@moxxy/plugin-channel-signal 0.27.0

package/dist/pair-flow.js

@@ -0,0 +1,136 @@
+import { log, outro, spinner } from '@clack/prompts';
+import QRCode from 'qrcode';
+import { exitAfterPairRequested } from '@moxxy/sdk';
+import { SignalChannel } from './channel.js';
+// Tiny zero-dep ANSI dim helper, so this flow stays inside the plugin.
+const ANSI = process.stdout.isTTY && !process.env.NO_COLOR;
+const dim = (s) => (ANSI ? `\x1b[2m${s}\x1b[22m` : s);
+/**
+ * Drive the Signal linked-device pairing end-to-end in a terminal — the SAME
+ * mechanism the desktop Channels panel uses (the channel's `pair: true` link
+ * window), just rendered inline here.
+ *
+ * Steps:
+ *   1. Build a SignalChannel from the subcommand ctx and wire the session's
+ *      permission resolver.
+ *   2. Subscribe to "linked" BEFORE starting so a fast scan can't race us.
+ *   3. Start the channel in pairing mode — it spawns `signal-cli link` and
+ *      publishes the `sgnl://linkdevice…` URI as `channel.requestUrl`.
+ *   4. Render that URI as a scannable QR (+ the raw URI).
+ *   5. On the phone: Signal → Settings → Linked Devices → Link New Device →
+ *      scan; the channel stores the account and boots the daemon.
+ *   6. Keep the channel running until the user Ctrl-Cs.
+ */
+export async function runSignalPairFlow(ctx, overrides = {}) {
+    const session = ctx.session;
+    const channel = new SignalChannel({
+        vault: ctx.deps.vault,
+        ...(typeof ctx.deps.options?.['account'] === 'string'
+            ? { account: ctx.deps.options['account'] }
+            : {}),
+        ...(overrides.allowedTools ? { allowedTools: overrides.allowedTools } : {}),
+        logger: ctx.deps.logger,
+    });
+    session.setPermissionResolver(channel.permissionResolver);
+    // Subscribe BEFORE start so the first scan can't fire before us.
+    let linkedResolve = null;
+    const linkedPromise = new Promise((resolve) => {
+        linkedResolve = resolve;
+    });
+    const unsubscribe = channel.onLinked((account) => {
+        linkedResolve?.(account);
+        linkedResolve = null;
+    });
+    outro(dim('opening Signal linking window...'));
+    const handle = await channel.start({ session, pair: true });
+    const stopChannel = async () => {
+        unsubscribe();
+        try {
+            await handle.stop('pair-flow');
+        }
+        catch {
+            /* ignore */
+        }
+    };
+    // Already linked (no window was opened): nothing to scan.
+    if (channel.connected) {
+        log.info('This machine is already linked to a Signal account. The channel is running; ' +
+            'to link a different account, remove this device from Signal → Linked Devices first, ' +
+            'then run `moxxy channels signal unpair` and pair again.');
+        if (exitAfterPairRequested(ctx)) {
+            await stopChannel();
+            return 0;
+        }
+        log.info('Press Ctrl+C to stop.');
+        installSignalHandlers(stopChannel, session);
+        await handle.running;
+        return 0;
+    }
+    const uri = channel.requestUrl;
+    if (!uri) {
+        log.error('Could not obtain a linking URI from signal-cli.');
+        await stopChannel();
+        return 1;
+    }
+    await printLinkQr(uri);
+    log.info('On your phone: Signal → Settings → Linked Devices → Link New Device, then scan the QR. ' +
+        'The QR expires after a few minutes; re-run `moxxy channels signal pair` if it does.');
+    const removeSignalHandlers = installSignalHandlers(stopChannel, session);
+    const spin = spinner();
+    spin.start('Waiting for you to scan in Signal...');
+    const account = await Promise.race([
+        linkedPromise,
+        handle.running.then(() => null),
+    ]).catch((err) => {
+        spin.stop('Linking failed.');
+        log.error(err instanceof Error ? err.message : String(err));
+        return null;
+    });
+    if (account == null) {
+        await stopChannel();
+        return 1;
+    }
+    spin.stop(`Linked ✓ — this machine is now a device of ${account}.`);
+    if (exitAfterPairRequested(ctx)) {
+        // Orchestrated pairing (`moxxy onboard`): hand control back — the caller
+        // starts the channel under its own service afterwards. Our SIGINT
+        // handlers would `process.exit` the orchestrator, so drop them first.
+        removeSignalHandlers();
+        await stopChannel();
+        return 0;
+    }
+    log.info('Message your own "Note to Self" in Signal to talk to moxxy. The channel is running; press Ctrl+C to stop.');
+    await handle.running;
+    return 0;
+}
+function installSignalHandlers(stopChannel, session) {
+    let stopping = false;
+    const shutdown = async () => {
+        if (stopping)
+            return;
+        stopping = true;
+        await stopChannel();
+        await session.close('SIGINT').catch(() => undefined);
+        process.exit(0);
+    };
+    const onSignal = () => void shutdown();
+    process.once('SIGINT', onSignal);
+    process.once('SIGTERM', onSignal);
+    return () => {
+        process.removeListener('SIGINT', onSignal);
+        process.removeListener('SIGTERM', onSignal);
+    };
+}
+/** Render the linking URI as a scannable terminal QR + the raw URI. */
+async function printLinkQr(uri) {
+    let qr = '';
+    try {
+        qr = await QRCode.toString(uri, { type: 'terminal', small: true });
+    }
+    catch {
+        qr = '';
+    }
+    // CLI surface — intentional stdout.
+    console.log(['', qr, `  link URI: ${uri}`, ''].join('\n'));
+}
+//# sourceMappingURL=pair-flow.js.map

