@moxxy/plugin-channel-signal 0.27.0

package/dist/index.js

@@ -0,0 +1,215 @@
+import { defineChannel, definePlugin } from '@moxxy/sdk';
+import { SignalChannel } from './channel.js';
+import { SIGNAL_ACCOUNT_ENV, SIGNAL_ACCOUNT_KEY, SIGNAL_ALLOWED_SENDERS_KEY, parseAllowedSenders, } from './keys.js';
+import { SIGNAL_CLI_INSTALL_HINT, findSignalCliOnPath, listSignalAccounts, signalCliDataDir, } from './sidecar.js';
+import { runSignalWizard } from './setup-wizard.js';
+import { runSignalPairFlow } from './pair-flow.js';
+export { SignalChannel, } from './channel.js';
+export { buildSignalPermissionResolver } from './permission.js';
+export { SignalRpcClient } from './jsonrpc.js';
+export { SignalSidecar, startLinkProcess, listSignalAccounts, findSignalCliOnPath, signalCliDataDir, signalCliAttachmentsDir, SIGNAL_CLI_INSTALL_HINT, } from './sidecar.js';
+export { receiveParamsSchema, envelopeSchema, attachmentSchema, MAX_INBOUND_TEXT_CHARS, } from './schema.js';
+export { ChunkedSender, takeChunk, splitForSignal, SIGNAL_CHUNK_SOFT_LIMIT, SIGNAL_CHUNK_HARD_LIMIT, } from './channel/chunker.js';
+export { SIGNAL_ACCOUNT_KEY, SIGNAL_ACCOUNT_ENV, SIGNAL_ALLOWED_SENDERS_KEY, parseAllowedSenders, normalizeSender, E164_RE, } from './keys.js';
+/**
+ * Build the Signal channel plugin with a host-injected vault (mirrors the
+ * Telegram/Slack plugins' vault injection).
+ */
+export function buildSignalPlugin(opts) {
+    return makeSignalPlugin(() => opts.vault);
+}
+/**
+ * Discovery-loadable default export: resolves the vault from the inter-plugin
+ * service registry in `onInit` (the vault plugin publishes `'vault'`). Requires
+ * `@moxxy/plugin-vault` to load first (declared in `package.json`
+ * `moxxy.requirements`). The channel + subcommands read the vault via
+ * `getVault()`, so resolution is deferred to call time — after `onInit` wired it.
+ */
+export const signalPlugin = (() => {
+    let resolved = null;
+    const getVault = () => {
+        if (!resolved) {
+            throw new Error('@moxxy/plugin-channel-signal: the "vault" service is unavailable — @moxxy/plugin-vault must load first');
+        }
+        return resolved;
+    };
+    const hooks = {
+        onInit: (ctx) => {
+            resolved = ctx.services.require('vault');
+        },
+    };
+    return makeSignalPlugin(getVault, hooks);
+})();
+export default signalPlugin;
+function readStringArray(value) {
+    if (Array.isArray(value))
+        return value.map((x) => String(x));
+    if (typeof value === 'string' && value.trim()) {
+        return value
+            .split(',')
+            .map((s) => s.trim())
+            .filter(Boolean);
+    }
+    return undefined;
+}
+function makeSignalPlugin(getVault, hooks) {
+    return definePlugin({
+        name: '@moxxy/plugin-channel-signal',
+        version: '0.0.0',
+        ...(hooks ? { hooks } : {}),
+        channels: [
+            defineChannel({
+                name: 'signal',
+                description: 'Signal messenger channel via a signal-cli JSON-RPC sidecar. Links as a secondary device (QR); Note-to-Self + allow-listed senders drive the agent.',
+                // A linked device sees ALL the account owner's messages, so this
+                // channel runs on its own dedicated, isolated runner (separate socket +
+                // sticky session), like Slack — the bot keeps its own persistent
+                // history apart from the user's desktop/TUI work.
+                dedicatedRunner: true,
+                sessionSource: 'signal',
+                // Self-described config so a control surface (TUI `/channels`, `moxxy
+                // channels start`, the desktop panel) can configure + run Signal
+                // without a hardcoded table.
