@moxxy/plugin-channel-discord 0.27.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Moxxy (moxxy.ai)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/allow-list.d.ts

@@ -0,0 +1,20 @@
+import type { InboundMessage } from './schema.js';
+/**
+ * Where the paired principal may drive the session from:
+ *   - their own DM with the bot — always allowed once paired;
+ *   - a guild channel — only when that channel id is on the allow-list
+ *     (managed by the paired user via the local /allow and /deny commands).
+ *
+ * Authorship is checked FIRST: a message from anyone but the paired user never
+ * reaches the session, no matter where it was sent (single-operator model,
+ * matching Telegram's single paired chat).
+ */
+export type GateVerdict = {
+    readonly ok: true;
+    readonly context: 'dm' | 'guild';
+} | {
+    readonly ok: false;
+    readonly reason: 'not-paired' | 'foreign-user' | 'channel-not-allowed';
+};
+export declare function gateInbound(msg: Pick<InboundMessage, 'authorId' | 'guildId' | 'channelId'>, authorizedUserId: string | null, allowedChannels: ReadonlySet<string>): GateVerdict;
+//# sourceMappingURL=allow-list.d.ts.map

package/dist/allow-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow-list.d.ts","sourceRoot":"","sources":["../src/allow-list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,OAAO,CAAA;CAAE,GACvD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,cAAc,GAAG,qBAAqB,CAAC;CACxE,CAAC;AAEN,wBAAgB,WAAW,CACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC,EAC/D,gBAAgB,EAAE,MAAM,GAAG,IAAI,EAC/B,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,GACnC,WAAW,CAMb"}

package/dist/allow-list.js

@@ -0,0 +1,12 @@
+export function gateInbound(msg, authorizedUserId, allowedChannels) {
+    if (!authorizedUserId)
+        return { ok: false, reason: 'not-paired' };
+    if (msg.authorId !== authorizedUserId)
+        return { ok: false, reason: 'foreign-user' };
+    if (msg.guildId == null)
+        return { ok: true, context: 'dm' };
+    if (allowedChannels.has(msg.channelId))
+        return { ok: true, context: 'guild' };
+    return { ok: false, reason: 'channel-not-allowed' };
+}
+//# sourceMappingURL=allow-list.js.map

package/dist/allow-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow-list.js","sourceRoot":"","sources":["../src/allow-list.ts"],"names":[],"mappings":"AAmBA,MAAM,UAAU,WAAW,CACzB,GAA+D,EAC/D,gBAA+B,EAC/B,eAAoC;IAEpC,IAAI,CAAC,gBAAgB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClE,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpF,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AACtD,CAAC"}

package/dist/approval.d.ts

@@ -0,0 +1,29 @@
+import type { ApprovalDecision, ApprovalRequest, ApprovalResolver } from '@moxxy/sdk';
+export interface PendingApproval {
+    readonly id: string;
+    readonly request: ApprovalRequest;
+    readonly resolve: (decision: ApprovalDecision) => void;
+}
+/**
+ * Generic approval resolver for the Discord channel — counterpart to the TUI's
+ * ApprovalDialog. The channel renders the request as a message with a button
+ * per option and routes the user's click (or follow-up text, for options with
+ * `requestsText: true`) back here via `resolvePending` /
+ * `resolvePendingWithText`. Mirrors the Telegram approval resolver's shape.
+ */
+export declare class DiscordApprovalResolver implements ApprovalResolver {
+    readonly name = "discord-approval";
+    private readonly pending;
+    private deciderFn;
+    private nextId;
+    setDecider(fn: (id: string, request: ApprovalRequest) => Promise<void>): void;
+    confirm(request: ApprovalRequest): Promise<ApprovalDecision>;
+    /** Look up a pending approval without resolving it (text follow-up latch). */
+    getPending(id: string): PendingApproval | undefined;
+    /** Resolve directly with an option id (no text). */
+    resolvePending(id: string, optionId: string): boolean;
+    /** Resolve with an option id AND a free-text follow-up. */
+    resolvePendingWithText(id: string, optionId: string, text: string): boolean;
+    abortAll(reason?: string): void;
+}
+//# sourceMappingURL=approval.d.ts.map

