@moxxy/plugin-channel-discord 0.27.0

package/dist/pairing.js

@@ -0,0 +1,98 @@
+import { randomCode } from '@moxxy/plugin-vault';
+import { clearHostCodePairing, createHostCodeState, greetPeer, isPeerAuthorized, openHostCodeWindow, submitPeerCode, } from '@moxxy/channel-kit';
+const MSG_FOREIGN_USER = 'This bot is paired with a different Discord account. Access denied.';
+const MSG_NOT_ARMED = 'No pairing window is open. Run `moxxy discord pair` in the moxxy terminal first, then DM me again.';
+const MSG_NOT_PENDING = 'No pairing code is outstanding. DM the bot first — it replies with a code.';
+const MSG_MISMATCH = "That code didn't match. Check the code in the bot's most recent DM reply and try again.";
+const MSG_EXPIRED = 'The pairing code expired. DM the bot again for a fresh one.';
+export function createDiscordPairingState(opts = {}) {
+    return {
+        kit: createHostCodeState({ authorizedPeer: opts.authorizedUserId ?? null }),
+        armed: false,
+        pendingUserId: null,
+    };
+}
+export function pairingPhase(state) {
+    if (state.kit.phase === 'paired')
+        return 'paired';
+    if (state.kit.phase === 'awaiting-host-code')
+        return 'awaiting-host-code';
+    if (state.kit.phase === 'expired')
+        return 'expired';
+    return state.armed ? 'armed' : 'idle';
+}
+/** Arm the pairing window: DM-ing users will now be issued one-time codes. */
+export function armPairing(state) {
+    return { ...state, armed: true };
+}
+export function isUserAuthorized(state, userId) {
+    return isPeerAuthorized(state.kit, userId);
+}
+export function clearDiscordPairing(state) {
+    return {
+        kit: clearHostCodePairing(state.kit),
+        armed: state.armed,
+        pendingUserId: null,
+    };
+}
+/**
+ * An unauthorized user DMed the bot while a window may be armed. Mints a
+ * one-time code bound to that user (re-arming replaces any earlier pending
+ * code — see the module doc for why that fails safe) or rejects with the
+ * appropriate wording.
+ */
+export function mintCodeForPeer(state, userId, code = randomCode(6)) {
+    const greeted = greetPeer(state.kit, userId);
+    if (greeted.action.kind === 'still-paired') {
+        return { state, action: { kind: 'still-paired', userId } };
+    }
+    if (greeted.action.kind === 'rejected-foreign-peer') {
+        return { state, action: { kind: 'reject', message: MSG_FOREIGN_USER } };
+    }
+    if (!state.armed) {
+        return { state, action: { kind: 'reject', message: MSG_NOT_ARMED } };
+    }
+    const opened = openHostCodeWindow(state.kit, { code });
+    return {
+        state: { kit: opened.state, armed: true, pendingUserId: userId },
+        action: { kind: 'code-minted', userId, code: opened.code },
+    };
+}
+/** Map a kit action to the Discord-worded decision, reusing `state` when the
+ *  machine didn't transition. */
+function mapConfirmAction(state, kitState, action) {
+    switch (action.kind) {
+        case 'paired':
+            return {
+                state: { kit: kitState, armed: false, pendingUserId: null },
+                action: { kind: 'paired', userId: action.peer },
+            };
+        case 'still-paired':
+            return { state, action: { kind: 'still-paired', userId: action.peer } };
+        case 'rejected-foreign-peer':
+            return { state, action: { kind: 'reject', message: MSG_FOREIGN_USER } };
+        case 'window-open-hint':
+        case 'no-window':
+        case 'not-pending':
+            return { state, action: { kind: 'not-pending', message: MSG_NOT_PENDING } };
+        case 'expired':
+            return {
+                state: { kit: kitState, armed: state.armed, pendingUserId: null },
+                action: { kind: 'expired', message: MSG_EXPIRED },
+            };
+        case 'mismatch':
+            return { state, action: { kind: 'mismatch', message: MSG_MISMATCH } };
+    }
+}
+/**
+ * The operator pasted a code into the terminal wizard. Compared against the
+ * code minted for the CURRENT pending user; on match that user is authorized.
+ */
+export function confirmPendingCode(state, rawCode, now = Date.now()) {
+    if (state.pendingUserId == null) {
+        return { state, action: { kind: 'not-pending', message: MSG_NOT_PENDING } };
+    }
+    const decision = submitPeerCode(state.kit, state.pendingUserId, rawCode, now);
+    return mapConfirmAction(state, decision.state, decision.action);
+}
+//# sourceMappingURL=pairing.js.map