+                config: {
+                    fields: [
+                        {
+                            name: 'account',
+                            label: 'Account number (E.164)',
+                            vaultKey: SIGNAL_ACCOUNT_KEY,
+                            required: true,
+                            secret: false,
+                            placeholder: '+15551234567',
+                            help: 'The Signal account moxxy links to as a secondary device (needs signal-cli on PATH)',
+                        },
+                    ],
+                    hasRequestUrl: false,
+                    runHint: 'Scan the QR with your phone (Signal → Settings → Linked Devices → Link New Device); then message your own "Note to Self" to talk to moxxy.',
+                    connect: {
+                        kind: 'qr',
+                        title: 'Link your Signal',
+                        hint: 'On your phone: Signal → Settings → Linked Devices → Link New Device, then scan the QR.',
+                    },
+                },
+                create: (deps) => {
+                    const options = deps.options;
+                    const channelOpts = {
+                        vault: getVault(),
+                        ...(typeof options?.['account'] === 'string' ? { account: options['account'] } : {}),
+                        ...(typeof options?.['binary'] === 'string' ? { binary: options['binary'] } : {}),
+                        ...(() => {
+                            const tools = readStringArray(options?.['allowedTools']);
+                            return tools ? { allowedTools: tools } : {};
+                        })(),
+                        ...(() => {
+                            const senders = readStringArray(options?.['allowedSenders']);
+                            return senders ? { allowedSenders: senders } : {};
+                        })(),
+                        logger: deps.logger,
+                    };
+                    return new SignalChannel(channelOpts);
+                },
+                isAvailable: async () => {
+                    // Gate 1: the signal-cli binary. A pure PATH scan (no spawn — this
+                    // runs on every `moxxy channels list` / `moxxy doctor`), and a miss
+                    // must NEVER crash discovery: return a friendly install hint.
+                    try {
+                        if (!findSignalCliOnPath()) {
+                            return { ok: false, reason: SIGNAL_CLI_INSTALL_HINT };
+                        }
+                    }
+                    catch {
+                        return { ok: false, reason: SIGNAL_CLI_INSTALL_HINT };
+                    }
+                    // Gate 2: an account number (env first — the vault may not be wired
+                    // in a probe/listing context).
+                    if (process.env[SIGNAL_ACCOUNT_ENV]?.trim())
+                        return { ok: true };
+                    try {
+                        if (await getVault().has(SIGNAL_ACCOUNT_KEY))
+                            return { ok: true };
+                    }
+                    catch {
+                        /* vault unavailable in a probe context — fall through */
+                    }
+                    return {
+                        ok: false,
+                        reason: `No Signal account configured. Run \`moxxy channels signal setup\`, set ${SIGNAL_ACCOUNT_ENV}, or store one in the vault as '${SIGNAL_ACCOUNT_KEY}'.`,
+                    };
+                },
+                interactiveCommand: 'setup',
+                subcommands: {
+                    setup: {
+                        description: 'Interactive setup: check signal-cli, store the account number, pick the tool allow-list, then link + start. Shown by default for `moxxy signal` on a TTY.',
+                        run: async (ctx) => {
+                            if (process.stdin.isTTY !== true) {
+                                // Headless: just start the channel (account must already be
+                                // configured + linked).
+                                return ctx.startChannel();
+                            }
+                            return runSignalWizard(ctx);
+                        },
+                    },
+                    pair: {
+                        description: 'Link this machine to your Signal account: prints a QR to scan from Signal → Settings → Linked Devices — the same mechanism the desktop uses.',
+                        run: async (ctx) => {
+                            if (process.stdin.isTTY !== true) {
+                                process.stderr.write('Pairing needs a TTY to show the QR. Run `moxxy channels signal pair` on a workstation, or pair from the desktop Channels panel.\n');
+                                return 1;
+                            }
+                            return runSignalPairFlow(ctx);
+                        },
+                    },
+                    status: {
+                        description: 'Report signal-cli / account / linking / allow-list state as JSON.',
+                        run: async (ctx) => {
+                            const vault = ctx.deps.vault;
+                            if (!vault) {
+                                process.stderr.write('vault unavailable\n');
+                                return 1;
+                            }
+                            const binary = findSignalCliOnPath();
+                            const account = process.env[SIGNAL_ACCOUNT_ENV]?.trim() || (await vault.get(SIGNAL_ACCOUNT_KEY));
+                            const allowedSenders = parseAllowedSenders(await vault.get(SIGNAL_ALLOWED_SENDERS_KEY));
+                            // Linked state needs a one-shot signal-cli spawn (slow JVM);
+                            // report null when the probe isn't possible/fails.
