@moxxy/plugin-channel-discord 0.27.0

package/dist/channel/interaction-handler.js

@@ -0,0 +1,155 @@
+import { runSlash } from './slash-handler.js';
+/**
+ * Interaction router (button clicks + slash commands). The authorization gate
+ * runs FIRST and for EVERY path (AGENTS.md A46 — Telegram's callback handlers
+ * once skipped it): button clicks resolve permission prompts and approvals,
+ * slash commands reach the session, and a prompt message can be seen (and its
+ * buttons clicked) by any member of a guild channel — so an unpaired user's
+ * interactions must be refused exactly like their messages.
+ */
+export async function handleInteraction(interaction, state, deps, cb) {
+    if (!interaction.isButton() && !interaction.isChatInputCommand())
+        return;
+    if (!deps.pairing.isAuthorized(interaction.user.id)) {
+        await safeReply(interaction, 'This bot is paired with a different Discord account.', deps.logger);
+        return;
+    }
+    if (interaction.isButton()) {
+        await handleButton(interaction, deps, cb);
+        return;
+    }
+    await handleSlashCommand(interaction, state, deps, cb);
+}
+async function handleButton(interaction, deps, cb) {
+    const data = interaction.customId ?? '';
+    if (data.startsWith('perm:')) {
+        const parts = data.split(':');
+        if (parts.length !== 3 || !parts[1] || !parts[2])
+            return;
+        const handled = deps.permissionResolver.resolvePending(parts[1], mapChoice(parts[2]));
+        const acked = await clearButtons(interaction, deps.logger);
+        if (!handled)
+            await respond(interaction, 'no pending permission', acked, deps.logger);
+        // A click must always be acked or Discord shows "interaction failed".
+        else if (!acked)
+            await respond(interaction, `→ ${parts[2]}`, acked, deps.logger);
+        return;
+    }
+    if (data.startsWith('appr:')) {
+        const idx = data.indexOf(':', 5);
+        if (idx < 0)
+            return;
+        const approvalId = data.slice(5, idx);
+        const optionId = data.slice(idx + 1);
+        const pending = deps.approvalResolver.getPending(approvalId);
+        if (!pending) {
+            await safeReply(interaction, 'no pending approval', deps.logger);
+            return;
+        }
+        const option = pending.request.options.find((o) => o.id === optionId);
+        if (!option) {
+            await safeReply(interaction, 'unknown option', deps.logger);
+            return;
+        }
+        const acked = await clearButtons(interaction, deps.logger);
+        if (option.requestsText) {
+            // Don't resolve yet — capture the user's next message as the follow-up
+            // text. Mirrors the TUI dialog's text-entry sub-mode.
+            cb.setAwaitingApprovalText({ approvalId, optionId });
+            const prompt = option.textPrompt ??
+                `Send your message — the next text you type becomes the ${optionId} input.`;
+            await respond(interaction, `✏️ ${prompt}`, acked, deps.logger);
+            return;
+        }
+        deps.approvalResolver.resolvePending(approvalId, optionId);
+        await respond(interaction, `→ ${option.label}`, acked, deps.logger);
+    }
+}
+async function handleSlashCommand(interaction, state, deps, cb) {
+    const name = interaction.commandName ?? '';
+    const channelId = interaction.channelId ?? null;
+    const inGuild = interaction.guildId != null;
+    // Allow-list management works from the guild channel itself; /allow is the
+    // one command that must work BEFORE the channel is allow-listed.
+    if (name === 'allow' && inGuild && channelId) {
+        await deps.allowList.add(channelId);
+        await safeReply(interaction, '✓ this channel can now drive moxxy. Use /deny here to revoke.', deps.logger);
+        return;
+    }
+    if (name === 'deny' && inGuild && channelId) {
+        const removed = await deps.allowList.remove(channelId);
+        await safeReply(interaction, removed ? '✓ channel removed from the allow-list.' : 'this channel was not allow-listed.', deps.logger);
+        return;
+    }
+    // Everything else obeys the same channel gate as plain messages: a guild
+    // channel must be allow-listed (DMs with the paired user always pass).
+    if (inGuild && channelId && !deps.allowList.has(channelId)) {
+        await safeReply(interaction, 'This channel is not allow-listed. Send /allow here to enable it.', deps.logger);
+        return;
+    }
+    if (name === 'cancel') {
+        if (state.turnController && !state.turnController.signal.aborted) {
+            state.turnController.abort('user cancel');
+            await safeReply(interaction, 'cancelling current turn…', deps.logger);
+        }
+        else {
+            await safeReply(interaction, 'nothing to cancel.', deps.logger);
+        }
+        return;
+    }
+    if (!state.session) {
+        await safeReply(interaction, 'Session is not ready yet.', deps.logger);
+        return;
+    }
+    const reply = await runSlash(name, '', state.session, {
+        toggleYolo: cb.toggleYolo,
+        voice: cb.voice,
+        performSessionAction: cb.performSessionAction,
+    });
+    await safeReply(interaction, reply.length > 1_900 ? reply.slice(0, 1_899) + '…' : reply, deps.logger);
+}
+function mapChoice(choice) {
+    if (choice === 'allow')
+        return { mode: 'allow' };
+    if (choice === 'allow_session')
+        return { mode: 'allow_session' };
+    return { mode: 'deny', reason: 'denied by user' };
+}
+/** Clear the prompt's button row. Returns true when the update ACKED the
+ *  interaction (later messages must then use followUp, not reply). */
+async function clearButtons(interaction, logger) {
+    if (!interaction.update)
+        return false;
+    try {
+        await interaction.update({ components: [] });
+        return true;
+    }
+    catch (err) {
+        logger?.warn('discord clear-buttons failed', { err: String(err) });
+        return false;
+    }
+}
+/** Send a user-visible ack: followUp when the interaction was already acked
+ *  (a successful `update`), plain ephemeral reply otherwise. */
+async function respond(interaction, content, acked, logger) {
+    try {
+        if (acked && interaction.followUp) {
+            await interaction.followUp({ content, ephemeral: true });
+        }
+        else {
+            await interaction.reply({ content, ephemeral: true });
+        }
+    }
+    catch (err) {
+        logger?.warn('discord interaction respond failed', { err: String(err) });
+    }
+}
+async function safeReply(interaction, content, logger) {
+    try {
+        await interaction.reply({ content, ephemeral: true });
+    }
+    catch (err) {
+        logger?.warn('discord interaction reply failed', { err: String(err) });
+    }
+}
+//# sourceMappingURL=interaction-handler.js.map

