@ashx-j/lunr 0.2.25 → 0.2.27

package/dist/gateway/approval.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../../src/gateway/approval.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EACN,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAIrB,MAAM,wBAAwB,CAAC;AAMhC,OAAO,KAAK,EAAc,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAO5F,UAAU,eAAe;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AA6CD,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEhG;AAmED,mDAAmD;AACnD,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAMlG;AAED,2EAA2E;AAC3E,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CA+C9G;AAED,sEAAsE;AACtE,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CASxD;AAED,wBAAgB,qBAAqB,IAAI,IAAI,CAU5C;AAED,yDAAyD;AACzD,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C","sourcesContent":["/**\n * Gateway approvals for large subagent launches and plans.\n * A missing chat context rejects large launches; plans pass through.\n */\n\nimport { AsyncLocalStorage } from \"node:async_hooks\";\nimport { randomBytes } from \"node:crypto\";\nimport {\n\ttype ApprovalRequest,\n\ttype ApprovalResponse,\n\tNO_HANDLER_REASON,\n\tregisterApprovalHandler,\n\tsetPermissionMode,\n} from \"../core/permissions.ts\";\nimport { isAuthorized, isGatewayOwner } from \"./authz.ts\";\nimport { loadGatewayConfig } from \"./config.ts\";\nimport { conversationBinding } from \"./conversations.ts\";\nimport { createPairingStore } from \"./pairing.ts\";\nimport { getSession } from \"./store.ts\";\nimport type { ButtonSpec, CallbackEvent, PlatformAdapter, SessionSource } from \"./types.ts\";\n\nconst CALLBACK_PREFIX = \"ap:\";\nconst ID_LENGTH = 8;\nconst CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTUVWXYZ23456789\";\nconst DEFAULT_TIMEOUT_MS = 5 * 60 * 1000;\n\ninterface ApprovalContext {\n\tkey: string;\n\tadapter: PlatformAdapter;\n\tsource: SessionSource;\n\ttimeoutMs?: number;\n}\n\ninterface PendingApproval {\n\tkey?: string;\n\tsource: SessionSource;\n\tplan: boolean;\n\tresolve: (value: ApprovalResponse) => void;\n\treject: (reason?: unknown) => void;\n\ttimeout: ReturnType<typeof setTimeout>;\n\tmessageId?: string;\n\tadapter: PlatformAdapter;\n\tchatId: string;\n\tthreadId?: string;\n\tuserId: string;\n}\n\nconst approvalContext = new AsyncLocalStorage<ApprovalContext>();\nconst pending = new Map<string, PendingApproval>();\n\nfunction generateId(): string {\n\tlet id = \"\";\n\tconst bytes = randomBytes(ID_LENGTH);\n\tfor (let i = 0; i < ID_LENGTH; i++) {\n\t\tid += CODE_ALPHABET[bytes[i] % CODE_ALPHABET.length];\n\t}\n\treturn id;\n}\n\nfunction makeCallbackData(id: string, action: ApprovalResponse | \"cancel\"): string {\n\treturn `${CALLBACK_PREFIX}${id}:${action}`;\n}\n\nfunction parseCallbackData(data: string): { id: string; action: ApprovalResponse | \"cancel\" } | null {\n\tif (!data.startsWith(CALLBACK_PREFIX)) return null;\n\tconst rest = data.slice(CALLBACK_PREFIX.length);\n\tconst colon = rest.indexOf(\":\");\n\tif (colon === -1) return null;\n\tconst id = rest.slice(0, colon);\n\tconst action = rest.slice(colon + 1);\n\tif (action === \"once\" || action === \"session\" || action === \"reject\" || action === \"cancel\") {\n\t\treturn { id, action };\n\t}\n\treturn null;\n}\n\n/** Run code with the gateway approval context available to tool-call gates. */\nexport function runWithApprovalContext<T>(ctx: ApprovalContext, fn: () => Promise<T>): Promise<T> {\n\treturn approvalContext.run(ctx, fn);\n}\n\nasync function createApprovalPrompt(\n\tadapter: PlatformAdapter,\n\tsource: SessionSource,\n\treq: ApprovalRequest,\n\ttimeoutMs = DEFAULT_TIMEOUT_MS,\n\tkey?: string,\n): Promise<ApprovalResponse> {\n\tconst id = generateId();\n\t// Large child launches get a dedicated title; inline buttons cannot capture feedback.\n\tconst title =\n\t\treq.kind === \"large-subagent-launch\"\n\t\t\t? `Approve large subagent launch?\\n${req.detail}`\n\t\t\t: `Approve ${req.toolName}?\\n${req.detail}`;\n\tconst rows: ButtonSpec[][] = [\n\t\t[\n\t\t\t{ label: \"✓ Approve once\", data: makeCallbackData(id, \"once\") },\n\t\t\t{ label: \"✓ Approve session\", data: makeCallbackData(id, \"session\") },\n\t\t],\n\t\t[{ label: \"✗ Reject\", data: makeCallbackData(id, \"reject\") }],\n\t];\n\n\treturn new Promise<ApprovalResponse>((resolve, reject) => {\n\t\tlet messageId: string | undefined;\n\t\tconst timeout = setTimeout(() => {\n\t\t\tpending.delete(id);\n\t\t\treject(new Error(\"Approval request timed out\"));\n\t\t\tif (messageId) {\n\t\t\t\tvoid adapter.editMessage(source.chatId, messageId, \"⏱ Approval expired.\", []).catch(() => {});\n\t\t\t}\n\t\t}, timeoutMs);\n\n\t\tconst entry: PendingApproval = {\n\t\t\tkey,\n\t\t\tsource,\n\t\t\tplan: req.kind === \"plan\",\n\t\t\tresolve,\n\t\t\treject,\n\t\t\ttimeout,\n\t\t\tadapter,\n\t\t\tchatId: source.chatId,\n\t\t\tthreadId: source.threadId,\n\t\t\tuserId: source.userId,\n\t\t};\n\t\tpending.set(id, entry);\n\t\tvoid (async () => {\n\t\t\ttry {\n\t\t\t\tconst result = await adapter.sendButtons(source.chatId, title, rows, { threadId: source.threadId });\n\t\t\t\tif (!result.success || !result.messageId) throw new Error(result.error ?? \"Failed to send approval prompt\");\n\t\t\t\tmessageId = result.messageId;\n\t\t\t\tif (pending.get(id) !== entry) {\n\t\t\t\t\tawait adapter\n\t\t\t\t\t\t.editMessage(source.chatId, messageId, \"Approval cancelled or expired.\", [])\n\t\t\t\t\t\t.catch(() => {});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tentry.messageId = messageId;\n\t\t\t} catch (err) {\n\t\t\t\tclearTimeout(timeout);\n\t\t\t\tpending.delete(id);\n\t\t\t\treject(err);\n\t\t\t}\n\t\t})();\n\t});\n}\n\n/** Approval handler passed to core permissions. */\nexport async function createGatewayApprovalRequest(req: ApprovalRequest): Promise<ApprovalResponse> {\n\tconst ctx = approvalContext.getStore();\n\tif (!ctx) {\n\t\tthrow new Error(NO_HANDLER_REASON);\n\t}\n\treturn createApprovalPrompt(ctx.adapter, ctx.source, req, ctx.timeoutMs, ctx.key);\n}\n\n/** Register the gateway approval handler with the core permission gate. */\nexport function registerGatewayApprovalHandler(): void {\n\tregisterApprovalHandler(createGatewayApprovalRequest);\n}\n\n/**\n * Dispatch a callback event to an outstanding approval prompt.\n * Returns true when the data matched the approval prefix (whether or not a\n * pending prompt existed).\n */\nexport async function handleApprovalCallback(event: CallbackEvent, adapter?: PlatformAdapter): Promise<boolean> {\n\tconst parsed = parseCallbackData(event.data);\n\tif (!parsed) return false;\n\n\tconst entry = pending.get(parsed.id);\n\tif (!entry) {\n\t\t// Best-effort answer for stale callbacks.\n\t\tawait adapter?.answerCallback(event.id, \"Approval expired.\").catch(() => {});\n\t\treturn true;\n\t}\n\n\tif (\n\t\tevent.userId !== entry.userId ||\n\t\tevent.chatId !== entry.chatId ||\n\t\tevent.threadId !== entry.threadId ||\n\t\t(adapter && adapter.platform !== entry.adapter.platform)\n\t) {\n\t\tawait entry.adapter.answerCallback(event.id, \"⛔ Not your approval.\").catch(() => {});\n\t\treturn true;\n\t}\n\n\tclearTimeout(entry.timeout);\n\tpending.delete(parsed.id);\n\n\tconst response: ApprovalResponse =\n\t\tparsed.action === \"reject\" || parsed.action === \"cancel\" ? \"reject\" : parsed.action;\n\tconst binding = entry.key ? conversationBinding(entry.key) : undefined;\n\tif (binding?.owner && (!isGatewayOwner(entry.source, loadGatewayConfig()) || binding.owner !== event.userId)) {\n\t\tentry.resolve(\"reject\");\n\t\tawait entry.adapter.answerCallback(event.id, \"Owner access was removed.\").catch(() => {});\n\t\treturn true;\n\t}\n\tif (binding && !isAuthorized(entry.source, loadGatewayConfig(), createPairingStore())) {\n\t\tentry.resolve(\"reject\");\n\t\treturn true;\n\t}\n\tif (entry.plan && response !== \"reject\" && entry.key) {\n\t\tconst sessionId = getSession(entry.key)?.sessionId;\n\t\tif (sessionId) setPermissionMode(\"yolo\", sessionId);\n\t}\n\tentry.resolve(response);\n\n\tconst label =\n\t\tparsed.action === \"reject\" || parsed.action === \"cancel\" ? \"Rejected.\" : `Approved (${parsed.action}).`;\n\tawait entry.adapter.editMessage(entry.chatId, entry.messageId ?? \"\", label, []).catch(() => {});\n\tawait entry.adapter.answerCallback(event.id).catch(() => {});\n\treturn true;\n}\n\n/** Test hook: clear all pending approvals and stop their timeouts. */\nexport function cancelGatewayApprovals(key: string): void {\n\tfor (const [id, entry] of pending) {\n\t\tif (entry.key !== key) continue;\n\t\tclearTimeout(entry.timeout);\n\t\tpending.delete(id);\n\t\tentry.resolve(\"reject\");\n\t\tif (entry.messageId)\n\t\t\tvoid entry.adapter.editMessage(entry.chatId, entry.messageId, \"Approval cancelled.\", []).catch(() => {});\n\t}\n}\n\nexport function resetApprovalRegistry(): void {\n\tfor (const entry of pending.values()) {\n\t\tclearTimeout(entry.timeout);\n\t\ttry {\n\t\t\tentry.reject(new Error(\"Approval registry reset\"));\n\t\t} catch {\n\t\t\t// ignore settled promise\n\t\t}\n\t}\n\tpending.clear();\n}\n\n/** Test hook: number of outstanding approval prompts. */\nexport function activeApprovalCount(): number {\n\treturn pending.size;\n}\n"]}
+{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../../src/gateway/approval.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EACN,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAIrB,MAAM,wBAAwB,CAAC;AAMhC,OAAO,KAAK,EAAc,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAO5F,UAAU,eAAe;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AA6CD,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEhG;AAmED,mDAAmD;AACnD,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAMlG;AAED,2EAA2E;AAC3E,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CA+C9G;AAED,sEAAsE;AACtE,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CASxD;AAED,wBAAgB,qBAAqB,IAAI,IAAI,CAU5C;AAED,yDAAyD;AACzD,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C","sourcesContent":["/**\n * Gateway approvals for large subagent launches and plans.\n * A missing chat context rejects large launches; plans pass through.\n */\n\nimport { AsyncLocalStorage } from \"node:async_hooks\";\nimport { randomBytes } from \"node:crypto\";\nimport {\n\ttype ApprovalRequest,\n\ttype ApprovalResponse,\n\tNO_HANDLER_REASON,\n\tregisterApprovalHandler,\n\tsetPermissionMode,\n} from \"../core/permissions.ts\";\nimport { isAuthorized } from \"./authz.ts\";\nimport { loadGatewayConfig } from \"./config.ts\";\nimport { conversationBinding } from \"./conversations.ts\";\nimport { createPairingStore } from \"./pairing.ts\";\nimport { getSession } from \"./store.ts\";\nimport type { ButtonSpec, CallbackEvent, PlatformAdapter, SessionSource } from \"./types.ts\";\n\nconst CALLBACK_PREFIX = \"ap:\";\nconst ID_LENGTH = 8;\nconst CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTUVWXYZ23456789\";\nconst DEFAULT_TIMEOUT_MS = 5 * 60 * 1000;\n\ninterface ApprovalContext {\n\tkey: string;\n\tadapter: PlatformAdapter;\n\tsource: SessionSource;\n\ttimeoutMs?: number;\n}\n\ninterface PendingApproval {\n\tkey?: string;\n\tsource: SessionSource;\n\tplan: boolean;\n\tresolve: (value: ApprovalResponse) => void;\n\treject: (reason?: unknown) => void;\n\ttimeout: ReturnType<typeof setTimeout>;\n\tmessageId?: string;\n\tadapter: PlatformAdapter;\n\tchatId: string;\n\tthreadId?: string;\n\tuserId: string;\n}\n\nconst approvalContext = new AsyncLocalStorage<ApprovalContext>();\nconst pending = new Map<string, PendingApproval>();\n\nfunction generateId(): string {\n\tlet id = \"\";\n\tconst bytes = randomBytes(ID_LENGTH);\n\tfor (let i = 0; i < ID_LENGTH; i++) {\n\t\tid += CODE_ALPHABET[bytes[i] % CODE_ALPHABET.length];\n\t}\n\treturn id;\n}\n\nfunction makeCallbackData(id: string, action: ApprovalResponse | \"cancel\"): string {\n\treturn `${CALLBACK_PREFIX}${id}:${action}`;\n}\n\nfunction parseCallbackData(data: string): { id: string; action: ApprovalResponse | \"cancel\" } | null {\n\tif (!data.startsWith(CALLBACK_PREFIX)) return null;\n\tconst rest = data.slice(CALLBACK_PREFIX.length);\n\tconst colon = rest.indexOf(\":\");\n\tif (colon === -1) return null;\n\tconst id = rest.slice(0, colon);\n\tconst action = rest.slice(colon + 1);\n\tif (action === \"once\" || action === \"session\" || action === \"reject\" || action === \"cancel\") {\n\t\treturn { id, action };\n\t}\n\treturn null;\n}\n\n/** Run code with the gateway approval context available to tool-call gates. */\nexport function runWithApprovalContext<T>(ctx: ApprovalContext, fn: () => Promise<T>): Promise<T> {\n\treturn approvalContext.run(ctx, fn);\n}\n\nasync function createApprovalPrompt(\n\tadapter: PlatformAdapter,\n\tsource: SessionSource,\n\treq: ApprovalRequest,\n\ttimeoutMs = DEFAULT_TIMEOUT_MS,\n\tkey?: string,\n): Promise<ApprovalResponse> {\n\tconst id = generateId();\n\t// Large child launches get a dedicated title; inline buttons cannot capture feedback.\n\tconst title =\n\t\treq.kind === \"large-subagent-launch\"\n\t\t\t? `Approve large subagent launch?\\n${req.detail}`\n\t\t\t: `Approve ${req.toolName}?\\n${req.detail}`;\n\tconst rows: ButtonSpec[][] = [\n\t\t[\n\t\t\t{ label: \"✓ Approve once\", data: makeCallbackData(id, \"once\") },\n\t\t\t{ label: \"✓ Approve session\", data: makeCallbackData(id, \"session\") },\n\t\t],\n\t\t[{ label: \"✗ Reject\", data: makeCallbackData(id, \"reject\") }],\n\t];\n\n\treturn new Promise<ApprovalResponse>((resolve, reject) => {\n\t\tlet messageId: string | undefined;\n\t\tconst timeout = setTimeout(() => {\n\t\t\tpending.delete(id);\n\t\t\treject(new Error(\"Approval request timed out\"));\n\t\t\tif (messageId) {\n\t\t\t\tvoid adapter.editMessage(source.chatId, messageId, \"⏱ Approval expired.\", []).catch(() => {});\n\t\t\t}\n\t\t}, timeoutMs);\n\n\t\tconst entry: PendingApproval = {\n\t\t\tkey,\n\t\t\tsource,\n\t\t\tplan: req.kind === \"plan\",\n\t\t\tresolve,\n\t\t\treject,\n\t\t\ttimeout,\n\t\t\tadapter,\n\t\t\tchatId: source.chatId,\n\t\t\tthreadId: source.threadId,\n\t\t\tuserId: source.userId,\n\t\t};\n\t\tpending.set(id, entry);\n\t\tvoid (async () => {\n\t\t\ttry {\n\t\t\t\tconst result = await adapter.sendButtons(source.chatId, title, rows, { threadId: source.threadId });\n\t\t\t\tif (!result.success || !result.messageId) throw new Error(result.error ?? \"Failed to send approval prompt\");\n\t\t\t\tmessageId = result.messageId;\n\t\t\t\tif (pending.get(id) !== entry) {\n\t\t\t\t\tawait adapter\n\t\t\t\t\t\t.editMessage(source.chatId, messageId, \"Approval cancelled or expired.\", [])\n\t\t\t\t\t\t.catch(() => {});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tentry.messageId = messageId;\n\t\t\t} catch (err) {\n\t\t\t\tclearTimeout(timeout);\n\t\t\t\tpending.delete(id);\n\t\t\t\treject(err);\n\t\t\t}\n\t\t})();\n\t});\n}\n\n/** Approval handler passed to core permissions. */\nexport async function createGatewayApprovalRequest(req: ApprovalRequest): Promise<ApprovalResponse> {\n\tconst ctx = approvalContext.getStore();\n\tif (!ctx) {\n\t\tthrow new Error(NO_HANDLER_REASON);\n\t}\n\treturn createApprovalPrompt(ctx.adapter, ctx.source, req, ctx.timeoutMs, ctx.key);\n}\n\n/** Register the gateway approval handler with the core permission gate. */\nexport function registerGatewayApprovalHandler(): void {\n\tregisterApprovalHandler(createGatewayApprovalRequest);\n}\n\n/**\n * Dispatch a callback event to an outstanding approval prompt.\n * Returns true when the data matched the approval prefix (whether or not a\n * pending prompt existed).\n */\nexport async function handleApprovalCallback(event: CallbackEvent, adapter?: PlatformAdapter): Promise<boolean> {\n\tconst parsed = parseCallbackData(event.data);\n\tif (!parsed) return false;\n\n\tconst entry = pending.get(parsed.id);\n\tif (!entry) {\n\t\t// Best-effort answer for stale callbacks.\n\t\tawait adapter?.answerCallback(event.id, \"Approval expired.\").catch(() => {});\n\t\treturn true;\n\t}\n\n\tif (\n\t\tevent.userId !== entry.userId ||\n\t\tevent.chatId !== entry.chatId ||\n\t\tevent.threadId !== entry.threadId ||\n\t\t(adapter && adapter.platform !== entry.adapter.platform)\n\t) {\n\t\tawait entry.adapter.answerCallback(event.id, \"⛔ Not your approval.\").catch(() => {});\n\t\treturn true;\n\t}\n\n\tclearTimeout(entry.timeout);\n\tpending.delete(parsed.id);\n\n\tconst response: ApprovalResponse =\n\t\tparsed.action === \"reject\" || parsed.action === \"cancel\" ? \"reject\" : parsed.action;\n\tconst binding = entry.key ? conversationBinding(entry.key) : undefined;\n\tif (binding?.owner && binding.owner !== event.userId) {\n\t\tentry.resolve(\"reject\");\n\t\tawait entry.adapter.answerCallback(event.id, \"This session belongs to a different user.\").catch(() => {});\n\t\treturn true;\n\t}\n\tif (binding && !isAuthorized(entry.source, loadGatewayConfig(), createPairingStore())) {\n\t\tentry.resolve(\"reject\");\n\t\treturn true;\n\t}\n\tif (entry.plan && response !== \"reject\" && entry.key) {\n\t\tconst sessionId = getSession(entry.key)?.sessionId;\n\t\tif (sessionId) setPermissionMode(\"yolo\", sessionId);\n\t}\n\tentry.resolve(response);\n\n\tconst label =\n\t\tparsed.action === \"reject\" || parsed.action === \"cancel\" ? \"Rejected.\" : `Approved (${parsed.action}).`;\n\tawait entry.adapter.editMessage(entry.chatId, entry.messageId ?? \"\", label, []).catch(() => {});\n\tawait entry.adapter.answerCallback(event.id).catch(() => {});\n\treturn true;\n}\n\n/** Test hook: clear all pending approvals and stop their timeouts. */\nexport function cancelGatewayApprovals(key: string): void {\n\tfor (const [id, entry] of pending) {\n\t\tif (entry.key !== key) continue;\n\t\tclearTimeout(entry.timeout);\n\t\tpending.delete(id);\n\t\tentry.resolve(\"reject\");\n\t\tif (entry.messageId)\n\t\t\tvoid entry.adapter.editMessage(entry.chatId, entry.messageId, \"Approval cancelled.\", []).catch(() => {});\n\t}\n}\n\nexport function resetApprovalRegistry(): void {\n\tfor (const entry of pending.values()) {\n\t\tclearTimeout(entry.timeout);\n\t\ttry {\n\t\t\tentry.reject(new Error(\"Approval registry reset\"));\n\t\t} catch {\n\t\t\t// ignore settled promise\n\t\t}\n\t}\n\tpending.clear();\n}\n\n/** Test hook: number of outstanding approval prompts. */\nexport function activeApprovalCount(): number {\n\treturn pending.size;\n}\n"]}

