@moxxy/plugin-channel-discord 0.27.0

package/dist/index.js

@@ -0,0 +1,179 @@
+import { defineChannel, definePlugin } from '@moxxy/sdk';
+import { DiscordChannel } from './channel.js';
+import { DISCORD_ALLOWED_CHANNELS_KEY, DISCORD_AUTHORIZED_USER_KEY, DISCORD_TOKEN_ENV, DISCORD_TOKEN_KEY, parseAllowedChannels, parseAuthorizedUser, resolveBotToken, } from './keys.js';
+import { runDiscordWizard } from './setup-wizard.js';
+import { runPairFlow } from './pair-flow.js';
+export { DiscordChannel, } from './channel.js';
+export { DiscordPermissionResolver } from './permission.js';
+export { DiscordApprovalResolver } from './approval.js';
+export { armPairing, clearDiscordPairing, confirmPendingCode, createDiscordPairingState, isUserAuthorized, mintCodeForPeer, pairingPhase, } from './pairing.js';
+export { gateInbound } from './allow-list.js';
+export { DiscordTurnRenderer, splitForDiscord, DISCORD_MESSAGE_LIMIT } from './render.js';
+export { extractInboundMessage, inboundMessageSchema, MAX_AUDIO_BYTES, MAX_CONTENT_CHARS, } from './schema.js';
+export { DISCORD_TOKEN_KEY, DISCORD_AUTHORIZED_USER_KEY, DISCORD_ALLOWED_CHANNELS_KEY, DISCORD_TOKEN_ENV, DISCORD_TOKEN_RE, parseAuthorizedUser, parseAllowedChannels, serializeAllowedChannels, resolveBotToken, } from './keys.js';
+/**
+ * Build the Discord channel plugin with a host-injected vault (mirroring the
+ * Telegram plugin's vault injection).
+ */
+export function buildDiscordPlugin(opts) {
+    return makeDiscordPlugin(() => opts.vault);
+}
+/**
+ * Discovery-loadable default export: resolves the vault from the inter-plugin
+ * service registry in `onInit` (the vault plugin publishes `'vault'`). Requires
+ * `@moxxy/plugin-vault` to load first (declared in `package.json`
+ * `moxxy.requirements`). The channel + subcommands read the vault via
+ * `getVault()`, so resolution is deferred to call time — after `onInit` wired it.
+ */
+export const discordPlugin = (() => {
+    let resolved = null;
+    const getVault = () => {
+        if (!resolved) {
+            throw new Error('@moxxy/plugin-channel-discord: the "vault" service is unavailable — @moxxy/plugin-vault must load first');
+        }
+        return resolved;
+    };
+    const hooks = {
+        onInit: (ctx) => {
+            resolved = ctx.services.require('vault');
+        },
+    };
+    return makeDiscordPlugin(getVault, hooks);
+})();
+// Discovery entry: `createPluginLoader` requires a default Plugin export.
+export default discordPlugin;
+function makeDiscordPlugin(getVault, hooks) {
+    return definePlugin({
+        name: '@moxxy/plugin-channel-discord',
+        version: '0.0.0',
+        ...(hooks ? { hooks } : {}),
+        channels: [
+            defineChannel({
+                name: 'discord',
+                description: 'Discord bot channel via discord.js (gateway). DM code pairing; streamed replies via message edits; button-based permission prompts.',
+                // Like Slack/Telegram, run on a dedicated, isolated runner (separate
+                // socket + sticky session) so the bot keeps its own persistent history
+                // apart from the user's desktop/TUI work. The gateway is an outbound
+                // WebSocket — no tunnel needed.
+                dedicatedRunner: true,
+                sessionSource: 'discord',
+                // Self-described config so a control surface (TUI `/channels`, `moxxy
+                // channels start`) can configure + run Discord without a hardcoded table.
