@lobu/gateway 2.8.0

package/dist/permissions/grant-store.js

@@ -0,0 +1,192 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GrantStore = void 0;
+const core_1 = require("@lobu/core");
+const logger = (0, core_1.createLogger)("grant-store");
+const KEY_PREFIX = "grant:";
+/**
+ * Unified grant store for URL-pattern permissions.
+ *
+ * Patterns can be:
+ *   - Domain: "api.openai.com", "*.npmjs.org"
+ *   - MCP tool: "/mcp/gmail/tools/send_email"
+ *   - MCP wildcard: "/mcp/gmail/tools/*"
+ *
+ * Grants are stored in Redis with TTL matching expiresAt for automatic cleanup.
+ */
+class GrantStore {
+    constructor(redis) {
+        this.redis = redis;
+    }
+    /**
+     * Grant access to a pattern for an agent.
+     * If expiresAt is null, the grant never expires (no Redis TTL).
+     * If denied is true, the grant explicitly denies access.
+     */
+    async grant(agentId, pattern, expiresAt, denied) {
+        const key = this.buildKey(agentId, pattern);
+        const value = JSON.stringify(Object.assign({ expiresAt, grantedAt: Date.now() }, (denied && { denied: true })));
+        try {
+            if (expiresAt === null) {
+                await this.redis.set(key, value);
+            }
+            else {
+                const ttlSeconds = Math.max(1, Math.ceil((expiresAt - Date.now()) / 1000));
+                await this.redis.set(key, value, "EX", ttlSeconds);
+            }
+            logger.info("Granted access", { agentId, pattern, expiresAt });
+        }
+        catch (error) {
+            logger.error("Failed to grant access", { agentId, pattern, error });
+            throw error;
+        }
+    }
+    /**
+     * Parse a raw Redis value into its stored object.
+     * Returns null if the value is missing or malformed.
+     */
+    parseValue(raw) {
+        if (!raw)
+            return null;
+        try {
+            return JSON.parse(raw);
+        }
+        catch (_a) {
+            return null;
+        }
+    }
+    /**
+     * Check if an agent has a grant for a pattern.
+     * Checks exact match first, then wildcard parents.
+     * Returns false if the grant has `denied: true`.
+     */
+    async hasGrant(agentId, pattern) {
+        // Exact match
+        const exactKey = this.buildKey(agentId, pattern);
+        try {
+            const parsed = this.parseValue(await this.redis.get(exactKey));
+            if (parsed)
+                return !parsed.denied;
+        }
+        catch (error) {
+            logger.error("Failed to check grant", { agentId, pattern, error });
+            return false;
+        }
+        // Wildcard check for MCP tool patterns:
+        // "/mcp/gmail/tools/send_email" is covered by "/mcp/gmail/tools/*"
+        if (pattern.startsWith("/mcp/")) {
+            const lastSlash = pattern.lastIndexOf("/");
+            if (lastSlash > 0) {
+                const wildcardPattern = `${pattern.substring(0, lastSlash)}/*`;
+                const wildcardKey = this.buildKey(agentId, wildcardPattern);
+                try {
+                    const parsed = this.parseValue(await this.redis.get(wildcardKey));
+                    if (parsed)
+                        return !parsed.denied;
+                }
+                catch (error) {
+                    logger.error("Failed to check wildcard grant", {
+                        agentId,
+                        pattern: wildcardPattern,
+                        error,
+                    });
+                }
+            }
+        }
+        // Wildcard check for domain patterns:
+        // "sub.example.com" is covered by "*.example.com"
+        if (!pattern.startsWith("/")) {
+            const parts = pattern.split(".");
+            if (parts.length > 2) {
+                const wildcardDomain = `*.${parts.slice(1).join(".")}`;
+                const wildcardKey = this.buildKey(agentId, wildcardDomain);
+                try {
+                    const parsed = this.parseValue(await this.redis.get(wildcardKey));
+                    if (parsed)
+                        return !parsed.denied;
+                }
+                catch (error) {
+                    logger.error("Failed to check wildcard domain grant", {
+                        agentId,
+                        pattern: wildcardDomain,
+                        error,
+                    });
+                }
+            }
+        }
+        return false;
+    }
+    /**
+     * Check if a pattern is explicitly denied for an agent.
+     */
+    async isDenied(agentId, pattern) {
+        const key = this.buildKey(agentId, pattern);
+        try {
+            const parsed = this.parseValue(await this.redis.get(key));
+            return (parsed === null || parsed === void 0 ? void 0 : parsed.denied) === true;
+        }
+        catch (error) {
+            logger.error("Failed to check denied grant", {
+                agentId,
+                pattern,
+                error,
+            });
+            return false;
+        }
+    }
+    /**
+     * List all active grants for an agent.
+     * Uses Redis SCAN to find matching keys.
+     */
+    async listGrants(agentId) {
+        var _a;
+        const prefix = `${KEY_PREFIX}${agentId}:`;
+        const grants = [];
+        try {
+            let cursor = "0";
+            do {
+                const [nextCursor, keys] = await this.redis.scan(cursor, "MATCH", `${prefix}*`, "COUNT", 100);
+                cursor = nextCursor;
+                if (keys.length > 0) {
+                    const values = await this.redis.mget(...keys);
+                    for (let i = 0; i < keys.length; i++) {
+                        const val = values[i];
+                        if (!val)
+                            continue;
+                        try {
+                            const parsed = JSON.parse(val);
+                            const pattern = keys[i].substring(prefix.length);
+                            grants.push(Object.assign({ pattern, expiresAt: (_a = parsed.expiresAt) !== null && _a !== void 0 ? _a : null, grantedAt: parsed.grantedAt }, (parsed.denied && { denied: true })));
+                        }
+                        catch (_b) {
+                            // Skip malformed entries
+                        }
+                    }
+                }
+            } while (cursor !== "0");
+        }
+        catch (error) {
+            logger.error("Failed to list grants", { agentId, error });
+        }
+        return grants;
+    }
+    /**
+     * Revoke a grant for an agent.
+     */
+    async revoke(agentId, pattern) {
+        const key = this.buildKey(agentId, pattern);
+        try {
+            await this.redis.del(key);
+            logger.info("Revoked grant", { agentId, pattern });
+        }
+        catch (error) {
+            logger.error("Failed to revoke grant", { agentId, pattern, error });
+            throw error;
+        }
+    }
+    buildKey(agentId, pattern) {
+        return `${KEY_PREFIX}${agentId}:${pattern}`;
+    }
+}
+exports.GrantStore = GrantStore;
+//# sourceMappingURL=grant-store.js.map

