@moxxy/plugin-channel-discord 0.27.0

package/dist/setup-wizard.d.ts

@@ -0,0 +1,13 @@
+import type { ChannelSubcommandContext } from '@moxxy/sdk';
+/**
+ * Interactive Discord setup menu — invoked as the channel's
+ * `interactiveCommand` when the user runs `moxxy discord` with no subcommand
+ * in a TTY. Headless invocations bypass it and start the bot directly.
+ *
+ * Menu offers actions appropriate to the current state:
+ *   - no token            -> "Set bot token" + "Quit"
+ *   - token, not paired   -> "Pair a Discord account" + "Change token" + "Quit"
+ *   - token + paired      -> "Start bot" + "Unpair" + "Change token" + "Quit"
+ */
+export declare function runDiscordWizard(ctx: ChannelSubcommandContext): Promise<number>;
+//# sourceMappingURL=setup-wizard.d.ts.map

package/dist/setup-wizard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard.d.ts","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AA2B3D;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAmCrF"}

package/dist/setup-wizard.js

@@ -0,0 +1,133 @@
+import { cancel, intro, isCancel, log, note, outro, password, select } from '@clack/prompts';
+import { DISCORD_ALLOWED_CHANNELS_KEY, DISCORD_AUTHORIZED_USER_KEY, DISCORD_TOKEN_ENV, DISCORD_TOKEN_KEY, DISCORD_TOKEN_RE, parseAllowedChannels, parseAuthorizedUser, } from './keys.js';
+import { runPairFlow } from './pair-flow.js';
+// Tiny zero-dep ANSI helpers (bold + dim) so this wizard stays inside the
+// plugin without depending on the CLI's colors module.
+const ANSI = process.stdout.isTTY && !process.env.NO_COLOR;
+const bold = (s) => (ANSI ? `\x1b[1m${s}\x1b[22m` : s);
+const dim = (s) => (ANSI ? `\x1b[2m${s}\x1b[22m` : s);
+/**
+ * Interactive Discord setup menu — invoked as the channel's
+ * `interactiveCommand` when the user runs `moxxy discord` with no subcommand
+ * in a TTY. Headless invocations bypass it and start the bot directly.
+ *
+ * Menu offers actions appropriate to the current state:
+ *   - no token            -> "Set bot token" + "Quit"
+ *   - token, not paired   -> "Pair a Discord account" + "Change token" + "Quit"
+ *   - token + paired      -> "Start bot" + "Unpair" + "Change token" + "Quit"
+ */
+export async function runDiscordWizard(ctx) {
+    const vault = ctx.deps.vault;
+    intro(bold('moxxy discord setup'));
+    while (true) {
+        const state = await readState(vault);
+        printStatus(state);
+        const action = await pickAction(state);
+        if (action === null) {
+            cancel('cancelled.');
+            return 0;
+        }
+        if (action === 'quit') {
+            outro(dim('done.'));
+            return 0;
+        }
+        if (action === 'set-token') {
+            await actionSetToken(vault);
+            continue;
+        }
+        if (action === 'pair') {
+            return await runPairFlow(ctx);
+        }
+        if (action === 'unpair') {
+            await vault.delete(DISCORD_AUTHORIZED_USER_KEY);
+            log.success('Unpaired. Run pairing again to authorize an account.');
+            continue;
+        }
+        if (action === 'start') {
+            log.info('Starting the bot. Press Ctrl+C to stop.');
+            outro(dim('handing off to bot...'));
+            return ctx.startChannel();
+        }
+    }
+}
+async function readState(vault) {
+    // env beats vault for the token (matches the channel's own precedence) so
+    // the wizard reflects what the bot would actually see at start time.
+    const envToken = process.env[DISCORD_TOKEN_ENV];
+    const vaultToken = envToken ?? (await vault.get(DISCORD_TOKEN_KEY));
+    const authorized = await vault.get(DISCORD_AUTHORIZED_USER_KEY);
+    const allowed = parseAllowedChannels(await vault.get(DISCORD_ALLOWED_CHANNELS_KEY));
+    return {
+        hasToken: !!vaultToken,
+        authorizedUserId: parseAuthorizedUser(authorized),
+        allowedChannelCount: allowed.length,
+    };
+}
+function printStatus(state) {
+    const lines = [];
+    lines.push(`Token           ${state.hasToken ? bold('set') : dim('not set')}`);
+    lines.push(`Paired account  ${state.authorizedUserId != null ? bold(state.authorizedUserId) : dim('none')}`);
+    lines.push(`Guild channels  ${state.allowedChannelCount > 0 ? bold(String(state.allowedChannelCount)) : dim('none allow-listed (DM works once paired)')}`);
+    note(lines.join('\n'), 'status');
+}
+async function pickAction(state) {
+    const options = [];
+    if (state.hasToken && state.authorizedUserId != null) {
+        options.push({
+            value: 'start',
+            label: 'Start the bot',
+            hint: 'runs forever - Ctrl+C to stop',
+        });
+        options.push({
+            value: 'unpair',
+            label: 'Unpair this account',
+            hint: 'pairing must be run again before the bot answers anyone',
+        });
+    }
+    else if (state.hasToken) {
+        options.push({
+            value: 'pair',
+            label: 'Pair a Discord account',
+            hint: 'DM the bot; it replies with a code you paste here',
+        });
+    }
+    options.push({
+        value: 'set-token',
+        label: state.hasToken ? 'Change the bot token' : 'Set the bot token',
+        hint: state.hasToken ? undefined : 'create an app + bot at discord.com/developers',
+    });
+    options.push({ value: 'quit', label: 'Quit' });
+    const choice = await select({ message: 'What do you want to do?', options });
+    if (isCancel(choice))
+        return null;
+    return choice;
+}
+async function actionSetToken(vault) {
+    note('Open https://discord.com/developers/applications, create an application, add a Bot,\n' +
+        'and copy its token (Bot → Reset Token). IMPORTANT: on the same Bot page, under\n' +
+        '"Privileged Gateway Intents", enable ' +
+        bold('MESSAGE CONTENT INTENT') +
+        ' — without it the bot\n' +
+        'receives empty messages. The token goes straight into the moxxy vault under\n' +
+        "'" +
+        DISCORD_TOKEN_KEY +
+        "' - no env var needed.", 'get a bot token');
+    const token = await password({
+        message: 'Paste the Discord bot token',
+        mask: '•',
+        validate: (v) => {
+            if (!v || v.trim().length === 0)
+                return 'required';
+            if (!DISCORD_TOKEN_RE.test(v.trim())) {
+                return 'doesn\'t look like a Discord bot token - expected three dot-separated segments';
+            }
+            return undefined;
+        },
+    });
+    if (isCancel(token))
+        return false;
+    await vault.set(DISCORD_TOKEN_KEY, String(token).trim(), ['discord']);
+    log.success('Token stored in vault.');
+    return true;
+}
+//# sourceMappingURL=setup-wizard.js.map