+                            let linked = null;
+                            if (binary && account) {
+                                try {
+                                    linked = (await listSignalAccounts({ binary })).includes(account);
+                                }
+                                catch {
+                                    linked = null;
+                                }
+                            }
+                            process.stdout.write(JSON.stringify({
+                                binaryFound: binary != null,
+                                account: account || null,
+                                linked,
+                                allowedSenders,
+                                dataDir: signalCliDataDir(),
+                            }, null, 2) + '\n');
+                            return 0;
+                        },
+                    },
+                    unpair: {
+                        description: "Forget the stored account + sender allow-list. (signal-cli's own linked-device store is untouched; remove the device from Signal → Linked Devices on your phone to fully unlink.)",
+                        run: async (ctx) => {
+                            const vault = ctx.deps.vault;
+                            if (!vault) {
+                                process.stderr.write('vault unavailable\n');
+                                return 1;
+                            }
+                            const removedAccount = await vault.delete(SIGNAL_ACCOUNT_KEY);
+                            await vault.delete(SIGNAL_ALLOWED_SENDERS_KEY);
+                            process.stdout.write(removedAccount
+                                ? 'unpaired (vault cleared). To fully unlink, remove the "moxxy" device in Signal → Settings → Linked Devices on your phone.\n'
+                                : 'no account was configured\n');
+                            return 0;
+                        },
+                    },
+                },
+            }),
+        ],
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAoC,MAAM,YAAY,CAAC;AAE3F,OAAO,EAAE,aAAa,EAA6B,MAAM,cAAc,CAAC;AACxE,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,OAAO,EACL,aAAa,GAMd,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAkB,MAAM,cAAc,CAAC;AAC/D,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,uBAAuB,EACvB,uBAAuB,GAIxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,sBAAsB,GAGvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,EACb,SAAS,EACT,cAAc,EACd,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,0BAA0B,EAC1B,mBAAmB,EACnB,eAAe,EACf,OAAO,GACR,MAAM,WAAW,CAAC;AAOnB;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA8B;IAC9D,OAAO,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAW,CAAC,GAAG,EAAE;IACxC,IAAI,QAAQ,GAAsB,IAAI,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAe,EAAE;QAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,wGAAwG,CACzG,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,KAAK,GAAmB;QAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YACd,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAa,OAAO,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;IACF,OAAO,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC,CAAC,EAAE,CAAC;AAEL,eAAe,YAAY,CAAC;AAE5B,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,OAAO,KAAK;aACT,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA0B,EAAE,KAAsB;IAC1E,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,OAAO;QAChB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,QAAQ,EAAE;YACR,aAAa,CAAC;gBACZ,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,oJAAoJ;gBACtJ,iEAAiE;gBACjE,wEAAwE;gBACxE,iEAAiE;gBACjE,kDAAkD;gBAClD,eAAe,EAAE,IAAI;gBACrB,aAAa,EAAE,QAAQ;gBACvB,sEAAsE;gBACtE,iEAAiE;gBACjE,6BAA6B;gBAC7B,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN;4BACE,IAAI,EAAE,SAAS;4BACf,KAAK,EAAE,wBAAwB;4BAC/B,QAAQ,EAAE,kBAAkB;4BAC5B,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,KAAK;4BACb,WAAW,EAAE,cAAc;4BAC3B,IAAI,EAAE,oFAAoF;yBAC3F;qBACF;oBACD,aAAa,EAAE,KAAK;oBACpB,OAAO,EACL,4IAA4I;oBAC9I,OAAO,EAAE;wBACP,IAAI,EAAE,IAAI;wBACV,KAAK,EAAE,kBAAkB;wBACzB,IAAI,EAAE,wFAAwF;qBAC/F;iBACF;gBACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBACf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;oBAC7B,MAAM,WAAW,GAAyB;wBACxC,KAAK,EAAE,QAAQ,EAAE;wBACjB,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpF,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjF,GAAG,CAAC,GAAG,EAAE;4BACP,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;4BACzD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9C,CAAC,CAAC,EAAE;wBACJ,GAAG,CAAC,GAAG,EAAE;4BACP,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;4BAC7D,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpD,CAAC,CAAC,EAAE;wBACJ,MAAM,EAAE,IAAI,CAAC,MAAe;qBAC7B,CAAC;oBACF,OAAO,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC;gBACxC,CAAC;gBACD,WAAW,EAAE,KAAK,IAAI,EAAE;oBACtB,mEAAmE;oBACnE,oEAAoE;oBACpE,8DAA8D;oBAC9D,IAAI,CAAC;wBACH,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;4BAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;wBACxD,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;oBACxD,CAAC;oBACD,oEAAoE;oBACpE,+BAA+B;oBAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE;wBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;oBACjE,IAAI,CAAC;wBACH,IAAI,MAAM,QAAQ,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC;4BAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;oBACpE,CAAC;oBAAC,MAAM,CAAC;wBACP,yDAAyD;oBAC3D,CAAC;oBACD,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,0EAA0E,kBAAkB,mCAAmC,kBAAkB,IAAI;qBAC9J,CAAC;gBACJ,CAAC;gBACD,kBAAkB,EAAE,OAAO;gBAC3B,WAAW,EAAE;oBACX,KAAK,EAAE;wBACL,WAAW,EACT,2JAA2J;wBAC7J,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gCACjC,4DAA4D;gCAC5D,wBAAwB;gCACxB,OAAO,GAAG,CAAC,YAAY,EAAE,CAAC;4BAC5B,CAAC;4BACD,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;wBAC9B,CAAC;qBACF;oBACD,IAAI,EAAE;wBACJ,WAAW,EACT,8IAA8I;wBAChJ,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gCACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mIAAmI,CACpI,CAAC;gCACF,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;wBAChC,CAAC;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EACT,mEAAmE;wBACrE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAA+B,CAAC;4BACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gCACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gCAC5C,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;4BACrC,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;4BACnF,MAAM,cAAc,GAAG,mBAAmB,CACxC,MAAM,KAAK,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAC5C,CAAC;4BACF,6DAA6D;4BAC7D,mDAAmD;4BACnD,IAAI,MAAM,GAAmB,IAAI,CAAC;4BAClC,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;gCACtB,IAAI,CAAC;oCACH,MAAM,GAAG,CAAC,MAAM,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gCACpE,CAAC;gCAAC,MAAM,CAAC;oCACP,MAAM,GAAG,IAAI,CAAC;gCAChB,CAAC;4BACH,CAAC;4BACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CACZ;gCACE,WAAW,EAAE,MAAM,IAAI,IAAI;gCAC3B,OAAO,EAAE,OAAO,IAAI,IAAI;gCACxB,MAAM;gCACN,cAAc;gCACd,OAAO,EAAE,gBAAgB,EAAE;6BAC5B,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;4BACF,OAAO,CAAC,CAAC;wBACX,CAAC;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EACT,mLAAmL;wBACrL,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAA+B,CAAC;4BACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gCACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gCAC5C,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;4BAC9D,MAAM,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;4BAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,cAAc;gCACZ,CAAC,CAAC,6HAA6H;gCAC/H,CAAC,CAAC,6BAA6B,CAClC,CAAC;4BACF,OAAO,CAAC,CAAC;wBACX,CAAC;qBACF;iBACF;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/jsonrpc.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Minimal newline-delimited JSON-RPC 2.0 client for the signal-cli daemon
+ * socket (`signal-cli -a <account> daemon --socket <path>`).
+ *
+ * The daemon speaks one JSON object per line over the UNIX socket:
+ *   → {"jsonrpc":"2.0","id":"…","method":"send","params":{…}}
+ *   ← {"jsonrpc":"2.0","id":"…","result":{…}} | {"…","error":{code,message}}
+ *   ← {"jsonrpc":"2.0","method":"receive","params":{"envelope":{…}}}   (notification)
+ *
+ * The transport is injected as a plain duplex-ish stream so tests never open a
+ * real socket (mirrors the browser sidecar's injectable spawn).