package/dist/permissions/grant-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-store.js","sourceRoot":"","sources":["../../src/permissions/grant-store.ts"],"names":[],"mappings":";;;AAAA,qCAA0C;AAE1C,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,aAAa,CAAC,CAAC;AAS3C,MAAM,UAAU,GAAG,QAAQ,CAAC;AAE5B;;;;;;;;;GASG;AACH,MAAa,UAAU;IACrB,YAA6B,KAAU;QAAV,UAAK,GAAL,KAAK,CAAK;IAAG,CAAC;IAE3C;;;;OAIG;IACH,KAAK,CAAC,KAAK,CACT,OAAe,EACf,OAAe,EACf,SAAwB,EACxB,MAAgB;QAEhB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,iBAC1B,SAAS,EACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,IAClB,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAC/B,CAAC;QAEH,IAAI,CAAC;YACH,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,CAAC,EACD,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAC3C,CAAC;gBACF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACpE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,UAAU,CAChB,GAAkB;QAElB,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,OAAe;QAC7C,cAAc;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/D,IAAI,MAAM;gBAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,wCAAwC;QACxC,mEAAmE;QACnE,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBAClB,MAAM,eAAe,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC;gBAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;gBAC5D,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;oBAClE,IAAI,MAAM;wBAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;gBACpC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;wBAC7C,OAAO;wBACP,OAAO,EAAE,eAAe;wBACxB,KAAK;qBACN,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,kDAAkD;QAClD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,cAAc,GAAG,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBAC3D,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;oBAClE,IAAI,MAAM;wBAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;gBACpC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;wBACpD,OAAO;wBACP,OAAO,EAAE,cAAc;wBACvB,KAAK;qBACN,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,OAAe;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1D,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,MAAK,IAAI,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,OAAO;gBACP,OAAO;gBACP,KAAK;aACN,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,OAAe;;QAC9B,MAAM,MAAM,GAAG,GAAG,UAAU,GAAG,OAAO,GAAG,CAAC;QAC1C,MAAM,MAAM,GAAY,EAAE,CAAC;QAE3B,IAAI,CAAC;YACH,IAAI,MAAM,GAAG,GAAG,CAAC;YACjB,GAAG,CAAC;gBACF,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAC9C,MAAM,EACN,OAAO,EACP,GAAG,MAAM,GAAG,EACZ,OAAO,EACP,GAAG,CACJ,CAAC;gBACF,MAAM,GAAG,UAAU,CAAC;gBAEpB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;oBAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;wBACrC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;wBACtB,IAAI,CAAC,GAAG;4BAAE,SAAS;wBAEnB,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;4BAC/B,MAAM,OAAO,GAAI,IAAI,CAAC,CAAC,CAAY,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;4BAC7D,MAAM,CAAC,IAAI,iBACT,OAAO,EACP,SAAS,EAAE,MAAA,MAAM,CAAC,SAAS,mCAAI,IAAI,EACnC,SAAS,EAAE,MAAM,CAAC,SAAS,IACxB,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EACtC,CAAC;wBACL,CAAC;wBAAC,WAAM,CAAC;4BACP,yBAAyB;wBAC3B,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC,QAAQ,MAAM,KAAK,GAAG,EAAE;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAAe;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACpE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,OAAe,EAAE,OAAe;QAC/C,OAAO,GAAG,UAAU,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;IAC9C,CAAC;CACF;AAnMD,gCAmMC"}

