@diegoaltoworks/chatter 0.47.0 → 0.48.0

package/README.md

@@ -90,7 +90,6 @@ Complete guides for setup, deployment, and integration:
 - **[Usage Metering](./docs/usage.md)** - Daily spend caps for paid features
 - **[Deployment](./docs/deployment.md)** - Google Cloud Run, Fly.io, Railway, VPS
 - **[Testing](./docs/testing.md)** - Comprehensive testing guide
-- **[Code Quality](./docs/CODE_QUALITY.md)** - Security assessment and architecture review
 - **[Sprint Review](./docs/sprint-review.md)** - Cross-module & security-invariant audit
 - **[FAQs](./docs/faqs.md)** - Troubleshooting and common questions
 
@@ -137,7 +136,7 @@ See [Client Setup Guide](./docs/client.md) for detailed integration examples, th
 
 ## MCP Server Integration
 
-Use Chatter as a Model Context Protocol (MCP) server to expose your chatbot to Claude Desktop, VS Code extensions, and other MCP-compatible tools:
+Use Chatter as a Model Context Protocol (MCP) server to expose your chatbot to Claude Desktop, VS Code extensions, and other MCP-compatible tools. `@modelcontextprotocol/sdk` and `zod` are optional peer dependencies scoped to this subpath — install them to use it: `bun add @modelcontextprotocol/sdk zod`.
 
 **Basic Setup:**
 ```typescript
@@ -237,7 +236,7 @@ Add to your `claude_desktop_config.json`:
 Both tools:
 - Support single messages or full conversation history
 - Track conversation IDs across sessions for continuity
-- Return token usage and cost estimates in response metadata
+- Return token usage in response metadata, plus an estimated USD cost when `openai.pricing` is configured
 - Use RAG-powered context retrieval from your knowledge base
 - Can be customized with different names and descriptions
 - Can be individually enabled/disabled
@@ -245,7 +244,7 @@ Both tools:
 
 **Features:**
 - **Conversation ID Tracking**: Pass `conversationId` parameter to maintain session continuity across tool calls
-- **Cost Tracking**: Every response includes token usage (prompt/completion/total) and estimated USD cost
+- **Cost Tracking**: Every response includes token usage (prompt/completion/total). Add `openai: { pricing: { promptPer1M, completionPer1M } }` to also get an estimated USD cost — without it, `estimatedCost` is `null` rather than guessing at a price for the wrong model
 - **Rate Limiting**: Optional per-tool rate limiting (requests per minute) to control API usage
 - **Observability**: Comprehensive logging with conversation tracking and cost data
 

package/dist/auth/apikeys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apikeys.d.ts","sourceRoot":"","sources":["../../src/auth/apikeys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,uBAAuB;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,IAAI,EAAE,SAAS,CAAC;IAChB,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,+BAA+B;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,iCAAiC;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,+BAA+B;IAC/B,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,WAAW,CAAa;IAEhC,YAAY,MAAM,EAAE,MAAM,EAKzB;IAED;;;;;OAKG;IACG,MAAM,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBzD;IAED;;;;;OAKG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAsBjD;IAED;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IA6BvB;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAW1C;CACF"}
+{"version":3,"file":"apikeys.d.ts","sourceRoot":"","sources":["../../src/auth/apikeys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,uBAAuB;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,IAAI,EAAE,SAAS,CAAC;IAChB,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,+BAA+B;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,iCAAiC;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,+BAA+B;IAC/B,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,WAAW,CAAa;IAEhC,YAAY,MAAM,EAAE,MAAM,EAGzB;IAED;;;;;OAKG;IACG,MAAM,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBzD;IAED;;;;;OAKG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAsBjD;IAED;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IA6BvB;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAW1C;CACF"}

package/dist/auth/secretStrength.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Shared strength check for caller-supplied secrets (JWT signing key, WhatsApp
+ * session-encryption passphrase). Both guard high-value material — API key
+ * forgery or WhatsApp account takeover — so a short or empty value fails
+ * fast with an actionable error instead of quietly producing a weak key.