package/dist/channel/interaction-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interaction-handler.js","sourceRoot":"","sources":["../../src/channel/interaction-handler.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAiD9C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAA4B,EAC5B,KAAuB,EACvB,IAAqB,EACrB,EAAwB;IAExB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,kBAAkB,EAAE;QAAE,OAAO;IAEzE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACpD,MAAM,SAAS,CAAC,WAAW,EAAE,sDAAsD,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClG,OAAO;IACT,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC3B,MAAM,YAAY,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,WAA4B,EAC5B,IAAqB,EACrB,EAAwB;IAExB,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO;YAAE,MAAM,OAAO,CAAC,WAAW,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACtF,sEAAsE;aACjE,IAAI,CAAC,KAAK;YAAE,MAAM,OAAO,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,SAAS,CAAC,WAAW,EAAE,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,SAAS,CAAC,WAAW,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,uEAAuE;YACvE,sDAAsD;YACtD,EAAE,CAAC,uBAAuB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrD,MAAM,MAAM,GACV,MAAM,CAAC,UAAU;gBACjB,0DAA0D,QAAQ,SAAS,CAAC;YAC9E,MAAM,OAAO,CAAC,WAAW,EAAE,MAAM,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,WAA4B,EAC5B,KAAuB,EACvB,IAAqB,EACrB,EAAwB;IAExB,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,IAAI,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,IAAI,IAAI,CAAC;IAChD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,IAAI,IAAI,CAAC;IAE5C,2EAA2E;IAC3E,iEAAiE;IACjE,IAAI,IAAI,KAAK,OAAO,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,SAAS,CAAC,WAAW,EAAE,+DAA+D,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3G,OAAO;IACT,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,SAAS,CACb,WAAW,EACX,OAAO,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,oCAAoC,EACzF,IAAI,CAAC,MAAM,CACZ,CAAC;QACF,OAAO;IACT,CAAC;IAED,yEAAyE;IACzE,uEAAuE;IACvE,IAAI,OAAO,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,MAAM,SAAS,CAAC,WAAW,EAAE,kEAAkE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9G,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC1C,MAAM,SAAS,CAAC,WAAW,EAAE,0BAA0B,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,CAAC,WAAW,EAAE,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,SAAS,CAAC,WAAW,EAAE,2BAA2B,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE;QACpD,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,oBAAoB,EAAE,EAAE,CAAC,oBAAoB;KAC9C,CAAC,CAAC;IACH,MAAM,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACjD,IAAI,MAAM,KAAK,eAAe;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACjE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;AACpD,CAAC;AAED;sEACsE;AACtE,KAAK,UAAU,YAAY,CAAC,WAA4B,EAAE,MAAsB;IAC9E,IAAI,CAAC,WAAW,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,8BAA8B,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;gEACgE;AAChE,KAAK,UAAU,OAAO,CACpB,WAA4B,EAC5B,OAAe,EACf,KAAc,EACd,MAAsB;IAEtB,IAAI,CAAC;QACH,IAAI,KAAK,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,oCAAoC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,WAA4B,EAC5B,OAAe,EACf,MAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,kCAAkC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC"}