package/dist/platform/file-handler.d.ts

@@ -0,0 +1,51 @@
+/**
+ * File handler interface for platform-specific file operations.
+ */
+import type { Readable } from "node:stream";
+export interface FileMetadata {
+    id: string;
+    name: string;
+    mimetype?: string;
+    size: number;
+    url: string;
+    downloadUrl?: string;
+    permalink?: string;
+    timestamp?: number;
+}
+export interface FileUploadResult {
+    fileId: string;
+    permalink: string;
+    name: string;
+    size: number;
+}
+export interface FileUploadOptions {
+    filename: string;
+    channelId: string;
+    threadTs?: string;
+    title?: string;
+    initialComment?: string;
+    sessionKey?: string;
+    /** Send as voice message (ptt) on platforms that support it */
+    voiceMessage?: boolean;
+}
+export interface IFileHandler {
+    /**
+     * Download a file by its platform-specific ID.
+     * Each platform implementation handles its own authentication internally.
+     */
+    downloadFile(fileId: string): Promise<{
+        stream: Readable;
+        metadata: FileMetadata;
+    }>;
+    uploadFile(fileStream: Readable, options: FileUploadOptions): Promise<FileUploadResult>;
+    generateFileToken(sessionKey: string, fileId: string, expiresIn?: number): string;
+    validateFileToken(token: string): {
+        valid: boolean;
+        sessionKey?: string;
+        fileId?: string;
+        error?: string;
+    };
+    getSessionFiles(sessionKey: string): string[];
+    cleanupSession(sessionKey: string): void;
+}
+//# sourceMappingURL=file-handler.d.ts.map

package/dist/platform/file-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-handler.d.ts","sourceRoot":"","sources":["../../src/platform/file-handler.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,YAAY,CACV,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,MAAM,EAAE,QAAQ,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;IAEzD,UAAU,CACR,UAAU,EAAE,QAAQ,EACpB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE7B,iBAAiB,CACf,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAAC;IAEV,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG;QAChC,KAAK,EAAE,OAAO,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IAEF,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE9C,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C"}

package/dist/platform/file-handler.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * File handler interface for platform-specific file operations.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=file-handler.js.map

package/dist/platform/file-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-handler.js","sourceRoot":"","sources":["../../src/platform/file-handler.ts"],"names":[],"mappings":";AAAA;;GAEG"}