package/dist/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../src/pairing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,GAGf,MAAM,oBAAoB,CAAC;AAoD5B,MAAM,gBAAgB,GAAG,qEAAqE,CAAC;AAC/F,MAAM,aAAa,GACjB,oGAAoG,CAAC;AACvG,MAAM,eAAe,GAAG,4EAA4E,CAAC;AACrG,MAAM,YAAY,GAChB,yFAAyF,CAAC;AAC5F,MAAM,WAAW,GAAG,6DAA6D,CAAC;AAElF,MAAM,UAAU,yBAAyB,CACvC,OAA6C,EAAE;IAE/C,OAAO;QACL,GAAG,EAAE,mBAAmB,CAAS,EAAE,cAAc,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI,EAAE,CAAC;QACnF,KAAK,EAAE,KAAK;QACZ,aAAa,EAAE,IAAI;KACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAA0B;IACrD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAClD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,oBAAoB;QAAE,OAAO,oBAAoB,CAAC;IAC1E,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CAAC,KAA0B;IACnD,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAA0B,EAAE,MAAc;IACzE,OAAO,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAA0B;IAC5D,OAAO;QACL,GAAG,EAAE,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC;QACpC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,aAAa,EAAE,IAAI;KACpB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,KAA0B,EAC1B,MAAc,EACd,OAAe,UAAU,CAAC,CAAC,CAAC;IAE5B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,OAAO;QACL,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE;QAChE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;KAC3D,CAAC;AACJ,CAAC;AAED;iCACiC;AACjC,SAAS,gBAAgB,CACvB,KAA0B,EAC1B,QAA+B,EAC/B,MAA8B;IAE9B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO;gBACL,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;gBAC3D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;aAChD,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1E,KAAK,uBAAuB;YAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,CAAC;QAC1E,KAAK,kBAAkB,CAAC;QACxB,KAAK,WAAW,CAAC;QACjB,KAAK,aAAa;YAChB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC;QAC9E,KAAK,SAAS;YACZ,OAAO;gBACL,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;gBACjE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE;aAClD,CAAC;QACJ,KAAK,UAAU;YACb,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA0B,EAC1B,OAAe,EACf,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,IAAI,KAAK,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QAChC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9E,OAAO,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC"}

package/dist/permission.d.ts

@@ -0,0 +1,30 @@
+import type { PendingToolCall, PermissionContext, PermissionDecision, PermissionResolver } from '@moxxy/sdk';
+export interface PendingPermission {
+    readonly callId: string;
+    readonly call: PendingToolCall;
+    readonly ctx: PermissionContext;
+    readonly resolve: (decision: PermissionDecision) => void;
+}
+/**
+ * Permission resolver that defers each tool call to an external decider (the
+ * Discord bot, which renders a button row and waits for a click). The channel
+ * registers an interaction handler that invokes `resolvePending(callId,
+ * decision)` when the paired user clicks a button. Mirrors the Telegram
+ * resolver's shape (pending map + setDecider + abortAll) — the button
+ * click arrives on a different code path than the check, so the shared
+ * `createDeferredPermissionResolver` (whose prompt must RETURN the decision)
+ * doesn't fit; the abortAll contract is preserved here instead.
+ */
+export declare class DiscordPermissionResolver implements PermissionResolver {
+    readonly name = "discord";
+    private readonly pending;
+    private readonly sessionAllows;
+    private deciderFn;
+    setDecider(fn: (call: PendingToolCall, ctx: PermissionContext) => Promise<void>): void;
+    check(call: PendingToolCall, ctx: PermissionContext): Promise<PermissionDecision>;
+    /** Called by the interaction handler when a permission button is clicked. */
+    resolvePending(callId: string, decision: PermissionDecision): boolean;
+    /** Deny every in-flight prompt — MUST run on channel stop so callers don't hang. */
+    abortAll(reason?: string): void;
+}
+//# sourceMappingURL=permission.d.ts.map