+                config: {
+                    fields: [
+                        {
+                            name: 'botToken',
+                            label: 'Bot token',
+                            vaultKey: DISCORD_TOKEN_KEY,
+                            required: true,
+                            secret: true,
+                            placeholder: 'MTIz…abc.def…',
+                            help: 'discord.com/developers → your app → Bot → Reset Token. Enable the MESSAGE CONTENT privileged intent on the same page.',
+                        },
+                    ],
+                    hasRequestUrl: false,
+                    runHint: 'Invite the bot to a server via the link shown, then DM it — it replies with a one-time code; finish with `moxxy discord pair` in a terminal.',
+                    connect: {
+                        kind: 'url',
+                        title: 'Invite the bot',
+                        hint: 'Open the link to invite the bot to your server, then DM it to receive a pairing code and finish with `moxxy discord pair`.',
+                        openable: true,
+                        openLabel: 'Open Discord authorization',
+                    },
+                },
+                create: (deps) => new DiscordChannel({
+                    vault: getVault(),
+                    token: deps.options?.['token'] ?? undefined,
+                    logger: deps.logger,
+                    ...(typeof deps.options?.['editFrameMs'] === 'number'
+                        ? { editFrameMs: deps.options['editFrameMs'] }
+                        : {}),
+                }),
+                isAvailable: async () => {
+                    // Env-first: a fully env-configured bot is available even in a probe
+                    // context (e.g. the `moxxy channels` listing) where onInit has not
+                    // yet wired the vault service, so `getVault()` would throw.
+                    if (process.env[DISCORD_TOKEN_ENV]?.trim())
+                        return { ok: true };
+                    try {
+                        if ((await resolveBotToken(getVault())) != null)
+                            return { ok: true };
+                        return {
+                            ok: false,
+                            reason: "No bot token. Set MOXXY_DISCORD_TOKEN, or store one in the vault as '" +
+                                DISCORD_TOKEN_KEY +
+                                "' via `moxxy discord setup`.",
+                        };
+                    }
+                    catch {
+                        return {
+                            ok: false,
+                            reason: 'Set MOXXY_DISCORD_TOKEN to skip the vault, or unlock the vault first.',
+                        };
+                    }
+                },
+                interactiveCommand: 'setup',
+                subcommands: {
+                    setup: {
+                        description: 'Interactive setup: store a bot token (with privileged-intent guidance), pair an account, then start the bot. Shown by default for `moxxy discord` on a TTY.',
+                        run: async (ctx) => {
+                            // The wizard drives token entry + pairing through clack prompts,
+                            // so it needs an interactive terminal. In a headless invocation
+                            // we just start the bot directly.
+                            if (process.stdin.isTTY !== true) {
+                                return ctx.startChannel();
+                            }
+                            return runDiscordWizard(ctx);
+                        },
+                    },
+                    pair: {
+                        description: 'DM code pairing: start the bot with a pairing window armed, DM it from your account, then paste the code it replies with.',
+                        run: async (ctx) => {
+                            // Pairing needs the operator to paste a code, so it needs an
+                            // interactive terminal. In a headless invocation we bail with a
+                            // clear message instead of starting a bot nobody can pair.
+                            if (process.stdin.isTTY !== true) {
+                                process.stderr.write('Pairing needs a TTY (you paste the code the bot DMs back). Run `moxxy channels discord pair` on a workstation.\n');
+                                return 1;
+                            }
+                            return runPairFlow(ctx);
+                        },
+                    },
+                    unpair: {
+                        description: 'Forget the currently authorized Discord account.',
+                        run: async (ctx) => {
+                            const vault = ctx.deps.vault;
+                            if (!vault) {
+                                process.stderr.write('vault unavailable\n');
+                                return 1;
+                            }
+                            const removed = await vault.delete(DISCORD_AUTHORIZED_USER_KEY);
+                            process.stdout.write(removed ? 'unpaired\n' : 'no pairing was active\n');
+                            return 0;
+                        },
+                    },
+                    status: {
+                        description: 'Report whether a Discord token + an authorized account + allow-listed channels are configured.',
+                        run: async (ctx) => {
+                            const vault = ctx.deps.vault;
+                            if (!vault) {
+                                process.stderr.write('vault unavailable\n');
+                                return 1;
+                            }
+                            const hasToken = !!process.env[DISCORD_TOKEN_ENV]?.trim() || (await vault.has(DISCORD_TOKEN_KEY));