package/dist/gateway/approval.js

@@ -5,7 +5,7 @@
 import { AsyncLocalStorage } from "node:async_hooks";
 import { randomBytes } from "node:crypto";
 import { NO_HANDLER_REASON, registerApprovalHandler, setPermissionMode, } from "../core/permissions.js";
-import { isAuthorized, isGatewayOwner } from "./authz.js";
+import { isAuthorized } from "./authz.js";
 import { loadGatewayConfig } from "./config.js";
 import { conversationBinding } from "./conversations.js";
 import { createPairingStore } from "./pairing.js";
@@ -140,9 +140,9 @@ export async function handleApprovalCallback(event, adapter) {
     pending.delete(parsed.id);
     const response = parsed.action === "reject" || parsed.action === "cancel" ? "reject" : parsed.action;
     const binding = entry.key ? conversationBinding(entry.key) : undefined;
-    if (binding?.owner && (!isGatewayOwner(entry.source, loadGatewayConfig()) || binding.owner !== event.userId)) {
+    if (binding?.owner && binding.owner !== event.userId) {
         entry.resolve("reject");
-        await entry.adapter.answerCallback(event.id, "Owner access was removed.").catch(() => { });
+        await entry.adapter.answerCallback(event.id, "This session belongs to a different user.").catch(() => { });
         return true;
     }
     if (binding && !isAuthorized(entry.source, loadGatewayConfig(), createPairingStore())) {