package/dist/setup-wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard.js","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAG7F,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,0EAA0E;AAC1E,uDAAuD;AACvD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC3D,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvE,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAUtE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAA6B;IAClE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAmB,CAAC;IAE3C,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAEnC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,WAAW,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,CAAC,YAAY,CAAC,CAAC;YACrB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YACpB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,KAAK,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAChD,GAAG,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC;YACpE,SAAS;QACX,CAAC;QACD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACpD,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACpC,OAAO,GAAG,CAAC,YAAY,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAiB;IACxC,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,QAAQ,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACpF,OAAO;QACL,QAAQ,EAAE,CAAC,CAAC,UAAU;QACtB,gBAAgB,EAAE,mBAAmB,CAAC,UAAU,CAAC;QACjD,mBAAmB,EAAE,OAAO,CAAC,MAAM;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAY;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC/E,KAAK,CAAC,IAAI,CACR,mBAAmB,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CACjG,CAAC;IACF,KAAK,CAAC,IAAI,CACR,mBAAmB,KAAK,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,0CAA0C,CAAC,EAAE,CAC/I,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAY;IACpC,MAAM,OAAO,GAA2D,EAAE,CAAC;IAC3E,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,gBAAgB,IAAI,IAAI,EAAE,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,+BAA+B;SACtC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,qBAAqB;YAC5B,IAAI,EAAE,yDAAyD;SAChE,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,wBAAwB;YAC/B,IAAI,EAAE,mDAAmD;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,IAAI,CAAC;QACX,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,mBAAmB;QACpE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,+CAA+C;KACnF,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAE/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAS,EAAE,OAAO,EAAE,yBAAyB,EAAE,OAAO,EAAE,CAAC,CAAC;IACrF,IAAI,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,MAAgB,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAAiB;IAC7C,IAAI,CACF,uFAAuF;QACrF,kFAAkF;QAClF,uCAAuC;QACvC,IAAI,CAAC,wBAAwB,CAAC;QAC9B,yBAAyB;QACzB,+EAA+E;QAC/E,GAAG;QACH,iBAAiB;QACjB,wBAAwB,EAC1B,iBAAiB,CAClB,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;QAC3B,OAAO,EAAE,6BAA6B;QACtC,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;YACd,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,UAAU,CAAC;YACnD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACrC,OAAO,gFAAgF,CAAC;YAC1F,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -0,0 +1,89 @@
+{
+  "name": "@moxxy/plugin-channel-discord",
+  "version": "0.27.0",
+  "description": "Discord channel for moxxy via discord.js. Treats Discord DMs and allow-listed guild channels as a bidirectional channel: prompts in, streamed assistant replies out (edit-throttled), button-based permission prompts, DM code pairing.",
+  "keywords": [
+    "moxxy",
+    "agent",
+    "channel",
+    "discord",
+    "bot"
+  ],
+  "homepage": "https://moxxy.ai",
+  "bugs": {
+    "url": "https://github.com/moxxy-ai/moxxy/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/moxxy-ai/moxxy.git",
+    "directory": "packages/plugin-channel-discord"
+  },
+  "author": "Michal Makowski <michal.makowski97@gmail.com>",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "moxxy": {
+    "plugin": {
+      "entry": "./dist/index.js",
+      "kind": "cli"
+    },
+    "requirements": [
+      {
+        "kind": "plugin",
+        "name": "@moxxy/plugin-vault",
+        "hint": "discord resolves the vault from the service registry for its bot token + pairing; @moxxy/plugin-vault must load first"
+      }
+    ],
+    "setup": {
+      "title": "Discord bot",
+      "description": "Create an application at https://discord.com/developers/applications, add a Bot, and under Bot → Privileged Gateway Intents enable MESSAGE CONTENT INTENT (required — without it the bot receives empty messages). Then paste the bot token below.",
+      "required": true,
+      "fields": [
+        {
+          "key": "botToken",
+          "label": "Bot token",
+          "kind": "secret",
+          "vaultKey": "discord_bot_token",
+          "required": true,
+          "placeholder": "MTIz…abc.def…",
+          "description": "Developer Portal → your app → Bot → Reset Token. Remember to enable the MESSAGE CONTENT privileged intent on the same page."
+        }
+      ]
+    }
+  },
+  "dependencies": {
+    "@clack/prompts": "^1.4.0",
+    "discord.js": "^14.16.0",
+    "@moxxy/channel-kit": "0.27.0",
+    "@moxxy/core": "0.27.0",
+    "@moxxy/plugin-vault": "0.27.0",
+    "@moxxy/sdk": "0.27.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "^5.7.3",
+    "vitest": "^2.1.8",
+    "@moxxy/tsconfig": "0.0.0",
+    "@moxxy/vitest-preset": "0.0.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "clean": "rm -rf dist .turbo"
+  }
+}