+                            const authorized = await vault.get(DISCORD_AUTHORIZED_USER_KEY);
+                            const allowed = parseAllowedChannels(await vault.get(DISCORD_ALLOWED_CHANNELS_KEY));
+                            process.stdout.write(JSON.stringify({
+                                tokenConfigured: hasToken,
+                                authorizedUserId: parseAuthorizedUser(authorized),
+                                allowedChannelIds: allowed,
+                            }, null, 2) + '\n');
+                            return 0;
+                        },
+                    },
+                },
+            }),
+        ],
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAoC,MAAM,YAAY,CAAC;AAE3F,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,OAAO,EACL,cAAc,GAIf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,yBAAyB,EAA0B,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAwB,MAAM,eAAe,CAAC;AAC9E,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,eAAe,EACf,YAAY,GAIb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,WAAW,EAAoB,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,iBAAiB,GAGlB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,2BAA2B,EAC3B,4BAA4B,EAC5B,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,GAChB,MAAM,WAAW,CAAC;AAOnB;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA+B;IAChE,OAAO,iBAAiB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAW,CAAC,GAAG,EAAE;IACzC,IAAI,QAAQ,GAAsB,IAAI,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAe,EAAE;QAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,KAAK,GAAmB;QAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YACd,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAa,OAAO,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;IACF,OAAO,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC,CAAC,EAAE,CAAC;AAEL,0EAA0E;AAC1E,eAAe,aAAa,CAAC;AAE7B,SAAS,iBAAiB,CAAC,QAA0B,EAAE,KAAsB;IAC3E,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,OAAO;QAChB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,QAAQ,EAAE;YACR,aAAa,CAAC;gBACZ,IAAI,EAAE,SAAS;gBACf,WAAW,EACT,qIAAqI;gBACvI,qEAAqE;gBACrE,uEAAuE;gBACvE,qEAAqE;gBACrE,gCAAgC;gBAChC,eAAe,EAAE,IAAI;gBACrB,aAAa,EAAE,SAAS;gBACxB,sEAAsE;gBACtE,0EAA0E;gBAC1E,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN;4BACE,IAAI,EAAE,UAAU;4BAChB,KAAK,EAAE,WAAW;4BAClB,QAAQ,EAAE,iBAAiB;4BAC3B,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,IAAI;4BACZ,WAAW,EAAE,eAAe;4BAC5B,IAAI,EAAE,uHAAuH;yBAC9H;qBACF;oBACD,aAAa,EAAE,KAAK;oBACpB,OAAO,EACL,8IAA8I;oBAChJ,OAAO,EAAE;wBACP,IAAI,EAAE,KAAK;wBACX,KAAK,EAAE,gBAAgB;wBACvB,IAAI,EAAE,4HAA4H;wBAClI,QAAQ,EAAE,IAAI;wBACd,SAAS,EAAE,4BAA4B;qBACxC;iBACF;gBACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,IAAI,cAAc,CAAC;oBACjB,KAAK,EAAE,QAAQ,EAAE;oBACjB,KAAK,EAAG,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAwB,IAAI,SAAS;oBACnE,MAAM,EAAE,IAAI,CAAC,MAAe;oBAC5B,GAAG,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,QAAQ;wBACnD,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAW,EAAE;wBACxD,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;gBACJ,WAAW,EAAE,KAAK,IAAI,EAAE;oBACtB,qEAAqE;oBACrE,mEAAmE;oBACnE,4DAA4D;oBAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE;wBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;oBAChE,IAAI,CAAC;wBACH,IAAI,CAAC,MAAM,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,IAAI;4BAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;wBACrE,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,MAAM,EACJ,uEAAuE;gCACvE,iBAAiB;gCACjB,8BAA8B;yBACjC,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,MAAM,EAAE,uEAAuE;yBAChF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,kBAAkB,EAAE,OAAO;gBAC3B,WAAW,EAAE;oBACX,KAAK,EAAE;wBACL,WAAW,EACT,6JAA6J;wBAC/J,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,iEAAiE;4BACjE,gEAAgE;4BAChE,kCAAkC;4BAClC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gCACjC,OAAO,GAAG,CAAC,YAAY,EAAE,CAAC;4BAC5B,CAAC;4BACD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;wBAC/B,CAAC;qBACF;oBACD,IAAI,EAAE;wBACJ,WAAW,EACT,2HAA2H;wBAC7H,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,6DAA6D;4BAC7D,gEAAgE;4BAChE,2DAA2D;4BAC3D,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gCACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kHAAkH,CACnH,CAAC;gCACF,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;wBAC1B,CAAC;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,kDAAkD;wBAC/D,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAA+B,CAAC;4BACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gCACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gCAC5C,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;4BAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;4BACzE,OAAO,CAAC,CAAC;wBACX,CAAC;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EACT,gGAAgG;wBAClG,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAA+B,CAAC;4BACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gCACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gCAC5C,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,MAAM,QAAQ,GACZ,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;4BACnF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;4BAChE,MAAM,OAAO,GAAG,oBAAoB,CAClC,MAAM,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAC9C,CAAC;4BACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CACZ;gCACE,eAAe,EAAE,QAAQ;gCACzB,gBAAgB,EAAE,mBAAmB,CAAC,UAAU,CAAC;gCACjD,iBAAiB,EAAE,OAAO;6BAC3B,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;4BACF,OAAO,CAAC,CAAC;wBACX,CAAC;qBACF;iBACF;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Vault keys + env overrides + validators shared by the channel, its
+ * subcommands, and the interactive setup wizard. Kept in their own module so
+ * the wizard / pair-flow helpers can import them without pulling in the
+ * plugin's full index. The names here are the single source of truth for what
+ * the channel reads at boot (mirrored by the desktop channel catalog).