+ */
+export declare function assertStrongSecret(secret: string | undefined, label: string): void;
+//# sourceMappingURL=secretStrength.d.ts.map

package/dist/auth/secretStrength.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretStrength.d.ts","sourceRoot":"","sources":["../../src/auth/secretStrength.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAUlF"}

package/dist/bin/create-apikey.js

@@ -4,12 +4,25 @@
 // src/auth/apikeys.ts
 var import_node_crypto = require("node:crypto");
 var import_jose = require("jose");
+
+// src/auth/secretStrength.ts
+var MIN_SECRET_LENGTH = 16;
+function assertStrongSecret(secret, label) {
+  if (!secret) {
+    throw new Error(`${label} is required and cannot be empty.`);
+  }
+  if (secret.length < MIN_SECRET_LENGTH) {
+    throw new Error(
+      `${label} is too weak: must be at least ${MIN_SECRET_LENGTH} characters (got ${secret.length}). Generate one with \`openssl rand -base64 32\`.`
+    );
+  }
+}
+
+// src/auth/apikeys.ts
 var ApiKeyManager = class {
   secretBytes;
   constructor(secret) {
-    if (!secret) {
-      throw new Error("API key secret is required");
-    }
+    assertStrongSecret(secret, "API key secret (CHATTER_SECRET / config.auth.secret)");
     this.secretBytes = new TextEncoder().encode(secret);
   }
   /**
@@ -155,6 +168,12 @@ Examples:
     console.error("   CHATTER_SECRET=your-secret npx chatter create-apikey\n");
     process.exit(1);
   }
+  try {
+    assertStrongSecret(secret, "CHATTER_SECRET");
+  } catch (error) {
+    console.error(`\u274C ${error.message}`);
+    process.exit(1);
+  }
   const manager = new ApiKeyManager(secret);
   const keyName = options.name || "api-key";
   const expiresIn = options.expiresIn || "365d";

package/dist/bin/wa-pair.js

@@ -26,28 +26,74 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 // bin/wa-pair.ts
 var import_client = require("@libsql/client");
 
+// src/auth/secretStrength.ts
+var MIN_SECRET_LENGTH = 16;
+function assertStrongSecret(secret, label) {
+  if (!secret) {
+    throw new Error(`${label} is required and cannot be empty.`);
+  }
+  if (secret.length < MIN_SECRET_LENGTH) {
+    throw new Error(
+      `${label} is too weak: must be at least ${MIN_SECRET_LENGTH} characters (got ${secret.length}). Generate one with \`openssl rand -base64 32\`.`
+    );
+  }
+}
+
 // src/channels/whatsapp/crypto.ts
 var import_node_crypto = require("node:crypto");
+var import_node_util = require("node:util");
+var scryptAsync = (0, import_node_util.promisify)(import_node_crypto.scrypt);
 var IV_LENGTH = 12;
 var TAG_LENGTH = 16;
-function deriveKey(secret) {
+var SALT_LENGTH = 16;
+var KEY_LENGTH = 32;
+var VERSION = 1;
+function deriveLegacyKey(secret) {
   return (0, import_node_crypto.createHash)("sha256").update(secret, "utf-8").digest();
 }
-function encrypt(plaintext, secret) {
+async function deriveKey(secret, salt) {
+  return await scryptAsync(secret, salt, KEY_LENGTH);
+}
+async function encrypt(plaintext, secret) {
+  const salt = (0, import_node_crypto.randomBytes)(SALT_LENGTH);
   const iv = (0, import_node_crypto.randomBytes)(IV_LENGTH);
-  const cipher = (0, import_node_crypto.createCipheriv)("aes-256-gcm", deriveKey(secret), iv);
+  const cipher = (0, import_node_crypto.createCipheriv)("aes-256-gcm", await deriveKey(secret, salt), iv);
   const ciphertext = Buffer.concat([cipher.update(plaintext, "utf-8"), cipher.final()]);
-  return Buffer.concat([iv, cipher.getAuthTag(), ciphertext]).toString("base64");