package/dist/approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEtF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,CAAC;CACxD;AAED;;;;;;GAMG;AACH,qBAAa,uBAAwB,YAAW,gBAAgB;IAC9D,QAAQ,CAAC,IAAI,sBAAsB;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;IAC9D,OAAO,CAAC,SAAS,CAA0E;IAC3F,OAAO,CAAC,MAAM,CAAK;IAEnB,UAAU,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIvE,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkBlE,8EAA8E;IAC9E,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAInD,oDAAoD;IACpD,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQrD,2DAA2D;IAC3D,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAQ3E,QAAQ,CAAC,MAAM,SAAmB,GAAG,IAAI;CAS1C"}

package/dist/approval.js

@@ -0,0 +1,65 @@
+/**
+ * Generic approval resolver for the Discord channel — counterpart to the TUI's
+ * ApprovalDialog. The channel renders the request as a message with a button
+ * per option and routes the user's click (or follow-up text, for options with
+ * `requestsText: true`) back here via `resolvePending` /
+ * `resolvePendingWithText`. Mirrors the Telegram approval resolver's shape.
+ */
+export class DiscordApprovalResolver {
+    name = 'discord-approval';
+    pending = new Map();
+    deciderFn = null;
+    nextId = 1;
+    setDecider(fn) {
+        this.deciderFn = fn;
+    }
+    async confirm(request) {
+        if (!this.deciderFn) {
+            // No bot wired up — best fallback is the request's defaultOptionId.
+            return { optionId: request.defaultOptionId ?? request.options[0]?.id ?? 'approve' };
+        }
+        const id = `appr_${this.nextId++}`;
+        return new Promise((resolve) => {
+            this.pending.set(id, { id, request, resolve });
+            this.deciderFn(id, request).catch((err) => {
+                this.pending.delete(id);
+                resolve({
+                    optionId: request.defaultOptionId ?? request.options[0]?.id ?? 'cancel',
+                    text: `decider failed: ${err instanceof Error ? err.message : String(err)}`,
+                });
+            });
+        });
+    }
+    /** Look up a pending approval without resolving it (text follow-up latch). */
+    getPending(id) {
+        return this.pending.get(id);
+    }
+    /** Resolve directly with an option id (no text). */
+    resolvePending(id, optionId) {
+        const pending = this.pending.get(id);
+        if (!pending)
+            return false;
+        this.pending.delete(id);
+        pending.resolve({ optionId });
+        return true;
+    }
+    /** Resolve with an option id AND a free-text follow-up. */
+    resolvePendingWithText(id, optionId, text) {
+        const pending = this.pending.get(id);
+        if (!pending)
+            return false;
+        this.pending.delete(id);
+        pending.resolve({ optionId, text });
+        return true;
+    }
+    abortAll(reason = 'channel closed') {
+        for (const pending of this.pending.values()) {
+            pending.resolve({
+                optionId: pending.request.defaultOptionId ?? pending.request.options[0]?.id ?? 'cancel',
+                text: reason,
+            });
+        }
+        this.pending.clear();
+    }
+}
+//# sourceMappingURL=approval.js.map

package/dist/approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAQA;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IACzB,IAAI,GAAG,kBAAkB,CAAC;IAClB,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IACtD,SAAS,GAAqE,IAAI,CAAC;IACnF,MAAM,GAAG,CAAC,CAAC;IAEnB,UAAU,CAAC,EAA2D;QACpE,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,oEAAoE;YACpE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,SAAS,EAAE,CAAC;QACtF,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,OAAO,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,EAAE;YAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC,SAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACzC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,OAAO,CAAC;oBACN,QAAQ,EAAE,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,QAAQ;oBACvE,IAAI,EAAE,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBAC5E,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,UAAU,CAAC,EAAU;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,oDAAoD;IACpD,cAAc,CAAC,EAAU,EAAE,QAAgB;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2DAA2D;IAC3D,sBAAsB,CAAC,EAAU,EAAE,QAAgB,EAAE,IAAY;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,MAAM,GAAG,gBAAgB;QAChC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,OAAO,CAAC,OAAO,CAAC;gBACd,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,QAAQ;gBACvF,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/channel/allow-list-store.d.ts