package/dist/gateway/approval.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../src/gateway/approval.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAGN,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGxC,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,aAAa,GAAG,iCAAiC,CAAC;AACxD,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAuBzC,MAAM,eAAe,GAAG,IAAI,iBAAiB,EAAmB,CAAC;AACjE,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEnD,SAAS,UAAU,GAAW;IAC7B,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,EAAE,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,CAAC;AAAA,CACV;AAED,SAAS,gBAAgB,CAAC,EAAU,EAAE,MAAmC,EAAU;IAClF,OAAO,GAAG,eAAe,GAAG,EAAE,IAAI,MAAM,EAAE,CAAC;AAAA,CAC3C;AAED,SAAS,iBAAiB,CAAC,IAAY,EAA8D;IACpG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7F,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAI,GAAoB,EAAE,EAAoB,EAAc;IACjG,OAAO,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAAA,CACpC;AAED,KAAK,UAAU,oBAAoB,CAClC,OAAwB,EACxB,MAAqB,EACrB,GAAoB,EACpB,SAAS,GAAG,kBAAkB,EAC9B,GAAY,EACgB;IAC5B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,sFAAsF;IACtF,MAAM,KAAK,GACV,GAAG,CAAC,IAAI,KAAK,uBAAuB;QACnC,CAAC,CAAC,mCAAmC,GAAG,CAAC,MAAM,EAAE;QACjD,CAAC,CAAC,WAAW,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAmB;QAC5B;YACC,EAAE,KAAK,EAAE,kBAAgB,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE;YAC/D,EAAE,KAAK,EAAE,qBAAmB,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE;SACrE;QACD,CAAC,EAAE,KAAK,EAAE,YAAU,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;KAC7D,CAAC;IAEF,OAAO,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;QACzD,IAAI,SAA6B,CAAC;QAClC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YAChC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnB,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAChD,IAAI,SAAS,EAAE,CAAC;gBACf,KAAK,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,uBAAqB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;YAC/F,CAAC;QAAA,CACD,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,KAAK,GAAoB;YAC9B,GAAG;YACH,MAAM;YACN,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,MAAM;YACzB,OAAO;YACP,MAAM;YACN,OAAO;YACP,OAAO;YACP,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;SACrB,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACvB,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACpG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,gCAAgC,CAAC,CAAC;gBAC5G,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;gBAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC/B,MAAM,OAAO;yBACX,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gCAAgC,EAAE,EAAE,CAAC;yBAC3E,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;oBAClB,OAAO;gBACR,CAAC;gBACD,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,MAAM,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;QAAA,CACD,CAAC,EAAE,CAAC;IAAA,CACL,CAAC,CAAC;AAAA,CACH;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,GAAoB,EAA6B;IACnG,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,EAAE,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,oBAAoB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;AAAA,CAClF;AAED,2EAA2E;AAC3E,MAAM,UAAU,8BAA8B,GAAS;IACtD,uBAAuB,CAAC,4BAA4B,CAAC,CAAC;AAAA,CACtD;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAoB,EAAE,OAAyB,EAAoB;IAC/G,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,0CAA0C;QAC1C,MAAM,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IACC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC7B,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC7B,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QACjC,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EACvD,CAAC;QACF,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,wBAAsB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE1B,MAAM,QAAQ,GACb,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IACrF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,IAAI,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9G,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;QACvF,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,IAAI,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC;QACnD,IAAI,SAAS;YAAE,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAExB,MAAM,KAAK,GACV,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,MAAM,IAAI,CAAC;IACzG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;IAChG,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,sEAAsE;AACtE,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAQ;IACzD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG;YAAE,SAAS;QAChC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxB,IAAI,KAAK,CAAC,SAAS;YAClB,KAAK,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;IAC3G,CAAC;AAAA,CACD;AAED,MAAM,UAAU,qBAAqB,GAAS;IAC7C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACtC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC;YACJ,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACR,yBAAyB;QAC1B,CAAC;IACF,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,CAAC;AAAA,CAChB;AAED,yDAAyD;AACzD,MAAM,UAAU,mBAAmB,GAAW;IAC7C,OAAO,OAAO,CAAC,IAAI,CAAC;AAAA,CACpB","sourcesContent":["/**\n * Gateway approvals for large subagent launches and plans.\n * A missing chat context rejects large launches; plans pass through.\n */\n\nimport { AsyncLocalStorage } from \"node:async_hooks\";\nimport { randomBytes } from \"node:crypto\";\nimport {\n\ttype ApprovalRequest,\n\ttype ApprovalResponse,\n\tNO_HANDLER_REASON,\n\tregisterApprovalHandler,\n\tsetPermissionMode,\n} from \"../core/permissions.ts\";\nimport { isAuthorized, isGatewayOwner } from \"./authz.ts\";\nimport { loadGatewayConfig } from \"./config.ts\";\nimport { conversationBinding } from \"./conversations.ts\";\nimport { createPairingStore } from \"./pairing.ts\";\nimport { getSession } from \"./store.ts\";\nimport type { ButtonSpec, CallbackEvent, PlatformAdapter, SessionSource } from \"./types.ts\";\n\nconst CALLBACK_PREFIX = \"ap:\";\nconst ID_LENGTH = 8;\nconst CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTUVWXYZ23456789\";\nconst DEFAULT_TIMEOUT_MS = 5 * 60 * 1000;\n\ninterface ApprovalContext {\n\tkey: string;\n\tadapter: PlatformAdapter;\n\tsource: SessionSource;\n\ttimeoutMs?: number;\n}\n\ninterface PendingApproval {\n\tkey?: string;\n\tsource: SessionSource;\n\tplan: boolean;\n\tresolve: (value: ApprovalResponse) => void;\n\treject: (reason?: unknown) => void;\n\ttimeout: ReturnType<typeof setTimeout>;\n\tmessageId?: string;\n\tadapter: PlatformAdapter;\n\tchatId: string;\n\tthreadId?: string;\n\tuserId: string;\n}\n\nconst approvalContext = new AsyncLocalStorage<ApprovalContext>();\nconst pending = new Map<string, PendingApproval>();\n\nfunction generateId(): string {\n\tlet id = \"\";\n\tconst bytes = randomBytes(ID_LENGTH);\n\tfor (let i = 0; i < ID_LENGTH; i++) {\n\t\tid += CODE_ALPHABET[bytes[i] % CODE_ALPHABET.length];\n\t}\n\treturn id;\n}\n\nfunction makeCallbackData(id: string, action: ApprovalResponse | \"cancel\"): string {\n\treturn `${CALLBACK_PREFIX}${id}:${action}`;\n}\n\nfunction parseCallbackData(data: string): { id: string; action: ApprovalResponse | \"cancel\" } | null {\n\tif (!data.startsWith(CALLBACK_PREFIX)) return null;\n\tconst rest = data.slice(CALLBACK_PREFIX.length);\n\tconst colon = rest.indexOf(\":\");\n\tif (colon === -1) return null;\n\tconst id = rest.slice(0, colon);\n\tconst action = rest.slice(colon + 1);\n\tif (action === \"once\" || action === \"session\" || action === \"reject\" || action === \"cancel\") {\n\t\treturn { id, action };\n\t}\n\treturn null;\n}\n\n/** Run code with the gateway approval context available to tool-call gates. */\nexport function runWithApprovalContext<T>(ctx: ApprovalContext, fn: () => Promise<T>): Promise<T> {\n\treturn approvalContext.run(ctx, fn);\n}\n\nasync function createApprovalPrompt(\n\tadapter: PlatformAdapter,\n\tsource: SessionSource,\n\treq: ApprovalRequest,\n\ttimeoutMs = DEFAULT_TIMEOUT_MS,\n\tkey?: string,\n): Promise<ApprovalResponse> {\n\tconst id = generateId();\n\t// Large child launches get a dedicated title; inline buttons cannot capture feedback.\n\tconst title =\n\t\treq.kind === \"large-subagent-launch\"\n\t\t\t? `Approve large subagent launch?\\n${req.detail}`\n\t\t\t: `Approve ${req.toolName}?\\n${req.detail}`;\n\tconst rows: ButtonSpec[][] = [\n\t\t[\n\t\t\t{ label: \"✓ Approve once\", data: makeCallbackData(id, \"once\") },\n\t\t\t{ label: \"✓ Approve session\", data: makeCallbackData(id, \"session\") },\n\t\t],\n\t\t[{ label: \"✗ Reject\", data: makeCallbackData(id, \"reject\") }],\n\t];\n\n\treturn new Promise<ApprovalResponse>((resolve, reject) => {\n\t\tlet messageId: string | undefined;\n\t\tconst timeout = setTimeout(() => {\n\t\t\tpending.delete(id);\n\t\t\treject(new Error(\"Approval request timed out\"));\n\t\t\tif (messageId) {\n\t\t\t\tvoid adapter.editMessage(source.chatId, messageId, \"⏱ Approval expired.\", []).catch(() => {});\n\t\t\t}\n\t\t}, timeoutMs);\n\n\t\tconst entry: PendingApproval = {\n\t\t\tkey,\n\t\t\tsource,\n\t\t\tplan: req.kind === \"plan\",\n\t\t\tresolve,\n\t\t\treject,\n\t\t\ttimeout,\n\t\t\tadapter,\n\t\t\tchatId: source.chatId,\n\t\t\tthreadId: source.threadId,\n\t\t\tuserId: source.userId,\n\t\t};\n\t\tpending.set(id, entry);\n\t\tvoid (async () => {\n\t\t\ttry {\n\t\t\t\tconst result = await adapter.sendButtons(source.chatId, title, rows, { threadId: source.threadId });\n\t\t\t\tif (!result.success || !result.messageId) throw new Error(result.error ?? \"Failed to send approval prompt\");\n\t\t\t\tmessageId = result.messageId;\n\t\t\t\tif (pending.get(id) !== entry) {\n\t\t\t\t\tawait adapter\n\t\t\t\t\t\t.editMessage(source.chatId, messageId, \"Approval cancelled or expired.\", [])\n\t\t\t\t\t\t.catch(() => {});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tentry.messageId = messageId;\n\t\t\t} catch (err) {\n\t\t\t\tclearTimeout(timeout);\n\t\t\t\tpending.delete(id);\n\t\t\t\treject(err);\n\t\t\t}\n\t\t})();\n\t});\n}\n\n/** Approval handler passed to core permissions. */\nexport async function createGatewayApprovalRequest(req: ApprovalRequest): Promise<ApprovalResponse> {\n\tconst ctx = approvalContext.getStore();\n\tif (!ctx) {\n\t\tthrow new Error(NO_HANDLER_REASON);\n\t}\n\treturn createApprovalPrompt(ctx.adapter, ctx.source, req, ctx.timeoutMs, ctx.key);\n}\n\n/** Register the gateway approval handler with the core permission gate. */\nexport function registerGatewayApprovalHandler(): void {\n\tregisterApprovalHandler(createGatewayApprovalRequest);\n}\n\n/**\n * Dispatch a callback event to an outstanding approval prompt.\n * Returns true when the data matched the approval prefix (whether or not a\n * pending prompt existed).\n */\nexport async function handleApprovalCallback(event: CallbackEvent, adapter?: PlatformAdapter): Promise<boolean> {\n\tconst parsed = parseCallbackData(event.data);\n\tif (!parsed) return false;\n\n\tconst entry = pending.get(parsed.id);\n\tif (!entry) {\n\t\t// Best-effort answer for stale callbacks.\n\t\tawait adapter?.answerCallback(event.id, \"Approval expired.\").catch(() => {});\n\t\treturn true;\n\t}\n\n\tif (\n\t\tevent.userId !== entry.userId ||\n\t\tevent.chatId !== entry.chatId ||\n\t\tevent.threadId !== entry.threadId ||\n\t\t(adapter && adapter.platform !== entry.adapter.platform)\n\t) {\n\t\tawait entry.adapter.answerCallback(event.id, \"⛔ Not your approval.\").catch(() => {});\n\t\treturn true;\n\t}\n\n\tclearTimeout(entry.timeout);\n\tpending.delete(parsed.id);\n\n\tconst response: ApprovalResponse =\n\t\tparsed.action === \"reject\" || parsed.action === \"cancel\" ? \"reject\" : parsed.action;\n\tconst binding = entry.key ? conversationBinding(entry.key) : undefined;\n\tif (binding?.owner && (!isGatewayOwner(entry.source, loadGatewayConfig()) || binding.owner !== event.userId)) {\n\t\tentry.resolve(\"reject\");\n\t\tawait entry.adapter.answerCallback(event.id, \"Owner access was removed.\").catch(() => {});\n\t\treturn true;\n\t}\n\tif (binding && !isAuthorized(entry.source, loadGatewayConfig(), createPairingStore())) {\n\t\tentry.resolve(\"reject\");\n\t\treturn true;\n\t}\n\tif (entry.plan && response !== \"reject\" && entry.key) {\n\t\tconst sessionId = getSession(entry.key)?.sessionId;\n\t\tif (sessionId) setPermissionMode(\"yolo\", sessionId);\n\t}\n\tentry.resolve(response);\n\n\tconst label =\n\t\tparsed.action === \"reject\" || parsed.action === \"cancel\" ? \"Rejected.\" : `Approved (${parsed.action}).`;\n\tawait entry.adapter.editMessage(entry.chatId, entry.messageId ?? \"\", label, []).catch(() => {});\n\tawait entry.adapter.answerCallback(event.id).catch(() => {});\n\treturn true;\n}\n\n/** Test hook: clear all pending approvals and stop their timeouts. */\nexport function cancelGatewayApprovals(key: string): void {\n\tfor (const [id, entry] of pending) {\n\t\tif (entry.key !== key) continue;\n\t\tclearTimeout(entry.timeout);\n\t\tpending.delete(id);\n\t\tentry.resolve(\"reject\");\n\t\tif (entry.messageId)\n\t\t\tvoid entry.adapter.editMessage(entry.chatId, entry.messageId, \"Approval cancelled.\", []).catch(() => {});\n\t}\n}\n\nexport function resetApprovalRegistry(): void {\n\tfor (const entry of pending.values()) {\n\t\tclearTimeout(entry.timeout);\n\t\ttry {\n\t\t\tentry.reject(new Error(\"Approval registry reset\"));\n\t\t} catch {\n\t\t\t// ignore settled promise\n\t\t}\n\t}\n\tpending.clear();\n}\n\n/** Test hook: number of outstanding approval prompts. */\nexport function activeApprovalCount(): number {\n\treturn pending.size;\n}\n"]}
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../src/gateway/approval.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAGN,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGxC,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,aAAa,GAAG,iCAAiC,CAAC;AACxD,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAuBzC,MAAM,eAAe,GAAG,IAAI,iBAAiB,EAAmB,CAAC;AACjE,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEnD,SAAS,UAAU,GAAW;IAC7B,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,EAAE,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,CAAC;AAAA,CACV;AAED,SAAS,gBAAgB,CAAC,EAAU,EAAE,MAAmC,EAAU;IAClF,OAAO,GAAG,eAAe,GAAG,EAAE,IAAI,MAAM,EAAE,CAAC;AAAA,CAC3C;AAED,SAAS,iBAAiB,CAAC,IAAY,EAA8D;IACpG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7F,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAI,GAAoB,EAAE,EAAoB,EAAc;IACjG,OAAO,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAAA,CACpC;AAED,KAAK,UAAU,oBAAoB,CAClC,OAAwB,EACxB,MAAqB,EACrB,GAAoB,EACpB,SAAS,GAAG,kBAAkB,EAC9B,GAAY,EACgB;IAC5B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,sFAAsF;IACtF,MAAM,KAAK,GACV,GAAG,CAAC,IAAI,KAAK,uBAAuB;QACnC,CAAC,CAAC,mCAAmC,GAAG,CAAC,MAAM,EAAE;QACjD,CAAC,CAAC,WAAW,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAmB;QAC5B;YACC,EAAE,KAAK,EAAE,kBAAgB,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE;YAC/D,EAAE,KAAK,EAAE,qBAAmB,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE;SACrE;QACD,CAAC,EAAE,KAAK,EAAE,YAAU,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;KAC7D,CAAC;IAEF,OAAO,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;QACzD,IAAI,SAA6B,CAAC;QAClC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YAChC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnB,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAChD,IAAI,SAAS,EAAE,CAAC;gBACf,KAAK,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,uBAAqB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;YAC/F,CAAC;QAAA,CACD,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,KAAK,GAAoB;YAC9B,GAAG;YACH,MAAM;YACN,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,MAAM;YACzB,OAAO;YACP,MAAM;YACN,OAAO;YACP,OAAO;YACP,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;SACrB,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACvB,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACpG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,gCAAgC,CAAC,CAAC;gBAC5G,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;gBAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC/B,MAAM,OAAO;yBACX,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gCAAgC,EAAE,EAAE,CAAC;yBAC3E,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;oBAClB,OAAO;gBACR,CAAC;gBACD,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,MAAM,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;QAAA,CACD,CAAC,EAAE,CAAC;IAAA,CACL,CAAC,CAAC;AAAA,CACH;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,GAAoB,EAA6B;IACnG,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,EAAE,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,oBAAoB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;AAAA,CAClF;AAED,2EAA2E;AAC3E,MAAM,UAAU,8BAA8B,GAAS;IACtD,uBAAuB,CAAC,4BAA4B,CAAC,CAAC;AAAA,CACtD;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAoB,EAAE,OAAyB,EAAoB;IAC/G,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,0CAA0C;QAC1C,MAAM,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IACC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC7B,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC7B,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QACjC,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EACvD,CAAC;QACF,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,wBAAsB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE1B,MAAM,QAAQ,GACb,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IACrF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,IAAI,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACtD,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,2CAA2C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAC1G,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;QACvF,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,IAAI,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC;QACnD,IAAI,SAAS;YAAE,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAExB,MAAM,KAAK,GACV,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,MAAM,IAAI,CAAC;IACzG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;IAChG,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,sEAAsE;AACtE,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAQ;IACzD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG;YAAE,SAAS;QAChC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxB,IAAI,KAAK,CAAC,SAAS;YAClB,KAAK,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;IAC3G,CAAC;AAAA,CACD;AAED,MAAM,UAAU,qBAAqB,GAAS;IAC7C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACtC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC;YACJ,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACR,yBAAyB;QAC1B,CAAC;IACF,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,CAAC;AAAA,CAChB;AAED,yDAAyD;AACzD,MAAM,UAAU,mBAAmB,GAAW;IAC7C,OAAO,OAAO,CAAC,IAAI,CAAC;AAAA,CACpB","sourcesContent":["/**\n * Gateway approvals for large subagent launches and plans.\n * A missing chat context rejects large launches; plans pass through.\n */\n\nimport { AsyncLocalStorage } from \"node:async_hooks\";\nimport { randomBytes } from \"node:crypto\";\nimport {\n\ttype ApprovalRequest,\n\ttype ApprovalResponse,\n\tNO_HANDLER_REASON,\n\tregisterApprovalHandler,\n\tsetPermissionMode,\n} from \"../core/permissions.ts\";\nimport { isAuthorized } from \"./authz.ts\";\nimport { loadGatewayConfig } from \"./config.ts\";\nimport { conversationBinding } from \"./conversations.ts\";\nimport { createPairingStore } from \"./pairing.ts\";\nimport { getSession } from \"./store.ts\";\nimport type { ButtonSpec, CallbackEvent, PlatformAdapter, SessionSource } from \"./types.ts\";\n\nconst CALLBACK_PREFIX = \"ap:\";\nconst ID_LENGTH = 8;\nconst CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTUVWXYZ23456789\";\nconst DEFAULT_TIMEOUT_MS = 5 * 60 * 1000;\n\ninterface ApprovalContext {\n\tkey: string;\n\tadapter: PlatformAdapter;\n\tsource: SessionSource;\n\ttimeoutMs?: number;\n}\n\ninterface PendingApproval {\n\tkey?: string;\n\tsource: SessionSource;\n\tplan: boolean;\n\tresolve: (value: ApprovalResponse) => void;\n\treject: (reason?: unknown) => void;\n\ttimeout: ReturnType<typeof setTimeout>;\n\tmessageId?: string;\n\tadapter: PlatformAdapter;\n\tchatId: string;\n\tthreadId?: string;\n\tuserId: string;\n}\n\nconst approvalContext = new AsyncLocalStorage<ApprovalContext>();\nconst pending = new Map<string, PendingApproval>();\n\nfunction generateId(): string {\n\tlet id = \"\";\n\tconst bytes = randomBytes(ID_LENGTH);\n\tfor (let i = 0; i < ID_LENGTH; i++) {\n\t\tid += CODE_ALPHABET[bytes[i] % CODE_ALPHABET.length];\n\t}\n\treturn id;\n}\n\nfunction makeCallbackData(id: string, action: ApprovalResponse | \"cancel\"): string {\n\treturn `${CALLBACK_PREFIX}${id}:${action}`;\n}\n\nfunction parseCallbackData(data: string): { id: string; action: ApprovalResponse | \"cancel\" } | null {\n\tif (!data.startsWith(CALLBACK_PREFIX)) return null;\n\tconst rest = data.slice(CALLBACK_PREFIX.length);\n\tconst colon = rest.indexOf(\":\");\n\tif (colon === -1) return null;\n\tconst id = rest.slice(0, colon);\n\tconst action = rest.slice(colon + 1);\n\tif (action === \"once\" || action === \"session\" || action === \"reject\" || action === \"cancel\") {\n\t\treturn { id, action };\n\t}\n\treturn null;\n}\n\n/** Run code with the gateway approval context available to tool-call gates. */\nexport function runWithApprovalContext<T>(ctx: ApprovalContext, fn: () => Promise<T>): Promise<T> {\n\treturn approvalContext.run(ctx, fn);\n}\n\nasync function createApprovalPrompt(\n\tadapter: PlatformAdapter,\n\tsource: SessionSource,\n\treq: ApprovalRequest,\n\ttimeoutMs = DEFAULT_TIMEOUT_MS,\n\tkey?: string,\n): Promise<ApprovalResponse> {\n\tconst id = generateId();\n\t// Large child launches get a dedicated title; inline buttons cannot capture feedback.\n\tconst title =\n\t\treq.kind === \"large-subagent-launch\"\n\t\t\t? `Approve large subagent launch?\\n${req.detail}`\n\t\t\t: `Approve ${req.toolName}?\\n${req.detail}`;\n\tconst rows: ButtonSpec[][] = [\n\t\t[\n\t\t\t{ label: \"✓ Approve once\", data: makeCallbackData(id, \"once\") },\n\t\t\t{ label: \"✓ Approve session\", data: makeCallbackData(id, \"session\") },\n\t\t],\n\t\t[{ label: \"✗ Reject\", data: makeCallbackData(id, \"reject\") }],\n\t];\n\n\treturn new Promise<ApprovalResponse>((resolve, reject) => {\n\t\tlet messageId: string | undefined;\n\t\tconst timeout = setTimeout(() => {\n\t\t\tpending.delete(id);\n\t\t\treject(new Error(\"Approval request timed out\"));\n\t\t\tif (messageId) {\n\t\t\t\tvoid adapter.editMessage(source.chatId, messageId, \"⏱ Approval expired.\", []).catch(() => {});\n\t\t\t}\n\t\t}, timeoutMs);\n\n\t\tconst entry: PendingApproval = {\n\t\t\tkey,\n\t\t\tsource,\n\t\t\tplan: req.kind === \"plan\",\n\t\t\tresolve,\n\t\t\treject,\n\t\t\ttimeout,\n\t\t\tadapter,\n\t\t\tchatId: source.chatId,\n\t\t\tthreadId: source.threadId,\n\t\t\tuserId: source.userId,\n\t\t};\n\t\tpending.set(id, entry);\n\t\tvoid (async () => {\n\t\t\ttry {\n\t\t\t\tconst result = await adapter.sendButtons(source.chatId, title, rows, { threadId: source.threadId });\n\t\t\t\tif (!result.success || !result.messageId) throw new Error(result.error ?? \"Failed to send approval prompt\");\n\t\t\t\tmessageId = result.messageId;\n\t\t\t\tif (pending.get(id) !== entry) {\n\t\t\t\t\tawait adapter\n\t\t\t\t\t\t.editMessage(source.chatId, messageId, \"Approval cancelled or expired.\", [])\n\t\t\t\t\t\t.catch(() => {});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tentry.messageId = messageId;\n\t\t\t} catch (err) {\n\t\t\t\tclearTimeout(timeout);\n\t\t\t\tpending.delete(id);\n\t\t\t\treject(err);\n\t\t\t}\n\t\t})();\n\t});\n}\n\n/** Approval handler passed to core permissions. */\nexport async function createGatewayApprovalRequest(req: ApprovalRequest): Promise<ApprovalResponse> {\n\tconst ctx = approvalContext.getStore();\n\tif (!ctx) {\n\t\tthrow new Error(NO_HANDLER_REASON);\n\t}\n\treturn createApprovalPrompt(ctx.adapter, ctx.source, req, ctx.timeoutMs, ctx.key);\n}\n\n/** Register the gateway approval handler with the core permission gate. */\nexport function registerGatewayApprovalHandler(): void {\n\tregisterApprovalHandler(createGatewayApprovalRequest);\n}\n\n/**\n * Dispatch a callback event to an outstanding approval prompt.\n * Returns true when the data matched the approval prefix (whether or not a\n * pending prompt existed).\n */\nexport async function handleApprovalCallback(event: CallbackEvent, adapter?: PlatformAdapter): Promise<boolean> {\n\tconst parsed = parseCallbackData(event.data);\n\tif (!parsed) return false;\n\n\tconst entry = pending.get(parsed.id);\n\tif (!entry) {\n\t\t// Best-effort answer for stale callbacks.\n\t\tawait adapter?.answerCallback(event.id, \"Approval expired.\").catch(() => {});\n\t\treturn true;\n\t}\n\n\tif (\n\t\tevent.userId !== entry.userId ||\n\t\tevent.chatId !== entry.chatId ||\n\t\tevent.threadId !== entry.threadId ||\n\t\t(adapter && adapter.platform !== entry.adapter.platform)\n\t) {\n\t\tawait entry.adapter.answerCallback(event.id, \"⛔ Not your approval.\").catch(() => {});\n\t\treturn true;\n\t}\n\n\tclearTimeout(entry.timeout);\n\tpending.delete(parsed.id);\n\n\tconst response: ApprovalResponse =\n\t\tparsed.action === \"reject\" || parsed.action === \"cancel\" ? \"reject\" : parsed.action;\n\tconst binding = entry.key ? conversationBinding(entry.key) : undefined;\n\tif (binding?.owner && binding.owner !== event.userId) {\n\t\tentry.resolve(\"reject\");\n\t\tawait entry.adapter.answerCallback(event.id, \"This session belongs to a different user.\").catch(() => {});\n\t\treturn true;\n\t}\n\tif (binding && !isAuthorized(entry.source, loadGatewayConfig(), createPairingStore())) {\n\t\tentry.resolve(\"reject\");\n\t\treturn true;\n\t}\n\tif (entry.plan && response !== \"reject\" && entry.key) {\n\t\tconst sessionId = getSession(entry.key)?.sessionId;\n\t\tif (sessionId) setPermissionMode(\"yolo\", sessionId);\n\t}\n\tentry.resolve(response);\n\n\tconst label =\n\t\tparsed.action === \"reject\" || parsed.action === \"cancel\" ? \"Rejected.\" : `Approved (${parsed.action}).`;\n\tawait entry.adapter.editMessage(entry.chatId, entry.messageId ?? \"\", label, []).catch(() => {});\n\tawait entry.adapter.answerCallback(event.id).catch(() => {});\n\treturn true;\n}\n\n/** Test hook: clear all pending approvals and stop their timeouts. */\nexport function cancelGatewayApprovals(key: string): void {\n\tfor (const [id, entry] of pending) {\n\t\tif (entry.key !== key) continue;\n\t\tclearTimeout(entry.timeout);\n\t\tpending.delete(id);\n\t\tentry.resolve(\"reject\");\n\t\tif (entry.messageId)\n\t\t\tvoid entry.adapter.editMessage(entry.chatId, entry.messageId, \"Approval cancelled.\", []).catch(() => {});\n\t}\n}\n\nexport function resetApprovalRegistry(): void {\n\tfor (const entry of pending.values()) {\n\t\tclearTimeout(entry.timeout);\n\t\ttry {\n\t\t\tentry.reject(new Error(\"Approval registry reset\"));\n\t\t} catch {\n\t\t\t// ignore settled promise\n\t\t}\n\t}\n\tpending.clear();\n}\n\n/** Test hook: number of outstanding approval prompts. */\nexport function activeApprovalCount(): number {\n\treturn pending.size;\n}\n"]}

