (connected.length === 0) {\n\t\tconsole.error(\"lunR gateway: every configured platform failed to connect.\");\n\t\tstopButtonSweeper();\n\t\treturn 1;\n\t}\n\n\t// Phase 4: cron jobs fire inside the daemon and deliver back to chats.\n\t// Starts even with zero stored jobs — jobs can be created later from chats.\n\tconst cron = startGatewayCron({ adapters, cfg });\n\tconsole.log(`lunR gateway: cron scheduler started (${cron.intervalMs / 1000}s interval)`);\n\n\tconst shutdown = () => {\n\t\tcron.stop();\n\t\tstopButtonSweeper();\n\t\tvoid Promise.all(connected.map((adapter) => adapter.disconnect().catch(() => {}))).finally(() => {\n\t\t\tprocess.exit(0);\n\t\t});\n\t};\n\tprocess.on(\"SIGINT\", shutdown);\n\tprocess.on(\"SIGTERM\", shutdown);\n\n\tawait new Promise<void>(() => {\n\t\t// Keep the process alive until SIGINT/SIGTERM.\n\t});\n\treturn 0;\n}\n\nexport async function runGateway(args: string[]): Promise<number> {\n\tconst [sub, ...rest] = args;\n\tif (sub === \"pair\") {\n\t\tconst [action, platform, code] = rest;\n\t\tif (action === \"approve\" && platform) return runPairApprove(platform, code);\n\t\tif (action === \"list\") return runPairList();\n\t\tconsole.error(\"Usage: lunr gateway pair approve <platform> <code> | lunr gateway pair list\");\n\t\treturn 1;\n\t}\n\tif (sub === \"status\") return runStatus();\n\tif (sub === undefined) return runDaemon();\n\tconsole.error(`Unknown gateway sub-command \"${sub}\". Expected: pair approve | pair list | status`);\n\treturn 1;\n}\n"]}

package/dist/gateway/pairing.d.ts

@@ -0,0 +1,44 @@
+/**
+ * lunR: gateway pairing (port of hermes-agent's pairing, self-contained).
+ *
+ * Unauthorized DM users get a short code; the owner approves it out-of-band
+ * (`lunr gateway pair approve <platform> <code>`), which pairs that user.
+ * Pending codes + approved users persist in <agentDir>/pairing/store.json
+ * (chmod 0600 best-effort).
+ *
+ * Guards: 1h code TTL, max 3 pending codes per platform, 10-min per-user
+ * issue rate limit, and a lockout — after 5 failed approve attempts a
+ * pending code is invalidated. All limits are injectable for tests.
+ */
+export interface PairingOptions {
+    /** Directory holding store.json. Default: <agentDir>/pairing. */
+    dir?: string;
+    ttlMs?: number;
+    rateLimitMs?: number;
+    maxPending?: number;
+    maxFails?: number;
+    /** Lockout duration after maxFails wrong attempts. Default: 1 hour. */
+    lockoutMs?: number;
+    /** Clock injection for tests. */
+    now?: () => number;
+}
+export interface PairingStore {
+    /** Issue a new code; null when the user is rate-limited or the platform's pending list is full. */
+    issueCode(platform: string, userId: string): string | null;
+    /** Approve a code; returns the paired userId, or null on miss/expiry/lockout. */
+    approve(platform: string, code: string): string | null;
+    isPaired(platform: string, userId: string): boolean;
+    listPending(): Array<{
+        code: string;
+        platform: string;
+        userId: string;
+        expiresAt: number;
+    }>;
+    listApproved(): Array<{
+        platform: string;
+        userId: string;
+        approvedAt: number;
+    }>;
+}
+export declare function createPairingStore(options?: PairingOptions): PairingStore;
+//# sourceMappingURL=pairing.d.ts.map

package/dist/gateway/pairing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../../src/gateway/pairing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAuCH,MAAM,WAAW,cAAc;IAC9B,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC5B,mGAAmG;IACnG,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3D,iFAAiF;IACjF,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACpD,WAAW,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5F,YAAY,IAAI,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChF;AAcD,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,cAAmB,GAAG,YAAY,CA8I7E","sourcesContent":["/**\n * lunR: gateway pairing (port of hermes-agent's pairing, self-contained).\n *\n * Unauthorized DM users get a short code; the owner approves it out-of-band\n * (`lunr gateway pair approve <platform> <code>`), which pairs that user.\n * Pending codes + approved users persist in <agentDir>/pairing/store.json\n * (chmod 0600 best-effort).\n *\n * Guards: 1h code TTL, max 3 pending codes per platform, 10-min per-user\n * issue rate limit, and a lockout — after 5 failed approve attempts a\n * pending code is invalidated. All limits are injectable for tests.\n */\n\nimport { randomInt } from \"node:crypto\";\nimport { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { getAgentDir } from \"../config.ts\";\n\n/** Unambiguous alphabet: no 0/O/1/I/L. */\nconst CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTUVWXYZ23456789\";\nconst CODE_LENGTH = 8;\n\nconst DEFAULT_TTL_MS = 60 * 60 * 1000;\nconst DEFAULT_RATE_LIMIT_MS = 10 * 60 * 1000;\nconst DEFAULT_MAX_PENDING = 3;\nconst DEFAULT_MAX_FAILS = 5;\nconst DEFAULT_LOCKOUT_MS = 60 * 60 * 1000;\n\ninterface PendingCode {\n\tcode: string;\n\tplatform: string;\n\tuserId: string;\n\tissuedAt: number;\n}\n\ninterface ApprovedUser {\n\tplatform: string;\n\tuserId: string;\n\tapprovedAt: number;\n}\n\ninterface PairingData {\n\tpending: PendingCode[];\n\tapproved: ApprovedUser[];\n\t/** Per-platform failed approval attempts (wrong codes). */\n\tfailedAttempts?: Record<string, number>;\n\t/** Per-platform lockout expiry epoch ms. */\n\tlockedOutUntil?: Record<string, number>;\n}\n\nexport interface PairingOptions {\n\t/** Directory holding store.json. Default: <agentDir>/pairing. */\n\tdir?: string;\n\tttlMs?: number;\n\trateLimitMs?: number;\n\tmaxPending?: number;\n\tmaxFails?: number;\n\t/** Lockout duration after maxFails wrong attempts. Default: 1 hour. */\n\tlockoutMs?: number;\n\t/** Clock injection for tests. */\n\tnow?: () => number;\n}\n\nexport interface PairingStore {\n\t/** Issue a new code; null when the user is rate-limited or the platform's pending list is full. */\n\tissueCode(platform: string, userId: string): string | null;\n\t/** Approve a code; returns the paired userId, or null on miss/expiry/lockout. */\n\tapprove(platform: string, code: string): string | null;\n\tisPaired(platform: string, userId: string): boolean;\n\tlistPending(): Array<{ code: string; platform: string; userId: string; expiresAt: number }>;\n\tlistApproved(): Array<{ platform: string; userId: string; approvedAt: number }>;\n}\n\nfunction normalizeCode(code: string): string {\n\treturn code.replace(/-/g, \"\").trim().toUpperCase();\n}\n\nfunction generateCode(): string {\n\tlet code = \"\";\n\tfor (let i = 0; i < CODE_LENGTH; i++) {\n\t\tcode += CODE_ALPHABET[randomInt(0, CODE_ALPHABET.length)];\n\t}\n\treturn code;\n}\n\nexport function createPairingStore(options: PairingOptions = {}): PairingStore {\n\tconst dir = options.dir ?? join(getAgentDir(), \"pairing\");\n\tconst ttlMs = options.ttlMs ?? DEFAULT_TTL_MS;\n\tconst rateLimitMs = options.rateLimitMs ?? DEFAULT_RATE_LIMIT_MS;\n\tconst maxPending = options.maxPending ?? DEFAULT_MAX_PENDING;\n\tconst maxFails = options.maxFails ?? DEFAULT_MAX_FAILS;\n\tconst lockoutMs = options.lockoutMs ?? DEFAULT_LOCKOUT_MS;\n\tconst now = options.now ?? (() => Date.now());\n\n\tfunction storeFile(): string {\n\t\treturn join(dir, \"store.json\");\n\t}\n\n\tfunction read(): PairingData {\n\t\tconst path = storeFile();\n\t\tif (!existsSync(path)) return { pending: [], approved: [] };\n\t\ttry {\n\t\t\tconst parsed: unknown = JSON.parse(readFileSync(path, \"utf-8\"));\n\t\t\tif (parsed == null || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n\t\t\t\treturn { pending: [], approved: [] };\n\t\t\t}\n\t\t\tconst p = parsed as Record<string, unknown>;\n\t\t\tconst pending = Array.isArray(p.pending) ? (p.pending as PendingCode[]) : [];\n\t\t\tconst approved = Array.isArray(p.approved) ? (p.approved as ApprovedUser[]) : [];\n\t\t\treturn {\n\t\t\t\tpending: pending.filter(\n\t\t\t\t\t(c) => typeof c?.code === \"string\" && typeof c?.platform === \"string\" && typeof c?.userId === \"string\",\n\t\t\t\t),\n\t\t\t\tapproved: approved.filter((u) => typeof u?.platform === \"string\" && typeof u?.userId === \"string\"),\n\t\t\t\tfailedAttempts:\n\t\t\t\t\ttypeof p.failedAttempts === \"object\" && p.failedAttempts !== null && !Array.isArray(p.failedAttempts)\n\t\t\t\t\t\t? (p.failedAttempts as Record<string, number>)\n\t\t\t\t\t\t: undefined,\n\t\t\t\tlockedOutUntil:\n\t\t\t\t\ttypeof p.lockedOutUntil === \"object\" && p.lockedOutUntil !== null && !Array.isArray(p.lockedOutUntil)\n\t\t\t\t\t\t? (p.lockedOutUntil as Record<string, number>)\n\t\t\t\t\t\t: undefined,\n\t\t\t};\n\t\t} catch {\n\t\t\treturn { pending: [], approved: [] }; // corrupt: start empty\n\t\t}\n\t}\n\n\tfunction write(data: PairingData): void {\n\t\tif (!existsSync(dir)) mkdirSync(dir, { recursive: true });\n\t\tconst path = storeFile();\n\t\tconst tmp = `${path}.tmp-${process.pid}`;\n\t\twriteFileSync(tmp, `${JSON.stringify(data, null, 2)}\\n`, \"utf-8\");\n\t\trenameSync(tmp, path);\n\t\ttry {\n\t\t\tchmodSync(path, 0o600);\n\t\t} catch {\n\t\t\t// best-effort\n\t\t}\n\t}\n\n\tfunction isLockedOut(platform: string): boolean {\n\t\tconst until = read().lockedOutUntil?.[platform] ?? 0;\n\t\treturn now() < until;\n\t}\n\n\tfunction recordFailedAttempt(platform: string): void {\n\t\tconst data = read();\n\t\tconst failed = data.failedAttempts ?? {};\n\t\tfailed[platform] = (failed[platform] ?? 0) + 1;\n\t\tif (failed[platform] >= maxFails) {\n\t\t\tconst locked = data.lockedOutUntil ?? {};\n\t\t\tlocked[platform] = now() + lockoutMs;\n\t\t\tfailed[platform] = 0;\n\t\t\tdata.lockedOutUntil = locked;\n\t\t}\n\t\tdata.failedAttempts = failed;\n\t\twrite(data);\n\t}\n\n\tfunction livePending(data: PairingData): PendingCode[] {\n\t\tconst cutoff = now() - ttlMs;\n\t\treturn data.pending.filter((c) => c.issuedAt >= cutoff);\n\t}\n\n\treturn {\n\t\tissueCode(platform, userId) {\n\t\t\tif (isLockedOut(platform)) return null;\n\t\t\tconst data = read();\n\t\t\t// Per-user rate limit: any code (live or expired) issued recently blocks re-issue.\n\t\t\tconst lastIssued = data.pending\n\t\t\t\t.filter((c) => c.platform === platform && c.userId === userId)\n\t\t\t\t.reduce((max, c) => Math.max(max, c.issuedAt), 0);\n\t\t\tif (lastIssued > 0 && now() - lastIssued < rateLimitMs) return null;\n\t\t\tconst live = livePending(data);\n\t\t\tif (live.filter((c) => c.platform === platform).length >= maxPending) return null;\n\t\t\tconst entry: PendingCode = {\n\t\t\t\tcode: generateCode(),\n\t\t\t\tplatform,\n\t\t\t\tuserId,\n\t\t\t\tissuedAt: now(),\n\t\t\t};\n\t\t\tdata.pending = [...live, entry];\n\t\t\twrite(data);\n\t\t\treturn entry.code;\n\t\t},\n\n\t\tapprove(platform, code) {\n\t\t\tif (isLockedOut(platform)) return null;\n\t\t\tconst data = read();\n\t\t\tconst live = livePending(data);\n\t\t\tconst normalized = normalizeCode(code);\n\t\t\tconst match = live.find((c) => c.platform === platform && c.code === normalized);\n\t\t\tif (match) {\n\t\t\t\tdata.pending = live.filter((c) => c !== match);\n\t\t\t\tdata.approved = [\n\t\t\t\t\t...data.approved.filter((u) => !(u.platform === platform && u.userId === match.userId)),\n\t\t\t\t\t{ platform, userId: match.userId, approvedAt: now() },\n\t\t\t\t];\n\t\t\t\twrite(data);\n\t\t\t\treturn match.userId;\n\t\t\t}\n\t\t\t// Failed attempt: increment the per-platform failure counter. When it\n\t\t\t// reaches maxFails the platform is locked out for lockoutMs so one user\n\t\t\t// brute-forcing cannot indefinitely consume codes.\n\t\t\trecordFailedAttempt(platform);\n\t\t\treturn null;\n\t\t},\n\n\t\tisPaired(platform, userId) {\n\t\t\treturn read().approved.some((u) => u.platform === platform && u.userId === userId);\n\t\t},\n\n\t\tlistPending() {\n\t\t\tconst data = read();\n\t\t\treturn livePending(data).map((c) => ({\n\t\t\t\tcode: c.code,\n\t\t\t\tplatform: c.platform,\n\t\t\t\tuserId: c.userId,\n\t\t\t\texpiresAt: c.issuedAt + ttlMs,\n\t\t\t}));\n\t\t},\n\n\t\tlistApproved() {\n\t\t\treturn read().approved.map((u) => ({ platform: u.platform, userId: u.userId, approvedAt: u.approvedAt }));\n\t\t},\n\t};\n}\n"]}

package/dist/gateway/pairing.js

@@ -0,0 +1,171 @@
+/**
+ * lunR: gateway pairing (port of hermes-agent's pairing, self-contained).