+ */
+/** The stream slice this client needs — `net.Socket` satisfies it. */
+export interface RpcStream {
+    write(data: string): unknown;
+    on(event: 'data', listener: (chunk: Buffer | string) => void): unknown;
+    on(event: 'close', listener: () => void): unknown;
+    on(event: 'error', listener: (err: Error) => void): unknown;
+    end?(): unknown;
+    destroy?(): unknown;
+}
+export interface RpcLogger {
+    warn?(msg: string, meta?: Record<string, unknown>): void;
+}
+export interface SignalRpcClientOptions {
+    readonly stream: RpcStream;
+    /** Per-request timeout. signal-cli sends synchronously to the Signal server,
+     *  so allow generous headroom. Default 30s. */
+    readonly requestTimeoutMs?: number;
+    readonly logger?: RpcLogger;
+}
+export declare class SignalRpcClient {
+    private readonly stream;
+    private readonly requestTimeoutMs;
+    private readonly logger;
+    private readonly pending;
+    private readonly notificationListeners;
+    private readonly closeListeners;
+    private buffer;
+    private nextId;
+    private closed;
+    constructor(opts: SignalRpcClientOptions);
+    /** Subscribe to a JSON-RPC notification method (e.g. 'receive'). */
+    onNotification(method: string, listener: (params: unknown) => void): () => void;
+    /** Fires once when the underlying stream closes/errors (daemon died). */
+    onClose(listener: (reason: string) => void): () => void;
+    request(method: string, params?: Record<string, unknown>): Promise<unknown>;
+    close(): void;
+    private teardown;
+    private onData;
+    private handleLine;
+}
+//# sourceMappingURL=jsonrpc.d.ts.map

package/dist/jsonrpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonrpc.d.ts","sourceRoot":"","sources":["../src/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,sEAAsE;AACtE,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7B,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC;IACvE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;IAClD,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC;IAC5D,GAAG,CAAC,IAAI,OAAO,CAAC;IAChB,OAAO,CAAC,IAAI,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1D;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B;mDAC+C;IAC/C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;CAC7B;AAcD,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAC1D,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAqD;IAC3F,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAuC;IACtE,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,MAAM,CAAS;gBAEX,IAAI,EAAE,sBAAsB;IASxC,oEAAoE;IACpE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI;IAU/E,yEAAyE;IACzE,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI;IAKvD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAkC/E,KAAK,IAAI,IAAI;IAUb,OAAO,CAAC,QAAQ;IAehB,OAAO,CAAC,MAAM;IAgBd,OAAO,CAAC,UAAU;CAsCnB"}

package/dist/jsonrpc.js

@@ -0,0 +1,167 @@
+/**
+ * Minimal newline-delimited JSON-RPC 2.0 client for the signal-cli daemon
+ * socket (`signal-cli -a <account> daemon --socket <path>`).
+ *
+ * The daemon speaks one JSON object per line over the UNIX socket:
+ *   → {"jsonrpc":"2.0","id":"…","method":"send","params":{…}}
+ *   ← {"jsonrpc":"2.0","id":"…","result":{…}} | {"…","error":{code,message}}
+ *   ← {"jsonrpc":"2.0","method":"receive","params":{"envelope":{…}}}   (notification)
+ *
+ * The transport is injected as a plain duplex-ish stream so tests never open a
+ * real socket (mirrors the browser sidecar's injectable spawn).
+ */
+/**
+ * Cap on a single buffered line. Receive envelopes are small (attachments are
+ * written to signal-cli's data dir, not inlined), so anything beyond this is a
+ * malformed/hostile peer; we drop the buffer instead of growing unbounded.
+ */
+const MAX_LINE_BUFFER = 8 * 1024 * 1024;
+export class SignalRpcClient {
+    stream;
+    requestTimeoutMs;
+    logger;
+    pending = new Map();
+    notificationListeners = new Map();
+    closeListeners = new Set();
+    buffer = '';
+    nextId = 1;
+    closed = false;
+    constructor(opts) {
+        this.stream = opts.stream;
+        this.requestTimeoutMs = opts.requestTimeoutMs ?? 30_000;
+        this.logger = opts.logger;
+        this.stream.on('data', (chunk) => this.onData(chunk));
+        this.stream.on('close', () => this.teardown('socket closed'));
+        this.stream.on('error', (err) => this.teardown(`socket error: ${err.message}`));
+    }
+    /** Subscribe to a JSON-RPC notification method (e.g. 'receive'). */
+    onNotification(method, listener) {
+        let set = this.notificationListeners.get(method);
+        if (!set) {
+            set = new Set();
+            this.notificationListeners.set(method, set);
+        }
+        set.add(listener);
+        return () => set.delete(listener);
+    }
+    /** Fires once when the underlying stream closes/errors (daemon died). */
+    onClose(listener) {
+        this.closeListeners.add(listener);
+        return () => this.closeListeners.delete(listener);
+    }
+    request(method, params = {}) {
+        if (this.closed) {
+            return Promise.reject(new Error(`signal-cli rpc closed (cannot call ${method})`));
+        }
+        const id = String(this.nextId++);
+        const payload = JSON.stringify({ jsonrpc: '2.0', id, method, params });
+        return new Promise((resolve, reject) => {
+            // Per-call timeout so a wedged daemon never strands the caller.