package/dist/gateway/authz.d.ts

@@ -1,5 +1,6 @@
 /**
  * lunR: gateway authorization — fail-closed, layered:
+ *   0. legacy owners list (same access as allowedUsers)
  *   1. LUNR_GATEWAY_ALLOW_ALL_USERS=true env (escape hatch)
  *   2. chatId in the platform's allowedChats (chat-scoped grant)
  *   3. adapter-asserted roleAuthorized
@@ -9,11 +10,10 @@
  *   6. denied
  */
 import { type GatewayConfig } from "./config.ts";
-import type { PairingStore } from "./pairing.ts";
+import { type PairingStore } from "./pairing.ts";
 import type { SessionSource } from "./types.ts";
-export declare function isGatewayOwner(source: SessionSource, cfg: GatewayConfig): boolean;
-export declare function requireGatewayOwner(source: SessionSource, cfg?: GatewayConfig): void;
-export declare function isAuthorized(source: SessionSource, cfg: GatewayConfig, pairing: PairingStore): boolean;
+export declare function requireAuthorized(source: SessionSource, cfg?: GatewayConfig): void;
+export declare function isAuthorized(source: SessionSource, cfg: GatewayConfig, pairing?: PairingStore): boolean;
 /**
  * Append a user to a platform's allowedUsers in the saved gateway.json
  * (used after a pairing approval so the grant survives pairing-store resets).

package/dist/gateway/authz.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authz.d.ts","sourceRoot":"","sources":["../../src/gateway/authz.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,KAAK,aAAa,EAA2D,MAAM,aAAa,CAAC;AAC1G,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAiBhD,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAIjF;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,gBAAsB,GAAG,IAAI,CAK1F;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAYtG;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAUrE","sourcesContent":["/**\n * lunR: gateway authorization — fail-closed, layered:\n *   1. LUNR_GATEWAY_ALLOW_ALL_USERS=true env (escape hatch)\n *   2. chatId in the platform's allowedChats (chat-scoped grant)\n *   3. adapter-asserted roleAuthorized\n *   4. paired via the pairing store\n *   5. userId in the platform's allowedUsers or global\n *      LUNR_GATEWAY_ALLOWED_USERS (comma-separated env)\n *   6. denied\n */\n\nimport { type GatewayConfig, loadGatewayConfig, platformConfigFor, saveGatewayConfig } from \"./config.ts\";\nimport type { PairingStore } from \"./pairing.ts\";\nimport type { SessionSource } from \"./types.ts\";\n\nfunction envFlagEnabled(name: string): boolean {\n\tconst raw = process.env[name];\n\tif (raw === undefined) return false;\n\treturn [\"1\", \"true\", \"yes\", \"on\"].includes(raw.toLowerCase());\n}\n\nfunction globalAllowedUsers(): string[] {\n\tconst raw = process.env.LUNR_GATEWAY_ALLOWED_USERS;\n\tif (!raw) return [];\n\treturn raw\n\t\t.split(\",\")\n\t\t.map((u) => u.trim())\n\t\t.filter((u) => u.length > 0);\n}\n\nexport function isGatewayOwner(source: SessionSource, cfg: GatewayConfig): boolean {\n\tif (source.chatType !== \"dm\") return false;\n\tif (source.platform !== \"telegram\" && source.platform !== \"discord\") return false;\n\treturn cfg.owners?.[source.platform].includes(source.userId) ?? false;\n}\n\nexport function requireGatewayOwner(source: SessionSource, cfg = loadGatewayConfig()): void {\n\tif (!isGatewayOwner(source, cfg))\n\t\tthrow new Error(\n\t\t\t\"This command is available only to the configured owner in a private chat. Use lunr gateway setup to configure owner access.\",\n\t\t);\n}\n\nexport function isAuthorized(source: SessionSource, cfg: GatewayConfig, pairing: PairingStore): boolean {\n\tif (isGatewayOwner(source, cfg)) return true;\n\tif (envFlagEnabled(\"LUNR_GATEWAY_ALLOW_ALL_USERS\")) return true;\n\tconst platformCfg = platformConfigFor(cfg, source.platform);\n\tif (platformCfg?.allowedChats.includes(source.chatId)) return true;\n\tif (source.roleAuthorized === true) return true;\n\tif (source.userId && pairing.isPaired(source.platform, source.userId)) return true;\n\tif (source.userId) {\n\t\tif (platformCfg?.allowedUsers.includes(source.userId)) return true;\n\t\tif (globalAllowedUsers().includes(source.userId)) return true;\n\t}\n\treturn false;\n}\n\n/**\n * Append a user to a platform's allowedUsers in the saved gateway.json\n * (used after a pairing approval so the grant survives pairing-store resets).\n * No-op when already present.\n */\nexport function addAllowedUser(platform: string, userId: string): void {\n\tconst cfg = loadGatewayConfig();\n\tconst platformCfg = platformConfigFor(cfg, platform);\n\tif (!platformCfg) {\n\t\tthrow new Error(`Unknown platform \"${platform}\"`);\n\t}\n\tif (!platformCfg.allowedUsers.includes(userId)) {\n\t\tplatformCfg.allowedUsers.push(userId);\n\t\tsaveGatewayConfig(cfg);\n\t}\n}\n"]}
+{"version":3,"file":"authz.d.ts","sourceRoot":"","sources":["../../src/gateway/authz.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,KAAK,aAAa,EAA2D,MAAM,aAAa,CAAC;AAC1G,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAiBhD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,gBAAsB,GAAG,IAAI,CAExF;AAED,wBAAgB,YAAY,CAC3B,MAAM,EAAE,aAAa,EACrB,GAAG,EAAE,aAAa,EAClB,OAAO,GAAE,YAAmC,GAC1C,OAAO,CAgBT;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAUrE","sourcesContent":["/**\n * lunR: gateway authorization — fail-closed, layered:\n *   0. legacy owners list (same access as allowedUsers)\n *   1. LUNR_GATEWAY_ALLOW_ALL_USERS=true env (escape hatch)\n *   2. chatId in the platform's allowedChats (chat-scoped grant)\n *   3. adapter-asserted roleAuthorized\n *   4. paired via the pairing store\n *   5. userId in the platform's allowedUsers or global\n *      LUNR_GATEWAY_ALLOWED_USERS (comma-separated env)\n *   6. denied\n */\n\nimport { type GatewayConfig, loadGatewayConfig, platformConfigFor, saveGatewayConfig } from \"./config.ts\";\nimport { createPairingStore, type PairingStore } from \"./pairing.ts\";\nimport type { SessionSource } from \"./types.ts\";\n\nfunction envFlagEnabled(name: string): boolean {\n\tconst raw = process.env[name];\n\tif (raw === undefined) return false;\n\treturn [\"1\", \"true\", \"yes\", \"on\"].includes(raw.toLowerCase());\n}\n\nfunction globalAllowedUsers(): string[] {\n\tconst raw = process.env.LUNR_GATEWAY_ALLOWED_USERS;\n\tif (!raw) return [];\n\treturn raw\n\t\t.split(\",\")\n\t\t.map((u) => u.trim())\n\t\t.filter((u) => u.length > 0);\n}\n\nexport function requireAuthorized(source: SessionSource, cfg = loadGatewayConfig()): void {\n\tif (!isAuthorized(source, cfg)) throw new Error(\"Gateway access is not approved for this user or chat.\");\n}\n\nexport function isAuthorized(\n\tsource: SessionSource,\n\tcfg: GatewayConfig,\n\tpairing: PairingStore = createPairingStore(),\n): boolean {\n\tif (\n\t\t(source.platform === \"telegram\" || source.platform === \"discord\") &&\n\t\tcfg.owners?.[source.platform].includes(source.userId)\n\t)\n\t\treturn true;\n\tif (envFlagEnabled(\"LUNR_GATEWAY_ALLOW_ALL_USERS\")) return true;\n\tconst platformCfg = platformConfigFor(cfg, source.platform);\n\tif (platformCfg?.allowedChats.includes(source.chatId)) return true;\n\tif (source.roleAuthorized === true) return true;\n\tif (source.userId && pairing.isPaired(source.platform, source.userId)) return true;\n\tif (source.userId) {\n\t\tif (platformCfg?.allowedUsers.includes(source.userId)) return true;\n\t\tif (globalAllowedUsers().includes(source.userId)) return true;\n\t}\n\treturn false;\n}\n\n/**\n * Append a user to a platform's allowedUsers in the saved gateway.json\n * (used after a pairing approval so the grant survives pairing-store resets).\n * No-op when already present.\n */\nexport function addAllowedUser(platform: string, userId: string): void {\n\tconst cfg = loadGatewayConfig();\n\tconst platformCfg = platformConfigFor(cfg, platform);\n\tif (!platformCfg) {\n\t\tthrow new Error(`Unknown platform \"${platform}\"`);\n\t}\n\tif (!platformCfg.allowedUsers.includes(userId)) {\n\t\tplatformCfg.allowedUsers.push(userId);\n\t\tsaveGatewayConfig(cfg);\n\t}\n}\n"]}