package/dist/permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../src/permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,CAAC;CAC1D;AAED;;;;;;;;;GASG;AACH,qBAAa,yBAA0B,YAAW,kBAAkB;IAClE,QAAQ,CAAC,IAAI,aAAa;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAChE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,SAAS,CACV;IAEP,UAAU,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIhF,KAAK,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAkBvF,6EAA6E;IAC7E,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,OAAO;IAQrE,oFAAoF;IACpF,QAAQ,CAAC,MAAM,SAAmB,GAAG,IAAI;CAM1C"}

package/dist/permission.js

@@ -0,0 +1,54 @@
+/**
+ * Permission resolver that defers each tool call to an external decider (the
+ * Discord bot, which renders a button row and waits for a click). The channel
+ * registers an interaction handler that invokes `resolvePending(callId,
+ * decision)` when the paired user clicks a button. Mirrors the Telegram
+ * resolver's shape (pending map + setDecider + abortAll) — the button
+ * click arrives on a different code path than the check, so the shared
+ * `createDeferredPermissionResolver` (whose prompt must RETURN the decision)
+ * doesn't fit; the abortAll contract is preserved here instead.
+ */
+export class DiscordPermissionResolver {
+    name = 'discord';
+    pending = new Map();
+    sessionAllows = new Set();
+    deciderFn = null;
+    setDecider(fn) {
+        this.deciderFn = fn;
+    }
+    async check(call, ctx) {
+        if (this.sessionAllows.has(call.name)) {
+            return { mode: 'allow_session', reason: 'allow_session previously granted' };
+        }
+        if (!this.deciderFn) {
+            return { mode: 'deny', reason: 'no decider attached (bot not running)' };
+        }
+        const decision = await new Promise((resolve) => {
+            this.pending.set(call.callId, { callId: call.callId, call, ctx, resolve });
+            this.deciderFn(call, ctx).catch((err) => {
+                this.pending.delete(call.callId);
+                resolve({ mode: 'deny', reason: err instanceof Error ? err.message : String(err) });
+            });
+        });
+        if (decision.mode === 'allow_session')
+            this.sessionAllows.add(call.name);
+        return decision;
+    }
+    /** Called by the interaction handler when a permission button is clicked. */
+    resolvePending(callId, decision) {
+        const pending = this.pending.get(callId);
+        if (!pending)
+            return false;
+        this.pending.delete(callId);
+        pending.resolve(decision);
+        return true;
+    }
+    /** Deny every in-flight prompt — MUST run on channel stop so callers don't hang. */
+    abortAll(reason = 'channel closed') {
+        for (const pending of this.pending.values()) {
+            pending.resolve({ mode: 'deny', reason });
+        }
+        this.pending.clear();
+    }
+}
+//# sourceMappingURL=permission.js.map

package/dist/permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.js","sourceRoot":"","sources":["../src/permission.ts"],"names":[],"mappings":"AAcA;;;;;;;;;GASG;AACH,MAAM,OAAO,yBAAyB;IAC3B,IAAI,GAAG,SAAS,CAAC;IACT,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC/C,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,SAAS,GACf,IAAI,CAAC;IAEP,UAAU,CAAC,EAAoE;QAC7E,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAqB,EAAE,GAAsB;QACvD,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;QAC3E,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,EAAE;YACjE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC,SAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACvC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe;YAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,6EAA6E;IAC7E,cAAc,CAAC,MAAc,EAAE,QAA4B;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oFAAoF;IACpF,QAAQ,CAAC,MAAM,GAAG,gBAAgB;QAChC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/render.d.ts