+ */
+import { z } from '@moxxy/sdk';
+/** Vault key for the Discord bot token. */
+export declare const DISCORD_TOKEN_KEY = "discord_bot_token";
+/** Vault key for the paired (authorized) Discord user id — the sole principal
+ *  allowed to drive the session. */
+export declare const DISCORD_AUTHORIZED_USER_KEY = "discord_authorized_user_id";
+/** Vault key for the guild-channel allow-list (JSON array of channel ids the
+ *  paired user may drive the bot from, beyond their own DM). */
+export declare const DISCORD_ALLOWED_CHANNELS_KEY = "discord_allowed_channel_ids";
+/**
+ * Vault key for the voice-replies preference. Single-paired-account model, so a
+ * present-flag (`'1'` = on, absent = off) toggled from a DM / allow-listed
+ * channel via `/voice`.
+ */
+export declare const DISCORD_VOICE_REPLIES_KEY = "discord_voice_replies";
+/** Env override for the bot token (beats the vault, matching every other channel). */
+export declare const DISCORD_TOKEN_ENV = "MOXXY_DISCORD_TOKEN";
+/**
+ * Shape-only validation of a Discord bot token: three dot-separated url-safe
+ * base64 segments (id.timestamp.hmac). Connectivity is proven by the gateway
+ * login, not here.
+ */
+export declare const DISCORD_TOKEN_RE: RegExp;
+/** A Discord snowflake id — numeric string, 5..25 digits. */
+export declare const snowflakeSchema: z.ZodString;
+/**
+ * Resolve the bot token: env override first, then the vault (the shared
+ * env→vault resolution in @moxxy/channel-kit). Returns null when neither is
+ * set. Trimmed; never returns an empty string.
+ */
+export declare function resolveBotToken(vault: {
+    get(name: string): Promise<string | null>;
+}): Promise<string | null>;
+/**
+ * Parse the stored authorized-user id. Returns null for a missing OR corrupt
+ * value (anything that isn't a snowflake) so a bad vault write reads as
+ * "unpaired" instead of silently authorizing garbage.
+ */
+export declare function parseAuthorizedUser(raw: string | null | undefined): string | null;
+/**
+ * Parse the stored guild-channel allow-list (a JSON array of snowflakes).
+ * Corrupt/missing values read as the empty list — DENY every guild channel —
+ * rather than throwing or letting junk ids through.
+ */
+export declare function parseAllowedChannels(raw: string | null | undefined): ReadonlyArray<string>;
+/** Serialize the allow-list for the vault (deduplicated, stable order). */
+export declare function serializeAllowedChannels(ids: Iterable<string>): string;
+/** Read the persisted voice-replies preference (`'1'` → on). */
+export declare function loadVoiceReplies(vault: {
+    get(name: string): Promise<string | null>;
+}): Promise<boolean>;
+/** Persist the voice-replies preference: store `'1'` when on, remove it when off. */
+export declare function saveVoiceReplies(vault: {
+    set(name: string, value: string): Promise<void>;
+    delete(name: string): Promise<boolean>;
+}, on: boolean): Promise<void>;
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAG/B,2CAA2C;AAC3C,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD;oCACoC;AACpC,eAAO,MAAM,2BAA2B,+BAA+B,CAAC;AACxE;gEACgE;AAChE,eAAO,MAAM,4BAA4B,gCAAgC,CAAC;AAC1E;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AAEjE,sFAAsF;AACtF,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AAEvD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,QAAgE,CAAC;AAE9F,6DAA6D;AAC7D,eAAO,MAAM,eAAe,aAAoE,CAAC;AAEjG;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAC3C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC3C,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAEzB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAIjF;AAID;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAQ1F;AAED,2EAA2E;AAC3E,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,CAEtE;AAED,gEAAgE;AAChE,wBAAsB,gBAAgB,CAAC,KAAK,EAAE;IAC5C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC3C,GAAG,OAAO,CAAC,OAAO,CAAC,CAEnB;AAED,qFAAqF;AACrF,wBAAsB,gBAAgB,CACpC,KAAK,EAAE;IACL,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxC,EACD,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,IAAI,CAAC,CAGf"}

package/dist/keys.js

@@ -0,0 +1,85 @@
+/**
+ * Vault keys + env overrides + validators shared by the channel, its
+ * subcommands, and the interactive setup wizard. Kept in their own module so
+ * the wizard / pair-flow helpers can import them without pulling in the
+ * plugin's full index. The names here are the single source of truth for what
+ * the channel reads at boot (mirrored by the desktop channel catalog).