package/src/allow-list.test.ts

@@ -0,0 +1,64 @@
+import { describe, expect, it } from 'vitest';
+import { gateInbound } from './allow-list.js';
+import {
+  parseAllowedChannels,
+  parseAuthorizedUser,
+  serializeAllowedChannels,
+} from './keys.js';
+
+const PAIRED = '111111111111';
+const OTHER = '222222222222';
+const GUILD = '333333333333';
+const CHAN = '444444444444';
+
+describe('gateInbound (authorization gate on every session-reaching path)', () => {
+  it('denies everything when unpaired', () => {
+    expect(
+      gateInbound({ authorId: PAIRED, guildId: null, channelId: CHAN }, null, new Set()),
+    ).toEqual({ ok: false, reason: 'not-paired' });
+  });
+
+  it('denies a foreign user even in an allow-listed channel', () => {
+    expect(
+      gateInbound({ authorId: OTHER, guildId: GUILD, channelId: CHAN }, PAIRED, new Set([CHAN])),
+    ).toEqual({ ok: false, reason: 'foreign-user' });
+  });
+
+  it('allows the paired user in a DM', () => {
+    expect(
+      gateInbound({ authorId: PAIRED, guildId: null, channelId: CHAN }, PAIRED, new Set()),
+    ).toEqual({ ok: true, context: 'dm' });
+  });
+
+  it('denies the paired user in a guild channel that is not allow-listed', () => {
+    expect(
+      gateInbound({ authorId: PAIRED, guildId: GUILD, channelId: CHAN }, PAIRED, new Set()),
+    ).toEqual({ ok: false, reason: 'channel-not-allowed' });
+  });
+
+  it('allows the paired user in an allow-listed guild channel', () => {
+    expect(
+      gateInbound({ authorId: PAIRED, guildId: GUILD, channelId: CHAN }, PAIRED, new Set([CHAN])),
+    ).toEqual({ ok: true, context: 'guild' });
+  });
+});
+
+describe('vault value parsers (corrupt values fail closed)', () => {
+  it('parseAuthorizedUser accepts a snowflake, rejects junk', () => {
+    expect(parseAuthorizedUser('123456789')).toBe('123456789');
+    expect(parseAuthorizedUser(' 123456789 ')).toBe('123456789');
+    expect(parseAuthorizedUser('not-a-user')).toBeNull();
+    expect(parseAuthorizedUser('')).toBeNull();
+    expect(parseAuthorizedUser(null)).toBeNull();
+    expect(parseAuthorizedUser('123; DROP TABLE')).toBeNull();
+  });
+
+  it('parseAllowedChannels round-trips and rejects corrupt JSON / junk entries', () => {
+    const raw = serializeAllowedChannels(['111111', '222222', '111111']);
+    expect(parseAllowedChannels(raw)).toEqual(['111111', '222222']);
+    expect(parseAllowedChannels('not json')).toEqual([]);
+    expect(parseAllowedChannels('{"a":1}')).toEqual([]);
+    expect(parseAllowedChannels(JSON.stringify(['111111', 'nope']))).toEqual([]);
+    expect(parseAllowedChannels(null)).toEqual([]);
+  });
+});