+ *
+ * Unauthorized DM users get a short code; the owner approves it out-of-band
+ * (`lunr gateway pair approve <platform> <code>`), which pairs that user.
+ * Pending codes + approved users persist in <agentDir>/pairing/store.json
+ * (chmod 0600 best-effort).
+ *
+ * Guards: 1h code TTL, max 3 pending codes per platform, 10-min per-user
+ * issue rate limit, and a lockout — after 5 failed approve attempts a
+ * pending code is invalidated. All limits are injectable for tests.
+ */
+import { randomInt } from "node:crypto";
+import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { getAgentDir } from "../config.js";
+/** Unambiguous alphabet: no 0/O/1/I/L. */
+const CODE_ALPHABET = "ABCDEFGHJKMNPQRSTUVWXYZ23456789";
+const CODE_LENGTH = 8;
+const DEFAULT_TTL_MS = 60 * 60 * 1000;
+const DEFAULT_RATE_LIMIT_MS = 10 * 60 * 1000;
+const DEFAULT_MAX_PENDING = 3;
+const DEFAULT_MAX_FAILS = 5;
+const DEFAULT_LOCKOUT_MS = 60 * 60 * 1000;
+function normalizeCode(code) {
+    return code.replace(/-/g, "").trim().toUpperCase();
+}
+function generateCode() {
+    let code = "";
+    for (let i = 0; i < CODE_LENGTH; i++) {
+        code += CODE_ALPHABET[randomInt(0, CODE_ALPHABET.length)];
+    }
+    return code;
+}
+export function createPairingStore(options = {}) {
+    const dir = options.dir ?? join(getAgentDir(), "pairing");
+    const ttlMs = options.ttlMs ?? DEFAULT_TTL_MS;
+    const rateLimitMs = options.rateLimitMs ?? DEFAULT_RATE_LIMIT_MS;
+    const maxPending = options.maxPending ?? DEFAULT_MAX_PENDING;
+    const maxFails = options.maxFails ?? DEFAULT_MAX_FAILS;
+    const lockoutMs = options.lockoutMs ?? DEFAULT_LOCKOUT_MS;
+    const now = options.now ?? (() => Date.now());
+    function storeFile() {
+        return join(dir, "store.json");
+    }
+    function read() {
+        const path = storeFile();
+        if (!existsSync(path))
+            return { pending: [], approved: [] };
+        try {
+            const parsed = JSON.parse(readFileSync(path, "utf-8"));
+            if (parsed == null || typeof parsed !== "object" || Array.isArray(parsed)) {
+                return { pending: [], approved: [] };
+            }
+            const p = parsed;
+            const pending = Array.isArray(p.pending) ? p.pending : [];
+            const approved = Array.isArray(p.approved) ? p.approved : [];
+            return {
+                pending: pending.filter((c) => typeof c?.code === "string" && typeof c?.platform === "string" && typeof c?.userId === "string"),
+                approved: approved.filter((u) => typeof u?.platform === "string" && typeof u?.userId === "string"),
+                failedAttempts: typeof p.failedAttempts === "object" && p.failedAttempts !== null && !Array.isArray(p.failedAttempts)
+                    ? p.failedAttempts
+                    : undefined,
+                lockedOutUntil: typeof p.lockedOutUntil === "object" && p.lockedOutUntil !== null && !Array.isArray(p.lockedOutUntil)
+                    ? p.lockedOutUntil
+                    : undefined,
+            };
+        }
+        catch {
+            return { pending: [], approved: [] }; // corrupt: start empty
+        }
+    }
+    function write(data) {
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true });
+        const path = storeFile();
+        const tmp = `${path}.tmp-${process.pid}`;
+        writeFileSync(tmp, `${JSON.stringify(data, null, 2)}\n`, "utf-8");
+        renameSync(tmp, path);
+        try {
+            chmodSync(path, 0o600);
+        }
+        catch {
+            // best-effort
+        }
+    }
+    function isLockedOut(platform) {
+        const until = read().lockedOutUntil?.[platform] ?? 0;
+        return now() < until;
+    }
+    function recordFailedAttempt(platform) {
+        const data = read();
+        const failed = data.failedAttempts ?? {};
+        failed[platform] = (failed[platform] ?? 0) + 1;
+        if (failed[platform] >= maxFails) {
+            const locked = data.lockedOutUntil ?? {};
+            locked[platform] = now() + lockoutMs;
+            failed[platform] = 0;
+            data.lockedOutUntil = locked;
+        }
+        data.failedAttempts = failed;
+        write(data);
+    }
+    function livePending(data) {
+        const cutoff = now() - ttlMs;
+        return data.pending.filter((c) => c.issuedAt >= cutoff);
+    }
+    return {
+        issueCode(platform, userId) {
+            if (isLockedOut(platform))
+                return null;
+            const data = read();
+            // Per-user rate limit: any code (live or expired) issued recently blocks re-issue.