package/dist/gateway/authz.js

@@ -1,5 +1,6 @@
 /**
  * lunR: gateway authorization — fail-closed, layered:
+ *   0. legacy owners list (same access as allowedUsers)
  *   1. LUNR_GATEWAY_ALLOW_ALL_USERS=true env (escape hatch)
  *   2. chatId in the platform's allowedChats (chat-scoped grant)
  *   3. adapter-asserted roleAuthorized
@@ -9,6 +10,7 @@
  *   6. denied
  */
 import { loadGatewayConfig, platformConfigFor, saveGatewayConfig } from "./config.js";
+import { createPairingStore } from "./pairing.js";
 function envFlagEnabled(name) {
     const raw = process.env[name];
     if (raw === undefined)
@@ -24,19 +26,13 @@ function globalAllowedUsers() {
         .map((u) => u.trim())
         .filter((u) => u.length > 0);
 }
-export function isGatewayOwner(source, cfg) {
-    if (source.chatType !== "dm")
-        return false;
-    if (source.platform !== "telegram" && source.platform !== "discord")
-        return false;
-    return cfg.owners?.[source.platform].includes(source.userId) ?? false;
-}
-export function requireGatewayOwner(source, cfg = loadGatewayConfig()) {
-    if (!isGatewayOwner(source, cfg))
-        throw new Error("This command is available only to the configured owner in a private chat. Use lunr gateway setup to configure owner access.");
+export function requireAuthorized(source, cfg = loadGatewayConfig()) {
+    if (!isAuthorized(source, cfg))
+        throw new Error("Gateway access is not approved for this user or chat.");
 }
-export function isAuthorized(source, cfg, pairing) {
-    if (isGatewayOwner(source, cfg))
+export function isAuthorized(source, cfg, pairing = createPairingStore()) {
+    if ((source.platform === "telegram" || source.platform === "discord") &&
+        cfg.owners?.[source.platform].includes(source.userId))
         return true;
     if (envFlagEnabled("LUNR_GATEWAY_ALLOW_ALL_USERS"))
         return true;

package/dist/gateway/authz.js.map

@@ -1 +1 @@
-{"version":3,"file":"authz.js","sourceRoot":"","sources":["../../src/gateway/authz.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAsB,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAI1G,SAAS,cAAc,CAAC,IAAY,EAAW;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAAA,CAC9D;AAED,SAAS,kBAAkB,GAAa;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACnD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,GAAG;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAAA,CAC9B;AAED,MAAM,UAAU,cAAc,CAAC,MAAqB,EAAE,GAAkB,EAAW;IAClF,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAClF,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC;AAAA,CACtE;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAqB,EAAE,GAAG,GAAG,iBAAiB,EAAE,EAAQ;IAC3F,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC;QAC/B,MAAM,IAAI,KAAK,CACd,6HAA6H,CAC7H,CAAC;AAAA,CACH;AAED,MAAM,UAAU,YAAY,CAAC,MAAqB,EAAE,GAAkB,EAAE,OAAqB,EAAW;IACvG,IAAI,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,cAAc,CAAC,8BAA8B,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACnF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACnE,IAAI,kBAAkB,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAc,EAAQ;IACtE,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,GAAG,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;AAAA,CACD","sourcesContent":["/**\n * lunR: gateway authorization — fail-closed, layered:\n *   1. LUNR_GATEWAY_ALLOW_ALL_USERS=true env (escape hatch)\n *   2. chatId in the platform's allowedChats (chat-scoped grant)\n *   3. adapter-asserted roleAuthorized\n *   4. paired via the pairing store\n *   5. userId in the platform's allowedUsers or global\n *      LUNR_GATEWAY_ALLOWED_USERS (comma-separated env)\n *   6. denied\n */\n\nimport { type GatewayConfig, loadGatewayConfig, platformConfigFor, saveGatewayConfig } from \"./config.ts\";\nimport type { PairingStore } from \"./pairing.ts\";\nimport type { SessionSource } from \"./types.ts\";\n\nfunction envFlagEnabled(name: string): boolean {\n\tconst raw = process.env[name];\n\tif (raw === undefined) return false;\n\treturn [\"1\", \"true\", \"yes\", \"on\"].includes(raw.toLowerCase());\n}\n\nfunction globalAllowedUsers(): string[] {\n\tconst raw = process.env.LUNR_GATEWAY_ALLOWED_USERS;\n\tif (!raw) return [];\n\treturn raw\n\t\t.split(\",\")\n\t\t.map((u) => u.trim())\n\t\t.filter((u) => u.length > 0);\n}\n\nexport function isGatewayOwner(source: SessionSource, cfg: GatewayConfig): boolean {\n\tif (source.chatType !== \"dm\") return false;\n\tif (source.platform !== \"telegram\" && source.platform !== \"discord\") return false;\n\treturn cfg.owners?.[source.platform].includes(source.userId) ?? false;\n}\n\nexport function requireGatewayOwner(source: SessionSource, cfg = loadGatewayConfig()): void {\n\tif (!isGatewayOwner(source, cfg))\n\t\tthrow new Error(\n\t\t\t\"This command is available only to the configured owner in a private chat. Use lunr gateway setup to configure owner access.\",\n\t\t);\n}\n\nexport function isAuthorized(source: SessionSource, cfg: GatewayConfig, pairing: PairingStore): boolean {\n\tif (isGatewayOwner(source, cfg)) return true;\n\tif (envFlagEnabled(\"LUNR_GATEWAY_ALLOW_ALL_USERS\")) return true;\n\tconst platformCfg = platformConfigFor(cfg, source.platform);\n\tif (platformCfg?.allowedChats.includes(source.chatId)) return true;\n\tif (source.roleAuthorized === true) return true;\n\tif (source.userId && pairing.isPaired(source.platform, source.userId)) return true;\n\tif (source.userId) {\n\t\tif (platformCfg?.allowedUsers.includes(source.userId)) return true;\n\t\tif (globalAllowedUsers().includes(source.userId)) return true;\n\t}\n\treturn false;\n}\n\n/**\n * Append a user to a platform's allowedUsers in the saved gateway.json\n * (used after a pairing approval so the grant survives pairing-store resets).\n * No-op when already present.\n */\nexport function addAllowedUser(platform: string, userId: string): void {\n\tconst cfg = loadGatewayConfig();\n\tconst platformCfg = platformConfigFor(cfg, platform);\n\tif (!platformCfg) {\n\t\tthrow new Error(`Unknown platform \"${platform}\"`);\n\t}\n\tif (!platformCfg.allowedUsers.includes(userId)) {\n\t\tplatformCfg.allowedUsers.push(userId);\n\t\tsaveGatewayConfig(cfg);\n\t}\n}\n"]}
+{"version":3,"file":"authz.js","sourceRoot":"","sources":["../../src/gateway/authz.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAsB,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC1G,OAAO,EAAE,kBAAkB,EAAqB,MAAM,cAAc,CAAC;AAGrE,SAAS,cAAc,CAAC,IAAY,EAAW;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAAA,CAC9D;AAED,SAAS,kBAAkB,GAAa;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACnD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,GAAG;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAAA,CAC9B;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAqB,EAAE,GAAG,GAAG,iBAAiB,EAAE,EAAQ;IACzF,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;AAAA,CACzG;AAED,MAAM,UAAU,YAAY,CAC3B,MAAqB,EACrB,GAAkB,EAClB,OAAO,GAAiB,kBAAkB,EAAE,EAClC;IACV,IACC,CAAC,MAAM,CAAC,QAAQ,KAAK,UAAU,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC;QACjE,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QAErD,OAAO,IAAI,CAAC;IACb,IAAI,cAAc,CAAC,8BAA8B,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACnF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACnE,IAAI,kBAAkB,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAc,EAAQ;IACtE,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,GAAG,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;AAAA,CACD","sourcesContent":["/**\n * lunR: gateway authorization — fail-closed, layered:\n *   0. legacy owners list (same access as allowedUsers)\n *   1. LUNR_GATEWAY_ALLOW_ALL_USERS=true env (escape hatch)\n *   2. chatId in the platform's allowedChats (chat-scoped grant)\n *   3. adapter-asserted roleAuthorized\n *   4. paired via the pairing store\n *   5. userId in the platform's allowedUsers or global\n *      LUNR_GATEWAY_ALLOWED_USERS (comma-separated env)\n *   6. denied\n */\n\nimport { type GatewayConfig, loadGatewayConfig, platformConfigFor, saveGatewayConfig } from \"./config.ts\";\nimport { createPairingStore, type PairingStore } from \"./pairing.ts\";\nimport type { SessionSource } from \"./types.ts\";\n\nfunction envFlagEnabled(name: string): boolean {\n\tconst raw = process.env[name];\n\tif (raw === undefined) return false;\n\treturn [\"1\", \"true\", \"yes\", \"on\"].includes(raw.toLowerCase());\n}\n\nfunction globalAllowedUsers(): string[] {\n\tconst raw = process.env.LUNR_GATEWAY_ALLOWED_USERS;\n\tif (!raw) return [];\n\treturn raw\n\t\t.split(\",\")\n\t\t.map((u) => u.trim())\n\t\t.filter((u) => u.length > 0);\n}\n\nexport function requireAuthorized(source: SessionSource, cfg = loadGatewayConfig()): void {\n\tif (!isAuthorized(source, cfg)) throw new Error(\"Gateway access is not approved for this user or chat.\");\n}\n\nexport function isAuthorized(\n\tsource: SessionSource,\n\tcfg: GatewayConfig,\n\tpairing: PairingStore = createPairingStore(),\n): boolean {\n\tif (\n\t\t(source.platform === \"telegram\" || source.platform === \"discord\") &&\n\t\tcfg.owners?.[source.platform].includes(source.userId)\n\t)\n\t\treturn true;\n\tif (envFlagEnabled(\"LUNR_GATEWAY_ALLOW_ALL_USERS\")) return true;\n\tconst platformCfg = platformConfigFor(cfg, source.platform);\n\tif (platformCfg?.allowedChats.includes(source.chatId)) return true;\n\tif (source.roleAuthorized === true) return true;\n\tif (source.userId && pairing.isPaired(source.platform, source.userId)) return true;\n\tif (source.userId) {\n\t\tif (platformCfg?.allowedUsers.includes(source.userId)) return true;\n\t\tif (globalAllowedUsers().includes(source.userId)) return true;\n\t}\n\treturn false;\n}\n\n/**\n * Append a user to a platform's allowedUsers in the saved gateway.json\n * (used after a pairing approval so the grant survives pairing-store resets).\n * No-op when already present.\n */\nexport function addAllowedUser(platform: string, userId: string): void {\n\tconst cfg = loadGatewayConfig();\n\tconst platformCfg = platformConfigFor(cfg, platform);\n\tif (!platformCfg) {\n\t\tthrow new Error(`Unknown platform \"${platform}\"`);\n\t}\n\tif (!platformCfg.allowedUsers.includes(userId)) {\n\t\tplatformCfg.allowedUsers.push(userId);\n\t\tsaveGatewayConfig(cfg);\n\t}\n}\n"]}

package/dist/gateway/buttons.d.ts

@@ -5,7 +5,7 @@
  * now; approvals later). Callback payloads stay tiny so they fit Telegram's
  * 64-byte callback_data limit; all picker state lives server-side in this module.
  */
-import type { GatewayConfig } from "./config.ts";
+import { type GatewayConfig } from "./config.ts";
 import type { PairingStore } from "./pairing.ts";
 import type { BridgeLike } from "./router.ts";
 import type { CallbackEvent, PlatformAdapter, SendOptions, SendResult, SessionSource } from "./types.ts";
@@ -22,7 +22,11 @@ export type PickerResolveResult = {
     title: string;
     breadcrumbs?: string;
 };
+/** An awaited control was stopped or superseded before it could commit. */
+export declare class GatewayPickerCancelled extends Error {
+}
 export interface PickerSpec {
+    generation?: number;
     kind: "model" | "thinking" | "sessions" | "project" | "dialog";
     validate?(): boolean;
     onCancel?(): void;
@@ -40,6 +44,9 @@ export interface ButtonDeps {
     pairing: PairingStore;
     bridge: BridgeLike;
 }
+export declare function gatewayPickerGeneration(key: string): number;
+/** Cancel pending controls when their conversation changes or the user stops them. */
+export declare function invalidateGatewayPickers(key: string): void;
 /**
  * Create and send a paginated inline-button picker. On send failure the caller
  * should fall back to a text-based list.