package/dist/platform/link-buttons.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Extract settings link buttons from markdown content.
+ *
+ * Scans for markdown links pointing to `/connect/claim?claim=...` URLs and
+ * returns them as structured button data, stripping the link syntax
+ * from the content so platforms can render native buttons instead.
+ */
+export interface LinkButton {
+    text: string;
+    url: string;
+}
+/**
+ * Extract `[label](settingsUrl)` markdown links and return them as
+ * structured buttons.  The link syntax is replaced with just the label
+ * text so the surrounding prose still reads naturally.
+ */
+export declare function extractSettingsLinkButtons(content: string): {
+    processedContent: string;
+    linkButtons: LinkButton[];
+};
+//# sourceMappingURL=link-buttons.d.ts.map

package/dist/platform/link-buttons.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-buttons.d.ts","sourceRoot":"","sources":["../../src/platform/link-buttons.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAsBH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG;IAC3D,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B,CAeA"}

package/dist/platform/link-buttons.js

@@ -0,0 +1,43 @@
+"use strict";
+/**
+ * Extract settings link buttons from markdown content.
+ *
+ * Scans for markdown links pointing to `/connect/claim?claim=...` URLs and
+ * returns them as structured button data, stripping the link syntax
+ * from the content so platforms can render native buttons instead.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractSettingsLinkButtons = extractSettingsLinkButtons;
+const SETTINGS_LINK_RE = /\[([^\]]+)\]\((https?:\/\/[^)]*\/(?:connect\/claim|agent)\?claim=[^)]+)\)/g;
+/**
+ * Returns true when the URL points to a loopback address that
+ * Telegram (and other platforms) reject for inline keyboard buttons.
+ */
+function isLocalhostUrl(url) {
+    try {
+        const u = new URL(url);
+        return (u.hostname === "localhost" ||
+            u.hostname === "127.0.0.1" ||
+            u.hostname === "::1");
+    }
+    catch (_a) {
+        return true;
+    }
+}
+/**
+ * Extract `[label](settingsUrl)` markdown links and return them as
+ * structured buttons.  The link syntax is replaced with just the label
+ * text so the surrounding prose still reads naturally.
+ */
+function extractSettingsLinkButtons(content) {
+    const linkButtons = [];
+    const processedContent = content.replace(SETTINGS_LINK_RE, (_match, text, url) => {
+        if (!isLocalhostUrl(url)) {
+            linkButtons.push({ text, url });
+        }
+        // Replace the markdown link with just the label text
+        return text;
+    });
+    return { processedContent, linkButtons };
+}
+//# sourceMappingURL=link-buttons.js.map

package/dist/platform/link-buttons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-buttons.js","sourceRoot":"","sources":["../../src/platform/link-buttons.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAgCH,gEAkBC;AAhDD,MAAM,gBAAgB,GACpB,4EAA4E,CAAC;AAE/E;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,CACL,CAAC,CAAC,QAAQ,KAAK,WAAW;YAC1B,CAAC,CAAC,QAAQ,KAAK,WAAW;YAC1B,CAAC,CAAC,QAAQ,KAAK,KAAK,CACrB,CAAC;IACJ,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAOD;;;;GAIG;AACH,SAAgB,0BAA0B,CAAC,OAAe;IAIxD,MAAM,WAAW,GAAiB,EAAE,CAAC;IAErC,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CACtC,gBAAgB,EAChB,CAAC,MAAM,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE;QACpC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,qDAAqD;QACrD,OAAO,IAAI,CAAC;IACd,CAAC,CACF,CAAC;IAEF,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC;AAC3C,CAAC"}

package/dist/platform/renderer-utils.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Shared renderer and markdown utilities.
+ * Extracts common helpers duplicated across Telegram, WhatsApp, and Slack converters/renderers.
+ */
+/**
+ * Chunk a long message into smaller parts, breaking at natural boundaries.
+ */
+export declare function chunkMessage(text: string, maxLength: number): string[];
+export declare function delay(ms: number): Promise<void>;
+//# sourceMappingURL=renderer-utils.d.ts.map

package/dist/platform/renderer-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer-utils.d.ts","sourceRoot":"","sources":["../../src/platform/renderer-utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CA+BtE;AAED,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C"}