+            const timer = setTimeout(() => {
+                if (this.pending.delete(id)) {
+                    reject(new Error(`signal-cli rpc "${method}" timed out after ${this.requestTimeoutMs}ms`));
+                }
+            }, this.requestTimeoutMs);
+            timer.unref?.();
+            this.pending.set(id, {
+                resolve: (v) => {
+                    clearTimeout(timer);
+                    resolve(v);
+                },
+                reject: (e) => {
+                    clearTimeout(timer);
+                    reject(e);
+                },
+            });
+            try {
+                this.stream.write(payload + '\n');
+            }
+            catch (err) {
+                this.pending.delete(id);
+                clearTimeout(timer);
+                reject(err instanceof Error ? err : new Error(String(err)));
+            }
+        });
+    }
+    close() {
+        this.teardown('client closed');
+        try {
+            this.stream.end?.();
+            this.stream.destroy?.();
+        }
+        catch {
+            /* best-effort */
+        }
+    }
+    teardown(reason) {
+        if (this.closed)
+            return;
+        this.closed = true;
+        for (const [, p] of this.pending)
+            p.reject(new Error(`signal-cli rpc: ${reason}`));
+        this.pending.clear();
+        for (const listener of this.closeListeners) {
+            try {
+                listener(reason);
+            }
+            catch {
+                /* listener errors must not break teardown */
+            }
+        }
+        this.closeListeners.clear();
+    }
+    onData(chunk) {
+        this.buffer += typeof chunk === 'string' ? chunk : chunk.toString('utf8');
+        let nl;
+        while ((nl = this.buffer.indexOf('\n')) !== -1) {
+            const line = this.buffer.slice(0, nl);
+            this.buffer = this.buffer.slice(nl + 1);
+            if (line.trim())
+                this.handleLine(line);
+        }
+        if (this.buffer.length > MAX_LINE_BUFFER) {
+            this.logger?.warn?.('signal rpc: dropped oversized un-delimited line', {
+                bytes: this.buffer.length,
+            });
+            this.buffer = '';
+        }
+    }
+    handleLine(line) {
+        let msg;
+        try {
+            msg = JSON.parse(line);
+        }
+        catch {
+            this.logger?.warn?.('signal rpc: ignoring unparseable line');
+            return;
+        }
+        // Notification: has a method, no id.
+        if (msg.method !== undefined && msg.id === undefined) {
+            const listeners = this.notificationListeners.get(msg.method);
+            if (!listeners)
+                return;
+            for (const listener of listeners) {
+                try {
+                    listener(msg.params);
+                }
+                catch (err) {
+                    this.logger?.warn?.('signal rpc: notification listener threw', { err: String(err) });
+                }
+            }
+            return;
+        }
+        // Response: match by id.