@@ -0,0 +1,22 @@
+import type { VaultStore } from '@moxxy/plugin-vault';
+/**
+ * Vault-backed guild-channel allow-list: the channels (beyond the paired
+ * user's DM) the paired user may drive the session from. Managed via the
+ * local `/allow` and `/deny` commands; persisted as a JSON snowflake array
+ * under {@link DISCORD_ALLOWED_CHANNELS_KEY} (corrupt values read as empty —
+ * deny-by-default).
+ */
+export declare class AllowListStore {
+    private readonly vault;
+    private ids;
+    constructor(vault: VaultStore);
+    load(): Promise<void>;
+    snapshot(): ReadonlySet<string>;
+    has(channelId: string): boolean;
+    /** Add a channel id. Returns false (no write) for a non-snowflake id. */
+    add(channelId: string): Promise<boolean>;
+    /** Remove a channel id. Returns true when it was present. */
+    remove(channelId: string): Promise<boolean>;
+    private persist;
+}
+//# sourceMappingURL=allow-list-store.d.ts.map

package/dist/channel/allow-list-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow-list-store.d.ts","sourceRoot":"","sources":["../../src/channel/allow-list-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAQtD;;;;;;GAMG;AACH,qBAAa,cAAc;IAGb,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFlC,OAAO,CAAC,GAAG,CAAqB;gBAEH,KAAK,EAAE,UAAU;IAExC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,QAAQ,IAAI,WAAW,CAAC,MAAM,CAAC;IAI/B,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAI/B,yEAAyE;IACnE,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ9C,6DAA6D;IACvD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAMnC,OAAO;CAGtB"}

package/dist/channel/allow-list-store.js

@@ -0,0 +1,45 @@
+import { DISCORD_ALLOWED_CHANNELS_KEY, parseAllowedChannels, serializeAllowedChannels, snowflakeSchema, } from '../keys.js';
+/**
+ * Vault-backed guild-channel allow-list: the channels (beyond the paired
+ * user's DM) the paired user may drive the session from. Managed via the
+ * local `/allow` and `/deny` commands; persisted as a JSON snowflake array
+ * under {@link DISCORD_ALLOWED_CHANNELS_KEY} (corrupt values read as empty —
+ * deny-by-default).
+ */
+export class AllowListStore {
+    vault;
+    ids = new Set();
+    constructor(vault) {
+        this.vault = vault;
+    }
+    async load() {
+        this.ids = new Set(parseAllowedChannels(await this.vault.get(DISCORD_ALLOWED_CHANNELS_KEY)));
+    }
+    snapshot() {
+        return this.ids;
+    }
+    has(channelId) {
+        return this.ids.has(channelId);
+    }
+    /** Add a channel id. Returns false (no write) for a non-snowflake id. */
+    async add(channelId) {
+        if (!snowflakeSchema.safeParse(channelId).success)
+            return false;
+        if (this.ids.has(channelId))
+            return true;
+        this.ids.add(channelId);
+        await this.persist();
+        return true;
+    }
+    /** Remove a channel id. Returns true when it was present. */
+    async remove(channelId) {
+        const removed = this.ids.delete(channelId);
+        if (removed)
+            await this.persist();
+        return removed;
+    }
+    async persist() {
+        await this.vault.set(DISCORD_ALLOWED_CHANNELS_KEY, serializeAllowedChannels(this.ids));
+    }
+}
+//# sourceMappingURL=allow-list-store.js.map

package/dist/channel/allow-list-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow-list-store.js","sourceRoot":"","sources":["../../src/channel/allow-list-store.ts"],"names":[],"mappings":"AACA,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IAGI;IAFrB,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,YAA6B,KAAiB;QAAjB,UAAK,GAAL,KAAK,CAAY;IAAG,CAAC;IAElD,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,GAAG,CAAC,SAAiB;QACzB,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAChE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,OAAO;YAAE,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,4BAA4B,EAAE,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzF,CAAC;CACF"}

package/dist/channel/approval-prompt.d.ts

@@ -0,0 +1,16 @@
+import type { ApprovalRequest } from '@moxxy/sdk';
+import type { DiscordApprovalResolver } from '../approval.js';
+import type { ChannelLogger, SendableChannelLike } from './discord-like.js';
+export interface ApprovalPromptDeps {
+    readonly channel: SendableChannelLike | null;
+    readonly resolver: DiscordApprovalResolver;
+    readonly logger?: ChannelLogger;
+}
+/**
+ * Render an approval request (e.g. plan-execute "validate plan") as a message
+ * with a button per option. Options with `requestsText` are still picked here;
+ * the interaction handler then captures the user's NEXT message as the
+ * follow-up text via the channel's awaiting-text state.
+ */
+export declare function askForApproval(id: string, request: ApprovalRequest, deps: ApprovalPromptDeps): Promise<void>;
+//# sourceMappingURL=approval-prompt.d.ts.map