package/src/allow-list.ts

@@ -0,0 +1,30 @@
+import type { InboundMessage } from './schema.js';
+
+/**
+ * Where the paired principal may drive the session from:
+ *   - their own DM with the bot — always allowed once paired;
+ *   - a guild channel — only when that channel id is on the allow-list
+ *     (managed by the paired user via the local /allow and /deny commands).
+ *
+ * Authorship is checked FIRST: a message from anyone but the paired user never
+ * reaches the session, no matter where it was sent (single-operator model,
+ * matching Telegram's single paired chat).
+ */
+export type GateVerdict =
+  | { readonly ok: true; readonly context: 'dm' | 'guild' }
+  | {
+      readonly ok: false;
+      readonly reason: 'not-paired' | 'foreign-user' | 'channel-not-allowed';
+    };
+
+export function gateInbound(
+  msg: Pick<InboundMessage, 'authorId' | 'guildId' | 'channelId'>,
+  authorizedUserId: string | null,
+  allowedChannels: ReadonlySet<string>,
+): GateVerdict {
+  if (!authorizedUserId) return { ok: false, reason: 'not-paired' };
+  if (msg.authorId !== authorizedUserId) return { ok: false, reason: 'foreign-user' };
+  if (msg.guildId == null) return { ok: true, context: 'dm' };
+  if (allowedChannels.has(msg.channelId)) return { ok: true, context: 'guild' };
+  return { ok: false, reason: 'channel-not-allowed' };
+}