+        const id = msg.id !== undefined ? String(msg.id) : null;
+        const p = id ? this.pending.get(id) : undefined;
+        if (!p || !id)
+            return; // late/unknown reply — ignore
+        this.pending.delete(id);
+        if (msg.error) {
+            p.reject(new Error(`signal-cli rpc error ${msg.error.code ?? ''}: ${msg.error.message ?? 'unknown'}`));
+        }
+        else {
+            p.resolve(msg.result);
+        }
+    }
+}
+//# sourceMappingURL=jsonrpc.js.map

package/dist/jsonrpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonrpc.js","sourceRoot":"","sources":["../src/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAwBH;;;;GAIG;AACH,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAOxC,MAAM,OAAO,eAAe;IACT,MAAM,CAAY;IAClB,gBAAgB,CAAS;IACzB,MAAM,CAAwB;IAC9B,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,qBAAqB,GAAG,IAAI,GAAG,EAA0C,CAAC;IAC1E,cAAc,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC9D,MAAM,GAAG,EAAE,CAAC;IACZ,MAAM,GAAG,CAAC,CAAC;IACX,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAY,IAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,MAAM,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,oEAAoE;IACpE,cAAc,CAAC,MAAc,EAAE,QAAmC;QAChE,IAAI,GAAG,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClB,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,yEAAyE;IACzE,OAAO,CAAC,QAAkC;QACxC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,MAAc,EAAE,SAAkC,EAAE;QAC1D,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,MAAM,GAAG,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9C,gEAAgE;YAChE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,MAAM,qBAAqB,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;gBAC7F,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC1B,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;gBACnB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;oBACb,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,CAAC,CAAC,CAAC,CAAC;gBACb,CAAC;gBACD,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;oBACZ,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,CAAC,CAAC,CAAC;gBACZ,CAAC;aACF,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,MAAc;QAC7B,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAEO,MAAM,CAAC,KAAsB;QACnC,IAAI,CAAC,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,EAAU,CAAC;QACf,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,IAAI,EAAE;gBAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,iDAAiD,EAAE;gBACrE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,IAAY;QAC7B,IAAI,GAMH,CAAC;QACF,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,uCAAuC,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QACD,qCAAqC;QACrC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YACrD,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7D,IAAI,CAAC,SAAS;gBAAE,OAAO;YACvB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACvB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,yCAAyC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QACD,yBAAyB;QACzB,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChD,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,8BAA8B;QACrD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;QACzG,CAAC;aAAM,CAAC;YACN,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;CACF"}

package/dist/keys.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Vault keys + validation shared by the channel, its subcommands, and the
+ * interactive setup wizard. Kept in their own module (the telegram/slack
+ * `keys.ts` pattern) so wizard / pair-flow helpers can import them without
+ * pulling in the plugin's full index.
+ *
+ * Note on secret custody: signal-cli keeps the actual Signal identity keys +
+ * message store in ITS OWN data dir (`$XDG_DATA_HOME/signal-cli/`, i.e.
+ * `~/.local/share/signal-cli/` by default — see {@link signalCliDataDir}).
+ * The moxxy vault only stores the account NUMBER and the sender allow-list;
+ * there is no API token in this channel at all.
+ */
+/** Vault key for the linked Signal account number (E.164). */
+export declare const SIGNAL_ACCOUNT_KEY = "signal_account";
+/** Env override for the account number — beats the vault (shared precedence). */
+export declare const SIGNAL_ACCOUNT_ENV = "MOXXY_SIGNAL_ACCOUNT";
+/**
+ * Vault key for the sender allow-list: a JSON array of E.164 numbers and/or
+ * Signal account UUIDs that may drive the session. The linked account's own
+ * "Note to Self" is allowed implicitly and does not need an entry here.
+ */
+export declare const SIGNAL_ALLOWED_SENDERS_KEY = "signal_allowed_senders";
+/** E.164 shape: `+` then 7–15 digits, no leading zero. */
+export declare const E164_RE: RegExp;
+/** Loose UUID shape (Signal ACIs are UUIDv4; accept any hex-dash UUID). */
+export declare const UUID_RE: RegExp;
+/** Canonical sender identity for allow-list comparisons: trimmed, UUIDs lowercased. */
+export declare function normalizeSender(raw: string): string;
+/**
+ * Parse the stored allow-list. Returns `[]` for a missing OR corrupt value
+ * rather than throwing — a corrupt vault entry must degrade to "nobody extra
+ * is allowed" (fail closed), never crash the channel or silently allow.
+ * Non-string entries and entries that look like neither an E.164 number nor a
+ * UUID are dropped.
+ */
+export declare function parseAllowedSenders(raw: string | null | undefined): string[];
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,8DAA8D;AAC9D,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AACnD,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,yBAAyB,CAAC;AACzD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AAEnE,0DAA0D;AAC1D,eAAO,MAAM,OAAO,QAAsB,CAAC;AAE3C,2EAA2E;AAC3E,eAAO,MAAM,OAAO,QAAkF,CAAC;AAEvG,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGnD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAY5E"}

package/dist/keys.js

@@ -0,0 +1,55 @@
+/**
+ * Vault keys + validation shared by the channel, its subcommands, and the
+ * interactive setup wizard. Kept in their own module (the telegram/slack
+ * `keys.ts` pattern) so wizard / pair-flow helpers can import them without
+ * pulling in the plugin's full index.