+            const lastIssued = data.pending
+                .filter((c) => c.platform === platform && c.userId === userId)
+                .reduce((max, c) => Math.max(max, c.issuedAt), 0);
+            if (lastIssued > 0 && now() - lastIssued < rateLimitMs)
+                return null;
+            const live = livePending(data);
+            if (live.filter((c) => c.platform === platform).length >= maxPending)
+                return null;
+            const entry = {
+                code: generateCode(),
+                platform,
+                userId,
+                issuedAt: now(),
+            };
+            data.pending = [...live, entry];
+            write(data);
+            return entry.code;
+        },
+        approve(platform, code) {
+            if (isLockedOut(platform))
+                return null;
+            const data = read();
+            const live = livePending(data);
+            const normalized = normalizeCode(code);
+            const match = live.find((c) => c.platform === platform && c.code === normalized);
+            if (match) {
+                data.pending = live.filter((c) => c !== match);
+                data.approved = [
+                    ...data.approved.filter((u) => !(u.platform === platform && u.userId === match.userId)),
+                    { platform, userId: match.userId, approvedAt: now() },
+                ];
+                write(data);
+                return match.userId;
+            }
+            // Failed attempt: increment the per-platform failure counter. When it
+            // reaches maxFails the platform is locked out for lockoutMs so one user
+            // brute-forcing cannot indefinitely consume codes.
+            recordFailedAttempt(platform);
+            return null;
+        },
+        isPaired(platform, userId) {
+            return read().approved.some((u) => u.platform === platform && u.userId === userId);
+        },
+        listPending() {
+            const data = read();
+            return livePending(data).map((c) => ({
+                code: c.code,
+                platform: c.platform,
+                userId: c.userId,
+                expiresAt: c.issuedAt + ttlMs,
+            }));
+        },
+        listApproved() {
+            return read().approved.map((u) => ({ platform: u.platform, userId: u.userId, approvedAt: u.approvedAt }));
+        },
+    };
+}
+//# sourceMappingURL=pairing.js.map

package/dist/gateway/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../../src/gateway/pairing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,0CAA0C;AAC1C,MAAM,aAAa,GAAG,iCAAiC,CAAC;AACxD,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACtC,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7C,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AA+C1C,SAAS,aAAa,CAAC,IAAY,EAAU;IAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAAA,CACnD;AAED,SAAS,YAAY,GAAW;IAC/B,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAO,GAAmB,EAAE,EAAgB;IAC9E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC;IACjE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAE9C,SAAS,SAAS,GAAW;QAC5B,OAAO,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAAA,CAC/B;IAED,SAAS,IAAI,GAAgB;QAC5B,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC5D,IAAI,CAAC;YACJ,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YAChE,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3E,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACtC,CAAC;YACD,MAAM,CAAC,GAAG,MAAiC,CAAC;YAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,OAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,QAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,OAAO;gBACN,OAAO,EAAE,OAAO,CAAC,MAAM,CACtB,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,EAAE,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,EAAE,MAAM,KAAK,QAAQ,CACtG;gBACD,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,EAAE,MAAM,KAAK,QAAQ,CAAC;gBAClG,cAAc,EACb,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;oBACpG,CAAC,CAAE,CAAC,CAAC,cAAyC;oBAC9C,CAAC,CAAC,SAAS;gBACb,cAAc,EACb,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;oBACpG,CAAC,CAAE,CAAC,CAAC,cAAyC;oBAC9C,CAAC,CAAC,SAAS;aACb,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,uBAAuB;QAC9D,CAAC;IAAA,CACD;IAED,SAAS,KAAK,CAAC,IAAiB,EAAQ;QACvC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC;YACJ,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACR,cAAc;QACf,CAAC;IAAA,CACD;IAED,SAAS,WAAW,CAAC,QAAgB,EAAW;QAC/C,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrD,OAAO,GAAG,EAAE,GAAG,KAAK,CAAC;IAAA,CACrB;IAED,SAAS,mBAAmB,CAAC,QAAgB,EAAQ;QACpD,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;QACzC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;YACzC,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,EAAE,GAAG,SAAS,CAAC;YACrC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACrB,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,CAAC;IAAA,CACZ;IAED,SAAS,WAAW,CAAC,IAAiB,EAAiB;QACtD,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;IAAA,CACxD;IAED,OAAO;QACN,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE;YAC3B,IAAI,WAAW,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC;YACpB,mFAAmF;YACnF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO;iBAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;iBAC7D,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACnD,IAAI,UAAU,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,UAAU,GAAG,WAAW;gBAAE,OAAO,IAAI,CAAC;YACpE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,IAAI,UAAU;gBAAE,OAAO,IAAI,CAAC;YAClF,MAAM,KAAK,GAAgB;gBAC1B,IAAI,EAAE,YAAY,EAAE;gBACpB,QAAQ;gBACR,MAAM;gBACN,QAAQ,EAAE,GAAG,EAAE;aACf,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,CAAC;YACZ,OAAO,KAAK,CAAC,IAAI,CAAC;QAAA,CAClB;QAED,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