package/dist/gateway/buttons.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buttons.d.ts","sourceRoot":"","sources":["../../src/gateway/buttons.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAc,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAUrH,MAAM,WAAW,UAAU;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,mBAAmB,GAC5B;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC/D,QAAQ,CAAC,IAAI,OAAO,CAAC;IACrB,QAAQ,CAAC,IAAI,IAAI,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACxD;AAeD,MAAM,WAAW,UAAU;IAC1B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACvC,GAAG,EAAE,aAAa,CAAC;IACnB,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,UAAU,CAAC;CACnB;AA0FD;;;GAGG;AACH,wBAAsB,YAAY,CACjC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,UAAU,EAChB,IAAI,CAAC,EAAE,WAAW,GAChB,OAAO,CAAC,UAAU,CAAC,CAqBrB;AAcD,6DAA6D;AAC7D,wBAAsB,cAAc,CACnC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,UAAU,GAAG;IAAE,OAAO,EAAE,eAAe,CAAA;CAAE,GAC7C,OAAO,CAAC,IAAI,CAAC,CAiHf;AAaD,kDAAkD;AAClD,wBAAgB,kBAAkB,IAAI,IAAI,CAezC;AAED,4BAA4B;AAC5B,wBAAgB,iBAAiB,IAAI,IAAI,CAKxC;AAED,0DAA0D;AAC1D,wBAAgB,mBAAmB,IAAI,IAAI,CAG1C;AAED,2CAA2C;AAC3C,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAE1C","sourcesContent":["/**\n * lunR: gateway inline-button picker registry.\n *\n * Single registry for all interactive prompts (model/thinking/sessions pickers\n * now; approvals later). Callback payloads stay tiny so they fit Telegram's\n * 64-byte callback_data limit; all picker state lives server-side in this module.\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { isAuthorized } from \"./authz.ts\";\nimport type { GatewayConfig } from \"./config.ts\";\nimport type { PairingStore } from \"./pairing.ts\";\nimport type { BridgeLike } from \"./router.ts\";\nimport type { ButtonSpec, CallbackEvent, PlatformAdapter, SendOptions, SendResult, SessionSource } from \"./types.ts\";\n\nconst PICKER_TTL_MS = 15 * 60 * 1000;\nconst SWEEP_INTERVAL_MS = 60 * 1000;\nconst DEFAULT_PER_PAGE = 8;\nconst BUTTONS_PER_ROW = 2;\nconst CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTUVWXYZ23456789\";\nconst CODE_LENGTH = 8;\nconst CALLBACK_PREFIX = \"cp:\";\n\nexport interface PickerItem {\n\tlabel: string;\n\tvalue: string;\n}\n\nexport type PickerResolveResult =\n\t| { done: true; text: string }\n\t| { done: false; items: PickerItem[]; title: string; breadcrumbs?: string };\n\nexport interface PickerSpec {\n\tkind: \"model\" | \"thinking\" | \"sessions\" | \"project\" | \"dialog\";\n\tvalidate?(): boolean;\n\tonCancel?(): void;\n\tsessionKey: string;\n\tinvokerId: string;\n\titems: PickerItem[];\n\tperPage?: number;\n\ttitle: string;\n\tbreadcrumbs?: string;\n\tresolve(item: PickerItem): Promise<PickerResolveResult>;\n}\n\ninterface PendingPicker extends PickerSpec {\n\tresolving?: boolean;\n\tcompleted?: string;\n\tid: string;\n\tchatId: string;\n\tmessageId: string;\n\tsource: SessionSource;\n\tadapter: PlatformAdapter;\n\tpage: number;\n\tperPage: number;\n\tcreatedAt: number;\n}\n\nexport interface ButtonDeps {\n\tadapters: Map<string, PlatformAdapter>;\n\tcfg: GatewayConfig;\n\tpairing: PairingStore;\n\tbridge: BridgeLike;\n}\n\nconst registry = new Map<string, PendingPicker>();\nlet sweeper: ReturnType<typeof setInterval> | undefined;\n\nfunction generatePickerId(): string {\n\tlet id = \"\";\n\tconst bytes = randomBytes(CODE_LENGTH);\n\tfor (let i = 0; i < CODE_LENGTH; i++) {\n\t\tid += CODE_ALPHABET[bytes[i] % CODE_ALPHABET.length];\n\t}\n\treturn id;\n}\n\nfunction makeCallbackData(id: string, action: \"select\" | \"page\" | \"cancel\" | \"noop\", payload?: string): string {\n\tif (action === \"noop\") return `${CALLBACK_PREFIX}${id}:`;\n\tif (action === \"cancel\") return `${CALLBACK_PREFIX}${id}:x`;\n\tif (action === \"page\") return `${CALLBACK_PREFIX}${id}:p${payload ?? \"0\"}`;\n\treturn `${CALLBACK_PREFIX}${id}:${payload ?? \"\"}`;\n}\n\nfunction parseCallbackData(\n\tdata: string,\n): { id: string; action: \"select\" | \"page\" | \"cancel\" | \"noop\"; payload?: string } | null {\n\tif (!data.startsWith(CALLBACK_PREFIX)) return null;\n\tconst rest = data.slice(CALLBACK_PREFIX.length);\n\tconst colon = rest.indexOf(\":\");\n\tif (colon === -1) return null;\n\tconst id = rest.slice(0, colon);\n\tconst tail = rest.slice(colon + 1);\n\tif (tail === \"\") return { id, action: \"noop\" };\n\tif (tail === \"x\") return { id, action: \"cancel\" };\n\tif (tail.startsWith(\"p\")) return { id, action: \"page\", payload: tail.slice(1) };\n\treturn { id, action: \"select\", payload: tail };\n}\n\nfunction isSameChat(a: SessionSource, b: SessionSource): boolean {\n\treturn a.platform === b.platform && a.chatId === b.chatId && a.threadId === b.threadId;\n}\n\nfunction sourceForAuth(picker: PendingPicker, cb: CallbackEvent): SessionSource {\n\treturn {\n\t\tplatform: picker.source.platform,\n\t\tchatId: cb.chatId,\n\t\tchatType: picker.source.chatType,\n\t\tuserId: cb.userId,\n\t\tuserName: cb.userName,\n\t\tthreadId: cb.threadId,\n\t\t// Do NOT inherit the original invoker's role authorization.\n\t\troleAuthorized: undefined,\n\t};\n}\n\nfunction renderPage(picker: PendingPicker): { text: string; buttons: ButtonSpec[][] } {\n\tconst { id, title, breadcrumbs, items, page, perPage } = picker;\n\tconst totalPages = Math.max(1, Math.ceil(items.length / perPage));\n\tconst clampedPage = Math.max(0, Math.min(page, totalPages - 1));\n\tconst start = clampedPage * perPage;\n\tconst pageItems = items.slice(start, start + perPage);\n\n\tconst rows: ButtonSpec[][] = [];\n\tfor (let i = 0; i < pageItems.length; i += BUTTONS_PER_ROW) {\n\t\tconst row: ButtonSpec[] = [];\n\t\tfor (let j = 0; j < BUTTONS_PER_ROW && i + j < pageItems.length; j++) {\n\t\t\tconst index = start + i + j;\n\t\t\trow.push({ label: pageItems[i + j].label, data: makeCallbackData(id, \"select\", String(index)) });\n\t\t}\n\t\trows.push(row);\n\t}\n\n\tif (totalPages > 1) {\n\t\tconst nav: ButtonSpec[] = [];\n\t\tif (clampedPage > 0) {\n\t\t\tnav.push({ label: \"◀ Prev\", data: makeCallbackData(id, \"page\", String(clampedPage - 1)) });\n\t\t}\n\t\tnav.push({ label: `${clampedPage + 1}/${totalPages}`, data: makeCallbackData(id, \"noop\") });\n\t\tif (clampedPage < totalPages - 1) {\n\t\t\tnav.push({ label: \"Next ▶\", data: makeCallbackData(id, \"page\", String(clampedPage + 1)) });\n\t\t}\n\t\trows.push(nav);\n\t}\n\n\trows.push([{ label: \"✗ Cancel\", data: makeCallbackData(id, \"cancel\") }]);\n\n\tconst header = breadcrumbs ? `${title} · ${breadcrumbs}` : title;\n\tconst text =\n\t\titems.length === 0 ? `${header}\\n\\nNo options available.` : `${header} (${clampedPage + 1}/${totalPages}):`;\n\treturn { text, buttons: rows };\n}\n\n/**\n * Create and send a paginated inline-button picker. On send failure the caller\n * should fall back to a text-based list.\n */\nexport async function createPicker(\n\tadapter: PlatformAdapter,\n\tsource: SessionSource,\n\tspec: PickerSpec,\n\topts?: SendOptions,\n): Promise<SendResult> {\n\tconst id = generatePickerId();\n\tconst pending: PendingPicker = {\n\t\t...spec,\n\t\tid,\n\t\tchatId: source.chatId,\n\t\tsource,\n\t\tadapter,\n\t\tmessageId: \"\",\n\t\tpage: 0,\n\t\tperPage: spec.perPage ?? DEFAULT_PER_PAGE,\n\t\tcreatedAt: Date.now(),\n\t};\n\tconst { text, buttons } = renderPage(pending);\n\tconst result = await adapter.sendButtons(source.chatId, text, buttons, opts);\n\tif (!result.success) return result;\n\tif (result.messageId) {\n\t\tpending.messageId = result.messageId;\n\t\tregistry.set(id, pending);\n\t}\n\treturn result;\n}\n\nasync function answerExpired(adapter: PlatformAdapter, cb: CallbackEvent): Promise<void> {\n\tawait adapter.answerCallback(cb.id, \"Picker expired — run the command again.\").catch(() => {});\n}\n\nasync function answerUnauthorized(adapter: PlatformAdapter, cb: CallbackEvent): Promise<void> {\n\tawait adapter.answerCallback(cb.id, \"⛔ Not authorized.\").catch(() => {});\n}\n\nasync function answerNotYourPicker(adapter: PlatformAdapter, cb: CallbackEvent): Promise<void> {\n\tawait adapter.answerCallback(cb.id, \"⛔ Not your picker.\").catch(() => {});\n}\n\n/** Dispatch a CallbackEvent to the matching picker entry. */\nexport async function handleCallback(\n\tcb: CallbackEvent,\n\tdeps: ButtonDeps & { adapter: PlatformAdapter },\n): Promise<void> {\n\tconst { adapter, cfg, pairing } = deps;\n\tconst parsed = parseCallbackData(cb.data);\n\tif (!parsed) return;\n\n\tconst picker = registry.get(parsed.id);\n\tif (!picker) {\n\t\tawait answerExpired(adapter, cb);\n\t\treturn;\n\t}\n\n\tif (!picker.completed && picker.validate && !picker.validate()) {\n\t\tregistry.delete(parsed.id);\n\t\tpicker.onCancel?.();\n\t\tawait answerExpired(adapter, cb);\n\t\treturn;\n\t}\n\n\tif (Date.now() > picker.createdAt + PICKER_TTL_MS) {\n\t\tif (!picker.completed) picker.onCancel?.();\n\t\tregistry.delete(parsed.id);\n\t\ttry {\n\t\t\tawait picker.adapter.editMessage(picker.chatId, picker.messageId, \"⏱ Expired — run the command again.\", []);\n\t\t} catch {\n\t\t\t// best-effort expiry message\n\t\t}\n\t\tawait answerExpired(adapter, cb);\n\t\treturn;\n\t}\n\n\tif (!isSameChat(picker.source, sourceForAuth(picker, cb))) {\n\t\tawait answerExpired(adapter, cb);\n\t\treturn;\n\t}\n\n\tif (cb.userId !== picker.invokerId) {\n\t\tawait answerNotYourPicker(adapter, cb);\n\t\treturn;\n\t}\n\n\tif (!isAuthorized(sourceForAuth(picker, cb), cfg, pairing)) {\n\t\tawait answerUnauthorized(adapter, cb);\n\t\treturn;\n\t}\n\n\tif (picker.completed !== undefined) {\n\t\tawait adapter.answerCallback(cb.id, \"Already completed.\").catch(() => {});\n\t\treturn;\n\t}\n\n\tif (parsed.action === \"cancel\") {\n\t\tregistry.delete(parsed.id);\n\t\tpicker.onCancel?.();\n\t\ttry {\n\t\t\tawait picker.adapter.editMessage(picker.chatId, picker.messageId, \"Cancelled.\", []);\n\t\t} catch {}\n\t\tawait adapter.answerCallback(cb.id).catch(() => {});\n\t\treturn;\n\t}\n\n\tif (parsed.action === \"noop\") {\n\t\tawait adapter.answerCallback(cb.id).catch(() => {});\n\t\treturn;\n\t}\n\n\tif (parsed.action === \"page\") {\n\t\tconst page = Number.parseInt(parsed.payload ?? \"0\", 10);\n\t\tconst totalPages = Math.max(1, Math.ceil(picker.items.length / picker.perPage));\n\t\tpicker.page = Math.max(0, Math.min(page, totalPages - 1));\n\t\tconst { text, buttons } = renderPage(picker);\n\t\ttry {\n\t\t\tawait picker.adapter.editMessage(picker.chatId, picker.messageId, text, buttons);\n\t\t} catch {}\n\t\tawait adapter.answerCallback(cb.id).catch(() => {});\n\t\treturn;\n\t}\n\n\t// select\n\tconst index = Number.parseInt(parsed.payload ?? \"\", 10);\n\tconst item = picker.items[index];\n\tif (!item) {\n\t\tawait adapter.answerCallback(cb.id, \"Invalid selection.\").catch(() => {});\n\t\treturn;\n\t}\n\n\tif (picker.resolving) {\n\t\tawait adapter.answerCallback(cb.id, \"Selection is still running.\").catch(() => {});\n\t\treturn;\n\t}\n\tpicker.resolving = true;\n\tawait adapter.answerCallback(cb.id).catch(() => {});\n\ttry {\n\t\tconst result = await picker.resolve(item);\n\t\tif (!result.done) {\n\t\t\tpicker.items = result.items;\n\t\t\tpicker.title = result.title;\n\t\t\tpicker.breadcrumbs = result.breadcrumbs;\n\t\t\tpicker.page = 0;\n\t\t\tconst { text, buttons } = renderPage(picker);\n\t\t\ttry {\n\t\t\t\tawait picker.adapter.editMessage(picker.chatId, picker.messageId, text, buttons);\n\t\t\t} catch {}\n\t\t\treturn;\n\t\t}\n\t\tpicker.completed = result.text;\n\t\tawait confirmPicker(picker, result.text);\n\t} catch (err) {\n\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\tpicker.completed = `⚠ ${message}`;\n\t\tawait confirmPicker(picker, picker.completed);\n\t} finally {\n\t\tpicker.resolving = false;\n\t}\n}\n\nasync function confirmPicker(picker: PendingPicker, text: string): Promise<void> {\n\tconst edited = await picker.adapter\n\t\t.editMessage(picker.chatId, picker.messageId, text, [])\n\t\t.catch(() => ({ success: false }));\n\tif (edited.success) return;\n\tconst sent = await picker.adapter\n\t\t.send(picker.chatId, text, { threadId: picker.source.threadId })\n\t\t.catch(() => ({ success: false }));\n\tif (!sent.success) console.error(`[gateway] picker confirmation failed on ${picker.adapter.platform}`);\n}\n\n/** Start the periodic TTL sweeper. Idempotent. */\nexport function startButtonSweeper(): void {\n\tif (sweeper) return;\n\tsweeper = setInterval(() => {\n\t\tconst cutoff = Date.now() - PICKER_TTL_MS;\n\t\tfor (const [id, entry] of registry) {\n\t\t\tif (entry.createdAt > cutoff) continue;\n\t\t\tregistry.delete(id);\n\t\t\tif (entry.completed) continue;\n\t\t\tentry.onCancel?.();\n\t\t\tvoid entry.adapter\n\t\t\t\t.editMessage(entry.chatId, entry.messageId, \"⏱ Expired — run the command again.\", [])\n\t\t\t\t.catch(() => {});\n\t\t}\n\t}, SWEEP_INTERVAL_MS);\n\tsweeper.unref?.();\n}\n\n/** Stop the TTL sweeper. */\nexport function stopButtonSweeper(): void {\n\tif (sweeper) {\n\t\tclearInterval(sweeper);\n\t\tsweeper = undefined;\n\t}\n}\n\n/** Test hook: reset the registry and stop the sweeper. */\nexport function resetButtonRegistry(): void {\n\tregistry.clear();\n\tstopButtonSweeper();\n}\n\n/** Test hook: expose active picker ids. */\nexport function activePickerIds(): string[] {\n\treturn [...registry].filter(([, picker]) => picker.completed === undefined).map(([id]) => id);\n}\n"]}