+ *
+ * Note on secret custody: signal-cli keeps the actual Signal identity keys +
+ * message store in ITS OWN data dir (`$XDG_DATA_HOME/signal-cli/`, i.e.
+ * `~/.local/share/signal-cli/` by default — see {@link signalCliDataDir}).
+ * The moxxy vault only stores the account NUMBER and the sender allow-list;
+ * there is no API token in this channel at all.
+ */
+/** Vault key for the linked Signal account number (E.164). */
+export const SIGNAL_ACCOUNT_KEY = 'signal_account';
+/** Env override for the account number — beats the vault (shared precedence). */
+export const SIGNAL_ACCOUNT_ENV = 'MOXXY_SIGNAL_ACCOUNT';
+/**
+ * Vault key for the sender allow-list: a JSON array of E.164 numbers and/or
+ * Signal account UUIDs that may drive the session. The linked account's own
+ * "Note to Self" is allowed implicitly and does not need an entry here.
+ */
+export const SIGNAL_ALLOWED_SENDERS_KEY = 'signal_allowed_senders';
+/** E.164 shape: `+` then 7–15 digits, no leading zero. */
+export const E164_RE = /^\+[1-9]\d{6,14}$/;
+/** Loose UUID shape (Signal ACIs are UUIDv4; accept any hex-dash UUID). */
+export const UUID_RE = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+/** Canonical sender identity for allow-list comparisons: trimmed, UUIDs lowercased. */
+export function normalizeSender(raw) {
+    const trimmed = raw.trim();
+    return UUID_RE.test(trimmed) ? trimmed.toLowerCase() : trimmed;
+}
+/**
+ * Parse the stored allow-list. Returns `[]` for a missing OR corrupt value
+ * rather than throwing — a corrupt vault entry must degrade to "nobody extra
+ * is allowed" (fail closed), never crash the channel or silently allow.
+ * Non-string entries and entries that look like neither an E.164 number nor a
+ * UUID are dropped.
+ */
+export function parseAllowedSenders(raw) {
+    if (!raw)
+        return [];
+    try {
+        const parsed = JSON.parse(raw);
+        if (!Array.isArray(parsed))
+            return [];
+        return parsed
+            .filter((x) => typeof x === 'string')
+            .map(normalizeSender)
+            .filter((x) => E164_RE.test(x) || UUID_RE.test(x));
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=keys.js.map

package/dist/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AACzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAEnE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,OAAO,GAAG,mBAAmB,CAAC;AAE3C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,OAAO,GAAG,+EAA+E,CAAC;AAEvG,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACjE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAA8B;IAChE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,OAAO,MAAM;aACV,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;aACjD,GAAG,CAAC,eAAe,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/pair-flow.d.ts

@@ -0,0 +1,21 @@
+import { type ChannelSubcommandContext } from '@moxxy/sdk';
+/**
+ * Drive the Signal linked-device pairing end-to-end in a terminal — the SAME
+ * mechanism the desktop Channels panel uses (the channel's `pair: true` link
+ * window), just rendered inline here.
+ *
+ * Steps:
+ *   1. Build a SignalChannel from the subcommand ctx and wire the session's
+ *      permission resolver.
+ *   2. Subscribe to "linked" BEFORE starting so a fast scan can't race us.
+ *   3. Start the channel in pairing mode — it spawns `signal-cli link` and
+ *      publishes the `sgnl://linkdevice…` URI as `channel.requestUrl`.
+ *   4. Render that URI as a scannable QR (+ the raw URI).
+ *   5. On the phone: Signal → Settings → Linked Devices → Link New Device →
+ *      scan; the channel stores the account and boots the daemon.
+ *   6. Keep the channel running until the user Ctrl-Cs.
+ */
+export declare function runSignalPairFlow(ctx: ChannelSubcommandContext, overrides?: {
+    readonly allowedTools?: ReadonlyArray<string>;
+}): Promise<number>;
+//# sourceMappingURL=pair-flow.d.ts.map

package/dist/pair-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair-flow.d.ts","sourceRoot":"","sources":["../src/pair-flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAA0B,KAAK,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAQnF;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,wBAAwB,EAC7B,SAAS,GAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;CAAO,GAChE,OAAO,CAAC,MAAM,CAAC,CAkGjB"}