+  return Buffer.concat([
+    Buffer.from([VERSION]),
+    salt,
+    iv,
+    cipher.getAuthTag(),
+    ciphertext
+  ]).toString("base64");
 }
-function decrypt(payload, secret) {
-  const raw = Buffer.from(payload, "base64");
+async function decryptVersioned(raw, secret) {
+  const salt = raw.subarray(1, 1 + SALT_LENGTH);
+  const iv = raw.subarray(1 + SALT_LENGTH, 1 + SALT_LENGTH + IV_LENGTH);
+  const tag = raw.subarray(1 + SALT_LENGTH + IV_LENGTH, 1 + SALT_LENGTH + IV_LENGTH + TAG_LENGTH);
+  const ciphertext = raw.subarray(1 + SALT_LENGTH + IV_LENGTH + TAG_LENGTH);
+  const decipher = (0, import_node_crypto.createDecipheriv)("aes-256-gcm", await deriveKey(secret, salt), iv);
+  decipher.setAuthTag(tag);
+  return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf-8");
+}
+function decryptLegacy(raw, secret) {
   const iv = raw.subarray(0, IV_LENGTH);
   const tag = raw.subarray(IV_LENGTH, IV_LENGTH + TAG_LENGTH);
   const ciphertext = raw.subarray(IV_LENGTH + TAG_LENGTH);
-  const decipher = (0, import_node_crypto.createDecipheriv)("aes-256-gcm", deriveKey(secret), iv);
+  const decipher = (0, import_node_crypto.createDecipheriv)("aes-256-gcm", deriveLegacyKey(secret), iv);
   decipher.setAuthTag(tag);
   return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf-8");
 }
+async function decrypt(payload, secret) {
+  const raw = Buffer.from(payload, "base64");
+  if (raw[0] === VERSION) {
+    try {
+      return await decryptVersioned(raw, secret);
+    } catch {
+    }
+  }
+  return decryptLegacy(raw, secret);
+}
 
 // src/channels/whatsapp/authState.ts
 var schemaReady = /* @__PURE__ */ new WeakMap();
@@ -72,10 +118,10 @@ async function useTursoAuthState(db2, secret, sessionId2, runtime) {
     });
     const row = result.rows[0];
     if (!row) return null;
-    return JSON.parse(decrypt(row.value, secret), runtime.bufferJSON.reviver);
+    return JSON.parse(await decrypt(row.value, secret), runtime.bufferJSON.reviver);
   }
   async function write(id, value) {
-    const payload = encrypt(JSON.stringify(value, runtime.bufferJSON.replacer), secret);
+    const payload = await encrypt(JSON.stringify(value, runtime.bufferJSON.replacer), secret);
     await db2.execute({
       sql: "INSERT OR REPLACE INTO wa_auth (id, value) VALUES (?, ?)",
       args: [rowId(id), payload]
@@ -386,8 +432,10 @@ if (args.includes("--code") && !flagValue("--code")) {
 var phoneNumber = flagValue("--code")?.replace(/[^0-9]/g, "");
 var reset = args.includes("--reset");
 var sessionSecret = process.env.WA_SESSION_SECRET;
-if (!sessionSecret) {
-  console.error("\u274C WA_SESSION_SECRET is required (any strong passphrase; keep it stable).");
+try {
+  assertStrongSecret(sessionSecret, "WA_SESSION_SECRET");
+} catch (error) {
+  console.error(`\u274C ${error.message}`);
   process.exit(1);
 }
 if (!process.env.TURSO_URL) {

package/dist/channels/gates.d.ts

@@ -37,6 +37,15 @@ export interface ChannelGateConfig {
     muteRegex?: RegExp;
     unmuteRegex?: RegExp;
 }
+/**
+ * True when `msg` is dropped because its chat isn't on `allowedChats`. The
+ * allowlist is the first group-only check {@link decideChannelAction} makes,
+ * before mute/unmute and addressing, so whenever this is true the allowlist
+ * really is the attributable reason for the "ignore" — a transport can log
+ * just this case without misattributing a drop that happened for a different
+ * cause (from the bot itself, blank text, muted, unaddressed).