YACvB,IAAI,WAAW,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;YACjF,IAAI,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;gBAC/C,IAAI,CAAC,QAAQ,GAAG;oBACf,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;oBACvF,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE;iBACrD,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,CAAC;gBACZ,OAAO,KAAK,CAAC,MAAM,CAAC;YACrB,CAAC;YACD,sEAAsE;YACtE,wEAAwE;YACxE,mDAAmD;YACnD,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QAAA,CACZ;QAED,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE;YAC1B,OAAO,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAAA,CACnF;QAED,WAAW,GAAG;YACb,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC;YACpB,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS,EAAE,CAAC,CAAC,QAAQ,GAAG,KAAK;aAC7B,CAAC,CAAC,CAAC;QAAA,CACJ;QAED,YAAY,GAAG;YACd,OAAO,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAAA,CAC1G;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * lunR: gateway pairing (port of hermes-agent's pairing, self-contained).\n *\n * Unauthorized DM users get a short code; the owner approves it out-of-band\n * (`lunr gateway pair approve <platform> <code>`), which pairs that user.\n * Pending codes + approved users persist in <agentDir>/pairing/store.json\n * (chmod 0600 best-effort).\n *\n * Guards: 1h code TTL, max 3 pending codes per platform, 10-min per-user\n * issue rate limit, and a lockout — after 5 failed approve attempts a\n * pending code is invalidated. All limits are injectable for tests.\n */\n\nimport { randomInt } from \"node:crypto\";\nimport { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { getAgentDir } from \"../config.ts\";\n\n/** Unambiguous alphabet: no 0/O/1/I/L. */\nconst CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTUVWXYZ23456789\";\nconst CODE_LENGTH = 8;\n\nconst DEFAULT_TTL_MS = 60 * 60 * 1000;\nconst DEFAULT_RATE_LIMIT_MS = 10 * 60 * 1000;\nconst DEFAULT_MAX_PENDING = 3;\nconst DEFAULT_MAX_FAILS = 5;\nconst DEFAULT_LOCKOUT_MS = 60 * 60 * 1000;\n\ninterface PendingCode {\n\tcode: string;\n\tplatform: string;\n\tuserId: string;\n\tissuedAt: number;\n}\n\ninterface ApprovedUser {\n\tplatform: string;\n\tuserId: string;\n\tapprovedAt: number;\n}\n\ninterface PairingData {\n\tpending: PendingCode[];\n\tapproved: ApprovedUser[];\n\t/** Per-platform failed approval attempts (wrong codes). */\n\tfailedAttempts?: Record<string, number>;\n\t/** Per-platform lockout expiry epoch ms. */\n\tlockedOutUntil?: Record<string, number>;\n}\n\nexport interface PairingOptions {\n\t/** Directory holding store.json. Default: <agentDir>/pairing. */\n\tdir?: string;\n\tttlMs?: number;\n\trateLimitMs?: number;\n\tmaxPending?: number;\n\tmaxFails?: number;\n\t/** Lockout duration after maxFails wrong attempts. Default: 1 hour. */\n\tlockoutMs?: number;\n\t/** Clock injection for tests. */\n\tnow?: () => number;\n}\n\nexport interface PairingStore {\n\t/** Issue a new code; null when the user is rate-limited or the platform's pending list is full. */\n\tissueCode(platform: string, userId: string): string | null;\n\t/** Approve a code; returns the paired userId, or null on miss/expiry/lockout. */\n\tapprove(platform: string, code: string): string | null;\n\tisPaired(platform: string, userId: string): boolean;\n\tlistPending(): Array<{ code: string; platform: string; userId: string; expiresAt: number }>;\n\tlistApproved(): Array<{ platform: string; userId: string; approvedAt: number }>;\n}\n\nfunction normalizeCode(code: string): string {\n\treturn code.replace(/-/g, \"\").trim().toUpperCase();\n}\n\nfunction generateCode(): string {\n\tlet code = \"\";\n\tfor (let i = 0; i < CODE_LENGTH; i++) {\n\t\tcode += CODE_ALPHABET[randomInt(0, CODE_ALPHABET.length)];\n\t}\n\treturn code;\n}\n\nexport function createPairingStore(options: PairingOptions = {}): PairingStore {\n\tconst dir = options.dir ?? join(getAgentDir(), \"pairing\");\n\tconst ttlMs = options.ttlMs ?? DEFAULT_TTL_MS;\n\tconst rateLimitMs = options.rateLimitMs ?? DEFAULT_RATE_LIMIT_MS;\n\tconst maxPending = options.maxPending ?? DEFAULT_MAX_PENDING;\n\tconst maxFails = options.maxFails ?? DEFAULT_MAX_FAILS;\n\tconst lockoutMs = options.lockoutMs ?? DEFAULT_LOCKOUT_MS;\n\tconst now = options.now ?? (() => Date.now());\n\n\tfunction storeFile(): string {\n\t\treturn join(dir, \"store.json\");\n\t}\n\n\tfunction read(): PairingData {\n\t\tconst path = storeFile();\n\t\tif (!existsSync(path)) return { pending: [], approved: [] };\n\t\ttry {\n\t\t\tconst parsed: unknown = JSON.parse(readFileSync(path, \"utf-8\"));\n\t\t\tif (parsed == null || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n\t\t\t\treturn { pending: [], approved: [] };\n\t\t\t}\n\t\t\tconst p = parsed as Record<string, unknown>;\n\t\t\tconst pending = Array.isArray(p.pending) ? (p.pending as PendingCode[]) : [];\n\t\t\tconst approved = Array.isArray(p.approved) ? (p.approved as ApprovedUser[]) : [];\n\t\t\treturn {\n\t\t\t\tpending: pending.filter(\n\t\t\t\t\t(c) => typeof c?.code === \"string\" && typeof c?.platform === \"string\" && typeof c?.userId === \"string\",\n\t\t\t\t),\n\t\t\t\tapproved: approved.filter((u) => typeof u?.platform === \"string\" && typeof u?.userId === \"string\"),\n\t\t\t\tfailedAttempts:\n\t\t\t\t\ttypeof p.failedAttempts === \"object\" && p.failedAttempts !== null && !Array.isArray(p.failedAttempts)\n\t\t\t\t\t\t? (p.failedAttempts as Record<string, number>)\n\t\t\t\t\t\t: undefined,\n\t\t\t\tlockedOutUntil:\n\t\t\t\t\ttypeof p.lockedOutUntil === \"object\" && p.lockedOutUntil !