@@ -0,0 +1,34 @@
+import type { MoxxyEvent } from '@moxxy/sdk';
+/**
+ * Discord messages cap at 2000 chars; leave margin for the fence-reopen text a
+ * split may prepend to a tail part.
+ */
+export declare const DISCORD_MESSAGE_LIMIT = 1900;
+export declare class DiscordTurnRenderer {
+    private chunks;
+    private finalAssistant;
+    private readonly tools;
+    private notices;
+    private errorLine;
+    private lastFrame;
+    /** Returns true when the event changed the frame (schedule an edit). */
+    accept(event: MoxxyEvent): boolean;
+    snapshot(): string;
+    /** The assistant body alone (no activity/error block) — the text a voice
+     *  reply speaks. Empty for a tool-only turn. */
+    finalText(): string;
+    reset(): void;
+    private renderActivity;
+}
+/**
+ * Split Discord markdown into <=`limit`-char parts that each render sanely on
+ * their own (mirrors `splitForTelegram`'s shape, adapted from HTML tags to the
+ * one markdown construct that breaks when cut: a ``` code fence). Cuts prefer
+ * a newline at/under the budget; if the cut lands inside an open fence, the
+ * fence is closed at the head part's end and reopened (with its original
+ * info-string, e.g. ```diff) at the tail's start, so every part is
+ * independently valid. Parts are separate Discord messages, so the newline a
+ * cut lands on is consumed (not carried into the tail).
+ */
+export declare function splitForDiscord(text: string, limit?: number): string[];
+//# sourceMappingURL=render.d.ts.map

package/dist/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;;GAGG;AACH,eAAO,MAAM,qBAAqB,OAAQ,CAAC;AA8B3C,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,cAAc,CAAuB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,SAAS,CAAM;IAEvB,wEAAwE;IACxE,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO;IAkDlC,QAAQ,IAAI,MAAM;IAUlB;oDACgD;IAChD,SAAS,IAAI,MAAM;IAInB,KAAK,IAAI,IAAI;IASb,OAAO,CAAC,cAAc;CAcvB;AA2CD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,MAA8B,GAAG,MAAM,EAAE,CAwB7F"}