+ */
+export declare function isBlockedByAllowlist(msg: ChannelMessage, config: Pick<ChannelGateConfig, "allowedChats">): boolean;
 /**
  * DMs always reply. In groups, only an allowlisted, unmuted chat gets a
  * reply, and only when addressed (mentioned or replying to the bot) —

package/dist/channels/gates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gates.d.ts","sourceRoot":"","sources":["../../src/channels/gates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,eAAe,EAAE,OAAO,CAAC;IACzB,mEAAmE;IACnE,WAAW,EAAE,OAAO,CAAC;IACrB,wFAAwF;IACxF,YAAY,EAAE,OAAO,CAAC;IACtB,sHAAsH;IACtH,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEnE,MAAM,WAAW,iBAAiB;IAChC,gGAAgG;IAChG,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kIAAkI;IAClI,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAOD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,GAAG,aAAa,CAYjG;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,MAAM,MAAiB,SAGD,MAAM,KAAG,OAAO,CAY5C;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,iBAAiB,CAAC,EACvD,QAAQ,EAAE;IAAE,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;IAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAA;CAAE,GAChF,OAAO,CAET;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,uBAAuB,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAE5D,qHAAqH;AACrH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,MAAM,GAAG,SAAS,EACtB,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAMT;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,UAAU,CAAC,EACjD,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAET"}
+{"version":3,"file":"gates.d.ts","sourceRoot":"","sources":["../../src/channels/gates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,eAAe,EAAE,OAAO,CAAC;IACzB,mEAAmE;IACnE,WAAW,EAAE,OAAO,CAAC;IACrB,wFAAwF;IACxF,YAAY,EAAE,OAAO,CAAC;IACtB,sHAAsH;IACtH,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEnE,MAAM,WAAW,iBAAiB;IAChC,gGAAgG;IAChG,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kIAAkI;IAClI,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAOD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAC9C,OAAO,CAQT;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,GAAG,aAAa,CAUjG;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,MAAM,MAAiB,SAGD,MAAM,KAAG,OAAO,CAY5C;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,iBAAiB,CAAC,EACvD,QAAQ,EAAE;IAAE,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;IAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAA;CAAE,GAChF,OAAO,CAET;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,uBAAuB,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAE5D,qHAAqH;AACrH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,MAAM,GAAG,SAAS,EACtB,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAMT;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,UAAU,CAAC,EACjD,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAET"}

package/dist/channels/index.d.ts

@@ -42,6 +42,7 @@ export interface Channel {
     stop?(): void | Promise<void>;
 }
 export * from "./gates";
+export { createInboundPipeline, type InboundPipelineConfig, type InboundPipelineDeps, type InboundPipelineOutcome, type InboundReplySender, type InboundTurn, } from "./pipeline";
 export type { ChannelSender, ChannelSenderRegistry } from "./senders";
 export { createSenderRegistry } from "./senders";
 //# sourceMappingURL=index.d.ts.map

package/dist/channels/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/channels/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEnD,MAAM,WAAW,OAAO;IACtB,2FAA2F;IAC3F,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD;;;;;;OAMG;IACH,IAAI,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED,cAAc,SAAS,CAAC;AACxB,YAAY,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/channels/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEnD,MAAM,WAAW,OAAO;IACtB,2FAA2F;IAC3F,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD;;;;;;OAMG;IACH,IAAI,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED,cAAc,SAAS,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,WAAW,GACjB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC"}