== null && !Array.isArray(p.lockedOutUntil)\n\t\t\t\t\t\t? (p.lockedOutUntil as Record<string, number>)\n\t\t\t\t\t\t: undefined,\n\t\t\t};\n\t\t} catch {\n\t\t\treturn { pending: [], approved: [] }; // corrupt: start empty\n\t\t}\n\t}\n\n\tfunction write(data: PairingData): void {\n\t\tif (!existsSync(dir)) mkdirSync(dir, { recursive: true });\n\t\tconst path = storeFile();\n\t\tconst tmp = `${path}.tmp-${process.pid}`;\n\t\twriteFileSync(tmp, `${JSON.stringify(data, null, 2)}\\n`, \"utf-8\");\n\t\trenameSync(tmp, path);\n\t\ttry {\n\t\t\tchmodSync(path, 0o600);\n\t\t} catch {\n\t\t\t// best-effort\n\t\t}\n\t}\n\n\tfunction isLockedOut(platform: string): boolean {\n\t\tconst until = read().lockedOutUntil?.[platform] ?? 0;\n\t\treturn now() < until;\n\t}\n\n\tfunction recordFailedAttempt(platform: string): void {\n\t\tconst data = read();\n\t\tconst failed = data.failedAttempts ?? {};\n\t\tfailed[platform] = (failed[platform] ?? 0) + 1;\n\t\tif (failed[platform] >= maxFails) {\n\t\t\tconst locked = data.lockedOutUntil ?? {};\n\t\t\tlocked[platform] = now() + lockoutMs;\n\t\t\tfailed[platform] = 0;\n\t\t\tdata.lockedOutUntil = locked;\n\t\t}\n\t\tdata.failedAttempts = failed;\n\t\twrite(data);\n\t}\n\n\tfunction livePending(data: PairingData): PendingCode[] {\n\t\tconst cutoff = now() - ttlMs;\n\t\treturn data.pending.filter((c) => c.issuedAt >= cutoff);\n\t}\n\n\treturn {\n\t\tissueCode(platform, userId) {\n\t\t\tif (isLockedOut(platform)) return null;\n\t\t\tconst data = read();\n\t\t\t// Per-user rate limit: any code (live or expired) issued recently blocks re-issue.\n\t\t\tconst lastIssued = data.pending\n\t\t\t\t.filter((c) => c.platform === platform && c.userId === userId)\n\t\t\t\t.reduce((max, c) => Math.max(max, c.issuedAt), 0);\n\t\t\tif (lastIssued > 0 && now() - lastIssued < rateLimitMs) return null;\n\t\t\tconst live = livePending(data);\n\t\t\tif (live.filter((c) => c.platform === platform).length >= maxPending) return null;\n\t\t\tconst entry: PendingCode = {\n\t\t\t\tcode: generateCode(),\n\t\t\t\tplatform,\n\t\t\t\tuserId,\n\t\t\t\tissuedAt: now(),\n\t\t\t};\n\t\t\tdata.pending = [...live, entry];\n\t\t\twrite(data);\n\t\t\treturn entry.code;\n\t\t},\n\n\t\tapprove(platform, code) {\n\t\t\tif (isLockedOut(platform)) return null;\n\t\t\tconst data = read();\n\t\t\tconst live = livePending(data);\n\t\t\tconst normalized = normalizeCode(code);\n\t\t\tconst match = live.find((c) => c.platform === platform && c.code === normalized);\n\t\t\tif (match) {\n\t\t\t\tdata.pending = live.filter((c) => c !== match);\n\t\t\t\tdata.approved = [\n\t\t\t\t\t...data.approved.filter((u) => !(u.platform === platform && u.userId === match.userId)),\n\t\t\t\t\t{ platform, userId: match.userId, approvedAt: now() },\n\t\t\t\t];\n\t\t\t\twrite(data);\n\t\t\t\treturn match.userId;\n\t\t\t}\n\t\t\t// Failed attempt: increment the per-platform failure counter. When it\n\t\t\t// reaches maxFails the platform is locked out for lockoutMs so one user\n\t\t\t// brute-forcing cannot indefinitely consume codes.\n\t\t\trecordFailedAttempt(platform);\n\t\t\treturn null;\n\t\t},\n\n\t\tisPaired(platform, userId) {\n\t\t\treturn read().approved.some((u) => u.platform === platform && u.userId === userId);\n\t\t},\n\n\t\tlistPending() {\n\t\t\tconst data = read();\n\t\t\treturn livePending(data).map((c) => ({\n\t\t\t\tcode: c.code,\n\t\t\t\tplatform: c.platform,\n\t\t\t\tuserId: c.userId,\n\t\t\t\texpiresAt: c.issuedAt + ttlMs,\n\t\t\t}));\n\t\t},\n\n\t\tlistApproved() {\n\t\t\treturn read().approved.map((u) => ({ platform: u.platform, userId: u.userId, approvedAt: u.approvedAt }));\n\t\t},\n\t};\n}\n"]}

package/dist/gateway/router.d.ts

@@ -0,0 +1,48 @@
+/**
+ * lunR: gateway router.
+ *
+ * Every inbound MessageEvent flows through handleEvent:
+ *   1. group gating (allowedChats / freeResponseChats / requireMention,
+ *      with adapter-supplied metadata.mentionedBot)
+ *   2. authorization (authz.ts); denied DMs get a pairing code when the
+ *      behavior is "pair" and the user isn't rate-limited
+ *   3. command registry (/new, /undo, /redo, /model, /sessions, /title,
+ *      /context, /swarm, /compact, /thinking, /stop, /status, /help, /whoami)
+ *   4. normal path: bridge.runTurn with a StreamConsumer when streaming is
+ *      enabled and the adapter supports edit; the final text is
+ *      silence-filtered and folded INTO the streaming preview (edit, plus
+ *      continuation chunks when the preview was truncated) — no preview +
+ *      final double-send. Without streaming it is split (text.ts) and sent
+ *      sequentially, the first chunk replying to the triggering message.
+ * Errors surface as a compact "⚠ <one-line>" — never a stack trace.
+ */
+import { type BridgeSession, type BridgeSessionStatus, type TurnCallbacks } from "./agent-bridge.ts";
+import { type GatewayConfig } from "./config.ts";
+import type { PairingStore } from "./pairing.ts";
+import type { MessageEvent, PlatformAdapter } from "./types.ts";
+/** Structural bridge shape (AgentBridge satisfies it; tests fake it). */
+export interface BridgeLike {
+    runTurn(key: string, event: MessageEvent, callbacks: TurnCallbacks): Promise<string>;
+    abort(key: string): Promise<void> | void;
+    reset(key: string): void;
+    getStatus(key: string): BridgeSessionStatus;
+    getSession(key: string): Promise<BridgeSession | null>;
+    switchSession(key: string, sessionFile: string): Promise<void>;
+    undo(key: string): Promise<{
+        userText: string;
+    }>;
+    redo(key: string): Promise<void>;
+}
+export interface RouterDeps {
+    adapters: Map<string, PlatformAdapter>;
+    cfg: GatewayConfig;
+    pairing: PairingStore;
+    bridge: BridgeLike;
+    /** Reload gateway.json on every inbound event so CLI config edits (e.g. pair approve) are picked up by the running daemon. */
+    reloadConfig?: boolean;
+}
+export interface Router {
+    handleEvent(event: MessageEvent): Promise<void>;
+}
+export declare function createRouter(deps: RouterDeps): Router;
+//# sourceMappingURL=router.d.ts.map