package/dist/render.js

@@ -0,0 +1,204 @@
+/**
+ * Discord messages cap at 2000 chars; leave margin for the fence-reopen text a
+ * split may prepend to a tail part.
+ */
+export const DISCORD_MESSAGE_LIMIT = 1_900;
+export class DiscordTurnRenderer {
+    chunks = [];
+    finalAssistant = null;
+    tools = new Map();
+    notices = [];
+    errorLine = null;
+    lastFrame = '';
+    /** Returns true when the event changed the frame (schedule an edit). */
+    accept(event) {
+        switch (event.type) {
+            case 'assistant_chunk':
+                this.chunks.push(event.delta);
+                break;
+            case 'assistant_message':
+                this.finalAssistant = event.content;
+                this.chunks = [];
+                break;
+            case 'tool_call_requested':
+                this.tools.set(String(event.callId), {
+                    name: event.name,
+                    inputPreview: previewArgs(event.input),
+                    status: { kind: 'pending', startedAt: Date.now() },
+                });
+                break;
+            case 'tool_call_denied': {
+                const entry = this.tools.get(String(event.callId));
+                if (entry)
+                    entry.status = { kind: 'denied', reason: event.reason };
+                break;
+            }
+            case 'tool_result': {
+                const entry = this.tools.get(String(event.callId));
+                if (!entry)
+                    break;
+                const started = entry.status.kind === 'pending' ? entry.status.startedAt : Date.now();
+                const ms = Date.now() - started;
+                entry.status = event.ok
+                    ? { kind: 'ok', ms }
+                    : {
+                        kind: 'err',
+                        ms,
+                        message: `${event.error?.kind ?? 'error'}: ${event.error?.message ?? ''}`,
+                    };
+                break;
+            }
+            case 'skill_invoked':
+                this.notices.push(`💡 skill: **${event.name}**`);
+                break;
+            case 'error':
+                this.errorLine = `❗ **${event.kind}**: ${event.message}`;
+                break;
+            default:
+                break;
+        }
+        const frame = this.snapshot();
+        const changed = frame !== this.lastFrame;
+        this.lastFrame = frame;
+        return changed;
+    }
+    snapshot() {
+        const parts = [];
+        const activity = this.renderActivity();
+        if (activity)
+            parts.push(activity);
+        const body = this.finalText();
+        if (body)
+            parts.push(body);
+        if (this.errorLine)
+            parts.push(this.errorLine);
+        return parts.join('\n\n').trim();
+    }
+    /** The assistant body alone (no activity/error block) — the text a voice
+     *  reply speaks. Empty for a tool-only turn. */
+    finalText() {
+        return (this.finalAssistant ?? this.chunks.join('')).trim();
+    }
+    reset() {
+        this.chunks = [];
+        this.finalAssistant = null;
+        this.tools.clear();
+        this.notices = [];
+        this.errorLine = null;
+        this.lastFrame = '';
+    }
+    renderActivity() {
+        const lines = [];
+        const tools = [...this.tools.values()];
+        const visible = tools.slice(-10);
+        const hidden = tools.length - visible.length;
+        if (hidden > 0)
+            lines.push(`… ${hidden} earlier tool call${hidden === 1 ? '' : 's'} hidden`);
+        for (const t of visible) {
+            const args = t.inputPreview ? ` (${t.inputPreview})` : '';
+            lines.push(`- \`${t.name}\`${args} — ${statusBadge(t.status)}`);
+        }
+        for (const n of this.notices.slice(-5))
+            lines.push(n);
+        if (lines.length === 0)
+            return null;