+ */
+import { z } from '@moxxy/sdk';
+import { resolveSecret } from '@moxxy/channel-kit';
+/** Vault key for the Discord bot token. */
+export const DISCORD_TOKEN_KEY = 'discord_bot_token';
+/** Vault key for the paired (authorized) Discord user id — the sole principal
+ *  allowed to drive the session. */
+export const DISCORD_AUTHORIZED_USER_KEY = 'discord_authorized_user_id';
+/** Vault key for the guild-channel allow-list (JSON array of channel ids the
+ *  paired user may drive the bot from, beyond their own DM). */
+export const DISCORD_ALLOWED_CHANNELS_KEY = 'discord_allowed_channel_ids';
+/**
+ * Vault key for the voice-replies preference. Single-paired-account model, so a
+ * present-flag (`'1'` = on, absent = off) toggled from a DM / allow-listed
+ * channel via `/voice`.
+ */
+export const DISCORD_VOICE_REPLIES_KEY = 'discord_voice_replies';
+/** Env override for the bot token (beats the vault, matching every other channel). */
+export const DISCORD_TOKEN_ENV = 'MOXXY_DISCORD_TOKEN';
+/**
+ * Shape-only validation of a Discord bot token: three dot-separated url-safe
+ * base64 segments (id.timestamp.hmac). Connectivity is proven by the gateway
+ * login, not here.
+ */
+export const DISCORD_TOKEN_RE = /^[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]{20,}$/;
+/** A Discord snowflake id — numeric string, 5..25 digits. */
+export const snowflakeSchema = z.string().regex(/^\d{5,25}$/, 'expected a Discord snowflake id');
+/**
+ * Resolve the bot token: env override first, then the vault (the shared
+ * env→vault resolution in @moxxy/channel-kit). Returns null when neither is
+ * set. Trimmed; never returns an empty string.
+ */
+export async function resolveBotToken(vault) {
+    return resolveSecret(vault, { envVar: DISCORD_TOKEN_ENV, vaultKey: DISCORD_TOKEN_KEY });
+}
+/**
+ * Parse the stored authorized-user id. Returns null for a missing OR corrupt
+ * value (anything that isn't a snowflake) so a bad vault write reads as
+ * "unpaired" instead of silently authorizing garbage.
+ */
+export function parseAuthorizedUser(raw) {
+    if (!raw)
+        return null;
+    const trimmed = raw.trim();
+    return snowflakeSchema.safeParse(trimmed).success ? trimmed : null;
+}
+const allowedChannelsSchema = z.array(snowflakeSchema);
+/**
+ * Parse the stored guild-channel allow-list (a JSON array of snowflakes).
+ * Corrupt/missing values read as the empty list — DENY every guild channel —
+ * rather than throwing or letting junk ids through.