+{"version":3,"file":"buttons.d.ts","sourceRoot":"","sources":["../../src/gateway/buttons.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,KAAK,aAAa,EAAwC,MAAM,aAAa,CAAC;AAEvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAc,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAUrH,MAAM,WAAW,UAAU;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,mBAAmB,GAC5B;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E,2EAA2E;AAC3E,qBAAa,sBAAuB,SAAQ,KAAK;CAAG;AAEpD,MAAM,WAAW,UAAU;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC/D,QAAQ,CAAC,IAAI,OAAO,CAAC;IACrB,QAAQ,CAAC,IAAI,IAAI,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACxD;AAgBD,MAAM,WAAW,UAAU;IAC1B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACvC,GAAG,EAAE,aAAa,CAAC;IACnB,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,UAAU,CAAC;CACnB;AAKD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,sFAAsF;AACtF,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAO1D;AA6GD;;;GAGG;AACH,wBAAsB,YAAY,CACjC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,UAAU,EAChB,IAAI,CAAC,EAAE,WAAW,GAChB,OAAO,CAAC,UAAU,CAAC,CAgCrB;AAcD,6DAA6D;AAC7D,wBAAsB,cAAc,CACnC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,UAAU,GAAG;IAAE,OAAO,EAAE,eAAe,CAAA;CAAE,GAC7C,OAAO,CAAC,IAAI,CAAC,CAwHf;AAcD,kDAAkD;AAClD,wBAAgB,kBAAkB,IAAI,IAAI,CAoBzC;AAED,4BAA4B;AAC5B,wBAAgB,iBAAiB,IAAI,IAAI,CAKxC;AAED,0DAA0D;AAC1D,wBAAgB,mBAAmB,IAAI,IAAI,CAG1C;AAED,2CAA2C;AAC3C,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAE1C","sourcesContent":["/**\n * lunR: gateway inline-button picker registry.\n *\n * Single registry for all interactive prompts (model/thinking/sessions pickers\n * now; approvals later). Callback payloads stay tiny so they fit Telegram's\n * 64-byte callback_data limit; all picker state lives server-side in this module.\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { existsSync } from \"node:fs\";\nimport { isAuthorized } from \"./authz.ts\";\nimport { type GatewayConfig, gatewayConfigPath, loadGatewayConfig } from \"./config.ts\";\nimport { conversationBinding } from \"./conversations.ts\";\nimport type { PairingStore } from \"./pairing.ts\";\nimport type { BridgeLike } from \"./router.ts\";\nimport type { ButtonSpec, CallbackEvent, PlatformAdapter, SendOptions, SendResult, SessionSource } from \"./types.ts\";\n\nconst PICKER_TTL_MS = 15 * 60 * 1000;\nconst SWEEP_INTERVAL_MS = 60 * 1000;\nconst DEFAULT_PER_PAGE = 8;\nconst BUTTONS_PER_ROW = 2;\nconst CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTUVWXYZ23456789\";\nconst CODE_LENGTH = 8;\nconst CALLBACK_PREFIX = \"cp:\";\n\nexport interface PickerItem {\n\tlabel: string;\n\tvalue: string;\n}\n\nexport type PickerResolveResult =\n\t| { done: true; text: string }\n\t| { done: false; items: PickerItem[]; title: string; breadcrumbs?: string };\n\n/** An awaited control was stopped or superseded before it could commit. */\nexport class GatewayPickerCancelled extends Error {}\n\nexport interface PickerSpec {\n\tgeneration?: number;\n\tkind: \"model\" | \"thinking\" | \"sessions\" | \"project\" | \"dialog\";\n\tvalidate?(): boolean;\n\tonCancel?(): void;\n\tsessionKey: string;\n\tinvokerId: string;\n\titems: PickerItem[];\n\tperPage?: number;\n\ttitle: string;\n\tbreadcrumbs?: string;\n\tresolve(item: PickerItem): Promise<PickerResolveResult>;\n}\n\ninterface PendingPicker extends PickerSpec {\n\tgeneration: number;\n\tresolving?: boolean;\n\tcompleted?: string;\n\tid: string;\n\tchatId: string;\n\tmessageId: string;\n\tsource: SessionSource;\n\tadapter: PlatformAdapter;\n\tpage: number;\n\tperPage: number;\n\tcreatedAt: number;\n}\n\nexport interface ButtonDeps {\n\tadapters: Map<string, PlatformAdapter>;\n\tcfg: GatewayConfig;\n\tpairing: PairingStore;\n\tbridge: BridgeLike;\n}\n\nconst registry = new Map<string, PendingPicker>();\nconst generations = new Map<string, number>();\n\nexport function gatewayPickerGeneration(key: string): number {\n\treturn generations.get(key) ?? 0;\n}\n\n/** Cancel pending controls when their conversation changes or the user stops them. */\nexport function invalidateGatewayPickers(key: string): void {\n\tgenerations.set(key, gatewayPickerGeneration(key) + 1);\n\tfor (const [id, picker] of registry) {\n\t\tif (picker.sessionKey !== key || picker.completed !== undefined) continue;\n\t\tregistry.delete(id);\n\t\tpicker.onCancel?.();\n\t}\n}\n\nfunction pickerRequesterValid(picker: PendingPicker): boolean {\n\tconst binding = conversationBinding(picker.sessionKey);\n\treturn (\n\t\t!binding ||\n\t\t((!binding.owner || binding.owner === picker.invokerId) &&\n\t\t\tbinding.source.platform === picker.source.platform &&\n\t\t\tbinding.source.chatId === picker.source.chatId &&\n\t\t\tbinding.source.userId === picker.invokerId &&\n\t\t\tbinding.source.threadId === picker.source.threadId)\n\t);\n}\n\nfunction pickerValid(picker: PendingPicker): boolean {\n\treturn (\n\t\tpicker.generation === gatewayPickerGeneration(picker.sessionKey) &&\n\t\tpickerRequesterValid(picker) &&\n\t\t(!picker.validate || picker.validate())\n\t);\n}\n\nlet sweeper: ReturnType<typeof setInterval> | undefined;\n\nfunction generatePickerId(): string {\n\tlet id = \"\";\n\tconst bytes = randomBytes(CODE_LENGTH);\n\tfor (let i = 0; i < CODE_LENGTH; i++) {\n\t\tid += CODE_ALPHABET[bytes[i] % CODE_ALPHABET.length];\n\t}\n\treturn id;\n}\n\nfunction makeCallbackData(id: string, action: \"select\" | \"page\" | \"cancel\" | \"noop\", payload?: string): string {\n\tif (action === \"noop\") return `${CALLBACK_PREFIX}${id}:`;\n\tif (action === \"cancel\") return `${CALLBACK_PREFIX}${id}:x`;\n\tif (action === \"page\") return `${CALLBACK_PREFIX}${id}:p${payload ?? \"0\"}`;\n\treturn `${CALLBACK_PREFIX}${id}:${payload ?? \"\"}`;\n}\n\nfunction parseCallbackData(\n\tdata: string,\n): { id: string; action: \"select\" | \"page\" | \"cancel\" | \"noop\"; payload?: string } | null {\n\tif (!data.startsWith(CALLBACK_PREFIX)) return null;\n\tconst rest = data.slice(CALLBACK_PREFIX.length);\n\tconst colon = rest.indexOf(\":\");\n\tif (colon === -1) return null;\n\tconst id = rest.slice(0, colon);\n\tconst tail = rest.slice(colon + 1);\n\tif (tail === \"\") return { id, action: \"noop\" };\n\tif (tail === \"x\") return { id, action: \"cancel\" };\n\tif (tail.startsWith(\"p\")) return { id, action: \"page\", payload: tail.slice(1) };\n\treturn { id, action: \"select\", payload: tail };\n}\n\nfunction isSameChat(a: SessionSource, b: SessionSource): boolean {\n\treturn a.platform === b.platform && a.chatId === b.chatId && a.threadId === b.threadId;\n}\n\nfunction sourceForAuth(picker: PendingPicker, cb: CallbackEvent): SessionSource {\n\treturn {\n\t\tplatform: picker.source.platform,\n\t\tchatId: cb.chatId,\n\t\tchatType: picker.source.chatType,\n\t\tuserId: cb.userId,\n\t\tuserName: cb.userName,\n\t\tthreadId: cb.threadId,\n\t\t// Do NOT inherit the original invoker's role authorization.\n\t\troleAuthorized: undefined,\n\t};\n}\n\nfunction renderPage(picker: PendingPicker): { text: string; buttons: ButtonSpec[][] } {\n\tconst { id, title, breadcrumbs, items, page, perPage } = picker;\n\tconst totalPages = Math.max(1, Math.ceil(items.length / perPage));\n\tconst clampedPage = Math.max(0, Math.min(page, totalPages - 1));\n\tconst start = clampedPage * perPage;\n\tconst pageItems = items.slice(start, start + perPage);\n\n\tconst rows: ButtonSpec[][] = [];\n\tfor (let i = 0; i < pageItems.length; i += BUTTONS_PER_ROW) {\n\t\tconst row: ButtonSpec[] = [];\n\t\tfor (let j = 0; j < BUTTONS_PER_ROW && i + j < pageItems.length; j++) {\n\t\t\tconst index = start + i + j;\n\t\t\trow.push({ label: pageItems[i + j].label, data: makeCallbackData(id, \"select\", String(index)) });\n\t\t}\n\t\trows.push(row);\n\t}\n\n\tif (totalPages > 1) {\n\t\tconst nav: ButtonSpec[] = [];\n\t\tif (clampedPage > 0) {\n\t\t\tnav.push({ label: \"◀ Prev\", data: makeCallbackData(id, \"page\", String(clampedPage - 1)) });\n\t\t}\n\t\tnav.push({ label: `${clampedPage + 1}/${totalPages}`, data: makeCallbackData(id, \"noop\") });\n\t\tif (clampedPage < totalPages - 1) {\n\t\t\tnav.push({ label: \"Next ▶\", data: makeCallbackData(id, \"page\", String(clampedPage + 1)) });\n\t\t}\n\t\trows.push(nav);\n\t}\n\n\trows.push([{ label: \"✗ Cancel\", data: makeCallbackData(id, \"cancel\") }]);\n\n\tconst header = breadcrumbs ? `${title} · ${breadcrumbs}` : title;\n\tconst text =\n\t\titems.length === 0 ? `${header}\\n\\nNo options available.` : `${header} (${clampedPage + 1}/${totalPages}):`;\n\treturn { text, buttons: rows };\n}\n\n/**\n * Create and send a paginated inline-button picker. On send failure the caller\n * should fall back to a text-based list.\n */\nexport async function createPicker(\n\tadapter: PlatformAdapter,\n\tsource: SessionSource,\n\tspec: PickerSpec,\n\topts?: SendOptions,\n): Promise<SendResult> {\n\tconst id = generatePickerId();\n\tconst pending: PendingPicker = {\n\t\t...spec,\n\t\tgeneration: spec.generation ?? gatewayPickerGeneration(spec.sessionKey),\n\t\tid,\n\t\tchatId: source.chatId,\n\t\tsource,\n\t\tadapter,\n\t\tmessageId: \"\",\n\t\tpage: 0,\n\t\tperPage: spec.perPage ?? DEFAULT_PER_PAGE,\n\t\tcreatedAt: Date.now(),\n\t};\n\tif (!pickerValid(pending)) return { success: false, error: \"Picker expired.\" };\n\tif (\n\t\tsource.userId !== spec.invokerId ||\n\t\t(existsSync(gatewayConfigPath()) && !isAuthorized(source, loadGatewayConfig()))\n\t)\n\t\treturn { success: false, error: \"Gateway access is no longer approved.\" };\n\tconst { text, buttons } = renderPage(pending);\n\tconst result = await adapter.sendButtons(source.chatId, text, buttons, opts);\n\tif (!result.success) return result;\n\tif (!pickerValid(pending)) {\n\t\tpending.onCancel?.();\n\t\treturn result;\n\t}\n\tif (result.messageId) {\n\t\tpending.messageId = result.messageId;\n\t\tregistry.set(id, pending);\n\t}\n\treturn result;\n}\n\nasync function answerExpired(adapter: PlatformAdapter, cb: CallbackEvent): Promise<void> {\n\tawait adapter.answerCallback(cb.id, \"Picker expired — run the command again.\").catch(() => {});\n}\n\nasync function answerUnauthorized(adapter: PlatformAdapter, cb: CallbackEvent): Promise<void> {\n\tawait adapter.answerCallback(cb.id, \"⛔ Not authorized.\").catch(() => {});\n}\n\nasync function answerNotYourPicker(adapter: PlatformAdapter, cb: CallbackEvent): Promise<void> {\n\tawait adapter.answerCallback(cb.id, \"⛔ Not your picker.\").catch(() => {});\n}\n\n/** Dispatch a CallbackEvent to the matching picker entry. */\nexport async function handleCallback(\n\tcb: CallbackEvent,\n\tdeps: ButtonDeps & { adapter: PlatformAdapter },\n): Promise<void> {\n\tconst { adapter, pairing } = deps;\n\tconst freshConfig = () => (existsSync(gatewayConfigPath()) ? loadGatewayConfig() : deps.cfg);\n\tconst parsed = parseCallbackData(cb.data);\n\tif (!parsed) return;\n\n\tconst picker = registry.get(parsed.id);\n\tif (!picker) {\n\t\tawait answerExpired(adapter, cb);\n\t\treturn;\n\t}\n\n\tif (picker.completed === undefined && !pickerValid(picker)) {\n\t\tregistry.delete(parsed.id);\n\t\tpicker.onCancel?.();\n\t\tawait answerExpired(adapter, cb);\n\t\treturn;\n\t}\n\n\tif (adapter.platform !== picker.source.platform || !isSameChat(picker.source, sourceForAuth(picker, cb))) {\n\t\tawait answerExpired(adapter, cb);\n\t\treturn;\n\t}\n\n\tif (cb.userId !== picker.invokerId) {\n\t\tawait answerNotYourPicker(adapter, cb);\n\t\treturn;\n\t}\n\n\tif (!isAuthorized(sourceForAuth(picker, cb), freshConfig(), pairing)) {\n\t\tawait answerUnauthorized(adapter, cb);\n\t\treturn;\n\t}\n\n\tconst authorized = () =>\n\t\tpickerRequesterValid(picker) && isAuthorized(sourceForAuth(picker, cb), freshConfig(), pairing);\n\tif (Date.now() > picker.createdAt + PICKER_TTL_MS) {\n\t\tif (!picker.completed) picker.onCancel?.();\n\t\tregistry.delete(parsed.id);\n\t\ttry {\n\t\t\tawait picker.adapter.editMessage(picker.chatId, picker.messageId, \"⏱ Expired — run the command again.\", []);\n\t\t} catch {\n\t\t\t// best-effort expiry message\n\t\t}\n\t\tawait answerExpired(adapter, cb);\n\t\treturn;\n\t}\n\n\tif (picker.completed !== undefined) {\n\t\tawait adapter.answerCallback(cb.id, \"Already completed.\").catch(() => {});\n\t\treturn;\n\t}\n\n\tif (parsed.action === \"cancel\") {\n\t\tregistry.delete(parsed.id);\n\t\tpicker.onCancel?.();\n\t\ttry {\n\t\t\tawait picker.adapter.editMessage(picker.chatId, picker.messageId, \"Cancelled.\", []);\n\t\t} catch {}\n\t\tawait adapter.answerCallback(cb.id).catch(() => {});\n\t\treturn;\n\t}\n\n\tif (parsed.action === \"noop\") {\n\t\tawait adapter.answerCallback(cb.id).catch(() => {});\n\t\treturn;\n\t}\n\n\tif (parsed.action === \"page\") {\n\t\tconst page = Number.parseInt(parsed.payload ?? \"0\", 10);\n\t\tconst totalPages = Math.max(1, Math.ceil(picker.items.length / picker.perPage));\n\t\tpicker.page = Math.max(0, Math.min(page, totalPages - 1));\n\t\tconst { text, buttons } = renderPage(picker);\n\t\ttry {\n\t\t\tawait picker.adapter.editMessage(picker.chatId, picker.messageId, text, buttons);\n\t\t} catch {}\n\t\tawait adapter.answerCallback(cb.id).catch(() => {});\n\t\treturn;\n\t}\n\n\t// select\n\tconst index = Number.parseInt(parsed.payload ?? \"\", 10);\n\tconst item = picker.items[index];\n\tif (!item) {\n\t\tawait adapter.answerCallback(cb.id, \"Invalid selection.\").catch(() => {});\n\t\treturn;\n\t}\n\n\tif (picker.resolving) {\n\t\tawait adapter.answerCallback(cb.id, \"Selection is still running.\").catch(() => {});\n\t\treturn;\n\t}\n\tpicker.resolving = true;\n\tawait adapter.answerCallback(cb.id).catch(() => {});\n\ttry {\n\t\t// A callback acknowledgement can yield to stop, replacement or revocation.\n\t\tif (!pickerValid(picker) || !authorized()) return;\n\t\tconst result = await picker.resolve(item);\n\t\tif (!result.done) {\n\t\t\tif (!pickerValid(picker) || !authorized()) return;\n\t\t\tpicker.items = result.items;\n\t\t\tpicker.title = result.title;\n\t\t\tpicker.breadcrumbs = result.breadcrumbs;\n\t\t\tpicker.page = 0;\n\t\t\tconst { text, buttons } = renderPage(picker);\n\t\t\ttry {\n\t\t\t\tawait picker.adapter.editMessage(picker.chatId, picker.messageId, text, buttons);\n\t\t\t} catch {}\n\t\t\treturn;\n\t\t}\n\t\tpicker.completed = result.text;\n\t\tawait confirmPicker(picker, result.text, authorized);\n\t} catch (err) {\n\t\tif (err instanceof GatewayPickerCancelled) return;\n\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\tpicker.completed = `⚠ ${message}`;\n\t\tawait confirmPicker(picker, picker.completed, authorized);\n\t} finally {\n\t\tpicker.resolving = false;\n\t}\n}\n\nasync function confirmPicker(picker: PendingPicker, text: string, authorized: () => boolean): Promise<void> {\n\tif (!authorized()) return;\n\tconst edited = await picker.adapter\n\t\t.editMessage(picker.chatId, picker.messageId, text, [])\n\t\t.catch(() => ({ success: false }));\n\tif (edited.success || !authorized()) return;\n\tconst sent = await picker.adapter\n\t\t.send(picker.chatId, text, { threadId: picker.source.threadId })\n\t\t.catch(() => ({ success: false }));\n\tif (!sent.success) console.error(`[gateway] picker confirmation failed on ${picker.adapter.platform}`);\n}\n\n/** Start the periodic TTL sweeper. Idempotent. */\nexport function startButtonSweeper(): void {\n\tif (sweeper) return;\n\tsweeper = setInterval(() => {\n\t\tconst cutoff = Date.now() - PICKER_TTL_MS;\n\t\tfor (const [id, entry] of registry) {\n\t\t\tif (entry.createdAt > cutoff) continue;\n\t\t\tregistry.delete(id);\n\t\t\tif (entry.completed) continue;\n\t\t\tentry.onCancel?.();\n\t\t\tif (\n\t\t\t\t!pickerRequesterValid(entry) ||\n\t\t\t\t!isAuthorized({ ...entry.source, roleAuthorized: undefined }, loadGatewayConfig())\n\t\t\t)\n\t\t\t\tcontinue;\n\t\t\tvoid entry.adapter\n\t\t\t\t.editMessage(entry.chatId, entry.messageId, \"⏱ Expired — run the command again.\", [])\n\t\t\t\t.catch(() => {});\n\t\t}\n\t}, SWEEP_INTERVAL_MS);\n\tsweeper.unref?.();\n}\n\n/** Stop the TTL sweeper. */\nexport function stopButtonSweeper(): void {\n\tif (sweeper) {\n\t\tclearInterval(sweeper);\n\t\tsweeper = undefined;\n\t}\n}\n\n/** Test hook: reset the registry and stop the sweeper. */\nexport function resetButtonRegistry(): void {\n\tregistry.clear();\n\tstopButtonSweeper();\n}\n\n/** Test hook: expose active picker ids. */\nexport function activePickerIds(): string[] {\n\treturn [...registry].filter(([, picker]) => picker.completed === undefined).map(([id]) => id);\n}\n"]}