package/dist/channel/approval-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-prompt.d.ts","sourceRoot":"","sources":["../../src/channel/approval-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAE9D,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CAqBf"}

package/dist/channel/approval-prompt.js

@@ -0,0 +1,27 @@
+import { BUTTON_STYLE, button, packRows } from './components.js';
+/**
+ * Render an approval request (e.g. plan-execute "validate plan") as a message
+ * with a button per option. Options with `requestsText` are still picked here;
+ * the interaction handler then captures the user's NEXT message as the
+ * follow-up text via the channel's awaiting-text state.
+ */
+export async function askForApproval(id, request, deps) {
+    if (!deps.channel)
+        return;
+    const rows = packRows(request.options.map((opt) => button(`appr:${id}:${opt.id}`, opt.label, BUTTON_STYLE.secondary)));
+    // Discord caps messages at 2000 chars; keep the body well under so the
+    // prompt always sends. The full plan streams in as assistant messages.
+    const body = request.body.length > 1500 ? request.body.slice(0, 1499) + '…' : request.body;
+    const summary = `📋 **${request.title}**\n\n${body}\n\n` +
+        `Pick an option below. Some options (e.g. Redraft) prompt for follow-up text after you click.`;
+    try {
+        await deps.channel.send({ content: summary, components: rows });
+    }
+    catch (err) {
+        deps.logger?.warn('discord approval send failed', { err: String(err) });
+        // Default-resolve on send failure so the loop strategy doesn't hang.
+        const fallback = request.defaultOptionId ?? request.options[0]?.id ?? 'cancel';
+        deps.resolver.resolvePending(id, fallback);
+    }
+}
+//# sourceMappingURL=approval-prompt.js.map

package/dist/channel/approval-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-prompt.js","sourceRoot":"","sources":["../../src/channel/approval-prompt.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AASjE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAU,EACV,OAAwB,EACxB,IAAwB;IAExB,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO;IAC1B,MAAM,IAAI,GAAG,QAAQ,CACnB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1B,MAAM,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,SAAS,CAAC,CAClE,CACF,CAAC;IACF,uEAAuE;IACvE,uEAAuE;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3F,MAAM,OAAO,GACX,QAAQ,OAAO,CAAC,KAAK,SAAS,IAAI,MAAM;QACxC,8FAA8F,CAAC;IACjG,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,8BAA8B,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,qEAAqE;QACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,QAAQ,CAAC;QAC/E,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/channel/components.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Raw Discord message-component JSON (API shape) for the button rows the
+ * channel renders. Built as plain objects rather than discord.js Builders so
+ * the prompt modules stay dependency-free and unit-testable — discord.js
+ * accepts raw API component data in `send()` payloads.
+ */
+/** Discord API button styles. */
+export declare const BUTTON_STYLE: {
+    readonly primary: 1;
+    readonly secondary: 2;
+    readonly success: 3;
+    readonly danger: 4;
+};
+export interface ApiButton {
+    readonly type: 2;
+    readonly style: number;
+    readonly label: string;
+    readonly custom_id: string;
+}
+export interface ApiActionRow {
+    readonly type: 1;
+    readonly components: ReadonlyArray<ApiButton>;
+}
+export declare function button(customId: string, label: string, style: number): ApiButton;
+/** Pack buttons into action rows (5 per row, 5 rows max — 25 button cap). */
+export declare function packRows(buttons: ReadonlyArray<ApiButton>): ApiActionRow[];
+//# sourceMappingURL=components.d.ts.map

package/dist/channel/components.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"components.d.ts","sourceRoot":"","sources":["../../src/channel/components.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,iCAAiC;AACjC,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AAEX,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;CAC/C;AAOD,wBAAgB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CAOhF;AAED,6EAA6E;AAC7E,wBAAgB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,GAAG,YAAY,EAAE,CAM1E"}