+ */
+export function parseAllowedChannels(raw) {
+    if (!raw)
+        return [];
+    try {
+        const parsed = allowedChannelsSchema.safeParse(JSON.parse(raw));
+        return parsed.success ? parsed.data : [];
+    }
+    catch {
+        return [];
+    }
+}
+/** Serialize the allow-list for the vault (deduplicated, stable order). */
+export function serializeAllowedChannels(ids) {
+    return JSON.stringify([...new Set(ids)]);
+}
+/** Read the persisted voice-replies preference (`'1'` → on). */
+export async function loadVoiceReplies(vault) {
+    return (await vault.get(DISCORD_VOICE_REPLIES_KEY)) === '1';
+}
+/** Persist the voice-replies preference: store `'1'` when on, remove it when off. */
+export async function saveVoiceReplies(vault, on) {
+    if (on)
+        await vault.set(DISCORD_VOICE_REPLIES_KEY, '1');
+    else
+        await vault.delete(DISCORD_VOICE_REPLIES_KEY);
+}
+//# sourceMappingURL=keys.js.map

package/dist/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,2CAA2C;AAC3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AACrD;oCACoC;AACpC,MAAM,CAAC,MAAM,2BAA2B,GAAG,4BAA4B,CAAC;AACxE;gEACgE;AAChE,MAAM,CAAC,MAAM,4BAA4B,GAAG,6BAA6B,CAAC;AAC1E;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAEjE,sFAAsF;AACtF,MAAM,CAAC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,6DAA6D,CAAC;AAE9F,6DAA6D;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,iCAAiC,CAAC,CAAC;AAEjG;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAErC;IACC,OAAO,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAA8B;IAChE,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC;AAED,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AAEvD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAA8B;IACjE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,wBAAwB,CAAC,GAAqB;IAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAEtC;IACC,OAAO,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,KAAK,GAAG,CAAC;AAC9D,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAGC,EACD,EAAW;IAEX,IAAI,EAAE;QAAE,MAAM,KAAK,CAAC,GAAG,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;;QACnD,MAAM,KAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;AACrD,CAAC"}

package/dist/pair-flow.d.ts

@@ -0,0 +1,16 @@
+import { type ChannelSubcommandContext } from '@moxxy/sdk';
+/**
+ * Drive the DM code pairing flow end-to-end in a terminal.
+ *
+ * Steps:
+ *   1. Build a DiscordChannel from the subcommand ctx and wire the session's
+ *      permission resolver.
+ *   2. Start the bot with the pairing window armed (`pair: true`).
+ *   3. Tell the user to DM the bot (from the account that should own it) —
+ *      the bot replies to that DM with a one-time code.
+ *   4. Prompt for the code here; on match that account is authorized and
+ *      persisted.
+ *   5. Keep the bot running until Ctrl+C (mirrors the Telegram pair flow).
+ */
+export declare function runPairFlow(ctx: ChannelSubcommandContext): Promise<number>;
+//# sourceMappingURL=pair-flow.d.ts.map

package/dist/pair-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair-flow.d.ts","sourceRoot":"","sources":["../src/pair-flow.ts"],"names":[],"mappings":"AACA,OAAO,EAA0B,KAAK,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAWnF;;;;;;;;;;;;GAYG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgGhF"}

package/dist/pair-flow.js

@@ -0,0 +1,109 @@
+import { isCancel, log, outro, spinner, text } from '@clack/prompts';
+import { exitAfterPairRequested } from '@moxxy/sdk';
+import { DiscordChannel } from './channel.js';
+// Tiny zero-dep ANSI dim helper, so this flow stays inside the plugin.
+const ANSI = process.stdout.isTTY && !process.env.NO_COLOR;
+const dim = (s) => (ANSI ? `\x1b[2m${s}\x1b[22m` : s);
+/** How many wrong codes the operator may paste before we give up. */
+const MAX_CODE_ATTEMPTS = 5;
+/**
+ * Drive the DM code pairing flow end-to-end in a terminal.
+ *
+ * Steps:
+ *   1. Build a DiscordChannel from the subcommand ctx and wire the session's
+ *      permission resolver.
+ *   2. Start the bot with the pairing window armed (`pair: true`).
+ *   3. Tell the user to DM the bot (from the account that should own it) —
+ *      the bot replies to that DM with a one-time code.
+ *   4. Prompt for the code here; on match that account is authorized and
+ *      persisted.
+ *   5. Keep the bot running until Ctrl+C (mirrors the Telegram pair flow).
+ */
+export async function runPairFlow(ctx) {
+    const session = ctx.session;
+    const channel = new DiscordChannel({
+        vault: ctx.deps.vault,
+        token: ctx.deps.options?.['token'] ?? undefined,
+        logger: ctx.deps.logger,
+    });
+    session.setPermissionResolver(channel.permissionResolver);
+    outro(dim('starting the bot with a pairing window armed...'));
+    const handle = await channel.start({ session, pair: true });
+    const stopBot = async () => {
+        try {
+            await handle.stop('wizard');
+        }
+        catch {
+            /* ignore */
+        }
+    };
+    // Already paired (no window armed): nothing to confirm. Tell the user how
+    // to re-pair rather than prompting for a code that can never arrive.
+    if (channel.connected) {
+        log.info('This bot is already paired. Run `moxxy channels discord unpair` first to pair a different account.');
+        await stopBot();
+        return 0;
+    }
+    if (channel.requestUrl) {
+        log.info(`Invite the bot to a server (needed once so you can DM it):\n  ${channel.requestUrl}`);
+    }
+    log.info('Now DM the bot from YOUR Discord account (any message). It replies with a one-time code — paste that code below.');
+    // Graceful Ctrl-C while waiting (or once running): stop the bot and exit.