package/dist/channel/message-handler.d.ts

@@ -0,0 +1,60 @@
+import type { ChannelHandle, ClientSession as Session } from '@moxxy/sdk';
+import type { InboundMessage } from '../schema.js';
+import type { DiscordApprovalResolver } from '../approval.js';
+import type { DiscordPermissionResolver } from '../permission.js';
+import type { AllowListStore } from './allow-list-store.js';
+import type { ChannelLogger, SendableChannelLike } from './discord-like.js';
+import type { PairingHandler } from './pairing-handler.js';
+export interface AwaitingApprovalText {
+    approvalId: string;
+    optionId: string;
+}
+/** A validated inbound message plus the transport bits needed to answer it. */
+export interface InboundContext {
+    readonly msg: InboundMessage;
+    readonly channel: SendableChannelLike;
+    reply(text: string): Promise<unknown>;
+}
+export interface MessageHandlerState {
+    readonly session: Session | null;
+    readonly busy: boolean;
+    readonly turnController: AbortController | null;
+    readonly awaitingApprovalText: AwaitingApprovalText | null;
+    readonly handle: ChannelHandle | null;
+    /** The bot's own user id (ignore self-authored messages defensively). */
+    readonly botUserId: string | null;
+}
+export interface MessageHandlerDeps {
+    readonly pairing: PairingHandler;
+    readonly allowList: AllowListStore;
+    readonly approvalResolver: DiscordApprovalResolver;
+    readonly permissionResolver: DiscordPermissionResolver;
+    readonly logger?: ChannelLogger;
+}
+export interface MessageHandlerCallbacks {
+    readonly setAwaitingApprovalText: (state: AwaitingApprovalText | null) => void;
+    readonly toggleYolo: () => boolean;
+    readonly setYolo: (value: boolean) => void;
+    /** Handle `/voice [on|off|status]` — persist + apply, return the reply text. */
+    readonly voice: (arg: string) => Promise<string>;
+    readonly runUserTurn: (ctx: InboundContext, text: string) => Promise<void>;
+    /** Handle audio attachments (voice messages). Returns true when it consumed
+     *  the message (so the text path is skipped). */
+    readonly runVoiceMessage: (ctx: InboundContext) => Promise<boolean>;
+}
+/**
+ * Top-level dispatch for inbound Discord messages. Every session-reaching path
+ * is behind the pairing + allow-list gate (AGENTS.md A46: gate EVERY path):
+ * validation happened upstream (the caller only builds an {@link
+ * InboundContext} from a zod-validated extraction), authorization happens
+ * here, and only then do approval-capture / cancel / slash / turn paths run.
+ */
+export declare function handleInboundMessage(ctx: InboundContext, state: MessageHandlerState, deps: MessageHandlerDeps, cb: MessageHandlerCallbacks): Promise<void>;
+/**
+ * Channel-side handler for `session-action` outputs from registered commands.
+ * Mirrors the Telegram channel's semantics; returns the reply text. Shared by
+ * the plain-text slash path (above) and the interaction (slash-command) path
+ * in the channel.
+ */
+export declare function performSessionAction(action: 'new' | 'clear' | 'exit', notice: string | undefined, state: Pick<MessageHandlerState, 'session' | 'turnController' | 'handle'>, deps: Pick<MessageHandlerDeps, 'approvalResolver' | 'permissionResolver'>, cb: Pick<MessageHandlerCallbacks, 'setAwaitingApprovalText' | 'setYolo'>): Promise<string>;
+//# sourceMappingURL=message-handler.d.ts.map