package/dist/channel/components.js

@@ -0,0 +1,34 @@
+/**
+ * Raw Discord message-component JSON (API shape) for the button rows the
+ * channel renders. Built as plain objects rather than discord.js Builders so
+ * the prompt modules stay dependency-free and unit-testable — discord.js
+ * accepts raw API component data in `send()` payloads.
+ */
+/** Discord API button styles. */
+export const BUTTON_STYLE = {
+    primary: 1,
+    secondary: 2,
+    success: 3,
+    danger: 4,
+};
+const MAX_LABEL_CHARS = 80;
+const MAX_CUSTOM_ID_CHARS = 100;
+const MAX_BUTTONS_PER_ROW = 5;
+const MAX_ROWS = 5;
+export function button(customId, label, style) {
+    return {
+        type: 2,
+        style,
+        label: label.slice(0, MAX_LABEL_CHARS) || '…',
+        custom_id: customId.slice(0, MAX_CUSTOM_ID_CHARS),
+    };
+}
+/** Pack buttons into action rows (5 per row, 5 rows max — 25 button cap). */
+export function packRows(buttons) {
+    const rows = [];
+    for (let i = 0; i < buttons.length && rows.length < MAX_ROWS; i += MAX_BUTTONS_PER_ROW) {
+        rows.push({ type: 1, components: buttons.slice(i, i + MAX_BUTTONS_PER_ROW) });
+    }
+    return rows;
+}
+//# sourceMappingURL=components.js.map

package/dist/channel/components.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"components.js","sourceRoot":"","sources":["../../src/channel/components.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,iCAAiC;AACjC,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,OAAO,EAAE,CAAC;IACV,SAAS,EAAE,CAAC;IACZ,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,CAAC;CACD,CAAC;AAcX,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,QAAQ,GAAG,CAAC,CAAC;AAEnB,MAAM,UAAU,MAAM,CAAC,QAAgB,EAAE,KAAa,EAAE,KAAa;IACnE,OAAO;QACL,IAAI,EAAE,CAAC;QACP,KAAK;QACL,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,IAAI,GAAG;QAC7C,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,QAAQ,CAAC,OAAiC;IACxD,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC,IAAI,mBAAmB,EAAE,CAAC;QACvF,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/channel/discord-like.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Structural slices of the discord.js surface the handlers touch. Keeping the
+ * handlers typed against these (instead of discord.js classes) keeps the
+ * messenger-specific transport at the channel edge and lets unit tests drive
+ * every gating / streaming / pairing path with plain fake objects — no gateway
+ * connection, no discord.js instances.
+ */
+/** A message we sent and can edit in place (the streamed frame). */
+export interface SentMessageLike {
+    edit(content: string): Promise<unknown>;
+}
+/** Payload accepted by `send` — text plus optional component rows (buttons) or
+ *  file attachments (a synthesized voice reply). `content` is optional so a
+ *  file-only message (audio, no text) is expressible. */
+export interface OutboundPayload {
+    readonly content?: string;
+    readonly components?: ReadonlyArray<unknown>;
+    /** File attachments (e.g. a discord.js `AttachmentBuilder`). */
+    readonly files?: ReadonlyArray<unknown>;
+}
+/** A channel (DM or guild text channel) we can post into. */
+export interface SendableChannelLike {
+    send(payload: string | OutboundPayload): Promise<SentMessageLike>;
+    /** Discord's typing indicator lasts ~10s per call; refresh to keep it alive. */
+    sendTyping?(): Promise<unknown>;
+}
+export interface ChannelLogger {
+    info?(msg: string, meta?: Record<string, unknown>): void;
+    warn(msg: string, meta?: Record<string, unknown>): void;
+}
+//# sourceMappingURL=discord-like.d.ts.map

package/dist/channel/discord-like.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discord-like.d.ts","sourceRoot":"","sources":["../../src/channel/discord-like.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzC;AAED;;yDAEyD;AACzD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAC7C,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;CACzC;AAED,6DAA6D;AAC7D,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAClE,gFAAgF;IAChF,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACzD"}

package/dist/channel/discord-like.js

@@ -0,0 +1,9 @@
+/**
+ * Structural slices of the discord.js surface the handlers touch. Keeping the
+ * handlers typed against these (instead of discord.js classes) keeps the
+ * messenger-specific transport at the channel edge and lets unit tests drive
+ * every gating / streaming / pairing path with plain fake objects — no gateway
+ * connection, no discord.js instances.
+ */
+export {};
+//# sourceMappingURL=discord-like.js.map

package/dist/channel/discord-like.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discord-like.js","sourceRoot":"","sources":["../../src/channel/discord-like.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/channel/interaction-handler.d.ts