package/dist/gateway/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/gateway/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,mBAAmB,EAAU,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAI7G,OAAO,EAAE,KAAK,aAAa,EAA2D,MAAM,aAAa,CAAC;AAC1G,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAIjD,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEhE,yEAAyE;AACzE,MAAM,WAAW,UAAU;IAC1B,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrF,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAAC;IAC5C,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,UAAU;IAC1B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACvC,GAAG,EAAE,aAAa,CAAC;IACnB,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,UAAU,CAAC;IACnB,8HAA8H;IAC9H,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,MAAM;IACtB,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAcD,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CA6LrD","sourcesContent":["/**\n * lunR: gateway router.\n *\n * Every inbound MessageEvent flows through handleEvent:\n *   1. group gating (allowedChats / freeResponseChats / requireMention,\n *      with adapter-supplied metadata.mentionedBot)\n *   2. authorization (authz.ts); denied DMs get a pairing code when the\n *      behavior is \"pair\" and the user isn't rate-limited\n *   3. command registry (/new, /undo, /redo, /model, /sessions, /title,\n *      /context, /swarm, /compact, /thinking, /stop, /status, /help, /whoami)\n *   4. normal path: bridge.runTurn with a StreamConsumer when streaming is\n *      enabled and the adapter supports edit; the final text is\n *      silence-filtered and folded INTO the streaming preview (edit, plus\n *      continuation chunks when the preview was truncated) — no preview +\n *      final double-send. Without streaming it is split (text.ts) and sent\n *      sequentially, the first chunk replying to the triggering message.\n * Errors surface as a compact \"⚠ <one-line>\" — never a stack trace.\n */\n\nimport { existsSync } from \"node:fs\";\n\nimport { type BridgeSession, type BridgeSessionStatus, QUEUED, type TurnCallbacks } from \"./agent-bridge.ts\";\nimport { registerGatewayApprovalHandler, runWithApprovalContext } from \"./approval.ts\";\nimport { isAuthorized } from \"./authz.ts\";\nimport { CHAT_COMMANDS, runChatCommand, sendCommandReply } from \"./commands.ts\";\nimport { type GatewayConfig, gatewayConfigPath, loadGatewayConfig, platformConfigFor } from \"./config.ts\";\nimport type { PairingStore } from \"./pairing.ts\";\nimport { buildSessionKey } from \"./session-keys.ts\";\nimport { applySilenceFilter, StreamConsumer } from \"./stream.ts\";\nimport { splitMessage } from \"./text.ts\";\nimport type { MessageEvent, PlatformAdapter } from \"./types.ts\";\n\n/** Structural bridge shape (AgentBridge satisfies it; tests fake it). */\nexport interface BridgeLike {\n\trunTurn(key: string, event: MessageEvent, callbacks: TurnCallbacks): Promise<string>;\n\tabort(key: string): Promise<void> | void;\n\treset(key: string): void;\n\tgetStatus(key: string): BridgeSessionStatus;\n\tgetSession(key: string): Promise<BridgeSession | null>;\n\tswitchSession(key: string, sessionFile: string): Promise<void>;\n\tundo(key: string): Promise<{ userText: string }>;\n\tredo(key: string): Promise<void>;\n}\n\nexport interface RouterDeps {\n\tadapters: Map<string, PlatformAdapter>;\n\tcfg: GatewayConfig;\n\tpairing: PairingStore;\n\tbridge: BridgeLike;\n\t/** Reload gateway.json on every inbound event so CLI config edits (e.g. pair approve) are picked up by the running daemon. */\n\treloadConfig?: boolean;\n}\n\nexport interface Router {\n\thandleEvent(event: MessageEvent): Promise<void>;\n}\n\nfunction oneLine(text: string): string {\n\treturn text.replace(/\\s+/g, \" \").trim().slice(0, 200);\n}\n\nfunction formatPairingCode(code: string): string {\n\treturn code.length === 8 ? `${code.slice(0, 4)}-${code.slice(4)}` : code;\n}\n\nfunction mentionedBot(event: MessageEvent): boolean {\n\treturn event.metadata?.mentionedBot === true;\n}\n\nexport function createRouter(deps: RouterDeps): Router {\n\tconst { adapters, cfg: initialCfg, pairing, bridge, reloadConfig } = deps;\n\n\t// lunr: headless gateway sessions must prompt for mutating tools in manual mode.\n\tregisterGatewayApprovalHandler();\n\n\t/** Reload gateway.json on every inbound event so CLI edits (e.g. pair approve) take effect immediately. */\n\tfunction freshCfg(): GatewayConfig {\n\t\tif (!reloadConfig) return initialCfg;\n\t\ttry {\n\t\t\tif (existsSync(gatewayConfigPath())) {\n\t\t\t\treturn loadGatewayConfig();\n\t\t\t}\n\t\t} catch {\n\t\t\t// fall through to initial config\n\t\t}\n\t\treturn initialCfg;\n\t}\n\n\tasync function sendError(adapter: PlatformAdapter, event: MessageEvent, message: string): Promise<void> {\n\t\tawait adapter.send(event.source.chatId, `⚠ ${oneLine(message)}`, {\n\t\t\treplyTo: event.messageId,\n\t\t\tthreadId: event.source.threadId,\n\t\t});\n\t}\n\n\t/** Step 1: group-chat early gating. Returns true when the event must be dropped. */\n\tfunction isGroupGated(event: MessageEvent, cfg: GatewayConfig): boolean {\n\t\tconst { source } = event;\n\t\tif (source.chatType === \"dm\") return false;\n\t\tconst platformCfg = platformConfigFor(cfg, source.platform);\n\t\tif (!platformCfg) return true;\n\t\tconst freeResponse = platformCfg.freeResponseChats.includes(source.chatId);\n\t\tif (\n\t\t\tplatformCfg.allowedChats.length > 0 &&\n\t\t\t!platformCfg.allowedChats.includes(source.chatId) &&\n\t\t\t!freeResponse &&\n\t\t\t!mentionedBot(event)\n\t\t) {\n\t\t\treturn true;\n\t\t}\n\t\tif (platformCfg.requireMention && !freeResponse && !mentionedBot(event)) {\n\t\t\treturn true;\n\t\t}\n\t\treturn false;\n\t}\n\n\t/** Step 2: authorization; handles the denied-DM pairing flow. Returns true when denied. */\n\tasync function isDenied(adapter: PlatformAdapter, event: MessageEvent, cfg: GatewayConfig): Promise<boolean> {\n\t\tif (isAuthorized(event.source, cfg, pairing)) return false;\n\t\tconst { source } = event;\n\t\tif (source.chatType !