package/dist/channel/message-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-handler.d.ts","sourceRoot":"","sources":["../../src/channel/message-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,IAAI,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,eAAe,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC3D,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IACtC,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;IACnD,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,uBAAuB,EAAE,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,OAAO,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3C,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E;qDACiD;IACjD,QAAQ,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACrE;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,kBAAkB,EACxB,EAAE,EAAE,uBAAuB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAwFf;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,KAAK,GAAG,OAAO,GAAG,MAAM,EAChC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,gBAAgB,GAAG,QAAQ,CAAC,EACzE,IAAI,EAAE,IAAI,CAAC,kBAAkB,EAAE,kBAAkB,GAAG,oBAAoB,CAAC,EACzE,EAAE,EAAE,IAAI,CAAC,uBAAuB,EAAE,yBAAyB,GAAG,SAAS,CAAC,GACvE,OAAO,CAAC,MAAM,CAAC,CA4BjB"}

package/dist/channel/message-handler.js

@@ -0,0 +1,135 @@
+import { gateInbound } from '../allow-list.js';
+import { runSlash } from './slash-handler.js';
+/**
+ * Top-level dispatch for inbound Discord messages. Every session-reaching path
+ * is behind the pairing + allow-list gate (AGENTS.md A46: gate EVERY path):
+ * validation happened upstream (the caller only builds an {@link
+ * InboundContext} from a zod-validated extraction), authorization happens
+ * here, and only then do approval-capture / cancel / slash / turn paths run.
+ */
+export async function handleInboundMessage(ctx, state, deps, cb) {
+    const { msg } = ctx;
+    // Never react to bots (including ourselves) — bot-to-bot loops.
+    if (msg.authorIsBot || (state.botUserId != null && msg.authorId === state.botUserId))
+        return;
+    const text = msg.content.trim();
+    const verdict = gateInbound(msg, deps.pairing.authorizedUserId(), deps.allowList.snapshot());
+    if (!verdict.ok) {
+        if (verdict.reason === 'not-paired' || verdict.reason === 'foreign-user') {
+            // DMs get pairing guidance (a fresh code when a window is armed, a
+            // rejection for a foreign account); guild messages are dropped silently
+            // so an unpaired bot can't be made to spam a server.
+            if (msg.guildId == null) {
+                const reply = deps.pairing.handleUnpairedDm(msg.authorId);
+                if (reply)
+                    await ctx.reply(reply);
+            }
+            return;
+        }
+        // Paired user in a guild channel that isn't allow-listed: /allow opts the
+        // channel in (this is the ONE command that must work pre-allow-list —
+        // it's how the list gets populated); anything else gets a hint.
+        if (text === '/allow') {
+            await deps.allowList.add(msg.channelId);
+            await ctx.reply('✓ this channel can now drive moxxy. Use /deny here to revoke.');
+            return;
+        }
+        await ctx.reply('This channel is not allow-listed. Send /allow here to enable it.');
+        return;
+    }
+    if (!text && msg.attachments.length === 0)
+        return;
+    // Capture awaiting-text BEFORE the busy guard so the user can answer an
+    // approval text prompt even while the strategy is technically mid-turn
+    // (it's pending on us).
+    if (state.awaitingApprovalText && text) {
+        const { approvalId, optionId } = state.awaitingApprovalText;
+        cb.setAwaitingApprovalText(null);
+        const handled = deps.approvalResolver.resolvePendingWithText(approvalId, optionId, text);
+        await ctx.reply(handled ? `✓ submitted (${optionId})` : 'that approval is no longer pending');
+        return;
+    }
+    // /cancel works even while busy; everything else routes below.
+    if (text === '/cancel') {
+        if (state.turnController && !state.turnController.signal.aborted) {
+            state.turnController.abort('user cancel');
+            await ctx.reply('cancelling current turn…');
+        }
+        else {
+            await ctx.reply('nothing to cancel.');
+        }
+        return;
+    }
+    if (text === '/deny' && msg.guildId != null) {
+        const removed = await deps.allowList.remove(msg.channelId);
+        await ctx.reply(removed ? '✓ channel removed from the allow-list.' : 'this channel was not allow-listed.');
+        return;
+    }
+    if (text === '/allow' && msg.guildId != null) {
+        await ctx.reply('this channel is already allow-listed.');
+        return;
+    }
+    if (text.startsWith('/')) {
+        if (!state.session)
+            return;
+        const [head, ...rest] = text.split(/\s+/);
+        const reply = await runSlash(head.slice(1), rest.join(' '), state.session, {
+            toggleYolo: cb.toggleYolo,
+            voice: cb.voice,
+            performSessionAction: (action, notice) => performSessionAction(action, notice, state, deps, cb),
+        });
+        if (reply)
+            await ctx.reply(reply.length > 1_900 ? reply.slice(0, 1_899) + '…' : reply);
+        return;
+    }
+    // Voice messages / audio uploads take the transcribe-then-turn path.
+    if (await cb.runVoiceMessage(ctx))
+        return;
+    if (!text)
+        return;
+    if (state.busy) {
+        await ctx.reply('I am still working on the previous prompt. Send /cancel to abort it.');
+        return;
+    }
+    await cb.runUserTurn(ctx, text);
+}
+/**
+ * Channel-side handler for `session-action` outputs from registered commands.
+ * Mirrors the Telegram channel's semantics; returns the reply text. Shared by
+ * the plain-text slash path (above) and the interaction (slash-command) path
+ * in the channel.
+ */
+export async function performSessionAction(action, notice, state, deps, cb) {
+    if (!state.session)
+        return 'session is not ready yet.';
+    if (action === 'exit') {
+        // Fire the stop AFTER we return so the reply can still be delivered.
+        setTimeout(() => void state.handle?.stop('user /exit'), 250);
+        return notice ?? 'closing Discord channel';
+    }
+    if (action === 'clear') {
+        return `✓ ${notice ?? 'cleared'}`;
+    }
+    // action === 'new'
+    if (state.turnController && !state.turnController.signal.aborted) {
+        state.turnController.abort('user reset');
+    }
+    cb.setYolo(false);
+    cb.setAwaitingApprovalText(null);
+    deps.approvalResolver.abortAll('session reset');
+    deps.permissionResolver.abortAll('session reset');
+    // Wipe the history at its source (RemoteSession.reset() asks the runner; a
+    // mirror-only log.clear() would desync) and only claim success when the
+    // reset actually happened (AGENTS.md A10).
+    try {
+        if (typeof state.session.reset === 'function')
+            await state.session.reset();
+        else
+            state.session.log.clear();
+    }
+    catch (err) {
+        return `⚠ /new failed: ${err instanceof Error ? err.message : String(err)} — history NOT cleared`;
+    }
+    return `✓ ${notice ?? 'new session — conversation history cleared'}`;
+}
+//# sourceMappingURL=message-handler.js.map