package/dist/pair-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair-flow.js","sourceRoot":"","sources":["../src/pair-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAiC,MAAM,YAAY,CAAC;AAEnF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,uEAAuE;AACvE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC3D,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAA6B,EAC7B,YAA+D,EAAE;IAEjE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;QAChC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAmB;QACnC,GAAG,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ;YACnD,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAW,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAe;KACjC,CAAC,CAAC;IACH,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE1D,iEAAiE;IACjE,IAAI,aAAa,GAAuC,IAAI,CAAC;IAC7D,MAAM,aAAa,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACpD,aAAa,GAAG,OAAO,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/C,aAAa,EAAE,CAAC,OAAO,CAAC,CAAC;QACzB,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,CAAC;IAE/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5D,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;QAC5C,WAAW,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC,CAAC;IAEF,0DAA0D;IAC1D,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CACN,8EAA8E;YAC5E,sFAAsF;YACtF,yDAAyD,CAC5D,CAAC;QACF,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,WAAW,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAClC,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,CAAC,OAAO,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC;IAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC7D,MAAM,WAAW,EAAE,CAAC;QACpB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACvB,GAAG,CAAC,IAAI,CACN,yFAAyF;QACvF,qFAAqF,CACxF,CAAC;IAEF,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAEzE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;QACjC,aAAa;QACb,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAqB,CAAC;KACjD,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACxB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC7B,GAAG,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,MAAM,WAAW,EAAE,CAAC;QACpB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,8CAA8C,OAAO,GAAG,CAAC,CAAC;IAEpE,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,yEAAyE;QACzE,kEAAkE;QAClE,sEAAsE;QACtE,oBAAoB,EAAE,CAAC;QACvB,MAAM,WAAW,EAAE,CAAC;QACpB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,GAAG,CAAC,IAAI,CACN,2GAA2G,CAC5G,CAAC;IAEF,MAAM,MAAM,CAAC,OAAO,CAAC;IACrB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,qBAAqB,CAC5B,WAAgC,EAChC,OAA4C;IAE5C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,WAAW,EAAE,CAAC;QACpB,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,GAAS,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,OAAO,GAAG,EAAE;QACV,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,EAAE,GAAG,EAAE,CAAC;IACV,CAAC;IACD,oCAAoC;IACpC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,eAAe,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC"}

package/dist/permission.d.ts

@@ -0,0 +1,21 @@
+import type { PermissionResolver } from '@moxxy/sdk';
+export interface SignalPermissionLogger {
+    info?(msg: string, meta?: Record<string, unknown>): void;
+}
+/**
+ * Build the Signal channel's autonomous permission resolver.
+ *
+ * Like Slack (and unlike Telegram's inline-keyboard prompts), the Signal
+ * channel runs hands-off: the operator declares trust upfront via
+ * `channels.signal.allowedTools`, and any tool NOT in that list is denied.
+ * The trust check + `'*'` expansion + audit-on-auto-approve wiring is the
+ * shared {@link createAuditedAllowListResolver} from `@moxxy/channel-kit`;
+ * this wrapper binds it to the channel logger so every auto-approved call
+ * leaves a trail. An empty list denies everything (effectively read-only).
+ */
+export declare function buildSignalPermissionResolver(opts: {
+    allowedTools: ReadonlyArray<string>;
+    allToolNames: ReadonlyArray<string>;
+    logger?: SignalPermissionLogger;
+}): PermissionResolver;
+//# sourceMappingURL=permission.d.ts.map

package/dist/permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../src/permission.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,EAAE,sBAAsB,CAAC;CACjC,GAAG,kBAAkB,CAarB"}

package/dist/permission.js

@@ -0,0 +1,27 @@
+import { createAuditedAllowListResolver } from '@moxxy/channel-kit';
+/**
+ * Build the Signal channel's autonomous permission resolver.
+ *
+ * Like Slack (and unlike Telegram's inline-keyboard prompts), the Signal
+ * channel runs hands-off: the operator declares trust upfront via
+ * `channels.signal.allowedTools`, and any tool NOT in that list is denied.
+ * The trust check + `'*'` expansion + audit-on-auto-approve wiring is the
+ * shared {@link createAuditedAllowListResolver} from `@moxxy/channel-kit`;
+ * this wrapper binds it to the channel logger so every auto-approved call
+ * leaves a trail. An empty list denies everything (effectively read-only).
+ */
+export function buildSignalPermissionResolver(opts) {
+    return createAuditedAllowListResolver({
+        name: 'signal-allow-list',
+        allowedTools: opts.allowedTools,
+        allToolNames: opts.allToolNames,
+        onAutoApprove: (call, { wildcard }) => {
+            opts.logger?.info?.('signal: auto-approved tool call', {
+                tool: call.name,
+                callId: call.callId,
+                wildcard,
+            });
+        },
+    });
+}
+//# sourceMappingURL=permission.js.map

package/dist/permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.js","sourceRoot":"","sources":["../src/permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAOpE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAI7C;IACC,OAAO,8BAA8B,CAAC;QACpC,IAAI,EAAE,mBAAmB;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YACpC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,iCAAiC,EAAE;gBACrD,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}