package/src/approval.ts

@@ -0,0 +1,76 @@
+import type { ApprovalDecision, ApprovalRequest, ApprovalResolver } from '@moxxy/sdk';
+
+export interface PendingApproval {
+  readonly id: string;
+  readonly request: ApprovalRequest;
+  readonly resolve: (decision: ApprovalDecision) => void;
+}
+
+/**
+ * Generic approval resolver for the Discord channel — counterpart to the TUI's
+ * ApprovalDialog. The channel renders the request as a message with a button
+ * per option and routes the user's click (or follow-up text, for options with
+ * `requestsText: true`) back here via `resolvePending` /
+ * `resolvePendingWithText`. Mirrors the Telegram approval resolver's shape.
+ */
+export class DiscordApprovalResolver implements ApprovalResolver {
+  readonly name = 'discord-approval';
+  private readonly pending = new Map<string, PendingApproval>();
+  private deciderFn: ((id: string, request: ApprovalRequest) => Promise<void>) | null = null;
+  private nextId = 1;
+
+  setDecider(fn: (id: string, request: ApprovalRequest) => Promise<void>): void {
+    this.deciderFn = fn;
+  }
+
+  async confirm(request: ApprovalRequest): Promise<ApprovalDecision> {
+    if (!this.deciderFn) {
+      // No bot wired up — best fallback is the request's defaultOptionId.
+      return { optionId: request.defaultOptionId ?? request.options[0]?.id ?? 'approve' };
+    }
+    const id = `appr_${this.nextId++}`;
+    return new Promise<ApprovalDecision>((resolve) => {
+      this.pending.set(id, { id, request, resolve });
+      this.deciderFn!(id, request).catch((err) => {
+        this.pending.delete(id);
+        resolve({
+          optionId: request.defaultOptionId ?? request.options[0]?.id ?? 'cancel',
+          text: `decider failed: ${err instanceof Error ? err.message : String(err)}`,
+        });
+      });
+    });
+  }
+
+  /** Look up a pending approval without resolving it (text follow-up latch). */
+  getPending(id: string): PendingApproval | undefined {
+    return this.pending.get(id);
+  }
+
+  /** Resolve directly with an option id (no text). */
+  resolvePending(id: string, optionId: string): boolean {
+    const pending = this.pending.get(id);
+    if (!pending) return false;
+    this.pending.delete(id);
+    pending.resolve({ optionId });
+    return true;
+  }
+
+  /** Resolve with an option id AND a free-text follow-up. */
+  resolvePendingWithText(id: string, optionId: string, text: string): boolean {
+    const pending = this.pending.get(id);
+    if (!pending) return false;
+    this.pending.delete(id);
+    pending.resolve({ optionId, text });
+    return true;
+  }
+
+  abortAll(reason = 'channel closed'): void {
+    for (const pending of this.pending.values()) {
+      pending.resolve({
+        optionId: pending.request.defaultOptionId ?? pending.request.options[0]?.id ?? 'cancel',
+        text: reason,
+      });
+    }
+    this.pending.clear();
+  }
+}

package/src/channel/allow-list-store.ts

@@ -0,0 +1,52 @@
+import type { VaultStore } from '@moxxy/plugin-vault';
+import {
+  DISCORD_ALLOWED_CHANNELS_KEY,
+  parseAllowedChannels,
+  serializeAllowedChannels,
+  snowflakeSchema,
+} from '../keys.js';
+
+/**
+ * Vault-backed guild-channel allow-list: the channels (beyond the paired
+ * user's DM) the paired user may drive the session from. Managed via the
+ * local `/allow` and `/deny` commands; persisted as a JSON snowflake array
+ * under {@link DISCORD_ALLOWED_CHANNELS_KEY} (corrupt values read as empty —
+ * deny-by-default).
+ */
+export class AllowListStore {
+  private ids = new Set<string>();
+
+  constructor(private readonly vault: VaultStore) {}
+
+  async load(): Promise<void> {
+    this.ids = new Set(parseAllowedChannels(await this.vault.get(DISCORD_ALLOWED_CHANNELS_KEY)));
+  }
+
+  snapshot(): ReadonlySet<string> {
+    return this.ids;
+  }
+
+  has(channelId: string): boolean {
+    return this.ids.has(channelId);
+  }
+
+  /** Add a channel id. Returns false (no write) for a non-snowflake id. */
+  async add(channelId: string): Promise<boolean> {
+    if (!snowflakeSchema.safeParse(channelId).success) return false;
+    if (this.ids.has(channelId)) return true;
+    this.ids.add(channelId);
+    await this.persist();
+    return true;
+  }
+
+  /** Remove a channel id. Returns true when it was present. */
+  async remove(channelId: string): Promise<boolean> {
+    const removed = this.ids.delete(channelId);
+    if (removed) await this.persist();
+    return removed;
+  }
+
+  private async persist(): Promise<void> {
+    await this.vault.set(DISCORD_ALLOWED_CHANNELS_KEY, serializeAllowedChannels(this.ids));
+  }
+}