package/dist/channel/message-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-handler.js","sourceRoot":"","sources":["../../src/channel/message-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAO/C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AA4C9C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAmB,EACnB,KAA0B,EAC1B,IAAwB,EACxB,EAA2B;IAE3B,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACpB,gEAAgE;IAChE,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO;IAE7F,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IAE7F,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACzE,mEAAmE;YACnE,wEAAwE;YACxE,qDAAqD;YACrD,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC1D,IAAI,KAAK;oBAAE,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;YACD,OAAO;QACT,CAAC;QACD,0EAA0E;QAC1E,sEAAsE;QACtE,gEAAgE;QAChE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,GAAG,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QACD,MAAM,GAAG,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAElD,wEAAwE;IACxE,uEAAuE;IACvE,wBAAwB;IACxB,IAAI,KAAK,CAAC,oBAAoB,IAAI,IAAI,EAAE,CAAC;QACvC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,oBAAoB,CAAC;QAC5D,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzF,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,QAAQ,GAAG,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC;QAC9F,OAAO;IACT,CAAC;IAED,+DAA+D;IAC/D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC1C,MAAM,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC;QAC3G,OAAO;IACT,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;QAC7C,MAAM,GAAG,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,OAAO;QAC3B,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE;YAC1E,UAAU,EAAE,EAAE,CAAC,UAAU;YACzB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,oBAAoB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CACvC,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;SACxD,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IAED,qEAAqE;IACrE,IAAI,MAAM,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO;IAElB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,GAAG,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;QACxF,OAAO;IACT,CAAC;IAED,MAAM,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAgC,EAChC,MAA0B,EAC1B,KAAyE,EACzE,IAAyE,EACzE,EAAwE;IAExE,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,2BAA2B,CAAC;IACvD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,qEAAqE;QACrE,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,MAAM,IAAI,yBAAyB,CAAC;IAC7C,CAAC;IACD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,KAAK,MAAM,IAAI,SAAS,EAAE,CAAC;IACpC,CAAC;IACD,mBAAmB;IACnB,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACjE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC;IACD,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClB,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAChD,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAClD,2EAA2E;IAC3E,wEAAwE;IACxE,2CAA2C;IAC3C,IAAI,CAAC;QACH,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU;YAAE,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;;YACtE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACpG,CAAC;IACD,OAAO,KAAK,MAAM,IAAI,4CAA4C,EAAE,CAAC;AACvE,CAAC"}