+    let stopping = false;
+    const shutdown = async () => {
+        if (stopping)
+            return;
+        stopping = true;
+        await stopBot();
+        await session.close('SIGINT').catch(() => undefined);
+        process.exit(0);
+    };
+    const onSignal = () => void shutdown();
+    process.once('SIGINT', onSignal);
+    process.once('SIGTERM', onSignal);
+    try {
+        let paired = false;
+        for (let attempt = 0; attempt < MAX_CODE_ATTEMPTS && !paired; attempt++) {
+            const code = await text({
+                message: 'Paste the pairing code from the bot\'s DM reply',
+                placeholder: '6-digit code',
+                validate: (v) => (!v || !v.trim() ? 'required' : undefined),
+            });
+            if (isCancel(code)) {
+                log.info('Pairing cancelled.');
+                await stopBot();
+                return 0;
+            }
+            const result = await channel.confirmPairingCode(String(code));
+            if (result.ok) {
+                paired = true;
+                log.success(`Paired ✓ — Discord user ${result.userId} is authorized.`);
+                break;
+            }
+            log.warn(result.message);
+        }
+        if (!paired) {
+            log.error('Too many failed attempts — pairing aborted. Run `moxxy discord pair` to retry.');
+            await stopBot();
+            return 1;
+        }
+        if (exitAfterPairRequested(ctx)) {
+            // Orchestrated pairing (`moxxy onboard`): hand control back — the
+            // caller starts the bot under its own service afterwards.
+            await stopBot();
+            return 0;
+        }
+        const spin = spinner();
+        spin.start('Bot is running. Press Ctrl+C to stop.');
+        // Only reached if the bot stops on its own (a signal path exits via
+        // shutdown()).
+        await handle.running;
+        spin.stop('bot stopped.');
+        return 0;
+    }
+    finally {
+        process.removeListener('SIGINT', onSignal);
+        process.removeListener('SIGTERM', onSignal);
+    }
+}
+//# sourceMappingURL=pair-flow.js.map

package/dist/pair-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair-flow.js","sourceRoot":"","sources":["../src/pair-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAiC,MAAM,YAAY,CAAC;AAEnF,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,uEAAuE;AACvE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC3D,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtE,qEAAqE;AACrE,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAA6B;IAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC;QACjC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAmB;QACnC,KAAK,EAAG,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAwB,IAAI,SAAS;QACvE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAe;KACjC,CAAC,CAAC;IACH,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE1D,KAAK,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5D,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC,CAAC;IAEF,0EAA0E;IAC1E,qEAAqE;IACrE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CACN,oGAAoG,CACrG,CAAC;QACF,MAAM,OAAO,EAAE,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,iEAAiE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,GAAG,CAAC,IAAI,CACN,kHAAkH,CACnH,CAAC;IAEF,0EAA0E;IAC1E,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,OAAO,EAAE,CAAC;QAChB,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,GAAS,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAElC,IAAI,CAAC;QACH,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YACxE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;gBACtB,OAAO,EAAE,iDAAiD;gBAC1D,WAAW,EAAE,cAAc;gBAC3B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;aAC5D,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAC/B,MAAM,OAAO,EAAE,CAAC;gBAChB,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,MAAM,GAAG,IAAI,CAAC;gBACd,GAAG,CAAC,OAAO,CAAC,2BAA2B,MAAM,CAAC,MAAM,iBAAiB,CAAC,CAAC;gBACvE,MAAM;YACR,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,KAAK,CAAC,gFAAgF,CAAC,CAAC;YAC5F,MAAM,OAAO,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,kEAAkE;YAClE,0DAA0D;YAC1D,MAAM,OAAO,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACpD,oEAAoE;QACpE,eAAe;QACf,MAAM,MAAM,CAAC,OAAO,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/pairing.d.ts

@@ -0,0 +1,83 @@
+import { type HostCodeState } from '@moxxy/channel-kit';
+/**
+ * Discord pairing — the kit's host-code machine, driven over DM in the
+ * "bot replies with a code, operator pastes it in the terminal" direction.
+ *
+ * Flow (the wizard/`moxxy discord pair` arms it):
+ *   1. The channel starts with a pairing window ARMED (no code yet).