package/src/channel/approval-prompt.ts

@@ -0,0 +1,43 @@
+import type { ApprovalRequest } from '@moxxy/sdk';
+import type { DiscordApprovalResolver } from '../approval.js';
+import { BUTTON_STYLE, button, packRows } from './components.js';
+import type { ChannelLogger, SendableChannelLike } from './discord-like.js';
+
+export interface ApprovalPromptDeps {
+  readonly channel: SendableChannelLike | null;
+  readonly resolver: DiscordApprovalResolver;
+  readonly logger?: ChannelLogger;
+}
+
+/**
+ * Render an approval request (e.g. plan-execute "validate plan") as a message
+ * with a button per option. Options with `requestsText` are still picked here;
+ * the interaction handler then captures the user's NEXT message as the
+ * follow-up text via the channel's awaiting-text state.
+ */
+export async function askForApproval(
+  id: string,
+  request: ApprovalRequest,
+  deps: ApprovalPromptDeps,
+): Promise<void> {
+  if (!deps.channel) return;
+  const rows = packRows(
+    request.options.map((opt) =>
+      button(`appr:${id}:${opt.id}`, opt.label, BUTTON_STYLE.secondary),
+    ),
+  );
+  // Discord caps messages at 2000 chars; keep the body well under so the
+  // prompt always sends. The full plan streams in as assistant messages.
+  const body = request.body.length > 1500 ? request.body.slice(0, 1499) + '…' : request.body;
+  const summary =
+    `📋 **${request.title}**\n\n${body}\n\n` +
+    `Pick an option below. Some options (e.g. Redraft) prompt for follow-up text after you click.`;
+  try {
+    await deps.channel.send({ content: summary, components: rows });
+  } catch (err) {
+    deps.logger?.warn('discord approval send failed', { err: String(err) });
+    // Default-resolve on send failure so the loop strategy doesn't hang.
+    const fallback = request.defaultOptionId ?? request.options[0]?.id ?? 'cancel';
+    deps.resolver.resolvePending(id, fallback);
+  }
+}

package/src/channel/components.ts

@@ -0,0 +1,49 @@
+/**
+ * Raw Discord message-component JSON (API shape) for the button rows the
+ * channel renders. Built as plain objects rather than discord.js Builders so
+ * the prompt modules stay dependency-free and unit-testable — discord.js
+ * accepts raw API component data in `send()` payloads.
+ */
+
+/** Discord API button styles. */
+export const BUTTON_STYLE = {
+  primary: 1,
+  secondary: 2,
+  success: 3,
+  danger: 4,
+} as const;
+
+export interface ApiButton {
+  readonly type: 2;
+  readonly style: number;
+  readonly label: string;
+  readonly custom_id: string;
+}
+
+export interface ApiActionRow {
+  readonly type: 1;
+  readonly components: ReadonlyArray<ApiButton>;
+}
+
+const MAX_LABEL_CHARS = 80;
+const MAX_CUSTOM_ID_CHARS = 100;
+const MAX_BUTTONS_PER_ROW = 5;
+const MAX_ROWS = 5;
+
+export function button(customId: string, label: string, style: number): ApiButton {
+  return {
+    type: 2,
+    style,
+    label: label.slice(0, MAX_LABEL_CHARS) || '…',
+    custom_id: customId.slice(0, MAX_CUSTOM_ID_CHARS),
+  };
+}
+
+/** Pack buttons into action rows (5 per row, 5 rows max — 25 button cap). */
+export function packRows(buttons: ReadonlyArray<ApiButton>): ApiActionRow[] {
+  const rows: ApiActionRow[] = [];
+  for (let i = 0; i < buttons.length && rows.length < MAX_ROWS; i += MAX_BUTTONS_PER_ROW) {
+    rows.push({ type: 1, components: buttons.slice(i, i + MAX_BUTTONS_PER_ROW) });
+  }
+  return rows;
+}

package/src/channel/discord-like.ts

@@ -0,0 +1,34 @@
+/**
+ * Structural slices of the discord.js surface the handlers touch. Keeping the
+ * handlers typed against these (instead of discord.js classes) keeps the
+ * messenger-specific transport at the channel edge and lets unit tests drive
+ * every gating / streaming / pairing path with plain fake objects — no gateway
+ * connection, no discord.js instances.
+ */
+
+/** A message we sent and can edit in place (the streamed frame). */
+export interface SentMessageLike {
+  edit(content: string): Promise<unknown>;
+}
+
+/** Payload accepted by `send` — text plus optional component rows (buttons) or
+ *  file attachments (a synthesized voice reply). `content` is optional so a
+ *  file-only message (audio, no text) is expressible. */
+export interface OutboundPayload {
+  readonly content?: string;
+  readonly components?: ReadonlyArray<unknown>;
+  /** File attachments (e.g. a discord.js `AttachmentBuilder`). */
+  readonly files?: ReadonlyArray<unknown>;
+}
+
+/** A channel (DM or guild text channel) we can post into. */
+export interface SendableChannelLike {
+  send(payload: string | OutboundPayload): Promise<SentMessageLike>;
+  /** Discord's typing indicator lasts ~10s per call; refresh to keep it alive. */
+  sendTyping?(): Promise<unknown>;
+}
+
+export interface ChannelLogger {
+  info?(msg: string, meta?: Record<string, unknown>): void;
+  warn(msg: string, meta?: Record<string, unknown>): void;
+}