== \"dm\") return true; // denied group: silent\n\t\tif (cfg.unauthorizedDmBehavior !== \"pair\") return true;\n\t\tconst code = pairing.issueCode(source.platform, source.userId);\n\t\tif (code === null) return true; // rate-limited or pending list full: stay silent\n\t\tawait adapter.send(\n\t\t\tsource.chatId,\n\t\t\t`Your lunR pairing code: ${formatPairingCode(code)} — ask the owner to run: lunr gateway pair approve ${source.platform} ${formatPairingCode(code)}`,\n\t\t\t{ replyTo: event.messageId, threadId: source.threadId },\n\t\t);\n\t\treturn true;\n\t}\n\n\t/** Step 3: command registry. Returns true when the event was consumed. */\n\tasync function handleSlash(adapter: PlatformAdapter, event: MessageEvent, key: string): Promise<boolean> {\n\t\tconst text = event.text.trim();\n\t\tif (!text.startsWith(\"/\")) return false;\n\t\tconst firstToken = text.split(/\\s+/, 1)[0].toLowerCase();\n\t\tconst commandWord = firstToken.split(\"@\")[0].slice(1);\n\t\tconst args = text.slice(firstToken.length).trim();\n\t\tconst cmd = CHAT_COMMANDS.find((c) => c.name === commandWord || c.aliases?.includes(commandWord));\n\t\tif (!cmd) {\n\t\t\t// Unknown slash command: DM → normal text, group → ignore.\n\t\t\treturn event.source.chatType !== \"dm\";\n\t\t}\n\t\tconst ctx = {\n\t\t\tevent,\n\t\t\tkey,\n\t\t\tadapter,\n\t\t\tbridge,\n\t\t\targs,\n\t\t\treply: (message: string) => sendCommandReply(adapter, event, message),\n\t\t};\n\t\treturn runChatCommand(cmd, ctx);\n\t}\n\n\t/** Step 4 delivery: silence filter → split → sequential send.\n\t *\n\t * When a streaming preview message exists (editMessageId), the final text\n\t * is folded INTO it instead of sent as a duplicate: non-truncated previews\n\t * get a final edit (covers silence-marker stripping), truncated previews\n\t * are edited to chunk 1 and the remaining chunks are sent as follow-ups. */\n\tasync function deliver(\n\t\tadapter: PlatformAdapter,\n\t\tevent: MessageEvent,\n\t\ttext: string,\n\t\topts: { reply: boolean; editMessageId?: string; previewTruncated?: boolean },\n\t): Promise<void> {\n\t\tconst filtered = applySilenceFilter(text);\n\t\tif (filtered === null) return;\n\t\tconst chunks = splitMessage(filtered, adapter.maxMessageLength);\n\t\tlet startIndex = 0;\n\t\tif (opts.editMessageId) {\n\t\t\tif (!opts.previewTruncated) {\n\t\t\t\t// Preview already holds the whole text: one final edit, no new message.\n\t\t\t\tawait adapter.editMessage(event.source.chatId, opts.editMessageId, filtered);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\t// Preview was truncated: upgrade it to the first full chunk.\n\t\t\tawait adapter.editMessage(event.source.chatId, opts.editMessageId, chunks[0]);\n\t\t\tstartIndex = 1;\n\t\t}\n\t\tfor (let index = startIndex; index < chunks.length; index++) {\n\t\t\tconst result = await adapter.send(event.source.chatId, chunks[index], {\n\t\t\t\treplyTo: opts.reply && index === 0 ? event.messageId : undefined,\n\t\t\t\tthreadId: event.source.threadId,\n\t\t\t});\n\t\t\tif (!result.success) {\n\t\t\t\tconsole.error(`[gateway] send failed on ${adapter.platform}: ${result.error ?? \"unknown error\"}`);\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t}\n\n\tasync function runTurn(\n\t\tadapter: PlatformAdapter,\n\t\tevent: MessageEvent,\n\t\tkey: string,\n\t\tcfg: GatewayConfig,\n\t): Promise<void> {\n\t\tconst streaming = cfg.streaming.enabled && typeof adapter.editMessage === \"function\";\n\t\tlet consumer: StreamConsumer | undefined;\n\t\tif (streaming) {\n\t\t\tconsumer = new StreamConsumer({\n\t\t\t\tsendInitial: async (text) => {\n\t\t\t\t\tconst result = await adapter.send(event.source.chatId, text, {\n\t\t\t\t\t\treplyTo: event.messageId,\n\t\t\t\t\t\tthreadId: event.source.threadId,\n\t\t\t\t\t});\n\t\t\t\t\treturn result.success ? (result.messageId ?? null) : null;\n\t\t\t\t},\n\t\t\t\tedit: async (messageId, text) => {\n\t\t\t\t\tawait adapter.editMessage(event.source.chatId, messageId, text);\n\t\t\t\t},\n\t\t\t\tintervalMs: cfg.streaming.editIntervalMs,\n\t\t\t\tthreshold: cfg.streaming.bufferThreshold,\n\t\t\t\tmaxPreview: adapter.maxMessageLength,\n\t\t\t});\n\t\t}\n\n\t\tconst callbacks: TurnCallbacks = {\n\t\t\tonDelta: consumer ? (delta) => consumer.push(delta) : undefined,\n\t\t\tonFollowUpResult: (text) => {\n\t\t\t\tvoid deliver(adapter, event, text, { reply: false });\n\t\t\t},\n\t\t\tonError: (message) => {\n\t\t\t\tvoid sendError(adapter, event, message);\n\t\t\t},\n\t\t};\n\n\t\tconst result = await runWithApprovalContext({ key, adapter, source: event.source }, () =>\n\t\t\tbridge.runTurn(key, event, callbacks),\n\t\t);\n\t\tif (result === QUEUED) return; // queued behind a running turn: no reply\n\t\tif (consumer) await consumer.finalize();\n\t\tawait deliver(adapter, event, result, {\n\t\t\treply: !consumer,\n\t\t\teditMessageId: consumer?.sentMessageId ?? undefined,\n\t\t\tpreviewTruncated: consumer?.truncated ?? false,\n\t\t});\n\t}\n\n\treturn {\n\t\tasync handleEvent(event: MessageEvent): Promise<void> {\n\t\t\tconst adapter = adapters.get(event.source.platform);\n\t\t\tif (!adapter) return;\n\t\t\tconst cfg = freshCfg();\n\t\t\ttry {\n\t\t\t\tif (isGroupGated(event, cfg)) return;\n\t\t\t\tif (await isDenied(adapter, event, cfg)) return;\n\t\t\t\tconst key = buildSessionKey(event.source, { groupSessionsPerUser: cfg.groupSessionsPerUser });\n\t\t\t\tif (await handleSlash(adapter, event, key)) return;\n\t\t\t\tawait adapter.sendTyping(event.source.chatId, event.source.threadId).catch(() => {});\n\t\t\t\tawait runTurn(adapter, event, key, cfg);\n\t\t\t} catch (err) {\n\t\t\t\tawait sendError(adapter, event, err instanceof Error ? err.message : String(err)).catch(() => {});\n\t\t\t}\n\t\t},\n\t};\n}\n"]}