package/dist/gateway/buttons.js

@@ -6,7 +6,10 @@
  * 64-byte callback_data limit; all picker state lives server-side in this module.
  */
 import { randomBytes } from "node:crypto";
+import { existsSync } from "node:fs";
 import { isAuthorized } from "./authz.js";
+import { gatewayConfigPath, loadGatewayConfig } from "./config.js";
+import { conversationBinding } from "./conversations.js";
 const PICKER_TTL_MS = 15 * 60 * 1000;
 const SWEEP_INTERVAL_MS = 60 * 1000;
 const DEFAULT_PER_PAGE = 8;
@@ -14,7 +17,38 @@ const BUTTONS_PER_ROW = 2;
 const CODE_ALPHABET = "ABCDEFGHJKMNPQRSTUVWXYZ23456789";
 const CODE_LENGTH = 8;
 const CALLBACK_PREFIX = "cp:";
+/** An awaited control was stopped or superseded before it could commit. */
+export class GatewayPickerCancelled extends Error {
+}
 const registry = new Map();
+const generations = new Map();
+export function gatewayPickerGeneration(key) {
+    return generations.get(key) ?? 0;
+}
+/** Cancel pending controls when their conversation changes or the user stops them. */
+export function invalidateGatewayPickers(key) {
+    generations.set(key, gatewayPickerGeneration(key) + 1);
+    for (const [id, picker] of registry) {
+        if (picker.sessionKey !== key || picker.completed !== undefined)
+            continue;
+        registry.delete(id);
+        picker.onCancel?.();
+    }
+}
+function pickerRequesterValid(picker) {
+    const binding = conversationBinding(picker.sessionKey);
+    return (!binding ||
+        ((!binding.owner || binding.owner === picker.invokerId) &&
+            binding.source.platform === picker.source.platform &&
+            binding.source.chatId === picker.source.chatId &&
+            binding.source.userId === picker.invokerId &&
+            binding.source.threadId === picker.source.threadId));
+}
+function pickerValid(picker) {
+    return (picker.generation === gatewayPickerGeneration(picker.sessionKey) &&
+        pickerRequesterValid(picker) &&
+        (!picker.validate || picker.validate()));
+}
 let sweeper;
 function generatePickerId() {
     let id = "";
@@ -104,6 +138,7 @@ export async function createPicker(adapter, source, spec, opts) {
     const id = generatePickerId();
     const pending = {
         ...spec,
+        generation: spec.generation ?? gatewayPickerGeneration(spec.sessionKey),
         id,
         chatId: source.chatId,
         source,
@@ -113,10 +148,19 @@ export async function createPicker(adapter, source, spec, opts) {
         perPage: spec.perPage ?? DEFAULT_PER_PAGE,
         createdAt: Date.now(),
     };
+    if (!pickerValid(pending))
+        return { success: false, error: "Picker expired." };
+    if (source.userId !== spec.invokerId ||
+        (existsSync(gatewayConfigPath()) && !isAuthorized(source, loadGatewayConfig())))
+        return { success: false, error: "Gateway access is no longer approved." };
     const { text, buttons } = renderPage(pending);
     const result = await adapter.sendButtons(source.chatId, text, buttons, opts);
     if (!result.success)
         return result;
+    if (!pickerValid(pending)) {
+        pending.onCancel?.();
+        return result;
+    }
     if (result.messageId) {
         pending.messageId = result.messageId;
         registry.set(id, pending);
@@ -134,7 +178,8 @@ async function answerNotYourPicker(adapter, cb) {
 }
 /** Dispatch a CallbackEvent to the matching picker entry. */
 export async function handleCallback(cb, deps) {
-    const { adapter, cfg, pairing } = deps;
+    const { adapter, pairing } = deps;
+    const freshConfig = () => (existsSync(gatewayConfigPath()) ? loadGatewayConfig() : deps.cfg);
     const parsed = parseCallbackData(cb.data);
     if (!parsed)
         return;
@@ -143,12 +188,25 @@ export async function handleCallback(cb, deps) {
         await answerExpired(adapter, cb);
         return;
     }
-    if (!picker.completed && picker.validate && !picker.validate()) {
+    if (picker.completed === undefined && !pickerValid(picker)) {
         registry.delete(parsed.id);
         picker.onCancel?.();
         await answerExpired(adapter, cb);
         return;
     }
+    if (adapter.platform !== picker.source.platform || !isSameChat(picker.source, sourceForAuth(picker, cb))) {
+        await answerExpired(adapter, cb);
+        return;
+    }
+    if (cb.userId !== picker.invokerId) {
+        await answerNotYourPicker(adapter, cb);
+        return;
+    }
+    if (!isAuthorized(sourceForAuth(picker, cb), freshConfig(), pairing)) {
+        await answerUnauthorized(adapter, cb);
+        return;
+    }
+    const authorized = () => pickerRequesterValid(picker) && isAuthorized(sourceForAuth(picker, cb), freshConfig(), pairing);
     if (Date.now() > picker.createdAt + PICKER_TTL_MS) {
         if (!picker.completed)
             picker.onCancel?.();
@@ -162,18 +220,6 @@ export async function handleCallback(cb, deps) {
         await answerExpired(adapter, cb);
         return;
     }
-    if (!isSameChat(picker.source, sourceForAuth(picker, cb))) {
-        await answerExpired(adapter, cb);
-        return;
-    }
-    if (cb.userId !== picker.invokerId) {
-        await answerNotYourPicker(adapter, cb);
-        return;
-    }
-    if (!isAuthorized(sourceForAuth(picker, cb), cfg, pairing)) {
-        await answerUnauthorized(adapter, cb);
-        return;
-    }
     if (picker.completed !== undefined) {
         await adapter.answerCallback(cb.id, "Already completed.").catch(() => { });
         return;
@@ -218,8 +264,13 @@ export async function handleCallback(cb, deps) {
     picker.resolving = true;
     await adapter.answerCallback(cb.id).catch(() => { });
     try {
+        // A callback acknowledgement can yield to stop, replacement or revocation.
+        if (!pickerValid(picker) || !authorized())
+            return;
         const result = await picker.resolve(item);
         if (!result.done) {
+            if (!pickerValid(picker) || !authorized())
+                return;
             picker.items = result.items;
             picker.title = result.title;
             picker.breadcrumbs = result.breadcrumbs;
@@ -232,22 +283,26 @@ export async function handleCallback(cb, deps) {
             return;
         }
         picker.completed = result.text;
-        await confirmPicker(picker, result.text);
+        await confirmPicker(picker, result.text, authorized);
     }
     catch (err) {
+        if (err instanceof GatewayPickerCancelled)
+            return;
         const message = err instanceof Error ? err.message : String(err);
         picker.completed = `⚠ ${message}`;
-        await confirmPicker(picker, picker.completed);
+        await confirmPicker(picker, picker.completed, authorized);
     }
     finally {
         picker.resolving = false;
     }
 }
-async function confirmPicker(picker, text) {
+async function confirmPicker(picker, text, authorized) {
+    if (!authorized())
+        return;
     const edited = await picker.adapter
         .editMessage(picker.chatId, picker.messageId, text, [])
         .catch(() => ({ success: false }));
-    if (edited.success)
+    if (edited.success || !authorized())
         return;
     const sent = await picker.adapter
         .send(picker.chatId, text, { threadId: picker.source.threadId })
@@ -268,6 +323,9 @@ export function startButtonSweeper() {
             if (entry.completed)
                 continue;
             entry.onCancel?.();
+            if (!pickerRequesterValid(entry) ||
+                !isAuthorized({ ...entry.source, roleAuthorized: undefined }, loadGatewayConfig()))
+                continue;
             void entry.adapter
                 .editMessage(entry.chatId, entry.messageId, "⏱ Expired — run the command again.", [])
                 .catch(() => { });