package/dist/platform/renderer-utils.js

@@ -0,0 +1,42 @@
+"use strict";
+/**
+ * Shared renderer and markdown utilities.
+ * Extracts common helpers duplicated across Telegram, WhatsApp, and Slack converters/renderers.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.chunkMessage = chunkMessage;
+exports.delay = delay;
+/**
+ * Chunk a long message into smaller parts, breaking at natural boundaries.
+ */
+function chunkMessage(text, maxLength) {
+    if (text.length <= maxLength) {
+        return [text];
+    }
+    const chunks = [];
+    let remaining = text;
+    while (remaining.length > 0) {
+        if (remaining.length <= maxLength) {
+            chunks.push(remaining);
+            break;
+        }
+        let breakPoint = maxLength;
+        const newlineIndex = remaining.lastIndexOf("\n", maxLength);
+        if (newlineIndex > maxLength * 0.5) {
+            breakPoint = newlineIndex + 1;
+        }
+        else {
+            const spaceIndex = remaining.lastIndexOf(" ", maxLength);
+            if (spaceIndex > maxLength * 0.5) {
+                breakPoint = spaceIndex + 1;
+            }
+        }
+        chunks.push(remaining.substring(0, breakPoint).trim());
+        remaining = remaining.substring(breakPoint).trim();
+    }
+    return chunks.filter((c) => c.length > 0);
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=renderer-utils.js.map

package/dist/platform/renderer-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer-utils.js","sourceRoot":"","sources":["../../src/platform/renderer-utils.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAKH,oCA+BC;AAED,sBAEC;AAtCD;;GAEG;AACH,SAAgB,YAAY,CAAC,IAAY,EAAE,SAAiB;IAC1D,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAG,IAAI,CAAC;IAErB,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,MAAM;QACR,CAAC;QAED,IAAI,UAAU,GAAG,SAAS,CAAC;QAE3B,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5D,IAAI,YAAY,GAAG,SAAS,GAAG,GAAG,EAAE,CAAC;YACnC,UAAU,GAAG,YAAY,GAAG,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACzD,IAAI,UAAU,GAAG,SAAS,GAAG,GAAG,EAAE,CAAC;gBACjC,UAAU,GAAG,UAAU,GAAG,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAgB,KAAK,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/platform/response-renderer.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Response renderer interface for platform-specific message rendering.
+ * Each platform implements this interface to handle thread responses
+ * in a platform-appropriate way (streaming, buffering, formatting).
+ */
+import type { ThreadResponsePayload } from "../infrastructure/queue/types";
+/**
+ * Interface for rendering thread responses to a specific platform.
+ * Implementations handle platform-specific concerns like:
+ * - Streaming vs buffered messages
+ * - Rich formatting (Slack blocks) vs plain text (WhatsApp)
+ * - Status indicators (thread status vs typing)
+ */
+export interface ResponseRenderer {
+    /**
+     * Handle streaming delta content.
+     * Platforms that support streaming (Slack) update messages in real-time.
+     * Platforms without streaming (WhatsApp) buffer content for later delivery.
+     *
+     * @param payload - The thread response payload containing delta content
+     * @param sessionKey - Unique key for this response session (userId:messageId)
+     * @returns Message ID/timestamp if a message was created/updated, null otherwise
+     */
+    handleDelta?(payload: ThreadResponsePayload, sessionKey: string): Promise<string | null>;
+    /**
+     * Handle completion of response processing.
+     * Called when all content has been processed (processedMessageIds is set).
+     * Should finalize any streams, send buffered content, clear status indicators.
+     *
+     * @param payload - The thread response payload
+     * @param sessionKey - Unique key for this response session
+     */
+    handleCompletion(payload: ThreadResponsePayload, sessionKey: string): Promise<void>;
+    /**
+     * Handle error response.
+     * Display error in platform-appropriate format.
+     *
+     * @param payload - The thread response payload containing error
+     * @param sessionKey - Unique key for this response session
+     */
+    handleError(payload: ThreadResponsePayload, sessionKey: string): Promise<void>;
+    /**
+     * Handle status updates (heartbeat with elapsed time).
+     * Used to show "is running...", progress indicators, etc.
+     *
+     * @param payload - The thread response payload with statusUpdate field
+     */
+    handleStatusUpdate?(payload: ThreadResponsePayload): Promise<void>;
+    /**
+     * Handle ephemeral messages (visible only to specific user).
+     * Used for OAuth/auth flows, temporary notifications.
+     *
+     * @param payload - The thread response payload with ephemeral content
+     */
+    handleEphemeral?(payload: ThreadResponsePayload): Promise<void>;
+    /**
+     * Stop any active streams for a conversation.
+     * Called when an interaction is created to prevent messages appearing
+     * after the interaction prompt.
+     *
+     * @param userId - User ID
+     * @param conversationId - Conversation identifier
+     */
+    stopStreamForConversation?(userId: string, conversationId: string): Promise<void>;
+}
+//# sourceMappingURL=response-renderer.d.ts.map