package/dist/channels/index.js

@@ -20,9 +20,11 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/channels/index.ts
 var index_exports = {};
 __export(index_exports, {
+  createInboundPipeline: () => createInboundPipeline,
   createSenderRegistry: () => createSenderRegistry,
   createSlidingWindowRateLimiter: () => createSlidingWindowRateLimiter,
   decideChannelAction: () => decideChannelAction,
+  isBlockedByAllowlist: () => isBlockedByAllowlist,
   isEffectivelyFromSelf: () => isEffectivelyFromSelf,
   isFromAnySession: () => isFromAnySession,
   underReplyRateLimit: () => underReplyRateLimit
@@ -33,12 +35,13 @@ module.exports = __toCommonJS(index_exports);
 function matches(re, text) {
   return new RegExp(re.source, re.flags.replace(/[gy]/g, "")).test(text);
 }
+function isBlockedByAllowlist(msg, config) {
+  return !msg.fromBot && msg.text.trim().length > 0 && !msg.isDirectMessage && config.allowedChats.length > 0 && !config.allowedChats.includes(msg.chatId);
+}
 function decideChannelAction(msg, config) {
   if (msg.fromBot || !msg.text.trim()) return "ignore";
   if (!msg.isDirectMessage) {
-    if (config.allowedChats.length > 0 && !config.allowedChats.includes(msg.chatId)) {
-      return "ignore";
-    }
+    if (isBlockedByAllowlist(msg, config)) return "ignore";
     if (config.muteRegex && matches(config.muteRegex, msg.text)) return "mute";
     if (config.unmuteRegex && matches(config.unmuteRegex, msg.text)) return "unmute";
     if (config.mutedChats.has(msg.chatId)) return "ignore";
@@ -75,13 +78,252 @@ function isEffectivelyFromSelf(msg, registry) {
   return msg.fromBot || isFromAnySession(msg.senderId, registry);
 }
 
+// src/core/guardrails.ts
+function detectLeakage(text) {
+  const flags = [
+    /system prompt/i,
+    /hidden instruction/i,
+    /here (are|is) (my|the) rules/i,
+    /BEGIN SYSTEM PROMPT/i,
+    /tool instructions/i
+  ];
+  return flags.some((rx) => rx.test(text));
+}
+function scrubOutput(text) {
+  return text.replace(/sk-[A-Za-z0-9]{15,}/g, "[REDACTED]").replace(/AIza[0-9A-Za-z_-]{30,}/g, "[REDACTED]");
+}
+function guardOutput(text) {
+  if (detectLeakage(text)) {
+    return "Sorry, I can't share internal instructions. How else can I help?";
+  }
+  return scrubOutput(text);
+}
+
+// src/core/llm.ts
+var DEFAULT_MODEL = "gpt-4o";
+async function completeOnce({
+  client,
+  system,
+  messages,
+  temperature = 0.2,
+  model = DEFAULT_MODEL
+}) {
+  const res = await client.chat.completions.create({
+    model,
+    temperature,
+    messages: [{ role: "system", content: system }, ...messages]
+  });
+  const text = res.choices[0]?.message?.content ?? "";
+  return {
+    content: guardOutput(text),
+    usage: res.usage || { prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 }
+  };
+}
+
+// src/core/answer.ts
+var noUsage = () => ({ prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 });
+async function runAnswerFn(answerFn, { system, messages, mode, sender, conversationId }) {
+  const result = await answerFn({ system, messages, mode, sender, conversationId });
+  const raw = typeof result === "string" ? result : result?.content;
+  const usage = typeof result === "string" ? void 0 : result?.usage;
+  return {
+    content: guardOutput(typeof raw === "string" ? raw : ""),
+    usage: usage ?? noUsage()
+  };
+}
+async function answerOnce({
+  answerFn,
+  client,
+  system,
+  messages,
+  mode,
+  sender,
+  conversationId,
+  temperature,
+  model
+}) {