+        return lines.map((l) => `> ${l}`).join('\n');
+    }
+}
+function statusBadge(status) {
+    switch (status.kind) {
+        case 'pending':
+            return 'running…';
+        case 'ok':
+            return `done ${fmtElapsed(status.ms)}`;
+        case 'err':
+            return `error: ${status.message.slice(0, 80)}`;
+        case 'denied':
+            return `denied: ${status.reason.slice(0, 80)}`;
+    }
+}
+function fmtElapsed(ms) {
+    if (ms < 1000)
+        return `${ms}ms`;
+    if (ms < 60_000)
+        return `${(ms / 1000).toFixed(1)}s`;
+    return `${Math.floor(ms / 60_000)}m ${Math.floor((ms % 60_000) / 1000)}s`;
+}
+function truncJson(value, max = 60) {
+    const s = typeof value === 'string' ? value : (JSON.stringify(value) ?? '');
+    if (s.length <= max)
+        return s;
+    return s.slice(0, max - 1) + '…';
+}
+function previewArgs(input) {
+    if (input == null || (typeof input === 'object' && Object.keys(input).length === 0)) {
+        return '';
+    }
+    if (typeof input === 'string')
+        return truncJson(input);
+    try {
+        const obj = input;
+        const keys = Object.keys(obj).slice(0, 3);
+        const pairs = keys.map((k) => `${k}=${truncJson(obj[k], 20)}`);
+        const tail = Object.keys(obj).length > keys.length ? ', …' : '';
+        return pairs.join(', ') + tail;
+    }
+    catch {
+        return truncJson(input);
+    }
+}
+/**
+ * Split Discord markdown into <=`limit`-char parts that each render sanely on
+ * their own (mirrors `splitForTelegram`'s shape, adapted from HTML tags to the
+ * one markdown construct that breaks when cut: a ``` code fence). Cuts prefer
+ * a newline at/under the budget; if the cut lands inside an open fence, the
+ * fence is closed at the head part's end and reopened (with its original
+ * info-string, e.g. ```diff) at the tail's start, so every part is
+ * independently valid. Parts are separate Discord messages, so the newline a
+ * cut lands on is consumed (not carried into the tail).
+ */
+export function splitForDiscord(text, limit = DISCORD_MESSAGE_LIMIT) {
+    if (text.length <= limit)
+        return text ? [text] : [];
+    const out = [];
+    /** The fence opener carried over from the previous part (reopened at its head). */
+    let carryFence = null;
+    let remaining = text;
+    while (remaining.length > limit) {
+        const prefix = carryFence ? carryFence + '\n' : '';
+        // The reopened fence + a possible closing fence eat into the budget.
+        const budget = Math.max(1, limit - prefix.length - '\n```'.length);
+        let idx = Math.min(budget, remaining.length);
+        const nl = remaining.lastIndexOf('\n', idx);
+        if (nl > 0)
+            idx = nl;
+        const openFence = openFenceAt(remaining, idx, carryFence);
+        const head = prefix + remaining.slice(0, idx) + (openFence ? '\n```' : '');
+        out.push(head);
+        carryFence = openFence;
+        remaining = remaining.slice(idx);
+        // Drop the leading newline the cut left behind (it was consumed by the cut
+        // point, and the reopened fence supplies its own).
+        if (remaining.startsWith('\n'))
+            remaining = remaining.slice(1);
+    }
+    if (remaining)
+        out.push((carryFence ? carryFence + '\n' : '') + remaining);
+    return out;
+}
+/**
+ * Is a ``` fence open at `idx`? Returns the fence's opening line (e.g.
+ * "```diff") when open, else null. `seed` is the fence carried into this part
+ * from the previous split (the text below it starts inside that fence).
+ */
+function openFenceAt(text, idx, seed) {
+    let open = seed;
+    const scan = text.slice(0, idx);
+    const fenceRe = /(?:^|\n)(```[^\n]*)/g;
+    let m;
+    while ((m = fenceRe.exec(scan)) !== null) {
+        open = open === null ? m[1] : null;
+    }
+    return open;
+}
+//# sourceMappingURL=render.js.map