package/dist/channel/pairing-handler.d.ts

@@ -0,0 +1,58 @@
+import type { VaultStore } from '@moxxy/plugin-vault';
+import { type DiscordPairingPhase } from '../pairing.js';
+/** Result returned by {@link PairingHandler.confirmCode}. */
+export type PairingConfirmResult = {
+    ok: true;
+    userId: string;
+} | {
+    ok: false;
+    reason: 'mismatch' | 'expired' | 'not-pending';
+    message: string;
+};
+export interface PairingHandlerOptions {
+    readonly vault: VaultStore;
+    readonly logger?: {
+        info?(msg: string, meta?: Record<string, unknown>): void;
+        warn(msg: string, meta?: Record<string, unknown>): void;
+    };
+}
+/**
+ * Owns the pairing state machine + vault persistence for the DM code flow
+ * (see `../pairing.ts` for the flow + security property). The channel feeds it
+ * DMs from unauthorized users ({@link handleUnpairedDm}) and the terminal
+ * wizard feeds it pasted codes ({@link confirmCode}).
+ */
+export declare class PairingHandler {
+    private state;
+    private readonly opts;
+    private readonly pairedListeners;
+    constructor(opts: PairingHandlerOptions);
+    loadAuthorized(): Promise<void>;
+    phase(): DiscordPairingPhase;
+    isAuthorized(userId: string): boolean;
+    authorizedUserId(): string | null;
+    /** Arm the pairing window: unauthorized DMs will now be issued codes. */
+    arm(): void;
+    unpair(): void;
+    /**
+     * Subscribe to "a user just became authorized" — fires once each time pairing
+     * completes. The `pair` terminal flow uses it to print success; the channel
+     * uses it to flip its connect-state. Returns an unsubscribe function.
+     */
+    onPaired(listener: (userId: string) => void): () => void;
+    /**
+     * An unauthorized user DMed the bot. Returns the reply text to DM back:
+     * a freshly minted one-time code (window armed), a nudge to open a window,
+     * or a foreign-account rejection. Null when no reply is warranted.
+     */
+    handleUnpairedDm(userId: string): string | null;
+    /**
+     * The operator pasted a code into the terminal. On match the pending DM user
+     * is authorized + persisted. The vault write happens BEFORE listeners fire so
+     * a `pair`-flow exit right after success never loses the pairing.
+     */
+    confirmCode(rawCode: string): Promise<PairingConfirmResult>;
+    private applyConfirmDecision;
+    private emitPaired;
+}
+//# sourceMappingURL=pairing-handler.d.ts.map

package/dist/channel/pairing-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing-handler.d.ts","sourceRoot":"","sources":["../../src/channel/pairing-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EASL,KAAK,mBAAmB,EAEzB,MAAM,eAAe,CAAC;AAGvB,6DAA6D;AAC7D,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACzD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KACzD,CAAC;CACH;AAED;;;;;GAKG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,KAAK,CAAoD;IACjE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAwB;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAuC;gBAE3D,IAAI,EAAE,qBAAqB;IAIjC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAYrC,KAAK,IAAI,mBAAmB;IAI5B,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIrC,gBAAgB,IAAI,MAAM,GAAG,IAAI;IAIjC,yEAAyE;IACzE,GAAG,IAAI,IAAI;IAIX,MAAM,IAAI,IAAI;IAId;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI;IAKxD;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAgB/C;;;;OAIG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;YAKnD,oBAAoB;IAoBlC,OAAO,CAAC,UAAU;CASnB"}