+  if (answerFn) {
+    return runAnswerFn(answerFn, { system, messages, mode, sender, conversationId });
+  }
+  return completeOnce({ client, system, messages, temperature, model });
+}
+
+// src/core/buckets.ts
+function defaultBuckets(mode) {
+  return ["base", mode];
+}
+function isIdentified(sender) {
+  return typeof sender === "string" && sender.trim().length > 0;
+}
+function normalize(buckets) {
+  const out = [];
+  for (const raw of buckets) {
+    if (typeof raw !== "string") continue;
+    const bucket = raw.trim();
+    if (bucket && !out.includes(bucket)) out.push(bucket);
+  }
+  return out;
+}
+async function resolveBuckets({
+  mode,
+  sender,
+  bucketsFor
+}) {
+  if (!bucketsFor) return void 0;
+  const identified = isIdentified(sender);
+  const requested = await bucketsFor(identified ? { mode, sender } : { mode });
+  if (!Array.isArray(requested)) return void 0;
+  const cleaned = normalize(requested);
+  if (identified) return cleaned;
+  const ceiling = new Set(defaultBuckets(mode));
+  return cleaned.filter((bucket) => ceiling.has(bucket));
+}
+
+// src/core/messages.ts
+function lastUserMessage(messages) {
+  return [...messages].reverse().find((m) => m.role === "user");
+}
+
+// src/core/pipeline.ts
+var MODE_SETTINGS = {
+  public: { topK: 6, label: "Context" },
+  private: { topK: 8, label: "Internal Context" }
+};
+async function prepareChat({
+  store,
+  prompts,
+  mode,
+  messages,
+  personaLayer,
+  channelHint,
+  buckets
+}) {
+  const lastUserMsg = lastUserMessage(messages);
+  if (!lastUserMsg) {
+    throw new Error("no user message found in conversation");
+  }
+  const { topK, label } = MODE_SETTINGS[mode];
+  const ctx = await store.query(lastUserMsg.content, topK, buckets ?? defaultBuckets(mode));
+  const persona = personaLayer?.trim() || (mode === "private" ? prompts.privatePersona : prompts.publicPersona);
+  const hint = channelHint?.trim();
+  const system = [
+    prompts.baseSystemRules,
+    persona,
+    ...hint ? [hint] : [],
+    `${label}:
+${ctx.join("\n\n")}`
+  ].join("\n\n");
+  return { system, messages, context: ctx };
+}
+
+// src/channels/pipeline.ts
+var DEFAULT_HISTORY_LIMIT = 20;
+var DEFAULT_GROUP_RATE_LIMIT = { max: 30, windowMs: 60 * 60 * 1e3 };
+var DEFAULT_DM_RATE_LIMIT = { max: 20, windowMs: 60 * 60 * 1e3 };
+async function resolvePersonaLayer(config, ctx) {
+  if (!config.personaResolver) return void 0;
+  try {
+    return await config.personaResolver(ctx);
+  } catch {
+    return void 0;
+  }
+}
+function createInboundPipeline(deps, config) {
+  const mutedChats = /* @__PURE__ */ new Set();
+  const now = config.now ?? Date.now;
+  const group = config.groupRateLimit ?? DEFAULT_GROUP_RATE_LIMIT;
+  const dm = config.dmRateLimit ?? DEFAULT_DM_RATE_LIMIT;
+  const underGroupRateLimit = createSlidingWindowRateLimiter(group.max, group.windowMs, now);
+  const underDmRateLimit = createSlidingWindowRateLimiter(dm.max, dm.windowMs, now);
+  const mode = "public";
+  return async function handleInboundMessage(msg, turn) {
+    const allowedChats = config.allowedChats ?? [];
+    const action = decideChannelAction(msg, {
+      allowedChats,
+      mutedChats,
+      muteRegex: config.muteRegex,
+      unmuteRegex: config.unmuteRegex
+    });
+    if (action === "mute") {
+      mutedChats.add(msg.chatId);
+      if (config.muteReply) await turn.reply.sendGateReply(msg.chatId, config.muteReply);
+      return { action: "mute" };
+    }
+    if (action === "unmute") {
+      mutedChats.delete(msg.chatId);
+      if (config.unmuteReply) await turn.reply.sendGateReply(msg.chatId, config.unmuteReply);
+      return { action: "unmute" };
+    }
+    if (action === "ignore") {
+      return { action: "ignore" };
+    }
+    if (!underReplyRateLimit(msg, { dm: underDmRateLimit, group: underGroupRateLimit })) {