package/dist/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AA8B3C,MAAM,OAAO,mBAAmB;IACtB,MAAM,GAAa,EAAE,CAAC;IACtB,cAAc,GAAkB,IAAI,CAAC;IAC5B,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC9C,OAAO,GAAa,EAAE,CAAC;IACvB,SAAS,GAAkB,IAAI,CAAC;IAChC,SAAS,GAAG,EAAE,CAAC;IAEvB,wEAAwE;IACxE,MAAM,CAAC,KAAiB;QACtB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,iBAAiB;gBACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC9B,MAAM;YACR,KAAK,mBAAmB;gBACtB,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;gBACpC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;gBACjB,MAAM;YACR,KAAK,qBAAqB;gBACxB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;oBACnC,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC;oBACtC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;iBACnD,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,kBAAkB,CAAC,CAAC,CAAC;gBACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;gBACnD,IAAI,KAAK;oBAAE,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;gBACnE,MAAM;YACR,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;gBACnD,IAAI,CAAC,KAAK;oBAAE,MAAM;gBAClB,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACtF,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;gBAChC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,EAAE;oBACrB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;oBACpB,CAAC,CAAC;wBACE,IAAI,EAAE,KAAK;wBACX,EAAE;wBACF,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,IAAI,OAAO,KAAK,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,EAAE;qBAC1E,CAAC;gBACN,MAAM;YACR,CAAC;YACD,KAAK,eAAe;gBAClB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;gBACjD,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,SAAS,GAAG,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;gBACzD,MAAM;YACR;gBACE,MAAM;QACV,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,QAAQ;QACN,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IAED;oDACgD;IAChD,SAAS;QACP,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAEO,cAAc;QACpB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7C,IAAI,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,qBAAqB,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;QAC7F,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,IAAI,MAAM,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;CACF;AAED,SAAS,WAAW,CAAC,MAAkB;IACrC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC;QACpB,KAAK,IAAI;YACP,OAAO,QAAQ,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACzC,KAAK,KAAK;YACR,OAAO,UAAU,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACjD,KAAK,QAAQ;YACX,OAAO,WAAW,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,EAAU;IAC5B,IAAI,EAAE,GAAG,IAAI;QAAE,OAAO,GAAG,EAAE,IAAI,CAAC;IAChC,IAAI,EAAE,GAAG,MAAM;QAAE,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACrD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;AAC5E,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,GAAG,GAAG,EAAE;IACzC,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;AACnC,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9F,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,QAAgB,qBAAqB;IACjF,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,mFAAmF;IACnF,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,OAAO,SAAS,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,qEAAqE;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,EAAE,GAAG,CAAC;YAAE,GAAG,GAAG,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3E,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,UAAU,GAAG,SAAS,CAAC;QACvB,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,2EAA2E;QAC3E,mDAAmD;QACnD,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;IAC3E,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,GAAW,EAAE,IAAmB;IACjE,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,sBAAsB,CAAC;IACvC,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACzC,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/schema.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Inbound-payload validation (AGENTS.md invariant: zod-validate every inbound
+ * frame/body before it touches the session). discord.js hands us rich class
+ * instances; we extract ONLY the primitive fields the channel consumes into a
+ * plain record and validate + size-cap that, so a malformed/hostile payload is
+ * dropped at the boundary instead of flowing into handlers.
+ */
+import { z } from '@moxxy/sdk';
+/**
+ * Hard cap on inbound message text we accept. Discord caps user messages at
+ * 4000 chars (Nitro); anything past this is not a legitimate prompt, so we
+ * drop it rather than truncate (a silently truncated prompt is worse than a
+ * clear rejection).
+ */
+export declare const MAX_CONTENT_CHARS = 8000;
+/** Hard cap on an inbound audio attachment we will buffer for transcription. */
+export declare const MAX_AUDIO_BYTES: number;
+declare const attachmentSchema: z.ZodObject<{
+    id: z.ZodString;
+    url: z.ZodString;
+    contentType: z.ZodNullable<z.ZodString>;
+    size: z.ZodNumber;
+    name: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    url: string;
+    contentType: string | null;
+    size: number;
+    name: string | null;
+}, {
+    id: string;
+    url: string;
+    contentType: string | null;
+    size: number;
+    name: string | null;
+}>;
+export declare const inboundMessageSchema: z.ZodObject<{
+    id: z.ZodString;
+    /** Raw message text (may be empty for attachment-only messages). */
+    content: z.ZodString;
+    channelId: z.ZodString;
+    /** Null for DMs. */
+    guildId: z.ZodNullable<z.ZodString>;
+    authorId: z.ZodString;
+    authorIsBot: z.ZodBoolean;
+    attachments: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        url: z.ZodString;
+        contentType: z.ZodNullable<z.ZodString>;
+        size: z.ZodNumber;
+        name: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        url: string;
+        contentType: string | null;
+        size: number;
+        name: string | null;
+    }, {
+        id: string;
+        url: string;
+        contentType: string | null;
+        size: number;
+        name: string | null;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    content: string;
+    channelId: string;
+    guildId: string | null;
+    authorId: string;
+    authorIsBot: boolean;
+    attachments: {
+        id: string;
+        url: string;
+        contentType: string | null;
+        size: number;
+        name: string | null;
+    }[];
+}, {
+    id: string;
+    content: string;
+    channelId: string;
+    guildId: string | null;
+    authorId: string;
+    authorIsBot: boolean;
+    attachments: {
+        id: string;
+        url: string;
+        contentType: string | null;
+        size: number;
+        name: string | null;
+    }[];
+}>;
+export type InboundMessage = z.infer<typeof inboundMessageSchema>;
+export type InboundAttachment = z.infer<typeof attachmentSchema>;
+/** The structural slice of a discord.js Message we extract fields from. */
+export interface RawMessageLike {
+    readonly id?: unknown;
+    readonly content?: unknown;
+    readonly channelId?: unknown;
+    readonly guildId?: unknown;
+    readonly author?: {
+        readonly id?: unknown;
+        readonly bot?: unknown;
+    } | null;
+    readonly attachments?: {
+        values?(): IterableIterator<{
+            readonly id?: unknown;
+            readonly url?: unknown;
+            readonly contentType?: unknown;
+            readonly size?: unknown;
+            readonly name?: unknown;
+        }>;
+    } | null;
+}
+/**
+ * Extract + validate the fields we consume from a discord.js Message. Returns
+ * null when the payload doesn't validate (wrong shapes, oversized content,
+ * missing ids) — the caller drops it with a warning.
+ */
+export declare function extractInboundMessage(msg: RawMessageLike): InboundMessage | null;
+export {};
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAG/B;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,OAAQ,CAAC;AAEvC,gFAAgF;AAChF,eAAO,MAAM,eAAe,QAAmB,CAAC;AAEhD,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;EAMpB,CAAC;AAEH,eAAO,MAAM,oBAAoB;;IAE/B,oEAAoE;;;IAGpE,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKpB,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEjE,2EAA2E;AAC3E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,MAAM,CAAC,IAAI,gBAAgB,CAAC;YAC1B,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC;YACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;YACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;SACzB,CAAC,CAAC;KACJ,GAAG,IAAI,CAAC;CACV;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,cAAc,GAAG,IAAI,CA0BhF"}