package/dist/channel/pairing-handler.js

@@ -0,0 +1,109 @@
+import { armPairing, clearDiscordPairing, confirmPendingCode, createDiscordPairingState, isUserAuthorized, mintCodeForPeer, pairingPhase, } from '../pairing.js';
+import { DISCORD_AUTHORIZED_USER_KEY, parseAuthorizedUser } from '../keys.js';
+/**
+ * Owns the pairing state machine + vault persistence for the DM code flow
+ * (see `../pairing.ts` for the flow + security property). The channel feeds it
+ * DMs from unauthorized users ({@link handleUnpairedDm}) and the terminal
+ * wizard feeds it pasted codes ({@link confirmCode}).
+ */
+export class PairingHandler {
+    state = createDiscordPairingState();
+    opts;
+    pairedListeners = new Set();
+    constructor(opts) {
+        this.opts = opts;
+    }
+    async loadAuthorized() {
+        const raw = await this.opts.vault.get(DISCORD_AUTHORIZED_USER_KEY);
+        const authorizedUserId = parseAuthorizedUser(raw);
+        if (authorizedUserId == null && raw) {
+            this.opts.logger?.warn('discord pairing: stored user id is not a snowflake — treating as unpaired', { raw });
+        }
+        this.state = createDiscordPairingState({ authorizedUserId });
+    }
+    phase() {
+        return pairingPhase(this.state);
+    }
+    isAuthorized(userId) {
+        return isUserAuthorized(this.state, userId);
+    }
+    authorizedUserId() {
+        return this.state.kit.phase === 'paired' ? this.state.kit.authorizedPeer : null;
+    }
+    /** Arm the pairing window: unauthorized DMs will now be issued codes. */
+    arm() {
+        this.state = armPairing(this.state);
+    }
+    unpair() {
+        this.state = clearDiscordPairing(this.state);
+    }
+    /**
+     * Subscribe to "a user just became authorized" — fires once each time pairing
+     * completes. The `pair` terminal flow uses it to print success; the channel
+     * uses it to flip its connect-state. Returns an unsubscribe function.
+     */
+    onPaired(listener) {
+        this.pairedListeners.add(listener);
+        return () => this.pairedListeners.delete(listener);
+    }
+    /**
+     * An unauthorized user DMed the bot. Returns the reply text to DM back:
+     * a freshly minted one-time code (window armed), a nudge to open a window,
+     * or a foreign-account rejection. Null when no reply is warranted.
+     */
+    handleUnpairedDm(userId) {
+        const decision = mintCodeForPeer(this.state, userId);
+        this.state = decision.state;
+        const action = decision.action;
+        if (action.kind === 'code-minted') {
+            this.opts.logger?.info?.('discord pairing: code minted', { userId });
+            return (`Your one-time pairing code is: **${action.code}**\n` +
+                'Paste it into the moxxy terminal (`moxxy discord pair`) to finish pairing.');
+        }
+        if (action.kind === 'still-paired')
+            return 'Already paired — send me a prompt.';
+        if (action.kind === 'reject')
+            return action.message;
+        return null;
+    }
+    /**
+     * The operator pasted a code into the terminal. On match the pending DM user
+     * is authorized + persisted. The vault write happens BEFORE listeners fire so
+     * a `pair`-flow exit right after success never loses the pairing.
+     */
+    async confirmCode(rawCode) {
+        const decision = confirmPendingCode(this.state, rawCode);
+        return this.applyConfirmDecision(decision);
+    }
+    async applyConfirmDecision(decision) {
+        this.state = decision.state;
+        const action = decision.action;
+        if (action.kind === 'paired') {
+            await this.opts.vault.set(DISCORD_AUTHORIZED_USER_KEY, action.userId);
+            this.emitPaired(action.userId);
+            return { ok: true, userId: action.userId };
+        }
+        if (action.kind === 'still-paired')
+            return { ok: true, userId: action.userId };
+        if (action.kind === 'mismatch')
+            return { ok: false, reason: 'mismatch', message: action.message };
+        if (action.kind === 'expired')
+            return { ok: false, reason: 'expired', message: action.message };
+        if (action.kind === 'not-pending' || action.kind === 'reject') {
+            return { ok: false, reason: 'not-pending', message: action.message };
+        }
+        // 'code-minted' can't come out of a confirm; treat as a mismatch.
+        return { ok: false, reason: 'mismatch', message: 'unexpected pairing state' };
+    }
+    emitPaired(userId) {
+        for (const listener of this.pairedListeners) {
+            try {
+                listener(userId);
+            }
+            catch (err) {
+                this.opts.logger?.warn('discord pairing paired-listener threw', { err: String(err) });
+            }
+        }
+    }
+}
+//# sourceMappingURL=pairing-handler.js.map

package/dist/channel/pairing-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing-handler.js","sourceRoot":"","sources":["../../src/channel/pairing-handler.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,eAAe,EACf,YAAY,GAIb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAe9E;;;;;GAKG;AACH,MAAM,OAAO,cAAc;IACjB,KAAK,GAAwB,yBAAyB,EAAE,CAAC;IAChD,IAAI,CAAwB;IAC5B,eAAe,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEvE,YAAY,IAA2B;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACnE,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,gBAAgB,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CACpB,2EAA2E,EAC3E,EAAE,GAAG,EAAE,CACR,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,yBAAyB,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,YAAY,CAAC,MAAc;QACzB,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAED,yEAAyE;IACzE,GAAG;QACD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,QAAkC;QACzC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,MAAc;QAC7B,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC5B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,8BAA8B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACrE,OAAO,CACL,oCAAoC,MAAM,CAAC,IAAI,MAAM;gBACrD,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;YAAE,OAAO,oCAAoC,CAAC;QAChF,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,QAAgC;QAEhC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC5B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACtE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC/E,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAClG,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAChG,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACvE,CAAC;QACD,kEAAkE;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IAChF,CAAC;IAEO,UAAU,CAAC,MAAc;QAC/B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,uCAAuC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/channel/permission-prompt.d.ts