package/dist/platform/response-renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-renderer.d.ts","sourceRoot":"","sources":["../../src/platform/response-renderer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;OAQG;IACH,WAAW,CAAC,CACV,OAAO,EAAE,qBAAqB,EAC9B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAE1B;;;;;;;OAOG;IACH,gBAAgB,CACd,OAAO,EAAE,qBAAqB,EAC9B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;OAMG;IACH,WAAW,CACT,OAAO,EAAE,qBAAqB,EAC9B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;OAKG;IACH,kBAAkB,CAAC,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE;;;;;OAKG;IACH,eAAe,CAAC,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhE;;;;;;;OAOG;IACH,yBAAyB,CAAC,CACxB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB"}

package/dist/platform/response-renderer.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * Response renderer interface for platform-specific message rendering.
+ * Each platform implements this interface to handle thread responses
+ * in a platform-appropriate way (streaming, buffering, formatting).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=response-renderer.js.map

package/dist/platform/response-renderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-renderer.js","sourceRoot":"","sources":["../../src/platform/response-renderer.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}

package/dist/platform/unified-thread-consumer.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Unified thread response consumer.
+ * Single consumer that routes responses to platform-specific renderers
+ * via the PlatformRegistry, eliminating duplicate queue filtering logic.
+ */
+import type { ChatResponseBridge } from "../connections/chat-response-bridge";
+import type { IMessageQueue } from "../infrastructure/queue";
+import type { PlatformRegistry } from "../platform";
+/**
+ * Unified consumer for thread_response queue.
+ * Routes responses to the appropriate platform adapter based on payload.platform field.
+ */
+export declare class UnifiedThreadResponseConsumer {
+    private queue;
+    private platformRegistry;
+    private isRunning;
+    private chatResponseBridge?;
+    constructor(queue: IMessageQueue, platformRegistry: PlatformRegistry);
+    setChatResponseBridge(bridge: ChatResponseBridge): void;
+    /**
+     * Start consuming thread_response messages.
+     */
+    start(): Promise<void>;
+    /**
+     * Stop the consumer.
+     */
+    stop(): Promise<void>;
+    /**
+     * Handle a thread response job by routing to the appropriate platform renderer.
+     */
+    private handleThreadResponse;
+    /**
+     * Route the payload to the appropriate renderer method.
+     */
+    private routeToRenderer;
+    /**
+     * Check if consumer is healthy.
+     */
+    isHealthy(): boolean;
+}
+//# sourceMappingURL=unified-thread-consumer.d.ts.map

package/dist/platform/unified-thread-consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unified-thread-consumer.d.ts","sourceRoot":"","sources":["../../src/platform/unified-thread-consumer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,KAAK,EACV,aAAa,EAGd,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAKpD;;;GAGG;AACH,qBAAa,6BAA6B;IAMtC,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,gBAAgB;IAN1B,OAAO,CAAC,SAAS,CAAS;IAE1B,OAAO,CAAC,kBAAkB,CAAC,CAAqB;gBAGtC,KAAK,EAAE,aAAa,EACpB,gBAAgB,EAAE,gBAAgB;IAG5C,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI;IAIvD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAM3B;;OAEG;YACW,oBAAoB;IAoElC;;OAEG;YACW,eAAe;IAwC7B;;OAEG;IACH,SAAS,IAAI,OAAO;CAGrB"}