package/dist/schema.js

@@ -0,0 +1,70 @@
+/**
+ * Inbound-payload validation (AGENTS.md invariant: zod-validate every inbound
+ * frame/body before it touches the session). discord.js hands us rich class
+ * instances; we extract ONLY the primitive fields the channel consumes into a
+ * plain record and validate + size-cap that, so a malformed/hostile payload is
+ * dropped at the boundary instead of flowing into handlers.
+ */
+import { z } from '@moxxy/sdk';
+import { snowflakeSchema } from './keys.js';
+/**
+ * Hard cap on inbound message text we accept. Discord caps user messages at
+ * 4000 chars (Nitro); anything past this is not a legitimate prompt, so we
+ * drop it rather than truncate (a silently truncated prompt is worse than a
+ * clear rejection).
+ */
+export const MAX_CONTENT_CHARS = 8_000;
+/** Hard cap on an inbound audio attachment we will buffer for transcription. */
+export const MAX_AUDIO_BYTES = 20 * 1024 * 1024;
+const attachmentSchema = z.object({
+    id: snowflakeSchema,
+    url: z.string().url().max(2_048),
+    contentType: z.string().max(256).nullable(),
+    size: z.number().int().nonnegative(),
+    name: z.string().max(1_024).nullable(),
+});
+export const inboundMessageSchema = z.object({
+    id: snowflakeSchema,
+    /** Raw message text (may be empty for attachment-only messages). */
+    content: z.string().max(MAX_CONTENT_CHARS),
+    channelId: snowflakeSchema,
+    /** Null for DMs. */
+    guildId: snowflakeSchema.nullable(),
+    authorId: snowflakeSchema,
+    authorIsBot: z.boolean(),
+    attachments: z.array(attachmentSchema).max(16),
+});
+/**
+ * Extract + validate the fields we consume from a discord.js Message. Returns
+ * null when the payload doesn't validate (wrong shapes, oversized content,
+ * missing ids) — the caller drops it with a warning.
+ */
+export function extractInboundMessage(msg) {
+    const attachments = [];
+    try {
+        for (const a of msg.attachments?.values?.() ?? []) {
+            attachments.push({
+                id: a?.id,
+                url: a?.url,
+                contentType: a?.contentType ?? null,
+                size: a?.size,
+                name: a?.name ?? null,
+            });
+        }
+    }
+    catch {
+        return null;
+    }
+    const candidate = {
+        id: msg.id,
+        content: msg.content,
+        channelId: msg.channelId,
+        guildId: msg.guildId ?? null,
+        authorId: msg.author?.id,
+        authorIsBot: msg.author?.bot === true,
+        attachments,
+    };
+    const parsed = inboundMessageSchema.safeParse(candidate);
+    return parsed.success ? parsed.data : null;
+}
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC,gFAAgF;AAChF,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEhD,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,eAAe;IACnB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,eAAe;IACnB,oEAAoE;IACpE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC1C,SAAS,EAAE,eAAe;IAC1B,oBAAoB;IACpB,OAAO,EAAE,eAAe,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,eAAe;IACzB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAC/C,CAAC,CAAC;AAuBH;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAmB;IACvD,MAAM,WAAW,GAAc,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YAClD,WAAW,CAAC,IAAI,CAAC;gBACf,EAAE,EAAE,CAAC,EAAE,EAAE;gBACT,GAAG,EAAE,CAAC,EAAE,GAAG;gBACX,WAAW,EAAE,CAAC,EAAE,WAAW,IAAI,IAAI;gBACnC,IAAI,EAAE,CAAC,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,EAAE,IAAI,IAAI,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG;QAChB,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;QAC5B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE;QACxB,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI;QACrC,WAAW;KACZ,CAAC;IACF,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC"}