@@ -0,0 +1,67 @@
+import type { ClientSession as Session } from '@moxxy/sdk';
+import type { DiscordApprovalResolver } from '../approval.js';
+import type { DiscordPermissionResolver } from '../permission.js';
+import type { AllowListStore } from './allow-list-store.js';
+import type { ChannelLogger } from './discord-like.js';
+import type { AwaitingApprovalText } from './message-handler.js';
+import type { PairingHandler } from './pairing-handler.js';
+/**
+ * Structural slice of a discord.js Interaction the handler needs — buttons
+ * (permission / approval prompts) and chat-input (slash) commands. Kept
+ * structural so tests drive it with plain objects.
+ */
+export interface InteractionLike {
+    isButton(): boolean;
+    isChatInputCommand(): boolean;
+    /** Button custom id (`perm:<callId>:<choice>` / `appr:<id>:<optionId>`). */
+    readonly customId?: string;
+    /** Slash-command name. */
+    readonly commandName?: string;
+    readonly user: {
+        readonly id: string;
+    };
+    readonly channelId?: string | null;
+    readonly guildId?: string | null;
+    reply(payload: {
+        content: string;
+        ephemeral?: boolean;
+    }): Promise<unknown>;
+    /** Buttons only: edit the prompt message (used to clear the button row).
+     *  NB: this ACKS the interaction — any later message must use followUp. */
+    update?(payload: {
+        components: ReadonlyArray<unknown>;
+    }): Promise<unknown>;
+    /** Post-ack follow-up message (valid only after update/reply succeeded). */
+    followUp?(payload: {
+        content: string;
+        ephemeral?: boolean;
+    }): Promise<unknown>;
+}
+export interface InteractionState {
+    readonly session: Session | null;
+    readonly turnController: AbortController | null;
+}
+export interface InteractionDeps {
+    readonly pairing: PairingHandler;
+    readonly allowList: AllowListStore;
+    readonly permissionResolver: DiscordPermissionResolver;
+    readonly approvalResolver: DiscordApprovalResolver;
+    readonly logger?: ChannelLogger;
+}
+export interface InteractionCallbacks {
+    readonly setAwaitingApprovalText: (state: AwaitingApprovalText | null) => void;
+    readonly toggleYolo: () => boolean;
+    /** Handle `/voice [on|off|status]` — persist + apply, return the reply text. */
+    readonly voice: (arg: string) => Promise<string>;
+    readonly performSessionAction: (action: 'new' | 'clear' | 'exit', notice: string | undefined) => Promise<string>;
+}
+/**
+ * Interaction router (button clicks + slash commands). The authorization gate
+ * runs FIRST and for EVERY path (AGENTS.md A46 — Telegram's callback handlers
+ * once skipped it): button clicks resolve permission prompts and approvals,
+ * slash commands reach the session, and a prompt message can be seen (and its
+ * buttons clicked) by any member of a guild channel — so an unpaired user's
+ * interactions must be refused exactly like their messages.
+ */
+export declare function handleInteraction(interaction: InteractionLike, state: InteractionState, deps: InteractionDeps, cb: InteractionCallbacks): Promise<void>;
+//# sourceMappingURL=interaction-handler.d.ts.map

package/dist/channel/interaction-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interaction-handler.d.ts","sourceRoot":"","sources":["../../src/channel/interaction-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,IAAI,OAAO,EAAE,MAAM,YAAY,CAAC;AAE3D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,IAAI,OAAO,CAAC;IACpB,kBAAkB,IAAI,OAAO,CAAC;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,0BAA0B;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,KAAK,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E;+EAC2E;IAC3E,MAAM,CAAC,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,4EAA4E;IAC5E,QAAQ,CAAC,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChF;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,eAAe,GAAG,IAAI,CAAC;CACjD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD,QAAQ,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;IACnD,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,uBAAuB,EAAE,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,OAAO,CAAC;IACnC,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,oBAAoB,EAAE,CAC7B,MAAM,EAAE,KAAK,GAAG,OAAO,GAAG,MAAM,EAChC,MAAM,EAAE,MAAM,GAAG,SAAS,KACvB,OAAO,CAAC,MAAM,CAAC,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,eAAe,EAC5B,KAAK,EAAE,gBAAgB,EACvB,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,oBAAoB,GACvB,OAAO,CAAC,IAAI,CAAC,CAaf"}