+ *   2. An unauthorized user DMs the bot → we mint a one-time code bound to
+ *      THAT user ({@link mintCodeForPeer} = `openHostCodeWindow` with the
+ *      DM-ing user recorded as the pending peer) and DM the code back.
+ *   3. The operator pastes the code into the terminal wizard →
+ *      {@link confirmPendingCode} (`submitPeerCode` against the pending peer).
+ *      On match the DM-ing user becomes the authorized principal.
+ *
+ * Security property: the code only ever lives in the candidate's DM, so
+ * pasting it in the terminal proves the operator controls (or trusts) that
+ * Discord account. A different user DM-ing while armed re-mints the window
+ * for themselves — which STALES the earlier code, so the operator's paste of
+ * the legitimate code then mismatches and pairing simply retries; an attacker
+ * can never be authorized unless the operator pastes the ATTACKER's code
+ * (which only exists in the attacker's DM).
+ *
+ * The transitions live in `@moxxy/channel-kit` (generic over the peer id —
+ * a Discord user id string here); this module keeps the Discord-shaped state
+ * (armed flag + pending peer) and maps the kit's semantic action kinds to
+ * Discord-worded messages.
+ */
+export type DiscordPairingPhase = 'idle' | 'armed' | 'awaiting-host-code' | 'paired' | 'expired';
+export interface DiscordPairingState {
+    /** Kit machine state; peer = Discord user id. */
+    readonly kit: HostCodeState<string>;
+    /** A pairing window is armed (codes will be minted for DM-ing users). */
+    readonly armed: boolean;
+    /** The user the CURRENT code was minted for (null when none outstanding). */
+    readonly pendingUserId: string | null;
+}
+export interface DiscordPairingDecision {
+    readonly state: DiscordPairingState;
+    readonly action: {
+        kind: 'code-minted';
+        userId: string;
+        code: string;
+    } | {
+        kind: 'paired';
+        userId: string;
+    } | {
+        kind: 'still-paired';
+        userId: string;
+    } | {
+        kind: 'reject';
+        message: string;
+    } | {
+        kind: 'mismatch';
+        message: string;
+    } | {
+        kind: 'not-pending';
+        message: string;
+    } | {
+        kind: 'expired';
+        message: string;
+    };
+}
+export declare function createDiscordPairingState(opts?: {
+    authorizedUserId?: string | null;
+}): DiscordPairingState;
+export declare function pairingPhase(state: DiscordPairingState): DiscordPairingPhase;
+/** Arm the pairing window: DM-ing users will now be issued one-time codes. */
+export declare function armPairing(state: DiscordPairingState): DiscordPairingState;
+export declare function isUserAuthorized(state: DiscordPairingState, userId: string): boolean;
+export declare function clearDiscordPairing(state: DiscordPairingState): DiscordPairingState;
+/**
+ * An unauthorized user DMed the bot while a window may be armed. Mints a
+ * one-time code bound to that user (re-arming replaces any earlier pending
+ * code — see the module doc for why that fails safe) or rejects with the
+ * appropriate wording.
+ */
+export declare function mintCodeForPeer(state: DiscordPairingState, userId: string, code?: string): DiscordPairingDecision;
+/**
+ * The operator pasted a code into the terminal wizard. Compared against the
+ * code minted for the CURRENT pending user; on match that user is authorized.
+ */
+export declare function confirmPendingCode(state: DiscordPairingState, rawCode: string, now?: number): DiscordPairingDecision;
+//# sourceMappingURL=pairing.d.ts.map

package/dist/pairing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../src/pairing.ts"],"names":[],"mappings":"AACA,OAAO,EAQL,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,GAAG,oBAAoB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEjG,MAAM,WAAW,mBAAmB;IAClC,iDAAiD;IACjD,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,MAAM,EACX;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GACrD;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAClC;QAAE,IAAI,EAAE,cAAc,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GACxC;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GACnC;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GACrC;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GACxC;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAUD,wBAAgB,yBAAyB,CACvC,IAAI,GAAE;IAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GAC9C,mBAAmB,CAMrB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,mBAAmB,GAAG,mBAAmB,CAK5E;AAED,8EAA8E;AAC9E,wBAAgB,UAAU,CAAC,KAAK,EAAE,mBAAmB,GAAG,mBAAmB,CAE1E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAEpF;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,mBAAmB,CAMnF;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,MAAsB,GAC3B,sBAAsB,CAgBxB;AAiCD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAmB,GACvB,sBAAsB,CAMxB"}