+      return { action: "rate-limited" };
+    }
+    const sender = typeof turn.sender === "function" ? await turn.sender() : turn.sender ?? msg.senderId;
+    const conversationId = turn.conversationId ?? msg.chatId;
+    if (turn.intercept && await turn.intercept(sender)) {
+      return { action: "intercepted" };
+    }
+    const personaLayer = await resolvePersonaLayer(config, { sender, text: msg.text });
+    const buckets = await resolveBuckets({ mode, sender, bucketsFor: config.bucketsFor });
+    const priorTurns = config.history ? await config.history.store.load(
+      conversationId,
+      config.history.limit ?? DEFAULT_HISTORY_LIMIT
+    ) : [];
+    const messages = [...priorTurns, { role: "user", content: msg.text }];
+    await config.history?.store.append(conversationId, { role: "user", content: msg.text });
+    const { system } = await prepareChat({
+      store: deps.store,
+      prompts: deps.prompts,
+      mode,
+      messages,
+      personaLayer,
+      channelHint: config.channelHint,
+      buckets
+    });
+    const { content } = await answerOnce({
+      answerFn: config.answerFn,
+      client: deps.client,
+      system,
+      messages,
+      mode,
+      sender,
+      conversationId,
+      model: config.model
+    });
+    if (!content) {
+      return { action: "ignore" };
+    }
+    await config.history?.store.append(conversationId, { role: "assistant", content });
+    await turn.reply.sendAnswer(msg.chatId, content);
+    return { action: "reply", content };
+  };
+}
+
+// src/core/logger.ts
+var LEVEL_ORDER = { debug: 0, info: 1, warn: 2, error: 3 };
+function createConsoleLogger(level = "info") {
+  const threshold = LEVEL_ORDER[level];
+  const write = (at) => (...args) => {
+    if (LEVEL_ORDER[at] < threshold) return;
+    console.error(`[${at}]`, ...args);
+  };
+  return {
+    debug: write("debug"),
+    info: write("info"),
+    warn: write("warn"),
+    error: write("error")
+  };
+}
+
 // src/channels/senders.ts
-function createSenderRegistry() {
+function createSenderRegistry(logger = createConsoleLogger()) {
   const senders = /* @__PURE__ */ new Map();
   return {
     register(name, sender) {
       if (senders.has(name)) {
-        console.warn(`Channel sender "${name}" is already registered; overwriting.`);
+        logger.warn(`Channel sender "${name}" is already registered; overwriting.`);
       }
       senders.set(name, sender);
     },
@@ -98,7 +340,7 @@ function createSenderRegistry() {
         await sender.sendText(chatId, text);
         return true;
       } catch (error) {
-        console.warn(`Channel sender "${name}" sendText failed:`, error);
+        logger.warn(`Channel sender "${name}" sendText failed:`, error);
         return false;
       }
     },
@@ -109,7 +351,7 @@ function createSenderRegistry() {
         await sender.sendVoice(chatId, payload);
         return true;
       } catch (error) {
-        console.warn(`Channel sender "${name}" sendVoice failed:`, error);
+        logger.warn(`Channel sender "${name}" sendVoice failed:`, error);
         return false;
       }
     },
@@ -120,7 +362,7 @@ function createSenderRegistry() {
         await sender.sendMedia(chatId, payload);
         return true;
       } catch (error) {
-        console.warn(`Channel sender "${name}" sendMedia failed:`, error);
+        logger.warn(`Channel sender "${name}" sendMedia failed:`, error);
         return false;
       }
     }
@@ -128,9 +370,11 @@ function createSenderRegistry() {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  createInboundPipeline,
   createSenderRegistry,
   createSlidingWindowRateLimiter,
   decideChannelAction,
+  isBlockedByAllowlist,
   isEffectivelyFromSelf,
   isFromAnySession,
   underReplyRateLimit