@@ -0,0 +1,19 @@
+import type { PendingToolCall, PermissionContext } from '@moxxy/sdk';
+import type { ClientSession as Session } from '@moxxy/sdk';
+import type { DiscordPermissionResolver } from '../permission.js';
+import type { ChannelLogger, SendableChannelLike } from './discord-like.js';
+export interface PermissionPromptDeps {
+    readonly channel: SendableChannelLike | null;
+    readonly session: Session | null;
+    readonly resolver: DiscordPermissionResolver;
+    readonly yolo: boolean;
+    readonly logger?: ChannelLogger;
+}
+/**
+ * Render a button-row permission prompt for a pending tool call (the Discord
+ * mapping of Telegram's inline keyboard). The decider promise resolves when
+ * the paired user clicks a button (routed back via the interaction handler)
+ * or when the resolver aborts on stop.
+ */
+export declare function askForPermission(call: PendingToolCall, ctx: PermissionContext, deps: PermissionPromptDeps): Promise<void>;
+//# sourceMappingURL=permission-prompt.d.ts.map

package/dist/channel/permission-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-prompt.d.ts","sourceRoot":"","sources":["../../src/channel/permission-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,IAAI,OAAO,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAElE,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAMD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,eAAe,EACrB,GAAG,EAAE,iBAAiB,EACtB,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,IAAI,CAAC,CAyBf"}

package/dist/channel/permission-prompt.js

@@ -0,0 +1,38 @@
+import { BUTTON_STYLE, button, packRows } from './components.js';
+function truncate(s, max) {
+    return s.length <= max ? s : s.slice(0, max - 1) + '…';
+}
+/**
+ * Render a button-row permission prompt for a pending tool call (the Discord
+ * mapping of Telegram's inline keyboard). The decider promise resolves when
+ * the paired user clicks a button (routed back via the interaction handler)
+ * or when the resolver aborts on stop.
+ */
+export async function askForPermission(call, ctx, deps) {
+    void ctx;
+    if (!deps.channel || !deps.session)
+        return;
+    // YOLO short-circuit: resolve immediately without rendering a prompt.
+    if (deps.yolo) {
+        deps.resolver.resolvePending(call.callId, { mode: 'allow', reason: 'yolo mode' });
+        return;
+    }
+    const rows = packRows([
+        button(`perm:${call.callId}:allow`, 'Allow once', BUTTON_STYLE.success),
+        button(`perm:${call.callId}:allow_session`, 'Allow session', BUTTON_STYLE.primary),
+        button(`perm:${call.callId}:deny`, 'Deny', BUTTON_STYLE.danger),
+    ]);
+    const description = deps.session.tools.get(call.name)?.description ?? '';
+    const summary = `🔐 **Tool permission requested**\n` +
+        `Tool: \`${call.name}\`\n` +
+        (description ? `Desc: ${truncate(description, 200)}\n` : '') +
+        `Input: \`${truncate(JSON.stringify(call.input), 300)}\``;
+    try {
+        await deps.channel.send({ content: summary, components: rows });
+    }
+    catch (err) {
+        deps.logger?.warn('discord permission send failed', { err: String(err) });
+        deps.resolver.resolvePending(call.callId, { mode: 'deny', reason: 'unable to render prompt' });
+    }
+}
+//# sourceMappingURL=permission-prompt.js.map

package/dist/channel/permission-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-prompt.js","sourceRoot":"","sources":["../../src/channel/permission-prompt.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAWjE,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,OAAO,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAqB,EACrB,GAAsB,EACtB,IAA0B;IAE1B,KAAK,GAAG,CAAC;IACT,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO;IAC3C,sEAAsE;IACtE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC;QACpB,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC;QACvE,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,gBAAgB,EAAE,eAAe,EAAE,YAAY,CAAC,OAAO,CAAC;QAClF,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC;KAChE,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;IACzE,MAAM,OAAO,GACX,oCAAoC;QACpC,WAAW,IAAI,CAAC,IAAI,MAAM;QAC1B,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,YAAY,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,gCAAgC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACjG,CAAC;AACH,CAAC"}